-
linux-oracle (6.2.0-1019.20) lunar; urgency=medium
* lunar/linux-oracle: 6.2.0-1019.20 -proposed tracker (LP: #2048344)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/2024.01.08)
[ Ubuntu: 6.2.0-41.42 ]
* lunar/linux: 6.2.0-41.42 -proposed tracker (LP: #2048351)
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
- [Packaging] resync update-dkms-versions helper
- [Packaging] remove helper scripts
- [Packaging] update annotations scripts
- debian/dkms-versions -- update from kernel-versions (main/2024.01.08)
* [SRU][22.04.2 & 23.10] OS cannot boot successfully when enabling VMD in UEFI
setup (LP: #2020022)
- x86: don't use REP_GOOD or ERMS for small memory clearing
- x86/cpufeatures: Add macros for Intel's new fast rep string features
* Hotplugging SCSI disk in QEMU VM fails (LP: #2047382)
- Revert "PCI: acpiphp: Reassign resources on bridge if necessary"
* CVE-2023-6622
- netfilter: nf_tables: bail out on mismatching dynset and set expressions
* CVE-2023-6111
- netfilter: nf_tables: remove catchall element in GC sync path
* CVE-2024-0193
- netfilter: nf_tables: skip set commit for deleted/destroyed sets
* Sound: Add rtl quirk of M90-Gen5 (LP: #2046105)
- ALSA: hda/realtek: Enable headset on Lenovo M90 Gen5
* [Debian] autoreconstruct - Do not generate chmod -x for deleted files
(LP: #2045562)
- [Debian] autoreconstruct - Do not generate chmod -x for deleted files
* CVE-2023-6932
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
* CVE-2023-6931
- perf: Fix perf_event_validate_size()
- perf: Fix perf_event_validate_size() lockdep splat
* CVE-2023-6531
- io_uring/af_unix: disable sending io_uring over sockets
* CVE-2023-6606
- smb: client: fix OOB in smbCalcSize()
* CVE-2023-6817
- netfilter: nft_set_pipapo: skip inactive elements during set walk
* Avoid using damage rectangle under hardware rotation mode when PSR is
enabled (LP: #2045958)
- drm/amd/display: fix hw rotated modes when PSR-SU is enabled
* Lunar update: upstream stable patchset 2023-12-11 (LP: #2046197)
- NFS/pNFS: Report EINVAL errors from connect() to the server
- SUNRPC: Mark the cred for revalidation if the server rejects it
- NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server
- NFSv4.1: fix pnfs MDS=DS session trunking
- media: v4l: Use correct dependency for camera sensor drivers
- media: via: Use correct dependency for camera sensor drivers
- netfs: Only call folio_start_fscache() one time for each folio
- dm: fix a race condition in retrieve_deps
- btrfs: improve error message after failure to add delayed dir index item
- btrfs: remove BUG() after failure to insert delayed dir index item
- ext4: replace the traditional ternary conditional operator with with
max()/min()
- ext4: move setting of trimmed bit into ext4_try_to_trim_range()
- ext4: do not let fstrim block system suspend
- netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention
- netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC
- netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation
fails
- netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration
- netfilter: nf_tables: fix memleak when more than 255 elements expired
- ASoC: meson: spdifin: start hw on dai probe
- netfilter: nf_tables: disallow element removal on anonymous sets
- bpf: Avoid deadlock when using queue and stack maps from NMI
- ASoC: rt5640: Revert "Fix sleep in atomic context"
- ASoC: rt5640: Fix IRQ not being free-ed for HDA jack detect mode
- ALSA: hda/realtek: Splitting the UX3402 into two separate models
- netfilter: conntrack: fix extension size table
- selftests: tls: swap the TX and RX sockets in some tests
- net/core: Fix ETH_P_1588 flow dissector
- ASoC: hdaudio.c: Add missing check for devm_kstrdup
- ASoC: imx-audmix: Fix return error with devm_clk_get()
- octeon_ep: fix tx dma unmap len values in SG
- iavf: do not process adminq tasks when __IAVF_IN_REMOVE_TASK is set
- ASoC: SOF: core: Only call sof_ops_free() on remove if the probe was
successful
- iavf: add iavf_schedule_aq_request() helper
- iavf: schedule a request immediately after add/delete vlan
- i40e: Fix VF VLAN offloading when port VLAN is configured
- netfilter, bpf: Adjust timeouts of non-confirmed CTs in
bpf_ct_insert_entry()
- ionic: fix 16bit math issue when PAGE_SIZE >= 64KB
- igc: Fix infinite initialization loop with early XDP redirect
- scsi: iscsi_tcp: restrict to TCP sockets
- powerpc/perf/hv-24x7: Update domain value check
- dccp: fix dccp_v4_err()/dccp_v6_err() again
- x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()
- net: hsr: Properly parse HSRv1 supervisor frames.
- platform/x86: intel_scu_ipc: Check status after timeout in busy_loop()
- platform/x86: intel_scu_ipc: Check status upon timeout in
ipc_wait_for_interrupt()
- platform/x86: intel_scu_ipc: Don't override scu in
intel_scu_ipc_dev_simple_command()
- platform/x86: intel_scu_ipc: Fail IPC send if still busy
- x86/srso: Fix srso_show_state() side effect
- x86/srso: Fix SBPB enablement for spec_rstack_overflow=off
- net: hns3: add cmdq check for vf periodic service task
- net: hns3: fix GRE checksum offload issue
- net: hns3: only enable unicast promisc when mac table full
- net: hns3: fix fail to delete tc flower rules during reset issue
- net: hns3: add 5ms delay before clear firmware reset irq source
- net: bridge: use DEV_STATS_INC()
- team: fix null-ptr-deref when team device type is changed
- net: rds: Fix possible NULL-pointer dereference
- netfilter: nf_tables: disable toggling dormant table state more than once
- i915/pmu: Move execlist stats initialization to execlist specific setup
- locking/seqlock: Do the lockdep annotation before locking in
do_write_seqcount_begin_nested()
- net: ena: Flush XDP packets on error.
- bnxt_en: Flush XDP for bnxt_poll_nitroa0()'s NAPI
- octeontx2-pf: Do xdp_do_flush() after redirects.
- igc: Expose tx-usecs coalesce setting to user
- proc: nommu: /proc/<pid>/maps: release mmap read lock
- proc: nommu: fix empty /proc/<pid>/maps
- cifs: Fix UAF in cifs_demultiplex_thread()
- gpio: tb10x: Fix an error handling path in tb10x_gpio_probe()
- i2c: mux: demux-pinctrl: check the return value of devm_kstrdup()
- i2c: mux: gpio: Add missing fwnode_handle_put()
- i2c: xiic: Correct return value check for xiic_reinit()
- ARM: dts: samsung: exynos4210-i9100: Fix LCD screen's physical size
- f2fs: get out of a repeat loop when getting a locked data page
- s390/pkey: fix PKEY_TYPE_EP11_AES handling in PKEY_CLR2SECK2 IOCTL
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- wifi: ath11k: fix tx status reporting in encap offload mode
- wifi: ath11k: Cleanup mac80211 references on failure during tx_complete
- scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called
- scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id()
- drm/amdkfd: Flush TLB after unmapping for GFX v9.4.3
- drm/amdkfd: Insert missing TLB flush on GFX10 and later
- btrfs: reset destination buffer when read_extent_buffer() gets invalid range
- vfio/mdev: Fix a null-ptr-deref bug for mdev_unregister_parent()
- MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled
- spi: spi-gxp: BUG: Correct spi write return value
- drm/bridge: ti-sn65dsi83: Do not generate HFP/HBP/HSA and EOT packet
- bus: ti-sysc: Use fsleep() instead of usleep_range() in sysc_reset()
- bus: ti-sysc: Fix missing AM35xx SoC matching
- firmware: arm_scmi: Harden perf domain info access
- firmware: arm_scmi: Fixup perf power-cost/microwatt support
- power: supply: mt6370: Fix missing error code in mt6370_chg_toggle_cfo()
- clk: sprd: Fix thm_parents incorrect configuration
- clk: tegra: fix error return case for recalc_rate
- ARM: dts: ti: omap: Fix bandgap thermal cells addressing for omap3/4
- ARM: dts: Unify pinctrl-single pin group nodes for omap4
- ARM: dts: ti: omap: motorola-mapphone: Fix abe_clkctrl warning on boot
- bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up
- power: supply: ucs1002: fix error code in ucs1002_get_property()
- firmware: imx-dsp: Fix an error handling path in imx_dsp_setup_channels()
- xtensa: add default definition for XCHAL_HAVE_DIV32
- xtensa: iss/network: make functions static
- xtensa: boot: don't add include-dirs
- xtensa: umulsidi3: fix conditional expression
- xtensa: boot/lib: fix function prototypes
- power: supply: rk817: Fix node refcount leak
- selftests/powerpc: Use CLEAN macro to fix make warning
- selftests/powerpc: Pass make context to children
- selftests/powerpc: Fix emit_tests to work with run_kselftest.sh
- soc: imx8m: Enable OCOTP clock for imx8mm before reading registers
- arm64: dts: imx: Add imx8mm-prt8mm.dtb to build
- firmware: arm_ffa: Don't set the memory region attributes for MEM_LEND
- gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip
- i2c: npcm7xx: Fix callback completion ordering
- x86/reboot: VMCLEAR active VMCSes before emergency reboot
- ceph: drop messages from MDS when unmounting
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- bpf: Annotate bpf_long_memcpy with data_race
- spi: sun6i: reduce DMA RX transfer width to single byte
- spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain
- nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid()
- parisc: sba: Fix compile warning wrt list of SBA devices
- parisc: iosapic.c: Fix sparse warnings
- parisc: drivers: Fix sparse warning
- parisc: irq: Make irq_stack_union static to avoid sparse warning
- scsi: qedf: Add synchronization between I/O completions and abort
- scsi: ufs: core: Move __ufshcd_send_uic_cmd() outside host_lock
- scsi: ufs: core: Poll HCS.UCRDY before issuing a UIC command
- selftests/ftrace: Correctly enable event in instance-event.tc
- ring-buffer: Avoid softlockup in ring_buffer_resize()
- btrfs: assert delayed node locked when removing delayed item
- selftests: fix dependency checker script
- ring-buffer: Do not attempt to read past "commit"
- net/smc: bugfix for smcr v2 server connect success statistic
- ata: sata_mv: Fix incorrect string length computation in mv_dump_mem()
- platform/mellanox: mlxbf-bootctl: add NET dependency into Kconfig
- platform/x86: asus-wmi: Support 2023 ROG X16 tablet mode
- thermal/of: add missing of_node_put()
- drm/amd/display: Don't check registers, if using AUX BL control
- drm/amdgpu/soc21: don't remap HDP registers for SR-IOV
- drm/amdgpu/nbio4.3: set proper rmmio_remap.reg_offset for SR-IOV
- drm/amdgpu: Handle null atom context in VBIOS info ioctl
- riscv: errata: fix T-Head dcache.cva encoding
- scsi: pm80xx: Use phy-specific SAS address when sending PHY_START command
- scsi: pm80xx: Avoid leaking tags when processing
OPC_INB_SET_CONTROLLER_CONFIG command
- smb3: correct places where ENOTSUPP is used instead of preferred EOPNOTSUPP
- ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset()
- spi: nxp-fspi: reset the FLSHxCR1 registers
- spi: stm32: add a delay before SPI disable
- ASoC: fsl: imx-pcm-rpmsg: Add SNDRV_PCM_INFO_BATCH flag
- spi: intel-pci: Add support for Granite Rapids SPI serial flash
- bpf: Clarify error expectations from bpf_clone_redirect
- ALSA: hda: intel-sdw-acpi: Use u8 type for link index
- ASoC: cs42l42: Ensure a reset pulse meets minimum pulse width.
- ASoC: cs42l42: Don't rely on GPIOD_OUT_LOW to set RESET initially low
- firmware: cirrus: cs_dsp: Only log list of algorithms in debug build
- memblock tests: fix warning: "__ALIGN_KERNEL" redefined
- memblock tests: fix warning ‘struct seq_file’ declared inside parameter list
- ASoC: imx-rpmsg: Set ignore_pmdown_time for dai_link
- media: vb2: frame_vector.c: replace WARN_ONCE with a comment
- NFSv4.1: fix zero value filehandle in post open getattr
- ASoC: SOF: Intel: MTL: Reduce the DSP init timeout
- powerpc/watchpoints: Disable preemption in thread_change_pc()
- powerpc/watchpoint: Disable pagefaults when getting user instruction
- powerpc/watchpoints: Annotate atomic context in more places
- net: hsr: Add __packed to struct hsr_sup_tlv.
- tsnep: Fix NAPI scheduling
- tsnep: Fix NAPI polling with budget 0
- LoongArch: Set all reserved memblocks on Node#0 at initialization
- fbdev/sh7760fb: Depend on FB=y
- perf build: Define YYNOMEM as YYNOABORT for bison < 3.81
- nvme-pci: do not set the NUMA node of device if it has none
- wifi: ath11k: Don't drop tx_status when peer cannot be found
- scsi: qla2xxx: Fix NULL pointer dereference in target mode
- smack: Record transmuting in smk_transmuted
- smack: Retrieve transmuting information in smack_inode_getsecurity()
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- x86/srso: Add SRSO mitigation for Hygon processors
- KVM: SVM: INTERCEPT_RDTSCP is never intercepted anyway
- KVM: SVM: Fix TSC_AUX virtualization setup
- KVM: x86/mmu: Open code leaf invalidation from mmu_notifier
- KVM: x86/mmu: Do not filter address spaces in
for_each_tdp_mmu_root_yield_safe()
- mptcp: fix bogus receive window shrinkage with multiple subflows
- Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux"
- serial: 8250_port: Check IRQ data before use
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre
M70q
- LoongArch: Define relocation types for ABI v2.10
- LoongArch: numa: Fix high_memory calculation
- ata: libata-scsi: link ata port and scsi device
- ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES
- io_uring/fs: remove sqe->rw_flags checking from LINKAT
- i2c: i801: unregister tco_pdev in i801_probe() error path
- ASoC: amd: yc: Fix non-functional mic on Lenovo 82QF and 82UG
- kernel/sched: Modify initial boot task idle setup
- sched/rt: Fix live lock between select_fallback_rq() and RT push
- Revert "SUNRPC dont update timeout value on connection reset"
- timers: Tag (hr)timer softirq as hotplug safe
- drm/tests: Fix incorrect argument in drm_test_mm_insert_range
- arm64: defconfig: remove CONFIG_COMMON_CLK_NPCM8XX=y
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy()
- mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement
- ring-buffer: Update "shortest_full" in polling
- btrfs: properly report 0 avail for very full file systems
- media: uvcvideo: Fix OOB read
- bpf: Add override check to kprobe multi link attach
- bpf: Fix BTF_ID symbol generation collision
- bpf: Fix BTF_ID symbol generation collision in tools/
- net: thunderbolt: Fix TCPv6 GSO checksum calculation
- ata: libata-core: Fix ata_port_request_pm() locking
- ata: libata-core: Fix port and device removal
- ata: libata-core: Do not register PM operations for SAS ports
- ata: libata-sata: increase PMP SRST timeout to 10s
- drm/i915/gt: Fix reservation address in ggtt_reserve_guc_top
- power: supply: rk817: Add missing module alias
- power: supply: ab8500: Set typing and props
- fs: binfmt_elf_efpic: fix personality for ELF-FDPIC
- drm/amdkfd: Use gpu_offset for user queue's wptr
- drm/meson: fix memory leak on ->hpd_notify callback
- memcg: drop kmem.limit_in_bytes
- mm, memcg: reconsider kmem.limit_in_bytes deprecation
- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82TL
- NFS: More fixes for nfs_direct_write_reschedule_io()
- ASoC: rt5640: Fix sleep in atomic context
- ASoC: rt5640: Do not disable/enable IRQ twice on suspend/resume
- ASoC: rt5640: Enable the IRQ on resume after configuring jack-detect
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- net: microchip: sparx5: Fix memory leak for
vcap_api_rule_add_keyvalue_test()
- net: microchip: sparx5: Fix memory leak for
vcap_api_rule_add_actionvalue_test()
- net: microchip: sparx5: Fix possible memory leak in
vcap_api_encode_rule_test()
- net: microchip: sparx5: Fix possible memory leaks in
test_vcap_xn_rule_creator()
- net: microchip: sparx5: Fix possible memory leaks in vcap_api_kunit
- x86/srso: Set CPUID feature bits independently of bug or mitigation status
- x86/srso: Don't probe microcode in a guest
- vxlan: Add missing entries to vxlan_get_size()
- net: hinic: Fix warning-hinic_set_vlan_fliter() warn: variable dereferenced
before check 'hwdev'
- swiotlb: use the calculated number of areas
- i915/guc: Get runtime pm in busyness worker only if already active
- spi: zynqmp-gqspi: fix clock imbalance on probe failure
- mm: page_alloc: fix CMA and HIGHATOMIC landing on the wrong buddy list
- ring-buffer: Fix bytes info in per_cpu buffer stats
- btrfs: file_remove_privs needs an exclusive lock in direct io write
- Upstream stable to v6.1.56, v6.5.6
- ASoC: soc-utils: Export snd_soc_dai_is_dummy() symbol
- ASoC: tegra: Fix redundant PLLA and PLLA_OUT0 updates
- mptcp: rename timer related helper to less confusing names
- mptcp: fix dangling connection hang-up
- mptcp: annotate lockless accesses to sk->sk_err
- mptcp: move __mptcp_error_report in protocol.c
- mptcp: process pending subflow error on close
- ata,scsi: do not issue START STOP UNIT on resume
- scsi: sd: Differentiate system and runtime start/stop management
- scsi: sd: Do not issue commands to suspended disks on shutdown
- scsi: core: Improve type safety of scsi_rescan_device()
- scsi: Do not attempt to rescan suspended devices
- ata: libata-scsi: Fix delayed scsi_rescan_device() execution
- NFS: Cleanup unused rpc_clnt variable
- NFS: rename nfs_client_kset to nfs_kset
- NFSv4: Fix a state manager thread deadlock regression
- mm/memory: add vm_normal_folio()
- mm/mempolicy: convert queue_pages_pmd() to queue_folios_pmd()
- mm/mempolicy: convert queue_pages_pte_range() to queue_folios_pte_range()
- mm/mempolicy: convert migrate_page_add() to migrate_folio_add()
- mm: mempolicy: keep VMA walk if both MPOL_MF_STRICT and MPOL_MF_MOVE are
specified
- ring-buffer: remove obsolete comment for free_buffer_page()
- Revert "NFSv4: Retry LOCK on OLD_STATEID during delegation return"
- arm64: Avoid repeated AA64MMFR1_EL1 register read on pagefault path
- net: add sysctl accept_ra_min_rtr_lft
- net: change accept_ra_min_rtr_lft to affect all RA lifetimes
- net: release reference to inet6_dev pointer
- arm64: cpufeature: Fix CLRBHB and BC detection
- drm/amd/display: Adjust the MST resume flow
- iommu/arm-smmu-v3: Set TTL invalidation hint better
- iommu/arm-smmu-v3: Avoid constructing invalid range commands
- rbd: move rbd_dev_refresh() definition
- rbd: decouple header read-in from updating rbd_dev->header
- rbd: decouple parent info read-in from updating rbd_dev
- rbd: take header_rwsem in rbd_dev_refresh() only when updating
- hwmon: (nzxt-smart2) Add device id
- hwmon: (nzxt-smart2) add another USB ID
- scsi: zfcp: Fix a double put in zfcp_port_enqueue()
- iommu/vt-d: Avoid memory allocation in iommu_suspend()
- net: ethernet: mediatek: disable irq before schedule napi
- mptcp: userspace pm allow creating id 0 subflow
- qed/red_ll2: Fix undefined behavior bug in struct qed_ll2_info
- Bluetooth: hci_codec: Fix leaking content of local_codecs
- Bluetooth: hci_sync: Fix handling of HCI_QUIRK_STRICT_DUPLICATE_FILTER
- wifi: mwifiex: Fix tlv_buf_left calculation
- md/raid5: release batch_last before waiting for another stripe_head
- PCI: qcom: Fix IPQ8074 enumeration
- net: replace calls to sock->ops->connect() with kernel_connect()
- net: prevent rewrite of msg_name in sock_sendmsg()
- drm/amd: Fix detection of _PR3 on the PCIe root port
- drm/amd: Fix logic error in sienna_cichlid_update_pcie_parameters()
- arm64: Add Cortex-A520 CPU part definition
- arm64: errata: Add Cortex-A520 speculative unprivileged load workaround
- [Config] updateconfigs for ARM64_ERRATUM_2966298
- HID: sony: Fix a potential memory leak in sony_probe()
- ubi: Refuse attaching if mtd's erasesize is 0
- erofs: fix memory leak of LZMA global compressed deduplication
- wifi: iwlwifi: dbg_ini: fix structure packing
- wifi: iwlwifi: mvm: Fix a memory corruption issue
- wifi: cfg80211: hold wiphy lock in auto-disconnect
- wifi: cfg80211: move wowlan disable under locks
- wifi: cfg80211: add a work abstraction with special semantics
- wifi: cfg80211: fix cqm_config access race
- wifi: cfg80211: add missing kernel-doc for cqm_rssi_work
- wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet
- leds: Drop BUG_ON check for LED_COLOR_ID_MULTI
- bpf: Fix tr dereferencing
- regulator: mt6358: Drop *_SSHUB regulators
- regulator: mt6358: Use linear voltage helpers for single range regulators
- regulator: mt6358: split ops for buck and linear range LDO regulators
- Bluetooth: Delete unused hci_req_prepare_suspend() declaration
- Bluetooth: ISO: Fix handling of listen for unicast
- drivers/net: process the result of hdlc_open() and add call of hdlc_close()
in uhdlc_close()
- wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling
- perf/x86/amd/core: Fix overflow reset on hotplug
- regmap: rbtree: Fix wrong register marked as in-cache when creating new node
- wifi: mac80211: fix potential key use-after-free
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/mediatek: Fix share pgtable for iova over 4GB
- regulator/core: regulator_register: set device->class earlier
- ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig
- [Config] updateconfigs for IMA_BLACKLIST_KEYRING
- scsi: target: core: Fix deadlock due to recursive locking
- ima: rework CONFIG_IMA dependency block
- NFSv4: Fix a nfs4_state_manager() race
- bpf: tcp_read_skb needs to pop skb regardless of seq
- bpf, sockmap: Do not inc copied_seq when PEEK flag set
- bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets
- modpost: add missing else to the "of" check
- net: fix possible store tearing in neigh_periodic_work()
- bpf: Add BPF_FIB_LOOKUP_SKIP_NEIGH for bpf_fib_lookup
- neighbour: annotate lockless accesses to n->nud_state
- neighbour: switch to standard rcu, instead of rcu_bh
- neighbour: fix data-races around n->output
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- ptp: ocp: Fix error handling in ptp_ocp_device_init
- net: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent
- ipv6: tcp: add a missing nf_reset_ct() in 3WHS handling
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- net: nfc: llcp: Add lock when modifying device list
- net: ethernet: ti: am65-cpsw: Fix error code in
am65_cpsw_nuss_init_tx_chns()
- ibmveth: Remove condition to recompute TCP header checksum.
- netfilter: handle the connecting collision properly in
nf_conntrack_proto_sctp
- selftests: netfilter: Test nf_tables audit logging
- selftests: netfilter: Extend nft_audit.sh
- netfilter: nf_tables: Deduplicate nft_register_obj audit logs
- netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure
- ipv4: Set offload_failed flag in fibmatch results
- net: stmmac: dwmac-stm32: fix resume on STM32 MCU
- tipc: fix a potential deadlock on &tx->lock
- tcp: fix quick-ack counting to count actual ACKs of new data
- tcp: fix delayed ACKs for MSS boundary condition
- sctp: update transport state when processing a dupcook packet
- sctp: update hb timer immediately after users change hb_interval
- netlink: annotate data-races around sk->sk_err
- HID: sony: remove duplicate NULL check before calling usb_free_urb()
- HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit
- intel_idle: add Emerald Rapids Xeon support
- smb: use kernel_connect() and kernel_bind()
- parisc: Fix crash with nr_cpus=1 option
- dm zoned: free dmz->ddev array in dmz_put_zoned_devices
- RDMA/core: Require admin capabilities to set system parameters
- of: dynamic: Fix potential memory leak in of_changeset_action()
- IB/mlx4: Fix the size of a buffer in add_port_entries()
- gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config()
- gpio: pxa: disable pinctrl calls for MMP_GPIO
- RDMA/cma: Initialize ib_sa_multicast structure to 0 when join
- RDMA/cma: Fix truncation compilation warning in make_cma_ports
- RDMA/uverbs: Fix typo of sizeof argument
- RDMA/srp: Do not call scsi_done() from srp_abort()
- RDMA/siw: Fix connection failure handling
- RDMA/mlx5: Fix mutex unlocking on error flow for steering anchor creation
- RDMA/mlx5: Fix NULL string error
- x86/sev: Use the GHCB protocol when available for SNP CPUID requests
- ksmbd: fix race condition between session lookup and expire
- ksmbd: fix uaf in smb20_oplock_break_ack
- parisc: Restore __ldcw_align for PA-RISC 2.0 processors
- ipv6: remove nexthop_fib6_nh_bh()
- vrf: Fix lockdep splat in output path
- ipv6: remove one read_lock()/read_unlock() pair in rt6_check_neigh()
- xen/events: replace evtchn_rwlock with RCU
- net: mana: Fix TX CQE error handling
- mptcp: fix delegated action races
- wifi: rtw88: rtw8723d: Fix MAC address offset in EEPROM
- wifi: mt76: fix lock dependency problem for wed_lock
- wifi: cfg80211/mac80211: hold link BSSes when assoc fails for MLO connection
- ice: always add legacy 32byte RXDID in supported_rxdids
- Upstream stable to v6.1.57, v6.5.7
* Lunar update: upstream stable patchset 2023-12-05 (LP: #2045698)
- autofs: fix memory leak of waitqueues in autofs_catatonic_mode
- btrfs: output extra debug info if we failed to find an inline backref
- locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock
- ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer
- kernel/fork: beware of __put_task_struct() calling context
- rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to
_idle()
- scftorture: Forgive memory-allocation failure if KASAN
- ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470
- perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
- perf/imx_ddr: speed up overflow frequency of cycle
- hw_breakpoint: fix single-stepping when using bpf_overflow_handler
- ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects
- selftests/nolibc: fix up kernel parameters support
- devlink: remove reload failed checks in params get/set callbacks
- crypto: lrw,xts - Replace strlcpy with strscpy
- ice: Don't tx before switchdev is fully configured
- wifi: ath9k: fix fortify warnings
- wifi: ath9k: fix printk specifier
- wifi: mwifiex: fix fortify warning
- mt76: mt7921: don't assume adequate headroom for SDIO headers
- wifi: wil6210: fix fortify warnings
- can: sun4i_can: Add acceptance register quirk
- [Config] updateconfigs for CAN_SUN4I
- can: sun4i_can: Add support for the Allwinner D1
- net: Use sockaddr_storage for getsockopt(SO_PEERNAME).
- net/ipv4: return the real errno instead of -EINVAL
- crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui()
- Bluetooth: Fix hci_suspend_sync crash
- netlink: convert nlk->flags to atomic flags
- tpm_tis: Resend command to recover from data transfer errors
- mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450
- alx: fix OOB-read compiler warning
- wifi: mac80211: check S1G action frame size
- netfilter: ebtables: fix fortify warnings in size_entry_mwt()
- wifi: cfg80211: reject auth/assoc to AP with our address
- wifi: cfg80211: ocb: don't leave if not joined
- wifi: mac80211: check for station first in client probe
- wifi: mac80211_hwsim: drop short frames
- libbpf: Free btf_vmlinux when closing bpf_object
- drm/bridge: tc358762: Instruct DSI host to generate HSE packets
- drm/edid: Add quirk for OSVR HDK 2.0
- arm64: dts: qcom: sm6125-pdx201: correct ramoops pmsg-size
- arm64: dts: qcom: sm6350: correct ramoops pmsg-size
- arm64: dts: qcom: sm8150-kumano: correct ramoops pmsg-size
- arm64: dts: qcom: sm8250-edo: correct ramoops pmsg-size
- samples/hw_breakpoint: Fix kernel BUG 'invalid opcode: 0000'
- drm/amd/display: Fix underflow issue on 175hz timing
- ASoC: SOF: topology: simplify code to prevent static analysis warnings
- ASoC: Intel: sof_sdw: Update BT offload config for soundwire config
- ALSA: hda: intel-dsp-cfg: add LunarLake support
- drm/amd/display: Use DTBCLK as refclk instead of DPREFCLK
- drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN31
- drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN314
- drm/exynos: fix a possible null-pointer dereference due to data race in
exynos_drm_crtc_atomic_disable()
- drm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer()
- bus: ti-sysc: Configure uart quirks for k3 SoC
- md: raid1: fix potential OOB in raid1_remove_disk()
- ext2: fix datatype of block number in ext2_xattr_set2()
- fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
- jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
- PCI: dwc: Provide deinit callback for i.MX
- ARM: 9317/1: kexec: Make smp stop calls asynchronous
- powerpc/pseries: fix possible memory leak in ibmebus_bus_init()
- PCI: vmd: Disable bridge window for domain reset
- PCI: fu740: Set the number of MSI vectors
- media: mdp3: Fix resource leaks in of_find_device_by_node
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
- media: af9005: Fix null-ptr-deref in af9005_i2c_xfer
- media: anysee: fix null-ptr-deref in anysee_master_xfer
- media: az6007: Fix null-ptr-deref in az6007_i2c_xfer()
- media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer
- scsi: lpfc: Abort outstanding ELS cmds when mailbox timeout error is
detected
- media: tuners: qt1010: replace BUG_ON with a regular error
- media: pci: cx23885: replace BUG with error return
- usb: cdns3: Put the cdns set active part outside the spin lock
- usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc
- tools: iio: iio_generic_buffer: Fix some integer type and calculation
- scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
- serial: cpm_uart: Avoid suspicious locking
- misc: open-dice: make OPEN_DICE depend on HAS_IOMEM
- usb: ehci: add workaround for chipidea PORTSC.PEC bug
- usb: chipidea: add workaround for chipidea PEC bug
- media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning
- kobject: Add sanity check for kset->kobj.ktype in kset_register()
- interconnect: Fix locking for runpm vs reclaim
- printk: Keep non-panic-CPUs out of console lock
- printk: Consolidate console deferred printing
- btrfs: add a helper to read the superblock metadata_uuid
- btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super
- block: factor out a bvec_set_page helper
- nvmet: use bvec_set_page to initialize bvecs
- nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page()
- drm: gm12u320: Fix the timeout usage for usb_bulk_msg()
- scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir()
- selftests: tracing: Fix to unmount tracefs for recovering environment
- x86/ibt: Suppress spurious ENDBR
- riscv: kexec: Align the kexeced kernel entry
- scsi: target: core: Fix target_cmd_counter leak
- scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file()
- panic: Reenable preemption in WARN slowpath
- x86/boot/compressed: Reserve more memory for page tables
- x86/purgatory: Remove LTO flags
- samples/hw_breakpoint: fix building without module unloading
- md/raid1: fix error: ISO C90 forbids mixed declarations
- Revert "SUNRPC: Fail faster on bad verifier"
- attr: block mode changes of symlinks
- ovl: fix failed copyup of fileattr on a symlink
- ovl: fix incorrect fdput() on aio completion
- io_uring/net: fix iter retargeting for selected buf
- md: Put the right device in md_seq_next
- Revert "drm/amd: Disable S/G for APUs when 64GB or more host memory"
- dm: don't attempt to queue IO under RCU protection
- btrfs: fix lockdep splat and potential deadlock after failure running
delayed items
- btrfs: fix a compilation error if DEBUG is defined in btree_dirty_folio
- btrfs: release path before inode lookup during the ino lookup ioctl
- btrfs: check for BTRFS_FS_ERROR in pending ordered assert
- tracing: Have tracing_max_latency inc the trace array ref count
- tracing: Have event inject files inc the trace array ref count
- tracing: Increase trace array ref count on enable and filter files
- tracing: Have current_trace inc the trace array ref count
- tracing: Have option files inc the trace array ref count
- selinux: fix handling of empty opts in selinux_fs_context_submount()
- nfsd: fix change_info in NFSv4 RENAME replies
- tracefs: Add missing lockdown check to tracefs_create_dir()
- i2c: aspeed: Reset the i2c controller when timeout occurs
- ata: libata: disallow dev-initiated LPM transitions to unsupported states
- ata: libahci: clear pending interrupt status
- scsi: megaraid_sas: Fix deadlock on firmware crashdump
- scsi: pm8001: Setup IRQs on resume
- ext4: fix rec_len verify error
- drm/amd/display: fix the white screen issue when >= 64GB DRAM
- drm/amdgpu: fix amdgpu_cs_p1_user_fence
- interconnect: Teach lockdep about icc_bw_lock order
- x86/ibt: Avoid duplicate ENDBR in __put_user_nocheck*()
- btrfs: fix race between finishing block group creation and its item update
- x86/alternatives: Remove faulty optimization
- x86,static_call: Fix static-call vs return-thunk
- Upstream stable to v6.1.55, v6.5.5
* CVE-2023-46813
- x86/sev: Disable MMIO emulation from user mode
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Check for user-space IOIO pointing to kernel space
* CVE-2023-5972
- nf_tables: fix NULL pointer dereference in nft_inner_init()
- nf_tables: fix NULL pointer dereference in nft_expr_inner_parse()
* RTL8111EPP: Fix the network lost after resume with DASH (LP: #2043786)
- r8169: add handling DASH when DASH is disabled
- r8169: fix network lost after resume on DASH systems
* kernel BUG: io_uring openat triggers audit reference count underflow
(LP: #2043841)
- audit, io_uring: io_uring openat triggers audit reference count underflow
* Fix ADL: System enabled AHCI can't get into s0ix when attached ODD
(LP: #2037493)
- ata: ahci: Add Intel Alder Lake-P AHCI controller to low power chipsets list
* [UBUNTU 23.04] Kernel config option missing for s390x PCI passthrough
(LP: #2042853)
- [Config] CONFIG_VFIO_PCI_ZDEV_KVM=y
* Could not probe Samsung P44 30S3 PM9C1a SSD correctly: nvme nvme0: Device
not ready: aborting installation, CSTS=0x0 (LP: #2041495)
- nvme: avoid bogus CRTO values
* Azure: Fix Azure vendor ID (LP: #2036600)
- SAUCE: (no-up) hv: Fix supply vendor ID
* Lunar update: upstream stable patchset 2023-11-28 (LP: #2045079)
- net/ipv6: SKB symmetric hash should incorporate transport ports
- mm: multi-gen LRU: rename lrugen->lists[] to lrugen->folios[]
- Multi-gen LRU: fix per-zone reclaim
- io_uring/net: don't overflow multishot accept
- io_uring: break out of iowq iopoll on teardown
- io_uring/sqpoll: fix io-wq affinity when IORING_SETUP_SQPOLL is used
- io_uring: Don't set affinity on a dying sqpoll thread
- drm/virtio: Conditionally allocate virtio_gpu_fence
- scsi: qla2xxx: Adjust IOCB resource on qpair create
- scsi: qla2xxx: Limit TMF to 8 per function
- scsi: qla2xxx: Fix deletion race condition
- scsi: qla2xxx: fix inconsistent TMF timeout
- scsi: qla2xxx: Fix command flush during TMF
- scsi: qla2xxx: Fix erroneous link up failure
- scsi: qla2xxx: Turn off noisy message log
- scsi: qla2xxx: Fix session hang in gnl
- scsi: qla2xxx: Fix TMF leak through
- scsi: qla2xxx: Remove unsupported ql2xenabledif option
- scsi: qla2xxx: Flush mailbox commands on chip reset
- scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit()
- scsi: qla2xxx: Error code did not return to upper layer
- scsi: qla2xxx: Fix firmware resource tracking
- null_blk: fix poll request timeout handling
- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
- clk: qcom: camcc-sc7180: fix async resume during probe
- drm/ast: Fix DRAM init on AST2200
- ASoC: tegra: Fix SFC conversion for few rates
- clk: qcom: turingcc-qcs404: fix missing resume during probe
- arm64: dts: renesas: rzg2l: Fix txdv-skew-psec typos
- send channel sequence number in SMB3 requests after reconnects
- mm: hugetlb_vmemmap: fix a race between vmemmap pmd split
- lib/test_meminit: allocate pages up to order MAX_ORDER
- parisc: led: Fix LAN receive and transmit LEDs
- parisc: led: Reduce CPU overhead for disk & lan LED computation
- cifs: update desired access while requesting for directory lease
- pinctrl: cherryview: fix address_space_handler() argument
- dt-bindings: clock: xlnx,versal-clk: drop select:false
- clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz
- clk: imx: pll14xx: align pdiv with reference manual
- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
- soc: qcom: qmi_encdec: Restrict string length in decode
- clk: qcom: dispcc-sm8450: fix runtime PM imbalance on probe errors
- clk: qcom: lpasscc-sc7280: fix missing resume during probe
- clk: qcom: q6sstop-qcs404: fix missing resume during probe
- clk: qcom: mss-sc7180: fix missing resume during probe
- NFS: Fix a potential data corruption
- NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info
- bus: mhi: host: Skip MHI reset if device is in RDDM
- kbuild: rpm-pkg: define _arch conditionally
- kbuild: do not run depmod for 'make modules_sign'
- tpm_crb: Fix an error handling path in crb_acpi_add()
- gfs2: Switch to wait_event in gfs2_logd
- gfs2: low-memory forced flush fixes
- mailbox: qcom-ipcc: fix incorrect num_chans counting
- kconfig: fix possible buffer overflow
- Input: iqs7222 - configure power mode before triggering ATI
- perf trace: Use zfree() to reduce chances of use after free
- perf trace: Really free the evsel->priv area
- pwm: atmel-tcb: Convert to platform remove callback returning void
- pwm: atmel-tcb: Harmonize resource allocation order
- pwm: atmel-tcb: Fix resource freeing in error path and remove
- backlight: gpio_backlight: Drop output GPIO direction check for initial
power state
- Input: tca6416-keypad - always expect proper IRQ number in i2c client
- Input: tca6416-keypad - fix interrupt enable disbalance
- perf annotate bpf: Don't enclose non-debug code with an assert()
- x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm()
- perf vendor events: Update the JSON/events descriptions for power10 platform
- perf vendor events: Drop some of the JSON/events for power10 platform
- perf vendor events: Drop STORES_PER_INST metric event for power10 platform
- perf top: Don't pass an ERR_PTR() directly to perf_session__delete()
- watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load
- pwm: lpc32xx: Remove handling of PWM channels
- perf test stat_bpf_counters_cgrp: Fix shellcheck issue about logical
operators
- perf test stat_bpf_counters_cgrp: Enhance perf stat cgroup BPF counter test
- drm/i915: mark requests for GuC virtual engines to avoid use-after-free
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: consider 'carryover_ios/bytes' in throtl_trim_slice()
- smb: propagate error code of extract_sharename()
- net/sched: fq_pie: avoid stalls in fq_pie_timer()
- sctp: annotate data-races around sk->sk_wmem_queued
- ipv4: annotate data-races around fi->fib_dead
- net: read sk->sk_family once in sk_mc_loop()
- net: fib: avoid warn splat in flow dissector
- xsk: Fix xsk_diag use-after-free error during socket cleanup
- drm/i915/gvt: Verify pfn is "valid" before dereferencing "struct page"
- drm/i915/gvt: Put the page reference obtained by KVM's gfn_to_pfn()
- drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt()
- net: use sk_forward_alloc_get() in sk_get_meminfo()
- net: annotate data-races around sk->sk_forward_alloc
- mptcp: annotate data-races around msk->rmem_fwd_alloc
- ipv4: ignore dst hint for multipath routes
- ipv6: ignore dst hint for multipath routes
- igb: disable virtualization features on 82580
- gve: fix frag_list chaining
- veth: Fixing transmit return status for dropped packets
- net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr
- net: phy: micrel: Correct bit assignments for phy_device flags
- bpf, sockmap: Fix skb refcnt race after locking changes
- af_unix: Fix data-races around user->unix_inflight.
- af_unix: Fix data-race around unix_tot_inflight.
- af_unix: Fix data-races around sk->sk_shutdown.
- af_unix: Fix data race around sk->sk_err.
- kcm: Destroy mutex in kcm_exit_net()
- octeontx2-af: Fix truncation of smq in CN10K NIX AQ enqueue mbox handler
- igc: Change IGC_MIN to allow set rx/tx value between 64 and 80
- igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80
- igb: Change IGB_MIN to allow set rx/tx value between 64 and 80
- s390/zcrypt: don't leak memory if dev_set_name() fails
- idr: fix param name in idr_alloc_cyclic() doc
- ip_tunnels: use DEV_STATS_INC()
- net: dsa: sja1105: fix bandwidth discrepancy between tc-cbs software and
offload
- net: dsa: sja1105: fix -ENOSPC when replacing the same tc-cbs too many times
- net: dsa: sja1105: complete tc-cbs offload support on SJA1110
- bpf: Invoke __bpf_prog_exit_sleepable_recur() on recursion in
kern_sys_bpf().
- bpf: Assign bpf_tramp_run_ctx::saved_run_ctx before recursion check.
- net: hns3: fix tx timeout issue
- net: hns3: fix byte order conversion issue in hclge_dbg_fd_tcam_read()
- net: hns3: fix debugfs concurrency issue between kfree buffer and read
- net: hns3: fix invalid mutex between tc qdisc and dcb ets command issue
- net: hns3: fix the port information display when sfp is absent
- net: hns3: remove GSO partial feature bit
- sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory()
- Multi-gen LRU: avoid race in inc_min_seq()
- net/mlx5: Free IRQ rmap and notifier on kernel shutdown
- ARC: atomics: Add compiler barrier to atomic operations...
- clocksource/drivers/arm_arch_timer: Disable timer before programming CVAL
- dmaengine: sh: rz-dmac: Fix destination and source data size setting
- jbd2: fix checkpoint cleanup performance regression
- jbd2: check 'jh->b_transaction' before removing it from checkpoint
- jbd2: correct the end of the journal recovery scan range
- ext4: add correct group descriptors and reserved GDT blocks to system zone
- ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup}
- f2fs: flush inode if atomic file is aborted
- f2fs: avoid false alarm of circular locking
- lib: test_scanf: Add explicit type cast to result initialization in
test_number_prefix()
- hwspinlock: qcom: add missing regmap config for SFPB MMIO implementation
- ata: ahci: Add Elkhart Lake AHCI controller
- ata: pata_falcon: fix IO base selection for Q40
- ata: sata_gemini: Add missing MODULE_DESCRIPTION
- ata: pata_ftide010: Add missing MODULE_DESCRIPTION
- fuse: nlookup missing decrement in fuse_direntplus_link
- btrfs: zoned: do not zone finish data relocation block group
- btrfs: fix start transaction qgroup rsv double free
- btrfs: free qgroup rsv on io failure
- btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART
- btrfs: set page extent mapped after read_folio in relocate_one_page
- btrfs: zoned: re-enable metadata over-commit for zoned mode
- btrfs: use the correct superblock to compare fsid in btrfs_validate_super
- drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable()
- mtd: rawnand: brcmnand: Fix crash during the panic_write
- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write
- mtd: spi-nor: Correct flags for Winbond w25q128
- mtd: rawnand: brcmnand: Fix potential false time out warning
- mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller
- drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma
- drm/amd/display: prevent potential division by zero errors
- KVM: SVM: Take and hold ir_list_lock when updating vCPU's Physical ID entry
- KVM: SVM: Don't inject #UD if KVM attempts to skip SEV guest insn
- KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration
- KVM: nSVM: Check instead of asserting on nested TSC scaling support
- KVM: nSVM: Load L1's TSC multiplier based on L1 state, not L2 state
- KVM: SVM: Set target pCPU during IRTE update if target vCPU is running
- KVM: SVM: Skip VMSA init in sev_es_init_vmcb() if pointer is NULL
- MIPS: Fix CONFIG_CPU_DADDI_WORKAROUNDS `modules_install' regression
- perf hists browser: Fix hierarchy mode header
- perf test shell stat_bpf_counters: Fix test on Intel
- perf tools: Handle old data in PERF_RECORD_ATTR
- perf hists browser: Fix the number of entries for 'e' key
- drm/amd/display: always switch off ODM before committing more streams
- drm/amd/display: Remove wait while locked
- drm/amdgpu: register a dirty framebuffer callback for fbcon
- kunit: Fix wild-memory-access bug in kunit_free_suite_set()
- net: ipv4: fix one memleak in __inet_del_ifa()
- kselftest/runner.sh: Propagate SIGTERM to runner child
- selftests: Keep symlinks, when possible
- net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in
smcr_port_add
- net: stmmac: fix handling of zero coalescing tx-usecs
- net: ethernet: mvpp2_main: fix possible OOB write in
mvpp2_ethtool_get_rxnfc()
- net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in
mtk_hwlro_get_fdir_all()
- hsr: Fix uninit-value access in fill_frame_info()
- net: ethernet: adi: adin1110: use eth_broadcast_addr() to assign broadcast
address
- net:ethernet:adi:adin1110: Fix forwarding offload
- net: dsa: sja1105: hide all multicast addresses from "bridge fdb show"
- net: dsa: sja1105: propagate exact error code from
sja1105_dynamic_config_poll_valid()
- net: dsa: sja1105: fix multicast forwarding working only for last added mdb
entry
- net: dsa: sja1105: serialize sja1105_port_mcast_flood() with other FDB
accesses
- net: dsa: sja1105: block FDB accesses that are concurrent with a switch
reset
- r8152: check budget for r8152_poll()
- kcm: Fix memory leak in error path of kcm_sendmsg()
- platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors
- platform/mellanox: mlxbf-tmfifo: Drop jumbo frames
- platform/mellanox: mlxbf-pmc: Fix potential buffer overflows
- platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events
- [Config] updateconfigs for NVSW_SN2201
- platform/mellanox: NVSW_SN2201 should depend on ACPI
- net: macb: Enable PTP unicast
- net: macb: fix sleep inside spinlock
- ipv6: fix ip6_sock_set_addr_preferences() typo
- ipv6: Remove in6addr_any alternatives.
