-
linux-starfive (6.2.0-1008.9) lunar; urgency=medium
* lunar/linux-starfive: 6.2.0-1008.9 -proposed tracker (LP: #2038073)
[ Ubuntu: 6.2.0-36.37 ]
* lunar/linux: 6.2.0-36.37 -proposed tracker (LP: #2038076)
* Regression for ubuntu_bpf test build caused by upstream bdeeed3498c7
(LP: #2035181)
- selftests/bpf: fix static assert compilation issue for test_cls_*.c
* CVE-2023-4244
- netfilter: nf_tables: don't skip expired elements during walk
- netfilter: nf_tables: adapt set backend to use GC transaction API
- netfilter: nft_set_hash: mark set element as dead when deleting from packet
path
- netfilter: nf_tables: GC transaction API to avoid race with control plane
- netfilter: nf_tables: don't fail inserts if duplicate has expired
- netfilter: nf_tables: fix kdoc warnings after gc rework
- netfilter: nf_tables: fix GC transaction races with netns and netlink event
exit path
- netfilter: nf_tables: GC transaction race with netns dismantle
- netfilter: nf_tables: GC transaction race with abort path
- netfilter: nf_tables: use correct lock to protect gc_list
- netfilter: nf_tables: defer gc run if previous batch is still pending
- netfilter: nft_dynset: disallow object maps
- netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
* CVE-2023-4563
- netfilter: nf_tables: remove busy mark and gc batch API
* CVE-2023-42756
- netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
* CVE-2023-4623
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
* Fix unstable audio at low levels on Thinkpad P1G4 (LP: #2037077)
- ALSA: hda/realtek - ALC287 I2S speaker platform support
* Lunar update: upstream stable patchset 2023-09-21 (LP: #2037005)
- Upstream stable to v6.1.41, v6.4.6
- io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq
- ALSA: hda/realtek - remove 3k pull low procedure
- ALSA: hda/realtek: Add quirk for Clevo NS70AU
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx
- maple_tree: set the node limit when creating a new root node
- maple_tree: fix node allocation testing on 32 bit
- keys: Fix linking a duplicate key to a keyring's assoc_array
- perf probe: Add test for regression introduced by switch to
die_get_decl_file()
- btrfs: fix warning when putting transaction with qgroups enabled after abort
- fuse: revalidate: don't invalidate if interrupted
- fuse: Apply flags2 only when userspace set the FUSE_INIT_EXT
- btrfs: set_page_extent_mapped after read_folio in btrfs_cont_expand
- btrfs: zoned: fix memory leak after finding block group with super blocks
- fuse: ioctl: translate ENOSYS in outarg
- btrfs: fix race between balance and cancel/pause
- selftests: tc: set timeout to 15 minutes
- selftests: tc: add 'ct' action kconfig dep
- regmap: Drop initial version of maximum transfer length fixes
- of: Preserve "of-display" device name for compatibility
- regmap: Account for register length in SMBus I/O limits
- arm64/fpsimd: Ensure SME storage is allocated after SVE VL changes
- can: mcp251xfd: __mcp251xfd_chip_set_mode(): increase poll timeout
- can: bcm: Fix UAF in bcm_proc_show()
- can: gs_usb: gs_can_open(): improve error handling
- selftests: tc: add ConnTrack procfs kconfig
- dma-buf/dma-resv: Stop leaking on krealloc() failure
- drm/amdgpu/vkms: relax timer deactivation by hrtimer_try_to_cancel
- drm/amdgpu/pm: make gfxclock consistent for sienna cichlid
- drm/amdgpu/pm: make mclk consistent for smu 13.0.7
- drm/client: Fix memory leak in drm_client_target_cloned
- drm/client: Fix memory leak in drm_client_modeset_probe
- drm/amd/display: only accept async flips for fast updates
- drm/amd/display: Disable MPC split by default on special asic
- drm/amd/display: check TG is non-null before checking if enabled
- drm/amd/display: Keep PHY active for DP displays on DCN31
- ASoC: fsl_sai: Disable bit clock with transmitter
- ASoC: fsl_sai: Revert "ASoC: fsl_sai: Enable MCTL_MCLK_EN bit for master
mode"
- ASoC: tegra: Fix ADX byte map
- ASoC: rt5640: Fix sleep in atomic context
- ASoC: cs42l51: fix driver to properly autoload with automatic module loading
- ASoC: codecs: wcd938x: fix missing clsh ctrl error handling
- ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove
- ASoC: qdsp6: audioreach: fix topology probe deferral
- ASoC: tegra: Fix AMX byte map
- ASoC: codecs: wcd938x: fix resource leaks on component remove
- ASoC: codecs: wcd938x: fix missing mbhc init error handling
- ASoC: codecs: wcd934x: fix resource leaks on component remove
- ASoC: codecs: wcd938x: fix codec initialisation race
- ASoC: codecs: wcd938x: fix soundwire initialisation race
- ext4: correct inline offset when handling xattrs in inode body
- drm/radeon: Fix integer overflow in radeon_cs_parser_init
- ALSA: emu10k1: roll up loops in DSP setup code for Audigy
- quota: Properly disable quotas when add_dquot_ref() fails
- quota: fix warning in dqgrab()
- HID: add quirk for 03f0:464a HP Elite Presenter Mouse
- ovl: check type and offset of struct vfsmount in ovl_entry
- udf: Fix uninitialized array access for some pathnames
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- MIPS: dec: prom: Address -Warray-bounds warning
- FS: JFS: Fix null-ptr-deref Read in txBegin
- FS: JFS: Check for read-only mounted filesystem in txBegin
- ACPI: video: Add backlight=native DMI quirk for Dell Studio 1569
- rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic()
- rcu: Mark additional concurrent load from ->cpu_no_qs.b.exp
- sched/fair: Don't balance task to its current running CPU
- wifi: ath11k: fix registration of 6Ghz-only phy without the full channel
range
- bpf: Print a warning only if writing to unprivileged_bpf_disabled.
- bpf: Address KCSAN report on bpf_lru_list
- bpf: tcp: Avoid taking fast sock lock in iterator
- wifi: ath11k: add support default regdb while searching board-2.bin for
WCN6855
- wifi: mac80211_hwsim: Fix possible NULL dereference
- spi: dw: Add compatible for Intel Mount Evans SoC
- wifi: ath11k: fix memory leak in WMI firmware stats
- net: ethernet: litex: add support for 64 bit stats
- devlink: report devlink_port_type_warn source device
- wifi: wext-core: Fix -Wstringop-overflow warning in
ioctl_standard_iw_point()
- wifi: iwlwifi: Add support for new PCI Id
- wifi: iwlwifi: mvm: avoid baid size integer overflow
- wifi: iwlwifi: pcie: add device id 51F1 for killer 1675
- net: hns3: fix strncpy() not using dest-buf length as length issue
- ASoC: amd: acp: fix for invalid dai id handling in acp_get_byte_count()
- ASoC: codecs: wcd938x: fix mbhc impedance loglevel
- ASoC: codecs: wcd938x: fix dB range for HPHL and HPHR
- ASoC: qcom: q6apm: do not close GPR port before closing graph
- sched/fair: Use recent_used_cpu to test p->cpus_ptr
- sched/psi: Rearrange polling code in preparation
- sched/psi: Rename existing poll members in preparation
- sched/psi: Extract update_triggers side effect
- sched/psi: Allow unprivileged polling of N*2s period
- sched/psi: use kernfs polling functions for PSI trigger polling
- pinctrl: renesas: rzv2m: Handle non-unique subnode names
- pinctrl: renesas: rzg2l: Handle non-unique subnode names
- spi: bcm63xx: fix max prepend length
- fbdev: imxfb: warn about invalid left/right margin
- fbdev: imxfb: Removed unneeded release_mem_region
- perf build: Fix library not found error when using CSLIBS
- btrfs: be a bit more careful when setting mirror_num_ret in btrfs_map_block
- spi: s3c64xx: clear loopback bit after loopback test
- kallsyms: strip LTO-only suffixes from promoted global functions
- dsa: mv88e6xxx: Do a final check before timing out
- net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field()
- net: ethernet: mtk_eth_soc: handle probe deferral
- ASoC: SOF: ipc3-dtrace: uninitialized data in dfsentry_trace_filter_write()
- net: sched: cls_matchall: Undo tcf_bind_filter in case of failure after
mall_set_parms
- net: sched: cls_u32: Undo tcf_bind_filter if u32_replace_hw_knode
- net: sched: cls_u32: Undo refcount decrement in case update failed
- net: sched: cls_bpf: Undo tcf_bind_filter in case of an error
- net: dsa: microchip: ksz8: Separate static MAC table operations for code
reuse
- net: dsa: microchip: ksz8: Make ksz8_r_sta_mac_table() static
- net: dsa: microchip: ksz8_r_sta_mac_table(): Avoid using error code for
empty entries
- net: dsa: microchip: correct KSZ8795 static MAC table access
- iavf: Fix use-after-free in free_netdev
- iavf: Fix out-of-bounds when setting channels on remove
- iavf: use internal state to free traffic IRQs
- iavf: make functions static where possible
- iavf: Wait for reset in callbacks which trigger it
- iavf: fix a deadlock caused by rtnl and driver's lock circular dependencies
- iavf: fix reset task race with iavf_remove()
- security: keys: Modify mismatched function name
- octeontx2-pf: Dont allocate BPIDs for LBK interfaces
- bpf: Fix subprog idx logic in check_max_stack_depth
- bpf: Repeat check_max_stack_depth for async callbacks
- bpf, arm64: Fix BTI type used for freplace attached functions
- igc: Avoid transmit queue timeout for XDP
- igc: Prevent garbled TX queue with XDP ZEROCOPY
- net: ipv4: use consistent txhash in TIME_WAIT and SYN_RECV
- tcp: annotate data-races around tcp_rsk(req)->txhash
- tcp: annotate data-races around tcp_rsk(req)->ts_recent
- net: ipv4: Use kfree_sensitive instead of kfree
- net:ipv6: check return value of pskb_trim()
- Revert "tcp: avoid the lookup process failing to get sk in ehash table"
- fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe
- llc: Don't drop packet from non-root netns.
- ALSA: hda/realtek: Fix generic fixup definition for cs35l41 amp
- netfilter: nf_tables: fix spurious set element insertion failure
- netfilter: nf_tables: can't schedule in nft_chain_validate
- Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync
- Bluetooth: hci_event: call disconnect callback before deleting conn
- Bluetooth: ISO: fix iso_conn related locking and validity issues
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
hci_remove_adv_monitor()
- tcp: annotate data-races around tp->tcp_tx_delay
- tcp: annotate data-races around tp->tsoffset
- tcp: annotate data-races around tp->keepalive_time
- tcp: annotate data-races around tp->keepalive_intvl
- tcp: annotate data-races around tp->keepalive_probes
- tcp: annotate data-races around icsk->icsk_syn_retries
- tcp: annotate data-races around tp->linger2
- tcp: annotate data-races around rskq_defer_accept
- tcp: annotate data-races around tp->notsent_lowat
- tcp: annotate data-races around icsk->icsk_user_timeout
- tcp: annotate data-races around fastopenq.max_qlen
- net: phy: prevent stale pointer dereference in phy_init()
- jbd2: recheck chechpointing non-dirty buffer
- tracing/histograms: Return an error if we fail to add histogram to hist_vars
list
- drm/ttm: fix bulk_move corruption when adding a entry
- spi: dw: Remove misleading comment for Mount Evans SoC
- kallsyms: add kallsyms_seqs_of_names to list of special symbols
- scripts/kallsyms: update the usage in the comment block
- selftests/bpf: Workaround verification failure for
fexit_bpf2bpf/func_replace_return_code
- selftests/bpf: Fix sk_assign on s390x
- drm/amd/display: fix some coding style issues
- drm/dp_mst: Clear MSG_RDY flag before sending new message
- drm/amd/display: force connector state when bpc changes during compliance
- drm/amd/display: Clean up errors & warnings in amdgpu_dm.c
- drm/amd/display: fix linux dp link lost handled only one time
- drm/amd/display: Add polling method to handle MST reply packet
- perf probe: Read DWARF files from the correct CU
- btrfs: raid56: always verify the P/Q contents for scrub
- can: gs_usb: fix time stamp counter initialization
- KVM: arm64: Correctly handle page aging notifiers for unaligned memslot
- KVM: arm64: vgic-v4: Make the doorbell request robust w.r.t preemption
- gso: fix dodgy bit handling for GSO_UDP_L4
- drm/i915/perf: add sentinel to xehp_oa_b_counters
- net: ethernet: mtk_eth_soc: always mtk_get_ib1_pkt_type
- Upstream stable to v6.1.42, v6.4.7
- netfilter: nf_tables: fix underflow in object reference counter
- netfilter: nf_tables: fix underflow in chain reference counter
- platform/x86/amd/pmf: Notify OS power slider update
- platform/x86/amd/pmf: reduce verbosity of apmf_get_system_params
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- blk-mq: Fix stall due to recursive flush plug
- powerpc/pseries/vas: Hold mmap_mutex after mmap lock during window close
- KVM: s390: pv: fix index value of replaced ASCE
- io_uring: don't audit the capability check in io_uring_create()
- gpio: tps68470: Make tps68470_gpio_output() always set the initial value
- pwm: Add a stub for devm_pwmchip_add()
- gpio: mvebu: Make use of devm_pwmchip_add
- gpio: mvebu: fix irq domain leak
- btrfs: fix race between quota disable and relocation
- i2c: Delete error messages for failed memory allocations
- i2c: Improve size determinations
- i2c: nomadik: Remove unnecessary goto label
- i2c: nomadik: Use devm_clk_get_enabled()
- i2c: nomadik: Remove a useless call in the remove function
- MIPS: Loongson: Move arch cflags to MIPS top level Makefile
- MIPS: Loongson: Fix build error when make modules_install
- PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link()
- PCI/ASPM: Factor out pcie_wait_for_retrain()
- PCI/ASPM: Avoid link retraining race
- PCI: rockchip: Remove writes to unused registers
- PCI: rockchip: Fix window mapping and address translation for endpoint
- PCI: rockchip: Don't advertise MSI-X in PCIe capabilities
- drm/amd/display: add ODM case when looking for first split pipe
- drm/amd/display: add pixel rate based CRB allocation support
- drm/amd/display: fix dcn315 single stream crb allocation
- drm/amd/display: Update correct DCN314 register header
- drm/amd/display: Set minimum requirement for using PSR-SU on Rembrandt
- drm/amd/display: Set minimum requirement for using PSR-SU on Phoenix
- drm/ttm: Don't print error message if eviction was interrupted
- drm/ttm: Don't leak a resource on eviction error
- drm/ttm: never consider pinned BOs for eviction&swap
- KVM: arm64: Condition HW AF updates on config option
- [Config] updateconfigs for AMPERE_ERRATUM_AC03_CPU_38
- arm64: errata: Mitigate Ampere1 erratum AC03_CPU_38 at stage-2
- mptcp: introduce 'sk' to replace 'sock->sk' in mptcp_listen()
- tracing: Allow synthetic events to pass around stacktraces
- Revert "tracing: Add "(fault)" name injection to kernel probes"
- tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if
fails
- test_maple_tree: test modifications while iterating
- maple_tree: add __init and __exit to test module
- maple_tree: fix 32 bit mas_next testing
- drm/amd/display: fix dc/core/dc.c kernel-doc
- drm/amd/display: Add FAMS validation before trying to use it
- drm/amd/display: update extended blank for dcn314 onwards
- drm/amd/display: Fix possible underflow for displays with large vblank
- drm/amd/display: Prevent vtotal from being set to 0
- phy: phy-mtk-dp: Fix an error code in probe()
- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc
- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend
- phy: qcom-snps-femto-v2: properly enable ref clock
- soundwire: qcom: update status correctly with mask
- media: staging: atomisp: select V4L2_FWNODE
- media: amphion: Fix firmware path to match linux-firmware
- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
- iavf: fix potential deadlock on allocation failure
- iavf: check for removal state before IAVF_FLAG_PF_COMMS_FAILED
- net: phy: marvell10g: fix 88x3310 power up
- net: hns3: fix the imp capability bit cannot exceed 32 bits issue
- net: hns3: fix wrong tc bandwidth weight data issue
- net: hns3: fix wrong bw weight of disabled tc issue
- vxlan: calculate correct header length for GPE
- vxlan: generalize vxlan_parse_gpe_hdr and remove unused args
- vxlan: fix GRO with VXLAN-GPE
- phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()
- atheros: fix return value check in atl1_tso()
- ethernet: atheros: fix return value check in atl1e_tso_csum()
- ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new
temporary address
- ice: Fix memory management in ice_ethtool_fdir.c
- bonding: reset bond's flags when down link is P2P device
- team: reset team's flags when down link is P2P device
- octeontx2-af: Removed unnecessary debug messages.
- octeontx2-af: Fix hash extraction enable configuration
- net: stmmac: Apply redundant write work around on 4.xx too
- platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100
- x86/traps: Fix load_unaligned_zeropad() handling for shared TDX memory
- igc: Fix Kernel Panic during ndo_tx_timeout callback
- netfilter: nft_set_rbtree: fix overlap expiration walk
- mm: suppress mm fault logging if fatal signal already pending
- net/sched: mqprio: refactor nlattr parsing to a separate function
- net/sched: mqprio: add extack to mqprio_parse_nlattr()
- net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64
- benet: fix return value check in be_lancer_xmit_workarounds()
- tipc: check return value of pskb_trim()
- tipc: stop tipc crypto on failure in tipc_node_create
- RDMA/mlx4: Make check for invalid flags stricter
- drm/msm/dpu: drop enum dpu_core_perf_data_bus_id
- drm/msm/adreno: Fix snapshot BINDLESS_DATA size
- RDMA/irdma: Add missing read barriers
- RDMA/irdma: Fix data race on CQP completion stats
- RDMA/irdma: Fix data race on CQP request done
- RDMA/mthca: Fix crash when polling CQ for shared QPs
- RDMA/bnxt_re: Prevent handling any completions after qp destroy
- drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb()
- cxl/acpi: Fix a use-after-free in cxl_parse_cfmws()
- cxl/acpi: Return 'rc' instead of '0' in cxl_parse_cfmws()
- ASoC: fsl_spdif: Silence output on stop
- block: Fix a source code comment in include/uapi/linux/blkzoned.h
- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request
- drm/i915: Fix an error handling path in igt_write_huge()
- xenbus: check xen_domain in xenbus_probe_initcall
- dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths
- dm raid: clean up four equivalent goto tags in raid_ctr()
- dm raid: protect md_stop() with 'reconfig_mutex'
- drm/amd: Fix an error handling mistake in psp_sw_init()
- drm/amd/display: Unlock on error path in
dm_handle_mst_sideband_msg_ready_event()
- RDMA/irdma: Fix op_type reporting in CQEs
- RDMA/irdma: Report correct WC error
- drm/msm: Switch idr_lock to spinlock
- drm/msm: Disallow submit with fence id 0
- ublk_drv: move ublk_get_device_from_id into ublk_ctrl_uring_cmd
- ublk: fail to start device if queue setup is interrupted
- ublk: fail to recover device if queue setup is interrupted
- ata: pata_ns87415: mark ns87560_tf_read static
- ring-buffer: Fix wrong stat of cpu_buffer->read
- tracing: Fix warning in trace_buffered_event_disable()
- Revert "usb: gadget: tegra-xudc: Fix error check in
tegra_xudc_powerdomain_init()"
- usb: gadget: call usb_gadget_check_config() to verify UDC capability
- USB: gadget: Fix the memory leak in raw_gadget driver
- usb: gadget: core: remove unbalanced mutex_unlock in usb_gadget_activate
- KVM: Grab a reference to KVM for VM and vCPU stats file descriptors
- KVM: VMX: Don't fudge CR0 and CR4 for restricted L2 guest
- KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid
- serial: qcom-geni: drop bogus runtime pm state update
- serial: 8250_dw: Preserve original value of DLF register
- serial: sifive: Fix sifive_serial_console_setup() section
- USB: serial: option: support Quectel EM060K_128
- USB: serial: option: add Quectel EC200A module support
- USB: serial: simple: add Kaufmann RKS+CAN VCP
- USB: serial: simple: sort driver entries
- can: gs_usb: gs_can_close(): add missing set of CAN state to
CAN_STATE_STOPPED
- usb: typec: Set port->pd before adding device for typec_port
- usb: typec: Iterate pds array when showing the pd list
- usb: typec: Use sysfs_emit_at when concatenating the string
- Revert "usb: dwc3: core: Enable AutoRetry feature in the controller"
- usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy
- usb: dwc3: don't reset device side if dwc3 was configured as host-only
- usb: misc: ehset: fix wrong if condition
- usb: ohci-at91: Fix the unhandle interrupt when resume
- USB: quirks: add quirk for Focusrite Scarlett
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one
config
- usb: xhci-mtk: set the dma max_seg_size
- Revert "usb: xhci: tegra: Fix error check"
- Documentation: security-bugs.rst: update preferences when dealing with the
linux-distros group
- Documentation: security-bugs.rst: clarify CVE handling
- staging: r8712: Fix memory leak in _r8712_init_xmit_priv()
- staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()
- tty: n_gsm: fix UAF in gsm_cleanup_mux
- Revert "xhci: add quirk for host controllers that don't update endpoint DCS"
- ALSA: hda/realtek: Support ASUS G713PV laptop
- ALSA: hda/relatek: Enable Mute LED on HP 250 G8
- hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature
- hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled
- btrfs: account block group tree when calculating global reserve size
- btrfs: check if the transaction was aborted at btrfs_wait_for_commit()
- btrfs: check for commit error at btrfs_attach_transaction_barrier()
- x86/MCE/AMD: Decrement threshold_bank refcount when removing threshold
blocks
- file: always lock position for FMODE_ATOMIC_POS
- nfsd: Remove incorrect check in nfsd4_validate_stateid
- ACPI/IORT: Remove erroneous id_count check in iort_node_get_rmr_info()
- tpm_tis: Explicitly check for error code
- irq-bcm6345-l1: Do not assume a fixed block to cpu mapping
- irqchip/gic-v4.1: Properly lock VPEs when doing a directLPI invalidation
- locking/rtmutex: Fix task->pi_waiters integrity
- proc/vmcore: fix signedness bug in read_from_oldmem()
- xen: speed up grant-table reclaim
- virtio-net: fix race between set queues and probe
- net: dsa: qca8k: fix search_and_insert wrong handling of new rule
- net: dsa: qca8k: fix broken search_and_del
- net: dsa: qca8k: fix mdb add/del case with 0 VID
- selftests: mptcp: join: only check for ip6tables if needed
- soundwire: fix enumeration completion
- Revert "um: Use swap() to make code cleaner"
- LoongArch: BPF: Fix check condition to call lu32id in move_imm()
- LoongArch: BPF: Enable bpf_probe_read{, str}() on LoongArch
- s390/dasd: fix hanging device after quiesce/resume
- s390/dasd: print copy pair message only for the correct error
- ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register
- arm64/sme: Set new vector length before reallocating
- PM: sleep: wakeirq: fix wake irq arming
- ceph: never send metrics if disable_send_metrics is set
- drm/i915/dpt: Use shmem for dpt objects
- dm cache policy smq: ensure IO doesn't prevent cleaner policy progress
- rbd: make get_lock_owner_info() return a single locker or NULL
- rbd: harden get_lock_owner_info() a bit
- rbd: retrieve and check lock owner twice before blocklisting
- tracing: Fix trace_event_raw_event_synth() if else statement
- ACPI: processor: perflib: Use the "no limit" frequency QoS
- ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily
- cpufreq: intel_pstate: Drop ACPI _PSS states table patching
- dma-buf: keep the signaling time of merged fences v3
- dma-buf: fix an error pointer vs NULL bug
- KVM: s390: pv: simplify shutdown and fix race
- media: tc358746: Address compiler warnings
- net: fec: avoid tx queue timeout when XDP is enabled
- drm/msm/dsi: Drop unused regulators from QCM2290 14nm DSI PHY config
- RDMA/core: Update CMA destination address on rdma_resolve_addr
- RDMA/bnxt_re: Fix hang during driver unload
- iommufd: IOMMUFD_DESTROY should not increase the refcount
- TIOCSTI: always enable for CAP_SYS_ADMIN
- hwmon: (aquacomputer_d5next) Fix incorrect PWM value readout
- btrfs: zoned: do not enable async discard
- net: ipa: only reset hashed tables when supported
- iommufd: Set end correctly when doing batch carry
- mptcp: more accurate NL event generation
- Upstream stable to v6.1.43, v6.4.8
* CVE-2023-42755
- net/sched: Retire rsvp classifier
- [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
* CVE-2023-42753
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
ip_set_hash_netportnet.c
* CVE-2023-34319
- xen/netback: Fix buffer overrun triggered by unusual packet
* CVE-2023-5197
- netfilter: nf_tables: skip bound chain in netns release path
- netfilter: nf_tables: disallow rule removal from chain binding
* CVE-2023-4921
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
* CVE-2023-42752
- igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
- net: remove osize variable in __alloc_skb()
- net: factorize code in kmalloc_reserve()
- net: deal with integer overflows in kmalloc_reserve()
* CVE-2023-42572
- net: add SKB_HEAD_ALIGN() helper
* Fix RCU warning on AMD laptops (LP: #2036377)
- power: supply: core: Use blocking_notifier_call_chain to avoid RCU complaint
* Fix non-working I219 after system sleep (LP: #2035313)
- mei: mei-me: resume device in prepare
* Avoid address overwrite in kernel_connect (LP: #2035163)
- net: Avoid address overwrite in kernel_connect
* Ethernet not stable 23.04 (RTL8168/8169) (LP: #2031537)
- r8169: fix ASPM-related problem for chip version 42 and 43
- r8169: revert 2ab19de62d67 ("r8169: remove ASPM restrictions now that ASPM
is disabled during NAPI poll")
- Revert "r8169: disable ASPM during NAPI poll"
- r8169: fix ASPM-related issues on a number of systems with NIC version from
RTL8168h
* Enable ASPM for NVMe behind VMD (LP: #2034504)
- Revert "UBUNTU: SAUCE: vmd: fixup bridge ASPM by driver name instead"
- Revert "UBUNTU: SAUCE: PCI/ASPM: Enable LTR for endpoints behind VMD"
- Revert "UBUNTU: SAUCE: PCI/ASPM: Enable ASPM for links under VMD domain"
- PCI/ASPM: Add pci_enable_link_state()
- PCI: vmd: Use PCI_VDEVICE in device list
- PCI: vmd: Create feature grouping for client products
- PCI: vmd: Add quirk to configure PCIe ASPM and LTR
- SAUCE: PCI/ASPM: Allow ASPM override over FADT default
- SAUCE: PCI: vmd: Mark ASPM override for device behind VMD bridge
* Fix suspend hang on Lenovo workstation (LP: #2034479)
- igb: Fix igb_down hung on surprise removal
* Fix blank display when Thunderbolt monitor is plugged second time
(LP: #2034491)
- drm/amd: Disable S/G for APUs when 64GB or more host memory
- thunderbolt: Fix Thunderbolt 3 display flickering issue on 2nd hot plug
onwards
- thunderbolt: Fix a backport error for display flickering issue
* [regression] Unable to initialize SGX enclaves with XFRM other than 3
(LP: #2034745)
- x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4
* CVE-2023-4881
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
* CVE-2023-4622
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
* Lunar update: upstream stable patchset 2023-09-14 (LP: #2036075)
- net: lan743x: Don't sleep in atomic context
- workqueue: clean up WORK_* constant types, clarify masking
- ksmbd: add missing compound request handing in some commands
- ksmbd: fix out of bounds read in smb2_sess_setup
- drm/panel: simple: Add connector_type for innolux_at043tn24
- drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime
- swiotlb: always set the number of areas before allocating the pool
- swiotlb: reduce the number of areas to match actual memory pool size
- drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags
- ice: Fix max_rate check while configuring TX rate limits
- igc: Remove delay during TX ring configuration
- net/mlx5e: fix double free in mlx5e_destroy_flow_table
- net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create
- net/mlx5e: fix memory leak in mlx5e_ptp_open
- net/mlx5e: Check for NOT_READY flag state after locking
- igc: set TP bit in 'supported' and 'advertising' fields of
ethtool_link_ksettings
- igc: Handle PPS start time programming for past time values
- blk-crypto: use dynamic lock class for blk_crypto_profile::lock
- scsi: qla2xxx: Fix error code in qla2x00_start_sp()
- scsi: ufs: ufs-mediatek: Add dependency for RESET_CONTROLLER
- bpf: Fix max stack depth check for async callbacks
- net: mvneta: fix txq_map in case of txq_number==1
- gve: Set default duplex configuration to full
- octeontx2-af: Promisc enable/disable through mbox
- octeontx2-af: Move validation of ptp pointer before its usage
- ionic: remove WARN_ON to prevent panic_on_warn
- net: bgmac: postpone turning IRQs off to avoid SoC hangs
- net: prevent skb corruption on frag list segmentation
- icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev().
- udp6: fix udp6_ehashfn() typo
- ntb: idt: Fix error handling in idt_pci_driver_init()
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
- NTB: ntb_transport: fix possible memory leak while device_register() fails
- NTB: ntb_tool: Add check for devm_kcalloc
- ipv6/addrconf: fix a potential refcount underflow for idev
- net: dsa: qca8k: Add check for skb_copy
- platform/x86: wmi: Break possible infinite loop when parsing GUID
- kernel/trace: Fix cleanup logic of enable_trace_eprobe
- igc: Fix launchtime before start of cycle
- igc: Fix inserting of empty frame for launchtime
- nvme: fix the NVME_ID_NS_NVM_STS_MASK definition
- riscv, bpf: Fix inconsistent JIT image generation
- drm/i915: Don't preserve dpll_hw_state for slave crtc in Bigjoiner
- drm/i915: Fix one wrong caching mode enum usage
- octeontx2-pf: Add additional check for MCAM rules
- erofs: avoid useless loops in z_erofs_pcluster_readmore() when reading
beyond EOF
- erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF
- erofs: fix fsdax unavailability for chunk-based regular files
- wifi: airo: avoid uninitialized warning in airo_get_rate()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- net/sched: flower: Ensure both minimum and maximum ports are specified
- riscv: mm: fix truncation warning on RV32
- netdevsim: fix uninitialized data in nsim_dev_trap_fa_cookie_write()
- net/sched: make psched_mtu() RTNL-less safe
- wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set()
- nvme-pci: fix DMA direction of unmapping integrity data
- cifs: fix session state check in smb2_find_smb_ses
- drm/client: Send hotplug event after registering a client
- drm/amdgpu/sdma4: set align mask to 255
- drm/amd/pm: revise the ASPM settings for thunderbolt attached scenario
- drm/amd/pm: add abnormal fan detection for smu 13.0.0
- f2fs: fix deadlock in i_xattr_sem and inode page lock
- pinctrl: amd: Add Z-state wake control bits
- pinctrl: amd: Adjust debugfs output
- pinctrl: amd: Add fields for interrupt status and wake status
- pinctrl: amd: Detect internal GPIO0 debounce handling
- pinctrl: amd: Fix mistake in handling clearing pins at startup
- pinctrl: amd: Detect and mask spurious interrupts
- pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts on probe"
- pinctrl: amd: Only use special debounce behavior for GPIO 0
- pinctrl: amd: Use amd_pinconf_set() for all config options
- pinctrl: amd: Drop pull up select configuration
- pinctrl: amd: Unify debounce handling into amd_pinconf_set()
- tpm: Do not remap from ACPI resources again for Pluton TPM
- tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
- tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
- tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
- tpm: return false from tpm_amd_is_rng_defective on non-x86 platforms
- mtd: rawnand: meson: fix unaligned DMA buffers handling
- net: bcmgenet: Ensure MDIO unregistration has clocks enabled
- net: phy: dp83td510: fix kernel stall during netboot in DP83TD510E PHY
driver
- kasan: add kasan_tag_mismatch prototype
- tracing/user_events: Fix incorrect return value for writing operation when
events are disabled
- powerpc: Fail build if using recordmcount with binutils v2.37
- misc: fastrpc: Create fastrpc scalar with correct buffer count
- powerpc/security: Fix Speculation_Store_Bypass reporting on Power10
- powerpc/64s: Fix native_hpte_remove() to be irq-safe
- MIPS: Loongson: Fix cpu_probe_loongson() again
- MIPS: KVM: Fix NULL pointer dereference
- ext4: Fix reusing stale buffer heads from last failed mounting
- ext4: fix wrong unit use in ext4_mb_clear_bb
- ext4: get block from bh in ext4_free_blocks for fast commit replay
- ext4: fix wrong unit use in ext4_mb_new_blocks
- ext4: fix to check return value of freeze_bdev() in ext4_shutdown()
- ext4: turn quotas off if mount failed after enabling quotas
- ext4: only update i_reserved_data_blocks on successful block allocation
- fs: dlm: revert check required context while close
- soc: qcom: mdt_loader: Fix unconditional call to scm_pas_mem_setup
- ext2/dax: Fix ext2_setsize when len is page aligned
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- hwrng: imx-rngc - fix the timeout for init and self check
- dm integrity: reduce vmalloc space footprint on 32-bit architectures
- scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O
- s390/zcrypt: do not retry administrative requests
- PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold
- PCI: Release resource invalidated by coalescing
- PCI: Add function 1 DMA alias quirk for Marvell 88SE9235
- PCI: qcom: Disable write access to read only registers for IP v2.3.3
- PCI: epf-test: Fix DMA transfer completion initialization
- PCI: epf-test: Fix DMA transfer completion detection
- PCI: rockchip: Assert PCI Configuration Enable bit after probe
- PCI: rockchip: Write PCI Device ID to correct register
- PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked
- PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core
- PCI: rockchip: Use u32 variable to access 32-bit registers
- PCI: rockchip: Set address alignment for endpoint mode
- misc: pci_endpoint_test: Free IRQs before removing the device
- misc: pci_endpoint_test: Re-init completion for every test
- mfd: pm8008: Fix module autoloading
- md/raid0: add discard support for the 'original' layout
- fs: dlm: return positive pid value for F_GETLK
- fs: dlm: fix cleanup pending ops when interrupted
- fs: dlm: interrupt posix locks only when process is killed
- fs: dlm: make F_SETLK use unkillable wait_event
- fs: dlm: fix mismatch of plock results from userspace
- scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by
lpfc_nlp_not_used()
- drm/atomic: Allow vblank-enabled + self-refresh "disable"
- drm/rockchip: vop: Leave vblank enabled in self-refresh
- drm/amd/display: fix seamless odm transitions
- drm/amd/display: Remove Phantom Pipe Check When Calculating K1 and K2
- drm/amd/display: disable seamless boot if force_odm_combine is enabled
- drm/amdgpu: fix clearing mappings for BOs that are always valid in VM
- drm/amd: Disable PSR-SU on Parade 0803 TCON
- drm/amd/display: add a NULL pointer check
- drm/amd/display: Correct `DMUB_FW_VERSION` macro
- drm/amd/display: Add monitor specific edid quirk
- drm/amdgpu: avoid restore process run into dead loop.
- drm/ttm: Don't leak a resource on swapout move error
- serial: atmel: don't enable IRQs prematurely
- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in
case of error
- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when
iterating clk
- tty: serial: imx: fix rs485 rx after tx
- firmware: stratix10-svc: Fix a potential resource leak in
svc_create_memory_pool()
- libceph: harden msgr2.1 frame segment length checks
- ceph: add a dedicated private data for netfs rreq
- ceph: fix blindly expanding the readahead windows
- ceph: don't let check_caps skip sending responses for revoke msgs
- xhci: Fix resume issue of some ZHAOXIN hosts
- xhci: Fix TRB prefetch issue of ZHAOXIN hosts
- xhci: Show ZHAOXIN xHCI root hub speed correctly
- meson saradc: fix clock divider mask length
- opp: Fix use-after-free in lazy_opp_tables after probe deferral
- soundwire: qcom: fix storing port config out-of-bounds
- Revert "8250: add support for ASIX devices with a FIFO bug"
- bus: ixp4xx: fix IXP4XX_EXP_T1_MASK
- s390/decompressor: fix misaligned symbol build error
- dm: verity-loadpin: Add NULL pointer check for 'bdev' parameter
- tracing/histograms: Add histograms to hist_vars if they have referenced
variables
- tracing: Fix memory leak of iter->temp when reading trace_pipe
- nvme: don't reject probe due to duplicate IDs for single-ported PCIe devices
- samples: ftrace: Save required argument registers in sample trampolines
- perf: RISC-V: Remove PERF_HES_STOPPED flag checking in riscv_pmu_start()
- regmap-irq: Fix out-of-bounds access when allocating config buffers
- net: ena: fix shift-out-of-bounds in exponential backoff
- ring-buffer: Fix deadloop issue on reading trace_pipe
- ftrace: Fix possible warning on checking all pages used in
ftrace_process_locs()
- cifs: if deferred close is disabled then close files immediately
- xtensa: ISS: fix call to split_if_spec
- perf/x86: Fix lockdep warning in for_each_sibling_event() on SPR
- PM: QoS: Restore support for default value on frequency QoS
- pwm: meson: modify and simplify calculation in meson_pwm_get_state
- pwm: meson: fix handling of period/duty if greater than UINT_MAX
- fprobe: Release rethook after the ftrace_ops is unregistered
- fprobe: Ensure running fprobe_exit_handler() finished before calling
rethook_free()
- tracing: Fix null pointer dereference in tracing_err_log_open()
- selftests: mptcp: connect: fail if nft supposed to work
- selftests: mptcp: sockopt: return error if wrong mark
- selftests: mptcp: userspace_pm: use correct server port
- selftests: mptcp: userspace_pm: report errors with 'remove' tests
- selftests: mptcp: depend on SYN_COOKIES
- selftests: mptcp: pm_nl_ctl: fix 32-bit support
- tracing/probes: Fix not to count error code to total length
- tracing/probes: Fix to update dynamic data counter if fetcharg uses it
- tracing/user_events: Fix struct arg size match check
- scsi: qla2xxx: Multi-que support for TMF
- scsi: qla2xxx: Fix task management cmd failure
- scsi: qla2xxx: Fix task management cmd fail due to unavailable resource
- scsi: qla2xxx: Fix hang in task management
- scsi: qla2xxx: Wait for io return on terminate rport
- scsi: qla2xxx: Fix mem access after free
- scsi: qla2xxx: Array index may go out of bound
- scsi: qla2xxx: Avoid fcport pointer dereference
- scsi: qla2xxx: Fix potential NULL pointer dereference
- scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()
- scsi: qla2xxx: Correct the index of array
- scsi: qla2xxx: Pointer may be dereferenced
- scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue
- scsi: qla2xxx: Fix end of loop test
- MIPS: kvm: Fix build error with KVM_MIPS_DEBUG_COP0_COUNTERS enabled
- Revert "drm/amd: Disable PSR-SU on Parade 0803 TCON"
- net/sched: sch_qfq: reintroduce lmax bound check for MTU
- drm/atomic: Fix potential use-after-free in nonblocking commits
- net/ncsi: make one oem_gma function for all mfr id
- net/ncsi: change from ndo_set_mac_address to dev_set_mac_address
- HID: input: fix mapping for camera access keys
- xen/virtio: Fix NULL deref when a bridge of PCI root bus has no parent
- netfilter: conntrack: don't fold port numbers into addresses before hashing
- net/mlx5: Query hca_cap_2 only when supported
- udp6: add a missing call into udp_fail_queue_rcv_skb tracepoint
- HID: hyperv: avoid struct memcpy overrun warning
- igc: Rename qbv_enable to taprio_offload_enable
- igc: No strict mode in pure launchtime/CBS offload
- net: fec: increase the size of tx ring and update tx_wake_threshold
- drm/nouveau/disp: fix HDMI on gt215+
- drm/nouveau/disp/g94: enable HDMI
- drm/nouveau: bring back blit subchannel for pre nv50 GPUs
- net: txgbe: fix eeprom calculation error
- kasan, slub: fix HW_TAGS zeroing with slub_debug
- drm/amd/display: perform a bounds check before filling dirty rectangles
- fs: dlm: clear pending bit when queue was empty
- fs: dlm: fix missing pending to false
- tty: fix hang on tty device with no_room set
- nfp: clean mc addresses in application firmware when closing port
- mptcp: do not rely on implicit state check in mptcp_listen()
- mptcp: ensure subflow is unhashed before cleaning the backlog
- selftests: mptcp: sockopt: use 'iptables-legacy' if available
- smb: client: Fix -Wstringop-overflow issues
- tracing/probes: Fix to avoid double count of the string length on the array
- Upstream stable to v6.1.40, v6.4.5
* Nouveau driver crash - Ubuntu 22.04.3 LTS stuck on power-off/reboot screen
(LP: #2031352) // Lunar update: upstream stable patchset 2023-09-14
(LP: #2036075)
- drm/nouveau/acr: Abort loading ACR if no firmware was found
* Lunar update: upstream stable patchset 2023-09-05 (LP: #2034469)
- drm: use mgr->dev in drm_dbg_kms in drm_dp_add_payload_part2
- fs: pipe: reveal missing function protoypes
- block: Fix the type of the second bdev_op_is_zoned_write() argument
- erofs: avoid tagged pointers to mark sync decompression
- erofs: remove tagged pointer helpers
- erofs: move zdata.h into zdata.c
- erofs: kill hooked chains to avoid loops on deduplicated compressed images
- x86/resctrl: Only show tasks' pid in current pid namespace
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- x86/sev: Fix calculation of end address based on number of pages
- virt: sevguest: Add CONFIG_CRYPTO dependency
- blk-mq: fix potential io hang by wrong 'wake_batch'
- lockd: drop inappropriate svc_get() from locked_get()
- nvme-core: fix memory leak in dhchap_secret_store
- nvme-core: fix memory leak in dhchap_ctrl_secret
- nvme-core: add missing fault-injection cleanup
- nvme-core: fix dev_pm_qos memleak
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- md/raid10: fix overflow of md/safe_mode_delay
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid1-10: factor out a helper to add bio to plug
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: submit write io directly if bitmap is not enabled
- block: fix blktrace debugfs entries leakage
- irqchip/stm32-exti: Fix warning on initialized field overwritten
- irqchip/jcore-aic: Fix missing allocation of IRQ descriptors
- svcrdma: Prevent page release when nothing was received
- erofs: simplify iloc()
- erofs: fix compact 4B support for 16k block size
- posix-timers: Prevent RT livelock in itimer_delete()
- tick/rcu: Fix bogus ratelimit condition
- tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode().
- clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe
- PM: domains: fix integer overflow issues in genpd_parse_state()
- perf/arm-cmn: Fix DTC reset
- x86/mm: Allow guest.enc_status_change_prepare() to fail
- x86/tdx: Fix race between set_memory_encrypted() and
load_unaligned_zeropad()
- drivers/perf: hisi: Don't migrate perf to the CPU going to teardown
- powercap: RAPL: Fix CONFIG_IOSF_MBI dependency
- PM: domains: Move the verification of in-params from genpd_add_device()
- ARM: 9303/1: kprobes: avoid missing-declaration warnings
- cpufreq: intel_pstate: Fix energy_performance_preference for passive
- thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe()
- rcu: Make rcu_cpu_starting() rely on interrupts being disabled
- rcu-tasks: Stop rcu_tasks_invoke_cbs() from using never-onlined CPUs
- rcutorture: Correct name of use_softirq module parameter
- rcuscale: Move shutdown from wait_event() to wait_event_idle()
- rcu/rcuscale: Move rcu_scale_*() after kfree_scale_cleanup()
- rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale
- kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME
is undefined
- perf/ibs: Fix interface via core pmu events
- x86/mm: Fix __swp_entry_to_pte() for Xen PV guests
- locking/atomic: arm: fix sync ops
- evm: Complete description of evm_inode_setattr()
- evm: Fix build warnings
- ima: Fix build warnings
- pstore/ram: Add check for kstrdup
- igc: Enable and fix RX hash usage by netstack
- wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation
- wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx
- libbpf: btf_dump_type_data_check_overflow needs to consider
BTF_MEMBER_BITFIELD_SIZE
- samples/bpf: Fix buffer overflow in tcp_basertt
- spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG
- wifi: wilc1000: fix for absent RSN capabilities WFA testcase
- wifi: mwifiex: Fix the size of a memory allocation in
mwifiex_ret_802_11_scan()
- sctp: add bpf_bypass_getsockopt proto callback
- libbpf: fix offsetof() and container_of() to work with CO-RE
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- spi: dw: Round of n_bytes to power of 2
- nfc: llcp: fix possible use of uninitialized variable in
nfc_llcp_send_connect()
- bpftool: JIT limited misreported as negative value on aarch64
- bpf: Remove bpf trampoline selector
- bpf: Fix memleak due to fentry attach failure
- selftests/bpf: Do not use sign-file as testcase
- regulator: core: Fix more error checking for debugfs_create_dir()
- regulator: core: Streamline debugfs operations
- wifi: orinoco: Fix an error handling path in spectrum_cs_probe()
- wifi: orinoco: Fix an error handling path in orinoco_cs_probe()
- wifi: atmel: Fix an error handling path in atmel_probe()
- wifi: wl3501_cs: Fix an error handling path in wl3501_probe()
- wifi: ray_cs: Fix an error handling path in ray_probe()
- wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
- samples/bpf: xdp1 and xdp2 reduce XDPBUFSIZE to 60
- wifi: ath10k: Trigger STA disconnect after reconfig complete on hardware
restart
- wifi: mac80211: recalc min chandef for new STA links
- selftests/bpf: Fix check_mtu using wrong variable type
- wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled
- wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown
- ice: handle extts in the miscellaneous interrupt thread
- selftests: cgroup: fix unexpected failure on test_memcg_low
- watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct
config
- watchdog/perf: more properly prevent false positives with turbo modes
- kexec: fix a memory leak in crash_shrink_memory()
- mmc: mediatek: Avoid ugly error message when SDIO wakeup IRQ isn't used
- memstick r592: make memstick_debug_get_tpc_name() static
- wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key()
- wifi: mac80211: Fix permissions for valid_links debugfs entry
- rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO
- wifi: ath11k: Add missing check for ioremap
- wifi: iwlwifi: pull from TXQs with softirqs disabled
- wifi: iwlwifi: pcie: fix NULL pointer dereference in
iwl_pcie_irq_rx_msix_handler()
- wifi: mac80211: Remove "Missing iftype sband data/EHT cap" spam
- wifi: cfg80211: rewrite merging of inherited elements
- wifi: cfg80211: drop incorrect nontransmitted BSS update code
- wifi: cfg80211: fix regulatory disconnect with OCB/NAN
- wifi: ieee80211: Fix the common size calculation for reconfiguration ML
- mmc: Add MMC_QUIRK_BROKEN_SD_CACHE for Kingston Canvas Go Plus from 11/2019
- wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection
- wifi: ath9k: convert msecs to jiffies where needed
- bpf: Factor out socket lookup functions for the TC hookpoint.
- bpf: Call __bpf_sk_lookup()/__bpf_skc_lookup() directly via TC hookpoint
- bpf: Fix bpf socket lookup from tc/xdp to respect socket VRF bindings
- can: length: fix bitstuffing count
- can: kvaser_pciefd: Add function to set skb hwtstamps
- can: kvaser_pciefd: Set hardware timestamp on transmitted packets
- net: stmmac: fix double serdes powerdown
- netlink: fix potential deadlock in netlink_set_err()
- netlink: do not hard code device address lenth in fdb dumps
- bonding: do not assume skb mac_header is set
- selftests: rtnetlink: remove netdevsim device after ipsec offload test
- gtp: Fix use-after-free in __gtp_encap_destroy().
- net: axienet: Move reset before 64-bit DMA detection
- ocfs2: Fix use of slab data with sendpage
- sfc: fix crash when reading stats while NIC is resetting
- lib/ts_bm: reset initial match offset for every block of text
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just
basic one
- netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return
value.
- ipvlan: Fix return value of ipvlan_queue_xmit()
- netlink: Add __sock_i_ino() for __netlink_diag_dump().
- drm/amd/display: Add logging for display MALL refresh setting
- radeon: avoid double free in ci_dpm_init()
- drm/amd/display: Explicitly specify update type per plane info change
- drm/bridge: it6505: Move a variable assignment behind a null pointer check
in receive_timing_debugfs_show()
- Input: drv260x - sleep between polling GO bit
- drm/bridge: ti-sn65dsi83: Fix enable error path
- drm/bridge: tc358768: always enable HS video mode
- drm/bridge: tc358768: fix PLL parameters computation
- drm/bridge: tc358768: fix PLL target frequency
- drm/bridge: tc358768: fix TCLK_ZEROCNT computation
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation
- drm/bridge: tc358768: fix THS_ZEROCNT computation
- drm/bridge: tc358768: fix TXTAGOCNT computation
- drm/bridge: tc358768: fix THS_TRAILCNT computation
- drm/vram-helper: fix function names in vram helper doc
- ARM: dts: BCM5301X: Drop "clock-names" from the SPI node
- ARM: dts: meson8b: correct uart_B and uart_C clock references
- mm: call arch_swap_restore() from do_swap_page()
- clk: vc5: Use `clamp()` to restrict PLL range
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- clk: vc5: Fix .driver_data content in i2c_device_id
- clk: vc7: Fix .driver_data content in i2c_device_id
- clk: rs9: Fix .driver_data content in i2c_device_id
- Input: adxl34x - do not hardcode interrupt trigger type
- drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks`
- drm/panel: sharp-ls043t1le01: adjust mode settings
- driver: soc: xilinx: use _safe loop iterator to avoid a use after free
- ASoC: Intel: sof_sdw: remove SOF_SDW_TGL_HDMI for MeteorLake devices
- drm/vkms: isolate pixel conversion functionality
- drm: Add fixed-point helper to get rounded integer values
- drm/vkms: Fix RGB565 pixel conversion
- ARM: dts: stm32: Move ethernet MAC EEPROM from SoM to carrier boards
- bus: ti-sysc: Fix dispc quirk masking bool variables
- arm64: dts: microchip: sparx5: do not use PSCI on reference boards
- drm/bridge: tc358767: Switch to devm MIPI-DSI helpers
- clk: imx: scu: use _safe list iterator to avoid a use after free
- hwmon: (f71882fg) prevent possible division by zero
- RDMA/bnxt_re: Disable/kill tasklet only if it is enabled
- RDMA/bnxt_re: Fix to remove unnecessary return labels
- RDMA/bnxt_re: Use unique names while registering interrupts
- RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid
- RDMA/bnxt_re: Fix to remove an unnecessary log
- drm/msm/dsi: don't allow enabling 14nm VCO with unprogrammed rate
- drm/msm/disp/dpu: get timing engine status from intf status register
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
- iommu/virtio: Detach domain on endpoint release
- iommu/virtio: Return size mapped for a detached domain
- clk: renesas: rzg2l: Fix CPG_SIPLL5_CLK1 register write
- ARM: dts: gta04: Move model property out of pinctrl node
- drm/bridge: anx7625: Convert to i2c's .probe_new()
- drm/bridge: anx7625: Prevent endless probe loop
- ARM: dts: qcom: msm8974: do not use underscore in node name (again)
- arm64: dts: qcom: msm8916: correct camss unit address
- arm64: dts: qcom: msm8916: correct MMC unit address
- arm64: dts: qcom: msm8994: correct SPMI unit address
- arm64: dts: qcom: msm8996: correct camss unit address
- arm64: dts: qcom: sdm630: correct camss unit address
- arm64: dts: qcom: sdm845: correct camss unit address
- arm64: dts: qcom: sm8350: correct DMA controller unit address
- arm64: dts: qcom: sdm845-polaris: add missing touchscreen child node reg
- arm64: dts: qcom: apq8016-sbc: Fix regulator constraints
- arm64: dts: qcom: apq8016-sbc: Fix 1.8V power rail on LS expansion
- drm/bridge: Introduce pre_enable_prev_first to alter bridge init order
- drm/bridge: ti-sn65dsi83: Fix enable/disable flow to meet spec
- drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H
- ARM: ep93xx: fix missing-prototype warnings
- ARM: omap2: fix missing tick_broadcast() prototype
- arm64: dts: qcom: pm7250b: add missing spmi-vadc include
- arm64: dts: qcom: apq8096: fix fixed regulator name property
- arm64: dts: mediatek: mt8183: Add mediatek,broken-save-restore-fw to kukui
- ARM: dts: stm32: Shorten the AV96 HDMI sound card name
- memory: brcmstb_dpfe: fix testing array offset after use
- ARM: dts: qcom: apq8074-dragonboard: Set DMA as remotely controlled
- ASoC: es8316: Increment max value for ALC Capture Target Volume control
- ASoC: es8316: Do not set rate constraints for unsupported MCLKs
- ARM: dts: meson8: correct uart_B and uart_C clock references
- soc/fsl/qe: fix usb.c build errors
- RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes
- IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate
- RDMA/hns: Fix hns_roce_table_get return value
- ARM: dts: iwg20d-q7-common: Fix backlight pwm specifier
- arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1
- drm/msm/dpu: set DSC flush bit correctly at MDP CTL flush register
- fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe()
- arm64: dts: ti: k3-j7200: Fix physical address of pin
- Input: pm8941-powerkey - fix debounce on gen2+ PMICs
- ARM: dts: stm32: Fix audio routing on STM32MP15xx DHCOM PDK2
- ARM: dts: stm32: fix i2s endpoint format property for stm32mp15xx-dkx
- hwmon: (gsc-hwmon) fix fan pwm temperature scaling
- hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272
- ARM: dts: BCM5301X: fix duplex-full => full-duplex
- clk: Export clk_hw_forward_rate_request()
- drm/amd/display: Fix a test CalculatePrefetchSchedule()
- drm/amd/display: Fix a test dml32_rq_dlg_get_rq_reg()
- drm/amdkfd: Fix potential deallocation of previously deallocated memory.
- soc: mediatek: SVS: Fix MT8192 GPU node name
- drm/amd/display: Fix artifacting on eDP panels when engaging freesync video
mode
- drm/radeon: fix possible division-by-zero errors
- HID: uclogic: Modular KUnit tests should not depend on KUNIT=y
- RDMA/rxe: Fix access checks in rxe_check_bind_mw
- amdgpu: validate offset_in_bo of drm_amdgpu_gem_va
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
- RDMA/bnxt_re: wraparound mbox producer index
- RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context
- clk: imx: clk-imxrt1050: fix memory leak in imxrt1050_clocks_probe
- clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe
- clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe
- clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe()
- arm64: dts: qcom: sdm845: Flush RSC sleep & wake votes
- arm64: dts: qcom: sm8250-edo: Panel framebuffer is 2.5k instead of 4k
- clk: bcm: rpi: Fix off by one in raspberrypi_discover_clocks()
- clk: clocking-wizard: Fix Oops in clk_wzrd_register_divider()
- clk: tegra: tegra124-emc: Fix potential memory leak
- ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer
- drm/msm/dpu: do not enable color-management if DSPPs are not available
- drm/msm/dpu: Fix slice_last_group_size calculation
- drm/msm/dsi: Use DSC slice(s) packet size to compute word count
- drm/msm/dsi: Flip greater-than check for slice_count and slice_per_intf
- drm/msm/dsi: Remove incorrect references to slice_count
- drm/msm/dp: Free resources after unregistering them
- arm64: dts: mediatek: Add cpufreq nodes for MT8192
- arm64: dts: mediatek: mt8192: Fix CPUs capacity-dmips-mhz
- drm/amdgpu: Fix memcpy() in sienna_cichlid_append_powerplay_table function.
- drm/amdgpu: Fix usage of UMC fill record in RAS
- drm/msm/dpu: correct MERGE_3D length
- clk: vc5: check memory returned by kasprintf()
- clk: cdce925: check return value of kasprintf()
- clk: si5341: return error if one synth clock registration fails
- clk: si5341: check return value of {devm_}kasprintf()
- clk: si5341: free unused memory on probe failure
- clk: keystone: sci-clk: check return value of kasprintf()
- clk: ti: clkctrl: check return value of kasprintf()
- drivers: meson: secure-pwrc: always enable DMA domain
- ovl: update of dentry revalidate flags after copy up
- ASoC: imx-audmix: check return value of devm_kasprintf()
- clk: Fix memory leak in devm_clk_notifier_register()
- ARM: dts: lan966x: kontron-d10: fix board reset
- ARM: dts: lan966x: kontron-d10: fix SPI CS
- ASoC: amd: acp: clear pdm dma interrupt mask
- PCI: cadence: Fix Gen2 Link Retraining process
- PCI: vmd: Reset VMD config register between soft reboots
- scsi: qedf: Fix NULL dereference in error handling
- pinctrl: bcm2835: Handle gpiochip_add_pin_range() errors
- platform/x86: lenovo-yogabook: Fix work race on remove()
- platform/x86: lenovo-yogabook: Reprobe devices on remove()
- platform/x86: lenovo-yogabook: Set default keyboard backligh brightness on
probe()
- PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free
- scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe()
- PCI: pciehp: Cancel bringup sequence if card is not present
- PCI: ftpci100: Release the clock resources
- pinctrl: sunplus: Add check for kmalloc
- PCI: Add pci_clear_master() stub for non-CONFIG_PCI
- scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on
nlp_state
- perf bench: Add missing setlocale() call to allow usage of %'d style
formatting
- pinctrl: cherryview: Return correct value if pin in push-pull mode
- platform/x86: think-lmi: mutex protection around multiple WMI calls
- platform/x86: think-lmi: Correct System password interface
- platform/x86: think-lmi: Correct NVME password handling
- pinctrl:sunplus: Add check for kmalloc
- pinctrl: npcm7xx: Add missing check for ioremap
- kcsan: Don't expect 64 bits atomic builtins from 32 bits architectures
- powerpc/interrupt: Don't read MSR from interrupt_exit_kernel_prepare()
- powerpc/signal32: Force inlining of __unsafe_save_user_regs() and
save_tm_user_regs_unsafe()
- perf script: Fix allocation of evsel->priv related to per-event dump files
- platform/x86: thinkpad_acpi: Fix lkp-tests warnings for platform profiles
- perf dwarf-aux: Fix off-by-one in die_get_varname()
- platform/x86/dell/dell-rbtn: Fix resources leaking on error path
- perf tool x86: Consolidate is_amd check into single function
- perf tool x86: Fix perf_env memory leak
- powerpc/64s: Fix VAS mm use after free
- pinctrl: microchip-sgpio: check return value of devm_kasprintf()
- pinctrl: at91-pio4: check return value of devm_kasprintf()
- powerpc/powernv/sriov: perform null check on iov before dereferencing iov
- powerpc: update ppc_save_regs to save current r1 in pt_regs
- PCI: qcom: Remove PCIE20_ prefix from register definitions
- PCI: qcom: Sort and group registers and bitfield definitions
- PCI: qcom: Use lower case for hex
- PCI: qcom: Use DWC helpers for modifying the read-only DBI registers
- PCI: qcom: Disable write access to read only registers for IP v2.9.0
- riscv: uprobes: Restore thread.bad_cause
- powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo
- powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-
boundary
- PCI: endpoint: Fix a Kconfig prompt of vNTB driver
- PCI: endpoint: functions/pci-epf-test: Fix dma_chan direction
- PCI: vmd: Fix uninitialized variable usage in vmd_enable_domain()
- vfio/mdev: Move the compat_class initialization to module init
- hwrng: virtio - Fix race on data_avail and actual data
- modpost: remove broken calculation of exception_table_entry size
- crypto: nx - fix build warnings when DEBUG_FS is not enabled
- modpost: fix section mismatch message for R_ARM_ABS32
- modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24}
- crypto: marvell/cesa - Fix type mismatch warning
- crypto: jitter - correct health test during initialization
- modpost: fix off by one in is_executable_section()
- ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard
- crypto: qat - unmap buffer before free for DH
- crypto: qat - unmap buffers before free for RSA
- NFSv4.2: fix wrong shrinker_id
- NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION
- SMB3: Do not send lease break acknowledgment if all file handles have been
closed
- dax: Fix dax_mapping_release() use after free
- dax: Introduce alloc_dev_dax_id()
- dax/kmem: Pass valid argument to memory_group_register_static
- hwrng: st - keep clock enabled while hwrng is registered
- kbuild: Disable GCOV for *.mod.o
- efi/libstub: Disable PCI DMA before grabbing the EFI memory map
- cifs: prevent use-after-free by freeing the cfile later
- cifs: do all necessary checks for credits within or before locking
- smb: client: fix broken file attrs with nodfs mounts
- ksmbd: avoid field overflow warning
- arm64: sme: Use STR P to clear FFR context field in streaming SVE mode
- x86/efi: Make efi_set_virtual_address_map IBT safe
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- USB: serial: option: add LARA-R6 01B PIDs
- usb: dwc3: gadget: Propagate core init errors to UDC during pullup
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
- iio: adc: ad7192: Fix null ad7192_state pointer access
- iio: adc: ad7192: Fix internal/external clock selection
- iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF
- iio: accel: fxls8962af: fixup buffer scan element type
- mm/mmap: Fix VM_LOCKED check in do_vmi_align_munmap()
- ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on EliteBook
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx
- ALSA: jack: Fix mutex call in snd_jack_report()
- ALSA: pcm: Fix potential data race at PCM memory allocation helpers
- block: fix signed int overflow in Amiga partition support
- block: add overflow checks for Amiga partition support
- block: change all __u32 annotations to __be32 in affs_hardblocks.h
- block: increment diskseq on all media change events
- btrfs: fix race when deleting free space root from the dirty cow roots list
- SUNRPC: Fix UAF in svc_tcp_listen_data_ready()
- w1: w1_therm: fix locking behavior in convert_t
- w1: fix loop in w1_fini()
- dt-bindings: power: reset: qcom-pon: Only allow reboot-mode pre-pmk8350
- f2fs: do not allow to defragment files have FI_COMPRESS_RELEASED
- sh: j2: Use ioremap() to translate device tree address into kernel memory
- usb: dwc2: Fix some error handling paths
- serial: 8250: omap: Fix freeing of resources on failed register
- clk: qcom: mmcc-msm8974: remove oxili_ocmemgx_clk
- clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs
- clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks
- clk: qcom: gcc-qcm2290: Mark RCGs shared where applicable
- media: usb: Check az6007_read() return value
- media: amphion: drop repeated codec data for vc1l format
- media: amphion: drop repeated codec data for vc1g format
- media: amphion: initiate a drain of the capture queue in dynamic resolution
change
- media: videodev2.h: Fix struct v4l2_input tuner index comment
- media: i2c: Correct format propagation for st-mipid02
- media: hi846: fix usage of pm_runtime_get_if_in_use()
- media: mediatek: vcodec: using decoder status instead of core work count
- clk: qcom: ipq6018: fix networking resets
- clk: qcom: dispcc-qcm2290: Fix BI_TCXO_AO handling
- clk: qcom: dispcc-qcm2290: Fix GPLL0_OUT_DIV handling
- clk: qcom: mmcc-msm8974: use clk_rcg2_shared_ops for mdp_clk_src clock
- staging: vchiq_arm: mark vchiq_platform_init() static
- usb: dwc3: qcom: Fix potential memory leak
- usb: gadget: u_serial: Add null pointer check in gserial_suspend
- extcon: Fix kernel doc of property fields to avoid warnings
- extcon: Fix kernel doc of property capability fields to avoid warnings
- usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()
- usb: hide unused usbfs_notify_suspend/resume functions
- usb: misc: eud: Fix eud sysfs path (use 'qcom_eud')
- serial: core: lock port for stop_rx() in uart_suspend_port()
- serial: 8250: lock port for stop_rx() in omap8250_irq()
- serial: core: lock port for start_rx() in uart_resume_port()
- serial: 8250: lock port for UART_IER access in omap8250_irq()
- kernfs: fix missing kernfs_idr_lock to remove an ID from the IDR
- lkdtm: replace ll_rw_block with submit_bh
- i3c: master: svc: fix cpu schedule in spin lock
- coresight: Fix loss of connection info when a module is unloaded
- mfd: rt5033: Drop rt5033-battery sub-device
- media: venus: helpers: Fix ALIGN() of non power of two
- media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var()
- sh: Avoid using IRQ0 on SH3 and SH4
- gfs2: Fix duplicate should_fault_in_pages() call
- f2fs: fix potential deadlock due to unpaired node_write lock use
- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
- usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove()
- usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe()
- usb: common: usb-conn-gpio: Set last role to unknown before initial
detection
- usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe()
- mfd: wcd934x: Fix an error handling path in wcd934x_slim_probe()
- mfd: intel-lpss: Add missing check for platform_get_resource
- Revert "usb: common: usb-conn-gpio: Set last role to unknown before initial
detection"
- serial: 8250_omap: Use force_suspend and resume for system suspend
- device property: Clarify description of returned value in some functions
- drivers: fwnode: fix fwnode_irq_get[_byname]()
- nvmem: sunplus-ocotp: release otp->clk before return
- nvmem: rmem: Use NVMEM_DEVID_AUTO
- bus: fsl-mc: don't assume child devices are all fsl-mc devices
- mfd: stmfx: Fix error path in stmfx_chip_init
- mfd: stmfx: Nullify stmfx->vdd in case of error
- KVM: s390: vsie: fix the length of APCB bitmap
- KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler
- cpufreq: mediatek: correct voltages for MT7622 and MT7623
- misc: fastrpc: check return value of devm_kasprintf()
- clk: qcom: mmcc-msm8974: fix MDSS_GDSC power flags
- hwtracing: hisi_ptt: Fix potential sleep in atomic context
- mfd: stmpe: Only disable the regulators if they are enabled
- phy: tegra: xusb: check return value of devm_kzalloc()
- lib/bitmap: drop optimization of bitmap_{from,to}_arr64
- pwm: imx-tpm: force 'real_period' to be zero in suspend
- pwm: sysfs: Do not apply state to already disabled PWMs
- pwm: ab8500: Fix error code in probe()
- pwm: mtk_disp: Fix the disable flow of disp_pwm
- md/raid10: fix the condition to call bio_end_io_acct()
- rtc: st-lpc: Release some resources in st_rtc_probe() in case of error
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times
- drm/i915/guc/slpc: Apply min softlimit correctly
- f2fs: check return value of freeze_super()
- media: cec: i2c: ch7322: also select REGMAP
- sctp: fix potential deadlock on &net->sctp.addr_wq_lock
- net/sched: act_ipt: add sanity checks on table name and hook locations
- net: add a couple of helpers for iph tot_len
- net/sched: act_ipt: add sanity checks on skb before calling target
- spi: spi-geni-qcom: enable SPI_CONTROLLER_MUST_TX for GPI DMA mode
- net: mscc: ocelot: don't report that RX timestamping is enabled by default
- net: mscc: ocelot: don't keep PTP configuration of all ports in single
structure
- net: dsa: felix: don't drop PTP frames with tag_8021q when RX timestamping
is disabled
- net: dsa: sja1105: always enable the INCL_SRCPT option
- net: dsa: tag_sja1105: always prefer source port information from INCL_SRCPT
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- Bluetooth: fix invalid-bdaddr quirk for non-persistent setup
- Bluetooth: ISO: use hci_sync for setting CIG parameters
- Bluetooth: MGMT: add CIS feature bits to controller information
- Bluetooth: MGMT: Use BIT macro when defining bitfields
- Bluetooth: MGMT: Fix marking SCAN_RSP as not connectable
- ibmvnic: Do not reset dql stats on NON_FATAL err
- net: dsa: vsc73xx: fix MTU configuration
- mlxsw: minimal: fix potential memory leak in mlxsw_m_linecards_init
- spi: bcm-qspi: return error if neither hif_mspi nor mspi is available
- drm/amdgpu: fix number of fence calculations
- drm/amd: Don't try to enable secure display TA multiple times
- mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
- f2fs: fix error path handling in truncate_dnode()
- octeontx2-af: Fix mapping for NIX block from CGX connection
- octeontx2-af: Add validation before accessing cgx and lmac
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y
- powerpc: dts: turris1x.dts: Fix PCIe MEM size for pci2 node
- net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode
- net: dsa: tag_sja1105: fix source port decoding in vlan_filtering=0 bridge
mode
- net: fix net_dev_start_xmit trace event vs skb_transport_offset()
- tcp: annotate data races in __tcp_oow_rate_limited()
- bpf, btf: Warn but return no error for NULL btf from
__register_btf_kfunc_id_set()
- xsk: Honor SO_BINDTODEVICE on bind
- net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX
- fanotify: disallow mount/sb marks on kernel internal pseudo fs
- riscv: move memblock_allow_resize() after linear mapping is ready
- pptp: Fix fib lookup calls.
- net: dsa: tag_sja1105: fix MAC DA patching from meta frames
- net: dsa: sja1105: always enable the send_meta options
- octeontx-af: fix hardware timestamp configuration
- afs: Fix accidental truncation when storing data
- s390/qeth: Fix vipa deletion
- sh: dma: Fix DMA channel offset calculation
- apparmor: fix missing error check for rhashtable_insert_fast
- i2c: xiic: Don't try to handle more interrupt events after error
- dm: fix undue/missing spaces
- dm: avoid split of quoted strings where possible
- dm ioctl: have constant on the right side of the test
- dm ioctl: Avoid double-fetch of version
- extcon: usbc-tusb320: Unregister typec port on driver removal
- btrfs: do not BUG_ON() on tree mod log failure at balance_level()
- i2c: qup: Add missing unwind goto in qup_i2c_probe()
- irqchip/loongson-pch-pic: Fix potential incorrect hwirq assignment
- NFSD: add encoding of op_recall flag for write delegation
- irqchip/loongson-pch-pic: Fix initialization of HT vector register
- io_uring: wait interruptibly for request completions on exit
- mmc: core: disable TRIM on Kingston EMMC04G-M627
- mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M
- mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS
- mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is
used.
- wifi: cfg80211: fix regulatory disconnect for non-MLO
- wifi: ath10k: Serialize wake_tx_queue ops
- bcache: fixup btree_cache_wait list damage
- bcache: Remove unnecessary NULL point check in node allocations
- bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent
- watch_queue: prevent dangling pipe pointer
- um: Use HOST_DIR for mrproper
- integrity: Fix possible multiple allocation in integrity_inode_get()
- autofs: use flexible array in ioctl structure
- mm/damon/ops-common: atomically test and clear young on ptes and pmds
- shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs
- jffs2: reduce stack usage in jffs2_build_xattr_subsystem()
- fs: avoid empty option when generating legacy mount string
- ext4: Remove ext4 locking of moved directory
- Revert "f2fs: fix potential corruption when moving a directory"
- fs: Establish locking order for unrelated directories
- fs: Lock moved directories
- i2c: nvidia-gpu: Add ACPI property to align with device-tree
- i2c: nvidia-gpu: Remove ccgx,firmware-build property
- usb: typec: ucsi: Mark dGPUs as DEVICE scope
- ipvs: increase ip_vs_conn_tab_bits range for 64BIT
- btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profile
- btrfs: delete unused BGs while reclaiming BGs
- btrfs: bail out reclaim process if filesystem is read-only
- btrfs: add block-group tree to lockdep classes
- btrfs: reinsert BGs failed to reclaim
- btrfs: fix race when deleting quota root from the dirty cow roots list
- btrfs: fix extent buffer leak after tree mod log failure at split_node()
- btrfs: do not BUG_ON() on tree mod log failure at __btrfs_cow_block()
- ASoC: mediatek: mt8173: Fix irq error path
- ASoC: mediatek: mt8173: Fix snd_soc_component_initialize error path
- regulator: tps65219: Fix matching interrupts for their regulators
- ARM: dts: qcom: ipq4019: fix broken NAND controller properties override
- ARM: orion5x: fix d2net gpio initialization
- leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename
- blktrace: use inline function for blk_trace_remove() while blktrace is
disabled
- fs: no need to check source
- xfs: explicitly specify cpu when forcing inodegc delayed work to run
immediately
- xfs: check that per-cpu inodegc workers actually run on that cpu
- xfs: disable reaping in fscounters scrub
- xfs: fix xfs_inodegc_stop racing with mod_delayed_work
- mm/mmap: Fix extra maple tree write
- netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
- wireguard: queueing: use saner cpu selection wrapping
- wireguard: netlink: send staged packets when setting initial private key
- tty: serial: fsl_lpuart: add earlycon for imx8ulp platform
- block/partition: fix signedness issue for Amiga partitions
- sh: mach-r2d: Handle virq offset in cascaded IRL demux
- sh: mach-highlander: Handle virq offset in cascaded IRL demux
- sh: mach-dreamcast: Handle virq offset in cascaded IRQ demux
- sh: hd64461: Handle virq offset for offchip IRQ base and HD64461 IRQ
- blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()
- irqchip/loongson-eiointc: Fix irq affinity setting during resume
- perf: arm_cspmu: Set irq affinitiy only if overflow interrupt is used
- perf/arm_cspmu: Fix event attribute type
- APEI: GHES: correctly return NULL for ghes_get_devices()
- wifi: rtw88: usb: silence log flooding error message
- net: dsa: avoid suspicious RCU usage for synced VLAN-aware MAC addresses
- drm/amd/display: fix is_timing_changed() prototype
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- drm/nouveau: dispnv50: fix missing-prototypes warning
- arm64: dts: qcom: pm8998: don't use GIC_SPI for SPMI interrupts
- arm64: dts: qcom: ipq6018: correct qrng unit address
- arm64: dts: qcom: msm8953: correct IOMMU unit address
- arm64: dts: qcom: msm8976: correct MMC unit address
- arm64: dts: qcom: sm6115: correct thermal-sensor unit address
- drm/msm/dpu: always clear every individual pending flush mask
- MIPS: DTS: CI20: Fix ACT8600 regulator node names
- arm64: dts: qcom: sdm670: Flush RSC sleep & wake votes
- arm64: dts: ti: k3-j721e-beagleboneai64: Fix mailbox node status
- drm/msm/dp: Drop aux devices together with DP controller
- iommufd: Do not access the area pointer after unlocking
- iommufd: Call iopt_area_contig_done() under the lock
- perf evsel: Don't let for_each_group() treat the head of the list as one of
its nodes
- pinctrl: tegra: Duplicate pinmux functions table
- platform/x86:intel/pmc: Remove Meteor Lake S platform support
- perf tests task_analyzer: Fix bad substitution ${$1}
- perf tests task_analyzer: Skip tests if no libtraceevent support
- pinctrl: freescale: Fix a memory out of bounds when num_configs is 1
- perf stat: Reset aggr stats for each run
- platform/x86:intel/pmc: Update maps for Meteor Lake P/M platforms
- perf test: Set PERF_EXEC_PATH for script execution
- kbuild: Fix CFI failures with GCOV
- btrfs: fix range_end calculation in extent_write_locked_range
- igc: Fix race condition in PTP tx code
- igc: Check if hardware TX timestamping is enabled earlier
- igc: Work around HW bug causing missing timestamps
- sch_netem: fix issues in netem_change() vs get_dist_table()
- interconnect: qcom: rpm: Don't use clk_get_optional for bus clocks anymore
- media: videodev2.h: Fix p_s32 and p_s64 pointer types
- f2fs: fix the wrong condition to determine atomic context
- test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation
- media: tc358746: select CONFIG_GENERIC_PHY
- net/sched: act_ipt: zero skb->cb before calling target
- octeontx2-af: cn10kb: fix interrupt csr addresses
- octeontx2-af: Reset MAC features in FLR
- drm/i915/psr: Fix BDW PSR AUX CH data register offsets
- irqchip/loongson-liointc: Fix IRQ trigger polarity
- btrfs: fix dirty_metadata_bytes for redirtied buffers
- btrfs: add missing error handling when logging operation while COWing extent
buffer
- ARM: dts: qcom: msm8660: Fix regulator node names
- ovl: fix null pointer dereference in ovl_permission()
- ovl: let helper ovl_i_path_real() return the realinode
- ovl: fix null pointer dereference in ovl_get_acl_rcu()
- Upstream stable to v6.1.39, v6.3.13, v6.4.4
* Lunar update: upstream stable patchset 2023-09-01 (LP: #2033931)
- x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed
- test_firmware: Use kstrtobool() instead of strtobool()
- cgroup: bpf: use cgroup_lock()/cgroup_unlock() wrappers
- cgroup: always put cset in cgroup_css_set_put_fork
- cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks()
- qcom: llcc/edac: Fix the base address used for accessing LLCC banks
- EDAC/qcom: Get rid of hardcoded register offsets
- ksmbd: validate smb request protocol id
- of: overlay: Fix missing of_node_put() in error case of
init_overlay_changeset()
- power: supply: ab8500: Fix external_power_changed race
- power: supply: sc27xx: Fix external_power_changed race
- power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() +
schedule()
- ARM: dts: vexpress: add missing cache properties
- tools: gpio: fix debounce_period_us output of lsgpio
- selftests: gpio: gpio-sim: Fix BUG: test FAILED due to recent change
- power: supply: Ratelimit no data debug output
- PCI/DPC: Quirk PIO log size for Intel Ice Lake Root Ports
- platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0
- regulator: Fix error checking for debugfs_create_dir
- irqchip/gic-v3: Disable pseudo NMIs on Mediatek devices w/ firmware issues
- irqchip/meson-gpio: Mark OF related data as maybe unused
- power: supply: Fix logic checking if system is running from battery
- drm: panel-orientation-quirks: Change Air's quirk to support Air Plus
- btrfs: scrub: try harder to mark RAID56 block groups read-only
- btrfs: handle memory allocation failure in btrfs_csum_one_bio
- ASoC: soc-pcm: test if a BE can be prepared
- ASoC: Intel: avs: Account for UID of ACPI device
- ASoC: Intel: avs: Add missing checks on FE startup
- parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu()
- parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory()
- MIPS: unhide PATA_PLATFORM
- MIPS: Restore Au1300 support
- MIPS: Alchemy: fix dbdma2
- mips: Move initrd_start check after initrd address sanitisation.
- ASoC: cs35l41: Fix default regmap values for some registers
- ASoC: dwc: move DMA init to snd_soc_dai_driver probe()
- xen/blkfront: Only check REQ_FUA for writes
- drm:amd:amdgpu: Fix missing buffer object unlock in failure path
- io_uring: unlock sqd->lock before sq thread release CPU
- NVMe: Add MAXIO 1602 to bogus nid list.
