Change logs for linux source package in Impish

  • linux (5.13.0-52.59) impish; urgency=medium
    
      * impish/linux: 5.13.0-52.59 -proposed tracker (LP: #1978628)
    
      * CVE-2022-28388
        - can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error
          path
    
      * test_vxlan_under_vrf.sh in net from ubuntu_kernel_selftests failed (Check VM
        connectivity through VXLAN (underlay in the default VRF) [FAIL])
        (LP: #1871015)
        - selftests: net: test_vxlan_under_vrf: fix HV connectivity test
        - selftests: test_vxlan_under_vrf: Fix broken test case
    
      * [UBUNTU 20.04] CPU-MF: add extended counter set definitions for new IBM z16
        (LP: #1974433)
        - s390/cpumf: add new extended counter set for IBM z16
    
      * [UBUNTU 20.04] KVM nesting support leaks too much memory, might result in
        stalls during cleanup (LP: #1974017)
        - KVM: s390: vsie/gmap: reduce gmap_rmap overhead
    
      * [UBUNTU 20.04] Null Pointer issue in nfs code running Ubuntu on IBM Z
        (LP: #1968096)
        - NFS: Fix up nfs_ctx_key_to_expire()
    
      * prevent kernel panic with overlayfs + shiftfs (LP: #1973620)
        - SAUCE: overlayfs: prevent dereferencing struct file in ovl_vm_prfile_set()
    
      * Packaging resync (LP: #1786013)
        - debian/dkms-versions -- update from kernel-versions (main/2022.05.30)
    
     -- Luke Nowakowski-Krijger <email address hidden>  Wed, 15 Jun 2022 12:56:23 -0700
  • linux (5.13.0-51.58) impish; urgency=medium
    
      * CVE-2022-21123 // CVE-2022-21125 // CVE-2022-21166
        - Documentation: Add documentation for Processor MMIO Stale Data
        - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug
        - x86/speculation: Add a common function for MD_CLEAR mitigation update
        - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data
        - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations
        - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle
        - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data
        - x86/speculation/srbds: Update SRBDS mitigation selection
        - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS
        - KVM: x86/speculation: Disable Fill buffer clear within guests
        - x86/speculation/mmio: Print SMT warning
    
     -- Thadeu Lima de Souza Cascardo <email address hidden>  Mon, 13 Jun 2022 10:18:56 -0300
  • linux (5.13.0-48.54) impish; urgency=medium
    
      * CVE-2022-1972
        - netfilter: nf_tables: sanitize nft_set_desc_concat_parse()
    
      * CVE-2022-1966
        - netfilter: nf_tables: disallow non-stateful expression in sets earlier
    
     -- Thadeu Lima de Souza Cascardo <email address hidden>  Wed, 01 Jun 2022 16:14:14 -0300
  • linux (5.13.0-46.51) impish; urgency=medium
    
      * CVE-2022-21499
        - SAUCE: debug: Lock down kgdb
    
    linux (5.13.0-45.50) impish; urgency=medium
    
      * impish/linux: 5.13.0-45.50 -proposed tracker (LP: #1974347)
    
      * CVE-2022-1158
        - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address
    
      * config CONFIG_HISI_PMU for  kunpeng920 (LP: #1956086)
        - [Config] CONFIG_HISI_PMU=m
    
      * re-apply missing overlayfs SAUCE patch (LP: #1967924)
        - SAUCE: overlayfs: fix incorrect mnt_id of files opened from map_files
    
      * Impish update: upstream stable patchset 2022-04-20 (LP: #1969666)
        - mac80211_hwsim: report NOACK frames in tx_status
        - mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work
        - i2c: bcm2835: Avoid clock stretching timeouts
        - ASoC: rt5668: do not block workqueue if card is unbound
        - ASoC: rt5682: do not block workqueue if card is unbound
        - regulator: core: fix false positive in regulator_late_cleanup()
        - KVM: arm64: vgic: Read HW interrupt pending state from the HW
        - tipc: fix a bit overflow in tipc_crypto_key_rcv()
        - cifs: fix double free race when mount fails in cifs_get_root()
        - selftests/seccomp: Fix seccomp failure by adding missing headers
        - i2c: cadence: allow COMPILE_TEST
        - i2c: qup: allow COMPILE_TEST
        - net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990
        - usb: gadget: don't release an existing dev->buf
        - usb: gadget: clear related members when goto fail
        - exfat: reuse exfat_inode_info variable instead of calling EXFAT_I()
        - exfat: fix i_blocks for files truncated over 4 GiB
        - tracing: Add test for user space strings when filtering on string pointers
        - serial: stm32: prevent TDR register overwrite when sending x_char
        - ata: pata_hpt37x: fix PCI clock detection
        - drm/amdgpu: check vm ready by amdgpu_vm->evicting flag
        - tracing: Add ustring operation to filtering string pointers
        - ALSA: intel_hdmi: Fix reference to PCM buffer address
        - riscv/efi_stub: Fix get_boot_hartid_from_fdt() return value
        - riscv: Fix config KASAN && SPARSEMEM && !SPARSE_VMEMMAP
        - riscv: Fix config KASAN && DEBUG_VIRTUAL
        - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
        - iommu/amd: Recover from event log overflow
        - drm/i915: s/JSP2/ICP2/ PCH
        - xen/netfront: destroy queues before real_num_tx_queues is zeroed
        - thermal: core: Fix TZ_GET_TRIP NULL pointer dereference
        - ntb: intel: fix port config status offset for SPR
        - mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls
        - xfrm: fix MTU regression
        - netfilter: fix use-after-free in __nf_register_net_hook()
        - bpf, sockmap: Do not ignore orig_len parameter
        - xfrm: enforce validity of offload input flags
        - e1000e: Correct NVM checksum verification flow
        - net: fix up skbs delta_truesize in UDP GRO frag_list
        - netfilter: nf_queue: don't assume sk is full socket
        - netfilter: nf_queue: fix possible use-after-free
        - netfilter: nf_queue: handle socket prefetch
        - batman-adv: Request iflink once in batadv-on-batadv check
        - batman-adv: Request iflink once in batadv_get_real_netdevice
        - batman-adv: Don't expect inter-netns unique iflink indices
        - net: ipv6: ensure we call ipv6_mc_down() at most once
        - net: dcb: flush lingering app table entries for unregistered devices
        - net/smc: fix connection leak
        - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client
        - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server
        - mac80211: fix forwarded mesh frames AC & queue selection
        - net: stmmac: fix return value of __setup handler
        - mac80211: treat some SAE auth steps as final
        - iavf: Fix missing check for running netdev
        - net: sxgbe: fix return value of __setup handler
        - ibmvnic: register netdev after init of adapter
        - net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()
        - ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc()
        - efivars: Respect "block" flag in efivar_entry_set_safe()
        - firmware: arm_scmi: Remove space in MODULE_ALIAS name
        - ASoC: cs4265: Fix the duplicated control name
        - can: gs_usb: change active_channels's type from atomic_t to u8
        - arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output
        - igc: igc_read_phy_reg_gpy: drop premature return
        - ARM: Fix kgdb breakpoint for Thumb2
        - ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions
        - selftests: mlxsw: tc_police_scale: Make test more robust
        - pinctrl: sunxi: Use unique lockdep classes for IRQs
        - igc: igc_write_phy_reg_gpy: drop premature return
        - ibmvnic: free reset-work-item when flushing
        - memfd: fix F_SEAL_WRITE after shmem huge page allocated
        - s390/extable: fix exception table sorting
        - ARM: dts: switch timer config to common devkit8000 devicetree
        - ARM: dts: Use 32KiHz oscillator on devkit8000
        - soc: fsl: guts: Revert commit 3c0d64e867ed
        - soc: fsl: guts: Add a missing memory allocation failure check
        - soc: fsl: qe: Check of ioremap return value
        - ARM: tegra: Move panels to AUX bus
        - ibmvnic: complete init_done on transport events
        - net: chelsio: cxgb3: check the return value of pci_find_capability()
        - iavf: Refactor iavf state machine tracking
        - nl80211: Handle nla_memdup failures in handle_nan_filter
        - drm/amdgpu: fix suspend/resume hang regression
        - net: dcb: disable softirqs in dcbnl_flush_dev()
        - Input: elan_i2c - move regulator_[en|dis]able() out of
          elan_[en|dis]able_power()
        - Input: elan_i2c - fix regulator enable count imbalance after suspend/resume
        - Input: samsung-keypad - properly state IOMEM dependency
        - HID: add mapping for KEY_DICTATE
        - HID: add mapping for KEY_ALL_APPLICATIONS
        - tracing/histogram: Fix sorting on old "cpu" value
        - tracing: Fix return value of __setup handlers
        - btrfs: fix lost prealloc extents beyond eof after full fsync
        - btrfs: qgroup: fix deadlock between rescan worker and remove qgroup
        - btrfs: add missing run of delayed items after unlink during log replay
        - Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6"
        - hamradio: fix macro redefine warning
        - arm64: Mark start_backtrace() notrace and NOKPROBE_SYMBOL
        - sched/fair: Fix fault in reweight_entity
        - tools/resolve_btf_ids: Close ELF file on error
        - mtd: spi-nor: Fix mtd size for s3an flashes
        - MIPS: fix local_{add,sub}_return on MIPS64
        - signal: In get_signal test for signal_group_exit every time through the loop
        - PCI: mediatek-gen3: Disable DVFSRC voltage request
        - PCI: dwc: Do not remap invalid res
        - PCI: aardvark: Fix checking for MEM resource type
        - KVM: VMX: Don't unblock vCPU w/ Posted IRQ if IRQs are disabled in guest
        - KVM: s390: Ensure kvm_arch_no_poll() is read once when blocking vCPU
        - KVM: VMX: Read Posted Interrupt "control" exactly once per loop iteration
        - KVM: x86: Handle 32-bit wrap of EIP for EMULTYPE_SKIP with flat code seg
        - KVM: x86: Exit to userspace if emulation prepared a completion callback
        - i3c: fix incorrect address slot lookup on 64-bit
        - i3c/master/mipi-i3c-hci: Fix a potentially infinite loop in
          'hci_dat_v1_get_index()'
        - tracing: Do not let synth_events block other dyn_event systems during create
        - Input: ti_am335x_tsc - set ADCREFM for X configuration
        - Input: ti_am335x_tsc - fix STEPCONFIG setup for Z2
        - NFSD: Fix verifier returned in stable WRITEs
        - Revert "nfsd: skip some unnecessary stats in the v4 case"
        - nfsd: fix crash on COPY_NOTIFY with special stateid
        - x86/hyperv: Properly deal with empty cpumasks in hyperv_flush_tlb_multi()
        - SUNRPC: Fix sockaddr handling in the svc_xprt_create_error trace point
        - SUNRPC: Fix sockaddr handling in svcsock_accept_class trace points
        - drm/sun4i: dw-hdmi: Fix missing put_device() call in sun8i_hdmi_phy_get
        - drm/atomic: Check new_crtc_state->active to determine if CRTC needs disable
          in self refresh mode
        - ntb_hw_switchtec: Fix pff ioread to read into mmio_part_cfg_all
        - ntb_hw_switchtec: Fix bug with more than 32 partitions
        - drm/amdkfd: Check for null pointer after calling kmemdup
        - i3c: master: dw: check return of dw_i3c_master_get_free_pos()
        - dma-buf: cma_heap: Fix mutex locking section
        - tracing/uprobes: Check the return value of kstrdup() for tu->filename
        - tracing/probes: check the return value of kstrndup() for pbuf
        - mm: defer kmemleak object creation of module_alloc()
        - kasan: fix quarantine conflicting with init_on_free
        - selftests/vm: make charge_reserved_hugetlb.sh work with existing cgroup
          setting
        - hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
        - ethtool: Fix link extended state for big endian
        - bpf: Fix possible race in inc_misses_counter
        - gve: Recording rx queue before sending to napi
        - ibmvnic: don't release napi in __ibmvnic_open()
        - bnxt_en: Fix occasional ethtool -t loopback test failures
        - iwlwifi: mvm: check debugfs_dir ptr before use
        - iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
        - mac80211: fix EAPoL rekey fail in 802.3 rx path
        - blktrace: fix use after free for struct blk_trace
        - net: ipa: add an interconnect dependency
        - iavf: Fix deadlock in iavf_reset_task
        - auxdisplay: lcd2s: Fix lcd2s_redefine_char() feature
        - auxdisplay: lcd2s: Fix memory leak in ->remove()
        - auxdisplay: lcd2s: Use proper API to free the instance of charlcd object
        - iommu/tegra-smmu: Fix missing put_device() call in tegra_smmu_find
        - mips: setup: fix setnocoherentio() boolean setting
        - mptcp: Correctly set DATA_FIN timeout when number of retransmits is large
        - sched: Fix yet more sched_fork() races
        - arm64: dts: juno: Remove GICv2m dma-range
        - iommu/amd: Fix I/O page table memory leak
        - netfilter: nf_tables: prefer kfree_rcu(ptr, rcu) variant
        - can: etas_es58x: change opened_channel_cnt's type from atomic_t to u8
        - e1000e: Fix possible HW unit hang after an s0ix exit
        - selftests: mlxsw: resource_scale: Fix return value
        - iavf: do not override the adapter state in the watchdog task (again)
        - btrfs: fix relocation crash due to premature return from
          btrfs_commit_transaction()
        - KVM: x86/mmu: Passing up the error state of mmu_alloc_shadow_roots()
    
      * CVE-2022-28390
        - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path
    
     -- Thadeu Lima de Souza Cascardo <email address hidden>  Fri, 20 May 2022 19:48:18 -0300
  • linux (5.13.0-45.50) impish; urgency=medium
    
      * impish/linux: 5.13.0-45.50 -proposed tracker (LP: #1974347)
    
      * CVE-2022-1158
        - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address
    
      * config CONFIG_HISI_PMU for  kunpeng920 (LP: #1956086)
        - [Config] CONFIG_HISI_PMU=m
    
      * re-apply missing overlayfs SAUCE patch (LP: #1967924)
        - SAUCE: overlayfs: fix incorrect mnt_id of files opened from map_files
    
      * Impish update: upstream stable patchset 2022-04-20 (LP: #1969666)
        - mac80211_hwsim: report NOACK frames in tx_status
        - mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work
        - i2c: bcm2835: Avoid clock stretching timeouts
        - ASoC: rt5668: do not block workqueue if card is unbound
        - ASoC: rt5682: do not block workqueue if card is unbound
        - regulator: core: fix false positive in regulator_late_cleanup()
        - KVM: arm64: vgic: Read HW interrupt pending state from the HW
        - tipc: fix a bit overflow in tipc_crypto_key_rcv()
        - cifs: fix double free race when mount fails in cifs_get_root()
        - selftests/seccomp: Fix seccomp failure by adding missing headers
        - i2c: cadence: allow COMPILE_TEST
        - i2c: qup: allow COMPILE_TEST
        - net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990
        - usb: gadget: don't release an existing dev->buf
        - usb: gadget: clear related members when goto fail
        - exfat: reuse exfat_inode_info variable instead of calling EXFAT_I()
        - exfat: fix i_blocks for files truncated over 4 GiB
        - tracing: Add test for user space strings when filtering on string pointers
        - serial: stm32: prevent TDR register overwrite when sending x_char
        - ata: pata_hpt37x: fix PCI clock detection
        - drm/amdgpu: check vm ready by amdgpu_vm->evicting flag
        - tracing: Add ustring operation to filtering string pointers
        - ALSA: intel_hdmi: Fix reference to PCM buffer address
        - riscv/efi_stub: Fix get_boot_hartid_from_fdt() return value
        - riscv: Fix config KASAN && SPARSEMEM && !SPARSE_VMEMMAP
        - riscv: Fix config KASAN && DEBUG_VIRTUAL
        - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
        - iommu/amd: Recover from event log overflow
        - drm/i915: s/JSP2/ICP2/ PCH
        - xen/netfront: destroy queues before real_num_tx_queues is zeroed
        - thermal: core: Fix TZ_GET_TRIP NULL pointer dereference
        - ntb: intel: fix port config status offset for SPR
        - mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls
        - xfrm: fix MTU regression
        - netfilter: fix use-after-free in __nf_register_net_hook()
        - bpf, sockmap: Do not ignore orig_len parameter
        - xfrm: enforce validity of offload input flags
        - e1000e: Correct NVM checksum verification flow
        - net: fix up skbs delta_truesize in UDP GRO frag_list
        - netfilter: nf_queue: don't assume sk is full socket
        - netfilter: nf_queue: fix possible use-after-free
        - netfilter: nf_queue: handle socket prefetch
        - batman-adv: Request iflink once in batadv-on-batadv check
        - batman-adv: Request iflink once in batadv_get_real_netdevice
        - batman-adv: Don't expect inter-netns unique iflink indices
        - net: ipv6: ensure we call ipv6_mc_down() at most once
        - net: dcb: flush lingering app table entries for unregistered devices
        - net/smc: fix connection leak
        - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client
        - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server
        - mac80211: fix forwarded mesh frames AC & queue selection
        - net: stmmac: fix return value of __setup handler
        - mac80211: treat some SAE auth steps as final
        - iavf: Fix missing check for running netdev
        - net: sxgbe: fix return value of __setup handler
        - ibmvnic: register netdev after init of adapter
        - net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()
        - ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc()
        - efivars: Respect "block" flag in efivar_entry_set_safe()
        - firmware: arm_scmi: Remove space in MODULE_ALIAS name
        - ASoC: cs4265: Fix the duplicated control name
        - can: gs_usb: change active_channels's type from atomic_t to u8
        - arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output
        - igc: igc_read_phy_reg_gpy: drop premature return
        - ARM: Fix kgdb breakpoint for Thumb2
        - ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions
        - selftests: mlxsw: tc_police_scale: Make test more robust
        - pinctrl: sunxi: Use unique lockdep classes for IRQs
        - igc: igc_write_phy_reg_gpy: drop premature return
        - ibmvnic: free reset-work-item when flushing
        - memfd: fix F_SEAL_WRITE after shmem huge page allocated
        - s390/extable: fix exception table sorting
        - ARM: dts: switch timer config to common devkit8000 devicetree
        - ARM: dts: Use 32KiHz oscillator on devkit8000
        - soc: fsl: guts: Revert commit 3c0d64e867ed
        - soc: fsl: guts: Add a missing memory allocation failure check
        - soc: fsl: qe: Check of ioremap return value
        - ARM: tegra: Move panels to AUX bus
        - ibmvnic: complete init_done on transport events
        - net: chelsio: cxgb3: check the return value of pci_find_capability()
        - iavf: Refactor iavf state machine tracking
        - nl80211: Handle nla_memdup failures in handle_nan_filter
        - drm/amdgpu: fix suspend/resume hang regression
        - net: dcb: disable softirqs in dcbnl_flush_dev()
        - Input: elan_i2c - move regulator_[en|dis]able() out of
          elan_[en|dis]able_power()
        - Input: elan_i2c - fix regulator enable count imbalance after suspend/resume
        - Input: samsung-keypad - properly state IOMEM dependency
        - HID: add mapping for KEY_DICTATE
        - HID: add mapping for KEY_ALL_APPLICATIONS
        - tracing/histogram: Fix sorting on old "cpu" value
        - tracing: Fix return value of __setup handlers
        - btrfs: fix lost prealloc extents beyond eof after full fsync
        - btrfs: qgroup: fix deadlock between rescan worker and remove qgroup
        - btrfs: add missing run of delayed items after unlink during log replay
        - Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6"
        - hamradio: fix macro redefine warning
        - arm64: Mark start_backtrace() notrace and NOKPROBE_SYMBOL
        - sched/fair: Fix fault in reweight_entity
        - tools/resolve_btf_ids: Close ELF file on error
        - mtd: spi-nor: Fix mtd size for s3an flashes
        - MIPS: fix local_{add,sub}_return on MIPS64
        - signal: In get_signal test for signal_group_exit every time through the loop
        - PCI: mediatek-gen3: Disable DVFSRC voltage request
        - PCI: dwc: Do not remap invalid res
        - PCI: aardvark: Fix checking for MEM resource type
        - KVM: VMX: Don't unblock vCPU w/ Posted IRQ if IRQs are disabled in guest
        - KVM: s390: Ensure kvm_arch_no_poll() is read once when blocking vCPU
        - KVM: VMX: Read Posted Interrupt "control" exactly once per loop iteration
        - KVM: x86: Handle 32-bit wrap of EIP for EMULTYPE_SKIP with flat code seg
        - KVM: x86: Exit to userspace if emulation prepared a completion callback
        - i3c: fix incorrect address slot lookup on 64-bit
        - i3c/master/mipi-i3c-hci: Fix a potentially infinite loop in
          'hci_dat_v1_get_index()'
        - tracing: Do not let synth_events block other dyn_event systems during create
        - Input: ti_am335x_tsc - set ADCREFM for X configuration
        - Input: ti_am335x_tsc - fix STEPCONFIG setup for Z2
        - NFSD: Fix verifier returned in stable WRITEs
        - Revert "nfsd: skip some unnecessary stats in the v4 case"
        - nfsd: fix crash on COPY_NOTIFY with special stateid
        - x86/hyperv: Properly deal with empty cpumasks in hyperv_flush_tlb_multi()
        - SUNRPC: Fix sockaddr handling in the svc_xprt_create_error trace point
        - SUNRPC: Fix sockaddr handling in svcsock_accept_class trace points
        - drm/sun4i: dw-hdmi: Fix missing put_device() call in sun8i_hdmi_phy_get
        - drm/atomic: Check new_crtc_state->active to determine if CRTC needs disable
          in self refresh mode
        - ntb_hw_switchtec: Fix pff ioread to read into mmio_part_cfg_all
        - ntb_hw_switchtec: Fix bug with more than 32 partitions
        - drm/amdkfd: Check for null pointer after calling kmemdup
        - i3c: master: dw: check return of dw_i3c_master_get_free_pos()
        - dma-buf: cma_heap: Fix mutex locking section
        - tracing/uprobes: Check the return value of kstrdup() for tu->filename
        - tracing/probes: check the return value of kstrndup() for pbuf
        - mm: defer kmemleak object creation of module_alloc()
        - kasan: fix quarantine conflicting with init_on_free
        - selftests/vm: make charge_reserved_hugetlb.sh work with existing cgroup
          setting
        - hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
        - ethtool: Fix link extended state for big endian
        - bpf: Fix possible race in inc_misses_counter
        - gve: Recording rx queue before sending to napi
        - ibmvnic: don't release napi in __ibmvnic_open()
        - bnxt_en: Fix occasional ethtool -t loopback test failures
        - iwlwifi: mvm: check debugfs_dir ptr before use
        - iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
        - mac80211: fix EAPoL rekey fail in 802.3 rx path
        - blktrace: fix use after free for struct blk_trace
        - net: ipa: add an interconnect dependency
        - iavf: Fix deadlock in iavf_reset_task
        - auxdisplay: lcd2s: Fix lcd2s_redefine_char() feature
        - auxdisplay: lcd2s: Fix memory leak in ->remove()
        - auxdisplay: lcd2s: Use proper API to free the instance of charlcd object
        - iommu/tegra-smmu: Fix missing put_device() call in tegra_smmu_find
        - mips: setup: fix setnocoherentio() boolean setting
        - mptcp: Correctly set DATA_FIN timeout when number of retransmits is large
        - sched: Fix yet more sched_fork() races
        - arm64: dts: juno: Remove GICv2m dma-range
        - iommu/amd: Fix I/O page table memory leak
        - netfilter: nf_tables: prefer kfree_rcu(ptr, rcu) variant
        - can: etas_es58x: change opened_channel_cnt's type from atomic_t to u8
        - e1000e: Fix possible HW unit hang after an s0ix exit
        - selftests: mlxsw: resource_scale: Fix return value
        - iavf: do not override the adapter state in the watchdog task (again)
        - btrfs: fix relocation crash due to premature return from
          btrfs_commit_transaction()
        - KVM: x86/mmu: Passing up the error state of mmu_alloc_shadow_roots()
    
      * CVE-2022-28390
        - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path
    
     -- Kleber Sacilotto de Souza <email address hidden>  Fri, 20 May 2022 16:32:29 +0200
  • linux (5.13.0-44.49) impish; urgency=medium
    
      * impish/linux: 5.13.0-44.49 -proposed tracker (LP: #1973941)
    
      * CVE-2022-29581
        - net/sched: cls_u32: fix netns refcount changes in u32_change()
    
      * Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP
        option (LP: #1972740)
        - ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE
    
      * ext4: limit length to bitmap_maxbytes (LP: #1972281)
        - ext4: limit length to bitmap_maxbytes - blocksize in punch_hole
    
     -- Kleber Sacilotto de Souza <email address hidden>  Wed, 18 May 2022 14:56:02 +0200
  • linux (5.13.0-43.48) impish; urgency=medium
    
      * impish/linux: 5.13.0-43.48 -proposed tracker (LP: #1972669)
    
      * Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP
        option (LP: #1972740)
        - ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE
    
      * ext4: limit length to bitmap_maxbytes (LP: #1972281)
        - ext4: limit length to bitmap_maxbytes - blocksize in punch_hole
    
    linux (5.13.0-42.47) impish; urgency=medium
    
      * impish/linux: 5.13.0-42.47 -proposed tracker (LP: #1971855)
    
      * CVE-2022-1158
        - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address
    
      * config CONFIG_HISI_PMU for  kunpeng920 (LP: #1956086)
        - [Config] CONFIG_HISI_PMU=m
    
      * re-apply missing overlayfs SAUCE patch (LP: #1967924)
        - SAUCE: overlayfs: fix incorrect mnt_id of files opened from map_files
    
      * Impish update: upstream stable patchset 2022-04-20 (LP: #1969666)
        - mac80211_hwsim: report NOACK frames in tx_status
        - mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work
        - i2c: bcm2835: Avoid clock stretching timeouts
        - ASoC: rt5668: do not block workqueue if card is unbound
        - ASoC: rt5682: do not block workqueue if card is unbound
        - regulator: core: fix false positive in regulator_late_cleanup()
        - KVM: arm64: vgic: Read HW interrupt pending state from the HW
        - tipc: fix a bit overflow in tipc_crypto_key_rcv()
        - cifs: fix double free race when mount fails in cifs_get_root()
        - selftests/seccomp: Fix seccomp failure by adding missing headers
        - i2c: cadence: allow COMPILE_TEST
        - i2c: qup: allow COMPILE_TEST
        - net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990
        - usb: gadget: don't release an existing dev->buf
        - usb: gadget: clear related members when goto fail
        - exfat: reuse exfat_inode_info variable instead of calling EXFAT_I()
        - exfat: fix i_blocks for files truncated over 4 GiB
        - tracing: Add test for user space strings when filtering on string pointers
        - serial: stm32: prevent TDR register overwrite when sending x_char
        - ata: pata_hpt37x: fix PCI clock detection
        - drm/amdgpu: check vm ready by amdgpu_vm->evicting flag
        - tracing: Add ustring operation to filtering string pointers
        - ALSA: intel_hdmi: Fix reference to PCM buffer address
        - riscv/efi_stub: Fix get_boot_hartid_from_fdt() return value
        - riscv: Fix config KASAN && SPARSEMEM && !SPARSE_VMEMMAP
        - riscv: Fix config KASAN && DEBUG_VIRTUAL
        - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
        - iommu/amd: Recover from event log overflow
        - drm/i915: s/JSP2/ICP2/ PCH
        - xen/netfront: destroy queues before real_num_tx_queues is zeroed
        - thermal: core: Fix TZ_GET_TRIP NULL pointer dereference
        - ntb: intel: fix port config status offset for SPR
        - mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls
        - xfrm: fix MTU regression
        - netfilter: fix use-after-free in __nf_register_net_hook()
        - bpf, sockmap: Do not ignore orig_len parameter
        - xfrm: enforce validity of offload input flags
        - e1000e: Correct NVM checksum verification flow
        - net: fix up skbs delta_truesize in UDP GRO frag_list
        - netfilter: nf_queue: don't assume sk is full socket
        - netfilter: nf_queue: fix possible use-after-free
        - netfilter: nf_queue: handle socket prefetch
        - batman-adv: Request iflink once in batadv-on-batadv check
        - batman-adv: Request iflink once in batadv_get_real_netdevice
        - batman-adv: Don't expect inter-netns unique iflink indices
        - net: ipv6: ensure we call ipv6_mc_down() at most once
        - net: dcb: flush lingering app table entries for unregistered devices
        - net/smc: fix connection leak
        - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client
        - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server
        - mac80211: fix forwarded mesh frames AC & queue selection
        - net: stmmac: fix return value of __setup handler
        - mac80211: treat some SAE auth steps as final
        - iavf: Fix missing check for running netdev
        - net: sxgbe: fix return value of __setup handler
        - ibmvnic: register netdev after init of adapter
        - net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()
        - ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc()
        - efivars: Respect "block" flag in efivar_entry_set_safe()
        - firmware: arm_scmi: Remove space in MODULE_ALIAS name
        - ASoC: cs4265: Fix the duplicated control name
        - can: gs_usb: change active_channels's type from atomic_t to u8
        - arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output
        - igc: igc_read_phy_reg_gpy: drop premature return
        - ARM: Fix kgdb breakpoint for Thumb2
        - ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions
        - selftests: mlxsw: tc_police_scale: Make test more robust
        - pinctrl: sunxi: Use unique lockdep classes for IRQs
        - igc: igc_write_phy_reg_gpy: drop premature return
        - ibmvnic: free reset-work-item when flushing
        - memfd: fix F_SEAL_WRITE after shmem huge page allocated
        - s390/extable: fix exception table sorting
        - ARM: dts: switch timer config to common devkit8000 devicetree
        - ARM: dts: Use 32KiHz oscillator on devkit8000
        - soc: fsl: guts: Revert commit 3c0d64e867ed
        - soc: fsl: guts: Add a missing memory allocation failure check
        - soc: fsl: qe: Check of ioremap return value
        - ARM: tegra: Move panels to AUX bus
        - ibmvnic: complete init_done on transport events
        - net: chelsio: cxgb3: check the return value of pci_find_capability()
        - iavf: Refactor iavf state machine tracking
        - nl80211: Handle nla_memdup failures in handle_nan_filter
        - drm/amdgpu: fix suspend/resume hang regression
        - net: dcb: disable softirqs in dcbnl_flush_dev()
        - Input: elan_i2c - move regulator_[en|dis]able() out of
          elan_[en|dis]able_power()
        - Input: elan_i2c - fix regulator enable count imbalance after suspend/resume
        - Input: samsung-keypad - properly state IOMEM dependency
        - HID: add mapping for KEY_DICTATE
        - HID: add mapping for KEY_ALL_APPLICATIONS
        - tracing/histogram: Fix sorting on old "cpu" value
        - tracing: Fix return value of __setup handlers
        - btrfs: fix lost prealloc extents beyond eof after full fsync
        - btrfs: qgroup: fix deadlock between rescan worker and remove qgroup
        - btrfs: add missing run of delayed items after unlink during log replay
        - Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6"
        - hamradio: fix macro redefine warning
        - arm64: Mark start_backtrace() notrace and NOKPROBE_SYMBOL
        - sched/fair: Fix fault in reweight_entity
        - tools/resolve_btf_ids: Close ELF file on error
        - mtd: spi-nor: Fix mtd size for s3an flashes
        - MIPS: fix local_{add,sub}_return on MIPS64
        - signal: In get_signal test for signal_group_exit every time through the loop
        - PCI: mediatek-gen3: Disable DVFSRC voltage request
        - PCI: dwc: Do not remap invalid res
        - PCI: aardvark: Fix checking for MEM resource type
        - KVM: VMX: Don't unblock vCPU w/ Posted IRQ if IRQs are disabled in guest
        - KVM: s390: Ensure kvm_arch_no_poll() is read once when blocking vCPU
        - KVM: VMX: Read Posted Interrupt "control" exactly once per loop iteration
        - KVM: x86: Handle 32-bit wrap of EIP for EMULTYPE_SKIP with flat code seg
        - KVM: x86: Exit to userspace if emulation prepared a completion callback
        - i3c: fix incorrect address slot lookup on 64-bit
        - i3c/master/mipi-i3c-hci: Fix a potentially infinite loop in
          'hci_dat_v1_get_index()'
        - tracing: Do not let synth_events block other dyn_event systems during create
        - Input: ti_am335x_tsc - set ADCREFM for X configuration
        - Input: ti_am335x_tsc - fix STEPCONFIG setup for Z2
        - NFSD: Fix verifier returned in stable WRITEs
        - Revert "nfsd: skip some unnecessary stats in the v4 case"
        - nfsd: fix crash on COPY_NOTIFY with special stateid
        - x86/hyperv: Properly deal with empty cpumasks in hyperv_flush_tlb_multi()
        - SUNRPC: Fix sockaddr handling in the svc_xprt_create_error trace point
        - SUNRPC: Fix sockaddr handling in svcsock_accept_class trace points
        - drm/sun4i: dw-hdmi: Fix missing put_device() call in sun8i_hdmi_phy_get
        - drm/atomic: Check new_crtc_state->active to determine if CRTC needs disable
          in self refresh mode
        - ntb_hw_switchtec: Fix pff ioread to read into mmio_part_cfg_all
        - ntb_hw_switchtec: Fix bug with more than 32 partitions
        - drm/amdkfd: Check for null pointer after calling kmemdup
        - i3c: master: dw: check return of dw_i3c_master_get_free_pos()
        - dma-buf: cma_heap: Fix mutex locking section
        - tracing/uprobes: Check the return value of kstrdup() for tu->filename
        - tracing/probes: check the return value of kstrndup() for pbuf
        - mm: defer kmemleak object creation of module_alloc()
        - kasan: fix quarantine conflicting with init_on_free
        - selftests/vm: make charge_reserved_hugetlb.sh work with existing cgroup
          setting
        - hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
        - ethtool: Fix link extended state for big endian
        - bpf: Fix possible race in inc_misses_counter
        - gve: Recording rx queue before sending to napi
        - ibmvnic: don't release napi in __ibmvnic_open()
        - bnxt_en: Fix occasional ethtool -t loopback test failures
        - iwlwifi: mvm: check debugfs_dir ptr before use
        - iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
        - mac80211: fix EAPoL rekey fail in 802.3 rx path
        - blktrace: fix use after free for struct blk_trace
        - net: ipa: add an interconnect dependency
        - iavf: Fix deadlock in iavf_reset_task
        - auxdisplay: lcd2s: Fix lcd2s_redefine_char() feature
        - auxdisplay: lcd2s: Fix memory leak in ->remove()
        - auxdisplay: lcd2s: Use proper API to free the instance of charlcd object
        - iommu/tegra-smmu: Fix missing put_device() call in tegra_smmu_find
        - mips: setup: fix setnocoherentio() boolean setting
        - mptcp: Correctly set DATA_FIN timeout when number of retransmits is large
        - sched: Fix yet more sched_fork() races
        - arm64: dts: juno: Remove GICv2m dma-range
        - iommu/amd: Fix I/O page table memory leak
        - netfilter: nf_tables: prefer kfree_rcu(ptr, rcu) variant
        - can: etas_es58x: change opened_channel_cnt's type from atomic_t to u8
        - e1000e: Fix possible HW unit hang after an s0ix exit
        - selftests: mlxsw: resource_scale: Fix return value
        - iavf: do not override the adapter state in the watchdog task (again)
        - btrfs: fix relocation crash due to premature return from
          btrfs_commit_transaction()
        - KVM: x86/mmu: Passing up the error state of mmu_alloc_shadow_roots()
    
      * CVE-2022-28390
        - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path
    
     -- Kleber Sacilotto de Souza <email address hidden>  Tue, 10 May 2022 11:27:28 +0200
  • linux (5.13.0-42.47) impish; urgency=medium
    
      * impish/linux: 5.13.0-42.47 -proposed tracker (LP: #1971855)
    
      * CVE-2022-1158
        - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address
    
      * config CONFIG_HISI_PMU for  kunpeng920 (LP: #1956086)
        - [Config] CONFIG_HISI_PMU=m
    
      * re-apply missing overlayfs SAUCE patch (LP: #1967924)
        - SAUCE: overlayfs: fix incorrect mnt_id of files opened from map_files
    
      * Impish update: upstream stable patchset 2022-04-20 (LP: #1969666)
        - mac80211_hwsim: report NOACK frames in tx_status
        - mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work
        - i2c: bcm2835: Avoid clock stretching timeouts
        - ASoC: rt5668: do not block workqueue if card is unbound
        - ASoC: rt5682: do not block workqueue if card is unbound
        - regulator: core: fix false positive in regulator_late_cleanup()
        - KVM: arm64: vgic: Read HW interrupt pending state from the HW
        - tipc: fix a bit overflow in tipc_crypto_key_rcv()
        - cifs: fix double free race when mount fails in cifs_get_root()
        - selftests/seccomp: Fix seccomp failure by adding missing headers
        - i2c: cadence: allow COMPILE_TEST
        - i2c: qup: allow COMPILE_TEST
        - net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990
        - usb: gadget: don't release an existing dev->buf
        - usb: gadget: clear related members when goto fail
        - exfat: reuse exfat_inode_info variable instead of calling EXFAT_I()
        - exfat: fix i_blocks for files truncated over 4 GiB
        - tracing: Add test for user space strings when filtering on string pointers
        - serial: stm32: prevent TDR register overwrite when sending x_char
        - ata: pata_hpt37x: fix PCI clock detection
        - drm/amdgpu: check vm ready by amdgpu_vm->evicting flag
        - tracing: Add ustring operation to filtering string pointers
        - ALSA: intel_hdmi: Fix reference to PCM buffer address
        - riscv/efi_stub: Fix get_boot_hartid_from_fdt() return value
        - riscv: Fix config KASAN && SPARSEMEM && !SPARSE_VMEMMAP
        - riscv: Fix config KASAN && DEBUG_VIRTUAL
        - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
        - iommu/amd: Recover from event log overflow
        - drm/i915: s/JSP2/ICP2/ PCH
        - xen/netfront: destroy queues before real_num_tx_queues is zeroed
        - thermal: core: Fix TZ_GET_TRIP NULL pointer dereference
        - ntb: intel: fix port config status offset for SPR
        - mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls
        - xfrm: fix MTU regression
        - netfilter: fix use-after-free in __nf_register_net_hook()
        - bpf, sockmap: Do not ignore orig_len parameter
        - xfrm: enforce validity of offload input flags
        - e1000e: Correct NVM checksum verification flow
        - net: fix up skbs delta_truesize in UDP GRO frag_list
        - netfilter: nf_queue: don't assume sk is full socket
        - netfilter: nf_queue: fix possible use-after-free
        - netfilter: nf_queue: handle socket prefetch
        - batman-adv: Request iflink once in batadv-on-batadv check
        - batman-adv: Request iflink once in batadv_get_real_netdevice
        - batman-adv: Don't expect inter-netns unique iflink indices
        - net: ipv6: ensure we call ipv6_mc_down() at most once
        - net: dcb: flush lingering app table entries for unregistered devices
        - net/smc: fix connection leak
        - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client
        - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server
        - mac80211: fix forwarded mesh frames AC & queue selection
        - net: stmmac: fix return value of __setup handler
        - mac80211: treat some SAE auth steps as final
        - iavf: Fix missing check for running netdev
        - net: sxgbe: fix return value of __setup handler
        - ibmvnic: register netdev after init of adapter
        - net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()
        - ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc()
        - efivars: Respect "block" flag in efivar_entry_set_safe()
        - firmware: arm_scmi: Remove space in MODULE_ALIAS name
        - ASoC: cs4265: Fix the duplicated control name
        - can: gs_usb: change active_channels's type from atomic_t to u8
        - arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output
        - igc: igc_read_phy_reg_gpy: drop premature return
        - ARM: Fix kgdb breakpoint for Thumb2
        - ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions
        - selftests: mlxsw: tc_police_scale: Make test more robust
        - pinctrl: sunxi: Use unique lockdep classes for IRQs
        - igc: igc_write_phy_reg_gpy: drop premature return
        - ibmvnic: free reset-work-item when flushing
        - memfd: fix F_SEAL_WRITE after shmem huge page allocated
        - s390/extable: fix exception table sorting
        - ARM: dts: switch timer config to common devkit8000 devicetree
        - ARM: dts: Use 32KiHz oscillator on devkit8000
        - soc: fsl: guts: Revert commit 3c0d64e867ed
        - soc: fsl: guts: Add a missing memory allocation failure check
        - soc: fsl: qe: Check of ioremap return value
        - ARM: tegra: Move panels to AUX bus
        - ibmvnic: complete init_done on transport events
        - net: chelsio: cxgb3: check the return value of pci_find_capability()
        - iavf: Refactor iavf state machine tracking
        - nl80211: Handle nla_memdup failures in handle_nan_filter
        - drm/amdgpu: fix suspend/resume hang regression
        - net: dcb: disable softirqs in dcbnl_flush_dev()
        - Input: elan_i2c - move regulator_[en|dis]able() out of
          elan_[en|dis]able_power()
        - Input: elan_i2c - fix regulator enable count imbalance after suspend/resume
        - Input: samsung-keypad - properly state IOMEM dependency
        - HID: add mapping for KEY_DICTATE
        - HID: add mapping for KEY_ALL_APPLICATIONS
        - tracing/histogram: Fix sorting on old "cpu" value
        - tracing: Fix return value of __setup handlers
        - btrfs: fix lost prealloc extents beyond eof after full fsync
        - btrfs: qgroup: fix deadlock between rescan worker and remove qgroup
        - btrfs: add missing run of delayed items after unlink during log replay
        - Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6"
        - hamradio: fix macro redefine warning
        - arm64: Mark start_backtrace() notrace and NOKPROBE_SYMBOL
        - sched/fair: Fix fault in reweight_entity
        - tools/resolve_btf_ids: Close ELF file on error
        - mtd: spi-nor: Fix mtd size for s3an flashes
        - MIPS: fix local_{add,sub}_return on MIPS64
        - signal: In get_signal test for signal_group_exit every time through the loop
        - PCI: mediatek-gen3: Disable DVFSRC voltage request
        - PCI: dwc: Do not remap invalid res
        - PCI: aardvark: Fix checking for MEM resource type
        - KVM: VMX: Don't unblock vCPU w/ Posted IRQ if IRQs are disabled in guest
        - KVM: s390: Ensure kvm_arch_no_poll() is read once when blocking vCPU
        - KVM: VMX: Read Posted Interrupt "control" exactly once per loop iteration
        - KVM: x86: Handle 32-bit wrap of EIP for EMULTYPE_SKIP with flat code seg
        - KVM: x86: Exit to userspace if emulation prepared a completion callback
        - i3c: fix incorrect address slot lookup on 64-bit
        - i3c/master/mipi-i3c-hci: Fix a potentially infinite loop in
          'hci_dat_v1_get_index()'
        - tracing: Do not let synth_events block other dyn_event systems during create
        - Input: ti_am335x_tsc - set ADCREFM for X configuration
        - Input: ti_am335x_tsc - fix STEPCONFIG setup for Z2
        - NFSD: Fix verifier returned in stable WRITEs
        - Revert "nfsd: skip some unnecessary stats in the v4 case"
        - nfsd: fix crash on COPY_NOTIFY with special stateid
        - x86/hyperv: Properly deal with empty cpumasks in hyperv_flush_tlb_multi()
        - SUNRPC: Fix sockaddr handling in the svc_xprt_create_error trace point
        - SUNRPC: Fix sockaddr handling in svcsock_accept_class trace points
        - drm/sun4i: dw-hdmi: Fix missing put_device() call in sun8i_hdmi_phy_get
        - drm/atomic: Check new_crtc_state->active to determine if CRTC needs disable
          in self refresh mode
        - ntb_hw_switchtec: Fix pff ioread to read into mmio_part_cfg_all
        - ntb_hw_switchtec: Fix bug with more than 32 partitions
        - drm/amdkfd: Check for null pointer after calling kmemdup
        - i3c: master: dw: check return of dw_i3c_master_get_free_pos()
        - dma-buf: cma_heap: Fix mutex locking section
        - tracing/uprobes: Check the return value of kstrdup() for tu->filename
        - tracing/probes: check the return value of kstrndup() for pbuf
        - mm: defer kmemleak object creation of module_alloc()
        - kasan: fix quarantine conflicting with init_on_free
        - selftests/vm: make charge_reserved_hugetlb.sh work with existing cgroup
          setting
        - hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
        - ethtool: Fix link extended state for big endian
        - bpf: Fix possible race in inc_misses_counter
        - gve: Recording rx queue before sending to napi
        - ibmvnic: don't release napi in __ibmvnic_open()
        - bnxt_en: Fix occasional ethtool -t loopback test failures
        - iwlwifi: mvm: check debugfs_dir ptr before use
        - iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
        - mac80211: fix EAPoL rekey fail in 802.3 rx path
        - blktrace: fix use after free for struct blk_trace
        - net: ipa: add an interconnect dependency
        - iavf: Fix deadlock in iavf_reset_task
        - auxdisplay: lcd2s: Fix lcd2s_redefine_char() feature
        - auxdisplay: lcd2s: Fix memory leak in ->remove()
        - auxdisplay: lcd2s: Use proper API to free the instance of charlcd object
        - iommu/tegra-smmu: Fix missing put_device() call in tegra_smmu_find
        - mips: setup: fix setnocoherentio() boolean setting
        - mptcp: Correctly set DATA_FIN timeout when number of retransmits is large
        - sched: Fix yet more sched_fork() races
        - arm64: dts: juno: Remove GICv2m dma-range
        - iommu/amd: Fix I/O page table memory leak
        - netfilter: nf_tables: prefer kfree_rcu(ptr, rcu) variant
        - can: etas_es58x: change opened_channel_cnt's type from atomic_t to u8
        - e1000e: Fix possible HW unit hang after an s0ix exit
        - selftests: mlxsw: resource_scale: Fix return value
        - iavf: do not override the adapter state in the watchdog task (again)
        - btrfs: fix relocation crash due to premature return from
          btrfs_commit_transaction()
        - KVM: x86/mmu: Passing up the error state of mmu_alloc_shadow_roots()
    
      * CVE-2022-28390
        - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path
    
     -- Stefan Bader <email address hidden>  Fri, 06 May 2022 10:39:33 +0200
  • linux (5.13.0-41.46) impish; urgency=medium
    
      * impish/linux: 5.13.0-41.46 -proposed tracker (LP: #1969014)
    
      * NVMe devices fail to probe due to ACPI power state change (LP: #1942624)
        - ACPI: power: Rework turning off unused power resources
        - ACPI: PM: Do not turn off power resources in unknown state
    
      * Recent 5.13 kernel has broken KVM support (LP: #1966499)
        - KVM: Add infrastructure and macro to mark VM as bugged
        - KVM: x86: Use KVM_BUG/KVM_BUG_ON to handle bugs that are fatal to the VM
        - KVM: VMX: prepare sync_pir_to_irr for running with APICv disabled
    
      * LRMv6: add multi-architecture support (LP: #1968774)
        - [Packaging] resync dkms-build{,--nvidia-N}
    
      * io_uring regression - lost write request (LP: #1952222)
        - io-wq: split bounded and unbounded work into separate lists
    
      * xfrm interface cannot be changed anymore (LP: #1968591)
        - xfrm: fix the if_id check in changelink
    
      * Use kernel-testing repo from launchpad for ADT tests (LP: #1968016)
        - [Debian] Use kernel-testing repo from launchpad
    
      * vmx_ldtr_test in ubuntu_kvm_unit_tests failed (FAIL: Expected 0 for L1 LDTR
        selector (got 50)) (LP: #1956315)
        - KVM: nVMX: Set LDTR to its architecturally defined value on nested VM-Exit
    
      * audio from external sound card is distorted (LP: #1966066)
        - ALSA: usb-audio: Fix packet size calculation regression
    
      * Impish update: upstream stable patchset 2022-04-12 (LP: #1968771)
        - cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug
        - btrfs: tree-checker: check item_size for inode_item
        - btrfs: tree-checker: check item_size for dev_item
        - clk: jz4725b: fix mmc0 clock gating
        - vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
        - parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel
        - parisc/unaligned: Fix ldw() and stw() unalignment handlers
        - KVM: x86/mmu: make apf token non-zero to fix bug
        - drm/amdgpu: disable MMHUB PG for Picasso
        - drm/i915: Correctly populate use_sagv_wm for all pipes
        - sr9700: sanity check for packet length
        - USB: zaurus: support another broken Zaurus
        - CDC-NCM: avoid overflow in sanity checking
        - x86/fpu: Correct pkru/xstate inconsistency
        - tee: export teedev_open() and teedev_close_context()
        - optee: use driver internal tee_context for some rpc
        - ping: remove pr_err from ping_lookup
        - perf data: Fix double free in perf_session__delete()
        - bnx2x: fix driver load from initrd
        - bnxt_en: Fix active FEC reporting to ethtool
        - hwmon: Handle failure to register sensor with thermal zone correctly
        - bpf: Do not try bpf_msg_push_data with len 0
        - selftests: bpf: Check bpf_msg_push_data return value
        - bpf: Add schedule points in batch ops
        - io_uring: add a schedule point in io_add_buffers()
        - net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends
        - tipc: Fix end of loop tests for list_for_each_entry()
        - gso: do not skip outer ip header in case of ipip and net_failover
        - openvswitch: Fix setting ipv6 fields causing hw csum failure
        - drm/edid: Always set RGB444
        - net/mlx5e: Fix wrong return value on ioctl EEPROM query failure
        - net/sched: act_ct: Fix flow table lookup after ct clear or switching zones
        - net: ll_temac: check the return value of devm_kmalloc()
        - net: Force inlining of checksum functions in net/checksum.h
        - nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()
        - netfilter: nf_tables: fix memory leak during stateful obj update
        - net/smc: Use a mutex for locking "struct smc_pnettable"
        - surface: surface3_power: Fix battery readings on batteries without a serial
          number
        - udp_tunnel: Fix end of loop test in udp_tunnel_nic_unregister()
        - net/mlx5: Fix possible deadlock on rule deletion
        - net/mlx5: Fix wrong limitation of metadata match on ecpf
        - net/mlx5e: kTLS, Use CHECKSUM_UNNECESSARY for device-offloaded packets
        - spi: spi-zynq-qspi: Fix a NULL pointer dereference in
          zynq_qspi_exec_mem_op()
        - regmap-irq: Update interrupt clear register for proper reset
        - RDMA/rtrs-clt: Fix possible double free in error case
        - RDMA/rtrs-clt: Move free_permit from free_clt to rtrs_clt_close
        - configfs: fix a race in configfs_{,un}register_subsystem()
        - RDMA/ib_srp: Fix a deadlock
        - tracing: Have traceon and traceoff trigger honor the instance
        - iio: adc: men_z188_adc: Fix a resource leak in an error handling path
        - iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits
        - iio: imu: st_lsm6dsx: wait for settling time in st_lsm6dsx_read_oneshot
        - iio: Fix error handling for PM
        - sc16is7xx: Fix for incorrect data being transmitted
        - ata: pata_hpt37x: disable primary channel on HPT371
        - Revert "USB: serial: ch341: add new Product ID for CH341A"
        - usb: gadget: rndis: add spinlock for rndis response list
        - tracefs: Set the group ownership in apply_options() not parse_options()
        - USB: serial: option: add support for DW5829e
        - USB: serial: option: add Telit LE910R1 compositions
        - usb: dwc3: pci: Fix Bay Trail phy GPIO mappings
        - usb: dwc3: gadget: Let the interrupt handler disable bottom halves.
        - xhci: re-initialize the HC during resume if HCE was set
        - xhci: Prevent futile URB re-submissions due to incorrect return value.
        - driver core: Free DMA range map when device is released
        - RDMA/cma: Do not change route.addr.src_addr outside state checks
        - thermal: int340x: fix memory leak in int3400_notify()
        - riscv: fix oops caused by irqsoff latency tracer
        - tty: n_gsm: fix encoding of control signal octet bit DV
        - tty: n_gsm: fix proper link termination after failed open
        - tty: n_gsm: fix NULL pointer access due to DLCI release
        - tty: n_gsm: fix wrong tty control line for flow control
        - tty: n_gsm: fix deadlock in gsmtty_open()
        - gpio: tegra186: Fix chip_data type confusion
        - memblock: use kfree() to release kmalloced memblock regions
        - mm/filemap: Fix handling of THPs in generic_file_buffered_read()
        - cgroup-v1: Correct privileges check in release_agent writes
        - selinux: fix misuse of mutex_is_locked()
        - drm/amd/display: Protect update_bw_bounding_box FPU code.
        - drm/amdgpu: do not enable asic reset for raven2
        - drm/i915: Fix bw atomic check when switching between SAGV vs. no SAGV
        - netfilter: xt_socket: fix a typo in socket_mt_destroy()
        - selftests: mptcp: fix diag instability
        - bnxt_en: Fix offline ethtool selftest with RDMA enabled
        - bnxt_en: Fix incorrect multicast rx mask setting when not requested
        - net/mlx5: Fix tc max supported prio for nic mode
        - ice: initialize local variable 'tlv'
        - net/mlx5: Update the list of the PCI supported devices
        - net: mv643xx_eth: process retval from of_get_mac_address
        - drm/vc4: crtc: Fix runtime_pm reference counting
        - netfilter: nf_tables: unregister flowtable hooks on netns exit
        - net/mlx5: DR, Cache STE shadow memory
        - ibmvnic: schedule failover only if vioctl fails
        - net/mlx5: DR, Don't allow match on IP w/o matching on full
          ethertype/ip_version
        - net/mlx5: DR, Fix the threshold that defines when pool sync is initiated
        - net/mlx5e: MPLSoUDP decap, fix check for unsupported matches
        - net/mlx5: Update log_max_qp value to be 17 at most
        - tracing: Dump stacktrace trigger to the corresponding instance
        - usb: dwc3: pci: Add "snps,dis_u2_susphy_quirk" for Intel Bay Trail
        - nvmem: core: Fix a conflict between MTD and NVMEM on wp-gpios property
        - mtd: core: Fix a conflict between MTD and NVMEM on wp-gpios property
        - staging: fbtft: fb_st7789v: reset display before initialization
        - tps6598x: clear int mask on probe failure
        - riscv: fix nommu_k210_sdcard_defconfig
        - tty: n_gsm: fix wrong modem processing in convergence layer type 2
        - pinctrl: fix loop in k210_pinconf_get_drive()
        - pinctrl: k210: Fix bias-pull-up
        - ice: Fix race conditions between virtchnl handling and VF ndo ops
        - ice: fix concurrent reset and removal of VFs
    
      * Impish update: upstream stable patchset 2022-04-07 (LP: #1968223)
        - drm/nouveau/pmu/gm200-: use alternate falcon reset sequence
        - mm: memcg: synchronize objcg lists with a dedicated spinlock
        - fs/proc: task_mmu.c: don't read mapcount for migration entry
        - scsi: lpfc: Fix mailbox command failure during driver initialization
        - HID:Add support for UGTABLET WP5540
        - Revert "svm: Add warning message for AVIC IPI invalid target"
        - serial: parisc: GSC: fix build when IOSAPIC is not set
        - parisc: Drop __init from map_pages declaration
        - parisc: Fix data TLB miss in sba_unmap_sg
        - parisc: Fix sglist access in ccio-dma.c
        - mmc: block: fix read single on recovery logic
        - mm: don't try to NUMA-migrate COW pages that have other uses
        - PCI: hv: Fix NUMA node assignment when kernel boots with custom NUMA
          topology
        - parisc: Add ioread64_lo_hi() and iowrite64_lo_hi()
        - btrfs: send: in case of IO error log it
        - platform/x86: touchscreen_dmi: Add info for the RWC NANOTE P8 AY07J 2-in-1
        - platform/x86: ISST: Fix possible circular locking dependency detected
        - selftests: rtc: Increase test timeout so that all tests run
        - kselftest: signal all child processes
        - net: ieee802154: at86rf230: Stop leaking skb's
        - selftests/zram: Skip max_comp_streams interface on newer kernel
        - selftests/zram01.sh: Fix compression ratio calculation
        - selftests/zram: Adapt the situation that /dev/zram0 is being used
        - selftests: openat2: Print also errno in failure messages
        - selftests: openat2: Add missing dependency in Makefile
        - selftests: openat2: Skip testcases that fail with EOPNOTSUPP
        - selftests: skip mincore.check_file_mmap when fs lacks needed support
        - ax25: improve the incomplete fix to avoid UAF and NPD bugs
        - vfs: make freeze_super abort when sync_filesystem returns error
        - quota: make dquot_quota_sync return errors from ->sync_fs
        - scsi: pm8001: Fix use-after-free for aborted TMF sas_task
        - scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task
        - nvme: fix a possible use-after-free in controller reset during load
        - nvme-tcp: fix possible use-after-free in transport error_recovery work
        - nvme-rdma: fix possible use-after-free in transport error_recovery work
        - drm/amdgpu: fix logic inversion in check
        - x86/Xen: streamline (and fix) PV CPU enumeration
        - Revert "module, async: async_synchronize_full() on module init iff async is
          used"
        - gcc-plugins/stackleak: Use noinstr in favor of notrace
        - random: wake up /dev/random writers after zap
        - iwlwifi: fix use-after-free
        - drm/radeon: Fix backlight control on iMac 12,1
        - drm/i915/opregion: check port number bounds for SWSCI display power state
        - vsock: remove vsock from connected table when connect is interrupted by a
          signal
        - drm/i915/gvt: Make DRM_I915_GVT depend on X86
        - iwlwifi: pcie: fix locking when "HW not ready"
        - iwlwifi: pcie: gen2: fix locking when "HW not ready"
        - selftests: netfilter: fix exit value for nft_concat_range
        - netfilter: nft_synproxy: unregister hooks on init error path
        - ipv6: per-netns exclusive flowlabel checks
        - net: dsa: lan9303: fix reset on probe
        - net: dsa: lantiq_gswip: fix use after free in gswip_remove()
        - net: ieee802154: ca8210: Fix lifs/sifs periods
        - ping: fix the dif and sdif check in ping_lookup
        - bonding: force carrier update when releasing slave
        - drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit
        - net_sched: add __rcu annotation to netdev->qdisc
        - bonding: fix data-races around agg_select_timer
        - libsubcmd: Fix use-after-free for realloc(..., 0)
        - dpaa2-eth: Initialize mutex used in one step timestamping path
        - perf bpf: Defer freeing string after possible strlen() on it
        - selftests/exec: Add non-regular to TEST_GEN_PROGS
        - ALSA: hda/realtek: Add quirk for Legion Y9000X 2019
        - ALSA: hda/realtek: Fix deadlock by COEF mutex
        - ALSA: hda: Fix regression on forced probe mask option
        - ALSA: hda: Fix missing codec probe on Shenker Dock 15
        - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw()
        - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range()
        - powerpc/lib/sstep: fix 'ptesync' build error
        - mtd: rawnand: gpmi: don't leak PM reference in error path
        - ASoC: tas2770: Insert post reset delay
        - block/wbt: fix negative inflight counter when remove scsi device
        - NFS: LOOKUP_DIRECTORY is also ok with symlinks
        - NFS: Do not report writeback errors in nfs_getattr()
        - tty: n_tty: do not look ahead for EOL character past the end of the buffer
        - mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe()
        - mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status
        - Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
        - KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id()
        - KVM: x86/pmu: Don't truncate the PerfEvtSeln MSR when creating a perf event
        - KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW
        - ARM: OMAP2+: hwmod: Add of_node_put() before break
        - ARM: OMAP2+: adjust the location of put_device() call in omapdss_init_of
        - phy: usb: Leave some clocks running during suspend
        - irqchip/sifive-plic: Add missing thead,c900-plic match string
        - netfilter: conntrack: don't refresh sctp entries in closed state
        - arm64: dts: meson-gx: add ATF BL32 reserved-memory region
        - arm64: dts: meson-g12: add ATF BL32 reserved-memory region
        - arm64: dts: meson-g12: drop BL32 region from SEI510/SEI610
        - pidfd: fix test failure due to stack overflow on some arches
        - selftests: fixup build warnings in pidfd / clone3 tests
        - kconfig: let 'shell' return enough output for deep path names
        - ata: libata-core: Disable TRIM on M88V29
        - soc: aspeed: lpc-ctrl: Block error printing on probe defer cases
        - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create
        - drm/rockchip: dw_hdmi: Do not leave clock enabled in error case
        - tracing: Fix tp_printk option related with tp_printk_stop_on_boot
        - net: usb: qmi_wwan: Add support for Dell DW5829e
        - net: macb: Align the dma and coherent dma masks
        - kconfig: fix failing to generate auto.conf
        - scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop
        - EDAC: Fix calculation of returned address and next offset in
          edac_align_ptr()
        - net: sched: limit TC_ACT_REPEAT loops
        - dmaengine: sh: rcar-dmac: Check for error num after setting mask
        - dmaengine: stm32-dmamux: Fix PM disable depth imbalance in
          stm32_dmamux_probe
        - dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size
        - i2c: qcom-cci: don't delete an unregistered adapter
        - i2c: qcom-cci: don't put a device tree node before i2c_add_adapter()
        - copy_process(): Move fd_install() out of sighand->siglock critical section
        - i2c: brcmstb: fix support for DSL and CM variants
        - lockdep: Correct lock_classes index mapping
        - btrfs: zoned: cache reported zone during mount
        - HID: amd_sfh: Add illuminance mask to limit ALS max value
        - HID: amd_sfh: Correct the structure field name
        - KVM: x86/xen: Fix runstate updates to be atomic when preempting vCPU
        - drm/i915: Fix dbuf slice config lookup
        - drm/cma-helper: Set VM_DONTEXPAND for mmap
        - selftests: netfilter: disable rp_filter on router
        - ipv4: fix data races in fib_alias_hw_flags_set
        - ipv6: fix data-race in fib6_info_hw_flags_set / fib6_purge_rt
        - ipv6: mcast: use rcu-safe version of ipv6_get_lladdr()
        - mac80211: mlme: check for null after calling kmemdup
        - cfg80211: fix race in netlink owner interface destruction
        - net/smc: Avoid overwriting the copies of clcsock callback functions
        - tipc: fix wrong publisher node address in link publications
        - net: bridge: multicast: notify switchdev driver whenever MC processing gets
          disabled
        - arm64: Correct wrong label in macro __init_el2_gicv3
        - ALSA: usb-audio: revert to IMPLICIT_FB_FIXED_DEV for M-Audio FastTrack Ultra
        - cifs: fix set of group SID via NTSD xattrs
        - powerpc/603: Fix boot failure with DEBUG_PAGEALLOC and KFENCE
        - smb3: fix snapshot mount option
        - NFS: Remove an incorrect revalidation in nfs4_update_changeattr_locked()
        - mtd: parsers: qcom: Fix kernel panic on skipped partition
        - mtd: parsers: qcom: Fix missing free for pparts in cleanup
        - mtd: phram: Prevent divide by zero bug in phram_setup()
        - mtd: rawnand: ingenic: Fix missing put_device in ingenic_ecc_get
        - tests: fix idmapped mount_setattr test
        - ice: enable parsing IPSEC SPI headers for RSS
    
      * Impish update: upstream stable patchset 2022-03-31 (LP: #1967439)
        - integrity: check the return value of audit_log_start()
        - ima: Remove ima_policy file before directory
        - ima: Allow template selection with ima_template[_fmt]= after ima_hash=
        - mmc: sdhci-of-esdhc: Check for error num after setting mask
        - can: isotp: fix potential CAN frame reception race in isotp_rcv()
        - net: phy: marvell: Fix RGMII Tx/Rx delays setting in 88e1121-compatible PHYs
        - net: phy: marvell: Fix MDI-x polarity setting in 88e1118-compatible PHYs
        - NFS: Fix initialisation of nfs_client cl_flags field
        - NFSD: Clamp WRITE offsets
        - NFSD: Fix offset type in I/O trace points
        - tracing: Propagate is_signed to expression
        - NFS: change nfs_access_get_cached to only report the mask
        - NFSv4 only print the label when its queried
        - nfs: nfs4clinet: check the return value of kstrdup()
        - NFSv4.1: Fix uninitialised variable in devicenotify
        - NFSv4 remove zero number of fs_locations entries error check
        - NFSv4 expose nfs_parse_server_name function
        - NFSv4 handle port presence in fs_location server string
        - x86/perf: Avoid warning for Arch LBR without XSAVE
        - drm: panel-orientation-quirks: Add quirk for the 1Netbook OneXPlayer
        - net: sched: Clarify error message when qdisc kind is unknown
        - powerpc/fixmap: Fix VM debug warning on unmap
        - scsi: target: iscsi: Make sure the np under each tpg is unique
        - scsi: ufs: ufshcd-pltfrm: Check the return value of devm_kstrdup()
        - scsi: qedf: Add stag_work to all the vports
        - scsi: qedf: Fix refcount issue when LOGO is received during TMF
        - scsi: pm8001: Fix bogus FW crash for maxcpus=1
        - scsi: ufs: Treat link loss as fatal error
        - scsi: myrs: Fix crash in error case
        - PM: hibernate: Remove register_nosave_region_late()
        - usb: dwc2: gadget: don't try to disable ep0 in dwc2_hsotg_suspend
        - perf: Always wake the parent event
        - nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs
        - net: stmmac: dwmac-sun8i: use return val of readl_poll_timeout()
        - KVM: eventfd: Fix false positive RCU usage warning
        - KVM: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER
        - KVM: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS
        - KVM: SVM: Don't kill SEV guest if SMAP erratum triggers in usermode
        - KVM: VMX: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking shadow
        - riscv: fix build with binutils 2.38
        - ARM: dts: imx23-evk: Remove MX23_PAD_SSP1_DETECT from hog group
        - ARM: dts: Fix boot regression on Skomer
        - ARM: socfpga: fix missing RESET_CONTROLLER
        - nvme-tcp: fix bogus request completion when failing to send AER
        - ACPI/IORT: Check node revision for PMCG resources
        - drm/rockchip: vop: Correct RK3399 VOP register fields
        - ARM: dts: Fix timer regression for beagleboard revision c
        - ARM: dts: meson: Fix the UART compatible strings
        - ARM: dts: meson8: Fix the UART device-tree schema validation
        - ARM: dts: meson8b: Fix the UART device-tree schema validation
        - staging: fbtft: Fix error path in fbtft_driver_module_init()
        - ARM: dts: imx6qdl-udoo: Properly describe the SD card detect
        - phy: xilinx: zynqmp: Fix bus width setting for SGMII
        - ARM: dts: imx7ulp: Fix 'assigned-clocks-parents' typo
        - usb: f_fs: Fix use-after-free for epfile
        - gpio: aggregator: Fix calling into sleeping GPIO controllers
        - drm/vc4: hdmi: Allow DBLCLK modes even if horz timing is odd.
        - misc: fastrpc: avoid double fput() on failed usercopy
        - netfilter: ctnetlink: disable helper autoassign
        - arm64: dts: meson-g12b-odroid-n2: fix typo 'dio2133'
        - ixgbevf: Require large buffers for build_skb on 82599VF
        - drm/panel: simple: Assign data from panel_dpi_probe() correctly
        - gpio: sifive: use the correct register to read output values
        - bonding: pair enable_port with slave_arr_updates
        - net: dsa: mv88e6xxx: don't use devres for mdiobus
        - net: dsa: ar9331: register the mdiobus under devres
        - net: dsa: bcm_sf2: don't use devres for mdiobus
        - net: dsa: felix: don't use devres for mdiobus
        - net: dsa: lantiq_gswip: don't use devres for mdiobus
        - ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
        - nfp: flower: fix ida_idx not being released
        - net: do not keep the dst cache when uncloning an skb dst and its metadata
        - net: fix a memleak when uncloning an skb dst and its metadata
        - veth: fix races around rq->rx_notify_masked
        - net: mdio: aspeed: Add missing MODULE_DEVICE_TABLE
        - tipc: rate limit warning for received illegal binding update
        - net: amd-xgbe: disable interrupts during pci removal
        - dpaa2-eth: unregister the netdev before disconnecting from the PHY
        - ice: fix an error code in ice_cfg_phy_fec()
        - ice: fix IPIP and SIT TSO offload
        - net: mscc: ocelot: fix mutex lock error during ethtool stats read
        - net: dsa: mv88e6xxx: fix use-after-free in mv88e6xxx_mdios_unregister
        - vt_ioctl: fix array_index_nospec in vt_setactivate
        - vt_ioctl: add array_index_nospec to VT_ACTIVATE
        - n_tty: wake up poll(POLLRDNORM) on receiving data
        - eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX
        - usb: dwc2: drd: fix soft connect when gadget is unconfigured
        - Revert "usb: dwc2: drd: fix soft connect when gadget is unconfigured"
        - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup
        - usb: ulpi: Move of_node_put to ulpi_dev_release
        - usb: ulpi: Call of_node_put correctly
        - usb: dwc3: gadget: Prevent core from processing stale TRBs
        - usb: gadget: udc: renesas_usb3: Fix host to USB_ROLE_NONE transition
        - USB: gadget: validate interface OS descriptor requests
        - usb: gadget: rndis: check size of RNDIS_MSG_SET command
        - usb: gadget: f_uac2: Define specific wTerminalType
        - usb: raw-gadget: fix handling of dual-direction-capable endpoints
        - USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320
        - USB: serial: option: add ZTE MF286D modem
        - USB: serial: ch341: add support for GW Instek USB2.0-Serial devices
        - USB: serial: cp210x: add NCR Retail IO box id
        - USB: serial: cp210x: add CPI Bulk Coin Recycler id
        - speakup-dectlk: Restore pitch setting
        - phy: ti: Fix missing sentinel for clk_div_table
        - hwmon: (dell-smm) Speed up setting of fan speed
        - Makefile.extrawarn: Move -Wunaligned-access to W=1
        - can: isotp: fix error path in isotp_sendmsg() to unlock wait queue
        - scsi: lpfc: Remove NVMe support if kernel has NVME_FC disabled
        - scsi: lpfc: Reduce log messages seen after firmware download
        - arm64: dts: imx8mq: fix lcdif port node
        - perf: Fix list corruption in perf_cgroup_switch()
        - iommu: Fix potential use-after-free during probe
        - ima: fix reference leak in asymmetric_verify()
        - NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes
        - NFSD: Fix ia_size underflow
        - NFSD: Fix the behavior of READ near OFFSET_MAX
        - NFSv4 store server support for fs_location attribute
        - NFSv4.1 query for fs_location attr on a new file system
        - perf/x86/rapl: fix AMD event handling
        - sched: Avoid double preemption in __cond_resched_*lock*()
        - drm/vc4: Fix deadlock on DSI device attach error
        - scsi: qedf: Change context reset messages to ratelimited
        - net: stmmac: reduce unnecessary wakeups from eee sw timer
        - MIPS: Fix build error due to PTR used in more places
        - KVM: x86: Report deprecated x87 features in supported CPUID
        - riscv: cpu-hotplug: clear cpu from numa map when teardown
        - riscv: eliminate unreliable __builtin_frame_address(1)
        - gfs2: Fix gfs2_release for non-writers regression
        - phy: broadcom: Kconfig: Fix PHY_BRCM_USB config option
        - phy: stm32: fix a refcount leak in stm32_usbphyc_pll_enable()
        - phy: dphy: Correct clk_pre parameter
        - NFS: Don't overfill uncached readdir pages
        - NFS: Don't skip directory entries when doing uncached readdir
        - gpiolib: Never return internal error codes to user space
        - fbcon: Avoid 'cap' set but not used warning
        - drm/amd/pm: fix hwmon node of power1_label create issue
        - mptcp: netlink: process IPv6 addrs in creating listening sockets
        - iio: buffer: Fix file related error handling in IIO_BUFFER_GET_FD_IOCTL
        - seccomp: Invalidate seccomp mode to catch death failures
        - x86/sgx: Silence softlockup detection when releasing large enclaves
    
      * Impish update: upstream stable patchset 2022-03-22 (LP: #1966021)
        - selinux: fix double free of cond_list on error paths
        - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
        - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()
        - ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()
        - ALSA: usb-audio: Correct quirk for VF0770
        - ALSA: hda: Fix UAF of leds class devs at unbinding
        - ALSA: hda: realtek: Fix race at concurrent COEF updates
        - ALSA: hda/realtek: Add quirk for ASUS GU603
        - ALSA: hda/realtek: Add missing fixup-model entry for Gigabyte X570 ALC1220
          quirks
        - ALSA: hda/realtek: Fix silent output on Gigabyte X570S Aorus Master (newer
          chipset)
        - ALSA: hda/realtek: Fix silent output on Gigabyte X570 Aorus Xtreme after
          reboot from Windows
        - btrfs: fix deadlock between quota disable and qgroup rescan worker
        - drm/nouveau: fix off by one in BIOS boundary checking
        - drm/amd/display: Force link_rate as LINK_RATE_RBR2 for 2018 15" Apple Retina
          panels
        - nvme-fabrics: fix state check in nvmf_ctlr_matches_baseopts()
        - mm/debug_vm_pgtable: remove pte entry from the page table
        - mm/pgtable: define pte_index so that preprocessor could recognize it
        - mm/kmemleak: avoid scanning potential huge holes
        - block: bio-integrity: Advance seed correctly for larger interval sizes
        - dma-buf: heaps: Fix potential spectre v1 gadget
        - IB/hfi1: Fix AIP early init panic
        - memcg: charge fs_context and legacy_fs_context
        - RDMA/cma: Use correct address when leaving multicast group
        - RDMA/ucma: Protect mc during concurrent multicast leaves
        - IB/rdmavt: Validate remote_addr during loopback atomic tests
        - RDMA/siw: Fix broken RDMA Read Fence/Resume logic.
        - RDMA/mlx4: Don't continue event handler after memory allocation failure
        - iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping()
        - iommu/amd: Fix loop timeout issue in iommu_ga_log_enable()
        - spi: bcm-qspi: check for valid cs before applying chip select
        - spi: mediatek: Avoid NULL pointer crash in interrupt
        - spi: meson-spicc: add IRQ check in meson_spicc_probe
        - spi: uniphier: fix reference count leak in uniphier_spi_probe()
        - net: ieee802154: hwsim: Ensure proper channel selection at probe time
        - net: ieee802154: mcr20a: Fix lifs/sifs periods
        - net: ieee802154: ca8210: Stop leaking skb's
        - net: ieee802154: Return meaningful error codes from the netlink helpers
        - net: macsec: Fix offload support for NETDEV_UNREGISTER event
        - net: macsec: Verify that send_sci is on when setting Tx sci explicitly
        - net: stmmac: dump gmac4 DMA registers correctly
        - net: stmmac: ensure PTP time register reads are consistent
        - drm/i915/overlay: Prevent divide by zero bugs in scaling
        - ASoC: fsl: Add missing error handling in pcm030_fabric_probe
        - ASoC: xilinx: xlnx_formatter_pcm: Make buffer bytes multiple of period bytes
        - ASoC: cpcap: Check for NULL pointer after calling of_get_child_by_name
        - ASoC: max9759: fix underflow in speaker_gain_control_put()
        - pinctrl: intel: Fix a glitch when updating IRQ flags on a preconfigured line
        - pinctrl: intel: fix unexpected interrupt
        - pinctrl: bcm2835: Fix a few error paths
        - scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe
        - nfsd: nfsd4_setclientid_confirm mistakenly expires confirmed client.
        - gve: fix the wrong AdminQ buffer queue index check
        - bpf: Use VM_MAP instead of VM_ALLOC for ringbuf
        - selftests/exec: Remove pipe from TEST_GEN_FILES
        - selftests: futex: Use variable MAKE instead of make
        - tools/resolve_btfids: Do not print any commands when building silently
        - rtc: cmos: Evaluate century appropriate
        - Revert "fbcon: Disable accelerated scrolling"
        - updateconfigs for FRAMEBUFFER_CONSOLE_LEGACY_ACCELERATION
        - fbcon: Add option to enable legacy hardware acceleration
        - perf stat: Fix display of grouped aliased events
        - perf/x86/intel/pt: Fix crash with stop filters in single-range mode
        - x86/perf: Default set FREEZE_ON_SMI for all
        - EDAC/altera: Fix deferred probing
        - EDAC/xgene: Fix deferred probing
        - ext4: prevent used blocks from being allocated during fast commit replay
        - ext4: modify the logic of ext4_mb_new_blocks_simple
        - ext4: fix error handling in ext4_restore_inline_data()
        - ext4: fix error handling in ext4_fc_record_modified_inode()
        - ext4: fix incorrect type issue during replay_del_range
        - net: dsa: mt7530: make NET_DSA_MT7530 select MEDIATEK_GE_PHY
        - cgroup/cpuset: Fix "suspicious RCU usage" lockdep warning
        - selftests: nft_concat_range: add test for reload with no element add/del
        - drm/i915: Disable DSB usage for now
        - btrfs: don't start transaction for scrub if the fs is mounted read-only
        - btrfs: fix use-after-free after failure to create a snapshot
        - Revert "fs/9p: search open fids first"
        - mptcp: fix msk traversal in mptcp_nl_cmd_set_flags()
        - KVM: arm64: Avoid consuming a stale esr value when SError occur
        - KVM: arm64: Stop handle_exit() from handling HVC twice when an SError occurs
        - ALSA: usb-audio: initialize variables that could ignore errors
        - ALSA: hda: Skip codec shutdown in case the codec is not registered
        - IB/hfi1: Fix tstats alloc and dealloc
        - IB/cm: Release previously acquired reference counter in the cm_id_priv
        - netfilter: nft_reject_bridge: Fix for missing reply from prerouting
        - net/smc: Forward wakeup to smc socket waitqueue after fallback
        - net: stmmac: dwmac-visconti: No change to ETHER_CLOCK_SEL for unexpected
          speed request.
        - net: stmmac: properly handle with runtime pm in stmmac_dvr_remove()
        - drm/kmb: Fix for build errors with Warray-bounds
        - drm/amd: avoid suspend on dGPUs w/ s2idle support when runtime PM enabled
        - ASoC: simple-card: fix probe failure on platform component
        - ASoC: codecs: lpass-rx-macro: fix sidetone register offsets
        - pinctrl: sunxi: Fix H616 I2S3 pin data
        - kvm: add guest_state_{enter,exit}_irqoff()
        - kvm/arm64: rework guest entry logic
        - perf: Copy perf_event_attr::sig_data on modification
        - tools include UAPI: Sync sound/asound.h copy with the kernel sources
        - gpio: mpc8xxx: Fix an ignored error return from platform_get_irq()
        - selftests: netfilter: check stateless nat udp checksum fixup
        - moxart: fix potential use-after-free on remove path
        - crypto: api - Move cryptomgr soft dependency into algapi
    
      * Impish update: upstream stable patchset 2022-03-18 (LP: #1965589)
        - PCI: pciehp: Fix infinite loop in IRQ handler upon power fault
        - net: ipa: use a bitmap for endpoint replenish_enabled
        - net: ipa: prevent concurrent replenish
        - KVM: x86: Forcibly leave nested virt when SMM state is toggled
        - net/mlx5e: Fix handling of wrong devices during bond netevent
        - net/mlx5: Use del_timer_sync in fw reset flow of halting poll
        - net/mlx5: E-Switch, Fix uninitialized variable modact
        - ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback
        - net: amd-xgbe: ensure to reset the tx_timer_active flag
        - net: amd-xgbe: Fix skb data length underflow
        - fanotify: Fix stale file descriptor in copy_event_to_user()
        - rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()
        - cpuset: Fix the bug that subpart_cpus updated wrongly in update_cpumask()
        - af_packet: fix data-race in packet_setsockopt / packet_setsockopt
        - tcp: add missing tcp_skb_can_collapse() test in tcp_shift_skb_data()
        - selftests: mptcp: fix ipv6 routing setup
        - net/mlx5e: Fix module EEPROM query
        - net/mlx5: Fix offloading with ESWITCH_IPV4_TTL_MODIFY_ENABLE
        - net/mlx5e: Don't treat small ceil values as unlimited in HTB offload
        - i40e: Fix reset path while removing the driver
    
      * CVE-2022-27223
        - USB: gadget: validate endpoint index for xilinx udc
    
      * CVE-2022-26490
        - nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION
    
      * CVE-2021-26401
        - x86/speculation: Use generic retpoline by default on AMD
        - x86/speculation: Update link to AMD speculation whitepaper
        - x86/speculation: Warn about Spectre v2 LFENCE mitigation
        - x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT
    
      * CVE-2022-0001
        - x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation
          reporting
    
      * USB devices not detected during boot on USB 3.0 hubs (LP: #1968210)
        - SAUCE: Revert "Revert "xhci: Set HCD flag to defer primary roothub
          registration""
        - SAUCE: Revert "Revert "usb: core: hcd: Add support for deferring roothub
          registration""
    
     -- Kleber Sacilotto de Souza <email address hidden>  Thu, 14 Apr 2022 18:38:58 +0200
  • linux (5.13.0-40.45) impish; urgency=medium
    
      * impish/linux: 5.13.0-40.45 -proposed tracker (LP: #1966701)
    
      * CVE-2022-1016
        - netfilter: nf_tables: initialize registers in nft_do_chain()
    
      * CVE-2022-1015
        - netfilter: nf_tables: validate registers coming from userspace.
    