- tcp: Factorise sk_family-independent comparison in
inet_bind2_bucket_match(_addr_any).
- tcp: Fix bind() regression for v4-mapped-v6 wildcard address.
- tcp: Fix bind() regression for v4-mapped-v6 non-wildcard address.
- ixgbe: fix timestamp configuration code
- kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().
- MIPS: Only fiddle with CHECKFLAGS if `need-compiler'
- drm/amd/display: Fix a bug when searching for insert_above_mpcc
- arm64: tegra: Update AHUB clock parent and rate on Tegra234
- arm64: tegra: Update AHUB clock parent and rate
- ARM: dts: qcom: msm8974pro-castor: correct inverted X of touchscreen
- ARM: dts: qcom: msm8974pro-castor: correct touchscreen function names
- ARM: dts: qcom: msm8974pro-castor: correct touchscreen syna,nosleep-mode
- ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2
- net: annotate data-races around sk->sk_tsflags
- net: annotate data-races around sk->sk_bind_phc
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- misc: fastrpc: Fix remote heap allocation request
- misc: fastrpc: Fix incorrect DMA mapping unmap request
- net: renesas: rswitch: Fix unmasking irq condition
- Upstream stable to v6.1.54, v6.5.4
* Lunar update: upstream stable patchset 2023-11-06 (LP: #2042884)
- Partially revert "drm/amd/display: Fix possible underflow for displays with
large vblank"
- Revert "Revert drm/amd/display: Enable Freesync Video Mode by default"
- powerpc/boot: Disable power10 features after BOOTAFLAGS assignment
- media: uapi: HEVC: Add num_delta_pocs_of_ref_rps_idx field
- Revert "MIPS: unhide PATA_PLATFORM"
- phy: qcom-snps-femto-v2: use qcom_snps_hsphy_suspend/resume error code
- media: amphion: use dev_err_probe
- media: pulse8-cec: handle possible ping error
- media: pci: cx23885: fix error handling for cx23885 ATSC boards
- 9p: virtio: fix unlikely null pointer deref in handle_rerror
- 9p: virtio: make sure 'offs' is initialized in zc_request
- ksmbd: fix out of bounds in smb3_decrypt_req()
- ksmbd: validate session id and tree id in compound request
- ksmbd: no response from compound read
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ASoC: da7219: Flush pending AAD IRQ when suspending
- ASoC: da7219: Check for failure reading AAD IRQ events
- ASoC: nau8821: Add DMI quirk mechanism for active-high jack-detect
- ethernet: atheros: fix return value check in atl1c_tso_csum()
- m68k: Fix invalid .section syntax
- s390/dasd: use correct number of retries for ERP requests
- s390/dasd: fix hanging device after request requeue
- fs/nls: make load_nls() take a const parameter
- ASoC: rt5682-sdw: fix for JD event handling in ClockStop Mode0
- ASoc: codecs: ES8316: Fix DMIC config
- ASoC: rt711: fix for JD event handling in ClockStop Mode0
- ASoC: rt711-sdca: fix for JD event handling in ClockStop Mode0
- ASoC: atmel: Fix the 8K sample parameter in I2SC master
- ALSA: usb-audio: Add quirk for Microsoft Modern Wireless Headset
- platform/x86: intel: hid: Always call BTNL ACPI method
- platform/x86/intel/hid: Add HP Dragonfly G2 to VGBS DMI quirks
- platform/x86: think-lmi: Use kfree_sensitive instead of kfree
- platform/x86: asus-wmi: Fix setting RGB mode on some TUF laptops
- platform/x86: huawei-wmi: Silence ambient light sensor
- drm/amd/smu: use AverageGfxclkFrequency* to replace previous GFX Curr Clock
- drm/amd/display: Guard DCN31 PHYD32CLK logic against chip family
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- ovl: Always reevaluate the file signature for IMA
- ata: pata_arasan_cf: Use dev_err_probe() instead dev_err() in data_xfer()
- ALSA: usb-audio: Update for native DSD support quirks
- staging: fbtft: ili9341: use macro FBTFT_REGISTER_SPI_DRIVER
- security: keys: perform capable check only on privileged operations
- kprobes: Prohibit probing on CFI preamble symbol
- clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM
- vmbus_testing: fix wrong python syntax for integer value comparison
- Revert "wifi: ath6k: silence false positive -Wno-dangling-pointer warning on
GCC 12"
- net: dsa: microchip: KSZ9477 register regmap alignment to 32 bit boundaries
- net: annotate data-races around sk->sk_{rcv|snd}timeo
- net: usb: qmi_wwan: add Quectel EM05GV2
- wifi: brcmfmac: Fix field-spanning write in brcmf_scan_params_v2_to_v1()
- powerpc/powermac: Use early_* IO variants in via_calibrate_decr()
- idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM
- platform/x86/amd/pmf: Fix unsigned comparison with less than zero
- scsi: lpfc: Remove reftag check in DIF paths
- scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock
- net: hns3: restore user pause configure when disable autoneg
- drm/amdgpu: Match against exact bootloader status
- wifi: cfg80211: remove links only on AP
- wifi: mac80211: Use active_links instead of valid_links in Tx
- netlabel: fix shift wrapping bug in netlbl_catmap_setlong()
- bnx2x: fix page fault following EEH recovery
- cifs: fix sockaddr comparison in iface_cmp
- cifs: fix max_credits implementation
- sctp: handle invalid error codes without calling BUG()
- scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity
- scsi: storvsc: Always set no_report_opcodes
- scsi: lpfc: Fix incorrect big endian type assignment in bsg loopback path
- LoongArch: Let pmd_present() return true when splitting pmd
- LoongArch: Fix the write_fcsr() macro
- ALSA: seq: oss: Fix racy open/close of MIDI devices
- net: sfp: handle 100G/25G active optical cables in sfp_parse_support
- tracing: Introduce pipe_cpumask to avoid race on trace_pipes
- platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE
notifications
- of: property: Simplify of_link_to_phandle()
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- tpm: Enable hwrng only for Pluton on AMD CPUs
- KVM: x86/mmu: Use kstrtobool() instead of strtobool()
- KVM: x86/mmu: Add "never" option to allow sticky disabling of nx_huge_pages
- drm/amd/display: ensure async flips are only accepted for fast updates
- udf: Check consistency of Space Bitmap Descriptor
- udf: Handle error when adding extent to a file
- Input: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN
- Revert "PCI: tegra194: Enable support for 256 Byte payload"
- Revert "net: macsec: preserve ingress frame ordering"
- tools/resolve_btfids: Use pkg-config to locate libelf
- tools/resolve_btfids: Install subcmd headers
- tools/resolve_btfids: Alter how HOSTCC is forced
- tools/resolve_btfids: Compile resolve_btfids as host program
- tools/resolve_btfids: Tidy HOST_OVERRIDES
- tools/resolve_btfids: Pass HOSTCFLAGS as EXTRA_CFLAGS to prepare targets
- tools/resolve_btfids: Fix setting HOSTCFLAGS
- reiserfs: Check the return value from __getblk()
- eventfd: prevent underflow for eventfd semaphores
- fs: Fix error checking for d_hash_and_lookup()
- iomap: Remove large folio handling in iomap_invalidate_folio()
- tmpfs: verify {g,u}id mount options correctly
- selftests/harness: Actually report SKIP for signal tests
- vfs, security: Fix automount superblock LSM init problem, preventing NFS sb
sharing
- ARM: ptrace: Restore syscall restart tracing
- ARM: ptrace: Restore syscall skipping for tracers
- refscale: Fix uninitalized use of wait_queue_head_t
- OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd()
- selftests/resctrl: Add resctrl.h into build deps
- selftests/resctrl: Don't leak buffer in fill_cache()
- selftests/resctrl: Unmount resctrl FS if child fails to run benchmark
- selftests/resctrl: Close perf value read fd on errors
- arm64/ptrace: Clean up error handling path in sve_set_common()
- sched/psi: Select KERNFS as needed
- x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved
- arm64/sme: Don't use streaming mode to probe the maximum SME VL
- arm64/fpsimd: Only provide the length to cpufeature for xCR registers
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- perf/imx_ddr: don't enable counter0 if none of 4 counters are used
- selftests/futex: Order calls to futex_lock_pi
- s390/pkey: fix/harmonize internal keyblob headers
- s390/pkey: fix PKEY_TYPE_EP11_AES handling in PKEY_GENSECK2 IOCTL
- s390/pkey: fix PKEY_TYPE_EP11_AES handling for sysfs attributes
- s390/paes: fix PKEY_TYPE_EP11_AES handling for secure keyblobs
- irqchip/loongson-eiointc: Fix return value checking of eiointc_index
- ACPI: x86: s2idle: Post-increment variables when getting constraints
- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table
- thermal/of: Fix potential uninitialized value access
- cpufreq: amd-pstate-ut: Remove module parameter access
- cpufreq: amd-pstate-ut: Fix kernel panic when loading the driver
- x86/efistub: Fix PCI ROM preservation in mixed mode
- cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit()
- selftests/bpf: Fix bpf_nf failure upon test rerun
- bpftool: use a local copy of perf_event to fix accessing :: Bpf_cookie
- bpftool: Define a local bpf_perf_link to fix accessing its fields
- bpftool: Use a local copy of BPF_LINK_TYPE_PERF_EVENT in pid_iter.bpf.c
- bpftool: Use a local bpf_perf_event_value to fix accessing its fields
- libbpf: Fix realloc API handling in zero-sized edge cases
- bpf: Clear the probe_addr for uprobe
- bpf: Fix an error in verifying a field in a union
- crypto: qat - change value of default idle filter
- tcp: tcp_enter_quickack_mode() should be static
- hwrng: nomadik - keep clock enabled while hwrng is registered
- hwrng: pic32 - use devm_clk_get_enabled
- regmap: rbtree: Use alloc_flags for memory allocations
- wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set()
- wifi: mt76: mt7921: fix non-PSC channel scan fail
- udp: re-score reuseport groups when connected sockets are present
- bpf: reject unhashed sockets in bpf_sk_assign
- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH
- spi: tegra20-sflash: fix to check return value of platform_get_irq() in
tegra_sflash_probe()
- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also
in case of OOM
- wifi: mt76: mt7915: fix power-limits while chan_switch
- wifi: mwifiex: Fix OOB and integer underflow when rx packets
- wifi: mwifiex: fix error recovery in PCIE buffer descriptor management
- kbuild: rust_is_available: remove -v option
- kbuild: rust_is_available: fix version check when CC has multiple arguments
- kbuild: rust_is_available: add check for `bindgen` invocation
- kbuild: rust_is_available: fix confusion when a version appears in the path
- crypto: stm32 - Properly handle pm_runtime_get failing
- crypto: api - Use work queue in crypto_destroy_instance
- Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe()
- Bluetooth: Fix potential use-after-free when clear keys
- Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor
- Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- selftests/bpf: Fix repeat option when kfunc_call verification fails
- selftests/bpf: Clean up fmod_ret in bench_rename test script
- net-memcg: Fix scope of sockmem pressure indicators
- ice: ice_aq_check_events: fix off-by-one check when filling buffer
- crypto: caam - fix unchecked return value error
- hwrng: iproc-rng200 - Implement suspend and resume calls
- lwt: Fix return values of BPF xmit ops
- lwt: Check LWTUNNEL_XMIT_CONTINUE strictly
- fs: ocfs2: namei: check return value of ocfs2_add_entry()
- net: annotate data-races around sk->sk_lingertime
- wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
- wifi: mwifiex: Fix missed return in oob checks failed path
- ARM: dts: Add .dts files missing from the build
- samples/bpf: fix bio latency check with tracepoint
- samples/bpf: fix broken map lookup probe
- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx
- wifi: ath9k: protect WMI command response buffer replacement with a lock
- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute
- mac80211: make ieee80211_tx_info padding explicit
- wifi: mwifiex: avoid possible NULL skb pointer dereference
- Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave()
- arm64: mm: use ptep_clear() instead of pte_clear() in clear_flush()
- wifi: ath9k: use IS_ERR() with debugfs_create_dir()
- ice: avoid executing commands on other ports when driving sync
- net: arcnet: Do not call kfree_skb() under local_irq_disable()
- mlxsw: i2c: Fix chunk size setting in output mailbox buffer
- mlxsw: i2c: Limit single transaction buffer size
- mlxsw: core_hwmon: Adjust module label names based on MTCAP sensor counter
- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible()
- octeontx2-pf: Refactor schedular queue alloc/free calls
- octeontx2-pf: Fix PFC TX scheduler free
- cteonxt2-pf: Fix backpressure config for multiple PFC priorities to work
simultaneously
- sfc: Check firmware supports Ethernet PTP filter
- netrom: Deny concurrent connect().
- drm/bridge: tc358764: Fix debug print parameter order
- ASoC: cs43130: Fix numerator/denominator mixup
- quota: factor out dquot_write_dquot()
- quota: rename dquot_active() to inode_quota_active()
- quota: add new helper dquot_active()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- drm/amd/display: Do not set drr on pipe commit
- drm/hyperv: Fix a compilation issue because of not including screen_info.h
- ASoC: stac9766: fix build errors with REGMAP_AC97
- soc: qcom: ocmem: Add OCMEM hardware version print
- soc: qcom: ocmem: Fix NUM_PORTS & NUM_MACROS macros
- arm64: dts: qcom: sm6350: Fix ZAP region
- arm64: dts: qcom: sm8250: correct dynamic power coefficients
- arm64: dts: qcom: msm8916-l8150: correct light sensor VDDIO supply
- arm64: dts: qcom: sm8250-edo: Add gpio line names for TLMM
- arm64: dts: qcom: sm8250-edo: Add GPIO line names for PMIC GPIOs
- arm64: dts: qcom: sm8250-edo: Rectify gpio-keys
- arm64: dts: qcom: sc8280xp-crd: Correct vreg_misc_3p3 GPIO
- arm64: dts: qcom: sc8280xp: Add missing SCM interconnect
- arm64: dts: qcom: msm8996: Add missing interrupt to the USB2 controller
- arm64: dts: qcom: sdm845-tama: Set serial indices and stdout-path
- arm64: dts: qcom: sm8350: Fix CPU idle state residency times
- arm64: dts: qcom: sm8350: Add missing LMH interrupts to cpufreq
- arm64: dts: qcom: sm8350: Use proper CPU compatibles
- arm64: dts: qcom: pm8350: fix thermal zone name
- arm64: dts: qcom: pm8350b: fix thermal zone name
- arm64: dts: qcom: pmr735b: fix thermal zone name
- arm64: dts: qcom: pmk8350: fix ADC-TM compatible string
- arm64: dts: qcom: sm8250: Mark PCIe hosts as DMA coherent
- ARM: dts: stm32: YAML validation fails for Argon Boards
- ARM: dts: stm32: adopt generic iio bindings for adc channels on emstamp-
argon
- ARM: dts: stm32: Add missing detach mailbox for emtrion emSBC-Argon
- ARM: dts: stm32: YAML validation fails for Odyssey Boards
- ARM: dts: stm32: Add missing detach mailbox for Odyssey SoM
- ARM: dts: stm32: Update to generic ADC channel binding on DHSOM systems
- ARM: dts: stm32: Add missing detach mailbox for DHCOM SoM
- firmware: ti_sci: Use system_state to determine polling
- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar()
- ARM: dts: BCM53573: Drop nonexistent #usb-cells
- ARM: dts: BCM53573: Add cells sizes to PCIe node
- ARM: dts: BCM53573: Use updated "spi-gpio" binding properties
- arm64: tegra: Fix HSUART for Jetson AGX Orin
- arm64: dts: qcom: sm8250-sony-xperia: correct GPIO keys wakeup again
- arm64: dts: qcom: pm6150l: Add missing short interrupt
- arm64: dts: qcom: pm660l: Add missing short interrupt
- arm64: dts: qcom: pmi8994: Add missing OVP interrupt
- arm64: tegra: Fix HSUART for Smaug
- drm/etnaviv: fix dumping of active MMU context
- block: cleanup queue_wc_store
- block: don't allow enabling a cache on devices that don't support it
- x86/mm: Fix PAT bit missing from page protection modify mask
- drm/bridge: anx7625: Use common macros for DP power sequencing commands
- drm/bridge: anx7625: Use common macros for HDCP capabilities
- ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split)
- ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210
- ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split)
- drm: adv7511: Fix low refresh rate register for ADV7533/5
- ARM: dts: BCM53573: Fix Ethernet info for Luxul devices
- arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC
- arm64: dts: qcom: sdm845: Fix the min frequency of "ice_core_clk"
- arm64: dts: qcom: msm8996-gemini: fix touchscreen VIO supply
- drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl'
- md: Factor out is_md_suspended helper
- md: Change active_io to percpu
- md: restore 'noio_flag' for the last mddev_resume()
- md/raid10: factor out dereference_rdev_and_rrdev()
- md/raid10: use dereference_rdev_and_rrdev() to get devices
- md/md-bitmap: remove unnecessary local variable in backlog_store()
- md/md-bitmap: hold 'reconfig_mutex' in backlog_store()
- drm/msm: Update dev core dump to not print backwards
- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
- of: unittest: fix null pointer dereferencing in
of_unittest_find_node_by_name()
- arm64: dts: qcom: sm8150: Fix the I2C7 interrupt
- ARM: dts: BCM53573: Fix Tenda AC9 switch CPU port
- drm/armada: Fix off-by-one error in armada_overlay_get_property()
- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty()
- drm/panel: simple: Add missing connector type and pixel format for AUO
T215HVN01
- ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig
- [Config] updateconfigs for IMA_TRUSTED_KEYRING
- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask
- soc: qcom: smem: Fix incompatible types in comparison
- drm/msm/mdp5: Don't leak some plane state
- firmware: meson_sm: fix to avoid potential NULL pointer dereference
- drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done
- smackfs: Prevent underflow in smk_set_cipso()
- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create()
- drm/msm/a2xx: Call adreno_gpu_init() earlier
- audit: fix possible soft lockup in __audit_inode_child()
- block/mq-deadline: use correct way to throttling write requests
- io_uring: fix drain stalls by invalid SQE
- drm/mediatek: dp: Add missing error checks in mtk_dp_parse_capabilities
- bus: ti-sysc: Fix build warning for 64-bit build
- drm/mediatek: Remove freeing not dynamic allocated memory
- ARM: dts: qcom: ipq4019: correct SDHCI XO clock
- drm/mediatek: Fix potential memory leak if vmap() fail
- arm64: dts: qcom: apq8016-sbc: Fix ov5640 regulator supply names
- arm64: dts: qcom: msm8998: Drop bus clock reference from MMSS SMMU
- arm64: dts: qcom: msm8998: Add missing power domain to MMSS SMMU
- arm64: dts: qcom: msm8996: Fix dsi1 interrupts
- arm64: dts: qcom: sc8280xp-x13s: Unreserve NC pins
- bus: ti-sysc: Fix cast to enum warning
- md/raid5-cache: fix a deadlock in r5l_exit_log()
- md/raid5-cache: fix null-ptr-deref for r5l_flush_stripe_to_raid()
- firmware: cs_dsp: Fix new control name check
- md: add error_handlers for raid0 and linear
- md/raid0: Factor out helper for mapping and submitting a bio
- md/raid0: Fix performance regression for large sequential writes
- md: raid0: account for split bio in iostat accounting
- ASoC: SOF: amd: clear dsp to host interrupt status
- of: overlay: Call of_changeset_init() early
- of: unittest: Fix overlay type in apply/revert check
- ALSA: ac97: Fix possible error value of *rac97
- ipmi:ssif: Add check for kstrdup
- ipmi:ssif: Fix a memory leak when scanning for an adapter
- clk: qcom: gpucc-sm6350: Introduce index-based clk lookup
- clk: qcom: gpucc-sm6350: Fix clock source names
- clk: qcom: gcc-sc8280xp: Add EMAC GDSCs
- clk: qcom: gcc-sc8280xp: Add missing GDSC flags
- dt-bindings: clock: qcom,gcc-sc8280xp: Add missing GDSCs
- clk: qcom: gcc-sc8280xp: Add missing GDSCs
- clk: rockchip: rk3568: Fix PLL rate setting for 78.75MHz
- PCI: apple: Initialize pcie->nvecs before use
- PCI: qcom-ep: Switch MHI bus master clock off during L1SS
- drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init()
- PCI/DOE: Fix destroy_work_on_stack() race
- clk: sunxi-ng: Modify mismatched function name
- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src
- EDAC/igen6: Fix the issue of no error events
- ext4: correct grp validation in ext4_mb_good_group
- ext4: avoid potential data overflow in next_linear_group
- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src
- kvm/vfio: Prepare for accepting vfio device fd
- kvm/vfio: ensure kvg instance stays around in kvm_vfio_group_add()
- clk: qcom: reset: Use the correct type of sleep/delay based on length
- clk: qcom: gcc-sm6350: Fix gcc_sdcc2_apps_clk_src
- PCI: microchip: Correct the DED and SEC interrupt bit offsets
- PCI: Mark NVIDIA T4 GPUs to avoid bus reset
- pinctrl: mcp23s08: check return value of devm_kasprintf()
- PCI: Add locking to RMW PCI Express Capability Register accessors
- PCI: pciehp: Use RMW accessors for changing LNKCTL
- PCI/ASPM: Use RMW accessors for changing LNKCTL
- clk: qcom: gcc-sm8450: Use floor ops for SDCC RCGs
- clk: imx: pllv4: Fix SPLL2 MULT range
- clk: imx: imx8ulp: update SPLL2 type
- clk: imx8mp: fix sai4 clock
- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op
- powerpc/radix: Move some functions into #ifdef CONFIG_KVM_BOOK3S_HV_POSSIBLE
- vfio/type1: fix cap_migration information leak
- nvdimm: Fix memleak of pmu attr_groups in unregister_nvdimm_pmu()
- nvdimm: Fix dereference after free in register_nvdimm_pmu()
- powerpc/fadump: reset dump area size if fadump memory reserve fails
- powerpc/perf: Convert fsl_emb notifier to state machine callbacks
- drm/amdgpu: Use RMW accessors for changing LNKCTL
- drm/radeon: Use RMW accessors for changing LNKCTL
- net/mlx5: Use RMW accessors for changing LNKCTL
- wifi: ath11k: Use RMW accessors for changing LNKCTL
- wifi: ath10k: Use RMW accessors for changing LNKCTL
- NFSv4.2: Rework scratch handling for READ_PLUS
- NFSv4.2: Fix READ_PLUS smatch warnings
- NFSv4.2: Fix READ_PLUS size calculations
- powerpc: Don't include lppaca.h in paca.h
- powerpc/pseries: Rework lppaca_shared_proc() to avoid DEBUG_PREEMPT
- nfs/blocklayout: Use the passed in gfp flags
- powerpc/pseries: Fix hcall tracepoints with JUMP_LABEL=n
- powerpc/mpc5xxx: Add missing fwnode_handle_put()
- powerpc/iommu: Fix notifiers being shared by PCI and VIO buses
- ext4: fix unttached inode after power cut with orphan file feature enabled
- jfs: validate max amount of blocks before allocation.
- fs: lockd: avoid possible wrong NULL parameter
- NFSD: da_addr_body field missing in some GETDEVICEINFO replies
- NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN
- NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ
- pNFS: Fix assignment of xprtdata.cred
- cgroup/cpuset: Inherit parent's load balance state in v2
- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah()
- media: ov5640: fix low resolution image abnormal issue
- media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables
- media: i2c: tvp5150: check return value of devm_kasprintf()
- media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()
- iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid
unbind
- iommu: rockchip: Fix directory table address encoding
- drivers: usb: smsusb: fix error handling code in smsusb_init_device
- media: dib7000p: Fix potential division by zero
- media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()
- media: cx24120: Add retval check for cx24120_message_send()
- RDMA/siw: Fabricate a GID on tun and loopback devices
- scsi: hisi_sas: Fix warnings detected by sparse
- scsi: hisi_sas: Fix normally completed I/O analysed as failed
- dt-bindings: extcon: maxim,max77843: restrict connector properties
- media: amphion: reinit vpu if reqbufs output 0
- media: amphion: add helper function to get id name
- media: mtk-jpeg: Fix use after free bug due to uncanceled work
- media: rkvdec: increase max supported height for H.264
- media: amphion: fix CHECKED_RETURN issues reported by coverity
- media: amphion: fix REVERSE_INULL issues reported by coverity
- media: amphion: fix UNINIT issues reported by coverity
- media: amphion: fix UNUSED_VALUE issue reported by coverity
- media: amphion: ensure the bitops don't cross boundaries
- media: mediatek: vcodec: Return NULL if no vdec_fb is found
- media: mediatek: vcodec: fix potential double free
- media: mediatek: vcodec: fix resource leaks in vdec_msg_queue_init()
- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host()
- scsi: RDMA/srp: Fix residual handling
- scsi: iscsi: Add length check for nlattr payload
- scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
- scsi: be2iscsi: Add length check when parsing nlattrs
- scsi: qla4xxx: Add length check when parsing nlattrs
- iio: accel: adxl313: Fix adxl313_i2c_id[] table
- serial: sprd: Assign sprd_port after initialized to avoid wrong access
- serial: sprd: Fix DMA buffer leak issue
- x86/APM: drop the duplicate APM_MINOR_DEV macro
- RDMA/rxe: Fix incomplete state save in rxe_requester
- scsi: qedf: Do not touch __user pointer in
qedf_dbg_stop_io_on_error_cmd_read() directly
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read()
directly
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read()
directly
- RDMA/irdma: Replace one-element array with flexible-array member
- coresight: tmc: Explicit type conversions to prevent integer overflow
- interconnect: qcom: qcm2290: Enable sync state
- dma-buf/sync_file: Fix docs syntax
- driver core: test_async: fix an error code
- driver core: Call dma_cleanup() on the test_remove path
- kernfs: add stub helper for kernfs_generic_poll()
- extcon: cht_wc: add POWER_SUPPLY dependency
- iommu/mediatek: Fix two IOMMU share pagetable issue
- iommu/sprd: Add missing force_aperture
- RDMA/hns: Fix port active speed
- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list
- RDMA/hns: Fix inaccurate error label name in init instance
- RDMA/hns: Fix CQ and QP cache affinity
- IB/uverbs: Fix an potential error pointer dereference
- fsi: aspeed: Reset master errors after CFAM reset
- iommu/qcom: Disable and reset context bank before programming
- iommu/vt-d: Fix to flush cache of PASID directory table
- platform/x86: dell-sysman: Fix reference leak
- media: cec: core: add adap_nb_transmit_canceled() callback
- media: cec: core: add adap_unconfigured() callback
- media: go7007: Remove redundant if statement
- media: venus: hfi_venus: Only consider sys_idle_indicator on V1
- docs: ABI: fix spelling/grammar in SBEFIFO timeout interface
- USB: gadget: core: Add missing kerneldoc for vbus_work
- USB: gadget: f_mass_storage: Fix unused variable warning
- drivers: base: Free devm resources when unregistering a device
- HID: input: Support devices sending Eraser without Invert
- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
- media: ov5640: Fix initial RESETB state and annotate timings
- media: ov2680: Remove auto-gain and auto-exposure controls
- media: ov2680: Fix ov2680_bayer_order()
- media: ov2680: Fix vflip / hflip set functions
- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s
- media: ov2680: Don't take the lock for try_fmt calls
- media: ov2680: Add ov2680_fill_format() helper function
- media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not
working
- media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors
- media: i2c: rdacm21: Fix uninitialized value
- f2fs: fix to avoid mmap vs set_compress_option case
- f2fs: judge whether discard_unit is section only when have
CONFIG_BLK_DEV_ZONED
- f2fs: Only lfs mode is allowed with zoned block device feature
- Revert "f2fs: fix to do sanity check on extent cache correctly"
- cgroup:namespace: Remove unused cgroup_namespaces_init()
- coresight: trbe: Fix TRBE potential sleep in atomic context
- scsi: core: Use 32-bit hostnum in scsi_host_lookup()
- scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock
- interconnect: qcom: sm8450: Enable sync_state
- interconnect: qcom: bcm-voter: Improve enable_mask handling
- interconnect: qcom: bcm-voter: Use enable_maks for keepalive voting
- serial: tegra: handle clk prepare error in tegra_uart_hw_init()
- amba: bus: fix refcount leak
- Revert "IB/isert: Fix incorrect release of isert connection"
- RDMA/siw: Balance the reference of cep->kref in the error path
- RDMA/siw: Correct wrong debug message
- RDMA/efa: Fix wrong resources deallocation order
- HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode()
- HID: uclogic: Correct devm device reference for hidinput input_dev name
- HID: multitouch: Correct devm device reference for hidinput input_dev name
- platform/x86/amd/pmf: Fix a missing cleanup path
- tick/rcu: Fix false positive "softirq work is pending" messages
- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS
- tracing: Remove extra space at the end of hwlat_detector/mode
- tracing: Fix race issue between cpu buffer write and swap
- mtd: rawnand: brcmnand: Fix mtd oobsize
- dmaengine: idxd: Modify the dependence of attribute pasid_enabled
- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate
- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write
- rpmsg: glink: Add check for kstrdup
- leds: pwm: Fix error code in led_pwm_create_fwnode()
- leds: multicolor: Use rounded division when calculating color components
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false
- leds: trigger: tty: Do not use LED_ON/OFF constants, use
led_blink_set_oneshot instead
- mtd: spi-nor: Check bus width while setting QE bit
- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume()
- um: Fix hostaudio build errors
- dmaengine: ste_dma40: Add missing IRQ check in d40_probe
- Drivers: hv: vmbus: Don't dereference ACPI root object handle
- cpufreq: Fix the race condition while updating the transition_task of policy
- virtio_ring: fix avail_wrap_counter in virtqueue_add_packed
- netfilter: nft_exthdr: Fix non-linear header modification
- skbuff: skb_segment, Call zero copy functions before using skbuff frags
- PM / devfreq: Fix leak in devfreq_dev_release()
- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
- rcu: dump vmalloc memory info safely
- printk: ringbuffer: Fix truncating buffer size min_t cast
- scsi: core: Fix the scsi_set_resid() documentation
- mm/vmalloc: add a safer version of find_vm_area() for debug
- cpu/hotplug: Prevent self deadlock on CPU hot-unplug
- media: i2c: ccs: Check rules is non-NULL
- [Config] updateconfigs for VIDEO_CAMERA_SENSOR
- media: i2c: Add a camera sensor top level menu
- PCI: rockchip: Use 64-bit mask on MSI 64-bit PCI address
- ipmi_si: fix a memleak in try_smi_init()
- ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch()
- XArray: Do not return sibling entries from xa_load()
- io_uring: break iopolling on signal
- backlight/gpio_backlight: Compare against struct fb_info.device
- backlight/bd6107: Compare against struct fb_info.device
- backlight/lv5207lp: Compare against struct fb_info.device
- drm/amd/display: register edp_backlight_control() for DCN301
- xtensa: PMU: fix base address for the newer hardware
- LoongArch: mm: Add p?d_leaf() definitions
- i3c: master: svc: fix probe failure when no i3c device exist
- arm64: csum: Fix OoB access in IP checksum code for negative lengths
- ALSA: hda/cirrus: Fix broken audio on hardware with two CS42L42 codecs.
- media: dvb: symbol fixup for dvb_attach()
- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- PCI: Free released resource after coalescing
- PCI: hv: Fix a crash in hv_pci_restore_msi_msg() during hibernation
- PCI/PM: Only read PCI_PM_CTRL register when available
- ntb: Drop packets when qp link is down
- ntb: Clean up tx tail index on link down
- ntb: Fix calculation ntb_transport_tx_free_entry()
- Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset"
- block: don't add or resize partition on the disk with GENHD_FL_NO_PART
- procfs: block chmod on /proc/thread-self/comm
- parisc: Fix /proc/cpuinfo output for lscpu
- drm/amd/display: Add smu write msg id fail retry process
- bpf: Fix issue in verifying allow_ptr_leaks
- dlm: fix plock lookup when using multiple lockspaces
- dccp: Fix out of bounds access in DCCP error handler
- x86/sev: Make enc_dec_hypercall() accept a size instead of npages
- X.509: if signature is unsupported skip validation
- net: handle ARPHRD_PPP in dev_is_mac_header_xmit()
- fsverity: skip PKCS#7 parser when keyring is empty
- x86/MCE: Always save CS register on AMD Zen IF Poison errors
- platform/chrome: chromeos_acpi: print hex string for ACPI_TYPE_BUFFER
- mmc: renesas_sdhi: register irqs before registering controller
- pstore/ram: Check start of empty przs during init
- arm64: sdei: abort running SDEI handlers during crash
- s390/dcssblk: fix kernel crash with list_add corruption
- s390/ipl: add missing secure/has_secure file to ipl type 'unknown'
- s390/dasd: fix string length handling
- crypto: stm32 - fix loop iterating through scatterlist for DMA
- cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug
- of: property: fw_devlink: Add a devlink for panel followers
- usb: typec: tcpm: set initial svdm version based on pd revision
- usb: typec: bus: verify partner exists in typec_altmode_attention
- x86/sgx: Break up long non-preemptible delays in sgx_vepc_release()
- perf/x86/uncore: Correct the number of CHAs on EMR
- serial: sc16is7xx: remove obsolete out_thread label
- serial: sc16is7xx: fix regression with GPIO configuration
- tracing: Zero the pipe cpumask on alloc to avoid spurious -EBUSY
- Revert "drm/amd/display: Do not set drr on pipe commit"
- md: Free resources in __md_stop
- NFSv4.2: Fix a potential double free with READ_PLUS
- NFSv4.2: Rework scratch handling for READ_PLUS (again)
- md: fix regression for null-ptr-deference in __md_stop()
- clk: Mark a fwnode as initialized when using CLK_OF_DECLARE() macro
- treewide: Fix probing of devices in DT overlays
- clk: Avoid invalid function names in CLK_OF_DECLARE()
- powercap: arm_scmi: Remove recursion while parsing zones
- wifi: mt76: mt7915: rework tx packets counting when WED is active
- wifi: mt76: mt7915: rework tx bytes counting when WED is active
- wifi: mt76: mt7996: fix bss wlan_idx when sending bss_info command
- wifi: mt76: mt7996: use correct phy for background radar event
- wifi: mt76: mt7996: fix WA event ring size
- can: tcan4x5x: Remove reserved register 0x814 from writable table
- net: lan966x: Fix return value check for vcap_get_rule()
- wifi: rtw89: 8852b: rfk: fine tune IQK parameters to improve performance on
2GHz band
- bpf: Fix check_func_arg_reg_off bug for graph root/node
- octeontx2-af: CN10KB: fix PFC configuration
- drm: bridge: dw-mipi-dsi: Fix enable/disable of DSI controller
- ARM: dts: stm32: Add missing detach mailbox for DHCOR SoM
- arm64: dts: qcom: pmi8950: Add missing OVP interrupt
- ARM: dts: qcom: sdx65-mtp: Update the pmic used in sdx65
- iommufd: Fix locking around hwpt allocation
- clk: qcom: dispcc-sc8280xp: Use ret registers on GDSCs
- PCI: Mark NVIDIA T4 GPUs to avoid bus reset
- pinctrl: mediatek: assign functions to configure pin bias on MT7986
- media: amphion: decoder support display delay for all formats
- RDMA/rxe: Move work queue code to subroutines
- RDMA/rxe: Fix rxe_modify_srq
- iommu: Remove kernel-doc warnings
- arm64: defconfig: Drop CONFIG_VIDEO_IMX_MEDIA
- media: ipu-bridge: Fix null pointer deref on SSDB/PLD parsing warnings
- thermal/drivers/imx8mm: Suppress log message on probe deferral
- dmaengine: idxd: Allow ATS disable update only for configurable devices
- powerpc/ftrace: Fix dropping weak symbols with older toolchains
- crypto: af_alg - Decrement struct key.usage in alg_set_by_key_serial()
- x86/build: Fix linker fill bytes quirk/incompatibility for ld.lld
- Upstream stable to v6.1.53, v6.4.16
* CVE-2023-6176
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
-- Stefan Bader <email address hidden> Mon, 15 Jan 2024 15:26:10 +0100
-
linux-oracle (6.2.0-1017.18) lunar; urgency=medium
* lunar/linux-oracle: 6.2.0-1017.18 -proposed tracker (LP: #2041549)
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
- [Packaging] resync update-dkms-versions helper
[ Ubuntu: 6.2.0-39.40 ]
* lunar/linux: 6.2.0-39.40 -proposed tracker (LP: #2043451)
* USB bus error after upgrading to proposed kernel on lunar and jammy
(LP: #2043197)
- USB: core: Fix oversight in SuperSpeed initialization
* Include cifs.ko in linux-modules package (LP: #2042546)
- [Packaging] Replace fs/cifs with fs/smb/client in inclusion list
[ Ubuntu: 6.2.0-38.39 ]
* lunar/linux: 6.2.0-38.39 -proposed tracker (LP: #2041557)
* CVE-2023-25775
- RDMA/irdma: Prevent zero-length STAG registration
* CVE-2023-5345
- fs/smb/client: Reset password pointer to NULL
* CVE-2023-39189
- netfilter: nfnetlink_osf: avoid OOB read
* SMC stats: Wrong bucket calculation for payload of exactly 4096 bytes
(LP: #2039575)
- net/smc: Fix pos miscalculation in statistics
* [SRU][J/L/M] UBUNTU: [Packaging] Make WWAN driver a loadable module
(LP: #2033406)
- [Packaging] Make WWAN driver loadable modules
* CVE-2023-45871
- igb: set max size RX buffer when store bad packet is enabled
* CVE-2023-39193
- netfilter: xt_sctp: validate the flag_info count
* CVE-2023-39192
- netfilter: xt_u32: validate user space input
* CVE-2023-31085
- ubi: Refuse attaching if mtd's erasesize is 0
* CVE-2023-5717
- perf: Disallow mis-matched inherited group reads
* CVE-2023-5178
- nvmet-tcp: Fix a possible UAF in queue intialization setup
* CVE-2023-5158
- vringh: don't use vringh_kiov_advance() in vringh_iov_xfer()
* CVE-2023-5090
- x86: KVM: SVM: always update the x2avic msr interception
* usbip: error: failed to open /usr/share/hwdata//usb.ids (LP: #2039439)
- [Packaging] Make linux-tools-common depend on hwdata
* Unable to use nvme drive to install Ubuntu 23.10 (LP: #2040157)
- misc: rtsx: Fix some platforms can not boot and move the l1ss judgment to
probe
* Lunar update: upstream stable patchset 2023-10-19 (LP: #2039884)
- ACPI: thermal: Drop nocrt parameter
- module: Expose module_init_layout_section()
- arm64: module-plts: inline linux/moduleloader.h
- arm64: module: Use module_init_layout_section() to spot init sections
- ARM: module: Use module_init_layout_section() to spot init sections
- lockdep: fix static memory detection even more
- parisc: Cleanup mmap implementation regarding color alignment
- parisc: sys_parisc: parisc_personality() is called from asm code
- io_uring/parisc: Adjust pgoff in io_uring mmap() for parisc
- kallsyms: Fix kallsyms_selftest failure
- module/decompress: use vmalloc() for zstd decompression workspace
- Upstream stable to v6.1.51, v6.4.14
- erofs: ensure that the post-EOF tails are all zeroed
- ksmbd: fix wrong DataOffset validation of create context
- ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()
- ksmbd: replace one-element array with flex-array member in struct
smb2_ea_info
- ksmbd: reduce descriptor size if remaining bytes is less than request size
- ARM: pxa: remove use of symbol_get()
- mmc: au1xmmc: force non-modular build and remove symbol_get usage
- net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index
- rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff
- modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules
- USB: serial: option: add Quectel EM05G variant (0x030e)
- USB: serial: option: add FOXCONN T99W368/T99W373 product
- ALSA: usb-audio: Fix init call orders for UAC1
- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption
- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0
- HID: wacom: remove the battery when the EKR is off
- staging: rtl8712: fix race condition
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race
condition
- wifi: mt76: mt7921: do not support one stream on secondary antenna only
- wifi: mt76: mt7921: fix skb leak by txs missing in AMSDU
- serial: qcom-geni: fix opp vote on shutdown
- serial: sc16is7xx: fix broken port 0 uart init
- serial: sc16is7xx: fix bug when first setting GPIO direction
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
- fsi: master-ast-cf: Add MODULE_FIRMWARE macro
- tcpm: Avoid soft reset when partner does not support get_status
- dt-bindings: sc16is7xx: Add property to change GPIO function
- nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers()
- nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse
- usb: typec: tcpci: clear the fault status bit
- pinctrl: amd: Don't show `Invalid config param` errors
- wifi: rtw88: usb: kill and free rx urbs on probe failure
- Upstream stable to v6.1.52, v6.4.15
* Lunar update: upstream stable patchset 2023-10-18 (LP: #2039742)
- NFSv4.2: fix error handling in nfs42_proc_getxattr
- NFSv4: fix out path in __nfs4_get_acl_uncached
- xprtrdma: Remap Receive buffers after a reconnect
- drm/ast: Use drm_aperture_remove_conflicting_pci_framebuffers
- fbdev/radeon: use pci aperture helpers
- PCI: acpiphp: Reassign resources on bridge if necessary
- MIPS: cpu-features: Enable octeon_cache by cpu_type
- MIPS: cpu-features: Use boot_cpu_type for CPU type based features
- jbd2: remove t_checkpoint_io_list
- jbd2: remove journal_clean_one_cp_list()
- jbd2: fix a race when checking checkpoint buffer busy
- can: raw: fix receiver memory leak
- can: raw: fix lockdep issue in raw_release()
- s390/zcrypt: remove unnecessary (void *) conversions
- s390/zcrypt: fix reply buffer calculations for CCA replies
- drm/i915: Add the gen12_needs_ccs_aux_inv helper
- drm/i915/gt: Ensure memory quiesced before invalidation
- drm/i915/gt: Poll aux invalidation register bit on invalidation
- drm/i915/gt: Support aux invalidation on all engines
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- tracing: Fix memleak due to race between current_tracer and trace
- octeontx2-af: SDP: fix receive link config
- devlink: move code to a dedicated directory
- devlink: add missing unregister linecard notification
- net: dsa: felix: fix oversize frame dropping for always closed tc-taprio
gates
- sock: annotate data-races around prot->memory_pressure
- dccp: annotate data-races in dccp_poll()
- ipvlan: Fix a reference count leak warning in ipvlan_ns_exit()
- mlxsw: pci: Set time stamp fields also when its type is MIRROR_UTC
- mlxsw: reg: Fix SSPR register layout
- mlxsw: Fix the size of 'VIRT_ROUTER_MSB'
- selftests: mlxsw: Fix test failure on Spectrum-4
- net: dsa: mt7530: fix handling of 802.1X PAE frames
- net: bgmac: Fix return value check for fixed_phy_register()
- net: bcmgenet: Fix return value check for fixed_phy_register()
- net: validate veth and vxcan peer ifindexes
- ipv4: fix data-races around inet->inet_id
- ice: fix receive buffer size miscalculation
- Revert "ice: Fix ice VF reset during iavf initialization"
- ice: Fix NULL pointer deref during VF reset
- selftests: bonding: do not set port down before adding to bond
- can: isotp: fix support for transmission of SF without flow control
- igb: Avoid starting unnecessary workqueues
- igc: Fix the typo in the PTM Control macro
- net/sched: fix a qdisc modification with ambiguous command request
- i40e: fix potential NULL pointer dereferencing of pf->vf
i40e_sync_vsi_filters()
- netfilter: nf_tables: flush pending destroy work before netlink notifier
- netfilter: nf_tables: fix out of memory error handling
- rtnetlink: Reject negative ifindexes in RTM_NEWLINK
- bonding: fix macvlan over alb bond support
- KVM: x86/mmu: Fix an sign-extension bug with mmu_seq that hangs vCPUs
- ASoC: amd: yc: Add VivoBook Pro 15 to quirks list for acp6x
- ASoC: cs35l41: Correct amp_gain_tlv values
- ibmveth: Use dcbf rather than dcbfl
- wifi: mac80211: limit reorder_buf_filtered to avoid UBSAN warning
- platform/x86: ideapad-laptop: Add support for new hotkeys found on ThinkBook
14s Yoga ITL
- NFSv4: Fix dropped lock for racing OPEN and delegation return
- clk: Fix slab-out-of-bounds error in devm_clk_release()
- mm,ima,kexec,of: use memblock_free_late from ima_free_kexec_buffer
- shmem: fix smaps BUG sleeping while atomic
- ALSA: ymfpci: Fix the missing snd_card_free() call at probe error
- mm/gup: handle cont-PTE hugetlb pages correctly in gup_must_unshare() via
GUP-fast
- mm: add a call to flush_cache_vmap() in vmap_pfn()
- mm: memory-failure: fix unexpected return value in soft_offline_page()
- NFS: Fix a use after free in nfs_direct_join_group()
- nfsd: Fix race to FREE_STATEID and cl_revoked
- selinux: set next pointer before attaching to list
- batman-adv: Trigger events for auto adjusted MTU
- batman-adv: Don't increase MTU when set by user
- batman-adv: Do not get eth header before batadv_check_management_packet
- batman-adv: Fix TT global entry leak when client roamed back
- batman-adv: Fix batadv_v_ogm_aggr_send memory leak
- batman-adv: Hold rtnl lock during MTU update via netlink
- lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels
- riscv: Handle zicsr/zifencei issue between gcc and binutils
- riscv: Fix build errors using binutils2.37 toolchains
- radix tree: remove unused variable
- of: unittest: Fix EXPECT for parse_phandle_with_args_map() test
- of: dynamic: Refactor action prints to not use "%pOF" inside devtree_lock
- pinctrl: amd: Mask wake bits on probe again
- media: vcodec: Fix potential array out-of-bounds in encoder queue_setup
- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root
bus
- drm/vmwgfx: Fix shader stage validation
- drm/display/dp: Fix the DP DSC Receiver cap size
- x86/fpu: Invalidate FPU state correctly on exec()
- hwmon: (aquacomputer_d5next) Add selective 200ms delay after sending ctrl
report
- nfs: use vfs setgid helper
- nfsd: use vfs setgid helper
- cgroup/cpuset: Rename functions dealing with DEADLINE accounting
- sched/cpuset: Bring back cpuset_mutex
- sched/cpuset: Keep track of SCHED_DEADLINE task in cpusets
- cgroup/cpuset: Iterate only if DEADLINE tasks are present
- sched/deadline: Create DL BW alloc, free & check overflow interface
- cgroup/cpuset: Free DL BW in case can_attach() fails
- ublk: remove check IO_URING_F_SQE128 in ublk_ch_uring_cmd
- can: raw: add missing refcount for memory leak fix
- madvise:madvise_free_pte_range(): don't use mapcount() against large folio
for sharing check
- scsi: snic: Fix double free in snic_tgt_create()
- scsi: core: raid_class: Remove raid_component_add()
- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
- pinctrl: renesas: rzg2l: Fix NULL pointer dereference in
rzg2l_dt_subnode_to_map()
- pinctrl: renesas: rzv2m: Fix NULL pointer dereference in
rzv2m_dt_subnode_to_map()
- pinctrl: renesas: rza2: Add lock around
pinctrl_generic{{add,remove}_group,{add,remove}_function}
- dma-buf/sw_sync: Avoid recursive lock during fence signal
- gpio: sim: dispose of irq mappings before destroying the irq_sim domain
- gpio: sim: pass the GPIO device's software node to irq domain
- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ
- maple_tree: disable mas_wr_append() when other readers are possible
- ASoC: amd: vangogh: select CONFIG_SND_AMD_ACP_CONFIG
- tg3: Use slab_build_skb() when needed
- Upstream stable to v6.1.50, v6.4.13
* CVE-2023-42754
- ipv4: fix null-deref in ipv4_link_failure
* Remove duplication of devm_pwmchip_add function definition (LP: #2039542)
- Revert "pwm: Add a stub for devm_pwmchip_add()"
* Lunar update: upstream stable patchset 2023-10-11 (LP: #2039110)
- selftests: forwarding: tc_actions: cleanup temporary files when test is
aborted
- net/smc: replace mutex rmbs_lock and sndbufs_lock with rw_semaphore
- net: phy: at803x: Use devm_regulator_get_enable_optional()
- net: phy: at803x: fix the wol setting functions
- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini
- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1
- drm/amdgpu: fix memory leak in mes self test
- ASoC: Intel: sof_sdw: add quirk for MTL RVP
- ASoC: Intel: sof_sdw: add quirk for LNL RVP
- PCI: tegra194: Fix possible array out of bounds access
- ASoC: SOF: amd: Add pci revision id check
- drm/stm: ltdc: fix late dereference check
- drm: rcar-du: remove R-Car H3 ES1.* workarounds
- ASoC: amd: vangogh: Add check for acp config flags in vangogh platform
- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings
- ASoC: Intel: sof_sdw_rt_sdca_jack_common: test SOF_JACK_JDSRC in _exit
- ASoC: Intel: sof_sdw: Add support for Rex soundwire
- iopoll: Call cpu_relax() in busy loops
- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion
- dma-remap: use kvmalloc_array/kvfree for larger dma memory remap
- accel/habanalabs: add pci health check during heartbeat
- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL
Keyboard
- iommu/amd: Introduce Disable IRTE Caching Support
- drm/amdgpu: install stub fence into potential unused fence pointers
- drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz
- RDMA/mlx5: Return the firmware result upon destroying QP/RQ
- drm/amd/display: Skip DPP DTO update if root clock is gated
- drm/amd/display: Enable dcn314 DPP RCO
- ASoC: SOF: core: Free the firmware trace before calling snd_sof_shutdown()
- HID: intel-ish-hid: ipc: Add Arrow Lake PCI device ID
- ALSA: hda/realtek: Add quirks for ROG ALLY CS35l41 audio
- smb: client: fix warning in cifs_smb3_do_mount()
- cifs: fix session state check in reconnect to avoid use-after-free issue
- serial: stm32: Ignore return value of uart_remove_one_port() in .remove()
- led: qcom-lpg: Fix resource leaks in for_each_available_child_of_node()
loops
- media: v4l2-mem2mem: add lock to protect parameter num_rdy
- media: camss: set VFE bpl_alignment to 16 for sdm845 and sm8250
- usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push
- usb: gadget: uvc: queue empty isoc requests if no video buffer is available
- media: platform: mediatek: vpu: fix NULL ptr dereference
- thunderbolt: Read retimer NVM authentication status prior
tb_retimer_set_inbound_sbtx()
- usb: chipidea: imx: don't request QoS for imx8ulp
- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
- gfs2: Fix possible data races in gfs2_show_options()
- pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()
- thunderbolt: Add Intel Barlow Ridge PCI ID
- thunderbolt: Limit Intel Barlow Ridge USB3 bandwidth
- firewire: net: fix use after free in fwnet_finish_incoming_packet()
- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub)
- Bluetooth: L2CAP: Fix use-after-free
- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
- ceph: try to dump the msgs when decoding fails
- drm/amdgpu: Fix potential fence use-after-free v2
- fs/ntfs3: Enhance sanity check while generating attr_list
- fs: ntfs3: Fix possible null-pointer dereferences in mi_read()
- fs/ntfs3: Mark ntfs dirty when on-disk struct is corrupted
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760
- ALSA: hda: fix a possible null-pointer dereference due to data race in
snd_hdac_regmap_sync()
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X
- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V
- powerpc/kasan: Disable KCOV in KASAN code
- Bluetooth: MGMT: Use correct address for memcpy()
- ring-buffer: Do not swap cpu_buffer during resize process
- igc: read before write to SRRCTL register
- drm/amd/display: save restore hdcp state when display is unplugged from mst
hub
- drm/amd/display: phase3 mst hdcp for multiple displays
- drm/amd/display: fix access hdcp_workqueue assert
- fbdev/hyperv-fb: Do not set struct fb_info.apertures
- btrfs: move out now unused BG from the reclaim list
- btrfs: fix use-after-free of new block group that became unused
- virtio-mmio: don't break lifecycle of vm_dev
- vduse: Use proper spinlock for IRQ injection
- vdpa/mlx5: Fix mr->initialized semantics
- vdpa/mlx5: Delete control vq iotlb in destroy_mr only when necessary
- cifs: fix potential oops in cifs_oplock_break
- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
- i2c: hisi: Only handle the interrupt of the driver's transfer
- i2c: tegra: Fix i2c-tegra DMA config option processing
- fbdev: mmp: fix value check in mmphw_probe()
- powerpc/rtas_flash: allow user copy to flash block cache objects
- vdpa: Add features attr to vdpa_nl_policy for nlattr length check
- vdpa: Add queue index attr to vdpa_nl_policy for nlattr length check
- vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check
- vdpa: Enable strict validation for netlinks ops
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32
platforms
- btrfs: fix incorrect splitting in btrfs_drop_extent_map_range
- btrfs: fix BUG_ON condition in btrfs_cancel_balance
- i2c: designware: Correct length byte validation logic
- i2c: designware: Handle invalid SMBus block data response length value
- net: xfrm: Fix xfrm_address_filter OOB read
- net: af_key: fix sadb_x_filter validation
- net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure
- xfrm: fix slab-use-after-free in decode_session6
- ip6_vti: fix slab-use-after-free in decode_session6
- ip_vti: fix potential slab-use-after-free in decode_session6
- xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH
- virtio_net: notify MAC address change on device initialization
- virtio-net: set queues after driver_ok
- net: pcs: Add missing put_device call in miic_create
- net: phy: fix IRQ-based wake-on-lan over hibernate / power off
- selftests: mirror_gre_changes: Tighten up the TTL test match
- drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs
- net: macb: In ZynqMP resume always configure PS GTR for non-wakeup source
- octeon_ep: cancel tx_timeout_task later in remove sequence
- netfilter: nf_tables: fix false-positive lockdep splat
- ipvs: fix racy memcpy in proc_do_sync_threshold
- net: phy: broadcom: stub c45 read/write for 54810
- team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- net: openvswitch: reject negative ifindex
- iavf: fix FDIR rule fields masks validation
- i40e: fix misleading debug logs
- net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset
- sfc: don't unregister flow_indr if it was never registered
- sock: Fix misuse of sk_under_memory_pressure()
- net: do not allow gso_size to be set to GSO_BY_FRAGS
- qede: fix firmware halt over suspend and resume
- ice: Block switchdev mode when ADQ is active and vice versa
- bus: ti-sysc: Flush posted write on enable before reset
- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict
- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK 4C+
- ARM: dts: imx: align LED node names with dtschema
- ARM: dts: imx6: phytec: fix RTC interrupt level
- arm64: dts: imx8mm: Drop CSI1 PHY reference clock configuration
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- arm64: dts: imx93: Fix anatop node size
- ASoC: rt5665: add missed regulator_bulk_disable
- ASoC: meson: axg-tdm-formatter: fix channel slot allocation
- ALSA: hda/realtek: Add quirks for HP G11 Laptops
- soc: aspeed: uart-routing: Use __sysfs_match_string
- soc: aspeed: socinfo: Add kfree for kstrdup
- ALSA: hda/realtek - Remodified 3k pull low procedure
- riscv: uaccess: Return the number of bytes effectively not copied
- serial: 8250: Fix oops for port->pm on uart_change_pm()
- ALSA: usb-audio: Add support for Mythware XA001AU capture and playback
interfaces.