- irqchip/gic: Correctly validate OF quirk descriptors
- wifi: cfg80211: fix locking in regulatory disconnect
- wifi: cfg80211: fix double lock bug in reg_wdev_chan_valid()
- epoll: ep_autoremove_wake_function should use list_del_init_careful
- ocfs2: fix use-after-free when unmounting read-only filesystem
- ocfs2: check new file size on fallocate call
- zswap: do not shrink if cgroup may not zswap
- nios2: dts: Fix tse_mac "max-frame-size" property
- nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key()
- nilfs2: fix possible out-of-bounds segment allocation in resize ioctl
- nilfs2: reject devices with insufficient block count
- LoongArch: Fix perf event id calculation
- io_uring/net: save msghdr->msg_control for retries
- kexec: support purgatories with .text.hot sections
- x86/purgatory: remove PGO flags
- riscv/purgatory: remove PGO flags
- powerpc/purgatory: remove PGO flags
- btrfs: do not ASSERT() on duplicated global roots
- btrfs: fix iomap_begin length for nocow writes
- btrfs: can_nocow_file_extent should pass down args->strict from callers
- ALSA: usb-audio: Fix broken resume due to UAC3 power state
- ALSA: usb-audio: Add quirk flag for HEM devices to enable native DSD
playback
- dm thin metadata: check fail_io before using data_sm
- dm thin: fix issue_discard to pass GFP_NOIO to __blkdev_issue_discard
- net: ethernet: stmicro: stmmac: fix possible memory leak in __stmmac_open
- nouveau: fix client work fence deletion race
- RDMA/uverbs: Restrict usage of privileged QKEYs
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
- net: usb: qmi_wwan: add support for Compal RXM-G1
- drm/amd: Make sure image is written to trigger VBIOS image update flow
- drm/amd: Tighten permissions on VBIOS flashing attributes
- drm/amd/pm: workaround for compute workload type on some skus
- drm/amdgpu: add missing radeon secondary PCI ID
- ALSA: hda/realtek: Add a quirk for Compaq N14JP6
- thunderbolt: dma_test: Use correct value for absent rings when creating
paths
- thunderbolt: Mask ring interrupt on Intel hardware as well
- clk: pxa: fix NULL pointer dereference in pxa3xx_clk_update_accr
- USB: serial: option: add Quectel EM061KGL series
- serial: lantiq: add missing interrupt ack
- usb: typec: ucsi: Fix command cancellation
- usb: typec: Fix fast_role_swap_current show function
- usb: gadget: udc: core: Offload usb_udc_vbus_handler processing
- usb: gadget: udc: core: Prevent soft_connect_store() race
- USB: dwc3: qcom: fix NULL-deref on suspend
- USB: dwc3: fix use-after-free on core driver unbind
- usb: dwc3: gadget: Reset num TRBs before giving back the request
- RDMA/rtrs: Fix the last iu->buf leak in err path
- RDMA/rtrs: Fix rxe_dealloc_pd warning
- RDMA/rxe: Fix packet length checks
- RDMA/rxe: Fix ref count error in check_rkey()
- spi: cadence-quadspi: Add missing check for dma_set_mask
- spi: fsl-dspi: avoid SCK glitches with continuous transfers
- netfilter: nf_tables: integrate pipapo into commit protocol
- netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM
- ice: Fix XDP memory leak when NIC is brought up and down
- net: enetc: correct the indexes of highest and 2nd highest TCs
- ping6: Fix send to link-local addresses with VRF.
- igb: Fix extts capture value format for 82580/i354/i350
- net/sched: simplify tcf_pedit_act
- net/sched: act_pedit: remove extra check for key type
- net/sched: act_pedit: Parse L3 Header for L4 offset
- octeontx2-af: Fix promiscuous mode
- wifi: mac80211: fix link activation settings order
- wifi: cfg80211: fix link del callback to call correct handler
- wifi: mac80211: take lock before setting vif links
- RDMA/rxe: Fix the use-before-initialization error of resp_pkts
- iavf: remove mask from iavf_irq_enable_queues()
- octeontx2-af: fixed resource availability check
- octeontx2-af: fix lbk link credits on cn10k
- RDMA/mlx5: Initiate dropless RQ for RAW Ethernet functions
- RDMA/mlx5: Create an indirect flow table for steering anchor
- RDMA/cma: Always set static rate to 0 for RoCE
- IB/uverbs: Fix to consider event queue closing also upon non-blocking mode
- RDMA/mlx5: Fix affinity assignment
- IB/isert: Fix dead lock in ib_isert
- IB/isert: Fix possible list corruption in CMA handler
- IB/isert: Fix incorrect release of isert connection
- net: ethtool: correct MAX attribute value for stats
- ipvlan: fix bound dev checking for IPv6 l3s mode
- sctp: fix an error code in sctp_sf_eat_auth()
- igc: Clean the TX buffer and TX descriptor ring
- igc: Fix possible system crash when loading module
- igb: fix nvm.ops.read() error handling
- net: phylink: report correct max speed for QUSGMII
- net: phylink: use a dedicated helper to parse usgmii control word
- drm/nouveau: don't detect DSM for non-NVIDIA device
- drm/bridge: ti-sn65dsi86: Avoid possible buffer overflow
- drm/nouveau/dp: check for NULL nv_connector->native_mode
- drm/nouveau: add nv_encoder pointer check for NULL
- selftests/tc-testing: Fix Error: Specified qdisc kind is unknown.
- selftests/tc-testing: Fix Error: failed to find target LOG
- selftests/tc-testing: Fix SFB db test
- sched: add new attr TCA_EXT_WARN_MSG to report tc extact message
- net/sched: Refactor qdisc_graft() for ingress and clsact Qdiscs
- net/sched: qdisc_destroy() old ingress and clsact Qdiscs before grafting
- selftests: forwarding: hw_stats_l3: Set addrgenmode in a separate step
- cifs: fix lease break oops in xfstest generic/098
- ext4: drop the call to ext4_error() from ext4_get_group_info()
- net/sched: cls_api: Fix lockup on flushing explicitly created chain
- net: dsa: felix: fix taprio guard band overflow at 10Mbps with jumbo frames
- net: lapbether: only support ethernet devices
- net: macsec: fix double free of percpu stats
- sfc: fix XDP queues mode with legacy IRQ
- dm: don't lock fs when the map is NULL during suspend or resume
- net: tipc: resize nlattr array to correct size
- selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET
- octeon_ep: Add missing check for ioremap
- afs: Fix vlserver probe RTT handling
- parisc: Delete redundant register definitions in <asm/assembly.h>
- net/sched: act_api: move TCA_EXT_WARN_MSG to the correct hierarchy
- Revert "net/sched: act_api: move TCA_EXT_WARN_MSG to the correct hierarchy"
- net/sched: act_api: add specific EXT_WARN_MSG for tc action
- neighbour: delete neigh_lookup_nodev as not used
- scsi: target: core: Fix error path in target_setup_session()
- x86/boot/compressed: prefer cc-option for CFLAGS additions
- MIPS: Move '-Wa,-msoft-float' check from as-option to cc-option
- MIPS: Prefer cc-option for additions to cflags
- kbuild: Update assembler calls to use proper flags and language target
- btrfs: properly enable async discard when switching from RO->RW
- wifi: mac80211: fragment per STA profile correctly
- RDMA/rxe: Fix rxe_cq_post
- blk-cgroup: Flush stats before releasing blkcg_gq
- Upstream stable to v6.1.35, v6.3.9
- drm/amd/display: Use dc_update_planes_and_stream
- drm/amd/display: Add wrapper to call planes and stream update
- drm/amd/display: fix the system hang while disable PSR
- tty: serial: fsl_lpuart: make rx_watermark configurable for different
platforms
- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A
- mm: Fix copy_from_user_nofault().
- tpm, tpm_tis: Claim locality in interrupt handler
- tpm_crb: Add support for CRB devices based on Pluton
- ksmbd: validate command payload size
- ksmbd: fix out-of-bound read in smb2_write
- ksmbd: validate session id and tree id in the compound request
- tick/common: Align tick period during sched_timer setup
- selftests: mptcp: remove duplicated entries in usage
- selftests: mptcp: join: fix ShellCheck warnings
- selftests: mptcp: lib: skip if missing symbol
- selftests: mptcp: connect: skip transp tests if not supported
- selftests: mptcp: connect: skip disconnect tests if not supported
- selftests: mptcp: pm nl: remove hardcoded default limits
- selftests: mptcp: pm nl: skip fullmesh flag checks if not supported
- selftests: mptcp: sockopt: relax expected returned size
- selftests: mptcp: sockopt: skip getsockopt checks if not supported
- selftests: mptcp: userspace pm: skip if 'ip' tool is unavailable
- selftests: mptcp: userspace pm: skip if not supported
- selftests: mptcp: lib: skip if not below kernel version
- selftests: mptcp: join: use 'iptables-legacy' if available
- selftests: mptcp: join: helpers to skip tests
- selftests: mptcp: join: skip check if MIB counter not supported
- selftests: mptcp: join: support local endpoint being tracked or not
- selftests: mptcp: join: skip Fastclose tests if not supported
- selftests: mptcp: join: support RM_ADDR for used endpoints or not
- selftests: mptcp: join: skip implicit tests if not supported
- selftests: mptcp: join: skip backup if set flag on ID not supported
- selftests: mptcp: join: skip fullmesh flag tests if not supported
- selftests: mptcp: join: skip MPC backups tests if not supported
- selftests/mount_setattr: fix redefine struct mount_attr build error
- selftests: mptcp: diag: skip listen tests if not supported
- selftests: mptcp: sockopt: skip TCP_INQ checks if not supported
- selftests: mptcp: join: skip test if iptables/tc cmds fail
- selftests: mptcp: join: skip userspace PM tests if not supported
- selftests: mptcp: join: skip fail tests if not supported
- selftests: mptcp: join: fix "userspace pm add & remove address"
- writeback: fix dereferencing NULL mapping->host on writeback_page_template
- scripts: fix the gfp flags header path in gfp-translate
- nilfs2: fix buffer corruption due to concurrent device reads
- ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep()
- KVM: Avoid illegal stage2 mapping on invalid memory slot
- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails
- Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs
- PCI: hv: Fix a race condition bug in hv_pci_query_relations()
- Revert "PCI: hv: Fix a timing issue which causes kdump to fail occasionally"
- PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev
- PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic
- PCI: hv: Add a per-bus mutex state_lock
- io_uring/net: clear msg_controllen on partial sendmsg retry
- io_uring/net: disable partial retries for recvmsg with cmsg
- mptcp: handle correctly disconnect() failures
- mptcp: fix possible divide by zero in recvmsg()
- mptcp: fix possible list corruption on passive MPJ
- mptcp: consolidate fallback and non fallback state machine
- cgroup: Do not corrupt task iteration when rebinding subsystem
- cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex in
freezer_css_{online,offline}()
- mmc: litex_mmc: set PROBE_PREFER_ASYNCHRONOUS
- mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916
- mmc: meson-gx: remove redundant mmc_request_done() call from irq context
- mmc: mmci: stm32: fix max busy timeout calculation
- mmc: sdhci-spear: fix deferred probing
- mmc: bcm2835: fix deferred probing
- mmc: sunxi: fix deferred probing
- bpf: ensure main program has an extable
- wifi: iwlwifi: pcie: Handle SO-F device for PCI id 0x7AF0
- spi: spi-geni-qcom: correctly handle -EPROBE_DEFER from dma_request_chan()
- regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK
- regmap: spi-avmm: Fix regmap_bus max_raw_write
- arm64: dts: rockchip: Fix rk356x PCIe register and range mappings
- nilfs2: prevent general protection fault in nilfs_clear_dirty_page()
- x86/mm: Avoid using set_pgd() outside of real PGD pages
- memfd: check for non-NULL file_seals in memfd_create() syscall
- mmc: meson-gx: fix deferred probing
- ieee802154: hwsim: Fix possible memory leaks
- xfrm: Treat already-verified secpath entries as optional
- xfrm: Ensure policies always checked on XFRM-I input path
- KVM: arm64: PMU: Restore the host's PMUSERENR_EL0
- bpf: track immediate values written to stack by BPF_ST instruction
- bpf: Fix verifier id tracking of scalars on spill
- xfrm: fix inbound ipv4/udp/esp packets to UDPv6 dualstack sockets
- bpf: Fix a bpf_jit_dump issue for x86_64 with sysctl bpf_jit_enable.
- selftests: net: tls: check if FIPS mode is enabled
- selftests: net: vrf-xfrm-tests: change authentication and encryption algos
- selftests: net: fcnal-test: check if FIPS mode is enabled
- xfrm: Linearize the skb after offloading if needed.
- net/mlx5: DR, Fix wrong action data allocation in decap action
- sfc: use budget for TX completions
- net: qca_spi: Avoid high load if QCA7000 is not available
- mmc: mtk-sd: fix deferred probing
- mmc: mvsdio: fix deferred probing
- mmc: omap: fix deferred probing
- mmc: omap_hsmmc: fix deferred probing
- mmc: owl: fix deferred probing
- mmc: sdhci-acpi: fix deferred probing
- mmc: sh_mmcif: fix deferred probing
- mmc: usdhi60rol0: fix deferred probing
- ipvs: align inner_mac_header for encapsulation
- net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch
- net: dsa: mt7530: fix handling of BPDUs on MT7530 switch
- net: dsa: mt7530: fix handling of LLDP frames
- be2net: Extend xmit workaround to BE3 chip
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nft_set_pipapo: .walk does not deal with generations
- netfilter: nf_tables: disallow element updates of bound anonymous sets
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: disallow updates of anonymous sets
- netfilter: nfnetlink_osf: fix module autoload
- Revert "net: phy: dp83867: perform soft reset and retain established link"
- bpf/btf: Accept function names that contain dots
- bpf: Force kprobe multi expected_attach_type for kprobe_multi link
- io_uring/net: use the correct msghdr union member in io_sendmsg_copy_hdr
- selftests: forwarding: Fix race condition in mirror installation
- platform/x86/amd/pmf: Register notify handler only if SPS is enabled
- sch_netem: acquire qdisc lock in netem_change()
- revert "net: align SO_RCVMARK required privileges with SO_MARK"
- arm64: dts: rockchip: fix nEXTRST on SOQuartz
- gpiolib: Fix GPIO chip IRQ initialization restriction
- gpio: sifive: add missing check for platform_get_irq
- gpiolib: Fix irq_domain resource tracking for gpiochip_irqchip_add_domain()
- scsi: target: iscsi: Prevent login threads from racing between each other
- HID: wacom: Add error check to wacom_parse_and_register()
- arm64: Add missing Set/Way CMO encodings
- smb3: missing null check in SMB2_change_notify
- media: cec: core: disable adapter in cec_devnode_unregister
- media: cec: core: don't set last_initiator if tx in progress
- nfcsim.c: Fix error checking for debugfs_create_dir
- btrfs: fix an uninitialized variable warning in btrfs_log_inode
- usb: gadget: udc: fix NULL dereference in remove()
- nvme: double KA polling frequency to avoid KATO with TBKAS on
- nvme: check IO start time when deciding to defer KA
- nvme: improve handling of long keep alives
- Input: soc_button_array - add invalid acpi_index DMI quirk handling
- arm64: dts: qcom: sc7280-idp: drop incorrect dai-cells from WCD938x SDW
- arm64: dts: qcom: sc7280-qcard: drop incorrect dai-cells from WCD938x SDW
- s390/cio: unregister device when the only path is gone
- spi: lpspi: disable lpspi module irq in DMA mode
- ASoC: codecs: wcd938x-sdw: do not set can_multi_write flag
- ASoC: simple-card: Add missing of_node_put() in case of error
- soundwire: dmi-quirks: add new mapping for HP Spectre x360
- soundwire: qcom: add proper error paths in qcom_swrm_startup()
- ASoC: nau8824: Add quirk to active-high jack-detect
- ASoC: amd: yc: Add Thinkpad Neo14 to quirks list for acp6x
- gfs2: Don't get stuck writing page onto itself under direct I/O
- s390/purgatory: disable branch profiling
- ASoC: fsl_sai: Enable BCI bit if SAI works on synchronous mode with BYP
asserted
- ALSA: hda/realtek: Add "Intel Reference board" and "NUC 13" SSID in the
ALC256
- i2c: mchp-pci1xxxx: Avoid cast to incompatible function type
- ARM: dts: Fix erroneous ADS touchscreen polarities
- null_blk: Fix: memory release when memory_backed=1
- drm/exynos: vidi: fix a wrong error return
- drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl
- drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl
- vhost_vdpa: tell vqs about the negotiated
- vhost_net: revert upend_idx only on retriable error
- KVM: arm64: Restore GICv2-on-GICv3 functionality
- x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys
- i2c: imx-lpi2c: fix type char overflow issue when calculating the clock
cycle
- smb: move client and server files to common directory fs/smb
- [Config] updateconfigs for SMBFS_COMMON
- cifs: fix status checks in cifs_tree_connect
- udmabuf: revert 'Add support for mapping hugepages (v4)'
- selftests: mptcp: connect: skip TFO tests if not supported
- selftests: mptcp: join: skip PM listener tests if not supported
- selftests: mptcp: join: uniform listener tests
- block: make sure local irq is disabled when calling __blkcg_rstat_flush
- xfrm: add missed call to delete offloaded policies
- net: dsa: introduce preferred_default_local_cpu_port and use on MT7530
- iommu/amd: Fix possible memory leak of 'domain'
- Upstream stable to v6.1.36, v6.3.10
- mm/mmap: Fix error path in do_vmi_align_munmap()
- mm/mmap: Fix error return in do_vmi_align_munmap()
- mptcp: ensure listener is unhashed before updating the sk status
- x86/microcode/AMD: Load late on both threads too
- x86/smp: Remove pointless wmb()s from native_stop_other_cpus()
- x86/smp: Use dedicated cache-line for mwait_play_dead()
- x86/smp: Cure kexec() vs. mwait_play_dead() breakage
- can: isotp: isotp_sendmsg(): fix return error fix on TX path
- maple_tree: fix potential out-of-bounds access in mas_wr_end_piv()
- fbdev: fix potential OOB read in fast_imageblit()
- HID: hidraw: fix data race on device refcount
- HID: wacom: Use ktime_t rather than int when dealing with timestamps
- HID: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651.
- Revert "thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak
in mtk_thermal_probe"
- sparc32: fix lock_mm_and_find_vma() conversion
- parisc: fix expand_stack() conversion
- csky: fix up lock_mm_and_find_vma() conversion
- xtensa: fix NOMMU build with lock_mm_and_find_vma() conversion
- Upstream stable to v6.1.37, v6.3.11
- xtensa: fix lock_mm_and_find_vma in case VMA not found
- drm/amd/display: Do not update DRR while BW optimizations pending
- PCI/ACPI: Validate acpi_pci_set_power_state() parameter
- PCI/ACPI: Call _REG when transitioning D-states
- execve: always mark stack as growing down during early stack setup
- nubus: Partially revert proc_create_single_data() conversion
- perf symbols: Symbol lookup with kcore can fail if multiple segments match
stext
- scripts/tags.sh: Resolve gtags empty index generation
- docs: Set minimal gtags / GNU GLOBAL version to 6.6.5
- drm/amdgpu: Validate VM ioctl flags.
- drm/amd/display: Ensure vmin and vmax adjust for DCE
- Upstream stable to v6.1.38, v6.3.12
* allow io_uring to be disabled in runtime (LP: #2035116)
- io_uring: add a sysctl to disable io_uring system-wide
* CVE-2023-31083
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
* CVE-2023-4132
- media: usb: siano: Fix warning due to null work_func_t function pointer
* CVE-2023-3863
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
* CVE-2023-3772
- xfrm: add NULL check in xfrm_update_ae_params
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
-- Emil Renner Berthing <email address hidden> Mon, 09 Oct 2023 18:50:34 +0200
-
linux-starfive (6.2.0-1007.8) lunar; urgency=medium
* lunar/linux-starfive: 6.2.0-1007.8 -proposed tracker (LP: #2038226)
* CVE-2023-42755
- [Config] starfive: remove NET_CLS_RSVP and NET_CLS_RSVP6
[ Ubuntu: 6.2.0-35.35 ]
* lunar/linux: 6.2.0-35.35 -proposed tracker (LP: #2038229)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* CVE-2023-4244
- netfilter: nf_tables: don't skip expired elements during walk
- netfilter: nf_tables: integrate pipapo into commit protocol
- netfilter: nft_set_rbtree: fix overlap expiration walk
- netfilter: nf_tables: adapt set backend to use GC transaction API
- netfilter: nft_set_hash: mark set element as dead when deleting from packet
path
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nf_tables: GC transaction API to avoid race with control plane
- netfilter: nf_tables: remove busy mark and gc batch API
- netfilter: nf_tables: don't fail inserts if duplicate has expired
- netfilter: nf_tables: fix kdoc warnings after gc rework
- netfilter: nf_tables: fix GC transaction races with netns and netlink event
exit path
- netfilter: nf_tables: GC transaction race with netns dismantle
- netfilter: nf_tables: GC transaction race with abort path
- netfilter: nf_tables: use correct lock to protect gc_list
- netfilter: nf_tables: defer gc run if previous batch is still pending
- netfilter: nft_dynset: disallow object maps
- netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
* CVE-2023-5197
- netfilter: nf_tables: skip bound chain in netns release path
- netfilter: nf_tables: disallow rule removal from chain binding
* CVE-2023-4921
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
* CVE-2023-4881
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
* CVE-2023-4623
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
* CVE-2023-4622
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
* CVE-2023-42756
- netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
* CVE-2023-42755
- net/sched: Retire rsvp classifier
- [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
* CVE-2023-42753
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
ip_set_hash_netportnet.c
* CVE-2023-42752
- igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
- net: add SKB_HEAD_ALIGN() helper
- net: remove osize variable in __alloc_skb()
- net: factorize code in kmalloc_reserve()
- net: deal with integer overflows in kmalloc_reserve()
* CVE-2023-34319
- xen/netback: Fix buffer overrun triggered by unusual packet
-- Emil Renner Berthing <email address hidden> Fri, 06 Oct 2023 15:45:08 +0200
-
linux-starfive (6.2.0-1006.7) lunar; urgency=medium
* lunar/linux-starfive: 6.2.0-1006.7 -proposed tracker (LP: #2033777)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
[ Ubuntu: 6.2.0-34.34 ]
* lunar/linux: 6.2.0-34.34 -proposed tracker (LP: #2033779)
* CVE-2023-20569
- x86/cpu, kvm: Add support for CPUID_80000021_EAX
- tools headers x86 cpufeatures: Sync with the kernel sources
- x86/alternative: Optimize returns patching
- x86/retbleed: Add __x86_return_thunk alignment checks
- x86/srso: Add a Speculative RAS Overflow mitigation
- x86/srso: Add IBPB_BRTYPE support
- x86/srso: Add SRSO_NO support
- x86/srso: Add IBPB
- x86/srso: Add IBPB on VMEXIT
- x86/srso: Fix return thunks in generated code
- x86/srso: Add a forgotten NOENDBR annotation
- x86/srso: Tie SBPB bit setting to microcode patch detection
- Documentation/hw-vuln: Unify filename specification in index
- Documentation/srso: Document IBPB aspect and fix formatting
- x86/srso: Fix build breakage with the LLVM linker
- x86: Move gds_ucode_mitigated() declaration to header
- x86/retpoline: Don't clobber RFLAGS during srso_safe_ret()
- x86/srso: Disable the mitigation on unaffected configurations
- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG
- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with
retpolines and IBT
- x86/cpu: Fix __x86_return_thunk symbol type
- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk()
- objtool/x86: Fix SRSO mess
- x86/alternative: Make custom return thunk unconditional
- x86/cpu: Clean up SRSO return thunk mess
- x86/cpu: Rename original retbleed methods
- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1
- x86/cpu: Cleanup the untrain mess
- x86/srso: Explain the untraining sequences a bit more
- objtool/x86: Fixup frame-pointer vs rethunk
- x86/static_call: Fix __static_call_fixup()
- x86/srso: Correct the mitigation status when SMT is disabled
- Ubuntu: [Config]: enable Speculative Return Stack Overflow mitigation
* Please enable Renesas RZ platform serial installer (LP: #2022361)
- [Config] enable hihope RZ/G2M serial console
- [Config] Mark sh-sci as built-in
* dGPU cannot resume because system firmware stuck in IPCS method
(LP: #2021572)
- drm/i915/tc: Abort DP AUX transfer on a disconnected TC port
- drm/i915/tc: switch to intel_de_* register accessors in display code
- drm/i915: Enable a PIPEDMC whenever its corresponding pipe is enabled
- drm/i915/tc: Fix TC port link ref init for DP MST during HW readout
- drm/i915/tc: Fix system resume MST mode restore for DP-alt sinks
- drm/i915/tc: Wait for IOM/FW PHY initialization of legacy TC ports
- drm/i915/tc: Factor out helpers converting HPD mask to TC mode
- drm/i915/tc: Fix target TC mode for a disconnected legacy port
- drm/i915/tc: Fix TC mode for a legacy port if the PHY is not ready
- drm/i915/tc: Fix initial TC mode on disabled legacy ports
- drm/i915/tc: Make the TC mode readout consistent in all PHY states
- drm/i915: Add encoder hook to get the PLL type used by TC ports
- drm/i915/tc: Assume a TC port is legacy if VBT says the port has HDMI
- drm/i915/tc: Factor out a function querying active links on a TC port
- drm/i915/tc: Check the PLL type used by an enabled TC port
- drm/i915/tc: Group the TC PHY setup/query functions per platform
- drm/i915/tc: Use the adlp prefix for ADLP TC PHY functions
- drm/i915/tc: Rename tc_phy_status_complete() to tc_phy_is_ready()
- drm/i915/tc: Use the tc_phy prefix for all TC PHY functions
- drm/i915/tc: Move TC port fields to a new intel_tc_port struct
- drm/i915/tc: Check for TC PHY explicitly in
intel_tc_port_fia_max_lane_count()
- drm/i915/tc: Move the intel_tc_port struct declaration to intel_tc.c
- drm/i915/tc: Add TC PHY hook to get the PHY HPD live status
- drm/i915/tc: Add TC PHY hooks to get the PHY ready/owned state
- drm/i915/tc: Add TC PHY hook to read out the PHY HW state
- drm/i915/tc: Add generic TC PHY connect/disconnect handlers
- drm/i915/tc: Factor out tc_phy_verify_legacy_or_dp_alt_mode()
- drm/i915/tc: Add TC PHY hooks to connect/disconnect the PHY
- drm/i915/tc: Fix up the legacy VBT flag only in disconnected mode
- drm/i915/tc: Check TC mode instead of the VBT legacy flag
- drm/i915/tc: Block/unblock TC-cold in the PHY connect/disconnect hooks
- drm/i915/tc: Remove redundant wakeref=0 check from unblock_tc_cold()
- drm/i915/tc: Drop tc_cold_block()/unblock()'s power domain parameter
- drm/i915/tc: Add TC PHY hook to get the TC-cold blocking power domain
- drm/i915/tc: Add asserts in TC PHY hooks that the required power is on
- drm/i915/tc: Add TC PHY hook to init the PHY
- drm/i915/adlp/tc: Use the DE HPD ISR register for hotplug detection
- drm/i915/tc: Get power ref for reading the HPD live status register
- drm/i915/tc: Don't connect the PHY in intel_tc_port_connected()
- drm/i915/adlp/tc: Align the connect/disconnect PHY sequence with bspec
- drm/i915: Move shared DPLL disabling into CRTC disable hook
- drm/i915: Disable DPLLs before disconnecting the TC PHY
- drm/i915: Remove TC PHY disconnect workaround
- drm/i915: Remove the encoder update_prepare()/complete() hooks
- drm/i915/dp_mst: Fix active port PLL selection for secondary MST streams
- drm/i915: Fix PIPEDMC disabling for a bigjoiner configuration
- drm/i915: Add helpers to reference/unreference a DPLL for a CRTC
- drm/i915: Make the CRTC state consistent during sanitize-disabling
- drm/i915: Update connector atomic state before crtc sanitize-disabling
- drm/i915: Separate intel_crtc_disable_noatomic_begin/complete()
- drm/i915: Factor out set_encoder_for_connector()
- drm/i915: Add support for disabling any CRTCs during HW readout/sanitization
- drm/i915/dp: Prevent link training fallback on disconnected port
- drm/i915/dp: Factor out intel_dp_get_active_pipes()
- drm/i915: Factor out a helper for handling atomic modeset locks/state
- drm/i915/tc: Call TypeC port flush_work/cleanup without modeset locks held
- drm/i915/tc: Reset TypeC PHYs left enabled in DP-alt mode after the sink
disconnects
* amdgpu: Fixes for S0i3 resume on Phoenix (LP: #2033654)
- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11
- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix
- drm/amd: flush any delayed gfxoff on suspend entry
* Fix panel brightness issues on HP laptops (LP: #2032704)
- ACPI: video: Put ACPI video and its child devices into D0 on boot
* Fix ACPI TAD on some Intel based systems (LP: #2032767)
- ACPI: TAD: Install SystemCMOS address space handler for ACPI000E
* kdump doesn't work with UEFI secure boot and kernel lockdown enabled on
ARM64 (LP: #2033007)
- [Config]: Enable CONFIG_KEXEC_IMAGE_VERIFY_SIG
* Request backport of xen timekeeping performance improvements (LP: #2033122)
- x86/xen/time: prefer tsc as clocksource when it is invariant
* Fix numerous AER related issues (LP: #2033025)
- SAUCE: PCI/AER: Disable AER service during suspend, again
- SAUCE: PCI/DPC: Disable DPC service during suspend, again
* Enable D3cold at s2idle for Intel DG2 GPU (LP: #2033452)
- drm/i915/dgfx: Enable d3cold at s2idle
* CVE-2023-4569
- netfilter: nf_tables: deactivate catchall elements in next generation
* Fix non-working MT7921e when pre-boot WiFi is enabled (LP: #2026322)
- wifi: mt76: mt7921e: fix init command fail with enabled device
* Fix unreliable ethernet cable detection on I219 NIC (LP: #2028122)
- e1000e: Use PME poll to circumvent unreliable ACPI wake
* [SRU][Ubuntu 22.04.1] Unable to interpret the frequency values in
cpuinfo_min_freq and cpuino_max_freq sysfs files. (LP: #2030924)
- cpufreq: intel_pstate: Fix scaling for hybrid-capable
* CVE-2023-40283
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
* CVE-2023-20588
- x86/bugs: Increase the x86 bugs vector size to two u32s
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
* CVE-2023-4194
- net: tun_chr_open(): set sk_uid from current_fsuid()
- net: tap_open(): set sk_uid from current_fsuid()
* CVE-2023-4155
- KVM: SEV: snapshot the GHCB before accessing it
- KVM: SEV: only access GHCB fields once
* CVE-2023-1206
- tcp: Reduce chance of collisions in inet6_hashfn().
* Lunar update: upstream stable patchset 2023-08-03 (LP: #2029808)
- RDMA/bnxt_re: Fix the page_size used during the MR creation
- phy: amlogic: phy-meson-g12a-mipi-dphy-analog: fix CNTL2_DIF_TX_CTL0 value
- RDMA/efa: Fix unsupported page sizes in device
- RDMA/hns: Fix timeout attr in query qp for HIP08
- RDMA/hns: Fix base address table allocation
- RDMA/hns: Modify the value of long message loopback slice
- dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved()
- RDMA/bnxt_re: Fix a possible memory leak
- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx
- iommu/rockchip: Fix unwind goto issue
- iommu/amd: Don't block updates to GATag if guest mode is on
- iommu/amd: Handle GALog overflows
- iommu/amd: Fix up merge conflict resolution
- nfsd: make a copy of struct iattr before calling notify_change
- dmaengine: pl330: rename _start to prevent build error
- riscv: Fix unused variable warning when BUILTIN_DTB is set
- net/mlx5: Drain health before unregistering devlink
- net/mlx5: SF, Drain health before removing device
- net/mlx5: fw_tracer, Fix event handling
- net/mlx5e: Don't attach netdev profile while handling internal error
- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory pressure
- netrom: fix info-leak in nr_write_internal()
- af_packet: Fix data-races of pkt_sk(sk)->num.
- tls: improve lockless access safety of tls_err_abort()
- amd-xgbe: fix the false linkup in xgbe_phy_status
- perf ftrace latency: Remove unnecessary "--" from --use-nsec option
- mtd: rawnand: ingenic: fix empty stub helper definitions
- RDMA/irdma: Prevent QP use after free
- RDMA/irdma: Fix Local Invalidate fencing
- af_packet: do not use READ_ONCE() in packet_bind()
- tcp: deny tcp_disconnect() when threads are waiting
- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set
- net/smc: Scan from current RMB list when no position specified
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/sched: sch_ingress: Only create under TC_H_INGRESS
- net/sched: sch_clsact: Only create under TC_H_CLSACT
- net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs
- net/sched: Prohibit regrafting ingress or clsact Qdiscs
- net: sched: fix NULL pointer dereference in mq_attach
- net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
- udp6: Fix race condition in udp6_sendmsg & connect
- nfsd: fix double fget() bug in __write_ports_addfd()
- nvme: fix the name of Zone Append for verbose logging
- net/mlx5e: Fix error handling in mlx5e_refresh_tirs
- net/mlx5: Read embedded cpu after init bit cleared
- iommu/mediatek: Flush IOTLB completely only if domain has been attached
- tcp: fix mishandling when the sack compression is deferred.
- net: dsa: mv88e6xxx: Increase wait after reset deactivation
- mtd: rawnand: marvell: ensure timing values are written
- mtd: rawnand: marvell: don't set the NAND frequency select
- rtnetlink: call validate_linkmsg in rtnl_create_link
- mptcp: avoid unneeded __mptcp_nmpc_socket() usage
- mptcp: add annotations around msk->subflow accesses
- mptcp: avoid unneeded address copy
- mptcp: simplify subflow_syn_recv_sock()
- mptcp: consolidate passive msk socket initialization
- mptcp: fix data race around msk->first access
- mptcp: add annotations around sk->sk_shutdown accesses
- drm/amdgpu: release gpu full access after "amdgpu_device_ip_late_init"
- watchdog: menz069_wdt: fix watchdog initialisation
- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs.