      * audit: improve audit queue handling when "audit=1" on cmdline
        (LP: #1965723) // Impish update: upstream stable patchset 2022-03-22
        (LP: #1966021)
        - audit: improve audit queue handling when "audit=1" on cmdline
    
      * PS/2 Keyboard wakeup from s2idle not functioning on AMD Yellow Carp platform
        (LP: #1961739)
        - PM: s2idle: ACPI: Fix wakeup interrupts handling
    
      * Low RX performance for 40G Solarflare NICs (LP: #1964512)
        - SAUCE: sfc: The size of the RX recycle ring should be more flexible
    
      * [UBUNTU 20.04] Fix SIGP processing on KVM/s390 (LP: #1962578)
        - KVM: s390: Simplify SIGP Set Arch handling
        - KVM: s390: Add a routine for setting userspace CPU state
    
      * Move virtual graphics drivers from linux-modules-extra to linux-modules
        (LP: #1960633)
        - [Packaging] Move VM DRM drivers into modules
    
      * Impish update: upstream stable patchset 2022-03-09 (LP: #1964422)
        - bnx2x: Utilize firmware 7.13.21.0
        - bnx2x: Invalidate fastpath HSI version for VFs
        - rcu: Tighten rcu_advance_cbs_nowake() checks
        - select: Fix indefinitely sleeping task in poll_schedule_timeout()
        - drm/amdgpu: Use correct VIEWPORT_DIMENSION for DCN2
        - arm64/bpf: Remove 128MB limit for BPF JIT programs
        - Bluetooth: refactor malicious adv data check
        - net: sfp: ignore disabled SFP node
        - net: stmmac: skip only stmmac_ptp_register when resume from suspend
        - s390/hypfs: include z/VM guests with access control group set
        - bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack()
        - scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP
          devices
        - udf: Restore i_lenAlloc when inode expansion fails
        - udf: Fix NULL ptr deref when converting from inline format
        - efi: runtime: avoid EFIv2 runtime services on Apple x86 machines
        - PM: wakeup: simplify the output logic of pm_show_wakelocks()
        - tracing/histogram: Fix a potential memory leak for kstrdup()
        - tracing: Don't inc err_log entry count if entry allocation fails
        - ceph: properly put ceph_string reference after async create attempt
        - ceph: set pool_ns in new inode layout for async creates
        - fsnotify: fix fsnotify hooks in pseudo filesystems
        - Revert "KVM: SVM: avoid infinite loop on NPF from bad address"
        - perf/x86/intel/uncore: Fix CAS_COUNT_WRITE issue for ICX
        - drm/etnaviv: relax submit size limits
        - KVM: x86: Update vCPU's runtime CPUID on write to MSR_IA32_XSS
        - netfilter: nft_payload: do not update layer 4 checksum when mangling
          fragments
        - serial: 8250: of: Fix mapped region size when using reg-offset property
        - serial: stm32: fix software flow control transfer
        - tty: n_gsm: fix SW flow control encoding/handling
        - tty: Add support for Brainboxes UC cards.
        - usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge
        - usb: xhci-plat: fix crash when suspend if remote wake enable
        - usb: common: ulpi: Fix crash in ulpi_match()
        - usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS
        - USB: core: Fix hang in usb_kill_urb by adding memory barriers
        - usb: typec: tcpm: Do not disconnect while receiving VBUS off
        - ucsi_ccg: Check DEV_INT bit only when starting CCG4
        - jbd2: export jbd2_journal_[grab|put]_journal_head
        - ocfs2: fix a deadlock when commit trans
        - sched/membarrier: Fix membarrier-rseq fence command missing from query
          bitmask
        - x86/MCE/AMD: Allow thresholding interface updates after init
        - powerpc/32s: Allocate one 256k IBAT instead of two consecutives 128k IBATs
        - powerpc/32s: Fix kasan_init_region() for KASAN
        - powerpc/32: Fix boot failure with GCC latent entropy plugin
        - i40e: Increase delay to 1 s after global EMP reset
        - i40e: Fix issue when maximum queues is exceeded
        - i40e: Fix queues reservation for XDP
        - i40e: Fix for failed to init adminq while VF reset
        - i40e: fix unsigned stat widths
        - usb: roles: fix include/linux/usb/role.h compile issue
        - rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev
        - rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev
        - scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put()
        - ipv6_tunnel: Rate limit warning messages
        - net: fix information leakage in /proc/net/ptype
        - hwmon: (lm90) Mark alert as broken for MAX6646/6647/6649
        - hwmon: (lm90) Mark alert as broken for MAX6680
        - ping: fix the sk_bound_dev_if match in ping_lookup
        - ipv4: avoid using shared IP generator for connected sockets
        - hwmon: (lm90) Reduce maximum conversion rate for G781
        - NFSv4: Handle case where the lookup of a directory fails
        - NFSv4: nfs_atomic_open() can race when looking up a non-regular file
        - net-procfs: show net devices bound packet types
        - drm/msm: Fix wrong size calculation
        - drm/msm/dsi: Fix missing put_device() call in dsi_get_phy
        - drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable
        - ipv6: annotate accesses to fn->fn_sernum
        - NFS: Ensure the server has an up to date ctime before hardlinking
        - NFS: Ensure the server has an up to date ctime before renaming
        - powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06
        - netfilter: conntrack: don't increment invalid counter on NF_REPEAT
        - perf: Fix perf_event_read_local() time
        - sched/pelt: Relax the sync of util_sum with util_avg
        - net: phy: broadcom: hook up soft_reset for BCM54616S
        - phylib: fix potential use-after-free
        - octeontx2-pf: Forward error codes to VF
        - rxrpc: Adjust retransmission backoff
        - efi/libstub: arm64: Fix image check alignment at entry
        - hwmon: (lm90) Mark alert as broken for MAX6654
        - powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if
          PMI is pending
        - net: ipv4: Move ip_options_fragment() out of loop
        - net: ipv4: Fix the warning for dereference
        - ipv4: fix ip option filtering for locally generated fragments
        - ibmvnic: init ->running_cap_crqs early
        - ibmvnic: don't spin in tasklet
        - video: hyperv_fb: Fix validation of screen resolution
        - drm/msm/hdmi: Fix missing put_device() call in msm_hdmi_get_phy
        - drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc
        - yam: fix a memory leak in yam_siocdevprivate()
        - net: cpsw: Properly initialise struct page_pool_params
        - net: hns3: handle empty unknown interrupt for VF
        - Revert "ipv6: Honor all IPv6 PIO Valid Lifetime values"
        - net: bridge: vlan: fix single net device option dumping
        - ipv4: raw: lock the socket in raw_bind()
        - ipv4: tcp: send zero IPID in SYNACK messages
        - ipv4: remove sparse error in ip_neigh_gw4()
        - net: bridge: vlan: fix memory leak in __allowed_ingress
        - dt-bindings: can: tcan4x5x: fix mram-cfg RX FIFO config
        - usr/include/Makefile: add linux/nfc.h to the compile-test coverage
        - fsnotify: invalidate dcache before IN_DELETE event
        - block: Fix wrong offset in bio_truncate()
        - mtd: rawnand: mpc5121: Remove unused variable in ads5121_select_chip()
        - net: stmmac: configure PTP clock source prior to PTP initialization
        - KVM: arm64: Use shadow SPSR_EL1 when injecting exceptions on !VHE
        - s390/nmi: handle guarded storage validity failures for KVM guests
        - powerpc32/bpf: Fix codegen for bpf-to-bpf calls
        - powerpc/bpf: Update ldimm64 instructions during extra pass
        - psi: Fix uaf issue when psi trigger is destroyed while being polled
        - perf/x86/intel: Add a quirk for the calculation of the number of counters on
          Alder Lake
        - drm/atomic: Add the crtc to affected crtc only if uapi.enable = true
        - KVM: SVM: Never reject emulation due to SMAP errata for !SEV guests
        - KVM: x86: Keep MSR_IA32_XSS unchanged for INIT
        - KVM: x86: Sync the states size with the XCR0/IA32_XSS at, any time
        - tty: Partially revert the removal of the Cyclades public API
        - usb: cdnsp: Fix segmentation fault in cdns_lost_power function
        - usb: dwc3: xilinx: Skip resets and USB3 register settings for USB2.0 mode
        - usb: dwc3: xilinx: Fix error handling when getting USB3 PHY
        - usb: typec: tcpci: don't touch CC line if it's Vconn source
        - usb: typec: tcpm: Do not disconnect when receiving VSAFE0V
        - mm, kasan: use compare-exchange operation to set KASAN page tag
        - PCI/sysfs: Find shadow ROM before static attribute initialization
        - x86/cpu: Add Xeon Icelake-D to list of CPUs that support PPIN
        - ARM: 9170/1: fix panic when kasan and kprobe are enabled
        - net: stmmac: dwmac-visconti: Fix bit definitions for ETHER_CLK_SEL
        - net: stmmac: dwmac-visconti: Fix clock configuration for RMII mode
        - octeontx2-af: cn10k: Do not enable RPM loopback for LPC interfaces
        - io_uring: fix bug in slow unregistering of nodes
        - ibmvnic: Allow extra failures before disabling
        - net/smc: Transitional solution for clcsock race issue
        - can: tcan4x5x: regmap: fix max register value
        - drm/msm/a6xx: Add missing suspend_count increment
        - sch_htb: Fail on unsupported parameters when offload is requested
        - Revert "drm/ast: Support 1600x900 with 108MHz PCLK"
        - irqchip/realtek-rtl: Map control data to virq
        - irqchip/realtek-rtl: Fix off-by-one in routing
        - perf/core: Fix cgroup event list management
        - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
        - psi: fix "defined but not used" warnings when CONFIG_PROC_FS=n
    
      * Impish update: upstream stable patchset 2022-02-24 (LP: #1962230)
        - KVM: VMX: switch blocked_vcpu_on_cpu_lock to raw spinlock
        - HID: uhid: Fix worker destroying device without any protection
        - HID: wacom: Avoid using stale array indicies to read contact count
        - f2fs: fix to do sanity check in is_alive()
        - nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed
          bind()
        - mtd: rawnand: gpmi: Add ERR007117 protection for nfc_apply_timings
        - mtd: rawnand: gpmi: Remove explicit default gpmi clock setting for i.MX6
        - mtd: Fixed breaking list in __mtd_del_partition.
        - mtd: rawnand: davinci: Don't calculate ECC when reading page
        - mtd: rawnand: davinci: Avoid duplicated page read
        - mtd: rawnand: davinci: Rewrite function description
        - x86/gpu: Reserve stolen memory for first integrated Intel GPU
        - tools/nolibc: x86-64: Fix startup code bug
        - tools/nolibc: i386: fix initial stack alignment
        - tools/nolibc: fix incorrect truncation of exit code
        - rtc: cmos: take rtc_lock while reading from CMOS
        - media: v4l2-ioctl.c: readbuffers depends on V4L2_CAP_READWRITE
        - media: flexcop-usb: fix control-message timeouts
        - media: mceusb: fix control-message timeouts
        - media: em28xx: fix control-message timeouts
        - media: cpia2: fix control-message timeouts
        - media: s2255: fix control-message timeouts
        - media: dib0700: fix undefined behavior in tuner shutdown
        - media: redrat3: fix control-message timeouts
        - media: pvrusb2: fix control-message timeouts
        - media: stk1160: fix control-message timeouts
        - media: cec-pin: fix interrupt en/disable handling
        - can: softing_cs: softingcs_probe(): fix memleak on registration failure
        - iio: adc: ti-adc081c: Partial revert of removal of ACPI IDs
        - lkdtm: Fix content of section containing lkdtm_rodata_do_nothing()
        - iommu/io-pgtable-arm-v7s: Add error handle for page table allocation failure
        - gpu: host1x: Add back arm_iommu_detach_device()
        - dma_fence_array: Fix PENDING_ERROR leak in dma_fence_array_signaled()
        - PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller
        - mm_zone: add function to check if managed dma zone exists
        - dma/pool: create dma atomic pool only if dma zone has managed pages
        - mm/page_alloc.c: do not warn allocation failure on zone DMA if no managed
          pages
        - shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode
        - drm/ttm: Put BO in its memory manager's lru list
        - Bluetooth: L2CAP: Fix not initializing sk_peer_pid
        - drm/bridge: display-connector: fix an uninitialized pointer in probe()
        - drm: fix null-ptr-deref in drm_dev_init_release()
        - drm/panel: kingdisplay-kd097d04: Delete panel on attach() failure
        - drm/panel: innolux-p079zca: Delete panel on attach() failure
        - drm/rockchip: dsi: Fix unbalanced clock on probe error
        - drm/rockchip: dsi: Hold pm-runtime across bind/unbind
        - drm/rockchip: dsi: Disable PLL clock on bind error
        - drm/rockchip: dsi: Reconfigure hardware on resume()
        - Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails
        - clk: bcm-2835: Pick the closest clock rate
        - clk: bcm-2835: Remove rounding up the dividers
        - drm/vc4: hdmi: Set a default HSM rate
        - wcn36xx: ensure pairing of init_scan/finish_scan and start_scan/end_scan
        - wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND
        - wcn36xx: Fix DMA channel enable/disable cycle
        - wcn36xx: Release DMA channel descriptor allocations
        - wcn36xx: Put DXE block into reset before freeing memory
        - wcn36xx: populate band before determining rate on RX
        - wcn36xx: fix RX BD rate mapping for 5GHz legacy rates
        - ath11k: Send PPDU_STATS_CFG with proper pdev mask to firmware
        - mtd: hyperbus: rpc-if: Check return value of rpcif_sw_init()
        - media: videobuf2: Fix the size printk format
        - media: atomisp: add missing media_device_cleanup() in
          atomisp_unregister_entities()
        - media: atomisp: fix punit_ddr_dvfs_enable() argument for mrfld_power up case
        - media: atomisp: fix inverted logic in buffers_needed()
        - media: atomisp: do not use err var when checking port validity for ISP2400
        - media: atomisp: fix inverted error check for
          ia_css_mipi_is_source_port_valid()
        - media: atomisp: fix ifdefs in sh_css.c
        - media: staging: media: atomisp: pci: Balance braces around conditional
          statements in file atomisp_cmd.c
        - media: atomisp: add NULL check for asd obtained from atomisp_video_pipe
        - media: atomisp: fix enum formats logic
        - media: atomisp: fix uninitialized bug in gmin_get_pmic_id_and_addr()
        - media: aspeed: fix mode-detect always time out at 2nd run
        - media: em28xx: fix memory leak in em28xx_init_dev
        - media: aspeed: Update signal status immediately to ensure sane hw state
        - arm64: dts: amlogic: meson-g12: Fix GPU operating point table node name
        - arm64: dts: amlogic: Fix SPI NOR flash node name for ODROID N2/N2+
        - arm64: dts: meson-gxbb-wetek: fix HDMI in early boot
        - arm64: dts: meson-gxbb-wetek: fix missing GPIO binding
        - fs: dlm: use sk->sk_socket instead of con->sock
        - fs: dlm: don't call kernel_getpeername() in error_report()
        - memory: renesas-rpc-if: Return error in case devm_ioremap_resource() fails
        - Bluetooth: stop proccessing malicious adv data
        - ath11k: Fix ETSI regd with weather radar overlap
        - ath11k: clear the keys properly via DISABLE_KEY
        - ath11k: reset RSN/WPA present state for open BSS
        - tee: fix put order in teedev_close_context()
        - fs: dlm: fix build with CONFIG_IPV6 disabled
        - drm/vboxvideo: fix a NULL vs IS_ERR() check
        - arm64: dts: renesas: cat875: Add rx/tx delays
        - media: dmxdev: fix UAF when dvb_register_device() fails
        - crypto: qce - fix uaf on qce_ahash_register_one
        - crypto: qce - fix uaf on qce_skcipher_register_one
        - mtd: hyperbus: rpc-if: fix bug in rpcif_hb_remove
        - ARM: dts: stm32: fix dtbs_check warning on ili9341 dts binding on stm32f429
          disco
        - crypto: qat - remove unnecessary collision prevention step in PFVF
        - crypto: qat - make pfvf send message direction agnostic
        - crypto: qat - fix undetected PFVF timeout in ACK loop
        - ath11k: Use host CE parameters for CE interrupts configuration
        - arm64: dts: ti: k3-j721e: correct cache-sets info
        - tty: serial: atmel: Check return code of dmaengine_submit()
        - tty: serial: atmel: Call dma_async_issue_pending()
        - mfd: atmel-flexcom: Remove #ifdef CONFIG_PM_SLEEP
        - mfd: atmel-flexcom: Use .resume_noirq
        - media: rcar-csi2: Correct the selection of hsfreqrange
        - media: imx-pxp: Initialize the spinlock prior to using it
        - media: si470x-i2c: fix possible memory leak in si470x_i2c_probe()
        - media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released
        - media: coda: fix CODA960 JPEG encoder buffer overflow
        - media: venus: core: Fix a potential NULL pointer dereference in an error
          handling path
        - media: venus: core: Fix a resource leak in the error handling path of
          'venus_probe()'
        - thermal/drivers/imx: Implement runtime PM support
        - netfilter: bridge: add support for pppoe filtering
        - arm64: dts: qcom: msm8916: fix MMC controller aliases
        - cgroup: Trace event cgroup id fields should be u64
        - ACPI: EC: Rework flushing of EC work while suspended to idle
        - thermal/drivers/imx8mm: Enable ADC when enabling monitor
        - drm/amdgpu: Fix a NULL pointer dereference in
          amdgpu_connector_lcd_native_mode()
        - drm/radeon/radeon_kms: Fix a NULL pointer dereference in
          radeon_driver_open_kms()
        - arm64: dts: ti: k3-j7200: Fix the L2 cache sets
        - arm64: dts: ti: k3-j721e: Fix the L2 cache sets
        - arm64: dts: ti: k3-j7200: Correct the d-cache-sets info
        - tty: serial: uartlite: allow 64 bit address
        - serial: amba-pl011: do not request memory region twice
        - floppy: Fix hang in watchdog when disk is ejected
        - staging: rtl8192e: return error code from rtllib_softmac_init()
        - staging: rtl8192e: rtllib_module: fix error handle case in alloc_rtllib()
        - Bluetooth: btmtksdio: fix resume failure
        - sched/fair: Fix detection of per-CPU kthreads waking a task
        - sched/fair: Fix per-CPU kthread and wakee stacking for asym CPU capacity
        - bpf: Adjust BTF log size limit.
        - bpf: Disallow BPF_LOG_KERNEL log level for bpf(BPF_BTF_LOAD)
        - bpf: Remove config check to enable bpf support for branch records
        - arm64: clear_page() shouldn't use DC ZVA when DCZID_EL0.DZP == 1
        - media: dib8000: Fix a memleak in dib8000_init()
        - media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach()
        - media: si2157: Fix "warm" tuner state detection
        - wireless: iwlwifi: Fix a double free in iwl_txq_dyn_alloc_dma
        - sched/rt: Try to restart rt period timer when rt runtime exceeded
        - drm/msm/dp: displayPort driver need algorithm rational
        - rcu/exp: Mark current CPU as exp-QS in IPI loop second pass
        - mwifiex: Fix possible ABBA deadlock
        - xfrm: fix a small bug in xfrm_sa_len()
        - x86/uaccess: Move variable into switch case statement
        - selftests: clone3: clone3: add case CLONE3_ARGS_NO_TEST
        - selftests: harness: avoid false negatives if test has no ASSERTs
        - crypto: stm32/cryp - fix CTR counter carry
        - crypto: stm32/cryp - fix xts and race condition in crypto_engine requests
        - crypto: stm32/cryp - check early input data
        - crypto: stm32/cryp - fix double pm exit
        - crypto: stm32/cryp - fix lrw chaining mode
        - crypto: stm32/cryp - fix bugs and crash in tests
        - crypto: stm32 - Revert broken pm_runtime_resume_and_get changes
        - ath11k: Fix deleting uninitialized kernel timer during fragment cache flush
        - ARM: dts: gemini: NAS4220-B: fis-index-block with 128 KiB sectors
        - media: dw2102: Fix use after free
        - media: msi001: fix possible null-ptr-deref in msi001_probe()
        - media: coda/imx-vdoa: Handle dma_set_coherent_mask error codes
        - ath11k: Fix a NULL pointer dereference in ath11k_mac_op_hw_scan()
        - arm64: dts: qcom: c630: Fix soundcard setup
        - arm64: dts: qcom: ipq6018: Fix gpio-ranges property
        - drm/msm/dpu: fix safe status debugfs file
        - drm/bridge: ti-sn65dsi86: Set max register for regmap
        - drm/tegra: vic: Fix DMA API misuse
        - media: hantro: Fix probe func error path
        - xfrm: interface with if_id 0 should return error
        - xfrm: state and policy should fail if XFRMA_IF_ID 0
        - ARM: 9159/1: decompressor: Avoid UNPREDICTABLE NOP encoding
        - usb: ftdi-elan: fix memory leak on device disconnect
        - arm64: dts: marvell: cn9130: add GPIO and SPI aliases
        - arm64: dts: marvell: cn9130: enable CP0 GPIO controllers
        - ARM: dts: armada-38x: Add generic compatible to UART nodes
        - iwlwifi: mvm: fix 32-bit build in FTM
        - iwlwifi: mvm: test roc running status bits before removing the sta
        - mmc: meson-mx-sdhc: add IRQ check
        - mmc: meson-mx-sdio: add IRQ check
        - selinux: fix potential memleak in selinux_add_opt()
        - um: fix ndelay/udelay defines
        - um: virtio_uml: Fix time-travel external time propagation
        - Bluetooth: L2CAP: Fix using wrong mode
        - bpftool: Enable line buffering for stdout
        - backlight: qcom-wled: Validate enabled string indices in DT
        - backlight: qcom-wled: Pass number of elements to read to read_u32_array
        - backlight: qcom-wled: Fix off-by-one maximum with default num_strings
        - backlight: qcom-wled: Override default length with qcom,enabled-strings
        - backlight: qcom-wled: Use cpu_to_le16 macro to perform conversion
        - backlight: qcom-wled: Respect enabled-strings in set_brightness
        - software node: fix wrong node passed to find nargs_prop
        - Bluetooth: hci_qca: Stop IBS timer during BT OFF
        - x86/boot/compressed: Move CLANG_FLAGS to beginning of KBUILD_CFLAGS
        - hwmon: (mr75203) fix wrong power-up delay value
        - x86/mce/inject: Avoid out-of-bounds write when setting flags
        - ACPI: scan: Create platform device for BCM4752 and LNV4752 ACPI nodes
        - pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in
          __nonstatic_find_io_region()
        - pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in
          nonstatic_find_mem_region()
        - power: reset: mt6397: Check for null res pointer
        - netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check()
        - bpf: Fix SO_RCVBUF/SO_SNDBUF handling in _bpf_setsockopt().
        - netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone
        - ppp: ensure minimum packet size in ppp_write()
        - rocker: fix a sleeping in atomic bug
        - staging: greybus: audio: Check null pointer
        - fsl/fman: Check for null pointer after calling devm_ioremap
        - Bluetooth: hci_bcm: Check for error irq
        - Bluetooth: hci_qca: Fix NULL vs IS_ERR_OR_NULL check in qca_serdev_probe
        - usb: dwc3: qcom: Fix NULL vs IS_ERR checking in dwc3_qcom_probe
        - HID: hid-uclogic-params: Invalid parameter check in uclogic_params_init
        - HID: hid-uclogic-params: Invalid parameter check in
          uclogic_params_get_str_desc
        - HID: hid-uclogic-params: Invalid parameter check in
          uclogic_params_huion_init
        - HID: hid-uclogic-params: Invalid parameter check in
          uclogic_params_frame_init_v1_buttonpad
        - debugfs: lockdown: Allow reading debugfs files that are not world readable
        - net/mlx5e: Fix page DMA map/unmap attributes
        - net/mlx5e: Don't block routes with nexthop objects in SW
        - Revert "net/mlx5e: Block offload of outer header csum for UDP tunnels"
        - net/mlx5: Set command entry semaphore up once got index free
        - lib/mpi: Add the return value check of kcalloc()
        - Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt()
        - spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe
        - ax25: uninitialized variable in ax25_setsockopt()
        - netrom: fix api breakage in nr_setsockopt()
        - regmap: Call regmap_debugfs_exit() prior to _init()
        - can: mcp251xfd: add missing newline to printed strings
        - tpm: add request_locality before write TPM_INT_ENABLE
        - tpm_tis: Fix an error handling path in 'tpm_tis_core_init()'
        - can: softing: softing_startstop(): fix set but not used variable warning
        - can: xilinx_can: xcan_probe(): check for error irq
        - pcmcia: fix setting of kthread task states
        - iwlwifi: mvm: Use div_s64 instead of do_div in iwl_mvm_ftm_rtt_smoothing()
        - net: mcs7830: handle usb read errors properly
        - ext4: avoid trim error on fs with small groups
        - ALSA: jack: Add missing rwsem around snd_ctl_remove() calls
        - ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls
        - ALSA: hda: Add missing rwsem around snd_ctl_remove() calls
        - RDMA/bnxt_re: Scan the whole bitmap when checking if "disabling RCFW with
          pending cmd-bit"
        - RDMA/hns: Validate the pkey index
        - scsi: pm80xx: Update WARN_ON check in pm8001_mpi_build_cmd()
        - clk: imx8mn: Fix imx8mn_clko1_sels
        - powerpc/prom_init: Fix improper check of prom_getprop()
        - ASoC: uniphier: drop selecting non-existing SND_SOC_UNIPHIER_AIO_DMA
        - dt-bindings: thermal: Fix definition of cooling-maps contribution property
        - powerpc/perf: Fix PMU callbacks to clear pending PMI before resetting an
          overflown PMC
        - powerpc/32s: Fix shift-out-of-bounds in KASAN init
        - clocksource: Reduce clocksource-skew threshold
        - clocksource: Avoid accidental unstable marking of clocksources
        - ALSA: oss: fix compile error when OSS_DEBUG is enabled
        - ALSA: usb-audio: Drop superfluous '0' in Presonus Studio 1810c's ID
        - char/mwave: Adjust io port register size
        - binder: fix handling of error during copy
        - openrisc: Add clone3 ABI wrapper
        - iommu/io-pgtable-arm: Fix table descriptor paddr formatting
        - scsi: ufs: Fix race conditions related to driver data
        - RDMA/qedr: Fix reporting max_{send/recv}_wr attrs
        - PCI/MSI: Fix pci_irq_vector()/pci_irq_get_affinity()
        - powerpc/powermac: Add additional missing lockdep_register_key()
        - RDMA/core: Let ib_find_gid() continue search even after empty entry
        - RDMA/cma: Let cma_resolve_ib_dev() continue search even after empty entry
        - ASoC: rt5663: Handle device_property_read_u32_array error codes
        - of: unittest: fix warning on PowerPC frame size warning
        - of: unittest: 64 bit dma address test requires arch support
        - clk: stm32: Fix ltdc's clock turn off by clk_disable_unused() after system
          enter shell
        - mips: add SYS_HAS_CPU_MIPS64_R5 config for MIPS Release 5 support
        - mips: fix Kconfig reference to PHYS_ADDR_T_64BIT
        - dmaengine: pxa/mmp: stop referencing config->slave_id
        - iommu/amd: Remove iommu_init_ga()
        - iommu/amd: Restore GA log/tail pointer on host resume
        - ASoC: Intel: catpt: Test dmaengine_submit() result before moving on
        - iommu/iova: Fix race between FQ timeout and teardown
        - scsi: block: pm: Always set request queue runtime active in
          blk_post_runtime_resume()
        - phy: uniphier-usb3ss: fix unintended writing zeros to PHY register
        - ASoC: samsung: idma: Check of ioremap return value
        - misc: lattice-ecp3-config: Fix task hung when firmware load failed
        - arm64: tegra: Remove non existent Tegra194 reset
        - mips: lantiq: add support for clk_set_parent()
        - mips: bcm63xx: add support for clk_set_parent()
        - powerpc/xive: Add missing null check after calling kmalloc
        - ASoC: fsl_mqs: fix MODULE_ALIAS
        - RDMA/cxgb4: Set queue pair state when being queried
        - ASoC: fsl_asrc: refine the check of available clock divider
        - clk: bm1880: remove kfrees on static allocations
        - of: base: Fix phandle argument length mismatch error message
        - ARM: dts: omap3-n900: Fix lp5523 for multi color
        - Bluetooth: Fix debugfs entry leak in hci_register_dev()
        - fs: dlm: filter user dlm messages for kernel locks
        - drm/lima: fix warning when CONFIG_DEBUG_SG=y & CONFIG_DMA_API_DEBUG=y
        - selftests/bpf: Fix bpf_object leak in skb_ctx selftest
        - ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply
        - drm/bridge: dw-hdmi: handle ELD when DRM_BRIDGE_ATTACH_NO_CONNECTOR
        - drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR
        - media: atomisp: fix try_fmt logic
        - media: atomisp: set per-device's default mode
        - media: atomisp-ov2680: Fix ov2680_set_fmt() clobbering the exposure
        - ARM: shmobile: rcar-gen2: Add missing of_node_put()
        - batman-adv: allow netlink usage in unprivileged containers
        - media: atomisp: handle errors at sh_css_create_isp_params()
        - ath11k: Fix crash caused by uninitialized TX ring
        - usb: gadget: f_fs: Use stream_open() for endpoint files
        - drm: panel-orientation-quirks: Add quirk for the Lenovo Yoga Book X91F/L
        - HID: apple: Do not reset quirks when the Fn key is not found
        - media: b2c2: Add missing check in flexcop_pci_isr:
        - EDAC/synopsys: Use the quirk for version instead of ddr version
        - ARM: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART
        - drm/amd/display: check top_pipe_to_program pointer
        - drm/amdgpu/display: set vblank_disable_immediate for DC
        - soc: ti: pruss: fix referenced node in error message
        - mlxsw: pci: Add shutdown method in PCI driver
        - drm/bridge: megachips: Ensure both bridges are probed before registration
        - tty: serial: imx: disable UCR4_OREN in .stop_rx() instead of .shutdown()
        - gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use
        - HSI: core: Fix return freed object in hsi_new_client
        - crypto: jitter - consider 32 LSB for APT
        - mwifiex: Fix skb_over_panic in mwifiex_usb_recv()
        - rsi: Fix use-after-free in rsi_rx_done_handler()
        - rsi: Fix out-of-bounds read in rsi_read_pkt()
        - ath11k: Avoid NULL ptr access during mgmt tx cleanup
        - media: venus: avoid calling core_clk_setrate() concurrently during
          concurrent video sessions
        - ACPI / x86: Drop PWM2 device on Lenovo Yoga Book from always present table
        - ACPI: Change acpi_device_always_present() into acpi_device_override_status()
        - ACPI / x86: Allow specifying acpi_device_override_status() quirks by path
        - ACPI / x86: Add not-present quirk for the PCI0.SDHB.BRC1 device on the GPD
          win
        - arm64: dts: ti: j7200-main: Fix 'dtbs_check' serdes_ln_ctrl node
        - usb: uhci: add aspeed ast2600 uhci support
        - floppy: Add max size check for user space request
        - x86/mm: Flush global TLB when switching to trampoline page-table
        - drm: rcar-du: Fix CRTC timings when CMM is used
        - media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds.
        - media: rcar-vin: Update format alignment constraints
        - media: saa7146: hexium_orion: Fix a NULL pointer dereference in
          hexium_attach()
        - media: m920x: don't use stack on USB reads
        - thunderbolt: Runtime PM activate both ends of the device link
        - iwlwifi: mvm: synchronize with FW after multicast commands
        - iwlwifi: mvm: avoid clearing a just saved session protection id
        - ath11k: avoid deadlock by change ieee80211_queue_work for regd_update_work
        - ath10k: Fix tx hanging
        - net-sysfs: update the queue counts in the unregistration path
        - net: phy: prefer 1000baseT over 1000baseKX
        - gpio: aspeed: Convert aspeed_gpio.lock to raw_spinlock
        - selftests/ftrace: make kprobe profile testcase description unique
        - ath11k: Avoid false DEADLOCK warning reported by lockdep
        - x86/mce: Allow instrumentation during task work queueing
        - x86/mce: Mark mce_panic() noinstr
        - x86/mce: Mark mce_end() noinstr
        - x86/mce: Mark mce_read_aux() noinstr
        - net: bonding: debug: avoid printing debug logs when bond is not notifying
          peers
        - bpf: Do not WARN in bpf_warn_invalid_xdp_action()
        - HID: quirks: Allow inverting the absolute X/Y values
        - media: igorplugusb: receiver overflow should be reported
        - media: saa7146: hexium_gemini: Fix a NULL pointer dereference in
          hexium_attach()
        - mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO
        - audit: ensure userspace is penalized the same as the kernel when under
          pressure
        - arm64: dts: ls1028a-qds: move rtc node to the correct i2c bus
        - arm64: tegra: Adjust length of CCPLEX cluster MMIO region
        - PM: runtime: Add safety net to supplier device release
        - cpufreq: Fix initialization of min and max frequency QoS requests
        - usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0
        - ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
        - rtw88: 8822c: update rx settings to prevent potential hw deadlock
        - PM: AVS: qcom-cpr: Use div64_ul instead of do_div
        - iwlwifi: fix leaks/bad data after failed firmware load
        - iwlwifi: remove module loading failure message
        - iwlwifi: mvm: Fix calculation of frame length
        - iwlwifi: pcie: make sure prph_info is set when treating wakeup IRQ
        - um: registers: Rename function names to avoid conflicts and build problems
        - ath11k: Fix napi related hang
        - Bluetooth: vhci: Set HCI_QUIRK_VALID_LE_STATES
        - xfrm: rate limit SA mapping change message to user space
        - drm/etnaviv: consider completed fence seqno in hang check
        - jffs2: GC deadlock reading a page that is used in jffs2_write_begin()
        - ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions
        - ACPICA: Utilities: Avoid deleting the same object twice in a row
        - ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R()
        - ACPICA: Fix wrong interpretation of PCC address
        - ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5
        - drm/amdgpu: fixup bad vram size on gmc v8
        - amdgpu/pm: Make sysfs pm attributes as read-only for VFs
        - ACPI: battery: Add the ThinkPad "Not Charging" quirk
        - btrfs: remove BUG_ON() in find_parent_nodes()
        - btrfs: remove BUG_ON(!eie) in find_parent_nodes
        - net: mdio: Demote probed message to debug print
        - mac80211: allow non-standard VHT MCS-10/11
        - dm btree: add a defensive bounds check to insert_at()
        - dm space map common: add bounds check to sm_ll_lookup_bitmap()
        - mlxsw: pci: Avoid flow control for EMAD packets
        - net: phy: marvell: configure RGMII delays for 88E1118
        - net: gemini: allow any RGMII interface mode
        - regulator: qcom_smd: Align probe function with rpmh-regulator
        - serial: pl010: Drop CR register reset on set_termios
        - serial: core: Keep mctrl register state and cached copy in sync
        - random: do not throw away excess input to crng_fast_load
        - parisc: Avoid calling faulthandler_disabled() twice
        - x86/kbuild: Enable CONFIG_KALLSYMS_ALL=y in the defconfigs
        - powerpc/6xx: add missing of_node_put
        - powerpc/powernv: add missing of_node_put
        - powerpc/cell: add missing of_node_put
        - powerpc/btext: add missing of_node_put
        - powerpc/watchdog: Fix missed watchdog reset due to memory ordering race
        - i2c: i801: Don't silently correct invalid transfer size
        - powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING
        - i2c: mpc: Correct I2C reset procedure
        - clk: meson: gxbb: Fix the SDM_EN bit for MPLL0 on GXBB
        - powerpc/powermac: Add missing lockdep_register_key()
        - KVM: PPC: Book3S: Suppress warnings when allocating too big memory slots
        - KVM: PPC: Book3S: Suppress failed alloc warning in H_COPY_TOFROM_GUEST
        - w1: Misuse of get_user()/put_user() reported by sparse
        - nvmem: core: set size for sysfs bin file
        - dm: fix alloc_dax error handling in alloc_dev
        - scsi: lpfc: Trigger SLI4 firmware dump before doing driver cleanup
        - ALSA: seq: Set upper limit of processed events
        - MIPS: Loongson64: Use three arguments for slti
        - powerpc/40x: Map 32Mbytes of memory at startup
        - selftests/powerpc/spectre_v2: Return skip code when miss_percent is high
        - powerpc: handle kdump appropriately with crash_kexec_post_notifiers option
        - powerpc/fadump: Fix inaccurate CPU state info in vmcore generated with panic
        - udf: Fix error handling in udf_new_inode()
        - MIPS: OCTEON: add put_device() after of_find_device_by_node()
        - irqchip/gic-v4: Disable redistributors' view of the VPE table at boot time
        - i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters
        - MIPS: Octeon: Fix build errors using clang
        - scsi: sr: Don't use GFP_DMA
        - ASoC: mediatek: mt8173: fix device_node leak
        - ASoC: mediatek: mt8183: fix device_node leak
        - phy: mediatek: Fix missing check in mtk_mipi_tx_probe
        - rpmsg: core: Clean up resources on announce_create failure.
        - crypto: omap-aes - Fix broken pm_runtime_and_get() usage
        - crypto: stm32/crc32 - Fix kernel BUG triggered in probe()
        - crypto: caam - replace this_cpu_ptr with raw_cpu_ptr
        - ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers
        - tpm: fix NPE on probe for missing device
        - spi: uniphier: Fix a bug that doesn't point to private data correctly
        - xen/gntdev: fix unmap notification order
        - fuse: Pass correct lend value to filemap_write_and_wait_range()
        - serial: Fix incorrect rs485 polarity on uart open
        - cputime, cpuacct: Include guest time in user time in cpuacct.stat
        - tracing/kprobes: 'nmissed' not showed correctly for kretprobe
        - iwlwifi: mvm: Increase the scan timeout guard to 30 seconds
        - s390/mm: fix 2KB pgtable release race
        - device property: Fix fwnode_graph_devcon_match() fwnode leak
        - drm/etnaviv: limit submit sizes
        - drm/nouveau/kms/nv04: use vzalloc for nv04_display
        - drm/bridge: analogix_dp: Make PSR-exit block less
        - parisc: Fix lpa and lpa_user defines
        - powerpc/64s/radix: Fix huge vmap false positive
        - PCI: xgene: Fix IB window setup
        - PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors
        - PCI: pci-bridge-emul: Make expansion ROM Base Address register read-only
        - PCI: pci-bridge-emul: Properly mark reserved PCIe bits in PCI config space
        - PCI: pci-bridge-emul: Fix definitions of reserved bits
        - PCI: pci-bridge-emul: Correctly set PCIe capabilities
        - PCI: pci-bridge-emul: Set PCI_STATUS_CAP_LIST for PCIe device
        - xfrm: fix policy lookup for ipv6 gre packets
        - btrfs: fix deadlock between quota enable and other quota operations
        - btrfs: check the root node for uptodate before returning it
        - btrfs: respect the max size in the header when activating swap file
        - ext4: make sure to reset inode lockdep class when quota enabling fails
        - ext4: make sure quota gets properly shutdown on error
        - ext4: fix a possible ABBA deadlock due to busy PA
        - ext4: initialize err_blk before calling __ext4_get_inode_loc
        - ext4: fix fast commit may miss tracking range for FALLOC_FL_ZERO_RANGE
        - ext4: set csum seed in tmp inode while migrating to extents
        - ext4: Fix BUG_ON in ext4_bread when write quota data
        - ext4: use ext4_ext_remove_space() for fast commit replay delete range
        - ext4: fast commit may miss tracking unwritten range during ftruncate
        - ext4: destroy ext4_fc_dentry_cachep kmemcache on module removal
        - ext4: fix null-ptr-deref in '__ext4_journal_ensure_credits'
        - ext4: don't use the orphan list when migrating an inode
        - drm/radeon: fix error handling in radeon_driver_open_kms
        - of: base: Improve argument length mismatch error
        - firmware: Update Kconfig help text for Google firmware
        - can: mcp251xfd: mcp251xfd_tef_obj_read(): fix typo in error message
        - media: rcar-csi2: Optimize the selection PHTW register
        - media: correct MEDIA_TEST_SUPPORT help text
        - Documentation: dmaengine: Correctly describe dmatest with channel unset
        - Documentation: ACPI: Fix data node reference documentation
        - Documentation: refer to config RANDOMIZE_BASE for kernel address-space
          randomization
        - Documentation: fix firewire.rst ABI file path error
        - Bluetooth: hci_sync: Fix not setting adv set duration
        - scsi: core: Show SCMD_LAST in text form
        - dmaengine: uniphier-xdmac: Fix type of address variables
        - RDMA/hns: Modify the mapping attribute of doorbell to device
        - RDMA/rxe: Fix a typo in opcode name
        - dmaengine: stm32-mdma: fix STM32_MDMA_CTBR_TSEL_MASK
        - Revert "net/mlx5: Add retry mechanism to the command entry index allocation"
        - powerpc/cell: Fix clang -Wimplicit-fallthrough warning
        - powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses
        - block: Fix fsync always failed if once failed
        - bpftool: Remove inclusion of utilities.mak from Makefiles
        - xdp: check prog type before updating BPF link
        - perf evsel: Override attr->sample_period for non-libpfm4 events
        - ipv4: update fib_info_cnt under spinlock protection
        - ipv4: avoid quadratic behavior in netns dismantle
        - net/fsl: xgmac_mdio: Add workaround for erratum A-009885
        - net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module
        - parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries
        - f2fs: compress: fix potential deadlock of compress file
        - f2fs: fix to reserve space for IO align feature
        - af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress
        - clk: Emit a stern warning with writable debugfs enabled
        - clk: si5341: Fix clock HW provider cleanup
        - net/smc: Fix hung_task when removing SMC-R devices
        - net: axienet: increase reset timeout
        - net: axienet: Wait for PhyRstCmplt after core reset
        - net: axienet: reset core on initialization prior to MDIO access
        - net: axienet: add missing memory barriers
        - net: axienet: limit minimum TX ring size
        - net: axienet: Fix TX ring slot available check
        - net: axienet: fix number of TX ring slots for available check
        - net: axienet: fix for TX busy handling
        - net: axienet: increase default TX ring size to 128
        - HID: vivaldi: fix handling devices not using numbered reports
        - rtc: pxa: fix null pointer dereference
        - vdpa/mlx5: Fix wrong configuration of virtio_version_1_0
        - virtio_ring: mark ring unused on error
        - taskstats: Cleanup the use of task->exit_code
        - inet: frags: annotate races around fqdir->dead and fqdir->high_thresh
        - netns: add schedule point in ops_exit_list()
        - xfrm: Don't accidentally set RTO_ONLINK in decode_session4()
        - gre: Don't accidentally set RTO_ONLINK in gre_fill_metadata_dst()
        - libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route()
        - perf script: Fix hex dump character output
        - dmaengine: at_xdmac: Don't start transactions at tx_submit level
        - dmaengine: at_xdmac: Start transfer for cyclic channels in issue_pending
        - dmaengine: at_xdmac: Print debug message after realeasing the lock
        - dmaengine: at_xdmac: Fix concurrency over xfers_list
        - dmaengine: at_xdmac: Fix lld view setting
        - dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
        - perf probe: Fix ppc64 'perf probe add events failed' case
        - devlink: Remove misleading internal_flags from health reporter dump
        - arm64: dts: qcom: msm8996: drop not documented adreno properties
        - net: bonding: fix bond_xmit_broadcast return value error bug
        - net_sched: restore "mpu xxx" handling
        - bcmgenet: add WOL IRQ check
        - net: ethernet: mtk_eth_soc: fix error checking in mtk_mac_config()
        - net: sfp: fix high power modules without diagnostic monitoring
        - net: mscc: ocelot: fix using match before it is set
        - dt-bindings: display: meson-dw-hdmi: add missing sound-name-prefix property
        - dt-bindings: display: meson-vpu: Add missing amlogic,canvas property
        - dt-bindings: watchdog: Require samsung,syscon-phandle for Exynos7
        - scripts/dtc: dtx_diff: remove broken example from help text
        - lib82596: Fix IRQ check in sni_82596_probe
        - mm/hmm.c: allow VM_MIXEDMAP to work with hmm_range_fault
        - lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test
        - mtd: nand: bbt: Fix corner case in bad block table handling
        - ath10k: Fix the MTU size on QCA9377 SDIO
        - scripts: sphinx-pre-install: add required ctex dependency
        - scripts: sphinx-pre-install: Fix ctex support on Debian
        - KVM: x86/mmu: Fix write-protection of PTs mapped by the TDP MMU
        - HID: Ignore battery for Elan touchscreen on HP Envy X360 15t-dr100
        - f2fs: fix to do sanity check on inode type during garbage collection
        - mtd: rawnand: Export nand_read_page_hwecc_oob_first()
        - mtd: rawnand: ingenic: JZ4740 needs 'oob_first' read page function
        - riscv: Get rid of MAXPHYSMEM configs
        - RISC-V: Use common riscv_cpuid_to_hartid_mask() for both SMP=y and SMP=n
        - riscv: try to allocate crashkern region from 32bit addressible memory
        - riscv: Don't use va_pa_offset on kdump
        - riscv: use hart id instead of cpu id on machine_kexec
        - crypto: x86/aesni - don't require alignment of data
        - net: phy: marvell: add Marvell specific PHY loopback
        - media: cec: fix a deadlock situation
        - media: ov8865: Disable only enabled regulators on error path
        - mei: hbm: fix client dma reply status
        - iio: trigger: Fix a scheduling whilst atomic issue seen on tsc2046
        - bus: mhi: pci_generic: Graceful shutdown on freeze
        - bus: mhi: core: Fix reading wake_capable channel configuration
        - arm64: errata: Fix exec handling in erratum 1418040 workaround
        - drm/tegra: Add back arm_iommu_detach_device()
        - virtio/virtio_mem: handle a possible NULL as a memcpy parameter
        - Bluetooth: virtio_bt: fix memory leak in virtbt_rx_handle()
        - drm/vc4: crtc: Make sure the HDMI controller is powered when disabling
        - libbpf: Free up resources used by inner map definition
        - bpftool: Fix memory leak in prog_dump()
        - arm64: dts: qcom: sc7280: Fix incorrect clock name
        - libbpf: Fix glob_syms memory leak in bpf_linker
        - libbpf: Fix using invalidated memory in bpf_linker
        - bfq: Do not let waker requests skip proper accounting
        - media: i2c: imx274: fix s_frame_interval runtime resume not requested
        - media: i2c: Re-order runtime pm initialisation
        - media: i2c: ov8865: Fix lockdep error
        - net: stmmac: Add platform level debug register dump feature
        - drm/vmwgfx: Remove the deprecated lower mem limit
        - crypto: caam - save caam memory to support crypto engine retry mechanism.
        - arm64: dts: ti: k3-am642: Fix the L2 cache sets
        - bpf: Fix the test_task_vma selftest to support output shorter than 1 kB
        - Bluetooth: refactor set_exp_feature with a feature table
        - Bluetooth: MGMT: Use hci_dev_test_and_{set,clear}_flag
        - drm/amd/display: Fix bug in debugfs crc_win_update entry
        - wcn36xx: Fix max channels retrieval
        - perf/arm-cmn: Fix CPU hotplug unregistration
        - net: dsa: hellcreek: Fix insertion of static FDB entries
        - net: dsa: hellcreek: Add STP forwarding rule
        - net: dsa: hellcreek: Allow PTP P2P measurements on blocked ports
        - net: dsa: hellcreek: Add missing PTP via UDP rules
        - mt76: mt7921: drop offload_flags overwritten
        - iwlwifi: mvm: perform 6GHz passive scan after suspend
        - iwlwifi: mvm: set protected flag only for NDP ranging
        - crypto: octeontx2 - prevent underflow in get_cores_bmap()
        - regulator: qcom-labibb: OCP interrupts are not a failure while disabled
        - io_uring: remove double poll on poll update
        - serial: 8250_bcm7271: Propagate error codes from brcmuart_probe()
        - net: ethernet: mtk_eth_soc: fix return values and refactor MDIO ops
        - net: dsa: fix incorrect function pointer check for MRP ring roles
        - net/smc: Reset conn->lgr when link group registration fails
        - usb: dwc2: do not gate off the hardware if it does not support clock gating
        - serial: liteuart: fix MODULE_ALIAS
        - serial: stm32: move tx dma terminate DMA to shutdown
        - x86, sched: Fix undefined reference to init_freq_invariance_cppc() build
          error
        - net/mlx5e: Fix wrong usage of fib_info_nh when routes with nexthop objects
          are used
        - Revert "net/mlx5e: Block offload of outer header csum for GRE tunnel"
        - net/mlx5e: Fix matching on modified inner ip_ecn bits
        - net/mlx5: Fix access to sf_dev_table on allocation failure
        - net/mlx5e: Sync VXLAN udp ports during uplink representor profile change
        - net: mscc: ocelot: fix incorrect balancing with down LAG ports
        - net/sched: flow_dissector: Fix matching on zone id for invalid conns
        - net: openvswitch: Fix matching zone id for invalid conns arriving from tc
        - net: openvswitch: Fix ct_state nat flags for conns arriving from tc
        - bnxt_en: Refactor coredump functions
        - RDMA/rtrs-clt: Fix the initial value of min_latency
        - ALSA: hda: Make proper use of timecounter
        - binder: avoid potential data leakage when copying txn
        - scsi: core: Fix scsi_device_max_queue_depth()
        - iommu/amd: X2apic mode: re-enable after resume
        - iommu/amd: X2apic mode: setup the INTX registers on mask/unmask
        - iommu/amd: X2apic mode: mask/unmask interrupts on suspend/resume
        - iommu/amd: Remove useless irq affinity notifier
        - phy: cadence: Sierra: Fix to get correct parent for mux clocks
        - ALSA: hda/cs8409: Increase delay during jack detection
        - ALSA: hda/cs8409: Fix Jack detection after resume
        - clk: qcom: gcc-sc7280: Mark gcc_cfg_noc_lpass_clk always enabled
        - of/fdt: Don't worry about non-memory region overlap for no-map
        - drm/panel: Delete panel on mipi_dsi_attach() failure
        - selftests/bpf: Fix memory leaks in btf_type_c_dump() helper
        - media: atomisp: check before deference asd variable
        - usb: dwc3: meson-g12a: fix shared reset control use
        - psi: Fix PSI_MEM_FULL state when tasks are in memstall and doing reclaim
        - HID: magicmouse: Report battery level over USB
        - libbpf: Accommodate DWARF/compiler bug with duplicated structs
        - ethernet: renesas: Use div64_ul instead of do_div
        - arm64: dts: qcom: sm8350: Shorten camera-thermal-bottom name
        - drm/amd/display: add else to avoid double destroy clk_mgr
        - regulator: da9121: Prevent current limit change when enabled
        - drm/vmwgfx: Release ttm memory if probe fails
        - arm64: dts: ti: j721e-main: Fix 'dtbs_check' in serdes_ln_ctrl node
        - media: atomisp: fix "variable dereferenced before check 'asd'"
        - arm64: dts: renesas: Fix thermal bindings
        - ARM: dts: qcom: sdx55: fix IPA interconnect definitions
        - media: rockchip: rkisp1: use device name for debugfs subdir name
        - mmc: tmio: reinit card irqs in reset routine
        - drm/amd/amdgpu: fix psp tmr bo pin count leak in SRIOV
        - drm/amd/amdgpu: fix gmc bo pin count leak in SRIOV
        - crypto: ccp - Move SEV_INIT retry for corrupted data
        - mt76: mt7615: fix possible deadlock while mt7615_register_ext_phy()
        - mt76: mt7615: improve wmm index allocation
        - ath9k_htc: fix NULL pointer dereference at ath9k_htc_rxep()
        - ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet()
        - iwlwifi: mvm: fix AUX ROC removal
        - mmc: sdhci-pci-gli: GL9755: Support for CD/WP inversion on OF platforms
        - mmc: mtk-sd: Use readl_poll_timeout instead of open-coded polling
        - ACPI: CPPC: Check present CPUs for determining _CPC is valid
        - bpf/selftests: Fix namespace mount setup in tc_redirect
        - serial: pl011: Drop CR register reset on set_termios
        - net/mlx5: Update log_max_qp value to FW max capability
        - ASoC: imx-hdmi: add put_device() after of_find_device_by_node()
        - interconnect: qcom: rpm: Prevent integer overflow in rate
        - scsi: ufs: Fix a kernel crash during shutdown
        - scsi: lpfc: Fix leaked lpfc_dmabuf mbox allocations with NPIV
        - selftests/powerpc: Add a test of sigreturning to the kernel
        - scsi: mpi3mr: Fixes around reply request queues
        - ASoC: mediatek: mt8192-mt6359: fix device_node leak
        - seg6: export get_srh() for ICMP handling
        - icmp: ICMPV6: Examine invoking packet for Segment Route Headers.
        - udp6: Use Segment Routing Header for dest address if present
        - ifcvf/vDPA: fix misuse virtio-net device config size for blk dev
        - tpm: fix potential NULL pointer access in tpm_del_char_device
        - mfd: tps65910: Set PWR_OFF bit during driver probe
        - sched/cpuacct: Fix user/system in shown cpuacct.usage*
        - tracing: Have syscall trace events use trace_event_buffer_lock_reserve()
        - remoteproc: imx_rproc: Fix a resource leak in the remove function
        - drm/amd/display: Fix the uninitialized variable in enable_stream_features()
        - scsi: lpfc: Fix lpfc_force_rscn ndlp kref imbalance
        - drm/amdgpu: don't do resets on APUs which don't support it
        - ath11k: qmi: avoid error messages when dma allocation fails
        - scsi: ufs: ufs-mediatek: Fix error checking in ufs_mtk_init_va09_pwr_ctrl()
        - RDMA/cma: Remove open coding of overflow checking for private_data_len
        - dmaengine: idxd: fix wq settings post wq disable
        - drm/vc4: crtc: Drop feed_txp from state
        - drm/vc4: Fix non-blocking commit getting stuck forever
        - drm/vc4: crtc: Copy assigned channel to the CRTC
        - bpf: Mark PTR_TO_FUNC register initially with zero offset
        - mlx5: Don't accidentally set RTO_ONLINK before mlx5e_route_lookup_ipv4_get()
        - riscv: dts: microchip: mpfs: Drop empty chosen node
        - drm/vmwgfx: Remove unused compile options
        - f2fs: fix remove page failed in invalidate compress pages
        - f2fs: fix to avoid panic in is_alive() if metadata is inconsistent
        - crypto: octeontx2 - uninitialized variable in kvf_limits_store()
        - gpio: mpc8xxx: Fix IRQ check in mpc8xxx_probe
        - bitops: protect find_first_{,zero}_bit properly
        - net: ipa: fix atomic update in ipa_endpoint_replenish()
        - net: cpsw: avoid alignment faults by taking NET_IP_ALIGN into account
        - net: phy: micrel: use kszphy_suspend()/kszphy_resume for irq aware devices
        - sch_api: Don't skip qdisc attach on ingress
    
      * Packaging resync (LP: #1786013)
        - [Packaging] resync dkms-build{,--nvidia-N} from LRMv5
    
     -- Kleber Sacilotto de Souza <email address hidden>  Tue, 29 Mar 2022 16:09:44 +0200
  • linux (5.13.0-39.44) impish; urgency=medium
    
      * impish/linux: 5.13.0-39.44 -proposed tracker (LP: #1966236)
    
      * CVE-2022-27666
        - sock: remove one redundant SKB_FRAG_PAGE_ORDER macro
        - esp: Fix possible buffer overflow in ESP transformation
    
      * CVE-2022-1055
        - net: sched: fix use-after-free in tc_new_tfilter()
    
     -- Stefan Bader <email address hidden>  Thu, 24 Mar 2022 16:24:10 +0100
  • linux (5.13.0-38.43) impish; urgency=medium
    
      * impish/linux: 5.13.0-38.43 -proposed tracker (LP: #1965347)
    
      * PS/2 Keyboard wakeup from s2idle not functioning on AMD Yellow Carp platform
        (LP: #1961739)
        - PM: s2idle: ACPI: Fix wakeup interrupts handling
    
      * Low RX performance for 40G Solarflare NICs (LP: #1964512)
        - SAUCE: sfc: The size of the RX recycle ring should be more flexible
    
      * [UBUNTU 20.04] Fix SIGP processing on KVM/s390 (LP: #1962578)
        - KVM: s390: Simplify SIGP Set Arch handling
        - KVM: s390: Add a routine for setting userspace CPU state
    
      * Move virtual graphics drivers from linux-modules-extra to linux-modules
        (LP: #1960633)
        - [Packaging] Move VM DRM drivers into modules
    
      * Impish update: upstream stable patchset 2022-03-09 (LP: #1964422)
        - bnx2x: Utilize firmware 7.13.21.0
        - bnx2x: Invalidate fastpath HSI version for VFs
        - rcu: Tighten rcu_advance_cbs_nowake() checks
        - select: Fix indefinitely sleeping task in poll_schedule_timeout()
        - drm/amdgpu: Use correct VIEWPORT_DIMENSION for DCN2
        - arm64/bpf: Remove 128MB limit for BPF JIT programs
        - Bluetooth: refactor malicious adv data check
        - net: sfp: ignore disabled SFP node
        - net: stmmac: skip only stmmac_ptp_register when resume from suspend
        - s390/hypfs: include z/VM guests with access control group set
        - bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack()
        - scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP
          devices
        - udf: Restore i_lenAlloc when inode expansion fails
        - udf: Fix NULL ptr deref when converting from inline format
        - efi: runtime: avoid EFIv2 runtime services on Apple x86 machines
        - PM: wakeup: simplify the output logic of pm_show_wakelocks()
        - tracing/histogram: Fix a potential memory leak for kstrdup()
        - tracing: Don't inc err_log entry count if entry allocation fails
        - ceph: properly put ceph_string reference after async create attempt
        - ceph: set pool_ns in new inode layout for async creates
        - fsnotify: fix fsnotify hooks in pseudo filesystems
        - Revert "KVM: SVM: avoid infinite loop on NPF from bad address"
        - perf/x86/intel/uncore: Fix CAS_COUNT_WRITE issue for ICX
        - drm/etnaviv: relax submit size limits
        - KVM: x86: Update vCPU's runtime CPUID on write to MSR_IA32_XSS
        - netfilter: nft_payload: do not update layer 4 checksum when mangling
          fragments
        - serial: 8250: of: Fix mapped region size when using reg-offset property
        - serial: stm32: fix software flow control transfer
        - tty: n_gsm: fix SW flow control encoding/handling
        - tty: Add support for Brainboxes UC cards.
        - usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge
        - usb: xhci-plat: fix crash when suspend if remote wake enable
        - usb: common: ulpi: Fix crash in ulpi_match()
        - usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS
        - USB: core: Fix hang in usb_kill_urb by adding memory barriers
        - usb: typec: tcpm: Do not disconnect while receiving VBUS off
        - ucsi_ccg: Check DEV_INT bit only when starting CCG4
        - jbd2: export jbd2_journal_[grab|put]_journal_head
        - ocfs2: fix a deadlock when commit trans
        - sched/membarrier: Fix membarrier-rseq fence command missing from query
          bitmask
        - x86/MCE/AMD: Allow thresholding interface updates after init
        - powerpc/32s: Allocate one 256k IBAT instead of two consecutives 128k IBATs
        - powerpc/32s: Fix kasan_init_region() for KASAN
        - powerpc/32: Fix boot failure with GCC latent entropy plugin
        - i40e: Increase delay to 1 s after global EMP reset
        - i40e: Fix issue when maximum queues is exceeded
        - i40e: Fix queues reservation for XDP
        - i40e: Fix for failed to init adminq while VF reset
        - i40e: fix unsigned stat widths
        - usb: roles: fix include/linux/usb/role.h compile issue
        - rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev
        - rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev
        - scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put()
        - ipv6_tunnel: Rate limit warning messages
        - net: fix information leakage in /proc/net/ptype
        - hwmon: (lm90) Mark alert as broken for MAX6646/6647/6649
        - hwmon: (lm90) Mark alert as broken for MAX6680
        - ping: fix the sk_bound_dev_if match in ping_lookup
        - ipv4: avoid using shared IP generator for connected sockets
        - hwmon: (lm90) Reduce maximum conversion rate for G781
        - NFSv4: Handle case where the lookup of a directory fails
        - NFSv4: nfs_atomic_open() can race when looking up a non-regular file
        - net-procfs: show net devices bound packet types
        - drm/msm: Fix wrong size calculation
        - drm/msm/dsi: Fix missing put_device() call in dsi_get_phy
        - drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable
        - ipv6: annotate accesses to fn->fn_sernum
        - NFS: Ensure the server has an up to date ctime before hardlinking
        - NFS: Ensure the server has an up to date ctime before renaming
        - powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06
        - netfilter: conntrack: don't increment invalid counter on NF_REPEAT
        - perf: Fix perf_event_read_local() time
        - sched/pelt: Relax the sync of util_sum with util_avg
        - net: phy: broadcom: hook up soft_reset for BCM54616S
        - phylib: fix potential use-after-free
        - octeontx2-pf: Forward error codes to VF
        - rxrpc: Adjust retransmission backoff
        - efi/libstub: arm64: Fix image check alignment at entry
        - hwmon: (lm90) Mark alert as broken for MAX6654
        - powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if
          PMI is pending
        - net: ipv4: Move ip_options_fragment() out of loop
        - net: ipv4: Fix the warning for dereference
        - ipv4: fix ip option filtering for locally generated fragments
        - ibmvnic: init ->running_cap_crqs early
        - ibmvnic: don't spin in tasklet
        - video: hyperv_fb: Fix validation of screen resolution
        - drm/msm/hdmi: Fix missing put_device() call in msm_hdmi_get_phy
        - drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc
        - yam: fix a memory leak in yam_siocdevprivate()
        - net: cpsw: Properly initialise struct page_pool_params
        - net: hns3: handle empty unknown interrupt for VF
        - Revert "ipv6: Honor all IPv6 PIO Valid Lifetime values"
        - net: bridge: vlan: fix single net device option dumping
        - ipv4: raw: lock the socket in raw_bind()
        - ipv4: tcp: send zero IPID in SYNACK messages
        - ipv4: remove sparse error in ip_neigh_gw4()
        - net: bridge: vlan: fix memory leak in __allowed_ingress
        - dt-bindings: can: tcan4x5x: fix mram-cfg RX FIFO config
        - usr/include/Makefile: add linux/nfc.h to the compile-test coverage
        - fsnotify: invalidate dcache before IN_DELETE event
        - block: Fix wrong offset in bio_truncate()
        - mtd: rawnand: mpc5121: Remove unused variable in ads5121_select_chip()
        - net: stmmac: configure PTP clock source prior to PTP initialization
        - KVM: arm64: Use shadow SPSR_EL1 when injecting exceptions on !VHE
        - s390/nmi: handle guarded storage validity failures for KVM guests
        - powerpc32/bpf: Fix codegen for bpf-to-bpf calls
        - powerpc/bpf: Update ldimm64 instructions during extra pass
        - psi: Fix uaf issue when psi trigger is destroyed while being polled
        - perf/x86/intel: Add a quirk for the calculation of the number of counters on
          Alder Lake
        - drm/atomic: Add the crtc to affected crtc only if uapi.enable = true
        - KVM: SVM: Never reject emulation due to SMAP errata for !SEV guests
        - KVM: x86: Keep MSR_IA32_XSS unchanged for INIT
        - KVM: x86: Sync the states size with the XCR0/IA32_XSS at, any time
        - tty: Partially revert the removal of the Cyclades public API
        - usb: cdnsp: Fix segmentation fault in cdns_lost_power function
        - usb: dwc3: xilinx: Skip resets and USB3 register settings for USB2.0 mode
        - usb: dwc3: xilinx: Fix error handling when getting USB3 PHY
        - usb: typec: tcpci: don't touch CC line if it's Vconn source
        - usb: typec: tcpm: Do not disconnect when receiving VSAFE0V
        - mm, kasan: use compare-exchange operation to set KASAN page tag
        - PCI/sysfs: Find shadow ROM before static attribute initialization
        - x86/cpu: Add Xeon Icelake-D to list of CPUs that support PPIN
        - ARM: 9170/1: fix panic when kasan and kprobe are enabled
        - net: stmmac: dwmac-visconti: Fix bit definitions for ETHER_CLK_SEL
        - net: stmmac: dwmac-visconti: Fix clock configuration for RMII mode
        - octeontx2-af: cn10k: Do not enable RPM loopback for LPC interfaces
        - io_uring: fix bug in slow unregistering of nodes
        - ibmvnic: Allow extra failures before disabling
        - net/smc: Transitional solution for clcsock race issue
        - can: tcan4x5x: regmap: fix max register value
        - drm/msm/a6xx: Add missing suspend_count increment
        - sch_htb: Fail on unsupported parameters when offload is requested
        - Revert "drm/ast: Support 1600x900 with 108MHz PCLK"
        - irqchip/realtek-rtl: Map control data to virq
        - irqchip/realtek-rtl: Fix off-by-one in routing
        - perf/core: Fix cgroup event list management
        - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
        - psi: fix "defined but not used" warnings when CONFIG_PROC_FS=n
    
      * Impish update: upstream stable patchset 2022-02-24 (LP: #1962230)
        - KVM: VMX: switch blocked_vcpu_on_cpu_lock to raw spinlock
        - HID: uhid: Fix worker destroying device without any protection
        - HID: wacom: Avoid using stale array indicies to read contact count
        - f2fs: fix to do sanity check in is_alive()
        - nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed
          bind()
        - mtd: rawnand: gpmi: Add ERR007117 protection for nfc_apply_timings
        - mtd: rawnand: gpmi: Remove explicit default gpmi clock setting for i.MX6
        - mtd: Fixed breaking list in __mtd_del_partition.
        - mtd: rawnand: davinci: Don't calculate ECC when reading page
        - mtd: rawnand: davinci: Avoid duplicated page read
        - mtd: rawnand: davinci: Rewrite function description
        - x86/gpu: Reserve stolen memory for first integrated Intel GPU
        - tools/nolibc: x86-64: Fix startup code bug
        - tools/nolibc: i386: fix initial stack alignment
        - tools/nolibc: fix incorrect truncation of exit code
        - rtc: cmos: take rtc_lock while reading from CMOS
        - media: v4l2-ioctl.c: readbuffers depends on V4L2_CAP_READWRITE
        - media: flexcop-usb: fix control-message timeouts
        - media: mceusb: fix control-message timeouts
        - media: em28xx: fix control-message timeouts
        - media: cpia2: fix control-message timeouts
        - media: s2255: fix control-message timeouts
        - media: dib0700: fix undefined behavior in tuner shutdown
        - media: redrat3: fix control-message timeouts
        - media: pvrusb2: fix control-message timeouts
        - media: stk1160: fix control-message timeouts
        - media: cec-pin: fix interrupt en/disable handling
        - can: softing_cs: softingcs_probe(): fix memleak on registration failure
        - iio: adc: ti-adc081c: Partial revert of removal of ACPI IDs
        - lkdtm: Fix content of section containing lkdtm_rodata_do_nothing()
        - iommu/io-pgtable-arm-v7s: Add error handle for page table allocation failure
        - gpu: host1x: Add back arm_iommu_detach_device()
        - dma_fence_array: Fix PENDING_ERROR leak in dma_fence_array_signaled()
        - PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller
        - mm_zone: add function to check if managed dma zone exists
        - dma/pool: create dma atomic pool only if dma zone has managed pages
        - mm/page_alloc.c: do not warn allocation failure on zone DMA if no managed
          pages
        - shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode
        - drm/ttm: Put BO in its memory manager's lru list
        - Bluetooth: L2CAP: Fix not initializing sk_peer_pid
        - drm/bridge: display-connector: fix an uninitialized pointer in probe()
        - drm: fix null-ptr-deref in drm_dev_init_release()
        - drm/panel: kingdisplay-kd097d04: Delete panel on attach() failure
        - drm/panel: innolux-p079zca: Delete panel on attach() failure
        - drm/rockchip: dsi: Fix unbalanced clock on probe error
        - drm/rockchip: dsi: Hold pm-runtime across bind/unbind
        - drm/rockchip: dsi: Disable PLL clock on bind error
        - drm/rockchip: dsi: Reconfigure hardware on resume()
        - Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails
        - clk: bcm-2835: Pick the closest clock rate
        - clk: bcm-2835: Remove rounding up the dividers
        - drm/vc4: hdmi: Set a default HSM rate
        - wcn36xx: ensure pairing of init_scan/finish_scan and start_scan/end_scan
        - wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND
        - wcn36xx: Fix DMA channel enable/disable cycle
        - wcn36xx: Release DMA channel descriptor allocations
        - wcn36xx: Put DXE block into reset before freeing memory
        - wcn36xx: populate band before determining rate on RX
        - wcn36xx: fix RX BD rate mapping for 5GHz legacy rates
        - ath11k: Send PPDU_STATS_CFG with proper pdev mask to firmware
        - mtd: hyperbus: rpc-if: Check return value of rpcif_sw_init()
        - media: videobuf2: Fix the size printk format
        - media: atomisp: add missing media_device_cleanup() in
          atomisp_unregister_entities()
        - media: atomisp: fix punit_ddr_dvfs_enable() argument for mrfld_power up case
        - media: atomisp: fix inverted logic in buffers_needed()
        - media: atomisp: do not use err var when checking port validity for ISP2400
        - media: atomisp: fix inverted error check for
          ia_css_mipi_is_source_port_valid()
        - media: atomisp: fix ifdefs in sh_css.c
        - media: staging: media: atomisp: pci: Balance braces around conditional
          statements in file atomisp_cmd.c
        - media: atomisp: add NULL check for asd obtained from atomisp_video_pipe
        - media: atomisp: fix enum formats logic
        - media: atomisp: fix uninitialized bug in gmin_get_pmic_id_and_addr()
        - media: aspeed: fix mode-detect always time out at 2nd run
        - media: em28xx: fix memory leak in em28xx_init_dev
        - media: aspeed: Update signal status immediately to ensure sane hw state
        - arm64: dts: amlogic: meson-g12: Fix GPU operating point table node name
        - arm64: dts: amlogic: Fix SPI NOR flash node name for ODROID N2/N2+
        - arm64: dts: meson-gxbb-wetek: fix HDMI in early boot
        - arm64: dts: meson-gxbb-wetek: fix missing GPIO binding
        - fs: dlm: use sk->sk_socket instead of con->sock
        - fs: dlm: don't call kernel_getpeername() in error_report()
        - memory: renesas-rpc-if: Return error in case devm_ioremap_resource() fails
        - Bluetooth: stop proccessing malicious adv data
        - ath11k: Fix ETSI regd with weather radar overlap
        - ath11k: clear the keys properly via DISABLE_KEY
        - ath11k: reset RSN/WPA present state for open BSS
        - tee: fix put order in teedev_close_context()
        - fs: dlm: fix build with CONFIG_IPV6 disabled
        - drm/vboxvideo: fix a NULL vs IS_ERR() check
        - arm64: dts: renesas: cat875: Add rx/tx delays
        - media: dmxdev: fix UAF when dvb_register_device() fails
        - crypto: qce - fix uaf on qce_ahash_register_one
        - crypto: qce - fix uaf on qce_skcipher_register_one
        - mtd: hyperbus: rpc-if: fix bug in rpcif_hb_remove
        - ARM: dts: stm32: fix dtbs_check warning on ili9341 dts binding on stm32f429
          disco
        - crypto: qat - remove unnecessary collision prevention step in PFVF
        - crypto: qat - make pfvf send message direction agnostic
        - crypto: qat - fix undetected PFVF timeout in ACK loop
        - ath11k: Use host CE parameters for CE interrupts configuration
        - arm64: dts: ti: k3-j721e: correct cache-sets info
        - tty: serial: atmel: Check return code of dmaengine_submit()
        - tty: serial: atmel: Call dma_async_issue_pending()
        - mfd: atmel-flexcom: Remove #ifdef CONFIG_PM_SLEEP
        - mfd: atmel-flexcom: Use .resume_noirq
        - media: rcar-csi2: Correct the selection of hsfreqrange
        - media: imx-pxp: Initialize the spinlock prior to using it
        - media: si470x-i2c: fix possible memory leak in si470x_i2c_probe()
        - media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released
        - media: coda: fix CODA960 JPEG encoder buffer overflow
        - media: venus: core: Fix a potential NULL pointer dereference in an error
          handling path
        - media: venus: core: Fix a resource leak in the error handling path of
          'venus_probe()'
        - thermal/drivers/imx: Implement runtime PM support
        - netfilter: bridge: add support for pppoe filtering
        - arm64: dts: qcom: msm8916: fix MMC controller aliases
        - cgroup: Trace event cgroup id fields should be u64
        - ACPI: EC: Rework flushing of EC work while suspended to idle
        - thermal/drivers/imx8mm: Enable ADC when enabling monitor
        - drm/amdgpu: Fix a NULL pointer dereference in
          amdgpu_connector_lcd_native_mode()
        - drm/radeon/radeon_kms: Fix a NULL pointer dereference in
          radeon_driver_open_kms()
        - arm64: dts: ti: k3-j7200: Fix the L2 cache sets
        - arm64: dts: ti: k3-j721e: Fix the L2 cache sets
        - arm64: dts: ti: k3-j7200: Correct the d-cache-sets info
        - tty: serial: uartlite: allow 64 bit address
        - serial: amba-pl011: do not request memory region twice
        - floppy: Fix hang in watchdog when disk is ejected
        - staging: rtl8192e: return error code from rtllib_softmac_init()
        - staging: rtl8192e: rtllib_module: fix error handle case in alloc_rtllib()
        - Bluetooth: btmtksdio: fix resume failure
        - sched/fair: Fix detection of per-CPU kthreads waking a task
        - sched/fair: Fix per-CPU kthread and wakee stacking for asym CPU capacity
        - bpf: Adjust BTF log size limit.
        - bpf: Disallow BPF_LOG_KERNEL log level for bpf(BPF_BTF_LOAD)
        - bpf: Remove config check to enable bpf support for branch records
        - arm64: clear_page() shouldn't use DC ZVA when DCZID_EL0.DZP == 1
        - media: dib8000: Fix a memleak in dib8000_init()
        - media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach()
        - media: si2157: Fix "warm" tuner state detection
        - wireless: iwlwifi: Fix a double free in iwl_txq_dyn_alloc_dma
        - sched/rt: Try to restart rt period timer when rt runtime exceeded
        - drm/msm/dp: displayPort driver need algorithm rational
        - rcu/exp: Mark current CPU as exp-QS in IPI loop second pass
        - mwifiex: Fix possible ABBA deadlock
        - xfrm: fix a small bug in xfrm_sa_len()
        - x86/uaccess: Move variable into switch case statement
        - selftests: clone3: clone3: add case CLONE3_ARGS_NO_TEST
        - selftests: harness: avoid false negatives if test has no ASSERTs
        - crypto: stm32/cryp - fix CTR counter carry
        - crypto: stm32/cryp - fix xts and race condition in crypto_engine requests
        - crypto: stm32/cryp - check early input data
        - crypto: stm32/cryp - fix double pm exit
        - crypto: stm32/cryp - fix lrw chaining mode
        - crypto: stm32/cryp - fix bugs and crash in tests
        - crypto: stm32 - Revert broken pm_runtime_resume_and_get changes
        - ath11k: Fix deleting uninitialized kernel timer during fragment cache flush
        - ARM: dts: gemini: NAS4220-B: fis-index-block with 128 KiB sectors
        - media: dw2102: Fix use after free
        - media: msi001: fix possible null-ptr-deref in msi001_probe()
        - media: coda/imx-vdoa: Handle dma_set_coherent_mask error codes
        - ath11k: Fix a NULL pointer dereference in ath11k_mac_op_hw_scan()
        - arm64: dts: qcom: c630: Fix soundcard setup
        - arm64: dts: qcom: ipq6018: Fix gpio-ranges property
        - drm/msm/dpu: fix safe status debugfs file
        - drm/bridge: ti-sn65dsi86: Set max register for regmap
        - drm/tegra: vic: Fix DMA API misuse
        - media: hantro: Fix probe func error path
        - xfrm: interface with if_id 0 should return error
        - xfrm: state and policy should fail if XFRMA_IF_ID 0
        - ARM: 9159/1: decompressor: Avoid UNPREDICTABLE NOP encoding
        - usb: ftdi-elan: fix memory leak on device disconnect
        - arm64: dts: marvell: cn9130: add GPIO and SPI aliases
        - arm64: dts: marvell: cn9130: enable CP0 GPIO controllers
        - ARM: dts: armada-38x: Add generic compatible to UART nodes
        - iwlwifi: mvm: fix 32-bit build in FTM
        - iwlwifi: mvm: test roc running status bits before removing the sta
        - mmc: meson-mx-sdhc: add IRQ check
        - mmc: meson-mx-sdio: add IRQ check
        - selinux: fix potential memleak in selinux_add_opt()
        - um: fix ndelay/udelay defines
        - um: virtio_uml: Fix time-travel external time propagation
        - Bluetooth: L2CAP: Fix using wrong mode
        - bpftool: Enable line buffering for stdout
        - backlight: qcom-wled: Validate enabled string indices in DT
        - backlight: qcom-wled: Pass number of elements to read to read_u32_array
        - backlight: qcom-wled: Fix off-by-one maximum with default num_strings
        - backlight: qcom-wled: Override default length with qcom,enabled-strings
        - backlight: qcom-wled: Use cpu_to_le16 macro to perform conversion
        - backlight: qcom-wled: Respect enabled-strings in set_brightness
        - software node: fix wrong node passed to find nargs_prop
        - Bluetooth: hci_qca: Stop IBS timer during BT OFF
        - x86/boot/compressed: Move CLANG_FLAGS to beginning of KBUILD_CFLAGS
        - hwmon: (mr75203) fix wrong power-up delay value
        - x86/mce/inject: Avoid out-of-bounds write when setting flags
        - ACPI: scan: Create platform device for BCM4752 and LNV4752 ACPI nodes
        - pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in
          __nonstatic_find_io_region()
        - pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in
          nonstatic_find_mem_region()
        - power: reset: mt6397: Check for null res pointer
        - netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check()
        - bpf: Fix SO_RCVBUF/SO_SNDBUF handling in _bpf_setsockopt().
        - netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone
        - ppp: ensure minimum packet size in ppp_write()
        - rocker: fix a sleeping in atomic bug
        - staging: greybus: audio: Check null pointer
        - fsl/fman: Check for null pointer after calling devm_ioremap
        - Bluetooth: hci_bcm: Check for error irq
        - Bluetooth: hci_qca: Fix NULL vs IS_ERR_OR_NULL check in qca_serdev_probe
        - usb: dwc3: qcom: Fix NULL vs IS_ERR checking in dwc3_qcom_probe
        - HID: hid-uclogic-params: Invalid parameter check in uclogic_params_init
        - HID: hid-uclogic-params: Invalid parameter check in
          uclogic_params_get_str_desc
        - HID: hid-uclogic-params: Invalid parameter check in
          uclogic_params_huion_init
        - HID: hid-uclogic-params: Invalid parameter check in
          uclogic_params_frame_init_v1_buttonpad
        - debugfs: lockdown: Allow reading debugfs files that are not world readable
        - net/mlx5e: Fix page DMA map/unmap attributes
        - net/mlx5e: Don't block routes with nexthop objects in SW
        - Revert "net/mlx5e: Block offload of outer header csum for UDP tunnels"
        - net/mlx5: Set command entry semaphore up once got index free
        - lib/mpi: Add the return value check of kcalloc()
        - Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt()
        - spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe
        - ax25: uninitialized variable in ax25_setsockopt()
        - netrom: fix api breakage in nr_setsockopt()
        - regmap: Call regmap_debugfs_exit() prior to _init()
        - can: mcp251xfd: add missing newline to printed strings
        - tpm: add request_locality before write TPM_INT_ENABLE
        - tpm_tis: Fix an error handling path in 'tpm_tis_core_init()'
        - can: softing: softing_startstop(): fix set but not used variable warning
        - can: xilinx_can: xcan_probe(): check for error irq
        - pcmcia: fix setting of kthread task states
        - iwlwifi: mvm: Use div_s64 instead of do_div in iwl_mvm_ftm_rtt_smoothing()
        - net: mcs7830: handle usb read errors properly
        - ext4: avoid trim error on fs with small groups
        - ALSA: jack: Add missing rwsem around snd_ctl_remove() calls
        - ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls
        - ALSA: hda: Add missing rwsem around snd_ctl_remove() calls
        - RDMA/bnxt_re: Scan the whole bitmap when checking if "disabling RCFW with
          pending cmd-bit"
        - RDMA/hns: Validate the pkey index
        - scsi: pm80xx: Update WARN_ON check in pm8001_mpi_build_cmd()
        - clk: imx8mn: Fix imx8mn_clko1_sels
        - powerpc/prom_init: Fix improper check of prom_getprop()
        - ASoC: uniphier: drop selecting non-existing SND_SOC_UNIPHIER_AIO_DMA
        - dt-bindings: thermal: Fix definition of cooling-maps contribution property
        - powerpc/perf: Fix PMU callbacks to clear pending PMI before resetting an
          overflown PMC
        - powerpc/32s: Fix shift-out-of-bounds in KASAN init
        - clocksource: Reduce clocksource-skew threshold
        - clocksource: Avoid accidental unstable marking of clocksources
        - ALSA: oss: fix compile error when OSS_DEBUG is enabled
        - ALSA: usb-audio: Drop superfluous '0' in Presonus Studio 1810c's ID
        - char/mwave: Adjust io port register size
        - binder: fix handling of error during copy
        - openrisc: Add clone3 ABI wrapper
        - iommu/io-pgtable-arm: Fix table descriptor paddr formatting
        - scsi: ufs: Fix race conditions related to driver data
        - RDMA/qedr: Fix reporting max_{send/recv}_wr attrs
        - PCI/MSI: Fix pci_irq_vector()/pci_irq_get_affinity()
        - powerpc/powermac: Add additional missing lockdep_register_key()
        - RDMA/core: Let ib_find_gid() continue search even after empty entry
        - RDMA/cma: Let cma_resolve_ib_dev() continue search even after empty entry
        - ASoC: rt5663: Handle device_property_read_u32_array error codes
        - of: unittest: fix warning on PowerPC frame size warning
        - of: unittest: 64 bit dma address test requires arch support
        - clk: stm32: Fix ltdc's clock turn off by clk_disable_unused() after system
          enter shell
        - mips: add SYS_HAS_CPU_MIPS64_R5 config for MIPS Release 5 support
        - mips: fix Kconfig reference to PHYS_ADDR_T_64BIT
        - dmaengine: pxa/mmp: stop referencing config->slave_id
        - iommu/amd: Remove iommu_init_ga()
        - iommu/amd: Restore GA log/tail pointer on host resume
        - ASoC: Intel: catpt: Test dmaengine_submit() result before moving on
        - iommu/iova: Fix race between FQ timeout and teardown
        - scsi: block: pm: Always set request queue runtime active in
          blk_post_runtime_resume()
        - phy: uniphier-usb3ss: fix unintended writing zeros to PHY register
        - ASoC: samsung: idma: Check of ioremap return value
        - misc: lattice-ecp3-config: Fix task hung when firmware load failed
        - arm64: tegra: Remove non existent Tegra194 reset
        - mips: lantiq: add support for clk_set_parent()
        - mips: bcm63xx: add support for clk_set_parent()
        - powerpc/xive: Add missing null check after calling kmalloc
        - ASoC: fsl_mqs: fix MODULE_ALIAS
        - RDMA/cxgb4: Set queue pair state when being queried
        - ASoC: fsl_asrc: refine the check of available clock divider
        - clk: bm1880: remove kfrees on static allocations
        - of: base: Fix phandle argument length mismatch error message
        - ARM: dts: omap3-n900: Fix lp5523 for multi color
        - Bluetooth: Fix debugfs entry leak in hci_register_dev()
        - fs: dlm: filter user dlm messages for kernel locks
        - drm/lima: fix warning when CONFIG_DEBUG_SG=y & CONFIG_DMA_API_DEBUG=y
        - selftests/bpf: Fix bpf_object leak in skb_ctx selftest
        - ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply
        - drm/bridge: dw-hdmi: handle ELD when DRM_BRIDGE_ATTACH_NO_CONNECTOR
        - drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR
        - media: atomisp: fix try_fmt logic
        - media: atomisp: set per-device's default mode
        - media: atomisp-ov2680: Fix ov2680_set_fmt() clobbering the exposure
        - ARM: shmobile: rcar-gen2: Add missing of_node_put()
        - batman-adv: allow netlink usage in unprivileged containers
        - media: atomisp: handle errors at sh_css_create_isp_params()
        - ath11k: Fix crash caused by uninitialized TX ring
        - usb: gadget: f_fs: Use stream_open() for endpoint files
        - drm: panel-orientation-quirks: Add quirk for the Lenovo Yoga Book X91F/L
        - HID: apple: Do not reset quirks when the Fn key is not found
        - media: b2c2: Add missing check in flexcop_pci_isr:
        - EDAC/synopsys: Use the quirk for version instead of ddr version
        - ARM: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART
        - drm/amd/display: check top_pipe_to_program pointer
        - drm/amdgpu/display: set vblank_disable_immediate for DC
        - soc: ti: pruss: fix referenced node in error message
        - mlxsw: pci: Add shutdown method in PCI driver
        - drm/bridge: megachips: Ensure both bridges are probed before registration
        - tty: serial: imx: disable UCR4_OREN in .stop_rx() instead of .shutdown()
        - gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use
        - HSI: core: Fix return freed object in hsi_new_client
        - crypto: jitter - consider 32 LSB for APT
        - mwifiex: Fix skb_over_panic in mwifiex_usb_recv()
        - rsi: Fix use-after-free in rsi_rx_done_handler()
        - rsi: Fix out-of-bounds read in rsi_read_pkt()
        - ath11k: Avoid NULL ptr access during mgmt tx cleanup
        - media: venus: avoid calling core_clk_setrate() concurrently during
          concurrent video sessions
        - ACPI / x86: Drop PWM2 device on Lenovo Yoga Book from always present table
        - ACPI: Change acpi_device_always_present() into acpi_device_override_status()
        - ACPI / x86: Allow specifying acpi_device_override_status() quirks by path
        - ACPI / x86: Add not-present quirk for the PCI0.SDHB.BRC1 device on the GPD
          win
        - arm64: dts: ti: j7200-main: Fix 'dtbs_check' serdes_ln_ctrl node
        - usb: uhci: add aspeed ast2600 uhci support
        - floppy: Add max size check for user space request
        - x86/mm: Flush global TLB when switching to trampoline page-table
        - drm: rcar-du: Fix CRTC timings when CMM is used
        - media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds.
        - media: rcar-vin: Update format alignment constraints
        - media: saa7146: hexium_orion: Fix a NULL pointer dereference in
          hexium_attach()
        - media: m920x: don't use stack on USB reads
        - thunderbolt: Runtime PM activate both ends of the device link
        - iwlwifi: mvm: synchronize with FW after multicast commands
        - iwlwifi: mvm: avoid clearing a just saved session protection id
        - ath11k: avoid deadlock by change ieee80211_queue_work for regd_update_work
        - ath10k: Fix tx hanging
        - net-sysfs: update the queue counts in the unregistration path
        - net: phy: prefer 1000baseT over 1000baseKX
        - gpio: aspeed: Convert aspeed_gpio.lock to raw_spinlock
        - selftests/ftrace: make kprobe profile testcase description unique
        - ath11k: Avoid false DEADLOCK warning reported by lockdep
        - x86/mce: Allow instrumentation during task work queueing
        - x86/mce: Mark mce_panic() noinstr
        - x86/mce: Mark mce_end() noinstr
        - x86/mce: Mark mce_read_aux() noinstr
        - net: bonding: debug: avoid printing debug logs when bond is not notifying
          peers
        - bpf: Do not WARN in bpf_warn_invalid_xdp_action()
        - HID: quirks: Allow inverting the absolute X/Y values
        - media: igorplugusb: receiver overflow should be reported
        - media: saa7146: hexium_gemini: Fix a NULL pointer dereference in
          hexium_attach()
        - mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO
        - audit: ensure userspace is penalized the same as the kernel when under
          pressure
        - arm64: dts: ls1028a-qds: move rtc node to the correct i2c bus
        - arm64: tegra: Adjust length of CCPLEX cluster MMIO region
        - PM: runtime: Add safety net to supplier device release
        - cpufreq: Fix initialization of min and max frequency QoS requests
        - usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0
        - ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
        - rtw88: 8822c: update rx settings to prevent potential hw deadlock
        - PM: AVS: qcom-cpr: Use div64_ul instead of do_div
        - iwlwifi: fix leaks/bad data after failed firmware load
        - iwlwifi: remove module loading failure message
        - iwlwifi: mvm: Fix calculation of frame length
        - iwlwifi: pcie: make sure prph_info is set when treating wakeup IRQ
        - um: registers: Rename function names to avoid conflicts and build problems
        - ath11k: Fix napi related hang
        - Bluetooth: vhci: Set HCI_QUIRK_VALID_LE_STATES
        - xfrm: rate limit SA mapping change message to user space
        - drm/etnaviv: consider completed fence seqno in hang check
        - jffs2: GC deadlock reading a page that is used in jffs2_write_begin()
        - ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions
        - ACPICA: Utilities: Avoid deleting the same object twice in a row
        - ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R()
        - ACPICA: Fix wrong interpretation of PCC address
        - ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5
        - drm/amdgpu: fixup bad vram size on gmc v8
        - amdgpu/pm: Make sysfs pm attributes as read-only for VFs
        - ACPI: battery: Add the ThinkPad "Not Charging" quirk
        - btrfs: remove BUG_ON() in find_parent_nodes()
        - btrfs: remove BUG_ON(!eie) in find_parent_nodes
        - net: mdio: Demote probed message to debug print
        - mac80211: allow non-standard VHT MCS-10/11
        - dm btree: add a defensive bounds check to insert_at()
        - dm space map common: add bounds check to sm_ll_lookup_bitmap()
        - mlxsw: pci: Avoid flow control for EMAD packets
        - net: phy: marvell: configure RGMII delays for 88E1118
        - net: gemini: allow any RGMII interface mode
        - regulator: qcom_smd: Align probe function with rpmh-regulator
        - serial: pl010: Drop CR register reset on set_termios
        - serial: core: Keep mctrl register state and cached copy in sync
        - random: do not throw away excess input to crng_fast_load
        - parisc: Avoid calling faulthandler_disabled() twice
        - x86/kbuild: Enable CONFIG_KALLSYMS_ALL=y in the defconfigs
        - powerpc/6xx: add missing of_node_put
        - powerpc/powernv: add missing of_node_put
        - powerpc/cell: add missing of_node_put
        - powerpc/btext: add missing of_node_put
        - powerpc/watchdog: Fix missed watchdog reset due to memory ordering race
        - i2c: i801: Don't silently correct invalid transfer size
        - powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING
        - i2c: mpc: Correct I2C reset procedure
        - clk: meson: gxbb: Fix the SDM_EN bit for MPLL0 on GXBB
        - powerpc/powermac: Add missing lockdep_register_key()
        - KVM: PPC: Book3S: Suppress warnings when allocating too big memory slots
        - KVM: PPC: Book3S: Suppress failed alloc warning in H_COPY_TOFROM_GUEST
        - w1: Misuse of get_user()/put_user() reported by sparse
        - nvmem: core: set size for sysfs bin file
        - dm: fix alloc_dax error handling in alloc_dev
        - scsi: lpfc: Trigger SLI4 firmware dump before doing driver cleanup
        - ALSA: seq: Set upper limit of processed events
        - MIPS: Loongson64: Use three arguments for slti
        - powerpc/40x: Map 32Mbytes of memory at startup
        - selftests/powerpc/spectre_v2: Return skip code when miss_percent is high
        - powerpc: handle kdump appropriately with crash_kexec_post_notifiers option
        - powerpc/fadump: Fix inaccurate CPU state info in vmcore generated with panic
        - udf: Fix error handling in udf_new_inode()
        - MIPS: OCTEON: add put_device() after of_find_device_by_node()
        - irqchip/gic-v4: Disable redistributors' view of the VPE table at boot time
        - i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters
        - MIPS: Octeon: Fix build errors using clang
        - scsi: sr: Don't use GFP_DMA
        - ASoC: mediatek: mt8173: fix device_node leak
        - ASoC: mediatek: mt8183: fix device_node leak
        - phy: mediatek: Fix missing check in mtk_mipi_tx_probe
        - rpmsg: core: Clean up resources on announce_create failure.
        - crypto: omap-aes - Fix broken pm_runtime_and_get() usage
        - crypto: stm32/crc32 - Fix kernel BUG triggered in probe()
        - crypto: caam - replace this_cpu_ptr with raw_cpu_ptr
        - ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers
        - tpm: fix NPE on probe for missing device
        - spi: uniphier: Fix a bug that doesn't point to private data correctly
        - xen/gntdev: fix unmap notification order
        - fuse: Pass correct lend value to filemap_write_and_wait_range()
        - serial: Fix incorrect rs485 polarity on uart open
        - cputime, cpuacct: Include guest time in user time in cpuacct.stat
        - tracing/kprobes: 'nmissed' not showed correctly for kretprobe
        - iwlwifi: mvm: Increase the scan timeout guard to 30 seconds
        - s390/mm: fix 2KB pgtable release race
        - device property: Fix fwnode_graph_devcon_match() fwnode leak
        - drm/etnaviv: limit submit sizes
        - drm/nouveau/kms/nv04: use vzalloc for nv04_display
        - drm/bridge: analogix_dp: Make PSR-exit block less
        - parisc: Fix lpa and lpa_user defines
        - powerpc/64s/radix: Fix huge vmap false positive
        - PCI: xgene: Fix IB window setup
        - PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors
        - PCI: pci-bridge-emul: Make expansion ROM Base Address register read-only
        - PCI: pci-bridge-emul: Properly mark reserved PCIe bits in PCI config space
        - PCI: pci-bridge-emul: Fix definitions of reserved bits
        - PCI: pci-bridge-emul: Correctly set PCIe capabilities
        - PCI: pci-bridge-emul: Set PCI_STATUS_CAP_LIST for PCIe device
        - xfrm: fix policy lookup for ipv6 gre packets
        - btrfs: fix deadlock between quota enable and other quota operations
        - btrfs: check the root node for uptodate before returning it
        - btrfs: respect the max size in the header when activating swap file
        - ext4: make sure to reset inode lockdep class when quota enabling fails
        - ext4: make sure quota gets properly shutdown on error
        - ext4: fix a possible ABBA deadlock due to busy PA
        - ext4: initialize err_blk before calling __ext4_get_inode_loc
        - ext4: fix fast commit may miss tracking range for FALLOC_FL_ZERO_RANGE
        - ext4: set csum seed in tmp inode while migrating to extents
        - ext4: Fix BUG_ON in ext4_bread when write quota data
        - ext4: use ext4_ext_remove_space() for fast commit replay delete range
        - ext4: fast commit may miss tracking unwritten range during ftruncate
        - ext4: destroy ext4_fc_dentry_cachep kmemcache on module removal
        - ext4: fix null-ptr-deref in '__ext4_journal_ensure_credits'
        - ext4: don't use the orphan list when migrating an inode
        - drm/radeon: fix error handling in radeon_driver_open_kms
        - of: base: Improve argument length mismatch error
        - firmware: Update Kconfig help text for Google firmware
        - can: mcp251xfd: mcp251xfd_tef_obj_read(): fix typo in error message
        - media: rcar-csi2: Optimize the selection PHTW register
        - media: correct MEDIA_TEST_SUPPORT help text
        - Documentation: dmaengine: Correctly describe dmatest with channel unset
        - Documentation: ACPI: Fix data node reference documentation
        - Documentation: refer to config RANDOMIZE_BASE for kernel address-space
          randomization
        - Documentation: fix firewire.rst ABI file path error
        - Bluetooth: hci_sync: Fix not setting adv set duration
        - scsi: core: Show SCMD_LAST in text form
        - dmaengine: uniphier-xdmac: Fix type of address variables
        - RDMA/hns: Modify the mapping attribute of doorbell to device
        - RDMA/rxe: Fix a typo in opcode name
        - dmaengine: stm32-mdma: fix STM32_MDMA_CTBR_TSEL_MASK
        - Revert "net/mlx5: Add retry mechanism to the command entry index allocation"
        - powerpc/cell: Fix clang -Wimplicit-fallthrough warning
        - powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses
        - block: Fix fsync always failed if once failed
        - bpftool: Remove inclusion of utilities.mak from Makefiles
        - xdp: check prog type before updating BPF link
        - perf evsel: Override attr->sample_period for non-libpfm4 events
        - ipv4: update fib_info_cnt under spinlock protection
        - ipv4: avoid quadratic behavior in netns dismantle
        - net/fsl: xgmac_mdio: Add workaround for erratum A-009885
        - net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module
        - parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries
        - f2fs: compress: fix potential deadlock of compress file
        - f2fs: fix to reserve space for IO align feature
        - af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress
        - clk: Emit a stern warning with writable debugfs enabled
        - clk: si5341: Fix clock HW provider cleanup
        - net/smc: Fix hung_task when removing SMC-R devices
        - net: axienet: increase reset timeout
        - net: axienet: Wait for PhyRstCmplt after core reset
        - net: axienet: reset core on initialization prior to MDIO access
        - net: axienet: add missing memory barriers
        - net: axienet: limit minimum TX ring size
        - net: axienet: Fix TX ring slot available check
        - net: axienet: fix number of TX ring slots for available check
        - net: axienet: fix for TX busy handling
        - net: axienet: increase default TX ring size to 128
        - HID: vivaldi: fix handling devices not using numbered reports
        - rtc: pxa: fix null pointer dereference
        - vdpa/mlx5: Fix wrong configuration of virtio_version_1_0
        - virtio_ring: mark ring unused on error
        - taskstats: Cleanup the use of task->exit_code
        - inet: frags: annotate races around fqdir->dead and fqdir->high_thresh
        - netns: add schedule point in ops_exit_list()
        - xfrm: Don't accidentally set RTO_ONLINK in decode_session4()
        - gre: Don't accidentally set RTO_ONLINK in gre_fill_metadata_dst()
        - libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route()
        - perf script: Fix hex dump character output
        - dmaengine: at_xdmac: Don't start transactions at tx_submit level
        - dmaengine: at_xdmac: Start transfer for cyclic channels in issue_pending
        - dmaengine: at_xdmac: Print debug message after realeasing the lock
        - dmaengine: at_xdmac: Fix concurrency over xfers_list
        - dmaengine: at_xdmac: Fix lld view setting
        - dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
        - perf probe: Fix ppc64 'perf probe add events failed' case
        - devlink: Remove misleading internal_flags from health reporter dump
        - arm64: dts: qcom: msm8996: drop not documented adreno properties
        - net: bonding: fix bond_xmit_broadcast return value error bug
        - net_sched: restore "mpu xxx" handling
        - bcmgenet: add WOL IRQ check
        - net: ethernet: mtk_eth_soc: fix error checking in mtk_mac_config()
        - net: sfp: fix high power modules without diagnostic monitoring
        - net: mscc: ocelot: fix using match before it is set
        - dt-bindings: display: meson-dw-hdmi: add missing sound-name-prefix property
        - dt-bindings: display: meson-vpu: Add missing amlogic,canvas property
        - dt-bindings: watchdog: Require samsung,syscon-phandle for Exynos7
        - scripts/dtc: dtx_diff: remove broken example from help text
        - lib82596: Fix IRQ check in sni_82596_probe
        - mm/hmm.c: allow VM_MIXEDMAP to work with hmm_range_fault
        - lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test
        - mtd: nand: bbt: Fix corner case in bad block table handling
        - ath10k: Fix the MTU size on QCA9377 SDIO
        - scripts: sphinx-pre-install: add required ctex dependency
        - scripts: sphinx-pre-install: Fix ctex support on Debian
        - KVM: x86/mmu: Fix write-protection of PTs mapped by the TDP MMU
        - HID: Ignore battery for Elan touchscreen on HP Envy X360 15t-dr100
        - f2fs: fix to do sanity check on inode type during garbage collection
        - mtd: rawnand: Export nand_read_page_hwecc_oob_first()
        - mtd: rawnand: ingenic: JZ4740 needs 'oob_first' read page function
        - riscv: Get rid of MAXPHYSMEM configs
        - RISC-V: Use common riscv_cpuid_to_hartid_mask() for both SMP=y and SMP=n
        - riscv: try to allocate crashkern region from 32bit addressible memory
        - riscv: Don't use va_pa_offset on kdump
        - riscv: use hart id instead of cpu id on machine_kexec
        - crypto: x86/aesni - don't require alignment of data
        - net: phy: marvell: add Marvell specific PHY loopback
        - media: cec: fix a deadlock situation
        - media: ov8865: Disable only enabled regulators on error path
        - mei: hbm: fix client dma reply status
        - iio: trigger: Fix a scheduling whilst atomic issue seen on tsc2046
        - bus: mhi: pci_generic: Graceful shutdown on freeze
        - bus: mhi: core: Fix reading wake_capable channel configuration
        - arm64: errata: Fix exec handling in erratum 1418040 workaround
        - drm/tegra: Add back arm_iommu_detach_device()
        - virtio/virtio_mem: handle a possible NULL as a memcpy parameter
        - Bluetooth: virtio_bt: fix memory leak in virtbt_rx_handle()
        - drm/vc4: crtc: Make sure the HDMI controller is powered when disabling
        - libbpf: Free up resources used by inner map definition
        - bpftool: Fix memory leak in prog_dump()
        - arm64: dts: qcom: sc7280: Fix incorrect clock name
        - libbpf: Fix glob_syms memory leak in bpf_linker
        - libbpf: Fix using invalidated memory in bpf_linker
        - bfq: Do not let waker requests skip proper accounting
        - media: i2c: imx274: fix s_frame_interval runtime resume not requested
        - media: i2c: Re-order runtime pm initialisation
        - media: i2c: ov8865: Fix lockdep error
        - net: stmmac: Add platform level debug register dump feature
        - drm/vmwgfx: Remove the deprecated lower mem limit
        - crypto: caam - save caam memory to support crypto engine retry mechanism.
        - arm64: dts: ti: k3-am642: Fix the L2 cache sets
        - bpf: Fix the test_task_vma selftest to support output shorter than 1 kB
        - Bluetooth: refactor set_exp_feature with a feature table
        - Bluetooth: MGMT: Use hci_dev_test_and_{set,clear}_flag
        - drm/amd/display: Fix bug in debugfs crc_win_update entry
        - wcn36xx: Fix max channels retrieval
        - perf/arm-cmn: Fix CPU hotplug unregistration
        - net: dsa: hellcreek: Fix insertion of static FDB entries
        - net: dsa: hellcreek: Add STP forwarding rule
        - net: dsa: hellcreek: Allow PTP P2P measurements on blocked ports
        - net: dsa: hellcreek: Add missing PTP via UDP rules
        - mt76: mt7921: drop offload_flags overwritten
        - iwlwifi: mvm: perform 6GHz passive scan after suspend
        - iwlwifi: mvm: set protected flag only for NDP ranging
        - crypto: octeontx2 - prevent underflow in get_cores_bmap()
        - regulator: qcom-labibb: OCP interrupts are not a failure while disabled
        - io_uring: remove double poll on poll update
        - serial: 8250_bcm7271: Propagate error codes from brcmuart_probe()
        - net: ethernet: mtk_eth_soc: fix return values and refactor MDIO ops
        - net: dsa: fix incorrect function pointer check for MRP ring roles
        - net/smc: Reset conn->lgr when link group registration fails
        - usb: dwc2: do not gate off the hardware if it does not support clock gating
        - serial: liteuart: fix MODULE_ALIAS
        - serial: stm32: move tx dma terminate DMA to shutdown
        - x86, sched: Fix undefined reference to init_freq_invariance_cppc() build
          error
        - net/mlx5e: Fix wrong usage of fib_info_nh when routes with nexthop objects
          are used
        - Revert "net/mlx5e: Block offload of outer header csum for GRE tunnel"
        - net/mlx5e: Fix matching on modified inner ip_ecn bits
        - net/mlx5: Fix access to sf_dev_table on allocation failure
        - net/mlx5e: Sync VXLAN udp ports during uplink representor profile change
        - net: mscc: ocelot: fix incorrect balancing with down LAG ports
        - net/sched: flow_dissector: Fix matching on zone id for invalid conns
        - net: openvswitch: Fix matching zone id for invalid conns arriving from tc
        - net: openvswitch: Fix ct_state nat flags for conns arriving from tc
        - bnxt_en: Refactor coredump functions
        - RDMA/rtrs-clt: Fix the initial value of min_latency
        - ALSA: hda: Make proper use of timecounter
        - binder: avoid potential data leakage when copying txn
        - scsi: core: Fix scsi_device_max_queue_depth()
        - iommu/amd: X2apic mode: re-enable after resume
        - iommu/amd: X2apic mode: setup the INTX registers on mask/unmask
        - iommu/amd: X2apic mode: mask/unmask interrupts on suspend/resume
        - iommu/amd: Remove useless irq affinity notifier
        - phy: cadence: Sierra: Fix to get correct parent for mux clocks
        - ALSA: hda/cs8409: Increase delay during jack detection
        - ALSA: hda/cs8409: Fix Jack detection after resume
        - clk: qcom: gcc-sc7280: Mark gcc_cfg_noc_lpass_clk always enabled
        - of/fdt: Don't worry about non-memory region overlap for no-map
        - drm/panel: Delete panel on mipi_dsi_attach() failure
        - selftests/bpf: Fix memory leaks in btf_type_c_dump() helper
        - media: atomisp: check before deference asd variable
        - usb: dwc3: meson-g12a: fix shared reset control use
        - psi: Fix PSI_MEM_FULL state when tasks are in memstall and doing reclaim
        - HID: magicmouse: Report battery level over USB
        - libbpf: Accommodate DWARF/compiler bug with duplicated structs
        - ethernet: renesas: Use div64_ul instead of do_div
        - arm64: dts: qcom: sm8350: Shorten camera-thermal-bottom name
        - drm/amd/display: add else to avoid double destroy clk_mgr
        - regulator: da9121: Prevent current limit change when enabled
        - drm/vmwgfx: Release ttm memory if probe fails
        - arm64: dts: ti: j721e-main: Fix 'dtbs_check' in serdes_ln_ctrl node
        - media: atomisp: fix "variable dereferenced before check 'asd'"
        - arm64: dts: renesas: Fix thermal bindings
        - ARM: dts: qcom: sdx55: fix IPA interconnect definitions
        - media: rockchip: rkisp1: use device name for debugfs subdir name
        - mmc: tmio: reinit card irqs in reset routine
        - drm/amd/amdgpu: fix psp tmr bo pin count leak in SRIOV
        - drm/amd/amdgpu: fix gmc bo pin count leak in SRIOV
        - crypto: ccp - Move SEV_INIT retry for corrupted data
        - mt76: mt7615: fix possible deadlock while mt7615_register_ext_phy()
        - mt76: mt7615: improve wmm index allocation
        - ath9k_htc: fix NULL pointer dereference at ath9k_htc_rxep()
        - ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet()
        - iwlwifi: mvm: fix AUX ROC removal
        - mmc: sdhci-pci-gli: GL9755: Support for CD/WP inversion on OF platforms
        - mmc: mtk-sd: Use readl_poll_timeout instead of open-coded polling
        - ACPI: CPPC: Check present CPUs for determining _CPC is valid
        - bpf/selftests: Fix namespace mount setup in tc_redirect
        - serial: pl011: Drop CR register reset on set_termios
        - net/mlx5: Update log_max_qp value to FW max capability
        - ASoC: imx-hdmi: add put_device() after of_find_device_by_node()
        - interconnect: qcom: rpm: Prevent integer overflow in rate
        - scsi: ufs: Fix a kernel crash during shutdown
        - scsi: lpfc: Fix leaked lpfc_dmabuf mbox allocations with NPIV
        - selftests/powerpc: Add a test of sigreturning to the kernel
        - scsi: mpi3mr: Fixes around reply request queues
        - ASoC: mediatek: mt8192-mt6359: fix device_node leak
        - seg6: export get_srh() for ICMP handling
        - icmp: ICMPV6: Examine invoking packet for Segment Route Headers.
        - udp6: Use Segment Routing Header for dest address if present
        - ifcvf/vDPA: fix misuse virtio-net device config size for blk dev
        - tpm: fix potential NULL pointer access in tpm_del_char_device
        - mfd: tps65910: Set PWR_OFF bit during driver probe
        - sched/cpuacct: Fix user/system in shown cpuacct.usage*
        - tracing: Have syscall trace events use trace_event_buffer_lock_reserve()
        - remoteproc: imx_rproc: Fix a resource leak in the remove function
        - drm/amd/display: Fix the uninitialized variable in enable_stream_features()
        - scsi: lpfc: Fix lpfc_force_rscn ndlp kref imbalance
        - drm/amdgpu: don't do resets on APUs which don't support it
        - ath11k: qmi: avoid error messages when dma allocation fails
        - scsi: ufs: ufs-mediatek: Fix error checking in ufs_mtk_init_va09_pwr_ctrl()
        - RDMA/cma: Remove open coding of overflow checking for private_data_len
        - dmaengine: idxd: fix wq settings post wq disable
        - drm/vc4: crtc: Drop feed_txp from state
        - drm/vc4: Fix non-blocking commit getting stuck forever
        - drm/vc4: crtc: Copy assigned channel to the CRTC
        - bpf: Mark PTR_TO_FUNC register initially with zero offset
        - mlx5: Don't accidentally set RTO_ONLINK before mlx5e_route_lookup_ipv4_get()
        - riscv: dts: microchip: mpfs: Drop empty chosen node
        - drm/vmwgfx: Remove unused compile options
        - f2fs: fix remove page failed in invalidate compress pages
        - f2fs: fix to avoid panic in is_alive() if metadata is inconsistent
        - crypto: octeontx2 - uninitialized variable in kvf_limits_store()
        - gpio: mpc8xxx: Fix IRQ check in mpc8xxx_probe
        - bitops: protect find_first_{,zero}_bit properly
        - net: ipa: fix atomic update in ipa_endpoint_replenish()
        - net: cpsw: avoid alignment faults by taking NET_IP_ALIGN into account
        - net: phy: micrel: use kszphy_suspend()/kszphy_resume for irq aware devices
        - sch_api: Don't skip qdisc attach on ingress
    