- cifs: Release folio lock on fscache read hit.
- virtio-net: Zero max_tx_vq field for VIRTIO_NET_CTRL_MQ_HASH_CONFIG case
- arm64: dts: rockchip: Fix Wifi/Bluetooth on ROCK Pi 4 boards
- blk-crypto: dynamically allocate fallback profile
- mmc: wbsd: fix double mmc_free_host() in wbsd_init()
- mmc: block: Fix in_flight[issue_type] value error
- drm/qxl: fix UAF on handle creation
- drm/i915/sdvo: fix panel_type initialization
- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7
- ASoC: amd: vangogh: select CONFIG_SND_AMD_ACP_CONFIG
- drm/amd/display: disable RCO for DCN314
- zsmalloc: allow only one active pool compaction context
- sched/fair: unlink misfit task from cpu overutilized
- sched/fair: Remove capacity inversion detection
- drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV
register
- netfilter: set default timeout to 3 secs for sctp shutdown send and recv
state
- arm64/ptrace: Ensure that SME is set up for target when writing SSVE state
- drm/amdgpu: keep irq count in amdgpu_irq_disable_all
- drm/nouveau/disp: fix use-after-free in error handling of
nouveau_connector_create
- net: fix the RTO timer retransmitting skb every 1ms if linear option is
enabled
- mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove
- rust: macros: vtable: fix `HAS_*` redefinition (`gen_const_name`)
- media: mtk-jpeg: Set platform driver data earlier
- xfrm: delete offloaded policy
- xfrm: don't skip free of empty state in acquire policy
- ARM: dts: imx: Set default tuning step for imx7d usdhc
- smb: client: fix null auth
- mmc: sunplus: fix return value check of mmc_add_host()
- Upstream stable to v6.1.47, v6.4.12
* Lunar update: upstream stable patchset 2023-10-10 (LP: #2038969)
- tpm: Disable RNG for all AMD fTPMs
- tpm: Add a helper for checking hwrng enabled
- ksmbd: validate command request size
- ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea()
- wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems()
- wifi: rtw89: fix 8852AE disconnection caused by RX full flags
- selftests: forwarding: Set default IPv6 traceroute utility
- wireguard: allowedips: expand maximum node depth
- mmc: moxart: read scr register without changing byte order
- ipv6: adjust ndisc_is_useropt() to also return true for PIO
- selftests: mptcp: join: fix 'delete and re-add' test
- selftests: mptcp: join: fix 'implicit EP' test
- mptcp: avoid bogus reset on fallback close
- mptcp: fix disconnect vs accept race
- dmaengine: pl330: Return DMA_PAUSED when transaction is paused
- net: mana: Fix MANA VF unload when hardware is unresponsive
- riscv/kexec: load initrd high in available memory
- riscv,mmio: Fix readX()-to-delay() ordering
- riscv/kexec: handle R_RISCV_CALL_PLT relocation type
- nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM9B1 256G and 512G
- drm/nouveau/gr: enable memory loads on helper invocation on all channels
- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues
- drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap()
- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1()
- drm/amd/display: check attr flag before set cursor degamma on DCN3+
- drm/amd/display: limit DPIA link rate to HBR3
- cpuidle: dt_idle_genpd: Add helper function to remove genpd topology
- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100
- radix tree test suite: fix incorrect allocation size for pthreads
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings
- drm/amd/pm: expose swctf threshold setting for legacy powerplay
- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock
settings
- drm/amd/pm: avoid unintentional shutdown due to temperature momentary
fluctuation
- io_uring: correct check for O_TMPFILE
- iio: cros_ec: Fix the allocation size for cros_ec_command
- iio: frequency: admv1013: propagate errors from regulator_get_voltage()
- iio: adc: ad7192: Fix ac excitation feature
- iio: adc: ina2xx: avoid NULL pointer dereference on OF device match
- binder: fix memory leak in binder_init()
- misc: rtsx: judge ASPM Mode to set PETXCFG Reg
- usb-storage: alauda: Fix uninit-value in alauda_check_media()
- usb: dwc3: Properly handle processing of pending events
- USB: Gadget: core: Help prevent panic during UVC unconfigure
- usb: common: usb-conn-gpio: Prevent bailing out if initial role is none
- usb: typec: tcpm: Fix response to vsafe0V event
- usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/mm: Fix VDSO and VVAR placement on 5-level paging machines
- x86/sev: Do not try to parse for the CC blob on non-AMD hardware
- x86/speculation: Add cpu_show_gds() prototype
- drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes
- iio: core: Prevent invalid memory access when there is no parent
- interconnect: qcom: Add support for mask-based BCMs
- interconnect: qcom: sm8450: add enable_mask for bcm nodes
- selftests/rseq: Fix build with undefined __weak
- selftests: forwarding: Add a helper to skip test when using veth pairs
- selftests: forwarding: ethtool: Skip when using veth pairs
- selftests: forwarding: ethtool_extended_state: Skip when using veth pairs
- selftests: forwarding: hw_stats_l3_gre: Skip when using veth pairs
- selftests: forwarding: Skip test when no interfaces are specified
- selftests: forwarding: Switch off timeout
- selftests: forwarding: tc_flower: Relax success criterion
- net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail()
- bpf, sockmap: Fix map type error in sock_map_del_link
- bpf, sockmap: Fix bug that strp_done cannot be called
- mISDN: Update parameter type of dsp_cmx_send()
- macsec: use DEV_STATS_INC()
- mptcp: fix the incorrect judgment for msk->cb_flags
- net/packet: annotate data-races around tp->status
- tcp: add missing family to tcp_set_ca_state() tracepoint
- tunnels: fix kasan splat when generating ipv4 pmtu error
- xsk: fix refcount underflow in error path
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- dccp: fix data-race around dp->dccps_mss_cache
- drivers: net: prevent tun_build_skb() to exceed the packet size limit
- drivers: vxlan: vnifilter: free percpu vni stats on error path
- iavf: fix potential races for FDIR filters
- IB/hfi1: Fix possible panic during hotplug remove
- drm/rockchip: Don't spam logs in atomic check
- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
- RDMA/umem: Set iova in ODP flow
- net: tls: avoid discarding data on record close
- net: marvell: prestera: fix handling IPv4 routes with nhid
- net: phy: at803x: remove set/get wol callbacks for AR8032
- net: dsa: ocelot: call dsa_tag_8021q_unregister() under rtnl_lock() on
driver remove
- net: hns3: refactor hclge_mac_link_status_wait for interface reuse
- net: hns3: add wait until mac link down
- net: hns3: fix deadlock issue when externel_lb and reset are executed
together
- nexthop: Fix infinite nexthop dump when using maximum nexthop ID
- nexthop: Make nexthop bucket dump more efficient
- nexthop: Fix infinite nexthop bucket dump when using maximum nexthop ID
- net: hns3: fix strscpy causing content truncation issue
- dmaengine: mcf-edma: Fix a potential un-allocated memory access
- dmaengine: owl-dma: Modify mismatched function name
- net/mlx5: Allow 0 for total host VFs
- net/mlx5: LAG, Check correct bucket when modifying LAG
- net/mlx5: Skip clock update work when device is in error state
- net/mlx5: Reload auxiliary devices in pci error handlers
- ibmvnic: Enforce stronger sanity checks on login response
- ibmvnic: Unmap DMA login rsp buffer on send login fail
- ibmvnic: Handle DMA unmapping of login buffs in release functions
- ibmvnic: Do partial reset on login failure
- ibmvnic: Ensure login failure recovery is safe from other resets
- gpio: ws16c48: Fix off-by-one error in WS16C48 resource region extent
- gpio: sim: mark the GPIO chip as a one that can sleep
- btrfs: wait for actual caching progress during allocation
- btrfs: don't stop integrity writeback too early
- btrfs: properly clear end of the unreserved range in cow_file_range
- btrfs: exit gracefully if reloc roots don't match
- btrfs: reject invalid reloc tree root keys with stack dump
- btrfs: set cache_block_group_error if we find an error
- nvme-tcp: fix potential unbalanced freeze & unfreeze
- nvme-rdma: fix potential unbalanced freeze & unfreeze
- netfilter: nf_tables: report use refcount overflow
- scsi: core: Fix legacy /proc parsing buffer overflow
- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
- scsi: ufs: renesas: Fix private allocation
- scsi: 53c700: Check that command slot is not NULL
- scsi: snic: Fix possible memory leak if device_add() fails
- scsi: core: Fix possible memory leak if device_add() fails
- scsi: fnic: Replace return codes in fnic_clean_pending_aborts()
- scsi: qedi: Fix firmware halt over suspend and resume
- scsi: qedf: Fix firmware halt over suspend and resume
- platform/x86: serial-multi-instantiate: Auto detect IRQ resource for CSC3551
- ACPI: scan: Create platform device for CS35L56
- alpha: remove __init annotation from exported page_is_ram()
- drm/amd/pm/smu7: move variables to where they are used
- mmc: sdhci-f-sdh30: Replace with sdhci_pltfm
- cpuidle: psci: Move enabling OSI mode after power domains creation
- zsmalloc: fix races between modifications of fullness and isolated
- hugetlb: do not clear hugetlb dtor until allocating vmemmap
- mm: memory-failure: fix potential unexpected return value from
unpoison_memory()
- mm: memory-failure: avoid false hwpoison page mapped error info
- x86/linkage: Fix typo of BUILD_VDSO in asm/linkage.h
- selftests: forwarding: bridge_mdb: Check iproute2 version
- selftests: forwarding: tc_actions: Use ncat instead of nc
- selftests: forwarding: bridge_mdb: Make test more robust
- drm/bridge: it6505: Check power state with it6505->powered in IRQ handler
- drm/nouveau: remove unused tu102_gr_load() function
- Upstream stable to v6.1.46, v6.4.11
* Lunar update: upstream stable patchset 2023-10-02 (LP: #2038236)
- Upstream stable to v6.1.44, v6.4.9
- net/mlx5: Free irqs only on shutdown callback
- iommu/arm-smmu-v3: Work around MMU-600 erratum 1076982
- iommu/arm-smmu-v3: Document MMU-700 erratum 2812531
- iommu/arm-smmu-v3: Add explicit feature for nesting
- iommu/arm-smmu-v3: Document nesting-related errata
- arm64: dts: imx8mm-venice-gw7903: disable disp_blk_ctrl
- arm64: dts: imx8mm-venice-gw7904: disable disp_blk_ctrl
- arm64: dts: phycore-imx8mm: Label typo-fix of VPU
- arm64: dts: phycore-imx8mm: Correction in gpio-line-names
- arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux
- arm64: dts: freescale: Fix VPU G2 clock
- firmware: smccc: Fix use of uninitialised results structure
- lib/bitmap: workaround const_eval test build failure
- firmware: arm_scmi: Fix chan_free cleanup on SMC
- word-at-a-time: use the same return type for has_zero regardless of
endianness
- KVM: s390: fix sthyi error handling
- erofs: fix wrong primary bvec selection on deduplicated extents
- wifi: cfg80211: Fix return value in scan logic
- net/mlx5e: fix double free in macsec_fs_tx_create_crypto_table_groups
- net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx
- net/mlx5: fix potential memory leak in mlx5e_init_rep_rx
- net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer()
- net/mlx5e: Fix crash moving to switchdev mode when ntuple offload is set
- net/mlx5e: Move representor neigh cleanup to profile cleanup_tx
- bpf: Add length check for SK_DIAG_BPF_STORAGE_REQ_MAP_FD parsing
- rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length
- net: dsa: fix value check in bcm_sf2_sw_probe()
- perf test uprobe_from_different_cu: Skip if there is no gcc
- net: sched: cls_u32: Fix match key mis-addressing
- mISDN: hfcpci: Fix potential deadlock on &hc->lock
- qed: Fix scheduling in a tasklet while getting stats
- net: annotate data-races around sk->sk_reserved_mem
- net: annotate data-race around sk->sk_txrehash
- net: annotate data-races around sk->sk_max_pacing_rate
- net: add missing READ_ONCE(sk->sk_rcvlowat) annotation
- net: add missing READ_ONCE(sk->sk_sndbuf) annotation
- net: add missing READ_ONCE(sk->sk_rcvbuf) annotation
- net: annotate data-races around sk->sk_mark
- net: add missing data-race annotations around sk->sk_peek_off
- net: add missing data-race annotation for sk_ll_usec
- net: annotate data-races around sk->sk_priority
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ice: Fix RDMA VSI removal during queue rebuild
- bpf, cpumap: Handle skb as well when clean up ptr_ring
- bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire
- net: ll_temac: fix error checking of irq_of_parse_and_map()
- net: korina: handle clk prepare error in korina_probe()
- net: netsec: Ignore 'phy-mode' on SynQuacer in DT mode
- bnxt_en: Fix page pool logic for page size >= 64K
- bnxt_en: Fix max_mtu setting for multi-buf XDP
- net: dcb: choose correct policy to parse DCB_ATTR_BCN
- s390/qeth: Don't call dev_close/dev_open (DOWN/UP)
- ip6mr: Fix skb_under_panic in ip6mr_cache_report()
- vxlan: Fix nexthop hash size
- net/mlx5: fs_core: Make find_closest_ft more generic
- net/mlx5: fs_core: Skip the FTs in the same FS_TYPE_PRIO_CHAINS fs_prio
- prestera: fix fallback to previous version on same major version
- tcp_metrics: fix addr_same() helper
- tcp_metrics: annotate data-races around tm->tcpm_stamp
- tcp_metrics: annotate data-races around tm->tcpm_lock
- tcp_metrics: annotate data-races around tm->tcpm_vals[]
- tcp_metrics: annotate data-races around tm->tcpm_net
- tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen
- rust: allocator: Prevent mis-aligned allocation
- scsi: zfcp: Defer fc_rport blocking until after ADISC response
- scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices
- libceph: fix potential hang in ceph_osdc_notify()
- USB: zaurus: Add ID for A-300/B-500/C-700
- ceph: defer stopping mdsc delayed_work
- firmware: arm_scmi: Drop OF node reference in the transport channel setup
- exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree
- exfat: release s_lock before calling dir_emit()
- mtd: spinand: toshiba: Fix ecc_get_status
- mtd: rawnand: meson: fix OOB available bytes for ECC
- bpf: Disable preemption in bpf_perf_event_output
- arm64: dts: stratix10: fix incorrect I2C property for SCL signal
- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC)
- x86/hyperv: Disable IBT when hypercall page lacks ENDBR instruction
- rbd: prevent busy loop when requesting exclusive lock
- bpf: Disable preemption in bpf_event_output
- powerpc/ftrace: Create a dummy stackframe to fix stack unwind
- arm64/fpsimd: Sync and zero pad FPSIMD state for streaming SVE
- arm64/fpsimd: Clear SME state in the target task when setting the VL
- arm64/fpsimd: Sync FPSIMD state with SVE for SME only systems
- open: make RESOLVE_CACHED correctly test for O_TMPFILE
- drm/ttm: check null pointer before accessing when swapping
- drm/i915: Fix premature release of request's reusable memory
- drm/i915/gt: Cleanup aux invalidation registers
- clk: imx93: Propagate correct error in imx93_clocks_probe()
- bpf, cpumap: Make sure kthread is running before map update returns
- file: reinstate f_pos locking optimization for regular files
- mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
- fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_load_attr_list()
- fs/sysv: Null check to prevent null-ptr-deref bug
- debugobjects: Recheck debug_objects_enabled before reporting
- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
- fs: Protect reconfiguration of sb read-write from racing writes
- ext2: Drop fragment support
- btrfs: remove BUG_ON()'s in add_new_free_space()
- io_uring: annotate offset timeout races
- mtd: rawnand: omap_elm: Fix incorrect type in assignment
- mtd: rawnand: rockchip: fix oobfree offset and description
- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts
- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
- powerpc/mm/altmap: Fix altmap boundary check
- drm/imx/ipuv3: Fix front porch adjustment upon hactive aligning
- drm/amd/display: Ensure that planes are in the same order
- drm/amd/display: skip CLEAR_PAYLOAD_ID_TABLE if device mst_en is 0
- selftests/rseq: Play nice with binaries statically linked against glibc
2.35+
- arm64/ptrace: Don't enable SVE when setting streaming SVE
- drm/amdgpu: Use apt name for FW reserved region
- Revert "drm/i915: Disable DC states for all commits"
- net/mlx5: Honor user input for migratable port fn attr
- net/mlx5e: xsk: Fix crash on regular rq reactivation
- net: stmmac: tegra: Properly allocate clock bulk data
- net: gro: fix misuse of CB in udp socket lookup
- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs
- bnxt: don't handle XDP in netpoll
- selftest: net: Assert on a proper value in so_incoming_cpu.c.
- mtd: spinand: winbond: Fix ecc_get_status
- smb: client: fix dfs link mount against w2k8
- ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node
- Upstream stable to v6.1.45, v6.4.10
* CVE-2023-37453
- USB: core: Unite old scheme and new scheme descriptor reads
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Fix race by not overwriting udev->descriptor in hub_port_init()
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
-- Stefan Bader <email address hidden> Wed, 15 Nov 2023 16:58:23 +0100
-
linux-oracle (6.2.0-1016.17) lunar; urgency=medium
* lunar/linux-oracle: 6.2.0-1016.17 -proposed tracker (LP: #2041891)
* Include cifs.ko in linux-modules package (LP: #2042546)
- [Packaging] Replace fs/cifs with fs/smb/client in inclusion list
[ Ubuntu: 6.2.0-37.38 ]
* lunar/linux: 6.2.0-37.38 -proposed tracker (LP: #2041899)
* CVE-2023-31085
- ubi: Refuse attaching if mtd's erasesize is 0
* CVE-2023-25775
- RDMA/irdma: Prevent zero-length STAG registration
* CVE-2023-45871
- igb: set max size RX buffer when store bad packet is enabled
* CVE-2023-5345
- fs/smb/client: Reset password pointer to NULL
* CVE-2023-5090
- x86: KVM: SVM: always update the x2avic msr interception
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
-- Stefan Bader <email address hidden> Thu, 02 Nov 2023 11:19:00 +0100
-
linux-oracle (6.2.0-1015.15) lunar; urgency=medium
* lunar/linux-oracle: 6.2.0-1015.15 -proposed tracker (LP: #2038069)
[ Ubuntu: 6.2.0-36.37 ]
* lunar/linux: 6.2.0-36.37 -proposed tracker (LP: #2038076)
* Regression for ubuntu_bpf test build caused by upstream bdeeed3498c7
(LP: #2035181)
- selftests/bpf: fix static assert compilation issue for test_cls_*.c
* CVE-2023-4244
- netfilter: nf_tables: don't skip expired elements during walk
- netfilter: nf_tables: adapt set backend to use GC transaction API
- netfilter: nft_set_hash: mark set element as dead when deleting from packet
path
- netfilter: nf_tables: GC transaction API to avoid race with control plane
- netfilter: nf_tables: don't fail inserts if duplicate has expired
- netfilter: nf_tables: fix kdoc warnings after gc rework
- netfilter: nf_tables: fix GC transaction races with netns and netlink event
exit path
- netfilter: nf_tables: GC transaction race with netns dismantle
- netfilter: nf_tables: GC transaction race with abort path
- netfilter: nf_tables: use correct lock to protect gc_list
- netfilter: nf_tables: defer gc run if previous batch is still pending
- netfilter: nft_dynset: disallow object maps
- netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
* CVE-2023-4563
- netfilter: nf_tables: remove busy mark and gc batch API
* CVE-2023-42756
- netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
* CVE-2023-4623
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
* Fix unstable audio at low levels on Thinkpad P1G4 (LP: #2037077)
- ALSA: hda/realtek - ALC287 I2S speaker platform support
* Lunar update: upstream stable patchset 2023-09-21 (LP: #2037005)
- Upstream stable to v6.1.41, v6.4.6
- io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq
- ALSA: hda/realtek - remove 3k pull low procedure
- ALSA: hda/realtek: Add quirk for Clevo NS70AU
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx
- maple_tree: set the node limit when creating a new root node
- maple_tree: fix node allocation testing on 32 bit
- keys: Fix linking a duplicate key to a keyring's assoc_array
- perf probe: Add test for regression introduced by switch to
die_get_decl_file()
- btrfs: fix warning when putting transaction with qgroups enabled after abort
- fuse: revalidate: don't invalidate if interrupted
- fuse: Apply flags2 only when userspace set the FUSE_INIT_EXT
- btrfs: set_page_extent_mapped after read_folio in btrfs_cont_expand
- btrfs: zoned: fix memory leak after finding block group with super blocks
- fuse: ioctl: translate ENOSYS in outarg
- btrfs: fix race between balance and cancel/pause
- selftests: tc: set timeout to 15 minutes
- selftests: tc: add 'ct' action kconfig dep
- regmap: Drop initial version of maximum transfer length fixes
- of: Preserve "of-display" device name for compatibility
- regmap: Account for register length in SMBus I/O limits
- arm64/fpsimd: Ensure SME storage is allocated after SVE VL changes
- can: mcp251xfd: __mcp251xfd_chip_set_mode(): increase poll timeout
- can: bcm: Fix UAF in bcm_proc_show()
- can: gs_usb: gs_can_open(): improve error handling
- selftests: tc: add ConnTrack procfs kconfig
- dma-buf/dma-resv: Stop leaking on krealloc() failure
- drm/amdgpu/vkms: relax timer deactivation by hrtimer_try_to_cancel
- drm/amdgpu/pm: make gfxclock consistent for sienna cichlid
- drm/amdgpu/pm: make mclk consistent for smu 13.0.7
- drm/client: Fix memory leak in drm_client_target_cloned
- drm/client: Fix memory leak in drm_client_modeset_probe
- drm/amd/display: only accept async flips for fast updates
- drm/amd/display: Disable MPC split by default on special asic
- drm/amd/display: check TG is non-null before checking if enabled
- drm/amd/display: Keep PHY active for DP displays on DCN31
- ASoC: fsl_sai: Disable bit clock with transmitter
- ASoC: fsl_sai: Revert "ASoC: fsl_sai: Enable MCTL_MCLK_EN bit for master
mode"
- ASoC: tegra: Fix ADX byte map
- ASoC: rt5640: Fix sleep in atomic context
- ASoC: cs42l51: fix driver to properly autoload with automatic module loading
- ASoC: codecs: wcd938x: fix missing clsh ctrl error handling
- ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove
- ASoC: qdsp6: audioreach: fix topology probe deferral
- ASoC: tegra: Fix AMX byte map
- ASoC: codecs: wcd938x: fix resource leaks on component remove
- ASoC: codecs: wcd938x: fix missing mbhc init error handling
- ASoC: codecs: wcd934x: fix resource leaks on component remove
- ASoC: codecs: wcd938x: fix codec initialisation race
- ASoC: codecs: wcd938x: fix soundwire initialisation race
- ext4: correct inline offset when handling xattrs in inode body
- drm/radeon: Fix integer overflow in radeon_cs_parser_init
- ALSA: emu10k1: roll up loops in DSP setup code for Audigy
- quota: Properly disable quotas when add_dquot_ref() fails
- quota: fix warning in dqgrab()
- HID: add quirk for 03f0:464a HP Elite Presenter Mouse
- ovl: check type and offset of struct vfsmount in ovl_entry
- udf: Fix uninitialized array access for some pathnames
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- MIPS: dec: prom: Address -Warray-bounds warning
- FS: JFS: Fix null-ptr-deref Read in txBegin
- FS: JFS: Check for read-only mounted filesystem in txBegin
- ACPI: video: Add backlight=native DMI quirk for Dell Studio 1569
- rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic()
- rcu: Mark additional concurrent load from ->cpu_no_qs.b.exp
- sched/fair: Don't balance task to its current running CPU
- wifi: ath11k: fix registration of 6Ghz-only phy without the full channel
range
- bpf: Print a warning only if writing to unprivileged_bpf_disabled.
- bpf: Address KCSAN report on bpf_lru_list
- bpf: tcp: Avoid taking fast sock lock in iterator
- wifi: ath11k: add support default regdb while searching board-2.bin for
WCN6855
- wifi: mac80211_hwsim: Fix possible NULL dereference
- spi: dw: Add compatible for Intel Mount Evans SoC
- wifi: ath11k: fix memory leak in WMI firmware stats
- net: ethernet: litex: add support for 64 bit stats
- devlink: report devlink_port_type_warn source device
- wifi: wext-core: Fix -Wstringop-overflow warning in
ioctl_standard_iw_point()
- wifi: iwlwifi: Add support for new PCI Id
- wifi: iwlwifi: mvm: avoid baid size integer overflow
- wifi: iwlwifi: pcie: add device id 51F1 for killer 1675
- net: hns3: fix strncpy() not using dest-buf length as length issue
- ASoC: amd: acp: fix for invalid dai id handling in acp_get_byte_count()
- ASoC: codecs: wcd938x: fix mbhc impedance loglevel
- ASoC: codecs: wcd938x: fix dB range for HPHL and HPHR
- ASoC: qcom: q6apm: do not close GPR port before closing graph
- sched/fair: Use recent_used_cpu to test p->cpus_ptr
- sched/psi: Rearrange polling code in preparation
- sched/psi: Rename existing poll members in preparation
- sched/psi: Extract update_triggers side effect
- sched/psi: Allow unprivileged polling of N*2s period
- sched/psi: use kernfs polling functions for PSI trigger polling
- pinctrl: renesas: rzv2m: Handle non-unique subnode names
- pinctrl: renesas: rzg2l: Handle non-unique subnode names
- spi: bcm63xx: fix max prepend length
- fbdev: imxfb: warn about invalid left/right margin
- fbdev: imxfb: Removed unneeded release_mem_region
- perf build: Fix library not found error when using CSLIBS
- btrfs: be a bit more careful when setting mirror_num_ret in btrfs_map_block
- spi: s3c64xx: clear loopback bit after loopback test
- kallsyms: strip LTO-only suffixes from promoted global functions
- dsa: mv88e6xxx: Do a final check before timing out
- net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field()
- net: ethernet: mtk_eth_soc: handle probe deferral
- ASoC: SOF: ipc3-dtrace: uninitialized data in dfsentry_trace_filter_write()
- net: sched: cls_matchall: Undo tcf_bind_filter in case of failure after
mall_set_parms
- net: sched: cls_u32: Undo tcf_bind_filter if u32_replace_hw_knode
- net: sched: cls_u32: Undo refcount decrement in case update failed
- net: sched: cls_bpf: Undo tcf_bind_filter in case of an error
- net: dsa: microchip: ksz8: Separate static MAC table operations for code
reuse
- net: dsa: microchip: ksz8: Make ksz8_r_sta_mac_table() static
- net: dsa: microchip: ksz8_r_sta_mac_table(): Avoid using error code for
empty entries
- net: dsa: microchip: correct KSZ8795 static MAC table access
- iavf: Fix use-after-free in free_netdev
- iavf: Fix out-of-bounds when setting channels on remove
- iavf: use internal state to free traffic IRQs
- iavf: make functions static where possible
- iavf: Wait for reset in callbacks which trigger it
- iavf: fix a deadlock caused by rtnl and driver's lock circular dependencies
- iavf: fix reset task race with iavf_remove()
- security: keys: Modify mismatched function name
- octeontx2-pf: Dont allocate BPIDs for LBK interfaces
- bpf: Fix subprog idx logic in check_max_stack_depth
- bpf: Repeat check_max_stack_depth for async callbacks
- bpf, arm64: Fix BTI type used for freplace attached functions
- igc: Avoid transmit queue timeout for XDP
- igc: Prevent garbled TX queue with XDP ZEROCOPY
- net: ipv4: use consistent txhash in TIME_WAIT and SYN_RECV
- tcp: annotate data-races around tcp_rsk(req)->txhash
- tcp: annotate data-races around tcp_rsk(req)->ts_recent
- net: ipv4: Use kfree_sensitive instead of kfree
- net:ipv6: check return value of pskb_trim()
- Revert "tcp: avoid the lookup process failing to get sk in ehash table"
- fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe
- llc: Don't drop packet from non-root netns.
- ALSA: hda/realtek: Fix generic fixup definition for cs35l41 amp
- netfilter: nf_tables: fix spurious set element insertion failure
- netfilter: nf_tables: can't schedule in nft_chain_validate
- Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync
- Bluetooth: hci_event: call disconnect callback before deleting conn
- Bluetooth: ISO: fix iso_conn related locking and validity issues
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
hci_remove_adv_monitor()
- tcp: annotate data-races around tp->tcp_tx_delay
- tcp: annotate data-races around tp->tsoffset
- tcp: annotate data-races around tp->keepalive_time
- tcp: annotate data-races around tp->keepalive_intvl
- tcp: annotate data-races around tp->keepalive_probes
- tcp: annotate data-races around icsk->icsk_syn_retries
- tcp: annotate data-races around tp->linger2
- tcp: annotate data-races around rskq_defer_accept
- tcp: annotate data-races around tp->notsent_lowat
- tcp: annotate data-races around icsk->icsk_user_timeout
- tcp: annotate data-races around fastopenq.max_qlen
- net: phy: prevent stale pointer dereference in phy_init()
- jbd2: recheck chechpointing non-dirty buffer
- tracing/histograms: Return an error if we fail to add histogram to hist_vars
list
- drm/ttm: fix bulk_move corruption when adding a entry
- spi: dw: Remove misleading comment for Mount Evans SoC
- kallsyms: add kallsyms_seqs_of_names to list of special symbols
- scripts/kallsyms: update the usage in the comment block
- selftests/bpf: Workaround verification failure for
fexit_bpf2bpf/func_replace_return_code
- selftests/bpf: Fix sk_assign on s390x
- drm/amd/display: fix some coding style issues
- drm/dp_mst: Clear MSG_RDY flag before sending new message
- drm/amd/display: force connector state when bpc changes during compliance
- drm/amd/display: Clean up errors & warnings in amdgpu_dm.c
- drm/amd/display: fix linux dp link lost handled only one time
- drm/amd/display: Add polling method to handle MST reply packet
- perf probe: Read DWARF files from the correct CU
- btrfs: raid56: always verify the P/Q contents for scrub
- can: gs_usb: fix time stamp counter initialization
- KVM: arm64: Correctly handle page aging notifiers for unaligned memslot
- KVM: arm64: vgic-v4: Make the doorbell request robust w.r.t preemption
- gso: fix dodgy bit handling for GSO_UDP_L4
- drm/i915/perf: add sentinel to xehp_oa_b_counters
- net: ethernet: mtk_eth_soc: always mtk_get_ib1_pkt_type
- Upstream stable to v6.1.42, v6.4.7
- netfilter: nf_tables: fix underflow in object reference counter
- netfilter: nf_tables: fix underflow in chain reference counter
- platform/x86/amd/pmf: Notify OS power slider update
- platform/x86/amd/pmf: reduce verbosity of apmf_get_system_params
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- blk-mq: Fix stall due to recursive flush plug
- powerpc/pseries/vas: Hold mmap_mutex after mmap lock during window close
- KVM: s390: pv: fix index value of replaced ASCE
- io_uring: don't audit the capability check in io_uring_create()
- gpio: tps68470: Make tps68470_gpio_output() always set the initial value
- pwm: Add a stub for devm_pwmchip_add()
- gpio: mvebu: Make use of devm_pwmchip_add
- gpio: mvebu: fix irq domain leak
- btrfs: fix race between quota disable and relocation
- i2c: Delete error messages for failed memory allocations
- i2c: Improve size determinations
- i2c: nomadik: Remove unnecessary goto label
- i2c: nomadik: Use devm_clk_get_enabled()
- i2c: nomadik: Remove a useless call in the remove function
- MIPS: Loongson: Move arch cflags to MIPS top level Makefile
- MIPS: Loongson: Fix build error when make modules_install
- PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link()
- PCI/ASPM: Factor out pcie_wait_for_retrain()
- PCI/ASPM: Avoid link retraining race
- PCI: rockchip: Remove writes to unused registers
- PCI: rockchip: Fix window mapping and address translation for endpoint
- PCI: rockchip: Don't advertise MSI-X in PCIe capabilities
- drm/amd/display: add ODM case when looking for first split pipe
- drm/amd/display: add pixel rate based CRB allocation support
- drm/amd/display: fix dcn315 single stream crb allocation
- drm/amd/display: Update correct DCN314 register header
- drm/amd/display: Set minimum requirement for using PSR-SU on Rembrandt
- drm/amd/display: Set minimum requirement for using PSR-SU on Phoenix
- drm/ttm: Don't print error message if eviction was interrupted
- drm/ttm: Don't leak a resource on eviction error
- drm/ttm: never consider pinned BOs for eviction&swap
- KVM: arm64: Condition HW AF updates on config option
- [Config] updateconfigs for AMPERE_ERRATUM_AC03_CPU_38
- arm64: errata: Mitigate Ampere1 erratum AC03_CPU_38 at stage-2
- mptcp: introduce 'sk' to replace 'sock->sk' in mptcp_listen()
- tracing: Allow synthetic events to pass around stacktraces
- Revert "tracing: Add "(fault)" name injection to kernel probes"
- tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if
fails
- test_maple_tree: test modifications while iterating
- maple_tree: add __init and __exit to test module
- maple_tree: fix 32 bit mas_next testing
- drm/amd/display: fix dc/core/dc.c kernel-doc
- drm/amd/display: Add FAMS validation before trying to use it
- drm/amd/display: update extended blank for dcn314 onwards
- drm/amd/display: Fix possible underflow for displays with large vblank
- drm/amd/display: Prevent vtotal from being set to 0
- phy: phy-mtk-dp: Fix an error code in probe()
- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc
- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend
- phy: qcom-snps-femto-v2: properly enable ref clock
- soundwire: qcom: update status correctly with mask
- media: staging: atomisp: select V4L2_FWNODE
- media: amphion: Fix firmware path to match linux-firmware
- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
- iavf: fix potential deadlock on allocation failure
- iavf: check for removal state before IAVF_FLAG_PF_COMMS_FAILED
- net: phy: marvell10g: fix 88x3310 power up
- net: hns3: fix the imp capability bit cannot exceed 32 bits issue
- net: hns3: fix wrong tc bandwidth weight data issue
- net: hns3: fix wrong bw weight of disabled tc issue
- vxlan: calculate correct header length for GPE
- vxlan: generalize vxlan_parse_gpe_hdr and remove unused args
- vxlan: fix GRO with VXLAN-GPE
- phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()
- atheros: fix return value check in atl1_tso()
- ethernet: atheros: fix return value check in atl1e_tso_csum()
- ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new
temporary address
- ice: Fix memory management in ice_ethtool_fdir.c
- bonding: reset bond's flags when down link is P2P device
- team: reset team's flags when down link is P2P device
- octeontx2-af: Removed unnecessary debug messages.