- ASoC: Intel: soc-acpi-cht: Add quirk for Nextbook Ares 8A tablet
- drm/amdgpu: Use the default reset when loading or reloading the driver
- mailbox: mailbox-test: Fix potential double-free in
mbox_test_message_write()
- btrfs: abort transaction when sibling keys check fails for leaves
- ARM: 9295/1: unwind:fix unwind abort for uleb128 case
- hwmon: (k10temp) Add PCI ID for family 19, model 78h
- media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
- platform/mellanox: fix potential race in mlxbf-tmfifo driver
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode
- fbdev: stifb: Fix info entry in sti_struct on error path
- nbd: Fix debugfs_create_dir error checking
- block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE
- nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G
- nvme-pci: add quirk for missing secondary temperature thresholds
- ASoC: amd: yc: Add DMI entry to support System76 Pangolin 12
- ASoC: dwc: limit the number of overrun messages
- um: harddog: fix modular build
- xfrm: Check if_id in inbound policy/secpath match
- ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI codecs
- ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V
- ASoC: ssm2602: Add workaround for playback distortions
- media: dvb_demux: fix a bug for the continuity counter
- media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer()
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer()
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
- media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address
- media: netup_unidvb: fix irq init by register it at the end of probe
- media: dvb_ca_en50221: fix a size write bug
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- ASoC: SOF: debug: conditionally bump runtime_pm counter on exceptions
- ASoC: SOF: pcm: fix pm_runtime imbalance in error handling
- ASoC: SOF: sof-client-probes: fix pm_runtime imbalance in error handling
- ASoC: SOF: pm: save io region state in case of errors in resume
- s390/pkey: zeroize key blobs
- s390/topology: honour nr_cpu_ids when adding CPUs
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
- wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value
- ARM: dts: stm32: add pin map for CAN controller on stm32f7
- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
- arm64: vdso: Pass (void *) to virt_to_page()
- wifi: mac80211: simplify chanctx allocation
- wifi: mac80211: consider reserved chanctx for mindef
- wifi: mac80211: recalc chanctx mindef before assigning
- wifi: iwlwifi: mvm: Add locking to the rate read flow
- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed
- wifi: b43: fix incorrect __packed annotation
- netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with
CONFIG_NF_NAT
- nvme-multipath: don't call blk_mark_disk_dead in nvme_mpath_remove_disk
- nvme: do not let the user delete a ctrl before a complete initialization
- ALSA: oss: avoid missing-prototype warnings
- drm/msm: Be more shouty if per-process pgtables aren't working
- atm: hide unused procfs functions
- ceph: silence smatch warning in reconnect_caps_cb()
- drm/amdgpu: skip disabling fence driver src_irqs when device is unplugged
- ublk: fix AB-BA lockdep warning
- nvme-pci: Add quirk for Teamgroup MP33 SSD
- block: Deny writable memory mapping if block is read-only
- KVM: arm64: vgic: Fix a circular locking issue
- KVM: arm64: vgic: Wrap vgic_its_create() with config_lock
- KVM: arm64: vgic: Fix locking comment
- media: mediatek: vcodec: Only apply 4K frame sizes on decoder formats
- mailbox: mailbox-test: fix a locking issue in mbox_test_message_write()
- drivers: base: cacheinfo: Fix shared_cpu_map changes in event of CPU hotplug
- media: uvcvideo: Don't expose unsupported formats to userspace
- iio: accel: st_accel: Fix invalid mount_matrix on devices without ACPI _ONT
method
- iio: adc: mxs-lradc: fix the order of two cleanup operations
- HID: google: add jewel USB id
- HID: wacom: avoid integer overflow in wacom_intuos_inout()
- iio: imu: inv_icm42600: fix timestamp reset
- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476 compatible value
- iio: light: vcnl4035: fixed chip ID check
- iio: adc: stm32-adc: skip adc-channels setup if none is present
- iio: adc: ad_sigma_delta: Fix IRQ issue by setting IRQ_DISABLE_UNLAZY flag
- iio: dac: mcp4725: Fix i2c_master_send() return value handling
- iio: addac: ad74413: fix resistance input processing
- iio: adc: ad7192: Change "shorted" channels to differential
- iio: adc: stm32-adc: skip adc-diff-channels setup if none is present
- iio: dac: build ad5758 driver when AD5758 is selected
- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
- usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM
- usb: gadget: f_fs: Add unbind event before functionfs_unbind
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- misc: fastrpc: return -EPIPE to invocations on device removal
- misc: fastrpc: reject new invocations during device removal
- scsi: stex: Fix gcc 13 warnings
- ata: libata-scsi: Use correct device no in ata_find_dev()
- drm/amdgpu: enable tmz by default for GC 11.0.1
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
- drm/amd/pm: resolve reboot exception for si oland
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
- mmc: vub300: fix invalid response handling
- mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order
- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of
UARTCTRL_SBK
- btrfs: fix csum_tree_block page iteration to avoid tripping on
-Werror=array-bounds
- phy: qcom-qmp-combo: fix init-count imbalance
- phy: qcom-qmp-pcie-msm8996: fix init-count imbalance
- block: fix revalidate performance regression
- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall
- iommu/amd: Fix domain flush size when syncing iotlb
- tpm, tpm_tis: correct tpm_tis_flags enumeration values
- riscv: perf: Fix callchain parse error with kernel tracepoint events
- io_uring: undeprecate epoll_ctl support
- selinux: don't use make's grouped targets feature yet
- mtdchar: mark bits of ioctl handler noinline
- tracing/timerlat: Always wakeup the timerlat thread
- tracing/histograms: Allow variables to have some modifiers
- tracing/probe: trace_probe_primary_from_call(): checked list_first_entry
- selftests: mptcp: connect: skip if MPTCP is not supported
- selftests: mptcp: pm nl: skip if MPTCP is not supported
- selftests: mptcp: join: skip if MPTCP is not supported
- selftests: mptcp: sockopt: skip if MPTCP is not supported
- selftests: mptcp: userspace pm: skip if MPTCP is not supported
- mptcp: fix connect timeout handling
- mptcp: fix active subflow finalization
- ext4: add EA_INODE checking to ext4_iget()
- ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find()
- ext4: disallow ea_inodes with extended attributes
- ext4: add lockdep annotations for i_data_sem for ea_inode's
- fbcon: Fix null-ptr-deref in soft_cursor
- serial: 8250_tegra: Fix an error handling path in tegra_uart_probe()
- serial: cpm_uart: Fix a COMPILE_TEST dependency
- powerpc/xmon: Use KSYM_NAME_LEN in array size
- test_firmware: fix a memory leak with reqs buffer
- test_firmware: fix the memory leak of the allocated firmware buffer
- KVM: arm64: Populate fault info for watchpoint
- KVM: x86: Account fastpath-only VM-Exits in vCPU stats
- ksmbd: fix credit count leakage
- ksmbd: fix UAF issue from opinfo->conn
- ksmbd: fix incorrect AllocationSize set in smb2_get_info
- ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate
- ksmbd: fix multiple out-of-bounds read during context decoding
- KEYS: asymmetric: Copy sig and digest in public_key_verify_signature()
- fs/ntfs3: Validate MFT flags before replaying logs
- regmap: Account for register length when chunking
- tpm, tpm_tis: Request threaded interrupt handler
- iommu/amd/pgtbl_v2: Fix domain max address
- drm/amd/display: Have Payload Properly Created After Resume
- tls: rx: strp: don't use GFP_KERNEL in softirq context
- selftests: mptcp: diag: skip if MPTCP is not supported
- selftests: mptcp: simult flows: skip if MPTCP is not supported
- selftests: mptcp: join: avoid using 'cmp --bytes'
- ext4: enable the lazy init thread when remounting read/write
- iommu: Make IPMMU_VMSA dependencies more strict
- [Config] updateconfigs for IPMMU_VMSA
- iommu/amd: Add missing domain type checks
- efi: Bump stub image version for macOS HVF compatibility
- rxrpc: Truncate UTS_RELEASE for rxrpc version
- net: renesas: rswitch: Fix return value in error path of xmit
- KVM: arm64: Prevent unconditional donation of unmapped regions from the host
- KVM: arm64: Reload PTE after invoking walker callback on preorder traversal
- iio: ad4130: Make sure clock provider gets removed
- iio: adc: mt6370: Fix ibus and ibat scaling value of some specific vendor ID
chips
- iio: accel: kx022a fix irq getting
- misc: fastrpc: Reassign memory ownership only for remote heap
- module/decompress: Fix error checking on zstd decompression
- dmaengine: at_hdmac: Repair bitfield macros for peripheral ID handling
- dmaengine: at_hdmac: Extend the Flow Controller bitfield to three bits
- test_firmware: prevent race conditions by a correct implementation of
locking
- KVM: arm64: Drop last page ref in kvm_pgtable_stage2_free_removed()
- KVM: x86/mmu: Grab memslot for correct address space in NX recovery worker
- Upstream stable to v6.1.33, v6.3.7
- scsi: megaraid_sas: Add flexible array member for SGLs
- net: sfp: fix state loss when updating state_hw_mask
- spi: mt65xx: make sure operations completed before unloading
- platform/surface: aggregator: Allow completion work-items to be executed in
parallel
- platform/surface: aggregator_tabletsw: Add support for book mode in KIP
subsystem
- spi: qup: Request DMA before enabling clocks
- afs: Fix setting of mtime when creating a file/dir/symlink
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
- bpf, sockmap: Avoid potential NULL dereference in
sk_psock_verdict_data_ready()
- neighbour: fix unaligned access to pneigh_entry
- net: dsa: lan9303: allow vid != 0 in port_fdb_{add|del} methods
- net/ipv4: ping_group_range: allow GID from 2147483648 to 4294967294
- bpf: Fix UAF in task local storage
- bpf: Fix elem_size not being set for inner maps
- net/ipv6: fix bool/int mismatch for skip_notify_on_dev_down
- net/smc: Avoid to access invalid RMBs' MRs in SMCRv1 ADD LINK CONT
- net: enetc: correct the statistics of rx bytes
- net: enetc: correct rx_bytes statistics of XDP
- net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values
- Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER
- Bluetooth: Fix l2cap_disconnect_req deadlock
- Bluetooth: ISO: don't try to remove CIG if there are bound CIS left
- Bluetooth: L2CAP: Add missing checks for invalid DCID
- wifi: mac80211: use correct iftype HE cap
- wifi: cfg80211: reject bad AP MLD address
- wifi: mac80211: mlme: fix non-inheritence element
- wifi: mac80211: don't translate beacon/presp addrs
- qed/qede: Fix scheduling while atomic
- wifi: cfg80211: fix locking in sched scan stop work
- selftests/bpf: Verify optval=NULL case
- selftests/bpf: Fix sockopt_sk selftest
- netfilter: nft_bitwise: fix register tracking
- netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper
- netfilter: ipset: Add schedule point in call_ad().
- netfilter: nf_tables: out-of-bound check in chain blob
- ipv6: rpl: Fix Route of Death.
- tcp: gso: really support BIG TCP
- rfs: annotate lockless accesses to sk->sk_rxhash
- rfs: annotate lockless accesses to RFS sock flow table
- net: sched: add rcu annotations around qdisc->qdisc_sleeping
- drm/i915/selftests: Add some missing error propagation
- net: sched: move rtm_tca_policy declaration to include file
- net: sched: act_police: fix sparse errors in tcf_police_dump()
- net: sched: fix possible refcount leak in tc_chain_tmplt_add()
- bpf: Add extra path pointer check to d_path helper
- drm/amdgpu: fix Null pointer dereference error in amdgpu_device_recover_vram
- lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release()
- net: bcmgenet: Fix EEE implementation
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Skip firmware fatal error recovery if chip is not accessible
- bnxt_en: Prevent kernel panic when receiving unexpected PHC_UPDATE event
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- batman-adv: Broken sync while rescheduling delayed work
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
- Input: psmouse - fix OOB access in Elantech protocol
- Input: fix open count when closing inhibited device
- ALSA: hda: Fix kctl->id initialization
- ALSA: ymfpci: Fix kctl->id initialization
- ALSA: gus: Fix kctl->id initialization
- ALSA: cmipci: Fix kctl->id initialization
- ALSA: hda/realtek: Add quirk for Clevo NS50AU
- ALSA: ice1712,ice1724: fix the kcontrol->id initialization
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using CS35L41
- drm/i915/gt: Use the correct error value when kernel_context() fails
- drm/amdgpu: fix xclk freq on CHIP_STONEY
- drm/amdgpu: change reserved vram info print
- drm/amd/pm: Fix power context allocation in SMU13
- drm/amd/display: Reduce sdp bw after urgent to 90%
- wifi: iwlwifi: mvm: Fix -Warray-bounds bug in iwl_mvm_wait_d3_notif()
- can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in
J1939 Socket
- can: j1939: change j1939_netdev_lock type to mutex
- can: j1939: avoid possible use-after-free when j1939_can_rx_register fails
- mptcp: only send RM_ADDR in nl_cmd_remove
- mptcp: add address into userspace pm list
- mptcp: update userspace pm infos
- selftests: mptcp: update userspace pm addr tests
- selftests: mptcp: update userspace pm subflow tests
- ceph: fix use-after-free bug for inodes when flushing capsnaps
- s390/dasd: Use correct lock while counting channel queue length
- Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk
- Bluetooth: fix debugfs registration
- Bluetooth: hci_qca: fix debugfs registration
- tee: amdtee: Add return_origin to 'struct tee_cmd_load_ta'
- rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting
- rbd: get snapshot context after exclusive lock is ensured to be held
- virtio_net: use control_buf for coalesce params
- soc: qcom: icc-bwmon: fix incorrect error code passed to dev_err_probe()
- pinctrl: meson-axg: add missing GPIOA_18 gpio group
- usb: usbfs: Enforce page requirements for mmap
- usb: usbfs: Use consistent mmap functions
- mm: page_table_check: Make it dependent on EXCLUSIVE_SYSTEM_RAM
- mm: page_table_check: Ensure user pages are not slab pages
- arm64: dts: qcom: sc8280xp: Flush RSC sleep & wake votes
- ARM: at91: pm: fix imbalanced reference counter for ethernet devices
- ARM: dts: at91: sama7g5ek: fix debounce delay property for shdwc
- ASoC: codecs: wsa883x: do not set can_multi_write flag
- ASoC: codecs: wsa881x: do not set can_multi_write flag
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified sc7180-lite
boards
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP signals
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
- ASoC: mediatek: mt8195-afe-pcm: Convert to platform remove callback
returning void
- ASoC: mediatek: mt8195: fix use-after-free in driver remove path
- ASoC: simple-card-utils: fix PCM constraint error check
- blk-mq: fix blk_mq_hw_ctx active request accounting
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
- firmware: arm_ffa: Set handle field to zero in memory descriptor
- gpio: sim: fix memory corruption when adding named lines and unnamed hogs
- i2c: sprd: Delete i2c adapter in .remove's error path
- riscv: mm: Ensure prot of VM_WRITE and VM_EXEC must be readable
- eeprom: at24: also select REGMAP
- soundwire: stream: Add missing clear of alloc_slave_rt
- riscv: fix kprobe __user string arg print fault issue
- [Config] updateconfigs for ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE
- vduse: avoid empty string for dev name
- vhost: support PACKED when setting-getting vring_base
- vhost_vdpa: support PACKED when setting-getting vring_base
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: fix out-of-bound read in parse_lease_state()
- ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop
- ext4: only check dquot_initialize_needed() when debugging
- wifi: rtw89: correct PS calculation for SUPPORTS_DYNAMIC_PS
- wifi: rtw88: correct PS calculation for SUPPORTS_DYNAMIC_PS
- Bluetooth: Split bt_iso_qos into dedicated structures
- Bluetooth: ISO: consider right CIS when removing CIG at cleanup
- Bluetooth: ISO: Fix CIG auto-allocation to select configurable CIG
- netfilter: nf_tables: Add null check for nla_nest_start_noflag() in
nft_dump_basechain_hook()
- drm/lima: fix sched context destroy
- net: openvswitch: fix upcall counter access before allocation
- bnxt_en: Fix bnxt_hwrm_update_rss_hash_cfg()
- Input: cyttsp5 - fix array length
- soc: qcom: rpmh-rsc: drop redundant unsigned >=0 comparision
- arm64: dts: qcom: sm6375-pdx225: Fix remoteproc firmware paths
- vdpa/mlx5: Fix hang when cvq commands are triggered during device unregister
- ksmbd: fix posix_acls and acls dereferencing possible ERR_PTR()
- Upstream stable to v6.1.34, v6.3.8
* CVE-2023-4273
- exfat: check if filename entries exceeds max filename length
* CVE-2023-4128
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-
free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-
free
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-
after-free
* CVE-2023-3212
- gfs2: Don't deref jdesc in evict
-- Emil Renner Berthing <email address hidden> Wed, 13 Sep 2023 12:48:16 +0200
-
linux-starfive (6.2.0-1005.6) lunar; urgency=medium
* lunar/linux-starfive: 6.2.0-1005.6 -proposed tracker (LP: #2034156)
[ Ubuntu: 6.2.0-33.33 ]
* lunar/linux: 6.2.0-33.33 -proposed tracker (LP: #2034158)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* CVE-2023-21264
- KVM: arm64: Prevent unconditional donation of unmapped regions from the host
* CVE-2023-4569
- netfilter: nf_tables: deactivate catchall elements in next generation
* CVE-2023-40283
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
* CVE-2023-20588
- x86/bugs: Increase the x86 bugs vector size to two u32s
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
* CVE-2023-4128
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-
free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-
free
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-
after-free
-- Emil Renner Berthing <email address hidden> Fri, 08 Sep 2023 11:19:19 +0200
-
linux-starfive (6.2.0-1004.5) lunar; urgency=medium
* lunar/linux-starfive: 6.2.0-1004.5 -proposed tracker (LP: #2030379)
[ Ubuntu: 6.2.0-32.32 ]
* lunar/linux: 6.2.0-32.32 -proposed tracker (LP: #2031134)
* libgnutls report "trap invalid opcode" when trying to install packages over
https (LP: #2031093)
- [Config]: disable CONFIG_GDS_FORCE_MITIGATION
[ Ubuntu: 6.2.0-30.30 ]
* lunar/linux: 6.2.0-30.30 -proposed tracker (LP: #2030381)
* CVE-2022-40982
- init: Provide arch_cpu_finalize_init()
- x86/cpu: Switch to arch_cpu_finalize_init()
- ARM: cpu: Switch to arch_cpu_finalize_init()
- ia64/cpu: Switch to arch_cpu_finalize_init()
- m68k/cpu: Switch to arch_cpu_finalize_init()
- mips/cpu: Switch to arch_cpu_finalize_init()
- sh/cpu: Switch to arch_cpu_finalize_init()
- sparc/cpu: Switch to arch_cpu_finalize_init()
- um/cpu: Switch to arch_cpu_finalize_init()
- init: Remove check_bugs() leftovers
- init: Invoke arch_cpu_finalize_init() earlier
- init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init()
- x86/init: Initialize signal frame size late
- x86/fpu: Remove cpuinfo argument from init functions
- x86/fpu: Mark init functions __init
- x86/fpu: Move FPU initialization into arch_cpu_finalize_init()
- x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build
- x86/xen: Fix secondary processors' FPU initialization
- x86/speculation: Add Gather Data Sampling mitigation
- x86/speculation: Add force option to GDS mitigation
- x86/speculation: Add Kconfig option for GDS
- KVM: Add GDS_NO support to KVM
- Documentation/x86: Fix backwards on/off logic about YMM support
- [Config]: Enable CONFIG_ARCH_HAS_CPU_FINALIZE_INIT and
CONFIG_GDS_FORCE_MITIGATION
* CVE-2023-4015
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound
set/chain
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
* CVE-2023-3995
- netfilter: nf_tables: disallow rule addition to bound chain via
NFTA_RULE_CHAIN_ID
* CVE-2023-3777
- netfilter: nf_tables: skip bound chain on rule flush
* CVE-2023-3609
- net/sched: cls_u32: Fix reference counter leak leading to overflow
* NULL pointer dereference on CS35L41 HDA AMP (LP: #2029199)
- ASoC: cs35l41: Refactor error release code
- ALSA: cs35l41: Add shared boost feature
- ASoC: dt-bindings: cirrus, cs35l41: Document CS35l41 shared boost
- ALSA: hda: cs35l41: Ensure firmware/tuning pairs are always loaded
- ALSA: hda: cs35l41: Enable Amp High Pass Filter
- ALSA: cs35l41: Use mbox command to enable speaker output for external boost
- ALSA: cs35l41: Poll for Power Up/Down rather than waiting a fixed delay
- ALSA: hda: cs35l41: Check mailbox status of pause command after firmware
load
- ALSA: hda: cs35l41: Ensure we correctly re-sync regmap before system
suspending.
- ALSA: hda: cs35l41: Ensure we pass up any errors during system suspend.
- ALSA: hda: cs35l41: Move Play and Pause into separate functions
- ALSA: hda: hda_component: Add pre and post playback hooks to hda_component
- ALSA: hda: cs35l41: Use pre and post playback hooks
- ALSA: hda: cs35l41: Rework System Suspend to ensure correct call separation
- ALSA: hda: cs35l41: Add device_link between HDA and cs35l41_hda
- ALSA: hda: cs35l41: Ensure amp is only unmuted during playback
* Reboot command powers off the system (LP: #2029332)
- x86/smp: Make stop_other_cpus() more robust
- x86/smp: Dont access non-existing CPUID leaf
* losetup with mknod fails on jammy with kernel 5.15.0-69-generic
(LP: #2015400)
- loop: deprecate autoloading callback loop_probe()
- loop: do not enforce max_loop hard limit by (new) default
* Fix UBSAN in Intel EDAC driver (LP: #2028746)
- EDAC/skx_common: Enable EDAC support for the "near" memory
- EDAC/skx_common: Delete duplicated and unreachable code
- EDAC/i10nm: Add Intel Emerald Rapids server support
- EDAC/i10nm: Make more configurations CPU model specific
- EDAC/i10nm: Add Intel Granite Rapids server support
- EDAC/i10nm: Skip the absent memory controllers
* Make TTY switching possible for NVIDIA when it's boot VGA (LP: #2028749)
- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers
- video/aperture: use generic code to figure out the vga default device
- drm/aperture: Remove primary argument
- video/aperture: Only kick vgacon when the pdev is decoding vga
- video/aperture: Move vga handling to pci function
- video/aperture: Drop primary argument
- video/aperture: Only remove sysfb on the default vga pci device
- fbdev: Simplify fb_is_primary_device for x86
- video/aperture: Provide a VGA helper for gma500 and internal use
* Fix AMD gpu hang when screen off/on (LP: #2028740)
- drm/amd/display: Keep PHY active for dp config
* Various backlight issues with the 6.0/6.1 kernel (LP: #2023638)
- ACPI: video: Stop trying to use vendor backlight control on laptops from
after ~2012
* FM350(mtk_t7xx) failed to suspend, or early wake while suspending
(LP: #2020743)
- net: wwan: t7xx: Ensure init is completed before system sleep
* Include the MAC address pass through function on RTL8153DD-CG (LP: #2020295)
- r8152: add USB device driver for config selection
* CVE-2023-20593
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu/amd: Add a Zenbleed fix
* CVE-2023-4004
- netfilter: nft_set_pipapo: fix improper element removal
* CVE-2023-3611
- net/sched: sch_qfq: refactor parsing of netlink parameters
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
* CVE-2023-3610
- netfilter: nf_tables: fix chain binding transaction logic
* CVE-2023-2898
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
* Fix speaker volume too low on HP G10 laptops (LP: #2023197)
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP platform
* stacked overlay file system mounts that have chroot() called against them
appear to be getting locked (by the kernel most likely?) (LP: #2016398)
- SAUCE: overlayfs: fix reference count mismatch
* arm64+ast2600: No Output from BMC's VGA port (LP: #2026776)
- drm/ast: Fix ARM compatibility
* Fix eDP only displays 3/4 area after switching to mirror mode with external
HDMI 4K monitor (LP: #2024273)
- drm/i915: Allow arbitrary refresh rates with VRR eDP panels
* Fix AMDGPU: the screen freeze with W7500 (LP: #2027957)
- drm/amd/pm: share the code around SMU13 pcie parameters update
- drm/amd/pm: conditionally disable pcie lane/speed switching for SMU13
- drm/amd: Move helper for dynamic speed switch check out of smu13
- drm/amd: Align SMU11 SMU_MSG_OverridePcieParameters implementation with
SMU13
* UBSAN: shift-out-of-bounds in amd_sfh (LP: #2027773)
- HID: amd_sfh: Rename the float32 variable
- HID: amd_sfh: Fix for shift-out-of-bounds
* cifs: fix mid leak during reconnection after timeout threshold
(LP: #2029138)
- cifs: fix mid leak during reconnection after timeout threshold
* Lunar update: upstream stable patchset 2023-07-28 (LP: #2028979)
- usb: dwc3: fix gadget mode suspend interrupt handler issue
- tpm, tpm_tis: Avoid cache incoherency in test for interrupts
- tpm, tpm_tis: Only handle supported interrupts
- tpm_tis: Use tpm_chip_{start,stop} decoration inside tpm_tis_resume
- tpm, tpm_tis: startup chip before testing for interrupts
- tpm: Re-enable TPM chip boostrapping non-tpm_tis TPM drivers
- tpm: Prevent hwrng from activating during resume
- watchdog: sp5100_tco: Immediately trigger upon starting.
- drm/amd/display: hpd rx irq not working with eDP interface
- ocfs2: Switch to security_inode_init_security()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does
not complain
- ALSA: hda/ca0132: add quirk for EVGA X299 DARK
- ALSA: hda: Fix unhandled register update during auto-suspend period
- ALSA: hda/realtek: Enable headset onLenovo M70/M90
- SUNRPC: Don't change task->tk_status after the call to rpc_exit_task
- mmc: sdhci-esdhc-imx: make "no-mmc-hs400" works
- mmc: block: ensure error propagation for non-blk
- power: supply: axp288_fuel_gauge: Fix external_power_changed race
- power: supply: bq25890: Fix external_power_changed race
- ASoC: rt5682: Disable jack detection interrupt during suspend
- net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize
- m68k: Move signal frame following exception on 68020/030
- xtensa: fix signal delivery to FDPIC process
- xtensa: add __bswap{si,di}2 helpers
- parisc: Use num_present_cpus() in alternative patching code
- parisc: Handle kgdb breakpoints only in kernel context
- parisc: Fix flush_dcache_page() for usage from irq context
- parisc: Allow to reboot machine after system halt
- parisc: Enable LOCKDEP support
- parisc: Handle kprobes breakpoints only in kernel context
- gpio: mockup: Fix mode of debugfs files
- btrfs: use nofs when cleaning up aborted transactions
- dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type
- drm/mgag200: Fix gamma lut not initialized.
- drm/radeon: reintroduce radeon_dp_work_func content
- drm/amd/pm: add missing NotifyPowerSource message mapping for SMU13.0.7
- drm/amd/pm: Fix output of pp_od_clk_voltage
- Revert "binder_alloc: add missing mmap_lock calls when using the VMA"
- Revert "android: binder: stop saving a pointer to the VMA"
- binder: add lockless binder_alloc_(set|get)_vma()
- binder: fix UAF caused by faulty buffer cleanup
- binder: fix UAF of alloc->vma in race with munmap()
- selftests/memfd: Fix unknown type name build failure
- drm/amd/amdgpu: limit one queue per gang
- perf/x86/uncore: Correct the number of CHAs on SPR
- x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- irqchip/mips-gic: Use raw spinlock for gic_lock
- debugobjects: Don't wake up kswapd from fill_pool()
- fbdev: udlfb: Fix endpoint check
- net: fix stack overflow when LRO is disabled for virtual interfaces
- udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().
- USB: core: Add routines for endpoint checks in old drivers
- USB: sisusbvga: Add endpoint checks
- media: radio-shark: Add endpoint checks
- ASoC: lpass: Fix for KASAN use_after_free out of bounds
- net: fix skb leak in __skb_tstamp_tx()
- drm: fix drmm_mutex_init()
- selftests: fib_tests: mute cleanup error message
- octeontx2-pf: Fix TSOv6 offload
- bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields
- bpf: fix a memory leak in the LRU and LRU_PERCPU hash maps
- lan966x: Fix unloading/loading of the driver
- ipv6: Fix out-of-bounds access in ipv6_find_tlv()
- cifs: mapchars mount option ignored
- power: supply: leds: Fix blink to LED on transition
- power: supply: mt6360: add a check of devm_work_autocancel in
mt6360_charger_probe
- power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition
- power: supply: bq27xxx: Fix I2C IRQ race on remove
- power: supply: bq27xxx: Fix poll_interval handling and races on remove
- power: supply: bq27xxx: Add cache parameter to
bq27xxx_battery_current_and_status()
- power: supply: bq27xxx: Move bq27xxx_battery_update() down
- power: supply: bq27xxx: Ensure power_supply_changed() is called on current
sign changes
- power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to
stabilize
- power: supply: bq25890: Call power_supply_changed() after updating input
current or voltage
- power: supply: bq24190: Call power_supply_changed() after updating input
current
- power: supply: sbs-charger: Fix INHIBITED bit for Status reg
- optee: fix uninited async notif value
- firmware: arm_ffa: Check if ffa_driver remove is present before executing
- firmware: arm_ffa: Fix FFA device names for logical partitions
- fs: fix undefined behavior in bit shift for SB_NOUSER
- regulator: pca9450: Fix BUCK2 enable_mask
- platform/x86: ISST: Remove 8 socket limit
- coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet()
- ARM: dts: imx6qdl-mba6: Add missing pvcie-supply regulator
- xen/pvcalls-back: fix double frees with pvcalls_new_active_socket()
- x86/show_trace_log_lvl: Ensure stack pointer is aligned, again
- ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg
- ASoC: Intel: avs: Fix declaration of enum avs_channel_config
- ASoC: Intel: avs: Access path components under lock
- cxl: Wait Memory_Info_Valid before access memory related info
- sctp: fix an issue that plpmtu can never go to complete state
- forcedeth: Fix an error handling path in nv_probe()
- platform/mellanox: mlxbf-pmc: fix sscanf() error checking
- net/mlx5e: Fix SQ wake logic in ptp napi_poll context
- net/mlx5e: Fix deadlock in tc route query code
- net/mlx5e: Use correct encap attribute during invalidation
- net/mlx5e: do as little as possible in napi poll when budget is 0
- net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs
- net/mlx5: Handle pairing of E-switch via uplink un/load APIs
- net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE
- net/mlx5: Fix error message when failing to allocate device memory
- net/mlx5: Collect command failures data only for known commands
- net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device
- net/mlx5: Devcom, serialize devcom registration
- arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert delay
- firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors
- regulator: mt6359: add read check for PMIC MT6359
- net/smc: Reset connection when trying to use SMCRv2 fails.
- 3c589_cs: Fix an error handling path in tc589_probe()
- net: phy: mscc: add VSC8502 to MODULE_DEVICE_TABLE
- wifi: rtw89: 8852b: adjust quota to avoid SER L1 caused by access null page
- zsmalloc: move LRU update from zs_map_object() to zs_malloc()
- mm/vmemmap/devdax: fix kernel crash when probing devdax devices
- cifs: fix smb1 mount regression
- cxl: Move cxl_await_media_ready() to before capacity info retrieval
- net: ethernet: mtk_eth_soc: fix QoS on DSA MAC on non MTK_NETSYS_V2 SoCs
- Upstream stable to v6.1.31, v6.3.5
- inet: Add IP_LOCAL_PORT_RANGE socket option
- ipv{4,6}/raw: fix output xfrm lookup wrt protocol
- firmware: arm_ffa: Fix usage of partition info get count flag
- selftests/bpf: Fix pkg-config call building sign-file
- platform/x86/amd/pmf: Fix CnQF and auto-mode after resume
- tls: rx: device: fix checking decryption status
- tls: rx: strp: set the skb->len of detached / CoW'ed skbs
- tls: rx: strp: fix determining record length in copy mode
- tls: rx: strp: force mixed decrypted records into copy mode
- tls: rx: strp: factor out copying skb data
- tls: rx: strp: preserve decryption status of skbs when needed
- net/mlx5: E-switch, Devcom, sync devcom events and devcom comp register
- gpio-f7188x: fix chip name and pin count on Nuvoton chip
- bpf, sockmap: Pass skb ownership through read_skb
- bpf, sockmap: Convert schedule_work into delayed_work
- bpf, sockmap: Reschedule is now done through backlog
- bpf, sockmap: Improved check for empty queue
- bpf, sockmap: Handle fin correctly
- bpf, sockmap: TCP data stall on recv before accept
- bpf, sockmap: Wake up polling after data copy
- bpf, sockmap: Incorrectly handling copied_seq
- blk-mq: fix race condition in active queue accounting
- vfio/type1: check pfn valid before converting to struct page
- net: page_pool: use in_softirq() instead
- page_pool: fix inconsistency for page_pool_ring_[un]lock()
- net: phy: mscc: enable VSC8501/2 RGMII RX clock
- wifi: iwlwifi: mvm: support wowlan info notification version 2
- drm/amd: Don't allow s0ix on APUs older than Raven
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl()
- Revert "thermal/drivers/mellanox: Use generic thermal_zone_get_trip()
function"
- block: fix bio-cache for passthru IO
- cpufreq: amd-pstate: Update policy->cur in amd_pstate_adjust_perf()
- cpufreq: amd-pstate: Add ->fast_switch() callback
- netfilter: ctnetlink: Support offloaded conntrack entry deletion
- tools headers UAPI: Sync the linux/in.h with the kernel sources
- gpiolib: fix allocation of mixed dynamic/static GPIOs
- net: fec: add dma_wmb to ensure correct descriptor values
- cxl/port: Fix NULL pointer access in devm_cxl_add_port()
- blk-wbt: fix that wbt can't be disabled by default
- Upstream stable to v6.1.32, v6.3.6
* sysfs msi_irqs directory empty with kernel-5.19 when being a xen guest
(LP: #2022354) // Lunar update: upstream stable patchset 2023-07-28
(LP: #2028979)
- x86/pci/xen: populate MSI sysfs entries
* Lunar update: upstream stable patchset 2023-07-26 (LP: #2028808)
- drm/fbdev-generic: prohibit potential out-of-bounds access
- drm/mipi-dsi: Set the fwnode for mipi_dsi_device
- ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings
- net: skb_partial_csum_set() fix against transport header magic value
- net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe()
- scsi: ufs: core: Fix I/O hang that occurs when BKOPS fails in W-LUN suspend
- tick/broadcast: Make broadcast device replacement work correctly
- linux/dim: Do nothing if no time delta between samples
- net: stmmac: Initialize MAC_ONEUS_TIC_COUNTER register
- net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs().
- net: phy: bcm7xx: Correct read from expansion register
- netfilter: nf_tables: always release netdev hooks from notifier
- netfilter: conntrack: fix possible bug_on with enable_hooks=1
- bonding: fix send_peer_notif overflow
- netlink: annotate accesses to nlk->cb_running
- net: annotate sk->sk_err write from do_recvmmsg()
- net: deal with most data-races in sk_wait_event()
- net: add vlan_get_protocol_and_depth() helper
- tcp: add annotations around sk->sk_shutdown accesses
- gve: Remove the code of clearing PBA bit
- net: mscc: ocelot: fix stat counter register values
- net: datagram: fix data-races in datagram_poll()
- af_unix: Fix a data race of sk->sk_receive_queue->qlen.
- af_unix: Fix data races around sk->sk_shutdown.
- drm/i915/guc: Don't capture Gen8 regs on Xe devices
- drm/i915: Fix NULL ptr deref by checking new_crtc_state
- drm/i915/dp: prevent potential div-by-zero
- drm/i915: Expand force_probe to block probe of devices as well.
- drm/i915: taint kernel when force probing unsupported devices
- fbdev: arcfb: Fix error handling in arcfb_probe()
- ext4: reflect error codes from ext4_multi_mount_protect() to its callers
- ext4: allow to find by goal if EXT4_MB_HINT_GOAL_ONLY is set
- ext4: allow ext4_get_group_info() to fail
- refscale: Move shutdown from wait_event() to wait_event_idle()
- selftests: cgroup: Add 'malloc' failures checks in test_memcontrol
- rcu: Protect rcu_print_task_exp_stall() ->exp_tasks access
- open: return EINVAL for O_DIRECTORY | O_CREAT
- fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
- drm/displayid: add displayid_get_header() and check bounds better
- drm/amd/display: populate subvp cmd info only for the top pipe
- drm/amd/display: Correct DML calculation to align HW formula
- platform/x86: x86-android-tablets: Add Acer Iconia One 7 B1-750 data
- drm/amd/display: Enable HostVM based on rIOMMU active
- drm/amd/display: Use DC_LOG_DC in the trasform pixel function
- regmap: cache: Return error in cache sync operations for REGCACHE_NONE
- remoteproc: imx_dsp_rproc: Add custom memory copy implementation for i.MX
DSP Cores
- arm64: dts: qcom: msm8996: Add missing DWC3 quirks
- media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and
buffer_finish()
- media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish
- media: pvrusb2: VIDEO_PVRUSB2 depends on DVB_CORE to use dvb_* symbols
- ACPI: processor: Check for null return of devm_kzalloc() in fch_misc_setup()
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
- arm64: dts: imx8mq-librem5: Remove dis_u3_susphy_quirk from usb_dwc3_0
- firmware: arm_sdei: Fix sleep from invalid context BUG
- ACPI: EC: Fix oops when removing custom query handlers
- drm/amd/display: fixed dcn30+ underflow issue
- remoteproc: stm32_rproc: Add mutex protection for workqueue
- drm/tegra: Avoid potential 32-bit integer overflow
- drm/msm/dp: Clean up handling of DP AUX interrupts
- ACPICA: Avoid undefined behavior: applying zero offset to null pointer
- ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in
acpi_db_display_objects
- arm64: dts: qcom: sdm845-polaris: Drop inexistent properties
- irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4
- ACPI: video: Remove desktops without backlight DMI quirks
- drm/amd/display: Correct DML calculation to follow HW SPEC
- drm/amd: Fix an out of bounds error in BIOS parser
- drm/amdgpu: Fix sdma v4 sw fini error
- media: Prefer designated initializers over memset for subdev pad ops
- media: mediatek: vcodec: Fix potential array out-of-bounds in decoder
queue_setup
- wifi: ath: Silence memcpy run-time false positive warning
- bpf: Annotate data races in bpf_local_storage
- wifi: brcmfmac: pcie: Provide a buffer of random bytes to the device
- wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex
- ext2: Check block size validity during mount
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery
- bnxt: avoid overflow in bnxt_get_nvram_directory()
- net: pasemi: Fix return type of pasemi_mac_start_tx()
- net: Catch invalid index in XPS mapping
- netdev: Enforce index cap in netdev_get_tx_queue
- scsi: target: iscsit: Free cmds before session free
- lib: cpu_rmap: Avoid use after free on rmap->obj array entries
- scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race
condition
- gfs2: Fix inode height consistency check
- scsi: ufs: ufs-pci: Add support for Intel Lunar Lake
- ext4: set goal start correctly in ext4_mb_normalize_request
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()
- crypto: jitter - permanent and intermittent health errors
- f2fs: Fix system crash due to lack of free space in LFS
- f2fs: fix to drop all dirty pages during umount() if cp_error is set
- f2fs: fix to check readonly condition correctly
- samples/bpf: Fix fout leak in hbm's run_bpf_prog
- bpf: Add preempt_count_{sub,add} into btf id deny list
- md: fix soft lockup in status_resync
- wifi: iwlwifi: pcie: fix possible NULL pointer dereference
- wifi: iwlwifi: add a new PCI device ID for BZ device
- wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf
- wifi: iwlwifi: mvm: fix ptk_pn memory leak
- block, bfq: Fix division by zero error on zero wsum
- wifi: ath11k: Ignore frags from uninitialized peer in dp.
- wifi: iwlwifi: fix iwl_mvm_max_amsdu_size() for MLO
- null_blk: Always check queue mode setting from configfs
- wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace
- wifi: ath11k: Fix SKB corruption in REO destination ring
- nbd: fix incomplete validation of ioctl arg
- ipvs: Update width of source for ip_vs_sync_conn_options
- Bluetooth: btusb: Add new PID/VID 04ca:3801 for MT7663
- Bluetooth: Add new quirk for broken local ext features page 2
- Bluetooth: btrtl: add support for the RTL8723CS
- Bluetooth: Improve support for Actions Semi ATS2851 based devices
- Bluetooth: btrtl: check for NULL in btrtl_set_quirks()
- Bluetooth: btintel: Add LE States quirk support
- Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set
- Bluetooth: Add new quirk for broken set random RPA timeout for ATS2851
- Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
- Bluetooth: btrtl: Add the support for RTL8851B
- HID: apple: Set the tilde quirk flag on the Geyser 4 and later
- staging: axis-fifo: initialize timeouts in init only
- ASoC: amd: yc: Add DMI entries to support HP OMEN 16-n0xxx (8A42)
- HID: logitech-hidpp: Don't use the USB serial for USB devices
- HID: logitech-hidpp: Reconcile USB and Unifying serials
- spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3
- usb: typec: ucsi: acpi: add quirk for ASUS Zenbook UM325
- ALSA: hda: LNL: add HD Audio PCI ID
- ASoC: amd: Add Dell G15 5525 to quirks list
- ASoC: amd: yc: Add ThinkBook 14 G5+ ARP to quirks list for acp6x
- HID: apple: Set the tilde quirk flag on the Geyser 3
- HID: Ignore battery for ELAN touchscreen on ROG Flow X13 GV301RA
- HID: wacom: generic: Set battery quirk only when we see battery data
- usb: typec: tcpm: fix multiple times discover svids error
- serial: 8250: Reinit port->pm on port specific driver unbind
- mcb-pci: Reallocate memory region to avoid memory overlapping
- sched: Fix KCSAN noinstr violation
- lkdtm/stackleak: Fix noinstr violation
- recordmcount: Fix memory leaks in the uwrite function
- soundwire: dmi-quirks: add remapping for Intel 'Rooks County' NUC M15
- phy: st: miphy28lp: use _poll_timeout functions for waits
- soundwire: qcom: gracefully handle too many ports in DT
- soundwire: bus: Fix unbalanced pm_runtime_put() causing usage count
underflow
- mfd: intel_soc_pmic_chtwc: Add Lenovo Yoga Book X90F to intel_cht_wc_models
- mfd: dln2: Fix memory leak in dln2_probe()
- mfd: intel-lpss: Add Intel Meteor Lake PCH-S LPSS PCI IDs
- parisc: Replace regular spinlock with spin_trylock on panic path
- drm/amdgpu: drop gfx_v11_0_cp_ecc_error_irq_funcs
- xfrm: don't check the default policy if the policy allows the packet
- Revert "Fix XFRM-I support for nested ESP tunnels"
- drm/msm/dp: unregister audio driver during unbind
- drm/msm/dpu: Assign missing writeback log_mask
- drm/msm/dpu: Move non-MDP_TOP INTF_INTR offsets out of hwio header
- drm/msm/dpu: Remove duplicate register defines from INTF
- dt-bindings: display/msm: dsi-controller-main: Document qcom, master-dsi and
qcom, sync-dual-dsi
- ASoC: fsl_micfil: Fix error handler with pm_runtime_enable
- cpupower: Make TSC read per CPU for Mperf monitor
- xfrm: Reject optional tunnel/BEET mode templates in outbound policies
- af_key: Reject optional tunnel/BEET mode templates in outbound policies
- drm/msm: Fix submit error-path leaks
- selftests: seg6: disable DAD on IPv6 router cfg for srv6_end_dt4_l3vpn_test
- selftets: seg6: disable rp_filter by default in srv6_end_dt4_l3vpn_test
- net: fec: Better handle pm_runtime_get() failing in .remove()
- net: phy: dp83867: add w/a for packet errors seen with short cables
- ALSA: firewire-digi00x: prevent potential use after free
- wifi: mt76: connac: fix stats->tx_bytes calculation
- ALSA: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15
- sfc: disable RXFCS and RXALL features by default
- vsock: avoid to close connected socket after the timeout
- tcp: fix possible sk_priority leak in tcp_v4_send_reset()
- serial: arc_uart: fix of_iomap leak in `arc_serial_probe`
- serial: 8250_bcm7271: balance clk_enable calls
- serial: 8250_bcm7271: fix leak in `brcmuart_probe`
- erspan: get the proto with the md version for collect_md
- net: dsa: rzn1-a5psw: enable management frames for CPU port
- net: dsa: rzn1-a5psw: fix STP states handling
- net: dsa: rzn1-a5psw: disable learning for standalone ports
- net: hns3: fix output information incomplete for dumping tx queue info with
debugfs
- net: hns3: fix sending pfc frames after reset issue
- net: hns3: fix reset delay time to avoid configuration timeout
- net: hns3: fix reset timeout when enable full VF
- media: netup_unidvb: fix use-after-free at del_timer()
- SUNRPC: double free xprt_ctxt while still in use
- SUNRPC: always free ctxt when freeing deferred request
- SUNRPC: Fix trace_svc_register() call site
- ASoC: mediatek: mt8186: Fix use-after-free in driver remove path
- ASoC: SOF: topology: Fix logic for copying tuples
- drm/exynos: fix g2d_open/close helper function definitions
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- virtio-net: Maintain reverse cleanup order
- virtio_net: Fix error unwinding of XDP initialization
- tipc: add tipc_bearer_min_mtu to calculate min mtu
- tipc: do not update mtu if msg_max is too small in mtu negotiation
- tipc: check the bearer min mtu properly when setting it by netlink
- s390/cio: include subchannels without devices also for evaluation
- can: dev: fix missing CAN XL support in can_put_echo_skb()
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- ice: introduce clear_reset_state operation
- ice: Fix ice VF reset during iavf initialization
- wifi: cfg80211: Drop entries with invalid BSSIDs in RNR
- wifi: mac80211: fortify the spinlock against deadlock by interrupt
- wifi: mac80211: fix min center freq offset tracing
- wifi: mac80211: Abort running color change when stopping the AP
- wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock
- wifi: iwlwifi: fw: fix DBGI dump
- wifi: iwlwifi: fix OEM's name in the ppag approved list
- wifi: iwlwifi: mvm: fix OEM's name in the tas approved list
- wifi: iwlwifi: mvm: don't trust firmware n_channels
- scsi: storvsc: Don't pass unused PFNs to Hyper-V host
- tun: Fix memory leak for detached NAPI queue.