      * Packaging resync (LP: #1786013)
        - [Packaging] resync dkms-build{,--nvidia-N} from LRMv5
    
     -- Stefan Bader <email address hidden>  Fri, 18 Mar 2022 11:05:03 +0100
  • linux (5.13.0-37.42) impish; urgency=medium
    
      * impish/linux: 5.13.0-37.42 -proposed tracker (LP: #1964959)
    
      * CVE-2022-0742
        - ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report()
    
    linux (5.13.0-36.41) impish; urgency=medium
    
      * Packaging resync (LP: #1786013)
        - [Packaging] resync getabis
        - debian/dkms-versions -- update from kernel-versions (main/2022.02.21)
    
      * Broken network on some AWS instances with focal/impish kernels
        (LP: #1961968)
        - SAUCE: Revert "PCI/MSI: Mask MSI-X vectors only on success"
    
      * [SRU]PCI: vmd: Do not disable MSI-X remapping if interrupt remapping is
        enabled by IOMMU (LP: #1937295)
        - PCI: vmd: Do not disable MSI-X remapping if interrupt remapping is enabled
          by IOMMU
    
      * [UBUNTU 20.04] kernel: Add support for CPU-MF counter second version 7
        (LP: #1960182)
        - s390/cpumf: Support for CPU Measurement Facility CSVN 7
        - s390/cpumf: Support for CPU Measurement Sampling Facility LS bit
    
      * [UBUNTU 21.10] s390/cio: verify the driver availability for path_event call
        (LP: #1960875)
        - s390/cio: verify the driver availability for path_event call
    
      * Impish update: upstream stable patchset 2022-02-14 (LP: #1960861)
        - devtmpfs regression fix: reconfigure on each mount
        - orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc()
        - remoteproc: qcom: pil_info: Don't memcpy_toio more than is provided
        - perf: Protect perf_guest_cbs with RCU
        - KVM: x86: Register Processor Trace interrupt hook iff PT enabled in guest
        - KVM: s390: Clarify SIGP orders versus STOP/RESTART
        - 9p: only copy valid iattrs in 9P2000.L setattr implementation
        - video: vga16fb: Only probe for EGA and VGA 16 color graphic cards
        - media: uvcvideo: fix division by zero at stream start
        - rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with
          interrupts enabled
        - firmware: qemu_fw_cfg: fix sysfs information leak
        - firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries
        - firmware: qemu_fw_cfg: fix kobject leak in probe error path
        - KVM: x86: remove PMU FIXED_CTR3 from msrs_to_save_all
        - ALSA: hda/realtek: Add speaker fixup for some Yoga 15ITL5 devices
        - ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after
          reboot from Windows
        - ALSA: hda: ALC287: Add Lenovo IdeaPad Slim 9i 14ITL5 speaker quirk
        - ALSA: hda/realtek: Add quirk for Legion Y9000X 2020
        - ALSA: hda/realtek: Re-order quirk entries for Lenovo
        - powerpc/pseries: Get entry and uaccess flush required bits from
          H_GET_CPU_CHARACTERISTICS
        - mtd: fixup CFI on ixp4xx
        - KVM: x86: don't print when fail to read/write pv eoi memory
        - remoteproc: qcom: pas: Add missing power-domain "mxc" for CDSP
        - perf annotate: Avoid TUI crash when navigating in the annotation of
          recursive functions
        - ALSA: hda/realtek: Use ALC285_FIXUP_HP_GPIO_LED on another HP laptop
        - ALSA: hda/tegra: Fix Tegra194 HDA reset failure
    
      * CVE-2022-0516
        - KVM: s390: Return error on SIDA memop on normal guest
    
      * CVE-2022-0435
        - tipc: improve size validations for received domain records
    
      * CVE-2022-0492
        - cgroup-v1: Require capabilities to set release_agent
    
      * jammy 5.15 kernel soft lockup when zfs.ko is loaded on s390x w/ gcc >=
        11.2.0-10ubuntu1 / gcc-11 PLT regression on s390x (LP: #1954676)
        - s390/module: fix loading modules with a lot of relocations
    
      * Impish update: upstream stable patchset 2022-02-09 (LP: #1960452)
        - workqueue: Fix unbind_workers() VS wq_worker_running() race
        - Bluetooth: btusb: fix memory leak in btusb_mtk_submit_wmt_recv_urb()
        - Bluetooth: btusb: Add two more Bluetooth parts for WCN6855
        - Bluetooth: btusb: Add support for Foxconn QCA 0xe0d0
        - Bluetooth: bfusb: fix division by zero in send path
        - ARM: dts: exynos: Fix BCM4330 Bluetooth reset polarity in I9100
        - USB: core: Fix bug in resuming hub's handling of wakeup requests
        - USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status
        - ath11k: Fix buffer overflow when scanning with extraie
        - mmc: sdhci-pci: Add PCI ID for Intel ADL
        - mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe()
        - can: gs_usb: fix use of uninitialized variable, detach device on reception
          of invalid USB data
        - can: isotp: convert struct tpcon::{idx,len} to unsigned int
        - can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved}
        - random: fix data race on crng_node_pool
        - random: fix data race on crng init time
        - random: fix crash on multiple early calls to add_bootloader_randomness()
        - media: Revert "media: uvcvideo: Set unique vdev name based in type"
        - staging: wlan-ng: Avoid bitwise vs logical OR warning in
          hfa384x_usb_throttlefn()
        - drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk()
        - staging: greybus: fix stack size warning with UBSAN
        - s390/kexec: handle R_390_PLT32DBL rela in arch_kexec_apply_relocations_add()
        - Bluetooth: btusb: Add the new support ID for Realtek RTL8852A
        - Bluetooth: btusb: Add support for IMC Networks Mediatek Chip(MT7921)
        - Bbluetooth: btusb: Add another Bluetooth part for Realtek 8852AE
        - Bluetooth: btusb: Enable MSFT extension for Mediatek Chip (MT7921)
        - Bluetooth: btusb: enable Mediatek to support AOSP extension
        - Bluetooth: btusb: Add one more Bluetooth part for the Realtek RTL8852AE
        - Bluetooth: btusb: Add the new support IDs for WCN6855
        - fget: clarify and improve __fget_files() implementation
        - Bluetooth: btusb: Add one more Bluetooth part for WCN6855
        - Bluetooth: add quirk disabling LE Read Transmit Power
        - Bluetooth: btbcm: disable read tx power for some Macs with the T2 Security
          chip
        - Bluetooth: btbcm: disable read tx power for MacBook Air 8,1 and 8,2
    
      * Impish update: upstream stable patchset 2022-01-31 (LP: #1959627)
        - selftests: x86: fix [-Wstringop-overread] warn in test_process_vm_readv()
        - tracing: Fix check for trace_percpu_buffer validity in get_trace_buf()
        - tracing: Tag trace_percpu_buffer as a percpu pointer
        - ieee802154: atusb: fix uninit value in atusb_set_extended_addr
        - i40e: Fix to not show opcode msg on unsuccessful VF MAC change
        - iavf: Fix limit of total number of queues to active queues of VF
        - RDMA/core: Don't infoleak GRH fields
        - netrom: fix copying in user data in nr_setsockopt
        - RDMA/uverbs: Check for null return of kmalloc_array
        - mac80211: initialize variable have_higher_than_11mbit
        - sfc: The RX page_ring is optional
        - i40e: fix use-after-free in i40e_sync_filters_subtask()
        - i40e: Fix for displaying message regarding NVM version
        - i40e: Fix incorrect netdev's real number of RX/TX queues
        - ftrace/samples: Add missing prototypes direct functions
        - ipv4: Check attribute length for RTA_GATEWAY in multipath route
        - ipv4: Check attribute length for RTA_FLOW in multipath route
        - ipv6: Check attribute length for RTA_GATEWAY in multipath route
        - ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route
        - lwtunnel: Validate RTA_ENCAP_TYPE attribute length
        - batman-adv: mcast: don't send link-local multicast to mcast routers
        - sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc
        - net: ena: Fix undefined state when tx request id is out of bounds
        - net: ena: Fix error handling when calculating max IO queues number
        - power: supply: core: Break capacity loop
        - power: reset: ltc2952: Fix use of floating point literals
        - rndis_host: support Hytera digital radios
        - phonet: refcount leak in pep_sock_accep
        - power: bq25890: Enable continuous conversion for ADC at charging
        - ipv6: Continue processing multipath route even if gateway attribute is
          invalid
        - ipv6: Do cleanup if attribute validation fails in multipath route
        - usb: mtu3: fix interval value for intr and isoc
        - scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown()
        - ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate
        - net: udp: fix alignment problem in udp4_seq_show()
        - atlantic: Fix buff_ring OOB in aq_ring_rx_clean
        - mISDN: change function names to avoid conflicts
        - drm/amd/display: Added power down for DCN10
        - ipv6: raw: check passed optlen before reading
        - ARM: dts: gpio-ranges property is now required
        - Input: zinitix - make sure the IRQ is allocated before it gets enabled
        - fscache_cookie_enabled: check cookie is valid before accessing it
        - Revert "net: usb: r8152: Add MAC passthrough support for more Lenovo Docks"
        - mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh
        - selftests: net: udpgro_fwd.sh: explicitly checking the available ping
          feature
        - sctp: hold endpoint before calling cb in sctp_transport_lookup_process
        - net: ena: Fix wrong rx request id by resetting device
        - md/raid1: fix missing bitmap update w/o WriteMostly devices
        - cgroup: Use open-time credentials for process migraton perm checks
        - cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv
        - cgroup: Use open-time cgroup namespace for process migration perm checks
        - i2c: mpc: Avoid out of bounds memory access
        - net ticp:fix a kernel-infoleak in __tipc_sendmsg()
        - fbdev: fbmem: add a helper to determine if an aperture is used by a fw fb
        - drm/amdgpu: disable runpm if we are the primary adapter
        - auxdisplay: charlcd: checking for pointer reference before dereferencing
        - drm/amd/pm: Fix xgmi link control on aldebaran
        - drm/amd/pm: skip setting gfx cgpg in the s0ix suspend-resume
        - drm/amdgpu: always reset the asic in suspend (v2)
        - drm/amdgpu: put SMU into proper state on runpm suspending for BOCO capable
          platform
        - userfaultfd/selftests: fix hugetlb area allocations
    
      * Impish update: upstream stable patchset 2022-01-26 (LP: #1959134)
        - Input: i8042 - add deferred probe support
        - Input: i8042 - enable deferred probe quirk for ASUS UM325UA
        - tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok().
        - tomoyo: use hwight16() in tomoyo_domain_quota_is_ok()
        - parisc: Clear stale IIR value on instruction access rights trap
        - platform/x86: apple-gmux: use resource_size() with res
        - memblock: fix memblock_phys_alloc() section mismatch error
        - recordmcount.pl: fix typo in s390 mcount regex
        - selinux: initialize proto variable in selinux_ip_postroute_compat()
        - scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write()
        - net/mlx5: DR, Fix NULL vs IS_ERR checking in dr_domain_init_resources
        - net/mlx5e: Wrap the tx reporter dump callback to extract the sq
        - net/mlx5e: Fix interoperability between XSK and ICOSQ recovery flow
        - net/mlx5e: Fix ICOSQ recovery flow for XSK
        - udp: using datalen to cap ipv6 udp max gso segments
        - selftests: Calculate udpgso segment count without header adjustment
        - sctp: use call_rcu to free endpoint
        - net/smc: fix using of uninitialized completions
        - net: usb: pegasus: Do not drop long Ethernet frames
        - net: ag71xx: Fix a potential double free in error handling paths
        - net: lantiq_xrx200: fix statistics of received bytes
        - NFC: st21nfca: Fix memory leak in device probe and remove
        - net/smc: don't send CDC/LLC message if link not ready
        - net/smc: fix kernel panic caused by race of smc_sock
        - igc: Fix TX timestamp support for non-MSI-X platforms
        - ionic: Initialize the 'lif->dbid_inuse' bitmap
        - net/mlx5e: Fix wrong features assignment in case of error
        - selftests/net: udpgso_bench_tx: fix dst ip argument
        - net/ncsi: check for error return from call to nla_put_u32
        - fsl/fman: Fix missing put_device() call in fman_port_probe
        - i2c: validate user data in compat ioctl
        - nfc: uapi: use kernel size_t to fix user-space builds
        - uapi: fix linux/nfc.h userspace compilation errors
        - drm/amdgpu: When the VCN(1.0) block is suspended, powergating is explicitly
          enabled
        - drm/amdgpu: add support for IP discovery gc_info table v2
        - xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set.
        - usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
        - usb: mtu3: add memory barrier before set GPD's HWO
        - usb: mtu3: fix list_head check warning
        - usb: mtu3: set interval of FS intr and isoc endpoint
        - binder: fix async_free_space accounting for empty parcels
        - scsi: vmw_pvscsi: Set residual data length conditionally
        - Input: appletouch - initialize work before device registration
        - Input: spaceball - fix parsing of movement data packets
        - net: fix use-after-free in tw_timer_handler
        - perf script: Fix CPU filtering of a script's switch events
        - net/sched: Extend qdisc control block with tc control block
        - platform/mellanox: mlxbf-pmc: Fix an IS_ERR() vs NULL bug in
          mlxbf_pmc_map_counters
        - net/mlx5: Fix SF health recovery flow
        - net/mlx5: Fix tc max supported prio for nic mode
        - selftests: net: Fix a typo in udpgro_fwd.sh
        - selftests: net: using ping6 for IPv6 in udpgro_fwd.sh
        - fs/mount_setattr: always cleanup mount_kattr
    
      * Impish update: upstream stable patchset 2022-01-21 (LP: #1958672)
        - arm64: vdso32: require CROSS_COMPILE_COMPAT for gcc+bfd
        - net: usb: lan78xx: add Allied Telesis AT29M2-AF
        - ext4: prevent partial update of the extent blocks
        - ext4: check for out-of-order index extents in ext4_valid_extent_entries()
        - ext4: check for inconsistent extents between index and leaf block
        - HID: holtek: fix mouse probing
        - HID: potential dereference of null pointer
        - arm64: dts: allwinner: orangepi-zero-plus: fix PHY mode
        - spi: change clk_disable_unprepare to clk_unprepare
        - ASoC: meson: aiu: fifo: Add missing dma_coerce_mask_and_coherent()
        - IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
        - RDMA/hns: Replace kfree() with kvfree()
        - netfilter: fix regression in looped (broad|multi)cast's MAC handling
        - ARM: dts: imx6qdl-wandboard: Fix Ethernet support
        - net: marvell: prestera: fix incorrect return of port_find
        - qlcnic: potential dereference null pointer of rx_queue->page_ring
        - net: accept UFOv6 packages in virtio_net_hdr_to_skb
        - net: skip virtio_net_hdr_set_proto if protocol already set
        - igb: fix deadlock caused by taking RTNL in RPM resume path
        - ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module
        - bonding: fix ad_actor_system option setting to default
        - fjes: Check for error irq
        - drivers: net: smc911x: Check for error irq
        - net: ks8851: Check for error irq
        - sfc: Check null pointer of rx_queue->page_ring
        - sfc: falcon: Check null pointer of rx_queue->page_ring
        - pinctrl: bcm2835: Change init order for gpio hogs
        - hwmon: (lm90) Fix usage of CONFIG2 register in detect function
        - hwmon: (lm90) Add basic support for TI TMP461
        - hwmon: (lm90) Introduce flag indicating extended temperature support
        - hwmon: (lm90) Drop critical attribute support for MAX6654
        - ALSA: jack: Check the return value of kstrdup()
        - ALSA: drivers: opl3: Fix incorrect use of vp->state
        - ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6
        - ALSA: hda/realtek: Add new alc285-hp-amp-init model
        - ALSA: hda/realtek: Fix quirk for Clevo NJ51CU
        - ASoC: meson: aiu: Move AIU_I2S_MISC hold setting to aiu-fifo-i2s
        - Input: atmel_mxt_ts - fix double free in mxt_read_info_block
        - ipmi: bail out if init_srcu_struct fails
        - ipmi: ssif: initialize ssif_info->client early
        - ipmi: fix initialization when workqueue allocation fails
        - parisc: Correct completer in lws start
        - parisc: Fix mask used to select futex spinlock
        - tee: handle lookup of shm with reference count 0
        - x86/pkey: Fix undefined behaviour with PKRU_WD_BIT
        - platform/x86: intel_pmc_core: fix memleak on registration failure
        - KVM: VMX: Wake vCPU when delivering posted IRQ even if vCPU == this vCPU
        - pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines
        - gpio: dln2: Fix interrupts when replugging the device
        - mmc: sdhci-tegra: Fix switch to HS400ES mode
        - mmc: meson-mx-sdhc: Set MANUAL_STOP for multi-block SDIO commands
        - mmc: core: Disable card detect during shutdown
        - mmc: mmci: stm32: clear DLYB_CR after sending tuning command
        - ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling
        - mac80211: fix locking in ieee80211_start_ap error path
        - mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page()
        - tee: optee: Fix incorrect page free bug
        - f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()
        - usb: gadget: u_ether: fix race in setting MAC address in setup phase
        - KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state
        - mm: mempolicy: fix THP allocations escaping mempolicy restrictions
        - Input: elants_i2c - do not check Remark ID on eKTH3900/eKTH5312
        - Input: goodix - add id->model mapping for the "9111" model
        - ASoC: tas2770: Fix setting of high sample rates
        - ASoC: rt5682: fix the wrong jack type detected
        - pinctrl: mediatek: fix global-out-of-bounds issue
        - hwmom: (lm90) Fix citical alarm status for MAX6680/MAX6681
        - hwmon: (lm90) Do not report 'busy' status bit as alarm
        - ax25: NPD bug when detaching AX25 device
        - hamradio: defer ax25 kfree after unregister_netdev
        - hamradio: improve the incomplete fix to avoid NPD
        - phonet/pep: refuse to enable an unbound pipe
        - selftests: KVM: Fix non-x86 compiling
        - NFSD: Fix READDIR buffer overflow
        - PM: sleep: Fix error handling in dpm_prepare()
        - bus: sunxi-rsb: Fix shutdown
        - netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()
        - ice: Use xdp_buf instead of rx_buf for xsk zero-copy
        - ice: xsk: return xsk buffers back to pool when cleaning the ring
        - tcp: move inet->rx_dst_ifindex to sk->sk_rx_dst_ifindex
        - ipv6: move inet6_sk(sk)->rx_dst_cookie to sk->sk_rx_dst_cookie
        - inet: fully convert sk->sk_rx_dst to RCU rules
        - io_uring: zero iocb->ki_pos for stream file types
        - veth: ensure skb entering GRO are not cloned.
        - net: bridge: Use array_size() helper in copy_to_user()
        - r8152: fix the force speed doesn't work for RTL8156
        - net: stmmac: dwmac-visconti: Fix value of ETHER_CLK_SEL_FREQ_SEL_2P5M
        - ARM: 9160/1: NOMMU: Reload __secondary_data after PROCINFO_INITFUNC
        - uapi: Fix undefined __always_inline on non-glibc systems
        - Revert "x86/boot: Pull up cmdline preparation and early param parsing"
        - x86/boot: Move EFI range reservation after cmdline parsing
        - ALSA: hda/hdmi: Disable silent stream on GLK
        - platform/x86: amd-pmc: only use callbacks for suspend
        - KVM: x86: Always set kvm_run->if_flag
        - KVM: x86/mmu: Don't advance iterator after restart due to yielding
        - KVM: nVMX: Synthesize TRIPLE_FAULT for L2 if emulation is required
        - mm, hwpoison: fix condition in free hugetlb page path
        - netfs: fix parameter of cleanup()
        - arm64: dts: lx2160a: fix scl-gpios property name
        - kfence: fix memory leak when cat kfence objects
        - Input: iqs626a - prohibit inlining of channel parsing functions
        - ASoC: SOF: Intel: pci-tgl: add ADL-M support
        - ASoC: SOF: Intel: pci-tgl: add new ADL-P variant
        - ASoC: SOF: Intel: pci-tgl: add ADL-N support
        - r8152: sync ocp base
        - tun: avoid double free in tun_free_netdev
    
      * Impish update: upstream stable patchset 2022-01-18 (LP: #1958287)
        - netfilter: selftest: conntrack_vrf.sh: fix file permission
        - nfc: fix segfault in nfc_genl_dump_devices_done
        - drm/msm/dsi: set default num_data_lanes
        - KVM: arm64: Save PSTATE early on exit
        - s390/test_unwind: use raw opcode instead of invalid instruction
        - Revert "tty: serial: fsl_lpuart: drop earlycon entry for i.MX8QXP"
        - net/mlx4_en: Update reported link modes for 1/10G
        - ALSA: hda: Add Intel DG2 PCI ID and HDMI codec vid
        - ALSA: hda/hdmi: fix HDA codec entry table order for ADL-P
        - parisc/agp: Annotate parisc agp init functions with __init
        - i2c: rk3x: Handle a spurious start completion interrupt flag
        - net: netlink: af_netlink: Prevent empty skb by adding a check on len.
        - drm/amd/display: Fix for the no Audio bug with Tiled Displays
        - drm/amd/display: add connector type check for CRC source set
        - tracing: Fix a kmemleak false positive in tracing_map
        - staging: most: dim2: use device release method
        - fuse: make sure reclaim doesn't write the inode
        - hwmon: (dell-smm) Fix warning on /proc/i8k creation error
        - ethtool: do not perform operations on net devices being unregistered
        - perf inject: Fix itrace space allowed for new attributes
        - memblock: free_unused_memmap: use pageblock units instead of MAX_ORDER
        - memblock: align freed memory map on pageblock boundaries with SPARSEMEM
        - memblock: ensure there is no overflow in memblock_overlaps_region()
        - arm: extend pfn_valid to take into account freed memory map alignment
        - arm: ioremap: don't abuse pfn_valid() to check if pfn is in RAM
        - hwmon: (corsair-psu) fix plain integer used as NULL pointer
        - perf bpf_skel: Do not use typedef to avoid error on old clang
        - netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock
        - ice: fix FDIR init missing when reset VF
        - drm/msm/dp: Avoid unpowered AUX xfers that caused crashes
        - KVM: selftests: Make sure kvm_create_max_vcpus test won't hit RLIMIT_NOFILE
        - KVM: downgrade two BUG_ONs to WARN_ON_ONCE
        - mac80211: fix regression in SSN handling of addba tx
        - mac80211: mark TX-during-stop for TX in in_reconfig
        - mac80211: send ADDBA requests using the tid/queue of the aggregation session
        - mac80211: validate extended element ID is present
        - firmware: arm_scpi: Fix string overflow in SCPI genpd driver
        - bpf: Fix signed bounds propagation after mov32
        - bpf: Make 32->64 bounds propagation slightly more robust
        - bpf, selftests: Add test case trying to taint map value pointer
        - virtio_ring: Fix querying of maximum DMA mapping size for virtio device
        - vdpa: check that offsets are within bounds
        - recordmcount.pl: look for jgnop instruction as well as bcrl on s390
        - dm btree remove: fix use after free in rebalance_children()
        - audit: improve robustness of the audit queue handling
        - arm64: dts: rockchip: remove mmc-hs400-enhanced-strobe from rk3399-khadas-
          edge
        - arm64: dts: rockchip: fix rk3308-roc-cc vcc-sd supply
        - arm64: dts: rockchip: fix rk3399-leez-p710 vcc3v3-lan supply
        - arm64: dts: rockchip: fix audio-supply for Rock Pi 4
        - mac80211: track only QoS data frames for admission control
        - tee: amdtee: fix an IS_ERR() vs NULL bug
        - ceph: fix duplicate increment of opened_inodes metric
        - ceph: initialize pathlen variable in reconnect_caps_cb
        - ARM: socfpga: dts: fix qspi node compatible
        - clk: Don't parent clks until the parent is fully registered
        - soc: imx: Register SoC device only on i.MX boards
        - virtio/vsock: fix the transport to work with VMADDR_CID_ANY
        - selftests: net: Correct ping6 expected rc from 2 to 1
        - s390/kexec_file: fix error handling when applying relocations
        - sch_cake: do not call cake_destroy() from cake_init()
        - inet_diag: fix kernel-infoleak for UDP sockets
        - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg
        - selftests: Add duplicate config only for MD5 VRF tests
        - selftests: Fix raw socket bind tests with VRF
        - selftests: Fix IPv6 address bind tests
        - dmaengine: st_fdma: fix MODULE_ALIAS
        - selftest/net/forwarding: declare NETIFS p9 p10
        - drm/ast: potential dereference of null pointer
        - mac80211: agg-tx: don't schedule_and_wake_txq() under sta->lock
        - mac80211: fix lookup when adding AddBA extension element
        - flow_offload: return EOPNOTSUPP for the unsupported mpls action type
        - rds: memory leak in __rds_conn_create()
        - drm/amd/pm: fix a potential gpu_metrics_table memory leak
        - mptcp: clear 'kern' flag from fallback sockets
        - soc/tegra: fuse: Fix bitwise vs. logical OR warning
        - igb: Fix removal of unicast MAC filters of VFs
        - igbvf: fix double free in `igbvf_probe`
        - igc: Fix typo in i225 LTR functions
        - ixgbe: Document how to enable NBASE-T support
        - ixgbe: set X550 MDIO speed before talking to PHY
        - netdevsim: Zero-initialize memory for new map's value in function
          nsim_bpf_map_alloc
        - sfc_ef100: potential dereference of null pointer
        - net: Fix double 0x prefix print in SKB dump
        - net/smc: Prevent smc_release() from long blocking
        - net: systemport: Add global locking for descriptor lifecycle
        - sit: do not call ipip6_dev_free() from sit_init_net()
        - bpf, selftests: Fix racing issue in btf_skc_cls_ingress test
        - powerpc/85xx: Fix oops when CONFIG_FSL_PMC=n
        - USB: gadget: bRequestType is a bitfield, not a enum
        - Revert "usb: early: convert to readl_poll_timeout_atomic()"
        - KVM: x86: Drop guest CPUID check for host initiated writes to
          MSR_IA32_PERF_CAPABILITIES
        - tty: n_hdlc: make n_hdlc_tty_wakeup() asynchronous
        - USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04)
        - usb: dwc2: fix STM ID/VBUS detection startup delay in dwc2_driver_probe
        - PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error
        - PCI/MSI: Mask MSI-X vectors only on success
        - usb: xhci: Extend support for runtime power management for AMD's Yellow
          carp.
        - USB: serial: cp210x: fix CP2105 GPIO registration
        - USB: serial: option: add Telit FN990 compositions
        - btrfs: fix memory leak in __add_inode_ref()
        - btrfs: fix double free of anon_dev after failure to create subvolume
        - zonefs: add MODULE_ALIAS_FS
        - iocost: Fix divide-by-zero on donation from low hweight cgroup
        - serial: 8250_fintek: Fix garbled text for console
        - timekeeping: Really make sure wall_to_monotonic isn't positive
        - libata: if T_LENGTH is zero, dma direction should be DMA_NONE
        - drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE
        - Input: touchscreen - avoid bitwise vs logical OR warning
        - ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name
        - media: mxl111sf: change mutex_init() location
        - fuse: annotate lock in fuse_reverse_inval_entry()
        - ovl: fix warning in ovl_create_real()
        - scsi: scsi_debug: Don't call kcalloc() if size arg is zero
        - scsi: scsi_debug: Fix type in min_t to avoid stack OOB
        - scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()
        - rcu: Mark accesses to rcu_state.n_force_qs
        - bus: ti-sysc: Fix variable set but not used warning for reinit_modules
        - xen/blkfront: harden blkfront against event channel storms
        - xen/netfront: harden netfront against event channel storms
        - xen/console: harden hvc_xen against event channel storms
        - xen/netback: fix rx queue stall detection
        - xen/netback: don't queue unlimited number of packages
        - KVM: VMX: clear vmx_x86_ops.sync_pir_to_irr if APICv is disabled
        - x86/kvm: remove unused ack_notifier callbacks
        - bpf: Fix kernel address leakage in atomic fetch
        - bpf, selftests: Add test case for atomic fetch on spilled pointer
        - bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg
        - bpf, selftests: Update test case for atomic cmpxchg on r0 with pointer
        - s390/entry: fix duplicate tracking of irq nesting level
        - ceph: fix up non-directory creation in SGID directories
        - btrfs: convert latest_bdev type to btrfs_device and rename
        - btrfs: use latest_dev in btrfs_show_devname
        - btrfs: update latest_dev when we create a sprout device
        - btrfs: remove stale comment about the btrfs_show_devname
        - drm/i915/hdmi: convert intel_hdmi_to_dev to intel_hdmi_to_i915
        - drm/i915/hdmi: Turn DP++ TMDS output buffers back on in encoder->shutdown()
        - pinctrl: amd: Fix wakeups when IRQ is shared with SCI
        - arm64: dts: rockchip: fix poweroff on helios64
        - dmaengine: idxd: add halt interrupt support
        - dmaengine: idxd: fix calling wq quiesce inside spinlock
        - arm64: dts: imx8mq: remove interconnect property from lcdif
        - iwlwifi: mvm: don't crash on invalid rate w/o STA
        - vdpa: Consider device id larger than 31
        - netdevsim: don't overwrite read only ethtool parms
        - dmaengine: idxd: fix missed completion on abort path
        - net: dsa: mv88e6xxx: Unforce speed & duplex in mac_link_down()
        - mptcp: never allow the PM to close a listener subflow
        - cfg80211: Acquire wiphy mutex on regulatory work
        - net: stmmac: fix tc flower deletion for VLAN priority Rx steering
        - mptcp: remove tcp ulp setsockopt support
        - mptcp: fix deadlock in __mptcp_push_pending()
        - dsa: mv88e6xxx: fix debug print for SPEED_UNFORCED
        - arm64: kexec: Fix missing error code 'ret' warning in load_other_segments()
        - bpf: Fix extable fixup offset.
        - usb: cdnsp: Fix incorrect status for control request
        - usb: cdnsp: Fix incorrect calling of cdnsp_died function
        - usb: cdnsp: Fix issue in cdnsp_log_ep trace event
        - usb: cdnsp: Fix lack of spin_lock_irqsave/spin_lock_restore
        - usb: typec: tcpm: fix tcpm unregister port but leave a pending timer
        - selinux: fix sleeping function called from invalid context
        - btrfs: check WRITE_ERR when trying to read an extent buffer
        - btrfs: fix missing blkdev_put() call in btrfs_scan_one_device()
        - cifs: sanitize multiple delimiters in prepath
        - riscv: dts: unleashed: Add gpio card detect to mmc-spi-slot
        - riscv: dts: unmatched: Add gpio card detect to mmc-spi-slot
        - drm/amdgpu: don't override default ECO_BITs setting
        - drm/amd/pm: fix reading SMU FW version from amdgpu_firmware_info on YC
        - can: m_can: make custom bittiming fields const
        - can: m_can: pci: use custom bit timings for Elkhart Lake
        - mptcp: add missing documented NL params
        - USB: core: Make do_proc_control() and do_proc_bulk() killable
    
      * Impish update: upstream stable patchset 2022-01-13 (LP: #1957832)
        - usb: gadget: uvc: fix multiple opens
        - HID: quirks: Add quirk for the Microsoft Surface 3 type-cover
        - HID: google: add eel USB id
        - HID: add hid_is_usb() function to make it simpler for USB detection
        - HID: add USB_HID dependancy to hid-prodikeys
        - HID: add USB_HID dependancy to hid-chicony
        - HID: add USB_HID dependancy on some USB HID drivers
        - HID: bigbenff: prevent null pointer dereference
        - HID: wacom: fix problems when device is not a valid USB device
        - HID: check for valid USB device for many HID drivers
        - nft_set_pipapo: Fix bucket load in AVX2 lookup routine for six 8-bit groups
        - IB/hfi1: Insure use of smp_processor_id() is preempt disabled
        - IB/hfi1: Fix early init panic
        - IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr
        - can: kvaser_usb: get CAN clock frequency from device
        - can: kvaser_pciefd: kvaser_pciefd_rx_error_frame(): increase correct
          stats->{rx,tx}_errors counter
        - can: sja1000: fix use after free in ems_pcmcia_add_card()
        - x86/sme: Explicitly map new EFI memmap table as encrypted
        - nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
        - selftests: netfilter: add a vrf+conntrack testcase
        - vrf: don't run conntrack on vrf with !dflt qdisc
        - bpf, x86: Fix "no previous prototype" warning
        - bpf: Fix the off-by-two error in range markings
        - ice: ignore dropped packets during init
        - bonding: make tx_rebalance_counter an atomic
        - nfp: Fix memory leak in nfp_cpp_area_cache_add()
        - seg6: fix the iif in the IPv6 socket control block
        - udp: using datalen to cap max gso segments
        - netfilter: conntrack: annotate data-races around ct->timeout
        - iavf: restore MSI state on reset
        - iavf: Fix reporting when setting descriptor count
        - IB/hfi1: Correct guard on eager buffer deallocation
        - devlink: fix netns refcount leak in devlink_nl_cmd_reload()
        - net/sched: fq_pie: prevent dismantle issue
        - KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush
          hypercall
        - mm: bdi: initialize bdi_min_ratio when bdi is unregistered
        - ALSA: ctl: Fix copy of updated id with element read/write
        - ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform
        - ALSA: hda/realtek: Fix quirk for TongFang PHxTxX1
        - ALSA: pcm: oss: Fix negative period/buffer sizes
        - ALSA: pcm: oss: Limit the period size to 16MB
        - ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*()
        - scsi: qla2xxx: Format log strings only if needed
        - btrfs: clear extent buffer uptodate when we fail to write it
        - btrfs: replace the BUG_ON in btrfs_del_root_ref with proper error handling
        - md: fix update super 1.0 on rdev size change
        - nfsd: fix use-after-free due to delegation race
        - nfsd: Fix nsfd startup race (again)
        - tracefs: Have new files inherit the ownership of their parent
        - mmc: renesas_sdhi: initialize variable properly when tuning
        - clk: qcom: regmap-mux: fix parent clock lookup
        - drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence.
        - can: pch_can: pch_can_rx_normal: fix use after free
        - can: m_can: Disable and ignore ELO interrupt
        - libata: add horkage for ASMedia 1092
        - wait: add wake_up_pollfree()
        - SAUCE: binder: export __wake_up_pollfree for binder module
        - binder: use wake_up_pollfree()
        - signalfd: use wake_up_pollfree()
        - aio: keep poll requests on waitqueue until completed
        - aio: fix use-after-free due to missing POLLFREE handling
        - net: mvpp2: fix XDP rx queues registering
        - tracefs: Set all files to the same group ownership as the mount option
        - block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2)
        - scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc()
        - scsi: scsi_debug: Fix buffer size of REPORT ZONES command
        - qede: validate non LSO skb length
        - PM: runtime: Fix pm_runtime_active() kerneldoc comment
        - ASoC: rt5682: Fix crash due to out of scope stack vars
        - ASoC: qdsp6: q6routing: Fix return value from msm_routing_put_audio_mixer
        - ASoC: codecs: wsa881x: fix return values from kcontrol put
        - ASoC: codecs: wcd934x: handle channel mappping list correctly
        - ASoC: codecs: wcd934x: return correct value from mixer put
        - RDMA/hns: Do not halt commands during reset until later
        - RDMA/hns: Do not destroy QP resources in the hw resetting phase
        - clk: imx: use module_platform_driver
        - i40e: Fix failed opcode appearing if handling messages from VF
        - i40e: Fix pre-set max number of queues for VF
        - mtd: rawnand: fsmc: Take instruction delay into account
        - mtd: rawnand: fsmc: Fix timing computation
        - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc
        - Revert "PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge"
        - perf tools: Fix SMT detection fast read path
        - Documentation/locking/locktypes: Update migrate_disable() bits.
        - dt-bindings: net: Reintroduce PHY no lane swap binding
        - tools build: Remove needless libpython-version feature check that breaks
          test-all fast path
        - net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero
        - net: altera: set a couple error code in probe()
        - net: fec: only clear interrupt of handling queue in fec_enet_rx_queue()
        - net, neigh: clear whole pneigh_entry at alloc time
        - net/qla3xxx: fix an error code in ql_adapter_up()
        - Revert "UBUNTU: SAUCE: selftests: fib_tests: assign address to dummy1 for
          rp_filter tests"
        - selftests/fib_tests: Rework fib_rp_filter_test()
        - USB: gadget: detect too-big endpoint 0 requests
        - USB: gadget: zero allocate endpoint 0 buffers
        - usb: core: config: fix validation of wMaxPacketValue entries
        - xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime
          suspending
        - usb: core: config: using bit mask instead of individual bits
        - xhci: avoid race between disable slot command and host runtime suspend
        - iio: gyro: adxrs290: fix data signedness
        - iio: trigger: Fix reference counting
        - iio: trigger: stm32-timer: fix MODULE_ALIAS
        - iio: stk3310: Don't return error code in interrupt handler
        - iio: mma8452: Fix trigger reference couting
        - iio: ltr501: Don't return error code in trigger handler
        - iio: kxsd9: Don't return error code in trigger handler
        - iio: itg3200: Call iio_trigger_notify_done() on error
        - iio: dln2-adc: Fix lockdep complaint
        - iio: dln2: Check return value of devm_iio_trigger_register()
        - iio: at91-sama5d2: Fix incorrect sign extension
        - iio: adc: stm32: fix a current leak by resetting pcsel before disabling vdda
        - iio: adc: axp20x_adc: fix charging current reporting on AXP22x
        - iio: ad7768-1: Call iio_trigger_notify_done() on error
        - iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
        - csky: fix typo of fpu config macro
        - irqchip/aspeed-scu: Replace update_bits with write_bits.
        - irqchip/armada-370-xp: Fix return value of armada_370_xp_msi_alloc()
        - irqchip/armada-370-xp: Fix support for Multi-MSI interrupts
        - irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL
        - irqchip: nvic: Fix offset for Interrupt Priority Offsets
        - misc: fastrpc: fix improper packet size calculation
        - bpf: Add selftests to cover packet access corner cases
        - HID: intel-ish-hid: ipc: only enable IRQ wakeup when requested
        - mmc: spi: Add device-tree SPI IDs
        - HID: Ignore battery for Elan touchscreen on Asus UX550VE
        - can: m_can: pci: fix incorrect reference clock rate
        - net: dsa: mv88e6xxx: fix "don't use PHY_DETECT on internal PHY's"
        - net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
        - bpf: Make sure bpf_disable_instrumentation() is safe vs preemption.
        - netfilter: nft_exthdr: break evaluation if setting TCP option fails
        - net: bcm4908: Handle dma_set_coherent_mask error codes
        - net: dsa: mv88e6xxx: error handling for serdes_power functions
        - net: dsa: felix: Fix memory leak in felix_setup_mmio_filtering
        - KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit
        - KVM: x86: Ignore sparse banks size for an "all CPUs", non-sparse IPI req
        - timers: implement usleep_idle_range()
        - btrfs: fix re-dirty process of tree-log nodes
        - btrfs: free exchange changeset on failures
        - perf intel-pt: Fix some PGE (packet generation enable/control flow packets)
          usage
        - perf intel-pt: Fix sync state when a PSB (synchronization) packet is found
        - perf intel-pt: Fix intel_pt_fup_event() assumptions about setting state type
        - perf intel-pt: Fix state setting when receiving overflow (OVF) packet
        - perf intel-pt: Fix next 'err' value, walking trace
        - perf intel-pt: Fix missing 'instruction' events with 'q' option
        - perf intel-pt: Fix error timestamp setting on the decoder error path
        - selftests: KVM: avoid failures due to reserved HyperTransport region
        - hwmon: (pwm-fan) Ensure the fan going on in .probe()
        - thermal: int340x: Fix VCoRefLow MMIO bit offset for TGL
        - i2c: mpc: Use atomic read and fix break condition
        - ALSA: usb-audio: Reorder snd_djm_devices[] entries
        - clk: qcom: clk-alpha-pll: Don't reconfigure running Trion
        - misc: rtsx: Avoid mangling IRQ during runtime PM
        - bus: mhi: pci_generic: Fix device recovery failed issue
        - bus: mhi: core: Add support for forced PM resume
        - clocksource/drivers/dw_apb_timer_of: Fix probe failure
    
      * Impish update: upstream stable patchset 2022-01-07 (LP: #1956791)
        - can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM
        - gfs2: release iopen glock early in evict
        - gfs2: Fix length of holes reported at end-of-file
        - powerpc/pseries/ddw: Revert "Extend upper limit for huge DMA window for
          persistent memory"
        - drm/sun4i: fix unmet dependency on RESET_CONTROLLER for PHY_SUN6I_MIPI_DPHY
        - mac80211: do not access the IV when it was stripped
        - net/smc: Transfer remaining wait queue entries during fallback
        - atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
        - net: return correct error code
        - platform/x86: thinkpad_acpi: Add support for dual fan control
        - platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep
        - s390/setup: avoid using memblock_enforce_memory_limit
        - btrfs: check-integrity: fix a warning on write caching disabled disk
        - thermal: core: Reset previous low and high trip during thermal zone init
        - scsi: iscsi: Unblock session then wake up error handler
        - drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again
        - drm/amd/amdgpu: fix potential memleak
        - ata: ahci: Add Green Sardine vendor ID as board_ahci_mobile
        - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in
          hns_dsaf_ge_srst_by_port()
        - ipv6: check return value of ipv6_skip_exthdr
        - net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of
          bound
        - net: ethernet: dec: tulip: de4x5: fix possible array overflows in
          type3_infoblock()
        - perf inject: Fix ARM SPE handling
        - perf hist: Fix memory leak of a perf_hpp_fmt
        - perf report: Fix memory leaks around perf_tip()
        - net/smc: Avoid warning of possible recursive locking
        - ACPI: Add stubs for wakeup handler functions
        - vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit
        - kprobes: Limit max data_size of the kretprobe instances
        - rt2x00: do not mark device gone on EPROTO errors during start
        - cpufreq: Fix get_cpu_device() failure in add_cpu_dev_symlink()
        - s390/pci: move pseudo-MMIO to prevent MIO overlap
        - sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl
        - sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl
        - ipv6: fix memory leak in fib6_rule_suppress
        - drm/amd/display: Allow DSC on supported MST branch devices
        - KVM: Disallow user memslot with size that exceeds "unsigned long"
        - KVM: nVMX: Flush current VPID (L1 vs. L2) for KVM_REQ_TLB_FLUSH_GUEST
        - KVM: x86: Use a stable condition around all VT-d PI paths
        - KVM: arm64: Avoid setting the upper 32 bits of TCR_EL2 and CPTR_EL2 to 1
        - KVM: X86: Use vcpu->arch.walk_mmu for kvm_mmu_invlpg()
        - tracing/histograms: String compares should not care about signed values
        - wireguard: selftests: increase default dmesg log size
        - wireguard: allowedips: add missing __rcu annotation to satisfy sparse
        - wireguard: selftests: actually test for routing loops
        - wireguard: selftests: rename DEBUG_PI_LIST to DEBUG_PLIST
        - wireguard: device: reset peer src endpoint when netns exits
        - wireguard: receive: use ring buffer for incoming handshakes
        - wireguard: receive: drop handshakes if queue lock is contended
        - wireguard: ratelimiter: use kvcalloc() instead of kvzalloc()
        - i2c: stm32f7: flush TX FIFO upon transfer errors
        - i2c: stm32f7: recover the bus on access timeout
        - i2c: stm32f7: stop dma transfer in case of NACK
        - i2c: cbus-gpio: set atomic transfer callback
        - natsemi: xtensa: fix section mismatch warnings
        - tcp: fix page frag corruption on page fault
        - net: qlogic: qlcnic: Fix a NULL pointer dereference in
          qlcnic_83xx_add_rings()
        - net: mpls: Fix notifications when deleting a device
        - siphash: use _unaligned version by default
        - arm64: ftrace: add missing BTIs
        - net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
        - selftests: net: Correct case name
        - mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode
        - ASoC: tegra: Fix wrong value type in ADMAIF
        - ASoC: tegra: Fix wrong value type in I2S
        - ASoC: tegra: Fix wrong value type in DMIC
        - ASoC: tegra: Fix wrong value type in DSPK
        - ASoC: tegra: Fix kcontrol put callback in ADMAIF
        - ASoC: tegra: Fix kcontrol put callback in I2S
        - ASoC: tegra: Fix kcontrol put callback in DMIC
        - ASoC: tegra: Fix kcontrol put callback in DSPK
        - ASoC: tegra: Fix kcontrol put callback in AHUB
        - rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle()
        - rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
        - ALSA: intel-dsp-config: add quirk for CML devices based on ES8336 codec
        - net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no IRQ
          is available
        - net: marvell: mvpp2: Fix the computation of shared CPUs
        - dpaa2-eth: destroy workqueue at the end of remove function
        - net: annotate data-races on txq->xmit_lock_owner
        - ipv4: convert fib_num_tclassid_users to atomic_t
        - net/smc: fix wrong list_del in smc_lgr_cleanup_early
        - net/rds: correct socket tunable error in rds_tcp_tune()
        - drm/msm/a6xx: Allocate enough space for GMU registers
        - drm/msm: Do hw_init() before capturing GPU state
        - atlantic: Increase delay for fw transactions
        - atlatnic: enable Nbase-t speeds with base-t
        - atlantic: Fix to display FW bundle version instead of FW mac version.
        - atlantic: Add missing DIDs and fix 115c.
        - Remove Half duplex mode speed capabilities.
        - atlantic: Fix statistics logic for production hardware
        - atlantic: Remove warn trace message.
        - KVM: x86/pmu: Fix reserved bits for AMD PerfEvtSeln register
        - KVM: VMX: Set failure code in prepare_vmcs02()
        - x86/sev: Fix SEV-ES INS/OUTS instructions for word, dword, and qword
        - x86/entry: Use the correct fence macro after swapgs in kernel CR3
        - x86/xen: Add xenpv_restore_regs_and_return_to_usermode()
        - sched/uclamp: Fix rq->uclamp_max not set on first enqueue
        - x86/entry: Add a fence for kernel entry SWAPGS in paranoid_entry()
        - parisc: Fix KBUILD_IMAGE for self-extracting kernel
        - parisc: Fix "make install" on newer debian releases
        - vgacon: Propagate console boot parameters before calling `vc_resize'
        - xhci: Fix commad ring abort, write all 64 bits to CRCR register.
        - USB: NO_LPM quirk Lenovo Powered USB-C Travel Hub
        - usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect
        - x86/tsc: Add a timer to make sure TSC_adjust is always checked
        - x86/tsc: Disable clocksource watchdog for TSC on qualified platorms
        - x86/64/mm: Map all kernel memory into trampoline_pgd
        - tty: serial: msm_serial: Deactivate RX DMA for polling support
        - serial: pl011: Add ACPI SBSA UART match id
        - serial: tegra: Change lower tolerance baud rate limit for tegra20 and
          tegra30
        - serial: core: fix transmit-buffer reset and memleak
        - serial: 8250_pci: Fix ACCES entries in pci_serial_quirks array
        - serial: 8250_pci: rewrite pericom_do_set_divisor()
        - serial: 8250: Fix RTS modem control while in rs485 mode
        - iwlwifi: mvm: retry init flow if failed
        - parisc: Mark cr16 CPU clocksource unstable on all SMP machines
        - net/tls: Fix authentication failure in CCM mode
        - ALSA: usb-audio: Restrict rates for the shared clocks
        - ALSA: usb-audio: Check available frames for the next packet size
        - ALSA: usb-audio: Add spinlock to stop_urbs()
        - ALSA: usb-audio: Avoid killing in-flight URBs during draining
        - mac80211: fix throughput LED trigger
        - x86/hyperv: Move required MSRs check to initial platform probing
        - platform/x86: dell-wmi-descriptor: disable by default
        - btrfs: silence lockdep when reading chunk tree during mount
        - drm/amd/pm: Remove artificial freq level on Navi1x
        - perf sort: Fix the 'weight' sort key behavior
        - perf sort: Fix the 'ins_lat' sort key behavior
        - perf sort: Fix the 'p_stage_cyc' sort key behavior
        - tracing: Don't use out-of-sync va_list in event printing
        - dma-buf: system_heap: Use 'for_each_sgtable_sg' in pages free flow
        - drm/i915/dp: Perform 30ms delay after source OUI write
        - KVM: SVM: move check for kvm_vcpu_apicv_active outside of
          avic_vcpu_{put|load}
        - KVM: fix avic_set_running for preemptable kernels
        - KVM: x86/mmu: Fix TDP MMU page table level
        - KVM: x86/mmu: Fix TLB flush range when handling disconnected pt
        - KVM: x86: ignore APICv if LAPIC is not enabled
        - KVM: nVMX: Abide to KVM_REQ_TLB_FLUSH_GUEST request on nested vmentry/vmexit
        - KVM: x86: check PIR even for vCPUs with disabled APICv
        - net: dsa: mv88e6xxx: Fix application of erratum 4.8 for 88E6393X
        - net: dsa: mv88e6xxx: Drop unnecessary check in
          mv88e6393x_serdes_erratum_4_6()
        - net: dsa: mv88e6xxx: Save power by disabling SerDes trasmitter and receiver
        - net: dsa: mv88e6xxx: Add fix for erratum 5.2 of 88E6393X family
        - net: dsa: mv88e6xxx: Fix inband AN for 2500base-x on 88E6393X family
        - net: dsa: mv88e6xxx: Link in pcs_get_state() if AN is bypassed
        - iwlwifi: fix warnings produced by kernel debug options
        - net: stmmac: Avoid DMA_CHAN_CONTROL write if no Split Header support
        - octeontx2-af: Fix a memleak bug in rvu_mbox_init()
        - drm/vc4: kms: Wait for the commit before increasing our clock rate
        - drm/vc4: kms: Fix return code check
        - drm/vc4: kms: Add missing drm_crtc_commit_put
        - drm/vc4: kms: Clear the HVS FIFO commit pointer once done
        - drm/vc4: kms: Don't duplicate pending commit
        - drm/vc4: kms: Fix previous HVS commit wait
        - KVM: x86/mmu: Skip tlb flush if it has been done in zap_gfn_range()
        - KVM: SEV: initialize regions_list of a mirror VM
        - preempt/dynamic: Fix setup_preempt_mode() return value
        - KVM: SEV: Return appropriate error codes if SEV-ES scratch setup fails
        - serial: 8250_bcm7271: UART errors after resuming from S2
        - usb: cdns3: gadget: fix new urb never complete if ep cancel previous
          requests
        - usb: cdnsp: Fix a NULL pointer dereference in cdnsp_endpoint_init()
        - serial: liteuart: Fix NULL pointer dereference in ->remove()
        - serial: liteuart: fix use-after-free and memleak on unbind
        - serial: liteuart: fix minor-number leak on probe errors
    
      * CVE-2022-23222
        - bpf: Fix out of bounds access from invalid *_or_null type verification
        - bpf: Don't promote bogus looking registers after null check.
        - bpf, selftests: Add verifier test for mem_or_null register with offset.
    
     -- Kleber Sacilotto de Souza <email address hidden>  Tue, 15 Mar 2022 14:58:20 +0100
  • linux (5.13.0-36.41) impish; urgency=medium
    
      * Packaging resync (LP: #1786013)
        - [Packaging] resync getabis
        - debian/dkms-versions -- update from kernel-versions (main/2022.02.21)
    
      * Broken network on some AWS instances with focal/impish kernels
        (LP: #1961968)
        - SAUCE: Revert "PCI/MSI: Mask MSI-X vectors only on success"
    
      * [SRU]PCI: vmd: Do not disable MSI-X remapping if interrupt remapping is
        enabled by IOMMU (LP: #1937295)
        - PCI: vmd: Do not disable MSI-X remapping if interrupt remapping is enabled
          by IOMMU
    
      * [UBUNTU 20.04] kernel: Add support for CPU-MF counter second version 7
        (LP: #1960182)
        - s390/cpumf: Support for CPU Measurement Facility CSVN 7
        - s390/cpumf: Support for CPU Measurement Sampling Facility LS bit
    
      * [UBUNTU 21.10] s390/cio: verify the driver availability for path_event call
        (LP: #1960875)
        - s390/cio: verify the driver availability for path_event call
    
      * Impish update: upstream stable patchset 2022-02-14 (LP: #1960861)
        - devtmpfs regression fix: reconfigure on each mount
        - orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc()
        - remoteproc: qcom: pil_info: Don't memcpy_toio more than is provided
        - perf: Protect perf_guest_cbs with RCU
        - KVM: x86: Register Processor Trace interrupt hook iff PT enabled in guest
        - KVM: s390: Clarify SIGP orders versus STOP/RESTART
        - 9p: only copy valid iattrs in 9P2000.L setattr implementation
        - video: vga16fb: Only probe for EGA and VGA 16 color graphic cards
        - media: uvcvideo: fix division by zero at stream start
        - rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with
          interrupts enabled
        - firmware: qemu_fw_cfg: fix sysfs information leak
        - firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries
        - firmware: qemu_fw_cfg: fix kobject leak in probe error path
        - KVM: x86: remove PMU FIXED_CTR3 from msrs_to_save_all
        - ALSA: hda/realtek: Add speaker fixup for some Yoga 15ITL5 devices
        - ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after
          reboot from Windows
        - ALSA: hda: ALC287: Add Lenovo IdeaPad Slim 9i 14ITL5 speaker quirk
        - ALSA: hda/realtek: Add quirk for Legion Y9000X 2020
        - ALSA: hda/realtek: Re-order quirk entries for Lenovo
        - powerpc/pseries: Get entry and uaccess flush required bits from
          H_GET_CPU_CHARACTERISTICS
        - mtd: fixup CFI on ixp4xx
        - KVM: x86: don't print when fail to read/write pv eoi memory
        - remoteproc: qcom: pas: Add missing power-domain "mxc" for CDSP
        - perf annotate: Avoid TUI crash when navigating in the annotation of
          recursive functions
        - ALSA: hda/realtek: Use ALC285_FIXUP_HP_GPIO_LED on another HP laptop
        - ALSA: hda/tegra: Fix Tegra194 HDA reset failure
    
      * CVE-2022-0516
        - KVM: s390: Return error on SIDA memop on normal guest
    
      * CVE-2022-0435
        - tipc: improve size validations for received domain records
    
      * CVE-2022-0492
        - cgroup-v1: Require capabilities to set release_agent
    
      * jammy 5.15 kernel soft lockup when zfs.ko is loaded on s390x w/ gcc >=
        11.2.0-10ubuntu1 / gcc-11 PLT regression on s390x (LP: #1954676)
        - s390/module: fix loading modules with a lot of relocations
    
      * Impish update: upstream stable patchset 2022-02-09 (LP: #1960452)
        - workqueue: Fix unbind_workers() VS wq_worker_running() race
        - Bluetooth: btusb: fix memory leak in btusb_mtk_submit_wmt_recv_urb()
        - Bluetooth: btusb: Add two more Bluetooth parts for WCN6855
        - Bluetooth: btusb: Add support for Foxconn QCA 0xe0d0
        - Bluetooth: bfusb: fix division by zero in send path
        - ARM: dts: exynos: Fix BCM4330 Bluetooth reset polarity in I9100
        - USB: core: Fix bug in resuming hub's handling of wakeup requests
        - USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status
        - ath11k: Fix buffer overflow when scanning with extraie
        - mmc: sdhci-pci: Add PCI ID for Intel ADL
        - mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe()
        - can: gs_usb: fix use of uninitialized variable, detach device on reception
          of invalid USB data
        - can: isotp: convert struct tpcon::{idx,len} to unsigned int
        - can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved}
        - random: fix data race on crng_node_pool
        - random: fix data race on crng init time
        - random: fix crash on multiple early calls to add_bootloader_randomness()
        - media: Revert "media: uvcvideo: Set unique vdev name based in type"
        - staging: wlan-ng: Avoid bitwise vs logical OR warning in
          hfa384x_usb_throttlefn()
        - drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk()
        - staging: greybus: fix stack size warning with UBSAN
        - s390/kexec: handle R_390_PLT32DBL rela in arch_kexec_apply_relocations_add()
        - Bluetooth: btusb: Add the new support ID for Realtek RTL8852A
        - Bluetooth: btusb: Add support for IMC Networks Mediatek Chip(MT7921)
        - Bbluetooth: btusb: Add another Bluetooth part for Realtek 8852AE
        - Bluetooth: btusb: Enable MSFT extension for Mediatek Chip (MT7921)
        - Bluetooth: btusb: enable Mediatek to support AOSP extension
        - Bluetooth: btusb: Add one more Bluetooth part for the Realtek RTL8852AE
        - Bluetooth: btusb: Add the new support IDs for WCN6855
        - fget: clarify and improve __fget_files() implementation
        - Bluetooth: btusb: Add one more Bluetooth part for WCN6855
        - Bluetooth: add quirk disabling LE Read Transmit Power
        - Bluetooth: btbcm: disable read tx power for some Macs with the T2 Security
          chip
        - Bluetooth: btbcm: disable read tx power for MacBook Air 8,1 and 8,2
    
      * Impish update: upstream stable patchset 2022-01-31 (LP: #1959627)
        - selftests: x86: fix [-Wstringop-overread] warn in test_process_vm_readv()
        - tracing: Fix check for trace_percpu_buffer validity in get_trace_buf()
        - tracing: Tag trace_percpu_buffer as a percpu pointer
        - ieee802154: atusb: fix uninit value in atusb_set_extended_addr
        - i40e: Fix to not show opcode msg on unsuccessful VF MAC change
        - iavf: Fix limit of total number of queues to active queues of VF
        - RDMA/core: Don't infoleak GRH fields
        - netrom: fix copying in user data in nr_setsockopt
        - RDMA/uverbs: Check for null return of kmalloc_array
        - mac80211: initialize variable have_higher_than_11mbit
        - sfc: The RX page_ring is optional
        - i40e: fix use-after-free in i40e_sync_filters_subtask()
        - i40e: Fix for displaying message regarding NVM version
        - i40e: Fix incorrect netdev's real number of RX/TX queues
        - ftrace/samples: Add missing prototypes direct functions
        - ipv4: Check attribute length for RTA_GATEWAY in multipath route
        - ipv4: Check attribute length for RTA_FLOW in multipath route
        - ipv6: Check attribute length for RTA_GATEWAY in multipath route
        - ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route
        - lwtunnel: Validate RTA_ENCAP_TYPE attribute length
        - batman-adv: mcast: don't send link-local multicast to mcast routers
        - sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc
        - net: ena: Fix undefined state when tx request id is out of bounds
        - net: ena: Fix error handling when calculating max IO queues number
        - power: supply: core: Break capacity loop
        - power: reset: ltc2952: Fix use of floating point literals
        - rndis_host: support Hytera digital radios
        - phonet: refcount leak in pep_sock_accep
        - power: bq25890: Enable continuous conversion for ADC at charging
        - ipv6: Continue processing multipath route even if gateway attribute is
          invalid
        - ipv6: Do cleanup if attribute validation fails in multipath route
        - usb: mtu3: fix interval value for intr and isoc
        - scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown()
        - ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate
        - net: udp: fix alignment problem in udp4_seq_show()
        - atlantic: Fix buff_ring OOB in aq_ring_rx_clean
        - mISDN: change function names to avoid conflicts
        - drm/amd/display: Added power down for DCN10
        - ipv6: raw: check passed optlen before reading
        - ARM: dts: gpio-ranges property is now required
        - Input: zinitix - make sure the IRQ is allocated before it gets enabled
        - fscache_cookie_enabled: check cookie is valid before accessing it
        - Revert "net: usb: r8152: Add MAC passthrough support for more Lenovo Docks"
        - mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh
        - selftests: net: udpgro_fwd.sh: explicitly checking the available ping
          feature
        - sctp: hold endpoint before calling cb in sctp_transport_lookup_process
        - net: ena: Fix wrong rx request id by resetting device
        - md/raid1: fix missing bitmap update w/o WriteMostly devices
        - cgroup: Use open-time credentials for process migraton perm checks
        - cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv
        - cgroup: Use open-time cgroup namespace for process migration perm checks
        - i2c: mpc: Avoid out of bounds memory access
        - net ticp:fix a kernel-infoleak in __tipc_sendmsg()
        - fbdev: fbmem: add a helper to determine if an aperture is used by a fw fb
        - drm/amdgpu: disable runpm if we are the primary adapter
        - auxdisplay: charlcd: checking for pointer reference before dereferencing
        - drm/amd/pm: Fix xgmi link control on aldebaran
        - drm/amd/pm: skip setting gfx cgpg in the s0ix suspend-resume
        - drm/amdgpu: always reset the asic in suspend (v2)
        - drm/amdgpu: put SMU into proper state on runpm suspending for BOCO capable
          platform
        - userfaultfd/selftests: fix hugetlb area allocations
    
      * Impish update: upstream stable patchset 2022-01-26 (LP: #1959134)
        - Input: i8042 - add deferred probe support
        - Input: i8042 - enable deferred probe quirk for ASUS UM325UA
        - tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok().
        - tomoyo: use hwight16() in tomoyo_domain_quota_is_ok()
        - parisc: Clear stale IIR value on instruction access rights trap
        - platform/x86: apple-gmux: use resource_size() with res
        - memblock: fix memblock_phys_alloc() section mismatch error
        - recordmcount.pl: fix typo in s390 mcount regex
        - selinux: initialize proto variable in selinux_ip_postroute_compat()
        - scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write()
        - net/mlx5: DR, Fix NULL vs IS_ERR checking in dr_domain_init_resources
        - net/mlx5e: Wrap the tx reporter dump callback to extract the sq
        - net/mlx5e: Fix interoperability between XSK and ICOSQ recovery flow
        - net/mlx5e: Fix ICOSQ recovery flow for XSK
        - udp: using datalen to cap ipv6 udp max gso segments
        - selftests: Calculate udpgso segment count without header adjustment
        - sctp: use call_rcu to free endpoint
        - net/smc: fix using of uninitialized completions
        - net: usb: pegasus: Do not drop long Ethernet frames
        - net: ag71xx: Fix a potential double free in error handling paths
        - net: lantiq_xrx200: fix statistics of received bytes
        - NFC: st21nfca: Fix memory leak in device probe and remove
        - net/smc: don't send CDC/LLC message if link not ready
        - net/smc: fix kernel panic caused by race of smc_sock
        - igc: Fix TX timestamp support for non-MSI-X platforms
        - ionic: Initialize the 'lif->dbid_inuse' bitmap
        - net/mlx5e: Fix wrong features assignment in case of error
        - selftests/net: udpgso_bench_tx: fix dst ip argument
        - net/ncsi: check for error return from call to nla_put_u32
        - fsl/fman: Fix missing put_device() call in fman_port_probe
        - i2c: validate user data in compat ioctl
        - nfc: uapi: use kernel size_t to fix user-space builds
        - uapi: fix linux/nfc.h userspace compilation errors
        - drm/amdgpu: When the VCN(1.0) block is suspended, powergating is explicitly
          enabled
        - drm/amdgpu: add support for IP discovery gc_info table v2
        - xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set.
        - usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
        - usb: mtu3: add memory barrier before set GPD's HWO
        - usb: mtu3: fix list_head check warning
        - usb: mtu3: set interval of FS intr and isoc endpoint
        - binder: fix async_free_space accounting for empty parcels
        - scsi: vmw_pvscsi: Set residual data length conditionally
        - Input: appletouch - initialize work before device registration
        - Input: spaceball - fix parsing of movement data packets
        - net: fix use-after-free in tw_timer_handler
        - perf script: Fix CPU filtering of a script's switch events
        - net/sched: Extend qdisc control block with tc control block
        - platform/mellanox: mlxbf-pmc: Fix an IS_ERR() vs NULL bug in
          mlxbf_pmc_map_counters
        - net/mlx5: Fix SF health recovery flow
        - net/mlx5: Fix tc max supported prio for nic mode
        - selftests: net: Fix a typo in udpgro_fwd.sh
        - selftests: net: using ping6 for IPv6 in udpgro_fwd.sh
        - fs/mount_setattr: always cleanup mount_kattr
    
      * Impish update: upstream stable patchset 2022-01-21 (LP: #1958672)
        - arm64: vdso32: require CROSS_COMPILE_COMPAT for gcc+bfd
        - net: usb: lan78xx: add Allied Telesis AT29M2-AF
        - ext4: prevent partial update of the extent blocks
        - ext4: check for out-of-order index extents in ext4_valid_extent_entries()
        - ext4: check for inconsistent extents between index and leaf block
        - HID: holtek: fix mouse probing
        - HID: potential dereference of null pointer
        - arm64: dts: allwinner: orangepi-zero-plus: fix PHY mode
        - spi: change clk_disable_unprepare to clk_unprepare
        - ASoC: meson: aiu: fifo: Add missing dma_coerce_mask_and_coherent()
        - IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
        - RDMA/hns: Replace kfree() with kvfree()
        - netfilter: fix regression in looped (broad|multi)cast's MAC handling
        - ARM: dts: imx6qdl-wandboard: Fix Ethernet support
        - net: marvell: prestera: fix incorrect return of port_find
        - qlcnic: potential dereference null pointer of rx_queue->page_ring
        - net: accept UFOv6 packages in virtio_net_hdr_to_skb
        - net: skip virtio_net_hdr_set_proto if protocol already set
        - igb: fix deadlock caused by taking RTNL in RPM resume path
        - ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module
        - bonding: fix ad_actor_system option setting to default
        - fjes: Check for error irq
        - drivers: net: smc911x: Check for error irq
        - net: ks8851: Check for error irq
        - sfc: Check null pointer of rx_queue->page_ring
        - sfc: falcon: Check null pointer of rx_queue->page_ring
        - pinctrl: bcm2835: Change init order for gpio hogs
        - hwmon: (lm90) Fix usage of CONFIG2 register in detect function
        - hwmon: (lm90) Add basic support for TI TMP461
        - hwmon: (lm90) Introduce flag indicating extended temperature support
        - hwmon: (lm90) Drop critical attribute support for MAX6654
        - ALSA: jack: Check the return value of kstrdup()
        - ALSA: drivers: opl3: Fix incorrect use of vp->state
        - ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6
        - ALSA: hda/realtek: Add new alc285-hp-amp-init model
        - ALSA: hda/realtek: Fix quirk for Clevo NJ51CU
        - ASoC: meson: aiu: Move AIU_I2S_MISC hold setting to aiu-fifo-i2s
        - Input: atmel_mxt_ts - fix double free in mxt_read_info_block
        - ipmi: bail out if init_srcu_struct fails
        - ipmi: ssif: initialize ssif_info->client early
        - ipmi: fix initialization when workqueue allocation fails
        - parisc: Correct completer in lws start
        - parisc: Fix mask used to select futex spinlock
        - tee: handle lookup of shm with reference count 0
        - x86/pkey: Fix undefined behaviour with PKRU_WD_BIT
        - platform/x86: intel_pmc_core: fix memleak on registration failure
        - KVM: VMX: Wake vCPU when delivering posted IRQ even if vCPU == this vCPU
        - pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines
        - gpio: dln2: Fix interrupts when replugging the device
        - mmc: sdhci-tegra: Fix switch to HS400ES mode
        - mmc: meson-mx-sdhc: Set MANUAL_STOP for multi-block SDIO commands
        - mmc: core: Disable card detect during shutdown
        - mmc: mmci: stm32: clear DLYB_CR after sending tuning command
        - ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling
        - mac80211: fix locking in ieee80211_start_ap error path
        - mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page()
        - tee: optee: Fix incorrect page free bug
        - f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()
        - usb: gadget: u_ether: fix race in setting MAC address in setup phase
        - KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state
        - mm: mempolicy: fix THP allocations escaping mempolicy restrictions
        - Input: elants_i2c - do not check Remark ID on eKTH3900/eKTH5312
        - Input: goodix - add id->model mapping for the "9111" model
        - ASoC: tas2770: Fix setting of high sample rates
        - ASoC: rt5682: fix the wrong jack type detected
        - pinctrl: mediatek: fix global-out-of-bounds issue
        - hwmom: (lm90) Fix citical alarm status for MAX6680/MAX6681
        - hwmon: (lm90) Do not report 'busy' status bit as alarm
        - ax25: NPD bug when detaching AX25 device
        - hamradio: defer ax25 kfree after unregister_netdev
        - hamradio: improve the incomplete fix to avoid NPD
        - phonet/pep: refuse to enable an unbound pipe
        - selftests: KVM: Fix non-x86 compiling
        - NFSD: Fix READDIR buffer overflow
        - PM: sleep: Fix error handling in dpm_prepare()
        - bus: sunxi-rsb: Fix shutdown
        - netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()
        - ice: Use xdp_buf instead of rx_buf for xsk zero-copy
        - ice: xsk: return xsk buffers back to pool when cleaning the ring
        - tcp: move inet->rx_dst_ifindex to sk->sk_rx_dst_ifindex
        - ipv6: move inet6_sk(sk)->rx_dst_cookie to sk->sk_rx_dst_cookie
        - inet: fully convert sk->sk_rx_dst to RCU rules
        - io_uring: zero iocb->ki_pos for stream file types
        - veth: ensure skb entering GRO are not cloned.
        - net: bridge: Use array_size() helper in copy_to_user()
        - r8152: fix the force speed doesn't work for RTL8156
        - net: stmmac: dwmac-visconti: Fix value of ETHER_CLK_SEL_FREQ_SEL_2P5M
        - ARM: 9160/1: NOMMU: Reload __secondary_data after PROCINFO_INITFUNC
        - uapi: Fix undefined __always_inline on non-glibc systems
        - Revert "x86/boot: Pull up cmdline preparation and early param parsing"
        - x86/boot: Move EFI range reservation after cmdline parsing
        - ALSA: hda/hdmi: Disable silent stream on GLK
        - platform/x86: amd-pmc: only use callbacks for suspend
        - KVM: x86: Always set kvm_run->if_flag
        - KVM: x86/mmu: Don't advance iterator after restart due to yielding
        - KVM: nVMX: Synthesize TRIPLE_FAULT for L2 if emulation is required
        - mm, hwpoison: fix condition in free hugetlb page path
        - netfs: fix parameter of cleanup()
        - arm64: dts: lx2160a: fix scl-gpios property name
        - kfence: fix memory leak when cat kfence objects
        - Input: iqs626a - prohibit inlining of channel parsing functions
        - ASoC: SOF: Intel: pci-tgl: add ADL-M support
        - ASoC: SOF: Intel: pci-tgl: add new ADL-P variant
        - ASoC: SOF: Intel: pci-tgl: add ADL-N support
        - r8152: sync ocp base
        - tun: avoid double free in tun_free_netdev
    
      * Impish update: upstream stable patchset 2022-01-18 (LP: #1958287)
        - netfilter: selftest: conntrack_vrf.sh: fix file permission
        - nfc: fix segfault in nfc_genl_dump_devices_done
        - drm/msm/dsi: set default num_data_lanes
        - KVM: arm64: Save PSTATE early on exit
        - s390/test_unwind: use raw opcode instead of invalid instruction
        - Revert "tty: serial: fsl_lpuart: drop earlycon entry for i.MX8QXP"
        - net/mlx4_en: Update reported link modes for 1/10G
        - ALSA: hda: Add Intel DG2 PCI ID and HDMI codec vid
        - ALSA: hda/hdmi: fix HDA codec entry table order for ADL-P
        - parisc/agp: Annotate parisc agp init functions with __init
        - i2c: rk3x: Handle a spurious start completion interrupt flag
        - net: netlink: af_netlink: Prevent empty skb by adding a check on len.
        - drm/amd/display: Fix for the no Audio bug with Tiled Displays
        - drm/amd/display: add connector type check for CRC source set
        - tracing: Fix a kmemleak false positive in tracing_map
        - staging: most: dim2: use device release method
        - fuse: make sure reclaim doesn't write the inode
        - hwmon: (dell-smm) Fix warning on /proc/i8k creation error
        - ethtool: do not perform operations on net devices being unregistered
        - perf inject: Fix itrace space allowed for new attributes
        - memblock: free_unused_memmap: use pageblock units instead of MAX_ORDER
        - memblock: align freed memory map on pageblock boundaries with SPARSEMEM
        - memblock: ensure there is no overflow in memblock_overlaps_region()
        - arm: extend pfn_valid to take into account freed memory map alignment
        - arm: ioremap: don't abuse pfn_valid() to check if pfn is in RAM
        - hwmon: (corsair-psu) fix plain integer used as NULL pointer
        - perf bpf_skel: Do not use typedef to avoid error on old clang
        - netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock
        - ice: fix FDIR init missing when reset VF
        - drm/msm/dp: Avoid unpowered AUX xfers that caused crashes
        - KVM: selftests: Make sure kvm_create_max_vcpus test won't hit RLIMIT_NOFILE
        - KVM: downgrade two BUG_ONs to WARN_ON_ONCE
        - mac80211: fix regression in SSN handling of addba tx
        - mac80211: mark TX-during-stop for TX in in_reconfig
        - mac80211: send ADDBA requests using the tid/queue of the aggregation session
        - mac80211: validate extended element ID is present
        - firmware: arm_scpi: Fix string overflow in SCPI genpd driver
        - bpf: Fix signed bounds propagation after mov32
        - bpf: Make 32->64 bounds propagation slightly more robust
        - bpf, selftests: Add test case trying to taint map value pointer
        - virtio_ring: Fix querying of maximum DMA mapping size for virtio device
        - vdpa: check that offsets are within bounds
        - recordmcount.pl: look for jgnop instruction as well as bcrl on s390
        - dm btree remove: fix use after free in rebalance_children()
        - audit: improve robustness of the audit queue handling
        - arm64: dts: rockchip: remove mmc-hs400-enhanced-strobe from rk3399-khadas-
          edge
        - arm64: dts: rockchip: fix rk3308-roc-cc vcc-sd supply
        - arm64: dts: rockchip: fix rk3399-leez-p710 vcc3v3-lan supply
        - arm64: dts: rockchip: fix audio-supply for Rock Pi 4
        - mac80211: track only QoS data frames for admission control
        - tee: amdtee: fix an IS_ERR() vs NULL bug
        - ceph: fix duplicate increment of opened_inodes metric
        - ceph: initialize pathlen variable in reconnect_caps_cb
        - ARM: socfpga: dts: fix qspi node compatible
        - clk: Don't parent clks until the parent is fully registered
        - soc: imx: Register SoC device only on i.MX boards
        - virtio/vsock: fix the transport to work with VMADDR_CID_ANY
        - selftests: net: Correct ping6 expected rc from 2 to 1
        - s390/kexec_file: fix error handling when applying relocations
        - sch_cake: do not call cake_destroy() from cake_init()
        - inet_diag: fix kernel-infoleak for UDP sockets
        - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg
        - selftests: Add duplicate config only for MD5 VRF tests
        - selftests: Fix raw socket bind tests with VRF
        - selftests: Fix IPv6 address bind tests
        - dmaengine: st_fdma: fix MODULE_ALIAS
        - selftest/net/forwarding: declare NETIFS p9 p10
        - drm/ast: potential dereference of null pointer
        - mac80211: agg-tx: don't schedule_and_wake_txq() under sta->lock
        - mac80211: fix lookup when adding AddBA extension element
        - flow_offload: return EOPNOTSUPP for the unsupported mpls action type
        - rds: memory leak in __rds_conn_create()
        - drm/amd/pm: fix a potential gpu_metrics_table memory leak
        - mptcp: clear 'kern' flag from fallback sockets
        - soc/tegra: fuse: Fix bitwise vs. logical OR warning
        - igb: Fix removal of unicast MAC filters of VFs
        - igbvf: fix double free in `igbvf_probe`
        - igc: Fix typo in i225 LTR functions
        - ixgbe: Document how to enable NBASE-T support
        - ixgbe: set X550 MDIO speed before talking to PHY
        - netdevsim: Zero-initialize memory for new map's value in function
          nsim_bpf_map_alloc
        - sfc_ef100: potential dereference of null pointer
        - net: Fix double 0x prefix print in SKB dump
        - net/smc: Prevent smc_release() from long blocking
        - net: systemport: Add global locking for descriptor lifecycle
        - sit: do not call ipip6_dev_free() from sit_init_net()
        - bpf, selftests: Fix racing issue in btf_skc_cls_ingress test
        - powerpc/85xx: Fix oops when CONFIG_FSL_PMC=n
        - USB: gadget: bRequestType is a bitfield, not a enum
        - Revert "usb: early: convert to readl_poll_timeout_atomic()"
        - KVM: x86: Drop guest CPUID check for host initiated writes to
          MSR_IA32_PERF_CAPABILITIES
        - tty: n_hdlc: make n_hdlc_tty_wakeup() asynchronous
        - USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04)
        - usb: dwc2: fix STM ID/VBUS detection startup delay in dwc2_driver_probe
        - PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error
        - PCI/MSI: Mask MSI-X vectors only on success
        - usb: xhci: Extend support for runtime power management for AMD's Yellow
          carp.
        - USB: serial: cp210x: fix CP2105 GPIO registration
        - USB: serial: option: add Telit FN990 compositions
        - btrfs: fix memory leak in __add_inode_ref()
        - btrfs: fix double free of anon_dev after failure to create subvolume
        - zonefs: add MODULE_ALIAS_FS
        - iocost: Fix divide-by-zero on donation from low hweight cgroup
        - serial: 8250_fintek: Fix garbled text for console
        - timekeeping: Really make sure wall_to_monotonic isn't positive
        - libata: if T_LENGTH is zero, dma direction should be DMA_NONE
        - drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE
        - Input: touchscreen - avoid bitwise vs logical OR warning
        - ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name
        - media: mxl111sf: change mutex_init() location
        - fuse: annotate lock in fuse_reverse_inval_entry()
        - ovl: fix warning in ovl_create_real()
        - scsi: scsi_debug: Don't call kcalloc() if size arg is zero
        - scsi: scsi_debug: Fix type in min_t to avoid stack OOB
        - scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()
        - rcu: Mark accesses to rcu_state.n_force_qs
        - bus: ti-sysc: Fix variable set but not used warning for reinit_modules
        - xen/blkfront: harden blkfront against event channel storms
        - xen/netfront: harden netfront against event channel storms
        - xen/console: harden hvc_xen against event channel storms
        - xen/netback: fix rx queue stall detection
        - xen/netback: don't queue unlimited number of packages
        - KVM: VMX: clear vmx_x86_ops.sync_pir_to_irr if APICv is disabled
        - x86/kvm: remove unused ack_notifier callbacks
        - bpf: Fix kernel address leakage in atomic fetch
        - bpf, selftests: Add test case for atomic fetch on spilled pointer
        - bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg
        - bpf, selftests: Update test case for atomic cmpxchg on r0 with pointer
        - s390/entry: fix duplicate tracking of irq nesting level
        - ceph: fix up non-directory creation in SGID directories
        - btrfs: convert latest_bdev type to btrfs_device and rename
        - btrfs: use latest_dev in btrfs_show_devname
        - btrfs: update latest_dev when we create a sprout device
        - btrfs: remove stale comment about the btrfs_show_devname
        - drm/i915/hdmi: convert intel_hdmi_to_dev to intel_hdmi_to_i915
        - drm/i915/hdmi: Turn DP++ TMDS output buffers back on in encoder->shutdown()
        - pinctrl: amd: Fix wakeups when IRQ is shared with SCI
        - arm64: dts: rockchip: fix poweroff on helios64
        - dmaengine: idxd: add halt interrupt support
        - dmaengine: idxd: fix calling wq quiesce inside spinlock
        - arm64: dts: imx8mq: remove interconnect property from lcdif
        - iwlwifi: mvm: don't crash on invalid rate w/o STA
        - vdpa: Consider device id larger than 31
        - netdevsim: don't overwrite read only ethtool parms
        - dmaengine: idxd: fix missed completion on abort path
        - net: dsa: mv88e6xxx: Unforce speed & duplex in mac_link_down()
        - mptcp: never allow the PM to close a listener subflow
        - cfg80211: Acquire wiphy mutex on regulatory work
        - net: stmmac: fix tc flower deletion for VLAN priority Rx steering
        - mptcp: remove tcp ulp setsockopt support
        - mptcp: fix deadlock in __mptcp_push_pending()
        - dsa: mv88e6xxx: fix debug print for SPEED_UNFORCED
        - arm64: kexec: Fix missing error code 'ret' warning in load_other_segments()
        - bpf: Fix extable fixup offset.
        - usb: cdnsp: Fix incorrect status for control request
        - usb: cdnsp: Fix incorrect calling of cdnsp_died function
        - usb: cdnsp: Fix issue in cdnsp_log_ep trace event
        - usb: cdnsp: Fix lack of spin_lock_irqsave/spin_lock_restore
        - usb: typec: tcpm: fix tcpm unregister port but leave a pending timer
        - selinux: fix sleeping function called from invalid context
        - btrfs: check WRITE_ERR when trying to read an extent buffer
        - btrfs: fix missing blkdev_put() call in btrfs_scan_one_device()
        - cifs: sanitize multiple delimiters in prepath
        - riscv: dts: unleashed: Add gpio card detect to mmc-spi-slot
        - riscv: dts: unmatched: Add gpio card detect to mmc-spi-slot
        - drm/amdgpu: don't override default ECO_BITs setting
        - drm/amd/pm: fix reading SMU FW version from amdgpu_firmware_info on YC
        - can: m_can: make custom bittiming fields const
        - can: m_can: pci: use custom bit timings for Elkhart Lake
        - mptcp: add missing documented NL params
        - USB: core: Make do_proc_control() and do_proc_bulk() killable
    
      * Impish update: upstream stable patchset 2022-01-13 (LP: #1957832)
        - usb: gadget: uvc: fix multiple opens
        - HID: quirks: Add quirk for the Microsoft Surface 3 type-cover
        - HID: google: add eel USB id
        - HID: add hid_is_usb() function to make it simpler for USB detection
        - HID: add USB_HID dependancy to hid-prodikeys
        - HID: add USB_HID dependancy to hid-chicony
        - HID: add USB_HID dependancy on some USB HID drivers
        - HID: bigbenff: prevent null pointer dereference
        - HID: wacom: fix problems when device is not a valid USB device
        - HID: check for valid USB device for many HID drivers
        - nft_set_pipapo: Fix bucket load in AVX2 lookup routine for six 8-bit groups
        - IB/hfi1: Insure use of smp_processor_id() is preempt disabled
        - IB/hfi1: Fix early init panic
        - IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr
        - can: kvaser_usb: get CAN clock frequency from device
        - can: kvaser_pciefd: kvaser_pciefd_rx_error_frame(): increase correct
          stats->{rx,tx}_errors counter
        - can: sja1000: fix use after free in ems_pcmcia_add_card()
        - x86/sme: Explicitly map new EFI memmap table as encrypted
        - nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
        - selftests: netfilter: add a vrf+conntrack testcase
        - vrf: don't run conntrack on vrf with !dflt qdisc
        - bpf, x86: Fix "no previous prototype" warning
        - bpf: Fix the off-by-two error in range markings
        - ice: ignore dropped packets during init
        - bonding: make tx_rebalance_counter an atomic
        - nfp: Fix memory leak in nfp_cpp_area_cache_add()
        - seg6: fix the iif in the IPv6 socket control block
        - udp: using datalen to cap max gso segments
        - netfilter: conntrack: annotate data-races around ct->timeout
        - iavf: restore MSI state on reset
        - iavf: Fix reporting when setting descriptor count
        - IB/hfi1: Correct guard on eager buffer deallocation
        - devlink: fix netns refcount leak in devlink_nl_cmd_reload()
        - net/sched: fq_pie: prevent dismantle issue
        - KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush
          hypercall
        - mm: bdi: initialize bdi_min_ratio when bdi is unregistered
        - ALSA: ctl: Fix copy of updated id with element read/write
        - ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform
        - ALSA: hda/realtek: Fix quirk for TongFang PHxTxX1
        - ALSA: pcm: oss: Fix negative period/buffer sizes
        - ALSA: pcm: oss: Limit the period size to 16MB
        - ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*()
        - scsi: qla2xxx: Format log strings only if needed
        - btrfs: clear extent buffer uptodate when we fail to write it
        - btrfs: replace the BUG_ON in btrfs_del_root_ref with proper error handling
        - md: fix update super 1.0 on rdev size change
        - nfsd: fix use-after-free due to delegation race
        - nfsd: Fix nsfd startup race (again)
        - tracefs: Have new files inherit the ownership of their parent
        - mmc: renesas_sdhi: initialize variable properly when tuning
        - clk: qcom: regmap-mux: fix parent clock lookup
        - drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence.
        - can: pch_can: pch_can_rx_normal: fix use after free
        - can: m_can: Disable and ignore ELO interrupt
        - libata: add horkage for ASMedia 1092
        - wait: add wake_up_pollfree()
        - SAUCE: binder: export __wake_up_pollfree for binder module
        - binder: use wake_up_pollfree()
        - signalfd: use wake_up_pollfree()
        - aio: keep poll requests on waitqueue until completed
        - aio: fix use-after-free due to missing POLLFREE handling
        - net: mvpp2: fix XDP rx queues registering
        - tracefs: Set all files to the same group ownership as the mount option
        - block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2)
        - scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc()
        - scsi: scsi_debug: Fix buffer size of REPORT ZONES command
        - qede: validate non LSO skb length
        - PM: runtime: Fix pm_runtime_active() kerneldoc comment
        - ASoC: rt5682: Fix crash due to out of scope stack vars
        - ASoC: qdsp6: q6routing: Fix return value from msm_routing_put_audio_mixer
        - ASoC: codecs: wsa881x: fix return values from kcontrol put
        - ASoC: codecs: wcd934x: handle channel mappping list correctly
        - ASoC: codecs: wcd934x: return correct value from mixer put
        - RDMA/hns: Do not halt commands during reset until later
        - RDMA/hns: Do not destroy QP resources in the hw resetting phase
        - clk: imx: use module_platform_driver
        - i40e: Fix failed opcode appearing if handling messages from VF
        - i40e: Fix pre-set max number of queues for VF
        - mtd: rawnand: fsmc: Take instruction delay into account
        - mtd: rawnand: fsmc: Fix timing computation
        - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc
        - Revert "PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge"
        - perf tools: Fix SMT detection fast read path
        - Documentation/locking/locktypes: Update migrate_disable() bits.
        - dt-bindings: net: Reintroduce PHY no lane swap binding
        - tools build: Remove needless libpython-version feature check that breaks
          test-all fast path
        - net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero
        - net: altera: set a couple error code in probe()
        - net: fec: only clear interrupt of handling queue in fec_enet_rx_queue()
        - net, neigh: clear whole pneigh_entry at alloc time
        - net/qla3xxx: fix an error code in ql_adapter_up()
        - Revert "UBUNTU: SAUCE: selftests: fib_tests: assign address to dummy1 for
          rp_filter tests"
        - selftests/fib_tests: Rework fib_rp_filter_test()
        - USB: gadget: detect too-big endpoint 0 requests
        - USB: gadget: zero allocate endpoint 0 buffers
        - usb: core: config: fix validation of wMaxPacketValue entries
        - xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime
          suspending
        - usb: core: config: using bit mask instead of individual bits
        - xhci: avoid race between disable slot command and host runtime suspend
        - iio: gyro: adxrs290: fix data signedness
        - iio: trigger: Fix reference counting
        - iio: trigger: stm32-timer: fix MODULE_ALIAS
        - iio: stk3310: Don't return error code in interrupt handler
        - iio: mma8452: Fix trigger reference couting
        - iio: ltr501: Don't return error code in trigger handler
        - iio: kxsd9: Don't return error code in trigger handler
        - iio: itg3200: Call iio_trigger_notify_done() on error
        - iio: dln2-adc: Fix lockdep complaint
        - iio: dln2: Check return value of devm_iio_trigger_register()
        - iio: at91-sama5d2: Fix incorrect sign extension
        - iio: adc: stm32: fix a current leak by resetting pcsel before disabling vdda
        - iio: adc: axp20x_adc: fix charging current reporting on AXP22x
        - iio: ad7768-1: Call iio_trigger_notify_done() on error
        - iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
        - csky: fix typo of fpu config macro
        - irqchip/aspeed-scu: Replace update_bits with write_bits.
        - irqchip/armada-370-xp: Fix return value of armada_370_xp_msi_alloc()
        - irqchip/armada-370-xp: Fix support for Multi-MSI interrupts
        - irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL
        - irqchip: nvic: Fix offset for Interrupt Priority Offsets
        - misc: fastrpc: fix improper packet size calculation
        - bpf: Add selftests to cover packet access corner cases
        - HID: intel-ish-hid: ipc: only enable IRQ wakeup when requested
        - mmc: spi: Add device-tree SPI IDs
        - HID: Ignore battery for Elan touchscreen on Asus UX550VE
        - can: m_can: pci: fix incorrect reference clock rate
        - net: dsa: mv88e6xxx: fix "don't use PHY_DETECT on internal PHY's"
        - net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
        - bpf: Make sure bpf_disable_instrumentation() is safe vs preemption.
        - netfilter: nft_exthdr: break evaluation if setting TCP option fails
        - net: bcm4908: Handle dma_set_coherent_mask error codes
        - net: dsa: mv88e6xxx: error handling for serdes_power functions
        - net: dsa: felix: Fix memory leak in felix_setup_mmio_filtering
        - KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit
        - KVM: x86: Ignore sparse banks size for an "all CPUs", non-sparse IPI req
        - timers: implement usleep_idle_range()
        - btrfs: fix re-dirty process of tree-log nodes
        - btrfs: free exchange changeset on failures
        - perf intel-pt: Fix some PGE (packet generation enable/control flow packets)
          usage
        - perf intel-pt: Fix sync state when a PSB (synchronization) packet is found
        - perf intel-pt: Fix intel_pt_fup_event() assumptions about setting state type
        - perf intel-pt: Fix state setting when receiving overflow (OVF) packet
        - perf intel-pt: Fix next 'err' value, walking trace
        - perf intel-pt: Fix missing 'instruction' events with 'q' option
        - perf intel-pt: Fix error timestamp setting on the decoder error path
        - selftests: KVM: avoid failures due to reserved HyperTransport region
        - hwmon: (pwm-fan) Ensure the fan going on in .probe()
        - thermal: int340x: Fix VCoRefLow MMIO bit offset for TGL
        - i2c: mpc: Use atomic read and fix break condition
        - ALSA: usb-audio: Reorder snd_djm_devices[] entries
        - clk: qcom: clk-alpha-pll: Don't reconfigure running Trion
        - misc: rtsx: Avoid mangling IRQ during runtime PM
        - bus: mhi: pci_generic: Fix device recovery failed issue
        - bus: mhi: core: Add support for forced PM resume
        - clocksource/drivers/dw_apb_timer_of: Fix probe failure
    
      * Impish update: upstream stable patchset 2022-01-07 (LP: #1956791)
        - can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM
        - gfs2: release iopen glock early in evict
        - gfs2: Fix length of holes reported at end-of-file
        - powerpc/pseries/ddw: Revert "Extend upper limit for huge DMA window for
          persistent memory"
        - drm/sun4i: fix unmet dependency on RESET_CONTROLLER for PHY_SUN6I_MIPI_DPHY
        - mac80211: do not access the IV when it was stripped
        - net/smc: Transfer remaining wait queue entries during fallback
        - atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
        - net: return correct error code
        - platform/x86: thinkpad_acpi: Add support for dual fan control
        - platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep
        - s390/setup: avoid using memblock_enforce_memory_limit
        - btrfs: check-integrity: fix a warning on write caching disabled disk
        - thermal: core: Reset previous low and high trip during thermal zone init
        - scsi: iscsi: Unblock session then wake up error handler
        - drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again
        - drm/amd/amdgpu: fix potential memleak
        - ata: ahci: Add Green Sardine vendor ID as board_ahci_mobile
        - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in
          hns_dsaf_ge_srst_by_port()
        - ipv6: check return value of ipv6_skip_exthdr
        - net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of
          bound
        - net: ethernet: dec: tulip: de4x5: fix possible array overflows in
          type3_infoblock()
        - perf inject: Fix ARM SPE handling
        - perf hist: Fix memory leak of a perf_hpp_fmt
        - perf report: Fix memory leaks around perf_tip()
        - net/smc: Avoid warning of possible recursive locking
        - ACPI: Add stubs for wakeup handler functions
        - vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit
        - kprobes: Limit max data_size of the kretprobe instances
        - rt2x00: do not mark device gone on EPROTO errors during start
        - cpufreq: Fix get_cpu_device() failure in add_cpu_dev_symlink()
        - s390/pci: move pseudo-MMIO to prevent MIO overlap
        - sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl
        - sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl
        - ipv6: fix memory leak in fib6_rule_suppress
        - drm/amd/display: Allow DSC on supported MST branch devices
        - KVM: Disallow user memslot with size that exceeds "unsigned long"
        - KVM: nVMX: Flush current VPID (L1 vs. L2) for KVM_REQ_TLB_FLUSH_GUEST
        - KVM: x86: Use a stable condition around all VT-d PI paths
        - KVM: arm64: Avoid setting the upper 32 bits of TCR_EL2 and CPTR_EL2 to 1
        - KVM: X86: Use vcpu->arch.walk_mmu for kvm_mmu_invlpg()
        - tracing/histograms: String compares should not care about signed values
        - wireguard: selftests: increase default dmesg log size
        - wireguard: allowedips: add missing __rcu annotation to satisfy sparse
        - wireguard: selftests: actually test for routing loops
        - wireguard: selftests: rename DEBUG_PI_LIST to DEBUG_PLIST
        - wireguard: device: reset peer src endpoint when netns exits
        - wireguard: receive: use ring buffer for incoming handshakes
        - wireguard: receive: drop handshakes if queue lock is contended
        - wireguard: ratelimiter: use kvcalloc() instead of kvzalloc()
        - i2c: stm32f7: flush TX FIFO upon transfer errors
        - i2c: stm32f7: recover the bus on access timeout
        - i2c: stm32f7: stop dma transfer in case of NACK
        - i2c: cbus-gpio: set atomic transfer callback
        - natsemi: xtensa: fix section mismatch warnings
        - tcp: fix page frag corruption on page fault
        - net: qlogic: qlcnic: Fix a NULL pointer dereference in
          qlcnic_83xx_add_rings()
        - net: mpls: Fix notifications when deleting a device
        - siphash: use _unaligned version by default
        - arm64: ftrace: add missing BTIs
        - net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
        - selftests: net: Correct case name
        - mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode
        - ASoC: tegra: Fix wrong value type in ADMAIF
        - ASoC: tegra: Fix wrong value type in I2S
        - ASoC: tegra: Fix wrong value type in DMIC
        - ASoC: tegra: Fix wrong value type in DSPK
        - ASoC: tegra: Fix kcontrol put callback in ADMAIF
        - ASoC: tegra: Fix kcontrol put callback in I2S
        - ASoC: tegra: Fix kcontrol put callback in DMIC
        - ASoC: tegra: Fix kcontrol put callback in DSPK
        - ASoC: tegra: Fix kcontrol put callback in AHUB
        - rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle()
        - rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
        - ALSA: intel-dsp-config: add quirk for CML devices based on ES8336 codec
        - net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no IRQ
          is available
        - net: marvell: mvpp2: Fix the computation of shared CPUs
        - dpaa2-eth: destroy workqueue at the end of remove function
        - net: annotate data-races on txq->xmit_lock_owner
        - ipv4: convert fib_num_tclassid_users to atomic_t
        - net/smc: fix wrong list_del in smc_lgr_cleanup_early
        - net/rds: correct socket tunable error in rds_tcp_tune()
        - drm/msm/a6xx: Allocate enough space for GMU registers
        - drm/msm: Do hw_init() before capturing GPU state
        - atlantic: Increase delay for fw transactions
        - atlatnic: enable Nbase-t speeds with base-t
        - atlantic: Fix to display FW bundle version instead of FW mac version.
        - atlantic: Add missing DIDs and fix 115c.
        - Remove Half duplex mode speed capabilities.
        - atlantic: Fix statistics logic for production hardware
        - atlantic: Remove warn trace message.
        - KVM: x86/pmu: Fix reserved bits for AMD PerfEvtSeln register
        - KVM: VMX: Set failure code in prepare_vmcs02()
        - x86/sev: Fix SEV-ES INS/OUTS instructions for word, dword, and qword
        - x86/entry: Use the correct fence macro after swapgs in kernel CR3
        - x86/xen: Add xenpv_restore_regs_and_return_to_usermode()
        - sched/uclamp: Fix rq->uclamp_max not set on first enqueue
        - x86/entry: Add a fence for kernel entry SWAPGS in paranoid_entry()
        - parisc: Fix KBUILD_IMAGE for self-extracting kernel
        - parisc: Fix "make install" on newer debian releases
        - vgacon: Propagate console boot parameters before calling `vc_resize'
        - xhci: Fix commad ring abort, write all 64 bits to CRCR register.
        - USB: NO_LPM quirk Lenovo Powered USB-C Travel Hub
        - usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect
        - x86/tsc: Add a timer to make sure TSC_adjust is always checked
        - x86/tsc: Disable clocksource watchdog for TSC on qualified platorms
        - x86/64/mm: Map all kernel memory into trampoline_pgd
        - tty: serial: msm_serial: Deactivate RX DMA for polling support
        - serial: pl011: Add ACPI SBSA UART match id
        - serial: tegra: Change lower tolerance baud rate limit for tegra20 and
          tegra30
        - serial: core: fix transmit-buffer reset and memleak
        - serial: 8250_pci: Fix ACCES entries in pci_serial_quirks array
        - serial: 8250_pci: rewrite pericom_do_set_divisor()
        - serial: 8250: Fix RTS modem control while in rs485 mode
        - iwlwifi: mvm: retry init flow if failed
        - parisc: Mark cr16 CPU clocksource unstable on all SMP machines
        - net/tls: Fix authentication failure in CCM mode
        - ALSA: usb-audio: Restrict rates for the shared clocks
        - ALSA: usb-audio: Check available frames for the next packet size
        - ALSA: usb-audio: Add spinlock to stop_urbs()
        - ALSA: usb-audio: Avoid killing in-flight URBs during draining
        - mac80211: fix throughput LED trigger
        - x86/hyperv: Move required MSRs check to initial platform probing
        - platform/x86: dell-wmi-descriptor: disable by default
        - btrfs: silence lockdep when reading chunk tree during mount
        - drm/amd/pm: Remove artificial freq level on Navi1x
        - perf sort: Fix the 'weight' sort key behavior
        - perf sort: Fix the 'ins_lat' sort key behavior
        - perf sort: Fix the 'p_stage_cyc' sort key behavior
        - tracing: Don't use out-of-sync va_list in event printing
        - dma-buf: system_heap: Use 'for_each_sgtable_sg' in pages free flow
        - drm/i915/dp: Perform 30ms delay after source OUI write
        - KVM: SVM: move check for kvm_vcpu_apicv_active outside of
          avic_vcpu_{put|load}
        - KVM: fix avic_set_running for preemptable kernels
        - KVM: x86/mmu: Fix TDP MMU page table level
        - KVM: x86/mmu: Fix TLB flush range when handling disconnected pt
        - KVM: x86: ignore APICv if LAPIC is not enabled
        - KVM: nVMX: Abide to KVM_REQ_TLB_FLUSH_GUEST request on nested vmentry/vmexit
        - KVM: x86: check PIR even for vCPUs with disabled APICv
        - net: dsa: mv88e6xxx: Fix application of erratum 4.8 for 88E6393X
        - net: dsa: mv88e6xxx: Drop unnecessary check in
          mv88e6393x_serdes_erratum_4_6()
        - net: dsa: mv88e6xxx: Save power by disabling SerDes trasmitter and receiver
        - net: dsa: mv88e6xxx: Add fix for erratum 5.2 of 88E6393X family
        - net: dsa: mv88e6xxx: Fix inband AN for 2500base-x on 88E6393X family
        - net: dsa: mv88e6xxx: Link in pcs_get_state() if AN is bypassed
        - iwlwifi: fix warnings produced by kernel debug options
        - net: stmmac: Avoid DMA_CHAN_CONTROL write if no Split Header support
        - octeontx2-af: Fix a memleak bug in rvu_mbox_init()
        - drm/vc4: kms: Wait for the commit before increasing our clock rate
        - drm/vc4: kms: Fix return code check
        - drm/vc4: kms: Add missing drm_crtc_commit_put
        - drm/vc4: kms: Clear the HVS FIFO commit pointer once done
        - drm/vc4: kms: Don't duplicate pending commit
        - drm/vc4: kms: Fix previous HVS commit wait
        - KVM: x86/mmu: Skip tlb flush if it has been done in zap_gfn_range()
        - KVM: SEV: initialize regions_list of a mirror VM
        - preempt/dynamic: Fix setup_preempt_mode() return value
        - KVM: SEV: Return appropriate error codes if SEV-ES scratch setup fails
        - serial: 8250_bcm7271: UART errors after resuming from S2
        - usb: cdns3: gadget: fix new urb never complete if ep cancel previous
          requests
        - usb: cdnsp: Fix a NULL pointer dereference in cdnsp_endpoint_init()
        - serial: liteuart: Fix NULL pointer dereference in ->remove()
        - serial: liteuart: fix use-after-free and memleak on unbind
        - serial: liteuart: fix minor-number leak on probe errors
    
      * CVE-2022-23222
        - bpf: Fix out of bounds access from invalid *_or_null type verification
        - bpf: Don't promote bogus looking registers after null check.
        - bpf, selftests: Add verifier test for mem_or_null register with offset.
    