- octeontx2-af: Fix hash extraction enable configuration
- net: stmmac: Apply redundant write work around on 4.xx too
- platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100
- x86/traps: Fix load_unaligned_zeropad() handling for shared TDX memory
- igc: Fix Kernel Panic during ndo_tx_timeout callback
- netfilter: nft_set_rbtree: fix overlap expiration walk
- mm: suppress mm fault logging if fatal signal already pending
- net/sched: mqprio: refactor nlattr parsing to a separate function
- net/sched: mqprio: add extack to mqprio_parse_nlattr()
- net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64
- benet: fix return value check in be_lancer_xmit_workarounds()
- tipc: check return value of pskb_trim()
- tipc: stop tipc crypto on failure in tipc_node_create
- RDMA/mlx4: Make check for invalid flags stricter
- drm/msm/dpu: drop enum dpu_core_perf_data_bus_id
- drm/msm/adreno: Fix snapshot BINDLESS_DATA size
- RDMA/irdma: Add missing read barriers
- RDMA/irdma: Fix data race on CQP completion stats
- RDMA/irdma: Fix data race on CQP request done
- RDMA/mthca: Fix crash when polling CQ for shared QPs
- RDMA/bnxt_re: Prevent handling any completions after qp destroy
- drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb()
- cxl/acpi: Fix a use-after-free in cxl_parse_cfmws()
- cxl/acpi: Return 'rc' instead of '0' in cxl_parse_cfmws()
- ASoC: fsl_spdif: Silence output on stop
- block: Fix a source code comment in include/uapi/linux/blkzoned.h
- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request
- drm/i915: Fix an error handling path in igt_write_huge()
- xenbus: check xen_domain in xenbus_probe_initcall
- dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths
- dm raid: clean up four equivalent goto tags in raid_ctr()
- dm raid: protect md_stop() with 'reconfig_mutex'
- drm/amd: Fix an error handling mistake in psp_sw_init()
- drm/amd/display: Unlock on error path in
dm_handle_mst_sideband_msg_ready_event()
- RDMA/irdma: Fix op_type reporting in CQEs
- RDMA/irdma: Report correct WC error
- drm/msm: Switch idr_lock to spinlock
- drm/msm: Disallow submit with fence id 0
- ublk_drv: move ublk_get_device_from_id into ublk_ctrl_uring_cmd
- ublk: fail to start device if queue setup is interrupted
- ublk: fail to recover device if queue setup is interrupted
- ata: pata_ns87415: mark ns87560_tf_read static
- ring-buffer: Fix wrong stat of cpu_buffer->read
- tracing: Fix warning in trace_buffered_event_disable()
- Revert "usb: gadget: tegra-xudc: Fix error check in
tegra_xudc_powerdomain_init()"
- usb: gadget: call usb_gadget_check_config() to verify UDC capability
- USB: gadget: Fix the memory leak in raw_gadget driver
- usb: gadget: core: remove unbalanced mutex_unlock in usb_gadget_activate
- KVM: Grab a reference to KVM for VM and vCPU stats file descriptors
- KVM: VMX: Don't fudge CR0 and CR4 for restricted L2 guest
- KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid
- serial: qcom-geni: drop bogus runtime pm state update
- serial: 8250_dw: Preserve original value of DLF register
- serial: sifive: Fix sifive_serial_console_setup() section
- USB: serial: option: support Quectel EM060K_128
- USB: serial: option: add Quectel EC200A module support
- USB: serial: simple: add Kaufmann RKS+CAN VCP
- USB: serial: simple: sort driver entries
- can: gs_usb: gs_can_close(): add missing set of CAN state to
CAN_STATE_STOPPED
- usb: typec: Set port->pd before adding device for typec_port
- usb: typec: Iterate pds array when showing the pd list
- usb: typec: Use sysfs_emit_at when concatenating the string
- Revert "usb: dwc3: core: Enable AutoRetry feature in the controller"
- usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy
- usb: dwc3: don't reset device side if dwc3 was configured as host-only
- usb: misc: ehset: fix wrong if condition
- usb: ohci-at91: Fix the unhandle interrupt when resume
- USB: quirks: add quirk for Focusrite Scarlett
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one
config
- usb: xhci-mtk: set the dma max_seg_size
- Revert "usb: xhci: tegra: Fix error check"
- Documentation: security-bugs.rst: update preferences when dealing with the
linux-distros group
- Documentation: security-bugs.rst: clarify CVE handling
- staging: r8712: Fix memory leak in _r8712_init_xmit_priv()
- staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()
- tty: n_gsm: fix UAF in gsm_cleanup_mux
- Revert "xhci: add quirk for host controllers that don't update endpoint DCS"
- ALSA: hda/realtek: Support ASUS G713PV laptop
- ALSA: hda/relatek: Enable Mute LED on HP 250 G8
- hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature
- hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled
- btrfs: account block group tree when calculating global reserve size
- btrfs: check if the transaction was aborted at btrfs_wait_for_commit()
- btrfs: check for commit error at btrfs_attach_transaction_barrier()
- x86/MCE/AMD: Decrement threshold_bank refcount when removing threshold
blocks
- file: always lock position for FMODE_ATOMIC_POS
- nfsd: Remove incorrect check in nfsd4_validate_stateid
- ACPI/IORT: Remove erroneous id_count check in iort_node_get_rmr_info()
- tpm_tis: Explicitly check for error code
- irq-bcm6345-l1: Do not assume a fixed block to cpu mapping
- irqchip/gic-v4.1: Properly lock VPEs when doing a directLPI invalidation
- locking/rtmutex: Fix task->pi_waiters integrity
- proc/vmcore: fix signedness bug in read_from_oldmem()
- xen: speed up grant-table reclaim
- virtio-net: fix race between set queues and probe
- net: dsa: qca8k: fix search_and_insert wrong handling of new rule
- net: dsa: qca8k: fix broken search_and_del
- net: dsa: qca8k: fix mdb add/del case with 0 VID
- selftests: mptcp: join: only check for ip6tables if needed
- soundwire: fix enumeration completion
- Revert "um: Use swap() to make code cleaner"
- LoongArch: BPF: Fix check condition to call lu32id in move_imm()
- LoongArch: BPF: Enable bpf_probe_read{, str}() on LoongArch
- s390/dasd: fix hanging device after quiesce/resume
- s390/dasd: print copy pair message only for the correct error
- ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register
- arm64/sme: Set new vector length before reallocating
- PM: sleep: wakeirq: fix wake irq arming
- ceph: never send metrics if disable_send_metrics is set
- drm/i915/dpt: Use shmem for dpt objects
- dm cache policy smq: ensure IO doesn't prevent cleaner policy progress
- rbd: make get_lock_owner_info() return a single locker or NULL
- rbd: harden get_lock_owner_info() a bit
- rbd: retrieve and check lock owner twice before blocklisting
- tracing: Fix trace_event_raw_event_synth() if else statement
- ACPI: processor: perflib: Use the "no limit" frequency QoS
- ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily
- cpufreq: intel_pstate: Drop ACPI _PSS states table patching
- dma-buf: keep the signaling time of merged fences v3
- dma-buf: fix an error pointer vs NULL bug
- KVM: s390: pv: simplify shutdown and fix race
- media: tc358746: Address compiler warnings
- net: fec: avoid tx queue timeout when XDP is enabled
- drm/msm/dsi: Drop unused regulators from QCM2290 14nm DSI PHY config
- RDMA/core: Update CMA destination address on rdma_resolve_addr
- RDMA/bnxt_re: Fix hang during driver unload
- iommufd: IOMMUFD_DESTROY should not increase the refcount
- TIOCSTI: always enable for CAP_SYS_ADMIN
- hwmon: (aquacomputer_d5next) Fix incorrect PWM value readout
- btrfs: zoned: do not enable async discard
- net: ipa: only reset hashed tables when supported
- iommufd: Set end correctly when doing batch carry
- mptcp: more accurate NL event generation
- Upstream stable to v6.1.43, v6.4.8
* CVE-2023-42755
- net/sched: Retire rsvp classifier
- [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
* CVE-2023-42753
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
ip_set_hash_netportnet.c
* CVE-2023-34319
- xen/netback: Fix buffer overrun triggered by unusual packet
* CVE-2023-5197
- netfilter: nf_tables: skip bound chain in netns release path
- netfilter: nf_tables: disallow rule removal from chain binding
* CVE-2023-4921
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
* CVE-2023-42752
- igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
- net: remove osize variable in __alloc_skb()
- net: factorize code in kmalloc_reserve()
- net: deal with integer overflows in kmalloc_reserve()
* CVE-2023-42572
- net: add SKB_HEAD_ALIGN() helper
* Fix RCU warning on AMD laptops (LP: #2036377)
- power: supply: core: Use blocking_notifier_call_chain to avoid RCU complaint
* Fix non-working I219 after system sleep (LP: #2035313)
- mei: mei-me: resume device in prepare
* Avoid address overwrite in kernel_connect (LP: #2035163)
- net: Avoid address overwrite in kernel_connect
* Ethernet not stable 23.04 (RTL8168/8169) (LP: #2031537)
- r8169: fix ASPM-related problem for chip version 42 and 43
- r8169: revert 2ab19de62d67 ("r8169: remove ASPM restrictions now that ASPM
is disabled during NAPI poll")
- Revert "r8169: disable ASPM during NAPI poll"
- r8169: fix ASPM-related issues on a number of systems with NIC version from
RTL8168h
* Enable ASPM for NVMe behind VMD (LP: #2034504)
- Revert "UBUNTU: SAUCE: vmd: fixup bridge ASPM by driver name instead"
- Revert "UBUNTU: SAUCE: PCI/ASPM: Enable LTR for endpoints behind VMD"
- Revert "UBUNTU: SAUCE: PCI/ASPM: Enable ASPM for links under VMD domain"
- PCI/ASPM: Add pci_enable_link_state()
- PCI: vmd: Use PCI_VDEVICE in device list
- PCI: vmd: Create feature grouping for client products
- PCI: vmd: Add quirk to configure PCIe ASPM and LTR
- SAUCE: PCI/ASPM: Allow ASPM override over FADT default
- SAUCE: PCI: vmd: Mark ASPM override for device behind VMD bridge
* Fix suspend hang on Lenovo workstation (LP: #2034479)
- igb: Fix igb_down hung on surprise removal
* Fix blank display when Thunderbolt monitor is plugged second time
(LP: #2034491)
- drm/amd: Disable S/G for APUs when 64GB or more host memory
- thunderbolt: Fix Thunderbolt 3 display flickering issue on 2nd hot plug
onwards
- thunderbolt: Fix a backport error for display flickering issue
* [regression] Unable to initialize SGX enclaves with XFRM other than 3
(LP: #2034745)
- x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4
* CVE-2023-4881
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
* CVE-2023-4622
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
* Lunar update: upstream stable patchset 2023-09-14 (LP: #2036075)
- net: lan743x: Don't sleep in atomic context
- workqueue: clean up WORK_* constant types, clarify masking
- ksmbd: add missing compound request handing in some commands
- ksmbd: fix out of bounds read in smb2_sess_setup
- drm/panel: simple: Add connector_type for innolux_at043tn24
- drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime
- swiotlb: always set the number of areas before allocating the pool
- swiotlb: reduce the number of areas to match actual memory pool size
- drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags
- ice: Fix max_rate check while configuring TX rate limits
- igc: Remove delay during TX ring configuration
- net/mlx5e: fix double free in mlx5e_destroy_flow_table
- net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create
- net/mlx5e: fix memory leak in mlx5e_ptp_open
- net/mlx5e: Check for NOT_READY flag state after locking
- igc: set TP bit in 'supported' and 'advertising' fields of
ethtool_link_ksettings
- igc: Handle PPS start time programming for past time values
- blk-crypto: use dynamic lock class for blk_crypto_profile::lock
- scsi: qla2xxx: Fix error code in qla2x00_start_sp()
- scsi: ufs: ufs-mediatek: Add dependency for RESET_CONTROLLER
- bpf: Fix max stack depth check for async callbacks
- net: mvneta: fix txq_map in case of txq_number==1
- gve: Set default duplex configuration to full
- octeontx2-af: Promisc enable/disable through mbox
- octeontx2-af: Move validation of ptp pointer before its usage
- ionic: remove WARN_ON to prevent panic_on_warn
- net: bgmac: postpone turning IRQs off to avoid SoC hangs
- net: prevent skb corruption on frag list segmentation
- icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev().
- udp6: fix udp6_ehashfn() typo
- ntb: idt: Fix error handling in idt_pci_driver_init()
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
- NTB: ntb_transport: fix possible memory leak while device_register() fails
- NTB: ntb_tool: Add check for devm_kcalloc
- ipv6/addrconf: fix a potential refcount underflow for idev
- net: dsa: qca8k: Add check for skb_copy
- platform/x86: wmi: Break possible infinite loop when parsing GUID
- kernel/trace: Fix cleanup logic of enable_trace_eprobe
- igc: Fix launchtime before start of cycle
- igc: Fix inserting of empty frame for launchtime
- nvme: fix the NVME_ID_NS_NVM_STS_MASK definition
- riscv, bpf: Fix inconsistent JIT image generation
- drm/i915: Don't preserve dpll_hw_state for slave crtc in Bigjoiner
- drm/i915: Fix one wrong caching mode enum usage
- octeontx2-pf: Add additional check for MCAM rules
- erofs: avoid useless loops in z_erofs_pcluster_readmore() when reading
beyond EOF
- erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF
- erofs: fix fsdax unavailability for chunk-based regular files
- wifi: airo: avoid uninitialized warning in airo_get_rate()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- net/sched: flower: Ensure both minimum and maximum ports are specified
- riscv: mm: fix truncation warning on RV32
- netdevsim: fix uninitialized data in nsim_dev_trap_fa_cookie_write()
- net/sched: make psched_mtu() RTNL-less safe
- wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set()
- nvme-pci: fix DMA direction of unmapping integrity data
- cifs: fix session state check in smb2_find_smb_ses
- drm/client: Send hotplug event after registering a client
- drm/amdgpu/sdma4: set align mask to 255
- drm/amd/pm: revise the ASPM settings for thunderbolt attached scenario
- drm/amd/pm: add abnormal fan detection for smu 13.0.0
- f2fs: fix deadlock in i_xattr_sem and inode page lock
- pinctrl: amd: Add Z-state wake control bits
- pinctrl: amd: Adjust debugfs output
- pinctrl: amd: Add fields for interrupt status and wake status
- pinctrl: amd: Detect internal GPIO0 debounce handling
- pinctrl: amd: Fix mistake in handling clearing pins at startup
- pinctrl: amd: Detect and mask spurious interrupts
- pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts on probe"
- pinctrl: amd: Only use special debounce behavior for GPIO 0
- pinctrl: amd: Use amd_pinconf_set() for all config options
- pinctrl: amd: Drop pull up select configuration
- pinctrl: amd: Unify debounce handling into amd_pinconf_set()
- tpm: Do not remap from ACPI resources again for Pluton TPM
- tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
- tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
- tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
- tpm: return false from tpm_amd_is_rng_defective on non-x86 platforms
- mtd: rawnand: meson: fix unaligned DMA buffers handling
- net: bcmgenet: Ensure MDIO unregistration has clocks enabled
- net: phy: dp83td510: fix kernel stall during netboot in DP83TD510E PHY
driver
- kasan: add kasan_tag_mismatch prototype
- tracing/user_events: Fix incorrect return value for writing operation when
events are disabled
- powerpc: Fail build if using recordmcount with binutils v2.37
- misc: fastrpc: Create fastrpc scalar with correct buffer count
- powerpc/security: Fix Speculation_Store_Bypass reporting on Power10
- powerpc/64s: Fix native_hpte_remove() to be irq-safe
- MIPS: Loongson: Fix cpu_probe_loongson() again
- MIPS: KVM: Fix NULL pointer dereference
- ext4: Fix reusing stale buffer heads from last failed mounting
- ext4: fix wrong unit use in ext4_mb_clear_bb
- ext4: get block from bh in ext4_free_blocks for fast commit replay
- ext4: fix wrong unit use in ext4_mb_new_blocks
- ext4: fix to check return value of freeze_bdev() in ext4_shutdown()
- ext4: turn quotas off if mount failed after enabling quotas
- ext4: only update i_reserved_data_blocks on successful block allocation
- fs: dlm: revert check required context while close
- soc: qcom: mdt_loader: Fix unconditional call to scm_pas_mem_setup
- ext2/dax: Fix ext2_setsize when len is page aligned
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- hwrng: imx-rngc - fix the timeout for init and self check
- dm integrity: reduce vmalloc space footprint on 32-bit architectures
- scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O
- s390/zcrypt: do not retry administrative requests
- PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold
- PCI: Release resource invalidated by coalescing
- PCI: Add function 1 DMA alias quirk for Marvell 88SE9235
- PCI: qcom: Disable write access to read only registers for IP v2.3.3
- PCI: epf-test: Fix DMA transfer completion initialization
- PCI: epf-test: Fix DMA transfer completion detection
- PCI: rockchip: Assert PCI Configuration Enable bit after probe
- PCI: rockchip: Write PCI Device ID to correct register
- PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked
- PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core
- PCI: rockchip: Use u32 variable to access 32-bit registers
- PCI: rockchip: Set address alignment for endpoint mode
- misc: pci_endpoint_test: Free IRQs before removing the device
- misc: pci_endpoint_test: Re-init completion for every test
- mfd: pm8008: Fix module autoloading
- md/raid0: add discard support for the 'original' layout
- fs: dlm: return positive pid value for F_GETLK
- fs: dlm: fix cleanup pending ops when interrupted
- fs: dlm: interrupt posix locks only when process is killed
- fs: dlm: make F_SETLK use unkillable wait_event
- fs: dlm: fix mismatch of plock results from userspace
- scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by
lpfc_nlp_not_used()
- drm/atomic: Allow vblank-enabled + self-refresh "disable"
- drm/rockchip: vop: Leave vblank enabled in self-refresh
- drm/amd/display: fix seamless odm transitions
- drm/amd/display: Remove Phantom Pipe Check When Calculating K1 and K2
- drm/amd/display: disable seamless boot if force_odm_combine is enabled
- drm/amdgpu: fix clearing mappings for BOs that are always valid in VM
- drm/amd: Disable PSR-SU on Parade 0803 TCON
- drm/amd/display: add a NULL pointer check
- drm/amd/display: Correct `DMUB_FW_VERSION` macro
- drm/amd/display: Add monitor specific edid quirk
- drm/amdgpu: avoid restore process run into dead loop.
- drm/ttm: Don't leak a resource on swapout move error
- serial: atmel: don't enable IRQs prematurely
- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in
case of error
- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when
iterating clk
- tty: serial: imx: fix rs485 rx after tx
- firmware: stratix10-svc: Fix a potential resource leak in
svc_create_memory_pool()
- libceph: harden msgr2.1 frame segment length checks
- ceph: add a dedicated private data for netfs rreq
- ceph: fix blindly expanding the readahead windows
- ceph: don't let check_caps skip sending responses for revoke msgs
- xhci: Fix resume issue of some ZHAOXIN hosts
- xhci: Fix TRB prefetch issue of ZHAOXIN hosts
- xhci: Show ZHAOXIN xHCI root hub speed correctly
- meson saradc: fix clock divider mask length
- opp: Fix use-after-free in lazy_opp_tables after probe deferral
- soundwire: qcom: fix storing port config out-of-bounds
- Revert "8250: add support for ASIX devices with a FIFO bug"
- bus: ixp4xx: fix IXP4XX_EXP_T1_MASK
- s390/decompressor: fix misaligned symbol build error
- dm: verity-loadpin: Add NULL pointer check for 'bdev' parameter
- tracing/histograms: Add histograms to hist_vars if they have referenced
variables
- tracing: Fix memory leak of iter->temp when reading trace_pipe
- nvme: don't reject probe due to duplicate IDs for single-ported PCIe devices
- samples: ftrace: Save required argument registers in sample trampolines
- perf: RISC-V: Remove PERF_HES_STOPPED flag checking in riscv_pmu_start()
- regmap-irq: Fix out-of-bounds access when allocating config buffers
- net: ena: fix shift-out-of-bounds in exponential backoff
- ring-buffer: Fix deadloop issue on reading trace_pipe
- ftrace: Fix possible warning on checking all pages used in
ftrace_process_locs()
- cifs: if deferred close is disabled then close files immediately
- xtensa: ISS: fix call to split_if_spec
- perf/x86: Fix lockdep warning in for_each_sibling_event() on SPR
- PM: QoS: Restore support for default value on frequency QoS
- pwm: meson: modify and simplify calculation in meson_pwm_get_state
- pwm: meson: fix handling of period/duty if greater than UINT_MAX
- fprobe: Release rethook after the ftrace_ops is unregistered
- fprobe: Ensure running fprobe_exit_handler() finished before calling
rethook_free()
- tracing: Fix null pointer dereference in tracing_err_log_open()
- selftests: mptcp: connect: fail if nft supposed to work
- selftests: mptcp: sockopt: return error if wrong mark
- selftests: mptcp: userspace_pm: use correct server port
- selftests: mptcp: userspace_pm: report errors with 'remove' tests
- selftests: mptcp: depend on SYN_COOKIES
- selftests: mptcp: pm_nl_ctl: fix 32-bit support
- tracing/probes: Fix not to count error code to total length
- tracing/probes: Fix to update dynamic data counter if fetcharg uses it
- tracing/user_events: Fix struct arg size match check
- scsi: qla2xxx: Multi-que support for TMF
- scsi: qla2xxx: Fix task management cmd failure
- scsi: qla2xxx: Fix task management cmd fail due to unavailable resource
- scsi: qla2xxx: Fix hang in task management
- scsi: qla2xxx: Wait for io return on terminate rport
- scsi: qla2xxx: Fix mem access after free
- scsi: qla2xxx: Array index may go out of bound
- scsi: qla2xxx: Avoid fcport pointer dereference
- scsi: qla2xxx: Fix potential NULL pointer dereference
- scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()
- scsi: qla2xxx: Correct the index of array
- scsi: qla2xxx: Pointer may be dereferenced
- scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue
- scsi: qla2xxx: Fix end of loop test
- MIPS: kvm: Fix build error with KVM_MIPS_DEBUG_COP0_COUNTERS enabled
- Revert "drm/amd: Disable PSR-SU on Parade 0803 TCON"
- net/sched: sch_qfq: reintroduce lmax bound check for MTU
- drm/atomic: Fix potential use-after-free in nonblocking commits
- net/ncsi: make one oem_gma function for all mfr id
- net/ncsi: change from ndo_set_mac_address to dev_set_mac_address
- HID: input: fix mapping for camera access keys
- xen/virtio: Fix NULL deref when a bridge of PCI root bus has no parent
- netfilter: conntrack: don't fold port numbers into addresses before hashing
- net/mlx5: Query hca_cap_2 only when supported
- udp6: add a missing call into udp_fail_queue_rcv_skb tracepoint
- HID: hyperv: avoid struct memcpy overrun warning
- igc: Rename qbv_enable to taprio_offload_enable
- igc: No strict mode in pure launchtime/CBS offload
- net: fec: increase the size of tx ring and update tx_wake_threshold
- drm/nouveau/disp: fix HDMI on gt215+
- drm/nouveau/disp/g94: enable HDMI
- drm/nouveau: bring back blit subchannel for pre nv50 GPUs
- net: txgbe: fix eeprom calculation error
- kasan, slub: fix HW_TAGS zeroing with slub_debug
- drm/amd/display: perform a bounds check before filling dirty rectangles
- fs: dlm: clear pending bit when queue was empty
- fs: dlm: fix missing pending to false
- tty: fix hang on tty device with no_room set
- nfp: clean mc addresses in application firmware when closing port
- mptcp: do not rely on implicit state check in mptcp_listen()
- mptcp: ensure subflow is unhashed before cleaning the backlog
- selftests: mptcp: sockopt: use 'iptables-legacy' if available
- smb: client: Fix -Wstringop-overflow issues
- tracing/probes: Fix to avoid double count of the string length on the array
- Upstream stable to v6.1.40, v6.4.5
* Nouveau driver crash - Ubuntu 22.04.3 LTS stuck on power-off/reboot screen
(LP: #2031352) // Lunar update: upstream stable patchset 2023-09-14
(LP: #2036075)
- drm/nouveau/acr: Abort loading ACR if no firmware was found
* Lunar update: upstream stable patchset 2023-09-05 (LP: #2034469)
- drm: use mgr->dev in drm_dbg_kms in drm_dp_add_payload_part2
- fs: pipe: reveal missing function protoypes
- block: Fix the type of the second bdev_op_is_zoned_write() argument
- erofs: avoid tagged pointers to mark sync decompression
- erofs: remove tagged pointer helpers
- erofs: move zdata.h into zdata.c
- erofs: kill hooked chains to avoid loops on deduplicated compressed images
- x86/resctrl: Only show tasks' pid in current pid namespace
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- x86/sev: Fix calculation of end address based on number of pages
- virt: sevguest: Add CONFIG_CRYPTO dependency
- blk-mq: fix potential io hang by wrong 'wake_batch'
- lockd: drop inappropriate svc_get() from locked_get()
- nvme-core: fix memory leak in dhchap_secret_store
- nvme-core: fix memory leak in dhchap_ctrl_secret
- nvme-core: add missing fault-injection cleanup
- nvme-core: fix dev_pm_qos memleak
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- md/raid10: fix overflow of md/safe_mode_delay
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid1-10: factor out a helper to add bio to plug
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: submit write io directly if bitmap is not enabled
- block: fix blktrace debugfs entries leakage
- irqchip/stm32-exti: Fix warning on initialized field overwritten
- irqchip/jcore-aic: Fix missing allocation of IRQ descriptors
- svcrdma: Prevent page release when nothing was received
- erofs: simplify iloc()
- erofs: fix compact 4B support for 16k block size
- posix-timers: Prevent RT livelock in itimer_delete()
- tick/rcu: Fix bogus ratelimit condition
- tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode().
- clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe
- PM: domains: fix integer overflow issues in genpd_parse_state()
- perf/arm-cmn: Fix DTC reset
- x86/mm: Allow guest.enc_status_change_prepare() to fail
- x86/tdx: Fix race between set_memory_encrypted() and
load_unaligned_zeropad()
- drivers/perf: hisi: Don't migrate perf to the CPU going to teardown
- powercap: RAPL: Fix CONFIG_IOSF_MBI dependency
- PM: domains: Move the verification of in-params from genpd_add_device()
- ARM: 9303/1: kprobes: avoid missing-declaration warnings
- cpufreq: intel_pstate: Fix energy_performance_preference for passive
- thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe()
- rcu: Make rcu_cpu_starting() rely on interrupts being disabled
- rcu-tasks: Stop rcu_tasks_invoke_cbs() from using never-onlined CPUs
- rcutorture: Correct name of use_softirq module parameter
- rcuscale: Move shutdown from wait_event() to wait_event_idle()
- rcu/rcuscale: Move rcu_scale_*() after kfree_scale_cleanup()
- rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale
- kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME
is undefined
- perf/ibs: Fix interface via core pmu events
- x86/mm: Fix __swp_entry_to_pte() for Xen PV guests
- locking/atomic: arm: fix sync ops
- evm: Complete description of evm_inode_setattr()
- evm: Fix build warnings
- ima: Fix build warnings
- pstore/ram: Add check for kstrdup
- igc: Enable and fix RX hash usage by netstack
- wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation
- wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx
- libbpf: btf_dump_type_data_check_overflow needs to consider
BTF_MEMBER_BITFIELD_SIZE
- samples/bpf: Fix buffer overflow in tcp_basertt
- spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG
- wifi: wilc1000: fix for absent RSN capabilities WFA testcase
- wifi: mwifiex: Fix the size of a memory allocation in
mwifiex_ret_802_11_scan()
- sctp: add bpf_bypass_getsockopt proto callback
- libbpf: fix offsetof() and container_of() to work with CO-RE
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- spi: dw: Round of n_bytes to power of 2
- nfc: llcp: fix possible use of uninitialized variable in
nfc_llcp_send_connect()
- bpftool: JIT limited misreported as negative value on aarch64
- bpf: Remove bpf trampoline selector
- bpf: Fix memleak due to fentry attach failure
- selftests/bpf: Do not use sign-file as testcase
- regulator: core: Fix more error checking for debugfs_create_dir()
- regulator: core: Streamline debugfs operations
- wifi: orinoco: Fix an error handling path in spectrum_cs_probe()
- wifi: orinoco: Fix an error handling path in orinoco_cs_probe()
- wifi: atmel: Fix an error handling path in atmel_probe()
- wifi: wl3501_cs: Fix an error handling path in wl3501_probe()
- wifi: ray_cs: Fix an error handling path in ray_probe()
- wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
- samples/bpf: xdp1 and xdp2 reduce XDPBUFSIZE to 60
- wifi: ath10k: Trigger STA disconnect after reconfig complete on hardware
restart
- wifi: mac80211: recalc min chandef for new STA links
- selftests/bpf: Fix check_mtu using wrong variable type
- wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled
- wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown
- ice: handle extts in the miscellaneous interrupt thread
- selftests: cgroup: fix unexpected failure on test_memcg_low
- watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct
config
- watchdog/perf: more properly prevent false positives with turbo modes
- kexec: fix a memory leak in crash_shrink_memory()
- mmc: mediatek: Avoid ugly error message when SDIO wakeup IRQ isn't used
- memstick r592: make memstick_debug_get_tpc_name() static
- wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key()
- wifi: mac80211: Fix permissions for valid_links debugfs entry
- rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO
- wifi: ath11k: Add missing check for ioremap
- wifi: iwlwifi: pull from TXQs with softirqs disabled
- wifi: iwlwifi: pcie: fix NULL pointer dereference in
iwl_pcie_irq_rx_msix_handler()
- wifi: mac80211: Remove "Missing iftype sband data/EHT cap" spam
- wifi: cfg80211: rewrite merging of inherited elements
- wifi: cfg80211: drop incorrect nontransmitted BSS update code
- wifi: cfg80211: fix regulatory disconnect with OCB/NAN
- wifi: ieee80211: Fix the common size calculation for reconfiguration ML
- mmc: Add MMC_QUIRK_BROKEN_SD_CACHE for Kingston Canvas Go Plus from 11/2019
- wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection
- wifi: ath9k: convert msecs to jiffies where needed
- bpf: Factor out socket lookup functions for the TC hookpoint.
- bpf: Call __bpf_sk_lookup()/__bpf_skc_lookup() directly via TC hookpoint
- bpf: Fix bpf socket lookup from tc/xdp to respect socket VRF bindings
- can: length: fix bitstuffing count
- can: kvaser_pciefd: Add function to set skb hwtstamps
- can: kvaser_pciefd: Set hardware timestamp on transmitted packets
- net: stmmac: fix double serdes powerdown
- netlink: fix potential deadlock in netlink_set_err()
- netlink: do not hard code device address lenth in fdb dumps
- bonding: do not assume skb mac_header is set
- selftests: rtnetlink: remove netdevsim device after ipsec offload test
- gtp: Fix use-after-free in __gtp_encap_destroy().
- net: axienet: Move reset before 64-bit DMA detection
- ocfs2: Fix use of slab data with sendpage
- sfc: fix crash when reading stats while NIC is resetting
- lib/ts_bm: reset initial match offset for every block of text
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just
basic one
- netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return
value.
- ipvlan: Fix return value of ipvlan_queue_xmit()
- netlink: Add __sock_i_ino() for __netlink_diag_dump().
- drm/amd/display: Add logging for display MALL refresh setting
- radeon: avoid double free in ci_dpm_init()
- drm/amd/display: Explicitly specify update type per plane info change
- drm/bridge: it6505: Move a variable assignment behind a null pointer check
in receive_timing_debugfs_show()
- Input: drv260x - sleep between polling GO bit
- drm/bridge: ti-sn65dsi83: Fix enable error path
- drm/bridge: tc358768: always enable HS video mode
- drm/bridge: tc358768: fix PLL parameters computation
- drm/bridge: tc358768: fix PLL target frequency
- drm/bridge: tc358768: fix TCLK_ZEROCNT computation
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation
- drm/bridge: tc358768: fix THS_ZEROCNT computation
- drm/bridge: tc358768: fix TXTAGOCNT computation
- drm/bridge: tc358768: fix THS_TRAILCNT computation
- drm/vram-helper: fix function names in vram helper doc
- ARM: dts: BCM5301X: Drop "clock-names" from the SPI node
- ARM: dts: meson8b: correct uart_B and uart_C clock references
- mm: call arch_swap_restore() from do_swap_page()
- clk: vc5: Use `clamp()` to restrict PLL range
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- clk: vc5: Fix .driver_data content in i2c_device_id
- clk: vc7: Fix .driver_data content in i2c_device_id
- clk: rs9: Fix .driver_data content in i2c_device_id
- Input: adxl34x - do not hardcode interrupt trigger type
- drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks`
- drm/panel: sharp-ls043t1le01: adjust mode settings
- driver: soc: xilinx: use _safe loop iterator to avoid a use after free
- ASoC: Intel: sof_sdw: remove SOF_SDW_TGL_HDMI for MeteorLake devices
- drm/vkms: isolate pixel conversion functionality
- drm: Add fixed-point helper to get rounded integer values
- drm/vkms: Fix RGB565 pixel conversion
- ARM: dts: stm32: Move ethernet MAC EEPROM from SoM to carrier boards
- bus: ti-sysc: Fix dispc quirk masking bool variables
- arm64: dts: microchip: sparx5: do not use PSCI on reference boards
- drm/bridge: tc358767: Switch to devm MIPI-DSI helpers
- clk: imx: scu: use _safe list iterator to avoid a use after free
- hwmon: (f71882fg) prevent possible division by zero
- RDMA/bnxt_re: Disable/kill tasklet only if it is enabled
- RDMA/bnxt_re: Fix to remove unnecessary return labels
- RDMA/bnxt_re: Use unique names while registering interrupts
- RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid
- RDMA/bnxt_re: Fix to remove an unnecessary log
- drm/msm/dsi: don't allow enabling 14nm VCO with unprogrammed rate
- drm/msm/disp/dpu: get timing engine status from intf status register
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
- iommu/virtio: Detach domain on endpoint release
- iommu/virtio: Return size mapped for a detached domain
- clk: renesas: rzg2l: Fix CPG_SIPLL5_CLK1 register write
- ARM: dts: gta04: Move model property out of pinctrl node
- drm/bridge: anx7625: Convert to i2c's .probe_new()
- drm/bridge: anx7625: Prevent endless probe loop
- ARM: dts: qcom: msm8974: do not use underscore in node name (again)
- arm64: dts: qcom: msm8916: correct camss unit address
- arm64: dts: qcom: msm8916: correct MMC unit address
- arm64: dts: qcom: msm8994: correct SPMI unit address
- arm64: dts: qcom: msm8996: correct camss unit address
- arm64: dts: qcom: sdm630: correct camss unit address
- arm64: dts: qcom: sdm845: correct camss unit address
- arm64: dts: qcom: sm8350: correct DMA controller unit address
- arm64: dts: qcom: sdm845-polaris: add missing touchscreen child node reg
- arm64: dts: qcom: apq8016-sbc: Fix regulator constraints
- arm64: dts: qcom: apq8016-sbc: Fix 1.8V power rail on LS expansion
- drm/bridge: Introduce pre_enable_prev_first to alter bridge init order
- drm/bridge: ti-sn65dsi83: Fix enable/disable flow to meet spec
- drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H
- ARM: ep93xx: fix missing-prototype warnings
- ARM: omap2: fix missing tick_broadcast() prototype
- arm64: dts: qcom: pm7250b: add missing spmi-vadc include
- arm64: dts: qcom: apq8096: fix fixed regulator name property
- arm64: dts: mediatek: mt8183: Add mediatek,broken-save-restore-fw to kukui
- ARM: dts: stm32: Shorten the AV96 HDMI sound card name
- memory: brcmstb_dpfe: fix testing array offset after use
- ARM: dts: qcom: apq8074-dragonboard: Set DMA as remotely controlled
- ASoC: es8316: Increment max value for ALC Capture Target Volume control
- ASoC: es8316: Do not set rate constraints for unsupported MCLKs
- ARM: dts: meson8: correct uart_B and uart_C clock references
- soc/fsl/qe: fix usb.c build errors
- RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes
- IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate
- RDMA/hns: Fix hns_roce_table_get return value
- ARM: dts: iwg20d-q7-common: Fix backlight pwm specifier
- arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1
- drm/msm/dpu: set DSC flush bit correctly at MDP CTL flush register
- fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe()
- arm64: dts: ti: k3-j7200: Fix physical address of pin
- Input: pm8941-powerkey - fix debounce on gen2+ PMICs
- ARM: dts: stm32: Fix audio routing on STM32MP15xx DHCOM PDK2
- ARM: dts: stm32: fix i2s endpoint format property for stm32mp15xx-dkx
- hwmon: (gsc-hwmon) fix fan pwm temperature scaling
- hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272
- ARM: dts: BCM5301X: fix duplex-full => full-duplex
- clk: Export clk_hw_forward_rate_request()
- drm/amd/display: Fix a test CalculatePrefetchSchedule()
- drm/amd/display: Fix a test dml32_rq_dlg_get_rq_reg()
- drm/amdkfd: Fix potential deallocation of previously deallocated memory.
- soc: mediatek: SVS: Fix MT8192 GPU node name
- drm/amd/display: Fix artifacting on eDP panels when engaging freesync video
mode
- drm/radeon: fix possible division-by-zero errors
- HID: uclogic: Modular KUnit tests should not depend on KUNIT=y
- RDMA/rxe: Fix access checks in rxe_check_bind_mw
- amdgpu: validate offset_in_bo of drm_amdgpu_gem_va
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
- RDMA/bnxt_re: wraparound mbox producer index
- RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context
- clk: imx: clk-imxrt1050: fix memory leak in imxrt1050_clocks_probe
- clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe
- clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe
- clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe()
- arm64: dts: qcom: sdm845: Flush RSC sleep & wake votes
- arm64: dts: qcom: sm8250-edo: Panel framebuffer is 2.5k instead of 4k
- clk: bcm: rpi: Fix off by one in raspberrypi_discover_clocks()
- clk: clocking-wizard: Fix Oops in clk_wzrd_register_divider()
- clk: tegra: tegra124-emc: Fix potential memory leak
- ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer
- drm/msm/dpu: do not enable color-management if DSPPs are not available
- drm/msm/dpu: Fix slice_last_group_size calculation
- drm/msm/dsi: Use DSC slice(s) packet size to compute word count
- drm/msm/dsi: Flip greater-than check for slice_count and slice_per_intf
- drm/msm/dsi: Remove incorrect references to slice_count
- drm/msm/dp: Free resources after unregistering them
- arm64: dts: mediatek: Add cpufreq nodes for MT8192
- arm64: dts: mediatek: mt8192: Fix CPUs capacity-dmips-mhz
- drm/amdgpu: Fix memcpy() in sienna_cichlid_append_powerplay_table function.
- drm/amdgpu: Fix usage of UMC fill record in RAS
- drm/msm/dpu: correct MERGE_3D length
- clk: vc5: check memory returned by kasprintf()
- clk: cdce925: check return value of kasprintf()
- clk: si5341: return error if one synth clock registration fails
- clk: si5341: check return value of {devm_}kasprintf()
- clk: si5341: free unused memory on probe failure
- clk: keystone: sci-clk: check return value of kasprintf()
- clk: ti: clkctrl: check return value of kasprintf()
- drivers: meson: secure-pwrc: always enable DMA domain
- ovl: update of dentry revalidate flags after copy up
- ASoC: imx-audmix: check return value of devm_kasprintf()
- clk: Fix memory leak in devm_clk_notifier_register()
- ARM: dts: lan966x: kontron-d10: fix board reset
- ARM: dts: lan966x: kontron-d10: fix SPI CS
- ASoC: amd: acp: clear pdm dma interrupt mask
- PCI: cadence: Fix Gen2 Link Retraining process
- PCI: vmd: Reset VMD config register between soft reboots
- scsi: qedf: Fix NULL dereference in error handling
- pinctrl: bcm2835: Handle gpiochip_add_pin_range() errors
- platform/x86: lenovo-yogabook: Fix work race on remove()
- platform/x86: lenovo-yogabook: Reprobe devices on remove()
- platform/x86: lenovo-yogabook: Set default keyboard backligh brightness on
probe()
- PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free
- scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe()
- PCI: pciehp: Cancel bringup sequence if card is not present
- PCI: ftpci100: Release the clock resources
- pinctrl: sunplus: Add check for kmalloc
- PCI: Add pci_clear_master() stub for non-CONFIG_PCI
- scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on
nlp_state
- perf bench: Add missing setlocale() call to allow usage of %'d style
formatting
- pinctrl: cherryview: Return correct value if pin in push-pull mode
- platform/x86: think-lmi: mutex protection around multiple WMI calls
- platform/x86: think-lmi: Correct System password interface
- platform/x86: think-lmi: Correct NVME password handling
- pinctrl:sunplus: Add check for kmalloc
- pinctrl: npcm7xx: Add missing check for ioremap
- kcsan: Don't expect 64 bits atomic builtins from 32 bits architectures
- powerpc/interrupt: Don't read MSR from interrupt_exit_kernel_prepare()
- powerpc/signal32: Force inlining of __unsafe_save_user_regs() and
save_tm_user_regs_unsafe()
- perf script: Fix allocation of evsel->priv related to per-event dump files
- platform/x86: thinkpad_acpi: Fix lkp-tests warnings for platform profiles
- perf dwarf-aux: Fix off-by-one in die_get_varname()
- platform/x86/dell/dell-rbtn: Fix resources leaking on error path
- perf tool x86: Consolidate is_amd check into single function
- perf tool x86: Fix perf_env memory leak
- powerpc/64s: Fix VAS mm use after free
- pinctrl: microchip-sgpio: check return value of devm_kasprintf()
- pinctrl: at91-pio4: check return value of devm_kasprintf()
- powerpc/powernv/sriov: perform null check on iov before dereferencing iov
- powerpc: update ppc_save_regs to save current r1 in pt_regs
- PCI: qcom: Remove PCIE20_ prefix from register definitions
- PCI: qcom: Sort and group registers and bitfield definitions
- PCI: qcom: Use lower case for hex
- PCI: qcom: Use DWC helpers for modifying the read-only DBI registers
- PCI: qcom: Disable write access to read only registers for IP v2.9.0
- riscv: uprobes: Restore thread.bad_cause
- powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo
- powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-
boundary
- PCI: endpoint: Fix a Kconfig prompt of vNTB driver
- PCI: endpoint: functions/pci-epf-test: Fix dma_chan direction
- PCI: vmd: Fix uninitialized variable usage in vmd_enable_domain()
- vfio/mdev: Move the compat_class initialization to module init
- hwrng: virtio - Fix race on data_avail and actual data
- modpost: remove broken calculation of exception_table_entry size
- crypto: nx - fix build warnings when DEBUG_FS is not enabled
- modpost: fix section mismatch message for R_ARM_ABS32
- modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24}
- crypto: marvell/cesa - Fix type mismatch warning
- crypto: jitter - correct health test during initialization
- modpost: fix off by one in is_executable_section()
- ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard
- crypto: qat - unmap buffer before free for DH
- crypto: qat - unmap buffers before free for RSA
- NFSv4.2: fix wrong shrinker_id
- NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION
- SMB3: Do not send lease break acknowledgment if all file handles have been
closed
- dax: Fix dax_mapping_release() use after free
- dax: Introduce alloc_dev_dax_id()
- dax/kmem: Pass valid argument to memory_group_register_static
- hwrng: st - keep clock enabled while hwrng is registered
- kbuild: Disable GCOV for *.mod.o
- efi/libstub: Disable PCI DMA before grabbing the EFI memory map
- cifs: prevent use-after-free by freeing the cfile later
- cifs: do all necessary checks for credits within or before locking
- smb: client: fix broken file attrs with nodfs mounts
- ksmbd: avoid field overflow warning
- arm64: sme: Use STR P to clear FFR context field in streaming SVE mode
- x86/efi: Make efi_set_virtual_address_map IBT safe
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- USB: serial: option: add LARA-R6 01B PIDs
- usb: dwc3: gadget: Propagate core init errors to UDC during pullup
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
- iio: adc: ad7192: Fix null ad7192_state pointer access
- iio: adc: ad7192: Fix internal/external clock selection
- iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF
- iio: accel: fxls8962af: fixup buffer scan element type
- mm/mmap: Fix VM_LOCKED check in do_vmi_align_munmap()
- ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on EliteBook
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx
- ALSA: jack: Fix mutex call in snd_jack_report()
- ALSA: pcm: Fix potential data race at PCM memory allocation helpers
- block: fix signed int overflow in Amiga partition support
- block: add overflow checks for Amiga partition support
- block: change all __u32 annotations to __be32 in affs_hardblocks.h
- block: increment diskseq on all media change events
- btrfs: fix race when deleting free space root from the dirty cow roots list
- SUNRPC: Fix UAF in svc_tcp_listen_data_ready()
- w1: w1_therm: fix locking behavior in convert_t
- w1: fix loop in w1_fini()
- dt-bindings: power: reset: qcom-pon: Only allow reboot-mode pre-pmk8350
- f2fs: do not allow to defragment files have FI_COMPRESS_RELEASED
- sh: j2: Use ioremap() to translate device tree address into kernel memory
- usb: dwc2: Fix some error handling paths
- serial: 8250: omap: Fix freeing of resources on failed register
- clk: qcom: mmcc-msm8974: remove oxili_ocmemgx_clk
- clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs
- clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks
- clk: qcom: gcc-qcm2290: Mark RCGs shared where applicable
- media: usb: Check az6007_read() return value
- media: amphion: drop repeated codec data for vc1l format
- media: amphion: drop repeated codec data for vc1g format
- media: amphion: initiate a drain of the capture queue in dynamic resolution
change
- media: videodev2.h: Fix struct v4l2_input tuner index comment
- media: i2c: Correct format propagation for st-mipid02
- media: hi846: fix usage of pm_runtime_get_if_in_use()
- media: mediatek: vcodec: using decoder status instead of core work count
- clk: qcom: ipq6018: fix networking resets
- clk: qcom: dispcc-qcm2290: Fix BI_TCXO_AO handling
- clk: qcom: dispcc-qcm2290: Fix GPLL0_OUT_DIV handling
- clk: qcom: mmcc-msm8974: use clk_rcg2_shared_ops for mdp_clk_src clock
- staging: vchiq_arm: mark vchiq_platform_init() static
- usb: dwc3: qcom: Fix potential memory leak
- usb: gadget: u_serial: Add null pointer check in gserial_suspend
- extcon: Fix kernel doc of property fields to avoid warnings
- extcon: Fix kernel doc of property capability fields to avoid warnings
- usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()
- usb: hide unused usbfs_notify_suspend/resume functions
- usb: misc: eud: Fix eud sysfs path (use 'qcom_eud')
- serial: core: lock port for stop_rx() in uart_suspend_port()
- serial: 8250: lock port for stop_rx() in omap8250_irq()
- serial: core: lock port for start_rx() in uart_resume_port()
- serial: 8250: lock port for UART_IER access in omap8250_irq()
- kernfs: fix missing kernfs_idr_lock to remove an ID from the IDR
- lkdtm: replace ll_rw_block with submit_bh
- i3c: master: svc: fix cpu schedule in spin lock
- coresight: Fix loss of connection info when a module is unloaded
- mfd: rt5033: Drop rt5033-battery sub-device
- media: venus: helpers: Fix ALIGN() of non power of two
- media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var()
- sh: Avoid using IRQ0 on SH3 and SH4
- gfs2: Fix duplicate should_fault_in_pages() call
- f2fs: fix potential deadlock due to unpaired node_write lock use
- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
- usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove()
- usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe()
- usb: common: usb-conn-gpio: Set last role to unknown before initial
detection
- usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe()
- mfd: wcd934x: Fix an error handling path in wcd934x_slim_probe()
- mfd: intel-lpss: Add missing check for platform_get_resource
- Revert "usb: common: usb-conn-gpio: Set last role to unknown before initial
detection"
- serial: 8250_omap: Use force_suspend and resume for system suspend
- device property: Clarify description of returned value in some functions
- drivers: fwnode: fix fwnode_irq_get[_byname]()
- nvmem: sunplus-ocotp: release otp->clk before return
- nvmem: rmem: Use NVMEM_DEVID_AUTO
- bus: fsl-mc: don't assume child devices are all fsl-mc devices
- mfd: stmfx: Fix error path in stmfx_chip_init
- mfd: stmfx: Nullify stmfx->vdd in case of error
- KVM: s390: vsie: fix the length of APCB bitmap
- KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler
- cpufreq: mediatek: correct voltages for MT7622 and MT7623
- misc: fastrpc: check return value of devm_kasprintf()
- clk: qcom: mmcc-msm8974: fix MDSS_GDSC power flags
- hwtracing: hisi_ptt: Fix potential sleep in atomic context
- mfd: stmpe: Only disable the regulators if they are enabled
- phy: tegra: xusb: check return value of devm_kzalloc()
- lib/bitmap: drop optimization of bitmap_{from,to}_arr64
- pwm: imx-tpm: force 'real_period' to be zero in suspend
- pwm: sysfs: Do not apply state to already disabled PWMs
- pwm: ab8500: Fix error code in probe()
- pwm: mtk_disp: Fix the disable flow of disp_pwm
- md/raid10: fix the condition to call bio_end_io_acct()
- rtc: st-lpc: Release some resources in st_rtc_probe() in case of error
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times
- drm/i915/guc/slpc: Apply min softlimit correctly
- f2fs: check return value of freeze_super()
- media: cec: i2c: ch7322: also select REGMAP
- sctp: fix potential deadlock on &net->sctp.addr_wq_lock
- net/sched: act_ipt: add sanity checks on table name and hook locations
- net: add a couple of helpers for iph tot_len
- net/sched: act_ipt: add sanity checks on skb before calling target
- spi: spi-geni-qcom: enable SPI_CONTROLLER_MUST_TX for GPI DMA mode
- net: mscc: ocelot: don't report that RX timestamping is enabled by default
- net: mscc: ocelot: don't keep PTP configuration of all ports in single
structure
- net: dsa: felix: don't drop PTP frames with tag_8021q when RX timestamping
is disabled
- net: dsa: sja1105: always enable the INCL_SRCPT option
- net: dsa: tag_sja1105: always prefer source port information from INCL_SRCPT
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- Bluetooth: fix invalid-bdaddr quirk for non-persistent setup
- Bluetooth: ISO: use hci_sync for setting CIG parameters
- Bluetooth: MGMT: add CIS feature bits to controller information
- Bluetooth: MGMT: Use BIT macro when defining bitfields
- Bluetooth: MGMT: Fix marking SCAN_RSP as not connectable
- ibmvnic: Do not reset dql stats on NON_FATAL err
- net: dsa: vsc73xx: fix MTU configuration
- mlxsw: minimal: fix potential memory leak in mlxsw_m_linecards_init
- spi: bcm-qspi: return error if neither hif_mspi nor mspi is available
- drm/amdgpu: fix number of fence calculations
- drm/amd: Don't try to enable secure display TA multiple times
- mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
- f2fs: fix error path handling in truncate_dnode()
- octeontx2-af: Fix mapping for NIX block from CGX connection
- octeontx2-af: Add validation before accessing cgx and lmac
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y
- powerpc: dts: turris1x.dts: Fix PCIe MEM size for pci2 node
- net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode
- net: dsa: tag_sja1105: fix source port decoding in vlan_filtering=0 bridge
mode
- net: fix net_dev_start_xmit trace event vs skb_transport_offset()
- tcp: annotate data races in __tcp_oow_rate_limited()
- bpf, btf: Warn but return no error for NULL btf from
__register_btf_kfunc_id_set()
- xsk: Honor SO_BINDTODEVICE on bind
- net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX
- fanotify: disallow mount/sb marks on kernel internal pseudo fs
- riscv: move memblock_allow_resize() after linear mapping is ready
- pptp: Fix fib lookup calls.