- cassini: Fix a memory leak in the error handling path of cas_init_one()
- net: dsa: mv88e6xxx: Fix mv88e6393x EPC write command offset
- igb: fix bit_shift to be in [1..8] range
- vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()
- net: wwan: iosm: fix NULL pointer dereference when removing device
- net: pcs: xpcs: fix C73 AN not getting enabled
- net: selftests: Fix optstring
- netfilter: nf_tables: fix nft_trans type confusion
- netfilter: nft_set_rbtree: fix null deref on element insertion
- bridge: always declare tunnel functions
- ALSA: usb-audio: Add a sample rate workaround for Line6 Pod Go
- USB: usbtmc: Fix direction for 0-length ioctl control messages
- usb-storage: fix deadlock when a scsi command timeouts more than once
- USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value
- usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume()
- usb: dwc3: debugfs: Resume dwc3 before accessing registers
- usb: gadget: u_ether: Fix host MAC address case
- usb: typec: altmodes/displayport: fix pin_assignment_show
- Revert "usb: gadget: udc: core: Prevent redundant calls to pullup"
- Revert "usb: gadget: udc: core: Invoke usb_gadget_connect only when started"
- xhci-pci: Only run d3cold avoidance quirk for s2idle
- xhci: Fix incorrect tracking of free space on transfer rings
- ALSA: hda: Fix Oops by 9.1 surround channel names
- ALSA: hda/realtek: Add quirk for Clevo L140AU
- ALSA: hda/realtek: Add a quirk for HP EliteDesk 805
- ALSA: hda/realtek: Add quirk for 2nd ASUS GU603
- ALSA: hda/realtek: Add quirk for HP EliteBook G10 laptops
- can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag
- can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag
- can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop()
- can: kvaser_pciefd: Call request_irq() before enabling interrupts
- can: kvaser_pciefd: Empty SRB buffer in probe
- can: kvaser_pciefd: Clear listen-only bit if not explicitly requested
- can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt
- can: kvaser_pciefd: Disable interrupts in probe error path
- wifi: rtw88: use work to update rate to avoid RCU warning
- SMB3: Close all deferred handles of inode in case of handle lease break
- SMB3: drop reference to cfile before sending oplock break
- ksmbd: smb2: Allow messages padded to 8byte boundary
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: fix wrong UserName check in session_user
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- KVM: Fix vcpu_array[0] races
- statfs: enforce statfs[64] structure initialization
- maple_tree: make maple state reusable after mas_empty_area()
- mm: fix zswap writeback race condition
- serial: Add support for Advantech PCI-1611U card
- serial: 8250_exar: Add support for USR298x PCI Modems
- serial: qcom-geni: fix enabling deactivated interrupt
- thunderbolt: Clear registers properly when auto clear isn't in use
- vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF
- ceph: force updating the msg pointer in non-split case
- drm/amd/pm: fix possible power mode mismatch between driver and PMFW
- drm/amdgpu/gmc11: implement get_vbios_fb_size()
- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating.
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11 as well
- dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries
- powerpc/iommu: DMA address offset is incorrectly calculated with 2MB TCEs
- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device
- tpm/tpm_tis: Disable interrupts for more Lenovo devices
- powerpc/64s/radix: Fix soft dirty tracking
- nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()
- s390/dasd: fix command reject error on ESE devices
- s390/crypto: use vector instructions only if available for ChaCha20
- s390/qdio: fix do_sqbs() inline assembly constraint
- arm64: mte: Do not set PG_mte_tagged if tags were not initialized
- rethook: use preempt_{disable, enable}_notrace in rethook_trampoline_handler
- rethook, fprobe: do not trace rethook related functions
- remoteproc: imx_dsp_rproc: Fix kernel test robot sparse warning
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin
- drm/nouveau/disp: More DP_RECEIVER_CAP_SIZE array fixes
- xfrm: release all offloaded policy memory
- xfrm: Fix leak of dev tracker
- media: pvrusb2: fix DVB_CORE dependency
- net: fec: remove the xdp_return_frame when lack of tx BDs
- iavf: send VLAN offloading caps once after VFR
- wifi: brcmfmac: Check for probe() id argument being NULL
- wifi: rtw88: correct qsel_to_ep[] type as int
- KVM: arm64: Infer the PA offset from IPA in stage-2 map walker
- perf script: Skip aggregation for stat events
- iommu/arm-smmu-qcom: Fix missing adreno_smmu's
- arm64: Also reset KASAN tag if page is not PG_mte_tagged
- Upstream stable to v6.1.30, v6.3.4
* Lunar update: v6.2.16 upstream stable release (LP: #2028580)
- USB: dwc3: gadget: drop dead hibernation code
- usb: dwc3: gadget: Execute gadget stop after halting the controller
- crypto: ccp - Clear PSP interrupt status register before calling handler
- ASoC: codecs: constify static sdw_slave_ops struct
- ASoC: codecs: wcd938x: fix accessing regmap on unattached devices
- mtd: spi-nor: Add a RWW flag
- mtd: spi-nor: spansion: Enable JFFS2 write buffer for Infineon s28hx SEMPER
flash
- qcom: llcc/edac: Support polling mode for ECC handling
- soc: qcom: llcc: Do not create EDAC platform device on SDM845
- mailbox: zynq: Switch to flexible array to simplify code
- mailbox: zynqmp: Fix counts of child nodes
- mtd: spi-nor: spansion: Enable JFFS2 write buffer for Infineon s25hx SEMPER
flash
- fs/ntfs3: Fix null-ptr-deref on inode->i_op in ntfs_lookup()
- drm/amd/display: Ext displays with dock can't recognized after resume
- KVM: x86/mmu: Avoid indirect call for get_cr3
- KVM: x86: Do not unload MMU roots when only toggling CR0.WP with TDP enabled
- KVM: x86: Make use of kvm_read_cr*_bits() when testing bits
- KVM: VMX: Make CR0.WP a guest owned bit
- KVM: x86/mmu: Refresh CR0.WP prior to checking for emulated permission
faults
- RDMA/rxe: Remove rxe_alloc()
- RDMA/rxe: Change rxe_dbg to rxe_dbg_dev
- RDMA/rxe: Extend dbg log messages to err and info
- ASoC: Intel: soc-acpi-byt: Fix "WM510205" match no longer working
- scsi: qedi: Fix use after free bug in qedi_remove()
- drm/amd/display: Add missing WA and MCLK validation
- drm/amd/display: Return error code on DSC atomic check failure
- drm/amd/display: Fixes for dcn32_clk_mgr implementation
- drm/amd/display: Reset OUTBOX0 r/w pointer on DMUB reset
- drm/amd/display: Do not clear GPINT register when releasing DMUB from reset
- drm/amd/display: Update bounding box values for DCN321
- rxrpc: Fix potential data race in rxrpc_wait_to_be_connected()
- ixgbe: Fix panic during XDP_TX with > 64 CPUs
- octeonxt2-af: mcs: Fix per port bypass config
- octeontx2-af: mcs: Write TCAM_DATA and TCAM_MASK registers at once
- octeontx2-af: mcs: Config parser to skip 8B header
- octeontx2-af: mcs: Fix MCS block interrupt
- octeontx2-pf: mcs: Fix NULL pointer dereferences
- octeontx2-pf: mcs: Match macsec ethertype along with DMAC
- octeontx2-pf: mcs: Clear stats before freeing resource
- octeontx2-pf: mcs: Fix shared counters logic
- octeontx2-pf: mcs: Do not reset PN while updating secy
- net/ncsi: clear Tx enable mode when handling a Config required AEN
- tcp: fix skb_copy_ubufs() vs BIG TCP
- net/sched: cls_api: remove block_cb from driver_list before freeing
- sit: update dev->needed_headroom in ipip6_tunnel_bind_dev()
- selftests: srv6: make srv6_end_dt46_l3vpn_test more robust
- net: ipv6: fix skb hash for some RST packets
- net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu
- writeback: fix call of incorrect macro
- block: Skip destroyed blkg when restart in blkg_destroy_all()
- watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe()
- RISC-V: mm: Enable huge page support to kernel_page_present() function
- i2c: tegra: Fix PEC support for SMBUS block read
- net/sched: act_mirred: Add carrier check
- r8152: fix flow control issue of RTL8156A
- r8152: fix the poor throughput for 2.5G devices
- r8152: move setting r8153b_rx_agg_chg_indicate()
- sfc: Fix module EEPROM reporting for QSFP modules
- rxrpc: Fix hard call timeout units
- rxrpc: Make it so that a waiting process can be aborted
- rxrpc: Fix timeout of a call that hasn't yet been granted a channel
- riscv: compat_syscall_table: Fixup compile warning
- net: ethernet: mtk_eth_soc: drop generic vlan rx offload, only use DSA
untagging
- drm/i915/mtl: Add the missing CPU transcoder mask in intel_device_info
- selftests: netfilter: fix libmnl pkg-config usage
- octeontx2-af: Secure APR table update with the lock
- octeontx2-af: Fix start and end bit for scan config
- octeontx2-af: Fix depth of cam and mem table.
- octeontx2-pf: Increase the size of dmac filter flows
- octeontx2-af: Add validation for lmac type
- octeontx2-af: Update correct mask to filter IPv4 fragments
- octeontx2-af: Update/Fix NPC field hash extract feature
- octeontx2-af: Fix issues with NPC field hash extract
- octeontx2-af: Skip PFs if not enabled
- octeontx2-pf: Disable packet I/O for graceful exit
- octeontx2-vf: Detach LF resources on probe cleanup
- ionic: remove noise from ethtool rxnfc error msg
- ethtool: Fix uninitialized number of lanes
- ionic: catch failure from devlink_alloc
- af_packet: Don't send zero-byte data in packet_sendmsg_spkt().
- drm/amdgpu: add a missing lock for AMDGPU_SCHED
- ALSA: caiaq: input: Add error handling for unsupported input methods in
`snd_usb_caiaq_input_init`
- KVM: s390: pv: fix asynchronous teardown for small VMs
- KVM: s390: fix race in gmap_make_secure()
- net: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621
- net: dsa: mt7530: split-off common parts from mt7531_setup
- net: dsa: mt7530: fix network connectivity with multiple CPU ports
- ice: block LAN in case of VF to VF offload
- virtio_net: suppress cpu stall when free_unused_bufs
- net: enetc: check the index of the SFI rather than the handle
- net: fec: correct the counting of XDP sent frames
- perf record: Fix "read LOST count failed" msg with sample read
- perf build: Support python/perf.so testing
- perf scripts intel-pt-events.py: Fix IPC output for Python 2
- perf script: Fix Python support when no libtraceevent
- perf hist: Improve srcfile sort key performance (really)
- perf vendor events s390: Remove UTF-8 characters from JSON file
- perf tests record_offcpu.sh: Fix redirection of stderr to stdin
- perf ftrace: Make system wide the default target for latency subcommand
- perf vendor events power9: Remove UTF-8 characters from JSON files
- perf pmu: zfree() expects a pointer to a pointer to zero it after freeing
its contents
- perf map: Delete two variable initialisations before null pointer checks in
sort__sym_from_cmp()
- perf cs-etm: Fix timeless decode mode detection
- crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs()
- crypto: api - Add scaffolding to change completion function signature
- crypto: engine - Use crypto_request_complete
- crypto: engine - fix crypto_queue backlog handling
- perf symbols: Fix return incorrect build_id size in elf_read_build_id()
- perf tracepoint: Fix memory leak in is_valid_tracepoint()
- perf stat: Separate bperf from bpf_profiler
- KVM: x86/mmu: Change tdp_mmu to a read-only parameter
- KVM: x86/mmu: Move TDP MMU VM init/uninit behind tdp_mmu_enabled
- KVM: x86/mmu: Replace open coded usage of tdp_mmu_page with
is_tdp_mmu_page()
- KVM: x86: Preserve TDP MMU roots until they are explicitly invalidated
- ksmbd: Implements sess->ksmbd_chann_list as xarray
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- wifi: iwlwifi: mvm: fix potential memory leak
- cifs: check only tcon status on tcon related functions
- cifs: avoid potential races when handling multiple dfs tcons
- netfilter: nf_tables: extended netlink error reporting for netdevice
- netfilter: nf_tables: rename function to destroy hook list
- netfilter: nf_tables: hit ENOENT on unexisting chain/flowtable update with
missing attributes
- x86/retbleed: Fix return thunk alignment
- btrfs: fix btrfs_prev_leaf() to not return the same key twice
- btrfs: zoned: fix wrong use of bitops API in btrfs_ensure_empty_zones
- btrfs: properly reject clear_cache and v1 cache for block-group-tree
- btrfs: fix assertion of exclop condition when starting balance
- btrfs: fix encoded write i_size corruption with no-holes
- btrfs: don't free qgroup space unless specified
- btrfs: zero the buffer before marking it dirty in btrfs_redirty_list_add
- btrfs: make clear_cache mount option to rebuild FST without disabling it
- btrfs: print-tree: parent bytenr must be aligned to sector size
- btrfs: fix space cache inconsistency after error loading it from disk
- btrfs: zoned: zone finish data relocation BG with last IO
- btrfs: zoned: fix full zone super block reading on ZNS
- btrfs: fix backref walking not returning all inode refs
- cifs: fix pcchunk length type in smb2_copychunk_range
- cifs: release leases for deferred close handles when freezing
- platform/x86/intel-uncore-freq: Return error on write frequency
- platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the
Juno Tablet
- platform/x86: thinkpad_acpi: Fix platform profiles on T490
- platform/x86: hp-wmi: add micmute to hp_wmi_keymap struct
- platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i
- platform/x86: thinkpad_acpi: Add profile force ability
- inotify: Avoid reporting event with invalid wd
- smb3: fix problem remounting a share after shutdown
- SMB3: force unmount was failing to close deferred close files
- sh: math-emu: fix macro redefined warning
- sh: mcount.S: fix build error when PRINTK is not enabled
- sh: init: use OF_EARLY_FLATTREE for early init
- sh: nmi_debug: fix return value of __setup handler
- proc_sysctl: update docs for __register_sysctl_table()
- proc_sysctl: enhance documentation
- remoteproc: stm32: Call of_node_put() on iteration error
- remoteproc: st: Call of_node_put() on iteration error
- remoteproc: imx_dsp_rproc: Call of_node_put() on iteration error
- remoteproc: imx_rproc: Call of_node_put() on iteration error
- remoteproc: rcar_rproc: Call of_node_put() on iteration error
- sysctl: clarify register_sysctl_init() base directory order
- ARM: dts: aspeed: asrock: Correct firmware flash SPI clocks
- ARM: dts: exynos: fix WM8960 clock name in Itop Elite
- ARM: dts: s5pv210: correct MIPI CSIS clock name
- ARM: dts: aspeed: romed8hm3: Fix GPIO polarity of system-fault LED
- drm/msm/adreno: fix runtime PM imbalance at gpu load
- drm/bridge: lt8912b: Fix DSI Video Mode
- drm/i915/color: Fix typo for Plane CSC indexes
- drm/msm: fix NULL-deref on snapshot tear down
- drm/msm: fix NULL-deref on irq uninstall
- drm/msm: fix drm device leak on bind errors
- drm/msm: fix vram leak on bind errors
- drm/msm: fix missing wq allocation error handling
- drm/msm: fix workqueue leak on bind errors
- drm/i915/dsi: Use unconditional msleep() instead of intel_dsi_msleep()
- f2fs: factor out victim_entry usage from general rb_tree use
- f2fs: fix null pointer panic in tracepoint in __replace_atomic_write_block
- f2fs: fix potential corruption when moving a directory
- irqchip/loongson-pch-pic: Fix pch_pic_acpi_init calling
- irqchip/loongson-pch-pic: Fix registration of syscore_ops
- irqchip/loongson-eiointc: Fix returned value on parsing MADT
- irqchip/loongson-eiointc: Fix incorrect use of acpi_get_vec_parent
- irqchip/loongson-eiointc: Fix registration of syscore_ops
- drm/panel: otm8009a: Set backlight parent to panel device
- drm/amd/display: Add NULL plane_state check for cursor disable logic
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
- drm/amd/display: filter out invalid bits in pipe_fuses
- drm/amd/display: fix flickering caused by S/G mode
- drm/amdgpu: drop redundant sched job cleanup when cs is aborted
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
- drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx
ras
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3
- drm/amdgpu: change gfx 11.0.4 external_id range
- drm/amdgpu: Fix vram recover doesn't work after whole GPU reset (v2)
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
- drm/amd/pm: parse pp_handle under appropriate conditions
- drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
- drm/amd: Load MES microcode during early_init
- drm/amd: Add a new helper for loading/validating microcode
- drm/amd: Use `amdgpu_ucode_*` helpers for MES
- HID: wacom: Set a default resolution for older tablets
- HID: wacom: insert timestamp to packed Bluetooth (BT) events
- fs/ntfs3: Refactoring of various minor issues
- drm/msm/adreno: adreno_gpu: Use suspend() instead of idle() on load error
- drm/i915/mtl: Add workarounds Wa_14017066071 and Wa_14017654203
- drm/i915/mtl: Add Wa_14017856879
- drm/i915: disable sampler indirect state in bindless heap
- drm/i915/mtl: update scaler source and destination limits for MTL
- drm/i915: Check pipe source size when using skl+ scalers
- drm/amd/display: Fix Z8 support configurations
- drm/amd/display: Add minimum Z8 residency debug option
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
- drm/amd/display: Lowering min Z8 residency time
- drm/amd/display: Update Z8 SR exit/enter latencies
- drm/amd/display: Change default Z8 watermark values
- drm: Add missing DP DSC extended capability definitions.
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
- locking/rwsem: Add __always_inline annotation to __down_read_common() and
inlined callers
- ext4: fix WARNING in mb_find_extent
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- ext4: fix data races when using cached status extents
- ext4: avoid deadlock in fs reclaim with page writeback
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- ext4: improve error recovery code paths in __ext4_remount()
- ext4: improve error handling from ext4_dirhash()
- ext4: fix deadlock when converting an inline directory in nojournal mode
- ext4: add bounds checking in get_max_inline_xattr_value_size()
- ext4: bail out of ext4_xattr_ibody_get() fails for any reason
- ext4: fix lockdep warning when enabling MMP
- ext4: remove a BUG_ON in ext4_mb_release_group_pa()
- ext4: fix invalid free tracking in ext4_xattr_move_to_block()
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values
- x86/amd_nb: Add PCI ID for family 19h model 78h
- x86: fix clear_user_rep_good() exception handling annotation
- spi: fsl-spi: Re-organise transfer bits_per_word adaptation
- spi: fsl-cpm: Use 16 bit mode for large transfers with even size
- drm/amd/display: Fix hang when skipping modeset
- Linux 6.2.16
* CVE-2023-31084 // CVE-2023-31084 was assigned to this bug.
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
* CVE-2023-3776
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
* Packaging resync (LP: #1786013)
- [Packaging] resync update-dkms-versions helper
- [Packaging] resync getabis
-- Emil Renner Berthing <email address hidden> Tue, 29 Aug 2023 14:08:49 +0200
-
linux-starfive (6.2.0-1003.3) lunar; urgency=medium
* lunar/linux-starfive: 6.2.0-1003.3 -proposed tracker (LP: #2030545)
* Packaging resync (LP: #1786013)
- [Packaging] resync update-dkms-versions helper
- [Packaging] resync getabis
[ Ubuntu: 6.2.0-31.31 ]
* lunar/linux: 6.2.0-31.31 -proposed tracker (LP: #2031146)
* libgnutls report "trap invalid opcode" when trying to install packages over
https (LP: #2031093)
- [Config]: disable CONFIG_GDS_FORCE_MITIGATION
[ Ubuntu: 6.2.0-28.29 ]
* lunar/linux: 6.2.0-28.29 -proposed tracker (LP: #2030547)
* CVE-2022-40982
- init: Provide arch_cpu_finalize_init()
- x86/cpu: Switch to arch_cpu_finalize_init()
- ARM: cpu: Switch to arch_cpu_finalize_init()
- ia64/cpu: Switch to arch_cpu_finalize_init()
- m68k/cpu: Switch to arch_cpu_finalize_init()
- mips/cpu: Switch to arch_cpu_finalize_init()
- sh/cpu: Switch to arch_cpu_finalize_init()
- sparc/cpu: Switch to arch_cpu_finalize_init()
- um/cpu: Switch to arch_cpu_finalize_init()
- init: Remove check_bugs() leftovers
- init: Invoke arch_cpu_finalize_init() earlier
- init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init()
- x86/init: Initialize signal frame size late
- x86/fpu: Remove cpuinfo argument from init functions
- x86/fpu: Mark init functions __init
- x86/fpu: Move FPU initialization into arch_cpu_finalize_init()
- x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build
- x86/xen: Fix secondary processors' FPU initialization
- x86/speculation: Add Gather Data Sampling mitigation
- x86/speculation: Add force option to GDS mitigation
- x86/speculation: Add Kconfig option for GDS
- KVM: Add GDS_NO support to KVM
- Documentation/x86: Fix backwards on/off logic about YMM support
- [Config]: Enable CONFIG_ARCH_HAS_CPU_FINALIZE_INIT and
CONFIG_GDS_FORCE_MITIGATION
* CVE-2023-4015
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound
set/chain
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
* CVE-2023-3777
- netfilter: nf_tables: skip bound chain on rule flush
* CVE-2023-3995
- netfilter: nf_tables: disallow rule addition to bound chain via
NFTA_RULE_CHAIN_ID
* CVE-2023-20593
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu/amd: Add a Zenbleed fix
* CVE-2023-3776
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
* CVE-2023-4004
- netfilter: nft_set_pipapo: fix improper element removal
* CVE-2023-3611
- net/sched: sch_qfq: refactor parsing of netlink parameters
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
* CVE-2023-3610
- netfilter: nf_tables: fix chain binding transaction logic
* CVE-2023-3609
- net/sched: cls_u32: Fix reference counter leak leading to overflow
-- Emil Renner Berthing <email address hidden> Wed, 23 Aug 2023 12:25:39 +0200
-
linux-starfive (6.2.0-1002.2) lunar; urgency=medium
* lunar/linux-starfive: 6.2.0-1002.2 -proposed tracker (LP: #2026486)
[ Ubuntu: 6.2.0-27.28 ]
* lunar/linux: 6.2.0-27.28 -proposed tracker (LP: #2026488)
* Packaging resync (LP: #1786013)
- [Packaging] resync update-dkms-versions helper
- [Packaging] update annotations scripts
* CVE-2023-2640 // CVE-2023-32629
- Revert "UBUNTU: SAUCE: overlayfs: handle idmapped mounts in
ovl_do_(set|remove)xattr"
- Revert "UBUNTU: SAUCE: overlayfs: Skip permission checking for
trusted.overlayfs.* xattrs"
- SAUCE: overlayfs: default to userxattr when mounted from non initial user
namespace
* UNII-4 5.9G Band support request on 8852BE (LP: #2023952)
- wifi: rtw89: 8851b: add 8851B basic chip_info
- wifi: rtw89: introduce realtek ACPI DSM method
- wifi: rtw89: regd: judge UNII-4 according to BIOS and chip
- wifi: rtw89: support U-NII-4 channels on 5GHz band
* Disable hv-kvp-daemon if /dev/vmbus/hv_kvp is not present (LP: #2024900)
- [Packaging] disable hv-kvp-daemon if needed
* A deadlock issue in scsi rescan task while resuming from S3 (LP: #2018566)
- ata: libata-scsi: Avoid deadlock on rescan after device resume
* [SRU] Intel Sapphire Rapids HBM support needs CONFIG_NUMA_EMU (LP: #2008745)
- [Config] Intel Sapphire Rapids HBM support needs CONFIG_NUMA_EMU
* Lunar update: v6.2.15 upstream stable release (LP: #2025067)
- ASOC: Intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15
- ASoC: Intel: soc-acpi: add table for Intel 'Rooks County' NUC M15
- ASoC: soc-pcm: fix hw->formats cleared by soc_pcm_hw_init() for dpcm
- x86/hyperv: Block root partition functionality in a Confidential VM
- ASoC: amd: yc: Add DMI entries to support Victus by HP Laptop 16-e1xxx
(8A22)
- iio: adc: palmas_gpadc: fix NULL dereference on rmmod
- ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750
- ASoC: da7213.c: add missing pm_runtime_disable()
- net: wwan: t7xx: do not compile with -Werror
- wifi: mt76: mt7921: Fix use-after-free in fw features query.
- selftests mount: Fix mount_setattr_test builds failed
- scsi: mpi3mr: Handle soft reset in progress fault code (0xF002)
- net: sfp: add quirk enabling 2500Base-x for HG MXPD-483II
- platform/x86: thinkpad_acpi: Add missing T14s Gen1 type to s2idle quirk list
- wifi: ath11k: reduce the MHI timeout to 20s
- tracing: Error if a trace event has an array for a __field()
- asm-generic/io.h: suppress endianness warnings for readq() and writeq()
- asm-generic/io.h: suppress endianness warnings for relaxed accessors
- x86/cpu: Add model number for Intel Arrow Lake processor
- wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset
- ASoC: amd: ps: update the acp clock source.
- arm64: Always load shadow stack pointer directly from the task struct
- arm64: Stash shadow stack pointer in the task struct on interrupt
- powerpc/boot: Fix boot wrapper code generation with CONFIG_POWER10_CPU
- PCI: kirin: Select REGMAP_MMIO
- PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock
- PCI: qcom: Fix the incorrect register usage in v2.7.0 config
- bus: mhi: host: pci_generic: Revert "Add a secondary AT port to Telit FN990"
- phy: qcom-qmp-pcie: sc8180x PCIe PHY has 2 lanes
- IMA: allow/fix UML builds
- wifi: rtw88: usb: fix priority queue to endpoint mapping
- usb: gadget: udc: core: Invoke usb_gadget_connect only when started
- usb: gadget: udc: core: Prevent redundant calls to pullup
- usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive
- USB: dwc3: fix runtime pm imbalance on probe errors
- USB: dwc3: fix runtime pm imbalance on unbind
- hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write
- hwmon: (adt7475) Use device_property APIs when configuring polarity
- tpm: Add !tpm_amd_is_rng_defective() to the hwrng_unregister() call site
- posix-cpu-timers: Implement the missing timer_wait_running callback
- media: ov8856: Do not check for for module version
- drm/vmwgfx: Fix Legacy Display Unit atomic drm support
- blk-stat: fix QUEUE_FLAG_STATS clear
- blk-mq: release crypto keyslot before reporting I/O complete
- blk-crypto: make blk_crypto_evict_key() return void
- blk-crypto: make blk_crypto_evict_key() more robust
- staging: iio: resolver: ads1210: fix config mode
- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
- xhci: fix debugfs register accesses while suspended
- serial: fix TIOCSRS485 locking
- serial: 8250: Fix serial8250_tx_empty() race with DMA Tx
- serial: max310x: fix IO data corruption in batched operations
- tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem
- fs: fix sysctls.c built
- MIPS: fw: Allow firmware to pass a empty env
- ipmi:ssif: Add send_retries increment
- ipmi: fix SSIF not responding under certain cond.
- iio: addac: stx104: Fix race condition when converting analog-to-digital
- iio: addac: stx104: Fix race condition for stx104_write_raw()
- kheaders: Use array declaration instead of char
- wifi: mt76: add missing locking to protect against concurrent rx/status
calls
- wifi: rtw89: correct 5 MHz mask setting
- pwm: meson: Fix axg ao mux parents
- pwm: meson: Fix g12a ao clk81 name
- soundwire: qcom: correct setting ignore bit on v1.5.1
- pinctrl: qcom: lpass-lpi: set output value before enabling output
- ring-buffer: Ensure proper resetting of atomic variables in
ring_buffer_reset_online_cpus
- ring-buffer: Sync IRQ works before buffer destruction
- crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON()
- crypto: safexcel - Cleanup ring IRQ workqueues on load failure
- crypto: arm64/aes-neonbs - fix crash with CFI enabled
- crypto: testmgr - fix RNG performance in fuzz tests
- crypto: ccp - Don't initialize CCP for PSP 0x1649
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-
ed
- reiserfs: Add security prefix to xattr name in reiserfs_security_write()
- cpufreq: qcom-cpufreq-hw: fix double IO unmap and resource release on exit
- KVM: x86/pmu: Disallow legacy LBRs if architectural LBRs are available
- KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted
- KVM: arm64: Avoid vcpu->mutex v. kvm->lock inversion in CPU_ON
- KVM: arm64: Avoid lock inversion when setting the VM register width
- KVM: arm64: Use config_lock to protect data ordered against KVM_RUN
- KVM: arm64: Use config_lock to protect vgic state
- KVM: arm64: vgic: Don't acquire its_lock before config_lock
- relayfs: fix out-of-bounds access in relay_file_read
- drm/amd/display: Remove stutter only configurations
- drm/amd/display: limit timing for single dimm memory
- drm/amd/display: fix PSR-SU/DSC interoperability support
- drm/amd/display: fix a divided-by-zero error
- KVM: RISC-V: Retry fault if vma_lookup() results become invalid
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ACPI: video: Remove acpi_backlight=video quirk for Lenovo ThinkPad W530
- i2c: omap: Fix standard mode false ACK readings
- riscv: mm: remove redundant parameter of create_fdt_early_page_table
- tracing: Fix permissions for the buffer_percent file
- drm/amd/pm: re-enable the gfx imu when smu resume
- iommu/amd: Fix "Guest Virtual APIC Table Root Pointer" configuration in IRTE
- RISC-V: Align SBI probe implementation with spec
- Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path"
- ubifs: Fix memleak when insert_old_idx() failed
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- ubifs: Free memory for tmpfile name
- ubifs: Fix memory leak in do_rename
- ceph: fix potential use-after-free bug when trimming caps
- fs: dlm: fix DLM_IFL_CB_PENDING gets overwritten
- xfs: don't consider future format versions valid
- cxl/hdm: Fail upon detecting 0-sized decoders
- bus: mhi: host: Remove duplicate ee check for syserr
- bus: mhi: host: Use mhi_tryset_pm_state() for setting fw error state
- bus: mhi: host: Range check CHDBOFF and ERDBOFF
- ASoC: dt-bindings: qcom,lpass-rx-macro: correct minItems for clocks
- kunit: fix bug in the order of lines in debugfs logs
- rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check
- selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem
- selftests/resctrl: Move ->setup() call outside of test specific branches
- selftests/resctrl: Allow ->setup() to return errors
- selftests/resctrl: Check for return value after write_schemata()
- selinux: fix Makefile dependencies of flask.h
- selinux: ensure av_permissions.h is built when needed
- tpm, tpm_tis: Do not skip reset of original interrupt vector
- tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register
- tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed
- tpm, tpm_tis: Claim locality before writing interrupt registers
- tpm, tpm: Implement usage counter for locality
- tpm, tpm_tis: Claim locality when interrupts are reenabled on resume
- erofs: stop parsing non-compact HEAD index if clusterofs is invalid
- erofs: initialize packed inode after root inode is assigned
- erofs: fix potential overflow calculating xattr_isize
- drm/rockchip: Drop unbalanced obj unref
- drm/i915/dg2: Drop one PCI ID
- drm/vgem: add missing mutex_destroy
- drm/probe-helper: Cancel previous job before starting new one
- drm/amdgpu: register a vga_switcheroo client for MacBooks with apple-gmux
- tools/x86/kcpuid: Fix avx512bw and avx512lvl fields in Fn00000007
- soc: ti: k3-ringacc: Add try_module_get() to k3_dmaring_request_dual_ring()
- soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe
- arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table
- arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table
- arm64: dts: renesas: r9a07g044: Update IRQ numbers for SSI channels
- arm64: dts: renesas: r9a07g054: Update IRQ numbers for SSI channels
- arm64: dts: renesas: r9a07g043: Update IRQ numbers for SSI channels
- drm/mediatek: dp: Only trigger DRM HPD events if bridge is attached
- drm/msm/disp/dpu: check for crtc enable rather than crtc active to release
shared resources
- EDAC/skx: Fix overflows on the DRAM row address mapping arrays
- ARM: dts: qcom-apq8064: Fix opp table child name
- regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since
booted
- arm64: dts: ti: k3-am62-main: Fix GPIO numbers in DT
- arm64: dts: ti: k3-am62a7-sk: Fix DDR size to full 4GB
- arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property
- arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name
- arm64: dts: broadcom: bcmbca: bcm4908: fix LED nodenames
- arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename
- arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name
- arm64: dts: qcom: sc7280: fix EUD port properties
- arm64: dts: qcom: sdm845: correct dynamic power coefficients
- arm64: dts: qcom: sdm845: Fix the PCI I/O port range
- arm64: dts: qcom: msm8998: Fix the PCI I/O port range
- arm64: dts: qcom: sc7280: Fix the PCI I/O port range
- arm64: dts: qcom: ipq8074: Fix the PCI I/O port range
- arm64: dts: qcom: ipq6018: Add/remove some newlines
- arm64: dts: qcom: ipq6018: Fix the PCI I/O port range
- arm64: dts: qcom: msm8996: Fix the PCI I/O port range
- arm64: dts: qcom: sm8250: Fix the PCI I/O port range
- arm64: dts: qcom: sc8280xp: Fix the PCI I/O port range
- arm64: dts: qcom: sm8150: Fix the PCI I/O port range
- arm64: dts: qcom: sm8450: Fix the PCI I/O port range
- ARM: dts: qcom: ipq4019: Fix the PCI I/O port range
- ARM: dts: qcom: ipq8064: Fix the PCI I/O port range
- arm64: dts: qcom: msm8976: Add and provide xo clk to rpmcc
- ARM: dts: qcom: sdx55: Fix the unit address of PCIe EP node
- x86/MCE/AMD: Use an u64 for bank_map
- media: bdisp: Add missing check for create_workqueue
- media: platform: mtk-mdp3: Add missing check and free for ida_alloc
- media: amphion: decoder implement display delay enable
- media: av7110: prevent underflow in write_ts_to_decoder()
- firmware: qcom_scm: Clear download bit during reboot
- drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535
- media: max9286: Free control handler
- accel: Link to compute accelerator subsystem intro
- arm64: dts: ti: k3-am625: Correct L2 cache size to 512KB
- arm64: dts: ti: k3-am62a7: Correct L2 cache size to 512KB
- drm/msm/adreno: drop bogus pm_runtime_set_active()
- drm: msm: adreno: Disable preemption on Adreno 510
- virt/coco/sev-guest: Double-buffer messages
- arm64: dts: qcom: sm8350-microsoft-surface: fix USB dual-role mode property
- drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known
override-init warnings
- ACPI: processor: Fix evaluating _PDC method when running as Xen dom0
- mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data
- arm64: dts: qcom: sm8450: fix pcie1 gpios properties name
- drm: rcar-du: Fix a NULL vs IS_ERR() bug
- ARM: dts: gta04: fix excess dma channel usage
- firmware: arm_scmi: Fix xfers allocation on Rx channel
- perf/arm-cmn: Move overlapping wp_combine field
- perf/amlogic: Fix config1/config2 parsing issue
- ARM: dts: stm32: fix spi1 pin assignment on stm32mp15
- arm64: dts: apple: t8103: Disable unused PCIe ports
- cpufreq: mediatek: fix passing zero to 'PTR_ERR'
- cpufreq: mediatek: fix KP caused by handler usage after
regulator_put/clk_put
- cpufreq: mediatek: raise proc/sram max voltage for MT8516
- cpufreq: mediatek: Raise proc and sram max voltage for MT7622/7623
- cpufreq: qcom-cpufreq-hw: Revert adding cpufreq qos
- arm64: dts: mediatek: mt8192-asurada: Fix voltage constraint for Vgpu
- ACPI: VIOT: Initialize the correct IOMMU fwspec
- drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe()
- drm/mediatek: dp: Change the aux retries times when receiving AUX_DEFER
- mailbox: mpfs: switch to txdone_poll
- soc: bcm: brcmstb: biuctrl: fix of_iomap leak
- soc: renesas: renesas-soc: Release 'chipid' from ioremap()
- gpu: host1x: Fix potential double free if IOMMU is disabled
- gpu: host1x: Fix memory leak of device names
- arm64: dts: qcom: sc7280-herobrine-villager: correct trackpad supply
- arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply
- arm64: dts: qcom: sc7180-trogdor-pazquel: correct trackpad supply
- arm64: dts: qcom: msm8998-oneplus-cheeseburger: revert "fix backlight pin
function"
- arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator
- arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994
regulator
- arm64: dts: qcom: apq8096-db820c: drop unit address from PMI8994 regulator
- drm/ttm/pool: Fix ttm_pool_alloc error path
- regulator: core: Consistently set mutex_owner when using
ww_mutex_lock_slow()
- regulator: core: Avoid lockdep reports when resolving supplies
- x86/apic: Fix atomic update of offset in reserve_eilvt_offset()
- soc: qcom: rpmh-rsc: Support RSC v3 minor versions
- arm64: dts: qcom: msm8994-angler: Fix cont_splash_mem mapping
- arm64: dts: qcom: msm8994-angler: removed clash with smem_region
- arm64: dts: sc7180: Rename qspi data12 as data23
- arm64: dts: sc7280: Rename qspi data12 as data23
- arm64: dts: sdm845: Rename qspi data12 as data23
- media: mtk-jpeg: Fixes jpeghw multi-core judgement
- media: mtk-jpeg: Fixes jpeg enc&dec worker sw flow
- media: mediatek: vcodec: Use 4K frame size when supported by stateful
decoder
- media: mediatek: vcodec: Make MM21 the default capture format
- media: mediatek: vcodec: Force capture queue format to MM21
- media: mediatek: vcodec: add params to record lat and core lat_buf count
- media: mediatek: vcodec: using each instance lat_buf count replace core
ready list
- media: mediatek: vcodec: move lat_buf to the top of core list
- media: mediatek: vcodec: add core decode done event
- media: mediatek: vcodec: remove unused lat_buf
- media: mediatek: vcodec: making sure queue_work successfully
- media: mediatek: vcodec: change lat thread decode error condition
- media: cedrus: fix use after free bug in cedrus_remove due to race condition
- media: rkvdec: fix use after free bug in rkvdec_remove
- platform/x86/amd/pmf: Move out of BIOS SMN pair for driver probe
- platform/x86/amd: pmc: Don't try to read SMU version on Picasso
- platform/x86/amd: pmc: Hide SMU version and program attributes for Picasso
- platform/x86/amd: pmc: Don't dump data after resume from s0i3 on picasso
- platform/x86/amd: pmc: Move idlemask check into `amd_pmc_idlemask_read`
- platform/x86/amd: pmc: Utilize SMN index 0 for driver probe
- platform/x86/amd: pmc: Move out of BIOS SMN pair for STB init
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- media: saa7134: fix use after free bug in saa7134_finidev due to race
condition
- media: platform: mtk-mdp3: fix potential frame size overflow in
mdp_try_fmt_mplane()
- media: vsp1: Replace vb2_is_streaming() with vb2_start_streaming_called()
- platform: Provide a remove callback that returns no value
- media: rcar_fdp1: Convert to platform remove callback returning void
- media: rcar_fdp1: Fix refcount leak in probe and remove function
- media: v4l: async: Return async sub-devices to subnotifier list
- media: hi846: Fix memleak in hi846_init_controls()
- drm/amd/display: Fix potential null dereference
- media: rc: gpio-ir-recv: Fix support for wake-up
- media: venus: dec: Fix handling of the start cmd
- media: venus: dec: Fix capture formats enumeration order
- regulator: stm32-pwr: fix of_iomap leak
- x86/ioapic: Don't return 0 from arch_dynirq_lower_bound()
- arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step
- perf/arm-cmn: Fix port detection for CMN-700
- media: mediatek: vcodec: fix decoder disable pm crash
- media: mediatek: vcodec: add remove function for decoder platform driver
- debugobject: Prevent init race with static objects
- drm/i915: Make intel_get_crtc_new_encoder() less oopsy
- tick/common: Align tick period with the HZ tick.