     -- Kleber Sacilotto de Souza <email address hidden>  Mon, 07 Mar 2022 18:43:11 +0100
  • linux (5.13.0-35.40) impish; urgency=medium
    
      * CVE-2022-0847
        - lib/iov_iter: initialize "flags" in new pipe_buffer
    
    linux (5.13.0-33.37) impish; urgency=medium
    
      * CVE-2022-23960
        - arm64: assembler: add set_this_cpu_offset
        - arm64: insn: Add barrier encodings
        - arm64: add ID_AA64ISAR2_EL1 sys register
        - arm64: Add Neoverse-N2, Cortex-A710 CPU part definition
        - arm64: Add Cortex-X2 CPU part definition
        - arm64: Add Cortex-A510 CPU part definition
        - SAUCE: arm64: entry.S: Add ventry overflow sanity checks
        - SAUCE: arm64: spectre: Rename spectre_v4_patch_fw_mitigation_conduit
        - SAUCE: KVM: arm64: Allow indirect vectors to be used without SPECTRE_V3A
        - SAUCE: arm64: entry: Make the trampoline cleanup optional
        - SAUCE: arm64: entry: Free up another register on kpti's tramp_exit path
        - SAUCE: arm64: entry: Move the trampoline data page before the text page
        - SAUCE: arm64: entry: Allow tramp_alias to access symbols after the 4K
          boundary
        - SAUCE: arm64: entry: Don't assume tramp_vectors is the start of the vectors
        - SAUCE: arm64: entry: Move trampoline macros out of ifdef'd section
        - SAUCE: arm64: entry: Make the kpti trampoline's kpti sequence optional
        - SAUCE: arm64: entry: Allow the trampoline text to occupy multiple pages
        - SAUCE: arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations
        - SAUCE: arm64: entry: Add vectors that have the bhb mitigation sequences
        - SAUCE: arm64: entry: Add macro for reading symbol addresses from the
          trampoline
        - SAUCE: arm64: Add percpu vectors for EL1
        - SAUCE: arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of
          Spectre-v2
        - SAUCE: arm64: Mitigate spectre style branch history side channels
        - SAUCE: KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and
          migrated
        - SAUCE: arm64: Use the clearbhb instruction in mitigations
        - [Config]: set CONFIG_MITIGATE_SPECTRE_BRANCH_HISTORY=y
    
      * CVE-2022-25636
        - netfilter: nf_tables_offload: incorrect flow offload action array size
    
      * CVE-2022-0001
        - x86,bugs: Unconditionally allow spectre_v2=retpoline,amd
        - SAUCE: x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE
        - SAUCE: x86/speculation: Add eIBRS + Retpoline options
        - SAUCE: Documentation/hw-vuln: Update spectre doc
    
     -- Thadeu Lima de Souza Cascardo <email address hidden>  Fri, 04 Mar 2022 16:15:55 -0300
  • linux (5.13.0-32.35) impish; urgency=medium
    
      * impish/linux: 5.13.0-32.35 -proposed tracker (LP: #1961973)
    
      * Broken network on some AWS instances with focal/impish kernels
        (LP: #1961968)
        - SAUCE: Revert "PCI/MSI: Mask MSI-X vectors only on success"
    
    linux (5.13.0-31.34) impish; urgency=medium
    
      * impish/linux: 5.13.0-31.34 -proposed tracker (LP: #1961220)
    
      * Packaging resync (LP: #1786013)
        - [Packaging] resync getabis
        - debian/dkms-versions -- update from kernel-versions (main/2022.02.21)
    
      * [SRU]PCI: vmd: Do not disable MSI-X remapping if interrupt remapping is
        enabled by IOMMU (LP: #1937295)
        - PCI: vmd: Do not disable MSI-X remapping if interrupt remapping is enabled
          by IOMMU
    
      * [UBUNTU 20.04] kernel: Add support for CPU-MF counter second version 7
        (LP: #1960182)
        - s390/cpumf: Support for CPU Measurement Facility CSVN 7
        - s390/cpumf: Support for CPU Measurement Sampling Facility LS bit
    
      * [UBUNTU 21.10] s390/cio: verify the driver availability for path_event call
        (LP: #1960875)
        - s390/cio: verify the driver availability for path_event call
    
      * Impish update: upstream stable patchset 2022-02-14 (LP: #1960861)
        - devtmpfs regression fix: reconfigure on each mount
        - orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc()
        - remoteproc: qcom: pil_info: Don't memcpy_toio more than is provided
        - perf: Protect perf_guest_cbs with RCU
        - KVM: x86: Register Processor Trace interrupt hook iff PT enabled in guest
        - KVM: s390: Clarify SIGP orders versus STOP/RESTART
        - 9p: only copy valid iattrs in 9P2000.L setattr implementation
        - video: vga16fb: Only probe for EGA and VGA 16 color graphic cards
        - media: uvcvideo: fix division by zero at stream start
        - rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with
          interrupts enabled
        - firmware: qemu_fw_cfg: fix sysfs information leak
        - firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries
        - firmware: qemu_fw_cfg: fix kobject leak in probe error path
        - KVM: x86: remove PMU FIXED_CTR3 from msrs_to_save_all
        - ALSA: hda/realtek: Add speaker fixup for some Yoga 15ITL5 devices
        - ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after
          reboot from Windows
        - ALSA: hda: ALC287: Add Lenovo IdeaPad Slim 9i 14ITL5 speaker quirk
        - ALSA: hda/realtek: Add quirk for Legion Y9000X 2020
        - ALSA: hda/realtek: Re-order quirk entries for Lenovo
        - powerpc/pseries: Get entry and uaccess flush required bits from
          H_GET_CPU_CHARACTERISTICS
        - mtd: fixup CFI on ixp4xx
        - KVM: x86: don't print when fail to read/write pv eoi memory
        - remoteproc: qcom: pas: Add missing power-domain "mxc" for CDSP
        - perf annotate: Avoid TUI crash when navigating in the annotation of
          recursive functions
        - ALSA: hda/realtek: Use ALC285_FIXUP_HP_GPIO_LED on another HP laptop
        - ALSA: hda/tegra: Fix Tegra194 HDA reset failure
    
      * CVE-2022-0516
        - KVM: s390: Return error on SIDA memop on normal guest
    
      * CVE-2022-0435
        - tipc: improve size validations for received domain records
    
      * CVE-2022-0492
        - cgroup-v1: Require capabilities to set release_agent
    
      * jammy 5.15 kernel soft lockup when zfs.ko is loaded on s390x w/ gcc >=
        11.2.0-10ubuntu1 / gcc-11 PLT regression on s390x (LP: #1954676)
        - s390/module: fix loading modules with a lot of relocations
    
      * Impish update: upstream stable patchset 2022-02-09 (LP: #1960452)
        - workqueue: Fix unbind_workers() VS wq_worker_running() race
        - Bluetooth: btusb: fix memory leak in btusb_mtk_submit_wmt_recv_urb()
        - Bluetooth: btusb: Add two more Bluetooth parts for WCN6855
        - Bluetooth: btusb: Add support for Foxconn QCA 0xe0d0
        - Bluetooth: bfusb: fix division by zero in send path
        - ARM: dts: exynos: Fix BCM4330 Bluetooth reset polarity in I9100
        - USB: core: Fix bug in resuming hub's handling of wakeup requests
        - USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status
        - ath11k: Fix buffer overflow when scanning with extraie
        - mmc: sdhci-pci: Add PCI ID for Intel ADL
        - mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe()
        - can: gs_usb: fix use of uninitialized variable, detach device on reception
          of invalid USB data
        - can: isotp: convert struct tpcon::{idx,len} to unsigned int
        - can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved}
        - random: fix data race on crng_node_pool
        - random: fix data race on crng init time
        - random: fix crash on multiple early calls to add_bootloader_randomness()
        - media: Revert "media: uvcvideo: Set unique vdev name based in type"
        - staging: wlan-ng: Avoid bitwise vs logical OR warning in
          hfa384x_usb_throttlefn()
        - drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk()
        - staging: greybus: fix stack size warning with UBSAN
        - s390/kexec: handle R_390_PLT32DBL rela in arch_kexec_apply_relocations_add()
        - Bluetooth: btusb: Add the new support ID for Realtek RTL8852A
        - Bluetooth: btusb: Add support for IMC Networks Mediatek Chip(MT7921)
        - Bbluetooth: btusb: Add another Bluetooth part for Realtek 8852AE
        - Bluetooth: btusb: Enable MSFT extension for Mediatek Chip (MT7921)
        - Bluetooth: btusb: enable Mediatek to support AOSP extension
        - Bluetooth: btusb: Add one more Bluetooth part for the Realtek RTL8852AE
        - Bluetooth: btusb: Add the new support IDs for WCN6855
        - fget: clarify and improve __fget_files() implementation
        - Bluetooth: btusb: Add one more Bluetooth part for WCN6855
        - Bluetooth: add quirk disabling LE Read Transmit Power
        - Bluetooth: btbcm: disable read tx power for some Macs with the T2 Security
          chip
        - Bluetooth: btbcm: disable read tx power for MacBook Air 8,1 and 8,2
    
      * Impish update: upstream stable patchset 2022-01-31 (LP: #1959627)
        - selftests: x86: fix [-Wstringop-overread] warn in test_process_vm_readv()
        - tracing: Fix check for trace_percpu_buffer validity in get_trace_buf()
        - tracing: Tag trace_percpu_buffer as a percpu pointer
        - ieee802154: atusb: fix uninit value in atusb_set_extended_addr
        - i40e: Fix to not show opcode msg on unsuccessful VF MAC change
        - iavf: Fix limit of total number of queues to active queues of VF
        - RDMA/core: Don't infoleak GRH fields
        - netrom: fix copying in user data in nr_setsockopt
        - RDMA/uverbs: Check for null return of kmalloc_array
        - mac80211: initialize variable have_higher_than_11mbit
        - sfc: The RX page_ring is optional
        - i40e: fix use-after-free in i40e_sync_filters_subtask()
        - i40e: Fix for displaying message regarding NVM version
        - i40e: Fix incorrect netdev's real number of RX/TX queues
        - ftrace/samples: Add missing prototypes direct functions
        - ipv4: Check attribute length for RTA_GATEWAY in multipath route
        - ipv4: Check attribute length for RTA_FLOW in multipath route
        - ipv6: Check attribute length for RTA_GATEWAY in multipath route
        - ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route
        - lwtunnel: Validate RTA_ENCAP_TYPE attribute length
        - batman-adv: mcast: don't send link-local multicast to mcast routers
        - sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc
        - net: ena: Fix undefined state when tx request id is out of bounds
        - net: ena: Fix error handling when calculating max IO queues number
        - power: supply: core: Break capacity loop
        - power: reset: ltc2952: Fix use of floating point literals
        - rndis_host: support Hytera digital radios
        - phonet: refcount leak in pep_sock_accep
        - power: bq25890: Enable continuous conversion for ADC at charging
        - ipv6: Continue processing multipath route even if gateway attribute is
          invalid
        - ipv6: Do cleanup if attribute validation fails in multipath route
        - usb: mtu3: fix interval value for intr and isoc
        - scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown()
        - ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate
        - net: udp: fix alignment problem in udp4_seq_show()
        - atlantic: Fix buff_ring OOB in aq_ring_rx_clean
        - mISDN: change function names to avoid conflicts
        - drm/amd/display: Added power down for DCN10
        - ipv6: raw: check passed optlen before reading
        - ARM: dts: gpio-ranges property is now required
        - Input: zinitix - make sure the IRQ is allocated before it gets enabled
        - fscache_cookie_enabled: check cookie is valid before accessing it
        - Revert "net: usb: r8152: Add MAC passthrough support for more Lenovo Docks"
        - mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh
        - selftests: net: udpgro_fwd.sh: explicitly checking the available ping
          feature
        - sctp: hold endpoint before calling cb in sctp_transport_lookup_process
        - net: ena: Fix wrong rx request id by resetting device
        - md/raid1: fix missing bitmap update w/o WriteMostly devices
        - cgroup: Use open-time credentials for process migraton perm checks
        - cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv
        - cgroup: Use open-time cgroup namespace for process migration perm checks
        - i2c: mpc: Avoid out of bounds memory access
        - net ticp:fix a kernel-infoleak in __tipc_sendmsg()
        - fbdev: fbmem: add a helper to determine if an aperture is used by a fw fb
        - drm/amdgpu: disable runpm if we are the primary adapter
        - auxdisplay: charlcd: checking for pointer reference before dereferencing
        - drm/amd/pm: Fix xgmi link control on aldebaran
        - drm/amd/pm: skip setting gfx cgpg in the s0ix suspend-resume
        - drm/amdgpu: always reset the asic in suspend (v2)
        - drm/amdgpu: put SMU into proper state on runpm suspending for BOCO capable
          platform
        - userfaultfd/selftests: fix hugetlb area allocations
    
      * Impish update: upstream stable patchset 2022-01-26 (LP: #1959134)
        - Input: i8042 - add deferred probe support
        - Input: i8042 - enable deferred probe quirk for ASUS UM325UA
        - tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok().
        - tomoyo: use hwight16() in tomoyo_domain_quota_is_ok()
        - parisc: Clear stale IIR value on instruction access rights trap
        - platform/x86: apple-gmux: use resource_size() with res
        - memblock: fix memblock_phys_alloc() section mismatch error
        - recordmcount.pl: fix typo in s390 mcount regex
        - selinux: initialize proto variable in selinux_ip_postroute_compat()
        - scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write()
        - net/mlx5: DR, Fix NULL vs IS_ERR checking in dr_domain_init_resources
        - net/mlx5e: Wrap the tx reporter dump callback to extract the sq
        - net/mlx5e: Fix interoperability between XSK and ICOSQ recovery flow
        - net/mlx5e: Fix ICOSQ recovery flow for XSK
        - udp: using datalen to cap ipv6 udp max gso segments
        - selftests: Calculate udpgso segment count without header adjustment
        - sctp: use call_rcu to free endpoint
        - net/smc: fix using of uninitialized completions
        - net: usb: pegasus: Do not drop long Ethernet frames
        - net: ag71xx: Fix a potential double free in error handling paths
        - net: lantiq_xrx200: fix statistics of received bytes
        - NFC: st21nfca: Fix memory leak in device probe and remove
        - net/smc: don't send CDC/LLC message if link not ready
        - net/smc: fix kernel panic caused by race of smc_sock
        - igc: Fix TX timestamp support for non-MSI-X platforms
        - ionic: Initialize the 'lif->dbid_inuse' bitmap
        - net/mlx5e: Fix wrong features assignment in case of error
        - selftests/net: udpgso_bench_tx: fix dst ip argument
        - net/ncsi: check for error return from call to nla_put_u32
        - fsl/fman: Fix missing put_device() call in fman_port_probe
        - i2c: validate user data in compat ioctl
        - nfc: uapi: use kernel size_t to fix user-space builds
        - uapi: fix linux/nfc.h userspace compilation errors
        - drm/amdgpu: When the VCN(1.0) block is suspended, powergating is explicitly
          enabled
        - drm/amdgpu: add support for IP discovery gc_info table v2
        - xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set.
        - usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
        - usb: mtu3: add memory barrier before set GPD's HWO
        - usb: mtu3: fix list_head check warning
        - usb: mtu3: set interval of FS intr and isoc endpoint
        - binder: fix async_free_space accounting for empty parcels
        - scsi: vmw_pvscsi: Set residual data length conditionally
        - Input: appletouch - initialize work before device registration
        - Input: spaceball - fix parsing of movement data packets
        - net: fix use-after-free in tw_timer_handler
        - perf script: Fix CPU filtering of a script's switch events
        - net/sched: Extend qdisc control block with tc control block
        - platform/mellanox: mlxbf-pmc: Fix an IS_ERR() vs NULL bug in
          mlxbf_pmc_map_counters
        - net/mlx5: Fix SF health recovery flow
        - net/mlx5: Fix tc max supported prio for nic mode
        - selftests: net: Fix a typo in udpgro_fwd.sh
        - selftests: net: using ping6 for IPv6 in udpgro_fwd.sh
        - fs/mount_setattr: always cleanup mount_kattr
    
      * Impish update: upstream stable patchset 2022-01-21 (LP: #1958672)
        - arm64: vdso32: require CROSS_COMPILE_COMPAT for gcc+bfd
        - net: usb: lan78xx: add Allied Telesis AT29M2-AF
        - ext4: prevent partial update of the extent blocks
        - ext4: check for out-of-order index extents in ext4_valid_extent_entries()
        - ext4: check for inconsistent extents between index and leaf block
        - HID: holtek: fix mouse probing
        - HID: potential dereference of null pointer
        - arm64: dts: allwinner: orangepi-zero-plus: fix PHY mode
        - spi: change clk_disable_unprepare to clk_unprepare
        - ASoC: meson: aiu: fifo: Add missing dma_coerce_mask_and_coherent()
        - IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
        - RDMA/hns: Replace kfree() with kvfree()
        - netfilter: fix regression in looped (broad|multi)cast's MAC handling
        - ARM: dts: imx6qdl-wandboard: Fix Ethernet support
        - net: marvell: prestera: fix incorrect return of port_find
        - qlcnic: potential dereference null pointer of rx_queue->page_ring
        - net: accept UFOv6 packages in virtio_net_hdr_to_skb
        - net: skip virtio_net_hdr_set_proto if protocol already set
        - igb: fix deadlock caused by taking RTNL in RPM resume path
        - ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module
        - bonding: fix ad_actor_system option setting to default
        - fjes: Check for error irq
        - drivers: net: smc911x: Check for error irq
        - net: ks8851: Check for error irq
        - sfc: Check null pointer of rx_queue->page_ring
        - sfc: falcon: Check null pointer of rx_queue->page_ring
        - pinctrl: bcm2835: Change init order for gpio hogs
        - hwmon: (lm90) Fix usage of CONFIG2 register in detect function
        - hwmon: (lm90) Add basic support for TI TMP461
        - hwmon: (lm90) Introduce flag indicating extended temperature support
        - hwmon: (lm90) Drop critical attribute support for MAX6654
        - ALSA: jack: Check the return value of kstrdup()
        - ALSA: drivers: opl3: Fix incorrect use of vp->state
        - ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6
        - ALSA: hda/realtek: Add new alc285-hp-amp-init model
        - ALSA: hda/realtek: Fix quirk for Clevo NJ51CU
        - ASoC: meson: aiu: Move AIU_I2S_MISC hold setting to aiu-fifo-i2s
        - Input: atmel_mxt_ts - fix double free in mxt_read_info_block
        - ipmi: bail out if init_srcu_struct fails
        - ipmi: ssif: initialize ssif_info->client early
        - ipmi: fix initialization when workqueue allocation fails
        - parisc: Correct completer in lws start
        - parisc: Fix mask used to select futex spinlock
        - tee: handle lookup of shm with reference count 0
        - x86/pkey: Fix undefined behaviour with PKRU_WD_BIT
        - platform/x86: intel_pmc_core: fix memleak on registration failure
        - KVM: VMX: Wake vCPU when delivering posted IRQ even if vCPU == this vCPU
        - pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines
        - gpio: dln2: Fix interrupts when replugging the device
        - mmc: sdhci-tegra: Fix switch to HS400ES mode
        - mmc: meson-mx-sdhc: Set MANUAL_STOP for multi-block SDIO commands
        - mmc: core: Disable card detect during shutdown
        - mmc: mmci: stm32: clear DLYB_CR after sending tuning command
        - ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling
        - mac80211: fix locking in ieee80211_start_ap error path
        - mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page()
        - tee: optee: Fix incorrect page free bug
        - f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()
        - usb: gadget: u_ether: fix race in setting MAC address in setup phase
        - KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state
        - mm: mempolicy: fix THP allocations escaping mempolicy restrictions
        - Input: elants_i2c - do not check Remark ID on eKTH3900/eKTH5312
        - Input: goodix - add id->model mapping for the "9111" model
        - ASoC: tas2770: Fix setting of high sample rates
        - ASoC: rt5682: fix the wrong jack type detected
        - pinctrl: mediatek: fix global-out-of-bounds issue
        - hwmom: (lm90) Fix citical alarm status for MAX6680/MAX6681
        - hwmon: (lm90) Do not report 'busy' status bit as alarm
        - ax25: NPD bug when detaching AX25 device
        - hamradio: defer ax25 kfree after unregister_netdev
        - hamradio: improve the incomplete fix to avoid NPD
        - phonet/pep: refuse to enable an unbound pipe
        - selftests: KVM: Fix non-x86 compiling
        - NFSD: Fix READDIR buffer overflow
        - PM: sleep: Fix error handling in dpm_prepare()
        - bus: sunxi-rsb: Fix shutdown
        - netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()
        - ice: Use xdp_buf instead of rx_buf for xsk zero-copy
        - ice: xsk: return xsk buffers back to pool when cleaning the ring
        - tcp: move inet->rx_dst_ifindex to sk->sk_rx_dst_ifindex
        - ipv6: move inet6_sk(sk)->rx_dst_cookie to sk->sk_rx_dst_cookie
        - inet: fully convert sk->sk_rx_dst to RCU rules
        - io_uring: zero iocb->ki_pos for stream file types
        - veth: ensure skb entering GRO are not cloned.
        - net: bridge: Use array_size() helper in copy_to_user()
        - r8152: fix the force speed doesn't work for RTL8156
        - net: stmmac: dwmac-visconti: Fix value of ETHER_CLK_SEL_FREQ_SEL_2P5M
        - ARM: 9160/1: NOMMU: Reload __secondary_data after PROCINFO_INITFUNC
        - uapi: Fix undefined __always_inline on non-glibc systems
        - Revert "x86/boot: Pull up cmdline preparation and early param parsing"
        - x86/boot: Move EFI range reservation after cmdline parsing
        - ALSA: hda/hdmi: Disable silent stream on GLK
        - platform/x86: amd-pmc: only use callbacks for suspend
        - KVM: x86: Always set kvm_run->if_flag
        - KVM: x86/mmu: Don't advance iterator after restart due to yielding
        - KVM: nVMX: Synthesize TRIPLE_FAULT for L2 if emulation is required
        - mm, hwpoison: fix condition in free hugetlb page path
        - netfs: fix parameter of cleanup()
        - arm64: dts: lx2160a: fix scl-gpios property name
        - kfence: fix memory leak when cat kfence objects
        - Input: iqs626a - prohibit inlining of channel parsing functions
        - ASoC: SOF: Intel: pci-tgl: add ADL-M support
        - ASoC: SOF: Intel: pci-tgl: add new ADL-P variant
        - ASoC: SOF: Intel: pci-tgl: add ADL-N support
        - r8152: sync ocp base
        - tun: avoid double free in tun_free_netdev
    
      * Impish update: upstream stable patchset 2022-01-18 (LP: #1958287)
        - netfilter: selftest: conntrack_vrf.sh: fix file permission
        - nfc: fix segfault in nfc_genl_dump_devices_done
        - drm/msm/dsi: set default num_data_lanes
        - KVM: arm64: Save PSTATE early on exit
        - s390/test_unwind: use raw opcode instead of invalid instruction
        - Revert "tty: serial: fsl_lpuart: drop earlycon entry for i.MX8QXP"
        - net/mlx4_en: Update reported link modes for 1/10G
        - ALSA: hda: Add Intel DG2 PCI ID and HDMI codec vid
        - ALSA: hda/hdmi: fix HDA codec entry table order for ADL-P
        - parisc/agp: Annotate parisc agp init functions with __init
        - i2c: rk3x: Handle a spurious start completion interrupt flag
        - net: netlink: af_netlink: Prevent empty skb by adding a check on len.
        - drm/amd/display: Fix for the no Audio bug with Tiled Displays
        - drm/amd/display: add connector type check for CRC source set
        - tracing: Fix a kmemleak false positive in tracing_map
        - staging: most: dim2: use device release method
        - fuse: make sure reclaim doesn't write the inode
        - hwmon: (dell-smm) Fix warning on /proc/i8k creation error
        - ethtool: do not perform operations on net devices being unregistered
        - perf inject: Fix itrace space allowed for new attributes
        - memblock: free_unused_memmap: use pageblock units instead of MAX_ORDER
        - memblock: align freed memory map on pageblock boundaries with SPARSEMEM
        - memblock: ensure there is no overflow in memblock_overlaps_region()
        - arm: extend pfn_valid to take into account freed memory map alignment
        - arm: ioremap: don't abuse pfn_valid() to check if pfn is in RAM
        - hwmon: (corsair-psu) fix plain integer used as NULL pointer
        - perf bpf_skel: Do not use typedef to avoid error on old clang
        - netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock
        - ice: fix FDIR init missing when reset VF
        - drm/msm/dp: Avoid unpowered AUX xfers that caused crashes
        - KVM: selftests: Make sure kvm_create_max_vcpus test won't hit RLIMIT_NOFILE
        - KVM: downgrade two BUG_ONs to WARN_ON_ONCE
        - mac80211: fix regression in SSN handling of addba tx
        - mac80211: mark TX-during-stop for TX in in_reconfig
        - mac80211: send ADDBA requests using the tid/queue of the aggregation session
        - mac80211: validate extended element ID is present
        - firmware: arm_scpi: Fix string overflow in SCPI genpd driver
        - bpf: Fix signed bounds propagation after mov32
        - bpf: Make 32->64 bounds propagation slightly more robust
        - bpf, selftests: Add test case trying to taint map value pointer
        - virtio_ring: Fix querying of maximum DMA mapping size for virtio device
        - vdpa: check that offsets are within bounds
        - recordmcount.pl: look for jgnop instruction as well as bcrl on s390
        - dm btree remove: fix use after free in rebalance_children()
        - audit: improve robustness of the audit queue handling
        - arm64: dts: rockchip: remove mmc-hs400-enhanced-strobe from rk3399-khadas-
          edge
        - arm64: dts: rockchip: fix rk3308-roc-cc vcc-sd supply
        - arm64: dts: rockchip: fix rk3399-leez-p710 vcc3v3-lan supply
        - arm64: dts: rockchip: fix audio-supply for Rock Pi 4
        - mac80211: track only QoS data frames for admission control
        - tee: amdtee: fix an IS_ERR() vs NULL bug
        - ceph: fix duplicate increment of opened_inodes metric
        - ceph: initialize pathlen variable in reconnect_caps_cb
        - ARM: socfpga: dts: fix qspi node compatible
        - clk: Don't parent clks until the parent is fully registered
        - soc: imx: Register SoC device only on i.MX boards
        - virtio/vsock: fix the transport to work with VMADDR_CID_ANY
        - selftests: net: Correct ping6 expected rc from 2 to 1
        - s390/kexec_file: fix error handling when applying relocations
        - sch_cake: do not call cake_destroy() from cake_init()
        - inet_diag: fix kernel-infoleak for UDP sockets
        - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg
        - selftests: Add duplicate config only for MD5 VRF tests
        - selftests: Fix raw socket bind tests with VRF
        - selftests: Fix IPv6 address bind tests
        - dmaengine: st_fdma: fix MODULE_ALIAS
        - selftest/net/forwarding: declare NETIFS p9 p10
        - drm/ast: potential dereference of null pointer
        - mac80211: agg-tx: don't schedule_and_wake_txq() under sta->lock
        - mac80211: fix lookup when adding AddBA extension element
        - flow_offload: return EOPNOTSUPP for the unsupported mpls action type
        - rds: memory leak in __rds_conn_create()
        - drm/amd/pm: fix a potential gpu_metrics_table memory leak
        - mptcp: clear 'kern' flag from fallback sockets
        - soc/tegra: fuse: Fix bitwise vs. logical OR warning
        - igb: Fix removal of unicast MAC filters of VFs
        - igbvf: fix double free in `igbvf_probe`
        - igc: Fix typo in i225 LTR functions
        - ixgbe: Document how to enable NBASE-T support
        - ixgbe: set X550 MDIO speed before talking to PHY
        - netdevsim: Zero-initialize memory for new map's value in function
          nsim_bpf_map_alloc
        - sfc_ef100: potential dereference of null pointer
        - net: Fix double 0x prefix print in SKB dump
        - net/smc: Prevent smc_release() from long blocking
        - net: systemport: Add global locking for descriptor lifecycle
        - sit: do not call ipip6_dev_free() from sit_init_net()
        - bpf, selftests: Fix racing issue in btf_skc_cls_ingress test
        - powerpc/85xx: Fix oops when CONFIG_FSL_PMC=n
        - USB: gadget: bRequestType is a bitfield, not a enum
        - Revert "usb: early: convert to readl_poll_timeout_atomic()"
        - KVM: x86: Drop guest CPUID check for host initiated writes to
          MSR_IA32_PERF_CAPABILITIES
        - tty: n_hdlc: make n_hdlc_tty_wakeup() asynchronous
        - USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04)
        - usb: dwc2: fix STM ID/VBUS detection startup delay in dwc2_driver_probe
        - PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error
        - PCI/MSI: Mask MSI-X vectors only on success
        - usb: xhci: Extend support for runtime power management for AMD's Yellow
          carp.
        - USB: serial: cp210x: fix CP2105 GPIO registration
        - USB: serial: option: add Telit FN990 compositions
        - btrfs: fix memory leak in __add_inode_ref()
        - btrfs: fix double free of anon_dev after failure to create subvolume
        - zonefs: add MODULE_ALIAS_FS
        - iocost: Fix divide-by-zero on donation from low hweight cgroup
        - serial: 8250_fintek: Fix garbled text for console
        - timekeeping: Really make sure wall_to_monotonic isn't positive
        - libata: if T_LENGTH is zero, dma direction should be DMA_NONE
        - drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE
        - Input: touchscreen - avoid bitwise vs logical OR warning
        - ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name
        - media: mxl111sf: change mutex_init() location
        - fuse: annotate lock in fuse_reverse_inval_entry()
        - ovl: fix warning in ovl_create_real()
        - scsi: scsi_debug: Don't call kcalloc() if size arg is zero
        - scsi: scsi_debug: Fix type in min_t to avoid stack OOB
        - scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()
        - rcu: Mark accesses to rcu_state.n_force_qs
        - bus: ti-sysc: Fix variable set but not used warning for reinit_modules
        - xen/blkfront: harden blkfront against event channel storms
        - xen/netfront: harden netfront against event channel storms
        - xen/console: harden hvc_xen against event channel storms
        - xen/netback: fix rx queue stall detection
        - xen/netback: don't queue unlimited number of packages
        - KVM: VMX: clear vmx_x86_ops.sync_pir_to_irr if APICv is disabled
        - x86/kvm: remove unused ack_notifier callbacks
        - bpf: Fix kernel address leakage in atomic fetch
        - bpf, selftests: Add test case for atomic fetch on spilled pointer
        - bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg
        - bpf, selftests: Update test case for atomic cmpxchg on r0 with pointer
        - s390/entry: fix duplicate tracking of irq nesting level
        - ceph: fix up non-directory creation in SGID directories
        - btrfs: convert latest_bdev type to btrfs_device and rename
        - btrfs: use latest_dev in btrfs_show_devname
        - btrfs: update latest_dev when we create a sprout device
        - btrfs: remove stale comment about the btrfs_show_devname
        - drm/i915/hdmi: convert intel_hdmi_to_dev to intel_hdmi_to_i915
        - drm/i915/hdmi: Turn DP++ TMDS output buffers back on in encoder->shutdown()
        - pinctrl: amd: Fix wakeups when IRQ is shared with SCI
        - arm64: dts: rockchip: fix poweroff on helios64
        - dmaengine: idxd: add halt interrupt support
        - dmaengine: idxd: fix calling wq quiesce inside spinlock
        - arm64: dts: imx8mq: remove interconnect property from lcdif
        - iwlwifi: mvm: don't crash on invalid rate w/o STA
        - vdpa: Consider device id larger than 31
        - netdevsim: don't overwrite read only ethtool parms
        - dmaengine: idxd: fix missed completion on abort path
        - net: dsa: mv88e6xxx: Unforce speed & duplex in mac_link_down()
        - mptcp: never allow the PM to close a listener subflow
        - cfg80211: Acquire wiphy mutex on regulatory work
        - net: stmmac: fix tc flower deletion for VLAN priority Rx steering
        - mptcp: remove tcp ulp setsockopt support
        - mptcp: fix deadlock in __mptcp_push_pending()
        - dsa: mv88e6xxx: fix debug print for SPEED_UNFORCED
        - arm64: kexec: Fix missing error code 'ret' warning in load_other_segments()
        - bpf: Fix extable fixup offset.
        - usb: cdnsp: Fix incorrect status for control request
        - usb: cdnsp: Fix incorrect calling of cdnsp_died function
        - usb: cdnsp: Fix issue in cdnsp_log_ep trace event
        - usb: cdnsp: Fix lack of spin_lock_irqsave/spin_lock_restore
        - usb: typec: tcpm: fix tcpm unregister port but leave a pending timer
        - selinux: fix sleeping function called from invalid context
        - btrfs: check WRITE_ERR when trying to read an extent buffer
        - btrfs: fix missing blkdev_put() call in btrfs_scan_one_device()
        - cifs: sanitize multiple delimiters in prepath
        - riscv: dts: unleashed: Add gpio card detect to mmc-spi-slot
        - riscv: dts: unmatched: Add gpio card detect to mmc-spi-slot
        - drm/amdgpu: don't override default ECO_BITs setting
        - drm/amd/pm: fix reading SMU FW version from amdgpu_firmware_info on YC
        - can: m_can: make custom bittiming fields const
        - can: m_can: pci: use custom bit timings for Elkhart Lake
        - mptcp: add missing documented NL params
        - USB: core: Make do_proc_control() and do_proc_bulk() killable
    
      * Impish update: upstream stable patchset 2022-01-13 (LP: #1957832)
        - usb: gadget: uvc: fix multiple opens
        - HID: quirks: Add quirk for the Microsoft Surface 3 type-cover
        - HID: google: add eel USB id
        - HID: add hid_is_usb() function to make it simpler for USB detection
        - HID: add USB_HID dependancy to hid-prodikeys
        - HID: add USB_HID dependancy to hid-chicony
        - HID: add USB_HID dependancy on some USB HID drivers
        - HID: bigbenff: prevent null pointer dereference
        - HID: wacom: fix problems when device is not a valid USB device
        - HID: check for valid USB device for many HID drivers
        - nft_set_pipapo: Fix bucket load in AVX2 lookup routine for six 8-bit groups
        - IB/hfi1: Insure use of smp_processor_id() is preempt disabled
        - IB/hfi1: Fix early init panic
        - IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr
        - can: kvaser_usb: get CAN clock frequency from device
        - can: kvaser_pciefd: kvaser_pciefd_rx_error_frame(): increase correct
          stats->{rx,tx}_errors counter
        - can: sja1000: fix use after free in ems_pcmcia_add_card()
        - x86/sme: Explicitly map new EFI memmap table as encrypted
        - nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
        - selftests: netfilter: add a vrf+conntrack testcase
        - vrf: don't run conntrack on vrf with !dflt qdisc
        - bpf, x86: Fix "no previous prototype" warning
        - bpf: Fix the off-by-two error in range markings
        - ice: ignore dropped packets during init
        - bonding: make tx_rebalance_counter an atomic
        - nfp: Fix memory leak in nfp_cpp_area_cache_add()
        - seg6: fix the iif in the IPv6 socket control block
        - udp: using datalen to cap max gso segments
        - netfilter: conntrack: annotate data-races around ct->timeout
        - iavf: restore MSI state on reset
        - iavf: Fix reporting when setting descriptor count
        - IB/hfi1: Correct guard on eager buffer deallocation
        - devlink: fix netns refcount leak in devlink_nl_cmd_reload()
        - net/sched: fq_pie: prevent dismantle issue
        - KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush
          hypercall
        - mm: bdi: initialize bdi_min_ratio when bdi is unregistered
        - ALSA: ctl: Fix copy of updated id with element read/write
        - ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform
        - ALSA: hda/realtek: Fix quirk for TongFang PHxTxX1
        - ALSA: pcm: oss: Fix negative period/buffer sizes
        - ALSA: pcm: oss: Limit the period size to 16MB
        - ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*()
        - scsi: qla2xxx: Format log strings only if needed
        - btrfs: clear extent buffer uptodate when we fail to write it
        - btrfs: replace the BUG_ON in btrfs_del_root_ref with proper error handling
        - md: fix update super 1.0 on rdev size change
        - nfsd: fix use-after-free due to delegation race
        - nfsd: Fix nsfd startup race (again)
        - tracefs: Have new files inherit the ownership of their parent
        - mmc: renesas_sdhi: initialize variable properly when tuning
        - clk: qcom: regmap-mux: fix parent clock lookup
        - drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence.
        - can: pch_can: pch_can_rx_normal: fix use after free
        - can: m_can: Disable and ignore ELO interrupt
        - libata: add horkage for ASMedia 1092
        - wait: add wake_up_pollfree()
        - SAUCE: binder: export __wake_up_pollfree for binder module
        - binder: use wake_up_pollfree()
        - signalfd: use wake_up_pollfree()
        - aio: keep poll requests on waitqueue until completed
        - aio: fix use-after-free due to missing POLLFREE handling
        - net: mvpp2: fix XDP rx queues registering
        - tracefs: Set all files to the same group ownership as the mount option
        - block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2)
        - scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc()
        - scsi: scsi_debug: Fix buffer size of REPORT ZONES command
        - qede: validate non LSO skb length
        - PM: runtime: Fix pm_runtime_active() kerneldoc comment
        - ASoC: rt5682: Fix crash due to out of scope stack vars
        - ASoC: qdsp6: q6routing: Fix return value from msm_routing_put_audio_mixer
        - ASoC: codecs: wsa881x: fix return values from kcontrol put
        - ASoC: codecs: wcd934x: handle channel mappping list correctly
        - ASoC: codecs: wcd934x: return correct value from mixer put
        - RDMA/hns: Do not halt commands during reset until later
        - RDMA/hns: Do not destroy QP resources in the hw resetting phase
        - clk: imx: use module_platform_driver
        - i40e: Fix failed opcode appearing if handling messages from VF
        - i40e: Fix pre-set max number of queues for VF
        - mtd: rawnand: fsmc: Take instruction delay into account
        - mtd: rawnand: fsmc: Fix timing computation
        - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc
        - Revert "PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge"
        - perf tools: Fix SMT detection fast read path
        - Documentation/locking/locktypes: Update migrate_disable() bits.
        - dt-bindings: net: Reintroduce PHY no lane swap binding
        - tools build: Remove needless libpython-version feature check that breaks
          test-all fast path
        - net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero
        - net: altera: set a couple error code in probe()
        - net: fec: only clear interrupt of handling queue in fec_enet_rx_queue()
        - net, neigh: clear whole pneigh_entry at alloc time
        - net/qla3xxx: fix an error code in ql_adapter_up()
        - Revert "UBUNTU: SAUCE: selftests: fib_tests: assign address to dummy1 for
          rp_filter tests"
        - selftests/fib_tests: Rework fib_rp_filter_test()
        - USB: gadget: detect too-big endpoint 0 requests
        - USB: gadget: zero allocate endpoint 0 buffers
        - usb: core: config: fix validation of wMaxPacketValue entries
        - xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime
          suspending
        - usb: core: config: using bit mask instead of individual bits
        - xhci: avoid race between disable slot command and host runtime suspend
        - iio: gyro: adxrs290: fix data signedness
        - iio: trigger: Fix reference counting
        - iio: trigger: stm32-timer: fix MODULE_ALIAS
        - iio: stk3310: Don't return error code in interrupt handler
        - iio: mma8452: Fix trigger reference couting
        - iio: ltr501: Don't return error code in trigger handler
        - iio: kxsd9: Don't return error code in trigger handler
        - iio: itg3200: Call iio_trigger_notify_done() on error
        - iio: dln2-adc: Fix lockdep complaint
        - iio: dln2: Check return value of devm_iio_trigger_register()
        - iio: at91-sama5d2: Fix incorrect sign extension
        - iio: adc: stm32: fix a current leak by resetting pcsel before disabling vdda
        - iio: adc: axp20x_adc: fix charging current reporting on AXP22x
        - iio: ad7768-1: Call iio_trigger_notify_done() on error
        - iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
        - csky: fix typo of fpu config macro
        - irqchip/aspeed-scu: Replace update_bits with write_bits.
        - irqchip/armada-370-xp: Fix return value of armada_370_xp_msi_alloc()
        - irqchip/armada-370-xp: Fix support for Multi-MSI interrupts
        - irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL
        - irqchip: nvic: Fix offset for Interrupt Priority Offsets
        - misc: fastrpc: fix improper packet size calculation
        - bpf: Add selftests to cover packet access corner cases
        - HID: intel-ish-hid: ipc: only enable IRQ wakeup when requested
        - mmc: spi: Add device-tree SPI IDs
        - HID: Ignore battery for Elan touchscreen on Asus UX550VE
        - can: m_can: pci: fix incorrect reference clock rate
        - net: dsa: mv88e6xxx: fix "don't use PHY_DETECT on internal PHY's"
        - net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
        - bpf: Make sure bpf_disable_instrumentation() is safe vs preemption.
        - netfilter: nft_exthdr: break evaluation if setting TCP option fails
        - net: bcm4908: Handle dma_set_coherent_mask error codes
        - net: dsa: mv88e6xxx: error handling for serdes_power functions
        - net: dsa: felix: Fix memory leak in felix_setup_mmio_filtering
        - KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit
        - KVM: x86: Ignore sparse banks size for an "all CPUs", non-sparse IPI req
        - timers: implement usleep_idle_range()
        - btrfs: fix re-dirty process of tree-log nodes
        - btrfs: free exchange changeset on failures
        - perf intel-pt: Fix some PGE (packet generation enable/control flow packets)
          usage
        - perf intel-pt: Fix sync state when a PSB (synchronization) packet is found
        - perf intel-pt: Fix intel_pt_fup_event() assumptions about setting state type
        - perf intel-pt: Fix state setting when receiving overflow (OVF) packet
        - perf intel-pt: Fix next 'err' value, walking trace
        - perf intel-pt: Fix missing 'instruction' events with 'q' option
        - perf intel-pt: Fix error timestamp setting on the decoder error path
        - selftests: KVM: avoid failures due to reserved HyperTransport region
        - hwmon: (pwm-fan) Ensure the fan going on in .probe()
        - thermal: int340x: Fix VCoRefLow MMIO bit offset for TGL
        - i2c: mpc: Use atomic read and fix break condition
        - ALSA: usb-audio: Reorder snd_djm_devices[] entries
        - clk: qcom: clk-alpha-pll: Don't reconfigure running Trion
        - misc: rtsx: Avoid mangling IRQ during runtime PM
        - bus: mhi: pci_generic: Fix device recovery failed issue
        - bus: mhi: core: Add support for forced PM resume
        - clocksource/drivers/dw_apb_timer_of: Fix probe failure
    
      * Impish update: upstream stable patchset 2022-01-07 (LP: #1956791)
        - can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM
        - gfs2: release iopen glock early in evict
        - gfs2: Fix length of holes reported at end-of-file
        - powerpc/pseries/ddw: Revert "Extend upper limit for huge DMA window for
          persistent memory"
        - drm/sun4i: fix unmet dependency on RESET_CONTROLLER for PHY_SUN6I_MIPI_DPHY
        - mac80211: do not access the IV when it was stripped
        - net/smc: Transfer remaining wait queue entries during fallback
        - atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
        - net: return correct error code
        - platform/x86: thinkpad_acpi: Add support for dual fan control
        - platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep
        - s390/setup: avoid using memblock_enforce_memory_limit
        - btrfs: check-integrity: fix a warning on write caching disabled disk
        - thermal: core: Reset previous low and high trip during thermal zone init
        - scsi: iscsi: Unblock session then wake up error handler
        - drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again
        - drm/amd/amdgpu: fix potential memleak
        - ata: ahci: Add Green Sardine vendor ID as board_ahci_mobile
        - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in
          hns_dsaf_ge_srst_by_port()
        - ipv6: check return value of ipv6_skip_exthdr
        - net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of
          bound
        - net: ethernet: dec: tulip: de4x5: fix possible array overflows in
          type3_infoblock()
        - perf inject: Fix ARM SPE handling
        - perf hist: Fix memory leak of a perf_hpp_fmt
        - perf report: Fix memory leaks around perf_tip()
        - net/smc: Avoid warning of possible recursive locking
        - ACPI: Add stubs for wakeup handler functions
        - vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit
        - kprobes: Limit max data_size of the kretprobe instances
        - rt2x00: do not mark device gone on EPROTO errors during start
        - cpufreq: Fix get_cpu_device() failure in add_cpu_dev_symlink()
        - s390/pci: move pseudo-MMIO to prevent MIO overlap
        - sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl
        - sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl
        - ipv6: fix memory leak in fib6_rule_suppress
        - drm/amd/display: Allow DSC on supported MST branch devices
        - KVM: Disallow user memslot with size that exceeds "unsigned long"
        - KVM: nVMX: Flush current VPID (L1 vs. L2) for KVM_REQ_TLB_FLUSH_GUEST
        - KVM: x86: Use a stable condition around all VT-d PI paths
        - KVM: arm64: Avoid setting the upper 32 bits of TCR_EL2 and CPTR_EL2 to 1
        - KVM: X86: Use vcpu->arch.walk_mmu for kvm_mmu_invlpg()
        - tracing/histograms: String compares should not care about signed values
        - wireguard: selftests: increase default dmesg log size
        - wireguard: allowedips: add missing __rcu annotation to satisfy sparse
        - wireguard: selftests: actually test for routing loops
        - wireguard: selftests: rename DEBUG_PI_LIST to DEBUG_PLIST
        - wireguard: device: reset peer src endpoint when netns exits
        - wireguard: receive: use ring buffer for incoming handshakes
        - wireguard: receive: drop handshakes if queue lock is contended
        - wireguard: ratelimiter: use kvcalloc() instead of kvzalloc()
        - i2c: stm32f7: flush TX FIFO upon transfer errors
        - i2c: stm32f7: recover the bus on access timeout
        - i2c: stm32f7: stop dma transfer in case of NACK
        - i2c: cbus-gpio: set atomic transfer callback
        - natsemi: xtensa: fix section mismatch warnings
        - tcp: fix page frag corruption on page fault
        - net: qlogic: qlcnic: Fix a NULL pointer dereference in
          qlcnic_83xx_add_rings()
        - net: mpls: Fix notifications when deleting a device
        - siphash: use _unaligned version by default
        - arm64: ftrace: add missing BTIs
        - net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
        - selftests: net: Correct case name
        - mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode
        - ASoC: tegra: Fix wrong value type in ADMAIF
        - ASoC: tegra: Fix wrong value type in I2S
        - ASoC: tegra: Fix wrong value type in DMIC
        - ASoC: tegra: Fix wrong value type in DSPK
        - ASoC: tegra: Fix kcontrol put callback in ADMAIF
        - ASoC: tegra: Fix kcontrol put callback in I2S
        - ASoC: tegra: Fix kcontrol put callback in DMIC
        - ASoC: tegra: Fix kcontrol put callback in DSPK
        - ASoC: tegra: Fix kcontrol put callback in AHUB
        - rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle()
        - rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
        - ALSA: intel-dsp-config: add quirk for CML devices based on ES8336 codec
        - net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no IRQ
          is available
        - net: marvell: mvpp2: Fix the computation of shared CPUs
        - dpaa2-eth: destroy workqueue at the end of remove function
        - net: annotate data-races on txq->xmit_lock_owner
        - ipv4: convert fib_num_tclassid_users to atomic_t
        - net/smc: fix wrong list_del in smc_lgr_cleanup_early
        - net/rds: correct socket tunable error in rds_tcp_tune()
        - drm/msm/a6xx: Allocate enough space for GMU registers
        - drm/msm: Do hw_init() before capturing GPU state
        - atlantic: Increase delay for fw transactions
        - atlatnic: enable Nbase-t speeds with base-t
        - atlantic: Fix to display FW bundle version instead of FW mac version.
        - atlantic: Add missing DIDs and fix 115c.
        - Remove Half duplex mode speed capabilities.
        - atlantic: Fix statistics logic for production hardware
        - atlantic: Remove warn trace message.
        - KVM: x86/pmu: Fix reserved bits for AMD PerfEvtSeln register
        - KVM: VMX: Set failure code in prepare_vmcs02()
        - x86/sev: Fix SEV-ES INS/OUTS instructions for word, dword, and qword
        - x86/entry: Use the correct fence macro after swapgs in kernel CR3
        - x86/xen: Add xenpv_restore_regs_and_return_to_usermode()
        - sched/uclamp: Fix rq->uclamp_max not set on first enqueue
        - x86/entry: Add a fence for kernel entry SWAPGS in paranoid_entry()
        - parisc: Fix KBUILD_IMAGE for self-extracting kernel
        - parisc: Fix "make install" on newer debian releases
        - vgacon: Propagate console boot parameters before calling `vc_resize'
        - xhci: Fix commad ring abort, write all 64 bits to CRCR register.
        - USB: NO_LPM quirk Lenovo Powered USB-C Travel Hub
        - usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect
        - x86/tsc: Add a timer to make sure TSC_adjust is always checked
        - x86/tsc: Disable clocksource watchdog for TSC on qualified platorms
        - x86/64/mm: Map all kernel memory into trampoline_pgd
        - tty: serial: msm_serial: Deactivate RX DMA for polling support
        - serial: pl011: Add ACPI SBSA UART match id
        - serial: tegra: Change lower tolerance baud rate limit for tegra20 and
          tegra30
        - serial: core: fix transmit-buffer reset and memleak
        - serial: 8250_pci: Fix ACCES entries in pci_serial_quirks array
        - serial: 8250_pci: rewrite pericom_do_set_divisor()
        - serial: 8250: Fix RTS modem control while in rs485 mode
        - iwlwifi: mvm: retry init flow if failed
        - parisc: Mark cr16 CPU clocksource unstable on all SMP machines
        - net/tls: Fix authentication failure in CCM mode
        - ALSA: usb-audio: Restrict rates for the shared clocks
        - ALSA: usb-audio: Check available frames for the next packet size
        - ALSA: usb-audio: Add spinlock to stop_urbs()
        - ALSA: usb-audio: Avoid killing in-flight URBs during draining
        - mac80211: fix throughput LED trigger
        - x86/hyperv: Move required MSRs check to initial platform probing
        - platform/x86: dell-wmi-descriptor: disable by default
        - btrfs: silence lockdep when reading chunk tree during mount
        - drm/amd/pm: Remove artificial freq level on Navi1x
        - perf sort: Fix the 'weight' sort key behavior
        - perf sort: Fix the 'ins_lat' sort key behavior
        - perf sort: Fix the 'p_stage_cyc' sort key behavior
        - tracing: Don't use out-of-sync va_list in event printing
        - dma-buf: system_heap: Use 'for_each_sgtable_sg' in pages free flow
        - drm/i915/dp: Perform 30ms delay after source OUI write
        - KVM: SVM: move check for kvm_vcpu_apicv_active outside of
          avic_vcpu_{put|load}
        - KVM: fix avic_set_running for preemptable kernels
        - KVM: x86/mmu: Fix TDP MMU page table level
        - KVM: x86/mmu: Fix TLB flush range when handling disconnected pt
        - KVM: x86: ignore APICv if LAPIC is not enabled
        - KVM: nVMX: Abide to KVM_REQ_TLB_FLUSH_GUEST request on nested vmentry/vmexit
        - KVM: x86: check PIR even for vCPUs with disabled APICv
        - net: dsa: mv88e6xxx: Fix application of erratum 4.8 for 88E6393X
        - net: dsa: mv88e6xxx: Drop unnecessary check in
          mv88e6393x_serdes_erratum_4_6()
        - net: dsa: mv88e6xxx: Save power by disabling SerDes trasmitter and receiver
        - net: dsa: mv88e6xxx: Add fix for erratum 5.2 of 88E6393X family
        - net: dsa: mv88e6xxx: Fix inband AN for 2500base-x on 88E6393X family
        - net: dsa: mv88e6xxx: Link in pcs_get_state() if AN is bypassed
        - iwlwifi: fix warnings produced by kernel debug options
        - net: stmmac: Avoid DMA_CHAN_CONTROL write if no Split Header support
        - octeontx2-af: Fix a memleak bug in rvu_mbox_init()
        - drm/vc4: kms: Wait for the commit before increasing our clock rate
        - drm/vc4: kms: Fix return code check
        - drm/vc4: kms: Add missing drm_crtc_commit_put
        - drm/vc4: kms: Clear the HVS FIFO commit pointer once done
        - drm/vc4: kms: Don't duplicate pending commit
        - drm/vc4: kms: Fix previous HVS commit wait
        - KVM: x86/mmu: Skip tlb flush if it has been done in zap_gfn_range()
        - KVM: SEV: initialize regions_list of a mirror VM
        - preempt/dynamic: Fix setup_preempt_mode() return value
        - KVM: SEV: Return appropriate error codes if SEV-ES scratch setup fails
        - serial: 8250_bcm7271: UART errors after resuming from S2
        - usb: cdns3: gadget: fix new urb never complete if ep cancel previous
          requests
        - usb: cdnsp: Fix a NULL pointer dereference in cdnsp_endpoint_init()
        - serial: liteuart: Fix NULL pointer dereference in ->remove()
        - serial: liteuart: fix use-after-free and memleak on unbind
        - serial: liteuart: fix minor-number leak on probe errors
    
      * CVE-2022-23222
        - bpf: Fix out of bounds access from invalid *_or_null type verification
        - bpf: Don't promote bogus looking registers after null check.
        - bpf, selftests: Add verifier test for mem_or_null register with offset.
    
     -- Kleber Sacilotto de Souza <email address hidden>  Wed, 23 Feb 2022 12:32:03 +0100
  • linux (5.13.0-30.33) impish; urgency=medium
    
      * impish/linux: 5.13.0-30.33 -proposed tracker (LP: #1960055)
    
      * systemd/248.3-1ubuntu8.2 ADT test failure with linux/5.13.0-29.32
        (LP: #1960034)
        - Revert "block: avoid to quiesce queue in elevator_init_mq"
        - Revert "blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and
          disk_release()"
    
    linux (5.13.0-29.32) impish; urgency=medium
    
      * impish/linux: 5.13.0-29.32 -proposed tracker (LP: #1959238)
    
      * Packaging resync (LP: #1786013)
        - debian/dkms-versions -- update from kernel-versions (main/2022.01.31)
    
      * CVE-2022-22942
        - SAUCE: drm/vmwgfx: Fix stale file descriptors on failed usercopy
    
      * CVE-2022-0330
        - drm/i915: Flush TLBs before releasing backing store
    
      * Impish update: upstream stable patchset 2022-01-05 (LP: #1956508)
        - ACPI: Get acpi_device's parent from the parent field
        - USB: serial: option: add Telit LE910S1 0x9200 composition
        - USB: serial: option: add Fibocom FM101-GL variants
        - usb: dwc2: gadget: Fix ISOC flow for elapsed frames
        - usb: dwc2: hcd_queue: Fix use of floating point literal
        - usb: dwc3: gadget: Ignore NoStream after End Transfer
        - usb: dwc3: gadget: Check for L1/L2/U3 for Start Transfer
        - usb: dwc3: gadget: Fix null pointer exception
        - net: nexthop: fix null pointer dereference when IPv6 is not enabled
        - usb: chipidea: ci_hdrc_imx: fix potential error pointer dereference in probe
        - usb: typec: fusb302: Fix masking of comparator and bc_lvl interrupts
        - usb: hub: Fix usb enumeration issue due to address0 race
        - usb: hub: Fix locking issues with address0_mutex
        - binder: fix test regression due to sender_euid change
        - ALSA: ctxfi: Fix out-of-range access
        - ALSA: hda/realtek: Add quirk for ASRock NUC Box 1100
        - ALSA: hda/realtek: Fix LED on HP ProBook 435 G7
        - media: cec: copy sequence field for the reply
        - Revert "parisc: Fix backtrace to always include init funtion names"
        - HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts
        - staging/fbtft: Fix backlight
        - staging: greybus: Add missing rwsem around snd_ctl_remove() calls
        - staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
        - fuse: release pipe buf after last use
        - xen: don't continue xenstore initialization in case of errors
        - xen: detect uninitialized xenbus in xenbus_init
        - KVM: PPC: Book3S HV: Prevent POWER7/8 TLB flush flushing SLB
        - tracing/uprobe: Fix uprobe_perf_open probes iteration
        - tracing: Fix pid filtering when triggers are attached
        - mmc: sdhci-esdhc-imx: disable CMDQ support
        - mmc: sdhci: Fix ADMA for PAGE_SIZE >= 64KiB
        - mdio: aspeed: Fix "Link is Down" issue
        - powerpc/32: Fix hardlockup on vmap stack overflow
        - PCI: aardvark: Deduplicate code in advk_pcie_rd_conf()
        - PCI: aardvark: Implement re-issuing config requests on CRS response
        - PCI: aardvark: Simplify initialization of rootcap on virtual bridge
        - PCI: aardvark: Fix link training
        - proc/vmcore: fix clearing user buffer by properly using clear_user()
        - netfilter: ctnetlink: fix filtering with CTA_TUPLE_REPLY
        - netfilter: ctnetlink: do not erase error code with EINVAL
        - netfilter: ipvs: Fix reuse connection if RS weight is 0
        - netfilter: flowtable: fix IPv6 tunnel addr match
        - ARM: dts: BCM5301X: Fix I2C controller interrupt
        - ARM: dts: BCM5301X: Add interrupt properties to GPIO node
        - ARM: dts: bcm2711: Fix PCIe interrupts
        - ASoC: qdsp6: q6routing: Conditionally reset FrontEnd Mixer
        - ASoC: qdsp6: q6asm: fix q6asm_dai_prepare error handling
        - ASoC: topology: Add missing rwsem around snd_ctl_remove() calls
        - ASoC: codecs: wcd934x: return error code correctly from hw_params
        - net: ieee802154: handle iftypes as u32
        - firmware: arm_scmi: pm: Propagate return value to caller
        - NFSv42: Don't fail clone() unless the OP_CLONE operation failed
        - ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE
        - drm/nouveau/acr: fix a couple NULL vs IS_ERR() checks
        - scsi: mpt3sas: Fix kernel panic during drive powercycle test
        - drm/vc4: fix error code in vc4_create_object()
        - net: marvell: prestera: fix double free issue on err path
        - iavf: Prevent changing static ITR values if adaptive moderation is on
        - ALSA: intel-dsp-config: add quirk for JSL devices based on ES8336 codec
        - mptcp: fix delack timer
        - firmware: smccc: Fix check for ARCH_SOC_ID not implemented
        - ipv6: fix typos in __ip6_finish_output()
        - nfp: checking parameter process for rx-usecs/tx-usecs is invalid
        - net: stmmac: retain PTP clock time during SIOCSHWTSTAMP ioctls
        - net: ipv6: add fib6_nh_release_dsts stub
        - net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group
        - ice: fix vsi->txq_map sizing
        - ice: avoid bpf_prog refcount underflow
        - scsi: core: sysfs: Fix setting device state to SDEV_RUNNING
        - scsi: scsi_debug: Zero clear zones at reset write pointer
        - erofs: fix deadlock when shrink erofs slab
        - net/smc: Ensure the active closing peer first closes clcsock
        - mlxsw: Verify the accessed index doesn't exceed the array length
        - mlxsw: spectrum: Protect driver from buggy firmware
        - net: marvell: mvpp2: increase MTU limit when XDP enabled
        - nvmet-tcp: fix incomplete data digest send
        - net/ncsi : Add payload to be 32-bit aligned to fix dropped packets
        - PM: hibernate: use correct mode for swsusp_close()
        - drm/amd/display: Set plane update flags for all planes in reset
        - tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited
          flows
        - lan743x: fix deadlock in lan743x_phy_link_status_change()
        - net: phylink: Force link down and retrigger resolve on interface change
        - net: phylink: Force retrigger in case of latched link-fail indicator
        - net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk()
        - net/smc: Fix loop in smc_listen
        - nvmet: use IOCB_NOWAIT only if the filesystem supports it
        - igb: fix netpoll exit with traffic
        - MIPS: loongson64: fix FTLB configuration
        - MIPS: use 3-level pgtable for 64KB page size on MIPS_VA_BITS_48
        - tls: splice_read: fix record type check
        - tls: fix replacing proto_ops
        - net/sched: sch_ets: don't peek at classes beyond 'nbands'
        - net: vlan: fix underflow for the real_dev refcnt
        - net/smc: Don't call clcsock shutdown twice when smc shutdown
        - net: hns3: fix VF RSS failed problem after PF enable multi-TCs
        - net: mscc: ocelot: don't downgrade timestamping RX filters in SIOCSHWTSTAMP
        - net: mscc: ocelot: correctly report the timestamping RX filters in ethtool
        - sched/scs: Reset task stack state in bringup_cpu()
        - f2fs: set SBI_NEED_FSCK flag when inconsistent node block found
        - ceph: properly handle statfs on multifs setups
        - iommu/amd: Clarify AMD IOMMUv2 initialization messages
        - vhost/vsock: fix incorrect used length reported to the guest
        - tracing: Check pid filtering when creating events
        - xen: sync include/xen/interface/io/ring.h with Xen's newest version
        - xen/blkfront: read response from backend only once
        - xen/blkfront: don't take local copy of a request from the ring page
        - xen/blkfront: don't trust the backend response data blindly
        - xen/netfront: read response from backend only once
        - xen/netfront: don't read data from request on the ring page
        - xen/netfront: disentangle tx_skb_freelist
        - xen/netfront: don't trust the backend response data blindly
        - tty: hvc: replace BUG_ON() with negative return value
        - net: stmmac: platform: fix build warning when with !CONFIG_PM_SLEEP
        - drm/amdgpu/gfx9: switch to golden tsc registers for renoir+
        - scsi: sd: Fix sd_do_mode_sense() buffer length handling
        - USB: serial: pl2303: fix GC type detection
        - usb: dwc3: core: Revise GHWPARAMS9 offset
        - net: usb: Correct PHY handling of smsc95xx
        - drm/amdgpu: IH process reset count when restart
        - drm/nouveau: recognise GA106
        - arm64: mm: Fix VM_BUG_ON(mm != &init_mm) for trans_pgd
        - cpufreq: intel_pstate: Fix active mode offline/online EPP handling
        - NFSv42: Fix pagecache invalidation after COPY/CLONE
        - ASoC: SOF: Intel: hda: fix hotplug when only codec is suspended
        - media: v4l2-core: fix VIDIOC_DQEVENT handling on non-x86
        - ASoC: codecs: lpass-rx-macro: fix HPHR setting CLSH mask
        - firmware: arm_scmi: Fix base agent discover response
        - ASoC: stm32: i2s: fix 32 bits channel length without mclk
        - scsi: mpt3sas: Fix system going into read-only mode
        - scsi: mpt3sas: Fix incorrect system timestamp
        - drm/aspeed: Fix vga_pw sysfs output
        - iavf: Fix refreshing iavf adapter stats on ethtool request
        - iavf: Fix VLAN feature flags after VFR
        - x86/pvh: add prototype for xen_pvh_init()
        - xen/pvh: add missing prototype to header
        - mptcp: use delegate action to schedule 3rd ack retrans
        - net: ipa: kill ipa_cmd_pipeline_clear()
        - arm64: uaccess: avoid blocking within critical sections
        - tls splice: remove inappropriate flags checking for MSG_PEEK
        - tls: splice_read: fix accessing pre-processed records
        - net: stmmac: Disable Tx queues when reconfiguring the interface
        - locking/rwsem: Make handoff bit handling more consistent
        - perf: Ignore sigtrap for tracepoints destined for other tasks
        - f2fs: quota: fix potential deadlock
        - riscv: dts: microchip: fix board compatible
        - riscv: dts: microchip: drop duplicated MMC/SDHC node
        - cifs: nosharesock should not share socket with future sessions
        - vdpa_sim: avoid putting an uninitialized iova_domain
        - io_uring: fix soft lockup when call __io_remove_buffers
        - firmware: arm_scmi: Fix type error assignment in voltage protocol
        - firmware: arm_scmi: Fix type error in sensor protocol
        - blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and
          disk_release()
        - block: avoid to quiesce queue in elevator_init_mq
        - net/smc: Keep smc_close_final rc during active close
        - net/sched: sch_ets: don't remove idle classes from the round-robin list
        - HID: wacom: Reset expected and received contact counts at the same time
        - HID: wacom: Ignore the confidence flag when a touch is removed
        - net: usb: Correct reset handling of smsc95xx
        - cifs: nosharesock should be set on new server
        - net/packet: rx_owner_map depends on pg_vec
    
      * net/mlx5e: EPERM on vlan 0 programming (LP: #1957753)
        - net/mlx5e: Unblock setting vid 0 for VF in case PF isn't eswitch manager
    
      * [SRU][I/J/OEM-5.13/OEM-5.14] Add basic support of MT7922 (LP: #1958151)
        - mt76: mt7921: Add mt7922 support
        - mt76: mt7921: add support for PCIe ID 0x0608/0x0616
        - mt76: mt7921: introduce 160 MHz channel bandwidth support
        - Bluetooth: btusb: Add protocol for MediaTek bluetooth devices(MT7922)
        - Bluetooth: btusb: Add support for Foxconn MT7922A
    
      * Pod traffic not taking advantage of interfaces with multiple tx queues
        (LP: #1958155)
        - veth: Do not record rx queue hint in veth_xmit
    
      * [uacc-0623] hisi_sec2  fail to alloc uacce (LP: #1933301)
        - crypto: hisilicon/qm - modify the uacce mode check
    
      * ubunut_kernel_selftests: memory-hotplug: avoid spamming logs with
        dump_page() (LP: #1941829)
        - selftests: memory-hotplug: avoid spamming logs with dump_page(), ratio limit
          hot-remove error test
    
      * smartpqi: Update 20.04.4 to latest kernel.org patch level (LP: #1953689)
        - scsi: smartpqi: Replace one-element array with flexible-array member
        - scsi: smartpqi: Update device removal management
        - scsi: smartpqi: Capture controller reason codes
        - scsi: smartpqi: Update LUN reset handler
        - scsi: smartpqi: Add TEST UNIT READY check for SANITIZE operation
        - scsi: smartpqi: Avoid failing I/Os for offline devices
        - scsi: smartpqi: Add extended report physical LUNs
        - scsi: smartpqi: Fix boot failure during LUN rebuild
        - scsi: smartpqi: Fix duplicate device nodes for tape changers
        - scsi: smartpqi: Add 3252-8i PCI id
        - scsi: smartpqi: Update version to 2.1.12-055
    
      * CVE-2021-4083
        - fget: check that the fd still exists after getting a ref to it
    
      * CVE-2021-4155
        - xfs: map unwritten blocks in XFS_IOC_{ALLOC, FREE}SP just like fallocate
    
     -- Stefan Bader <email address hidden>  Fri, 04 Feb 2022 17:40:58 +0100
  • linux (5.13.0-29.32) impish; urgency=medium
    
      * impish/linux: 5.13.0-29.32 -proposed tracker (LP: #1959238)
    
      * Packaging resync (LP: #1786013)
        - debian/dkms-versions -- update from kernel-versions (main/2022.01.31)
    
      * CVE-2022-22942
        - SAUCE: drm/vmwgfx: Fix stale file descriptors on failed usercopy
    
      * CVE-2022-0330
        - drm/i915: Flush TLBs before releasing backing store
    
      * Impish update: upstream stable patchset 2022-01-05 (LP: #1956508)
        - ACPI: Get acpi_device's parent from the parent field
        - USB: serial: option: add Telit LE910S1 0x9200 composition
        - USB: serial: option: add Fibocom FM101-GL variants
        - usb: dwc2: gadget: Fix ISOC flow for elapsed frames
        - usb: dwc2: hcd_queue: Fix use of floating point literal
        - usb: dwc3: gadget: Ignore NoStream after End Transfer
        - usb: dwc3: gadget: Check for L1/L2/U3 for Start Transfer
        - usb: dwc3: gadget: Fix null pointer exception
        - net: nexthop: fix null pointer dereference when IPv6 is not enabled
        - usb: chipidea: ci_hdrc_imx: fix potential error pointer dereference in probe
        - usb: typec: fusb302: Fix masking of comparator and bc_lvl interrupts
        - usb: hub: Fix usb enumeration issue due to address0 race
        - usb: hub: Fix locking issues with address0_mutex
        - binder: fix test regression due to sender_euid change
        - ALSA: ctxfi: Fix out-of-range access
        - ALSA: hda/realtek: Add quirk for ASRock NUC Box 1100
        - ALSA: hda/realtek: Fix LED on HP ProBook 435 G7
        - media: cec: copy sequence field for the reply
        - Revert "parisc: Fix backtrace to always include init funtion names"
        - HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts
        - staging/fbtft: Fix backlight
        - staging: greybus: Add missing rwsem around snd_ctl_remove() calls
        - staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
        - fuse: release pipe buf after last use
        - xen: don't continue xenstore initialization in case of errors
        - xen: detect uninitialized xenbus in xenbus_init
        - KVM: PPC: Book3S HV: Prevent POWER7/8 TLB flush flushing SLB
        - tracing/uprobe: Fix uprobe_perf_open probes iteration
        - tracing: Fix pid filtering when triggers are attached
        - mmc: sdhci-esdhc-imx: disable CMDQ support
        - mmc: sdhci: Fix ADMA for PAGE_SIZE >= 64KiB
        - mdio: aspeed: Fix "Link is Down" issue
        - powerpc/32: Fix hardlockup on vmap stack overflow
        - PCI: aardvark: Deduplicate code in advk_pcie_rd_conf()
        - PCI: aardvark: Implement re-issuing config requests on CRS response
        - PCI: aardvark: Simplify initialization of rootcap on virtual bridge
        - PCI: aardvark: Fix link training
        - proc/vmcore: fix clearing user buffer by properly using clear_user()
        - netfilter: ctnetlink: fix filtering with CTA_TUPLE_REPLY
        - netfilter: ctnetlink: do not erase error code with EINVAL
        - netfilter: ipvs: Fix reuse connection if RS weight is 0
        - netfilter: flowtable: fix IPv6 tunnel addr match
        - ARM: dts: BCM5301X: Fix I2C controller interrupt
        - ARM: dts: BCM5301X: Add interrupt properties to GPIO node
        - ARM: dts: bcm2711: Fix PCIe interrupts
        - ASoC: qdsp6: q6routing: Conditionally reset FrontEnd Mixer
        - ASoC: qdsp6: q6asm: fix q6asm_dai_prepare error handling
        - ASoC: topology: Add missing rwsem around snd_ctl_remove() calls
        - ASoC: codecs: wcd934x: return error code correctly from hw_params
        - net: ieee802154: handle iftypes as u32
        - firmware: arm_scmi: pm: Propagate return value to caller
        - NFSv42: Don't fail clone() unless the OP_CLONE operation failed
        - ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE
        - drm/nouveau/acr: fix a couple NULL vs IS_ERR() checks
        - scsi: mpt3sas: Fix kernel panic during drive powercycle test
        - drm/vc4: fix error code in vc4_create_object()
        - net: marvell: prestera: fix double free issue on err path
        - iavf: Prevent changing static ITR values if adaptive moderation is on
        - ALSA: intel-dsp-config: add quirk for JSL devices based on ES8336 codec
        - mptcp: fix delack timer
        - firmware: smccc: Fix check for ARCH_SOC_ID not implemented
        - ipv6: fix typos in __ip6_finish_output()
        - nfp: checking parameter process for rx-usecs/tx-usecs is invalid
        - net: stmmac: retain PTP clock time during SIOCSHWTSTAMP ioctls
        - net: ipv6: add fib6_nh_release_dsts stub
        - net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group
        - ice: fix vsi->txq_map sizing
        - ice: avoid bpf_prog refcount underflow
        - scsi: core: sysfs: Fix setting device state to SDEV_RUNNING
        - scsi: scsi_debug: Zero clear zones at reset write pointer
        - erofs: fix deadlock when shrink erofs slab
        - net/smc: Ensure the active closing peer first closes clcsock
        - mlxsw: Verify the accessed index doesn't exceed the array length
        - mlxsw: spectrum: Protect driver from buggy firmware
        - net: marvell: mvpp2: increase MTU limit when XDP enabled
        - nvmet-tcp: fix incomplete data digest send
        - net/ncsi : Add payload to be 32-bit aligned to fix dropped packets
        - PM: hibernate: use correct mode for swsusp_close()
        - drm/amd/display: Set plane update flags for all planes in reset
        - tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited
          flows
        - lan743x: fix deadlock in lan743x_phy_link_status_change()
        - net: phylink: Force link down and retrigger resolve on interface change
        - net: phylink: Force retrigger in case of latched link-fail indicator
        - net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk()
        - net/smc: Fix loop in smc_listen
        - nvmet: use IOCB_NOWAIT only if the filesystem supports it
        - igb: fix netpoll exit with traffic
        - MIPS: loongson64: fix FTLB configuration
        - MIPS: use 3-level pgtable for 64KB page size on MIPS_VA_BITS_48
        - tls: splice_read: fix record type check
        - tls: fix replacing proto_ops
        - net/sched: sch_ets: don't peek at classes beyond 'nbands'
        - net: vlan: fix underflow for the real_dev refcnt
        - net/smc: Don't call clcsock shutdown twice when smc shutdown
        - net: hns3: fix VF RSS failed problem after PF enable multi-TCs
        - net: mscc: ocelot: don't downgrade timestamping RX filters in SIOCSHWTSTAMP
        - net: mscc: ocelot: correctly report the timestamping RX filters in ethtool
        - sched/scs: Reset task stack state in bringup_cpu()
        - f2fs: set SBI_NEED_FSCK flag when inconsistent node block found
        - ceph: properly handle statfs on multifs setups
        - iommu/amd: Clarify AMD IOMMUv2 initialization messages
        - vhost/vsock: fix incorrect used length reported to the guest
        - tracing: Check pid filtering when creating events
        - xen: sync include/xen/interface/io/ring.h with Xen's newest version
        - xen/blkfront: read response from backend only once
        - xen/blkfront: don't take local copy of a request from the ring page
        - xen/blkfront: don't trust the backend response data blindly
        - xen/netfront: read response from backend only once
        - xen/netfront: don't read data from request on the ring page
        - xen/netfront: disentangle tx_skb_freelist
        - xen/netfront: don't trust the backend response data blindly
        - tty: hvc: replace BUG_ON() with negative return value
        - net: stmmac: platform: fix build warning when with !CONFIG_PM_SLEEP
        - drm/amdgpu/gfx9: switch to golden tsc registers for renoir+
        - scsi: sd: Fix sd_do_mode_sense() buffer length handling
        - USB: serial: pl2303: fix GC type detection
        - usb: dwc3: core: Revise GHWPARAMS9 offset
        - net: usb: Correct PHY handling of smsc95xx
        - drm/amdgpu: IH process reset count when restart
        - drm/nouveau: recognise GA106
        - arm64: mm: Fix VM_BUG_ON(mm != &init_mm) for trans_pgd
        - cpufreq: intel_pstate: Fix active mode offline/online EPP handling
        - NFSv42: Fix pagecache invalidation after COPY/CLONE
        - ASoC: SOF: Intel: hda: fix hotplug when only codec is suspended
        - media: v4l2-core: fix VIDIOC_DQEVENT handling on non-x86
        - ASoC: codecs: lpass-rx-macro: fix HPHR setting CLSH mask
        - firmware: arm_scmi: Fix base agent discover response
        - ASoC: stm32: i2s: fix 32 bits channel length without mclk
        - scsi: mpt3sas: Fix system going into read-only mode
        - scsi: mpt3sas: Fix incorrect system timestamp
        - drm/aspeed: Fix vga_pw sysfs output
        - iavf: Fix refreshing iavf adapter stats on ethtool request
        - iavf: Fix VLAN feature flags after VFR
        - x86/pvh: add prototype for xen_pvh_init()
        - xen/pvh: add missing prototype to header
        - mptcp: use delegate action to schedule 3rd ack retrans
        - net: ipa: kill ipa_cmd_pipeline_clear()
        - arm64: uaccess: avoid blocking within critical sections
        - tls splice: remove inappropriate flags checking for MSG_PEEK
        - tls: splice_read: fix accessing pre-processed records
        - net: stmmac: Disable Tx queues when reconfiguring the interface
        - locking/rwsem: Make handoff bit handling more consistent
        - perf: Ignore sigtrap for tracepoints destined for other tasks
        - f2fs: quota: fix potential deadlock
        - riscv: dts: microchip: fix board compatible
        - riscv: dts: microchip: drop duplicated MMC/SDHC node
        - cifs: nosharesock should not share socket with future sessions
        - vdpa_sim: avoid putting an uninitialized iova_domain
        - io_uring: fix soft lockup when call __io_remove_buffers
        - firmware: arm_scmi: Fix type error assignment in voltage protocol
        - firmware: arm_scmi: Fix type error in sensor protocol
        - blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and
          disk_release()
        - block: avoid to quiesce queue in elevator_init_mq
        - net/smc: Keep smc_close_final rc during active close
        - net/sched: sch_ets: don't remove idle classes from the round-robin list
        - HID: wacom: Reset expected and received contact counts at the same time
        - HID: wacom: Ignore the confidence flag when a touch is removed
        - net: usb: Correct reset handling of smsc95xx
        - cifs: nosharesock should be set on new server
        - net/packet: rx_owner_map depends on pg_vec
    
      * net/mlx5e: EPERM on vlan 0 programming (LP: #1957753)
        - net/mlx5e: Unblock setting vid 0 for VF in case PF isn't eswitch manager
    
      * [SRU][I/J/OEM-5.13/OEM-5.14] Add basic support of MT7922 (LP: #1958151)
        - mt76: mt7921: Add mt7922 support
        - mt76: mt7921: add support for PCIe ID 0x0608/0x0616
        - mt76: mt7921: introduce 160 MHz channel bandwidth support
        - Bluetooth: btusb: Add protocol for MediaTek bluetooth devices(MT7922)
        - Bluetooth: btusb: Add support for Foxconn MT7922A
    
      * Pod traffic not taking advantage of interfaces with multiple tx queues
        (LP: #1958155)
        - veth: Do not record rx queue hint in veth_xmit
    
      * [uacc-0623] hisi_sec2  fail to alloc uacce (LP: #1933301)
        - crypto: hisilicon/qm - modify the uacce mode check
    
      * ubunut_kernel_selftests: memory-hotplug: avoid spamming logs with
        dump_page() (LP: #1941829)
        - selftests: memory-hotplug: avoid spamming logs with dump_page(), ratio limit
          hot-remove error test
    
      * smartpqi: Update 20.04.4 to latest kernel.org patch level (LP: #1953689)
        - scsi: smartpqi: Replace one-element array with flexible-array member
        - scsi: smartpqi: Update device removal management
        - scsi: smartpqi: Capture controller reason codes
        - scsi: smartpqi: Update LUN reset handler
        - scsi: smartpqi: Add TEST UNIT READY check for SANITIZE operation
        - scsi: smartpqi: Avoid failing I/Os for offline devices
        - scsi: smartpqi: Add extended report physical LUNs
        - scsi: smartpqi: Fix boot failure during LUN rebuild
        - scsi: smartpqi: Fix duplicate device nodes for tape changers
        - scsi: smartpqi: Add 3252-8i PCI id
        - scsi: smartpqi: Update version to 2.1.12-055
    
      * CVE-2021-4083
        - fget: check that the fd still exists after getting a ref to it
    
      * CVE-2021-4155
        - xfs: map unwritten blocks in XFS_IOC_{ALLOC, FREE}SP just like fallocate
    
     -- Stefan Bader <email address hidden>  Fri, 28 Jan 2022 10:40:09 +0100
  • linux (5.13.0-28.31) impish; urgency=medium
    
      * amd_sfh: Null pointer dereference on early device init causes early panic
        and fails to boot (LP: #1956519)
        - HID: amd_sfh: Fix potential NULL pointer dereference
    
      * impish: ddebs build take too long and times out (LP: #1957810)
        - [Packaging] enforce xz compression for ddebs
    
      * audio mute/ mic mute are not working on a HP machine (LP: #1955691)
        - ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
    
      * rtw88_8821ce causes freeze (LP: #1927808)
        - rtw88: Disable PCIe ASPM while doing NAPI poll on 8821CE
    
      * alsa/sdw: fix the  audio sdw codec parsing logic in the acpi table
        (LP: #1955686)
        - ALSA: hda: intel-sdw-acpi: harden detection of controller
        - ALSA: hda: intel-sdw-acpi: go through HDAS ACPI at max depth of 2
    
      * icmp_redirect from selftests fails on F/kvm (unary operator expected)
        (LP: #1938964)
        - selftests: icmp_redirect: pass xfail=0 to log_test()
    