- net: dsa: tag_sja1105: fix MAC DA patching from meta frames
- net: dsa: sja1105: always enable the send_meta options
- octeontx-af: fix hardware timestamp configuration
- afs: Fix accidental truncation when storing data
- s390/qeth: Fix vipa deletion
- sh: dma: Fix DMA channel offset calculation
- apparmor: fix missing error check for rhashtable_insert_fast
- i2c: xiic: Don't try to handle more interrupt events after error
- dm: fix undue/missing spaces
- dm: avoid split of quoted strings where possible
- dm ioctl: have constant on the right side of the test
- dm ioctl: Avoid double-fetch of version
- extcon: usbc-tusb320: Unregister typec port on driver removal
- btrfs: do not BUG_ON() on tree mod log failure at balance_level()
- i2c: qup: Add missing unwind goto in qup_i2c_probe()
- irqchip/loongson-pch-pic: Fix potential incorrect hwirq assignment
- NFSD: add encoding of op_recall flag for write delegation
- irqchip/loongson-pch-pic: Fix initialization of HT vector register
- io_uring: wait interruptibly for request completions on exit
- mmc: core: disable TRIM on Kingston EMMC04G-M627
- mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M
- mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS
- mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is
used.
- wifi: cfg80211: fix regulatory disconnect for non-MLO
- wifi: ath10k: Serialize wake_tx_queue ops
- bcache: fixup btree_cache_wait list damage
- bcache: Remove unnecessary NULL point check in node allocations
- bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent
- watch_queue: prevent dangling pipe pointer
- um: Use HOST_DIR for mrproper
- integrity: Fix possible multiple allocation in integrity_inode_get()
- autofs: use flexible array in ioctl structure
- mm/damon/ops-common: atomically test and clear young on ptes and pmds
- shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs
- jffs2: reduce stack usage in jffs2_build_xattr_subsystem()
- fs: avoid empty option when generating legacy mount string
- ext4: Remove ext4 locking of moved directory
- Revert "f2fs: fix potential corruption when moving a directory"
- fs: Establish locking order for unrelated directories
- fs: Lock moved directories
- i2c: nvidia-gpu: Add ACPI property to align with device-tree
- i2c: nvidia-gpu: Remove ccgx,firmware-build property
- usb: typec: ucsi: Mark dGPUs as DEVICE scope
- ipvs: increase ip_vs_conn_tab_bits range for 64BIT
- btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profile
- btrfs: delete unused BGs while reclaiming BGs
- btrfs: bail out reclaim process if filesystem is read-only
- btrfs: add block-group tree to lockdep classes
- btrfs: reinsert BGs failed to reclaim
- btrfs: fix race when deleting quota root from the dirty cow roots list
- btrfs: fix extent buffer leak after tree mod log failure at split_node()
- btrfs: do not BUG_ON() on tree mod log failure at __btrfs_cow_block()
- ASoC: mediatek: mt8173: Fix irq error path
- ASoC: mediatek: mt8173: Fix snd_soc_component_initialize error path
- regulator: tps65219: Fix matching interrupts for their regulators
- ARM: dts: qcom: ipq4019: fix broken NAND controller properties override
- ARM: orion5x: fix d2net gpio initialization
- leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename
- blktrace: use inline function for blk_trace_remove() while blktrace is
disabled
- fs: no need to check source
- xfs: explicitly specify cpu when forcing inodegc delayed work to run
immediately
- xfs: check that per-cpu inodegc workers actually run on that cpu
- xfs: disable reaping in fscounters scrub
- xfs: fix xfs_inodegc_stop racing with mod_delayed_work
- mm/mmap: Fix extra maple tree write
- netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
- wireguard: queueing: use saner cpu selection wrapping
- wireguard: netlink: send staged packets when setting initial private key
- tty: serial: fsl_lpuart: add earlycon for imx8ulp platform
- block/partition: fix signedness issue for Amiga partitions
- sh: mach-r2d: Handle virq offset in cascaded IRL demux
- sh: mach-highlander: Handle virq offset in cascaded IRL demux
- sh: mach-dreamcast: Handle virq offset in cascaded IRQ demux
- sh: hd64461: Handle virq offset for offchip IRQ base and HD64461 IRQ
- blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()
- irqchip/loongson-eiointc: Fix irq affinity setting during resume
- perf: arm_cspmu: Set irq affinitiy only if overflow interrupt is used
- perf/arm_cspmu: Fix event attribute type
- APEI: GHES: correctly return NULL for ghes_get_devices()
- wifi: rtw88: usb: silence log flooding error message
- net: dsa: avoid suspicious RCU usage for synced VLAN-aware MAC addresses
- drm/amd/display: fix is_timing_changed() prototype
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- drm/nouveau: dispnv50: fix missing-prototypes warning
- arm64: dts: qcom: pm8998: don't use GIC_SPI for SPMI interrupts
- arm64: dts: qcom: ipq6018: correct qrng unit address
- arm64: dts: qcom: msm8953: correct IOMMU unit address
- arm64: dts: qcom: msm8976: correct MMC unit address
- arm64: dts: qcom: sm6115: correct thermal-sensor unit address
- drm/msm/dpu: always clear every individual pending flush mask
- MIPS: DTS: CI20: Fix ACT8600 regulator node names
- arm64: dts: qcom: sdm670: Flush RSC sleep & wake votes
- arm64: dts: ti: k3-j721e-beagleboneai64: Fix mailbox node status
- drm/msm/dp: Drop aux devices together with DP controller
- iommufd: Do not access the area pointer after unlocking
- iommufd: Call iopt_area_contig_done() under the lock
- perf evsel: Don't let for_each_group() treat the head of the list as one of
its nodes
- pinctrl: tegra: Duplicate pinmux functions table
- platform/x86:intel/pmc: Remove Meteor Lake S platform support
- perf tests task_analyzer: Fix bad substitution ${$1}
- perf tests task_analyzer: Skip tests if no libtraceevent support
- pinctrl: freescale: Fix a memory out of bounds when num_configs is 1
- perf stat: Reset aggr stats for each run
- platform/x86:intel/pmc: Update maps for Meteor Lake P/M platforms
- perf test: Set PERF_EXEC_PATH for script execution
- kbuild: Fix CFI failures with GCOV
- btrfs: fix range_end calculation in extent_write_locked_range
- igc: Fix race condition in PTP tx code
- igc: Check if hardware TX timestamping is enabled earlier
- igc: Work around HW bug causing missing timestamps
- sch_netem: fix issues in netem_change() vs get_dist_table()
- interconnect: qcom: rpm: Don't use clk_get_optional for bus clocks anymore
- media: videodev2.h: Fix p_s32 and p_s64 pointer types
- f2fs: fix the wrong condition to determine atomic context
- test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation
- media: tc358746: select CONFIG_GENERIC_PHY
- net/sched: act_ipt: zero skb->cb before calling target
- octeontx2-af: cn10kb: fix interrupt csr addresses
- octeontx2-af: Reset MAC features in FLR
- drm/i915/psr: Fix BDW PSR AUX CH data register offsets
- irqchip/loongson-liointc: Fix IRQ trigger polarity
- btrfs: fix dirty_metadata_bytes for redirtied buffers
- btrfs: add missing error handling when logging operation while COWing extent
buffer
- ARM: dts: qcom: msm8660: Fix regulator node names
- ovl: fix null pointer dereference in ovl_permission()
- ovl: let helper ovl_i_path_real() return the realinode
- ovl: fix null pointer dereference in ovl_get_acl_rcu()
- Upstream stable to v6.1.39, v6.3.13, v6.4.4
* Lunar update: upstream stable patchset 2023-09-01 (LP: #2033931)
- x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed
- test_firmware: Use kstrtobool() instead of strtobool()
- cgroup: bpf: use cgroup_lock()/cgroup_unlock() wrappers
- cgroup: always put cset in cgroup_css_set_put_fork
- cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks()
- qcom: llcc/edac: Fix the base address used for accessing LLCC banks
- EDAC/qcom: Get rid of hardcoded register offsets
- ksmbd: validate smb request protocol id
- of: overlay: Fix missing of_node_put() in error case of
init_overlay_changeset()
- power: supply: ab8500: Fix external_power_changed race
- power: supply: sc27xx: Fix external_power_changed race
- power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() +
schedule()
- ARM: dts: vexpress: add missing cache properties
- tools: gpio: fix debounce_period_us output of lsgpio
- selftests: gpio: gpio-sim: Fix BUG: test FAILED due to recent change
- power: supply: Ratelimit no data debug output
- PCI/DPC: Quirk PIO log size for Intel Ice Lake Root Ports
- platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0
- regulator: Fix error checking for debugfs_create_dir
- irqchip/gic-v3: Disable pseudo NMIs on Mediatek devices w/ firmware issues
- irqchip/meson-gpio: Mark OF related data as maybe unused
- power: supply: Fix logic checking if system is running from battery
- drm: panel-orientation-quirks: Change Air's quirk to support Air Plus
- btrfs: scrub: try harder to mark RAID56 block groups read-only
- btrfs: handle memory allocation failure in btrfs_csum_one_bio
- ASoC: soc-pcm: test if a BE can be prepared
- ASoC: Intel: avs: Account for UID of ACPI device
- ASoC: Intel: avs: Add missing checks on FE startup
- parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu()
- parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory()
- MIPS: unhide PATA_PLATFORM
- MIPS: Restore Au1300 support
- MIPS: Alchemy: fix dbdma2
- mips: Move initrd_start check after initrd address sanitisation.
- ASoC: cs35l41: Fix default regmap values for some registers
- ASoC: dwc: move DMA init to snd_soc_dai_driver probe()
- xen/blkfront: Only check REQ_FUA for writes
- drm:amd:amdgpu: Fix missing buffer object unlock in failure path
- io_uring: unlock sqd->lock before sq thread release CPU
- NVMe: Add MAXIO 1602 to bogus nid list.
- irqchip/gic: Correctly validate OF quirk descriptors
- wifi: cfg80211: fix locking in regulatory disconnect
- wifi: cfg80211: fix double lock bug in reg_wdev_chan_valid()
- epoll: ep_autoremove_wake_function should use list_del_init_careful
- ocfs2: fix use-after-free when unmounting read-only filesystem
- ocfs2: check new file size on fallocate call
- zswap: do not shrink if cgroup may not zswap
- nios2: dts: Fix tse_mac "max-frame-size" property
- nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key()
- nilfs2: fix possible out-of-bounds segment allocation in resize ioctl
- nilfs2: reject devices with insufficient block count
- LoongArch: Fix perf event id calculation
- io_uring/net: save msghdr->msg_control for retries
- kexec: support purgatories with .text.hot sections
- x86/purgatory: remove PGO flags
- riscv/purgatory: remove PGO flags
- powerpc/purgatory: remove PGO flags
- btrfs: do not ASSERT() on duplicated global roots
- btrfs: fix iomap_begin length for nocow writes
- btrfs: can_nocow_file_extent should pass down args->strict from callers
- ALSA: usb-audio: Fix broken resume due to UAC3 power state
- ALSA: usb-audio: Add quirk flag for HEM devices to enable native DSD
playback
- dm thin metadata: check fail_io before using data_sm
- dm thin: fix issue_discard to pass GFP_NOIO to __blkdev_issue_discard
- net: ethernet: stmicro: stmmac: fix possible memory leak in __stmmac_open
- nouveau: fix client work fence deletion race
- RDMA/uverbs: Restrict usage of privileged QKEYs
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
- net: usb: qmi_wwan: add support for Compal RXM-G1
- drm/amd: Make sure image is written to trigger VBIOS image update flow
- drm/amd: Tighten permissions on VBIOS flashing attributes
- drm/amd/pm: workaround for compute workload type on some skus
- drm/amdgpu: add missing radeon secondary PCI ID
- ALSA: hda/realtek: Add a quirk for Compaq N14JP6
- thunderbolt: dma_test: Use correct value for absent rings when creating
paths
- thunderbolt: Mask ring interrupt on Intel hardware as well
- clk: pxa: fix NULL pointer dereference in pxa3xx_clk_update_accr
- USB: serial: option: add Quectel EM061KGL series
- serial: lantiq: add missing interrupt ack
- usb: typec: ucsi: Fix command cancellation
- usb: typec: Fix fast_role_swap_current show function
- usb: gadget: udc: core: Offload usb_udc_vbus_handler processing
- usb: gadget: udc: core: Prevent soft_connect_store() race
- USB: dwc3: qcom: fix NULL-deref on suspend
- USB: dwc3: fix use-after-free on core driver unbind
- usb: dwc3: gadget: Reset num TRBs before giving back the request
- RDMA/rtrs: Fix the last iu->buf leak in err path
- RDMA/rtrs: Fix rxe_dealloc_pd warning
- RDMA/rxe: Fix packet length checks
- RDMA/rxe: Fix ref count error in check_rkey()
- spi: cadence-quadspi: Add missing check for dma_set_mask
- spi: fsl-dspi: avoid SCK glitches with continuous transfers
- netfilter: nf_tables: integrate pipapo into commit protocol
- netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM
- ice: Fix XDP memory leak when NIC is brought up and down
- net: enetc: correct the indexes of highest and 2nd highest TCs
- ping6: Fix send to link-local addresses with VRF.
- igb: Fix extts capture value format for 82580/i354/i350
- net/sched: simplify tcf_pedit_act
- net/sched: act_pedit: remove extra check for key type
- net/sched: act_pedit: Parse L3 Header for L4 offset
- octeontx2-af: Fix promiscuous mode
- wifi: mac80211: fix link activation settings order
- wifi: cfg80211: fix link del callback to call correct handler
- wifi: mac80211: take lock before setting vif links
- RDMA/rxe: Fix the use-before-initialization error of resp_pkts
- iavf: remove mask from iavf_irq_enable_queues()
- octeontx2-af: fixed resource availability check
- octeontx2-af: fix lbk link credits on cn10k
- RDMA/mlx5: Initiate dropless RQ for RAW Ethernet functions
- RDMA/mlx5: Create an indirect flow table for steering anchor
- RDMA/cma: Always set static rate to 0 for RoCE
- IB/uverbs: Fix to consider event queue closing also upon non-blocking mode
- RDMA/mlx5: Fix affinity assignment
- IB/isert: Fix dead lock in ib_isert
- IB/isert: Fix possible list corruption in CMA handler
- IB/isert: Fix incorrect release of isert connection
- net: ethtool: correct MAX attribute value for stats
- ipvlan: fix bound dev checking for IPv6 l3s mode
- sctp: fix an error code in sctp_sf_eat_auth()
- igc: Clean the TX buffer and TX descriptor ring
- igc: Fix possible system crash when loading module
- igb: fix nvm.ops.read() error handling
- net: phylink: report correct max speed for QUSGMII
- net: phylink: use a dedicated helper to parse usgmii control word
- drm/nouveau: don't detect DSM for non-NVIDIA device
- drm/bridge: ti-sn65dsi86: Avoid possible buffer overflow
- drm/nouveau/dp: check for NULL nv_connector->native_mode
- drm/nouveau: add nv_encoder pointer check for NULL
- selftests/tc-testing: Fix Error: Specified qdisc kind is unknown.
- selftests/tc-testing: Fix Error: failed to find target LOG
- selftests/tc-testing: Fix SFB db test
- sched: add new attr TCA_EXT_WARN_MSG to report tc extact message
- net/sched: Refactor qdisc_graft() for ingress and clsact Qdiscs
- net/sched: qdisc_destroy() old ingress and clsact Qdiscs before grafting
- selftests: forwarding: hw_stats_l3: Set addrgenmode in a separate step
- cifs: fix lease break oops in xfstest generic/098
- ext4: drop the call to ext4_error() from ext4_get_group_info()
- net/sched: cls_api: Fix lockup on flushing explicitly created chain
- net: dsa: felix: fix taprio guard band overflow at 10Mbps with jumbo frames
- net: lapbether: only support ethernet devices
- net: macsec: fix double free of percpu stats
- sfc: fix XDP queues mode with legacy IRQ
- dm: don't lock fs when the map is NULL during suspend or resume
- net: tipc: resize nlattr array to correct size
- selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET
- octeon_ep: Add missing check for ioremap
- afs: Fix vlserver probe RTT handling
- parisc: Delete redundant register definitions in <asm/assembly.h>
- net/sched: act_api: move TCA_EXT_WARN_MSG to the correct hierarchy
- Revert "net/sched: act_api: move TCA_EXT_WARN_MSG to the correct hierarchy"
- net/sched: act_api: add specific EXT_WARN_MSG for tc action
- neighbour: delete neigh_lookup_nodev as not used
- scsi: target: core: Fix error path in target_setup_session()
- x86/boot/compressed: prefer cc-option for CFLAGS additions
- MIPS: Move '-Wa,-msoft-float' check from as-option to cc-option
- MIPS: Prefer cc-option for additions to cflags
- kbuild: Update assembler calls to use proper flags and language target
- btrfs: properly enable async discard when switching from RO->RW
- wifi: mac80211: fragment per STA profile correctly
- RDMA/rxe: Fix rxe_cq_post
- blk-cgroup: Flush stats before releasing blkcg_gq
- Upstream stable to v6.1.35, v6.3.9
- drm/amd/display: Use dc_update_planes_and_stream
- drm/amd/display: Add wrapper to call planes and stream update
- drm/amd/display: fix the system hang while disable PSR
- tty: serial: fsl_lpuart: make rx_watermark configurable for different
platforms
- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A
- mm: Fix copy_from_user_nofault().
- tpm, tpm_tis: Claim locality in interrupt handler
- tpm_crb: Add support for CRB devices based on Pluton
- ksmbd: validate command payload size
- ksmbd: fix out-of-bound read in smb2_write
- ksmbd: validate session id and tree id in the compound request
- tick/common: Align tick period during sched_timer setup
- selftests: mptcp: remove duplicated entries in usage
- selftests: mptcp: join: fix ShellCheck warnings
- selftests: mptcp: lib: skip if missing symbol
- selftests: mptcp: connect: skip transp tests if not supported
- selftests: mptcp: connect: skip disconnect tests if not supported
- selftests: mptcp: pm nl: remove hardcoded default limits
- selftests: mptcp: pm nl: skip fullmesh flag checks if not supported
- selftests: mptcp: sockopt: relax expected returned size
- selftests: mptcp: sockopt: skip getsockopt checks if not supported
- selftests: mptcp: userspace pm: skip if 'ip' tool is unavailable
- selftests: mptcp: userspace pm: skip if not supported
- selftests: mptcp: lib: skip if not below kernel version
- selftests: mptcp: join: use 'iptables-legacy' if available
- selftests: mptcp: join: helpers to skip tests
- selftests: mptcp: join: skip check if MIB counter not supported
- selftests: mptcp: join: support local endpoint being tracked or not
- selftests: mptcp: join: skip Fastclose tests if not supported
- selftests: mptcp: join: support RM_ADDR for used endpoints or not
- selftests: mptcp: join: skip implicit tests if not supported
- selftests: mptcp: join: skip backup if set flag on ID not supported
- selftests: mptcp: join: skip fullmesh flag tests if not supported
- selftests: mptcp: join: skip MPC backups tests if not supported
- selftests/mount_setattr: fix redefine struct mount_attr build error
- selftests: mptcp: diag: skip listen tests if not supported
- selftests: mptcp: sockopt: skip TCP_INQ checks if not supported
- selftests: mptcp: join: skip test if iptables/tc cmds fail
- selftests: mptcp: join: skip userspace PM tests if not supported
- selftests: mptcp: join: skip fail tests if not supported
- selftests: mptcp: join: fix "userspace pm add & remove address"
- writeback: fix dereferencing NULL mapping->host on writeback_page_template
- scripts: fix the gfp flags header path in gfp-translate
- nilfs2: fix buffer corruption due to concurrent device reads
- ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep()
- KVM: Avoid illegal stage2 mapping on invalid memory slot
- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails
- Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs
- PCI: hv: Fix a race condition bug in hv_pci_query_relations()
- Revert "PCI: hv: Fix a timing issue which causes kdump to fail occasionally"
- PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev
- PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic
- PCI: hv: Add a per-bus mutex state_lock
- io_uring/net: clear msg_controllen on partial sendmsg retry
- io_uring/net: disable partial retries for recvmsg with cmsg
- mptcp: handle correctly disconnect() failures
- mptcp: fix possible divide by zero in recvmsg()
- mptcp: fix possible list corruption on passive MPJ
- mptcp: consolidate fallback and non fallback state machine
- cgroup: Do not corrupt task iteration when rebinding subsystem
- cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex in
freezer_css_{online,offline}()
- mmc: litex_mmc: set PROBE_PREFER_ASYNCHRONOUS
- mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916
- mmc: meson-gx: remove redundant mmc_request_done() call from irq context
- mmc: mmci: stm32: fix max busy timeout calculation
- mmc: sdhci-spear: fix deferred probing
- mmc: bcm2835: fix deferred probing
- mmc: sunxi: fix deferred probing
- bpf: ensure main program has an extable
- wifi: iwlwifi: pcie: Handle SO-F device for PCI id 0x7AF0
- spi: spi-geni-qcom: correctly handle -EPROBE_DEFER from dma_request_chan()
- regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK
- regmap: spi-avmm: Fix regmap_bus max_raw_write
- arm64: dts: rockchip: Fix rk356x PCIe register and range mappings
- nilfs2: prevent general protection fault in nilfs_clear_dirty_page()
- x86/mm: Avoid using set_pgd() outside of real PGD pages
- memfd: check for non-NULL file_seals in memfd_create() syscall
- mmc: meson-gx: fix deferred probing
- ieee802154: hwsim: Fix possible memory leaks
- xfrm: Treat already-verified secpath entries as optional
- xfrm: Ensure policies always checked on XFRM-I input path
- KVM: arm64: PMU: Restore the host's PMUSERENR_EL0
- bpf: track immediate values written to stack by BPF_ST instruction
- bpf: Fix verifier id tracking of scalars on spill
- xfrm: fix inbound ipv4/udp/esp packets to UDPv6 dualstack sockets
- bpf: Fix a bpf_jit_dump issue for x86_64 with sysctl bpf_jit_enable.
- selftests: net: tls: check if FIPS mode is enabled
- selftests: net: vrf-xfrm-tests: change authentication and encryption algos
- selftests: net: fcnal-test: check if FIPS mode is enabled
- xfrm: Linearize the skb after offloading if needed.
- net/mlx5: DR, Fix wrong action data allocation in decap action
- sfc: use budget for TX completions
- net: qca_spi: Avoid high load if QCA7000 is not available
- mmc: mtk-sd: fix deferred probing
- mmc: mvsdio: fix deferred probing
- mmc: omap: fix deferred probing
- mmc: omap_hsmmc: fix deferred probing
- mmc: owl: fix deferred probing
- mmc: sdhci-acpi: fix deferred probing
- mmc: sh_mmcif: fix deferred probing
- mmc: usdhi60rol0: fix deferred probing
- ipvs: align inner_mac_header for encapsulation
- net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch
- net: dsa: mt7530: fix handling of BPDUs on MT7530 switch
- net: dsa: mt7530: fix handling of LLDP frames
- be2net: Extend xmit workaround to BE3 chip
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nft_set_pipapo: .walk does not deal with generations
- netfilter: nf_tables: disallow element updates of bound anonymous sets
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: disallow updates of anonymous sets
- netfilter: nfnetlink_osf: fix module autoload
- Revert "net: phy: dp83867: perform soft reset and retain established link"
- bpf/btf: Accept function names that contain dots
- bpf: Force kprobe multi expected_attach_type for kprobe_multi link
- io_uring/net: use the correct msghdr union member in io_sendmsg_copy_hdr
- selftests: forwarding: Fix race condition in mirror installation
- platform/x86/amd/pmf: Register notify handler only if SPS is enabled
- sch_netem: acquire qdisc lock in netem_change()
- revert "net: align SO_RCVMARK required privileges with SO_MARK"
- arm64: dts: rockchip: fix nEXTRST on SOQuartz
- gpiolib: Fix GPIO chip IRQ initialization restriction
- gpio: sifive: add missing check for platform_get_irq
- gpiolib: Fix irq_domain resource tracking for gpiochip_irqchip_add_domain()
- scsi: target: iscsi: Prevent login threads from racing between each other
- HID: wacom: Add error check to wacom_parse_and_register()
- arm64: Add missing Set/Way CMO encodings
- smb3: missing null check in SMB2_change_notify
- media: cec: core: disable adapter in cec_devnode_unregister
- media: cec: core: don't set last_initiator if tx in progress
- nfcsim.c: Fix error checking for debugfs_create_dir
- btrfs: fix an uninitialized variable warning in btrfs_log_inode
- usb: gadget: udc: fix NULL dereference in remove()
- nvme: double KA polling frequency to avoid KATO with TBKAS on
- nvme: check IO start time when deciding to defer KA
- nvme: improve handling of long keep alives
- Input: soc_button_array - add invalid acpi_index DMI quirk handling
- arm64: dts: qcom: sc7280-idp: drop incorrect dai-cells from WCD938x SDW
- arm64: dts: qcom: sc7280-qcard: drop incorrect dai-cells from WCD938x SDW
- s390/cio: unregister device when the only path is gone
- spi: lpspi: disable lpspi module irq in DMA mode
- ASoC: codecs: wcd938x-sdw: do not set can_multi_write flag
- ASoC: simple-card: Add missing of_node_put() in case of error
- soundwire: dmi-quirks: add new mapping for HP Spectre x360
- soundwire: qcom: add proper error paths in qcom_swrm_startup()
- ASoC: nau8824: Add quirk to active-high jack-detect
- ASoC: amd: yc: Add Thinkpad Neo14 to quirks list for acp6x
- gfs2: Don't get stuck writing page onto itself under direct I/O
- s390/purgatory: disable branch profiling
- ASoC: fsl_sai: Enable BCI bit if SAI works on synchronous mode with BYP
asserted
- ALSA: hda/realtek: Add "Intel Reference board" and "NUC 13" SSID in the
ALC256
- i2c: mchp-pci1xxxx: Avoid cast to incompatible function type
- ARM: dts: Fix erroneous ADS touchscreen polarities
- null_blk: Fix: memory release when memory_backed=1
- drm/exynos: vidi: fix a wrong error return
- drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl
- drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl
- vhost_vdpa: tell vqs about the negotiated
- vhost_net: revert upend_idx only on retriable error
- KVM: arm64: Restore GICv2-on-GICv3 functionality
- x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys
- i2c: imx-lpi2c: fix type char overflow issue when calculating the clock
cycle
- smb: move client and server files to common directory fs/smb
- [Config] updateconfigs for SMBFS_COMMON
- cifs: fix status checks in cifs_tree_connect
- udmabuf: revert 'Add support for mapping hugepages (v4)'
- selftests: mptcp: connect: skip TFO tests if not supported
- selftests: mptcp: join: skip PM listener tests if not supported
- selftests: mptcp: join: uniform listener tests
- block: make sure local irq is disabled when calling __blkcg_rstat_flush
- xfrm: add missed call to delete offloaded policies
- net: dsa: introduce preferred_default_local_cpu_port and use on MT7530
- iommu/amd: Fix possible memory leak of 'domain'
- Upstream stable to v6.1.36, v6.3.10
- mm/mmap: Fix error path in do_vmi_align_munmap()
- mm/mmap: Fix error return in do_vmi_align_munmap()
- mptcp: ensure listener is unhashed before updating the sk status
- x86/microcode/AMD: Load late on both threads too
- x86/smp: Remove pointless wmb()s from native_stop_other_cpus()
- x86/smp: Use dedicated cache-line for mwait_play_dead()
- x86/smp: Cure kexec() vs. mwait_play_dead() breakage
- can: isotp: isotp_sendmsg(): fix return error fix on TX path
- maple_tree: fix potential out-of-bounds access in mas_wr_end_piv()
- fbdev: fix potential OOB read in fast_imageblit()
- HID: hidraw: fix data race on device refcount
- HID: wacom: Use ktime_t rather than int when dealing with timestamps
- HID: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651.
- Revert "thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak
in mtk_thermal_probe"
- sparc32: fix lock_mm_and_find_vma() conversion
- parisc: fix expand_stack() conversion
- csky: fix up lock_mm_and_find_vma() conversion
- xtensa: fix NOMMU build with lock_mm_and_find_vma() conversion
- Upstream stable to v6.1.37, v6.3.11
- xtensa: fix lock_mm_and_find_vma in case VMA not found
- drm/amd/display: Do not update DRR while BW optimizations pending
- PCI/ACPI: Validate acpi_pci_set_power_state() parameter
- PCI/ACPI: Call _REG when transitioning D-states
- execve: always mark stack as growing down during early stack setup
- nubus: Partially revert proc_create_single_data() conversion
- perf symbols: Symbol lookup with kcore can fail if multiple segments match
stext
- scripts/tags.sh: Resolve gtags empty index generation
- docs: Set minimal gtags / GNU GLOBAL version to 6.6.5
- drm/amdgpu: Validate VM ioctl flags.
- drm/amd/display: Ensure vmin and vmax adjust for DCE
- Upstream stable to v6.1.38, v6.3.12
* allow io_uring to be disabled in runtime (LP: #2035116)
- io_uring: add a sysctl to disable io_uring system-wide
* CVE-2023-31083
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
* CVE-2023-4132
- media: usb: siano: Fix warning due to null work_func_t function pointer
* CVE-2023-3863
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
* CVE-2023-3772
- xfrm: add NULL check in xfrm_update_ae_params
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
-- Stefan Bader <email address hidden> Mon, 09 Oct 2023 15:18:06 +0200
-
linux-oracle (6.2.0-1014.14) lunar; urgency=medium
* lunar/linux-oracle: 6.2.0-1014.14 -proposed tracker (LP: #2038222)
* CVE-2023-42755
- [Config] oracle: Mark cls_rsv[p,p6] gone
[ Ubuntu: 6.2.0-35.35 ]
* lunar/linux: 6.2.0-35.35 -proposed tracker (LP: #2038229)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* CVE-2023-4244
- netfilter: nf_tables: don't skip expired elements during walk
- netfilter: nf_tables: integrate pipapo into commit protocol
- netfilter: nft_set_rbtree: fix overlap expiration walk
- netfilter: nf_tables: adapt set backend to use GC transaction API
- netfilter: nft_set_hash: mark set element as dead when deleting from packet
path
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nf_tables: GC transaction API to avoid race with control plane
- netfilter: nf_tables: remove busy mark and gc batch API
- netfilter: nf_tables: don't fail inserts if duplicate has expired
- netfilter: nf_tables: fix kdoc warnings after gc rework
- netfilter: nf_tables: fix GC transaction races with netns and netlink event
exit path
- netfilter: nf_tables: GC transaction race with netns dismantle
- netfilter: nf_tables: GC transaction race with abort path
- netfilter: nf_tables: use correct lock to protect gc_list
- netfilter: nf_tables: defer gc run if previous batch is still pending
- netfilter: nft_dynset: disallow object maps
- netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
* CVE-2023-5197
- netfilter: nf_tables: skip bound chain in netns release path
- netfilter: nf_tables: disallow rule removal from chain binding
* CVE-2023-4921
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
* CVE-2023-4881
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
* CVE-2023-4623
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
* CVE-2023-4622
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
* CVE-2023-42756
- netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
* CVE-2023-42755
- net/sched: Retire rsvp classifier
- [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
* CVE-2023-42753
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
ip_set_hash_netportnet.c
* CVE-2023-42752
- igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
- net: add SKB_HEAD_ALIGN() helper
- net: remove osize variable in __alloc_skb()
- net: factorize code in kmalloc_reserve()
- net: deal with integer overflows in kmalloc_reserve()
* CVE-2023-34319
- xen/netback: Fix buffer overrun triggered by unusual packet
-- Stefan Bader <email address hidden> Fri, 06 Oct 2023 11:02:34 +0200
-
linux-oracle (6.2.0-1013.13) lunar; urgency=medium
* lunar/linux-oracle: 6.2.0-1013.13 -proposed tracker (LP: #2033774)
* Please enable Renesas RZ platform serial installer (LP: #2022361)
- [Config] oracle: Mark sh-sci as built-in
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
[ Ubuntu: 6.2.0-34.34 ]
* lunar/linux: 6.2.0-34.34 -proposed tracker (LP: #2033779)
* CVE-2023-20569
- x86/cpu, kvm: Add support for CPUID_80000021_EAX
- tools headers x86 cpufeatures: Sync with the kernel sources
- x86/alternative: Optimize returns patching
- x86/retbleed: Add __x86_return_thunk alignment checks
- x86/srso: Add a Speculative RAS Overflow mitigation
- x86/srso: Add IBPB_BRTYPE support
- x86/srso: Add SRSO_NO support
- x86/srso: Add IBPB
- x86/srso: Add IBPB on VMEXIT
- x86/srso: Fix return thunks in generated code
- x86/srso: Add a forgotten NOENDBR annotation
- x86/srso: Tie SBPB bit setting to microcode patch detection
- Documentation/hw-vuln: Unify filename specification in index
- Documentation/srso: Document IBPB aspect and fix formatting
- x86/srso: Fix build breakage with the LLVM linker
- x86: Move gds_ucode_mitigated() declaration to header
- x86/retpoline: Don't clobber RFLAGS during srso_safe_ret()
- x86/srso: Disable the mitigation on unaffected configurations
- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG
- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with
retpolines and IBT
- x86/cpu: Fix __x86_return_thunk symbol type
- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk()
- objtool/x86: Fix SRSO mess
- x86/alternative: Make custom return thunk unconditional
- x86/cpu: Clean up SRSO return thunk mess
- x86/cpu: Rename original retbleed methods
- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1
- x86/cpu: Cleanup the untrain mess
- x86/srso: Explain the untraining sequences a bit more
- objtool/x86: Fixup frame-pointer vs rethunk
- x86/static_call: Fix __static_call_fixup()
- x86/srso: Correct the mitigation status when SMT is disabled
- Ubuntu: [Config]: enable Speculative Return Stack Overflow mitigation
* Please enable Renesas RZ platform serial installer (LP: #2022361)
- [Config] enable hihope RZ/G2M serial console
- [Config] Mark sh-sci as built-in
* dGPU cannot resume because system firmware stuck in IPCS method
(LP: #2021572)
- drm/i915/tc: Abort DP AUX transfer on a disconnected TC port
- drm/i915/tc: switch to intel_de_* register accessors in display code
- drm/i915: Enable a PIPEDMC whenever its corresponding pipe is enabled
- drm/i915/tc: Fix TC port link ref init for DP MST during HW readout
- drm/i915/tc: Fix system resume MST mode restore for DP-alt sinks
- drm/i915/tc: Wait for IOM/FW PHY initialization of legacy TC ports
- drm/i915/tc: Factor out helpers converting HPD mask to TC mode
- drm/i915/tc: Fix target TC mode for a disconnected legacy port
- drm/i915/tc: Fix TC mode for a legacy port if the PHY is not ready
- drm/i915/tc: Fix initial TC mode on disabled legacy ports
- drm/i915/tc: Make the TC mode readout consistent in all PHY states
- drm/i915: Add encoder hook to get the PLL type used by TC ports
- drm/i915/tc: Assume a TC port is legacy if VBT says the port has HDMI
- drm/i915/tc: Factor out a function querying active links on a TC port
- drm/i915/tc: Check the PLL type used by an enabled TC port
- drm/i915/tc: Group the TC PHY setup/query functions per platform
- drm/i915/tc: Use the adlp prefix for ADLP TC PHY functions
- drm/i915/tc: Rename tc_phy_status_complete() to tc_phy_is_ready()
- drm/i915/tc: Use the tc_phy prefix for all TC PHY functions
- drm/i915/tc: Move TC port fields to a new intel_tc_port struct
- drm/i915/tc: Check for TC PHY explicitly in
intel_tc_port_fia_max_lane_count()
- drm/i915/tc: Move the intel_tc_port struct declaration to intel_tc.c
- drm/i915/tc: Add TC PHY hook to get the PHY HPD live status
- drm/i915/tc: Add TC PHY hooks to get the PHY ready/owned state
- drm/i915/tc: Add TC PHY hook to read out the PHY HW state
- drm/i915/tc: Add generic TC PHY connect/disconnect handlers
- drm/i915/tc: Factor out tc_phy_verify_legacy_or_dp_alt_mode()
- drm/i915/tc: Add TC PHY hooks to connect/disconnect the PHY
- drm/i915/tc: Fix up the legacy VBT flag only in disconnected mode
- drm/i915/tc: Check TC mode instead of the VBT legacy flag
- drm/i915/tc: Block/unblock TC-cold in the PHY connect/disconnect hooks
- drm/i915/tc: Remove redundant wakeref=0 check from unblock_tc_cold()
- drm/i915/tc: Drop tc_cold_block()/unblock()'s power domain parameter
- drm/i915/tc: Add TC PHY hook to get the TC-cold blocking power domain
- drm/i915/tc: Add asserts in TC PHY hooks that the required power is on
- drm/i915/tc: Add TC PHY hook to init the PHY
- drm/i915/adlp/tc: Use the DE HPD ISR register for hotplug detection
- drm/i915/tc: Get power ref for reading the HPD live status register
- drm/i915/tc: Don't connect the PHY in intel_tc_port_connected()
- drm/i915/adlp/tc: Align the connect/disconnect PHY sequence with bspec
- drm/i915: Move shared DPLL disabling into CRTC disable hook
- drm/i915: Disable DPLLs before disconnecting the TC PHY
- drm/i915: Remove TC PHY disconnect workaround
- drm/i915: Remove the encoder update_prepare()/complete() hooks
- drm/i915/dp_mst: Fix active port PLL selection for secondary MST streams
- drm/i915: Fix PIPEDMC disabling for a bigjoiner configuration
- drm/i915: Add helpers to reference/unreference a DPLL for a CRTC
- drm/i915: Make the CRTC state consistent during sanitize-disabling
- drm/i915: Update connector atomic state before crtc sanitize-disabling
- drm/i915: Separate intel_crtc_disable_noatomic_begin/complete()
- drm/i915: Factor out set_encoder_for_connector()
- drm/i915: Add support for disabling any CRTCs during HW readout/sanitization
- drm/i915/dp: Prevent link training fallback on disconnected port
- drm/i915/dp: Factor out intel_dp_get_active_pipes()
- drm/i915: Factor out a helper for handling atomic modeset locks/state
- drm/i915/tc: Call TypeC port flush_work/cleanup without modeset locks held
- drm/i915/tc: Reset TypeC PHYs left enabled in DP-alt mode after the sink
disconnects
* amdgpu: Fixes for S0i3 resume on Phoenix (LP: #2033654)
- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11
- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix
- drm/amd: flush any delayed gfxoff on suspend entry
* Fix panel brightness issues on HP laptops (LP: #2032704)
- ACPI: video: Put ACPI video and its child devices into D0 on boot
* Fix ACPI TAD on some Intel based systems (LP: #2032767)
- ACPI: TAD: Install SystemCMOS address space handler for ACPI000E
* kdump doesn't work with UEFI secure boot and kernel lockdown enabled on
ARM64 (LP: #2033007)
- [Config]: Enable CONFIG_KEXEC_IMAGE_VERIFY_SIG
* Request backport of xen timekeeping performance improvements (LP: #2033122)
- x86/xen/time: prefer tsc as clocksource when it is invariant
* Fix numerous AER related issues (LP: #2033025)
- SAUCE: PCI/AER: Disable AER service during suspend, again
- SAUCE: PCI/DPC: Disable DPC service during suspend, again
* Enable D3cold at s2idle for Intel DG2 GPU (LP: #2033452)
- drm/i915/dgfx: Enable d3cold at s2idle
* CVE-2023-4569
- netfilter: nf_tables: deactivate catchall elements in next generation
* Fix non-working MT7921e when pre-boot WiFi is enabled (LP: #2026322)
- wifi: mt76: mt7921e: fix init command fail with enabled device
* Fix unreliable ethernet cable detection on I219 NIC (LP: #2028122)
- e1000e: Use PME poll to circumvent unreliable ACPI wake
* [SRU][Ubuntu 22.04.1] Unable to interpret the frequency values in
cpuinfo_min_freq and cpuino_max_freq sysfs files. (LP: #2030924)
- cpufreq: intel_pstate: Fix scaling for hybrid-capable
* CVE-2023-40283
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
* CVE-2023-20588
- x86/bugs: Increase the x86 bugs vector size to two u32s
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
* CVE-2023-4194
- net: tun_chr_open(): set sk_uid from current_fsuid()
- net: tap_open(): set sk_uid from current_fsuid()
* CVE-2023-4155
- KVM: SEV: snapshot the GHCB before accessing it
- KVM: SEV: only access GHCB fields once
* CVE-2023-1206
- tcp: Reduce chance of collisions in inet6_hashfn().
* Lunar update: upstream stable patchset 2023-08-03 (LP: #2029808)
- RDMA/bnxt_re: Fix the page_size used during the MR creation
- phy: amlogic: phy-meson-g12a-mipi-dphy-analog: fix CNTL2_DIF_TX_CTL0 value
- RDMA/efa: Fix unsupported page sizes in device
- RDMA/hns: Fix timeout attr in query qp for HIP08
- RDMA/hns: Fix base address table allocation
- RDMA/hns: Modify the value of long message loopback slice
- dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved()
- RDMA/bnxt_re: Fix a possible memory leak
- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx
- iommu/rockchip: Fix unwind goto issue
- iommu/amd: Don't block updates to GATag if guest mode is on
- iommu/amd: Handle GALog overflows
- iommu/amd: Fix up merge conflict resolution
- nfsd: make a copy of struct iattr before calling notify_change
- dmaengine: pl330: rename _start to prevent build error
- riscv: Fix unused variable warning when BUILTIN_DTB is set
- net/mlx5: Drain health before unregistering devlink
- net/mlx5: SF, Drain health before removing device
- net/mlx5: fw_tracer, Fix event handling
- net/mlx5e: Don't attach netdev profile while handling internal error
- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory pressure
- netrom: fix info-leak in nr_write_internal()
- af_packet: Fix data-races of pkt_sk(sk)->num.