- ACPI: bus: Ensure that notify handlers are not running after removal
- cpufreq: use correct unit when verify cur freq
- rpmsg: glink: Propagate TX failures in intentless mode as well
- hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E
- platform/chrome: cros_typec_switch: Add missing fwnode_handle_put()
- wifi: ath6kl: minor fix for allocation size
- wifi: ath9k: hif_usb: fix memory leak of remain_skbs
- wifi: ath11k: Use platform_get_irq() to get the interrupt
- wifi: ath5k: Use platform_get_irq() to get the interrupt
- wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list()
- wifi: ath11k: fix SAC bug on peer addition with sta band migration
- wifi: rtl8xxxu: Remove always true condition in rtl8xxxu_print_chipinfo
- wifi: brcmfmac: support CQM RSSI notification with older firmware
- wifi: ath6kl: reduce WARN to dev_dbg() in callback
- tools: bpftool: Remove invalid \' json escape
- wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser()
- wifi: rtw88: mac: Return the original error from rtw_mac_power_switch()
- bpf: take into account liveness when propagating precision
- bpf: fix precision propagation verbose logging
- crypto: qat - fix concurrency issue when device state changes
- scm: fix MSG_CTRUNC setting condition for SO_PASSSEC
- wifi: ath11k: fix deinitialization of firmware resources
- selftests/bpf: Fix a fd leak in an error path in network_helpers.c
- bpf: Remove misleading spec_v1 check on var-offset stack read
- net: pcs: xpcs: remove double-read of link state when using AN
- vlan: partially enable SIOCSHWTSTAMP in container
- net/packet: annotate accesses to po->xmit
- net/packet: convert po->origdev to an atomic flag
- net/packet: convert po->auxdata to an atomic flag
- libbpf: Fix ld_imm64 copy logic for ksym in light skeleton.
- net: dsa: qca8k: remove assignment of an_enabled in pcs_get_state()
- netfilter: keep conntrack reference until IPsecv6 policy checks are done
- bpf: return long from bpf_map_ops funcs
- bpf: Fix __reg_bound_offset 64->32 var_off subreg propagation
- scsi: target: Move sess cmd counter to new struct
- scsi: target: Move cmd counter allocation
- scsi: target: Pass in cmd counter to use during cmd setup
- scsi: target: iscsit: isert: Alloc per conn cmd counter
- scsi: target: iscsit: Stop/wait on cmds during conn close
- scsi: target: Fix multiple LUN_RESET handling
- scsi: target: iscsit: Fix TAS handling during conn cleanup
- scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS
- net: sunhme: Fix uninitialized return code
- f2fs: handle dqget error in f2fs_transfer_project_quota()
- f2fs: fix uninitialized skipped_gc_rwsem
- f2fs: apply zone capacity to all zone type
- f2fs: compress: fix to call f2fs_wait_on_page_writeback() in
f2fs_write_raw_pages()
- f2fs: fix scheduling while atomic in decompression path
- crypto: caam - Clear some memory in instantiate_rng
- crypto: sa2ul - Select CRYPTO_DES
- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg()
- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg()
- scsi: hisi_sas: Handle NCQ error when IPTT is valid
- wifi: rt2x00: Fix memory leak when handling surveys
- bpf: rename list_head -> graph_root in field info types
- bpf: Add __bpf_kfunc tag for marking kernel functions as kfuncs
- bpf: Migrate release_on_unlock logic to non-owning ref semantics
- bpf: Add basic bpf_rb_{root,node} support
- bpf: Add bpf_rbtree_{add,remove,first} kfuncs
- bpf: Add support for bpf_rb_root and bpf_rb_node in kfunc args
- bpf: Add callback validation to kfunc verifier logic
- bpf: factor out fetching basic kfunc metadata
- bpf: Fix struct_meta lookup for bpf_obj_free_fields kfunc call
- f2fs: fix iostat lock protection
- net: qrtr: correct types of trace event parameters
- selftests: xsk: Use correct UMEM size in testapp_invalid_desc
- selftests: xsk: Disable IPv6 on VETH1
- selftests: xsk: Deflakify STATS_RX_DROPPED test
- selftests/bpf: Wait for receive in cg_storage_multi test
- bpftool: Fix bug for long instructions in program CFG dumps
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- xsk: Fix unaligned descriptor validation
- f2fs: fix to avoid use-after-free for cached IPU bio
- wifi: iwlwifi: fix duplicate entry in iwl_dev_info_table
- bpf/btf: Fix is_int_ptr()
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- net: ethernet: stmmac: dwmac-rk: rework optional clock handling
- net: ethernet: stmmac: dwmac-rk: fix optional phy regulator handling
- wifi: ath11k: fix writing to unintended memory region
- bpf, sockmap: fix deadlocks in the sockhash and sockmap
- nvmet: fix error handling in nvmet_execute_identify_cns_cs_ns()
- nvmet: fix Identify Namespace handling
- nvmet: fix Identify Controller handling
- nvmet: fix Identify Active Namespace ID list handling
- nvmet: fix I/O Command Set specific Identify Controller
- nvme: fix async event trace event
- nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage"
- selftests/bpf: Use read_perf_max_sample_freq() in perf_event_stackmap
- selftests/bpf: Fix leaked bpf_link in get_stackid_cannot_attach
- blk-mq: don't plug for head insertions in blk_execute_rq_nowait
- wifi: iwlwifi: debug: fix crash in __iwl_err()
- wifi: iwlwifi: mvm: fix A-MSDU checks
- wifi: iwlwifi: trans: don't trigger d3 interrupt twice
- wifi: iwlwifi: mvm: don't set CHECKSUM_COMPLETE for unsupported protocols
- bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap
- f2fs: fix to check return value of f2fs_do_truncate_blocks()
- f2fs: fix to check return value of inc_valid_block_count()
- md/raid10: fix task hung in raid10d
- md/raid10: fix leak of 'r10bio->remaining' for recovery
- md/raid10: fix memleak for 'conf->bio_split'
- md/raid10: fix memleak of md thread
- md/raid10: don't call bio_start_io_acct twice for bio which experienced read
error
- wifi: iwlwifi: mvm: don't drop unencrypted MCAST frames
- wifi: iwlwifi: yoyo: skip dump correctly on hw error
- wifi: iwlwifi: yoyo: Fix possible division by zero
- wifi: iwlwifi: mvm: initialize seq variable
- wifi: iwlwifi: fw: move memset before early return
- jdb2: Don't refuse invalidation of already invalidated buffers
- io_uring/rsrc: use nospec'ed indexes
- wifi: iwlwifi: make the loop for card preparation effective
- wifi: mt76: remove redundent MCU_UNI_CMD_* definitions
- wifi: mt76: mt7921: fix wrong command to set STA channel
- wifi: mt76: mt7921: fix PCI DMA hang after reboot
- wifi: mt76: mt7915: unlock on error in mt7915_thermal_temp_store()
- wifi: mt76: mt7996: fix radiotap bitfield
- wifi: mt76: mt7915: expose device tree match table
- wifi: mt76: mt7915: add error message in
mt7915_thermal_set_cur_throttle_state()
- wifi: mt76: mt7915: rework init flow in mt7915_thermal_init()
- wifi: mt76: handle failure of vzalloc in mt7615_coredump_work
- wifi: mt76: mt7996: let non-bufferable MMPDUs use correct hw queue
- wifi: mt76: mt7996: fix pointer calculation in ie countdown event
- wifi: mt76: mt7996: fix eeprom tx path bitfields
- wifi: mt76: add flexible polling wait-interval support
- wifi: mt76: mt7921e: fix probe timeout after reboot
- wifi: mt76: fix 6GHz high channel not be scanned
- mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data
- wifi: mt76: mt7921: fix missing unwind goto in `mt7921u_probe`
- wifi: mt76: mt7921e: improve reliability of dma reset
- wifi: mt76: mt7921e: stop chip reset worker in unregister hook
- wifi: mt76: connac: fix txd multicast rate setting
- wifi: iwlwifi: mvm: check firmware response size
- netfilter: conntrack: restore IPS_CONFIRMED out of
nf_conntrack_hash_check_insert()
- wifi: mt76: mt7996: rely on mt76_connac_txp_common structure
- wifi: mt76: mt7996: fill txd by host driver
- netfilter: conntrack: fix wrong ct->timeout value
- wifi: iwlwifi: fw: fix memory leak in debugfs
- ixgbe: Allow flow hash to be set via ethtool
- ixgbe: Enable setting RSS table to default values
- net/mlx5e: Don't clone flow post action attributes second time
- net/mlx5: E-switch, Create per vport table based on devlink encap mode
- net/mlx5: E-switch, Don't destroy indirect table in split rule
- net/mlx5e: Fix error flow in representor failing to add vport rx rule
- net/mlx5: Remove "recovery" arg from mlx5_load_one() function
- net/mlx5: Suspend auxiliary devices only in case of PCI device suspend
- Revert "net/mlx5: Remove "recovery" arg from mlx5_load_one() function"
- net/mlx5: Use recovery timeout on sync reset flow
- net/mlx5e: Nullify table pointer when failing to create
- Revert "net/mlx5e: Don't use termination table when redundant"
- net: stmmac:fix system hang when setting up tag_8021q VLAN for DSA ports
- bpf: Fix race between btf_put and btf_idr walk.
- bpf: Don't EFAULT for getsockopt with optval=NULL
- netfilter: nf_tables: don't write table validation state without mutex
- net: dpaa: Fix uninitialized variable in dpaa_stop()
- net/sched: sch_fq: fix integer overflow of "credit"
- ipv4: Fix potential uninit variable access bug in __ip_make_skb()
- rxrpc: Fix error when reading rxrpc tokens
- Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to
unfinished work"
- netlink: Use copy_to_user() for optval in netlink_getsockopt().
- net: amd: Fix link leak when verifying config failed
- tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp.
- ipmi: ASPEED_BT_IPMI_BMC: select REGMAP_MMIO instead of depending on it
- ASoC: cs35l41: Only disable internal boost
- drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler()
- drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler()
- pstore: Revert pmsg_lock back to a normal mutex
- usb: host: xhci-rcar: remove leftover quirk handling
- usb: dwc3: gadget: Change condition for processing suspend event
- serial: stm32: Re-assert RTS/DE GPIO in RS485 mode only if more data are
transmitted
- fpga: bridge: fix kernel-doc parameter description
- iommufd/selftest: Catch overflow of uptr and length
- iio: light: max44009: add missing OF device matching
- serial: 8250_bcm7271: Fix arbitration handling
- spi: atmel-quadspi: Don't leak clk enable count in pm resume
- spi: atmel-quadspi: Free resources even if runtime resume failed in
.remove()
- spi: imx: Don't skip cleanup in remove's error path
- interconnect: qcom: drop obsolete OSM_L3/EPSS defines
- interconnect: qcom: osm-l3: drop unuserd header inclusion
- spi: f_ospi: Add missing spi_mem_default_supports_op() helper
- module/decompress: Never use kunmap() for local un-mappings
- usb: gadget: udc: renesas_usb3: Fix use after free bug in
renesas_usb3_remove due to race condition
- ASoC: soc-compress: Inherit atomicity from DAI link for Compress FE
- PCI: imx6: Install the fault handler only on compatible match
- ASoC: es8316: Handle optional IRQ assignment
- linux/vt_buffer.h: allow either builtin or modular for macros
- spi: qup: Don't skip cleanup in remove's error path
- interconnect: qcom: rpm: drop bogus pm domain attach
- spi: mchp-pci1xxxx: Fix length of SPI transactions not set properly in
driver
- spi: mchp-pci1xxxx: Fix SPI transactions not working after suspend and
resume
- spi: fsl-spi: Fix CPM/QE mode Litte Endian
- vmci_host: fix a race condition in vmci_host_poll() causing GPF
- of: Fix modalias string generation
- PCI/EDR: Clear Device Status after EDR error recovery
- ia64: mm/contig: fix section mismatch warning/error
- ia64: salinfo: placate defined-but-not-used warning
- scripts/gdb: bail early if there are no clocks
- scripts/gdb: bail early if there are no generic PD
- HID: amd_sfh: Correct the structure fields
- HID: amd_sfh: Correct the sensor enable and disable command
- HID: amd_sfh: Fix illuminance value
- HID: amd_sfh: Add support for shutdown operation
- HID: amd_sfh: Correct the stop all command
- HID: amd_sfh: Increase sensor command timeout for SFH1.1
- HID: amd_sfh: Handle "no sensors" enabled for SFH1.1
- cacheinfo: Check sib_leaf in cache_leaves_are_shared()
- coresight: etm_pmu: Set the module field
- drm/panel: novatek-nt35950: Improve error handling
- ASoC: fsl_mqs: move of_node_put() to the correct location
- PCI/PM: Extend D3hot delay for NVIDIA HDA controllers
- drm/panel: novatek-nt35950: Only unregister DSI1 if it exists
- spi: cadence-quadspi: fix suspend-resume implementations
- i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path
- i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path
- scripts/gdb: raise error with reduced debugging information
- uapi/linux/const.h: prefer ISO-friendly __typeof__
- sh: sq: Fix incorrect element size for allocating bitmap buffer
- usb: gadget: tegra-xudc: Fix crash in vbus_draw
- usb: chipidea: fix missing goto in `ci_hdrc_probe`
- usb: mtu3: fix kernel panic at qmu transfer done irq handler
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
- tty: serial: fsl_lpuart: adjust buffer length to the intended size
- serial: 8250: Add missing wakeup event reporting
- spi: cadence-quadspi: use macro DEFINE_SIMPLE_DEV_PM_OPS
- staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
- spmi: Add a check for remove callback when removing a SPMI driver
- virtio_ring: don't update event idx on get_buf
- fbdev: mmp: Fix deferred clk handling in mmphw_probe()
- selftests/powerpc/pmu: Fix sample field check in the
mmcra_thresh_marked_sample_test
- macintosh/windfarm_smu_sat: Add missing of_node_put()
- powerpc/perf: Properly detect mpc7450 family
- powerpc/mpc512x: fix resource printk format warning
- powerpc/wii: fix resource printk format warnings
- powerpc/sysdev/tsi108: fix resource printk format warnings
- macintosh: via-pmu-led: requires ATA to be set
- powerpc/rtas: use memmove for potentially overlapping buffer copy
- sched/fair: Fix inaccurate tally of ttwu_move_affine
- perf/core: Fix hardlockup failure caused by perf throttle
- Revert "objtool: Support addition to set CFA base"
- riscv: Fix ptdump when KASAN is enabled
- sched/rt: Fix bad task migration for rt tasks
- rv: Fix addition on an uninitialized variable 'run'
- tracing/user_events: Ensure write index cannot be negative
- clk: at91: clk-sam9x60-pll: fix return value check
- IB/hifi1: add a null check of kzalloc_node in hfi1_ipoib_txreq_init
- RDMA/siw: Fix potential page_array out of range access
- clk: mediatek: mt2712: Add error handling to clk_mt2712_apmixed_probe()
- clk: mediatek: Consistently use GATE_MTK() macro
- clk: mediatek: mt7622: Properly use CLK_IS_CRITICAL flag
- clk: mediatek: mt8135: Properly use CLK_IS_CRITICAL flag
- RDMA/rdmavt: Delete unnecessary NULL check
- clk: mediatek: clk-pllfh: fix missing of_node_put() in fhctl_parse_dt()
- clk: qcom: gcc-qcm2290: Fix up gcc_sdcc2_apps_clk_src
- workqueue: Fix hung time report of worker pools
- rtc: omap: include header for omap_rtc_power_off_program prototype
- RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()
- rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time
- rtc: k3: handle errors while enabling wake irq
- RDMA/rxe: Replace exists by rxe in rxe.c
- RDMA/erdma: Use fixed hardware page size
- fs/ntfs3: Fix memory leak if ntfs_read_mft failed
- fs/ntfs3: Add check for kmemdup
- fs/ntfs3: Fix OOB read in indx_insert_into_buffer
- fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de()
- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN
- RDMA/rxe: Remove tasklet call from rxe_cq.c
- power: supply: generic-adc-battery: fix unit scaling
- clk: add missing of_node_put() in "assigned-clocks" property parsing
- RDMA/siw: Remove namespace check from siw_netdev_event()
- clk: qcom: gcc-sm6115: Mark RCGs shared where applicable
- power: supply: rk817: Fix low SOC bugs
- RDMA/cm: Trace icm_send_rej event before the cm state is reset
- RDMA/srpt: Add a check for valid 'mad_agent' pointer
- IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order
- IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests
- clk: imx: fracn-gppll: fix the rate table
- clk: imx: fracn-gppll: disable hardware select control
- clk: imx: imx8ulp: Fix XBAR_DIVBUS and AD_SLOW clock parents
- NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease
- iommu/amd: Set page size bitmap during V2 domain allocation
- s390/checksum: always use cksm instruction
- clk: qcom: lpasscc-sc7280: Skip qdsp6ss clock registration
- clk: qcom: lpassaudiocc-sc7280: Add required gdsc power domain clks in
lpass_cc_sc7280_desc
- clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling
- clk: qcom: dispcc-qcm2290: get rid of test clock
- clk: qcom: dispcc-qcm2290: Remove inexistent DSI1PHY clk
- Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe
- swiotlb: relocate PageHighMem test away from rmem_swiotlb_setup
- swiotlb: fix debugfs reporting of reserved memory pools
- RDMA/rxe: Convert tasklet args to queue pairs
- RDMA/rxe: Remove __rxe_do_task()
- RDMA/rxe: Fix the error "trying to register non-static key in
rxe_cleanup_task"
- RDMA/mlx5: Check pcie_relaxed_ordering_enabled() in UMR
- RDMA/mlx5: Fix flow counter query via DEVX
- SUNRPC: remove the maximum number of retries in call_bind_status
- RDMA/mlx5: Use correct device num_ports when modify DC
- clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when
init fails
- openrisc: Properly store r31 to pt_regs on unhandled exceptions
- timekeeping: Fix references to nonexistent ktime_get_fast_ns()
- SMB3: Add missing locks to protect deferred close file list
- SMB3: Close deferred file handles in case of handle lease break
- ext4: fix i_disksize exceeding i_size problem in paritally written case
- ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline
- pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration
- pinctrl: renesas: r8a779f0: Fix tsn1_avtp_pps pin group
- pinctrl: renesas: r8a779g0: Fix Group 4/5 pin functions
- pinctrl: renesas: r8a779g0: Fix Group 6/7 pin functions
- pinctrl: renesas: r8a779g0: Fix ERROROUTC function names
- leds: TI_LMU_COMMON: select REGMAP instead of depending on it
- pinctrl: ralink: reintroduce ralink,rt2880-pinmux compatible string
- dmaengine: mv_xor_v2: Fix an error code.
- leds: tca6507: Fix error handling of using fwnode_property_read_string
- pwm: mtk-disp: Disable shadow registers before setting backlight values
- pwm: mtk-disp: Configure double buffering before reading in .get_state()
- soundwire: intel: don't save hw_params for use in prepare
- phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and
ulpi_port
- phy: ti: j721e-wiz: Fix unreachable code in wiz_mode_select()
- dma: gpi: remove spurious unlock in gpi_ch_init
- dmaengine: dw-edma: Fix to change for continuous transfer
- dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing
- dmaengine: at_xdmac: do not enable all cyclic channels
- pinctrl-bcm2835.c: fix race condition when setting gpio dir
- thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in
mtk_thermal_probe
- mfd: tqmx86: Do not access I2C_DETECT register through io_base
- mfd: tqmx86: Specify IO port register range more precisely
- mfd: tqmx86: Correct board names for TQMxE39x
- mfd: ocelot-spi: Fix unsupported bulk read
- mfd: arizona-spi: Add missing MODULE_DEVICE_TABLE
- hte: tegra: fix 'struct of_device_id' build error
- hte: tegra-194: Fix off by one in tegra_hte_map_to_line_id()
- ACPI: PM: Do not turn of unused power resources on the Toshiba Click Mini
- PM: hibernate: Turn snapshot_test into global variable
- PM: hibernate: Do not get block device exclusively in test_resume mode
- afs: Fix updating of i_size with dv jump from server
- afs: Fix getattr to report server i_size on dirs, not local size
- afs: Avoid endless loop if file is larger than expected
- parisc: Fix argument pointer in real64_call_asm()
- parisc: Ensure page alignment in flush functions
- ALSA: usb-audio: Add quirk for Pioneer DDJ-800
- ALSA: hda/realtek: Add quirk for ASUS UM3402YAR using CS35L41
- ALSA: hda/realtek: support HP Pavilion Aero 13-be0xxx Mute LED
- nilfs2: do not write dirty data after degenerating to read-only
- nilfs2: fix infinite loop in nilfs_mdt_get_block()
- mm: do not reclaim private data from pinned page
- drbd: correctly submit flush bio on barrier
- md/raid10: fix null-ptr-deref in raid10_sync_request
- md/raid5: Improve performance for sequential IO
- kasan: hw_tags: avoid invalid virt_to_page()
- mtd: core: provide unique name for nvmem device, take two
- mtd: core: fix nvmem error reporting
- mtd: core: fix error path for nvmem provider
- mtd: spi-nor: core: Update flash's current address mode when changing
address mode
- drivers: remoteproc: xilinx: Fix carveout names
- mailbox: zynqmp: Fix IPI isr handling
- kcsan: Avoid READ_ONCE() in read_instrumented_memory()
- mailbox: zynqmp: Fix typo in IPI documentation
- nfp: fix incorrect pointer deference when offloading IPsec with bonding
- wifi: rtl8xxxu: RTL8192EU always needs full init
- wifi: rtw88: rtw8821c: Fix rfe_option field width
- wifi: rtw89: fix potential race condition between napi_init and napi_enable
- clk: microchip: fix potential UAF in auxdev release callback
- clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent
- scripts/gdb: fix lx-timerlist for Python3
- btrfs: scrub: reject unsupported scrub flags
- s390/dasd: fix hanging blockdevice after request requeue
- ia64: fix an addr to taddr in huge_pte_offset()
- mm/mempolicy: correctly update prev when policy is equal on mbind
- vhost_vdpa: fix unmap process in no-batch mode
- dm verity: fix error handling for check_at_most_once on FEC
- dm clone: call kmem_cache_destroy() in dm_clone_init() error path
- dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path
- dm flakey: fix a crash with invalid table line
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- dm: don't lock fs when the map is NULL in process of resume
- blk-iocost: avoid 64-bit division in ioc_timer_fn
- cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname
- cifs: protect session status check in smb2_reconnect()
- cifs: fix sharing of DFS connections
- cifs: fix potential race when tree connecting ipc
- cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath
- thunderbolt: Use correct type in tb_port_is_clx_enabled() prototype
- perf auxtrace: Fix address filter entire kernel size
- perf intel-pt: Fix CYC timestamps after standalone CBR
- i40e: Remove unused i40e status codes
- i40e: Remove string printing for i40e_status
- i40e: use int for i40e_status
- debugobject: Ensure pool refill (again)
- Linux 6.2.15
* Lunar update: v6.2.14 upstream stable release (LP: #2025066)
- rust: arch/um: Disable FP/SIMD instruction to match x86
- um: Only disable SSE on clang to work around old GCC bugs
- rcu/kvfree: Avoid freeing new kfree_rcu() memory after old grace period
- mm/mempolicy: fix use-after-free of VMA iterator
- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
- gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xNU
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- wifi: brcmfmac: add Cypress 43439 SDIO ids
- btrfs: fix uninitialized variable warnings
- USB: serial: option: add UNISOC vendor and TOZED LT70C product
- driver core: Don't require dynamic_debug for initcall_debug probe timing
- riscv: Move early dtb mapping into the fixmap region
- riscv: Do not set initial_boot_params to the linear address of the dtb
- riscv: No need to relocate the dtb as it lies in the fixmap region
- Linux 6.2.14
* CVE-2023-35001
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
* CVE-2023-31248
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
* CVE-2023-3389
- io_uring/poll: serialize poll linked timer start with poll removal
* CVE-2023-3269
- mm: introduce new 'lock_mm_and_find_vma()' page fault helper
- mm: make the page fault mmap locking killable
- arm64/mm: Convert to using lock_mm_and_find_vma()
- powerpc/mm: Convert to using lock_mm_and_find_vma()
- mips/mm: Convert to using lock_mm_and_find_vma()
- riscv/mm: Convert to using lock_mm_and_find_vma()
- arm/mm: Convert to using lock_mm_and_find_vma()
- mm/fault: convert remaining simple cases to lock_mm_and_find_vma()
- powerpc/mm: convert coprocessor fault to lock_mm_and_find_vma()
- mm: make find_extend_vma() fail if write lock not held
- execve: expand new process stack manually ahead of time
- mm: always expand the stack with the mmap write lock held
- [CONFIG]: Set CONFIG_LOCK_MM_AND_FIND_VMA
* CVE-2023-3390
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
* CVE-2023-3141
- memstick: r592: Fix UAF bug in r592_remove due to race condition
* CVE-2023-3090
- ipvlan:Fix out-of-bounds caused by unclear skb->cb
linux-starfive (6.2.0-1001.1) lunar; urgency=medium
* lunar/linux-starfive: 6.2.0-1001.1 -proposed tracker (LP: #2025457)
[ Ubuntu: 6.2.0-25.25 ]
* Packaging resync (LP: #1786013)
- [Packaging] resync update-dkms-versions helper
- debian/dkms-versions -- update from kernel-versions (main/2023.06.12)
* Enable StarFive VisionFive board (LP: #1975580)
- [Packaging] Create starfive flavour
- dt-bindings: hwmon: Add starfive,jh71x0-temp
- hwmon: (sfctemp) Add StarFive JH71x0 temperature sensor
- dt-bindings: watchdog: Add watchdog for StarFive JH7100 and JH7110
- drivers: watchdog: Add StarFive Watchdog driver
- SAUCE: riscv: dts: starfive: jh7100: Add watchdog node
- dmaengine: dw-axi-dmac: Add support for StarFive JH7110 DMA
- dmaengine: dw-axi-dmac: Increase polling time to DMA transmission completion
status
- SAUCE: riscv: dts: starfive: Group tuples in interrupt properties
- SAUCE: RISC-V: Mark StarFive JH7100 as having non-coherent DMAs
- SAUCE: clk: starfive: Add flags argument to JH71X0__MUX macro
- SAUCE: clk: starfive: jh7100: Add CLK_SET_RATE_PARENT to gmac_tx
- SAUCE: RISC-V: Add StarFive JH7100 audio clock node
- SAUCE: dt-bindings: reset: Add StarFive JH7100 audio reset definitions
- SAUCE: dt-bindings: reset: Add starfive,jh7100-audrst bindings
- SAUCE: reset: starfive: Add JH7100 audio reset driver
- SAUCE: RISC-V: Add StarFive JH7100 audio reset node
- SAUCE: clk: starfive: jh7100: Keep more clocks alive
- SAUCE: pinctrl: starfive: Reset pinmux settings
- SAUCE: serial: 8250_dw: Add starfive,jh7100-hsuart compatible
- SAUCE: hwrng: Add StarFive JH7100 Random Number Generator driver
- SAUCE: dt-bindings: riscv: sifive-ccache: Support StarFive JH71x0 SoCs
- SAUCE: soc: sifive: ccache: Add StarFive JH7100 support
- SAUCE: dt-bindings: riscv: sifive-ccache: Add 'uncached-offset' property
- SAUCE: soc: sifive: ccache: Add non-coherent DMA handling
- SAUCE: riscv: Implement non-coherent DMA support via SiFive cache flushing
- SAUCE: power: reset: tps65086: Allow building as a module
- SAUCE: drivers/tty/serial/8250: update driver for JH7100
- SAUCE: pwm: sifive-ptc: Add SiFive PWM PTC driver
- SAUCE: [WIP] dt-bindings: dma: dw-axi-dmac: Increase DMA channel limit to 16
- SAUCE: dmaengine: dw-axi-dmac: Handle xfer start while non-idle
- SAUCE: dmaengine: dw-axi-dmac: Add StarFive JH7100 support
- SAUCE: net: phy: motorcomm: Disable rgmii rx delay
- SAUCE: dt-bindings: mfd: syscon: Add StarFive JH7100 sysmain compatible
- SAUCE: net: stmmac: dwmac-starfive: Add JH7100 support
- SAUCE: net: stmmac: use GFP_DMA32
- SAUCE: ASoC: starfive: Add StarFive JH7100 audio drivers
- SAUCE: drm/starfive: Add StarFive drm driver
- SAUCE: [WIP] drm/starfive: Support DRM_FORMAT_XRGB8888
- SAUCE: drm/i2c/tda998x: Hardcode register values for Starlight
- SAUCE: nvdla: add NVDLA driver
- SAUCE: spi: cadence-quadspi: Allow compilation on RISC-V
- SAUCE: riscv: dts: Add full JH7100, Starlight and VisionFive support
- [Config] starfive: updateconfigs for StarFive JH7100 support
* Enable StarFive VisionFive 2 board (LP: #2013232)
- net: phy: motorcomm: change the phy id of yt8521 and yt8531s to lowercase
- dt-bindings: net: Add Motorcomm yt8xxx ethernet phy
- net: phy: Add BIT macro for Motorcomm yt8521/yt8531 gigabit ethernet phy
- net: phy: Add dts support for Motorcomm yt8521 gigabit ethernet phy
- net: phy: Add dts support for Motorcomm yt8531s gigabit ethernet phy
- net: phy: Add driver for Motorcomm yt8531 gigabit ethernet phy
- net: phy: motorcomm: uninitialized variables in yt8531_link_change_notify()
- dt-bindings: pinctrl: Add StarFive JH7110 sys pinctrl
- dt-bindings: pinctrl: Add StarFive JH7110 aon pinctrl
- pinctrl: starfive: Add StarFive JH7110 sys controller driver
- pinctrl: starfive: Add StarFive JH7110 aon controller driver
- dt-bindings: mmc: Add StarFive MMC module
- mmc: starfive: Add sdio/emmc driver support
- dt-bindings: riscv: Add StarFive JH7110 SoC and VisionFive 2 board
- dt-bindings: riscv: correct starfive visionfive 2 compatibles
- dt-bindings: sifive,ccache0: Support StarFive JH7110 SoC
- soc: sifive: ccache: Add StarFive JH7110 support
- RISC-V: introduce ARCH_FOO kconfig aliases for SOC_FOO symbols
- SAUCE: clk: starfive: Replace SOC_STARFIVE with ARCH_STARFIVE
- SAUCE: clk: starfive: Factor out common JH7100 and JH7110 code
- SAUCE: clk: starfive: Rename clk-starfive-jh7100.h to clk-starfive-jh71x0.h
- SAUCE: clk: starfive: Rename "jh7100" to "jh71x0" for the common code
- SAUCE: reset: starfive: Replace SOC_STARFIVE with ARCH_STARFIVE
- SAUCE: reset: Create subdirectory for StarFive drivers
- SAUCE: reset: starfive: Factor out common JH71X0 reset code
- SAUCE: reset: starfive: Extract the common JH71X0 reset code
- SAUCE: reset: starfive: Rename "jh7100" to "jh71x0" for the common code
- SAUCE: reset: starfive: jh71x0: Use 32bit I/O on 32bit registers
- SAUCE: dt-bindings: clock: Add StarFive JH7110 system clock and reset
generator
- SAUCE: dt-bindings: clock: Add StarFive JH7110 always-on clock and reset
generator
- SAUCE: clk: starfive: Add StarFive JH7110 system clock driver
- SAUCE: clk: starfive: Add StarFive JH7110 always-on clock driver
- SAUCE: reset: starfive: Add StarFive JH7110 reset driver
- SAUCE: dt-bindings: timer: Add StarFive JH7110 clint
- SAUCE: dt-bindings: interrupt-controller: Add StarFive JH7110 plic
- SAUCE: dt-bindings: riscv: Add SiFive S7 compatible
- SAUCE: riscv: dts: starfive: Add initial StarFive JH7110 device tree
- SAUCE: riscv: dts: starfive: Add StarFive JH7110 pin function definitions
- SAUCE: riscv: dts: starfive: Add StarFive JH7110 VisionFive 2 board device
tree
- SAUCE: dt-bindings: syscon: Add StarFive syscon doc
- SAUCE: mmc: starfive: Add initialization of prev_err
- SAUCE: riscv: dts: starfive: Add mmc node
- SAUCE: dt-bindings: net: snps,dwmac: Add dwmac-5.20 version
- SAUCE: net: stmmac: platform: Add snps,dwmac-5.20 IP compatible string
- SAUCE: dt-bindings: net: snps,dwmac: Add 'ahb' reset/reset-name
- SAUCE: dt-bindings: net: Add support StarFive dwmac
- SAUCE: net: stmmac: Add glue layer for StarFive JH7110 SoC
- SAUCE: net: stmmac: starfive_dmac: Add phy interface settings
- SAUCE: riscv: dts: starfive: jh7110: Add ethernet device nodes
- SAUCE: riscv: dts: starfive: visionfive 2: Add configuration of gmac and phy
- SAUCE: riscv: dts: starfive: Add VisionFive 2 reserved memory node
* Excessive size of kernel modules on RISC-V - modules unstripped
(LP: #1964335)
- SAUCE: scripts/Makefile.modinst discard-locals from modules
-- Dimitri John Ledkov <email address hidden> Thu, 13 Jul 2023 14:25:44 +0100
-
linux-starfive (5.19.0-1014.16) kinetic; urgency=medium
* kinetic/linux-starfive: 5.19.0-1014.16 -proposed tracker (LP: #2008303)
* Kinetic update: upstream stable patchset 2023-01-27 (LP: #2004051)
- [Config] starfive: updateconfigs for CC_HAS_ASM_GOTO_TIED_OUTPUT
- [Config] starfive: updateconfigs for INET_TABLE_PERTURB_ORDER
[ Ubuntu: 5.19.0-37.38 ]
* kinetic/linux: 5.19.0-37.38 -proposed tracker (LP: #2008305)
* XPS 9320 screen flicker on UHD panel 3840x2400 (LP: #2007516)
- SAUCE: drm/i915/display/psr: Disable PSR2 sel fetch on panel SHP 5457
* Fix speaker mute hotkey doesn't work on Dell G16 series (LP: #2003161)
- platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table
* net:cmsg_ipv6.sh from ubuntu_kernel_selftests failed with K-5.19
(LP: #2000709)
- selftest: net: Improve IPV6_TCLASS/IPV6_HOPLIMIT tests apparmor
compatibility
* rtcpie in timers from ubuntu_kernel_selftests randomly failing
(LP: #1814234)
- SAUCE: selftest: rtcpie: Force passing unreliable subtest
* CVE-2023-0469
- io_uring/filetable: fix file reference underflow
* Improve arp_ndisc_evict_nocarrier.sh test result processing (LP: #2006546)
- selftests: net: return non-zero for failures reported in
arp_ndisc_evict_nocarrier
* Make cm32181 sensor work after system suspend (LP: #1981773)
- iio: light: cm32181: Add PM support
* Fix Thunderbolt device hotplug fail when connect via thunderbolt dock
(LP: #1991366)
- PCI: Fix used_buses calculation in pci_scan_child_bus_extend()
- PCI: Pass available buses even if the bridge is already configured
- PCI: Move pci_assign_unassigned_root_bus_resources()
- PCI: Fix whitespace and indentation
- PCI: Fix typo in pci_scan_child_bus_extend()
* arp_ndisc_evict_nocarrier.sh in net from ubuntu_kernel_selftests failed on
J-oem-5.17 / K (LP: #1968310)
- selftests: net: fix cleanup_v6() for arp_ndisc_evict_nocarrier
* Screen freeze after resuming from suspend (nvme0: I/O timeout)
(LP: #1996048)
- PCI: vmd: Disable MSI remapping after suspend
* RaptorLake: Fix the Screen is shaking by onboard HDMI port in mirror mode
(LP: #1993561)
- drm/i915/display: Drop check for doublescan mode in modevalid
- drm/i915/display: Prune Interlace modes for Display >=12
* udpgro_frglist.sh in net from ubuntu_kernel_selftests failed with K-5.19
(Missing nat6to4 helper) (LP: #2000708)
- selftests/net: mv bpf/nat6to4.c to net folder
* selftests/.../nat6to4 breaks the selftests build (LP: #1996536)
- selftests: net: Add cross-compilation support for BPF programs
- selftests: net: Fix O=dir builds
* CVE-2023-0266 // CVE-2023-0266 was assigned for this issue.