      * Impish update: upstream stable patchset 2021-12-17 (LP: #1955180)
        - arm64: zynqmp: Do not duplicate flash partition label property
        - arm64: zynqmp: Fix serial compatible string
        - ARM: dts: sunxi: Fix OPPs node name
        - arm64: dts: allwinner: h5: Fix GPU thermal zone node name
        - arm64: dts: allwinner: a100: Fix thermal zone node name
        - staging: wfx: ensure IRQ is ready before enabling it
        - ARM: dts: NSP: Fix mpcore, mmc node names
        - scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
        - arm64: dts: rockchip: Disable CDN DP on Pinebook Pro
        - arm64: dts: hisilicon: fix arm,sp805 compatible string
        - RDMA/bnxt_re: Check if the vlan is valid before reporting
        - bus: ti-sysc: Add quirk handling for reinit on context lost
        - bus: ti-sysc: Use context lost quirk for otg
        - usb: musb: tusb6010: check return value after calling
          platform_get_resource()
        - usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
        - ARM: dts: ux500: Skomer regulator fixes
        - staging: rtl8723bs: remove possible deadlock when disconnect (v2)
        - ARM: BCM53016: Specify switch ports for Meraki MR32
        - arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency
        - arm64: dts: qcom: ipq6018: Fix qcom,controlled-remotely property
        - arm64: dts: freescale: fix arm,sp805 compatible string
        - ASoC: SOF: Intel: hda-dai: fix potential locking issue
        - clk: imx: imx6ul: Move csi_sel mux to correct base register
        - ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect
        - scsi: advansys: Fix kernel pointer leak
        - ALSA: intel-dsp-config: add quirk for APL/GLK/TGL devices based on ES8336
          codec
        - firmware_loader: fix pre-allocated buf built-in firmware use
        - ARM: dts: omap: fix gpmc,mux-add-data type
        - usb: host: ohci-tmio: check return value after calling
          platform_get_resource()
        - ARM: dts: ls1021a: move thermal-zones node out of soc/
        - ARM: dts: ls1021a-tsn: use generic "jedec,spi-nor" compatible for flash
        - ALSA: ISA: not for M68K
        - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
        - MIPS: sni: Fix the build
        - scsi: scsi_debug: Fix out-of-bound read in resp_readcap16()
        - scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs()
        - scsi: target: Fix ordered tag handling
        - scsi: target: Fix alua_tg_pt_gps_count tracking
        - iio: imu: st_lsm6dsx: Avoid potential array overflow in st_lsm6dsx_set_odr()
        - powerpc/5200: dts: fix memory node unit name
        - ARM: dts: qcom: fix memory and mdio nodes naming for RB3011
        - ALSA: gus: fix null pointer dereference on pointer block
        - powerpc/dcr: Use cmplwi instead of 3-argument cmpli
        - powerpc/8xx: Fix Oops with STRICT_KERNEL_RWX without DEBUG_RODATA_TEST
        - sh: check return code of request_irq
        - maple: fix wrong return value of maple_bus_init().
        - f2fs: fix up f2fs_lookup tracepoints
        - f2fs: fix to use WHINT_MODE
        - sh: fix kconfig unmet dependency warning for FRAME_POINTER
        - sh: math-emu: drop unused functions
        - sh: define __BIG_ENDIAN for math-emu
        - f2fs: compress: disallow disabling compress on non-empty compressed file
        - f2fs: fix incorrect return value in f2fs_sanity_check_ckpt()
        - clk: ingenic: Fix bugs with divided dividers
        - clk/ast2600: Fix soc revision for AHB
        - clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk
        - mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set
        - sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
        - perf/x86/vlbr: Add c->flags to vlbr event constraints
        - blkcg: Remove extra blkcg_bio_issue_init
        - tracing/histogram: Do not copy the fixed-size char array field over the
          field size
        - perf bpf: Avoid memory leak from perf_env__insert_btf()
        - perf bench futex: Fix memory leak of perf_cpu_map__new()
        - perf tests: Remove bash construct from record+zstd_comp_decomp.sh
        - drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame
        - tcp: Fix uninitialized access in skb frags array for Rx 0cp.
        - tracing: Add length protection to histogram string copies
        - net: ipa: disable HOLB drop when updating timer
        - net: bnx2x: fix variable dereferenced before check
        - bnxt_en: reject indirect blk offload when hw-tc-offload is off
        - tipc: only accept encrypted MSG_CRYPTO msgs
        - sock: fix /proc/net/sockstat underflow in sk_clone_lock()
        - net/smc: Make sure the link_id is unique
        - iavf: Fix return of set the new channel count
        - iavf: check for null in iavf_fix_features
        - iavf: free q_vectors before queues in iavf_disable_vf
        - iavf: Fix failure to exit out from last all-multicast mode
        - iavf: prevent accidental free of filter structure
        - iavf: validate pointers
        - iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset
        - iavf: Fix for setting queues to 0
        - MIPS: generic/yamon-dt: fix uninitialized variable error
        - mips: bcm63xx: add support for clk_get_parent()
        - mips: lantiq: add support for clk_get_parent()
        - platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()'
        - net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove()
        - net/mlx5: Lag, update tracker when state change event received
        - net/mlx5: E-Switch, return error if encap isn't supported
        - scsi: core: sysfs: Fix hang when device state is set via sysfs
        - net: sched: act_mirred: drop dst for the direction from egress to ingress
        - net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove
        - net: virtio_net_hdr_to_skb: count transport header in UFO
        - i40e: Fix correct max_pkt_size on VF RX queue
        - i40e: Fix NULL ptr dereference on VSI filter sync
        - i40e: Fix changing previously set num_queue_pairs for PFs
        - i40e: Fix ping is lost after configuring ADq on VF
        - i40e: Fix warning message and call stack during rmmod i40e driver
        - i40e: Fix creation of first queue by omitting it if is not power of two
        - i40e: Fix display error code in dmesg
        - NFC: reorganize the functions in nci_request
        - NFC: reorder the logic in nfc_{un,}register_device
        - NFC: add NCI_UNREG flag to eliminate the race
        - e100: fix device suspend/resume
        - KVM: PPC: Book3S HV: Use GLOBAL_TOC for kvmppc_h_set_dabr/xdabr()
        - pinctrl: qcom: sdm845: Enable dual edge errata
        - perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server
        - perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
        - s390/kexec: fix return code handling
        - net: stmmac: dwmac-rk: Fix ethernet on rk3399 based devices
        - tun: fix bonding active backup with arp monitoring
        - hexagon: export raw I/O routines for modules
        - hexagon: clean up timer-regs.h
        - tipc: check for null after calling kmemdup
        - ipc: WARN if trying to remove ipc object which is absent
        - mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag
        - x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails
        - powerpc/8xx: Fix pinned TLBs with CONFIG_STRICT_KERNEL_RWX
        - scsi: qla2xxx: Fix mailbox direction flags in qla2xxx_get_adapter_id()
        - s390/kexec: fix memory leak of ipl report buffer
        - block: Check ADMIN before NICE for IOPRIO_CLASS_RT
        - KVM: nVMX: don't use vcpu->arch.efer when checking host state on nested
          state load
        - udf: Fix crash after seekdir
        - net: stmmac: socfpga: add runtime suspend/resume callback for stratix10
          platform
        - btrfs: fix memory ordering between normal and ordered work functions
        - parisc/sticon: fix reverse colors
        - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
        - drm/amd/display: Update swizzle mode enums
        - drm/udl: fix control-message timeout
        - drm/nouveau: Add a dedicated mutex for the clients list
        - drm/nouveau: use drm_dev_unplug() during device removal
        - drm/nouveau: clean up all clients on device removal
        - drm/i915/dp: Ensure sink rate values are always valid
        - drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga
          and dvi connectors
        - scsi: ufs: core: Fix task management completion
        - scsi: ufs: core: Fix task management completion timeout race
        - RDMA/netlink: Add __maybe_unused to static inline in C file
        - selinux: fix NULL-pointer dereference when hashtab allocation fails
        - ASoC: DAPM: Cover regression by kctl change notification fix
        - usb: max-3421: Use driver data instead of maintaining a list of bound
          devices
        - ice: Delete always true check of PF pointer
        - fs: export an inode_update_time helper
        - btrfs: update device path inode time instead of bd_inode
        - x86/Kconfig: Fix an unused variable error in dell-smm-hwmon
        - ALSA: hda: hdac_ext_stream: fix potential locking issues
        - ALSA: hda: hdac_stream: fix potential locking issue in
          snd_hdac_stream_assign()
        - clk: sunxi-ng: Unregister clocks/resets when unbinding
        - ARM: dts: BCM5301X: Fix nodes names
        - ARM: dts: BCM5301X: Fix MDIO mux binding
        - arm64: dts: broadcom: bcm4908: Move reboot syscon out of bus
        - scsi: pm80xx: Fix memory leak during rmmod
        - staging: rtl8723bs: remove a third possible deadlock
        - arm64: dts: qcom: sdm845: Fix qcom,controlled-remotely property
        - arm64: dts: ls1012a: Add serial alias for ls1012a-rdb
        - ALSA: usb-audio: disable implicit feedback sync for Behringer UFX1204 and
          UFX1604
        - ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ
        - ASoC: rt5651: Use IRQF_NO_AUTOEN when requesting the IRQ
        - scsi: smartpqi: Add controller handshake during kdump
        - arm64: dts: imx8mm-kontron: Fix reset delays for ethernet PHY
        - ASoC: Intel: soc-acpi: add missing quirk for TGL SDCA single amp
        - ASoC: Intel: sof_sdw: add missing quirk for Dell SKU 0A45
        - HID: multitouch: disable sticky fingers for UPERFECT Y
        - ALSA: usb-audio: Add support for the Pioneer DJM 750MK2 Mixer/Soundcard
        - ASoC: rt5682: fix a little pop while playback
        - iommu/vt-d: Do not falsely log intel_iommu is unsupported kernel option
        - scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine
        - scsi: lpfc: Fix link down processing to address NULL pointer dereference
        - memory: tegra20-emc: Add runtime dependency on devfreq governor module
        - arm64: dts: qcom: Fix node name of rpm-msg-ram device nodes
        - clk: at91: sama7g5: remove prescaler part of master clock
        - f2fs: fix wrong condition to trigger background checkpoint correctly
        - sched/fair: Prevent dead task groups from regaining cfs_rq's
        - net/ipa: ipa_resource: Fix wrong for loop range
        - nl80211: fix radio statistics in survey dump
        - mac80211: fix monitor_sdata RCU/locking assertions
        - net: ipa: HOLB register sometimes must be written twice
        - selftests: gpio: fix gpio compiling error
        - iavf: don't clear a lock we don't hold
        - iavf: Restore VLAN filters after link down
        - bpf: Fix toctou on read-only map's constant scalar tracking
        - udp: Validate checksum in udp_read_sock()
        - btrfs: make 1-bit bit-fields of scrub_page unsigned int
        - net/mlx5e: kTLS, Fix crash in RX resync flow
        - net/mlx5e: Wait for concurrent flow deletion during neigh/fib events
        - net/mlx5: E-Switch, Fix resetting of encap mode when entering switchdev
        - net/mlx5: Update error handler for UCTX and UMEM
        - net/mlx5e: CT, Fix multiple allocations and memleak of mod acts
        - riscv: fix building external modules
        - powerpc: clean vdso32 and vdso64 directories
        - pinctrl: qcom: sm8350: Correct UFS and SDC offsets
        - perf/x86/intel/uncore: Fix IIO event constraints for Snowridge
        - blk-cgroup: fix missing put device in error path from blkg_conf_pref()
        - shm: extend forced shm destroy to support objects from several IPC nses
        - hugetlb, userfaultfd: fix reservation restore on userfaultfd error
        - kmap_local: don't assume kmap PTEs are linear arrays in memory
        - [Config] updateconfigs for KMAP_LOCAL_NON_LINEAR_PTE_ARRAY
        - x86/boot: Pull up cmdline preparation and early param parsing
        - x86/sgx: Fix free page accounting
        - KVM: x86: Assume a 64-bit hypercall for guests with protected state
        - KVM: x86: Fix uninitialized eoi_exit_bitmap usage in vcpu_load_eoi_exitmap()
        - powerpc/signal32: Fix sigset_t copy
        - Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"
        - s390/setup: avoid reserving memory above identity mapping
        - KVM: SEV: Disallow COPY_ENC_CONTEXT_FROM if target has created vCPUs
        - spi: fix use-after-free of the add_lock mutex
        - Drivers: hv: balloon: Use VMBUS_RING_SIZE() wrapper for dm_ring_size
        - fs: handle circular mappings correctly
        - net: stmmac: Fix signed/unsigned wreckage
        - mac80211: drop check for DONT_REORDER in __ieee80211_select_queue
        - drm/amd/display: Limit max DSC target bpp for specific monitors
        - drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
        - drm/i915/dp: Ensure max link params are always valid
        - drm/i915: Fix type1 DVI DP dual mode adapter heuristic for modern platforms
        - drm/amd/pm: avoid duplicate powergate/ungate setting
        - ice: Fix VF true promiscuous mode
        - net: add and use skb_unclone_keeptruesize() helper
    
      * Impish update: upstream stable patchset 2021-12-16 (LP: #1955070)
        - fortify: Explicitly disable Clang support
        - block: Add a helper to validate the block size
        - loop: Use blk_validate_block_size() to validate block size
        - bootconfig: init: Fix memblock leak in xbc_make_cmdline()
        - net: stmmac: dwmac-rk: fix unbalanced pm_runtime_enable warnings
        - parisc/entry: fix trace test in syscall exit path
        - PCI/MSI: Destroy sysfs before freeing entries
        - PCI/MSI: Deal with devices lying about their MSI mask capability
        - PCI: Add MSI masking quirk for Nvidia ION AHCI
        - erofs: remove the occupied parameter from z_erofs_pagevec_enqueue()
        - erofs: fix unsafe pagevec reuse of hooked pclusters
        - perf/core: Avoid put_page() when GUP fails
        - thermal: Fix NULL pointer dereferences in of_thermal_ functions
        - selftests/x86/iopl: Adjust to the faked iopl CLI/STI usage
        - KVM: Fix steal time asm constraints
        - Bluetooth: btusb: Add 0x0b05:0x190e Realtek 8761BU (ASUS BT500) device.
        - Bluetooth: btusb: Add support for TP-Link UB500 Adapter
        - string: uninline memcpy_and_pad
        - btrfs: introduce btrfs_is_data_reloc_root
        - btrfs: zoned: add a dedicated data relocation block group
        - btrfs: zoned: only allow one process to add pages to a relocation inode
        - btrfs: zoned: use regular writes for relocation
        - btrfs: check for relocation inodes on zoned btrfs in should_nocow
        - btrfs: zoned: allow preallocation for relocation inodes
    
      * CVE-2021-4090
        - NFSD: Fix exposure in nfsd4_decode_bitmap()
    
      * AMD: Suspend not working when some cores are disabled through cpufreq
        (LP: #1954930)
        - ACPI: processor idle: Allow playing dead in C3 state
    
      * system crash when removing ipmi_msghandler module (LP: #1950666)
        - ipmi: Move remove_work to dedicated workqueue
        - ipmi: msghandler: Make symbol 'remove_work_wq' static
    
      * [UBUNTU 20.04] KVM hardware diagnose data improvements for guest kernel -
        kernel part (LP: #1953334)
        - KVM: s390: add debug statement for diag 318 CPNC data
    
      * New fix for jack detection after resume on CS8409 sound driver
        (LP: #1954773)
        - ALSA: hda/cs8409: Set PMSG_ON earlier inside cs8409 driver
    
      * s2idle suspend failure: amd_pmc AMDI0005:00: SMU response timed out
        (LP: #1954633)
        - platform/x86: amd-pmc: Fix s2idle failures on certain AMD laptops
    
      * mt7921e: Failed to start WM firmware (LP: #1954300)
        - Bluetooth: btusb: Handle download_firmware failure cases
        - SAUCE: Bluetooth: btusb: Return error code when getting patch status failed
    
      * [SRU][I/J/OEM-5.13/OEM-5.14] Fix pci port lost when hotplug dock
        (LP: #1954646)
        - PCI: Re-enable Downstream Port LTR after reset or hotplug
    
      * [SRU][I/OEM-5.13/OEM-5.14] Fix USB3.1 hotplug after S3 on AMD renoir
        (LP: #1952817)
        - drm/amd/display: Look at firmware version to determine using dmub on dcn21
    
      * Thinkpad E14 Gen2: Kernel panic with trackpad and trackpoint enabled
        (LP: #1945590)
        - Input: elantech - fix stack out of bound access in
          elantech_change_report_id()
    
      * [SRU][Ubuntu 21.10][Broadcom] mpi3mr driver submission request
        (LP: #1933359)
        - scsi: mpi3mr: Add mpi30 Rev-R headers and Kconfig
        - scsi: mpi3mr: Base driver code
        - scsi: mpi3mr: Create operational request and reply queue pair
        - scsi: mpi3mr: Add support for queue command processing
        - scsi: mpi3mr: Add support for internal watchdog thread
        - scsi: mpi3mr: Add support for device add/remove event handling
        - scsi: mpi3mr: Add support for PCIe device event handling
        - scsi: mpi3mr: Additional event handling
        - scsi: mpi3mr: Add support for recovering controller
        - scsi: mpi3mr: Add support for timestamp sync with firmware
        - scsi: mpi3mr: Print IOC info for debugging
        - scsi: mpi3mr: Add bios_param SCSI host template hook
        - scsi: mpi3mr: Implement SCSI error handler hooks
        - scsi: mpi3mr: Add change queue depth support
        - scsi: mpi3mr: Allow certain commands during pci-remove hook
        - scsi: mpi3mr: Hardware workaround for UNMAP commands to NVMe drives
        - scsi: mpi3mr: Add support for threaded ISR
        - scsi: mpi3mr: Complete support for soft reset
        - scsi: mpi3mr: Print pending host I/Os for debugging
        - scsi: mpi3mr: Wait for pending I/O completions upon detection of VD I/O
          timeout
        - scsi: mpi3mr: Add support for PM suspend and resume
        - scsi: mpi3mr: Add support for DSN secure firmware check
        - scsi: mpi3mr: Add EEDP DIF DIX support
        - scsi: mpi3mr: Add event handling debug prints
        - [Config] updateconfigs for CONFIG_SCSI_MPI3MR
    
      * Add F81966 watchdog support (LP: #1949063)
        - SAUCE: watchdog: f71808e_wdt: Add F81966 support
    
      * Impish update: upstream stable patchset 2021-12-09 (LP: #1954337)
        - xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good
          delay
        - usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
        - Input: iforce - fix control-message timeout
        - Input: i8042 - Add quirk for Fujitsu Lifebook T725
        - libata: fix read log timeout value
        - ocfs2: fix data corruption on truncate
        - scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
        - scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
        - scsi: qla2xxx: Fix use after free in eh_abort path
        - mmc: mtk-sd: Add wait dma stop done flow
        - mmc: dw_mmc: Dont wait for DRTO on Write RSP error
        - exfat: fix incorrect loading of i_blocks for large files
        - parisc: Fix set_fixmap() on PA1.x CPUs
        - parisc: Fix ptrace check on syscall return
        - tpm: Check for integer overflow in tpm2_map_response_body()
        - firmware/psci: fix application of sizeof to pointer
        - crypto: s5p-sss - Add error handling in s5p_aes_probe()
        - media: rkvdec: Do not override sizeimage for output format
        - media: ite-cir: IR receiver stop working after receive overflow
        - media: rkvdec: Support dynamic resolution changes
        - media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
        - media: v4l2-ioctl: Fix check_ext_ctrls
        - ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
        - ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
        - ALSA: hda/realtek: Add quirk for Clevo PC70HS
        - ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
        - ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
        - ALSA: hda/realtek: Add quirk for ASUS UX550VE
        - ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
        - ALSA: ua101: fix division by zero at probe
        - ALSA: 6fire: fix control and bulk message timeouts
        - ALSA: line6: fix control and interrupt message timeouts
        - ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
        - ALSA: usb-audio: Add registration quirk for JBL Quantum 400
        - ALSA: hda: Free card instance properly at probe errors
        - ALSA: synth: missing check for possible NULL after the call to kstrdup
        - ALSA: timer: Fix use-after-free problem
        - ALSA: timer: Unconditionally unlink slave instances, too
        - ext4: fix lazy initialization next schedule time computation in more
          granular unit
        - ext4: ensure enough credits in ext4_ext_shift_path_extents
        - ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
        - fuse: fix page stealing
        - x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
        - x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
        - x86/irq: Ensure PI wakeup handler is unregistered before module unload
        - ASoC: soc-core: fix null-ptr-deref in snd_soc_del_component_unlocked()
        - ALSA: hda/realtek: Fixes HP Spectre x360 15-eb1xxx speakers
        - cavium: Return negative value when pci_alloc_irq_vectors() fails
        - scsi: qla2xxx: Return -ENOMEM if kzalloc() fails
        - scsi: qla2xxx: Fix unmap of already freed sgl
        - mISDN: Fix return values of the probe function
        - cavium: Fix return values of the probe function
        - sfc: Export fibre-specific supported link modes
        - sfc: Don't use netif_info before net_device setup
        - hyperv/vmbus: include linux/bitops.h
        - ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode
        - reset: socfpga: add empty driver allowing consumers to probe
        - mmc: winbond: don't build on M68K
        - drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
        - fcnal-test: kill hanging ping/nettest binaries on cleanup
        - bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT
        - bpf: Prevent increasing bpf_jit_limit above max
        - gpio: mlxbf2.c: Add check for bgpio_init failure
        - xen/netfront: stop tx queues during live migration
        - nvmet-tcp: fix a memory leak when releasing a queue
        - spi: spl022: fix Microwire full duplex mode
        - net: multicast: calculate csum of looped-back and forwarded packets
        - watchdog: Fix OMAP watchdog early handling
        - drm: panel-orientation-quirks: Add quirk for GPD Win3
        - block: schedule queue restart after BLK_STS_ZONE_RESOURCE
        - nvmet-tcp: fix header digest verification
        - r8169: Add device 10ec:8162 to driver r8169
        - vmxnet3: do not stop tx queues after netif_device_detach()
        - nfp: bpf: relax prog rejection for mtu check through max_pkt_offset
        - net/smc: Fix smc_link->llc_testlink_time overflow
        - net/smc: Correct spelling mistake to TCPF_SYN_RECV
        - btrfs: clear MISSING device status bit in btrfs_close_one_device
        - btrfs: fix lost error handling when replaying directory deletes
        - btrfs: call btrfs_check_rw_degradable only if there is a missing device
        - KVM: VMX: Unregister posted interrupt wakeup handler on hardware unsetup
        - ia64: kprobes: Fix to pass correct trampoline address to the handler
        - selinux: fix race condition when computing ocontext SIDs
        - hwmon: (pmbus/lm25066) Add offset coefficients
        - regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is
          disabled
        - regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-
          dvs-idx property
        - EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
        - mwifiex: fix division by zero in fw download path
        - ath6kl: fix division by zero in send path
        - ath6kl: fix control-message timeout
        - ath10k: fix control-message timeout
        - ath10k: fix division by zero in send path
        - PCI: Mark Atheros QCA6174 to avoid bus reset
        - rtl8187: fix control-message timeouts
        - evm: mark evm_fixmode as __ro_after_init
        - ifb: Depend on netfilter alternatively to tc
        - wcn36xx: Fix HT40 capability for 2Ghz band
        - wcn36xx: Fix tx_status mechanism
        - wcn36xx: Fix (QoS) null data frame bitrate/modulation
        - PM: sleep: Do not let "syscore" devices runtime-suspend during system
          transitions
        - mwifiex: Read a PCI register after writing the TX ring write pointer
        - mwifiex: Try waking the firmware until we get an interrupt
        - libata: fix checking of DMA state
        - wcn36xx: handle connection loss indication
        - rsi: fix occasional initialisation failure with BT coex
        - rsi: fix key enabled check causing unwanted encryption for vap_id > 0
        - rsi: fix rate mask set leading to P2P failure
        - rsi: Fix module dev_oper_mode parameter description
        - perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server
        - perf/x86/intel/uncore: Fix Intel ICX IIO event constraints
        - RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
        - signal: Remove the bogus sigkill_pending in ptrace_stop
        - memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode
        - signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
        - soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id
        - soc: fsl: dpio: use the combined functions to protect critical zone
        - mtd: rawnand: socrates: Keep the driver compatible with on-die ECC engines
        - power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
        - power: supply: max17042_battery: use VFSOC for capacity when no rsns
        - KVM: arm64: Extract ESR_ELx.EC only
        - KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
        - can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
        - can: j1939: j1939_can_recv(): ignore messages with invalid source address
        - powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
        - ring-buffer: Protect ring_buffer_reset() from reentrancy
        - serial: core: Fix initializing and restoring termios speed
        - ifb: fix building without CONFIG_NET_CLS_ACT
        - ALSA: mixer: oss: Fix racy access to slots
        - ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
        - xen/balloon: add late_initcall_sync() for initial ballooning done
        - ovl: fix use after free in struct ovl_aio_req
        - PCI: pci-bridge-emul: Fix emulation of W1C bits
        - PCI: cadence: Add cdns_plat_pcie_probe() missing return
        - PCI: aardvark: Do not clear status bits of masked interrupts
        - PCI: aardvark: Fix checking for link up via LTSSM state
        - PCI: aardvark: Do not unmask unused interrupts
        - PCI: aardvark: Fix reporting Data Link Layer Link Active
        - PCI: aardvark: Fix configuring Reference clock
        - PCI: aardvark: Fix return value of MSI domain .alloc() method
        - PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
        - PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated
          bridge
        - PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
        - PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
        - PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge
        - quota: check block number when reading the block in quota file
        - quota: correct error number in free_dqentry()
        - pinctrl: core: fix possible memory leak in pinctrl_enable()
        - coresight: cti: Correct the parameter for pm_runtime_put
        - iio: dac: ad5446: Fix ad5622_write() return value
        - iio: ad5770r: make devicetree property reading consistent
        - USB: serial: keyspan: fix memleak on probe errors
        - serial: 8250: fix racy uartclk update
        - most: fix control-message timeouts
        - USB: iowarrior: fix control-message timeouts
        - USB: chipidea: fix interrupt deadlock
        - power: supply: max17042_battery: Clear status bits in interrupt handler
        - dma-buf: WARN on dmabuf release with pending attachments
        - drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
        - drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
        - drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
        - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
        - Bluetooth: fix use-after-free error in lock_sock_nested()
        - drm/panel-orientation-quirks: add Valve Steam Deck
        - rcutorture: Avoid problematic critical section nesting on PREEMPT_RT
        - platform/x86: wmi: do not fail if disabling fails
        - MIPS: lantiq: dma: add small delay after reset
        - MIPS: lantiq: dma: reset correct number of channel
        - locking/lockdep: Avoid RCU-induced noinstr fail
        - net: sched: update default qdisc visibility after Tx queue cnt changes
        - rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop
        - smackfs: Fix use-after-free in netlbl_catmap_walk()
        - ath11k: Align bss_chan_info structure with firmware
        - x86: Increase exception stack sizes
        - mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
        - mwifiex: Properly initialize private structure on interface type changes
        - fscrypt: allow 256-bit master keys with AES-256-XTS
        - drm/amdgpu: Fix MMIO access page fault
        - ath11k: Avoid reg rules update during firmware recovery
        - ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED
        - ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets
        - ath10k: high latency fixes for beacon buffer
        - media: mt9p031: Fix corrupted frame after restarting stream
        - media: netup_unidvb: handle interrupt properly according to the firmware
        - media: atomisp: Fix error handling in probe
        - media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
        - media: uvcvideo: Set capability in s_param
        - media: uvcvideo: Return -EIO for control errors
        - media: uvcvideo: Set unique vdev name based in type
        - media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
        - media: s5p-mfc: Add checking to s5p_mfc_probe().
        - media: imx: set a media_device bus_info string
        - media: mceusb: return without resubmitting URB in case of -EPROTO error.
        - ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
        - rtw88: fix RX clock gate setting while fifo dump
        - brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
        - media: rcar-csi2: Add checking to rcsi2_start_receiver()
        - ipmi: Disable some operations during a panic
        - fs/proc/uptime.c: Fix idle time reporting in /proc/uptime
        - ACPICA: Avoid evaluating methods too early during system resume
        - media: ipu3-imgu: imgu_fmt: Handle properly try
        - media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
        - media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
        - net-sysfs: try not to restart the syscall if it will fail eventually
        - tracefs: Have tracefs directories not set OTH permission bits by default
        - ath: dfs_pattern_detector: Fix possible null-pointer dereference in
          channel_detector_create()
        - mmc: moxart: Fix reference count leaks in moxart_probe
        - iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
        - ACPI: battery: Accept charges over the design capacity as full
        - drm/amdkfd: fix resume error when iommu disabled in Picasso
        - net: phy: micrel: make *-skew-ps check more lenient
        - leaking_addresses: Always print a trailing newline
        - drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()
        - block: bump max plugged deferred size from 16 to 32
        - md: update superblock after changing rdev flags in state_store
        - memstick: r592: Fix a UAF bug when removing the driver
        - lib/xz: Avoid overlapping memcpy() with invalid input with in-place
          decompression
        - lib/xz: Validate the value before assigning it to an enum variable
        - workqueue: make sysfs of unbound kworker cpumask more clever
        - tracing/cfi: Fix cmp_entries_* functions signature mismatch
        - mt76: mt7915: fix an off-by-one bound check
        - mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
        - block: remove inaccurate requeue check
        - media: allegro: ignore interrupt if mailbox is not initialized
        - nvmet: fix use-after-free when a port is removed
        - nvmet-rdma: fix use-after-free when a port is removed
        - nvmet-tcp: fix use-after-free when a port is removed
        - nvme: drop scan_lock and always kick requeue list when removing namespaces
        - PM: hibernate: Get block device exclusively in swsusp_check()
        - selftests: kvm: fix mismatched fclose() after popen()
        - selftests/bpf: Fix perf_buffer test on system with offline cpus
        - iwlwifi: mvm: disable RX-diversity in powersave
        - smackfs: use __GFP_NOFAIL for smk_cipso_doi()
        - ARM: clang: Do not rely on lr register for stacktrace
        - gre/sit: Don't generate link-local addr if addr_gen_mode is
          IN6_ADDR_GEN_MODE_NONE
        - gfs2: Cancel remote delete work asynchronously
        - gfs2: Fix glock_hash_walk bugs
        - ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
        - vrf: run conntrack only in context of lower/physdev for locally generated
          packets
        - net: annotate data-race in neigh_output()
        - ACPI: AC: Quirk GK45 to skip reading _PSR
        - btrfs: reflink: initialize return value to 0 in btrfs_extent_same()
        - btrfs: do not take the uuid_mutex in btrfs_rm_device
        - spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in
          bcm_qspi_probe()
        - wcn36xx: Correct band/freq reporting on RX
        - x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
        - drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled
        - selftests/core: fix conflicting types compile error for close_range()
        - parisc: fix warning in flush_tlb_all
        - task_stack: Fix end_of_stack() for architectures with upwards-growing stack
        - erofs: don't trigger WARN() when decompression fails
        - parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
        - parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
        - netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream
          state
        - selftests/bpf: Fix strobemeta selftest regression
        - Bluetooth: fix init and cleanup of sco_conn.timeout_work
        - rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
        - MIPS: lantiq: dma: fix burst length for DEU
        - x86/xen: Mark cpu_bringup_and_idle() as dead_end_function
        - drm/v3d: fix wait for TMU write combiner flush
        - virtio-gpu: fix possible memory allocation failure
        - lockdep: Let lock_is_held_type() detect recursive read as read
        - net: net_namespace: Fix undefined member in key_remove_domain()
        - cgroup: Make rebind_subsystems() disable v2 controllers all at once
        - wcn36xx: Fix Antenna Diversity Switching
        - wilc1000: fix possible memory leak in cfg_scan_result()
        - Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
        - crypto: caam - disable pkc for non-E SoCs
        - rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
        - net: dsa: rtl8366rb: Fix off-by-one bug
        - ath11k: fix some sleeping in atomic bugs
        - ath11k: Avoid race during regd updates
        - ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status
        - ath11k: Fix memory leak in ath11k_qmi_driver_event_work
        - ath10k: Fix missing frame timestamp for beacon/probe-resp
        - ath10k: sdio: Add missing BH locking around napi_schdule()
        - drm/ttm: stop calling tt_swapin in vm_access
        - arm64: mm: update max_pfn after memory hotplug
        - drm/amdgpu: fix warning for overflow check
        - media: em28xx: add missing em28xx_close_extension
        - media: cxd2880-spi: Fix a null pointer dereference on error handling path
        - media: dvb-usb: fix ununit-value in az6027_rc_query
        - media: v4l2-ioctl: S_CTRL output the right value
        - media: TDA1997x: handle short reads of hdmi info frame.
        - media: mtk-vpu: Fix a resource leak in the error handling path of
          'mtk_vpu_probe()'
        - media: radio-wl1273: Avoid card name truncation
        - media: si470x: Avoid card name truncation
        - media: tm6000: Avoid card name truncation
        - media: cx23885: Fix snd_card_free call on null card pointer
        - kprobes: Do not use local variable when creating debugfs file
        - crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
        - cpuidle: Fix kobject memory leaks in error paths
        - media: em28xx: Don't use ops->suspend if it is NULL
        - ath9k: Fix potential interrupt storm on queue reset
        - PM: EM: Fix inefficient states detection
        - EDAC/amd64: Handle three rank interleaving mode
        - rcu: Always inline rcu_dynticks_task*_{enter,exit}()
        - netfilter: nft_dynset: relax superfluous check on set updates
        - media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
        - crypto: qat - detect PFVF collision after ACK
        - crypto: qat - disregard spurious PFVF interrupts
        - hwrng: mtk - Force runtime pm ops for sleep ops
        - b43legacy: fix a lower bounds test
        - b43: fix a lower bounds test
        - gve: Recover from queue stall due to missed IRQ
        - mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
        - mmc: sdhci-omap: Fix context restore
        - memstick: avoid out-of-range warning
        - memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
        - net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
        - hwmon: Fix possible memleak in __hwmon_device_register()
        - hwmon: (pmbus/lm25066) Let compiler determine outer dimension of
          lm25066_coeff
        - ath10k: fix max antenna gain unit
        - kernel/sched: Fix sched_fork() access an invalid sched_task_group
        - tcp: switch orphan_count to bare per-cpu counters
        - drm/msm: potential error pointer dereference in init()
        - drm/msm: uninitialized variable in msm_gem_import()
        - net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
        - media: ir_toy: assignment to be16 should be of correct type
        - mmc: mxs-mmc: disable regulator on error and in the remove function
        - platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
        - mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi
        - mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
        - mt76: mt7915: fix possible infinite loop release semaphore
        - mt76: mt7915: fix sta_rec_wtbl tag len
        - mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req()
        - rsi: stop thread firstly in rsi_91x_init() error handling
        - mwifiex: Send DELBA requests according to spec
        - net: enetc: unmap DMA in enetc_send_cmd()
        - phy: micrel: ksz8041nl: do not use power down mode
        - nvme-rdma: fix error code in nvme_rdma_setup_ctrl
        - PM: hibernate: fix sparse warnings
        - clocksource/drivers/timer-ti-dm: Select TIMER_OF
        - x86/sev: Fix stack type check in vc_switch_off_ist()
        - drm/msm: Fix potential NULL dereference in DPU SSPP
        - smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
        - KVM: selftests: Fix nested SVM tests when built with clang
        - bpftool: Avoid leaking the JSON writer prepared for program metadata
        - libbpf: Fix overflow in BTF sanity checks
        - libbpf: Fix BTF header parsing checks
        - s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
        - KVM: s390: pv: avoid double free of sida page
        - KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
        - irq: mips: avoid nested irq_enter()
        - tpm: fix Atmel TPM crash caused by too frequent queries
        - tpm_tis_spi: Add missing SPI ID
        - libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED()
        - tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
        - spi: spi-rpc-if: Check return value of rpcif_sw_init()
        - samples/kretprobes: Fix return value if register_kretprobe() failed
        - KVM: s390: Fix handle_sske page fault handling
        - libertas_tf: Fix possible memory leak in probe and disconnect
        - libertas: Fix possible memory leak in probe and disconnect
        - wcn36xx: add proper DMA memory barriers in rx path
        - wcn36xx: Fix discarded frames due to wrong sequence number
        - drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
        - selftests/bpf: Fix fd cleanup in sk_lookup test
        - net: amd-xgbe: Toggle PLL settings during rate change
        - net: phylink: avoid mvneta warning when setting pause parameters
        - crypto: pcrypt - Delay write to padata->info
        - selftests/bpf: Fix fclose/pclose mismatch in test_progs
        - udp6: allow SO_MARK ctrl msg to affect routing
        - ibmvnic: don't stop queue in xmit
        - ibmvnic: Process crqs after enabling interrupts
        - cgroup: Fix rootcg cpu.stat guest double counting
        - bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.
        - bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.
        - of: unittest: fix EXPECT text for gpio hog errors
        - iio: st_sensors: Call st_sensors_power_enable() from bus drivers
        - iio: st_sensors: disable regulators after device unregistration
        - RDMA/rxe: Fix wrong port_cap_flags
        - ARM: dts: BCM5301X: Fix memory nodes names
        - clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
        - ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
        - arm64: dts: rockchip: Fix GPU register width for RK3328
        - ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
        - RDMA/bnxt_re: Fix query SRQ failure
        - arm64: dts: ti: k3-j721e-main: Fix "max-virtual-functions" in PCIe EP nodes
        - arm64: dts: ti: k3-j721e-main: Fix "bus-range" upto 256 bus number for PCIe
        - arm64: dts: meson-g12a: Fix the pwm regulator supply properties
        - arm64: dts: meson-g12b: Fix the pwm regulator supply properties
        - bus: ti-sysc: Fix timekeeping_suspended warning on resume
        - ARM: dts: at91: tse850: the emac<->phy interface is rmii
        - scsi: dc395: Fix error case unwinding
        - MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
        - JFS: fix memleak in jfs_mount
        - arm64: dts: qcom: msm8916: Fix Secondary MI2S bit clock
        - arm64: dts: renesas: beacon: Fix Ethernet PHY mode
        - arm64: dts: qcom: pm8916: Remove wrong reg-names for rtc@6000
        - ALSA: hda: Reduce udelay() at SKL+ position reporting
        - ALSA: hda: Fix hang during shutdown due to link reset
        - ALSA: hda: Use position buffer for SKL+ again
        - soundwire: debugfs: use controller id and link_id for debugfs
        - scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp()
        - driver core: Fix possible memory leak in device_link_add()
        - arm: dts: omap3-gta04a4: accelerometer irq fix
        - ASoC: SOF: topology: do not power down primary core during topology removal
        - soc/tegra: Fix an error handling path in tegra_powergate_power_up()
        - memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
        - clk: at91: check pmc node status before registering syscore ops
        - video: fbdev: chipsfb: use memset_io() instead of memset()
        - powerpc: fix unbalanced node refcount in check_kvm_guest()
        - serial: 8250_dw: Drop wrong use of ACPI_PTR()
        - usb: gadget: hid: fix error code in do_config()
        - power: supply: rt5033_battery: Change voltage values to µV
        - power: supply: max17040: fix null-ptr-deref in max17040_probe()
        - scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
        - RDMA/mlx4: Return missed an error if device doesn't support steering
        - usb: musb: select GENERIC_PHY instead of depending on it
        - staging: most: dim2: do not double-register the same device
        - staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
        - pinctrl: renesas: checker: Fix off-by-one bug in drive register check
        - ARM: dts: stm32: Reduce DHCOR SPI NOR frequency to 50 MHz
        - ARM: dts: stm32: fix SAI sub nodes register range
        - ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
        - ASoC: cs42l42: Correct some register default values
        - ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
        - soc: qcom: rpmhpd: Make power_on actually enable the domain
        - usb: typec: STUSB160X should select REGMAP_I2C
        - iio: adis: do not disabe IRQs in 'adis_init()'
        - scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer
        - serial: imx: fix detach/attach of serial console
        - usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init
        - usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be disabled
        - usb: dwc2: drd: reset current session before setting the new one
        - firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available()
        - soc: qcom: apr: Add of_node_put() before return
        - pinctrl: equilibrium: Fix function addition in multiple groups
        - phy: qcom-qusb2: Fix a memory leak on probe
        - phy: ti: gmii-sel: check of_get_address() for failure
        - phy: qcom-snps: Correct the FSEL_MASK
        - serial: xilinx_uartps: Fix race condition causing stuck TX
        - clk: at91: sam9x60-pll: use DIV_ROUND_CLOSEST_ULL
        - HID: u2fzero: clarify error check and length calculations
        - HID: u2fzero: properly handle timeouts in usb_submit_urb
        - powerpc/44x/fsp2: add missing of_node_put
        - ASoC: cs42l42: Use device_property API instead of of_property
        - ASoC: cs42l42: Correct configuring of switch inversion from ts-inv
        - virtio_ring: check desc == NULL when using indirect with packed
        - mips: cm: Convert to bitfield API to fix out-of-bounds access
        - power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
        - apparmor: fix error check
        - rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
        - nfsd: don't alloc under spinlock in rpc_parse_scope_id
        - i2c: mediatek: fixing the incorrect register offset
        - NFS: Fix dentry verifier races
        - pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
        - drm/plane-helper: fix uninitialized variable reference
        - PCI: aardvark: Don't spam about PIO Response Status
        - PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
        - opp: Fix return in _opp_add_static_v2()
        - NFS: Fix deadlocks in nfs_scan_commit_list()
        - fs: orangefs: fix error return code of orangefs_revalidate_lookup()
        - mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
        - PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation
        - mtd: core: don't remove debugfs directory if device is in use
        - remoteproc: Fix a memory leak in an error handling path in
          'rproc_handle_vdev()'
        - rtc: rv3032: fix error handling in rv3032_clkout_set_rate()
        - dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
        - NFS: Fix up commit deadlocks
        - NFS: Fix an Oops in pnfs_mark_request_commit()
        - Fix user namespace leak
        - auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
        - auxdisplay: ht16k33: Connect backlight to fbdev
        - auxdisplay: ht16k33: Fix frame buffer device blanking
        - soc: fsl: dpaa2-console: free buffer before returning from
          dpaa2_console_read
        - netfilter: nfnetlink_queue: fix OOB when mac header was cleared
        - dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
        - signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
        - m68k: set a default value for MEMORY_RESERVE
        - watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
        - ar7: fix kernel builds for compiler test
        - scsi: qla2xxx: Changes to support FCP2 Target
        - scsi: qla2xxx: Relogin during fabric disturbance
        - scsi: qla2xxx: Fix gnl list corruption
        - scsi: qla2xxx: Turn off target reset during issue_lip
        - NFSv4: Fix a regression in nfs_set_open_stateid_locked()
        - i2c: xlr: Fix a resource leak in the error handling path of
          'xlr_i2c_probe()'
        - xen-pciback: Fix return in pm_ctrl_init()
        - net: davinci_emac: Fix interrupt pacing disable
        - ethtool: fix ethtool msg len calculation for pause stats
        - openrisc: fix SMP tlb flush NULL pointer dereference
        - net: vlan: fix a UAF in vlan_dev_real_dev()
        - ice: Fix replacing VF hardware MAC to existing MAC filter
        - ice: Fix not stopping Tx queues for VFs
        - ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
        - drm/nouveau/svm: Fix refcount leak bug and missing check against null bug
        - net: phy: fix duplex out of sync problem while changing settings
        - bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
        - mfd: core: Add missing of_node_put for loop iteration
        - can: mcp251xfd: mcp251xfd_chip_start(): fix error handling for
          mcp251xfd_chip_rx_int_enable()
        - mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and
          zs_unregister_migration()
        - zram: off by one in read_block_state()
        - perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
        - llc: fix out-of-bound array index in llc_sk_dev_hash()
        - nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
        - arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
        - bpf, sockmap: Remove unhash handler for BPF sockmap usage
        - bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
        - gve: Fix off by one in gve_tx_timeout()
        - seq_file: fix passing wrong private data
        - net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
        - net: hns3: fix kernel crash when unload VF while it is being reset
        - net: hns3: allow configure ETS bandwidth of all TCs
        - net: stmmac: allow a tc-taprio base-time of zero
        - vsock: prevent unnecessary refcnt inc for nonblocking connect
        - net/smc: fix sk_refcnt underflow on linkdown and fallback
        - cxgb4: fix eeprom len when diagnostics not implemented
        - selftests/net: udpgso_bench_rx: fix port argument
        - ARM: 9155/1: fix early early_iounmap()
        - ARM: 9156/1: drop cc-option fallbacks for architecture selection
        - MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL
        - x86/mce: Add errata workaround for Skylake SKX37
        - posix-cpu-timers: Clear task::posix_cputimers_work in copy_process()
        - irqchip/sifive-plic: Fixup EOI failed when masked
        - f2fs: should use GFP_NOFS for directory inodes
        - net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
        - 9p/net: fix missing error check in p9_check_errors
        - memcg: prohibit unconditional exceeding the limit of dying tasks
        - powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC
        - mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
        - mm, oom: do not trigger out_of_memory from the #PF
        - mfd: dln2: Add cell for initializing DLN2 ADC
        - video: backlight: Drop maximum brightness override for brightness zero
        - s390/cio: check the subchannel validity for dev_busid
        - s390/tape: fix timer initialization in tape_std_assign()
        - s390/ap: Fix hanging ioctl caused by orphaned replies
        - s390/cio: make ccw_device_dma_* more robust
        - mtd: rawnand: ams-delta: Keep the driver compatible with on-die ECC engines
        - mtd: rawnand: xway: Keep the driver compatible with on-die ECC engines
        - mtd: rawnand: mpc5121: Keep the driver compatible with on-die ECC engines
        - mtd: rawnand: gpio: Keep the driver compatible with on-die ECC engines
        - mtd: rawnand: pasemi: Keep the driver compatible with on-die ECC engines
        - mtd: rawnand: orion: Keep the driver compatible with on-die ECC engines
        - mtd: rawnand: plat_nand: Keep the driver compatible with on-die ECC engines
        - mtd: rawnand: au1550nd: Keep the driver compatible with on-die ECC engines
        - powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
        - powerpc/85xx: fix timebase sync issue when CONFIG_HOTPLUG_CPU=n
        - drm/sun4i: Fix macros in sun8i_csc.h
        - PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
        - PCI: aardvark: Fix PCIe Max Payload Size setting
        - SUNRPC: Partial revert of commit 6f9f17287e78
        - ath10k: fix invalid dma_addr_t token assignment
        - mmc: moxart: Fix null pointer dereference on pointer host
        - selftests/bpf: Fix also no-alu32 strobemeta selftest
        - arch/cc: Introduce a function to check for confidential computing features
        - x86/sev: Add an x86 version of cc_platform_has()
        - [Config] updateconfigs for ARCH_HAS_CC_PLATFORM
        - x86/sev: Make the #VC exception stacks part of the default stacks storage
        - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not
          run
        - scsi: lpfc: Don't release final kref on Fport node while ABTS outstanding
        - scsi: lpfc: Fix FCP I/O flush functionality for TMF routines
        - ce/gf100: fix incorrect CE0 address calculation on some GPUs
        - x86/insn-eval: Make 0 a valid RIP for insn_get_effective_ip()
        - x86/iopl: Fake iopl(3) CLI/STI usage
        - KVM: arm64: Report corrupted refcount at EL2
        - ASoC: cs42l42: Ensure 0dB full scale volume is used for headsets
        - ptp: fix error print of ptp_kvm on X86_64 platform
        - net: mscc: ocelot: Add of_node_put() before goto
        - spi: altera: Change to dynamic allocation of spi id
        - bpf: Define bpf_jit_alloc_exec_limit for riscv JIT
        - net: hns3: ignore reset event before initialization process is done
        - tools/testing/selftests/vm/split_huge_page_test.c: fix application of sizeof
          to pointer
        - KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ
          handling
        - ipmi:watchdog: Set panic count to proper value on a panic
        - md/raid1: only allocate write behind bio for WriteMostly device
        - platform/surface: aggregator_registry: Add support for Surface Laptop Studio
        - mt76: mt7615: fix skb use-after-free on mac reset
        - HID: surface-hid: Use correct event registry for managing HID events
        - HID: surface-hid: Allow driver matching for target ID 1 devices
        - perf/x86/intel/uncore: Fix invalid unit check
        - soc: samsung: exynos-pmu: Fix compilation when nothing selects
          CONFIG_MFD_CORE
        - iio: core: fix double free in iio_device_unregister_sysfs()
        - KVM: x86: Fix recording of guest steal time / preempted status
        - KVM: nVMX: Handle dynamic MSR intercept toggling
        - cifs: To match file servers, make sure the server hostname matches
        - cifs: set a minimum of 120s for next dns resolution
        - coresight: trbe: Fix incorrect access of the sink specific data
        - coresight: trbe: Defer the probe on offline CPUs
        - iio: buffer: check return value of kstrdup_const()
        - iio: buffer: Fix memory leak in iio_buffers_alloc_sysfs_and_mask()
        - iio: buffer: Fix memory leak in __iio_buffer_alloc_sysfs_and_mask()
        - iio: buffer: Fix memory leak in iio_buffer_register_legacy_sysfs_groups()
        - drivers: iio: dac: ad5766: Fix dt property name
        - Documentation:devicetree:bindings:iio:dac: Fix val
        - crypto: aesni - check walk.nbytes instead of err
        - x86/mm/64: Improve stack overflow warnings
        - spi: Check we have a spi_device_id for each DT compatible
        - drm/amd/display: Fix null pointer dereference for encoders
        - selftests: net: fib_nexthops: Wait before checking reported idle time
        - media: vidtv: Fix memory leak in remove
        - media: videobuf2: rework vb2_mem_ops API
        - media: rcar-vin: Use user provided buffers when starting
        - ice: Move devlink port to PF/VF struct
        - media: imx-jpeg: Fix possible null pointer dereference
        - tracing: Disable "other" permission bits in the tracefs files
        - drm/amd/display: fix null pointer deref when plugging in display
        - thermal/core: Fix null pointer dereference in thermal_release()
        - thermal/drivers/tsens: Add timeout to get_temp_tsens_valid
        - floppy: fix calling platform_device_unregister() on invalid drives
        - locking/rwsem: Disable preemption for spinning region
        - iwlwifi: change all JnP to NO-160 configuration
        - drm/amdgpu/pm: properly handle sclk for profiling modes on vangogh
        - arm64: vdso32: suppress error message for 'make mrproper'
        - can: bittiming: can_fixup_bittiming(): change type of tseg1 and alltseg to
          unsigned int
        - tools/latency-collector: Use correct size when writing queue_full_warning
        - wcn36xx: Fix packet drop on resume
        - Revert "wcn36xx: Enable firmware link monitoring"
        - ftrace: do CPU checking after preemption disabled
        - perf/x86/intel: Fix ICL/SPR INST_RETIRED.PREC_DIST encodings
        - fbdev/efifb: Release PCI device's runtime PM ref during FB destroy
        - drm/bridge: anx7625: Propagate errors from sp_tx_rst_aux()
        - libbpf: Don't crash on object files with no symbol tables
        - objtool: Handle __sanitize_cov*() tail calls
        - net: phylink: don't call netif_carrier_off() with NULL netdev
        - spi: Fixed division by zero warning
        - bnxt_en: Check devlink allocation and registration status
        - qed: Don't ignore devlink allocation failures
        - fortify: Fix dropped strcpy() compile-time write overflow check
        - cfg80211: always free wiphy specific regdomain
        - net: dsa: rtl8366: Fix a bug in deleting VLANs
        - media: meson-ge2d: Fix rotation parameter changes detection in
          'ge2d_s_ctrl()'
        - media: imx258: Fix getting clock frequency
        - media: mtk-vcodec: venc: fix return value when start_streaming fails
        - media: imx-jpeg: Fix the error handling path of 'mxc_jpeg_probe()'
        - media: i2c: ths8200 needs V4L2_ASYNC
        - scs: Release kasan vmalloc poison in scs_free process
        - ath10k: Don't always treat modem stop events as crashes
        - x86/insn: Use get_unaligned() instead of memcpy()
        - crypto: ccree - avoid out-of-range warnings from clang
        - gve: Track RX buffer allocation failures
        - crypto: octeontx2 - set assoclen in aead_do_fallback()
        - thermal/core: fix a UAF bug in __thermal_cooling_device_register()
        - drm/msm: fix potential NULL dereference in cleanup
        - block: ataflop: fix breakage introduced at blk-mq refactoring
        - drm/amdkfd: Fix an inappropriate error handling in allloc memory of gpu
        - mt76: mt7915: fix info leak in mt7915_mcu_set_pre_cal()
        - mt76: connac: fix mt76_connac_gtk_rekey_tlv usage
        - mt76: fix build error implicit enumeration conversion
        - mt76: mt7921: fix survey-dump reporting
        - mt76: mt7921: Fix out of order process by invalid event pkt
        - mt76: mt7915: fix potential overflow of eeprom page index
        - mt76: mt7915: fix bit fields for HT rate idx
        - mt76: mt7921: fix dma hang in rmmod
        - mt76: connac: fix GTK rekey offload failure on WPA mixed mode
        - mt76: overwrite default reg_ops if necessary
        - mt76: mt7921: report HE MU radiotap
        - mt76: mt7921: fix firmware usage of RA info using legacy rates
        - mt76: mt7921: fix kernel warning from cfg80211_calculate_bitrate
        - mt76: mt7921: always wake device if necessary in debugfs
        - mt76: mt7921: fix retrying release semaphore without end
        - mt76: mt7615: fix monitor mode tear down crash
        - mt76: connac: fix possible NULL pointer dereference in
          mt76_connac_get_phy_mode_v2
        - iwlwifi: mvm: reset PM state on unsuccessful resume
        - nbd: Fix use-after-free in pid_show
        - crypto: tcrypt - fix skcipher multi-buffer tests for 1420B blocks
        - libbpf: Fix memory leak in btf__dedup()
        - mt76: mt7615: mt7622: fix ibss and meshpoint
        - mm: add vma_lookup(), update find_vma_intersection() comments
        - s390/gmap: validate VMA in __gmap_zap()
        - s390/mm: validate VMA in PGSTE manipulation functions
        - s390/mm: fix VMA and page table handling code in storage key handling
          functions
        - s390/uv: fully validate the VMA before calling follow_page()
        - ARM: 9142/1: kasan: work around LPAE build warning
        - ath10k: fix module load regression with iram-recovery feature
        - block: ataflop: more blk-mq refactoring fixes
        - blk-cgroup: synchronize blkg creation against policy deactivation
        - bpf: Fixes possible race in update_prog_stats() for 32bit arches
        - wcn36xx: Channel list update before hardware scan
        - selftests/bpf: Fix memory leak in test_ima
        - net: bridge: fix uninitialized variables when BRIDGE_CFM is disabled
        - selftests: net: bridge: update IGMP/MLD membership interval value
        - skmsg: Lose offset info in sk_psock_skb_ingress
        - arm64: dts: meson: sm1: add Ethernet PHY reset line for ODROID-C4/HC4
        - arm64: dts: broadcom: bcm4908: Fix UART clock name
        - scsi: pm80xx: Fix lockup in outbound queue management
        - arm64: dts: ti: j7200-main: Fix "vendor-id"/"device-id" properties of pcie
          node
        - arm64: dts: ti: j7200-main: Fix "bus-range" upto 256 bus number for PCIe
        - soc: qcom: llcc: Disable MMUHWT retention
        - iommu/mediatek: Fix out-of-range warning with clang
        - iommu/dma: Fix arch_sync_dma for map
        - power: reset: at91-reset: check properly the return value of devm_of_iomap
        - scsi: megaraid_sas: Fix concurrent access to ISR between IRQ polling and
          real interrupt
        - powerpc/mem: Fix arch/powerpc/mm/mem.c:53:12: error: no previous prototype
          for 'create_section_mapping'
        - powerpc/paravirt: correct preempt debug splat in vcpu_is_preempted()
        - powerpc/perf: Fix cycles/instructions as PM_CYC/PM_INST_CMPL in power10
        - ARM: dts: stm32: fix STUSB1600 Type-C irq level on stm32mp15xx-dkx
        - ASoC: cs42l42: Always configure both ASP TX channels
        - iio: buffer: Fix double-free in iio_buffers_alloc_sysfs_and_mask()
        - soundwire: bus: stop dereferencing invalid slave pointer
        - scsi: lpfc: Wait for successful restart of SLI3 adapter during host sg_reset
        - powerpc/booke: Disable STRICT_KERNEL_RWX, DEBUG_PAGEALLOC and KFENCE
        - soc: qcom: rpmhpd: fix sm8350_mxc's peer domain
        - arm64: dts: qcom: sdm845: Use RPMH_CE_CLK macro directly
        - arm64: dts: qcom: sdm845: Fix Qualcomm crypto engine bus clock
        - ASoC: topology: Fix stub for snd_soc_tplg_component_remove()
        - phy: Sparx5 Eth SerDes: Fix return value check in sparx5_serdes_probe()
        - clk: at91: clk-master: check if div or pres is zero
        - clk: at91: clk-master: fix prescaler logic
        - powerpc/nohash: Fix __ptep_set_access_flags() and ptep_set_wrprotect()
        - RDMA/hns: Modify the value of MAX_LP_MSG_LEN to meet hardware compatibility
        - serial: cpm_uart: Protect udbg definitions by CONFIG_SERIAL_CPM_CONSOLE
        - RDMA/core: Require the driver to set the IOVA correctly during rereg_mr
        - mtd: rawnand: intel: Fix potential buffer overflow in probe
        - NFS: Default change_attr_type to NFS4_CHANGE_TYPE_IS_UNDEFINED
        - NFS: Don't set NFS_INO_DATA_INVAL_DEFER and NFS_INO_INVALID_DATA
        - NFS: Ignore the directory size when marking for revalidation
        - drm/bridge/lontium-lt9611uxc: fix provided connector suport
        - Input: st1232 - increase "wait ready" timeout
        - dmaengine: at_xdmac: call at_xdmac_axi_config() on resume path
        - dmaengine: stm32-dma: fix stm32_dma_get_max_width
        - scsi: target: core: Remove from tmr_list during LUN unlink
        - gpio: realtek-otto: fix GPIO line IRQ offset
        - nbd: fix max value for 'first_minor'
        - nbd: fix possible overflow for 'first_minor' in nbd_dev_add()
        - kselftests/net: add missed icmp.sh test to Makefile
        - net: dsa: tag_ocelot: break circular dependency with ocelot switch lib
          driver
        - net: dsa: felix: fix broken VLAN-tagged PTP under VLAN-aware bridge
        - PCI: j721e: Fix j721e_pcie_probe() error path
        - nvdimm/btt: do not call del_gendisk() if not needed
        - block/ataflop: use the blk_cleanup_disk() helper
        - block/ataflop: add registration bool before calling del_gendisk()
        - block/ataflop: provide a helper for cleanup up an atari disk
        - ataflop: remove ataflop_probe_lock mutex
        - mfd: altera-sysmgr: Fix a mistake caused by resource_size conversion
        - can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path
        - arm64: arm64_ftr_reg->name may not be a human-readable string
        - bpf, sockmap: sk_skb data_end access incorrect when src_reg = dst_reg
        - dmaengine: stm32-dma: fix burst in case of unaligned memory address
        - drm/i915/fb: Fix rounding error in subsampled plane size calculation
        - net: dsa: mv88e6xxx: Don't support >1G speeds on 6191X on ports other than
          10
        - net: hns3: fix ROCE base interrupt vector initialization bug
        - net: hns3: fix pfc packet number incorrect after querying pfc parameters
        - net: ethernet: ti: cpsw_ale: Fix access to un-initialized memory
        - net: marvell: mvpp2: Fix wrong SerDes reconfiguration order
        - smb3: do not error on fsync when readonly
        - parisc: Fix backtrace to always include init funtion names
        - parisc: Flush kernel data mapping in set_pte_at() when installing pte for
          user page
        - MIPS: fix duplicated slashes for Platform file path
        - KVM: x86: move guest_pv_has out of user_access section
        - f2fs: include non-compressed blocks in compr_written_block
        - f2fs: fix UAF in f2fs_available_free_memory
        - dmaengine: ti: k3-udma: Set bchan to NULL if a channel request fail
        - dmaengine: ti: k3-udma: Set r/tchan or rflow to NULL if request fail
        - dmaengine: bestcomm: fix system boot lockups
        - mm/filemap.c: remove bogus VM_BUG_ON
        - io-wq: fix queue stalling race
        - io-wq: serialize hash clear with wakeup
        - PM: sleep: Avoid calling put_device() under dpm_list_mtx
        - remoteproc: elf_loader: Fix loading segment when is_iomem true
        - remoteproc: Fix the wrong default value of is_iomem
        - remoteproc: imx_rproc: Fix ignoring mapping vdev regions
        - remoteproc: imx_rproc: Fix rsc-table name
        - mtd: rawnand: fsmc: Fix use of SM ORDER
        - powerpc/32e: Ignore ESR in instruction storage interrupt handler
        - powerpc/pseries/mobility: ignore ibm, platform-facilities updates
        - pinctrl: amd: Add irq field data
        - media: videobuf2: always set buffer vb2 pointer
    
      * Faulty Elantech Trackpoint firmware unusable as it causes sudden cursor jump
        to an edge/corner on Lenovo Thinkpad X13, T14s, A475 --> Apply kernel patch
        to mitigate the FW bug  (LP: #1936295) // Impish update: upstream stable
        patchset 2021-12-09 (LP: #1954337)
        - Input: elantench - fix misreporting trackpoint coordinates
    
      * Impish update: upstream stable patchset 2021-11-29 (LP: #1952665)
        - ARM: 9132/1: Fix __get_user_check failure with ARM KASAN images
        - ARM: 9133/1: mm: proc-macros: ensure *_tlb_fns are 4B aligned
        - ARM: 9134/1: remove duplicate memcpy() definition
        - ARM: 9138/1: fix link warning with XIP + frame-pointer
        - ARM: 9139/1: kprobes: fix arch_init_kprobes() prototype
        - ARM: 9141/1: only warn about XIP address when not compile testing
        - usbnet: sanity check for maxpacket
        - usbnet: fix error return code in usbnet_probe()
        - Revert "pinctrl: bcm: ns: support updated DT binding as syscon subnode"
        - pinctrl: amd: disable and mask interrupts on probe
        - ata: sata_mv: Fix the error handling of mv_chip_id()
        - nfc: port100: fix using -ERRNO as command type mask
        - net/tls: Fix flipped sign in tls_err_abort() calls
        - mmc: vub300: fix control-message timeouts
        - mmc: cqhci: clear HALT state after CQE enable
        - mmc: mediatek: Move cqhci init behind ungate clock
        - mmc: dw_mmc: exynos: fix the finding clock sample value
        - mmc: sdhci: Map more voltage level to SDHCI_POWER_330
        - mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning
          circuit
        - ocfs2: fix race between searching chunks and release journal_head from
          buffer_head
        - nvme-tcp: fix H2CData PDU send accounting (again)
        - cfg80211: scan: fix RCU in cfg80211_add_nontrans_list()
        - cfg80211: fix management registrations locking
        - net: lan78xx: fix division by zero in send path
        - mm, thp: bail out early in collapse_file for writeback page
        - drm/amdgpu: fix out of bounds write
        - cgroup: Fix memory leak caused by missing cgroup_bpf_offline
        - riscv, bpf: Fix potential NULL dereference
        - tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function
        - bpf: Fix potential race in tail call compatibility check
        - bpf: Fix error usage of map_fd and fdget() in generic_map_update_batch()
        - IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
        - IB/hfi1: Fix abba locking issue with sc_disable()
        - nvmet-tcp: fix data digest pointer calculation
        - nvme-tcp: fix data digest pointer calculation
        - nvme-tcp: fix possible req->offset corruption
        - octeontx2-af: Display all enabled PF VF rsrc_alloc entries.
        - RDMA/mlx5: Set user priority for DCT
        - arm64: dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node
        - reset: brcmstb-rescal: fix incorrect polarity of status bit
        - regmap: Fix possible double-free in regcache_rbtree_exit()
        - net: batman-adv: fix error handling
        - net-sysfs: initialize uid and gid before calling net_ns_get_ownership
        - cfg80211: correct bridge/4addr mode check
        - net: Prevent infinite while loop in skb_tx_hash()
        - RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string
        - gpio: xgs-iproc: fix parsing of ngpios property
        - nios2: Make NIOS2_DTB_SOURCE_BOOL depend on !COMPILE_TEST
        - mlxsw: pci: Recycle received packet upon allocation failure
        - net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume
          fails
        - net: ethernet: microchip: lan743x: Fix dma allocation failure by using
          dma_set_mask_and_coherent
        - net: nxp: lpc_eth.c: avoid hang when bringing interface down
        - net/tls: Fix flipped sign in async_wait.err assignment
        - phy: phy_ethtool_ksettings_get: Lock the phy for consistency
        - phy: phy_ethtool_ksettings_set: Move after phy_start_aneg
        - phy: phy_start_aneg: Add an unlocked version
        - phy: phy_ethtool_ksettings_set: Lock the PHY while changing settings
        - sctp: use init_tag from inithdr for ABORT chunk
        - sctp: fix the processing for INIT_ACK chunk
        - sctp: fix the processing for COOKIE_ECHO chunk
        - sctp: add vtag check in sctp_sf_violation
        - sctp: add vtag check in sctp_sf_do_8_5_1_E_sa
        - sctp: add vtag check in sctp_sf_ootb
        - KVM: s390: clear kicked_mask before sleeping again
        - KVM: s390: preserve deliverable_mask in __airqs_kick_single_vcpu
        - scsi: ufs: ufs-exynos: Correct timeout value setting registers
        - riscv: fix misalgned trap vector base address
        - riscv: Fix asan-stack clang build
        - perf script: Check session->header.env.arch before using it
        - mmc: tmio: reenable card irqs after the reset callback
        - mmc: sdhci-pci: Read card detect from ACPI for Intel Merrifield
        - block: Fix partition check for host-aware zoned block devices
        - ftrace/nds32: Update the proto for ftrace_trace_function to match
          ftrace_stub
        - mm: hwpoison: remove the unnecessary THP check
        - mm: filemap: check if THP has hwpoisoned subpage for PMD page fault
        - arm64: dts: imx8mm-kontron: Fix polarity of reg_rst_eth2
        - arm64: dts: imx8mm-kontron: Fix CAN SPI clock frequency
        - arm64: dts: imx8mm-kontron: Fix connection type for VSC8531 RGMII PHY
        - arm64: dts: imx8mm-kontron: Set lower limit of VDD_SNVS to 800 mV
        - arm64: dts: imx8mm-kontron: Make sure SOC and DRAM supply voltages are
          correct
        - mac80211: mesh: fix HE operation element length check
        - drm/ttm: fix memleak in ttm_transfered_destroy
        - drm/i915: Convert unconditional clflush to drm_clflush_virt_range()
        - drm/i915: Catch yet another unconditioal clflush
        - drm/i915/dp: Skip the HW readout of DPCD on disabled encoders
        - octeontx2-af: Fix possible null pointer dereference.
        - ice: Respond to a NETDEV_UNREGISTER event for LAG
        - RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR
        - net: hns3: fix pause config problem after autoneg disabled
        - net: ethernet: microchip: lan743x: Fix skb allocation failure
        - sctp: fix the processing for INIT chunk
        - bpf: Use kvmalloc for map values in syscall
        - bpf: Move BPF_MAP_TYPE for INODE_STORAGE and TASK_STORAGE outside of
          CONFIG_NET
        - perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
        - scsi: ibmvfc: Fix up duplicate response detection
        - riscv: Do not re-populate shadow memory with kasan_populate_early_shadow
        - KVM: x86: switch pvclock_gtod_sync_lock to a raw spinlock
        - KVM: SEV-ES: fix another issue with string I/O VMGEXITs
        - KVM: x86: Take srcu lock in post_kvm_run_save()
        - scsi: core: Put LLD module refcnt after SCSI device is released
        - sfc: Fix reading non-legacy supported link modes
        - vrf: Revert "Reset skb conntrack connection..."
        - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
        - Revert "xhci: Set HCD flag to defer primary roothub registration"
        - Revert "usb: core: hcd: Add support for deferring roothub registration"
        - mm: khugepaged: skip huge page collapse for special files
        - Revert "drm/ttm: fix memleak in ttm_transfered_destroy"
        - ARM: 9120/1: Revert "amba: make use of -1 IRQs warn"
        - Revert "wcn36xx: Disable bmps when encryption is disabled"
        - ALSA: usb-audio: Add Schiit Hel device to mixer map quirk table
        - ALSA: usb-audio: Add Audient iD14 to mixer map quirk table
        - drm/i915: Remove memory frequency calculation
        - drm/amdgpu: revert "Add autodump debugfs node for gpu reset v8"
        - drm/amd/display: Revert "Directly retrain link from debugfs"
        - Revert "drm/i915/gt: Propagate change in error status to children on unhold"
        - KVM: x86/mmu: Add helpers to do full reserved SPTE checks w/ generic MMU
        - KVM: x86: avoid warning with -Wbitwise-instead-of-logical
        - Revert "x86/kvm: fix vcpu-id indexed array sizes"
        - usb: ehci: handshake CMD_RUN instead of STS_HALT
        - usb: gadget: Mark USB_FSL_QE broken on 64-bit
        - usb: musb: Balance list entry in musb_gadget_queue
        - usb-storage: Add compatibility quirk flags for iODD 2531/2541
        - binder: don't detect sender/target during buffer cleanup
        - staging: rtl8712: fix use-after-free in rtl8712_dl_fw
        - isofs: Fix out of bound access for corrupted isofs image
        - comedi: dt9812: fix DMA buffers on stack
        - comedi: ni_usb6501: fix NULL-deref in command paths
        - comedi: vmk80xx: fix transfer-buffer overflows
        - comedi: vmk80xx: fix bulk-buffer overflow
        - comedi: vmk80xx: fix bulk and interrupt message timeouts
        - staging: r8712u: fix control-message timeout
        - staging: rtl8192u: fix control-message timeouts
        - media: staging/intel-ipu3: css: Fix wrong size comparison imgu_css_fw_init
        - rsi: fix control-message timeout
        - ALSA: pcm: Check mmap capability of runtime dma buffer at first
        - ALSA: pci: cs46xx: Fix set up buffer type properly
        - Revert "proc/wchan: use printk format instead of lookup_symbol_name()"
        - binder: use euid from cred instead of using task
    
      * Impish update: upstream stable patchset 2021-11-29 (LP: #1952665) //
        CVE-2021-42327 was fixed by:
        - drm/amdgpu: Fix even more out of bound writes from debugfs
    
     -- Kleber Sacilotto de Souza <email address hidden>  Thu, 13 Jan 2022 18:13:23 +0100
  • linux (5.13.0-27.29) impish; urgency=medium
    
      * CVE-2022-0185
        - SAUCE: vfs: Out-of-bounds write of heap buffer in fs_context.c
        - SAUCE: vfs: test that one given mount param is not larger than PAGE_SIZE
    
     -- Thadeu Lima de Souza Cascardo <email address hidden>  Wed, 12 Jan 2022 11:43:06 -0300
  • linux (5.13.0-25.26) impish; urgency=medium
    
      * amdgpu hangs for 90 seconds at a time in 5.13.0-23, but 5.13.0-22 works
        (LP: #1956401)
        - drm/amdkfd: fix boot failure when iommu is disabled in Picasso.
    
      * OOB write on BPF_RINGBUF (LP: #1956585)
        - SAUCE: bpf: prevent helper argument PTR_TO_ALLOC_MEM to have offset other
          than 0
    
     -- Kleber Sacilotto de Souza <email address hidden>  Fri, 07 Jan 2022 16:16:40 +0100
  • linux (5.13.0-24.24) impish; urgency=medium
    
      * impish/linux: 5.13.0-24.24 -proposed tracker (LP: #1955197)
    
      * audio mute/ mic mute are not working on a HP machine (LP: #1955691)
        - ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
    
      * rtw88_8821ce causes freeze (LP: #1927808)
        - rtw88: Disable PCIe ASPM while doing NAPI poll on 8821CE
    
      * alsa/sdw: fix the  audio sdw codec parsing logic in the acpi table
        (LP: #1955686)
        - ALSA: hda: intel-sdw-acpi: harden detection of controller
        - ALSA: hda: intel-sdw-acpi: go through HDAS ACPI at max depth of 2
    
      * icmp_redirect from selftests fails on F/kvm (unary operator expected)
        (LP: #1938964)
        - selftests: icmp_redirect: pass xfail=0 to log_test()
    
      * Impish update: upstream stable patchset 2021-12-17 (LP: #1955180)
        - arm64: zynqmp: Do not duplicate flash partition label property
        - arm64: zynqmp: Fix serial compatible string
        - ARM: dts: sunxi: Fix OPPs node name
        - arm64: dts: allwinner: h5: Fix GPU thermal zone node name
        - arm64: dts: allwinner: a100: Fix thermal zone node name
        - staging: wfx: ensure IRQ is ready before enabling it
        - ARM: dts: NSP: Fix mpcore, mmc node names
        - scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
        - arm64: dts: rockchip: Disable CDN DP on Pinebook Pro
        - arm64: dts: hisilicon: fix arm,sp805 compatible string
        - RDMA/bnxt_re: Check if the vlan is valid before reporting
        - bus: ti-sysc: Add quirk handling for reinit on context lost
        - bus: ti-sysc: Use context lost quirk for otg
        - usb: musb: tusb6010: check return value after calling
          platform_get_resource()
        - usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
        - ARM: dts: ux500: Skomer regulator fixes
        - staging: rtl8723bs: remove possible deadlock when disconnect (v2)
        - ARM: BCM53016: Specify switch ports for Meraki MR32
        - arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency
        - arm64: dts: qcom: ipq6018: Fix qcom,controlled-remotely property
        - arm64: dts: freescale: fix arm,sp805 compatible string
        - ASoC: SOF: Intel: hda-dai: fix potential locking issue
        - clk: imx: imx6ul: Move csi_sel mux to correct base register
        - ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect
        - scsi: advansys: Fix kernel pointer leak
        - ALSA: intel-dsp-config: add quirk for APL/GLK/TGL devices based on ES8336
          codec
        - firmware_loader: fix pre-allocated buf built-in firmware use
        - ARM: dts: omap: fix gpmc,mux-add-data type
        - usb: host: ohci-tmio: check return value after calling
          platform_get_resource()
        - ARM: dts: ls1021a: move thermal-zones node out of soc/
        - ARM: dts: ls1021a-tsn: use generic "jedec,spi-nor" compatible for flash
        - ALSA: ISA: not for M68K
        - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
        - MIPS: sni: Fix the build
        - scsi: scsi_debug: Fix out-of-bound read in resp_readcap16()
        - scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs()
        - scsi: target: Fix ordered tag handling
        - scsi: target: Fix alua_tg_pt_gps_count tracking
        - iio: imu: st_lsm6dsx: Avoid potential array overflow in st_lsm6dsx_set_odr()
        - powerpc/5200: dts: fix memory node unit name
        - ARM: dts: qcom: fix memory and mdio nodes naming for RB3011
        - ALSA: gus: fix null pointer dereference on pointer block
        - powerpc/dcr: Use cmplwi instead of 3-argument cmpli
        - powerpc/8xx: Fix Oops with STRICT_KERNEL_RWX without DEBUG_RODATA_TEST
        - sh: check return code of request_irq
        - maple: fix wrong return value of maple_bus_init().
        - f2fs: fix up f2fs_lookup tracepoints
        - f2fs: fix to use WHINT_MODE
        - sh: fix kconfig unmet dependency warning for FRAME_POINTER
        - sh: math-emu: drop unused functions
        - sh: define __BIG_ENDIAN for math-emu
        - f2fs: compress: disallow disabling compress on non-empty compressed file
        - f2fs: fix incorrect return value in f2fs_sanity_check_ckpt()
        - clk: ingenic: Fix bugs with divided dividers
        - clk/ast2600: Fix soc revision for AHB
        - clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk
        - mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set
        - sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
        - perf/x86/vlbr: Add c->flags to vlbr event constraints
        - blkcg: Remove extra blkcg_bio_issue_init
        - tracing/histogram: Do not copy the fixed-size char array field over the
          field size
        - perf bpf: Avoid memory leak from perf_env__insert_btf()
        - perf bench futex: Fix memory leak of perf_cpu_map__new()
        - perf tests: Remove bash construct from record+zstd_comp_decomp.sh
        - drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame
        - tcp: Fix uninitialized access in skb frags array for Rx 0cp.
        - tracing: Add length protection to histogram string copies
        - net: ipa: disable HOLB drop when updating timer
        - net: bnx2x: fix variable dereferenced before check
        - bnxt_en: reject indirect blk offload when hw-tc-offload is off
        - tipc: only accept encrypted MSG_CRYPTO msgs
        - sock: fix /proc/net/sockstat underflow in sk_clone_lock()
        - net/smc: Make sure the link_id is unique
        - iavf: Fix return of set the new channel count
        - iavf: check for null in iavf_fix_features
        - iavf: free q_vectors before queues in iavf_disable_vf
        - iavf: Fix failure to exit out from last all-multicast mode
        - iavf: prevent accidental free of filter structure
        - iavf: validate pointers
        - iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset
        - iavf: Fix for setting queues to 0
        - MIPS: generic/yamon-dt: fix uninitialized variable error
        - mips: bcm63xx: add support for clk_get_parent()
        - mips: lantiq: add support for clk_get_parent()
        - platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()'
        - net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove()
        - net/mlx5: Lag, update tracker when state change event received
        - net/mlx5: E-Switch, return error if encap isn't supported
        - scsi: core: sysfs: Fix hang when device state is set via sysfs
        - net: sched: act_mirred: drop dst for the direction from egress to ingress
        - net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove
        - net: virtio_net_hdr_to_skb: count transport header in UFO
        - i40e: Fix correct max_pkt_size on VF RX queue
        - i40e: Fix NULL ptr dereference on VSI filter sync
        - i40e: Fix changing previously set num_queue_pairs for PFs
        - i40e: Fix ping is lost after configuring ADq on VF
        - i40e: Fix warning message and call stack during rmmod i40e driver
        - i40e: Fix creation of first queue by omitting it if is not power of two
        - i40e: Fix display error code in dmesg
        - NFC: reorganize the functions in nci_request
        - NFC: reorder the logic in nfc_{un,}register_device
        - NFC: add NCI_UNREG flag to eliminate the race
        - e100: fix device suspend/resume
        - KVM: PPC: Book3S HV: Use GLOBAL_TOC for kvmppc_h_set_dabr/xdabr()
        - pinctrl: qcom: sdm845: Enable dual edge errata
        - perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server
        - perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
        - s390/kexec: fix return code handling
        - net: stmmac: dwmac-rk: Fix ethernet on rk3399 based devices
        - tun: fix bonding active backup with arp monitoring
        - hexagon: export raw I/O routines for modules
        - hexagon: clean up timer-regs.h
        - tipc: check for null after calling kmemdup
        - ipc: WARN if trying to remove ipc object which is absent
        - mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag
        - x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails
        - powerpc/8xx: Fix pinned TLBs with CONFIG_STRICT_KERNEL_RWX
        - scsi: qla2xxx: Fix mailbox direction flags in qla2xxx_get_adapter_id()
        - s390/kexec: fix memory leak of ipl report buffer
        - block: Check ADMIN before NICE for IOPRIO_CLASS_RT
        - KVM: nVMX: don't use vcpu->arch.efer when checking host state on nested
          state load
        - udf: Fix crash after seekdir
        - net: stmmac: socfpga: add runtime suspend/resume callback for stratix10
          platform
        - btrfs: fix memory ordering between normal and ordered work functions
        - parisc/sticon: fix reverse colors
        - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
        - drm/amd/display: Update swizzle mode enums
        - drm/udl: fix control-message timeout
        - drm/nouveau: Add a dedicated mutex for the clients list
        - drm/nouveau: use drm_dev_unplug() during device removal
        - drm/nouveau: clean up all clients on device removal
        - drm/i915/dp: Ensure sink rate values are always valid
        - drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga
          and dvi connectors
        - scsi: ufs: core: Fix task management completion
        - scsi: ufs: core: Fix task management completion timeout race
        - RDMA/netlink: Add __maybe_unused to static inline in C file
        - selinux: fix NULL-pointer dereference when hashtab allocation fails
        - ASoC: DAPM: Cover regression by kctl change notification fix
        - usb: max-3421: Use driver data instead of maintaining a list of bound
          devices
        - ice: Delete always true check of PF pointer
        - fs: export an inode_update_time helper
        - btrfs: update device path inode time instead of bd_inode
        - x86/Kconfig: Fix an unused variable error in dell-smm-hwmon
        - ALSA: hda: hdac_ext_stream: fix potential locking issues
        - ALSA: hda: hdac_stream: fix potential locking issue in
          snd_hdac_stream_assign()
        - clk: sunxi-ng: Unregister clocks/resets when unbinding
        - ARM: dts: BCM5301X: Fix nodes names
        - ARM: dts: BCM5301X: Fix MDIO mux binding
        - arm64: dts: broadcom: bcm4908: Move reboot syscon out of bus
        - scsi: pm80xx: Fix memory leak during rmmod
        - staging: rtl8723bs: remove a third possible deadlock
        - arm64: dts: qcom: sdm845: Fix qcom,controlled-remotely property
        - arm64: dts: ls1012a: Add serial alias for ls1012a-rdb
        - ALSA: usb-audio: disable implicit feedback sync for Behringer UFX1204 and
          UFX1604
        - ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ
        - ASoC: rt5651: Use IRQF_NO_AUTOEN when requesting the IRQ
        - scsi: smartpqi: Add controller handshake during kdump
        - arm64: dts: imx8mm-kontron: Fix reset delays for ethernet PHY
        - ASoC: Intel: soc-acpi: add missing quirk for TGL SDCA single amp
        - ASoC: Intel: sof_sdw: add missing quirk for Dell SKU 0A45
        - HID: multitouch: disable sticky fingers for UPERFECT Y
        - ALSA: usb-audio: Add support for the Pioneer DJM 750MK2 Mixer/Soundcard
        - ASoC: rt5682: fix a little pop while playback
        - iommu/vt-d: Do not falsely log intel_iommu is unsupported kernel option
        - scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine
        - scsi: lpfc: Fix link down processing to address NULL pointer dereference
        - memory: tegra20-emc: Add runtime dependency on devfreq governor module
        - arm64: dts: qcom: Fix node name of rpm-msg-ram device nodes
        - clk: at91: sama7g5: remove prescaler part of master clock
        - f2fs: fix wrong condition to trigger background checkpoint correctly
        - sched/fair: Prevent dead task groups from regaining cfs_rq's
        - net/ipa: ipa_resource: Fix wrong for loop range
        - nl80211: fix radio statistics in survey dump
        - mac80211: fix monitor_sdata RCU/locking assertions
        - net: ipa: HOLB register sometimes must be written twice
        - selftests: gpio: fix gpio compiling error
        - iavf: don't clear a lock we don't hold
        - iavf: Restore VLAN filters after link down
        - bpf: Fix toctou on read-only map's constant scalar tracking
        - udp: Validate checksum in udp_read_sock()
        - btrfs: make 1-bit bit-fields of scrub_page unsigned int
        - net/mlx5e: kTLS, Fix crash in RX resync flow
        - net/mlx5e: Wait for concurrent flow deletion during neigh/fib events
        - net/mlx5: E-Switch, Fix resetting of encap mode when entering switchdev
        - net/mlx5: Update error handler for UCTX and UMEM
        - net/mlx5e: CT, Fix multiple allocations and memleak of mod acts
        - riscv: fix building external modules
        - powerpc: clean vdso32 and vdso64 directories
        - pinctrl: qcom: sm8350: Correct UFS and SDC offsets
        - perf/x86/intel/uncore: Fix IIO event constraints for Snowridge
        - blk-cgroup: fix missing put device in error path from blkg_conf_pref()
        - shm: extend forced shm destroy to support objects from several IPC nses
        - hugetlb, userfaultfd: fix reservation restore on userfaultfd error
        - kmap_local: don't assume kmap PTEs are linear arrays in memory
        - [Config] updateconfigs for KMAP_LOCAL_NON_LINEAR_PTE_ARRAY
        - x86/boot: Pull up cmdline preparation and early param parsing
        - x86/sgx: Fix free page accounting
        - KVM: x86: Assume a 64-bit hypercall for guests with protected state
        - KVM: x86: Fix uninitialized eoi_exit_bitmap usage in vcpu_load_eoi_exitmap()
        - powerpc/signal32: Fix sigset_t copy
        - Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"
        - s390/setup: avoid reserving memory above identity mapping
        - KVM: SEV: Disallow COPY_ENC_CONTEXT_FROM if target has created vCPUs
        - spi: fix use-after-free of the add_lock mutex
        - Drivers: hv: balloon: Use VMBUS_RING_SIZE() wrapper for dm_ring_size
        - fs: handle circular mappings correctly
        - net: stmmac: Fix signed/unsigned wreckage
        - mac80211: drop check for DONT_REORDER in __ieee80211_select_queue
        - drm/amd/display: Limit max DSC target bpp for specific monitors
        - drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
        - drm/i915/dp: Ensure max link params are always valid
        - drm/i915: Fix type1 DVI DP dual mode adapter heuristic for modern platforms
        - drm/amd/pm: avoid duplicate powergate/ungate setting
        - ice: Fix VF true promiscuous mode
        - net: add and use skb_unclone_keeptruesize() helper
    
      * Impish update: upstream stable patchset 2021-12-16 (LP: #1955070)
        - fortify: Explicitly disable Clang support
        - block: Add a helper to validate the block size
        - loop: Use blk_validate_block_size() to validate block size
        - bootconfig: init: Fix memblock leak in xbc_make_cmdline()
        - net: stmmac: dwmac-rk: fix unbalanced pm_runtime_enable warnings
        - parisc/entry: fix trace test in syscall exit path
        - PCI/MSI: Destroy sysfs before freeing entries
        - PCI/MSI: Deal with devices lying about their MSI mask capability
        - PCI: Add MSI masking quirk for Nvidia ION AHCI
        - erofs: remove the occupied parameter from z_erofs_pagevec_enqueue()
        - erofs: fix unsafe pagevec reuse of hooked pclusters
        - perf/core: Avoid put_page() when GUP fails
        - thermal: Fix NULL pointer dereferences in of_thermal_ functions
        - selftests/x86/iopl: Adjust to the faked iopl CLI/STI usage
        - KVM: Fix steal time asm constraints
        - Bluetooth: btusb: Add 0x0b05:0x190e Realtek 8761BU (ASUS BT500) device.
        - Bluetooth: btusb: Add support for TP-Link UB500 Adapter
        - string: uninline memcpy_and_pad
        - btrfs: introduce btrfs_is_data_reloc_root
        - btrfs: zoned: add a dedicated data relocation block group
        - btrfs: zoned: only allow one process to add pages to a relocation inode
        - btrfs: zoned: use regular writes for relocation
        - btrfs: check for relocation inodes on zoned btrfs in should_nocow
        - btrfs: zoned: allow preallocation for relocation inodes
    
      * CVE-2021-4090
        - NFSD: Fix exposure in nfsd4_decode_bitmap()
    
      * AMD: Suspend not working when some cores are disabled through cpufreq
        (LP: #1954930)
        - ACPI: processor idle: Allow playing dead in C3 state
    
      * system crash when removing ipmi_msghandler module (LP: #1950666)
        - ipmi: Move remove_work to dedicated workqueue
        - ipmi: msghandler: Make symbol 'remove_work_wq' static
    
      * [UBUNTU 20.04] KVM hardware diagnose data improvements for guest kernel -
        kernel part (LP: #1953334)
        - KVM: s390: add debug statement for diag 318 CPNC data
    
      * New fix for jack detection after resume on CS8409 sound driver
        (LP: #1954773)
        - ALSA: hda/cs8409: Set PMSG_ON earlier inside cs8409 driver
    
      * s2idle suspend failure: amd_pmc AMDI0005:00: SMU response timed out
        (LP: #1954633)
        - platform/x86: amd-pmc: Fix s2idle failures on certain AMD laptops
    
      * mt7921e: Failed to start WM firmware (LP: #1954300)
        - Bluetooth: btusb: Handle download_firmware failure cases
        - SAUCE: Bluetooth: btusb: Return error code when getting patch status failed
    
      * [SRU][I/J/OEM-5.13/OEM-5.14] Fix pci port lost when hotplug dock
        (LP: #1954646)
        - PCI: Re-enable Downstream Port LTR after reset or hotplug
    
      * [SRU][I/OEM-5.13/OEM-5.14] Fix USB3.1 hotplug after S3 on AMD renoir
        (LP: #1952817)
        - drm/amd/display: Look at firmware version to determine using dmub on dcn21
    
      * Thinkpad E14 Gen2: Kernel panic with trackpad and trackpoint enabled
        (LP: #1945590)
        - Input: elantech - fix stack out of bound access in
          elantech_change_report_id()
    
      * [SRU][Ubuntu 21.10][Broadcom] mpi3mr driver submission request
        (LP: #1933359)
        - scsi: mpi3mr: Add mpi30 Rev-R headers and Kconfig
        - scsi: mpi3mr: Base driver code
        - scsi: mpi3mr: Create operational request and reply queue pair
        - scsi: mpi3mr: Add support for queue command processing
        - scsi: mpi3mr: Add support for internal watchdog thread
        - scsi: mpi3mr: Add support for device add/remove event handling
        - scsi: mpi3mr: Add support for PCIe device event handling
        - scsi: mpi3mr: Additional event handling
        - scsi: mpi3mr: Add support for recovering controller
        - scsi: mpi3mr: Add support for timestamp sync with firmware
        - scsi: mpi3mr: Print IOC info for debugging
        - scsi: mpi3mr: Add bios_param SCSI host template hook
        - scsi: mpi3mr: Implement SCSI error handler hooks
        - scsi: mpi3mr: Add change queue depth support
        - scsi: mpi3mr: Allow certain commands during pci-remove hook
        - scsi: mpi3mr: Hardware workaround for UNMAP commands to NVMe drives
        - scsi: mpi3mr: Add support for threaded ISR
        - scsi: mpi3mr: Complete support for soft reset
        - scsi: mpi3mr: Print pending host I/Os for debugging
        - scsi: mpi3mr: Wait for pending I/O completions upon detection of VD I/O
          timeout
        - scsi: mpi3mr: Add support for PM suspend and resume
        - scsi: mpi3mr: Add support for DSN secure firmware check
        - scsi: mpi3mr: Add EEDP DIF DIX support
        - scsi: mpi3mr: Add event handling debug prints
        - [Config] updateconfigs for CONFIG_SCSI_MPI3MR
    
      * Add F81966 watchdog support (LP: #1949063)
        - SAUCE: watchdog: f71808e_wdt: Add F81966 support
    