- tls: improve lockless access safety of tls_err_abort()
- amd-xgbe: fix the false linkup in xgbe_phy_status
- perf ftrace latency: Remove unnecessary "--" from --use-nsec option
- mtd: rawnand: ingenic: fix empty stub helper definitions
- RDMA/irdma: Prevent QP use after free
- RDMA/irdma: Fix Local Invalidate fencing
- af_packet: do not use READ_ONCE() in packet_bind()
- tcp: deny tcp_disconnect() when threads are waiting
- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set
- net/smc: Scan from current RMB list when no position specified
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/sched: sch_ingress: Only create under TC_H_INGRESS
- net/sched: sch_clsact: Only create under TC_H_CLSACT
- net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs
- net/sched: Prohibit regrafting ingress or clsact Qdiscs
- net: sched: fix NULL pointer dereference in mq_attach
- net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
- udp6: Fix race condition in udp6_sendmsg & connect
- nfsd: fix double fget() bug in __write_ports_addfd()
- nvme: fix the name of Zone Append for verbose logging
- net/mlx5e: Fix error handling in mlx5e_refresh_tirs
- net/mlx5: Read embedded cpu after init bit cleared
- iommu/mediatek: Flush IOTLB completely only if domain has been attached
- tcp: fix mishandling when the sack compression is deferred.
- net: dsa: mv88e6xxx: Increase wait after reset deactivation
- mtd: rawnand: marvell: ensure timing values are written
- mtd: rawnand: marvell: don't set the NAND frequency select
- rtnetlink: call validate_linkmsg in rtnl_create_link
- mptcp: avoid unneeded __mptcp_nmpc_socket() usage
- mptcp: add annotations around msk->subflow accesses
- mptcp: avoid unneeded address copy
- mptcp: simplify subflow_syn_recv_sock()
- mptcp: consolidate passive msk socket initialization
- mptcp: fix data race around msk->first access
- mptcp: add annotations around sk->sk_shutdown accesses
- drm/amdgpu: release gpu full access after "amdgpu_device_ip_late_init"
- watchdog: menz069_wdt: fix watchdog initialisation
- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs.
- ASoC: Intel: soc-acpi-cht: Add quirk for Nextbook Ares 8A tablet
- drm/amdgpu: Use the default reset when loading or reloading the driver
- mailbox: mailbox-test: Fix potential double-free in
mbox_test_message_write()
- btrfs: abort transaction when sibling keys check fails for leaves
- ARM: 9295/1: unwind:fix unwind abort for uleb128 case
- hwmon: (k10temp) Add PCI ID for family 19, model 78h
- media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
- platform/mellanox: fix potential race in mlxbf-tmfifo driver
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode
- fbdev: stifb: Fix info entry in sti_struct on error path
- nbd: Fix debugfs_create_dir error checking
- block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE
- nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G
- nvme-pci: add quirk for missing secondary temperature thresholds
- ASoC: amd: yc: Add DMI entry to support System76 Pangolin 12
- ASoC: dwc: limit the number of overrun messages
- um: harddog: fix modular build
- xfrm: Check if_id in inbound policy/secpath match
- ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI codecs
- ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V
- ASoC: ssm2602: Add workaround for playback distortions
- media: dvb_demux: fix a bug for the continuity counter
- media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer()
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer()
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
- media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address
- media: netup_unidvb: fix irq init by register it at the end of probe
- media: dvb_ca_en50221: fix a size write bug
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- ASoC: SOF: debug: conditionally bump runtime_pm counter on exceptions
- ASoC: SOF: pcm: fix pm_runtime imbalance in error handling
- ASoC: SOF: sof-client-probes: fix pm_runtime imbalance in error handling
- ASoC: SOF: pm: save io region state in case of errors in resume
- s390/pkey: zeroize key blobs
- s390/topology: honour nr_cpu_ids when adding CPUs
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
- wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value
- ARM: dts: stm32: add pin map for CAN controller on stm32f7
- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
- arm64: vdso: Pass (void *) to virt_to_page()
- wifi: mac80211: simplify chanctx allocation
- wifi: mac80211: consider reserved chanctx for mindef
- wifi: mac80211: recalc chanctx mindef before assigning
- wifi: iwlwifi: mvm: Add locking to the rate read flow
- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed
- wifi: b43: fix incorrect __packed annotation
- netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with
CONFIG_NF_NAT
- nvme-multipath: don't call blk_mark_disk_dead in nvme_mpath_remove_disk
- nvme: do not let the user delete a ctrl before a complete initialization
- ALSA: oss: avoid missing-prototype warnings
- drm/msm: Be more shouty if per-process pgtables aren't working
- atm: hide unused procfs functions
- ceph: silence smatch warning in reconnect_caps_cb()
- drm/amdgpu: skip disabling fence driver src_irqs when device is unplugged
- ublk: fix AB-BA lockdep warning
- nvme-pci: Add quirk for Teamgroup MP33 SSD
- block: Deny writable memory mapping if block is read-only
- KVM: arm64: vgic: Fix a circular locking issue
- KVM: arm64: vgic: Wrap vgic_its_create() with config_lock
- KVM: arm64: vgic: Fix locking comment
- media: mediatek: vcodec: Only apply 4K frame sizes on decoder formats
- mailbox: mailbox-test: fix a locking issue in mbox_test_message_write()
- drivers: base: cacheinfo: Fix shared_cpu_map changes in event of CPU hotplug
- media: uvcvideo: Don't expose unsupported formats to userspace
- iio: accel: st_accel: Fix invalid mount_matrix on devices without ACPI _ONT
method
- iio: adc: mxs-lradc: fix the order of two cleanup operations
- HID: google: add jewel USB id
- HID: wacom: avoid integer overflow in wacom_intuos_inout()
- iio: imu: inv_icm42600: fix timestamp reset
- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476 compatible value
- iio: light: vcnl4035: fixed chip ID check
- iio: adc: stm32-adc: skip adc-channels setup if none is present
- iio: adc: ad_sigma_delta: Fix IRQ issue by setting IRQ_DISABLE_UNLAZY flag
- iio: dac: mcp4725: Fix i2c_master_send() return value handling
- iio: addac: ad74413: fix resistance input processing
- iio: adc: ad7192: Change "shorted" channels to differential
- iio: adc: stm32-adc: skip adc-diff-channels setup if none is present
- iio: dac: build ad5758 driver when AD5758 is selected
- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
- usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM
- usb: gadget: f_fs: Add unbind event before functionfs_unbind
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- misc: fastrpc: return -EPIPE to invocations on device removal
- misc: fastrpc: reject new invocations during device removal
- scsi: stex: Fix gcc 13 warnings
- ata: libata-scsi: Use correct device no in ata_find_dev()
- drm/amdgpu: enable tmz by default for GC 11.0.1
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
- drm/amd/pm: resolve reboot exception for si oland
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
- mmc: vub300: fix invalid response handling
- mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order
- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of
UARTCTRL_SBK
- btrfs: fix csum_tree_block page iteration to avoid tripping on
-Werror=array-bounds
- phy: qcom-qmp-combo: fix init-count imbalance
- phy: qcom-qmp-pcie-msm8996: fix init-count imbalance
- block: fix revalidate performance regression
- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall
- iommu/amd: Fix domain flush size when syncing iotlb
- tpm, tpm_tis: correct tpm_tis_flags enumeration values
- riscv: perf: Fix callchain parse error with kernel tracepoint events
- io_uring: undeprecate epoll_ctl support
- selinux: don't use make's grouped targets feature yet
- mtdchar: mark bits of ioctl handler noinline
- tracing/timerlat: Always wakeup the timerlat thread
- tracing/histograms: Allow variables to have some modifiers
- tracing/probe: trace_probe_primary_from_call(): checked list_first_entry
- selftests: mptcp: connect: skip if MPTCP is not supported
- selftests: mptcp: pm nl: skip if MPTCP is not supported
- selftests: mptcp: join: skip if MPTCP is not supported
- selftests: mptcp: sockopt: skip if MPTCP is not supported
- selftests: mptcp: userspace pm: skip if MPTCP is not supported
- mptcp: fix connect timeout handling
- mptcp: fix active subflow finalization
- ext4: add EA_INODE checking to ext4_iget()
- ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find()
- ext4: disallow ea_inodes with extended attributes
- ext4: add lockdep annotations for i_data_sem for ea_inode's
- fbcon: Fix null-ptr-deref in soft_cursor
- serial: 8250_tegra: Fix an error handling path in tegra_uart_probe()
- serial: cpm_uart: Fix a COMPILE_TEST dependency
- powerpc/xmon: Use KSYM_NAME_LEN in array size
- test_firmware: fix a memory leak with reqs buffer
- test_firmware: fix the memory leak of the allocated firmware buffer
- KVM: arm64: Populate fault info for watchpoint
- KVM: x86: Account fastpath-only VM-Exits in vCPU stats
- ksmbd: fix credit count leakage
- ksmbd: fix UAF issue from opinfo->conn
- ksmbd: fix incorrect AllocationSize set in smb2_get_info
- ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate
- ksmbd: fix multiple out-of-bounds read during context decoding
- KEYS: asymmetric: Copy sig and digest in public_key_verify_signature()
- fs/ntfs3: Validate MFT flags before replaying logs
- regmap: Account for register length when chunking
- tpm, tpm_tis: Request threaded interrupt handler
- iommu/amd/pgtbl_v2: Fix domain max address
- drm/amd/display: Have Payload Properly Created After Resume
- tls: rx: strp: don't use GFP_KERNEL in softirq context
- selftests: mptcp: diag: skip if MPTCP is not supported
- selftests: mptcp: simult flows: skip if MPTCP is not supported
- selftests: mptcp: join: avoid using 'cmp --bytes'
- ext4: enable the lazy init thread when remounting read/write
- iommu: Make IPMMU_VMSA dependencies more strict
- [Config] updateconfigs for IPMMU_VMSA
- iommu/amd: Add missing domain type checks
- efi: Bump stub image version for macOS HVF compatibility
- rxrpc: Truncate UTS_RELEASE for rxrpc version
- net: renesas: rswitch: Fix return value in error path of xmit
- KVM: arm64: Prevent unconditional donation of unmapped regions from the host
- KVM: arm64: Reload PTE after invoking walker callback on preorder traversal
- iio: ad4130: Make sure clock provider gets removed
- iio: adc: mt6370: Fix ibus and ibat scaling value of some specific vendor ID
chips
- iio: accel: kx022a fix irq getting
- misc: fastrpc: Reassign memory ownership only for remote heap
- module/decompress: Fix error checking on zstd decompression
- dmaengine: at_hdmac: Repair bitfield macros for peripheral ID handling
- dmaengine: at_hdmac: Extend the Flow Controller bitfield to three bits
- test_firmware: prevent race conditions by a correct implementation of
locking
- KVM: arm64: Drop last page ref in kvm_pgtable_stage2_free_removed()
- KVM: x86/mmu: Grab memslot for correct address space in NX recovery worker
- Upstream stable to v6.1.33, v6.3.7
- scsi: megaraid_sas: Add flexible array member for SGLs
- net: sfp: fix state loss when updating state_hw_mask
- spi: mt65xx: make sure operations completed before unloading
- platform/surface: aggregator: Allow completion work-items to be executed in
parallel
- platform/surface: aggregator_tabletsw: Add support for book mode in KIP
subsystem
- spi: qup: Request DMA before enabling clocks
- afs: Fix setting of mtime when creating a file/dir/symlink
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
- bpf, sockmap: Avoid potential NULL dereference in
sk_psock_verdict_data_ready()
- neighbour: fix unaligned access to pneigh_entry
- net: dsa: lan9303: allow vid != 0 in port_fdb_{add|del} methods
- net/ipv4: ping_group_range: allow GID from 2147483648 to 4294967294
- bpf: Fix UAF in task local storage
- bpf: Fix elem_size not being set for inner maps
- net/ipv6: fix bool/int mismatch for skip_notify_on_dev_down
- net/smc: Avoid to access invalid RMBs' MRs in SMCRv1 ADD LINK CONT
- net: enetc: correct the statistics of rx bytes
- net: enetc: correct rx_bytes statistics of XDP
- net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values
- Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER
- Bluetooth: Fix l2cap_disconnect_req deadlock
- Bluetooth: ISO: don't try to remove CIG if there are bound CIS left
- Bluetooth: L2CAP: Add missing checks for invalid DCID
- wifi: mac80211: use correct iftype HE cap
- wifi: cfg80211: reject bad AP MLD address
- wifi: mac80211: mlme: fix non-inheritence element
- wifi: mac80211: don't translate beacon/presp addrs
- qed/qede: Fix scheduling while atomic
- wifi: cfg80211: fix locking in sched scan stop work
- selftests/bpf: Verify optval=NULL case
- selftests/bpf: Fix sockopt_sk selftest
- netfilter: nft_bitwise: fix register tracking
- netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper
- netfilter: ipset: Add schedule point in call_ad().
- netfilter: nf_tables: out-of-bound check in chain blob
- ipv6: rpl: Fix Route of Death.
- tcp: gso: really support BIG TCP
- rfs: annotate lockless accesses to sk->sk_rxhash
- rfs: annotate lockless accesses to RFS sock flow table
- net: sched: add rcu annotations around qdisc->qdisc_sleeping
- drm/i915/selftests: Add some missing error propagation
- net: sched: move rtm_tca_policy declaration to include file
- net: sched: act_police: fix sparse errors in tcf_police_dump()
- net: sched: fix possible refcount leak in tc_chain_tmplt_add()
- bpf: Add extra path pointer check to d_path helper
- drm/amdgpu: fix Null pointer dereference error in amdgpu_device_recover_vram
- lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release()
- net: bcmgenet: Fix EEE implementation
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Skip firmware fatal error recovery if chip is not accessible
- bnxt_en: Prevent kernel panic when receiving unexpected PHC_UPDATE event
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- batman-adv: Broken sync while rescheduling delayed work
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
- Input: psmouse - fix OOB access in Elantech protocol
- Input: fix open count when closing inhibited device
- ALSA: hda: Fix kctl->id initialization
- ALSA: ymfpci: Fix kctl->id initialization
- ALSA: gus: Fix kctl->id initialization
- ALSA: cmipci: Fix kctl->id initialization
- ALSA: hda/realtek: Add quirk for Clevo NS50AU
- ALSA: ice1712,ice1724: fix the kcontrol->id initialization
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using CS35L41
- drm/i915/gt: Use the correct error value when kernel_context() fails
- drm/amdgpu: fix xclk freq on CHIP_STONEY
- drm/amdgpu: change reserved vram info print
- drm/amd/pm: Fix power context allocation in SMU13
- drm/amd/display: Reduce sdp bw after urgent to 90%
- wifi: iwlwifi: mvm: Fix -Warray-bounds bug in iwl_mvm_wait_d3_notif()
- can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in
J1939 Socket
- can: j1939: change j1939_netdev_lock type to mutex
- can: j1939: avoid possible use-after-free when j1939_can_rx_register fails
- mptcp: only send RM_ADDR in nl_cmd_remove
- mptcp: add address into userspace pm list
- mptcp: update userspace pm infos
- selftests: mptcp: update userspace pm addr tests
- selftests: mptcp: update userspace pm subflow tests
- ceph: fix use-after-free bug for inodes when flushing capsnaps
- s390/dasd: Use correct lock while counting channel queue length
- Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk
- Bluetooth: fix debugfs registration
- Bluetooth: hci_qca: fix debugfs registration
- tee: amdtee: Add return_origin to 'struct tee_cmd_load_ta'
- rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting
- rbd: get snapshot context after exclusive lock is ensured to be held
- virtio_net: use control_buf for coalesce params
- soc: qcom: icc-bwmon: fix incorrect error code passed to dev_err_probe()
- pinctrl: meson-axg: add missing GPIOA_18 gpio group
- usb: usbfs: Enforce page requirements for mmap
- usb: usbfs: Use consistent mmap functions
- mm: page_table_check: Make it dependent on EXCLUSIVE_SYSTEM_RAM
- mm: page_table_check: Ensure user pages are not slab pages
- arm64: dts: qcom: sc8280xp: Flush RSC sleep & wake votes
- ARM: at91: pm: fix imbalanced reference counter for ethernet devices
- ARM: dts: at91: sama7g5ek: fix debounce delay property for shdwc
- ASoC: codecs: wsa883x: do not set can_multi_write flag
- ASoC: codecs: wsa881x: do not set can_multi_write flag
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified sc7180-lite
boards
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP signals
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
- ASoC: mediatek: mt8195-afe-pcm: Convert to platform remove callback
returning void
- ASoC: mediatek: mt8195: fix use-after-free in driver remove path
- ASoC: simple-card-utils: fix PCM constraint error check
- blk-mq: fix blk_mq_hw_ctx active request accounting
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
- firmware: arm_ffa: Set handle field to zero in memory descriptor
- gpio: sim: fix memory corruption when adding named lines and unnamed hogs
- i2c: sprd: Delete i2c adapter in .remove's error path
- riscv: mm: Ensure prot of VM_WRITE and VM_EXEC must be readable
- eeprom: at24: also select REGMAP
- soundwire: stream: Add missing clear of alloc_slave_rt
- riscv: fix kprobe __user string arg print fault issue
- [Config] updateconfigs for ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE
- vduse: avoid empty string for dev name
- vhost: support PACKED when setting-getting vring_base
- vhost_vdpa: support PACKED when setting-getting vring_base
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: fix out-of-bound read in parse_lease_state()
- ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop
- ext4: only check dquot_initialize_needed() when debugging
- wifi: rtw89: correct PS calculation for SUPPORTS_DYNAMIC_PS
- wifi: rtw88: correct PS calculation for SUPPORTS_DYNAMIC_PS
- Bluetooth: Split bt_iso_qos into dedicated structures
- Bluetooth: ISO: consider right CIS when removing CIG at cleanup
- Bluetooth: ISO: Fix CIG auto-allocation to select configurable CIG
- netfilter: nf_tables: Add null check for nla_nest_start_noflag() in
nft_dump_basechain_hook()
- drm/lima: fix sched context destroy
- net: openvswitch: fix upcall counter access before allocation
- bnxt_en: Fix bnxt_hwrm_update_rss_hash_cfg()
- Input: cyttsp5 - fix array length
- soc: qcom: rpmh-rsc: drop redundant unsigned >=0 comparision
- arm64: dts: qcom: sm6375-pdx225: Fix remoteproc firmware paths
- vdpa/mlx5: Fix hang when cvq commands are triggered during device unregister
- ksmbd: fix posix_acls and acls dereferencing possible ERR_PTR()
- Upstream stable to v6.1.34, v6.3.8
* CVE-2023-4273
- exfat: check if filename entries exceeds max filename length
* CVE-2023-4128
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-
free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-
free
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-
after-free
* CVE-2023-3212
- gfs2: Don't deref jdesc in evict
-- Stefan Bader <email address hidden> Thu, 14 Sep 2023 18:32:11 +0200
-
linux-oracle (6.2.0-1012.12) lunar; urgency=medium
* lunar/linux-oracle: 6.2.0-1012.12 -proposed tracker (LP: #2034153)
[ Ubuntu: 6.2.0-33.33 ]
* lunar/linux: 6.2.0-33.33 -proposed tracker (LP: #2034158)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* CVE-2023-21264
- KVM: arm64: Prevent unconditional donation of unmapped regions from the host
* CVE-2023-4569
- netfilter: nf_tables: deactivate catchall elements in next generation
* CVE-2023-40283
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
* CVE-2023-20588
- x86/bugs: Increase the x86 bugs vector size to two u32s
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
* CVE-2023-4128
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-
free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-
free
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-
after-free
-- Khalid Elmously <email address hidden> Fri, 08 Sep 2023 00:57:51 -0400
-
linux-oracle (6.2.0-1011.11) lunar; urgency=medium
* lunar/linux-oracle: 6.2.0-1011.11 -proposed tracker (LP: #2030376)
[ Ubuntu: 6.2.0-32.32 ]
* lunar/linux: 6.2.0-32.32 -proposed tracker (LP: #2031134)
* libgnutls report "trap invalid opcode" when trying to install packages over
https (LP: #2031093)
- [Config]: disable CONFIG_GDS_FORCE_MITIGATION
[ Ubuntu: 6.2.0-30.30 ]
* lunar/linux: 6.2.0-30.30 -proposed tracker (LP: #2030381)
* CVE-2022-40982
- init: Provide arch_cpu_finalize_init()
- x86/cpu: Switch to arch_cpu_finalize_init()
- ARM: cpu: Switch to arch_cpu_finalize_init()
- ia64/cpu: Switch to arch_cpu_finalize_init()
- m68k/cpu: Switch to arch_cpu_finalize_init()
- mips/cpu: Switch to arch_cpu_finalize_init()
- sh/cpu: Switch to arch_cpu_finalize_init()
- sparc/cpu: Switch to arch_cpu_finalize_init()
- um/cpu: Switch to arch_cpu_finalize_init()
- init: Remove check_bugs() leftovers
- init: Invoke arch_cpu_finalize_init() earlier
- init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init()
- x86/init: Initialize signal frame size late
- x86/fpu: Remove cpuinfo argument from init functions
- x86/fpu: Mark init functions __init
- x86/fpu: Move FPU initialization into arch_cpu_finalize_init()
- x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build
- x86/xen: Fix secondary processors' FPU initialization
- x86/speculation: Add Gather Data Sampling mitigation
- x86/speculation: Add force option to GDS mitigation
- x86/speculation: Add Kconfig option for GDS
- KVM: Add GDS_NO support to KVM
- Documentation/x86: Fix backwards on/off logic about YMM support
- [Config]: Enable CONFIG_ARCH_HAS_CPU_FINALIZE_INIT and
CONFIG_GDS_FORCE_MITIGATION
* CVE-2023-4015
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound
set/chain
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
* CVE-2023-3995
- netfilter: nf_tables: disallow rule addition to bound chain via
NFTA_RULE_CHAIN_ID
* CVE-2023-3777
- netfilter: nf_tables: skip bound chain on rule flush
* CVE-2023-3609
- net/sched: cls_u32: Fix reference counter leak leading to overflow
* NULL pointer dereference on CS35L41 HDA AMP (LP: #2029199)
- ASoC: cs35l41: Refactor error release code
- ALSA: cs35l41: Add shared boost feature
- ASoC: dt-bindings: cirrus, cs35l41: Document CS35l41 shared boost
- ALSA: hda: cs35l41: Ensure firmware/tuning pairs are always loaded
- ALSA: hda: cs35l41: Enable Amp High Pass Filter
- ALSA: cs35l41: Use mbox command to enable speaker output for external boost
- ALSA: cs35l41: Poll for Power Up/Down rather than waiting a fixed delay
- ALSA: hda: cs35l41: Check mailbox status of pause command after firmware
load
- ALSA: hda: cs35l41: Ensure we correctly re-sync regmap before system
suspending.
- ALSA: hda: cs35l41: Ensure we pass up any errors during system suspend.
- ALSA: hda: cs35l41: Move Play and Pause into separate functions
- ALSA: hda: hda_component: Add pre and post playback hooks to hda_component
- ALSA: hda: cs35l41: Use pre and post playback hooks
- ALSA: hda: cs35l41: Rework System Suspend to ensure correct call separation
- ALSA: hda: cs35l41: Add device_link between HDA and cs35l41_hda
- ALSA: hda: cs35l41: Ensure amp is only unmuted during playback
* Reboot command powers off the system (LP: #2029332)
- x86/smp: Make stop_other_cpus() more robust
- x86/smp: Dont access non-existing CPUID leaf
* losetup with mknod fails on jammy with kernel 5.15.0-69-generic
(LP: #2015400)
- loop: deprecate autoloading callback loop_probe()
- loop: do not enforce max_loop hard limit by (new) default
* Fix UBSAN in Intel EDAC driver (LP: #2028746)
- EDAC/skx_common: Enable EDAC support for the "near" memory
- EDAC/skx_common: Delete duplicated and unreachable code
- EDAC/i10nm: Add Intel Emerald Rapids server support
- EDAC/i10nm: Make more configurations CPU model specific
- EDAC/i10nm: Add Intel Granite Rapids server support
- EDAC/i10nm: Skip the absent memory controllers
* Make TTY switching possible for NVIDIA when it's boot VGA (LP: #2028749)
- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers
- video/aperture: use generic code to figure out the vga default device
- drm/aperture: Remove primary argument
- video/aperture: Only kick vgacon when the pdev is decoding vga
- video/aperture: Move vga handling to pci function
- video/aperture: Drop primary argument
- video/aperture: Only remove sysfb on the default vga pci device
- fbdev: Simplify fb_is_primary_device for x86
- video/aperture: Provide a VGA helper for gma500 and internal use
* Fix AMD gpu hang when screen off/on (LP: #2028740)
- drm/amd/display: Keep PHY active for dp config
* Various backlight issues with the 6.0/6.1 kernel (LP: #2023638)
- ACPI: video: Stop trying to use vendor backlight control on laptops from
after ~2012
* FM350(mtk_t7xx) failed to suspend, or early wake while suspending
(LP: #2020743)
- net: wwan: t7xx: Ensure init is completed before system sleep
* Include the MAC address pass through function on RTL8153DD-CG (LP: #2020295)
- r8152: add USB device driver for config selection
* CVE-2023-20593
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu/amd: Add a Zenbleed fix
* CVE-2023-4004
- netfilter: nft_set_pipapo: fix improper element removal
* CVE-2023-3611
- net/sched: sch_qfq: refactor parsing of netlink parameters
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
* CVE-2023-3610
- netfilter: nf_tables: fix chain binding transaction logic
* CVE-2023-2898
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
* Fix speaker volume too low on HP G10 laptops (LP: #2023197)
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP platform
* stacked overlay file system mounts that have chroot() called against them
appear to be getting locked (by the kernel most likely?) (LP: #2016398)
- SAUCE: overlayfs: fix reference count mismatch
* arm64+ast2600: No Output from BMC's VGA port (LP: #2026776)
- drm/ast: Fix ARM compatibility
* Fix eDP only displays 3/4 area after switching to mirror mode with external
HDMI 4K monitor (LP: #2024273)
- drm/i915: Allow arbitrary refresh rates with VRR eDP panels
* Fix AMDGPU: the screen freeze with W7500 (LP: #2027957)
- drm/amd/pm: share the code around SMU13 pcie parameters update
- drm/amd/pm: conditionally disable pcie lane/speed switching for SMU13
- drm/amd: Move helper for dynamic speed switch check out of smu13
- drm/amd: Align SMU11 SMU_MSG_OverridePcieParameters implementation with
SMU13
* UBSAN: shift-out-of-bounds in amd_sfh (LP: #2027773)
- HID: amd_sfh: Rename the float32 variable
- HID: amd_sfh: Fix for shift-out-of-bounds
* cifs: fix mid leak during reconnection after timeout threshold
(LP: #2029138)
- cifs: fix mid leak during reconnection after timeout threshold
* Lunar update: upstream stable patchset 2023-07-28 (LP: #2028979)
- usb: dwc3: fix gadget mode suspend interrupt handler issue
- tpm, tpm_tis: Avoid cache incoherency in test for interrupts
- tpm, tpm_tis: Only handle supported interrupts
- tpm_tis: Use tpm_chip_{start,stop} decoration inside tpm_tis_resume
- tpm, tpm_tis: startup chip before testing for interrupts
- tpm: Re-enable TPM chip boostrapping non-tpm_tis TPM drivers
- tpm: Prevent hwrng from activating during resume
- watchdog: sp5100_tco: Immediately trigger upon starting.
- drm/amd/display: hpd rx irq not working with eDP interface
- ocfs2: Switch to security_inode_init_security()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does
not complain
- ALSA: hda/ca0132: add quirk for EVGA X299 DARK
- ALSA: hda: Fix unhandled register update during auto-suspend period
- ALSA: hda/realtek: Enable headset onLenovo M70/M90
- SUNRPC: Don't change task->tk_status after the call to rpc_exit_task
- mmc: sdhci-esdhc-imx: make "no-mmc-hs400" works
- mmc: block: ensure error propagation for non-blk
- power: supply: axp288_fuel_gauge: Fix external_power_changed race
- power: supply: bq25890: Fix external_power_changed race
- ASoC: rt5682: Disable jack detection interrupt during suspend
- net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize
- m68k: Move signal frame following exception on 68020/030
- xtensa: fix signal delivery to FDPIC process
- xtensa: add __bswap{si,di}2 helpers
- parisc: Use num_present_cpus() in alternative patching code
- parisc: Handle kgdb breakpoints only in kernel context
- parisc: Fix flush_dcache_page() for usage from irq context
- parisc: Allow to reboot machine after system halt
- parisc: Enable LOCKDEP support
- parisc: Handle kprobes breakpoints only in kernel context
- gpio: mockup: Fix mode of debugfs files
- btrfs: use nofs when cleaning up aborted transactions
- dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type
- drm/mgag200: Fix gamma lut not initialized.
- drm/radeon: reintroduce radeon_dp_work_func content
- drm/amd/pm: add missing NotifyPowerSource message mapping for SMU13.0.7
- drm/amd/pm: Fix output of pp_od_clk_voltage
- Revert "binder_alloc: add missing mmap_lock calls when using the VMA"
- Revert "android: binder: stop saving a pointer to the VMA"
- binder: add lockless binder_alloc_(set|get)_vma()
- binder: fix UAF caused by faulty buffer cleanup
- binder: fix UAF of alloc->vma in race with munmap()
- selftests/memfd: Fix unknown type name build failure
- drm/amd/amdgpu: limit one queue per gang
- perf/x86/uncore: Correct the number of CHAs on SPR
- x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- irqchip/mips-gic: Use raw spinlock for gic_lock
- debugobjects: Don't wake up kswapd from fill_pool()
- fbdev: udlfb: Fix endpoint check
- net: fix stack overflow when LRO is disabled for virtual interfaces
- udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().
- USB: core: Add routines for endpoint checks in old drivers
- USB: sisusbvga: Add endpoint checks
- media: radio-shark: Add endpoint checks
- ASoC: lpass: Fix for KASAN use_after_free out of bounds
- net: fix skb leak in __skb_tstamp_tx()
- drm: fix drmm_mutex_init()
- selftests: fib_tests: mute cleanup error message
- octeontx2-pf: Fix TSOv6 offload
- bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields
- bpf: fix a memory leak in the LRU and LRU_PERCPU hash maps
- lan966x: Fix unloading/loading of the driver
- ipv6: Fix out-of-bounds access in ipv6_find_tlv()
- cifs: mapchars mount option ignored
- power: supply: leds: Fix blink to LED on transition
- power: supply: mt6360: add a check of devm_work_autocancel in
mt6360_charger_probe
- power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition
- power: supply: bq27xxx: Fix I2C IRQ race on remove
- power: supply: bq27xxx: Fix poll_interval handling and races on remove
- power: supply: bq27xxx: Add cache parameter to
bq27xxx_battery_current_and_status()
- power: supply: bq27xxx: Move bq27xxx_battery_update() down
- power: supply: bq27xxx: Ensure power_supply_changed() is called on current
sign changes
- power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to
stabilize
- power: supply: bq25890: Call power_supply_changed() after updating input
current or voltage
- power: supply: bq24190: Call power_supply_changed() after updating input
current
- power: supply: sbs-charger: Fix INHIBITED bit for Status reg
- optee: fix uninited async notif value
- firmware: arm_ffa: Check if ffa_driver remove is present before executing
- firmware: arm_ffa: Fix FFA device names for logical partitions
- fs: fix undefined behavior in bit shift for SB_NOUSER
- regulator: pca9450: Fix BUCK2 enable_mask
- platform/x86: ISST: Remove 8 socket limit
- coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet()
- ARM: dts: imx6qdl-mba6: Add missing pvcie-supply regulator
- xen/pvcalls-back: fix double frees with pvcalls_new_active_socket()
- x86/show_trace_log_lvl: Ensure stack pointer is aligned, again
- ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg
- ASoC: Intel: avs: Fix declaration of enum avs_channel_config
- ASoC: Intel: avs: Access path components under lock
- cxl: Wait Memory_Info_Valid before access memory related info
- sctp: fix an issue that plpmtu can never go to complete state
- forcedeth: Fix an error handling path in nv_probe()
- platform/mellanox: mlxbf-pmc: fix sscanf() error checking
- net/mlx5e: Fix SQ wake logic in ptp napi_poll context
- net/mlx5e: Fix deadlock in tc route query code
- net/mlx5e: Use correct encap attribute during invalidation
- net/mlx5e: do as little as possible in napi poll when budget is 0
- net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs
- net/mlx5: Handle pairing of E-switch via uplink un/load APIs
- net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE
- net/mlx5: Fix error message when failing to allocate device memory
- net/mlx5: Collect command failures data only for known commands
- net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device
- net/mlx5: Devcom, serialize devcom registration
- arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert delay
- firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors
- regulator: mt6359: add read check for PMIC MT6359
- net/smc: Reset connection when trying to use SMCRv2 fails.
- 3c589_cs: Fix an error handling path in tc589_probe()
- net: phy: mscc: add VSC8502 to MODULE_DEVICE_TABLE
- wifi: rtw89: 8852b: adjust quota to avoid SER L1 caused by access null page
- zsmalloc: move LRU update from zs_map_object() to zs_malloc()
- mm/vmemmap/devdax: fix kernel crash when probing devdax devices
- cifs: fix smb1 mount regression
- cxl: Move cxl_await_media_ready() to before capacity info retrieval
- net: ethernet: mtk_eth_soc: fix QoS on DSA MAC on non MTK_NETSYS_V2 SoCs
- Upstream stable to v6.1.31, v6.3.5
- inet: Add IP_LOCAL_PORT_RANGE socket option
- ipv{4,6}/raw: fix output xfrm lookup wrt protocol
- firmware: arm_ffa: Fix usage of partition info get count flag
- selftests/bpf: Fix pkg-config call building sign-file
- platform/x86/amd/pmf: Fix CnQF and auto-mode after resume
- tls: rx: device: fix checking decryption status
- tls: rx: strp: set the skb->len of detached / CoW'ed skbs
- tls: rx: strp: fix determining record length in copy mode
- tls: rx: strp: force mixed decrypted records into copy mode
- tls: rx: strp: factor out copying skb data
- tls: rx: strp: preserve decryption status of skbs when needed
- net/mlx5: E-switch, Devcom, sync devcom events and devcom comp register
- gpio-f7188x: fix chip name and pin count on Nuvoton chip
- bpf, sockmap: Pass skb ownership through read_skb
- bpf, sockmap: Convert schedule_work into delayed_work
- bpf, sockmap: Reschedule is now done through backlog
- bpf, sockmap: Improved check for empty queue
- bpf, sockmap: Handle fin correctly
- bpf, sockmap: TCP data stall on recv before accept
- bpf, sockmap: Wake up polling after data copy
- bpf, sockmap: Incorrectly handling copied_seq
- blk-mq: fix race condition in active queue accounting
- vfio/type1: check pfn valid before converting to struct page
- net: page_pool: use in_softirq() instead
- page_pool: fix inconsistency for page_pool_ring_[un]lock()
- net: phy: mscc: enable VSC8501/2 RGMII RX clock
- wifi: iwlwifi: mvm: support wowlan info notification version 2
- drm/amd: Don't allow s0ix on APUs older than Raven
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl()
- Revert "thermal/drivers/mellanox: Use generic thermal_zone_get_trip()
function"
- block: fix bio-cache for passthru IO
- cpufreq: amd-pstate: Update policy->cur in amd_pstate_adjust_perf()
- cpufreq: amd-pstate: Add ->fast_switch() callback
- netfilter: ctnetlink: Support offloaded conntrack entry deletion
- tools headers UAPI: Sync the linux/in.h with the kernel sources
- gpiolib: fix allocation of mixed dynamic/static GPIOs
- net: fec: add dma_wmb to ensure correct descriptor values
- cxl/port: Fix NULL pointer access in devm_cxl_add_port()
- blk-wbt: fix that wbt can't be disabled by default
- Upstream stable to v6.1.32, v6.3.6
* sysfs msi_irqs directory empty with kernel-5.19 when being a xen guest
(LP: #2022354) // Lunar update: upstream stable patchset 2023-07-28
(LP: #2028979)
- x86/pci/xen: populate MSI sysfs entries
* Lunar update: upstream stable patchset 2023-07-26 (LP: #2028808)
- drm/fbdev-generic: prohibit potential out-of-bounds access
- drm/mipi-dsi: Set the fwnode for mipi_dsi_device
- ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings
- net: skb_partial_csum_set() fix against transport header magic value
- net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe()
- scsi: ufs: core: Fix I/O hang that occurs when BKOPS fails in W-LUN suspend
- tick/broadcast: Make broadcast device replacement work correctly
- linux/dim: Do nothing if no time delta between samples
- net: stmmac: Initialize MAC_ONEUS_TIC_COUNTER register
- net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs().
- net: phy: bcm7xx: Correct read from expansion register
- netfilter: nf_tables: always release netdev hooks from notifier
- netfilter: conntrack: fix possible bug_on with enable_hooks=1
- bonding: fix send_peer_notif overflow
- netlink: annotate accesses to nlk->cb_running
- net: annotate sk->sk_err write from do_recvmmsg()
- net: deal with most data-races in sk_wait_event()
- net: add vlan_get_protocol_and_depth() helper
- tcp: add annotations around sk->sk_shutdown accesses
- gve: Remove the code of clearing PBA bit
- net: mscc: ocelot: fix stat counter register values
- net: datagram: fix data-races in datagram_poll()
- af_unix: Fix a data race of sk->sk_receive_queue->qlen.
- af_unix: Fix data races around sk->sk_shutdown.
- drm/i915/guc: Don't capture Gen8 regs on Xe devices
- drm/i915: Fix NULL ptr deref by checking new_crtc_state
- drm/i915/dp: prevent potential div-by-zero
- drm/i915: Expand force_probe to block probe of devices as well.
- drm/i915: taint kernel when force probing unsupported devices
- fbdev: arcfb: Fix error handling in arcfb_probe()
- ext4: reflect error codes from ext4_multi_mount_protect() to its callers
- ext4: allow to find by goal if EXT4_MB_HINT_GOAL_ONLY is set
- ext4: allow ext4_get_group_info() to fail
- refscale: Move shutdown from wait_event() to wait_event_idle()
- selftests: cgroup: Add 'malloc' failures checks in test_memcontrol
- rcu: Protect rcu_print_task_exp_stall() ->exp_tasks access
- open: return EINVAL for O_DIRECTORY | O_CREAT
- fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
- drm/displayid: add displayid_get_header() and check bounds better
- drm/amd/display: populate subvp cmd info only for the top pipe
- drm/amd/display: Correct DML calculation to align HW formula
- platform/x86: x86-android-tablets: Add Acer Iconia One 7 B1-750 data
- drm/amd/display: Enable HostVM based on rIOMMU active
- drm/amd/display: Use DC_LOG_DC in the trasform pixel function
- regmap: cache: Return error in cache sync operations for REGCACHE_NONE
- remoteproc: imx_dsp_rproc: Add custom memory copy implementation for i.MX
DSP Cores
- arm64: dts: qcom: msm8996: Add missing DWC3 quirks
- media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and
buffer_finish()
- media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish
- media: pvrusb2: VIDEO_PVRUSB2 depends on DVB_CORE to use dvb_* symbols
- ACPI: processor: Check for null return of devm_kzalloc() in fch_misc_setup()
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
- arm64: dts: imx8mq-librem5: Remove dis_u3_susphy_quirk from usb_dwc3_0
- firmware: arm_sdei: Fix sleep from invalid context BUG
- ACPI: EC: Fix oops when removing custom query handlers
- drm/amd/display: fixed dcn30+ underflow issue
- remoteproc: stm32_rproc: Add mutex protection for workqueue
- drm/tegra: Avoid potential 32-bit integer overflow
- drm/msm/dp: Clean up handling of DP AUX interrupts
- ACPICA: Avoid undefined behavior: applying zero offset to null pointer
- ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in
acpi_db_display_objects
- arm64: dts: qcom: sdm845-polaris: Drop inexistent properties
- irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4
- ACPI: video: Remove desktops without backlight DMI quirks
- drm/amd/display: Correct DML calculation to follow HW SPEC
- drm/amd: Fix an out of bounds error in BIOS parser
- drm/amdgpu: Fix sdma v4 sw fini error
- media: Prefer designated initializers over memset for subdev pad ops
- media: mediatek: vcodec: Fix potential array out-of-bounds in decoder
queue_setup
- wifi: ath: Silence memcpy run-time false positive warning
- bpf: Annotate data races in bpf_local_storage
- wifi: brcmfmac: pcie: Provide a buffer of random bytes to the device
- wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex
- ext2: Check block size validity during mount
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery
- bnxt: avoid overflow in bnxt_get_nvram_directory()
- net: pasemi: Fix return type of pasemi_mac_start_tx()
- net: Catch invalid index in XPS mapping
- netdev: Enforce index cap in netdev_get_tx_queue
- scsi: target: iscsit: Free cmds before session free
- lib: cpu_rmap: Avoid use after free on rmap->obj array entries
- scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race
condition
- gfs2: Fix inode height consistency check
- scsi: ufs: ufs-pci: Add support for Intel Lunar Lake
- ext4: set goal start correctly in ext4_mb_normalize_request
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()
- crypto: jitter - permanent and intermittent health errors
- f2fs: Fix system crash due to lack of free space in LFS
- f2fs: fix to drop all dirty pages during umount() if cp_error is set
- f2fs: fix to check readonly condition correctly
- samples/bpf: Fix fout leak in hbm's run_bpf_prog
- bpf: Add preempt_count_{sub,add} into btf id deny list
- md: fix soft lockup in status_resync
- wifi: iwlwifi: pcie: fix possible NULL pointer dereference
- wifi: iwlwifi: add a new PCI device ID for BZ device
- wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf
- wifi: iwlwifi: mvm: fix ptk_pn memory leak
- block, bfq: Fix division by zero error on zero wsum
- wifi: ath11k: Ignore frags from uninitialized peer in dp.
- wifi: iwlwifi: fix iwl_mvm_max_amsdu_size() for MLO
- null_blk: Always check queue mode setting from configfs
- wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace
- wifi: ath11k: Fix SKB corruption in REO destination ring
- nbd: fix incomplete validation of ioctl arg
- ipvs: Update width of source for ip_vs_sync_conn_options
- Bluetooth: btusb: Add new PID/VID 04ca:3801 for MT7663
- Bluetooth: Add new quirk for broken local ext features page 2
- Bluetooth: btrtl: add support for the RTL8723CS
- Bluetooth: Improve support for Actions Semi ATS2851 based devices
- Bluetooth: btrtl: check for NULL in btrtl_set_quirks()
- Bluetooth: btintel: Add LE States quirk support
- Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set
- Bluetooth: Add new quirk for broken set random RPA timeout for ATS2851
- Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
- Bluetooth: btrtl: Add the support for RTL8851B
- HID: apple: Set the tilde quirk flag on the Geyser 4 and later
- staging: axis-fifo: initialize timeouts in init only
- ASoC: amd: yc: Add DMI entries to support HP OMEN 16-n0xxx (8A42)
- HID: logitech-hidpp: Don't use the USB serial for USB devices
- HID: logitech-hidpp: Reconcile USB and Unifying serials
- spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3
- usb: typec: ucsi: acpi: add quirk for ASUS Zenbook UM325
- ALSA: hda: LNL: add HD Audio PCI ID
- ASoC: amd: Add Dell G15 5525 to quirks list
- ASoC: amd: yc: Add ThinkBook 14 G5+ ARP to quirks list for acp6x
- HID: apple: Set the tilde quirk flag on the Geyser 3
- HID: Ignore battery for ELAN touchscreen on ROG Flow X13 GV301RA
- HID: wacom: generic: Set battery quirk only when we see battery data
- usb: typec: tcpm: fix multiple times discover svids error
- serial: 8250: Reinit port->pm on port specific driver unbind
- mcb-pci: Reallocate memory region to avoid memory overlapping
- sched: Fix KCSAN noinstr violation
- lkdtm/stackleak: Fix noinstr violation
- recordmcount: Fix memory leaks in the uwrite function
- soundwire: dmi-quirks: add remapping for Intel 'Rooks County' NUC M15
- phy: st: miphy28lp: use _poll_timeout functions for waits
- soundwire: qcom: gracefully handle too many ports in DT
- soundwire: bus: Fix unbalanced pm_runtime_put() causing usage count
underflow
- mfd: intel_soc_pmic_chtwc: Add Lenovo Yoga Book X90F to intel_cht_wc_models
- mfd: dln2: Fix memory leak in dln2_probe()
- mfd: intel-lpss: Add Intel Meteor Lake PCH-S LPSS PCI IDs
- parisc: Replace regular spinlock with spin_trylock on panic path
- drm/amdgpu: drop gfx_v11_0_cp_ecc_error_irq_funcs
- xfrm: don't check the default policy if the policy allows the packet
- Revert "Fix XFRM-I support for nested ESP tunnels"
- drm/msm/dp: unregister audio driver during unbind
- drm/msm/dpu: Assign missing writeback log_mask
- drm/msm/dpu: Move non-MDP_TOP INTF_INTR offsets out of hwio header
- drm/msm/dpu: Remove duplicate register defines from INTF
- dt-bindings: display/msm: dsi-controller-main: Document qcom, master-dsi and
qcom, sync-dual-dsi
- ASoC: fsl_micfil: Fix error handler with pm_runtime_enable
- cpupower: Make TSC read per CPU for Mperf monitor
- xfrm: Reject optional tunnel/BEET mode templates in outbound policies
- af_key: Reject optional tunnel/BEET mode templates in outbound policies
- drm/msm: Fix submit error-path leaks
- selftests: seg6: disable DAD on IPv6 router cfg for srv6_end_dt4_l3vpn_test
- selftets: seg6: disable rp_filter by default in srv6_end_dt4_l3vpn_test
- net: fec: Better handle pm_runtime_get() failing in .remove()
- net: phy: dp83867: add w/a for packet errors seen with short cables
- ALSA: firewire-digi00x: prevent potential use after free
- wifi: mt76: connac: fix stats->tx_bytes calculation
- ALSA: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15
- sfc: disable RXFCS and RXALL features by default
- vsock: avoid to close connected socket after the timeout
- tcp: fix possible sk_priority leak in tcp_v4_send_reset()
- serial: arc_uart: fix of_iomap leak in `arc_serial_probe`
- serial: 8250_bcm7271: balance clk_enable calls
- serial: 8250_bcm7271: fix leak in `brcmuart_probe`
- erspan: get the proto with the md version for collect_md
- net: dsa: rzn1-a5psw: enable management frames for CPU port
- net: dsa: rzn1-a5psw: fix STP states handling
- net: dsa: rzn1-a5psw: disable learning for standalone ports
- net: hns3: fix output information incomplete for dumping tx queue info with
debugfs
- net: hns3: fix sending pfc frames after reset issue
- net: hns3: fix reset delay time to avoid configuration timeout
- net: hns3: fix reset timeout when enable full VF
- media: netup_unidvb: fix use-after-free at del_timer()
- SUNRPC: double free xprt_ctxt while still in use
- SUNRPC: always free ctxt when freeing deferred request
- SUNRPC: Fix trace_svc_register() call site
- ASoC: mediatek: mt8186: Fix use-after-free in driver remove path
- ASoC: SOF: topology: Fix logic for copying tuples
- drm/exynos: fix g2d_open/close helper function definitions
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- virtio-net: Maintain reverse cleanup order
- virtio_net: Fix error unwinding of XDP initialization
- tipc: add tipc_bearer_min_mtu to calculate min mtu
- tipc: do not update mtu if msg_max is too small in mtu negotiation
- tipc: check the bearer min mtu properly when setting it by netlink
- s390/cio: include subchannels without devices also for evaluation
- can: dev: fix missing CAN XL support in can_put_echo_skb()
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- ice: introduce clear_reset_state operation
- ice: Fix ice VF reset during iavf initialization
- wifi: cfg80211: Drop entries with invalid BSSIDs in RNR
- wifi: mac80211: fortify the spinlock against deadlock by interrupt
- wifi: mac80211: fix min center freq offset tracing
- wifi: mac80211: Abort running color change when stopping the AP
- wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock
- wifi: iwlwifi: fw: fix DBGI dump
- wifi: iwlwifi: fix OEM's name in the ppag approved list
- wifi: iwlwifi: mvm: fix OEM's name in the tas approved list
- wifi: iwlwifi: mvm: don't trust firmware n_channels
- scsi: storvsc: Don't pass unused PFNs to Hyper-V host
- tun: Fix memory leak for detached NAPI queue.