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF
* CVE-2022-4382
- USB: gadgetfs: Fix race between mounting and unmounting
* CVE-2022-2196
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
* ubuntu_kernel_selftests: net:udpgso_bench.sh failed (LP: #1951447)
- selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs
* Kinetic update: upstream stable patchset 2023-02-02 (LP: #2004602)
- clk: generalize devm_clk_get() a bit
- clk: Provide new devm_clk helpers for prepared and enabled clocks
- mmc: mtk-sd: Fix missing clk_disable_unprepare in msdc_of_clock_parse()
- arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4
series
- arm: dts: rockchip: fix node name for hym8563 rtc
- arm: dts: rockchip: remove clock-frequency from rtc
- ARM: dts: rockchip: fix ir-receiver node names
- arm64: dts: rockchip: fix ir-receiver node names
- ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name
- fs: use acquire ordering in __fget_light()
- ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels
- ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation
- ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register
- spi: mediatek: Fix DEVAPC Violation at KO Remove
- ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188
- ASoC: rt711-sdca: fix the latency time of clock stop prepare state machine
transitions
- 9p/fd: Use P9_HDRSZ for header size
- regulator: slg51000: Wait after asserting CS pin
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- btrfs: send: avoid unaligned encoded writes when attempting to clone range
- ASoC: soc-pcm: Add NULL check in BE reparenting
- regulator: twl6030: fix get status of twl6032 regulators
- fbcon: Use kzalloc() in fbcon_prepare_logo()
- usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer
- 9p/xen: check logical size for buffer size
- net: usb: qmi_wwan: add u-blox 0x1342 composition
- mm/khugepaged: take the right locks for page table retraction
- mm/khugepaged: fix GUP-fast interaction by sending IPI
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- cifs: fix use-after-free caused by invalid pointer `hostname`
- xen/netback: do some code cleanup
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area()
- soundwire: intel: Initialize clock stop timeout
- media: v4l2-dv-timings.c: fix too strict blanking sanity checks
- memcg: fix possible use-after-free in memcg_write_event_control()
- mm/gup: fix gup_pud_range() for dax
- Bluetooth: btusb: Add debug message for CSR controllers
- Bluetooth: Fix crash when replugging CSR fake controllers
- net: mana: Fix race on per-CQ variable napi work_done
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field
- drm/vmwgfx: Don't use screen objects when SEV is active
- drm/amdgpu/sdma_v4_0: turn off SDMA ring buffer in the s2idle suspend
- drm/shmem-helper: Remove errant put in error path
- drm/shmem-helper: Avoid vm_open error paths
- net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing()
- HID: usbhid: Add ALWAYS_POLL quirk for some mice
- HID: hid-lg4ff: Add check for empty lbuf
- HID: core: fix shift-out-of-bounds in hid_report_raw_event
- HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- clk: Fix pointer casting to prevent oops in devm_clk_release()
- gpiolib: fix memory leak in gpiochip_setup_dev()
- netfilter: nft_set_pipapo: Actually validate intervals in fields after the
first one
- drm/vmwgfx: Fix race issue calling pin_user_pages
- ieee802154: cc2520: Fix error return code in cc2520_hw_init()
- ca8210: Fix crash by zero initializing data
- netfilter: ctnetlink: fix compilation warning after data race fixes in ct
mark
- drm/bridge: ti-sn65dsi86: Fix output polarity setting bug
- gpio: amd8111: Fix PCI device reference count leak
- e1000e: Fix TX dispatch condition
- igb: Allocate MSI-X vector when testing
- net: broadcom: Add PTP_1588_CLOCK_OPTIONAL dependency for BCMGENET under
ARCH_BCM2835
- drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- vmxnet3: correctly report encapsulated LRO packet
- vmxnet3: use correct intrConf reference when using extended queues
- Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn()
- Bluetooth: Fix not cleanup led when bt_init fails
- net: dsa: ksz: Check return value
- net: dsa: hellcreek: Check return value
- net: dsa: sja1105: Check return value
- selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- net: encx24j600: Add parentheses to fix precedence
- net: encx24j600: Fix invalid logic in reading of MISTAT register
- net: mdiobus: fwnode_mdiobus_register_phy() rework error handling
- net: mdiobus: fix double put fwnode in the error path
- octeontx2-pf: Fix potential memory leak in otx2_init_tc()
- xen-netfront: Fix NULL sring after live migration
- net: mvneta: Prevent out of bounds read in mvneta_config_rss()
- i40e: Fix not setting default xps_cpus after reset
- i40e: Fix for VF MAC address 0
- i40e: Disallow ip4 and ip6 l4_4_bytes
- NFC: nci: Bounds check struct nfc_target arrays
- nvme initialize core quirks before calling nvme_init_subsystem
- gpio/rockchip: fix refcount leak in rockchip_gpiolib_register()
- net: stmmac: fix "snps,axi-config" node property parsing
- ip_gre: do not report erspan version on GRE interface
- net: microchip: sparx5: Fix missing destroy_workqueue of mact_queue
- net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq
- net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- tipc: Fix potential OOB in tipc_link_proto_rcv()
- ipv4: Fix incorrect route flushing when source address is deleted
- ipv4: Fix incorrect route flushing when table ID 0 is used
- net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions()
- tipc: call tipc_lxc_xmit without holding node_read_lock
- ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and
dpaa2_switch_acl_entry_remove()
- net: phy: mxl-gpy: fix version reporting
- net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq()
- ipv6: avoid use-after-free in ip6_fragment()
- net: thunderbolt: fix memory leak in tbnet_open()
- net: mvneta: Fix an out of bounds check
- macsec: add missing attribute validation for offload
- s390/qeth: fix use-after-free in hsci
- can: esd_usb: Allow REC and TEC to return to zero
- io_uring: Fix a null-ptr-deref in io_tctx_exit_cb()
- madvise: use zap_page_range_single for madvise dontneed
- drm/i915: Remove non-existent pipes from bigjoiner pipe mask
- arm64: dts: rockchip: Fix gmac failure of rgmii-id from rk3566-roc-pc
- arm64: dts: rockchip: Fix i2c3 pinctrl on rk3566-roc-pc
- arm64: dts: rockchip: remove i2c5 from rk3566-roc-pc
- arm64: dts: rockchip: fix node name for hym8563 rtc
- ARM: dts: rockchip: fix adc-keys sub node names
- arm64: dts: rockchip: fix adc-keys sub node names
- LoongArch: Makefile: Use "grep -E" instead of "egrep"
- LoongArch: Combine acpi_boot_table_init() and acpi_boot_init()
- LoongArch: Set _PAGE_DIRTY only if _PAGE_MODIFIED is set in
{pmd,pte}_mkwrite()
- net/mlx5: Lag, avoid lockdep warnings
- hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing
- crypto: ccp - Add a quirk to firmware update
- soundwire: dmi-quirks: add remapping for HP Omen 16-k0005TX
- platform/x86: asus-wmi: Adjust tablet/lidflip handling to use enum
- platform/x86: asus-wmi: Add support for ROG X13 tablet mode
- fscache: Fix oops due to race with cookie_lru and use_cookie
- tmpfs: fix data loss from failed fallocate
- selftests/tls: Fix tls selftests dependency to correct algorithm
- drm/amd/display: fix array index out of bound error in DCN32 DML
- HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk
- ARM: 9278/1: kfence: only handle translation faults
- netfilter: conntrack: fix using __this_cpu_add in preemptible
- net: ethernet: ti: am65-cpsw: Fix RGMII configuration at SPEED_10
- inet: ping: use hlist_nulls rcu iterator during lookup
- Bluetooth: Remove codec id field in vendor codec definition
- Bluetooth: Fix support for Read Local Supported Codecs V2
- nfp: correct desc type when header dma len is 4096
- net: microchip: sparx5: correctly free skb in xmit
- net: wwan: iosm: fix memory leak in ipc_mux_init()
- ravb: Fix potential use-after-free in ravb_rx_gbeth()
- bonding: get correct NA dest address
- net: dsa: mv88e6xxx: accept phy-mode = "internal" for internal PHY ports
- drm/amdgpu/vcn: update vcn4 fw shared data structure
- x86/vdso: Conditionally export __vdso_sgx_enter_enclave()
- ASoC: fsl_micfil: explicitly clear software reset bit
- ASoC: fsl_micfil: explicitly clear CHnF flags
- ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx()
- libbpf: Use page size as max_entries when probing ring buffer map
- pinctrl: meditatek: Startup with the IRQs disabled
- can: sja1000: fix size of OCR_MODE_MASK define
- can: mcba_usb: Fix termination command argument
- net: fec: don't reset irq coalesce settings to defaults on "ip link up"
- ASoC: cs42l51: Correct PGA Volume minimum value
- perf: Fix perf_pending_task() UaF
- nvme-pci: clear the prp2 field when not used
- ASoC: ops: Correct bounds check for second channel on SX controls
- net: fec: properly guard irq coalesce setup
- libbpf: Fix uninitialized warning in btf_dump_dump_type_data
- udf: Discard preallocation before extending file with a hole
- udf: Fix preallocation discarding at indirect extent boundary
- udf: Do not bother looking for prealloc extents if i_lenExtents matches
i_size
- udf: Fix extending file within last block
- usb: gadget: uvc: Prevent buffer overflow in setup handler
- USB: serial: option: add Quectel EM05-G modem
- USB: serial: cp210x: add Kamstrup RF sniffer PIDs
- USB: serial: f81232: fix division by zero on line-speed change
- USB: serial: f81534: fix division by zero on line-speed change
- xhci: Apply XHCI_RESET_TO_DEFAULT quirk to ADL-N
- igb: Initialize mailbox message for VF reset
- usb: dwc3: pci: Update PCIe device ID for USB3 controller on CPU sub-system
for Raptor Lake
- selftests: net: Use "grep -E" instead of "egrep"
- net: loopback: use NET_NAME_PREDICTABLE for name_assign_type
- PCI: mt7621: Add sentinel to quirks table
- kallsyms: Make module_kallsyms_on_each_symbol generally available
- ftrace: Add support to resolve module symbols in ftrace_lookup_symbols
- bpf: Rename __bpf_kprobe_multi_cookie_cmp to bpf_kprobe_multi_addrs_cmp
- bpf: Take module reference on kprobe_multi link
- selftests/bpf: Add load_kallsyms_refresh function
- selftests/bpf: Add bpf_testmod_fentry_* functions
- selftests/bpf: Add kprobe_multi check to module attach test
- selftests/bpf: Add kprobe_multi kmod attach api tests
- usb: typec: ucsi: Resume in separate work
- KEYS: encrypted: fix key instantiation with user-provided data
* Kinetic update: upstream stable patchset 2023-02-02 (LP: #2004602) //
net:fcnal-test.sh 'nettest' command not found on F/K (LP: #2006391)
- selftests/net: Find nettest in current directory
* CVE-2023-23559
- wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid
* CVE-2023-0045
- x86/bugs: Flush IBP in ib_prctl_set()
[ Ubuntu: 5.19.0-35.36 ]
* kinetic/linux: 5.19.0-35.36 -proposed tracker (LP: #2004652)
* CVE-2023-0461
- SAUCE: Fix inet_csk_listen_start after CVE-2023-0461
[ Ubuntu: 5.19.0-34.35 ]
* kinetic/linux: 5.19.0-34.35 -proposed tracker (LP: #2004299)
* LXD containers using shiftfs on ZFS or TMPFS broken on 5.15.0-48.54
(LP: #1990849)
- [SAUCE] shiftfs: fix -EOVERFLOW inside the container
* Kinetic update: upstream stable patchset 2023-01-27 (LP: #2004051)
- ASoC: fsl_sai: use local device pointer
- serial: Add rs485_supported to uart_port
- serial: fsl_lpuart: Fill in rs485_supported
- x86/sgx: Create utility to validate user provided offset and length
- x86/sgx: Add overflow check in sgx_validate_offset_length()
- binder: validate alloc->mm in ->mmap() handler
- ceph: Use kcalloc for allocating multiple elements
- ceph: fix NULL pointer dereference for req->r_session
- wifi: mac80211: fix memory free error when registering wiphy fail
- wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support
- riscv: dts: sifive unleashed: Add PWM controlled LEDs
- audit: fix undefined behavior in bit shift for AUDIT_BIT
- wifi: airo: do not assign -1 to unsigned char
- wifi: mac80211: Fix ack frame idr leak when mesh has no route
- wifi: ath11k: Fix QCN9074 firmware boot on x86
- spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run
- selftests/bpf: Add verifier test for release_reference()
- Revert "net: macsec: report real_dev features when HW offloading is enabled"
- platform/x86: ideapad-laptop: Disable touchpad_switch
- platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1
- platform/x86/intel/pmt: Sapphire Rapids PMT errata fix
- scsi: ibmvfc: Avoid path failures during live migration
- scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC
- drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017)
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- arm64/syscall: Include asm/ptrace.h in syscall_wrapper header.
- nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked
- Revert "drm/amdgpu: Revert "drm/amdgpu: getting fan speed pwm for vega10
properly""
- ALSA: usb-audio: add quirk to fix Hamedal C20 disconnect issue
- RISC-V: vdso: Do not add missing symbols to version section in linker script
- MIPS: pic32: treat port as signed integer
- xfrm: fix "disable_policy" on ipv4 early demux
- xfrm: replay: Fix ESN wrap around for GSO
- af_key: Fix send_acquire race with pfkey_register
- ARM: dts: am335x-pcm-953: Define fixed regulators in root node
- ASoC: hdac_hda: fix hda pcm buffer overflow issue
- ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove
- ASoC: soc-pcm: Don't zero TDM masks in __soc_pcm_open()
- x86/hyperv: Restore VP assist page after cpu offlining/onlining
- scsi: storvsc: Fix handling of srb_status and capacity change events
- ASoC: max98373: Add checks for devm_kcalloc
- regulator: core: fix kobject release warning and memory leak in
regulator_register()
- spi: dw-dma: decrease reference count in dw_spi_dma_init_mfld()
- regulator: core: fix UAF in destroy_regulator()
- bus: sunxi-rsb: Remove the shutdown callback
- bus: sunxi-rsb: Support atomic transfers
- tee: optee: fix possible memory leak in optee_register_device()
- ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl
- selftests: mptcp: fix mibit vs mbit mix up
- net: liquidio: simplify if expression
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-
CAN-15975]
- net: dsa: sja1105: disallow C45 transactions on the BASE-TX MDIO bus
- nfc/nci: fix race with opening and closing
- net: pch_gbe: fix potential memleak in pch_gbe_tx_queue()
- 9p/fd: fix issue of list_del corruption in p9_fd_cancel()
- netfilter: conntrack: Fix data-races around ct mark
- netfilter: nf_tables: do not set up extensions for end interval
- iavf: Fix a crash during reset task
- iavf: Do not restart Tx queues after reset task failure
- iavf: Fix race condition between iavf_shutdown and iavf_remove
- ARM: mxs: fix memory leak in mxs_machine_init()
- ARM: dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties
- net: ethernet: mtk_eth_soc: fix error handling in mtk_open()
- net/mlx4: Check retval of mlx4_bitmap_init
- net: mvpp2: fix possible invalid pointer dereference
- net/qla3xxx: fix potential memleak in ql3xxx_send()
- octeontx2-af: debugsfs: fix pci device refcount leak
- net: pch_gbe: fix pci device refcount leak while module exiting
- nfp: fill splittable of devlink_port_attrs correctly
- nfp: add port from netdev validation for EEPROM access
- macsec: Fix invalid error code set
- Drivers: hv: vmbus: fix double free in the error path of
vmbus_add_channel_work()
- Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register()
- netfilter: ipset: regression in ip_set_hash_ip.c
- net/mlx5: Do not query pci info while pci disabled
- net/mlx5: Fix FW tracer timestamp calculation
- net/mlx5: Fix handling of entry refcount when command is not issued to FW
- tipc: set con sock in tipc_conn_alloc
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: check skb_linearize() return value in tipc_disc_rcv()
- xfrm: Fix oops in __xfrm_state_delete()
- xfrm: Fix ignored return value in xfrm6_init()
- net: wwan: iosm: use ACPI_FREE() but not kfree() in ipc_pcie_read_bios_cfg()
- sfc: fix potential memleak in __ef100_hard_start_xmit()
- net: sparx5: fix error handling in sparx5_port_open()
- net: sched: allow act_ct to be built without NF_NAT
- NFC: nci: fix memory leak in nci_rx_data_packet()
- regulator: twl6030: re-add TWL6032_SUBCLASS
- bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending()
- dma-buf: fix racing conflict of dma_heap_add()
- netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface
- netfilter: flowtable_offload: add missing locking
- fs: do not update freeing inode i_io_list
- dccp/tcp: Reset saddr on failure after inet6?_hash_connect().
- ipv4: Fix error return code in fib_table_insert()
- arcnet: fix potential memory leak in com20020_probe()
- s390/dasd: fix no record found for raw_track_access
- nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION
- nfc: st-nci: fix memory leaks in EVT_TRANSACTION
- nfc: st-nci: fix incorrect sizing calculations in EVT_TRANSACTION
- net: enetc: cache accesses to &priv->si->hw
- net: enetc: preserve TX ring priority across reconfiguration
- octeontx2-pf: Add check for devm_kcalloc
- octeontx2-af: Fix reference count issue in rvu_sdp_init()
- net: thunderx: Fix the ACPI memory leak
- s390/crashdump: fix TOD programmable field size
- lib/vdso: use "grep -E" instead of "egrep"
- [Config] updateconfigs for CC_HAS_ASM_GOTO_TIED_OUTPUT
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash
- nios2: add FORCE for vmlinuz.gz
- KVM: arm64: pkvm: Fixup boot mode to reflect that the kernel resumes from
EL1
- usb: dwc3: exynos: Fix remove() function
- usb: cdnsp: Fix issue with Clear Feature Halt Endpoint
- usb: cdnsp: fix issue with ZLP - added TD_SIZE = 1
- ext4: fix use-after-free in ext4_ext_shift_extents
- arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency
- iio: light: apds9960: fix wrong register for gesture gain
- iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails
- bus: ixp4xx: Don't touch bit 7 on IXP42x
- usb: dwc3: gadget: conditionally remove requests
- usb: dwc3: gadget: Return -ESHUTDOWN on ep disable
- usb: dwc3: gadget: Clear ep descriptor last
- nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty
- gcov: clang: fix the buffer overflow issue
- mm: vmscan: fix extreme overreclaim and swap floods
- KVM: x86: nSVM: leave nested mode on vCPU free
- KVM: x86: forcibly leave nested mode on vCPU reset
- KVM: x86: nSVM: harden svm_free_nested against freeing vmcb02 while still in
use
- KVM: x86: add kvm_leave_nested
- KVM: x86: remove exit_int_info warning in svm_handle_exit
- x86/tsx: Add a feature bit for TSX control MSR support
- x86/pm: Add enumeration check before spec MSRs save/restore setup
- x86/ioremap: Fix page aligned size calculation in __ioremap_caller()
- Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode
- ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01
- tools: iio: iio_generic_buffer: Fix read size
- serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios()
- Input: goodix - try resetting the controller when no config is set
- Input: soc_button_array - add use_low_level_irq module parameter
- Input: soc_button_array - add Acer Switch V 10 to dmi_use_low_level_irq[]
- Input: i8042 - apply probe defer to more ASUS ZenBook models
- ASoC: stm32: dfsdm: manage cb buffers cleanup
- xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too
- xen/platform-pci: add missing free_irq() in error path
- platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr()
- platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017)
- drm/amdgpu: disable BACO support on more cards
- zonefs: fix zone report size in __zonefs_io_error()
- platform/x86: hp-wmi: Ignore Smart Experience App event
- platform/x86: ideapad-laptop: Fix interrupt storm on fn-lock toggle on some
Yoga laptops
- [Config] updateconfigs for INET_TABLE_PERTURB_ORDER
- tcp: configurable source port perturb table size
- net: usb: qmi_wwan: add Telit 0x103a composition
- scsi: iscsi: Fix possible memory leak when device_register() failed
- gpu: host1x: Avoid trying to use GART on Tegra20
- dm integrity: flush the journal on suspend
- dm integrity: clear the journal on suspend
- fuse: lock inode unconditionally in fuse_fallocate()
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- wifi: wilc1000: validate number of channels
- btrfs: free btrfs_path before copying root refs to userspace
- btrfs: free btrfs_path before copying fspath to userspace
- btrfs: free btrfs_path before copying subvol info to userspace
- btrfs: zoned: fix missing endianness conversion in sb_write_pointer
- btrfs: use kvcalloc in btrfs_get_dev_zone_info
- btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs()
- drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN
- drm/amdgpu: Enable Aldebaran devices to report CU Occupancy
- drm/amdgpu: always register an MMU notifier for userptr
- drm/i915: fix TLB invalidation for Gen12 video and compute engines
- wifi: cfg80211: Fix bitrates overflow issue
- spi: tegra210-quad: Don't initialise DMA if not supported
- s390/zcrypt: fix warning about field-spanning write
- selftests/net: give more time to udpgro bg processes to complete startup
- ACPI: video: Add backlight=native DMI quirk for Dell G15 5515
- drm: panel-orientation-quirks: Add quirk for Nanote UMPC-01
- s390: always build relocatable kernel
- nvme: quiet user passthrough command errors
- net: wwan: iosm: fix kernel test robot reported errors
- drm/amdgpu: Drop eviction lock when allocating PT BO
- arm64: dts: rockchip: fix quartz64-a bluetooth configuration
- power: supply: ip5xxx: Fix integer overflow in current_now calculation
- power: supply: ab8500: Defer thermal zone probe
- arm64: dts: rockchip: Fix Pine64 Quartz4-B PMIC interrupt
- regulator: rt5759: fix OOB in validate_desc()
- spi: tegra210-quad: Fix duplicate resource error
- selftests: mptcp: gives slow test-case more time
- selftests: mptcp: run mptcp_sockopt from a new netns
- bonding: fix ICMPv6 header handling when receiving IPv6 messages
- drm/i915: Fix warn in intel_display_power_*_domain() functions
- net/mlx5: SF: Fix probing active SFs during driver probe phase
- net/mlx5: cmdif, Print info on any firmware cmd failure to tracepoint
- net/mlx5: E-Switch, Set correctly vport destination
- net/mlx5e: Offload rule only when all encaps are valid
- net: phy: at803x: fix error return code in at803x_probe()
- zonefs: Fix race between modprobe and mount
- tsnep: Fix rotten packets
- blk-mq: fix queue reference leak on blk_mq_alloc_disk_for_queue failure
- test_kprobes: fix implicit declaration error of test_kprobes
- net: ethernet: mtk_eth_soc: fix resource leak in error path
- net: dm9051: Fix missing dev_kfree_skb() in dm9051_loop_rx()
- s390/ap: fix memory leak in ap_init_qci_info()
- fscache: fix OOB Read in __fscache_acquire_volume
- net: wwan: t7xx: Fix the ACPI memory leak
- virtio_net: Fix probe failed when modprobe virtio_net
- can: gs_usb: remove dma allocations
- cifs: fix missing unlock in cifs_file_copychunk_range()
- cifs: Use after free in debug code
- iio: adc: aspeed: Remove the trim valid dts property.
- dt-bindings: iio: adc: Remove the property "aspeed,trim-data-valid"
- mm/damon/sysfs-schemes: skip stats update if the scheme directory is removed
- virt/sev-guest: Prevent IV reuse in the SNP guest driver
- zonefs: Fix active zone accounting
- spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock
- spi: spi-imx: spi_imx_transfer_one(): check for DMA transfer first
- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1
- KVM: x86/mmu: Fix race condition in direct_page_fault
- KVM: x86/xen: Only do in-kernel acceleration of hypercalls for guest CPL0
- KVM: x86/xen: Validate port number in SCHEDOP_poll
- drm/i915/gvt: Get reference to KVM iff attachment to VM is successful
- KVM: Update gfn_to_pfn_cache khva when it moves within the same page
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- mm: correctly charge compressed memory to its memcg
- LoongArch: Clear FPU/SIMD thread info flags for kernel thread
- LoongArch: Set _PAGE_DIRTY only if _PAGE_WRITE is set in {pmd,pte}_mkdirty()
- ASoC: amd: yc: Add Alienware m17 R5 AMD into DMI table
- ASoC: Intel: soc-acpi: add ES83x6 support to IceLake
- ASoC: hda: intel-dsp-config: add ES83x6 quirk for IceLake
- ASoC: SOF: ipc3-topology: use old pipeline teardown flow with SOF2.1 and
older
- Revert "tty: n_gsm: avoid call of sleeping functions from atomic context"
- Revert "tty: n_gsm: replace kicktimer with delayed_work"
- ASoC: sof_es8336: reduce pop noise on speaker
- pinctrl: qcom: sc8280xp: Rectify UFS reset pins
- platform/x86: thinkpad_acpi: Enable s2idle quirk for 21A1 machine type
- platform/x86: ideapad-laptop: Add module parameters to match DMI quirk
tables
- block: make blk_set_default_limits() private
- scsi: mpi3mr: Suppress command reply debug prints
- btrfs: free btrfs_path before copying inodes to userspace
- btrfs: do not modify log tree while holding a leaf from fs tree locked
- drm/i915/ttm: never purge busy objects
- drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code
- drm/amdgpu/psp: don't free PSP buffers on suspend
- drm/amd/amdgpu: reserve vm invalidation engine for firmware
- drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly
when the edid is read"
- btrfs: sink iterator parameter to btrfs_ioctl_logical_to_ino
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- iio: health: afe4403: Fix oob read in afe4403_read_raw
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
- iio: light: rpr0521: add missing Kconfig dependencies
- bpf, perf: Use subprog name when reporting subprog ksymbol
- scripts/faddr2line: Fix regression in name resolution on ppc64le
- ARM: at91: rm9200: fix usb device clock id
- libbpf: Handle size overflow for ringbuf mmap
- hwmon: (ltc2947) fix temperature scaling
- hwmon: (ina3221) Fix shunt sum critical calculation
- hwmon: (i5500_temp) fix missing pci_disable_device()
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- bpf: Do not copy spin lock field from user in bpf_selem_alloc
- nvmem: rmem: Fix return value check in rmem_read()
- of: property: decrement node refcount in of_fwnode_get_reference_args()
- ixgbevf: Fix resource leak in ixgbevf_init_module()
- i40e: Fix error handling in i40e_init_module()
- fm10k: Fix error handling in fm10k_init_module()
- iavf: Fix error handling in iavf_init_module()
- e100: Fix possible use after free in e100_xmit_prepare
- net/mlx5: DR, Fix uninitialized var warning
- net/mlx5: Fix uninitialized variable bug in outlen_write()
- net/mlx5e: Fix use-after-free when reverting termination table
- can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev()
- can: cc770: cc770_isa_probe(): add missing free_cc770dev()
- can: etas_es58x: es58x_init_netdev(): free netdev when register_candev()
- can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods
- can: m_can: Add check for devm_clk_get
- qlcnic: fix sleep-in-atomic-context bugs caused by msleep
- aquantia: Do not purge addresses when setting the number of rings
- wifi: cfg80211: fix buffer overflow in elem comparison
- wifi: cfg80211: don't allow multi-BSSID in S1G
- wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration
- net: phy: fix null-ptr-deref while probe() failed
- net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe()
- net: net_netdev: Fix error handling in ntb_netdev_init_module()
- net/9p: Fix a potential socket leak in p9_socket_open
- net: ethernet: nixge: fix NULL dereference
- net: wwan: iosm: fix kernel test robot reported error
- net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type
- dsa: lan9303: Correct stat name
- tipc: re-fetch skb cb after tipc_msg_validate
- net: hsr: Fix potential use-after-free
- net: mdiobus: fix unbalanced node reference count
- afs: Fix fileserver probe RTT handling
- net: tun: Fix use-after-free in tun_detach()
- packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE
- sctp: fix memory leak in sctp_stream_outq_migrate()
- net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed
- hwmon: (coretemp) Check for null before removing sysfs attrs
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()
- riscv: vdso: fix section overlapping under some conditions
- riscv: mm: Proper page permissions after initmem free
- ALSA: dice: fix regression for Lexicon I-ONIX FW810S
- error-injection: Add prompt for function error injection
- tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep"
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3
- pinctrl: intel: Save and restore pins in "direct IRQ" mode
- v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails
- net: stmmac: Set MAC's flow control register to reflect current settings
- mmc: mmc_test: Fix removal of debugfs file
- mmc: core: Fix ambiguous TRIM and DISCARD arg
- mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check
- mmc: sdhci-sprd: Fix no reset data and command after voltage switch
- mmc: sdhci: Fix voltage switch delay
- drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame
- drm/amdgpu: enable Vangogh VCN indirect sram mode
- drm/i915: Fix negative value passed as remaining time
- drm/i915: Never return 0 if not all requests retired
- tracing/osnoise: Fix duration type
- tracing: Fix race where histograms can be called before the event
- tracing: Free buffers when a used dynamic event is removed
- io_uring: cmpxchg for poll arm refs release
- io_uring/poll: fix poll_refs race with cancelation
- ASoC: ops: Fix bounds check for _sx controls
- pinctrl: single: Fix potential division by zero
- riscv: Sync efi page table's kernel mappings before switching
- riscv: fix race when vmap stack overflow
- riscv: kexec: Fixup irq controller broken in kexec crash path
- nvme: fix SRCU protection of nvme_ns_head list
- iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
- iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()
- mm: migrate: fix THP's mapcount on isolation
- Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is
enabled
- ipv4: Handle attempt to delete multipath route when fib_info contains an nh
reference
- ipv4: Fix route deletion when nexthop info is not specified
- i2c: npcm7xx: Fix error handling in npcm_i2c_init()
- i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set
- ACPI: HMAT: remove unnecessary variable initialization
- ACPI: HMAT: Fix initiator registration for single-initiator systems
- Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend"
- char: tpm: Protect tpm_pm_suspend with locks
- Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- ipc/sem: Fix dangling sem_array access in semtimedop race
- clk: samsung: exynos7885: Correct "div4" clock parents
- libbpf: Use correct return pointer in attach_raw_tp
- clocksource/drivers/arm_arch_timer: Fix XGene-1 TVAL register math error
- clk: qcom: gcc-sc8280xp: add cxo as parent for three ufs ref clks
- vfs: fix copy_file_range() averts filesystem freeze protection
- net: wwan: iosm: fix crash in peek throughput test
- net: wwan: iosm: fix incorrect skb length
- mptcp: don't orphan ssk in mptcp_close()
- mptcp: fix sleep in atomic at close time
- hwmon: (asus-ec-sensors) Add checks for devm_kcalloc
- ASoC: tlv320adc3xxx: Fix build error for implicit function declaration
- mm/damon/sysfs: fix wrong empty schemes assumption under online tuning in
damon_sysfs_set_schemes()
- i2c: Restore initial power state if probe fails
- i2c: qcom-geni: fix error return code in geni_i2c_gpi_xfer
- powerpc/bpf/32: Fix Oops on tail call tests
* 5.15.0-58.64 breaks xen bridge networking (pvh domU) (LP: #2002889)
- xen/netback: fix build warning
* NFS: client permission error after adding user to permissible group
(LP: #2003053)
- NFS: Clear the file access cache upon login
- NFS: Judge the file access cache's timestamp in rcu path
- NFS: Fix up a sparse warning
* cmsg_so_mark.sh / cmsg_time.sh / cmsg_ipv6.sh in net from
ubuntu_kernel_selftests hang with non-amd64 (LP: #2000667)
- selftests: net: fix cmsg_so_mark.sh test hang
* Set explicit CC in the headers package (LP: #1999750)
- [Packaging] Set explicit CC in the headers package
* powerpc-build in ubuntu_kernel_selftests failed on P9 with K-5.19
(LP: #2000772)
- selftests/powerpc: Avoid GCC 12 uninitialised variable warning
* [SRU] SoF for RPL platform support (LP: #1992714)
- ASoC: SOC: Intel: introduce cl_init callback
- ASoC: SOF: Intel: add MeteorLake machines
- ASoC: SOF: Intel: Add support for MeteorLake (MTL)
- ASoC: Intel: common: add ACPI matching tables for Raptor Lake
- ASoC: SOF: Intel: pci-tgl: use RPL specific firmware definitions
- [Config] Enable SND_SOC_SOF_METEORLAKE as module
* Rear Audio port sometimes has no audio output after reboot(Cirrus Logic)
(LP: #1998905)
- ALSA: hda/cirrus: Add extra 10 ms delay to allow PLL settle and lock.