      * Impish update: upstream stable patchset 2021-12-09 (LP: #1954337)
        - xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good
          delay
        - usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
        - Input: iforce - fix control-message timeout
        - Input: i8042 - Add quirk for Fujitsu Lifebook T725
        - libata: fix read log timeout value
        - ocfs2: fix data corruption on truncate
        - scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
        - scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
        - scsi: qla2xxx: Fix use after free in eh_abort path
        - mmc: mtk-sd: Add wait dma stop done flow
        - mmc: dw_mmc: Dont wait for DRTO on Write RSP error
        - exfat: fix incorrect loading of i_blocks for large files
        - parisc: Fix set_fixmap() on PA1.x CPUs
        - parisc: Fix ptrace check on syscall return
        - tpm: Check for integer overflow in tpm2_map_response_body()
        - firmware/psci: fix application of sizeof to pointer
        - crypto: s5p-sss - Add error handling in s5p_aes_probe()
        - media: rkvdec: Do not override sizeimage for output format
        - media: ite-cir: IR receiver stop working after receive overflow
        - media: rkvdec: Support dynamic resolution changes
        - media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
        - media: v4l2-ioctl: Fix check_ext_ctrls
        - ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
        - ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
        - ALSA: hda/realtek: Add quirk for Clevo PC70HS
        - ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
        - ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
        - ALSA: hda/realtek: Add quirk for ASUS UX550VE
        - ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
        - ALSA: ua101: fix division by zero at probe
        - ALSA: 6fire: fix control and bulk message timeouts
        - ALSA: line6: fix control and interrupt message timeouts
        - ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
        - ALSA: usb-audio: Add registration quirk for JBL Quantum 400
        - ALSA: hda: Free card instance properly at probe errors
        - ALSA: synth: missing check for possible NULL after the call to kstrdup
        - ALSA: timer: Fix use-after-free problem
        - ALSA: timer: Unconditionally unlink slave instances, too
        - ext4: fix lazy initialization next schedule time computation in more
          granular unit
        - ext4: ensure enough credits in ext4_ext_shift_path_extents
        - ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
        - fuse: fix page stealing
        - x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
        - x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
        - x86/irq: Ensure PI wakeup handler is unregistered before module unload
        - ASoC: soc-core: fix null-ptr-deref in snd_soc_del_component_unlocked()
        - ALSA: hda/realtek: Fixes HP Spectre x360 15-eb1xxx speakers
        - cavium: Return negative value when pci_alloc_irq_vectors() fails
        - scsi: qla2xxx: Return -ENOMEM if kzalloc() fails
        - scsi: qla2xxx: Fix unmap of already freed sgl
        - mISDN: Fix return values of the probe function
        - cavium: Fix return values of the probe function
        - sfc: Export fibre-specific supported link modes
        - sfc: Don't use netif_info before net_device setup
        - hyperv/vmbus: include linux/bitops.h
        - ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode
        - reset: socfpga: add empty driver allowing consumers to probe
        - mmc: winbond: don't build on M68K
        - drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
        - fcnal-test: kill hanging ping/nettest binaries on cleanup
        - bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT
        - bpf: Prevent increasing bpf_jit_limit above max
        - gpio: mlxbf2.c: Add check for bgpio_init failure
        - xen/netfront: stop tx queues during live migration
        - nvmet-tcp: fix a memory leak when releasing a queue
        - spi: spl022: fix Microwire full duplex mode
        - net: multicast: calculate csum of looped-back and forwarded packets
        - watchdog: Fix OMAP watchdog early handling
        - drm: panel-orientation-quirks: Add quirk for GPD Win3
        - block: schedule queue restart after BLK_STS_ZONE_RESOURCE
        - nvmet-tcp: fix header digest verification
        - r8169: Add device 10ec:8162 to driver r8169
        - vmxnet3: do not stop tx queues after netif_device_detach()
        - nfp: bpf: relax prog rejection for mtu check through max_pkt_offset
        - net/smc: Fix smc_link->llc_testlink_time overflow
        - net/smc: Correct spelling mistake to TCPF_SYN_RECV
        - btrfs: clear MISSING device status bit in btrfs_close_one_device
        - btrfs: fix lost error handling when replaying directory deletes
        - btrfs: call btrfs_check_rw_degradable only if there is a missing device
        - KVM: VMX: Unregister posted interrupt wakeup handler on hardware unsetup
        - ia64: kprobes: Fix to pass correct trampoline address to the handler
        - selinux: fix race condition when computing ocontext SIDs
        - hwmon: (pmbus/lm25066) Add offset coefficients
        - regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is
          disabled
        - regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-
          dvs-idx property
        - EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
        - mwifiex: fix division by zero in fw download path
        - ath6kl: fix division by zero in send path
        - ath6kl: fix control-message timeout
        - ath10k: fix control-message timeout
        - ath10k: fix division by zero in send path
        - PCI: Mark Atheros QCA6174 to avoid bus reset
        - rtl8187: fix control-message timeouts
        - evm: mark evm_fixmode as __ro_after_init
        - ifb: Depend on netfilter alternatively to tc
        - wcn36xx: Fix HT40 capability for 2Ghz band
        - wcn36xx: Fix tx_status mechanism
        - wcn36xx: Fix (QoS) null data frame bitrate/modulation
        - PM: sleep: Do not let "syscore" devices runtime-suspend during system
          transitions
        - mwifiex: Read a PCI register after writing the TX ring write pointer
        - mwifiex: Try waking the firmware until we get an interrupt
        - libata: fix checking of DMA state
        - wcn36xx: handle connection loss indication
        - rsi: fix occasional initialisation failure with BT coex
        - rsi: fix key enabled check causing unwanted encryption for vap_id > 0
        - rsi: fix rate mask set leading to P2P failure
        - rsi: Fix module dev_oper_mode parameter description
        - perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server
        - perf/x86/intel/uncore: Fix Intel ICX IIO event constraints
        - RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
        - signal: Remove the bogus sigkill_pending in ptrace_stop
        - memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode
        - signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
        - soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id
        - soc: fsl: dpio: use the combined functions to protect critical zone
        - mtd: rawnand: socrates: Keep the driver compatible with on-die ECC engines
        - power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
        - power: supply: max17042_battery: use VFSOC for capacity when no rsns
        - KVM: arm64: Extract ESR_ELx.EC only
        - KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
        - can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
        - can: j1939: j1939_can_recv(): ignore messages with invalid source address
        - powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
        - ring-buffer: Protect ring_buffer_reset() from reentrancy
        - serial: core: Fix initializing and restoring termios speed
        - ifb: fix building without CONFIG_NET_CLS_ACT
        - ALSA: mixer: oss: Fix racy access to slots
        - ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
        - xen/balloon: add late_initcall_sync() for initial ballooning done
        - ovl: fix use after free in struct ovl_aio_req
        - PCI: pci-bridge-emul: Fix emulation of W1C bits
        - PCI: cadence: Add cdns_plat_pcie_probe() missing return
        - PCI: aardvark: Do not clear status bits of masked interrupts
        - PCI: aardvark: Fix checking for link up via LTSSM state
        - PCI: aardvark: Do not unmask unused interrupts
        - PCI: aardvark: Fix reporting Data Link Layer Link Active
        - PCI: aardvark: Fix configuring Reference clock
        - PCI: aardvark: Fix return value of MSI domain .alloc() method
        - PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
        - PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated
          bridge
        - PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
        - PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
        - PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge
        - quota: check block number when reading the block in quota file
        - quota: correct error number in free_dqentry()
        - pinctrl: core: fix possible memory leak in pinctrl_enable()
        - coresight: cti: Correct the parameter for pm_runtime_put
        - iio: dac: ad5446: Fix ad5622_write() return value
        - iio: ad5770r: make devicetree property reading consistent
        - USB: serial: keyspan: fix memleak on probe errors
        - serial: 8250: fix racy uartclk update
        - most: fix control-message timeouts
        - USB: iowarrior: fix control-message timeouts
        - USB: chipidea: fix interrupt deadlock
        - power: supply: max17042_battery: Clear status bits in interrupt handler
        - dma-buf: WARN on dmabuf release with pending attachments
        - drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
        - drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
        - drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
        - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
        - Bluetooth: fix use-after-free error in lock_sock_nested()
        - drm/panel-orientation-quirks: add Valve Steam Deck
        - rcutorture: Avoid problematic critical section nesting on PREEMPT_RT
        - platform/x86: wmi: do not fail if disabling fails
        - MIPS: lantiq: dma: add small delay after reset
        - MIPS: lantiq: dma: reset correct number of channel
        - locking/lockdep: Avoid RCU-induced noinstr fail
        - net: sched: update default qdisc visibility after Tx queue cnt changes
        - rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop
        - smackfs: Fix use-after-free in netlbl_catmap_walk()
        - ath11k: Align bss_chan_info structure with firmware
        - x86: Increase exception stack sizes
        - mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
        - mwifiex: Properly initialize private structure on interface type changes
        - fscrypt: allow 256-bit master keys with AES-256-XTS
        - drm/amdgpu: Fix MMIO access page fault
        - ath11k: Avoid reg rules update during firmware recovery
        - ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED
        - ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets
        - ath10k: high latency fixes for beacon buffer
        - media: mt9p031: Fix corrupted frame after restarting stream
        - media: netup_unidvb: handle interrupt properly according to the firmware
        - media: atomisp: Fix error handling in probe
        - media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
        - media: uvcvideo: Set capability in s_param
        - media: uvcvideo: Return -EIO for control errors
        - media: uvcvideo: Set unique vdev name based in type
        - media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
        - media: s5p-mfc: Add checking to s5p_mfc_probe().
        - media: imx: set a media_device bus_info string
        - media: mceusb: return without resubmitting URB in case of -EPROTO error.
        - ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
        - rtw88: fix RX clock gate setting while fifo dump
        - brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
        - media: rcar-csi2: Add checking to rcsi2_start_receiver()
        - ipmi: Disable some operations during a panic
        - fs/proc/uptime.c: Fix idle time reporting in /proc/uptime
        - ACPICA: Avoid evaluating methods too early during system resume
        - media: ipu3-imgu: imgu_fmt: Handle properly try
        - media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
        - media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
        - net-sysfs: try not to restart the syscall if it will fail eventually
        - tracefs: Have tracefs directories not set OTH permission bits by default
        - ath: dfs_pattern_detector: Fix possible null-pointer dereference in
          channel_detector_create()
        - mmc: moxart: Fix reference count leaks in moxart_probe
        - iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
        - ACPI: battery: Accept charges over the design capacity as full
        - drm/amdkfd: fix resume error when iommu disabled in Picasso
        - net: phy: micrel: make *-skew-ps check more lenient
        - leaking_addresses: Always print a trailing newline
        - drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()
        - block: bump max plugged deferred size from 16 to 32
        - md: update superblock after changing rdev flags in state_store
        - memstick: r592: Fix a UAF bug when removing the driver
        - lib/xz: Avoid overlapping memcpy() with invalid input with in-place
          decompression
        - lib/xz: Validate the value before assigning it to an enum variable
        - workqueue: make sysfs of unbound kworker cpumask more clever
        - tracing/cfi: Fix cmp_entries_* functions signature mismatch
        - mt76: mt7915: fix an off-by-one bound check
        - mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
        - block: remove inaccurate requeue check
        - media: allegro: ignore interrupt if mailbox is not initialized
        - nvmet: fix use-after-free when a port is removed
        - nvmet-rdma: fix use-after-free when a port is removed
        - nvmet-tcp: fix use-after-free when a port is removed
        - nvme: drop scan_lock and always kick requeue list when removing namespaces
        - PM: hibernate: Get block device exclusively in swsusp_check()
        - selftests: kvm: fix mismatched fclose() after popen()
        - selftests/bpf: Fix perf_buffer test on system with offline cpus
        - iwlwifi: mvm: disable RX-diversity in powersave
        - smackfs: use __GFP_NOFAIL for smk_cipso_doi()
        - ARM: clang: Do not rely on lr register for stacktrace
        - gre/sit: Don't generate link-local addr if addr_gen_mode is
          IN6_ADDR_GEN_MODE_NONE
        - gfs2: Cancel remote delete work asynchronously
        - gfs2: Fix glock_hash_walk bugs
        - ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
        - vrf: run conntrack only in context of lower/physdev for locally generated
          packets
        - net: annotate data-race in neigh_output()
        - ACPI: AC: Quirk GK45 to skip reading _PSR
        - btrfs: reflink: initialize return value to 0 in btrfs_extent_same()
        - btrfs: do not take the uuid_mutex in btrfs_rm_device
        - spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in
          bcm_qspi_probe()
        - wcn36xx: Correct band/freq reporting on RX
        - x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
        - drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled
        - selftests/core: fix conflicting types compile error for close_range()
        - parisc: fix warning in flush_tlb_all
        - task_stack: Fix end_of_stack() for architectures with upwards-growing stack
        - erofs: don't trigger WARN() when decompression fails
        - parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
        - parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
        - netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream
          state
        - selftests/bpf: Fix strobemeta selftest regression
        - Bluetooth: fix init and cleanup of sco_conn.timeout_work
        - rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
        - MIPS: lantiq: dma: fix burst length for DEU
        - x86/xen: Mark cpu_bringup_and_idle() as dead_end_function
        - drm/v3d: fix wait for TMU write combiner flush
        - virtio-gpu: fix possible memory allocation failure
        - lockdep: Let lock_is_held_type() detect recursive read as read
        - net: net_namespace: Fix undefined member in key_remove_domain()
        - cgroup: Make rebind_subsystems() disable v2 controllers all at once
        - wcn36xx: Fix Antenna Diversity Switching
        - wilc1000: fix possible memory leak in cfg_scan_result()
        - Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
        - crypto: caam - disable pkc for non-E SoCs
        - rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
        - net: dsa: rtl8366rb: Fix off-by-one bug
        - ath11k: fix some sleeping in atomic bugs
        - ath11k: Avoid race during regd updates
        - ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status
        - ath11k: Fix memory leak in ath11k_qmi_driver_event_work
        - ath10k: Fix missing frame timestamp for beacon/probe-resp
        - ath10k: sdio: Add missing BH locking around napi_schdule()
        - drm/ttm: stop calling tt_swapin in vm_access
        - arm64: mm: update max_pfn after memory hotplug
        - drm/amdgpu: fix warning for overflow check
        - media: em28xx: add missing em28xx_close_extension
        - media: cxd2880-spi: Fix a null pointer dereference on error handling path
        - media: dvb-usb: fix ununit-value in az6027_rc_query
        - media: v4l2-ioctl: S_CTRL output the right value
        - media: TDA1997x: handle short reads of hdmi info frame.
        - media: mtk-vpu: Fix a resource leak in the error handling path of
          'mtk_vpu_probe()'
        - media: radio-wl1273: Avoid card name truncation
        - media: si470x: Avoid card name truncation
        - media: tm6000: Avoid card name truncation
        - media: cx23885: Fix snd_card_free call on null card pointer
        - kprobes: Do not use local variable when creating debugfs file
        - crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
        - cpuidle: Fix kobject memory leaks in error paths
        - media: em28xx: Don't use ops->suspend if it is NULL
        - ath9k: Fix potential interrupt storm on queue reset
        - PM: EM: Fix inefficient states detection
        - EDAC/amd64: Handle three rank interleaving mode
        - rcu: Always inline rcu_dynticks_task*_{enter,exit}()
        - netfilter: nft_dynset: relax superfluous check on set updates
        - media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
        - crypto: qat - detect PFVF collision after ACK
        - crypto: qat - disregard spurious PFVF interrupts
        - hwrng: mtk - Force runtime pm ops for sleep ops
        - b43legacy: fix a lower bounds test
        - b43: fix a lower bounds test
        - gve: Recover from queue stall due to missed IRQ
        - mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
        - mmc: sdhci-omap: Fix context restore
        - memstick: avoid out-of-range warning
        - memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
        - net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
        - hwmon: Fix possible memleak in __hwmon_device_register()
        - hwmon: (pmbus/lm25066) Let compiler determine outer dimension of
          lm25066_coeff
        - ath10k: fix max antenna gain unit
        - kernel/sched: Fix sched_fork() access an invalid sched_task_group
        - tcp: switch orphan_count to bare per-cpu counters
        - drm/msm: potential error pointer dereference in init()
        - drm/msm: uninitialized variable in msm_gem_import()
        - net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
        - media: ir_toy: assignment to be16 should be of correct type
        - mmc: mxs-mmc: disable regulator on error and in the remove function
        - platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
        - mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi
        - mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
        - mt76: mt7915: fix possible infinite loop release semaphore
        - mt76: mt7915: fix sta_rec_wtbl tag len
        - mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req()
        - rsi: stop thread firstly in rsi_91x_init() error handling
        - mwifiex: Send DELBA requests according to spec
        - net: enetc: unmap DMA in enetc_send_cmd()
        - phy: micrel: ksz8041nl: do not use power down mode
        - nvme-rdma: fix error code in nvme_rdma_setup_ctrl
        - PM: hibernate: fix sparse warnings
        - clocksource/drivers/timer-ti-dm: Select TIMER_OF
        - x86/sev: Fix stack type check in vc_switch_off_ist()
        - drm/msm: Fix potential NULL dereference in DPU SSPP
        - smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
        - KVM: selftests: Fix nested SVM tests when built with clang
        - bpftool: Avoid leaking the JSON writer prepared for program metadata
        - libbpf: Fix overflow in BTF sanity checks
        - libbpf: Fix BTF header parsing checks
        - s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
        - KVM: s390: pv: avoid double free of sida page
        - KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
        - irq: mips: avoid nested irq_enter()
        - tpm: fix Atmel TPM crash caused by too frequent queries
        - tpm_tis_spi: Add missing SPI ID
        - libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED()
        - tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
        - spi: spi-rpc-if: Check return value of rpcif_sw_init()
        - samples/kretprobes: Fix return value if register_kretprobe() failed
        - KVM: s390: Fix handle_sske page fault handling
        - libertas_tf: Fix possible memory leak in probe and disconnect
        - libertas: Fix possible memory leak in probe and disconnect
        - wcn36xx: add proper DMA memory barriers in rx path
        - wcn36xx: Fix discarded frames due to wrong sequence number
        - drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
        - selftests/bpf: Fix fd cleanup in sk_lookup test
        - net: amd-xgbe: Toggle PLL settings during rate change
        - net: phylink: avoid mvneta warning when setting pause parameters
        - crypto: pcrypt - Delay write to padata->info
        - selftests/bpf: Fix fclose/pclose mismatch in test_progs
        - udp6: allow SO_MARK ctrl msg to affect routing
        - ibmvnic: don't stop queue in xmit
        - ibmvnic: Process crqs after enabling interrupts
        - cgroup: Fix rootcg cpu.stat guest double counting
        - bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.
        - bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.
        - of: unittest: fix EXPECT text for gpio hog errors
        - iio: st_sensors: Call st_sensors_power_enable() from bus drivers
        - iio: st_sensors: disable regulators after device unregistration
        - RDMA/rxe: Fix wrong port_cap_flags
        - ARM: dts: BCM5301X: Fix memory nodes names
        - clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
        - ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
        - arm64: dts: rockchip: Fix GPU register width for RK3328
        - ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
        - RDMA/bnxt_re: Fix query SRQ failure
        - arm64: dts: ti: k3-j721e-main: Fix "max-virtual-functions" in PCIe EP nodes
        - arm64: dts: ti: k3-j721e-main: Fix "bus-range" upto 256 bus number for PCIe
        - arm64: dts: meson-g12a: Fix the pwm regulator supply properties
        - arm64: dts: meson-g12b: Fix the pwm regulator supply properties
        - bus: ti-sysc: Fix timekeeping_suspended warning on resume
        - ARM: dts: at91: tse850: the emac<->phy interface is rmii
        - scsi: dc395: Fix error case unwinding
        - MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
        - JFS: fix memleak in jfs_mount
        - arm64: dts: qcom: msm8916: Fix Secondary MI2S bit clock
        - arm64: dts: renesas: beacon: Fix Ethernet PHY mode
        - arm64: dts: qcom: pm8916: Remove wrong reg-names for rtc@6000
        - ALSA: hda: Reduce udelay() at SKL+ position reporting
        - ALSA: hda: Fix hang during shutdown due to link reset
        - ALSA: hda: Use position buffer for SKL+ again
        - soundwire: debugfs: use controller id and link_id for debugfs
        - scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp()
        - driver core: Fix possible memory leak in device_link_add()
        - arm: dts: omap3-gta04a4: accelerometer irq fix
        - ASoC: SOF: topology: do not power down primary core during topology removal
        - soc/tegra: Fix an error handling path in tegra_powergate_power_up()
        - memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
        - clk: at91: check pmc node status before registering syscore ops
        - video: fbdev: chipsfb: use memset_io() instead of memset()
        - powerpc: fix unbalanced node refcount in check_kvm_guest()
        - serial: 8250_dw: Drop wrong use of ACPI_PTR()
        - usb: gadget: hid: fix error code in do_config()
        - power: supply: rt5033_battery: Change voltage values to µV
        - power: supply: max17040: fix null-ptr-deref in max17040_probe()
        - scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
        - RDMA/mlx4: Return missed an error if device doesn't support steering
        - usb: musb: select GENERIC_PHY instead of depending on it
        - staging: most: dim2: do not double-register the same device
        - staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
        - pinctrl: renesas: checker: Fix off-by-one bug in drive register check
        - ARM: dts: stm32: Reduce DHCOR SPI NOR frequency to 50 MHz
        - ARM: dts: stm32: fix SAI sub nodes register range
        - ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
        - ASoC: cs42l42: Correct some register default values
        - ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
        - soc: qcom: rpmhpd: Make power_on actually enable the domain
        - usb: typec: STUSB160X should select REGMAP_I2C
        - iio: adis: do not disabe IRQs in 'adis_init()'
        - scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer
        - serial: imx: fix detach/attach of serial console
        - usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init
        - usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be disabled
        - usb: dwc2: drd: reset current session before setting the new one
        - firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available()
        - soc: qcom: apr: Add of_node_put() before return
        - pinctrl: equilibrium: Fix function addition in multiple groups
        - phy: qcom-qusb2: Fix a memory leak on probe
        - phy: ti: gmii-sel: check of_get_address() for failure
        - phy: qcom-snps: Correct the FSEL_MASK
        - serial: xilinx_uartps: Fix race condition causing stuck TX
        - clk: at91: sam9x60-pll: use DIV_ROUND_CLOSEST_ULL
        - HID: u2fzero: clarify error check and length calculations
        - HID: u2fzero: properly handle timeouts in usb_submit_urb
        - powerpc/44x/fsp2: add missing of_node_put
        - ASoC: cs42l42: Use device_property API instead of of_property
        - ASoC: cs42l42: Correct configuring of switch inversion from ts-inv
        - virtio_ring: check desc == NULL when using indirect with packed
        - mips: cm: Convert to bitfield API to fix out-of-bounds access
        - power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
        - apparmor: fix error check
        - rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
        - nfsd: don't alloc under spinlock in rpc_parse_scope_id
        - i2c: mediatek: fixing the incorrect register offset
        - NFS: Fix dentry verifier races
        - pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
        - drm/plane-helper: fix uninitialized variable reference
        - PCI: aardvark: Don't spam about PIO Response Status
        - PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
        - opp: Fix return in _opp_add_static_v2()
        - NFS: Fix deadlocks in nfs_scan_commit_list()
        - fs: orangefs: fix error return code of orangefs_revalidate_lookup()
        - mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
        - PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation
        - mtd: core: don't remove debugfs directory if device is in use
        - remoteproc: Fix a memory leak in an error handling path in
          'rproc_handle_vdev()'
        - rtc: rv3032: fix error handling in rv3032_clkout_set_rate()
        - dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
        - NFS: Fix up commit deadlocks
        - NFS: Fix an Oops in pnfs_mark_request_commit()
        - Fix user namespace leak
        - auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
        - auxdisplay: ht16k33: Connect backlight to fbdev
        - auxdisplay: ht16k33: Fix frame buffer device blanking
        - soc: fsl: dpaa2-console: free buffer before returning from
          dpaa2_console_read
        - netfilter: nfnetlink_queue: fix OOB when mac header was cleared
        - dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
        - signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
        - m68k: set a default value for MEMORY_RESERVE
        - watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
        - ar7: fix kernel builds for compiler test
        - scsi: qla2xxx: Changes to support FCP2 Target
        - scsi: qla2xxx: Relogin during fabric disturbance
        - scsi: qla2xxx: Fix gnl list corruption
        - scsi: qla2xxx: Turn off target reset during issue_lip
        - NFSv4: Fix a regression in nfs_set_open_stateid_locked()
        - i2c: xlr: Fix a resource leak in the error handling path of
          'xlr_i2c_probe()'
        - xen-pciback: Fix return in pm_ctrl_init()
        - net: davinci_emac: Fix interrupt pacing disable
        - ethtool: fix ethtool msg len calculation for pause stats
        - openrisc: fix SMP tlb flush NULL pointer dereference
        - net: vlan: fix a UAF in vlan_dev_real_dev()
        - ice: Fix replacing VF hardware MAC to existing MAC filter
        - ice: Fix not stopping Tx queues for VFs
        - ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
        - drm/nouveau/svm: Fix refcount leak bug and missing check against null bug
        - net: phy: fix duplex out of sync problem while changing settings
        - bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
        - mfd: core: Add missing of_node_put for loop iteration
        - can: mcp251xfd: mcp251xfd_chip_start(): fix error handling for
          mcp251xfd_chip_rx_int_enable()
        - mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and
          zs_unregister_migration()
        - zram: off by one in read_block_state()
        - perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
        - llc: fix out-of-bound array index in llc_sk_dev_hash()
        - nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
        - arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
        - bpf, sockmap: Remove unhash handler for BPF sockmap usage
        - bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
        - gve: Fix off by one in gve_tx_timeout()
        - seq_file: fix passing wrong private data
        - net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
        - net: hns3: fix kernel crash when unload VF while it is being reset
        - net: hns3: allow configure ETS bandwidth of all TCs
        - net: stmmac: allow a tc-taprio base-time of zero
        - vsock: prevent unnecessary refcnt inc for nonblocking connect
        - net/smc: fix sk_refcnt underflow on linkdown and fallback
        - cxgb4: fix eeprom len when diagnostics not implemented
        - selftests/net: udpgso_bench_rx: fix port argument
        - ARM: 9155/1: fix early early_iounmap()
        - ARM: 9156/1: drop cc-option fallbacks for architecture selection
        - MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL
        - x86/mce: Add errata workaround for Skylake SKX37
        - posix-cpu-timers: Clear task::posix_cputimers_work in copy_process()
        - irqchip/sifive-plic: Fixup EOI failed when masked
        - f2fs: should use GFP_NOFS for directory inodes
        - net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
        - 9p/net: fix missing error check in p9_check_errors
        - memcg: prohibit unconditional exceeding the limit of dying tasks
        - powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC
        - mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
        - mm, oom: do not trigger out_of_memory from the #PF
        - mfd: dln2: Add cell for initializing DLN2 ADC
        - video: backlight: Drop maximum brightness override for brightness zero
        - s390/cio: check the subchannel validity for dev_busid
        - s390/tape: fix timer initialization in tape_std_assign()
        - s390/ap: Fix hanging ioctl caused by orphaned replies
        - s390/cio: make ccw_device_dma_* more robust
        - mtd: rawnand: ams-delta: Keep the driver compatible with on-die ECC engines
        - mtd: rawnand: xway: Keep the driver compatible with on-die ECC engines
        - mtd: rawnand: mpc5121: Keep the driver compatible with on-die ECC engines
        - mtd: rawnand: gpio: Keep the driver compatible with on-die ECC engines
        - mtd: rawnand: pasemi: Keep the driver compatible with on-die ECC engines
        - mtd: rawnand: orion: Keep the driver compatible with on-die ECC engines
        - mtd: rawnand: plat_nand: Keep the driver compatible with on-die ECC engines
        - mtd: rawnand: au1550nd: Keep the driver compatible with on-die ECC engines
        - powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
        - powerpc/85xx: fix timebase sync issue when CONFIG_HOTPLUG_CPU=n
        - drm/sun4i: Fix macros in sun8i_csc.h
        - PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
        - PCI: aardvark: Fix PCIe Max Payload Size setting
        - SUNRPC: Partial revert of commit 6f9f17287e78
        - ath10k: fix invalid dma_addr_t token assignment
        - mmc: moxart: Fix null pointer dereference on pointer host
        - selftests/bpf: Fix also no-alu32 strobemeta selftest
        - arch/cc: Introduce a function to check for confidential computing features
        - x86/sev: Add an x86 version of cc_platform_has()
        - [Config] updateconfigs for ARCH_HAS_CC_PLATFORM
        - x86/sev: Make the #VC exception stacks part of the default stacks storage
        - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not
          run
        - scsi: lpfc: Don't release final kref on Fport node while ABTS outstanding
        - scsi: lpfc: Fix FCP I/O flush functionality for TMF routines
        - ce/gf100: fix incorrect CE0 address calculation on some GPUs
        - x86/insn-eval: Make 0 a valid RIP for insn_get_effective_ip()
        - x86/iopl: Fake iopl(3) CLI/STI usage
        - KVM: arm64: Report corrupted refcount at EL2
        - ASoC: cs42l42: Ensure 0dB full scale volume is used for headsets
        - ptp: fix error print of ptp_kvm on X86_64 platform
        - net: mscc: ocelot: Add of_node_put() before goto
        - spi: altera: Change to dynamic allocation of spi id
        - bpf: Define bpf_jit_alloc_exec_limit for riscv JIT
        - net: hns3: ignore reset event before initialization process is done
        - tools/testing/selftests/vm/split_huge_page_test.c: fix application of sizeof
          to pointer
        - KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ
          handling
        - ipmi:watchdog: Set panic count to proper value on a panic
        - md/raid1: only allocate write behind bio for WriteMostly device
        - platform/surface: aggregator_registry: Add support for Surface Laptop Studio
        - mt76: mt7615: fix skb use-after-free on mac reset
        - HID: surface-hid: Use correct event registry for managing HID events
        - HID: surface-hid: Allow driver matching for target ID 1 devices
        - perf/x86/intel/uncore: Fix invalid unit check
        - soc: samsung: exynos-pmu: Fix compilation when nothing selects
          CONFIG_MFD_CORE
        - iio: core: fix double free in iio_device_unregister_sysfs()
        - KVM: x86: Fix recording of guest steal time / preempted status
        - KVM: nVMX: Handle dynamic MSR intercept toggling
        - cifs: To match file servers, make sure the server hostname matches
        - cifs: set a minimum of 120s for next dns resolution
        - coresight: trbe: Fix incorrect access of the sink specific data
        - coresight: trbe: Defer the probe on offline CPUs
        - iio: buffer: check return value of kstrdup_const()
        - iio: buffer: Fix memory leak in iio_buffers_alloc_sysfs_and_mask()
        - iio: buffer: Fix memory leak in __iio_buffer_alloc_sysfs_and_mask()
        - iio: buffer: Fix memory leak in iio_buffer_register_legacy_sysfs_groups()
        - drivers: iio: dac: ad5766: Fix dt property name
        - Documentation:devicetree:bindings:iio:dac: Fix val
        - crypto: aesni - check walk.nbytes instead of err
        - x86/mm/64: Improve stack overflow warnings
        - spi: Check we have a spi_device_id for each DT compatible
        - drm/amd/display: Fix null pointer dereference for encoders
        - selftests: net: fib_nexthops: Wait before checking reported idle time
        - media: vidtv: Fix memory leak in remove
        - media: videobuf2: rework vb2_mem_ops API
        - media: rcar-vin: Use user provided buffers when starting
        - ice: Move devlink port to PF/VF struct
        - media: imx-jpeg: Fix possible null pointer dereference
        - tracing: Disable "other" permission bits in the tracefs files
        - drm/amd/display: fix null pointer deref when plugging in display
        - thermal/core: Fix null pointer dereference in thermal_release()
        - thermal/drivers/tsens: Add timeout to get_temp_tsens_valid
        - floppy: fix calling platform_device_unregister() on invalid drives
        - locking/rwsem: Disable preemption for spinning region
        - iwlwifi: change all JnP to NO-160 configuration
        - drm/amdgpu/pm: properly handle sclk for profiling modes on vangogh
        - arm64: vdso32: suppress error message for 'make mrproper'
        - can: bittiming: can_fixup_bittiming(): change type of tseg1 and alltseg to
          unsigned int
        - tools/latency-collector: Use correct size when writing queue_full_warning
        - wcn36xx: Fix packet drop on resume
        - Revert "wcn36xx: Enable firmware link monitoring"
        - ftrace: do CPU checking after preemption disabled
        - perf/x86/intel: Fix ICL/SPR INST_RETIRED.PREC_DIST encodings
        - fbdev/efifb: Release PCI device's runtime PM ref during FB destroy
        - drm/bridge: anx7625: Propagate errors from sp_tx_rst_aux()
        - libbpf: Don't crash on object files with no symbol tables
        - objtool: Handle __sanitize_cov*() tail calls
        - net: phylink: don't call netif_carrier_off() with NULL netdev
        - spi: Fixed division by zero warning
        - bnxt_en: Check devlink allocation and registration status
        - qed: Don't ignore devlink allocation failures
        - fortify: Fix dropped strcpy() compile-time write overflow check
        - cfg80211: always free wiphy specific regdomain
        - net: dsa: rtl8366: Fix a bug in deleting VLANs
        - media: meson-ge2d: Fix rotation parameter changes detection in
          'ge2d_s_ctrl()'
        - media: imx258: Fix getting clock frequency
        - media: mtk-vcodec: venc: fix return value when start_streaming fails
        - media: imx-jpeg: Fix the error handling path of 'mxc_jpeg_probe()'
        - media: i2c: ths8200 needs V4L2_ASYNC
        - scs: Release kasan vmalloc poison in scs_free process
        - ath10k: Don't always treat modem stop events as crashes
        - x86/insn: Use get_unaligned() instead of memcpy()
        - crypto: ccree - avoid out-of-range warnings from clang
        - gve: Track RX buffer allocation failures
        - crypto: octeontx2 - set assoclen in aead_do_fallback()
        - thermal/core: fix a UAF bug in __thermal_cooling_device_register()
        - drm/msm: fix potential NULL dereference in cleanup
        - block: ataflop: fix breakage introduced at blk-mq refactoring
        - drm/amdkfd: Fix an inappropriate error handling in allloc memory of gpu
        - mt76: mt7915: fix info leak in mt7915_mcu_set_pre_cal()
        - mt76: connac: fix mt76_connac_gtk_rekey_tlv usage
        - mt76: fix build error implicit enumeration conversion
        - mt76: mt7921: fix survey-dump reporting
        - mt76: mt7921: Fix out of order process by invalid event pkt
        - mt76: mt7915: fix potential overflow of eeprom page index
        - mt76: mt7915: fix bit fields for HT rate idx
        - mt76: mt7921: fix dma hang in rmmod
        - mt76: connac: fix GTK rekey offload failure on WPA mixed mode
        - mt76: overwrite default reg_ops if necessary
        - mt76: mt7921: report HE MU radiotap
        - mt76: mt7921: fix firmware usage of RA info using legacy rates
        - mt76: mt7921: fix kernel warning from cfg80211_calculate_bitrate
        - mt76: mt7921: always wake device if necessary in debugfs
        - mt76: mt7921: fix retrying release semaphore without end
        - mt76: mt7615: fix monitor mode tear down crash
        - mt76: connac: fix possible NULL pointer dereference in
          mt76_connac_get_phy_mode_v2
        - iwlwifi: mvm: reset PM state on unsuccessful resume
        - nbd: Fix use-after-free in pid_show
        - crypto: tcrypt - fix skcipher multi-buffer tests for 1420B blocks
        - libbpf: Fix memory leak in btf__dedup()
        - mt76: mt7615: mt7622: fix ibss and meshpoint
        - mm: add vma_lookup(), update find_vma_intersection() comments
        - s390/gmap: validate VMA in __gmap_zap()
        - s390/mm: validate VMA in PGSTE manipulation functions
        - s390/mm: fix VMA and page table handling code in storage key handling
          functions
        - s390/uv: fully validate the VMA before calling follow_page()
        - ARM: 9142/1: kasan: work around LPAE build warning
        - ath10k: fix module load regression with iram-recovery feature
        - block: ataflop: more blk-mq refactoring fixes
        - blk-cgroup: synchronize blkg creation against policy deactivation
        - bpf: Fixes possible race in update_prog_stats() for 32bit arches
        - wcn36xx: Channel list update before hardware scan
        - selftests/bpf: Fix memory leak in test_ima
        - net: bridge: fix uninitialized variables when BRIDGE_CFM is disabled
        - selftests: net: bridge: update IGMP/MLD membership interval value
        - skmsg: Lose offset info in sk_psock_skb_ingress
        - arm64: dts: meson: sm1: add Ethernet PHY reset line for ODROID-C4/HC4
        - arm64: dts: broadcom: bcm4908: Fix UART clock name
        - scsi: pm80xx: Fix lockup in outbound queue management
        - arm64: dts: ti: j7200-main: Fix "vendor-id"/"device-id" properties of pcie
          node
        - arm64: dts: ti: j7200-main: Fix "bus-range" upto 256 bus number for PCIe
        - soc: qcom: llcc: Disable MMUHWT retention
        - iommu/mediatek: Fix out-of-range warning with clang
        - iommu/dma: Fix arch_sync_dma for map
        - power: reset: at91-reset: check properly the return value of devm_of_iomap
        - scsi: megaraid_sas: Fix concurrent access to ISR between IRQ polling and
          real interrupt
        - powerpc/mem: Fix arch/powerpc/mm/mem.c:53:12: error: no previous prototype
          for 'create_section_mapping'
        - powerpc/paravirt: correct preempt debug splat in vcpu_is_preempted()
        - powerpc/perf: Fix cycles/instructions as PM_CYC/PM_INST_CMPL in power10
        - ARM: dts: stm32: fix STUSB1600 Type-C irq level on stm32mp15xx-dkx
        - ASoC: cs42l42: Always configure both ASP TX channels
        - iio: buffer: Fix double-free in iio_buffers_alloc_sysfs_and_mask()
        - soundwire: bus: stop dereferencing invalid slave pointer
        - scsi: lpfc: Wait for successful restart of SLI3 adapter during host sg_reset
        - powerpc/booke: Disable STRICT_KERNEL_RWX, DEBUG_PAGEALLOC and KFENCE
        - soc: qcom: rpmhpd: fix sm8350_mxc's peer domain
        - arm64: dts: qcom: sdm845: Use RPMH_CE_CLK macro directly
        - arm64: dts: qcom: sdm845: Fix Qualcomm crypto engine bus clock
        - ASoC: topology: Fix stub for snd_soc_tplg_component_remove()
        - phy: Sparx5 Eth SerDes: Fix return value check in sparx5_serdes_probe()
        - clk: at91: clk-master: check if div or pres is zero
        - clk: at91: clk-master: fix prescaler logic
        - powerpc/nohash: Fix __ptep_set_access_flags() and ptep_set_wrprotect()
        - RDMA/hns: Modify the value of MAX_LP_MSG_LEN to meet hardware compatibility
        - serial: cpm_uart: Protect udbg definitions by CONFIG_SERIAL_CPM_CONSOLE
        - RDMA/core: Require the driver to set the IOVA correctly during rereg_mr
        - mtd: rawnand: intel: Fix potential buffer overflow in probe
        - NFS: Default change_attr_type to NFS4_CHANGE_TYPE_IS_UNDEFINED
        - NFS: Don't set NFS_INO_DATA_INVAL_DEFER and NFS_INO_INVALID_DATA
        - NFS: Ignore the directory size when marking for revalidation
        - drm/bridge/lontium-lt9611uxc: fix provided connector suport
        - Input: st1232 - increase "wait ready" timeout
        - dmaengine: at_xdmac: call at_xdmac_axi_config() on resume path
        - dmaengine: stm32-dma: fix stm32_dma_get_max_width
        - scsi: target: core: Remove from tmr_list during LUN unlink
        - gpio: realtek-otto: fix GPIO line IRQ offset
        - nbd: fix max value for 'first_minor'
        - nbd: fix possible overflow for 'first_minor' in nbd_dev_add()
        - kselftests/net: add missed icmp.sh test to Makefile
        - net: dsa: tag_ocelot: break circular dependency with ocelot switch lib
          driver
        - net: dsa: felix: fix broken VLAN-tagged PTP under VLAN-aware bridge
        - PCI: j721e: Fix j721e_pcie_probe() error path
        - nvdimm/btt: do not call del_gendisk() if not needed
        - block/ataflop: use the blk_cleanup_disk() helper
        - block/ataflop: add registration bool before calling del_gendisk()
        - block/ataflop: provide a helper for cleanup up an atari disk
        - ataflop: remove ataflop_probe_lock mutex
        - mfd: altera-sysmgr: Fix a mistake caused by resource_size conversion
        - can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path
        - arm64: arm64_ftr_reg->name may not be a human-readable string
        - bpf, sockmap: sk_skb data_end access incorrect when src_reg = dst_reg
        - dmaengine: stm32-dma: fix burst in case of unaligned memory address
        - drm/i915/fb: Fix rounding error in subsampled plane size calculation
        - net: dsa: mv88e6xxx: Don't support >1G speeds on 6191X on ports other than
          10
        - net: hns3: fix ROCE base interrupt vector initialization bug
        - net: hns3: fix pfc packet number incorrect after querying pfc parameters
        - net: ethernet: ti: cpsw_ale: Fix access to un-initialized memory
        - net: marvell: mvpp2: Fix wrong SerDes reconfiguration order
        - smb3: do not error on fsync when readonly
        - parisc: Fix backtrace to always include init funtion names
        - parisc: Flush kernel data mapping in set_pte_at() when installing pte for
          user page
        - MIPS: fix duplicated slashes for Platform file path
        - KVM: x86: move guest_pv_has out of user_access section
        - f2fs: include non-compressed blocks in compr_written_block
        - f2fs: fix UAF in f2fs_available_free_memory
        - dmaengine: ti: k3-udma: Set bchan to NULL if a channel request fail
        - dmaengine: ti: k3-udma: Set r/tchan or rflow to NULL if request fail
        - dmaengine: bestcomm: fix system boot lockups
        - mm/filemap.c: remove bogus VM_BUG_ON
        - io-wq: fix queue stalling race
        - io-wq: serialize hash clear with wakeup
        - PM: sleep: Avoid calling put_device() under dpm_list_mtx
        - remoteproc: elf_loader: Fix loading segment when is_iomem true
        - remoteproc: Fix the wrong default value of is_iomem
        - remoteproc: imx_rproc: Fix ignoring mapping vdev regions
        - remoteproc: imx_rproc: Fix rsc-table name
        - mtd: rawnand: fsmc: Fix use of SM ORDER
        - powerpc/32e: Ignore ESR in instruction storage interrupt handler
        - powerpc/pseries/mobility: ignore ibm, platform-facilities updates
        - pinctrl: amd: Add irq field data
        - media: videobuf2: always set buffer vb2 pointer
    
      * Faulty Elantech Trackpoint firmware unusable as it causes sudden cursor jump
        to an edge/corner on Lenovo Thinkpad X13, T14s, A475 --> Apply kernel patch
        to mitigate the FW bug  (LP: #1936295) // Impish update: upstream stable
        patchset 2021-12-09 (LP: #1954337)
        - Input: elantench - fix misreporting trackpoint coordinates
    
      * Impish update: upstream stable patchset 2021-11-29 (LP: #1952665)
        - ARM: 9132/1: Fix __get_user_check failure with ARM KASAN images
        - ARM: 9133/1: mm: proc-macros: ensure *_tlb_fns are 4B aligned
        - ARM: 9134/1: remove duplicate memcpy() definition
        - ARM: 9138/1: fix link warning with XIP + frame-pointer
        - ARM: 9139/1: kprobes: fix arch_init_kprobes() prototype
        - ARM: 9141/1: only warn about XIP address when not compile testing
        - usbnet: sanity check for maxpacket
        - usbnet: fix error return code in usbnet_probe()
        - Revert "pinctrl: bcm: ns: support updated DT binding as syscon subnode"
        - pinctrl: amd: disable and mask interrupts on probe
        - ata: sata_mv: Fix the error handling of mv_chip_id()
        - nfc: port100: fix using -ERRNO as command type mask
        - net/tls: Fix flipped sign in tls_err_abort() calls
        - mmc: vub300: fix control-message timeouts
        - mmc: cqhci: clear HALT state after CQE enable
        - mmc: mediatek: Move cqhci init behind ungate clock
        - mmc: dw_mmc: exynos: fix the finding clock sample value
        - mmc: sdhci: Map more voltage level to SDHCI_POWER_330
        - mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning
          circuit
        - ocfs2: fix race between searching chunks and release journal_head from
          buffer_head
        - nvme-tcp: fix H2CData PDU send accounting (again)
        - cfg80211: scan: fix RCU in cfg80211_add_nontrans_list()
        - cfg80211: fix management registrations locking
        - net: lan78xx: fix division by zero in send path
        - mm, thp: bail out early in collapse_file for writeback page
        - drm/amdgpu: fix out of bounds write
        - cgroup: Fix memory leak caused by missing cgroup_bpf_offline
        - riscv, bpf: Fix potential NULL dereference
        - tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function
        - bpf: Fix potential race in tail call compatibility check
        - bpf: Fix error usage of map_fd and fdget() in generic_map_update_batch()
        - IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
        - IB/hfi1: Fix abba locking issue with sc_disable()
        - nvmet-tcp: fix data digest pointer calculation
        - nvme-tcp: fix data digest pointer calculation
        - nvme-tcp: fix possible req->offset corruption
        - octeontx2-af: Display all enabled PF VF rsrc_alloc entries.
        - RDMA/mlx5: Set user priority for DCT
        - arm64: dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node
        - reset: brcmstb-rescal: fix incorrect polarity of status bit
        - regmap: Fix possible double-free in regcache_rbtree_exit()
        - net: batman-adv: fix error handling
        - net-sysfs: initialize uid and gid before calling net_ns_get_ownership
        - cfg80211: correct bridge/4addr mode check
        - net: Prevent infinite while loop in skb_tx_hash()
        - RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string
        - gpio: xgs-iproc: fix parsing of ngpios property
        - nios2: Make NIOS2_DTB_SOURCE_BOOL depend on !COMPILE_TEST
        - mlxsw: pci: Recycle received packet upon allocation failure
        - net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume
          fails
        - net: ethernet: microchip: lan743x: Fix dma allocation failure by using
          dma_set_mask_and_coherent
        - net: nxp: lpc_eth.c: avoid hang when bringing interface down
        - net/tls: Fix flipped sign in async_wait.err assignment
        - phy: phy_ethtool_ksettings_get: Lock the phy for consistency
        - phy: phy_ethtool_ksettings_set: Move after phy_start_aneg
        - phy: phy_start_aneg: Add an unlocked version
        - phy: phy_ethtool_ksettings_set: Lock the PHY while changing settings
        - sctp: use init_tag from inithdr for ABORT chunk
        - sctp: fix the processing for INIT_ACK chunk
        - sctp: fix the processing for COOKIE_ECHO chunk
        - sctp: add vtag check in sctp_sf_violation
        - sctp: add vtag check in sctp_sf_do_8_5_1_E_sa
        - sctp: add vtag check in sctp_sf_ootb
        - KVM: s390: clear kicked_mask before sleeping again
        - KVM: s390: preserve deliverable_mask in __airqs_kick_single_vcpu
        - scsi: ufs: ufs-exynos: Correct timeout value setting registers
        - riscv: fix misalgned trap vector base address
        - riscv: Fix asan-stack clang build
        - perf script: Check session->header.env.arch before using it
        - mmc: tmio: reenable card irqs after the reset callback
        - mmc: sdhci-pci: Read card detect from ACPI for Intel Merrifield
        - block: Fix partition check for host-aware zoned block devices
        - ftrace/nds32: Update the proto for ftrace_trace_function to match
          ftrace_stub
        - mm: hwpoison: remove the unnecessary THP check
        - mm: filemap: check if THP has hwpoisoned subpage for PMD page fault
        - arm64: dts: imx8mm-kontron: Fix polarity of reg_rst_eth2
        - arm64: dts: imx8mm-kontron: Fix CAN SPI clock frequency
        - arm64: dts: imx8mm-kontron: Fix connection type for VSC8531 RGMII PHY
        - arm64: dts: imx8mm-kontron: Set lower limit of VDD_SNVS to 800 mV
        - arm64: dts: imx8mm-kontron: Make sure SOC and DRAM supply voltages are
          correct
        - mac80211: mesh: fix HE operation element length check
        - drm/ttm: fix memleak in ttm_transfered_destroy
        - drm/i915: Convert unconditional clflush to drm_clflush_virt_range()
        - drm/i915: Catch yet another unconditioal clflush
        - drm/i915/dp: Skip the HW readout of DPCD on disabled encoders
        - octeontx2-af: Fix possible null pointer dereference.
        - ice: Respond to a NETDEV_UNREGISTER event for LAG
        - RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR
        - net: hns3: fix pause config problem after autoneg disabled
        - net: ethernet: microchip: lan743x: Fix skb allocation failure
        - sctp: fix the processing for INIT chunk
        - bpf: Use kvmalloc for map values in syscall
        - bpf: Move BPF_MAP_TYPE for INODE_STORAGE and TASK_STORAGE outside of
          CONFIG_NET
        - perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
        - scsi: ibmvfc: Fix up duplicate response detection
        - riscv: Do not re-populate shadow memory with kasan_populate_early_shadow
        - KVM: x86: switch pvclock_gtod_sync_lock to a raw spinlock
        - KVM: SEV-ES: fix another issue with string I/O VMGEXITs
        - KVM: x86: Take srcu lock in post_kvm_run_save()
        - scsi: core: Put LLD module refcnt after SCSI device is released
        - sfc: Fix reading non-legacy supported link modes
        - vrf: Revert "Reset skb conntrack connection..."
        - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
        - Revert "xhci: Set HCD flag to defer primary roothub registration"
        - Revert "usb: core: hcd: Add support for deferring roothub registration"
        - mm: khugepaged: skip huge page collapse for special files
        - Revert "drm/ttm: fix memleak in ttm_transfered_destroy"
        - ARM: 9120/1: Revert "amba: make use of -1 IRQs warn"
        - Revert "wcn36xx: Disable bmps when encryption is disabled"
        - ALSA: usb-audio: Add Schiit Hel device to mixer map quirk table
        - ALSA: usb-audio: Add Audient iD14 to mixer map quirk table
        - drm/amdkfd: fix boot failure when iommu is disabled in Picasso.
        - drm/i915: Remove memory frequency calculation
        - drm/amdgpu: revert "Add autodump debugfs node for gpu reset v8"
        - drm/amd/display: Revert "Directly retrain link from debugfs"
        - Revert "drm/i915/gt: Propagate change in error status to children on unhold"
        - KVM: x86/mmu: Add helpers to do full reserved SPTE checks w/ generic MMU
        - KVM: x86: avoid warning with -Wbitwise-instead-of-logical
        - Revert "x86/kvm: fix vcpu-id indexed array sizes"
        - usb: ehci: handshake CMD_RUN instead of STS_HALT
        - usb: gadget: Mark USB_FSL_QE broken on 64-bit
        - usb: musb: Balance list entry in musb_gadget_queue
        - usb-storage: Add compatibility quirk flags for iODD 2531/2541
        - binder: don't detect sender/target during buffer cleanup
        - staging: rtl8712: fix use-after-free in rtl8712_dl_fw
        - isofs: Fix out of bound access for corrupted isofs image
        - comedi: dt9812: fix DMA buffers on stack
        - comedi: ni_usb6501: fix NULL-deref in command paths
        - comedi: vmk80xx: fix transfer-buffer overflows
        - comedi: vmk80xx: fix bulk-buffer overflow
        - comedi: vmk80xx: fix bulk and interrupt message timeouts
        - staging: r8712u: fix control-message timeout
        - staging: rtl8192u: fix control-message timeouts
        - media: staging/intel-ipu3: css: Fix wrong size comparison imgu_css_fw_init
        - rsi: fix control-message timeout
        - ALSA: pcm: Check mmap capability of runtime dma buffer at first
        - ALSA: pci: cs46xx: Fix set up buffer type properly
        - Revert "proc/wchan: use printk format instead of lookup_symbol_name()"
        - binder: use euid from cred instead of using task
    
      * Impish update: upstream stable patchset 2021-11-29 (LP: #1952665) //
        CVE-2021-42327 was fixed by:
        - drm/amdgpu: Fix even more out of bound writes from debugfs
    
     -- Kelsey Skunberg <email address hidden>  Tue, 04 Jan 2022 16:46:27 -0700
  • linux (5.13.0-23.23) impish; urgency=medium
    
      * impish/linux: 5.13.0-23.23 -proposed tracker (LP: #1952263)
    
      * Packaging resync (LP: #1786013)
        - [Packaging] resync update-dkms-versions helper
        - debian/dkms-versions -- update from kernel-versions (main/2021.11.29)
    
      * CVE-2021-4002
        - hugetlbfs: flush TLBs correctly after huge_pmd_unshare
    
      * [SRU][I/OEM-5.13/OEM-5.14] Add MAC passthrough support for more Lenovo docks
        (LP: #1951767)
        - net: usb: r8152: Add MAC passthrough support for more Lenovo Docks
    
      * Fix non-working e1000e device after resume (LP: #1951861)
        - SAUCE: Revert "e1000e: Additional PHY power saving in S0ix"
        - SAUCE: Revert "e1000e: Add polling mechanism to indicate CSME DPG exit"
        - SAUCE: Revert "e1000e: Add handshake with the CSME to support S0ix"
    
      * CVE-2021-43267
        - tipc: fix size validations for the MSG_CRYPTO type
    
      * Impish update: upstream stable patchset 2021-11-22 (LP: #1951880)
        - ext4: check and update i_disksize properly
        - ext4: correct the error path of ext4_write_inline_data_end()
        - ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic
        - HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS
        - netfilter: ip6_tables: zero-initialize fragment offset
        - HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs
        - ASoC: SOF: loader: release_firmware() on load failure to avoid batching
        - netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic
        - netfilter: nf_nat_masquerade: defer conntrack walk to work queue
        - mac80211: Drop frames from invalid MAC address in ad-hoc mode
        - m68k: Handle arrivals of multiple signals correctly
        - hwmon: (ltc2947) Properly handle errors when looking for the external clock
        - net: prevent user from passing illegal stab size
        - mac80211: check return value of rhashtable_init
        - vboxfs: fix broken legacy mount signature checking
        - net: sun: SUNVNET_COMMON should depend on INET
        - drm/amdgpu: fix gart.bo pin_count leak
        - scsi: ses: Fix unsigned comparison with less than zero
        - scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported"
        - perf/core: fix userpage->time_enabled of inactive events
        - sched: Always inline is_percpu_thread()
        - hwmon: (pmbus/ibm-cffps) max_power_out swap changes
        - ALSA: usb-audio: Unify mixer resume and reset_resume procedure
        - KVM: arm64: nvhe: Fix missing FORCE for hyp-reloc.S build rule
        - pinctrl: qcom: sc7280: Add PM suspend callbacks
        - net: bgmac-platform: handle mac-address deferral
        - scsi: qla2xxx: Fix excessive messages during device logout
        - io_uring: kill fasync
        - upstream stable to v5.10.74, v5.14.13
        - ALSA: usb-audio: Add quirk for VF0770
        - ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat ioctl
        - ALSA: seq: Fix a potential UAF by wrong private_free call order
        - ALSA: hda/realtek: Enable 4-speaker output for Dell Precision 5560 laptop
        - ALSA: hda - Enable headphone mic on Dell Latitude laptops with ALC3254
        - ALSA: hda/realtek: Complete partial device name to avoid ambiguity
        - ALSA: hda/realtek: Add quirk for Clevo X170KM-G
        - ALSA: hda/realtek - ALC236 headset MIC recording issue
        - ALSA: hda/realtek: Add quirk for TongFang PHxTxX1
        - ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW
        - nds32/ftrace: Fix Error: invalid operands (*UND* and *UND* sections) for `^'
        - s390: fix strrchr() implementation
        - clk: socfpga: agilex: fix duplicate s2f_user0_clk
        - csky: don't let sigreturn play with priveleged bits of status register
        - csky: Fixup regs.sr broken in ptrace
        - arm64/hugetlb: fix CMA gigantic page order for non-4K PAGE_SIZE
        - drm/msm: Avoid potential overflow in timeout_to_jiffies()
        - btrfs: unlock newly allocated extent buffer after error
        - btrfs: deal with errors when replaying dir entry during log replay
        - btrfs: deal with errors when adding inode reference during log replay
        - btrfs: check for error when looking up inode during dir entry replay
        - btrfs: update refs for any root except tree log roots
        - btrfs: fix abort logic in btrfs_replace_file_extents
        - x86/resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails
        - mei: me: add Ice Lake-N device id.
        - USB: xhci: dbc: fix tty registration race
        - xhci: guard accesses to ep_state in xhci_endpoint_reset()
        - xhci: Fix command ring pointer corruption while aborting a command
        - xhci: Enable trust tx length quirk for Fresco FL11 USB controller
        - cb710: avoid NULL pointer subtraction
        - efi/cper: use stack buffer for error record decoding
        - efi: Change down_interruptible() in virt_efi_reset_system() to
          down_trylock()
        - usb: musb: dsps: Fix the probe error path
        - Input: xpad - add support for another USB ID of Nacon GC-100
        - USB: serial: qcserial: add EM9191 QDL support
        - USB: serial: option: add Quectel EC200S-CN module support
        - USB: serial: option: add Telit LE910Cx composition 0x1204
        - USB: serial: option: add prod. id for Quectel EG91
        - misc: fastrpc: Add missing lock before accessing find_vma()
        - EDAC/armada-xp: Fix output of uncorrectable error counter
        - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
        - x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically
        - powerpc/xive: Discard disabled interrupts in get_irqchip_state()
        - iio: adc: aspeed: set driver data when adc probe.
        - drivers: bus: simple-pm-bus: Add support for probing simple bus only devices
        - driver core: Reject pointless SYNC_STATE_ONLY device links
        - iio: adc: ad7192: Add IRQ flag
        - iio: adc: ad7780: Fix IRQ flag
        - iio: adc: ad7793: Fix IRQ flag
        - iio: adc128s052: Fix the error handling path of 'adc128_probe()'
        - iio: adc: max1027: Fix wrong shift with 12-bit devices
        - iio: mtk-auxadc: fix case IIO_CHAN_INFO_PROCESSED
        - iio: light: opt3001: Fixed timeout error when 0 lux
        - iio: adc: max1027: Fix the number of max1X31 channels
        - iio: ssp_sensors: add more range checking in ssp_parse_dataframe()
        - iio: ssp_sensors: fix error code in ssp_print_mcu_debug()
        - iio: dac: ti-dac5571: fix an error code in probe()
        - tee: optee: Fix missing devices unregister during optee_remove
        - ARM: dts: bcm2711-rpi-4-b: Fix usb's unit address
        - ARM: dts: bcm2711: fix MDIO #address- and #size-cells
        - ARM: dts: bcm2711-rpi-4-b: fix sd_io_1v8_reg regulator states
        - ARM: dts: bcm2711-rpi-4-b: Fix pcie0's unit address formatting
        - nvme-pci: Fix abort command id
        - sctp: account stream padding length for reconf chunk
        - gpio: pca953x: Improve bias setting
        - net: arc: select CRC32
        - net: korina: select CRC32
        - net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
        - net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp
        - net: stmmac: fix get_hw_feature() on old hardware
        - net: dsa: microchip: Added the condition for scheduling ksz_mib_read_work
        - net: encx24j600: check error in devm_regmap_init_encx24j600
        - ethernet: s2io: fix setting mac address during resume
        - vhost-vdpa: Fix the wrong input in config_cb
        - nfc: fix error handling of nfc_proto_register()
        - NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
        - NFC: digital: fix possible memory leak in digital_in_send_sdd_req()
        - pata_legacy: fix a couple uninitialized variable bugs
        - ata: ahci_platform: fix null-ptr-deref in ahci_platform_enable_regulators()
        - mlxsw: thermal: Fix out-of-bounds memory accesses
        - platform/mellanox: mlxreg-io: Fix argument base in kstrtou32() call
        - platform/mellanox: mlxreg-io: Fix read access of n-bytes size attributes
        - spi: bcm-qspi: clear MSPI spifie interrupt during probe
        - drm/panel: olimex-lcd-olinuxino: select CRC32
        - drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read
        - drm/msm: Fix null pointer dereference on pointer edp
        - drm/msm/mdp5: fix cursor-related warnings
        - drm/msm/a6xx: Track current ctx by seqno
        - drm/msm/dsi: Fix an error code in msm_dsi_modeset_init()
        - drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling
        - acpi/arm64: fix next_platform_timer() section mismatch error
        - platform/x86: intel_scu_ipc: Fix busy loop expiry time
        - mqprio: Correct stats in mqprio_dump_class_stats().
        - qed: Fix missing error code in qed_slowpath_start()
        - r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256
        - nfp: flow_offload: move flow_indr_dev_register from app init to app start
        - net: mscc: ocelot: warn when a PTP IRQ is raised for an unknown skb
        - ionic: don't remove netdev->dev_addr when syncing uc list
        - net: dsa: mv88e6xxx: don't use PHY_DETECT on internal PHY's
        - platform/x86: gigabyte-wmi: add support for B550 AORUS ELITE AX V2
        - platform/x86: amd-pmc: Add alternative acpi id for PMC controller
        - mtd: rawnand: qcom: Update code word value for raw read
        - dm: fix mempool NULL pointer race when completing IO
        - drm/nouveau/fifo: Reinstate the correct engine bit programming
        - module: fix clang CFI with MODULE_UNLOAD=n
        - mei: hbm: drop hbm responses on early shutdown
        - xhci: add quirk for host controllers that don't update endpoint DCS
        - virtio-blk: remove unneeded "likely" statements
        - iio: adis16480: fix devices that do not support sleep mode
        - iio: adis16475: fix deadlock on frequency set
        - net/smc: improved fix wait on already cleared link
        - net/mlx5e: Switchdev representors are not vlan challenged
        - net: phy: Do not shutdown PHYs in READY state
        - net: dsa: fix spurious error message when unoffloaded port leaves bridge
        - drm/msm/submit: fix overflow check on 64-bit architectures
        - drm/msm/a4xx: fix error handling in a4xx_gpu_init()
        - drm/msm/a3xx: fix error handling in a3xx_gpu_init()
        - drm/msm/dsi: dsi_phy_14nm: Take ready-bit into account in poll_for_ready
        - block/rnbd-clt-sysfs: fix a couple uninitialized variable bugs
        - net: mscc: ocelot: make use of all 63 PTP timestamp identifiers
        - net: mscc: ocelot: avoid overflowing the PTP timestamp FIFO
        - net: mscc: ocelot: deny TX timestamping of non-PTP packets
        - net: mscc: ocelot: cross-check the sequence id from the timestamp FIFO with
          the skb PTP header
        - net: dsa: felix: break at first CPU port during init and teardown
        - parisc: math-emu: Fix fall-through warnings
        - arm: dts: vexpress-v2p-ca9: Fix the SMB unit-address
        - ARM: dts: at91: sama5d2_som1_ek: disable ISC node by default
        - block: decode QUEUE_FLAG_HCTX_ACTIVE in debugfs output
        - xen/x86: prevent PVH type from getting clobbered
        - drm/amdgpu/display: fix dependencies for DRM_AMD_DC_SI
        - xtensa: xtfpga: use CONFIG_USE_OF instead of CONFIG_OF
        - xtensa: xtfpga: Try software restart before simulating CPU reset
        - NFSD: Keep existing listeners on portlist error
        - netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage
          value
        - dma-debug: fix sg checks in debug_dma_map_sg()
        - ASoC: wm8960: Fix clock configuration on slave mode
        - ice: fix getting UDP tunnel entry
        - netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6
        - netfilter: ipvs: make global sysctl readonly in non-init netns
        - lan78xx: select CRC32
        - tcp: md5: Fix overlap between vrf and non-vrf keys
        - ipv6: When forwarding count rx stats on the orig netdev
        - net: dsa: lantiq_gswip: fix register definition
        - NIOS2: irqflags: rename a redefined register name
        - powerpc/smp: do not decrement idle task preempt count in CPU offline
        - net: hns3: reset DWRR of unused tc to zero
        - net: hns3: add limit ets dwrr bandwidth cannot be 0
        - net: hns3: schedule the polling again when allocation fails
        - net: hns3: fix vf reset workqueue cannot exit
        - net: hns3: disable sriov before unload hclge layer
        - net: stmmac: Fix E2E delay mechanism
        - e1000e: Fix packet loss on Tiger Lake and later
        - ice: Add missing E810 device ids
        - drm/panel: ilitek-ili9881c: Fix sync for Feixin K101-IM2BYL02 panel
        - net: enetc: fix ethtool counter name for PM0_TERR
        - can: rcar_can: fix suspend/resume
        - can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state
          notification
        - can: peak_pci: peak_pci_remove(): fix UAF
        - can: isotp: isotp_sendmsg(): fix return error on FC timeout on TX path
        - can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible()
        - can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer
        - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
        - can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with
          error length
        - can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes
        - ceph: skip existing superblocks that are blocklisted or shut down when
          mounting
        - ceph: fix handling of "meta" errors
        - ocfs2: fix data corruption after conversion from inline format
        - ocfs2: mount fails with buffer overflow in strlen
        - userfaultfd: fix a race between writeprotect and exit_mmap()
        - elfcore: correct reference to CONFIG_UML
        - ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset
        - ALSA: hda/realtek: Add quirk for Clevo PC50HS
        - ASoC: DAPM: Fix missing kctl change notifications
        - audit: fix possible null-pointer dereference in audit_filter_rules
        - net: dsa: mt7530: correct ds->num_ports
        - KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest()
        - KVM: PPC: Book3S HV: Make idle_kvm_start_guest() return 0 if it went to
          guest
        - powerpc/idle: Don't corrupt back chain when going idle
        - mm, slub: fix mismatch between reconstructed freelist depth and cnt
        - mm, slub: fix potential memoryleak in kmem_cache_open()
        - mm, slub: fix incorrect memcg slab count for bulk free
        - KVM: nVMX: promptly process interrupts delivered while in guest mode
        - nfc: nci: fix the UAF of rf_conn_info object
        - isdn: cpai: check ctr->cnr to avoid array index out of bound
        - netfilter: Kconfig: use 'default y' instead of 'm' for bool config option
        - selftests: netfilter: remove stray bash debug line
        - net: bridge: mcast: use multicast_membership_interval for IGMPv3
        - drm: mxsfb: Fix NULL pointer dereference crash on unload
        - net: hns3: fix the max tx size according to user manual
        - gcc-plugins/structleak: add makefile var for disabling structleak
        - btrfs: deal with errors when checking if a dir entry exists during log
          replay
        - net: stmmac: add support for dwmac 3.40a
        - ARM: dts: spear3xx: Fix gmac node
        - isdn: mISDN: Fix sleeping function called from invalid context
        - platform/x86: intel_scu_ipc: Update timeout value in comment
        - ALSA: hda: avoid write to STATESTS if controller is in reset
        - libperf tests: Fix test_stat_cpu
        - perf/x86/msr: Add Sapphire Rapids CPU support
        - Input: snvs_pwrkey - add clk handling
        - scsi: iscsi: Fix set_param() handling
        - scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()
        - sched/scs: Reset the shadow stack when idle_task_exit
        - net: hns3: fix for miscalculation of rx unused desc
        - scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma()
        - can: isotp: isotp_sendmsg(): fix TX buffer concurrent access in
          isotp_sendmsg()
        - s390/pci: fix zpci_zdev_put() on reserve
        - bpf, test, cgroup: Use sk_{alloc,free} for test cases
        - tracing: Have all levels of checks prevent recursion
        - e1000e: Separate TGP board type from SPT
        - selftests: bpf: fix backported ASSERT_FALSE
        - ARM: 9122/1: select HAVE_FUTEX_CMPXCHG
        - pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume()
        - r8152: avoid to resubmit rx immediately
        - drm/amdgpu: init iommu after amdkfd device init
        - powerpc/lib: Add helper to check if offset is within conditional branch
          range
        - powerpc/bpf: Validate branch ranges
        - powerpc/security: Add a helper to query stf_barrier type
        - ASoC: pcm512x: Mend accesses to the I2S_1 and I2S_2 registers
        - ASoC: fsl_xcvr: Fix channel swap issue with ARC
        - netfilter: nf_tables: skip netdev events generated on netns removal
        - ice: Print the api_patch as part of the fw.mgmt.api
        - sctp: fix transport encap_port update in sctp_vtag_verify
        - net/sched: act_ct: Fix byte count on fragmented packets
        - net: dsa: Fix an error handling path in 'dsa_switch_parse_ports_of()'
        - net: hns3: Add configuration of TM QCN error event
        - igc: Update I226_K device ID
        - drm/kmb: Work around for higher system clock
        - drm/kmb: Remove clearing DPHY regs
        - drm/kmb: Disable change of plane parameters
        - drm/kmb: Corrected typo in handle_lcd_irq
        - drm/kmb: Enable ADV bridge after modeset
        - net: enetc: make sure all traffic classes can send large frames
        - blk-cgroup: blk_cgroup_bio_start() should use irq-safe operations on
          blkg->iostat_cpu
        - ucounts: Move get_ucounts from cred_alloc_blank to
          key_change_session_keyring
        - ucounts: Proper error handling in set_cred_ucounts
        - KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA
        - KVM: SEV-ES: rename guest_ins_data to sev_pio_data
        - KVM: SEV-ES: clean up kvm_sev_es_ins/outs
        - KVM: SEV-ES: keep INS functions together
        - KVM: SEV-ES: fix length of string I/O
        - KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed
        - KVM: SEV-ES: reduce ghcb_sa_len to 32 bits
        - KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out
        - KVM: x86: check for interrupts before deciding whether to exit the fast path
        - KVM: x86: split the two parts of emulator_pio_in
        - KVM: x86: remove unnecessary arguments from complete_emulator_pio_in
        - KVM: SEV-ES: Set guest_state_protected after VMSA update
        - drm/msm/a6xx: Serialize GMU communication
        - iio/test-format: build kunit tests without structleak plugin
        - device property: build kunit tests without structleak plugin
        - thunderbolt: build kunit tests without structleak plugin
        - bitfield: build kunit tests without structleak plugin
        - objtool: Check for gelf_update_rel[a] failures
        - objtool: Update section header before relocations
        - platform/x86: intel_scu_ipc: Increase virtual timeout to 10s
        - spi: Fix deadlock when adding SPI controllers on SPI buses
        - spi-mux: Fix false-positive lockdep splats
        - libperf test evsel: Fix build error on !x86 architectures
        - mm/thp: decrease nr_thps in file's mapping on THP split
        - drm/kmb: Enable alpha blended second plane
        - drm/kmb: Limit supported mode to 1080p
        - autofs: fix wait name hash calculation in autofs_wait()
        - s390/pci: cleanup resources only if necessary
    
      * Updates to ib_peer_memory requested by Nvidia (LP: #1947206)
        - SAUCE: RDMA/core: Updated ib_peer_memory
    
      * cpufreq: intel_pstate: Clear HWP desired on suspend/shutdown and offline
        (LP: #1950584)
        - cpufreq: intel_pstate: Clear HWP desired on suspend/shutdown and offline
    
      * keyboard not working on Medion notebook s17 series (LP: #1950536)
        - ACPI: resources: Add one more Medion model in IRQ override quirk
    
      * [UBUNTU 20.04] kernel:  unable to read partitions on virtio-block dasd (kvm)
        (LP: #1950144)
        - virtio: write back F_VERSION_1 before validate
    
      * Let NVMe with HMB use native power control again (LP: #1950042)
        - nvme-pci: use attribute group for cmb sysfs
        - nvme-pci: cmb sysfs: one file, one value
        - nvme-pci: disable hmb on idle suspend
        - nvme: allow user toggling hmb usage
    
      * ubuntu_ltp / finit_module02 fails on v4.15 and other kernels (LP: #1950644)
        - vfs: check fd has read access in kernel_read_file_from_fd()
    
      * reuseport_bpf_numa in net from ubuntu_kernel_selftests fails on ppc64le
        (LP: #1867570)
        - selftests/net: Fix reuseport_bpf_numa by skipping unavailable nodes
    
      * Impish update: upstream stable patchset 2021-11-18 (LP: #1951460)
        - Partially revert "usb: Kconfig: using select for USB_COMMON dependency"
        - usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle
        - USB: cdc-acm: fix racy tty buffer accesses
        - USB: cdc-acm: fix break reporting
        - usb: typec: tcpm: handle SRC_STARTUP state if cc changes
        - drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows
        - xen/privcmd: fix error handling in mmap-resource processing
        - mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk
        - mmc: sdhci-of-at91: wait for calibration done before proceed
        - mmc: sdhci-of-at91: replace while loop with read_poll_timeout
        - ovl: fix missing negative dentry check in ovl_rename()
        - ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO
        - nfsd: fix error handling of register_pernet_subsys() in init_nfsd()
        - nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero
        - SUNRPC: fix sign error causing rpcsec_gss drops
        - xen/balloon: fix cancelled balloon action
        - ARM: dts: omap3430-sdp: Fix NAND device node
        - ARM: dts: imx6dl-yapp4: Fix lp5562 LED driver probe
        - ARM: dts: qcom: apq8064: use compatible which contains chipid
        - riscv: Flush current cpu icache before other cpus
        - bus: ti-sysc: Add break in switch statement in sysc_init_soc()
        - soc: qcom: socinfo: Fixed argument passed to platform_set_data()
        - ARM: dts: qcom: apq8064: Use 27MHz PXO clock as DSI PLL reference
        - ARM: at91: pm: do not panic if ram controllers are not enabled
        - soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment
        - ARM: dts: imx: Add missing pinctrl-names for panel on M53Menlo
        - ARM: dts: imx: Fix USB host power regulator polarity on M53Menlo
        - ARM: dts: imx6qdl-pico: Fix Ethernet support
        - PCI: hv: Fix sleep while in non-sleep context when removing child devices
          from the bus
        - ath5k: fix building with LEDS=m
        - arm64: dts: qcom: pm8150: use qcom,pm8998-pon binding
        - xtensa: use CONFIG_USE_OF instead of CONFIG_OF
        - xtensa: call irqchip_init only when CONFIG_USE_OF is selected
        - iwlwifi: pcie: add configuration of a Wi-Fi adapter on Dell XPS 15
        - bpf, arm: Fix register clobbering in div/mod implementation
        - soc: ti: omap-prm: Fix external abort for am335x pruss
        - bpf: Fix integer overflow in prealloc_elems_and_freelist()
        - net/mlx5e: IPSEC RX, enable checksum complete
        - net/mlx5: E-Switch, Fix double allocation of acl flow counter
        - phy: mdio: fix memory leak
        - net_sched: fix NULL deref in fifo_set_limit()
        - powerpc/fsl/dts: Fix phy-connection-type for fm1mac3
        - ptp_pch: Load module automatically if ID matches
        - dt-bindings: drm/bridge: ti-sn65dsi86: Fix reg value
        - ARM: imx6: disable the GIC CPU interface before calling stby-poweroff
          sequence
        - net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size()
        - net: bridge: fix under estimation in br_get_linkxstats_size()
        - net/sched: sch_taprio: properly cancel timer from taprio_destroy()
        - net: sfp: Fix typo in state machine debug string
        - netlink: annotate data races around nlk->bound
        - bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893
        - drm/sun4i: dw-hdmi: Fix HDMI PHY clock setup
        - video: fbdev: gbefb: Only instantiate device when built for IP32
        - drm/nouveau: avoid a use-after-free when BO init fails
        - drm/nouveau/kms/nv50-: fix file release memory leak
        - drm/nouveau/debugfs: fix file release memory leak
        - gve: Correct available tx qpl check
        - gve: Avoid freeing NULL pointer
        - rtnetlink: fix if_nlmsg_stats_size() under estimation
        - gve: fix gve_get_stats()
        - gve: report 64bit tx_bytes counter from gve_handle_report_stats()
        - i40e: fix endless loop under rtnl
        - i40e: Fix freeing of uninitialized misc IRQ vector
        - net: prefer socket bound to interface when not in VRF
        - powerpc/iommu: Report the correct most efficient DMA mask for PCI devices
        - i2c: acpi: fix resource leak in reconfiguration device addition
        - i2c: mediatek: Add OFFSET_EXT_CONF setting back
        - riscv/vdso: make arch_setup_additional_pages wait for mmap_sem for write
          killable
        - bpf, s390: Fix potential memory leak about jit_data
        - RISC-V: Include clone3() on rv32
        - powerpc/bpf: Fix BPF_SUB when imm == 0x80000000
        - powerpc/64s: fix program check interrupt emergency stack path
        - pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init
        - x86/platform/olpc: Correct ifdef symbol to intended CONFIG_OLPC_XO15_SCI
        - x86/Kconfig: Correct reference to MWINCHIP3D
        - x86/sev: Return an error on a returned non-zero SW_EXITINFO1[31:0]
        - x86/entry: Correct reference to intended CONFIG_64_BIT
        - x86/entry: Clear X86_FEATURE_SMAP when CONFIG_X86_SMAP=n
        - x86/hpet: Use another crystalball to evaluate HPET usability
        - usb: typec: tcpci: don't handle vSafe0V event if it's not enabled
        - usb: typec: tipd: Remove dependency on "connector" child fwnode
        - drm/amdgpu: During s0ix don't wait to signal GFXOFF
        - drm/nouveau/ga102-: support ttm buffer moves via copy engine
        - drm/i915: Fix runtime pm handling in i915_gem_shrink
        - drm/i915: Extend the async flip VT-d w/a to skl/bxt
        - netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1
        - netfilter: nf_tables: add position handle in event notification
        - netfilter: nf_tables: reverse order in rule replacement expansion
        - net/mlx5e: Keep the value for maximum number of channels in-sync
        - net/mlx5: Force round second at 1PPS out start time
        - net/mlx5: Avoid generating event after PPS out in Real time mode
        - net/mlx5e: Fix the presented RQ index in PTP stats
        - libbpf: Fix memory leak in strset
        - net: mscc: ocelot: fix VCAP filters remaining active after being deleted
        - MIPS: Revert "add support for buggy MT7621S core detection"
        - netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in event
          notification
        - ARM: dts: imx: change the spi-nor tx
        - arm64: dts: imx8mm-kontron-n801x-som: do not allow to switch off buck2
        - arm64: dts: ls1028a: fix eSDHC2 node
        - drm/i915/jsl: Add W/A 1409054076 for JSL
        - drm/i915/tc: Fix TypeC port init/resume time sanitization
        - drm/i915/bdb: Fix version check
        - netfs: Fix READ/WRITE confusion when calling iov_iter_xarray()
        - afs: Fix afs_launder_page() to set correct start file position
        - drm/amdgpu: handle the case of pci_channel_io_frozen only in
          amdgpu_pci_resume
        - perf jevents: Free the sys_event_tables list after processing entries
        - drm/panel: abt-y030xx067a: yellow tint fix
        - gve: Properly handle errors in gve_assign_qpl
        - iavf: fix double unlock of crit_lock
        - riscv: explicitly use symbol offsets for VDSO
        - RISC-V: Fix VDSO build for !MMU
        - riscv/vdso: Refactor asm/vdso.h
        - riscv/vdso: Move vdso data page up front
        - i2c: mlxcpld: Fix criteria for frequency setting
        - i2c: mlxcpld: Modify register setting for 400KHz frequency
        - objtool: Remove reloc symbol type checks in get_alt_entry()
        - objtool: Make .altinstructions section entry size consistent
        - powerpc/bpf ppc32: Fix ALU32 BPF_ARSH operation
        - powerpc/bpf ppc32: Fix JMP32_JSET_K
        - powerpc/bpf ppc32: Do not emit zero extend instruction for 64-bit BPF_END
        - powerpc/bpf ppc32: Fix BPF_SUB when imm == 0x80000000
        - powerpc/traps: do not enable irqs in _exception
        - dsa: tag_dsa: Fix mask for trunked packets
    
      * Impish update: upstream stable patchset 2021-11-16 (LP: #1951157)
        - spi: rockchip: handle zero length transfers without timing out
        - platform/x86: touchscreen_dmi: Add info for the Chuwi HiBook (CWI514) tablet
        - platform/x86: touchscreen_dmi: Update info for the Chuwi Hi10 Plus (CWI527)
          tablet
        - nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN
        - btrfs: replace BUG_ON() in btrfs_csum_one_bio() with proper error handling
        - btrfs: fix mount failure due to past and transient device flush error
        - net: mdio: introduce a shutdown method to mdio device drivers
        - xen-netback: correct success/error reporting for the SKB-with-fraglist case
        - sparc64: fix pci_iounmap() when CONFIG_PCI is not set
        - ext2: fix sleeping in atomic bugs on error
        - scsi: sd: Free scsi_disk device via put_device()
        - usb: testusb: Fix for showing the connection speed
        - usb: dwc2: check return value after calling platform_get_resource()
        - habanalabs/gaudi: fix LBW RR configuration
        - selftests: be sure to make khdr before other targets
        - selftests:kvm: fix get_warnings_count() ignoring fscanf() return warn
        - nvme-fc: update hardware queues before using them
        - nvme-fc: avoid race between time out and tear down
        - thermal/drivers/tsens: Fix wrong check for tzd in irq handlers
        - scsi: ses: Retry failed Send/Receive Diagnostic commands
        - irqchip/gic: Work around broken Renesas integration
        - smb3: correct smb3 ACL security descriptor
        - tools/vm/page-types: remove dependency on opt_file for idle page tracking
        - selftests: KVM: Align SMCCC call with the spec in steal_time
        - KVM: do not shrink halt_poll_ns below grow_start
        - kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[]
        - KVM: x86: nSVM: restore int_vector in svm_clear_vintr
        - perf/x86: Reset destroy callback on event init failure
        - libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD.
        - afs: Add missing vnode validation checks
        - platform/x86: gigabyte-wmi: add support for B550I Aorus Pro AX
        - habanalabs/gaudi: use direct MSI in single mode
        - habanalabs: fail collective wait when not supported
        - selftests:kvm: fix get_trans_hugepagesz() ignoring fscanf() return warn
        - selftests: kvm: move get_run_delay() into lib/test_util
        - selftests: kvm: fix get_run_delay() ignoring fscanf() return warn
        - Xen/gntdev: don't ignore kernel unmapping error
        - swiotlb-xen: ensure to issue well-formed XENMEM_exchange requests
        - x86/insn, tools/x86: Fix undefined behavior due to potential unaligned
          accesses
        - io_uring: allow conditional reschedule for intensive iterators
        - block: don't call rq_qos_ops->done_bio if the bio isn't tracked
        - kasan: always respect CONFIG_KASAN_STACK
    
      * Impish update: upstream stable patchset 2021-11-09 (LP: #1950388)
        - tty: Fix out-of-bound vmalloc access in imageblit
        - cpufreq: schedutil: Use kobject release() method to free sugov_tunables
        - scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS
        - cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
        - ACPI: NFIT: Use fallback node id when numa info in NFIT table is incorrect
        - fs-verity: fix signed integer overflow with i_size near S64_MAX
        - hwmon: (tmp421) handle I2C errors
        - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary
          structure field
        - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary
          structure field
        - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary
          structure field
        - gpio: pca953x: do not ignore i2c errors
        - scsi: ufs: Fix illegal offset in UPIU event trace
        - mac80211: fix use-after-free in CCMP/GCMP RX
        - x86/kvmclock: Move this_cpu_pvti into kvmclock.h
        - KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect()
        - KVM: x86: nSVM: don't copy virt_ext from vmcb12
        - KVM: nVMX: Filter out all unsupported controls when eVMCS was activated
        - media: ir_toy: prevent device from hanging during transmit
        - RDMA/cma: Do not change route.addr.src_addr.ss_family
        - drm/amd/display: Pass PCI deviceid into DC
        - drm/amdgpu: correct initial cp_hqd_quantum for gfx9
        - ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
        - bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog
        - IB/cma: Do not send IGMP leaves for sendonly Multicast groups
        - RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure
        - bpf, mips: Validate conditional branch offsets
        - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced
          from sysfs
        - mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
        - mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
        - mac80211: mesh: fix potentially unaligned access
        - mac80211-hwsim: fix late beacon hrtimer handling
        - sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
        - mptcp: don't return sockets in foreign netns
        - hwmon: (tmp421) report /PVLD condition as fault
        - hwmon: (tmp421) fix rounding for negative values
        - net: enetc: fix the incorrect clearing of IF_MODE bits
        - net: ipv4: Fix rtnexthop len when RTA_FLOW is present
        - smsc95xx: fix stalled rx after link change
        - drm/i915/request: fix early tracepoints
        - dsa: mv88e6xxx: 6161: Use chip wide MAX MTU
        - dsa: mv88e6xxx: Fix MTU definition
        - dsa: mv88e6xxx: Include tagger overhead when setting MTU for DSA and CPU
          ports
        - e100: fix length calculation in e100_get_regs_len
        - e100: fix buffer overrun in e100_get_regs
        - bpf: Exempt CAP_BPF from checks against bpf_jit_limit
        - selftests, bpf: Fix makefile dependencies on libbpf
        - selftests, bpf: test_lwt_ip_encap: Really disable rp_filter
        - [Config] updateconfigs for ks8851 modules
        - net: ks8851: fix link error
        - scsi: csiostor: Add module softdep on cxgb4
        - ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup
        - net: hns3: do not allow call hns3_nic_net_open repeatedly
        - net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and HCLGE_FLAG_DCB_ENABLE
        - net: hns3: fix show wrong state when add existing uc mac address
        - net: hns3: reconstruct function hns3_self_test
        - net: hns3: fix always enable rx vlan filter problem after selftest
        - net: phy: bcm7xxx: Fixed indirect MMD operations
        - net: sched: flower: protect fl_walk() with rcu
        - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
        - perf/x86/intel: Update event constraints for ICX
        - hwmon: (pmbus/mp2975) Add missed POUT attribute for page 1 mp2975 controller
        - nvme: add command id quirk for apple controllers
        - elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
        - debugfs: debugfs_create_file_size(): use IS_ERR to check for error
        - ipack: ipoctal: fix stack information leak
        - ipack: ipoctal: fix tty registration race
        - ipack: ipoctal: fix tty-registration error handling
        - ipack: ipoctal: fix missing allocation-failure check
        - ipack: ipoctal: fix module reference leak
        - ext4: fix loff_t overflow in ext4_max_bitmap_size()
        - ext4: limit the number of blocks in one ADD_RANGE TLV
        - ext4: fix reserved space counter leakage
        - ext4: add error checking to ext4_ext_replay_set_iblocks()
        - ext4: fix potential infinite loop in ext4_dx_readdir()
        - HID: u2fzero: ignore incomplete packets without data
        - net: udp: annotate data race around udp_sk(sk)->corkflag
        - usb: hso: remove the bailout parameter
        - HID: betop: fix slab-out-of-bounds Write in betop_probe
        - netfilter: ipset: Fix oversized kvmalloc() calls
        - mm: don't allow oversized kvmalloc() calls
        - HID: usbhid: free raw_report buffers in usbhid_stop
        - KVM: x86: Handle SRCU initialization failure during page track init
        - netfilter: conntrack: serialize hash resizes and cleanups
        - netfilter: nf_tables: Fix oversized kvmalloc() calls
        - media: cedrus: Fix SUNXI tile size calculation
        - media: s5p-jpeg: rename JPEG marker constants to prevent build warnings
        - ASoC: fsl_sai: register platform component before registering cpu dai
        - ASoC: fsl_esai: register platform component before registering cpu dai
        - ASoC: fsl_micfil: register platform component before registering cpu dai
        - ASoC: fsl_spdif: register platform component before registering cpu dai
        - ASoC: fsl_xcvr: register platform component before registering cpu dai
        - ASoC: mediatek: common: handle NULL case in suspend/resume function
        - ASoC: SOF: Fix DSP oops stack dump output contents
        - ASoC: SOF: imx: imx8: Bar index is only valid for IRAM and SRAM types
        - ASoC: SOF: imx: imx8m: Bar index is only valid for IRAM and SRAM types
        - pinctrl: qcom: spmi-gpio: correct parent irqspec translation
        - s390/qeth: Fix deadlock in remove_discipline
        - s390/qeth: fix deadlock during failing recovery
        - m68k: Update ->thread.esp0 before calling syscall_trace() in ret_from_signal
        - NIOS2: fix kconfig unmet dependency warning for SERIAL_CORE_CONSOLE
        - kasan: fix Kconfig check of CC_HAS_WORKING_NOSANITIZE_ADDRESS
        - HID: amd_sfh: Fix potential NULL pointer dereference
        - perf test: Fix DWARF unwind for optimized builds.
        - perf iostat: Use system-wide mode if the target cpu_list is unspecified
        - perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *'
        - watchdog/sb_watchdog: fix compilation problem due to COMPILE_TEST
        - scsi: ufs: ufs-pci: Fix Intel LKF link stability
        - ALSA: firewire-motu: fix truncated bytes in message tracepoints
        - platform/x86/intel: hid: Add DMI switches allow list
        - ptp: Fix ptp_kvm_getcrosststamp issue for x86 ptp_kvm
        - KVM: x86: Clear KVM's cached guest CR3 at RESET/INIT
        - KVM: SEV: Update svm_vm_copy_asid_from for SEV-ES
        - KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
        - KVM: SEV: Acquire vcpu mutex when updating VMSA
        - KVM: SEV: Allow some commands for mirror VM
        - KVM: SVM: fix missing sev_decommission in sev_receive_start
        - KVM: nVMX: Fix nested bus lock VM exit
        - KVM: VMX: Fix a TSX_CTRL_CPUID_CLEAR field mask issue
        - mmc: renesas_sdhi: fix regression with hard reset on old SDHIs
        - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
        - nbd: use shifts rather than multiplies
        - drm/amd/display: initialize backlight_ramping_override to false
        - drm/amdgpu: force exit gfxoff on sdma resume for rmb s0ix
        - drm/amdgpu: check tiling flags when creating FB on GFX8-
        - interconnect: qcom: sdm660: Fix id of slv_cnoc_mnoc_cfg
        - interconnect: qcom: sdm660: Correct NOC_QOS_PRIORITY shift and mask
        - drm/i915/gvt: fix the usage of ww lock in gvt scheduler.
        - netfilter: nf_tables: unlink table before deleting it
        - netfilter: log: work around missing softdep backend module
        - driver core: fw_devlink: Add support for
          FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD
        - net: mdiobus: Set FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD for mdiobus parents
        - mptcp: allow changing the 'backup' bit when no sockets are open
        - drm/i915: Remove warning from the rps worker
        - RDMA/hfi1: Fix kernel pointer leak
        - RDMA/hns: Fix the size setting error when copying CQE in clean_cq()
        - RDMA/hns: Add the check of the CQE size of the user space
        - libbpf: Fix segfault in static linker for objects without BTF
        - bpf, x86: Fix bpf mapping of atomic fetch implementation
        - ionic: fix gathering of debug stats
        - net: hns3: remove tc enable checking
        - net: hns3: don't rollback when destroy mqprio fail
        - net: hns3: disable firmware compatible features when uninstall PF
        - objtool: Teach get_alt_entry() about more relocation types
        - sched/fair: Add ancestors of unthrottled undecayed cfs_rq
        - sched/fair: Null terminate buffer when updating tunable_scaling
        - hwmon: (occ) Fix P10 VRM temp sensors
        - driver core: fw_devlink: Improve handling of cyclic dependencies
        - ext4: flush s_error_work before journal destroy in ext4_fill_super
        - NIOS2: setup.c: drop unused variable 'dram_start'
        - crypto: aesni - xts_crypt() return if walk.nbytes is 0
        - drivers: net: mhi: fix error path in mhi_net_newlink
    
     -- Kleber Sacilotto de Souza <email address hidden>  Fri, 26 Nov 2021 12:14:32 +0100
  • linux (5.13.0-22.22) impish; urgency=medium
    
      * impish/linux: 5.13.0-22.22 -proposed tracker (LP: #1949740)
    
      * Packaging resync (LP: #1786013)
        - debian/dkms-versions -- update from kernel-versions (main/2021.11.08)
    
      * ebpf:  bpf_redirect fails with ip6 gre interfaces (LP: #1947164)
        - net: handle ARPHRD_IP6GRE in dev_is_mac_header_xmit()
    
      * require CAP_NET_ADMIN to attach N_HCI ldisc (LP: #1949516)
        - Bluetooth: hci_ldisc: require CAP_NET_ADMIN to attach N_HCI ldisc
    
      * CVE-2021-3744 // CVE-2021-3764
        - crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()
    
      * ppc64 BPF JIT mod by 1 will not return 0 (LP: #1948351)
        - powerpc/bpf: Fix BPF_MOD when imm == 1
    
      * Fix Screen freeze after resume from suspend with iGPU [1002:6987]
        (LP: #1949050)
        - drm/amdgpu: reenable BACO support for 699F:C7 polaris12 SKU
        - drm/amdgpu: add missing cleanups for Polaris12 UVD/VCE on suspend
        - drm/amdgpu: Fix crash on device remove/driver unload
    
      * Intel I225-IT ethernet controller: igc: probe of 0000:02:00.0 failed with
        error -1 (LP: #1945576)
        - igc: Remove _I_PHY_ID checking
        - igc: Remove phy->type checking
    
      * Fail to detect audio output from external monitor (LP: #1948767)
        - ALSA: hda: intel: Allow repeatedly probing on codec configuration errors
    
      * Drop "UBUNTU: SAUCE: cachefiles: Page leaking in
        cachefiles_read_backing_file while vmscan is active" (LP: #1947709)
        - Revert "UBUNTU: SAUCE: cachefiles: Page leaking in
          cachefiles_read_backing_file while vmscan is active"
    
      * rtw89 kernel module for Realtek 8852 wifi is missing (LP: #1945967)
        - rtw89: add Realtek 802.11ax driver
        - rtw89: Remove redundant check of ret after call to rtw89_mac_enable_bb_rf
        - rtw89: fix return value check in rtw89_cam_send_sec_key_cmd()
        - rtw89: remove unneeded semicolon
        - [Config] RTW89=m
    
      * Impish update: upstream stable patchset 2021-11-03 (LP: #1949636)
        - mm: fix uninitialized use in overcommit_policy_handler
        - usb: gadget: r8a66597: fix a loop in set_feature()
        - usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave
        - usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA
        - usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned()
        - cifs: fix incorrect check for null pointer in header_assemble
        - xen/x86: fix PV trap handling on secondary processors
        - usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c
        - USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter
        - USB: cdc-acm: fix minor-number release
        - Revert "USB: bcma: Add a check for devm_gpiod_get"
        - binder: make sure fd closes complete
        - staging: greybus: uart: fix tty use after free
        - Re-enable UAS for LaCie Rugged USB3-FW with fk quirk
        - usb: dwc3: core: balance phy init and exit
        - usb: core: hcd: Add support for deferring roothub registration
        - USB: serial: mos7840: remove duplicated 0xac24 device ID
        - USB: serial: option: add Telit LN920 compositions
        - USB: serial: option: remove duplicate USB device ID
        - USB: serial: option: add device id for Foxconn T99W265
        - mcb: fix error handling in mcb_alloc_bus()
        - erofs: fix up erofs_lookup tracepoint
        - btrfs: prevent __btrfs_dump_space_info() to underflow its free space
        - xhci: Set HCD flag to defer primary roothub registration
        - serial: 8250: 8250_omap: Fix RX_LVL register offset
        - serial: mvebu-uart: fix driver's tx_empty callback
        - scsi: sd_zbc: Ensure buffer size is aligned to SECTOR_SIZE
        - drm/amd/pm: Update intermediate power state for SI
        - net: hso: fix muxed tty registration
        - comedi: Fix memory leak in compat_insnlist()
        - afs: Fix incorrect triggering of sillyrename on 3rd-party invalidation
        - afs: Fix updating of i_blocks on file/dir extension
        - platform/x86/intel: punit_ipc: Drop wrong use of ACPI_PTR()
        - enetc: Fix illegal access when reading affinity_hint
        - enetc: Fix uninitialized struct dim_sample field usage
        - bnxt_en: Fix TX timeout when TX ring size is set to the smallest
        - net: hns3: fix change RSS 'hfunc' ineffective issue
        - net: hns3: check queue id range before using
        - net/smc: add missing error check in smc_clc_prfx_set()
        - net/smc: fix 'workqueue leaked lock' in smc_conn_abort_work
        - net: dsa: don't allocate the slave_mii_bus using devres
        - net: dsa: realtek: register the MDIO bus under devres
        - kselftest/arm64: signal: Add SVE to the set of features we can check for
        - kselftest/arm64: signal: Skip tests if required features are missing
        - s390/qeth: fix NULL deref in qeth_clear_working_pool_list()
        - gpio: uniphier: Fix void functions to remove return value
        - qed: rdma - don't wait for resources under hw error recovery flow
        - net/mlx4_en: Don't allow aRFS for encapsulated packets
        - atlantic: Fix issue in the pm resume flow.
        - scsi: iscsi: Adjust iface sysfs attr detection
        - scsi: target: Fix the pgr/alua_support_store functions
        - tty: synclink_gt: rename a conflicting function name
        - fpga: machxo2-spi: Return an error on failure
        - fpga: machxo2-spi: Fix missing error code in machxo2_write_complete()
        - nvme-tcp: fix incorrect h2cdata pdu offset accounting
        - nvme: keep ctrl->namespaces ordered
        - thermal/core: Potential buffer overflow in thermal_build_list_of_policies()
        - cifs: fix a sign extension bug
        - scsi: qla2xxx: Restore initiator in dual mode
        - scsi: lpfc: Use correct scnprintf() limit
        - irqchip/goldfish-pic: Select GENERIC_IRQ_CHIP to fix build
        - irqchip/gic-v3-its: Fix potential VPE leak on error
        - md: fix a lock order reversal in md_alloc
        - x86/asm: Fix SETZ size enqcmds() build failure
        - io_uring: put provided buffer meta data under memcg accounting
        - blktrace: Fix uaf in blk_trace access after removing by sysfs
        - net: phylink: Update SFP selected interface on advertising changes
        - net: macb: fix use after free on rmmod
        - net: stmmac: allow CSR clock of 300MHz
        - blk-mq: avoid to iterate over stale request
        - m68k: Double cast io functions to unsigned long
        - ipv6: delay fib6_sernum increase in fib6_add
        - cpufreq: intel_pstate: Override parameters if HWP forced by BIOS
        - bpf: Add oversize check before call kvcalloc()
        - xen/balloon: use a kernel thread instead a workqueue
        - nvme-multipath: fix ANA state updates when a namespace is not present
        - nvme-rdma: destroy cm id before destroy qp to avoid use after free
        - sparc32: page align size in arch_dma_alloc
        - amd/display: downgrade validation failure log level
        - block: check if a profile is actually registered in blk_integrity_unregister
        - block: flush the integrity workqueue in blk_integrity_unregister
        - blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd
        - compiler.h: Introduce absolute_pointer macro
        - net: i825xx: Use absolute_pointer for memcpy from fixed memory location
        - sparc: avoid stringop-overread errors
        - qnx4: avoid stringop-overread errors
        - parisc: Use absolute_pointer() to define PAGE0
        - arm64: Mark __stack_chk_guard as __ro_after_init
        - alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile
        - net: 6pack: Fix tx timeout and slot time
        - spi: Fix tegra20 build with CONFIG_PM=n
        - EDAC/synopsys: Fix wrong value type assignment for edac_mode
        - EDAC/dmc520: Assign the proper type to dimm->edac_mode
        - thermal/drivers/int340x: Do not set a wrong tcc offset on resume
        - USB: serial: cp210x: fix dropped characters with CP2102
        - xen/balloon: fix balloon kthread freezing
        - qnx4: work around gcc false positive warning bug
        - mm, hwpoison: add is_free_buddy_page() in HWPoisonHandlable()
        - mm/debug: sync up MR_CONTIG_RANGE and MR_LONGTERM_PIN
        - cifs: Not to defer close on file when lock is set
        - cifs: Fix soft lockup during fsstress
        - binder: fix freeze race
        - usb: cdns3: fix race condition before setting doorbell
        - misc: bcm-vk: fix tty registration race
        - misc: genwqe: Fixes DMA mask setting
        - KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer to KVM guest
        - nexthop: Fix division by zero while replacing a resilient group
        - platform/x86: amd-pmc: Increase the response register timeout
        - regulator: qcom-rpmh-regulator: fix pm8009-1 ldo7 resource name
        - afs: Fix page leak
        - afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
        - regulator: max14577: Revert "regulator: max14577: Add proper module aliases
          strings"
        - virtio-net: fix pages leaking when building skb in big mode
        - net: dsa: tear down devlink port regions when tearing down the devlink port
          on error
        - net: bgmac-bcma: handle deferred probe error due to mac-address
        - napi: fix race inside napi_enable
        - net: hns3: fix inconsistent vf id print
        - net: hns3: fix misuse vf id and vport id in some logs
        - net: hns3: check vlan id before using it
        - net: hns3: fix a return value error in hclge_get_reset_status()
        - gpiolib: acpi: Make set-debounce-timeout failures non fatal
        - nexthop: Fix memory leaks in nexthop notification chain listeners
        - net: ethernet: mtk_eth_soc: avoid creating duplicate offload entries
        - net: mscc: ocelot: fix forwarding from BLOCKING ports remaining enabled
        - x86/fault: Fix wrong signal when vsyscall fails with pkey
        - scsi: sd_zbc: Support disks with more than 2**32 logical blocks
        - io_uring: fix race between poll completion and cancel_hash insertion
        - io_uring: fix missing set of EPOLLONESHOT for CQ ring overflow
        - io_uring: don't punt files update to io-wq unconditionally
        - drm/ttm: fix type mismatch error on sparc64
        - drm/amd/display: Fix unstable HPCP compliance on Chrome Barcelo
        - amd/display: enable panel orientation quirks
        - Revert drm/vc4 hdmi runtime PM changes
        - x86/setup: Call early_reserve_memory() earlier
        - irqchip/armada-370-xp: Fix ack/eoi breakage
        - arm64: add MTE supported check to thread switching and syscall entry/exit
        - software node: balance refcount for managed software nodes
        - usb: gadget: f_uac2: Populate SS descriptors' wBytesPerInterval
    