- cassini: Fix a memory leak in the error handling path of cas_init_one()
- net: dsa: mv88e6xxx: Fix mv88e6393x EPC write command offset
- igb: fix bit_shift to be in [1..8] range
- vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()
- net: wwan: iosm: fix NULL pointer dereference when removing device
- net: pcs: xpcs: fix C73 AN not getting enabled
- net: selftests: Fix optstring
- netfilter: nf_tables: fix nft_trans type confusion
- netfilter: nft_set_rbtree: fix null deref on element insertion
- bridge: always declare tunnel functions
- ALSA: usb-audio: Add a sample rate workaround for Line6 Pod Go
- USB: usbtmc: Fix direction for 0-length ioctl control messages
- usb-storage: fix deadlock when a scsi command timeouts more than once
- USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value
- usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume()
- usb: dwc3: debugfs: Resume dwc3 before accessing registers
- usb: gadget: u_ether: Fix host MAC address case
- usb: typec: altmodes/displayport: fix pin_assignment_show
- Revert "usb: gadget: udc: core: Prevent redundant calls to pullup"
- Revert "usb: gadget: udc: core: Invoke usb_gadget_connect only when started"
- xhci-pci: Only run d3cold avoidance quirk for s2idle
- xhci: Fix incorrect tracking of free space on transfer rings
- ALSA: hda: Fix Oops by 9.1 surround channel names
- ALSA: hda/realtek: Add quirk for Clevo L140AU
- ALSA: hda/realtek: Add a quirk for HP EliteDesk 805
- ALSA: hda/realtek: Add quirk for 2nd ASUS GU603
- ALSA: hda/realtek: Add quirk for HP EliteBook G10 laptops
- can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag
- can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag
- can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop()
- can: kvaser_pciefd: Call request_irq() before enabling interrupts
- can: kvaser_pciefd: Empty SRB buffer in probe
- can: kvaser_pciefd: Clear listen-only bit if not explicitly requested
- can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt
- can: kvaser_pciefd: Disable interrupts in probe error path
- wifi: rtw88: use work to update rate to avoid RCU warning
- SMB3: Close all deferred handles of inode in case of handle lease break
- SMB3: drop reference to cfile before sending oplock break
- ksmbd: smb2: Allow messages padded to 8byte boundary
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: fix wrong UserName check in session_user
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- KVM: Fix vcpu_array[0] races
- statfs: enforce statfs[64] structure initialization
- maple_tree: make maple state reusable after mas_empty_area()
- mm: fix zswap writeback race condition
- serial: Add support for Advantech PCI-1611U card
- serial: 8250_exar: Add support for USR298x PCI Modems
- serial: qcom-geni: fix enabling deactivated interrupt
- thunderbolt: Clear registers properly when auto clear isn't in use
- vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF
- ceph: force updating the msg pointer in non-split case
- drm/amd/pm: fix possible power mode mismatch between driver and PMFW
- drm/amdgpu/gmc11: implement get_vbios_fb_size()
- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating.
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11 as well
- dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries
- powerpc/iommu: DMA address offset is incorrectly calculated with 2MB TCEs
- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device
- tpm/tpm_tis: Disable interrupts for more Lenovo devices
- powerpc/64s/radix: Fix soft dirty tracking
- nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()
- s390/dasd: fix command reject error on ESE devices
- s390/crypto: use vector instructions only if available for ChaCha20
- s390/qdio: fix do_sqbs() inline assembly constraint
- arm64: mte: Do not set PG_mte_tagged if tags were not initialized
- rethook: use preempt_{disable, enable}_notrace in rethook_trampoline_handler
- rethook, fprobe: do not trace rethook related functions
- remoteproc: imx_dsp_rproc: Fix kernel test robot sparse warning
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin
- drm/nouveau/disp: More DP_RECEIVER_CAP_SIZE array fixes
- xfrm: release all offloaded policy memory
- xfrm: Fix leak of dev tracker
- media: pvrusb2: fix DVB_CORE dependency
- net: fec: remove the xdp_return_frame when lack of tx BDs
- iavf: send VLAN offloading caps once after VFR
- wifi: brcmfmac: Check for probe() id argument being NULL
- wifi: rtw88: correct qsel_to_ep[] type as int
- KVM: arm64: Infer the PA offset from IPA in stage-2 map walker
- perf script: Skip aggregation for stat events
- iommu/arm-smmu-qcom: Fix missing adreno_smmu's
- arm64: Also reset KASAN tag if page is not PG_mte_tagged
- Upstream stable to v6.1.30, v6.3.4
* Lunar update: v6.2.16 upstream stable release (LP: #2028580)
- USB: dwc3: gadget: drop dead hibernation code
- usb: dwc3: gadget: Execute gadget stop after halting the controller
- crypto: ccp - Clear PSP interrupt status register before calling handler
- ASoC: codecs: constify static sdw_slave_ops struct
- ASoC: codecs: wcd938x: fix accessing regmap on unattached devices
- mtd: spi-nor: Add a RWW flag
- mtd: spi-nor: spansion: Enable JFFS2 write buffer for Infineon s28hx SEMPER
flash
- qcom: llcc/edac: Support polling mode for ECC handling
- soc: qcom: llcc: Do not create EDAC platform device on SDM845
- mailbox: zynq: Switch to flexible array to simplify code
- mailbox: zynqmp: Fix counts of child nodes
- mtd: spi-nor: spansion: Enable JFFS2 write buffer for Infineon s25hx SEMPER
flash
- fs/ntfs3: Fix null-ptr-deref on inode->i_op in ntfs_lookup()
- drm/amd/display: Ext displays with dock can't recognized after resume
- KVM: x86/mmu: Avoid indirect call for get_cr3
- KVM: x86: Do not unload MMU roots when only toggling CR0.WP with TDP enabled
- KVM: x86: Make use of kvm_read_cr*_bits() when testing bits
- KVM: VMX: Make CR0.WP a guest owned bit
- KVM: x86/mmu: Refresh CR0.WP prior to checking for emulated permission
faults
- RDMA/rxe: Remove rxe_alloc()
- RDMA/rxe: Change rxe_dbg to rxe_dbg_dev
- RDMA/rxe: Extend dbg log messages to err and info
- ASoC: Intel: soc-acpi-byt: Fix "WM510205" match no longer working
- scsi: qedi: Fix use after free bug in qedi_remove()
- drm/amd/display: Add missing WA and MCLK validation
- drm/amd/display: Return error code on DSC atomic check failure
- drm/amd/display: Fixes for dcn32_clk_mgr implementation
- drm/amd/display: Reset OUTBOX0 r/w pointer on DMUB reset
- drm/amd/display: Do not clear GPINT register when releasing DMUB from reset
- drm/amd/display: Update bounding box values for DCN321
- rxrpc: Fix potential data race in rxrpc_wait_to_be_connected()
- ixgbe: Fix panic during XDP_TX with > 64 CPUs
- octeonxt2-af: mcs: Fix per port bypass config
- octeontx2-af: mcs: Write TCAM_DATA and TCAM_MASK registers at once
- octeontx2-af: mcs: Config parser to skip 8B header
- octeontx2-af: mcs: Fix MCS block interrupt
- octeontx2-pf: mcs: Fix NULL pointer dereferences
- octeontx2-pf: mcs: Match macsec ethertype along with DMAC
- octeontx2-pf: mcs: Clear stats before freeing resource
- octeontx2-pf: mcs: Fix shared counters logic
- octeontx2-pf: mcs: Do not reset PN while updating secy
- net/ncsi: clear Tx enable mode when handling a Config required AEN
- tcp: fix skb_copy_ubufs() vs BIG TCP
- net/sched: cls_api: remove block_cb from driver_list before freeing
- sit: update dev->needed_headroom in ipip6_tunnel_bind_dev()
- selftests: srv6: make srv6_end_dt46_l3vpn_test more robust
- net: ipv6: fix skb hash for some RST packets
- net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu
- writeback: fix call of incorrect macro
- block: Skip destroyed blkg when restart in blkg_destroy_all()
- watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe()
- RISC-V: mm: Enable huge page support to kernel_page_present() function
- i2c: tegra: Fix PEC support for SMBUS block read
- net/sched: act_mirred: Add carrier check
- r8152: fix flow control issue of RTL8156A
- r8152: fix the poor throughput for 2.5G devices
- r8152: move setting r8153b_rx_agg_chg_indicate()
- sfc: Fix module EEPROM reporting for QSFP modules
- rxrpc: Fix hard call timeout units
- rxrpc: Make it so that a waiting process can be aborted
- rxrpc: Fix timeout of a call that hasn't yet been granted a channel
- riscv: compat_syscall_table: Fixup compile warning
- net: ethernet: mtk_eth_soc: drop generic vlan rx offload, only use DSA
untagging
- drm/i915/mtl: Add the missing CPU transcoder mask in intel_device_info
- selftests: netfilter: fix libmnl pkg-config usage
- octeontx2-af: Secure APR table update with the lock
- octeontx2-af: Fix start and end bit for scan config
- octeontx2-af: Fix depth of cam and mem table.
- octeontx2-pf: Increase the size of dmac filter flows
- octeontx2-af: Add validation for lmac type
- octeontx2-af: Update correct mask to filter IPv4 fragments
- octeontx2-af: Update/Fix NPC field hash extract feature
- octeontx2-af: Fix issues with NPC field hash extract
- octeontx2-af: Skip PFs if not enabled
- octeontx2-pf: Disable packet I/O for graceful exit
- octeontx2-vf: Detach LF resources on probe cleanup
- ionic: remove noise from ethtool rxnfc error msg
- ethtool: Fix uninitialized number of lanes
- ionic: catch failure from devlink_alloc
- af_packet: Don't send zero-byte data in packet_sendmsg_spkt().
- drm/amdgpu: add a missing lock for AMDGPU_SCHED
- ALSA: caiaq: input: Add error handling for unsupported input methods in
`snd_usb_caiaq_input_init`
- KVM: s390: pv: fix asynchronous teardown for small VMs
- KVM: s390: fix race in gmap_make_secure()
- net: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621
- net: dsa: mt7530: split-off common parts from mt7531_setup
- net: dsa: mt7530: fix network connectivity with multiple CPU ports
- ice: block LAN in case of VF to VF offload
- virtio_net: suppress cpu stall when free_unused_bufs
- net: enetc: check the index of the SFI rather than the handle
- net: fec: correct the counting of XDP sent frames
- perf record: Fix "read LOST count failed" msg with sample read
- perf build: Support python/perf.so testing
- perf scripts intel-pt-events.py: Fix IPC output for Python 2
- perf script: Fix Python support when no libtraceevent
- perf hist: Improve srcfile sort key performance (really)
- perf vendor events s390: Remove UTF-8 characters from JSON file
- perf tests record_offcpu.sh: Fix redirection of stderr to stdin
- perf ftrace: Make system wide the default target for latency subcommand
- perf vendor events power9: Remove UTF-8 characters from JSON files
- perf pmu: zfree() expects a pointer to a pointer to zero it after freeing
its contents
- perf map: Delete two variable initialisations before null pointer checks in
sort__sym_from_cmp()
- perf cs-etm: Fix timeless decode mode detection
- crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs()
- crypto: api - Add scaffolding to change completion function signature
- crypto: engine - Use crypto_request_complete
- crypto: engine - fix crypto_queue backlog handling
- perf symbols: Fix return incorrect build_id size in elf_read_build_id()
- perf tracepoint: Fix memory leak in is_valid_tracepoint()
- perf stat: Separate bperf from bpf_profiler
- KVM: x86/mmu: Change tdp_mmu to a read-only parameter
- KVM: x86/mmu: Move TDP MMU VM init/uninit behind tdp_mmu_enabled
- KVM: x86/mmu: Replace open coded usage of tdp_mmu_page with
is_tdp_mmu_page()
- KVM: x86: Preserve TDP MMU roots until they are explicitly invalidated
- ksmbd: Implements sess->ksmbd_chann_list as xarray
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- wifi: iwlwifi: mvm: fix potential memory leak
- cifs: check only tcon status on tcon related functions
- cifs: avoid potential races when handling multiple dfs tcons
- netfilter: nf_tables: extended netlink error reporting for netdevice
- netfilter: nf_tables: rename function to destroy hook list
- netfilter: nf_tables: hit ENOENT on unexisting chain/flowtable update with
missing attributes
- x86/retbleed: Fix return thunk alignment
- btrfs: fix btrfs_prev_leaf() to not return the same key twice
- btrfs: zoned: fix wrong use of bitops API in btrfs_ensure_empty_zones
- btrfs: properly reject clear_cache and v1 cache for block-group-tree
- btrfs: fix assertion of exclop condition when starting balance
- btrfs: fix encoded write i_size corruption with no-holes
- btrfs: don't free qgroup space unless specified
- btrfs: zero the buffer before marking it dirty in btrfs_redirty_list_add
- btrfs: make clear_cache mount option to rebuild FST without disabling it
- btrfs: print-tree: parent bytenr must be aligned to sector size
- btrfs: fix space cache inconsistency after error loading it from disk
- btrfs: zoned: zone finish data relocation BG with last IO
- btrfs: zoned: fix full zone super block reading on ZNS
- btrfs: fix backref walking not returning all inode refs
- cifs: fix pcchunk length type in smb2_copychunk_range
- cifs: release leases for deferred close handles when freezing
- platform/x86/intel-uncore-freq: Return error on write frequency
- platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the
Juno Tablet
- platform/x86: thinkpad_acpi: Fix platform profiles on T490
- platform/x86: hp-wmi: add micmute to hp_wmi_keymap struct
- platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i
- platform/x86: thinkpad_acpi: Add profile force ability
- inotify: Avoid reporting event with invalid wd
- smb3: fix problem remounting a share after shutdown
- SMB3: force unmount was failing to close deferred close files
- sh: math-emu: fix macro redefined warning
- sh: mcount.S: fix build error when PRINTK is not enabled
- sh: init: use OF_EARLY_FLATTREE for early init
- sh: nmi_debug: fix return value of __setup handler
- proc_sysctl: update docs for __register_sysctl_table()
- proc_sysctl: enhance documentation
- remoteproc: stm32: Call of_node_put() on iteration error
- remoteproc: st: Call of_node_put() on iteration error
- remoteproc: imx_dsp_rproc: Call of_node_put() on iteration error
- remoteproc: imx_rproc: Call of_node_put() on iteration error
- remoteproc: rcar_rproc: Call of_node_put() on iteration error
- sysctl: clarify register_sysctl_init() base directory order
- ARM: dts: aspeed: asrock: Correct firmware flash SPI clocks
- ARM: dts: exynos: fix WM8960 clock name in Itop Elite
- ARM: dts: s5pv210: correct MIPI CSIS clock name
- ARM: dts: aspeed: romed8hm3: Fix GPIO polarity of system-fault LED
- drm/msm/adreno: fix runtime PM imbalance at gpu load
- drm/bridge: lt8912b: Fix DSI Video Mode
- drm/i915/color: Fix typo for Plane CSC indexes
- drm/msm: fix NULL-deref on snapshot tear down
- drm/msm: fix NULL-deref on irq uninstall
- drm/msm: fix drm device leak on bind errors
- drm/msm: fix vram leak on bind errors
- drm/msm: fix missing wq allocation error handling
- drm/msm: fix workqueue leak on bind errors
- drm/i915/dsi: Use unconditional msleep() instead of intel_dsi_msleep()
- f2fs: factor out victim_entry usage from general rb_tree use
- f2fs: fix null pointer panic in tracepoint in __replace_atomic_write_block
- f2fs: fix potential corruption when moving a directory
- irqchip/loongson-pch-pic: Fix pch_pic_acpi_init calling
- irqchip/loongson-pch-pic: Fix registration of syscore_ops
- irqchip/loongson-eiointc: Fix returned value on parsing MADT
- irqchip/loongson-eiointc: Fix incorrect use of acpi_get_vec_parent
- irqchip/loongson-eiointc: Fix registration of syscore_ops
- drm/panel: otm8009a: Set backlight parent to panel device
- drm/amd/display: Add NULL plane_state check for cursor disable logic
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
- drm/amd/display: filter out invalid bits in pipe_fuses
- drm/amd/display: fix flickering caused by S/G mode
- drm/amdgpu: drop redundant sched job cleanup when cs is aborted
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
- drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx
ras
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3
- drm/amdgpu: change gfx 11.0.4 external_id range
- drm/amdgpu: Fix vram recover doesn't work after whole GPU reset (v2)
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
- drm/amd/pm: parse pp_handle under appropriate conditions
- drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
- drm/amd: Load MES microcode during early_init
- drm/amd: Add a new helper for loading/validating microcode
- drm/amd: Use `amdgpu_ucode_*` helpers for MES
- HID: wacom: Set a default resolution for older tablets
- HID: wacom: insert timestamp to packed Bluetooth (BT) events
- fs/ntfs3: Refactoring of various minor issues
- drm/msm/adreno: adreno_gpu: Use suspend() instead of idle() on load error
- drm/i915/mtl: Add workarounds Wa_14017066071 and Wa_14017654203
- drm/i915/mtl: Add Wa_14017856879
- drm/i915: disable sampler indirect state in bindless heap
- drm/i915/mtl: update scaler source and destination limits for MTL
- drm/i915: Check pipe source size when using skl+ scalers
- drm/amd/display: Fix Z8 support configurations
- drm/amd/display: Add minimum Z8 residency debug option
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
- drm/amd/display: Lowering min Z8 residency time
- drm/amd/display: Update Z8 SR exit/enter latencies
- drm/amd/display: Change default Z8 watermark values
- drm: Add missing DP DSC extended capability definitions.
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
- locking/rwsem: Add __always_inline annotation to __down_read_common() and
inlined callers
- ext4: fix WARNING in mb_find_extent
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- ext4: fix data races when using cached status extents
- ext4: avoid deadlock in fs reclaim with page writeback
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- ext4: improve error recovery code paths in __ext4_remount()
- ext4: improve error handling from ext4_dirhash()
- ext4: fix deadlock when converting an inline directory in nojournal mode
- ext4: add bounds checking in get_max_inline_xattr_value_size()
- ext4: bail out of ext4_xattr_ibody_get() fails for any reason
- ext4: fix lockdep warning when enabling MMP
- ext4: remove a BUG_ON in ext4_mb_release_group_pa()
- ext4: fix invalid free tracking in ext4_xattr_move_to_block()
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values
- x86/amd_nb: Add PCI ID for family 19h model 78h
- x86: fix clear_user_rep_good() exception handling annotation
- spi: fsl-spi: Re-organise transfer bits_per_word adaptation
- spi: fsl-cpm: Use 16 bit mode for large transfers with even size
- drm/amd/display: Fix hang when skipping modeset
- Linux 6.2.16
* CVE-2023-31084 // CVE-2023-31084 was assigned to this bug.
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
* CVE-2023-3776
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
* Packaging resync (LP: #1786013)
- [Packaging] resync update-dkms-versions helper
- [Packaging] resync getabis
-- Khalid Elmously <email address hidden> Mon, 28 Aug 2023 22:02:03 -0400
-
linux-oracle (6.2.0-1010.10) lunar; urgency=medium
* lunar/linux-oracle: 6.2.0-1010.10 -proposed tracker (LP: #2030542)
* Packaging resync (LP: #1786013)
- [Packaging] resync update-dkms-versions helper
* arm64 support: Enable ARM_SMMU and ARM_SMMU_V3 for oracle (LP: #2002381)
- [packaging] Enable ARM_SMMU and ARM_SMMU_V3
* Miscellaneous Ubuntu changes
- [packaging] Fix annotations for Oracle
- [packaging] Split oracle configs into dedicated file
- [packaging] update configs for updated chroot
[ Ubuntu: 6.2.0-31.31 ]
* lunar/linux: 6.2.0-31.31 -proposed tracker (LP: #2031146)
* libgnutls report "trap invalid opcode" when trying to install packages over
https (LP: #2031093)
- [Config]: disable CONFIG_GDS_FORCE_MITIGATION
[ Ubuntu: 6.2.0-28.29 ]
* lunar/linux: 6.2.0-28.29 -proposed tracker (LP: #2030547)
* CVE-2022-40982
- init: Provide arch_cpu_finalize_init()
- x86/cpu: Switch to arch_cpu_finalize_init()
- ARM: cpu: Switch to arch_cpu_finalize_init()
- ia64/cpu: Switch to arch_cpu_finalize_init()
- m68k/cpu: Switch to arch_cpu_finalize_init()
- mips/cpu: Switch to arch_cpu_finalize_init()
- sh/cpu: Switch to arch_cpu_finalize_init()
- sparc/cpu: Switch to arch_cpu_finalize_init()
- um/cpu: Switch to arch_cpu_finalize_init()
- init: Remove check_bugs() leftovers
- init: Invoke arch_cpu_finalize_init() earlier
- init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init()
- x86/init: Initialize signal frame size late
- x86/fpu: Remove cpuinfo argument from init functions
- x86/fpu: Mark init functions __init
- x86/fpu: Move FPU initialization into arch_cpu_finalize_init()
- x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build
- x86/xen: Fix secondary processors' FPU initialization
- x86/speculation: Add Gather Data Sampling mitigation
- x86/speculation: Add force option to GDS mitigation
- x86/speculation: Add Kconfig option for GDS
- KVM: Add GDS_NO support to KVM
- Documentation/x86: Fix backwards on/off logic about YMM support
- [Config]: Enable CONFIG_ARCH_HAS_CPU_FINALIZE_INIT and
CONFIG_GDS_FORCE_MITIGATION
* CVE-2023-4015
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound
set/chain
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
* CVE-2023-3777
- netfilter: nf_tables: skip bound chain on rule flush
* CVE-2023-3995
- netfilter: nf_tables: disallow rule addition to bound chain via
NFTA_RULE_CHAIN_ID
* CVE-2023-20593
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu/amd: Add a Zenbleed fix
* CVE-2023-3776
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
* CVE-2023-4004
- netfilter: nft_set_pipapo: fix improper element removal
* CVE-2023-3611
- net/sched: sch_qfq: refactor parsing of netlink parameters
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
* CVE-2023-3610
- netfilter: nf_tables: fix chain binding transaction logic
* CVE-2023-3609
- net/sched: cls_u32: Fix reference counter leak leading to overflow
-- Khalid Elmously <email address hidden> Mon, 21 Aug 2023 02:16:56 -0400
-
linux-oracle (6.2.0-1009.9) lunar; urgency=medium
* lunar/linux-oracle: 6.2.0-1009.9 -proposed tracker (LP: #2026483)
* Packaging resync (LP: #1786013)
- [Packaging] resync update-dkms-versions helper
- [Packaging] resync getabis
[ Ubuntu: 6.2.0-27.28 ]
* lunar/linux: 6.2.0-27.28 -proposed tracker (LP: #2026488)
* Packaging resync (LP: #1786013)
- [Packaging] resync update-dkms-versions helper
- [Packaging] update annotations scripts
* CVE-2023-2640 // CVE-2023-32629
- Revert "UBUNTU: SAUCE: overlayfs: handle idmapped mounts in
ovl_do_(set|remove)xattr"
- Revert "UBUNTU: SAUCE: overlayfs: Skip permission checking for
trusted.overlayfs.* xattrs"
- SAUCE: overlayfs: default to userxattr when mounted from non initial user
namespace
* UNII-4 5.9G Band support request on 8852BE (LP: #2023952)
- wifi: rtw89: 8851b: add 8851B basic chip_info
- wifi: rtw89: introduce realtek ACPI DSM method
- wifi: rtw89: regd: judge UNII-4 according to BIOS and chip
- wifi: rtw89: support U-NII-4 channels on 5GHz band
* Disable hv-kvp-daemon if /dev/vmbus/hv_kvp is not present (LP: #2024900)
- [Packaging] disable hv-kvp-daemon if needed
* A deadlock issue in scsi rescan task while resuming from S3 (LP: #2018566)
- ata: libata-scsi: Avoid deadlock on rescan after device resume
* [SRU] Intel Sapphire Rapids HBM support needs CONFIG_NUMA_EMU (LP: #2008745)
- [Config] Intel Sapphire Rapids HBM support needs CONFIG_NUMA_EMU
* Lunar update: v6.2.15 upstream stable release (LP: #2025067)
- ASOC: Intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15
- ASoC: Intel: soc-acpi: add table for Intel 'Rooks County' NUC M15
- ASoC: soc-pcm: fix hw->formats cleared by soc_pcm_hw_init() for dpcm
- x86/hyperv: Block root partition functionality in a Confidential VM
- ASoC: amd: yc: Add DMI entries to support Victus by HP Laptop 16-e1xxx
(8A22)
- iio: adc: palmas_gpadc: fix NULL dereference on rmmod
- ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750
- ASoC: da7213.c: add missing pm_runtime_disable()
- net: wwan: t7xx: do not compile with -Werror
- wifi: mt76: mt7921: Fix use-after-free in fw features query.
- selftests mount: Fix mount_setattr_test builds failed
- scsi: mpi3mr: Handle soft reset in progress fault code (0xF002)
- net: sfp: add quirk enabling 2500Base-x for HG MXPD-483II
- platform/x86: thinkpad_acpi: Add missing T14s Gen1 type to s2idle quirk list
- wifi: ath11k: reduce the MHI timeout to 20s
- tracing: Error if a trace event has an array for a __field()
- asm-generic/io.h: suppress endianness warnings for readq() and writeq()
- asm-generic/io.h: suppress endianness warnings for relaxed accessors
- x86/cpu: Add model number for Intel Arrow Lake processor
- wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset
- ASoC: amd: ps: update the acp clock source.
- arm64: Always load shadow stack pointer directly from the task struct
- arm64: Stash shadow stack pointer in the task struct on interrupt
- powerpc/boot: Fix boot wrapper code generation with CONFIG_POWER10_CPU
- PCI: kirin: Select REGMAP_MMIO
- PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock
- PCI: qcom: Fix the incorrect register usage in v2.7.0 config
- bus: mhi: host: pci_generic: Revert "Add a secondary AT port to Telit FN990"
- phy: qcom-qmp-pcie: sc8180x PCIe PHY has 2 lanes
- IMA: allow/fix UML builds
- wifi: rtw88: usb: fix priority queue to endpoint mapping
- usb: gadget: udc: core: Invoke usb_gadget_connect only when started
- usb: gadget: udc: core: Prevent redundant calls to pullup
- usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive
- USB: dwc3: fix runtime pm imbalance on probe errors
- USB: dwc3: fix runtime pm imbalance on unbind
- hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write
- hwmon: (adt7475) Use device_property APIs when configuring polarity
- tpm: Add !tpm_amd_is_rng_defective() to the hwrng_unregister() call site
- posix-cpu-timers: Implement the missing timer_wait_running callback
- media: ov8856: Do not check for for module version
- drm/vmwgfx: Fix Legacy Display Unit atomic drm support
- blk-stat: fix QUEUE_FLAG_STATS clear
- blk-mq: release crypto keyslot before reporting I/O complete
- blk-crypto: make blk_crypto_evict_key() return void
- blk-crypto: make blk_crypto_evict_key() more robust
- staging: iio: resolver: ads1210: fix config mode
- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
- xhci: fix debugfs register accesses while suspended
- serial: fix TIOCSRS485 locking
- serial: 8250: Fix serial8250_tx_empty() race with DMA Tx
- serial: max310x: fix IO data corruption in batched operations
- tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem
- fs: fix sysctls.c built
- MIPS: fw: Allow firmware to pass a empty env
- ipmi:ssif: Add send_retries increment
- ipmi: fix SSIF not responding under certain cond.
- iio: addac: stx104: Fix race condition when converting analog-to-digital
- iio: addac: stx104: Fix race condition for stx104_write_raw()
- kheaders: Use array declaration instead of char
- wifi: mt76: add missing locking to protect against concurrent rx/status
calls
- wifi: rtw89: correct 5 MHz mask setting
- pwm: meson: Fix axg ao mux parents
- pwm: meson: Fix g12a ao clk81 name
- soundwire: qcom: correct setting ignore bit on v1.5.1
- pinctrl: qcom: lpass-lpi: set output value before enabling output
- ring-buffer: Ensure proper resetting of atomic variables in
ring_buffer_reset_online_cpus
- ring-buffer: Sync IRQ works before buffer destruction
- crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON()
- crypto: safexcel - Cleanup ring IRQ workqueues on load failure
- crypto: arm64/aes-neonbs - fix crash with CFI enabled
- crypto: testmgr - fix RNG performance in fuzz tests
- crypto: ccp - Don't initialize CCP for PSP 0x1649
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-
ed
- reiserfs: Add security prefix to xattr name in reiserfs_security_write()
- cpufreq: qcom-cpufreq-hw: fix double IO unmap and resource release on exit
- KVM: x86/pmu: Disallow legacy LBRs if architectural LBRs are available
- KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted
- KVM: arm64: Avoid vcpu->mutex v. kvm->lock inversion in CPU_ON
- KVM: arm64: Avoid lock inversion when setting the VM register width
- KVM: arm64: Use config_lock to protect data ordered against KVM_RUN
- KVM: arm64: Use config_lock to protect vgic state
- KVM: arm64: vgic: Don't acquire its_lock before config_lock
- relayfs: fix out-of-bounds access in relay_file_read
- drm/amd/display: Remove stutter only configurations
- drm/amd/display: limit timing for single dimm memory
- drm/amd/display: fix PSR-SU/DSC interoperability support
- drm/amd/display: fix a divided-by-zero error
- KVM: RISC-V: Retry fault if vma_lookup() results become invalid
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ACPI: video: Remove acpi_backlight=video quirk for Lenovo ThinkPad W530
- i2c: omap: Fix standard mode false ACK readings
- riscv: mm: remove redundant parameter of create_fdt_early_page_table
- tracing: Fix permissions for the buffer_percent file
- drm/amd/pm: re-enable the gfx imu when smu resume
- iommu/amd: Fix "Guest Virtual APIC Table Root Pointer" configuration in IRTE
- RISC-V: Align SBI probe implementation with spec
- Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path"
- ubifs: Fix memleak when insert_old_idx() failed
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- ubifs: Free memory for tmpfile name
- ubifs: Fix memory leak in do_rename
- ceph: fix potential use-after-free bug when trimming caps
- fs: dlm: fix DLM_IFL_CB_PENDING gets overwritten
- xfs: don't consider future format versions valid
- cxl/hdm: Fail upon detecting 0-sized decoders
- bus: mhi: host: Remove duplicate ee check for syserr
- bus: mhi: host: Use mhi_tryset_pm_state() for setting fw error state
- bus: mhi: host: Range check CHDBOFF and ERDBOFF
- ASoC: dt-bindings: qcom,lpass-rx-macro: correct minItems for clocks
- kunit: fix bug in the order of lines in debugfs logs
- rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check
- selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem
- selftests/resctrl: Move ->setup() call outside of test specific branches
- selftests/resctrl: Allow ->setup() to return errors
- selftests/resctrl: Check for return value after write_schemata()
- selinux: fix Makefile dependencies of flask.h
- selinux: ensure av_permissions.h is built when needed
- tpm, tpm_tis: Do not skip reset of original interrupt vector
- tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register
- tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed
- tpm, tpm_tis: Claim locality before writing interrupt registers
- tpm, tpm: Implement usage counter for locality
- tpm, tpm_tis: Claim locality when interrupts are reenabled on resume
- erofs: stop parsing non-compact HEAD index if clusterofs is invalid
- erofs: initialize packed inode after root inode is assigned
- erofs: fix potential overflow calculating xattr_isize
- drm/rockchip: Drop unbalanced obj unref
- drm/i915/dg2: Drop one PCI ID
- drm/vgem: add missing mutex_destroy
- drm/probe-helper: Cancel previous job before starting new one
- drm/amdgpu: register a vga_switcheroo client for MacBooks with apple-gmux
- tools/x86/kcpuid: Fix avx512bw and avx512lvl fields in Fn00000007
- soc: ti: k3-ringacc: Add try_module_get() to k3_dmaring_request_dual_ring()
- soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe
- arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table
- arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table
- arm64: dts: renesas: r9a07g044: Update IRQ numbers for SSI channels
- arm64: dts: renesas: r9a07g054: Update IRQ numbers for SSI channels
- arm64: dts: renesas: r9a07g043: Update IRQ numbers for SSI channels
- drm/mediatek: dp: Only trigger DRM HPD events if bridge is attached
- drm/msm/disp/dpu: check for crtc enable rather than crtc active to release
shared resources
- EDAC/skx: Fix overflows on the DRAM row address mapping arrays
- ARM: dts: qcom-apq8064: Fix opp table child name
- regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since
booted
- arm64: dts: ti: k3-am62-main: Fix GPIO numbers in DT
- arm64: dts: ti: k3-am62a7-sk: Fix DDR size to full 4GB
- arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property
- arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name
- arm64: dts: broadcom: bcmbca: bcm4908: fix LED nodenames
- arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename
- arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name
- arm64: dts: qcom: sc7280: fix EUD port properties
- arm64: dts: qcom: sdm845: correct dynamic power coefficients
- arm64: dts: qcom: sdm845: Fix the PCI I/O port range
- arm64: dts: qcom: msm8998: Fix the PCI I/O port range
- arm64: dts: qcom: sc7280: Fix the PCI I/O port range
- arm64: dts: qcom: ipq8074: Fix the PCI I/O port range
- arm64: dts: qcom: ipq6018: Add/remove some newlines
- arm64: dts: qcom: ipq6018: Fix the PCI I/O port range
- arm64: dts: qcom: msm8996: Fix the PCI I/O port range
- arm64: dts: qcom: sm8250: Fix the PCI I/O port range
- arm64: dts: qcom: sc8280xp: Fix the PCI I/O port range
- arm64: dts: qcom: sm8150: Fix the PCI I/O port range
- arm64: dts: qcom: sm8450: Fix the PCI I/O port range
- ARM: dts: qcom: ipq4019: Fix the PCI I/O port range
- ARM: dts: qcom: ipq8064: Fix the PCI I/O port range
- arm64: dts: qcom: msm8976: Add and provide xo clk to rpmcc
- ARM: dts: qcom: sdx55: Fix the unit address of PCIe EP node
- x86/MCE/AMD: Use an u64 for bank_map
- media: bdisp: Add missing check for create_workqueue
- media: platform: mtk-mdp3: Add missing check and free for ida_alloc
- media: amphion: decoder implement display delay enable
- media: av7110: prevent underflow in write_ts_to_decoder()
- firmware: qcom_scm: Clear download bit during reboot
- drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535
- media: max9286: Free control handler
- accel: Link to compute accelerator subsystem intro
- arm64: dts: ti: k3-am625: Correct L2 cache size to 512KB
- arm64: dts: ti: k3-am62a7: Correct L2 cache size to 512KB
- drm/msm/adreno: drop bogus pm_runtime_set_active()
- drm: msm: adreno: Disable preemption on Adreno 510
- virt/coco/sev-guest: Double-buffer messages
- arm64: dts: qcom: sm8350-microsoft-surface: fix USB dual-role mode property
- drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known
override-init warnings
- ACPI: processor: Fix evaluating _PDC method when running as Xen dom0
- mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data
- arm64: dts: qcom: sm8450: fix pcie1 gpios properties name
- drm: rcar-du: Fix a NULL vs IS_ERR() bug
- ARM: dts: gta04: fix excess dma channel usage
- firmware: arm_scmi: Fix xfers allocation on Rx channel
- perf/arm-cmn: Move overlapping wp_combine field
- perf/amlogic: Fix config1/config2 parsing issue
- ARM: dts: stm32: fix spi1 pin assignment on stm32mp15
- arm64: dts: apple: t8103: Disable unused PCIe ports
- cpufreq: mediatek: fix passing zero to 'PTR_ERR'
- cpufreq: mediatek: fix KP caused by handler usage after
regulator_put/clk_put
- cpufreq: mediatek: raise proc/sram max voltage for MT8516
- cpufreq: mediatek: Raise proc and sram max voltage for MT7622/7623
- cpufreq: qcom-cpufreq-hw: Revert adding cpufreq qos
- arm64: dts: mediatek: mt8192-asurada: Fix voltage constraint for Vgpu
- ACPI: VIOT: Initialize the correct IOMMU fwspec
- drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe()
- drm/mediatek: dp: Change the aux retries times when receiving AUX_DEFER
- mailbox: mpfs: switch to txdone_poll
- soc: bcm: brcmstb: biuctrl: fix of_iomap leak
- soc: renesas: renesas-soc: Release 'chipid' from ioremap()
- gpu: host1x: Fix potential double free if IOMMU is disabled
- gpu: host1x: Fix memory leak of device names
- arm64: dts: qcom: sc7280-herobrine-villager: correct trackpad supply
- arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply
- arm64: dts: qcom: sc7180-trogdor-pazquel: correct trackpad supply
- arm64: dts: qcom: msm8998-oneplus-cheeseburger: revert "fix backlight pin
function"
- arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator
- arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994
regulator
- arm64: dts: qcom: apq8096-db820c: drop unit address from PMI8994 regulator
- drm/ttm/pool: Fix ttm_pool_alloc error path
- regulator: core: Consistently set mutex_owner when using
ww_mutex_lock_slow()
- regulator: core: Avoid lockdep reports when resolving supplies
- x86/apic: Fix atomic update of offset in reserve_eilvt_offset()
- soc: qcom: rpmh-rsc: Support RSC v3 minor versions
- arm64: dts: qcom: msm8994-angler: Fix cont_splash_mem mapping
- arm64: dts: qcom: msm8994-angler: removed clash with smem_region
- arm64: dts: sc7180: Rename qspi data12 as data23
- arm64: dts: sc7280: Rename qspi data12 as data23
- arm64: dts: sdm845: Rename qspi data12 as data23
- media: mtk-jpeg: Fixes jpeghw multi-core judgement
- media: mtk-jpeg: Fixes jpeg enc&dec worker sw flow
- media: mediatek: vcodec: Use 4K frame size when supported by stateful
decoder
- media: mediatek: vcodec: Make MM21 the default capture format
- media: mediatek: vcodec: Force capture queue format to MM21
- media: mediatek: vcodec: add params to record lat and core lat_buf count
- media: mediatek: vcodec: using each instance lat_buf count replace core
ready list
- media: mediatek: vcodec: move lat_buf to the top of core list
- media: mediatek: vcodec: add core decode done event
- media: mediatek: vcodec: remove unused lat_buf
- media: mediatek: vcodec: making sure queue_work successfully
- media: mediatek: vcodec: change lat thread decode error condition
- media: cedrus: fix use after free bug in cedrus_remove due to race condition
- media: rkvdec: fix use after free bug in rkvdec_remove
- platform/x86/amd/pmf: Move out of BIOS SMN pair for driver probe
- platform/x86/amd: pmc: Don't try to read SMU version on Picasso
- platform/x86/amd: pmc: Hide SMU version and program attributes for Picasso
- platform/x86/amd: pmc: Don't dump data after resume from s0i3 on picasso
- platform/x86/amd: pmc: Move idlemask check into `amd_pmc_idlemask_read`
- platform/x86/amd: pmc: Utilize SMN index 0 for driver probe
- platform/x86/amd: pmc: Move out of BIOS SMN pair for STB init
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- media: saa7134: fix use after free bug in saa7134_finidev due to race
condition
- media: platform: mtk-mdp3: fix potential frame size overflow in
mdp_try_fmt_mplane()
- media: vsp1: Replace vb2_is_streaming() with vb2_start_streaming_called()
- platform: Provide a remove callback that returns no value
- media: rcar_fdp1: Convert to platform remove callback returning void
- media: rcar_fdp1: Fix refcount leak in probe and remove function
- media: v4l: async: Return async sub-devices to subnotifier list
- media: hi846: Fix memleak in hi846_init_controls()
- drm/amd/display: Fix potential null dereference
- media: rc: gpio-ir-recv: Fix support for wake-up
- media: venus: dec: Fix handling of the start cmd
- media: venus: dec: Fix capture formats enumeration order
- regulator: stm32-pwr: fix of_iomap leak
- x86/ioapic: Don't return 0 from arch_dynirq_lower_bound()
- arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step
- perf/arm-cmn: Fix port detection for CMN-700
- media: mediatek: vcodec: fix decoder disable pm crash
- media: mediatek: vcodec: add remove function for decoder platform driver
- debugobject: Prevent init race with static objects
- drm/i915: Make intel_get_crtc_new_encoder() less oopsy
- tick/common: Align tick period with the HZ tick.
- ACPI: bus: Ensure that notify handlers are not running after removal
- cpufreq: use correct unit when verify cur freq
- rpmsg: glink: Propagate TX failures in intentless mode as well
- hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E
- platform/chrome: cros_typec_switch: Add missing fwnode_handle_put()
- wifi: ath6kl: minor fix for allocation size
- wifi: ath9k: hif_usb: fix memory leak of remain_skbs
- wifi: ath11k: Use platform_get_irq() to get the interrupt
- wifi: ath5k: Use platform_get_irq() to get the interrupt
- wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list()
- wifi: ath11k: fix SAC bug on peer addition with sta band migration
- wifi: rtl8xxxu: Remove always true condition in rtl8xxxu_print_chipinfo
- wifi: brcmfmac: support CQM RSSI notification with older firmware
- wifi: ath6kl: reduce WARN to dev_dbg() in callback
- tools: bpftool: Remove invalid \' json escape
- wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser()
- wifi: rtw88: mac: Return the original error from rtw_mac_power_switch()
- bpf: take into account liveness when propagating precision
- bpf: fix precision propagation verbose logging
- crypto: qat - fix concurrency issue when device state changes
- scm: fix MSG_CTRUNC setting condition for SO_PASSSEC
- wifi: ath11k: fix deinitialization of firmware resources
- selftests/bpf: Fix a fd leak in an error path in network_helpers.c
- bpf: Remove misleading spec_v1 check on var-offset stack read
- net: pcs: xpcs: remove double-read of link state when using AN
- vlan: partially enable SIOCSHWTSTAMP in container
- net/packet: annotate accesses to po->xmit
- net/packet: convert po->origdev to an atomic flag
- net/packet: convert po->auxdata to an atomic flag
- libbpf: Fix ld_imm64 copy logic for ksym in light skeleton.