* Fix SUT can't displayed after resume from WB/CB with dGFX
installed(FR:6/10)[RX6300][RX6500] (LP: #1999836)
- drm/amd/display: No display after resume from WB/CB
* commit cf58599cded35cf4affed1e659c0e2c742d3fda7 seems to be missing in
kinetic master to remove "hio" reference from Makefile (LP: #1999556)
- Ubuntu: remove leftover reference to ubuntu/hio driver
* Add additional Mediatek MT7922 BT device ID (LP: #1998885)
- Bluetooth: btusb: Add a new VID/PID 0489/e0f2 for MT7922
* Mute/mic LEDs no function on a HP platfrom (LP: #1998882)
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
* CVE-2023-0461
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/ulp: use consistent error code when blocking ULP
* CVE-2023-0179
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
* CVE-2022-20369
- NFSD: fix use-after-free in __nfs42_ssc_open()
* Kinetic update: upstream stable patchset 2023-01-23 (LP: #2003753)
- ASoC: wm5102: Revert "ASoC: wm5102: Fix PM disable depth imbalance in
wm5102_probe"
- ASoC: wm5110: Revert "ASoC: wm5110: Fix PM disable depth imbalance in
wm5110_probe"
- ASoC: wm8997: Revert "ASoC: wm8997: Fix PM disable depth imbalance in
wm8997_probe"
- ASoC: mt6660: Keep the pm_runtime enables before component stuff in
mt6660_i2c_probe
- ASoC: rt1019: Fix the TDM settings
- ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK
- spi: intel: Fix the offset to get the 64K erase opcode
- ASoC: codecs: jz4725b: add missed Line In power control bit
- ASoC: codecs: jz4725b: fix reported volume for Master ctl
- ASoC: codecs: jz4725b: use right control for Capture Volume
- ASoC: codecs: jz4725b: fix capture selector naming
- ASoC: Intel: sof_sdw: add quirk variant for LAPBC710 NUC15
- selftests/futex: fix build for clang
- selftests/intel_pstate: fix build for ARCH=x86_64
- ASoC: rt1308-sdw: add the default value of some registers
- drm/amd/display: Remove wrong pipe control lock
- ACPI: scan: Add LATT2021 to acpi_ignore_dep_ids[]
- RDMA/efa: Add EFA 0xefa2 PCI ID
- btrfs: raid56: properly handle the error when unable to find the missing
stripe
- NFSv4: Retry LOCK on OLD_STATEID during delegation return
- ACPI: x86: Add another system to quirk list for forcing StorageD3Enable
- firmware: arm_scmi: Cleanup the core driver removal callback
- i2c: tegra: Allocate DMA memory for DMA engine
- i2c: i801: add lis3lv02d's I2C address for Vostro 5568
- drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid
- btrfs: remove pointless and double ulist frees in error paths of qgroup
tests
- x86/cpu: Add several Intel server CPU model numbers
- ASoC: codecs: jz4725b: Fix spelling mistake "Sourc" -> "Source", "Routee" ->
"Route"
- KVM: x86/pmu: Do not speculatively query Intel GP PMCs that don't exist yet
- hugetlbfs: don't delete error page from pagecache
- arm64: dts: qcom: sa8155p-adp: Specify which LDO modes are allowed
- arm64: dts: qcom: sm8150-xperia-kumano: Specify which LDO modes are allowed
- arm64: dts: qcom: sm8250-xperia-edo: Specify which LDO modes are allowed
- arm64: dts: qcom: sm8350-hdk: Specify which LDO modes are allowed
- spi: stm32: Print summary 'callbacks suppressed' message
- ARM: dts: at91: sama7g5: fix signal name of pin PB2
- ASoC: core: Fix use-after-free in snd_soc_exit()
- ASoC: tas2770: Fix set_tdm_slot in case of single slot
- ASoC: tas2764: Fix set_tdm_slot in case of single slot
- ARM: at91: pm: avoid soft resetting AC DLL
- serial: 8250: omap: Fix missing PM runtime calls for omap8250_set_mctrl()
- serial: 8250_omap: remove wait loop from Errata i202 workaround
- serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove()
- serial: 8250: omap: Flush PM QOS work on remove
- serial: imx: Add missing .thaw_noirq hook
- tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send
- bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb()
- ASoC: soc-utils: Remove __exit for snd_soc_util_exit()
- pinctrl: rockchip: list all pins in a possible mux route for PX30
- scsi: scsi_transport_sas: Fix error handling in sas_phy_add()
- block: sed-opal: kmalloc the cmd/resp buffers
- bpf: Fix memory leaks in __check_func_call
- arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro
- siox: fix possible memory leak in siox_device_add()
- parport_pc: Avoid FIFO port location truncation
- pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map
- drm/vc4: kms: Fix IS_ERR() vs NULL check for vc4_kms
- drm/panel: simple: set bpc field for logic technologies displays
- drm/drv: Fix potential memory leak in drm_dev_init()
- drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker()
- arm64: dts: imx8mm: Fix NAND controller size-cells
- arm64: dts: imx8mn: Fix NAND controller size-cells
- ata: libata-transport: fix double ata_host_put() in ata_tport_add()
- ata: libata-transport: fix error handling in ata_tport_add()
- ata: libata-transport: fix error handling in ata_tlink_add()
- ata: libata-transport: fix error handling in ata_tdev_add()
- nfp: change eeprom length to max length enumerators
- MIPS: fix duplicate definitions for exported symbols
- MIPS: Loongson64: Add WARN_ON on kexec related kmalloc failed
- bpf: Initialize same number of free nodes for each pcpu_freelist
- net: bgmac: Drop free_netdev() from bgmac_enet_remove()
- mISDN: fix possible memory leak in mISDN_dsp_element_register()
- net: hinic: Fix error handling in hinic_module_init()
- net: stmmac: ensure tx function is not running in stmmac_xdp_release()
- soc: imx8m: Enable OCOTP clock before reading the register
- net: liquidio: release resources when liquidio driver open failed
- mISDN: fix misuse of put_device() in mISDN_register_device()
- net: macvlan: Use built-in RCU list checking
- net: caif: fix double disconnect client in chnl_net_open()
- bnxt_en: Remove debugfs when pci_register_driver failed
- net: mhi: Fix memory leak in mhi_net_dellink()
- net: dsa: make dsa_master_ioctl() see through port_hwtstamp_get() shims
- xen/pcpu: fix possible memory leak in register_pcpu()
- net: ionic: Fix error handling in ionic_init_module()
- net: ena: Fix error handling in ena_init()
- net: hns3: fix setting incorrect phy link ksettings for firmware in
resetting process
- bridge: switchdev: Fix memory leaks when changing VLAN protocol
- drbd: use after free in drbd_create_device()
- platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when
virtualized
- platform/surface: aggregator: Do not check for repeated unsequenced packets
- cifs: add check for returning value of SMB2_close_init
- net: ag71xx: call phylink_disconnect_phy if ag71xx_hw_enable() fail in
ag71xx_open()
- net/x25: Fix skb leak in x25_lapb_receive_frame()
- cifs: Fix wrong return value checking when GETFLAGS
- net: microchip: sparx5: Fix potential null-ptr-deref in sparx_stats_init()
and sparx5_start()
- net: thunderbolt: Fix error handling in tbnet_init()
- cifs: add check for returning value of SMB2_set_info_init
- ftrace: Fix the possible incorrect kernel message
- ftrace: Optimize the allocation for mcount entries
- ftrace: Fix null pointer dereference in ftrace_add_mod()
- ring_buffer: Do not deactivate non-existant pages
- tracing: Fix memory leak in tracing_read_pipe()
- tracing/ring-buffer: Have polling block on watermark
- tracing: Fix memory leak in test_gen_synth_cmd() and
test_empty_synth_event()
- tracing: Fix wild-memory-access in register_synth_event()
- tracing: Fix race where eprobes can be called before the event
- tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in
kprobe_event_gen_test_exit()
- tracing: kprobe: Fix potential null-ptr-deref on trace_array in
kprobe_event_gen_test_exit()
- drm/amd/display: Add HUBP surface flip interrupt handler
- ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()
- ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360
- Revert "usb: dwc3: disable USB core PHY management"
- slimbus: qcom-ngd: Fix build error when CONFIG_SLIM_QCOM_NGD_CTRL=y &&
CONFIG_QCOM_RPROC_COMMON=m
- slimbus: stream: correct presence rate frequencies
- speakup: fix a segfault caused by switching consoles
- USB: bcma: Make GPIO explicitly optional
- USB: serial: option: add Sierra Wireless EM9191
- USB: serial: option: remove old LARA-R6 PID
- USB: serial: option: add u-blox LARA-R6 00B modem
- USB: serial: option: add u-blox LARA-L6 modem
- USB: serial: option: add Fibocom FM160 0x0111 composition
- usb: add NO_LPM quirk for Realforce 87U Keyboard
- usb: chipidea: fix deadlock in ci_otg_del_timer
- usb: cdns3: host: fix endless superspeed hub port reset
- usb: typec: mux: Enter safe mode only when pins need to be reconfigured
- iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger()
- iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init()
- iio: adc: mp2629: fix wrong comparison of channel
- iio: adc: mp2629: fix potential array out of bound access
- iio: pressure: ms5611: changed hardcoded SPI speed to value limited
- dm ioctl: fix misbehavior if list_versions races with module loading
- serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs
- serial: 8250: Flush DMA Rx on RLSI
- serial: 8250_lpss: Configure DMA also w/o DMA filter
- Input: iforce - invert valid length check when fetching device IDs
- maccess: Fix writing offset in case of fault in
strncpy_from_kernel_nofault()
- net: phy: marvell: add sleep time after enabling the loopback bit
- scsi: zfcp: Fix double free of FSF request when qdio send fails
- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries
- iommu/vt-d: Set SRE bit only when hardware has SRS cap
- firmware: coreboot: Register bus in module init
- mmc: core: properly select voltage range without power cycle
- mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce
timeout
- mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()
- docs: update mediator contact information in CoC doc
- misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
- perf/x86/intel/pt: Fix sampling using single range output
- nvme: restrict management ioctls to admin
- nvme: ensure subsystem reset is single threaded
- serial: 8250_lpss: Use 16B DMA burst with Elkhart Lake
- perf: Improve missing SIGTRAP checking
- ring-buffer: Include dropped pages in counting dirty patches
- tracing: Fix warning on variable 'struct trace_array'
- net: use struct_group to copy ip/ipv6 header addresses
- scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()
- scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper()
- kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case
- Input: i8042 - fix leaking of platform device on module removal
- macvlan: enforce a consistent minimal mtu
- tcp: cdg: allow tcp_cdg_release() to be called multiple times
- kcm: avoid potential race in kcm_tx_work
- kcm: close race conditions on sk_receive_queue
- 9p: trans_fd/p9_conn_cancel: drop client lock earlier
- gfs2: Check sb_bsize_shift after reading superblock
- gfs2: Switch from strlcpy to strscpy
- 9p/trans_fd: always use O_NONBLOCK read/write
- wifi: wext: use flex array destination for memcpy()
- mm: fs: initialize fsdata passed to write_begin/write_end interface
- net/9p: use a dedicated spinlock for trans_fd
- ntfs: fix use-after-free in ntfs_attr_find()
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- ntfs: check overflow when iterating ATTR_RECORDs
- drm/msm/gpu: Fix crash during system suspend after unbind
- spi: tegra210-quad: Fix combined sequence
- ASoC: rt5682s: Fix the TDM Tx settings
- selftests/kexec: fix build for ARCH=x86_64
- ASoC: Intel: sof_rt5682: Add quirk for Rex board
- ASoC: amd: yc: Adding Lenovo ThinkBook 14 Gen 4+ ARA and Lenovo ThinkBook 16
Gen 4+ ARA to the Quirks List
- ASoC: amd: yc: Add Lenovo Thinkbook 14+ 2022 21D0 to quirks table
- drm/amdgpu: Adjust MES polling timeout for sriov
- platform/x86: thinkpad_acpi: Fix reporting a non present second fan on some
models
- drm/scheduler: fix fence ref counting
- cxl/mbox: Add a check on input payload size
- SUNRPC: Fix crasher in gss_unwrap_resp_integ()
- drm/rockchip: vop2: fix null pointer in plane_atomic_disable
- drm/rockchip: vop2: disable planes when disabling the crtc
- ksefltests: pidfd: Fix wait_states: Test terminated by timeout
- powerpc/64e: Fix amdgpu build on Book3E w/o AltiVec
- block: blk_add_rq_to_plug(): clear stale 'last' after flush
- firmware: arm_scmi: Make tx_prepare time out eventually
- drm/amd/display: Ignore Cable ID Feature
- drm/amdgpu: set fb_modifiers_not_supported in vkms
- drm/amd: Fail the suspend if resources can't be evicted
- cxl/pmem: Use size_add() against integer overflow
- tools/testing/cxl: Fix some error exits
- arm64/mm: fold check for KFENCE into can_set_direct_map()
- arm64: fix rodata=full again
- KVM: SVM: remove dead field from struct svm_cpu_data
- KVM: SVM: do not allocate struct svm_cpu_data dynamically
- KVM: SVM: restore host save area from assembly
- KVM: SVM: move MSR_IA32_SPEC_CTRL save/restore to assembly
- arm64: dts: qcom: sc7280: Add the reset reg for lpass audiocc on SC7280
- ASoC: fsl_asrc fsl_esai fsl_sai: allow CONFIG_PM=N
- arm64: dts: qcom: sm8250: Disable the not yet supported cluster idle state
- tty: serial: fsl_lpuart: don't break the on-going transfer when global reset
- bnxt_en: refactor bnxt_cancel_reservations()
- bnxt_en: fix the handling of PCIE-AER
- mtd: onenand: omap2: add dependency on GPMC
- sctp: remove the unnecessary sinfo_stream check in sctp_prsctp_prune_unsent
- sctp: clear out_curr if all frag chunks of current msg are pruned
- erofs: clean up .read_folio() and .readahead() in fscache mode
- io_uring: calculate CQEs from the user visible value
- pinctrl: mediatek: common-v2: Fix bias-disable for PULL_PU_PD_RSEL_TYPE
- selftests/bpf: Fix test_progs compilation failure in 32-bit arch
- arm64: dts: imx8mm-tqma8mqml-mba8mx: Fix USB DR
- cifs: Fix connections leak when tlink setup failed
- ata: libata-core: do not issue non-internal commands once EH is pending
- net: phy: dp83867: Fix SGMII FIFO depth for non OF devices
- mctp i2c: don't count unused / invalid keys for flow release
- octeon_ep: delete unnecessary napi rollback under set_queues_err in
octep_open()
- octeon_ep: ensure octep_get_link_status() successfully before
octep_link_up()
- octeon_ep: fix potential memory leak in octep_device_setup()
- octeon_ep: ensure get mac address successfully before eth_hw_addr_set()
- erofs: fix missing xas_retry() in fscache mode
- mlxsw: Avoid warnings when not offloaded FDB entry with IPv6 is removed
- net: hns3: fix incorrect hw rss hash type of rx packet
- net: hns3: fix return value check bug of rx copybreak
- netfs: Fix missing xas_retry() calls in xarray iteration
- netfs: Fix dodgy maths
- net: dsa: don't leak tagger-owned storage on switch driver unbind
- net: lan966x: Fix potential null-ptr-deref in lan966x_stats_init()
- s390: avoid using global register for current_stack_pointer
- netdevsim: Fix memory leak of nsim_dev->fa_cookie
- rethook: fix a potential memleak in rethook_alloc()
- drm/amd/pm: fix SMU13 runpm hang due to unintentional workaround
- drm/display: Don't assume dual mode adaptors support i2c sub-addressing
- drm/amd/display: Fix invalid DPIA AUX reply causing system hang
- drm/amd/display: Fix access timeout to DPIA AUX at boot time
- drm/amd/display: Support parsing VRAM info v3.0 from VBIOS
- usb: dwc3: Do not get extcon device when usb-role-switch is used
- nvme-pci: add NVME_QUIRK_BOGUS_NID for Micron Nitro
- nvme-pci: add NVME_QUIRK_BOGUS_NID for Netac NV7000
- usb: typec: tipd: Prevent uninitialized event{1,2} in IRQ handler
- iio: accel: bma400: Ensure VDDIO is enable defore reading the chip ID.
- iio: pressure: ms5611: fixed value compensation bug
- ceph: avoid putting the realm twice when decoding snaps fails
- s390/dcssblk: fix deadlock when adding a DCSS
- blk-cgroup: properly pin the parent in blkcg_css_online
- x86/fpu: Drop fpregs lock before inheriting FPU permissions
- ASoC: SOF: topology: No need to assign core ID if token parsing failed
- perf/x86/amd: Fix crash due to race between amd_pmu_enable_all, perf NMI and
throttling
- net: usb: smsc95xx: fix external PHY reset
- tracing: Fix potential null-pointer-access of entry in list 'tr->err_log'
- arm64/mm: fix incorrect file_map_count for non-leaf pmd/pud
- KVM: x86/xen: Fix eventfd error handling in kvm_xen_eventfd_assign()
- netlink: Bounds-check struct nlmsgerr creation
- bpf: Prevent bpf program recursion for raw tracepoint probes
* Fix RPL-S support on powercap/intel_rapl (LP: #1990161)
- powercap: intel_rapl: Add support for RAPTORLAKE_P
- powercap: intel_rapl: Add support for RAPTORLAKE_S
* Kinetic update: upstream stable patchset 2023-01-04 (LP: #2001726)
- drm/amdkfd: handle CPU fault on COW mapping
- drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram()
- hwspinlock: qcom: correct MMIO max register for newer SoCs
- phy: stm32: fix an error code in probe
- wifi: cfg80211: silence a sparse RCU warning
- wifi: cfg80211: fix memory leak in query_regdb_file()
- soundwire: qcom: reinit broadcast completion
- soundwire: qcom: check for outanding writes before doing a read
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues
- wifi: mac80211: Set TWT Information Frame Disabled bit as 1
- bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without
FILE
- HID: hyperv: fix possible memory leak in mousevsc_probe()
- bpf, sockmap: Fix sk->sk_forward_alloc warn_on in sk_stream_kill_queues
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sock_map: Move cancel_work_sync() out of sock lock
- bpf: Add helper macro bpf_for_each_reg_in_vstate
- bpf: Fix wrong reg type conversion in release_reference()
- net: gso: fix panic on frag_list with mixed head alloc types
- macsec: delete new rxsc when offload fails
- macsec: fix secy->n_rx_sc accounting
- macsec: fix detection of RXSCs when toggling offloading
- macsec: clear encryption keys from the stack after setting up offload
- octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT]
- net: tun: Fix memory leaks of napi_get_frags
- bnxt_en: Fix possible crash in bnxt_hwrm_set_coal()
- bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer
- net: fman: Unregister ethernet device on removal
- capabilities: fix undefined behavior in bit shift for CAP_TO_MASK
- phy: ralink: mt7621-pci: add sentinel to quirks table
- KVM: s390: pv: don't allow userspace to set the clock under PV
- net: lapbether: fix issue of dev reference count leakage in
lapbeth_device_event()
- hamradio: fix issue of dev reference count leakage in bpq_device_event()
- net: wwan: iosm: fix memory leak in ipc_wwan_dellink
- net: wwan: mhi: fix memory leak in mhi_mbim_dellink
- drm/vc4: Fix missing platform_unregister_drivers() call in
vc4_drm_register()
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network
- can: af_can: fix NULL pointer dereference in can_rx_register()
- net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable()
- net: broadcom: Fix BCMGENET Kconfig
- tipc: fix the msg->req tlv len check in
tipc_nl_compat_name_table_dump_header
- dmaengine: pxa_dma: use platform_get_irq_optional
- dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove()
- dmaengine: ti: k3-udma-glue: fix memory leak when register device fail
- net: lapbether: fix issue of invalid opcode in lapbeth_open()
- drivers: net: xgene: disable napi when register irq failed in
xgene_enet_open()
- perf stat: Fix printing os->prefix in CSV metrics output
- perf tools: Add the include/perf/ directory to .gitignore
- netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg()
- netfilter: Cleanup nft_net->module_list from nf_tables_exit_net()
- net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init()
- net: nixge: disable napi when enable interrupts failed in nixge_open()
- net: wwan: iosm: fix memory leak in ipc_pcie_read_bios_cfg
- net/mlx5: Bridge, verify LAG state when adding bond to bridge
- net/mlx5: Allow async trigger completion execution on single CPU systems
- net/mlx5e: E-Switch, Fix comparing termination table instance
- net: cpsw: disable napi in cpsw_ndo_open()
- net: cxgb3_main: disable napi when bind qsets failed in cxgb_up()
- stmmac: intel: Update PCH PTP clock rate from 200MHz to 204.8MHz
- mctp: Fix an error handling path in mctp_init()
- cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in
cxgb4vf_open()
- stmmac: dwmac-loongson: fix missing pci_disable_msi() while module exiting
- stmmac: dwmac-loongson: fix missing pci_disable_device() in
loongson_dwmac_probe()
- stmmac: dwmac-loongson: fix missing of_node_put() while module exiting
- net: phy: mscc: macsec: clear encryption keys when freeing a flow
- net: atlantic: macsec: clear encryption keys from the stack
- ethernet: s2io: disable napi when start nic failed in s2io_card_up()
- net: mv643xx_eth: disable napi when init rxq or txq failed in
mv643xx_eth_open()
- ethernet: tundra: free irq when alloc ring failed in tsi108_open()
- net: macvlan: fix memory leaks of macvlan_common_newlink
- riscv: process: fix kernel info leakage
- riscv: vdso: fix build with llvm
- riscv: fix reserved memory setup
- arm64: efi: Fix handling of misaligned runtime regions and drop warning
- MIPS: jump_label: Fix compat branch range check
- mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI
- mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI
- mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI
- mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI
- mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA
- ALSA: hda/hdmi - enable runtime pm for more AMD display audio
- ALSA: hda/ca0132: add quirk for EVGA Z390 DARK
- ALSA: hda: fix potential memleak in 'add_widget_node'
- ALSA: hda/realtek: Add Positivo C6300 model quirk
- ALSA: usb-audio: Yet more regression for for the delayed card registration
- ALSA: usb-audio: Add quirk entry for M-Audio Micro
- ALSA: usb-audio: Add DSD support for Accuphase DAC-60
- vmlinux.lds.h: Fix placement of '.data..decrypted' section
- ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure
- nilfs2: fix deadlock in nilfs_count_free_blocks()
- nilfs2: fix use-after-free bug of ns_writer on remount
- drm/i915/dmabuf: fix sg_table handling in map_dma_buf
- drm/amdgpu: disable BACO on special BEIGE_GOBY card
- btrfs: fix match incorrectly in dev_args_match_device
- btrfs: selftests: fix wrong error check in btrfs_free_dummy_root()
- btrfs: zoned: initialize device's zone info for seeding
- mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI
- udf: Fix a slab-out-of-bounds write bug in udf_find_entry()
- mm/damon/dbgfs: check if rm_contexts input is for a real context
- mm/memremap.c: map FS_DAX device memory as decrypted
- mm/shmem: use page_mapping() to detect page cache for uffd continue
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- dmaengine: at_hdmac: Fix at_lli struct definition
- dmaengine: at_hdmac: Don't start transactions at tx_submit level
- dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending
- dmaengine: at_hdmac: Fix premature completion of desc in issue_pending
- dmaengine: at_hdmac: Do not call the complete callback on
device_terminate_all
- dmaengine: at_hdmac: Protect atchan->status with the channel lock
- dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all()
- dmaengine: at_hdmac: Fix concurrency over descriptor
- dmaengine: at_hdmac: Free the memset buf without holding the chan lock
- dmaengine: at_hdmac: Fix concurrency over the active list
- dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware
- dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors
- dmaengine: at_hdmac: Don't allow CPU to reorder channel enable
- dmaengine: at_hdmac: Fix impossible condition
- dmaengine: at_hdmac: Check return code of dma_async_device_register
- drm/amdkfd: Migrate in CPU page fault use current mm
- net: tun: call napi_schedule_prep() to ensure we own a napi
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- drm/i915/gvt: Add missing vfio_unregister_group_dev() call
- KVM: debugfs: Return retval of simple_attr_open() if it fails
- HID: wacom: Fix logic used for 3rd barrel switch emulation
- ALSA: arm: pxa: pxa2xx-ac97-lib: fix return value check of
platform_get_irq()
- spi: mediatek: Fix package division error
- drm/vc4: hdmi: Fix HSM clock too low on Pi4
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg()
- KVM: s390: pci: Fix allocation size of aift kzdev elements
- drm/i915/psr: Send update also on invalidate
- drm/i915: Do not set cache_dirty for DGFX
- dt-bindings: net: tsnep: Fix typo on generic nvmem property
- dmanegine: idxd: reformat opcap output to match bitmap_parse() input
- dmaengine: idxd: Fix max batch size for Intel IAA
- dmaengine: idxd: fix RO device state error after been disabled/reset
- dmaengine: stm32-dma: fix potential race between pause and resume
- net: ethernet: mtk-star-emac: disable napi when connect and start PHY failed
in mtk_star_enable()
- octeontx2-pf: Fix SQE threshold checking
- perf stat: Fix crash with --per-node --metric-only in CSV mode
- net: wwan: iosm: fix invalid mux header type
- net/mlx5e: Add missing sanity checks for max TX WQE size
- ice: Fix spurious interrupt during removal of trusted VF
- iavf: Fix VF driver counting VLAN 0 filters
- ALSA: memalloc: Don't fall back for SG-buffer with IOMMU
- eth: sp7021: drop free_netdev() from spl2sw_init_netdev()
- mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI
- ALSA: hda/realtek: Add quirk for ASUS Zenbook using CS35L41
- drm/amdgpu: workaround for TLB seq race
- drm/amdkfd: Fix error handling in criu_checkpoint
- drm/amdkfd: Fix error handling in kfd_criu_restore_events
- btrfs: zoned: clone zoned device info when cloning a device
- net: ethernet: ti: am65-cpsw: Fix segmentation fault at module unload
- spi: intel: Use correct mask for flash and protected regions
- dmaengine: idxd: Do not enable user type Work Queue without Shared Virtual
Addressing
- can: isotp: fix tx state handling for echo tx processing
- can: rcar_canfd: Add missing ECC error checks for channels 2-7
- KVM: x86: use a separate asm-offsets.c file
- KVM: SVM: replace regs argument of __svm_vcpu_run() with vcpu_svm
- KVM: SVM: adjust register allocation for __svm_vcpu_run()
- KVM: SVM: retrieve VMCB from assembly
- KVM: SVM: move guest vmsave/vmload back to assembly
* AMD Rembrandt: DP tunneling fails with Thunderbolt monitors
(LP: #1983143) // Kinetic update: upstream stable patchset 2023-01-04
(LP: #2001726)
- thunderbolt: Add DP OUT resource when DP tunnel is discovered
* CVE-2022-47520
- wifi: wilc1000: validate pairwise and authentication suite offsets
* CVE-2022-3545
- nfp: fix use-after-free in area_cache_get()
[ Ubuntu: 5.19.0-31.32 ]
* kinetic/linux: 5.19.0-31.32 -proposed tracker (LP: #2003423)
* amdgpu: framebuffer is destroyed and the screen freezes with unsupported IP
blocks (LP: #2003524)
- drm/amd: Delay removal of the firmware framebuffer
* Revoke & rotate to new signing key (LP: #2002812)
- [Packaging] Revoke and rotate to new signing key
-- Emil Renner Berthing <email address hidden> Tue, 14 Mar 2023 14:19:07 +0100
-
linux-starfive (5.19.0-1005.7) kinetic; urgency=medium
[ Ubuntu: 5.19.0-23.24 ]
* CVE-2022-2602
- SAUCE: io_uring/af_unix: defer registered files gc to io_uring release
- SAUCE: io_uring/af_unix: fix memleak during unix GC
* CVE-2022-41674
- SAUCE: wifi: cfg80211: fix u8 overflow in
cfg80211_update_notlisted_nontrans()
- SAUCE: wifi: cfg80211/mac80211: reject bad MBSSID elements
- SAUCE: wifi: cfg80211: ensure length byte is present before access
- SAUCE: wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- SAUCE: wifi: cfg80211: update hidden BSSes to avoid WARN_ON
* CVE-2022-42722
- SAUCE: wifi: mac80211: fix crash in beacon protection for P2P-device
* CVE-2022-42721
- SAUCE: wifi: cfg80211: avoid nontransmitted BSS list corruption
* CVE-2022-42720
- SAUCE: wifi: cfg80211: fix BSS refcounting bugs
* CVE-2022-42719
- SAUCE: wifi: mac80211: fix MBSSID parsing use-after-free
-- Thadeu Lima de Souza Cascardo <email address hidden> Sat, 15 Oct 2022 08:26:27 -0300
-
linux-starfive (5.19.0-1003.4) kinetic; urgency=medium
* kinetic/linux-starfive: 5.19.0-1003.4 -proposed tracker (LP: #1992792)
* Excessive size of kernel modules on RISC-V - modules unstripped
(LP: #1964335)
- SAUCE: scripts/Makefile.modinst discard-locals from modules
linux-starfive (5.19.0-1002.3) kinetic; urgency=medium
* kinetic/linux-starfive: 5.19.0-1002.3 -proposed tracker (LP: #1992645)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/master)
* Miscellaneous Ubuntu changes
- [Config] update configs after rebase
[ Ubuntu: 5.19.0-21.21 ]
* kinetic/linux: 5.19.0-21.21 -proposed tracker (LP: #1992639)
* cannot change mount namespace (LP: #1991691)
- SAUCE: apparmor: Fix getaatr mediation causing snap failures
* Kernel regresses openjdk on riscv64 (LP: #1992484)
- SAUCE: Revert "riscv: mmap with PROT_WRITE but no PROT_READ is invalid"
[ Ubuntu: 5.19.0-20.20 ]
* kinetic/linux: 5.19.0-20.20 -proposed tracker (LP: #1992408)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/master)
* Kinetic kernels 5.19.0-18/19-generic won't boot on Intel 11th/12th gen
(LP: #1991704)
- drm/i915: fix null pointer dereference
* rcu_sched detected stalls on CPUs/tasks (LP: #1967130)
- [Config] Disable VMAP_STACK on riscv64
* Disable sv57 as the userspace is not ready (LP: #1991790)
- SAUCE: riscv: mm: Force disable sv57
* earlyconsole prints question marks on 5.19.0-1002-generic (LP: #1988984)
- [Config] Set CONFIG_PWM_SIFIVE=m for riscv64
* RCU stalls (LP: #1991951)
- [Config] Harmonize RCU_CPU_STALL_TIMEOUT
* backport dkms fixes to build modules correctly for hwe-5.19+ kernels with
custom compiler (LP: #1991664)
- [Packaging] use versioned gcc-12
- [Packaging] Update configs with versioned compiler version
* FTBFS on kinetic (LP: #1990964)
- SAUCE: uapi: Fixup strace compile error
* CVE-2022-40768
- scsi: stex: Properly zero out the passthrough command structure
* [22.10 FEAT] zKVM: Crypto Passthrough Hotplug - kernel part (LP: #1852741)
- s390/vfio-ap: use new AP bus interface to search for queue devices
- s390/vfio-ap: move probe and remove callbacks to vfio_ap_ops.c
- s390/vfio-ap: manage link between queue struct and matrix mdev
- s390/vfio-ap: introduce shadow APCB
- s390/vfio-ap: refresh guest's APCB by filtering AP resources assigned to
mdev
- s390/vfio-ap: allow assignment of unavailable AP queues to mdev device
- s390/vfio-ap: rename matrix_dev->lock mutex to matrix_dev->mdevs_lock
- s390/vfio-ap: introduce new mutex to control access to the KVM pointer
- s390/vfio-ap: use proper locking order when setting/clearing KVM pointer
- s390/vfio-ap: prepare for dynamic update of guest's APCB on assign/unassign
- s390/vfio-ap: prepare for dynamic update of guest's APCB on queue
probe/remove
- s390/vfio-ap: allow hot plug/unplug of AP devices when assigned/unassigned
- s390/vfio-ap: hot plug/unplug of AP devices when probed/removed
- s390/vfio-ap: reset queues after adapter/domain unassignment
- s390/vfio-ap: implement in-use callback for vfio_ap driver
- s390/vfio-ap: sysfs attribute to display the guest's matrix
- s390/vfio-ap: handle config changed and scan complete notification
- s390/vfio-ap: update docs to include dynamic config support
- s390/Docs: new doc describing lock usage by the vfio_ap device driver
- MAINTAINERS: pick up all vfio_ap docs for VFIO AP maintainers
[ Ubuntu: 5.19.0-19.19 ]
* kinetic/linux: 5.19.0-19.19 -proposed tracker (LP: #1990960)
* kinetic: apply new apparmor and LSM stacking patch set (LP: #1989983)
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Specify which LSM to display
(using struct cred as input)"""
- Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: Fix build error, make sk
parameter const"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
smk_netlbl_mls()"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: change ima_read_file() to use
lsmblob"""
- Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: rename kzfree() to
kfree_sensitive()"""
- Revert "Revert "Revert "UBUNTU: SAUCE: Audit: Fix for missing NULL check"""
- Revert "Revert "Revert "UBUNTU: SAUCE: AppArmor: Remove the exclusive
flag"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Add /proc attr entry for full
LSM context"""
- Revert "Revert "Revert "UBUNTU: SAUCE: Audit: Add a new record for multiple
object LSM attributes"""
- Revert "Revert "Revert "UBUNTU: SAUCE: Audit: Fix incorrect static inline
function declration."""
- Revert "Revert "Revert "UBUNTU: SAUCE: Audit: Add new record for multiple
process LSM attributes"""
- Revert "Revert "Revert "UBUNTU: SAUCE: NET: Store LSM netlabel data in a
lsmblob"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: security_secid_to_secctx in
netlink netfilter"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmcontext in
security_inode_getsecctx"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmcontext in
security_secid_to_secctx"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Ensure the correct LSM context
releaser"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Specify which LSM to display"""
- Revert "Revert "Revert "UBUNTU: SAUCE: IMA: Change internal interfaces to
use lsmblobs"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
security_cred_getsecid"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
security_inode_getsecid"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
security_task_getsecid"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
security_ipc_getsecid"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
security_secid_to_secctx"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
security_secctx_to_secid"""
- Revert "Revert "Revert "UBUNTU: SAUCE: net: Prepare UDS for security module
stacking"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
security_kernel_act_as"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
security_audit_rule_match"""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Create and manage the lsmblob
data structure."""
- Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Infrastructure management of the
sock security"""
- Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: LSM stacking: switch from
SK_CTX() to aa_sock()"""
- Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: rename aa_sock() to
aa_unix_sk()"""
- Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: disable showing the mode as
part of a secid to secctx"""
- Revert "Revert "Revert "apparmor: fix absroot causing audited secids to
begin with ="""
- Revert "Revert "Revert "UBUNTU SAUCE: apparmor: fix apparmor mediating
locking non-fs, unix sockets"""
- Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: fix use after free in
sk_peer_label"""
- Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: af_unix mediation"""
- Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: patch to provide
compatibility with v2.x net rules"""
- Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: add/use fns to print hash
string hex value"""
- SAUCE: upstream v6.0: apparmor: fix absroot causing audited secids to begin
with =
- SAUCE: upstream v6.0: apparmor: Fix kernel-doc
- SAUCE: upstream v6.0: lsm: Fix kernel-doc
- SAUCE: upstream v6.0: apparmor: Update help description of policy hash for
introspection
- SAUCE: upstream v6.0: apparmor: make export of raw binary profile to
userspace optional
- SAUCE: upstream v6.0: apparmor: Enable tuning of policy paranoid load for
embedded systems
- SAUCE: upstream v6.0: apparmor: don't create raw_sha1 symlink if sha1
hashing is disabled
- SAUCE: upstream v6.0: apparmor: resolve uninitialized symbol warnings in
policy_unpack_test.c
- SAUCE: upstream v6.0: security/apparmor: remove redundant ret variable
- SAUCE: upstream v6.0: apparmor: Use struct_size() helper in kmalloc()
- SAUCE: upstream v6.0: apparmor: Fix match_mnt_path_str() and match_mnt()
kernel-doc comment
- SAUCE: upstream v6.0: apparmor: Fix some kernel-doc comments
- SAUCE: upstream v6.0: apparmor: Fix some kernel-doc comments
- SAUCE: upstream v6.0: apparmor: Fix undefined reference to
`zlib_deflate_workspacesize'
- SAUCE: upstream v6.0: apparmor: Fix some kernel-doc comments
- SAUCE: upstream v6.0: apparmor: test: Remove some casts which are no-longer
required
- SAUCE: upstream v6.0: apparmor: add a kernel label to use on kernel objects
- SAUCE: upstream v6.0: apparmor: Convert secid mapping to XArrays instead of
IDR
- SAUCE: upstream v6.0: apparmor: disable showing the mode as part of a secid
to secctx
- SAUCE: upstream v6.0: apparmor: Mark alloc_unconfined() as static
- SAUCE: upstream v6.0: apparmor: Fix some kernel-doc comments
- SAUCE: upstream v6.0: apparmor: allow label to carry debug flags
- SAUCE: upstream v6.0: apparmor: extend policydb permission set by making use
of the xbits
- SAUCE: upstream v6.0: apparmor: move ptrace mediation to more logical
task.{h,c}
- SAUCE: upstream v6.0: apparmor: correct config reference to intended one
- SAUCE: upstream v6.0: lsm,io_uring: add LSM hooks for the new uring_cmd file
op
- SAUCE: upstream v6.0: selinux: implement the security_uring_cmd() LSM hook
- SAUCE: upstream v6.0: Smack: Provide read control for io_uring_cmd
- SAUCE: apparmor-next 6.1: apparmor: fix a memleak in multi_transaction_new()
- SAUCE: apparmor-next 6.1: apparmor: fix lockdep warning when removing a
namespace
- SAUCE: apparmor-next 6.1: apparmor: reserve mediation classes
- SAUCE: apparmor-next 6.1: apparmor: use zstd compression for profile data
- SAUCE: apparmor-next 6.1: apparmor: expose compression level limits in sysfs
- SAUCE: apparmor-next 6.1: apparmor: compute file permissions on profile load
- SAUCE: apparmor-next 6.1: apparmor: compute xmatch permissions on profile
load
- SAUCE: apparmor-next 6.1: apparmor: move fperm computation into
policy_unpack
- SAUCE: apparmor-next 6.1: apparmor: rework and cleanup fperm computation
- SAUCE: apparmor-next 6.1: apparmor: convert xmatch to use aa_perms structure
- SAUCE: apparmor-next 6.1: apparmor: compute policydb permission on profile
load
- SAUCE: apparmor-next 6.1: apparmor: combine file_rules and aa_policydb into
a single shared struct
- SAUCE: apparmor-next 6.1: apparmor: convert xmatch to using the new shared
policydb struct
- SAUCE: apparmor-next 6.1: apparmor: convert fperm lookup to use accept as an
index
- SAUCE: apparmor-next 6.1: apparmor: convert xmatch lookup to use accept as
an index
- SAUCE: apparmor-next 6.1: apparmor: cleanup shared permission struct
- SAUCE: apparmor-next 6.1: apparmor: convert policy lookup to use accept as
an index
- SAUCE: apparmor-next 6.1: apparmor: preparse for state being more than just
an integer
- SAUCE: apparmor-next 6.1: apparmor: Fix abi check to include v8 abi
- SAUCE: apparmor-next 6.1: apparmor: fix apparmor mediating locking non-fs
unix sockets
- SAUCE: apparmor-next 6.1: apparmor: extend policydb permission set by making
use of the xbits
- SAUCE: apparmor-next 6.1: apparmor: move dfa perm macros into policy_unpack
- SAUCE: apparmor-next 6.1: apparmor: extend xindex size
- SAUCE: apparmor-next 6.1: apparmor: isolate policy backwards compatibility
to its own file
- SAUCE: apparmor-next 6.1: apparmor: extend permissions to support a label
and tag string
- SAUCE: apparmor-next 6.1: apparmor: add mediation class information to
auditing
- SAUCE: apparmor-next 6.1: apparmor: add user mode flag
- SAUCE: apparmor-next 6.1: apparmor: make transition table unpack generic so
it can be reused
- SAUCE: apparmor-next 6.1: apparmor: group dfa policydb unpacking
- SAUCE: apparmor-next 6.1: apparmor: make unpack_array return a trianary
value
- SAUCE: apparmor-next 6.1: apparmor: add the ability for policy to specify a
permission table
- SAUCE: apparmor-next 6.1: apparmor: verify permission table indexes
- SAUCE: apparmor-next 6.1: apparmor: make sure perm indexes are accumulated
- SAUCE: apparmor-next 6.1: apparmor: cleanup: move perm accumulation into
perms.h
- SAUCE: apparmor-next 6.1: apparmor: verify loaded permission bits masks
don't overlap
- SAUCE: apparmor-next 6.1: apparmor: refactor profile rules and attachments
- SAUCE: apparmor-next 6.1: apparmor: rework profile->rules to be a list
- SAUCE: apparmor-next 6.1: apparmor: fix aa_class_names[] to match reserved
classes
- SAUCE: apparmor-next 6.1: apparmor: Fix regression in stacking due to label
flags
- SAUCE: apparmor-next 6.1: apparmor: Simplify obtain the newest label on a
cred
- SAUCE: apparmor-next 6.1: apparmor: make __aa_path_perm() static
- SAUCE: apparmor-next 6.1: apparmor: Fix doc comment for compute_fperms
- SAUCE: apparmor-next 6.1: apparmor: Remove unnecessary size check when
unpacking trans_table
- SAUCE: apparmor-next 6.1: apparmor: make sure the decompression ctx is
promperly initialized
- SAUCE: apparmor: add/use fns to print hash string hex value
- SAUCE: apparmor: patch to provide compatibility with v2.x net rules
- SAUCE: Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: make
__aa_path_perm() static"
- SAUCE: apparmor: af_unix mediation
- SAUCE: fix shutdown unix socket owner conditional check
- SAUCE: apparmor: rename aa_sock() to aa_unix_sk()
- SAUCE: apparmor: Add fine grained mediation of posix mqueues
- SAUCE: apparmor: LSM stacking: switch from SK_CTX() to aa_sock()
- SAUCE: lsm stacking v37: integrity: disassociate ima_filter_rule from
security_audit_rule
- SAUCE: lsm stacking v37: LSM: Infrastructure management of the sock security
- SAUCE: lsm stacking v37: LSM: Add the lsmblob data structure.
- SAUCE: lsm stacking v37: LSM: provide lsm name and id slot mappings
- SAUCE: lsm stacking v37: IMA: avoid label collisions with stacked LSMs
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_audit_rule_match
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_kernel_act_as
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_secctx_to_secid
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_secid_to_secctx
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_ipc_getsecid
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_current_getsecid
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_inode_getsecid
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_cred_getsecid
- SAUCE: lsm stacking v37: LSM: Specify which LSM to display
- SAUCE: fixup lsm stacking v37: LSM: Specify which LSM to display
- SAUCE: lsm stacking v37: LSM: Ensure the correct LSM context releaser
- SAUCE: lsm stacking v37: LSM: Use lsmcontext in security_secid_to_secctx
- SAUCE: lsm stacking v37: LSM: Use lsmcontext in security_inode_getsecctx
- SAUCE: lsm stacking v37: LSM: Use lsmcontext in
security_dentry_init_security
- SAUCE: lsm stacking v37: LSM: security_secid_to_secctx in netlink netfilter
- SAUCE: lsm stacking v37: NET: Store LSM netlabel data in a lsmblob
- SAUCE: lsm stacking v37: binder: Pass LSM identifier for confirmation
- SAUCE: lsm stacking v37: LSM: security_secid_to_secctx module selection
- SAUCE: lsm stacking v37: Audit: Keep multiple LSM data in audit_names
- SAUCE: lsm stacking v37: Audit: Create audit_stamp structure
- SAUCE: lsm stacking v37: LSM: Add a function to report multiple LSMs
- SAUCE: lsm stacking v37: Audit: Allow multiple records in an audit_buffer
- SAUCE: lsm stacking v37: Audit: Add record for multiple task security
contexts
- SAUCE: lsm stacking v37: audit: multiple subject lsm values for netlabel
- SAUCE: lsm stacking v37: Audit: Add record for multiple object contexts
- SAUCE: lsm stacking v37: netlabel: Use a struct lsmblob in audit data
- SAUCE: lsm stacking v37: LSM: Removed scaffolding function lsmcontext_init
- SAUCE: lsm stacking v37: LSM: Add /proc attr entry for full LSM context
- SAUCE: lsm stacking v37: AppArmor: Remove the exclusive flag
- SAUCE: security, lsm: Introduce security_create_user_ns()
- SAUCE: bpf-lsm: Make bpf_lsm_userns_create() sleepable
- SAUCE: selinux: Implement userns_create hook
- SAUCE: apparmor: add user namespace creation mediation
- [Config] update configs after apply new apparmor patch set
* kinetic: apply new apparmor and LSM stacking patch set (LP: #1989983) //
5.19.0-17.17: kernel NULL pointer dereference, address: 0000000000000084
(LP: #1990236)
- SAUCE: apparmor: fix oops in unix owner conditional setup
* Miscellaneous Ubuntu changes
- [Config] make sure CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT is enforced
-- Dimitri John Ledkov <email address hidden> Thu, 13 Oct 2022 14:38:21 +0100