      * ACL updates on OCFS2 are not revalidated (LP: #1947161) // Impish update:
        upstream stable patchset 2021-11-03 (LP: #1949636)
        - ocfs2: drop acl cache for directories too
    
      * Impish update: upstream stable patchset 2021-10-27 (LP: #1948977)
        - PCI: pci-bridge-emul: Add PCIe Root Capabilities Register
        - PCI: aardvark: Fix reporting CRS value
        - console: consume APC, DM, DCS
        - ARM: 9077/1: PLT: Move struct plt_entries definition to header
        - ARM: 9078/1: Add warn suppress parameter to arm_gen_branch_link()
        - ARM: 9079/1: ftrace: Add MODULE_PLTS support
        - ARM: 9098/1: ftrace: MODULE_PLT: Fix build problem without DYNAMIC_FTRACE
        - sctp: validate chunk size in __rcv_asconf_lookup
        - sctp: add param size validation for SCTP_PARAM_SET_PRIMARY
        - staging: rtl8192u: Fix bitwise vs logical operator in
          TranslateRxSignalStuff819xUsb()
        - coredump: fix memleak in dump_vma_snapshot()
        - um: virtio_uml: fix memory leak on init failures
        - dmaengine: acpi: Avoid comparison GSI with Linux vIRQ
        - perf test: Fix bpf test sample mismatch reporting
        - perf tools: Allow build-id with trailing zeros
        - thermal/drivers/exynos: Fix an error code in exynos_tmu_probe()
        - 9p/trans_virtio: Remove sysfs file on probe failure
        - prctl: allow to setup brk for et_dyn executables
        - nilfs2: use refcount_dec_and_lock() to fix potential UAF
        - profiling: fix shift-out-of-bounds bugs
        - PM: sleep: core: Avoid setting power.must_resume to false
        - pwm: lpc32xx: Don't modify HW state in .probe() after the PWM chip was
          registered
        - pwm: mxs: Don't modify HW state in .probe() after the PWM chip was
          registered
        - dmaengine: idxd: fix wq slot allocation index check
        - platform/chrome: sensorhub: Add trace events for sample
        - platform/chrome: cros_ec_trace: Fix format warnings
        - ceph: allow ceph_put_mds_session to take NULL or ERR_PTR
        - ceph: cancel delayed work instead of flushing on mdsc teardown
        - Kconfig.debug: drop selecting non-existing HARDLOCKUP_DETECTOR_ARCH
        - tools/bootconfig: Fix tracing_on option checking in ftrace2bconf.sh
        - thermal/core: Fix thermal_cooling_device_register() prototype
        - drm/amdgpu: Disable PCIE_DPM on Intel RKL Platform
        - drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION()
        - dma-buf: DMABUF_MOVE_NOTIFY should depend on DMA_SHARED_BUFFER
        - parisc: Move pci_dev_is_behind_card_dino to where it is used
        - iommu/amd: Relocate GAMSup check to early_enable_iommus
        - dmaengine: idxd: depends on !UML
        - dmaengine: sprd: Add missing MODULE_DEVICE_TABLE
        - dmaengine: ioat: depends on !UML
        - dmaengine: xilinx_dma: Set DMA mask for coherent APIs
        - ceph: request Fw caps before updating the mtime in ceph_write_iter
        - ceph: remove the capsnaps when removing caps
        - ceph: lockdep annotations for try_nonblocking_invalidate
        - btrfs: update the bdev time directly when closing
        - btrfs: fix lockdep warning while mounting sprout fs
        - nilfs2: fix memory leak in nilfs_sysfs_create_device_group
        - nilfs2: fix NULL pointer in nilfs_##name##_attr_release
        - nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group
        - nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group
        - nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group
        - nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group
        - habanalabs: add validity check for event ID received from F/W
        - pwm: img: Don't modify HW state in .remove() callback
        - pwm: rockchip: Don't modify HW state in .remove() callback
        - pwm: stm32-lp: Don't modify HW state in .remove() callback
        - blk-throttle: fix UAF by deleteing timer in blk_throtl_exit()
        - blk-mq: allow 4x BLK_MAX_REQUEST_COUNT at blk_plug for multiple_queues
        - rtc: rx8010: select REGMAP_I2C
        - sched/idle: Make the idle timer expire in hard interrupt context
        - drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV
        - um: fix stub location calculation
        - RDMA/mlx5: Fix xlt_chunk_align calculation
        - perf symbol: Look for ImageBase in PE file to compute .text offset
        - staging: rtl8723bs: fix wpa_set_auth_algs() function
        - n64cart: fix return value check in n64cart_probe()
        - pwm: ab8500: Fix register offset calculation to not depend on probe order
        - thermal/drivers/qcom/spmi-adc-tm5: Don't abort probing if a sensor is not
          used
        - dmanegine: idxd: cleanup all device related bits after disabling device
        - dmaengine: idxd: have command status always set
        - dmaengine: idxd: fix abort status check
        - dmaengine: idxd: clear block on fault flag when clear wq
        - SUNRPC: don't pause on incomplete allocation
        - init: move usermodehelper_enable() to populate_rootfs()
        - dma-buf: DMABUF_DEBUG should depend on DMA_SHARED_BUFFER
        - arm64: mm: limit linear region to 51 bits for KVM in nVHE mode
        - drm/ttm: Fix a deadlock if the target BO is not idle during swap
        - of: property: Disable fw_devlink DT support for X86
        - riscv: dts: microchip: mpfs-icicle: Fix serial console
        - s390: add kmemleak annotation in stack_alloc()
        - ASoC: audio-graph: respawn Platform Support
        - ceph: fix memory leak on decode error in ceph_handle_caps
        - btrfs: delay blkdev_put until after the device remove
        - thermal/drivers/rcar_gen3_thermal: Store TSC id as unsigned int
        - habanalabs: fix nullifying of destroyed mmu pgt pool
        - habanalabs: fix mmu node address resolution in debugfs
        - habanalabs: add "in device creation" status
        - habanalabs: cannot sleep while holding spinlock
        - block: genhd: don't call blkdev_show() with major_names_lock held
        - cifs: properly invalidate cached root handle when closing it
        - io_uring: fix off-by-one in BUILD_BUG_ON check of __REQ_F_LAST_BIT
        - selinux,smack: fix subjective/objective credential use mixups
    
      * Impish update: upstream stable patchset 2021-10-22 (LP: #1948485)
        - xen: reset legacy rtc flag for PV domU
        - arm64/sve: Use correct size when reinitialising SVE state
        - PM: base: power: don't try to use non-existing RTC for storing data
        - PCI: Add AMD GPU multi-function power dependencies
        - drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10
        - drm/etnaviv: return context from etnaviv_iommu_context_get
        - drm/etnaviv: put submit prev MMU context when it exists
        - drm/etnaviv: stop abusing mmu_context as FE running marker
        - drm/etnaviv: keep MMU context across runtime suspend/resume
        - drm/etnaviv: exec and MMU state is lost when resetting the GPU
        - drm/etnaviv: fix MMU context leak on GPU reset
        - drm/etnaviv: reference MMU context when setting up hardware state
        - drm/etnaviv: add missing MMU context put when reaping MMU mapping
        - s390/sclp: fix Secure-IPL facility detection
        - x86/pat: Pass valid address to sanitize_phys()
        - x86/mm: Fix kern_addr_valid() to cope with existing but not present entries
        - tipc: fix an use-after-free issue in tipc_recvmsg
        - ethtool: Fix rxnfc copy to user buffer overflow
        - net/{mlx5|nfp|bnxt}: Remove unnecessary RTNL lock assert
        - net-caif: avoid user-triggerable WARN_ON(1)
        - ptp: dp83640: don't define PAGE0
        - net/l2tp: Fix reference count leak in l2tp_udp_recv_core
        - r6040: Restore MDIO clock frequency after MAC reset
        - tipc: increase timeout in tipc_sk_enqueue()
        - drm/rockchip: cdn-dp-core: Make cdn_dp_core_resume __maybe_unused
        - perf machine: Initialize srcline string member in add_location struct
        - net/mlx5: FWTrace, cancel work on alloc pd error flow
        - net/mlx5: Fix potential sleeping in atomic context
        - nvme-tcp: fix io_work priority inversion
        - events: Reuse value read using READ_ONCE instead of re-reading it
        - net: ipa: initialize all filter table slots
        - gen_compile_commands: fix missing 'sys' package
        - vhost_net: fix OoB on sendmsg() failure.
        - net/af_unix: fix a data-race in unix_dgram_poll
        - net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup
        - x86/uaccess: Fix 32-bit __get_user_asm_u64() when CC_HAS_ASM_GOTO_OUTPUT=y
        - tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
        - selftest: net: fix typo in altname test
        - qed: Handle management FW error
        - udp_tunnel: Fix udp_tunnel_nic work-queue type
        - dt-bindings: arm: Fix Toradex compatible typo
        - ibmvnic: check failover_pending in login response
        - KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode changing
          registers
        - bnxt_en: make bnxt_free_skbs() safe to call after bnxt_free_mem()
        - net: hns3: pad the short tunnel frame before sending to hardware
        - net: hns3: change affinity_mask to numa node range
        - net: hns3: disable mac in flr process
        - net: hns3: fix the timing issue of VF clearing interrupt sources
        - dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
        - mfd: db8500-prcmu: Adjust map to reality
        - PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms
        - fuse: fix use after free in fuse_read_interrupt()
        - PCI: tegra194: Fix handling BME_CHGED event
        - PCI: tegra194: Fix MSI-X programming
        - PCI: tegra: Fix OF node reference leak
        - mfd: Don't use irq_create_mapping() to resolve a mapping
        - PCI: rcar: Fix runtime PM imbalance in rcar_pcie_ep_probe()
        - tracing/probes: Reject events which have the same name of existing one
        - PCI: cadence: Use bitfield for *quirk_retrain_flag* instead of bool
        - PCI: cadence: Add quirk flag to set minimum delay in LTSSM Detect.Quiet
          state
        - PCI: j721e: Add PCIe support for J7200
        - PCI: j721e: Add PCIe support for AM64
        - PCI: Add ACS quirks for Cavium multi-function devices
        - watchdog: Start watchdog in watchdog_set_last_hw_keepalive only if
          appropriate
        - octeontx2-af: Add additional register check to rvu_poll_reg()
        - Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6
        - net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
        - PCI: ibmphp: Fix double unmap of io_mem
        - ethtool: Fix an error code in cxgb2.c
        - NTB: Fix an error code in ntb_msit_probe()
        - NTB: perf: Fix an error code in perf_setup_inbuf()
        - mfd: axp20x: Update AXP288 volatile ranges
        - backlight: ktd253: Stabilize backlight
        - PCI: of: Don't fail devm_pci_alloc_host_bridge() on missing 'ranges'
        - PCI: iproc: Fix BCMA probe resource handling
        - netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
        - KVM: arm64: Restrict IPA size to maximum 48 bits on 4K and 16K page size
        - PCI: Fix pci_dev_str_match_path() alloc while atomic bug
        - mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set
        - tracing/boot: Fix a hist trigger dependency for boot time tracing
        - mtd: mtdconcat: Judge callback existence based on the master
        - mtd: mtdconcat: Check _read, _write callbacks existence before assignment
        - KVM: arm64: Fix read-side race on updates to vcpu reset state
        - KVM: arm64: Handle PSCI resets before userspace touches vCPU state
        - PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
        - mtd: rawnand: cafe: Fix a resource leak in the error handling path of
          'cafe_nand_probe()'
        - ARC: export clear_user_page() for modules
        - perf unwind: Do not overwrite FEATURE_CHECK_LDFLAGS-libunwind-{x86,aarch64}
        - perf bench inject-buildid: Handle writen() errors
        - gpio: mpc8xxx: Fix a resources leak in the error handling path of
          'mpc8xxx_probe()'
        - gpio: mpc8xxx: Use 'devm_gpiochip_add_data()' to simplify the code and avoid
          a leak
        - net: dsa: tag_rtl4_a: Fix egress tags
        - selftests: mptcp: clean tmp files in simult_flows
        - net: hso: add failure handler for add_net_device
        - net: dsa: b53: Fix calculating number of switch ports
        - net: dsa: b53: Set correct number of ports in the DSA struct
        - netfilter: socket: icmp6: fix use-after-scope
        - fq_codel: reject silly quantum parameters
        - qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
        - ip_gre: validate csum_start only on pull
        - net: dsa: b53: Fix IMP port setup on BCM5301x
        - bnxt_en: fix stored FW_PSID version masks
        - bnxt_en: Fix asic.rev in devlink dev info command
        - bnxt_en: Fix possible unintended driver initiated error recovery
        - mfd: lpc_sch: Rename GPIOBASE to prevent build error
        - net: renesas: sh_eth: Fix freeing wrong tx descriptor
        - x86/mce: Avoid infinite loop for copy from user recovery
        - bnxt_en: Fix error recovery regression
        - net: dsa: bcm_sf2: Fix array overrun in bcm_sf2_num_active_ports()
        - net: stmmac: fix MAC not working when system resume back with WoL active
        - swiotlb-xen: avoid double free
        - swiotlb-xen: fix late init retry
        - drm/amd/display: Get backlight from PWM if DMCU is not initialized
        - drm/amd/display: dsc mst 2 4K displays go dark with 2 lane HBR3
        - drm/amdgpu: use IS_ERR for debugfs APIs
        - drm/amdgpu: add amdgpu_amdkfd_resume_iommu
        - drm/amdgpu: move iommu_resume before ip init/resume
        - drm/amdkfd: separate kfd_iommu_resume from kfd_resume
        - io_uring: allow retry for O_NONBLOCK if async is supported
        - net: qrtr: revert check in qrtr_endpoint_post()
        - rtc: cmos: Disable irq around direct invocation of cmos_interrupt()
        - drm/i915/dp: return proper DPRX link training result
        - net: stmmac: fix system hang caused by eee_ctrl_timer during suspend/resume
        - powerpc/mce: Fix access error in mce handler
        - net/mlx5e: Fix mutual exclusion between CQE compression and HW TS
        - net: dsa: lantiq_gswip: Add 200ms assert delay
        - remoteproc: qcom: wcnss: Fix race with iris probe
        - riscv: fix the global name pfn_base confliction error
        - KVM: arm64: Make hyp_panic() more robust when protected mode is enabled
        - flow: fix object-size-mismatch warning in flowi{4,6}_to_flowi_common()
        - net: phylink: add suspend/resume support
        - PCI/PTM: Remove error message at boot
        - perf config: Fix caching and memory leak in perf_home_perfconfig()
        - gpio: mpc8xxx: Fix a potential double iounmap call in 'mpc8xxx_probe()'
        - io_uring: retry in case of short read on block device
        - tools build: Fix feature detect clean for out of source builds
        - mptcp: Only send extra TCP acks in eligible socket states
        - iwlwifi: move get pnvm file name to a separate function
        - iwlwifi: pnvm: Fix a memory leak in 'iwl_pnvm_get_from_fs()'
    
      * Impish update: v5.13.19 upstream stable release (LP: #1947191)
        - rtc: tps65910: Correct driver module alias
        - btrfs: wake up async_delalloc_pages waiters after submit
        - btrfs: wait on async extents when flushing delalloc
        - btrfs: reduce the preemptive flushing threshold to 90%
        - btrfs: zoned: fix block group alloc_offset calculation
        - btrfs: zoned: suppress reclaim error message on EAGAIN
        - btrfs: fix upper limit for max_inline for page size 64K
        - btrfs: reset replace target device to allocation state on close
        - btrfs: zoned: fix double counting of split ordered extent
        - blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
        - blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
        - PCI/MSI: Skip masking MSI-X on Xen PV
        - powerpc/perf/hv-gpci: Fix counter value parsing
        - xen: fix setting of max_pfn in shared_info
        - 9p/xen: Fix end of loop tests for list_for_each_entry
        - ceph: fix dereference of null pointer cf
        - Input: elan_i2c - reduce the resume time for controller in Whitebox
        - selftests/ftrace: Fix requirement check of README file
        - tools/thermal/tmon: Add cross compiling support
        - clk: socfpga: agilex: fix the parents of the psi_ref_clk
        - clk: socfpga: agilex: fix up s2f_user0_clk representation
        - clk: socfpga: agilex: add the bypass register for s2f_usr0 clock
        - pinctrl: stmfx: Fix hazardous u8[] to unsigned long cast
        - pinctrl: ingenic: Fix incorrect pull up/down info
        - pinctrl: ingenic: Fix bias config for X2000(E)
        - soc: mediatek: mmsys: Fix missing UFOE component in mt8173 table routing
        - soc: qcom: aoss: Fix the out of bound usage of cooling_devs
        - soc: aspeed: lpc-ctrl: Fix boundary check for mmap
        - soc: aspeed: p2a-ctrl: Fix boundary check for mmap
        - arm64: Move .hyp.rodata outside of the _sdata.._edata range
        - arm64: mm: Fix TLBI vs ASID rollover
        - arm64: head: avoid over-mapping in map_memory
        - arm64: Do not trap PMSNEVFR_EL1
        - iio: ltc2983: fix device probe
        - wcn36xx: Ensure finish scan is not requested before start scan
        - crypto: public_key: fix overflow during implicit conversion
        - block: bfq: fix bfq_set_next_ioprio_data()
        - power: supply: max17042: handle fails of reading status register
        - dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
        - crypto: ccp - shutdown SEV firmware on kexec
        - spi: fsi: Reduce max transfer size to 8 bytes
        - VMCI: fix NULL pointer dereference when unmapping queue pair
        - media: uvc: don't do DMA on stack
        - media: rc-loopback: return number of emitters rather than error
        - nvmem: core: fix error handling while validating keepout regions
        - s390/qdio: fix roll-back after timeout on ESTABLISH ccw
        - s390/qdio: cancel the ESTABLISH ccw after timeout
        - Revert "dmaengine: imx-sdma: refine to load context only once"
        - dmaengine: imx-sdma: remove duplicated sdma_load_context
        - io_uring: place fixed tables under memcg limits
        - io_uring: add ->splice_fd_in checks
        - io_uring: fix io_try_cancel_userdata race for iowq
        - io-wq: fix wakeup race when adding new work
        - io-wq: fix race between adding work and activating a free worker
        - io_uring: fail links of cancelled timeouts
        - libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
        - ARM: 9105/1: atags_to_fdt: don't warn about stack size
        - f2fs: fix to do sanity check for sb/cp fields correctly
        - PCI/portdrv: Enable Bandwidth Notification only if port supports it
        - PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
        - PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
        - PCI: xilinx-nwl: Enable the clock through CCF
        - PCI: aardvark: Configure PCIe resources from 'ranges' DT property
        - PCI: aardvark: Fix checking for PIO status
        - PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response
        - PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
        - f2fs: compress: fix to set zstd compress level correctly
        - HID: input: do not report stylus battery state as "full"
        - f2fs: quota: fix potential deadlock
        - pinctrl: armada-37xx: Correct PWM pins definitions
        - scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND
        - clk: rockchip: drop GRF dependency for rk3328/rk3036 pll types
        - IB/hfi1: Adjust pkey entry in index 0
        - RDMA/iwcm: Release resources if iw_cm module initialization fails
        - docs: Fix infiniband uverbs minor number
        - scsi: BusLogic: Use %X for u32 sized integer rather than %lX
        - pinctrl: samsung: Fix pinctrl bank pin count
        - f2fs: restructure f2fs page.private layout
        - f2fs: compress: add compress_inode to cache compressed blocks
        - f2fs: fix wrong checkpoint_changed value in f2fs_remount()
        - vfio: Use config not menuconfig for VFIO_NOIOMMU
        - scsi: ufs: Fix memory corruption by ufshcd_read_desc_param()
        - cpuidle: pseries: Fixup CEDE0 latency only for POWER10 onwards
        - powerpc/stacktrace: Include linux/delay.h
        - RDMA/hns: Don't overwrite supplied QP attributes
        - RDMA/efa: Remove double QP type assignment
        - RDMA/mlx5: Delete not-available udata check
        - cpuidle: pseries: Mark pseries_idle_proble() as __init
        - f2fs: reduce the scope of setting fsck tag when de->name_len is zero
        - openrisc: don't printk() unconditionally
        - dma-debug: fix debugfs initialization order
        - xprtrdma: Put rpcrdma_reps before waking the tear-down completion
        - NFSv4/pNFS: Fix a layoutget livelock loop
        - NFSv4/pNFS: Always allow update of a zero valued layout barrier
        - NFSv4/pnfs: The layout barrier indicate a minimal value for the seqid
        - SUNRPC: Fix potential memory corruption
        - SUNRPC/xprtrdma: Fix reconnection locking
        - SUNRPC query transport's source port
        - sunrpc: Fix return value of get_srcport()
        - scsi: fdomain: Fix error return code in fdomain_probe()
        - pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
        - powerpc/numa: Consider the max NUMA node for migratable LPAR
        - scsi: smartpqi: Fix an error code in pqi_get_raid_map()
        - scsi: qedi: Fix error codes in qedi_alloc_global_queues()
        - scsi: qedf: Fix error codes in qedf_alloc_global_queues()
        - powerpc/config: Renable MTD_PHYSMAP_OF
        - f2fs: fix to keep compatibility of fault injection interface
        - iommu/vt-d: Update the virtual command related registers
        - RDMA/hns: Fix return in hns_roce_rereg_user_mr()
        - HID: amd_sfh: Fix period data field to enable sensor
        - HID: i2c-hid: Fix Elan touchpad regression
        - HID: thrustmaster: clean up Makefile and adapt quirks
        - clk: imx8mm: use correct mux type for clkout path
        - clk: imx8m: fix clock tree update of TF-A managed clocks
        - KVM: PPC: Book3S HV: Fix copy_tofrom_guest routines
        - scsi: ufs: ufs-exynos: Fix static checker warning
        - KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs
          are live
        - powerpc/perf: Fix the check for SIAR value
        - RDMA/hns: Bugfix for data type of dip_idx
        - RDMA/hns: Bugfix for the missing assignment for dip_idx
        - platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from
          run_smbios_call
        - powerpc/smp: Fix a crash while booting kvm guest with nr_cpus=2
        - powerpc/smp: Update cpu_core_map on all PowerPc systems
        - RDMA/hns: Fix QP's resp incomplete assignment
        - fscache: Fix cookie key hashing
        - clk: ralink: avoid to set 'CLK_IS_CRITICAL' flag for gates
        - clk: at91: clk-generated: Limit the requested rate to our range
        - KVM: PPC: Fix clearing never mapped TCEs in realmode
        - soc: mediatek: cmdq: add address shift in jump
        - f2fs: fix to account missing .skipped_gc_rwsem
        - f2fs: fix unexpected ENOENT comes from f2fs_map_blocks()
        - f2fs: fix to unmap pages from userspace process in punch_hole()
        - f2fs: deallocate compressed pages when error happens
        - f2fs: should put a page beyond EOF when preparing a write
        - MIPS: Malta: fix alignment of the devicetree buffer
        - kbuild: Fix 'no symbols' warning when CONFIG_TRIM_UNUSD_KSYMS=y
        - userfaultfd: prevent concurrent API initialization
        - drm/vmwgfx: Fix subresource updates with new contexts
        - drm/vmwgfx: Fix some static checker warnings
        - drm/vc4: hdmi: Set HD_CTL_WHOLSMP and HD_CTL_CHALIGN_SET
        - drm/omap: Follow implicit fencing in prepare_fb
        - drm/amdgpu: Fix amdgpu_ras_eeprom_init()
        - ASoC: ti: davinci-mcasp: Fix DIT mode support
        - ASoC: atmel: ATMEL drivers don't need HAS_DMA
        - media: dib8000: rewrite the init prbs logic
        - media: ti-vpe: cal: fix error handling in cal_camerarx_create
        - media: ti-vpe: cal: fix queuing of the initial buffer
        - libbpf: Fix reuse of pinned map on older kernel
        - drm/vkms: Let shadow-plane helpers prepare the plane's FB
        - x86/hyperv: fix for unwanted manipulation of sched_clock when TSC marked
          unstable
        - crypto: mxs-dcp - Use sg_mapping_iter to copy data
        - PCI: Use pci_update_current_state() in pci_enable_device_flags()
        - tipc: keep the skb in rcv queue until the whole data is read
        - net: phy: Fix data type in DP83822 dp8382x_disable_wol()
        - iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
        - iavf: do not override the adapter state in the watchdog task
        - iavf: fix locking of critical sections
        - ARM: dts: qcom: apq8064: correct clock names
        - video: fbdev: kyro: fix a DoS bug by restricting user input
        - drm/ast: Disable fast reset after DRAM initial
        - netlink: Deal with ESRCH error in nlmsg_notify()
        - net: ipa: fix IPA v4.11 interconnect data
        - Smack: Fix wrong semantics in smk_access_entry()
        - drm: avoid blocking in drm_clients_info's rcu section
        - drm: serialize drm_file.master with a new spinlock
        - drm: protect drm_master pointers in drm_lease.c
        - rcu: Fix macro name CONFIG_TASKS_RCU_TRACE
        - igc: Check if num of q_vectors is smaller than max before array access
        - usb: host: fotg210: fix the endpoint's transactional opportunities
          calculation
        - usb: host: fotg210: fix the actual_length of an iso packet
        - usb: gadget: u_ether: fix a potential null pointer dereference
        - USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable()
        - usb: gadget: composite: Allow bMaxPower=0 if self-powered
        - staging: board: Fix uninitialized spinlock when attaching genpd
        - staging: hisilicon,hi6421-spmi-pmic.yaml: fix patternProperties
        - tty: serial: jsm: hold port lock when reporting modem line changes
        - bus: fsl-mc: fix arg in call to dprc_scan_objects()
        - bus: fsl-mc: fix mmio base address for child DPRCs
        - misc/pvpanic-pci: Allow automatic loading
        - selftests: firmware: Fix ignored return val of asprintf() warn
        - drm/amd/display: Fix timer_per_pixel unit error
        - media: hantro: vp8: Move noisy WARN_ON to vpu_debug
        - media: platform: stm32: unprepare clocks at handling errors in probe
        - media: atomisp: Fix runtime PM imbalance in atomisp_pci_probe
        - media: atomisp: pci: fix error return code in atomisp_pci_probe()
        - nfp: fix return statement in nfp_net_parse_meta()
        - ethtool: improve compat ioctl handling
        - drm/amdgpu: Fix a printing message
        - drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex
        - bpf/tests: Fix copy-and-paste error in double word test
        - bpf/tests: Do not PASS tests without actually testing the result
        - drm/bridge: nwl-dsi: Avoid potential multiplication overflow on 32-bit
        - arm64: dts: allwinner: h6: tanix-tx6: Fix regulator node names
        - video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
        - video: fbdev: kyro: Error out if 'pixclock' equals zero
        - video: fbdev: riva: Error out if 'pixclock' equals zero
        - net: ipa: fix ipa_cmd_table_valid()
        - ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
        - flow_dissector: Fix out-of-bounds warnings
        - s390/jump_label: print real address in a case of a jump label bug
        - s390: make PCI mio support a machine flag
        - serial: 8250: Define RX trigger levels for OxSemi 950 devices
        - xtensa: ISS: don't panic in rs_init
        - hvsi: don't panic on tty_register_driver failure
        - serial: 8250_pci: make setup_port() parameters explicitly unsigned
        - staging: ks7010: Fix the initialization of the 'sleep_status' structure
        - samples: bpf: Fix tracex7 error raised on the missing argument
        - libbpf: Fix race when pinning maps in parallel
        - ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
        - drm: rcar-du: Shutdown the display on system shutdown
        - Bluetooth: skip invalid hci_sync_conn_complete_evt
        - workqueue: Fix possible memory leaks in wq_numa_init()
        - ARM: dts: stm32: Set {bitclock,frame}-master phandles on DHCOM SoM
        - ARM: dts: stm32: Set {bitclock,frame}-master phandles on ST DKx
        - ARM: dts: stm32: Update AV96 adv7513 node per dtbs_check
        - netfilter: nft_compat: use nfnetlink_unicast()
        - bonding: 3ad: fix the concurrency between __bond_release_one() and
          bond_3ad_state_machine_handler()
        - ARM: dts: at91: use the right property for shutdown controller
        - arm64: tegra: Fix Tegra194 PCIe EP compatible string
        - ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the
          matching in-/output
        - ASoC: Intel: update sof_pcm512x quirks
        - Bluetooth: Fix not generating RPA when required
        - dpaa2-switch: do not enable the DPSW at probe time
        - media: imx258: Rectify mismatch of VTS value
        - media: imx258: Limit the max analogue gain to 480
        - media: imx: imx7-media-csi: Fix buffer return upon stream start failure
        - media: v4l2-dv-timings.c: fix wrong condition in two for-loops
        - media: TDA1997x: fix tda1997x_query_dv_timings() return value
        - media: tegra-cec: Handle errors of clk_prepare_enable()
        - gfs2: Fix glock recursion in freeze_go_xmote_bh
        - arm64: dts: qcom: sdm630: Rewrite memory map
        - arm64: dts: qcom: sdm630: Fix TLMM node and pinctrl configuration
        - net: ipa: fix IPA v4.9 interconnects
        - serial: 8250_omap: Handle optional overrun-throttle-ms property
        - ARM: dts: imx53-ppd: Fix ACHC entry
        - arm64: dts: qcom: ipq8074: fix pci node reg property
        - arm64: dts: qcom: sdm660: use reg value for memory node
        - arm64: dts: qcom: ipq6018: drop '0x' from unit address
        - arm64: dts: qcom: sdm630: don't use underscore in node name
        - arm64: dts: qcom: msm8994: don't use underscore in node name
        - arm64: dts: qcom: msm8996: don't use underscore in node name
        - arm64: dts: qcom: sm8250: Fix epss_l3 unit address
        - nvmem: qfprom: Fix up qfprom_disable_fuse_blowing() ordering
        - net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
        - drm/msm: mdp4: drop vblank get/put from prepare/complete_commit
        - drm/msm/dsi: Fix DSI and DSI PHY regulator config from SDM660
        - drm: xlnx: zynqmp_dpsub: Call pm_runtime_get_sync before setting pixel clock
        - drm: xlnx: zynqmp: release reset to DP controller before accessing DP
          registers
        - drm/amd/display: fix missing writeback disablement if plane is removed
        - drm/amd/display: fix incorrect CM/TF programming sequence in dwb
        - selftests/bpf: Fix xdp_tx.c prog section name
        - drm/vmwgfx: fix potential UAF in vmwgfx_surface.c
        - staging: rtl8723bs: fix right side of condition
        - Bluetooth: schedule SCO timeouts with delayed_work
        - Bluetooth: avoid circular locks in sco_sock_connect
        - drm/msm/dp: reduce link rate if failed at link training 1
        - drm/msm/dp: return correct edid checksum after corrupted edid checksum read
        - drm/msm/dp: do not end dp link training until video is ready
        - net/mlx5: Fix variable type to match 64bit
        - gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable
          access in amdgpu_i2c_router_select_ddc_port()
        - drm/display: fix possible null-pointer dereference in dcn10_set_clock()
        - mac80211: Fix monitor MTU limit so that A-MSDUs get through
        - ARM: tegra: acer-a500: Remove bogus USB VBUS regulators
        - ARM: tegra: tamonten: Fix UART pad setting
        - arm64: tegra: Fix compatible string for Tegra132 CPUs
        - arm64: dts: imx8mm-venice-gw700x: fix mp5416 pmic config
        - arm64: dts: imx8mm-venice-gw700x: fix invalid pmic pin config
        - arm64: dts: imx8mm-venice-gw71xx: fix USB OTG VBUS
        - arm64: dts: ls1046a: fix eeprom entries
        - nvme-tcp: don't check blk_mq_tag_to_rq when receiving pdu data
        - nvme: code command_id with a genctr for use-after-free validation
        - Bluetooth: Fix handling of LE Enhanced Connection Complete
        - opp: Don't print an error if required-opps is missing
        - serial: sh-sci: fix break handling for sysrq
        - iomap: pass writeback errors to the mapping
        - tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD
        - locking/rtmutex: Set proper wait context for lockdep
        - rpc: fix gss_svc_init cleanup on failure
        - iavf: use mutexes for locking of critical sections
        - selftests/bpf: Correctly display subtest skip status
        - selftests/bpf: Fix flaky send_signal test
        - hwmon: (pmbus/ibm-cffps) Fix write bits for LED control
        - staging: rts5208: Fix get_ms_information() heap buffer size
        - selftests: nci: Fix the code for next nlattr offset
        - selftests: nci: Fix the wrong condition
        - net: Fix offloading indirect devices dependency on qdisc order creation
        - kselftest/arm64: mte: Fix misleading output when skipping tests
        - kselftest/arm64: pac: Fix skipping of tests on systems without PAC
        - gfs2: Don't call dlm after protocol is unmounted
        - usb: chipidea: host: fix port index underflow and UBSAN complains
        - lockd: lockd server-side shouldn't set fl_ops
        - drm/exynos: Always initialize mapping in exynos_drm_register_dma()
        - rtl8xxxu: Fix the handling of TX A-MPDU aggregation
        - rtw88: use read_poll_timeout instead of fixed sleep
        - rtw88: wow: build wow function only if CONFIG_PM is on
        - rtw88: wow: fix size access error of probe request
        - octeontx2-pf: Fix NIX1_RX interface backpressure
        - m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch
        - btrfs: remove racy and unnecessary inode transaction update when using no-
          holes
        - btrfs: tree-log: check btrfs_lookup_data_extent return value
        - soundwire: intel: fix potential race condition during power down
        - ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER
        - ASoC: Intel: Skylake: Fix passing loadable flag for module
        - of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
        - mmc: sdhci-of-arasan: Modified SD default speed to 19MHz for ZynqMP
        - mmc: sdhci-of-arasan: Check return value of non-void funtions
        - mmc: rtsx_pci: Fix long reads when clock is prescaled
        - selftests/bpf: Enlarge select() timeout for test_maps
        - mmc: core: Return correct emmc response in case of ioctl error
        - samples: pktgen: fix to print when terminated normally
        - cifs: fix wrong release in sess_alloc_buffer() failed path
        - Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST
          quirk set"
        - usb: dwc3: imx8mp: request irq after initializing dwc3
        - usb: musb: musb_dsps: request_irq() after initializing musb
        - usbip: give back URBs for unsent unlink requests during cleanup
        - usbip:vhci_hcd USB port can get stuck in the disabled state
        - usb: xhci-mtk: fix use-after-free of mtk->hcd
        - ASoC: rockchip: i2s: Fix regmap_ops hang
        - ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
        - ASoC: soc-pcm: protect BE dailink state changes in trigger
        - drm/amdkfd: Account for SH/SE count when setting up cu masks.
        - nfs: don't atempt blocking locks on nfs reexports
        - nfsd: fix crash on LOCKT on reexported NFSv3
        - iwlwifi: pcie: free RBs during configure
        - iwlwifi: mvm: Do not use full SSIDs in 6GHz scan
        - iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed
        - iwlwifi: mvm: avoid static queue number aliasing
        - iwlwifi: mvm: Fix umac scan request probe parameters
        - iwlwifi: mvm: fix access to BSS elements
        - iwlwifi: fw: correctly limit to monitor dump
        - iwlwifi: mvm: Fix scan channel flags settings
        - net/mlx5: DR, fix a potential use-after-free bug
        - net/mlx5: DR, Enable QP retransmission
        - parport: remove non-zero check on count
        - selftests/bpf: Fix potential unreleased lock
        - wcn36xx: Fix missing frame timestamp for beacon/probe-resp
        - ath9k: fix OOB read ar9300_eeprom_restore_internal
        - ath9k: fix sleeping in atomic context
        - net: fix NULL pointer reference in cipso_v4_doi_free
        - fix array-index-out-of-bounds in taprio_change
        - net: w5100: check return value after calling platform_get_resource()
        - net: hns3: clean up a type mismatch warning
        - parisc: fix crash with signals and alloca
        - parisc: Fix compile failure when building 64-bit kernel natively
        - printk/console: Check consistent sequence number when handling race in
          console_unlock()
        - ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup()
        - scsi: BusLogic: Fix missing pr_cont() use
        - scsi: qla2xxx: Changes to support kdump kernel
        - scsi: qla2xxx: Sync queue idx with queue_pair_map idx
        - mtd: rawnand: intel: Fix error handling in probe
        - cpufreq: powernv: Fix init_chip_info initialization in numa=off
        - s390/pv: fix the forcing of the swiotlb
        - s390/topology: fix topology information when calling cpu hotplug notifiers
        - hugetlb: fix hugetlb cgroup refcounting during vma split
        - mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()
        - mm/hmm: bypass devmap pte when all pfn requested flags are fulfilled
        - mm/hugetlb: initialize hugetlb_usage in mm_init
        - mm,vmscan: fix divide by zero in get_scan_count
        - memcg: enable accounting for pids in nested pid namespaces
        - libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind
        - platform/chrome: cros_ec_proto: Send command again when timeout occurs
        - lib/test_stackinit: Fix static initializer test
        - net: dsa: lantiq_gswip: fix maximum frame length
        - net: stmmac: Fix overall budget calculation for rxtx_napi
        - drm/mgag200: Select clock in PLL update functions
        - drm/msi/mdp4: populate priv->kms in mdp4_kms_init
        - drm/dp_mst: Fix return code on sideband message failure
        - drm/panfrost: Make sure MMU context lifetime is not bound to panfrost_priv
        - drm/amdgpu: Fix BUG_ON assert
        - drm/amdgpu: Fix a deadlock if previous GEM object allocation fails
        - drm/amd/display: Update number of DCN3 clock states
        - drm/amd/display: Update bounding box states (v2)
        - drm/amd/display: setup system context for APUs
        - drm/msm/disp/dpu1: add safe lut config in dpu driver
        - drm/panfrost: Simplify lock_region calculation
        - drm/panfrost: Use u64 for size in lock_region
        - drm/panfrost: Clamp lock region to Bifrost minimum
        - Linux 5.13.19
    
      * Add l2tp.sh in net from ubuntu_kernel_selftests back (LP: #1934293)
        - Revert "UBUNTU: SAUCE: selftests/net -- disable l2tp.sh test"
    
     -- Stefan Bader <email address hidden>  Fri, 05 Nov 2021 10:21:21 +0100
  • linux (5.13.0-21.21) impish; urgency=medium
    
      * impish/linux: 5.13.0-21.21 -proposed tracker (LP: #1947347)
    
      * It hangs while booting up with AMD W6800 [1002:73A3] (LP: #1945553)
        - drm/amdgpu: Rename flag which prevents HW access
        - drm/amd/pm: Fix a bug communicating with the SMU (v5)
        - drm/amd/pm: Fix a bug in semaphore double-lock
    
      * Add final-checks to check certificates (LP: #1947174)
        - [Packaging] Add system trusted and revocation keys final check
    
      * No sound on Lenovo laptop models Legion 15IMHG05, Yoga 7 14ITL5, and 13s
        Gen2 (LP: #1939052)
        - ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i
          15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops.
        - ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo 13s
          Gen2
    
      * Check for changes relevant for security certifications (LP: #1945989)
        - [Packaging] Add a new fips-checks script
        - [Packaging] Add fips-checks as part of finalchecks
    
      * BCM57800 SRIOV bug causes interfaces to disappear (LP: #1945707)
        - bnx2x: Fix enabling network interfaces without VFs
    
      * CVE-2021-3759
        - memcg: enable accounting of ipc resources
    
      * [impish] Remove the downstream xr-usb-uart driver (LP: #1945938)
        - SAUCE: xr-usb-serial: remove driver
        - [Config] update modules list
    
      * Fix A yellow screen pops up in an instant (< 1 second) and then disappears
        before loading the system (LP: #1945932)
        - drm/i915: Stop force enabling pipe bottom color gammma/csc
    
      * Impish update: v5.13.18 upstream stable release (LP: #1946249)
        - Linux 5.13.18
    
      * Impish update: v5.13.17 upstream stable release (LP: #1946247)
        - locking/mutex: Fix HANDOFF condition
        - regmap: fix the offset of register error log
        - regulator: tps65910: Silence deferred probe error
        - crypto: mxs-dcp - Check for DMA mapping errors
        - sched/deadline: Fix reset_on_fork reporting of DL tasks
        - power: supply: axp288_fuel_gauge: Report register-address on readb / writeb
          errors
        - crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
        - sched/deadline: Fix missing clock update in migrate_task_rq_dl()
        - rcu/tree: Handle VM stoppage in stall detection
        - EDAC/mce_amd: Do not load edac_mce_amd module on guests
        - hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns()
        - hrtimer: Ensure timerfd notification for HIGHRES=n
        - udf: Check LVID earlier
        - udf: Fix iocharset=utf8 mount option
        - isofs: joliet: Fix iocharset=utf8 mount option
        - bcache: add proper error unwinding in bcache_device_init
        - nbd: add the check to prevent overflow in __nbd_ioctl()
        - blk-throtl: optimize IOPS throttle for large IO scenarios
        - nvme-tcp: don't update queue count when failing to set io queues
        - nvme-rdma: don't update queue count when failing to set io queues
        - nvmet: pass back cntlid on successful completion
        - power: supply: smb347-charger: Add missing pin control activation
        - power: supply: max17042_battery: fix typo in MAx17042_TOFF
        - s390/cio: add dev_busid sysfs entry for each subchannel
        - s390/zcrypt: fix wrong offset index for APKA master key valid state
        - libata: fix ata_host_start()
        - sched/topology: Skip updating masks for non-online nodes
        - crypto: omap - Fix inconsistent locking of device lists
        - crypto: qat - do not ignore errors from enable_vf2pf_comms()
        - crypto: qat - handle both source of interrupt in VF ISR
        - crypto: qat - fix reuse of completion variable
        - crypto: qat - fix naming for init/shutdown VF to PF notifications
        - crypto: qat - do not export adf_iov_putmsg()
        - crypto: hisilicon/sec - fix the abnormal exiting process
        - crypto: hisilicon/sec - modify the hardware endian configuration
        - crypto: tcrypt - Fix missing return value check
        - fcntl: fix potential deadlocks for &fown_struct.lock
        - fcntl: fix potential deadlock for &fasync_struct.fa_lock
        - udf_get_extendedattr() had no boundary checks.
        - io-wq: remove GFP_ATOMIC allocation off schedule out path
        - s390/kasan: fix large PMD pages address alignment check
        - s390/pci: fix misleading rc in clp_set_pci_fn()
        - s390/debug: keep debug data on resize
        - s390/debug: fix debug area life cycle
        - s390/ap: fix state machine hang after failure to enable irq
        - sched/debug: Don't update sched_domain debug directories before
          sched_debug_init()
        - power: supply: cw2015: use dev_err_probe to allow deferred probe
        - m68k: emu: Fix invalid free in nfeth_cleanup()
        - crypto: x86/aes-ni - add missing error checks in XTS code
        - crypto: ecc - handle unaligned input buffer in ecc_swap_digits
        - sched/numa: Fix is_core_idle()
        - sched: Fix UCLAMP_FLAG_IDLE setting
        - rcu: Fix to include first blocked task in stall warning
        - rcu: Fix stall-warning deadlock due to non-release of rcu_node ->lock
        - m68k: Fix invalid RMW_INSNS on CPUs that lack CAS
        - block: return ELEVATOR_DISCARD_MERGE if possible
        - spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
        - spi: spi-pic32: Fix issue with uninitialized dma_slave_config
        - genirq/timings: Fix error return code in irq_timings_test_irqs()
        - irqchip/loongson-pch-pic: Improve edge triggered interrupt support
        - lib/mpi: use kcalloc in mpi_resize
        - clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock
          source channel
        - block: nbd: add sanity check for first_minor
        - spi: coldfire-qspi: Use clk_disable_unprepare in the remove function
        - irqchip/apple-aic: Fix irq_disable from within irq handlers
        - irqchip/gic-v3: Fix priority comparison when non-secure priorities are used
        - crypto: qat - use proper type for vf_mask
        - certs: Trigger creation of RSA module signing key if it's not an RSA key
        - tpm: ibmvtpm: Avoid error message when process gets signal while waiting
        - io_uring: refactor io_submit_flush_completions()
        - x86/mce: Defer processing of early errors
        - spi: davinci: invoke chipselect callback
        - blk-crypto: fix check for too-large dun_bytes
        - regulator: vctrl: Use locked regulator_get_voltage in probe path
        - regulator: vctrl: Avoid lockdep warning in enable/disable ops
        - spi: sprd: Fix the wrong WDG_LOAD_VAL
        - spi: spi-zynq-qspi: use wait_for_completion_timeout to make
          zynq_qspi_exec_mem_op not interruptible
        - crypto: rmd320 - remove rmd320 in Makefile
        - EDAC/i10nm: Fix NVDIMM detection
        - drm/panfrost: Fix missing clk_disable_unprepare() on error in
          panfrost_clk_init()
        - drm/gma500: Fix end of loop tests for list_for_each_entry
        - ASoC: mediatek: mt8192:Fix Unbalanced pm_runtime_enable in
          mt8192_afe_pcm_dev_probe
        - ASoC: mediatek: mt8183: Fix Unbalanced pm_runtime_enable in
          mt8183_afe_pcm_dev_probe
        - media: TDA1997x: enable EDID support
        - leds: is31fl32xx: Fix missing error code in is31fl32xx_parse_dt()
        - soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally
        - media: cxd2880-spi: Fix an error handling path
        - drm/of: free the right object
        - bpf: Fix a typo of reuseport map in bpf.h.
        - bpf: Fix potential memleak and UAF in the verifier.
        - drm/of: free the iterator object on failure
        - gve: fix the wrong AdminQ buffer overflow check
        - libbpf: Fix the possible memory leak on error
        - ARM: dts: aspeed-g6: Fix HVI3C function-group in pinctrl dtsi
        - arm64: dts: renesas: r8a77995: draak: Remove bogus adv7511w properties
        - i40e: improve locking of mac_filter_hash
        - arm64: dts: qcom: sc7180: Set adau wakeup delay to 80 ms
        - soc: qcom: rpmhpd: Use corner in power_off
        - libbpf: Fix removal of inner map in bpf_object__create_map
        - gfs2: Fix memory leak of object lsi on error return path
        - arm64: dts: qcom: sm8250: fix usb2 qmp phy node
        - bpf, selftests: Fix test_maps now that sockmap supports UDP
        - firmware: fix theoretical UAF race with firmware cache and resume
        - driver core: Fix error return code in really_probe()
        - ionic: cleanly release devlink instance
        - media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
        - media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
        - media: dvb-usb: Fix error handling in dvb_usb_i2c_init
        - media: go7007: fix memory leak in go7007_usb_probe
        - media: go7007: remove redundant initialization
        - media: rockchip/rga: use pm_runtime_resume_and_get()
        - media: rockchip/rga: fix error handling in probe
        - media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats
        - media: atomisp: fix the uninitialized use and rename "retvalue"
        - Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
        - Bluetooth: btusb: Fix a unspported condition to set available debug features
        - 6lowpan: iphc: Fix an off-by-one check of array index
        - tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
        - ARM: dts: meson8: Use a higher default GPU clock frequency
        - ARM: dts: meson8b: odroidc1: Fix the pwm regulator supply properties
        - ARM: dts: meson8b: mxq: Fix the pwm regulator supply properties
        - ARM: dts: meson8b: ec100: Fix the pwm regulator supply properties
        - net/mlx5e: Prohibit inner indir TIRs in IPoIB
        - net/mlx5e: Block LRO if firmware asks for tunneled LRO
        - cgroup/cpuset: Fix a partition bug with hotplug
        - drm: mxsfb: Enable recovery on underflow
        - drm: mxsfb: Increase number of outstanding requests on V4 and newer HW
        - drm: mxsfb: Clear FIFO_CLEAR bit
        - net: cipso: fix warnings in netlbl_cipsov4_add_std
        - net: ti: am65-cpsw-nuss: fix wrong devlink release order
        - drm: rcar-du: Don't put reference to drm_device in rcar_du_remove()
        - Bluetooth: mgmt: Fix wrong opcode in the response for add_adv cmd
        - tools: Free BTF objects at various locations
        - arm64: dts: renesas: hihope-rzg2-ex: Add EtherAVB internal rx delay
        - devlink: Break parameter notification sequence to be before/after
          unload/load driver
        - net/mlx5: Fix missing return value in mlx5_devlink_eswitch_inline_mode_set()
        - i2c: highlander: add IRQ check
        - leds: lgm-sso: Put fwnode in any case during ->probe()
        - leds: lgm-sso: Don't spam logs when probe is deferred
        - leds: lt3593: Put fwnode in any case during ->probe()
        - leds: rt8515: Put fwnode in any case during ->probe()
        - leds: trigger: audio: Add an activate callback to ensure the initial
          brightness is set
        - media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
        - media: omap3isp: Fix missing unlock in isp_subdev_notifier_complete()
        - media: venus: hfi: fix return value check in sys_get_prop_image_version()
        - media: venus: venc: Fix potential null pointer dereference on pointer fmt
        - media: venus: helper: do not set constrained parameters for UBWC
        - soc: mmsys: mediatek: add mask to mmsys routes
        - PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
        - PCI: PM: Enable PME if it can be signaled from D3cold
        - bpf, samples: Add missing mprog-disable to xdp_redirect_cpu's optstring
        - soc: qcom: smsm: Fix missed interrupts if state changes while masked
        - debugfs: Return error during {full/open}_proxy_open() on rmmod
        - Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
        - net: ti: am65-cpsw-nuss: fix RX IRQ state after .ndo_stop()
        - net: dsa: stop syncing the bridge mcast_router attribute at join time
        - net: dsa: mt7530: remove the .port_set_mrouter implementation
        - net: dsa: don't disable multicast flooding to the CPU even without an IGMP
          querier
        - PM: EM: Increase energy calculation precision
        - selftests/bpf: Fix bpf-iter-tcp4 test to print correctly the dest IP
        - leds: lgm-sso: Propagate error codes from callee to caller
        - drm/msm/mdp4: refactor HW revision detection into read_mdp_hw_revision
        - drm/msm/mdp4: move HW revision detection to earlier phase
        - drm/msm/dp: update is_connected status base on sink count at dp_pm_resume()
        - drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs
        - arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
        - counter: 104-quad-8: Return error when invalid mode during ceiling_write
        - cgroup/cpuset: Miscellaneous code cleanup
        - cgroup/cpuset: Fix violation of cpuset locking rule
        - ASoC: Intel: Fix platform ID matching
        - Bluetooth: fix repeated calls to sco_sock_kill
        - drm/msm/dsi: Fix some reference counted resource leaks
        - drm/msm/dp: replug event is converted into an unplug followed by an plug
          events
        - net/mlx5: Fix unpublish devlink parameters
        - ASoC: rt5682: Implement remove callback
        - ASoC: rt5682: Properly turn off regulators if wrong device ID
        - usb: dwc3: meson-g12a: add IRQ check
        - usb: dwc3: qcom: add IRQ check
        - usb: gadget: udc: at91: add IRQ check
        - usb: gadget: udc: s3c2410: add IRQ check
        - usb: misc: brcmstb-usb-pinmap: add IRQ check
        - usb: phy: fsl-usb: add IRQ check
        - usb: phy: twl6030: add IRQ checks
        - usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse
        - selftests/bpf: Fix test_core_autosize on big-endian machines
        - devlink: Clear whole devlink_flash_notify struct
        - samples: pktgen: add missing IPv6 option to pktgen scripts
        - net: stmmac: fix INTR TBU status affecting irq count statistic
        - PM: cpu: Make notifier chain use a raw_spinlock_t
        - usb: host: ohci-tmio: add IRQ check
        - usb: phy: tahvo: add IRQ check
        - libbpf: Re-build libbpf.so when libbpf.map changes
        - mac80211: Fix insufficient headroom issue for AMSDU
        - locking/local_lock: Add missing owner initialization
        - lockd: Fix invalid lockowner cast after vfs_test_lock
        - SUNRPC: Fix a NULL pointer deref in trace_svc_stats_latency()
        - nfsd4: Fix forced-expiry locking
        - arm64: dts: marvell: armada-37xx: Extend PCIe MEM space
        - clk: staging: correct reference to config IOMEM to config HAS_IOMEM
        - [Config] updateconfigs for COMMON_CLK_XLNX_CLKWZRD
        - i2c: synquacer: fix deferred probing
        - hwmon: (pmbus/bpa-rs600) Don't use rated limits as warn limits
        - hwmon: remove amd_energy driver in Makefile
        - ASoC: fsl_rpmsg: Check -EPROBE_DEFER for getting clocks
        - firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()'
        - usb: gadget: mv_u3d: request_irq() after initializing UDC
        - mm/swap: consider max pages in iomap_swapfile_add_extent
        - lkdtm: replace SCSI_DISPATCH_CMD with SCSI_QUEUE_RQ
        - Bluetooth: add timeout sanity check to hci_inquiry
        - i2c: iop3xx: fix deferred probing
        - i2c: s3c2410: fix IRQ check
        - i2c: hix5hd2: fix IRQ check
        - gfs2: init system threads before freeze lock
        - rsi: fix error code in rsi_load_9116_firmware()
        - rsi: fix an error code in rsi_probe()
        - octeontx2-af: cn10k: Fix SDP base channel number
        - octeontx2-pf: send correct vlan priority mask to npc_install_flow_req
        - octeontx2-pf: Don't install VLAN offload rule if netdev is down
        - octeontx2-pf: Fix algorithm index in MCAM rules with RSS action
        - m68k: coldfire: return success for clk_enable(NULL)
        - ASoC: Intel: kbl_da7219_max98927: Fix format selection for max98373
        - ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs
        - ASoC: Intel: Skylake: Fix module resource and format selection
        - mmc: sdhci: Fix issue with uninitialized dma_slave_config
        - mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
        - mmc: moxart: Fix issue with uninitialized dma_slave_config
        - bpf: Fix possible out of bound write in narrow load handling
        - CIFS: Fix a potencially linear read overflow
        - i2c: mt65xx: fix IRQ check
        - i2c: xlp9xx: fix main IRQ check
        - octeontx2-pf: cn10k: Fix error return code in otx2_set_flowkey_cfg()
        - usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
        - usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA
          config is available
        - usb: bdc: Fix a resource leak in the error handling path of 'bdc_probe()'
        - tty: serial: fsl_lpuart: fix the wrong mapbase value
        - ASoC: wcd9335: Fix a double irq free in the remove function
        - ASoC: wcd9335: Fix a memory leak in the error handling path of the probe
          function
        - ASoC: wcd9335: Disable irq on slave ports in the remove function
        - iwlwifi: skip first element in the WTAS ACPI table
        - net/mlx5: Remove all auxiliary devices at the unregister event
        - net/mlx5e: Fix possible use-after-free deleting fdb rule
        - net/mlx5: E-Switch, Set vhca id valid flag when creating indir fwd group
        - net/mlx5e: Use correct eswitch for stack devices with lag
        - ice: Only lock to update netdev dev_addr
        - net: phy: marvell10g: fix broken PHY interrupts for anyone after us in the
          driver probe list
        - ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
        - atlantic: Fix driver resume flow.
        - bcma: Fix memory leak for internally-handled cores
        - brcmfmac: pcie: fix oops on failure to resume and reprobe
        - ipv6: make exception cache less predictible
        - ipv4: make exception cache less predictible
        - net: qrtr: make checks in qrtr_endpoint_post() stricter
        - sch_htb: Fix inconsistency when leaf qdisc creation fails
        - net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
        - net: qualcomm: fix QCA7000 checksum handling
        - octeontx2-af: Fix loop in free and unmap counter
        - octeontx2-af: Fix mailbox errors in nix_rss_flowkey_cfg
        - octeontx2-af: Fix static code analyzer reported issues
        - octeontx2-af: Set proper errorcode for IPv4 checksum errors
        - ipv4: fix endianness issue in inet_rtm_getroute_build_skb()
        - amdgpu/pm: add extra info to SMU msg pre-check failed message
        - ASoC: rt5682: Remove unused variable in rt5682_i2c_remove()
        - iwlwifi Add support for ax201 in Samsung Galaxy Book Flex2 Alpha
        - f2fs: guarantee to write dirty data when enabling checkpoint back
        - auxdisplay: hd44780: Fix oops on module unloading
        - io_uring: limit fixed table size by RLIMIT_NOFILE
        - io_uring: IORING_OP_WRITE needs hash_reg_file set
        - io_uring: io_uring_complete() trace should take an integer
        - bio: fix page leak bio_add_hw_page failure
        - raid1: ensure write behind bio has less than BIO_MAX_VECS sectors
        - cifs: Do not leak EDEADLK to dgetents64 for STATUS_USER_SESSION_DELETED
        - smb3: fix posix extensions mount option
        - tty: Fix data race between tiocsti() and flush_to_ldisc()
        - x86/efi: Restore Firmware IDT before calling ExitBootServices()
        - perf/x86/amd/ibs: Extend PERF_PMU_CAP_NO_EXCLUDE to IBS Op
        - x86/resctrl: Fix a maybe-uninitialized build warning treated as error
        - Revert "KVM: x86: mmu: Add guest physical address check in translate_gpa()"
        - KVM: s390: index kvm->arch.idle_mask by vcpu_idx
        - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is
          adjusted
        - KVM: x86: clamp host mapping level to max_level in kvm_mmu_max_mapping_level
        - KVM: x86/mmu: Avoid collision with !PRESENT SPTEs in TDP MMU lpage stats
        - KVM: VMX: avoid running vmx_handle_exit_irqoff in case of emulation
        - KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter
        - KVM: arm64: Unregister HYP sections from kmemleak in protected mode
        - ARM: dts: at91: add pinctrl-{names, 0} for all gpios
        - io-wq: check max_worker limits if a worker transitions bound state
        - md/raid10: Remove unnecessary rcu_dereference in raid10_handle_discard
        - char: tpm: Kconfig: remove bad i2c cr50 select
        - fuse: truncate pagecache on atomic_o_trunc
        - fuse: flush extending writes
        - fuse: wait for writepages in syncfs
        - IMA: remove -Wmissing-prototypes warning
        - IMA: remove the dependency on CRYPTO_MD5
        - fbmem: don't allow too huge resolutions
        - RDMA/mlx5: Fix number of allocated XLT entries
        - backlight: pwm_bl: Improve bootloader/kernel device handover
        - clk: kirkwood: Fix a clocking boot regression
        - Linux 5.13.17
    
      * AMD A8-7680 (amdgpu): broken Xorg acceleration and hibernation
        (LP: #1920674) // Impish update: v5.13.17 upstream stable release
        (LP: #1946247)
        - drm/amdgpu/acp: Make PM domain really work
    
      * Impish update: v5.13.16 upstream stable release (LP: #1946245)
        - firmware: dmi: Move product_sku info to the end of the modalias
        - igmp: Add ip_mc_list lock in ip_check_mc_rcu
        - net: ll_temac: Remove left-over debug message
        - Revert "r8169: avoid link-up interrupt issue on RTL8106e if user enables
          ASPM"
        - blk-mq: fix kernel panic during iterating over flush request
        - blk-mq: fix is_flush_rq
        - blk-mq: clearing flush request reference in tags->rqs[]
        - ALSA: usb-audio: Add registration quirk for JBL Quantum 800
        - Bluetooth: Add additional Bluetooth part for Realtek 8852AE
        - Bluetooth: btusb: Make the CSR clone chip force-suspend workaround more
          generic
        - usb: host: xhci-rcar: Don't reload firmware after the completion
        - usb: xhci-mtk: fix issue of out-of-bounds array access
        - usb: cdnsp: fix the wrong mult value for HS isoc or intr
        - usb: gadget: tegra-xudc: fix the wrong mult value for HS isoc or intr
        - usb: mtu3: restore HS function when set SS/SSP
        - usb: mtu3: use @mult for HS isoc or intr
        - usb: mtu3: fix the wrong HS mult value
        - xhci: fix even more unsafe memory usage in xhci tracing
        - xhci: fix unsafe memory usage in xhci tracing
        - xhci: Fix failure to give back some cached cancelled URBs.
        - x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions
        - PCI: Call Max Payload Size-related fixup quirks early
        - Linux 5.13.16
    
      * Impish update: v5.13.15 upstream stable release (LP: #1946242)
        - ext4: fix e2fsprogs checksum failure for mounted filesystem
        - gpu: ipu-v3: Fix i.MX IPU-v3 offset calculations for (semi)planar U/V
          formats
        - reset: reset-zynqmp: Fixed the argument data type
        - qed: Fix the VF msix vectors flow
        - net: dsa: mv88e6xxx: Update mv88e6393x serdes errata
        - riscv: dts: microchip: Use 'local-mac-address' for emac1
        - riscv: dts: microchip: Add ethernet0 to the aliases node
        - net: macb: Add a NULL check on desc_ptp
        - qede: Fix memset corruption
        - perf/x86/intel/pt: Fix mask of num_address_ranges
        - ceph: fix possible null-pointer dereference in ceph_mdsmap_decode()
        - perf/x86/amd/ibs: Work around erratum #1197
        - perf/x86/amd/power: Assign pmu.module
        - cryptoloop: add a deprecation warning
        - xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG
        - USB: serial: pl2303: fix GL type detection
        - USB: serial: cp210x: fix control-characters error handling
        - USB: serial: cp210x: fix flow-control error handling
        - ALSA: hda/realtek: Quirk for HP Spectre x360 14 amp setup
        - ALSA: usb-audio: Fix regression on Sony WALKMAN NW-A45 DAC
        - ALSA: hda/realtek: Workaround for conflicting SSID on ASUS ROG Strix G17
        - ALSA: pcm: fix divide error in snd_pcm_lib_ioctl
        - media: stkwebcam: fix memory leak in stk_camera_probe
        - Linux 5.13.15
    
      * Re-enable DEBUG_INFO_BTF where it was dissabled (LP: #1945632)
        - [Config] Re-enable CONFIG_DEBUG_INFO_BTF=y on armhf
    
      * Fix missing HDMI audio on Intel RKL (LP: #1945556)
        - drm/i915/audio: Use BIOS provided value for RKL HDA link
    
      * USB Type-C hotplug event not handled properly in TGL-H system during s2idle
        (LP: #1931072)
        - drm/i915: Force a TypeC PHY disconnect during suspend/shutdown
    
      * Packaging resync (LP: #1786013)
        - [Packaging] update Ubuntu.md
    
     -- Stefan Bader <email address hidden>  Tue, 19 Oct 2021 10:41:30 +0200
  • linux (5.13.0-20.20) impish; urgency=medium
    
      * impish/linux: 5.13.0-20.20 -proposed tracker (LP: #1947380)
    
      * PANIC at zfs_znode.c:335:zfs_znode_sa_init() // VERIFY(0 ==
        sa_handle_get_from_db(zfsvfs->z_os, db, zp, SA_HDL_SHARED, &zp->z_sa_hdl))
        failed (LP: #1906476)
        - debian/dkms-versions -- Update zfs to latest version
    
     -- Stefan Bader <email address hidden>  Fri, 15 Oct 2021 15:53:08 +0200
  • linux (5.13.0-19.19) impish; urgency=medium
    
      * impish/linux: 5.13.0-19.19 -proposed tracker (LP: #1946337)
    
      * impish:linux-aws 5.13 panic during systemd autotest (LP: #1946001)
        - [Config] disable KFENCE
    
     -- Andrea Righi <email address hidden>  Thu, 07 Oct 2021 11:09:51 +0200
  • linux (5.13.0-18.18) impish; urgency=medium
    
      * impish/linux: 5.13.0-18.18 -proposed tracker (LP: #1945995)
    
      * [21.10 FEAT] KVM: Use interpretation of specification exceptions
        (LP: #1932157)
        - KVM: s390: Enable specification exception interpretation
    
     -- Andrea Righi <email address hidden>  Mon, 04 Oct 2021 16:22:02 +0200
  • linux (5.13.0-17.17) impish; urgency=medium
    
      * impish/linux: 5.13.0-17.17 -proposed tracker (LP: #1944943)
    
      * Packaging resync (LP: #1786013)
        - debian/dkms-versions -- update from kernel-versions (main/master)
        - debian/dkms-versions -- update from kernel-versions (main/master)
    
      * Medion Notebook Keyboard not working (LP: #1909814)
        - ACPI: resources: Add DMI-based legacy IRQ override quirk
    
      * Can not boot impish in Cavium ThunderX  (LP: #1942633)
        - arm64: Restore forced disabling of KPTI on ThunderX
    
      * PCIE LnkCtl ASPM not enabled under VMD mode for Alder Lake platforms
        (LP: #1942160)
        - SAUCE: vmd: fixup bridge ASPM by driver name instead
    
      * CirrusLogic/CS8409: No headset mic device when plugged earphone jack when
        HDMI/DP is used on Dolphin platform (LP: #1943935)
        - SAUCE: ALSA: hda/cs8409: Setup Dolphin Headset Mic as Phantom Jack
        - ALSA: hda/cs8409: Initialize Codec only in init fixup.
        - ALSA: hda/cs8409: Ensure Type Detection is only run on startup when
          necessary
    
      * psock_snd.sh in net from ubuntu_kernel_selftests ADT failure with
        focal/groovy/hirsute/impish (LP: #1892213)
        - selftests/net: remove min gso test in packet_snd
    
      * Update mpt3sas Driver to 38.100.00.00 for Ubuntu 21.10 and 20.04
        (LP: #1935034)
        - scsi: mpt3sas: Documentation cleanup
        - scsi: mpt3sas: Handle firmware faults during first half of IOC init
        - scsi: mpt3sas: Handle firmware faults during second half of IOC init
        - scsi: core: Introduce scsi_build_sense()
        - scsi: mpt3sas: Fix fall-through warnings for Clang
        - scsi: mpt3sas: Fix Coverity reported issue
        - scsi: mpt3sas: Bump driver version to 38.100.00.00
    
      * Update fix for LP: #1936708 (LP: #1942972)
        - Revert "UBUNTU: SAUCE: drm/i915/dp: Use max params for older panels"
        - drm/i915/dp: Use max params for panels < eDP 1.4
    
      * [SRU][H/OEM-5.13/OEM-5.14/U] Fix invalid MAC address after hotplug tbt dock
        (LP: #1942999)
        - SAUCE: igc: wait for the MAC copy when enabled MAC passthrough
    
      * Speakup modules not included in Hirsute kernel (LP: #1942459)
        - [Config] CONFIG_SPEAKUP=m
    
      * s390x BPF JIT vulnerabilities (LP: #1943960)
        - s390/bpf: Fix branch shortening during codegen pass
        - s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant
        - s390/bpf: Fix optimizing out zero-extensions
    
      * CVE-2021-41073
        - io_uring: ensure symmetry in handling iter types in loop_rw_iter()
    
      * CVE-2021-40490
        - ext4: fix race writing to an inline_data file while its xattrs are changing
    
      *  LRMv5: switch primary version handling to kernel-versions data set
        (LP: #1928921)
        - [Packaging] switch to kernel-versions
    
      * Noise will pop up during WB or stay in Ubuntu OS when external speaker
        attached (LP: #1942043)
        - Revert "UBUNTU: SAUCE: ALSA: hda/cs8409: Prevent pops and clicks during
          reboot"
        - ALSA: hda: Release controller display power during shutdown/reboot
        - ALSA: hda: Release codec display power during shutdown/reboot
        - ALSA: hda: conexant: Turn off EAPD at suspend, too
        - ALSA: hda: Suspend codec at shutdown
        - ALSA: hda: Nuke unused reboot_notify callback
        - ALSA: hda: Disable runtime resume at shutdown
    
      * ALSA: hda/cs8409: Add support for dolphin (LP: #1939541)
        - ALSA: hda/cirrus: Move CS8409 HDA bridge to separate module
        - ALSA: hda/cs8409: Move arrays of configuration to a new file
        - ALSA: hda/cs8409: Use enums for register names and coefficients
        - ALSA: hda/cs8409: Mask all CS42L42 interrupts on initialization
        - ALSA: hda/cs8409: Reduce HS pops/clicks for Cyborg
        - ALSA: hda/cs8409: Disable unnecessary Ring Sense for Cyborg/Warlock/Bullseye
        - ALSA: hda/cs8409: Disable unsolicited responses during suspend
        - ALSA: hda/cs8409: Disable unsolicited response for the first boot
        - ALSA: hda/cs8409: Mask CS42L42 wake events
        - ALSA: hda/cs8409: Simplify CS42L42 jack detect.
        - ALSA: hda/cs8409: Prevent I2C access during suspend time
        - ALSA: hda/cs8409: Generalize volume controls
        - ALSA: hda/cs8409: Dont disable I2C clock between consecutive accesses
        - ALSA: hda/cs8409: Avoid setting the same I2C address for every access
        - ALSA: hda/cs8409: Avoid re-setting the same page as the last access
        - ALSA: hda/cs8409: Support i2c bulk read/write functions
        - ALSA: hda/cs8409: Separate CS8409, CS42L42 and project functions
        - ALSA: hda/cs8409: Move codec properties to its own struct
        - ALSA: hda/cs8409: Support multiple sub_codecs for Suspend/Resume/Unsol
          events
        - ALSA: hda/cs8409: Add Support to disable jack type detection for CS42L42
        - ALSA: hda/cs8409: Add support for dolphin
        - ALSA: hda/cs8409: Enable Full Scale Volume for Line Out Codec on Dolphin
        - ALSA: hda/cs8409: Set fixed sample rate of 48kHz for CS42L42
        - ALSA: hda/cs8409: Use timeout rather than retries for I2C transaction waits
        - ALSA: hda/cs8409: Remove unnecessary delays
        - ALSA: hda/cs8409: Follow correct CS42L42 power down sequence for suspend
        - ALSA: hda/cs8409: Unmute/Mute codec when stream starts/stops
        - ALSA: hda/cs8409: Prevent pops and clicks during suspend
        - SAUCE: ALSA: hda/cs8409: Prevent pops and clicks during reboot
        - [Config] Enable Cirrus Logic HDA bridge support
    
      * Impish update: v5.13.14 upstream stable release (LP: #1942644)
        - net: qrtr: fix another OOB Read in qrtr_endpoint_post
        - bpf: Fix ringbuf helper function compatibility
        - ASoC: rt5682: Adjust headset volume button threshold
        - ASoC: component: Remove misplaced prefix handling in pin control functions
        - platform/x86: Add and use a dual_accel_detect() helper
        - ARC: Fix CONFIG_STACKDEPOT
        - netfilter: ipset: Limit the maximal range of consecutive elements to
          add/delete
        - netfilter: conntrack: collect all entries in one cycle
        - once: Fix panic when module unload
        - io_uring: rsrc ref lock needs to be IRQ safe
        - blk-iocost: fix lockdep warning on blkcg->lock
        - ovl: fix uninitialized pointer read in ovl_lookup_real_one()
        - net: mscc: Fix non-GPL export of regmap APIs
        - can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX
          and TX error counters
        - ceph: correctly handle releasing an embedded cap flush
        - dt-bindings: sifive-l2-cache: Fix 'select' matching
        - riscv: Ensure the value of FP registers in the core dump file is up to date
        - powerpc: Re-enable ARCH_ENABLE_SPLIT_PMD_PTLOCK
        - mm/memory_hotplug: fix potential permanent lru cache disable
        - Revert "btrfs: compression: don't try to compress if we don't have enough
          pages"
        - net: stmmac: fix kernel panic due to NULL pointer dereference of xsk_pool
        - net: stmmac: fix kernel panic due to NULL pointer dereference of buf->xdp
        - drm/i915: Fix syncmap memory leak
        - drm/i915/dp: Drop redundant debug print
        - drm/amdgpu: Cancel delayed work when GFXOFF is disabled
        - drm/amdgpu: use the preferred pin domain after the check
        - drm/amdgpu: Fix build with missing pm_suspend_target_state module export
        - Revert "USB: serial: ch341: fix character loss at high transfer rates"
        - USB: serial: option: add new VID/PID to support Fibocom FG150
        - usb: renesas-xhci: Prefer firmware loading on unknown ROM state
        - usb: typec: tcpm: Raise vdm_sm_running flag only when VDM SM is running
        - usb: dwc3: gadget: Fix dwc3_calc_trbs_left()
        - usb: dwc3: gadget: Stop EP0 transfers during pullup disable
        - scsi: core: Fix hang of freezing queue between blocking and running device
        - RDMA/mlx5: Fix crash when unbind multiport slave
        - RDMA/uverbs: Track dmabuf memory regions
        - RDMA/bnxt_re: Add missing spin lock initialization
        - IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs()
        - RDMA/bnxt_re: Remove unpaired rtnl unlock in bnxt_re_dev_init()
        - RDMA/rxe: Fix memory allocation while in a spin lock
        - ice: do not abort devlink info if board identifier can't be found
        - net: usb: pegasus: fixes of set_register(s) return value evaluation;
        - igc: Use num_tx_queues when iterating over tx_ring queue
        - e1000e: Fix the max snoop/no-snoop latency for 10M
        - RDMA/efa: Free IRQ vectors on error flow
        - ip_gre: add validation for csum_start
        - xgene-v2: Fix a resource leak in the error handling path of 'xge_probe()'
        - net: marvell: fix MVNETA_TX_IN_PRGRS bit number
        - ucounts: Increase ucounts reference counter before the security hook
        - net/sched: ets: fix crash when flipping from 'strict' to 'quantum'
        - SUNRPC: Fix XPT_BUSY flag leakage in svc_handle_xprt()...
        - ipv6: use siphash in rt6_exception_hash()
        - ipv4: use siphash instead of Jenkins in fnhe_hashfun()
        - cxgb4: dont touch blocked freelist bitmap after free
        - net: dsa: hellcreek: Fix incorrect setting of GCL
        - net: dsa: hellcreek: Adjust schedule look ahead window
        - rtnetlink: Return correct error on changing device netns
        - net: hns3: clear hardware resource when loading driver
        - net: hns3: add waiting time before cmdq memory is released
        - net: hns3: fix speed unknown issue in bond 4
        - net: hns3: fix duplicate node in VLAN list
        - net: hns3: fix get wrong pfc_en when query PFC configuration
        - media: ipu3-cio2: Drop reference on error path in
          cio2_bridge_connect_sensor()
        - Revert "mmc: sdhci-iproc: Set SDHCI_QUIRK_CAP_CLOCK_BASE_BROKEN on BCM2711"
        - net: stmmac: add mutex lock to protect est parameters
        - net: stmmac: fix kernel panic due to NULL pointer dereference of plat->est
        - usb: gadget: u_audio: fix race condition on endpoint stop
        - perf/x86/intel/uncore: Fix integer overflow on 23 bit left shift of a u32
        - sched: Fix get_push_task() vs migrate_disable()
        - clk: renesas: rcar-usb2-clock-sel: Fix kernel NULL pointer dereference
        - iwlwifi: pnvm: accept multiple HW-type TLVs
        - iwlwifi: add new SoF with JF devices
        - iwlwifi: add new so-jf devices
        - opp: remove WARN when no valid OPPs remain
        - cpufreq: blocklist Qualcomm sm8150 in cpufreq-dt-platdev
        - virtio: Improve vq->broken access to avoid any compiler optimization
        - virtio_pci: Support surprise removal of virtio pci device
        - virtio_vdpa: reject invalid vq indices
        - vringh: Use wiov->used to check for read/write desc order
        - tools/virtio: fix build
        - platform/x86: asus-nb-wmi: Allow configuring SW_TABLET_MODE method with a
          module option
        - platform/x86: asus-nb-wmi: Add tablet_mode_sw=lid-flip quirk for the TP200s
        - qed: qed ll2 race condition fixes
        - qed: Fix null-pointer dereference in qed_rdma_create_qp()
        - Revert "drm/amd/pm: fix workload mismatch on vega10"
        - drm/amd/pm: change the workload type for some cards
        - blk-mq: don't grab rq's refcount in blk_mq_check_expired()
        - drm: Copy drm_wait_vblank to user before returning
        - platform/x86: gigabyte-wmi: add support for X570 GAMING X
        - drm/nouveau: recognise GA107
        - drm/nouveau/disp: power down unused DP links during init
        - drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences
        - platform/x86: gigabyte-wmi: add support for B450M S2H V2
        - net/rds: dma_map_sg is entitled to merge entries
        - arm64: initialize all of CNTHCTL_EL2
        - pipe: avoid unnecessary EPOLLET wakeups under normal loads
        - pipe: do FASYNC notifications for every pipe IO, not just state changes
        - tipc: call tipc_wait_for_connect only when dlen is not 0
        - vt_kdsetmode: extend console locking
        - Bluetooth: btusb: check conditions before enabling USB ALT 3 for WBS
        - net: dsa: mt7530: fix VLAN traffic leaks again
        - arm64: dts: qcom: msm8994-angler: Fix gpio-reserved-ranges 85-88
        - btrfs: fix NULL pointer dereference when deleting device by invalid id
        - Revert "floppy: reintroduce O_NDELAY fix"
        - fscrypt: add fscrypt_symlink_getattr() for computing st_size
        - ext4: report correct st_size for encrypted symlinks
        - f2fs: report correct st_size for encrypted symlinks
        - ubifs: report correct st_size for encrypted symlinks
        - Revert "parisc: Add assembly implementations for memset, strlen, strcpy,
          strncpy and strcat"
        - net: don't unconditionally copy_from_user a struct ifreq for socket ioctls
        - audit: move put_tree() to avoid trim_trees refcount underflow and UAF
        - platform/x86: Make dual_accel_detect() KIOX010A + KIOX020A detect more
          robust
        - Linux 5.13.14
    
      * Miscellaneous Ubuntu changes
        - [Packaging] drop x32 architecture configs
        - [Packaging] remove remaining references to ports
        - [Config] mark CONFIG_BPF_UNPRIV_DEFAULT_OFF enforced
        - SAUCE: md/raid6 algorithms: scale test duration for speedier boots
        - [Config] make sure KCSAN is disabled
        - [Config] update gcc version in configs
        - [Packaging] correctly evaluate release in update-dkms-versions
    
     -- Andrea Righi <email address hidden>  Fri, 24 Sep 2021 17:46:04 +0200
  • linux (5.13.0-16.16) impish; urgency=medium
    
      * impish/linux: 5.13.0-16.16 -proposed tracker (LP: #1942611)
    
      * Miscellaneous Ubuntu changes
        - [Config] update toolchain in configs
    
      * Miscellaneous upstream changes
        - Revert "UBUNTU: [Config] Enable CONFIG_UBSAN_BOUNDS"
    
     -- Andrea Righi <email address hidden>  Fri, 03 Sep 2021 16:21:14 +0200
  • linux (5.13.0-14.14) impish; urgency=medium
    
      * impish/linux: 5.13.0-14.14 -proposed tracker (LP: #1938565)
    
      * Miscellaneous Ubuntu changes
        - SAUCE: Revert "UBUNTU: SAUCE: random: Make getrandom() ready earlier"
        - SAUCE: random: properly make getrandom() ready earlier
    
      * Miscellaneous upstream changes
        - seq_buf: Fix overflow in seq_buf_putmem_hex()
        - bpf: Fix integer overflow in argument calculation for bpf_map_area_alloc
        - ext4: cleanup in-core orphan list if ext4_truncate() failed to get a
          transaction handle
        - ext4: fix kernel infoleak via ext4_extent_header
        - ext4: fix overflow in ext4_iomap_alloc()
        - ext4: return error code when ext4_fill_flex_info() fails
        - ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit
        - ext4: remove check for zero nr_to_scan in ext4_es_scan()
        - ext4: fix avefreec in find_group_orlov
        - ext4: use ext4_grp_locked_error in mb_find_extent
    
     -- Andrea Righi <email address hidden>  Mon, 02 Aug 2021 14:23:08 +0200
  • linux (5.13.0-13.13) impish; urgency=medium
    
      * impish/linux: 5.13.0-13.13 -proposed tracker (LP: #1937577)
    
      * Packaging resync (LP: #1786013)
        - update dkms package versions
    
      * Miscellaneous Ubuntu changes
        - SAUCE: shifts: update shiftfs for idmapped mounts
        - [Config] re-enable shiftfs
        - [Config] update toolchain in configs
    
     -- Andrea Righi <email address hidden>  Fri, 23 Jul 2021 16:12:58 +0200
  • linux (5.13.0-12.12) impish; urgency=medium
    
      * Packaging resync (LP: #1786013)
        - update dkms package versions
    
      * Impish update: v5.13.1 upstream stable release (LP: #1935807)
        - Revert "KVM: x86/mmu: Drop kvm_mmu_extended_role.cr4_la57 hack"
        - Linux 5.13.1
    
      * ubuntu_kernel_selftests ftrace fails on arm64 F / aws-5.8 / amd64 F
        azure-5.8 (LP: #1927749) // Impish update: v5.13.1 upstream stable release
        (LP: #1935807)
        - selftests/ftrace: fix event-no-pid on 1-core machine
    
      * ubuntu-host driver lacks lseek ops (LP: #1934110) // Impish update: v5.13.1
        upstream stable release (LP: #1935807)
        - ubuntu-host: add generic lseek op
    
      * Miscellaneous Ubuntu changes
        - [Config] Enable CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT
        - [Packaging] rename linux-unstable to linux in getabis
    
     -- Andrea Righi <email address hidden>  Mon, 12 Jul 2021 14:09:16 +0200
  • linux (5.13.0-11.11) impish; urgency=medium
    
      * impish/linux: 5.13.0-11.11 -proposed tracker (LP: #1933854)
    
      * Packaging resync (LP: #1786013)
        - [Packaging] update variants
    
      * Support builtin revoked certificates (LP: #1932029)
        - [Packaging] build canonical-revoked-certs.pem from branch/arch certs
        - [Packaging] Revoke 2012 UEFI signing certificate as built-in
        - [Config] Configure CONFIG_SYSTEM_REVOCATION_KEYS with revoked keys
    
      * Miscellaneous Ubuntu changes
        - [Packaging] Change source package name to linux
    
      * Miscellaneous upstream changes
        - mm/page_alloc: Correct return value of populated elements if bulk array is
          populated
    
     -- Andrea Righi <email address hidden>  Tue, 29 Jun 2021 07:50:25 +0200
  • linux (5.11.0-20.21+21.10.1) impish; urgency=medium
    
      * impish/linux: 5.11.0-20.21+21.10.1 -proposed tracker (LP: #1930056)
    
      * Packaging resync (LP: #1786013)
        - update dkms package versions
    
      [ Ubuntu: 5.11.0-20.21 ]
    
      * hirsute/linux: 5.11.0-20.21 -proposed tracker (LP: #1930854)
      * ath11k WIFI not working in proposed kernel 5.11.0-19-generic (LP: #1930637)
        - bus: mhi: core: Download AMSS image from appropriate function
    
      [ Ubuntu: 5.11.0-19.20 ]
    
      * hirsute/linux: 5.11.0-19.20 -proposed tracker (LP: #1930075)
      * Packaging resync (LP: #1786013)
        - update dkms package versions
      * CVE-2021-33200
        - bpf: Wrap aux data inside bpf_sanitize_info container
        - bpf: Fix mask direction swap upon off reg sign change
        - bpf: No need to simulate speculative domain for immediates
      * AX201 BT will cause system could not enter S0i3 (LP: #1928047)
        - SAUCE: drm/i915: Tweaked Wa_14010685332 for all PCHs
      * CVE-2021-3490
        - SAUCE: Revert "UBUNTU: SAUCE: bpf: verifier: fix ALU32 bounds tracking with
          bitwise ops"
        - gpf: Fix alu32 const subreg bound tracking on bitwise operations
      * CVE-2021-3489
        - SAUCE: Revert "UBUNTU: SAUCE: bpf: prevent writable memory-mapping of read-
          only ringbuf pages"
        - bpf: Prevent writable memory-mapping of read-only ringbuf pages
      * Select correct boot VGA when BIOS doesn't do it properly (LP: #1929217)
        - vgaarb: Use ACPI HID name to find integrated GPU
      * Realtek USB hubs in Dell WD19SC/DC/TB fail to work after exiting s2idle
        (LP: #1928242)
        - USB: Verify the port status when timeout happens during port suspend
      * CVE-2020-26145
        - ath10k: drop fragments with multicast DA for SDIO
        - ath10k: add CCMP PN replay protection for fragmented frames for PCIe
        - ath10k: drop fragments with multicast DA for PCIe
      * CVE-2020-26141
        - ath10k: Fix TKIP Michael MIC verification for PCIe
      * CVE-2020-24587
        - ath11k: Clear the fragment cache during key install
      * CVE-2020-24588
        - mac80211: properly handle A-MSDUs that start with an RFC 1042 header
        - cfg80211: mitigate A-MSDU aggregation attacks
        - mac80211: drop A-MSDUs on old ciphers
        - ath10k: drop MPDU which has discard flag set by firmware for SDIO
      * CVE-2020-26139
        - mac80211: do not accept/forward invalid EAPOL frames
      * CVE-2020-24586 // CVE-2020-24587 // CVE-2020-24587 for such cases.
        - mac80211: extend protection against mixed key and fragment cache attacks
      * CVE-2020-24586 // CVE-2020-24587
        - mac80211: prevent mixed key and fragment cache attacks
        - mac80211: add fragment cache to sta_info
        - mac80211: check defrag PN against current frame
        - mac80211: prevent attacks on TKIP/WEP as well
      * CVE-2020-26147
        - mac80211: assure all fragments are encrypted
      * raid10: Block discard is very slow, causing severe delays for mkfs and
        fstrim operations (LP: #1896578)
        - md: add md_submit_discard_bio() for submitting discard bio
        - md/raid10: extend r10bio devs to raid disks
        - md/raid10: pull the code that wait for blocked dev into one function
        - md/raid10: improve raid10 discard request
        - md/raid10: improve discard request for far layout
        - dm raid: remove unnecessary discard limits for raid0 and raid10
      * [SRU][OEM-5.10/H] Fix typec output on AMD Cezanne GPU (LP: #1929646)
        - drm/amd/display: use max lb for latency hiding
      * kvm: properly tear down PV features on hibernate (LP: #1920944)
        - x86/kvm: Fix pr_info() for async PF setup/teardown
        - x86/kvm: Teardown PV features on boot CPU as well
        - x86/kvm: Disable kvmclock on all CPUs on shutdown
        - x86/kvm: Disable all PV features on crash
        - x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline()
      * Add support for AMD wireless button (LP: #1928820)
        - platform/x86: hp-wireless: add AMD's hardware id to the supported list
      * Can't detect intel wifi 6235 (LP: #1920180)
        - SAUCE: iwlwifi: add new pci id for 6235
      * Speed up resume time on HP laptops (LP: #1929048)
        - platform/x86: hp_accel: Avoid invoking _INI to speed up resume
      * Fix kernel panic on Intel Bluetooth (LP: #1928838)
        - Bluetooth: Shutdown controller after workqueues are flushed or cancelled
      * build module CONFIG_SND_SOC_INTEL_SOUNDWIRE_SOF_MACH=m for 5.11,  5.13-rc2
        and later (LP: #1921632)
        - [Config] enable soundwire audio mach driver
      * [SRU] Patch for flicker and glitching on common LCD display panels, intel
        framebuffer (LP: #1925685)
        - drm/i915: Try to use fast+narrow link on eDP again and fall back to the old
          max strategy on failure
        - drm/i915/dp: Use slow and wide link training for everything
      * Fix screen flickering when two 4K 60Hz monitors are connected to AMD Oland
        GFX (LP: #1928361)
        - drm/radeon/dpm: Disable sclk switching on Oland when two 4K 60Hz monitors
          are connected
      * Display abnormal on the TGL+4k panel machines (LP: #1922885)
        - drm/i915/display: Do not allow DC3CO if PSR SF is enabled
        - drm/i915/display/psr: Disable DC3CO when the PSR2 is used
      * Hirsute update: v5.11.21 upstream stable release (LP: #1929455)
        - Bluetooth: verify AMP hci_chan before amp_destroy
        - bluetooth: eliminate the potential race condition when removing the HCI
          controller
        - net/nfc: fix use-after-free llcp_sock_bind/connect
        - Revert "USB: cdc-acm: fix rounding error in TIOCSSERIAL"
        - usb: roles: Call try_module_get() from usb_role_switch_find_by_fwnode()
        - tty: moxa: fix TIOCSSERIAL jiffies conversions
        - tty: amiserial: fix TIOCSSERIAL permission check
        - USB: serial: usb_wwan: fix TIOCSSERIAL jiffies conversions
        - staging: greybus: uart: fix TIOCSSERIAL jiffies conversions
        - USB: serial: ti_usb_3410_5052: fix TIOCSSERIAL permission check
        - staging: fwserial: fix TIOCSSERIAL jiffies conversions
        - tty: moxa: fix TIOCSSERIAL permission check
        - staging: fwserial: fix TIOCSSERIAL permission check
        - drm: bridge: fix LONTIUM use of mipi_dsi_() functions
        - usb: typec: tcpm: Address incorrect values of tcpm psy for fixed supply
        - usb: typec: tcpm: Address incorrect values of tcpm psy for pps supply
        - usb: typec: tcpm: update power supply once partner accepts
        - usb: xhci-mtk: remove or operator for setting schedule parameters
        - usb: xhci-mtk: improve bandwidth scheduling with TT
        - ASoC: samsung: tm2_wm5110: check of of_parse return value
        - ASoC: Intel: kbl_da7219_max98927: Fix kabylake_ssp_fixup function
        - ASoC: tlv320aic32x4: Register clocks before registering component
        - ASoC: tlv320aic32x4: Increase maximum register in regmap
        - MIPS: pci-mt7620: fix PLL lock check
        - MIPS: pci-rt2880: fix slot 0 configuration
        - FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR
        - PCI: Allow VPD access for QLogic ISP2722
        - KVM: x86: Defer the MMU unload to the normal path on an global INVPCID
        - PCI: keystone: Let AM65 use the pci_ops defined in pcie-designware-host.c
        - PM / devfreq: Unlock mutex and free devfreq struct in error path
        - soc/tegra: regulators: Fix locking up when voltage-spread is out of range
        - iio: inv_mpu6050: Fully validate gyro and accel scale writes
        - iio: sx9310: Fix write_.._debounce()
        - iio:accel:adis16201: Fix wrong axis assignment that prevents loading
        - iio:adc:ad7476: Fix remove handling
        - iio: sx9310: Fix access to variable DT array
        - sc16is7xx: Defer probe if device read fails
        - phy: cadence: Sierra: Fix PHY power_on sequence
        - misc: lis3lv02d: Fix false-positive WARN on various HP models
        - phy: ti: j721e-wiz: Invoke wiz_init() before of_platform_device_create()
        - misc: vmw_vmci: explicitly initialize vmci_notify_bm_set_msg struct
        - misc: vmw_vmci: explicitly initialize vmci_datagram payload
        - selinux: add proper NULL termination to the secclass_map permissions
        - x86, sched: Treat Intel SNC topology as default, COD as exception
        - async_xor: increase src_offs when dropping destination page
        - md/bitmap: wait for external bitmap writes to complete during tear down
        - md-cluster: fix use-after-free issue when removing rdev
        - md: split mddev_find
        - md: factor out a mddev_find_locked helper from mddev_find
        - md: md_open returns -EBUSY when entering racing area
        - md: Fix missing unused status line of /proc/mdstat
        - MIPS: generic: Update node names to avoid unit addresses
        - mt76: mt7615: use ieee80211_free_txskb() in mt7615_tx_token_put()
        - ipw2x00: potential buffer overflow in libipw_wx_set_encodeext()
        - cfg80211: scan: drop entry from hidden_list on overflow
        - rtw88: Fix array overrun in rtw_get_tx_power_params()
        - mt76: fix potential DMA mapping leak
        - FDDI: defxx: Make MMIO the configuration default except for EISA
        - drm/qxl: use ttm bo priorities
        - drm/ingenic: Fix non-OSD mode
        - drm/panfrost: Clear MMU irqs before handling the fault
        - drm/panfrost: Don't try to map pages that are already mapped
        - drm/radeon: fix copy of uninitialized variable back to userspace
        - drm/dp_mst: Revise broadcast msg lct & lcr
        - drm/dp_mst: Set CLEAR_PAYLOAD_ID_TABLE as broadcast
        - drm: bridge: fix ANX7625 use of mipi_dsi_() functions
        - drm: bridge/panel: Cleanup connector on bridge detach
        - drm/amd/display: Reject non-zero src_y and src_x for video planes
        - drm/amdgpu: fix concurrent VM flushes on Vega/Navi v2
        - drm/amdgpu: add new MC firmware for Polaris12 32bit ASIC
        - drm/amdgpu: Init GFX10_ADDR_CONFIG for VCN v3 in DPG mode.
        - ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries
        - ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries
        - ALSA: hda/realtek: Re-order ALC882 Clevo quirk table entries
        - ALSA: hda/realtek: Re-order ALC269 HP quirk table entries
        - ALSA: hda/realtek: Re-order ALC269 Acer quirk table entries
        - ALSA: hda/realtek: Re-order ALC269 Dell quirk table entries
        - ALSA: hda/realtek: Re-order ALC269 ASUS quirk table entries
        - ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries
        - ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries
        - ALSA: hda/realtek: Re-order remaining ALC269 quirk table entries
        - ALSA: hda/realtek: Re-order ALC662 quirk table entries
        - ALSA: hda/realtek: Remove redundant entry for ALC861 Haier/Uniwill devices
        - ALSA: hda/realtek: ALC285 Thinkpad jack pin quirk is unreachable
        - ALSA: hda/realtek: Fix speaker amp on HP Envy AiO 32
        - KVM: s390: VSIE: correctly handle MVPG when in VSIE
        - KVM: s390: split kvm_s390_logical_to_effective
        - KVM: s390: fix guarded storage control register handling
        - s390: fix detection of vector enhancements facility 1 vs. vector packed
          decimal facility
        - KVM: s390: VSIE: fix MVPG handling for prefixing and MSO
        - KVM: s390: split kvm_s390_real_to_abs
        - KVM: s390: extend kvm_s390_shadow_fault to return entry pointer
        - KVM: x86/mmu: Alloc page for PDPTEs when shadowing 32-bit NPT with 64-bit
        - KVM: X86: Fix failure to boost kernel lock holder candidate in SEV-ES guests
        - KVM: x86: Remove emulator's broken checks on CR0/CR3/CR4 loads
        - KVM: nSVM: Set the shadow root level to the TDP level for nested NPT
        - KVM: SVM: Don't strip the C-bit from CR2 on #PF interception
        - KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs
        - KVM: SVM: Do not set sev->es_active until KVM_SEV_ES_INIT completes
        - KVM: SVM: Do not allow SEV/SEV-ES initialization after vCPUs are created
        - KVM: SVM: Inject #GP on guest MSR_TSC_AUX accesses if RDTSCP unsupported
        - KVM: nVMX: Defer the MMU reload to the normal path on an EPTP switch
        - KVM: nVMX: Truncate bits 63:32 of VMCS field on nested check in !64-bit
        - KVM: nVMX: Truncate base/index GPR value on address calc in !64-bit
        - KVM: arm/arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST read
        - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU
        - KVM: Stop looking for coalesced MMIO zones if the bus is destroyed
        - KVM: arm64: Fully zero the vcpu state on reset
        - KVM: arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST_REGION read
        - KVM: selftests: Sync data verify of dirty logging with guest sync
        - KVM: selftests: Always run vCPU thread with blocked SIG_IPI
        - Revert "drivers/net/wan/hdlc_fr: Fix a double free in pvc_xmit"
        - Revert "i3c master: fix missing destroy_workqueue() on error in
          i3c_master_register"
        - mfd: stmpe: Revert "Constify static struct resource"
        - ovl: fix missing revert_creds() on error path
        - usb: gadget: pch_udc: Revert d3cb25a12138 completely
        - Revert "tools/power turbostat: adjust for temperature offset"
        - firmware: xilinx: Fix dereferencing freed memory
        - firmware: xilinx: Remove zynqmp_pm_get_eemi_ops() in
          IS_REACHABLE(CONFIG_ZYNQMP_FIRMWARE)
        - x86/vdso: Use proper modifier for len's format specifier in extract()
        - fpga: fpga-mgr: xilinx-spi: fix error messages on -EPROBE_DEFER
        - crypto: keembay-ocs-aes - Fix error return code in kmb_ocs_aes_probe()
        - crypto: sun8i-ss - fix result memory leak on error path
        - memory: gpmc: fix out of bounds read and dereference on gpmc_cs[]
        - ARM: dts: exynos: correct fuel gauge interrupt trigger level on GT-I9100
        - ARM: dts: exynos: correct fuel gauge interrupt trigger level on P4 Note
          family
        - ARM: dts: exynos: correct fuel gauge interrupt trigger level on Midas family
        - ARM: dts: exynos: correct MUIC interrupt trigger level on Midas family
        - ARM: dts: exynos: correct PMIC interrupt trigger level on Midas family
        - ARM: dts: exynos: correct PMIC interrupt trigger level on Odroid X/U3 family
        - ARM: dts: exynos: correct PMIC interrupt trigger level on P4 Note family
        - ARM: dts: exynos: correct PMIC interrupt trigger level on SMDK5250
        - ARM: dts: exynos: correct PMIC interrupt trigger level on Snow
        - ARM: dts: s5pv210: correct fuel gauge interrupt trigger level on Fascinate
          family
        - ARM: dts: renesas: Add mmc aliases into R-Car Gen2 board dts files
        - arm64: dts: renesas: Add mmc aliases into board dts files
        - bus: ti-sysc: Fix initializing module_pa for modules without sysc register
        - x86/platform/uv: Set section block size for hubless architectures
        - serial: stm32: fix code cleaning warnings and checks
        - serial: stm32: add "_usart" prefix in functions name
        - serial: stm32: fix probe and remove order for dma
        - serial: stm32: Use of_device_get_match_data()
        - serial: stm32: fix startup by enabling usart for reception
        - serial: stm32: fix incorrect characters on console
        - serial: stm32: fix TX and RX FIFO thresholds
        - serial: stm32: fix a deadlock condition with wakeup event
        - serial: stm32: fix wake-up flag handling
        - serial: stm32: fix a deadlock in set_termios
        - serial: liteuart: fix return value check in liteuart_probe()
        - serial: stm32: fix tx dma completion, release channel
        - serial: stm32: call stm32_transmit_chars locked
        - serial: stm32: fix FIFO flush in startup and set_termios
        - serial: stm32: add FIFO flush when port is closed
        - serial: stm32: fix tx_empty condition
        - usb: typec: tcpm: Handle vbus shutoff when in source mode
        - usb: typec: tcpci: Check ROLE_CONTROL while interpreting CC_STATUS
        - usb: typec: tps6598x: Fix return value check in tps6598x_probe()
        - usb: typec: stusb160x: fix return value check in stusb160x_probe()
        - mfd: intel_pmt: Fix nuisance messages and handling of disabled capabilities
        - regmap: set debugfs_name to NULL after it is freed
        - spi: rockchip: avoid objtool warning
        - mtd: rawnand: fsmc: Fix error code in fsmc_nand_probe()
        - mtd: rawnand: brcmnand: fix OOB R/W with Hamming ECC
        - mtd: Handle possible -EPROBE_DEFER from parse_mtd_partitions()
        - mtd: rawnand: qcom: Return actual error code instead of -ENODEV
        - mtd: don't lock when recursively deleting partitions
        - mtd: maps: fix error return code of physmap_flash_remove()
        - ARM: dts: stm32: fix usart 2 & 3 pinconf to wake up with flow control
        - arm64: dts: ti: k3-j721e-main: Update the speed modes supported and their
          itap delay values for MMCSD subsystems
        - iio: adis16480: fix pps mode sampling frequency math
        - arm64: dts: qcom: sc7180: trogdor: Fix trip point config of charger thermal
          zone
        - arm64: dts: qcom: sm8250: Fix level triggered PMU interrupt polarity
        - arm64: dts: qcom: sm8250: Fix timer interrupt to specify EL2 physical timer
        - arm64: dts: qcom: sc7180: Avoid glitching SPI CS at bootup on trogdor
        - arm64: dts: qcom: sdm845: fix number of pins in 'gpio-ranges'
        - arm64: dts: qcom: sm8150: fix number of pins in 'gpio-ranges'
        - arm64: dts: qcom: sm8250: fix number of pins in 'gpio-ranges'
        - arm64: dts: qcom: db845c: fix correct powerdown pin for WSA881x
        - crypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map
        - spi: stm32: drop devres version of spi_register_master
        - regulator: bd9576: Fix return from bd957x_probe()
        - arm64: dts: renesas: r8a77980: Fix vin4-7 endpoint binding
        - selftests/x86: Add a missing .note.GNU-stack section to thunks_32.S
        - spi: stm32: Fix use-after-free on unbind
        - Drivers: hv: vmbus: Drop error message when 'No request id available'
        - x86/microcode: Check for offline CPUs before requesting new microcode
        - devtmpfs: fix placement of complete() call
        - usb: gadget: pch_udc: Replace cpu_to_le32() by lower_32_bits()
        - usb: gadget: pch_udc: Check if driver is present before calling ->setup()
        - usb: gadget: pch_udc: Check for DMA mapping error
        - usb: gadget: pch_udc: Initialize device pointer before use
        - usb: gadget: pch_udc: Provide a GPIO line used on Intel Minnowboard (v1)
        - crypto: ccp - fix command queuing to TEE ring buffer
        - crypto: qat - don't release uninitialized resources
        - crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init
        - fotg210-udc: Fix DMA on EP0 for length > max packet size
        - fotg210-udc: Fix EP0 IN requests bigger than two packets
        - fotg210-udc: Remove a dubious condition leading to fotg210_done
        - fotg210-udc: Mask GRP2 interrupts we don't handle
        - fotg210-udc: Don't DMA more than the buffer can take
        - fotg210-udc: Complete OUT requests on short packets
        - usb: gadget: s3c: Fix incorrect resources releasing
        - usb: gadget: s3c: Fix the error handling path in 's3c2410_udc_probe()'
        - dt-bindings: serial: stm32: Use 'type: object' instead of false for
          'additionalProperties'
        - mtd: require write permissions for locking and badblock ioctls
        - arm64: dts: renesas: r8a779a0: Fix PMU interrupt
        - arm64: dts: mt8183: Add gce client reg for display subcomponents
        - arm64: dts: mt8173: fix wrong power-domain phandle of pmic
        - bus: qcom: Put child node before return
        - soundwire: bus: Fix device found flag correctly
        - phy: ti: j721e-wiz: Delete "clk_div_sel" clk provider during cleanup
        - phy: ralink: phy-mt7621-pci: fix XTAL bitmask
        - phy: marvell: ARMADA375_USBCLUSTER_PHY should not default to y,
          unconditionally
        - phy: ralink: phy-mt7621-pci: fix return value check in
          mt7621_pci_phy_probe()
        - phy: ingenic: Fix a typo in ingenic_usb_phy_probe()
        - arm64: dts: mediatek: fix reset GPIO level on pumpkin
        - NFSv4.2: fix copy stateid copying for the async copy
        - crypto: poly1305 - fix poly1305_core_setkey() declaration
        - crypto: qat - fix error path in adf_isr_resource_alloc()
        - usb: gadget: aspeed: fix dma map failure
        - USB: gadget: udc: fix wrong pointer passed to IS_ERR() and PTR_ERR()
        - drivers: nvmem: Fix voltage settings for QTI qfprom-efuse
        - driver core: platform: Declare early_platform_cleanup() prototype
        - ARM: dts: qcom: msm8974-lge-nexus5: correct fuel gauge interrupt trigger
          level
        - ARM: dts: qcom: msm8974-samsung-klte: correct fuel gauge interrupt trigger
          level
        - memory: pl353: fix mask of ECC page_size config register
        - soundwire: stream: fix memory leak in stream config error path
        - m68k: mvme147,mvme16x: Don't wipe PCC timer config bits
        - firmware: qcom_scm: Make __qcom_scm_is_call_available() return bool
        - firmware: qcom_scm: Reduce locking section for __get_convention()
        - firmware: qcom_scm: Workaround lack of "is available" call on SC7180
        - iio: adc: Kconfig: make AD9467 depend on ADI_AXI_ADC symbol
        - [Config] updateconfigs for AD9467
        - mtd: rawnand: gpmi: Fix a double free in gpmi_nand_init
        - irqchip/gic-v3: Fix OF_BAD_ADDR error handling
        - staging: comedi: tests: ni_routes_test: Fix compilation error
        - staging: rtl8192u: Fix potential infinite loop
        - staging: fwserial: fix TIOCSSERIAL implementation
        - staging: fwserial: fix TIOCGSERIAL implementation
        - staging: greybus: uart: fix unprivileged TIOCCSERIAL
        - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object
          parsing more robust
        - soc: qcom: pdr: Fix error return code in pdr_register_listener
        - PM / devfreq: Use more accurate returned new_freq as resume_freq
        - clocksource/drivers/timer-ti-dm: Fix posted mode status check order
        - clocksource/drivers/timer-ti-dm: Add missing set_state_oneshot_stopped
        - clocksource/drivers/ingenic_ost: Fix return value check in
          ingenic_ost_probe()
        - spi: Fix use-after-free with devm_spi_alloc_*
        - spi: fsl: add missing iounmap() on error in of_fsl_spi_probe()
        - soc: qcom: mdt_loader: Validate that p_filesz < p_memsz
        - soc: qcom: mdt_loader: Detect truncated read of segments
        - PM: runtime: Replace inline function pm_runtime_callbacks_present()
        - cpuidle: Fix ARM_QCOM_SPM_CPUIDLE configuration
        - ACPI: CPPC: Replace cppc_attr with kobj_attribute
        - crypto: allwinner - add missing CRYPTO_ prefix
        - crypto: sun8i-ss - Fix memory leak of pad
        - crypto: sa2ul - Fix memory leak of rxd
        - crypto: qat - Fix a double free in adf_create_ring
        - cpufreq: armada-37xx: Fix setting TBG parent for load levels
        - clk: mvebu: armada-37xx-periph: remove .set_parent method for CPU PM clock
        - cpufreq: armada-37xx: Fix the AVS value for load L1
        - clk: mvebu: armada-37xx-periph: Fix switching CPU freq from 250 Mhz to 1 GHz
        - clk: mvebu: armada-37xx-periph: Fix workaround for switching from L1 to L0
        - cpufreq: armada-37xx: Fix driver cleanup when registration failed
        - cpufreq: armada-37xx: Fix determining base CPU frequency
        - spi: spi-zynqmp-gqspi: use wait_for_completion_timeout to make
          zynqmp_qspi_exec_op not interruptible
        - spi: spi-zynqmp-gqspi: add mutex locking for exec_op
        - spi: spi-zynqmp-gqspi: transmit dummy circles by using the controller's
          internal functionality
        - spi: spi-zynqmp-gqspi: fix incorrect operating mode in zynqmp_qspi_read_op
        - spi: fsl-lpspi: Fix PM reference leak in lpspi_prepare_xfer_hardware()
        - usb: gadget: r8a66597: Add missing null check on return from
          platform_get_resource
        - USB: cdc-acm: fix unprivileged TIOCCSERIAL
        - USB: cdc-acm: fix TIOCGSERIAL implementation
        - tty: fix return value for unsupported ioctls
        - tty: fix return value for unsupported termiox ioctls
        - serial: core: return early on unsupported ioctls
        - firmware: qcom-scm: Fix QCOM_SCM configuration
        - node: fix device cleanups in error handling code
        - crypto: chelsio - Read rxchannel-id from firmware
        - usbip: vudc: fix missing unlock on error in usbip_sockfd_store()
        - m68k: Add missing mmap_read_lock() to sys_cacheflush()
        - spi: spi-zynqmp-gqspi: Fix missing unlock on error in zynqmp_qspi_exec_op()
        - memory: renesas-rpc-if: fix possible NULL pointer dereference of resource
        - memory: samsung: exynos5422-dmc: handle clk_set_parent() failure
        - security: keys: trusted: fix TPM2 authorizations
        - platform/x86: pmc_atom: Match all Beckhoff Automation baytrail boards with
          critclk_systems DMI table
        - ARM: dts: aspeed: Rainier: Fix humidity sensor bus address
        - Drivers: hv: vmbus: Use after free in __vmbus_open()
        - spi: spi-zynqmp-gqspi: fix clk_enable/disable imbalance issue
        - spi: spi-zynqmp-gqspi: fix hang issue when suspend/resume
        - spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op
        - spi: spi-zynqmp-gqspi: return -ENOMEM if dma_map_single fails
        - x86/platform/uv: Fix !KEXEC build failure
        - hwmon: (pmbus/pxe1610) don't bail out when not all pages are active
        - PM: hibernate: x86: Use crc32 instead of md5 for hibernation e820 integrity
          check
        - usb: dwc2: Fix host mode hibernation exit with remote wakeup flow.
        - usb: dwc2: Fix hibernation between host and device modes.
        - ttyprintk: Add TTY hangup callback.
        - serial: omap: don't disable rs485 if rts gpio is missing
        - serial: omap: fix rs485 half-duplex filtering
        - xen-blkback: fix compatibility bug with single page rings
        - soc: aspeed: fix a ternary sign expansion bug
        - drm/tilcdc: send vblank event when disabling crtc
        - drm/stm: Fix bus_flags handling
        - drm/amd/display: Fix off by one in hdmi_14_process_transaction()
        - drm/mcde/panel: Inverse misunderstood flag
        - scsi: lpfc: Fix null pointer dereference in lpfc_prep_els_iocb()
        - sched/fair: Fix shift-out-of-bounds in load_balance()
        - printk: limit second loop of syslog_print_all
        - afs: Fix updating of i_mode due to 3rd party change
        - rcu: Remove spurious instrumentation_end() in rcu_nmi_enter()
        - media: vivid: fix assignment of dev->fbuf_out_flags
        - media: saa7134: use sg_dma_len when building pgtable
        - media: saa7146: use sg_dma_len when building pgtable
        - media: omap4iss: return error code when omap4iss_get() failed
        - media: rkisp1: rsz: crash fix when setting src format
        - media: aspeed: fix clock handling logic
        - drm/probe-helper: Check epoch counter in output_poll_execute()
        - media: venus: core: Fix some resource leaks in the error path of
          'venus_probe()'
        - media: platform: sunxi: sun6i-csi: fix error return code of
          sun6i_video_start_streaming()
        - media: m88ds3103: fix return value check in m88ds3103_probe()
        - media: docs: Fix data organization of MEDIA_BUS_FMT_RGB101010_1X30
        - media: [next] staging: media: atomisp: fix memory leak of object flash
        - media: atomisp: Fixed error handling path
        - media: m88rs6000t: avoid potential out-of-bounds reads on arrays
        - media: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs()
        - drm/amdkfd: fix build error with AMD_IOMMU_V2=m
        - of: overlay: fix for_each_child.cocci warnings
        - x86/kprobes: Fix to check non boostable prefixes correctly
        - selftests: fix prepending $(OUTPUT) to $(TEST_PROGS)
        - pata_arasan_cf: fix IRQ check
        - pata_ipx4xx_cf: fix IRQ check
        - sata_mv: add IRQ checks
        - ata: libahci_platform: fix IRQ check
        - seccomp: Fix CONFIG tests for Seccomp_filters
        - nvme-tcp: block BH in sk state_change sk callback
        - nvmet-tcp: fix incorrect locking in state_change sk callback
        - clk: imx: Fix reparenting of UARTs not associated with stdout
        - power: supply: bq25980: Move props from battery node
        - nvme: retrigger ANA log update if group descriptor isn't found
        - media: ccs: Fix sub-device function
        - media: ipu3-cio2: Fix pixel-rate derived link frequency
        - media: i2c: imx219: Move out locking/unlocking of vflip and hflip controls
          from imx219_set_stream
        - media: i2c: imx219: Balance runtime PM use-count
        - media: v4l2-ctrls.c: fix race condition in hdl->requests list
        - media: rkvdec: Do not require all controls to be present in every request
        - vfio/fsl-mc: Re-order vfio_fsl_mc_probe()
        - vfio/pci: Move VGA and VF initialization to functions
        - vfio/pci: Re-order vfio_pci_probe()
        - drm/msm: Fix debugfs deadlock
        - vfio/mdev: Do not allow a mdev_type to have a NULL parent pointer
        - clk: zynqmp: move zynqmp_pll_set_mode out of round_rate callback
        - clk: zynqmp: pll: add set_pll_mode to check condition in zynqmp_pll_enable
        - drm: xlnx: zynqmp: fix a memset in zynqmp_dp_train()
        - clk: qcom: a53-pll: Add missing MODULE_DEVICE_TABLE
        - clk: qcom: apss-ipq-pll: Add missing MODULE_DEVICE_TABLE
        - drm/amd/display: use GFP_ATOMIC in dcn20_resource_construct
        - drm/amd/display: check fb of primary plane
        - drm/radeon: Fix a missing check bug in radeon_dp_mst_detect()
        - clk: uniphier: Fix potential infinite loop
        - scsi: pm80xx: Increase timeout for pm80xx mpi_uninit_check()
        - scsi: pm80xx: Fix potential infinite loop
        - scsi: ufs: ufshcd-pltfrm: Fix deferred probing
        - scsi: hisi_sas: Fix IRQ checks
        - scsi: jazz_esp: Add IRQ check
        - scsi: sun3x_esp: Add IRQ check
        - scsi: sni_53c710: Add IRQ check
        - scsi: ibmvfc: Fix invalid state machine BUG_ON()
        - mailbox: sprd: Introduce refcnt when clients requests/free channels
        - mfd: stm32-timers: Avoid clearing auto reload register
        - nvmet-tcp: fix a segmentation fault during io parsing error
        - nvme-pci: don't simple map sgl when sgls are disabled
        - media: meson-ge2d: fix rotation parameters
        - media: cedrus: Fix H265 status definitions
        - HSI: core: fix resource leaks in hsi_add_client_from_dt()
        - x86/events/amd/iommu: Fix sysfs type mismatch
        - perf/amd/uncore: Fix sysfs type mismatch
        - block/rnbd-clt-sysfs: Remove copy buffer overlap in rnbd_clt_get_path_name
        - sched/debug: Fix cgroup_path[] serialization
        - kthread: Fix PF_KTHREAD vs to_kthread() race
        - ataflop: potential out of bounds in do_format()
        - ataflop: fix off by one in ataflop_probe()
        - drivers/block/null_blk/main: Fix a double free in null_init.
        - xsk: Respect device's headroom and tailroom on generic xmit path
        - HID: plantronics: Workaround for double volume key presses
        - perf symbols: Fix dso__fprintf_symbols_by_name() to return the number of
          printed chars
        - ASoC: Intel: boards: sof-wm8804: add check for PLL setting
        - ASoC: Intel: Skylake: Compile when any configuration is selected
        - RDMA/mlx5: Fix mlx5 rates to IB rates map
        - wilc1000: write value to WILC_INTR2_ENABLE register
        - KVM: x86/mmu: Retry page faults that hit an invalid memslot
        - Bluetooth: avoid deadlock between hci_dev->lock and socket lock
        - net: lapbether: Prevent racing when checking whether the netif is running
        - libbpf: Add explicit padding to bpf_xdp_set_link_opts
        - bpftool: Fix maybe-uninitialized warnings
        - iommu: Check dev->iommu in iommu_dev_xxx functions
        - dma-iommu: use static-key to minimize the impact in the fast-path
        - iommu/dma: Resurrect the "forcedac" option
        - iommu/vt-d: Reject unsupported page request modes
        - selftests/bpf: Re-generate vmlinux.h and BPF skeletons if bpftool changed
        - libbpf: Add explicit padding to btf_dump_emit_type_decl_opts
        - powerpc/mm: Move the linear_mapping_mutex to the ifdef where it is used
        - powerpc/fadump: Mark fadump_calculate_reserve_size as __init
        - powerpc/prom: Mark identical_pvr_fixup as __init
        - MIPS: fix local_irq_{disable,enable} in asmmacro.h
        - ima: Fix the error code for restoring the PCR value
        - inet: use bigger hash table for IP ID generation
        - pinctrl: pinctrl-single: remove unused parameter
        - pinctrl: pinctrl-single: fix pcs_pin_dbg_show() when bits_per_mux is not
          zero
        - MIPS: loongson64: fix bug when PAGE_SIZE > 16KB
        - ASoC: wm8960: Remove bitclk relax condition in wm8960_configure_sysclk
        - iommu/arm-smmu-v3: add bit field SFM into GERROR_ERR_MASK
        - RDMA/mlx5: Fix drop packet rule in egress table
        - IB/isert: Fix a use after free in isert_connect_request
        - powerpc: Fix HAVE_HARDLOCKUP_DETECTOR_ARCH build configuration
        - MIPS/bpf: Enable bpf_probe_read{, str}() on MIPS again
        - gpio: guard gpiochip_irqchip_add_domain() with GPIOLIB_IRQCHIP
        - fs: dlm: fix missing unlock on error in accept_from_sock()
        - ASoC: q6afe-clocks: fix reprobing of the driver
        - ALSA: core: remove redundant spin_lock pair in snd_card_disconnect
        - net: phy: lan87xx: fix access to wrong register of LAN87xx
        - udp: never accept GSO_FRAGLIST packets
        - powerpc/pseries: Only register vio drivers if vio bus exists
        - net/tipc: fix missing destroy_workqueue() on error in tipc_crypto_start()
        - bug: Remove redundant condition check in report_bug
        - RDMA/core: Fix corrupted SL on passive side
        - nfc: pn533: prevent potential memory corruption
        - net: hns3: Limiting the scope of vector_ring_chain variable
        - mips: bmips: fix syscon-reboot nodes
        - KVM: arm64: Fix error return code in init_hyp_mode()
        - iommu/vt-d: Don't set then clear private data in prq_event_thread()
        - iommu: Fix a boundary issue to avoid performance drop
        - iommu/vt-d: Report right snoop capability when using FL for IOVA
        - iommu/vt-d: Report the right page fault address
        - iommu/vt-d: Preset Access/Dirty bits for IOVA over FL
        - iommu/vt-d: Remove WO permissions on second-level paging entries
        - iommu/vt-d: Invalidate PASID cache when root/context entry changed
        - ALSA: usb-audio: Add error checks for usb_driver_claim_interface() calls
        - HID: lenovo: Use brightness_set_blocking callback for setting LEDs
          brightness
        - HID: lenovo: Fix lenovo_led_set_tp10ubkbd() error handling
        - HID: lenovo: Check hid_get_drvdata() returns non NULL in lenovo_event()
        - HID: lenovo: Map mic-mute button to KEY_F20 instead of KEY_MICMUTE
        - KVM: arm64: Initialize VCPU mdcr_el2 before loading it
        - ASoC: simple-card: fix possible uninitialized single_cpu local variable
        - liquidio: Fix unintented sign extension of a left shift of a u16
        - IB/hfi1: Use kzalloc() for mmu_rb_handler allocation
        - powerpc/64s: Fix pte update for kernel memory on radix
        - powerpc/pseries: Add key to flags in pSeries_lpar_hpte_updateboltedpp()
        - powerpc/64s: Use htab_convert_pte_flags() in hash__mark_rodata_ro()
        - powerpc/perf: Fix PMU constraint check for EBB events
        - powerpc: iommu: fix build when neither PCI or IBMVIO is set
        - mac80211: bail out if cipher schemes are invalid
        - perf vendor events amd: Fix broken L2 Cache Hits from L2 HWPF metric
        - RDMA/hns: Fix missing assignment of max_inline_data
        - xfs: fix return of uninitialized value in variable error
        - rtw88: Fix an error code in rtw_debugfs_set_rsvd_page()
        - mt7601u: fix always true expression
        - mt76: mt7615: fix tx skb dma unmap
        - mt76: mt7915: fix tx skb dma unmap
        - mt76: mt7915: fix aggr len debugfs node
        - mt76: mt7615: fix mib stats counter reporting to mac80211
        - mt76: mt7915: fix mib stats counter reporting to mac80211
        - mt76: reduce q->lock hold time
        - mt76: check return value of mt76_txq_send_burst in mt76_txq_schedule_list
        - mt76: mt7915: fix rxrate reporting
        - mt76: mt7915: fix txrate reporting
        - mt76: mt7663: fix when beacon filter is being applied
        - mt76: mt7663s: make all of packets 4-bytes aligned in sdio tx aggregation
        - mt76: mt7663s: fix the possible device hang in high traffic
        - mt76: mt7615: cleanup mcu tx queue in mt7615_dma_reset()
        - mt76: mt7915: bring up the WA event rx queue for band1
        - mt76: mt7915: cleanup mcu tx queue in mt7915_dma_reset()
        - KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
        - ovl: show "userxattr" in the mount data
        - ovl: invalidate readdir cache on changes to dir with origin
        - RDMA/qedr: Fix error return code in qedr_iw_connect()
        - IB/hfi1: Fix error return code in parse_platform_config()
        - RDMA/bnxt_re: Fix error return code in bnxt_qplib_cq_process_terminal()
        - cxgb4: Fix unintentional sign extension issues
        - net: thunderx: Fix unintentional sign extension issue
        - RDMA/srpt: Fix error return code in srpt_cm_req_recv()
        - RDMA/rtrs-clt: destroy sysfs after removing session from active list
        - i2c: cadence: fix reference leak when pm_runtime_get_sync fails
        - i2c: img-scb: fix reference leak when pm_runtime_get_sync fails
        - i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails
        - i2c: imx: fix reference leak when pm_runtime_get_sync fails
        - i2c: omap: fix reference leak when pm_runtime_get_sync fails
        - i2c: sprd: fix reference leak when pm_runtime_get_sync fails
        - i2c: stm32f7: fix reference leak when pm_runtime_get_sync fails
        - i2c: xiic: fix reference leak when pm_runtime_get_sync fails
        - i2c: cadence: add IRQ check
        - i2c: emev2: add IRQ check
        - i2c: jz4780: add IRQ check
        - i2c: mlxbf: add IRQ check
        - i2c: rcar: make sure irq is not threaded on Gen2 and earlier
        - i2c: rcar: protect against supurious interrupts on V3U
        - i2c: rcar: add IRQ check
        - i2c: sh7760: add IRQ check
        - iwlwifi: rs-fw: don't support stbc for HE 160
        - iwlwifi: dbg: disable ini debug in 9000 family and below
        - powerpc/xive: Drop check on irq_data in xive_core_debug_show()
        - powerpc/xive: Fix xmon command "dxi"
        - powerpc/syscall: Rename syscall_64.c into interrupt.c
        - powerpc/syscall: Change condition to check MSR_RI
        - ASoC: ak5558: correct reset polarity
        - net/mlx5: Fix bit-wise and with zero
        - net/packet: remove data races in fanout operations
        - drm/i915/gvt: Fix error code in intel_gvt_init_device()
        - iommu/amd: Put newline after closing bracket in warning
        - perf beauty: Fix fsconfig generator
        - drm/amdgpu: fix an error code in init_pmu_entry_by_type_and_add()
        - drm/amd/pm: fix error code in smu_set_power_limit()
        - MIPS: pci-legacy: stop using of_pci_range_to_resource
        - powerpc/pseries: extract host bridge from pci_bus prior to bus removal
        - mptcp: fix format specifiers for unsigned int
        - powerpc/smp: Reintroduce cpu_core_mask
        - KVM: x86: dump_vmcs should not assume GUEST_IA32_EFER is valid
        - rtlwifi: 8821ae: upgrade PHY and RF parameters
        - wlcore: fix overlapping snprintf arguments in debugfs
        - i2c: sh7760: fix IRQ error path
        - i2c: mediatek: Fix wrong dma sync flag
        - mwl8k: Fix a double Free in mwl8k_probe_hw
        - netfilter: nft_payload: fix C-VLAN offload support
        - netfilter: nftables_offload: VLAN id needs host byteorder in flow dissector
        - netfilter: nftables_offload: special ethertype handling for VLAN
        - vsock/vmci: log once the failed queue pair allocation
        - libbpf: Initialize the bpf_seq_printf parameters array field by field
        - net: ethernet: ixp4xx: Set the DMA masks explicitly
        - gro: fix napi_gro_frags() Fast GRO breakage due to IP alignment check
        - RDMA/cxgb4: add missing qpid increment
        - RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails
        - ALSA: usb: midi: don't return -ENOMEM when usb_urb_ep_type_check fails
        - sfc: ef10: fix TX queue lookup in TX event handling
        - vsock/virtio: free queued packets when closing socket
        - net: marvell: prestera: fix port event handling on init
        - net: davinci_emac: Fix incorrect masking of tx and rx error channel
        - mt76: mt7615: fix memleak when mt7615_unregister_device()
        - mt76: mt7915: fix memleak when mt7915_unregister_device()
        - powerpc/pseries/iommu: Fix window size for direct mapping with pmem
        - crypto: ccp: Detect and reject "invalid" addresses destined for PSP
        - net: dsa: mv88e6xxx: Fix off-by-one in VTU devlink region size
        - nfp: devlink: initialize the devlink port attribute "lanes"
        - net: stmmac: fix TSO and TBS feature enabling during driver open
        - net: renesas: ravb: Fix a stuck issue when a lot of frames are received
        - net: phy: intel-xway: enable integrated led functions
        - RDMA/rxe: Fix a bug in rxe_fill_ip_info()
        - RDMA/core: Add CM to restrack after successful attachment to a device
        - powerpc/64: Fix the definition of the fixmap area
        - ath9k: Fix error check in ath9k_hw_read_revisions() for PCI devices
        - ath10k: Fix a use after free in ath10k_htc_send_bundle
        - ath10k: Fix ath10k_wmi_tlv_op_pull_peer_stats_info() unlock without lock
        - wlcore: Fix buffer overrun by snprintf due to incorrect buffer size
        - powerpc/perf: Fix the threshold event selection for memory events in power10
        - powerpc/52xx: Fix an invalid ASM expression ('addi' used instead of 'add')
        - net: phy: marvell: fix m88e1011_set_downshift
        - net: phy: marvell: fix m88e1111_set_downshift
        - net: enetc: fix link error again
        - bnxt_en: fix ternary sign extension bug in bnxt_show_temp()
        - ARM: dts: uniphier: Change phy-mode to RGMII-ID to enable delay pins for
          RTL8211E
        - arm64: dts: uniphier: Change phy-mode to RGMII-ID to enable delay pins for
          RTL8211E
        - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb
        - selftests: net: mirror_gre_vlan_bridge_1q: Make an FDB entry static
        - selftests: mlxsw: Remove a redundant if statement in tc_flower_scale test
        - bnxt_en: Fix RX consumer index logic in the error path.
        - KVM: VMX: Intercept FS/GS_BASE MSR accesses for 32-bit KVM
        - KVM: SVM: Zero out the VMCB array used to track SEV ASID association
        - KVM: SVM: Free sev_asid_bitmap during init if SEV setup fails
        - KVM: SVM: Disable SEV/SEV-ES if NPT is disabled
        - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
        - selftests/bpf: Fix BPF_CORE_READ_BITFIELD() macro
        - selftests/bpf: Fix field existence CO-RE reloc tests
        - selftests/bpf: Fix core_reloc test runner
        - bpf: Fix propagation of 32 bit unsigned bounds from 64 bit bounds
        - RDMA/siw: Fix a use after free in siw_alloc_mr
        - RDMA/bnxt_re: Fix a double free in bnxt_qplib_alloc_res
        - net: bridge: mcast: fix broken length + header check for MRDv6 Adv.
        - net: dsa: mv88e6xxx: Fix 6095/6097/6185 ports in non-SERDES CMODE
        - net:nfc:digital: Fix a double free in digital_tg_recv_dep_req
        - perf tools: Change fields type in perf_record_time_conv
        - perf jit: Let convert_timestamp() to be backwards-compatible
        - perf session: Add swap operation for event TIME_CONV
        - ia64: fix EFI_DEBUG build
        - kfifo: fix ternary sign extension bugs
        - mm/sl?b.c: remove ctor argument from kmem_cache_flags
        - mm: memcontrol: slab: fix obtain a reference to a freeing memcg
        - mm/sparse: add the missing sparse_buffer_fini() in error branch
        - mm/memory-failure: unnecessary amount of unmapping
        - afs: Fix speculative status fetches
        - net: Only allow init netns to set default tcp cong to a restricted algo
        - smp: Fix smp_call_function_single_async prototype
        - Revert "net/sctp: fix race condition in sctp_destroy_sock"
        - sctp: delay auto_asconf init until binding the first addr
        - Linux 5.11.21
      * Fix kdump failures (LP: #1927518)
        - video: hyperv_fb: Add ratelimit on error message
        - Drivers: hv: vmbus: Increase wait time for VMbus unload
        - Drivers: hv: vmbus: Initialize unload_event statically
      * Hirsute update: v5.11.20 upstream stable release (LP: #1928857)
        - bus: mhi: core: Fix check for syserr at power_up
        - bus: mhi: core: Clear configuration from channel context during reset
        - bus: mhi: core: Sanity check values from remote device before use
        - bus: mhi: core: Add missing checks for MMIO register entries
        - bus: mhi: pci_generic: Remove WQ_MEM_RECLAIM flag from state workqueue
        - nitro_enclaves: Fix stale file descriptors on failed usercopy
        - dyndbg: fix parsing file query without a line-range suffix
        - s390/disassembler: increase ebpf disasm buffer size
        - s390/zcrypt: fix zcard and zqueue hot-unplug memleak
        - s390/vfio-ap: fix circular lockdep when setting/clearing crypto masks
        - vhost-vdpa: fix vm_flags for virtqueue doorbell mapping
        - tpm: acpi: Check eventlog signature before using it
        - ACPI: custom_method: fix potential use-after-free issue
        - ACPI: custom_method: fix a possible memory leak
        - ftrace: Handle commands when closing set_ftrace_filter file
        - ARM: 9056/1: decompressor: fix BSS size calculation for LLVM ld.lld
        - arm64: dts: marvell: armada-37xx: add syscon compatible to NB clk node
        - arm64: dts: mt8173: fix property typo of 'phys' in dsi node
        - ecryptfs: fix kernel panic with null dev_name
        - fs/epoll: restore waking from ep_done_scan()
        - reset: add missing empty function reset_control_rearm()
        - mtd: spi-nor: core: Fix an issue of releasing resources during read/write
        - Revert "mtd: spi-nor: macronix: Add support for mx25l51245g"
        - mtd: spinand: core: add missing MODULE_DEVICE_TABLE()
        - mtd: rawnand: atmel: Update ecc_stats.corrected counter
        - mtd: physmap: physmap-bt1-rom: Fix unintentional stack access
        - erofs: add unsupported inode i_format check
        - spi: stm32-qspi: fix pm_runtime usage_count counter
        - spi: spi-ti-qspi: Free DMA resources
        - libceph: allow addrvecs with a single NONE/blank address
        - scsi: qla2xxx: Reserve extra IRQ vectors
        - scsi: lpfc: Fix rmmod crash due to bad ring pointers to abort_iotag
        - scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand()
        - scsi: mpt3sas: Only one vSES is present even when IOC has multi vSES
        - scsi: mpt3sas: Block PCI config access from userspace during reset
        - mmc: uniphier-sd: Fix an error handling path in uniphier_sd_probe()
        - mmc: uniphier-sd: Fix a resource leak in the remove function
        - mmc: sdhci: Check for reset prior to DMA address unmap
        - mmc: sdhci-pci: Fix initialization of some SD cards for Intel BYT-based
          controllers
        - mmc: block: Update ext_csd.cache_ctrl if it was written
        - mmc: block: Issue a cache flush only when it's enabled
        - mmc: core: Do a power cycle when the CMD11 fails
        - mmc: core: Set read only for SD cards with permanent write protect bit
        - mmc: core: Fix hanging on I/O during system suspend for removable cards
        - irqchip/gic-v3: Do not enable irqs when handling spurious interrups
        - cifs: Return correct error code from smb2_get_enc_key
        - cifs: fix out-of-bound memory access when calling smb3_notify() at mount
          point
        - cifs: fix leak in cifs_smb3_do_mount() ctx
        - cifs: detect dead connections only when echoes are enabled.
        - cifs: fix regression when mounting shares with prefix paths
        - smb2: fix use-after-free in smb2_ioctl_query_info()
        - btrfs: handle remount to no compress during compression
        - x86/build: Disable HIGHMEM64G selection for M486SX
        - btrfs: fix metadata extent leak after failure to create subvolume
        - intel_th: pci: Add Rocket Lake CPU support
        - btrfs: fix race between transaction aborts and fsyncs leading to use-after-
          free
        - posix-timers: Preserve return value in clock_adjtime32()
        - fbdev: zero-fill colormap in fbcmap.c
        - cpuidle: tegra: Fix C7 idling state on Tegra114
        - bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first
        - staging: wimax/i2400m: fix byte-order issue
        - spi: ath79: always call chipselect function
        - spi: ath79: remove spi-master setup and cleanup assignment
        - bus: mhi: core: Destroy SBL devices when moving to mission mode
        - bus: mhi: core: Process execution environment changes serially
        - crypto: api - check for ERR pointers in crypto_destroy_tfm()
        - crypto: qat - fix unmap invalid dma address
        - usb: gadget: uvc: add bInterval checking for HS mode
        - usb: webcam: Invalid size of Processing Unit Descriptor
        - x86/sev: Do not require Hypervisor CPUID bit for SEV guests
        - crypto: hisilicon/sec - fixes a printing error
        - genirq/matrix: Prevent allocation counter corruption
        - usb: gadget: f_uac2: validate input parameters
        - usb: gadget: f_uac1: validate input parameters
        - usb: dwc3: gadget: Ignore EP queue requests during bus reset
        - usb: xhci: Fix port minor revision
        - kselftest/arm64: mte: Fix compilation with native compiler
        - ARM: tegra: acer-a500: Rename avdd to vdda of touchscreen node
        - PCI: PM: Do not read power state in pci_enable_device_flags()
        - kselftest/arm64: mte: Fix MTE feature detection
        - ARM: dts: BCM5301X: fix "reg" formatting in /memory node
        - ARM: dts: ux500: Fix up TVK R3 sensors
        - x86/build: Propagate $(CLANG_FLAGS) to $(REALMODE_FLAGS)
        - x86/boot: Add $(CLANG_FLAGS) to compressed KBUILD_CFLAGS
        - efi/libstub: Add $(CLANG_FLAGS) to x86 flags
        - soc/tegra: pmc: Fix completion of power-gate toggling
        - arm64: dts: imx8mq-librem5-r3: Mark buck3 as always on
        - tee: optee: do not check memref size on return from Secure World
        - soundwire: cadence: only prepare attached devices on clock stop
        - perf/arm_pmu_platform: Use dev_err_probe() for IRQ errors
        - perf/arm_pmu_platform: Fix error handling
        - random: initialize ChaCha20 constants with correct endianness
        - usb: xhci-mtk: support quirk to disable usb2 lpm
        - fpga: dfl: pci: add DID for D5005 PAC cards
        - xhci: check port array allocation was successful before dereferencing it
        - xhci: check control context is valid before dereferencing it.
        - xhci: fix potential array out of bounds with several interrupters
        - bus: mhi: core: Clear context for stopped channels from remove()
        - ARM: dts: at91: change the key code of the gpio key
        - tools/power/x86/intel-speed-select: Increase string size
        - platform/x86: ISST: Account for increased timeout in some cases
        - clocksource/drivers/dw_apb_timer_of: Add handling for potential memory leak
        - resource: Prevent irqresource_disabled() from erasing flags
        - spi: dln2: Fix reference leak to master
        - spi: omap-100k: Fix reference leak to master
        - spi: qup: fix PM reference leak in spi_qup_remove()
        - usb: gadget: tegra-xudc: Fix possible use-after-free in tegra_xudc_remove()
        - usb: musb: fix PM reference leak in musb_irq_work()
        - usb: core: hub: Fix PM reference leak in usb_port_resume()
        - usb: dwc3: gadget: Check for disabled LPM quirk
        - tty: n_gsm: check error while registering tty devices
        - intel_th: Consistency and off-by-one fix
        - phy: phy-twl4030-usb: Fix possible use-after-free in twl4030_usb_remove()
        - crypto: sun8i-ss - Fix PM reference leak when pm_runtime_get_sync() fails
        - crypto: sun8i-ce - Fix PM reference leak in sun8i_ce_probe()
        - crypto: stm32/hash - Fix PM reference leak on stm32-hash.c
        - crypto: stm32/cryp - Fix PM reference leak on stm32-cryp.c
        - crypto: sa2ul - Fix PM reference leak in sa_ul_probe()
        - crypto: omap-aes - Fix PM reference leak on omap-aes.c
        - platform/x86: intel_pmc_core: Don't use global pmcdev in quirks
        - spi: sync up initial chipselect state
        - btrfs: do proper error handling in create_reloc_root
        - btrfs: do proper error handling in btrfs_update_reloc_root
        - btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s
        - regulator: da9121: automotive variants identity fix
        - drm: Added orientation quirk for OneGX1 Pro
        - drm/qxl: release shadow on shutdown
        - drm/ast: Fix invalid usage of AST_MAX_HWC_WIDTH in cursor atomic_check
        - drm/amd/display: changing sr exit latency
        - drm/amd/display: Fix MPC OGAM power on/off sequence
        - drm/ast: fix memory leak when unload the driver
        - drm/amd/display: Check for DSC support instead of ASIC revision
        - drm/amd/display: Don't optimize bandwidth before disabling planes
        - drm/amd/display: Return invalid state if GPINT times out
        - drm/amdgpu/display: buffer INTERRUPT_LOW_IRQ_CONTEXT interrupt work
        - drm/amd/display/dc/dce/dce_aux: Remove duplicate line causing 'field
          overwritten' issue
        - scsi: lpfc: Fix incorrect dbde assignment when building target abts wqe
        - scsi: lpfc: Fix pt2pt connection does not recover after LOGO
        - scsi: lpfc: Fix status returned in lpfc_els_retry() error exit path
        - scsi: lpfc: Fix PLOGI ACC to be transmit after REG_LOGIN
        - scsi: lpfc: Fix ADISC handling that never frees nodes
        - drm/amdgpu: Fix some unload driver issues
        - sched/pelt: Fix task util_est update filtering
        - sched/topology: fix the issue groups don't span domain->span for NUMA
          diameter > 2
        - kvfree_rcu: Use same set of GFP flags as does single-argument
        - drm/virtio: fix possible leak/unlock virtio_gpu_object_array
        - scsi: target: pscsi: Fix warning in pscsi_complete_cmd()
        - media: ite-cir: check for receive overflow
        - media: drivers: media: pci: sta2x11: fix Kconfig dependency on GPIOLIB
        - media: drivers/media/usb: fix memory leak in zr364xx_probe
        - media: cx23885: add more quirks for reset DMA on some AMD IOMMU
        - media: imx: capture: Return -EPIPE from __capture_legacy_try_fmt()
        - atomisp: don't let it go past pipes array
        - power: supply: bq27xxx: fix power_avg for newer ICs
        - extcon: arizona: Fix some issues when HPDET IRQ fires after the jack has
          been unplugged
        - extcon: arizona: Fix various races on driver unbind
        - media: media/saa7164: fix saa7164_encoder_register() memory leak bugs
        - media: gspca/sq905.c: fix uninitialized variable
        - media: v4l2-ctrls.c: initialize flags field of p_fwht_params
        - power: supply: Use IRQF_ONESHOT
        - backlight: qcom-wled: Use sink_addr for sync toggle
        - backlight: qcom-wled: Fix FSC update issue for WLED5
        - drm/amdgpu: mask the xgmi number of hops reported from psp to kfd
        - drm/amdkfd: Fix UBSAN shift-out-of-bounds warning
        - drm/amdgpu : Fix asic reset regression issue introduce by 8f211fe8ac7c4f
        - drm/amd/pm: fix workload mismatch on vega10
        - drm/amd/display: Fix UBSAN warning for not a valid value for type '_Bool'
        - drm/amd/display: DCHUB underflow counter increasing in some scenarios
        - drm/amd/display: fix dml prefetch validation
        - scsi: qla2xxx: Always check the return value of qla24xx_get_isp_stats()
        - drm/vkms: fix misuse of WARN_ON
        - scsi: qla2xxx: Fix use after free in bsg
        - mmc: sdhci-esdhc-imx: validate pinctrl before use it
        - mmc: sdhci-pci: Add PCI IDs for Intel LKF
        - mmc: sdhci-brcmstb: Remove CQE quirk
        - ata: ahci: Disable SXS for Hisilicon Kunpeng920
        - drm/komeda: Fix bit check to import to value of proper type
        - nvmet: return proper error code from discovery ctrl
        - selftests/resctrl: Enable gcc checks to detect buffer overflows
        - selftests/resctrl: Fix compilation issues for global variables
        - selftests/resctrl: Fix compilation issues for other global variables
        - selftests/resctrl: Clean up resctrl features check
        - selftests/resctrl: Fix missing options "-n" and "-p"
        - selftests/resctrl: Use resctrl/info for feature detection
        - selftests/resctrl: Fix incorrect parsing of iMC counters
        - selftests/resctrl: Fix checking for < 0 for unsigned values
        - power: supply: cpcap-charger: Add usleep to cpcap charger to avoid usb plug
          bounce
        - scsi: smartpqi: Use host-wide tag space
        - scsi: smartpqi: Correct request leakage during reset operations
        - scsi: smartpqi: Add new PCI IDs
        - scsi: scsi_dh_alua: Remove check for ASC 24h in alua_rtpg()
        - media: em28xx: fix memory leak
        - media: vivid: update EDID
        - drm/msm/dp: Fix incorrect NULL check kbot warnings in DP driver
        - clk: socfpga: arria10: Fix memory leak of socfpga_clk on error return
        - power: supply: generic-adc-battery: fix possible use-after-free in
          gab_remove()
        - power: supply: s3c_adc_battery: fix possible use-after-free in
          s3c_adc_bat_remove()
        - media: tc358743: fix possible use-after-free in tc358743_remove()
        - media: adv7604: fix possible use-after-free in adv76xx_remove()
        - media: i2c: adv7511-v4l2: fix possible use-after-free in adv7511_remove()
        - media: i2c: tda1997: Fix possible use-after-free in tda1997x_remove()
        - media: i2c: adv7842: fix possible use-after-free in adv7842_remove()
        - media: platform: sti: Fix runtime PM imbalance in regs_show
        - media: sun8i-di: Fix runtime PM imbalance in deinterlace_start_streaming
        - media: dvb-usb: fix memory leak in dvb_usb_adapter_init
        - media: gscpa/stv06xx: fix memory leak
        - sched/fair: Ignore percpu threads for imbalance pulls
        - drm/msm/mdp5: Configure PP_SYNC_HEIGHT to double the vtotal
        - drm/msm/mdp5: Do not multiply vclk line count by 100
        - drm/amdgpu/ttm: Fix memory leak userptr pages
        - drm/radeon/ttm: Fix memory leak userptr pages
        - drm/amd/display: Fix debugfs link_settings entry
        - drm/amd/display: Fix UBSAN: shift-out-of-bounds warning
        - drm/radeon: don't evict if not initialized
        - drm/amdkfd: Fix cat debugfs hang_hws file causes system crash bug
        - amdgpu: avoid incorrect %hu format string
        - drm/amdgpu/display: fix memory leak for dimgrey cavefish
        - drm/amdgpu: fix NULL pointer dereference
        - scsi: lpfc: Fix crash when a REG_RPI mailbox fails triggering a LOGO
          response
        - scsi: lpfc: Fix reference counting errors in lpfc_cmpl_els_rsp()
        - scsi: lpfc: Fix error handling for mailboxes completed in MBX_POLL mode
        - scsi: lpfc: Remove unsupported mbox PORT_CAPABILITIES logic
        - mfd: intel-m10-bmc: Fix the register access range
        - mfd: da9063: Support SMBus and I2C mode
        - mfd: arizona: Fix rumtime PM imbalance on error
        - scsi: libfc: Fix a format specifier
        - perf: Rework perf_event_exit_event()
        - sched,fair: Alternative sched_slice()
        - block/rnbd-srv: Prevent a deadlock generated by accessing sysfs in parallel
        - block/rnbd-clt: Fix missing a memory free when unloading the module
        - s390/archrandom: add parameter check for s390_arch_random_generate
        - sched,psi: Handle potential task count underflow bugs more gracefully
        - power: supply: cpcap-battery: fix invalid usage of list cursor
        - ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer
        - ALSA: hda/conexant: Re-order CX5066 quirk table entries
        - ALSA: sb: Fix two use after free in snd_sb_qsound_build
        - ALSA: usb-audio: Explicitly set up the clock selector
        - ALSA: usb-audio: Add dB range mapping for Sennheiser Communications Headset
          PC 8
        - ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 445 G7
        - ALSA: hda/realtek: GA503 use same quirks as GA401
        - ALSA: hda/realtek: fix mic boost on Intel NUC 8
        - ALSA: hda/realtek - Headset Mic issue on HP platform
        - ALSA: hda/realtek: fix static noise on ALC285 Lenovo laptops
        - ALSA: hda/realtek: Add quirk for Intel Clevo PCx0Dx
        - tools/power/turbostat: Fix turbostat for AMD Zen CPUs
        - btrfs: fix race when picking most recent mod log operation for an old root
        - arm64/vdso: Discard .note.gnu.property sections in vDSO
        - Makefile: Move -Wno-unused-but-set-variable out of GCC only block
        - fs: fix reporting supported extra file attributes for statx()
        - virtiofs: fix memory leak in virtio_fs_probe()
        - kcsan, debugfs: Move debugfs file creation out of early init
        - ubifs: Only check replay with inode type to judge if inode linked
        - f2fs: fix error handling in f2fs_end_enable_verity()
        - f2fs: fix to avoid out-of-bounds memory access
        - mlxsw: spectrum_mr: Update egress RIF list before route's action
        - openvswitch: fix stack OOB read while fragmenting IPv4 packets
        - net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets
        - NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds
        - NFS: Don't discard pNFS layout segments that are marked for return
        - NFSv4: Don't discard segments marked for return in _pnfs_return_layout()
        - Input: ili210x - add missing negation for touch indication on ili210x
        - jffs2: Fix kasan slab-out-of-bounds problem
        - jffs2: Hook up splice_write callback
        - iommu/vt-d: Force to flush iotlb before creating superpage
        - powerpc/vdso: Separate vvar vma from vdso
        - powerpc/powernv: Enable HAIL (HV AIL) for ISA v3.1 processors
        - powerpc/eeh: Fix EEH handling for hugepages in ioremap space.
        - powerpc/kexec_file: Use current CPU info while setting up FDT
        - powerpc/32: Fix boot failure with CONFIG_STACKPROTECTOR
        - powerpc: fix EDEADLOCK redefinition error in uapi/asm/errno.h
        - powerpc/kvm: Fix PR KVM with KUAP/MEM_KEYS enabled
        - powerpc/kvm: Fix build error when PPC_MEM_KEYS/PPC_PSERIES=n
        - intel_th: pci: Add Alder Lake-M support
        - tpm: efi: Use local variable for calculating final log size
        - tpm: vtpm_proxy: Avoid reading host log when using a virtual device
        - crypto: arm/curve25519 - Move '.fpu' after '.arch'
        - crypto: rng - fix crypto_rng_reset() refcounting when !CRYPTO_STATS
        - md/raid1: properly indicate failure when ending a failed write request
        - dm raid: fix inconclusive reshape layout on fast raid4/5/6 table reload
          sequences
        - fuse: fix write deadlock
        - mm: page_alloc: ignore init_on_free=1 for debug_pagealloc=1
        - exfat: fix erroneous discard when clear cluster bit
        - sfc: farch: fix TX queue lookup in TX flush done handling
        - sfc: farch: fix TX queue lookup in TX event handling
        - rcu/nocb: Fix missed nocb_timer requeue
        - security: commoncap: fix -Wstringop-overread warning
        - Fix misc new gcc warnings
        - jffs2: check the validity of dstlen in jffs2_zlib_compress()
        - smb3: when mounting with multichannel include it in requested capabilities
        - smb3: if max_channels set to more than one channel request multichannel
        - smb3: do not attempt multichannel to server which does not support it
        - Revert 337f13046ff0 ("futex: Allow FUTEX_CLOCK_REALTIME with FUTEX_WAIT op")
        - futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
        - x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is supported
        - kbuild: update config_data.gz only when the content of .config is changed
        - ext4: annotate data race in start_this_handle()
        - ext4: annotate data race in jbd2_journal_dirty_metadata()
        - ext4: fix check to prevent false positive report of incorrect used inodes
        - ext4: do not set SB_ACTIVE in ext4_orphan_cleanup()
        - ext4: always panic when errors=panic is specified
        - ext4: fix error code in ext4_commit_super
        - ext4: fix ext4_error_err save negative errno into superblock
        - ext4: fix error return code in ext4_fc_perform_commit()
        - ext4: allow the dax flag to be set and cleared on inline directories
        - ext4: Fix occasional generic/418 failure
        - media: dvbdev: Fix memory leak in dvb_media_device_free()
        - media: dvb-usb: Fix use-after-free access
        - media: dvb-usb: Fix memory leak at error in dvb_usb_device_init()
        - media: staging/intel-ipu3: Fix memory leak in imu_fmt
        - media: staging/intel-ipu3: Fix set_fmt error handling
        - media: staging/intel-ipu3: Fix race condition during set_fmt
        - media: v4l2-ctrls: fix reference to freed memory
        - media: coda: fix macroblocks count control usage
        - media: venus: hfi_parser: Don't initialize parser on v1
        - usb: gadget: dummy_hcd: fix gpf in gadget_setup
        - usb: gadget: Fix double free of device descriptor pointers
        - usb: gadget/function/f_fs string table fix for multiple languages
        - usb: dwc3: gadget: Remove FS bInterval_m1 limitation
        - usb: dwc3: gadget: Fix START_TRANSFER link state check
        - usb: dwc3: core: Do core softreset when switch mode
        - usb: dwc2: Fix session request interrupt handler
        - PCI: dwc: Move iATU detection earlier
        - tty: fix memory leak in vc_deallocate
        - rsi: Use resume_noirq for SDIO
        - tools/power turbostat: Fix offset overflow issue in index converting
        - tracing: Map all PIDs to command lines
        - tracing: Restructure trace_clock_global() to never block
        - dm persistent data: packed struct should have an aligned() attribute too
        - dm space map common: fix division bug in sm_ll_find_free_block()
        - dm integrity: fix missing goto in bitmap_flush_interval error handling
        - dm rq: fix double free of blk_mq_tag_set in dev remove after table load
          fails
        - pinctrl: Ingenic: Add support for read the pin configuration of X1830.
        - lib/vsprintf.c: remove leftover 'f' and 'F' cases from bstr_printf()
        - thermal/drivers/cpufreq_cooling: Fix slab OOB issue
        - thermal/core/fair share: Lock the thermal zone while looping over instances
        - Revert "UBUNTU: SAUCE: Revert "s390/cio: remove pm support from ccw bus
          driver""
        - s390/cio: remove invalid condition on IO_SCH_UNREG
        - Linux 5.11.20
      * Hirsute update: v5.11.20 upstream stable release (LP: #1928857) //
        CVE-2021-20288).
        - libceph: bump CephXAuthenticate encoding version
      * Hirsute update: v5.11.19 upstream stable release (LP: #1928850)
        - mips: Do not include hi and lo in clobber list for R6
        - netfilter: conntrack: Make global sysctls readonly in non-init netns
        - net: usb: ax88179_178a: initialize local variables before use
        - drm/i915: Disable runtime power management during shutdown
        - igb: Enable RSS for Intel I211 Ethernet Controller
        - bpf: Fix masking negation logic upon negative dst register
        - bpf: Fix leakage of uninitialized bpf stack under speculation
        - net: qrtr: Avoid potential use after free in MHI send
        - perf data: Fix error return code in perf_data__create_dir()
        - capabilities: require CAP_SETFCAP to map uid 0
        - perf ftrace: Fix access to pid in array when setting a pid filter
        - tools/cgroup/slabinfo.py: updated to work on current kernel
        - driver core: add a min_align_mask field to struct device_dma_parameters
        - swiotlb: add a IO_TLB_SIZE define
        - swiotlb: factor out an io_tlb_offset helper
        - swiotlb: factor out a nr_slots helper
        - swiotlb: clean up swiotlb_tbl_unmap_single
        - swiotlb: refactor swiotlb_tbl_map_single
        - swiotlb: don't modify orig_addr in swiotlb_tbl_sync_single
        - swiotlb: respect min_align_mask
        - nvme-pci: set min_align_mask
        - ovl: fix leaked dentry
        - ovl: allow upperdir inside lowerdir
        - ALSA: usb-audio: Add MIDI quirk for Vox ToneLab EX
        - ALSA: usb-audio: Fix implicit sync clearance at stopping stream
        - USB: Add reset-resume quirk for WD19's Realtek Hub
        - platform/x86: thinkpad_acpi: Correct thermal sensor allocation
        - perf/core: Fix unconditional security_locked_down() call
        - vfio: Depend on MMU
        - Linux 5.11.19
      * r8152 tx status -71 (LP: #1922651) // Hirsute update: v5.11.19 upstream
        stable release (LP: #1928850)
        - USB: Add LPM quirk for Lenovo ThinkPad USB-C Dock Gen2 Ethernet
      * Hirsute update: v5.11.18 upstream stable release (LP: #1928849)
        - iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_gen2_enqueue_hcmd()
        - drm/amd/display: Update modifier list for gfx10_3
        - mei: me: add Alder Lake P device id.
        - Linux 5.11.18
    
     -- Tim Gardner <email address hidden>  Tue, 08 Jun 2021 11:49:34 -0600
  • linux (5.11.0-18.19+21.10.1) impish; urgency=medium
    
      * impish/linux: 5.11.0-18.19+21.10.1 -proposed tracker (LP: #1927560)
    
      * Packaging resync (LP: #1786013)
        - [Packaging] update update.conf
        - update dkms package versions
    
      [ Ubuntu: 5.11.0-18.19 ]
    
      * hirsute/linux: 5.11.0-18.19 -proposed tracker (LP: #1927578)
      * Packaging resync (LP: #1786013)
        - update dkms package versions
      * Introduce the 465 driver series, fabric-manager, and libnvidia-nscq
        (LP: #1925522)
        - debian/dkms-versions -- add NVIDIA 465 and migrate 450 to 460
      * linux-image-5.0.0-35-generic breaks checkpointing of container
        (LP: #1857257)
        - SAUCE: overlayfs: fix incorrect mnt_id of files opened from map_files
      * Hirsute update: v5.11.17 upstream stable release (LP: #1927535)
        - vhost-vdpa: protect concurrent access to vhost device iotlb
        - Revert "UBUNTU: SAUCE: ovl: Restore vm_file value when lower fs mmap fails"
        - ovl: fix reference counting in ovl_mmap error path
        - coda: fix reference counting in coda_file_mmap error path
        - amd/display: allow non-linear multi-planar formats
        - drm/amdgpu: reserve fence slot to update page table
        - drm/amdgpu: fix GCR_GENERAL_CNTL offset for dimgrey_cavefish
        - gpio: omap: Save and restore sysconfig
        - KEYS: trusted: Fix TPM reservation for seal/unseal
        - vdpa/mlx5: Set err = -ENOMEM in case dma_map_sg_attrs fails
        - pinctrl: lewisburg: Update number of pins in community
        - block: return -EBUSY when there are open partitions in blkdev_reread_part
        - pinctrl: core: Show pin numbers for the controllers with base = 0
        - arm64: dts: allwinner: Revert SD card CD GPIO for Pine64-LTS
        - bpf: Allow variable-offset stack access
        - bpf: Refactor and streamline bounds check into helper
        - bpf: Tighten speculative pointer arithmetic mask
        - perf/x86/intel/uncore: Remove uncore extra PCI dev HSWEP_PCI_PCU_3
        - perf/x86/kvm: Fix Broadwell Xeon stepping in isolation_ucodes[]
        - perf auxtrace: Fix potential NULL pointer dereference
        - perf map: Fix error return code in maps__clone()
        - HID: google: add don USB id
        - HID: asus: Add support for 2021 ASUS N-Key keyboard
        - HID: alps: fix error return code in alps_input_configured()
        - HID cp2112: fix support for multiple gpiochips
        - HID: wacom: Assign boolean values to a bool variable
        - soc: qcom: geni: shield geni_icc_get() for ACPI boot
        - dmaengine: xilinx: dpdma: Fix descriptor issuing on video group
        - dmaengine: xilinx: dpdma: Fix race condition in done IRQ
        - ARM: dts: Fix swapped mmc order for omap3
        - m68k: fix flatmem memory model setup
        - net: geneve: check skb is large enough for IPv4/IPv6 header
        - dmaengine: tegra20: Fix runtime PM imbalance on error
        - s390/entry: save the caller of psw_idle
        - arm64: kprobes: Restore local irqflag if kprobes is cancelled
        - xen-netback: Check for hotplug-status existence before watching
        - cavium/liquidio: Fix duplicate argument
        - csky: change a Kconfig symbol name to fix e1000 build error
        - ia64: fix discontig.c section mismatches
        - ia64: tools: remove duplicate definition of ia64_mf() on ia64
        - x86/crash: Fix crash_setup_memmap_entries() out-of-bounds access
        - net: hso: fix NULL-deref on disconnect regression
        - USB: CDC-ACM: fix poison/unpoison imbalance
        - Linux 5.11.17
      * locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (LP: #1926184)
        - locking/qrwlock: Fix ordering in queued_write_lock_slowpath()
      * Fix kernel panic at boot on dual GFX systems (LP: #1926792)
        - drm/amdgpu: Register VGA clients after init can no longer fail
      * Gigabyte R120-T33 (ARM ThunderX SoC) fails to boot in ACPI mode
        (LP: #1925075)
        - ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure
      * CirrusLogic: Cracking noises appears in built-in speaker when output volume
        is set >80% (LP: #1924997)
        - ALSA: hda/cirrus: Use CS8409 filter to fix abnormal sounds on Bullseye
      * CirrusLogic: The default input volume is "0%" (LP: #1923557)
        - ALSA: hda/cirrus: Set Initial DMIC volume for Bullseye to -26 dB
      * Fix no picture from HDMI when it's plugged after boot (LP: #1924238)
        - drm/i915/display: Handle lane polarity for DDI port
      * Make AMD gpus choose YCbCr420 encoding automatically when required for 4k
        60Hz output (LP: #1922754)
        - drm/amd/display: Try YCbCr420 color when YCbCr444 fails
      * Hirsute update: v5.11.16 upstream stable release (LP: #1926999)
        - AMD_SFH: Removed unused activecontrolstatus member from the amd_mp2_dev
          struct
        - AMD_SFH: Add sensor_mask module parameter
        - AMD_SFH: Add DMI quirk table for BIOS-es which don't set the activestatus
          bits
        - mtd: rawnand: mtk: Fix WAITRDY break condition and timeout
        - Input: nspire-keypad - enable interrupts only when opened
        - gpio: sysfs: Obey valid_mask
        - dmaengine: idxd: Fix clobbering of SWERR overflow bit on writeback
        - dmaengine: idxd: fix delta_rec and crc size field for completion record
        - dmaengine: idxd: fix opcap sysfs attribute output
        - dmaengine: idxd: fix wq size store permission state
        - dmaengine: dw: Make it dependent to HAS_IOMEM
        - dmaengine: Fix a double free in dma_async_device_register
        - dmaengine: plx_dma: add a missing put_device() on error path
        - dmaengine: idxd: clear MSIX permission entry on shutdown
        - dmaengine: idxd: fix wq cleanup of WQCFG registers
        - ACPI: x86: Call acpi_boot_table_init() after acpi_table_upgrade()
        - ARM: dts: Drop duplicate sha2md5_fck to fix clk_disable race
        - ARM: dts: Fix moving mmc devices with aliases for omap4 & 5
        - remoteproc: pru: Fix loading of GNU Binutils ELF
        - lockdep: Add a missing initialization hint to the "INFO: Trying to register
          non-static key" message
        - arc: kernel: Return -EFAULT if copy_to_user() fails
        - iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_enqueue_hcmd()
        - xfrm: BEET mode doesn't support fragments for inner packets
        - ASoC: max98373: Changed amp shutdown register as volatile
        - ASoC: max98373: Added 30ms turn on/off time delay
        - net: axienet: allow setups without MDIO
        - gpu/xen: Fix a use after free in xen_drm_drv_init
        - bpf: Take module reference for trampoline in module
        - neighbour: Disregard DEAD dst in neigh_update
        - powerpc/signal32: Fix Oops on sigreturn with unmapped VDSO
        - ARM: keystone: fix integer overflow warning
        - ARM: omap1: fix building with clang IAS
        - drm/msm: Fix a5xx/a6xx timestamps
        - ASoC: fsl_esai: Fix TDM slot setup for I2S mode
        - scsi: scsi_transport_srp: Don't block target in SRP_PORT_LOST state
        - iwlwifi: add support for Qu with AX201 device
        - net: ieee802154: stop dump llsec keys for monitors
        - net: ieee802154: forbid monitor for add llsec key
        - net: ieee802154: forbid monitor for del llsec key
        - net: ieee802154: stop dump llsec devs for monitors
        - net: ieee802154: forbid monitor for add llsec dev
        - net: ieee802154: forbid monitor for del llsec dev
        - net: ieee802154: stop dump llsec devkeys for monitors
        - net: ieee802154: forbid monitor for add llsec devkey
        - net: ieee802154: forbid monitor for del llsec devkey
        - net: ieee802154: stop dump llsec seclevels for monitors
        - net: ieee802154: forbid monitor for add llsec seclevel
        - pcnet32: Use pci_resource_len to validate PCI resource
        - drm/amd/display: Add missing mask for DCN3
        - mac80211: clear sta->fast_rx when STA removed from 4-addr VLAN
        - virt_wifi: Return micros for BSS TSF values
        - lib: fix kconfig dependency on ARCH_WANT_FRAME_POINTERS
        - net/sctp: fix race condition in sctp_destroy_sock
        - Input: s6sy761 - fix coordinate read bit shift
        - Input: i8042 - fix Pegatron C15B ID entry
        - HID: wacom: set EV_KEY and EV_ABS only for non-HID_GENERIC type of devices
        - dm verity fec: fix misaligned RS roots IO
        - readdir: make sure to verify directory entry for legacy interfaces too
        - drm/i915: Don't zero out the Y plane's watermarks
        - arm64: fix inline asm in load_unaligned_zeropad()
        - arm64: mte: Ensure TIF_MTE_ASYNC_FAULT is set atomically
        - [Config] updateconfigs for AS_HAS_LSE_ATOMICS
        - arm64: alternatives: Move length validation in alternative_{insn, endif}
        - vfio/pci: Add missing range check in vfio_pci_mmap
        - riscv: Fix spelling mistake "SPARSEMEM" to "SPARSMEM"
        - scsi: libsas: Reset num_scatter if libata marks qc as NODATA
        - drm/vmwgfx: Make sure we unpin no longer needed buffers
        - ixgbe: Fix NULL pointer dereference in ethtool loopback test
        - ixgbe: fix unbalanced device enable/disable in suspend/resume
        - netfilter: flowtable: fix NAT IPv6 offload mangling
        - netfilter: conntrack: do not print icmpv6 as unknown via /proc
        - ice: Fix potential infinite loop when using u8 loop counter
        - libnvdimm/region: Fix nvdimm_has_flush() to handle ND_REGION_ASYNC
        - netfilter: bridge: add pre_exit hooks for ebtable unregistration
        - netfilter: arp_tables: add pre_exit hook for table unregister
        - libbpf: Fix potential NULL pointer dereference
        - drm/i915/display/vlv_dsi: Do not skip panel_pwr_cycle_delay when disabling
          the panel
        - net: macb: fix the restore of cmp registers
        - net/mlx5e: fix ingress_ifindex check in mlx5e_flower_parse_meta
        - netfilter: nft_limit: avoid possible divide error in nft_limit_init
        - netfilter: nftables: clone set element expression template
        - net/mlx5e: Fix setting of RS FEC mode
        - net: davicom: Fix regulator not turned off on failed probe
        - net: phy: marvell: fix detection of PHY on Topaz switches
        - net: sit: Unregister catch-all devices
        - net: ip6_tunnel: Unregister catch-all devices
        - mm: ptdump: fix build failure
        - net: Make tcp_allowed_congestion_control readonly in non-init netns
        - ibmvnic: correctly use dev_consume/free_skb_irq
        - i40e: fix the panic when running bpf in xdpdrv mode
        - ethtool: pause: make sure we init driver stats
        - ia64: remove duplicate entries in generic_defconfig
        - ia64: tools: remove inclusion of ia64-specific version of errno.h header
        - ibmvnic: avoid calling napi_disable() twice
        - ibmvnic: remove duplicate napi_schedule call in do_reset function
        - ibmvnic: remove duplicate napi_schedule call in open function
        - ch_ktls: Fix kernel panic
        - ch_ktls: fix device connection close
        - ch_ktls: tcb close causes tls connection failure
        - ch_ktls: do not send snd_una update to TCB in middle
        - gro: ensure frag0 meets IP header alignment
        - ARM: OMAP2+: Fix warning for omap_init_time_of()
        - ARM: 9063/1: mm: reduce maximum number of CPUs if DEBUG_KMAP_LOCAL is
          enabled
        - ARM: 9069/1: NOMMU: Fix conversion for_each_membock() to
          for_each_mem_range()
        - ARM: footbridge: fix PCI interrupt mapping
        - ARM: OMAP2+: Fix uninitialized sr_inst
        - arm64: dts: allwinner: Fix SD card CD GPIO for SOPine systems
        - arm64: dts: allwinner: h6: beelink-gs1: Remove ext. 32 kHz osc reference
        - bpf: Use correct permission flag for mixed signed bounds arithmetic
        - KVM: VMX: Convert vcpu_vmx.exit_reason to a union
        - KVM: VMX: Don't use vcpu->run->internal.ndata as an array index
        - kasan: fix hwasan build for gcc
        - kasan: remove redundant config option
        - r8169: tweak max read request size for newer chips also in jumbo mtu mode
        - r8169: don't advertise pause in jumbo mode
        - bpf: Ensure off_reg has no mixed signed bounds for all types
        - bpf: Move off_reg into sanitize_ptr_alu
        - ARM: 9071/1: uprobes: Don't hook on thumb instructions
        - bpf: Rework ptr_limit into alu_limit and add common error path
        - bpf: Improve verifier error messages for users
        - bpf: Move sanitize_val_alu out of op switch
        - Linux 5.11.16
      * Hirsute update: v5.11.15 upstream stable release (LP: #1926993)
        - interconnect: core: fix error return code of icc_link_destroy()
        - gfs2: Flag a withdraw if init_threads() fails
        - KVM: arm64: Hide system instruction access to Trace registers
        - KVM: arm64: Disable guest access to trace filter controls
        - drm/imx: imx-ldb: fix out of bounds array access warning
        - gfs2: report "already frozen/thawed" errors
        - ftrace: Check if pages were allocated before calling free_pages()
        - tools/kvm_stat: Add restart delay
        - drm/tegra: dc: Don't set PLL clock to 0Hz
        - gpu: host1x: Use different lock classes for each client
        - XArray: Fix splitting to non-zero orders
        - radix tree test suite: Fix compilation
        - block: only update parent bi_status when bio fail
        - radix tree test suite: Register the main thread with the RCU library
        - idr test suite: Take RCU read lock in idr_find_test_1
        - idr test suite: Create anchor before launching throbber
        - null_blk: fix command timeout completion handling
        - io_uring: don't mark S_ISBLK async work as unbounded
        - riscv,entry: fix misaligned base for excp_vect_table
        - block: don't ignore REQ_NOWAIT for direct IO
        - netfilter: x_tables: fix compat match/target pad out-of-bound write
        - perf map: Tighten snprintf() string precision to pass gcc check on some
          32-bit arches
        - net: sfp: cope with SFPs that set both LOS normal and LOS inverted
        - Linux 5.11.15
      * Hirsute update: v5.11.14 upstream stable release (LP: #1926368)
        - xfrm/compat: Cleanup WARN()s that can be user-triggered
        - ALSA: aloop: Fix initialization of controls
        - ALSA: hda/realtek: Fix speaker amp setup on Acer Aspire E1
        - ALSA: hda/conexant: Apply quirk for another HP ZBook G5 model
        - file: fix close_range() for unshare+cloexec
        - ASoC: intel: atom: Stop advertising non working S24LE support
        - nfc: fix refcount leak in llcp_sock_bind()
        - nfc: fix refcount leak in llcp_sock_connect()
        - nfc: fix memory leak in llcp_sock_connect()
        - nfc: Avoid endless loops caused by repeated llcp_sock_connect()
        - selinux: make nslot handling in avtab more robust
        - selinux: fix cond_list corruption when changing booleans
        - selinux: fix race between old and new sidtab
        - xen/evtchn: Change irq_info lock to raw_spinlock_t
        - net: ipv6: check for validity before dereferencing cfg->fc_nlinfo.nlh
        - net: dsa: lantiq_gswip: Let GSWIP automatically set the xMII clock
        - net: dsa: lantiq_gswip: Don't use PHY auto polling
        - net: dsa: lantiq_gswip: Configure all remaining GSWIP_MII_CFG bits
        - drm/i915: Fix invalid access to ACPI _DSM objects
        - ACPI: processor: Fix build when CONFIG_ACPI_PROCESSOR=m
        - drm/radeon: Fix size overflow
        - drm/amdgpu: Fix size overflow
        - drm/amdgpu/smu7: fix CAC setting on TOPAZ
        - rfkill: revert back to old userspace API by default
        - cifs: escape spaces in share names
        - cifs: On cifs_reconnect, resolve the hostname again.
        - IB/hfi1: Fix probe time panic when AIP is enabled with a buggy BIOS
        - LOOKUP_MOUNTPOINT: we are cleaning "jumped" flag too late
        - gcov: re-fix clang-11+ support
        - ia64: fix user_stack_pointer() for ptrace()
        - nds32: flush_dcache_page: use page_mapping_file to avoid races with swapoff
        - ocfs2: fix deadlock between setattr and dio_end_io_write
        - fs: direct-io: fix missing sdio->boundary
        - ethtool: fix incorrect datatype in set_eee ops
        - of: property: fw_devlink: do not link ".*,nr-gpios"
        - parisc: parisc-agp requires SBA IOMMU driver
        - parisc: avoid a warning on u8 cast for cmpxchg on u8 pointers
        - ARM: dts: turris-omnia: configure LED[2]/INTn pin as interrupt pin
        - batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field
        - ice: Continue probe on link/PHY errors
        - ice: Increase control queue timeout
        - ice: prevent ice_open and ice_stop during reset
        - ice: fix memory allocation call
        - ice: remove DCBNL_DEVRESET bit from PF state
        - ice: Fix for dereference of NULL pointer
        - ice: Use port number instead of PF ID for WoL
        - ice: Cleanup fltr list in case of allocation issues
        - iwlwifi: pcie: properly set LTR workarounds on 22000 devices
        - ice: fix memory leak of aRFS after resuming from suspend
        - net: hso: fix null-ptr-deref during tty device unregistration
        - libbpf: Fix bail out from 'ringbuf_process_ring()' on error
        - bpf: Enforce that struct_ops programs be GPL-only
        - bpf: link: Refuse non-O_RDWR flags in BPF_OBJ_GET
        - ethernet/netronome/nfp: Fix a use after free in nfp_bpf_ctrl_msg_rx
        - libbpf: Ensure umem pointer is non-NULL before dereferencing
        - libbpf: Restore umem state after socket create failure
        - libbpf: Only create rx and tx XDP rings when necessary
        - bpf: Refcount task stack in bpf_get_task_stack
        - bpf, sockmap: Fix sk->prot unhash op reset
        - bpf, sockmap: Fix incorrect fwd_alloc accounting
        - net: ensure mac header is set in virtio_net_hdr_to_skb()
        - i40e: Fix sparse warning: missing error code 'err'
        - i40e: Fix sparse error: 'vsi->netdev' could be null
        - i40e: Fix sparse error: uninitialized symbol 'ring'
        - i40e: Fix sparse errors in i40e_txrx.c
        - vdpa/mlx5: Fix suspend/resume index restoration
        - net: sched: sch_teql: fix null-pointer dereference
        - net: sched: fix action overwrite reference counting
        - nl80211: fix beacon head validation
        - nl80211: fix potential leak of ACL params
        - cfg80211: check S1G beacon compat element length
        - mac80211: fix time-is-after bug in mlme
        - mac80211: fix TXQ AC confusion
        - net: hsr: Reset MAC header for Tx path
        - net-ipv6: bugfix - raw & sctp - switch to ipv6_can_nonlocal_bind()
        - net: let skb_orphan_partial wake-up waiters.
        - thunderbolt: Fix a leak in tb_retimer_add()
        - thunderbolt: Fix off by one in tb_port_find_retimer()
        - usbip: add sysfs_lock to synchronize sysfs code paths
        - usbip: stub-dev synchronize sysfs code paths
        - usbip: vudc synchronize sysfs code paths
        - usbip: synchronize event handler with sysfs code paths
        - driver core: Fix locking bug in deferred_probe_timeout_work_func()
        - scsi: pm80xx: Fix chip initialization failure
        - scsi: target: iscsi: Fix zero tag inside a trace event
        - percpu: make pcpu_nr_empty_pop_pages per chunk type
        - i2c: turn recovery error on init to debug
        - powerpc/vdso: Make sure vdso_wrapper.o is rebuilt everytime vdso.so is
          rebuilt
        - powerpc/ptrace: Don't return error when getting/setting FP regs without
          CONFIG_PPC_FPU_REGS
        - KVM: x86/mmu: change TDP MMU yield function returns to match cond_resched
        - KVM: x86/mmu: Merge flush and non-flush tdp_mmu_iter_cond_resched
        - KVM: x86/mmu: Rename goal_gfn to next_last_level_gfn
        - KVM: x86/mmu: Ensure forward progress when yielding in TDP MMU iter
        - KVM: x86/mmu: Yield in TDU MMU iter even if no SPTES changed
        - KVM: x86/mmu: Ensure TLBs are flushed when yielding during GFN range zap
        - KVM: x86/mmu: Ensure TLBs are flushed for TDP MMU during NX zapping
        - KVM: x86/mmu: Don't allow TDP MMU to yield when recovering NX pages
        - KVM: x86/mmu: preserve pending TLB flush across calls to kvm_tdp_mmu_zap_sp
        - net: sched: fix err handler in tcf_action_init()
        - ice: Refactor DCB related variables out of the ice_port_info struct
        - ice: Recognize 860 as iSCSI port in CEE mode
        - xfrm: interface: fix ipv4 pmtu check to honor ip header df
        - xfrm: Use actual socket sk instead of skb socket for xfrm_output_resume
        - Revert "UBUNTU: SAUCE: remoteproc: qcom: Use div_u64() for 64-bit division"
        - remoteproc: qcom: pil_info: avoid 64-bit division
        - regulator: bd9571mwv: Fix AVS and DVFS voltage range
        - ARM: OMAP4: Fix PMIC voltage domains for bionic
        - ARM: OMAP4: PM: update ROM return address for OSWR and OFF
        - remoteproc: pru: Fix firmware loading crashes on K3 SoCs
        - net: xfrm: Localize sequence counter per network namespace
        - esp: delete NETIF_F_SCTP_CRC bit from features for esp offload
        - ASoC: SOF: Intel: HDA: fix core status verification
        - ASoC: wm8960: Fix wrong bclk and lrclk with pll enabled for some chips
        - xfrm: Fix NULL pointer dereference on policy lookup
        - virtchnl: Fix layout of RSS structures
        - i40e: Added Asym_Pause to supported link modes
        - i40e: Fix kernel oops when i40e driver removes VF's
        - hostfs: fix memory handling in follow_link()
        - amd-xgbe: Update DMA coherency values
        - vxlan: do not modify the shared tunnel info when PMTU triggers an ICMP reply
        - geneve: do not modify the shared tunnel info when PMTU triggers an ICMP
          reply
        - sch_red: fix off-by-one checks in red_check_params()
        - drivers/net/wan/hdlc_fr: Fix a double free in pvc_xmit
        - arm64: dts: imx8mm/q: Fix pad control of SD1_DATA0
        - xfrm: Provide private skb extensions for segmented and hw offloaded ESP
          packets
        - can: bcm/raw: fix msg_namelen values depending on CAN_REQUIRED_SIZE
        - can: isotp: fix msg_namelen values depending on CAN_REQUIRED_SIZE
        - can: uapi: can.h: mark union inside struct can_frame packed
        - mlxsw: spectrum: Fix ECN marking in tunnel decapsulation
        - ethernet: myri10ge: Fix a use after free in myri10ge_sw_tso
        - gianfar: Handle error code at MAC address change
        - net: dsa: Fix type was not set for devlink port
        - clk: qcom: camcc: Update the clock ops for the SC7180
        - cxgb4: avoid collecting SGE_QBASE regs during traffic
        - net:tipc: Fix a double free in tipc_sk_mcast_rcv
        - ARM: dts: imx6: pbab01: Set vmmc supply for both SD interfaces
        - net/ncsi: Avoid channel_monitor hrtimer deadlock
        - net: qrtr: Fix memory leak on qrtr_tx_wait failure
        - nfp: flower: ignore duplicate merge hints from FW
        - net: phy: broadcom: Only advertise EEE for supported modes
        - I2C: JZ4780: Fix bug for Ingenic X1000.
        - ASoC: sunxi: sun4i-codec: fill ASoC card owner
        - net/mlx5e: Fix mapping of ct_label zero
        - net/mlx5: Delete auxiliary bus driver eth-rep first
        - net/mlx5e: Fix ethtool indication of connector type
        - net/mlx5: Don't request more than supported EQs
        - net/mlx5e: Guarantee room for XSK wakeup NOP on async ICOSQ
        - net/rds: Fix a use after free in rds_message_map_pages
        - xdp: fix xdp_return_frame() kernel BUG throw for page_pool memory model
        - soc/fsl: qbman: fix conflicting alignment attributes
        - i40e: fix receiving of single packets in xsk zero-copy mode
        - i40e: Fix display statistics for veb_tc
        - RDMA/rtrs-clt: Close rtrs client conn before destroying rtrs clt session
          files
        - drm/msm: Set drvdata to NULL when msm_drm_init() fails
        - net: udp: Add support for getsockopt(..., ..., UDP_GRO, ..., ...);
        - mptcp: forbit mcast-related sockopt on MPTCP sockets
        - mptcp: revert "mptcp: provide subflow aware release function"
        - scsi: ufs: core: Fix task management request completion timeout
        - scsi: ufs: core: Fix wrong Task Tag used in task management request UPIUs
        - drm/msm: a6xx: fix version check for the A650 SQE microcode
        - drm/msm/disp/dpu1: program 3d_merge only if block is attached
        - Revert "arm64: dts: marvell: armada-cp110: Switch to per-port SATA
          interrupts"
        - ARM: dts: turris-omnia: fix hardware buffer management
        - net: cls_api: Fix uninitialised struct field bo->unlocked_driver_cb
        - net: macb: restore cmp registers on resume path
        - clk: fix invalid usage of list cursor in register
        - clk: fix invalid usage of list cursor in unregister
        - workqueue: Move the position of debug_work_activate() in __queue_work()
        - s390/cpcmd: fix inline assembly register clobbering
        - perf inject: Fix repipe usage
        - openvswitch: fix send of uninitialized stack memory in ct limit reply
        - i2c: designware: Adjust bus_freq_hz when refuse high speed mode set
        - iwlwifi: fix 11ax disabled bit in the regulatory capability flags
        - can: mcp251x: fix support for half duplex SPI host controllers
        - platform/x86: intel-hid: Fix spurious wakeups caused by tablet-mode events
          during suspend
        - tipc: increment the tmp aead refcnt before attaching it
        - net: hns3: clear VF down state bit before request link status
        - net/mlx5: Fix HW spec violation configuring uplink
        - net/mlx5: Fix placement of log_max_flow_counter
        - net/mlx5: Fix PPLM register mapping
        - net/mlx5: Fix PBMC register mapping
        - RDMA/cxgb4: check for ipv6 address properly while destroying listener
        - perf report: Fix wrong LBR block sorting
        - RDMA/qedr: Fix kernel panic when trying to access recv_cq
        - drm/vc4: crtc: Reduce PV fifo threshold on hvs4
        - i40e: Fix parameters in aq_get_phy_register()
        - RDMA/addr: Be strict with gid size
        - vdpa/mlx5: should exclude header length and fcs from mtu
        - vdpa/mlx5: Fix wrong use of bit numbers
        - RAS/CEC: Correct ce_add_elem()'s returned values
        - clk: socfpga: fix iomem pointer cast on 64-bit
        - lockdep: Address clang -Wformat warning printing for %hd
        - dt-bindings: net: ethernet-controller: fix typo in NVMEM
        - net: sched: bump refcount for new action in ACT replace mode
        - x86/traps: Correct exc_general_protection() and math_error() return paths
        - gpiolib: Read "gpio-line-names" from a firmware node
        - cfg80211: remove WARN_ON() in cfg80211_sme_connect
        - net: tun: set tun->dev->addr_len during TUNSETLINK processing
        - drivers: net: fix memory leak in atusb_probe
        - drivers: net: fix memory leak in peak_usb_create_dev
        - net: mac802154: Fix general protection fault
        - net: ieee802154: nl-mac: fix check on panid
        - net: ieee802154: fix nl802154 del llsec key
        - net: ieee802154: fix nl802154 del llsec dev
        - net: ieee802154: fix nl802154 add llsec key
        - net: ieee802154: fix nl802154 del llsec devkey
        - net: ieee802154: forbid monitor for set llsec params
        - net: ieee802154: forbid monitor for del llsec seclevel
        - net: ieee802154: stop dump llsec params for monitors
        - Revert "net: sched: bump refcount for new action in ACT replace mode"
        - Linux 5.11.14
      * Enable mute/micmute LEDs and limit mic boost on EliteBook 845 G8
        (LP: #1925415)
        - ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on EliteBook
          845 G8
      * ftrace synthetic_events selftests failure in 5.11 (LP: #1925539)
        - SAUCE: Revert "selftests/ftrace: Update synthetic event syntax errors"
      * Hot-unplug of disks leaves broken block devices around in Hirsute on s390x
        (LP: #1925211)
        - SAUCE: Revert "s390/cio: remove pm support from ccw bus driver"
      * [SRU][F:OEM-5.10/G/H] add realtek 8852 bluetooth support (LP: #1924207)
        - Bluetooth: btrtl: Enable central-peripheral role
        - Bluetooth: btrtl: Enable WBS for the specific Realtek devices
      * drm/i915: Drop force_probe requirement for Rocket Lake (LP: #1905466)
        - drm/i915/rkl: Remove require_force_probe protection
      * Hirsute update: v5.11.13 upstream stable release (LP: #1923415)
        - ARM: dts: am33xx: add aliases for mmc interfaces
        - bus: ti-sysc: Fix warning on unbind if reset is not deasserted
        - drm/msm: a6xx: Make sure the SQE microcode is safe
        - platform/x86: intel-hid: Support Lenovo ThinkPad X1 Tablet Gen 2
        - bpf, x86: Use kvmalloc_array instead kmalloc_array in bpf_jit_comp
        - net/mlx5e: Enforce minimum value check for ICOSQ size
        - net: pxa168_eth: Fix a potential data race in pxa168_eth_remove
        - kunit: tool: Fix a python tuple typing error
        - mISDN: fix crash in fritzpci
        - net: arcnet: com20020 fix error handling
        - can: kvaser_usb: Add support for USBcan Pro 4xHS
        - mac80211: Check crypto_aead_encrypt for errors
        - mac80211: choose first enabled channel for monitor
        - drm/msm/dsi_pll_7nm: Fix variable usage for pll_lockdet_rate
        - drm/msm/adreno: a5xx_power: Don't apply A540 lm_setup to other GPUs
        - drm/msm: Ratelimit invalid-fence message
        - netfilter: conntrack: Fix gre tunneling over ipv6
        - netfilter: nftables: skip hook overlap logic if flowtable is stale
        - net: ipa: fix init header command validation
        - platform/x86: thinkpad_acpi: Allow the FnLock LED to change state
        - kselftest/arm64: sve: Do not use non-canonical FFR register value
        - drm/msm/disp/dpu1: icc path needs to be set before dpu runtime resume
        - x86/build: Turn off -fcf-protection for realmode targets
        - platform/x86: intel_pmt_class: Initial resource to 0
        - platform/x86: intel_pmc_core: Ignore GBE LTR on Tiger Lake platforms
        - ptp_qoriq: fix overflow in ptp_qoriq_adjfine() u64 calcalation
        - scsi: target: pscsi: Clean up after failure in pscsi_map_sg()
        - arm64: kernel: disable CNP on Carmel
        - selftests/vm: fix out-of-tree build
        - ia64: mca: allocate early mca with GFP_ATOMIC
        - ia64: fix format strings for err_inject
        - cifs: revalidate mapping when we open files for SMB1 POSIX
        - cifs: Silently ignore unknown oplock break handle
        - io_uring: fix timeout cancel return code
        - math: Export mul_u64_u64_div_u64
        - tools/resolve_btfids: Build libbpf and libsubcmd in separate directories
        - tools/resolve_btfids: Check objects before removing
        - tools/resolve_btfids: Set srctree variable unconditionally
        - kbuild: Add resolve_btfids clean to root clean target
        - kbuild: Do not clean resolve_btfids if the output does not exist
        - tools/resolve_btfids: Add /libbpf to .gitignore
        - init/Kconfig: make COMPILE_TEST depend on HAS_IOMEM
        - Linux 5.11.13
        - [Config] update configs and annotations
    
     -- Seth Forshee <email address hidden>  Thu, 13 May 2021 16:01:00 -0500
  • linux (5.11.0-16.17) hirsute; urgency=medium
    
      * hirsute beta desktop AMD64 ISO kernel panic on boot when booting using UEFI
        (LP: #1922403)
        - SAUCE: efifb: Check efifb_pci_dev before using it
    
     -- Seth Forshee <email address hidden>  Wed, 14 Apr 2021 14:31:58 -0500