- net: dsa: qca8k: remove assignment of an_enabled in pcs_get_state()
- netfilter: keep conntrack reference until IPsecv6 policy checks are done
- bpf: return long from bpf_map_ops funcs
- bpf: Fix __reg_bound_offset 64->32 var_off subreg propagation
- scsi: target: Move sess cmd counter to new struct
- scsi: target: Move cmd counter allocation
- scsi: target: Pass in cmd counter to use during cmd setup
- scsi: target: iscsit: isert: Alloc per conn cmd counter
- scsi: target: iscsit: Stop/wait on cmds during conn close
- scsi: target: Fix multiple LUN_RESET handling
- scsi: target: iscsit: Fix TAS handling during conn cleanup
- scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS
- net: sunhme: Fix uninitialized return code
- f2fs: handle dqget error in f2fs_transfer_project_quota()
- f2fs: fix uninitialized skipped_gc_rwsem
- f2fs: apply zone capacity to all zone type
- f2fs: compress: fix to call f2fs_wait_on_page_writeback() in
f2fs_write_raw_pages()
- f2fs: fix scheduling while atomic in decompression path
- crypto: caam - Clear some memory in instantiate_rng
- crypto: sa2ul - Select CRYPTO_DES
- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg()
- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg()
- scsi: hisi_sas: Handle NCQ error when IPTT is valid
- wifi: rt2x00: Fix memory leak when handling surveys
- bpf: rename list_head -> graph_root in field info types
- bpf: Add __bpf_kfunc tag for marking kernel functions as kfuncs
- bpf: Migrate release_on_unlock logic to non-owning ref semantics
- bpf: Add basic bpf_rb_{root,node} support
- bpf: Add bpf_rbtree_{add,remove,first} kfuncs
- bpf: Add support for bpf_rb_root and bpf_rb_node in kfunc args
- bpf: Add callback validation to kfunc verifier logic
- bpf: factor out fetching basic kfunc metadata
- bpf: Fix struct_meta lookup for bpf_obj_free_fields kfunc call
- f2fs: fix iostat lock protection
- net: qrtr: correct types of trace event parameters
- selftests: xsk: Use correct UMEM size in testapp_invalid_desc
- selftests: xsk: Disable IPv6 on VETH1
- selftests: xsk: Deflakify STATS_RX_DROPPED test
- selftests/bpf: Wait for receive in cg_storage_multi test
- bpftool: Fix bug for long instructions in program CFG dumps
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- xsk: Fix unaligned descriptor validation
- f2fs: fix to avoid use-after-free for cached IPU bio
- wifi: iwlwifi: fix duplicate entry in iwl_dev_info_table
- bpf/btf: Fix is_int_ptr()
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- net: ethernet: stmmac: dwmac-rk: rework optional clock handling
- net: ethernet: stmmac: dwmac-rk: fix optional phy regulator handling
- wifi: ath11k: fix writing to unintended memory region
- bpf, sockmap: fix deadlocks in the sockhash and sockmap
- nvmet: fix error handling in nvmet_execute_identify_cns_cs_ns()
- nvmet: fix Identify Namespace handling
- nvmet: fix Identify Controller handling
- nvmet: fix Identify Active Namespace ID list handling
- nvmet: fix I/O Command Set specific Identify Controller
- nvme: fix async event trace event
- nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage"
- selftests/bpf: Use read_perf_max_sample_freq() in perf_event_stackmap
- selftests/bpf: Fix leaked bpf_link in get_stackid_cannot_attach
- blk-mq: don't plug for head insertions in blk_execute_rq_nowait
- wifi: iwlwifi: debug: fix crash in __iwl_err()
- wifi: iwlwifi: mvm: fix A-MSDU checks
- wifi: iwlwifi: trans: don't trigger d3 interrupt twice
- wifi: iwlwifi: mvm: don't set CHECKSUM_COMPLETE for unsupported protocols
- bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap
- f2fs: fix to check return value of f2fs_do_truncate_blocks()
- f2fs: fix to check return value of inc_valid_block_count()
- md/raid10: fix task hung in raid10d
- md/raid10: fix leak of 'r10bio->remaining' for recovery
- md/raid10: fix memleak for 'conf->bio_split'
- md/raid10: fix memleak of md thread
- md/raid10: don't call bio_start_io_acct twice for bio which experienced read
error
- wifi: iwlwifi: mvm: don't drop unencrypted MCAST frames
- wifi: iwlwifi: yoyo: skip dump correctly on hw error
- wifi: iwlwifi: yoyo: Fix possible division by zero
- wifi: iwlwifi: mvm: initialize seq variable
- wifi: iwlwifi: fw: move memset before early return
- jdb2: Don't refuse invalidation of already invalidated buffers
- io_uring/rsrc: use nospec'ed indexes
- wifi: iwlwifi: make the loop for card preparation effective
- wifi: mt76: remove redundent MCU_UNI_CMD_* definitions
- wifi: mt76: mt7921: fix wrong command to set STA channel
- wifi: mt76: mt7921: fix PCI DMA hang after reboot
- wifi: mt76: mt7915: unlock on error in mt7915_thermal_temp_store()
- wifi: mt76: mt7996: fix radiotap bitfield
- wifi: mt76: mt7915: expose device tree match table
- wifi: mt76: mt7915: add error message in
mt7915_thermal_set_cur_throttle_state()
- wifi: mt76: mt7915: rework init flow in mt7915_thermal_init()
- wifi: mt76: handle failure of vzalloc in mt7615_coredump_work
- wifi: mt76: mt7996: let non-bufferable MMPDUs use correct hw queue
- wifi: mt76: mt7996: fix pointer calculation in ie countdown event
- wifi: mt76: mt7996: fix eeprom tx path bitfields
- wifi: mt76: add flexible polling wait-interval support
- wifi: mt76: mt7921e: fix probe timeout after reboot
- wifi: mt76: fix 6GHz high channel not be scanned
- mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data
- wifi: mt76: mt7921: fix missing unwind goto in `mt7921u_probe`
- wifi: mt76: mt7921e: improve reliability of dma reset
- wifi: mt76: mt7921e: stop chip reset worker in unregister hook
- wifi: mt76: connac: fix txd multicast rate setting
- wifi: iwlwifi: mvm: check firmware response size
- netfilter: conntrack: restore IPS_CONFIRMED out of
nf_conntrack_hash_check_insert()
- wifi: mt76: mt7996: rely on mt76_connac_txp_common structure
- wifi: mt76: mt7996: fill txd by host driver
- netfilter: conntrack: fix wrong ct->timeout value
- wifi: iwlwifi: fw: fix memory leak in debugfs
- ixgbe: Allow flow hash to be set via ethtool
- ixgbe: Enable setting RSS table to default values
- net/mlx5e: Don't clone flow post action attributes second time
- net/mlx5: E-switch, Create per vport table based on devlink encap mode
- net/mlx5: E-switch, Don't destroy indirect table in split rule
- net/mlx5e: Fix error flow in representor failing to add vport rx rule
- net/mlx5: Remove "recovery" arg from mlx5_load_one() function
- net/mlx5: Suspend auxiliary devices only in case of PCI device suspend
- Revert "net/mlx5: Remove "recovery" arg from mlx5_load_one() function"
- net/mlx5: Use recovery timeout on sync reset flow
- net/mlx5e: Nullify table pointer when failing to create
- Revert "net/mlx5e: Don't use termination table when redundant"
- net: stmmac:fix system hang when setting up tag_8021q VLAN for DSA ports
- bpf: Fix race between btf_put and btf_idr walk.
- bpf: Don't EFAULT for getsockopt with optval=NULL
- netfilter: nf_tables: don't write table validation state without mutex
- net: dpaa: Fix uninitialized variable in dpaa_stop()
- net/sched: sch_fq: fix integer overflow of "credit"
- ipv4: Fix potential uninit variable access bug in __ip_make_skb()
- rxrpc: Fix error when reading rxrpc tokens
- Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to
unfinished work"
- netlink: Use copy_to_user() for optval in netlink_getsockopt().
- net: amd: Fix link leak when verifying config failed
- tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp.
- ipmi: ASPEED_BT_IPMI_BMC: select REGMAP_MMIO instead of depending on it
- ASoC: cs35l41: Only disable internal boost
- drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler()
- drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler()
- pstore: Revert pmsg_lock back to a normal mutex
- usb: host: xhci-rcar: remove leftover quirk handling
- usb: dwc3: gadget: Change condition for processing suspend event
- serial: stm32: Re-assert RTS/DE GPIO in RS485 mode only if more data are
transmitted
- fpga: bridge: fix kernel-doc parameter description
- iommufd/selftest: Catch overflow of uptr and length
- iio: light: max44009: add missing OF device matching
- serial: 8250_bcm7271: Fix arbitration handling
- spi: atmel-quadspi: Don't leak clk enable count in pm resume
- spi: atmel-quadspi: Free resources even if runtime resume failed in
.remove()
- spi: imx: Don't skip cleanup in remove's error path
- interconnect: qcom: drop obsolete OSM_L3/EPSS defines
- interconnect: qcom: osm-l3: drop unuserd header inclusion
- spi: f_ospi: Add missing spi_mem_default_supports_op() helper
- module/decompress: Never use kunmap() for local un-mappings
- usb: gadget: udc: renesas_usb3: Fix use after free bug in
renesas_usb3_remove due to race condition
- ASoC: soc-compress: Inherit atomicity from DAI link for Compress FE
- PCI: imx6: Install the fault handler only on compatible match
- ASoC: es8316: Handle optional IRQ assignment
- linux/vt_buffer.h: allow either builtin or modular for macros
- spi: qup: Don't skip cleanup in remove's error path
- interconnect: qcom: rpm: drop bogus pm domain attach
- spi: mchp-pci1xxxx: Fix length of SPI transactions not set properly in
driver
- spi: mchp-pci1xxxx: Fix SPI transactions not working after suspend and
resume
- spi: fsl-spi: Fix CPM/QE mode Litte Endian
- vmci_host: fix a race condition in vmci_host_poll() causing GPF
- of: Fix modalias string generation
- PCI/EDR: Clear Device Status after EDR error recovery
- ia64: mm/contig: fix section mismatch warning/error
- ia64: salinfo: placate defined-but-not-used warning
- scripts/gdb: bail early if there are no clocks
- scripts/gdb: bail early if there are no generic PD
- HID: amd_sfh: Correct the structure fields
- HID: amd_sfh: Correct the sensor enable and disable command
- HID: amd_sfh: Fix illuminance value
- HID: amd_sfh: Add support for shutdown operation
- HID: amd_sfh: Correct the stop all command
- HID: amd_sfh: Increase sensor command timeout for SFH1.1
- HID: amd_sfh: Handle "no sensors" enabled for SFH1.1
- cacheinfo: Check sib_leaf in cache_leaves_are_shared()
- coresight: etm_pmu: Set the module field
- drm/panel: novatek-nt35950: Improve error handling
- ASoC: fsl_mqs: move of_node_put() to the correct location
- PCI/PM: Extend D3hot delay for NVIDIA HDA controllers
- drm/panel: novatek-nt35950: Only unregister DSI1 if it exists
- spi: cadence-quadspi: fix suspend-resume implementations
- i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path
- i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path
- scripts/gdb: raise error with reduced debugging information
- uapi/linux/const.h: prefer ISO-friendly __typeof__
- sh: sq: Fix incorrect element size for allocating bitmap buffer
- usb: gadget: tegra-xudc: Fix crash in vbus_draw
- usb: chipidea: fix missing goto in `ci_hdrc_probe`
- usb: mtu3: fix kernel panic at qmu transfer done irq handler
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
- tty: serial: fsl_lpuart: adjust buffer length to the intended size
- serial: 8250: Add missing wakeup event reporting
- spi: cadence-quadspi: use macro DEFINE_SIMPLE_DEV_PM_OPS
- staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
- spmi: Add a check for remove callback when removing a SPMI driver
- virtio_ring: don't update event idx on get_buf
- fbdev: mmp: Fix deferred clk handling in mmphw_probe()
- selftests/powerpc/pmu: Fix sample field check in the
mmcra_thresh_marked_sample_test
- macintosh/windfarm_smu_sat: Add missing of_node_put()
- powerpc/perf: Properly detect mpc7450 family
- powerpc/mpc512x: fix resource printk format warning
- powerpc/wii: fix resource printk format warnings
- powerpc/sysdev/tsi108: fix resource printk format warnings
- macintosh: via-pmu-led: requires ATA to be set
- powerpc/rtas: use memmove for potentially overlapping buffer copy
- sched/fair: Fix inaccurate tally of ttwu_move_affine
- perf/core: Fix hardlockup failure caused by perf throttle
- Revert "objtool: Support addition to set CFA base"
- riscv: Fix ptdump when KASAN is enabled
- sched/rt: Fix bad task migration for rt tasks
- rv: Fix addition on an uninitialized variable 'run'
- tracing/user_events: Ensure write index cannot be negative
- clk: at91: clk-sam9x60-pll: fix return value check
- IB/hifi1: add a null check of kzalloc_node in hfi1_ipoib_txreq_init
- RDMA/siw: Fix potential page_array out of range access
- clk: mediatek: mt2712: Add error handling to clk_mt2712_apmixed_probe()
- clk: mediatek: Consistently use GATE_MTK() macro
- clk: mediatek: mt7622: Properly use CLK_IS_CRITICAL flag
- clk: mediatek: mt8135: Properly use CLK_IS_CRITICAL flag
- RDMA/rdmavt: Delete unnecessary NULL check
- clk: mediatek: clk-pllfh: fix missing of_node_put() in fhctl_parse_dt()
- clk: qcom: gcc-qcm2290: Fix up gcc_sdcc2_apps_clk_src
- workqueue: Fix hung time report of worker pools
- rtc: omap: include header for omap_rtc_power_off_program prototype
- RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()
- rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time
- rtc: k3: handle errors while enabling wake irq
- RDMA/rxe: Replace exists by rxe in rxe.c
- RDMA/erdma: Use fixed hardware page size
- fs/ntfs3: Fix memory leak if ntfs_read_mft failed
- fs/ntfs3: Add check for kmemdup
- fs/ntfs3: Fix OOB read in indx_insert_into_buffer
- fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de()
- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN
- RDMA/rxe: Remove tasklet call from rxe_cq.c
- power: supply: generic-adc-battery: fix unit scaling
- clk: add missing of_node_put() in "assigned-clocks" property parsing
- RDMA/siw: Remove namespace check from siw_netdev_event()
- clk: qcom: gcc-sm6115: Mark RCGs shared where applicable
- power: supply: rk817: Fix low SOC bugs
- RDMA/cm: Trace icm_send_rej event before the cm state is reset
- RDMA/srpt: Add a check for valid 'mad_agent' pointer
- IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order
- IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests
- clk: imx: fracn-gppll: fix the rate table
- clk: imx: fracn-gppll: disable hardware select control
- clk: imx: imx8ulp: Fix XBAR_DIVBUS and AD_SLOW clock parents
- NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease
- iommu/amd: Set page size bitmap during V2 domain allocation
- s390/checksum: always use cksm instruction
- clk: qcom: lpasscc-sc7280: Skip qdsp6ss clock registration
- clk: qcom: lpassaudiocc-sc7280: Add required gdsc power domain clks in
lpass_cc_sc7280_desc
- clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling
- clk: qcom: dispcc-qcm2290: get rid of test clock
- clk: qcom: dispcc-qcm2290: Remove inexistent DSI1PHY clk
- Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe
- swiotlb: relocate PageHighMem test away from rmem_swiotlb_setup
- swiotlb: fix debugfs reporting of reserved memory pools
- RDMA/rxe: Convert tasklet args to queue pairs
- RDMA/rxe: Remove __rxe_do_task()
- RDMA/rxe: Fix the error "trying to register non-static key in
rxe_cleanup_task"
- RDMA/mlx5: Check pcie_relaxed_ordering_enabled() in UMR
- RDMA/mlx5: Fix flow counter query via DEVX
- SUNRPC: remove the maximum number of retries in call_bind_status
- RDMA/mlx5: Use correct device num_ports when modify DC
- clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when
init fails
- openrisc: Properly store r31 to pt_regs on unhandled exceptions
- timekeeping: Fix references to nonexistent ktime_get_fast_ns()
- SMB3: Add missing locks to protect deferred close file list
- SMB3: Close deferred file handles in case of handle lease break
- ext4: fix i_disksize exceeding i_size problem in paritally written case
- ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline
- pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration
- pinctrl: renesas: r8a779f0: Fix tsn1_avtp_pps pin group
- pinctrl: renesas: r8a779g0: Fix Group 4/5 pin functions
- pinctrl: renesas: r8a779g0: Fix Group 6/7 pin functions
- pinctrl: renesas: r8a779g0: Fix ERROROUTC function names
- leds: TI_LMU_COMMON: select REGMAP instead of depending on it
- pinctrl: ralink: reintroduce ralink,rt2880-pinmux compatible string
- dmaengine: mv_xor_v2: Fix an error code.
- leds: tca6507: Fix error handling of using fwnode_property_read_string
- pwm: mtk-disp: Disable shadow registers before setting backlight values
- pwm: mtk-disp: Configure double buffering before reading in .get_state()
- soundwire: intel: don't save hw_params for use in prepare
- phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and
ulpi_port
- phy: ti: j721e-wiz: Fix unreachable code in wiz_mode_select()
- dma: gpi: remove spurious unlock in gpi_ch_init
- dmaengine: dw-edma: Fix to change for continuous transfer
- dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing
- dmaengine: at_xdmac: do not enable all cyclic channels
- pinctrl-bcm2835.c: fix race condition when setting gpio dir
- thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in
mtk_thermal_probe
- mfd: tqmx86: Do not access I2C_DETECT register through io_base
- mfd: tqmx86: Specify IO port register range more precisely
- mfd: tqmx86: Correct board names for TQMxE39x
- mfd: ocelot-spi: Fix unsupported bulk read
- mfd: arizona-spi: Add missing MODULE_DEVICE_TABLE
- hte: tegra: fix 'struct of_device_id' build error
- hte: tegra-194: Fix off by one in tegra_hte_map_to_line_id()
- ACPI: PM: Do not turn of unused power resources on the Toshiba Click Mini
- PM: hibernate: Turn snapshot_test into global variable
- PM: hibernate: Do not get block device exclusively in test_resume mode
- afs: Fix updating of i_size with dv jump from server
- afs: Fix getattr to report server i_size on dirs, not local size
- afs: Avoid endless loop if file is larger than expected
- parisc: Fix argument pointer in real64_call_asm()
- parisc: Ensure page alignment in flush functions
- ALSA: usb-audio: Add quirk for Pioneer DDJ-800
- ALSA: hda/realtek: Add quirk for ASUS UM3402YAR using CS35L41
- ALSA: hda/realtek: support HP Pavilion Aero 13-be0xxx Mute LED
- nilfs2: do not write dirty data after degenerating to read-only
- nilfs2: fix infinite loop in nilfs_mdt_get_block()
- mm: do not reclaim private data from pinned page
- drbd: correctly submit flush bio on barrier
- md/raid10: fix null-ptr-deref in raid10_sync_request
- md/raid5: Improve performance for sequential IO
- kasan: hw_tags: avoid invalid virt_to_page()
- mtd: core: provide unique name for nvmem device, take two
- mtd: core: fix nvmem error reporting
- mtd: core: fix error path for nvmem provider
- mtd: spi-nor: core: Update flash's current address mode when changing
address mode
- drivers: remoteproc: xilinx: Fix carveout names
- mailbox: zynqmp: Fix IPI isr handling
- kcsan: Avoid READ_ONCE() in read_instrumented_memory()
- mailbox: zynqmp: Fix typo in IPI documentation
- nfp: fix incorrect pointer deference when offloading IPsec with bonding
- wifi: rtl8xxxu: RTL8192EU always needs full init
- wifi: rtw88: rtw8821c: Fix rfe_option field width
- wifi: rtw89: fix potential race condition between napi_init and napi_enable
- clk: microchip: fix potential UAF in auxdev release callback
- clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent
- scripts/gdb: fix lx-timerlist for Python3
- btrfs: scrub: reject unsupported scrub flags
- s390/dasd: fix hanging blockdevice after request requeue
- ia64: fix an addr to taddr in huge_pte_offset()
- mm/mempolicy: correctly update prev when policy is equal on mbind
- vhost_vdpa: fix unmap process in no-batch mode
- dm verity: fix error handling for check_at_most_once on FEC
- dm clone: call kmem_cache_destroy() in dm_clone_init() error path
- dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path
- dm flakey: fix a crash with invalid table line
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- dm: don't lock fs when the map is NULL in process of resume
- blk-iocost: avoid 64-bit division in ioc_timer_fn
- cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname
- cifs: protect session status check in smb2_reconnect()
- cifs: fix sharing of DFS connections
- cifs: fix potential race when tree connecting ipc
- cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath
- thunderbolt: Use correct type in tb_port_is_clx_enabled() prototype
- perf auxtrace: Fix address filter entire kernel size
- perf intel-pt: Fix CYC timestamps after standalone CBR
- i40e: Remove unused i40e status codes
- i40e: Remove string printing for i40e_status
- i40e: use int for i40e_status
- debugobject: Ensure pool refill (again)
- Linux 6.2.15
* Lunar update: v6.2.14 upstream stable release (LP: #2025066)
- rust: arch/um: Disable FP/SIMD instruction to match x86
- um: Only disable SSE on clang to work around old GCC bugs
- rcu/kvfree: Avoid freeing new kfree_rcu() memory after old grace period
- mm/mempolicy: fix use-after-free of VMA iterator
- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
- gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xNU
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- wifi: brcmfmac: add Cypress 43439 SDIO ids
- btrfs: fix uninitialized variable warnings
- USB: serial: option: add UNISOC vendor and TOZED LT70C product
- driver core: Don't require dynamic_debug for initcall_debug probe timing
- riscv: Move early dtb mapping into the fixmap region
- riscv: Do not set initial_boot_params to the linear address of the dtb
- riscv: No need to relocate the dtb as it lies in the fixmap region
- Linux 6.2.14
* CVE-2023-35001
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
* CVE-2023-31248
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
* CVE-2023-3389
- io_uring/poll: serialize poll linked timer start with poll removal
* CVE-2023-3269
- mm: introduce new 'lock_mm_and_find_vma()' page fault helper
- mm: make the page fault mmap locking killable
- arm64/mm: Convert to using lock_mm_and_find_vma()
- powerpc/mm: Convert to using lock_mm_and_find_vma()
- mips/mm: Convert to using lock_mm_and_find_vma()
- riscv/mm: Convert to using lock_mm_and_find_vma()
- arm/mm: Convert to using lock_mm_and_find_vma()
- mm/fault: convert remaining simple cases to lock_mm_and_find_vma()
- powerpc/mm: convert coprocessor fault to lock_mm_and_find_vma()
- mm: make find_extend_vma() fail if write lock not held
- execve: expand new process stack manually ahead of time
- mm: always expand the stack with the mmap write lock held
- [CONFIG]: Set CONFIG_LOCK_MM_AND_FIND_VMA
* CVE-2023-3390
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
* CVE-2023-3141
- memstick: r592: Fix UAF bug in r592_remove due to race condition
* CVE-2023-3090
- ipvlan:Fix out-of-bounds caused by unclear skb->cb
-- Roxana Nicolescu <email address hidden> Tue, 25 Jul 2023 15:31:53 +0200
-
linux-oracle (6.2.0-1008.8) lunar; urgency=medium
* lunar/linux-oracle: 6.2.0-1008.8 -proposed tracker (LP: #2026748)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/s2023.06.12)
[ Ubuntu: 6.2.0-26.26 ]
* lunar/linux: 6.2.0-26.26 -proposed tracker (LP: #2026753)
* CVE-2023-2640 // CVE-2023-32629
- Revert "UBUNTU: SAUCE: overlayfs: handle idmapped mounts in
ovl_do_(set|remove)xattr"
- Revert "UBUNTU: SAUCE: overlayfs: Skip permission checking for
trusted.overlayfs.* xattrs"
- SAUCE: overlayfs: default to userxattr when mounted from non initial user
namespace
* CVE-2023-35001
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
* CVE-2023-31248
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
* CVE-2023-3389
- io_uring/poll: serialize poll linked timer start with poll removal
* CVE-2023-3390
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
* CVE-2023-3090
- ipvlan:Fix out-of-bounds caused by unclear skb->cb
* CVE-2023-3269
- mm: introduce new 'lock_mm_and_find_vma()' page fault helper
- mm: make the page fault mmap locking killable
- arm64/mm: Convert to using lock_mm_and_find_vma()
- powerpc/mm: Convert to using lock_mm_and_find_vma()
- mips/mm: Convert to using lock_mm_and_find_vma()
- riscv/mm: Convert to using lock_mm_and_find_vma()
- arm/mm: Convert to using lock_mm_and_find_vma()
- mm/fault: convert remaining simple cases to lock_mm_and_find_vma()
- powerpc/mm: convert coprocessor fault to lock_mm_and_find_vma()
- mm: make find_extend_vma() fail if write lock not held
- execve: expand new process stack manually ahead of time
- mm: always expand the stack with the mmap write lock held
- [CONFIG]: Set CONFIG_LOCK_MM_AND_FIND_VMA
-- Roxana Nicolescu <email address hidden> Fri, 14 Jul 2023 12:00:27 +0200
-
linux-oracle (6.2.0-1007.7) lunar; urgency=medium
* lunar/linux-oracle: 6.2.0-1007.7 -proposed tracker (LP: #2024538)
* Packaging resync (LP: #1786013)
- [Packaging] resync update-dkms-versions helper
[ Ubuntu: 6.2.0-25.25 ]
* lunar/linux: 6.2.0-25.25 -proposed tracker (LP: #2024167)
* ftrace in ubuntu_kernel_selftests failed with "check if duplicate events are
caught" on J-5.15 P9 / J-kvm / L-kvm (LP: #1977827)
- SAUCE: selftests/ftrace: Add test dependency
* Add microphone support of the front headphone port on P3 Tower
(LP: #2023650)
- ALSA: hda/realtek: Add Lenovo P3 Tower platform
* Add audio support for ThinkPad P1 Gen 6 and Z16 Gen 2 (LP: #2023539)
- ALSA: hda/realtek: Add quirk for ThinkPad P1 Gen 6
* Fix Disable thunderbolt clx make edp-monitor garbage while moving the
touchpad (LP: #2023004)
- drm/i915: Use 18 fast wake AUX sync len
* Fix Monitor lost after replug WD19TBS to SUT port with VGA/DVI to type-C
dongle (LP: #2021949)
- thunderbolt: Increase timeout of DP OUT adapter handshake
- thunderbolt: Do not touch CL state configuration during discovery
- thunderbolt: Increase DisplayPort Connection Manager handshake timeout
* Enable Tracing Configs for OSNOISE and TIMERLAT (LP: #2018591)
- [Config] Enable OSNOISE_TRACER and TIMERLAT_TRACER configs
* Fix only reach PC3 when ethernet is plugged r8169 (LP: #1946433)
- r8169: use spinlock to protect mac ocp register access
- r8169: use spinlock to protect access to registers Config2 and Config5
- r8169: enable cfg9346 config register access in atomic context
- r8169: prepare rtl_hw_aspm_clkreq_enable for usage in atomic context
- r8169: disable ASPM during NAPI poll
- r8169: remove ASPM restrictions now that ASPM is disabled during NAPI poll
* introduce do_lib_rust=true|false to enable/disable linux-lib-rust package
(LP: #2021605)
- [Packaging] introduce do_lib_rust and enable it only on generic amd64
* System either hang with black screen or rebooted on entering suspend on AMD
Ryzen 9 PRO 7940HS w/ Radeon 780M Graphics (LP: #2020685)
- drm/amdgpu: refine get gpu clock counter method
- drm/amdgpu/gfx11: update gpu_clock_counter logic
* generate linux-lib-rust only on amd64 (LP: #2020356)
- [Packaging] generate linux-lib-rust only on amd64
* No HDMI/DP audio output on dock(Nvidia GPU) (LP: #2020062)
- ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table
* Add support for mdev_set_iommu_device() kABI in Ubuntu 22.10 kernel
(LP: #1988806)
- SAUCE: Add mdev_set_iommu_device() kABI.
* Enable audio LEDs on HP laptops (LP: #2019915)
- ALSA: hda/realtek: Fix mute and micmute LEDs for an HP laptop
- ALSA: hda/realtek: Fix mute and micmute LEDs for yet another HP laptop
* linux-*: please enable dm-verity kconfigs to allow MoK/db verified root
images (LP: #2019040)
- [Config] CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG_SECONDARY_KEYRING=y
* Lunar update: v6.2.13 upstream stable release (LP: #2023929)
- ARM: dts: rockchip: fix a typo error for rk3288 spdif node
- arm64: dts: rockchip: Lower sd speed on rk3566-soquartz
- arm64: dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node
- arm64: dts: qcom: ipq8074-hk10: enable QMP device, not the PHY node
- arm64: dts: meson-g12-common: specify full DMC range
- arm64: dts: meson-g12-common: resolve conflict between canvas & pmu
- perf/amlogic: adjust register offsets
- arm64: dts: qcom: sc8280xp-pmics: fix pon compatible and registers
- arm64: dts: imx8mm-evk: correct pmic clock source
- arm64: dts: imx8mm-verdin: correct off-on-delay
- arm64: dts: imx8mp-verdin: correct off-on-delay
- netfilter: br_netfilter: fix recent physdev match breakage
- netfilter: nf_tables: Modify nla_memdup's flag to GFP_KERNEL_ACCOUNT
- rust: str: fix requierments->requirements typo
- regulator: fan53555: Explicitly include bits header
- regulator: fan53555: Fix wrong TCS_SLEW_MASK
- virtio_net: bugfix overflow inside xdp_linearize_page()
- sfc: Fix use-after-free due to selftest_work
- netfilter: nf_tables: fix ifdef to also consider nf_tables=m
- i40e: fix accessing vsi->active_filters without holding lock
- i40e: fix i40e_setup_misc_vector() error handling
- netfilter: nf_tables: validate catch-all set elements
- cxgb4: fix use after free bugs caused by circular dependency problem
- netfilter: nf_tables: tighten netlink attribute requirements for catch-all
elements
- bnxt_en: Do not initialize PTP on older P3/P4 chips
- mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next()
- LoongArch: Fix build error if CONFIG_SUSPEND is not set
- bonding: Fix memory leak when changing bond type to Ethernet
- net: rpl: fix rpl header size calculation
- mlxsw: pci: Fix possible crash during initialization
- spi: spi-rockchip: Fix missing unwind goto in rockchip_sfc_probe()
- bpf: Fix incorrect verifier pruning due to missing register precision taints
- net: dsa: microchip: ksz8795: Correctly handle huge frame configuration
- bnxt_en: fix free-runnig PHC mode
- e1000e: Disable TSO on i219-LM card to increase speed
- net: bridge: switchdev: don't notify FDB entries with "master dynamic"
- f2fs: Fix f2fs_truncate_partial_nodes ftrace event
- platform/x86/intel: vsec: Fix a memory leak in intel_vsec_add_aux
- platform/x86 (gigabyte-wmi): Add support for A320M-S2H V2
- selftests: sigaltstack: fix -Wuninitialized
- scsi: megaraid_sas: Fix fw_crash_buffer_show()
- scsi: core: Improve scsi_vpd_inquiry() checks
- net: dsa: b53: mmap: add phy ops
- platform/x86: gigabyte-wmi: add support for B650 AORUS ELITE AX
- s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
- drm: test: Fix 32-bit issue in drm_buddy_test
- nvme-tcp: fix a possible UAF when failing to allocate an io queue
- xen/netback: use same error messages for same errors
- platform/x86: gigabyte-wmi: add support for X570S AORUS ELITE
- platform/x86: asus-nb-wmi: Add quirk_asus_tablet_mode to other ROG Flow X13
models
- mtd: spi-nor: fix memory leak when using debugfs_lookup()
- pwm: Zero-initialize the pwm_state passed to driver's .get_state()
- Revert "userfaultfd: don't fail on unrecognized features"
- Revert "ACPICA: Events: Support fixed PCIe wake event"
- iio: dac: ad5755: Add missing fwnode_handle_put()
- iio: light: tsl2772: fix reading proximity-diodes from device tree
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
- btrfs: set default discard iops_limit to 1000
- btrfs: reinterpret async discard iops_limit=0 as no delay
- rust: kernel: Mark rust_fmt_argument as extern "C"
- LoongArch: module: set section addresses to 0x0
- LoongArch: Check unwind_error() in arch_stack_walk()
- LoongArch: Fix probing of the CRC32 feature
- LoongArch: Mark 3 symbol exports as non-GPL
- wifi: ath9k: Don't mark channelmap stack variable read-only in
ath9k_mci_update_wlan_channels()
- maple_tree: make maple state reusable after mas_empty_area_rev()
- maple_tree: fix mas_empty_area() search
- maple_tree: fix a potential memory leak, OOB access, or other unpredictable
bug
- ASoC: SOF: ipc4-topology: Clarify bind failure caused by missing fw_module
- nilfs2: initialize unused bytes in segment summary blocks
- mptcp: stops worker on unaccepted sockets at listener close
- mptcp: fix accept vs worker race
- tools/mm/page_owner_sort.c: fix TGID output when cull=tg is used
- memstick: fix memory leak if card device is never registered
- kernel/sys.c: fix and improve control flow in __sys_setres[ug]id()
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25
- drm/amdgpu: Fix desktop freezed after gpu-reset
- drm/amd/display: set dcn315 lb bpp to 48
- drm/rockchip: vop2: fix suspend/resume
- drm/rockchip: vop2: Use regcache_sync() to fix suspend/resume
- mm: fix memory leak on mm_init error handling
- mm/userfaultfd: fix uffd-wp handling for THP migration entries
- mm/khugepaged: check again on anon uffd-wp during isolation
- mm/huge_memory.c: warn with pr_warn_ratelimited instead of
VM_WARN_ON_ONCE_FOLIO
- mm: kmsan: handle alloc failures in kmsan_ioremap_page_range()
- mm: kmsan: handle alloc failures in kmsan_vmap_pages_range_noflush()
- mm: page_alloc: skip regions with hugetlbfs pages when allocating 1G pages
- mm/mmap: regression fix for unmapped_area{_topdown}
- cifs: avoid dup prefix path in dfs_get_automount_devname()
- KVM: arm64: Make vcpu flag updates non-preemptible
- KVM: arm64: Fix buffer overflow in kvm_arm_set_fw_reg()
- MIPS: Define RUNTIME_DISCARD_EXIT in LD script
- LoongArch: Make -mstrict-align configurable
- LoongArch: Make WriteCombine configurable for ioremap()
- purgatory: fix disabling debug info
- PCI/MSI: Remove over-zealous hardware size check in
pci_msix_validate_entries()
- [Config] updateconfigs for GCC12_NO_ARRAY_BOUNDS
- gcc: disable '-Warray-bounds' for gcc-13 too
- Input: cyttsp5 - fix sensing configuration data structure
- Input: pegasus-notetaker - check pipe type when probing
- iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger()
- fpga: bridge: properly initialize bridge device before populating children
- mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock
- ASoC: SOF: pm: Tear down pipelines only if DSP was active
- ASoC: fsl_asrc_dma: fix potential null-ptr-deref
- ASoC: fsl_sai: Fix pins setting for i.MX8QM platform
- ASN.1: Fix check for strdup() success
- Linux 6.2.13
* CVE-2023-2124
- xfs: verify buffer contents when we skip log replay
* cls_flower: off-by-one in fl_set_geneve_opt (LP: #2023577)
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
* Some INVLPG implementations can leave Global translations unflushed when
PCIDs are enabled (LP: #2023220)
- x86/mm: Avoid incomplete Global INVLPG flushes
* CVE-2023-2176
- RDMA/core: Refactor rdma_bind_addr
* support python < 3.9 with annotations (LP: #2020531)
- [Packaging] kconfig/annotations.py: support older way of merging dicts
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
- [Packaging] resync getabis
-- Roxana Nicolescu <email address hidden> Thu, 29 Jun 2023 10:22:17 +0200
-
linux-oracle (6.2.0-1006.6) lunar; urgency=medium
* lunar/linux-oracle: 6.2.0-1006.6 -proposed tracker (LP: #2024055)
[ Ubuntu: 6.2.0-24.24 ]
* lunar/linux: 6.2.0-24.24 -proposed tracker (LP: #2024058)
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
- [Packaging] resync getabis
* cls_flower: off-by-one in fl_set_geneve_opt (LP: #2023577)
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
* Some INVLPG implementations can leave Global translations unflushed when
PCIDs are enabled (LP: #2023220)
- x86/mm: Avoid incomplete Global INVLPG flushes
-- Khalid Elmously <email address hidden> Tue, 20 Jun 2023 00:25:31 -0400
-
linux-oracle (6.2.0-1005.5) lunar; urgency=medium
* lunar/linux-oracle: 6.2.0-1005.5 -proposed tracker (LP: #2019842)
* Computer with Intel Atom CPU will not boot with Kernel 6.2.0-20
(LP: #2017444)
- [Config]: Disable CONFIG_INTEL_ATOMISP
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
- [Packaging] resync getabis
[ Ubuntu: 6.2.0-23.23 ]
* lunar/linux: 6.2.0-23.23 -proposed tracker (LP: #2019845)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
- debian/dkms-versions -- update from kernel-versions (main/2023.05.15)
* Fix flicker display problem on some panels which support PSR2 (LP: #2002968)
- drm/i915/psr: Add continuous full frame bit together with single
* Kernel 6.1 bumped the disk consumption on default images by 15%
(LP: #2015867)
- [Packaging] introduce a separate linux-lib-rust package
* Update I915 PSR calculation on Linux 6.2 (LP: #2018655)
- drm/i915: Fix fast wake AUX sync len
- drm/i915: Explain the magic numbers for AUX SYNC/precharge length
* Computer with Intel Atom CPU will not boot with Kernel 6.2.0-20
(LP: #2017444)
- [Config]: Disable CONFIG_INTEL_ATOMISP
* udev fails to make prctl() syscall with apparmor=0 (as used by maas by
default) (LP: #2016908)
- SAUCE: (no-up) Stacking v38: Fix prctl() syscall with apparmor=0
* CVE-2023-32233
- netfilter: nf_tables: deactivate anonymous set from preparation phase
* CVE-2023-2612
- SAUCE: shiftfs: prevent lock unbalance in shiftfs_create_object()
* CVE-2023-31436
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
* CVE-2023-1380
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
* 5.19 not reporting cgroups v1 blkio.throttle.io_serviced (LP: #2016186)
- SAUCE: blk-throttle: Fix io statistics for cgroup v1
* LSM stacking and AppArmor for 6.2: additional fixes (LP: #2017903)
- SAUCE: (no-up) apparmor: fix policy_compat perms remap for file dfa
- SAUCE: (no-up) apparmor: fix profile verification and enable it
- SAUCE: (no-up) apparmor: fix: add missing failure check in
compute_xmatch_perms
- SAUCE: (no-up) apparmor: fix: kzalloc perms tables for shared dfas
* Lunar update: v6.2.12 upstream stable release (LP: #2017219)
- Revert "pinctrl: amd: Disable and mask interrupts on resume"
- drm/amd/display: Pass the right info to drm_dp_remove_payload
- drm/i915: Workaround ICL CSC_MODE sticky arming
- ALSA: emu10k1: fix capture interrupt handler unlinking
- ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard
- ALSA: i2c/cs8427: fix iec958 mixer control deactivation
- ALSA: hda: patch_realtek: add quirk for Asus N7601ZM
- ALSA: hda/realtek: Add quirks for Lenovo Z13/Z16 Gen2
- ALSA: firewire-tascam: add missing unwind goto in
snd_tscm_stream_start_duplex()
- ALSA: emu10k1: don't create old pass-through playback device on Audigy
- ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards
- ALSA: hda/hdmi: disable KAE for Intel DG2
- Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp}
- Bluetooth: Fix race condition in hidp_session_thread
- bluetooth: btbcm: Fix logic error in forming the board name.
- Bluetooth: Free potentially unfreed SCO connection
- Bluetooth: hci_conn: Fix possible UAF
- btrfs: restore the thread_pool= behavior in remount for the end I/O
workqueues
- btrfs: fix fast csum implementation detection
- fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace
- mtdblock: tolerate corrected bit-flips
- mtd: rawnand: meson: fix bitmask for length in command word
- mtd: rawnand: stm32_fmc2: remove unsupported EDO mode
- mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min
- KVM: arm64: PMU: Restore the guest's EL0 event counting after migration
- fbcon: Fix error paths in set_con2fb_map
- fbcon: set_con2fb_map needs to set con2fb_map!
- drm/i915/dsi: fix DSS CTL register offsets for TGL+
- io_uring: complete request via task work in case of DEFER_TASKRUN
- clk: sprd: set max_register according to mapping range
- RDMA/irdma: Do not generate SW completions for NOPs
- RDMA/irdma: Fix memory leak of PBLE objects
- RDMA/irdma: Increase iWARP CM default rexmit count
- RDMA/irdma: Add ipv4 check to irdma_find_listener()
- IB/mlx5: Add support for 400G_8X lane speed
- RDMA/erdma: Fix some typos
- RDMA/erdma: Update default EQ depth to 4096 and max_send_wr to 8192
- RDMA/erdma: Inline mtt entries into WQE if supported
- RDMA/erdma: Defer probing if netdevice can not be found
- clk: rs9: Fix suspend/resume
- RDMA/cma: Allow UD qp_type to join multicast only
- bpf: tcp: Use sock_gen_put instead of sock_put in bpf_iter_tcp
- LoongArch, bpf: Fix jit to skip speculation barrier opcode
- dmaengine: apple-admac: Handle 'global' interrupt flags
- dmaengine: apple-admac: Set src_addr_widths capability
- dmaengine: apple-admac: Fix 'current_tx' not getting freed
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race
condition
- bpf, arm64: Fixed a BTI error on returning to patched function
- KVM: arm64: Advertise ID_AA64PFR0_EL1.CSV2/3 to protected VMs
- niu: Fix missing unwind goto in niu_alloc_channels()
- tcp: restrict net.ipv4.tcp_app_win
- bonding: fix ns validation on backup slaves
- iavf: refactor VLAN filter states
- iavf: remove active_cvlans and active_svlans bitmaps
- net: openvswitch: fix race on port output
- Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure
- Bluetooth: Fix printing errors if LE Connection times out
- Bluetooth: SCO: Fix possible circular locking dependency sco_sock_getsockopt
- Bluetooth: Set ISO Data Path on broadcast sink
- drm/nouveau/fb: add missing sysmen flush callbacks
- drm/armada: Fix a potential double free in an error handling path
- qlcnic: check pci_reset_function result
- smc: Fix use-after-free in tcp_write_timer_handler().
- net: wwan: iosm: Fix error handling path in ipc_pcie_probe()
- cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex
- rtnetlink: Restore RTM_NEW/DELLINK notification behavior
- net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()
- sctp: fix a potential overflow in sctp_ifwdtsn_skip
- RDMA/core: Fix GID entry ref leak when create_ah fails
- selftests: openvswitch: adjust datapath NL message declaration
- udp6: fix potential access to stale information
- selftests: add the missing CONFIG_IP_SCTP in net config
- net: macb: fix a memory corruption in extended buffer descriptor mode
- skbuff: Fix a race between coalescing and releasing SKBs
- ARM: 9290/1: uaccess: Fix KASAN false-positives
- ARM: dts: qcom: apq8026-lg-lenok: add missing reserved memory
- arm64: dts: qcom: sa8540p-ride: correct name of remoteproc_nsp0 firmware
- power: supply: rk817: Fix unsigned comparison with less than zero
- power: supply: cros_usbpd: reclassify "default case!" as debug
- power: supply: axp288_fuel_gauge: Added check for negative values
- selftests/bpf: Fix progs/find_vma_fail1.c build error.
- wifi: mwifiex: mark OF related data as maybe unused
- i2c: imx-lpi2c: clean rx/tx buffers upon new message
- i2c: hisi: Avoid redundant interrupts
- efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L
- block: ublk_drv: mark device as LIVE before adding disk
- ACPI: video: Add backlight=native DMI quirk for Acer Aspire 3830TG
- drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F
- hwmon: (peci/cputemp) Fix miscalculated DTS for SKX
- hwmon: (xgene) Fix ioremap and memremap leak
- verify_pefile: relax wrapper length check
- asymmetric_keys: log on fatal failures in PE/pkcs7
- nvme: send Identify with CNS 06h only to I/O controllers
- wifi: iwlwifi: mvm: fix mvmtxq->stopped handling
- wifi: iwlwifi: mvm: protect TXQ list manipulation
- drm/amdgpu: add mes resume when do gfx post soft reset
- drm/amdgpu: Force signal hw_fences that are embedded in non-sched jobs
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
- ACPI: resource: Add Medion S17413 to IRQ override quirk
- tracing: Add trace_array_puts() to write into instance
- tracing: Have tracing_snapshot_instance_cond() write errors to the
appropriate instance
- maple_tree: fix write memory barrier of nodes once dead for RCU mode
- ksmbd: avoid out of bounds access in decode_preauth_ctxt()
- riscv: add icache flush for nommu sigreturn trampoline
- HID: intel-ish-hid: Fix kernel panic during warm reset
- net: sfp: initialize sfp->i2c_block_size at sfp allocation
- net: phy: nxp-c45-tja11xx: add remove callback
- net: phy: nxp-c45-tja11xx: fix unsigned long multiplication overflow
- scsi: ses: Handle enclosure with just a primary component gracefully
- thermal: intel: Avoid updating unsupported THERM_STATUS_CLEAR mask bits
- drm/amd/pm: correct the pcie link state check for SMU13
- PCI: Fix use-after-free in pci_bus_release_domain_nr()
- PCI/MSI: Provide missing stub for pci_msix_can_alloc_dyn()
- x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot
- cgroup: fix display of forceidle time at root
- cgroup/cpuset: Fix partition root's cpuset.cpus update bug
- cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach()
- cgroup/cpuset: Make cpuset_fork() handle CLONE_INTO_CGROUP properly
- cgroup/cpuset: Add cpuset_can_fork() and cpuset_cancel_fork() methods
- drm/amd/pm: correct SMU13.0.7 pstate profiling clock settings
- drm/amd/pm: correct SMU13.0.7 max shader clock reporting
- mptcp: use mptcp_schedule_work instead of open-coding it
- mptcp: stricter state check in mptcp_worker
- mptcp: fix NULL pointer dereference on fastopen early fallback
- selftests: mptcp: userspace pm: uniform verify events
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: Fix deadlock caused by recursively holding work_sem
- i2c: mchp-pci1xxxx: Update Timing registers
- powerpc/papr_scm: Update the NUMA distance table for the target node
- sched/fair: Fix imbalance overflow
- x86/rtc: Remove __init for runtime functions
- i2c: ocores: generate stop condition after timeout in polling mode
- cifs: fix negotiate context parsing
- nvme-pci: mark Lexar NM760 as IGNORE_DEV_SUBNQN
- nvme-pci: add NVME_QUIRK_BOGUS_NID for T-FORCE Z330 SSD
- Linux 6.2.12
* RFC: virtio and virtio-scsi should be built in (LP: #1685291)
- [Config] Mark CONFIG_SCSI_VIRTIO built-in
* Dell: Enable speaker mute hotkey LED indicator (LP: #2015972)
- platform/x86: dell-laptop: Register ctl-led for speaker-mute
* Debian autoreconstruct Fix restoration of execute permissions (LP: #2015498)
- [Debian] autoreconstruct - fix restoration of execute permissions
* Lost display on built-in monitor after suspend (LP: #2001599)
- drm/i915: Generalize the PPS vlv_pipe_check() stuff
- drm/i915: Try to use the correct power sequencer intiially on bxt/glk
- drm/i915: Extend dual PPS handlind for ICP+
- drm/i915: Reject unusable power sequencers
- drm/i915: Print the PPS registers using consistent format
- drm/i915: Fix whitespace
- drm/i915: Improve PPS debugs
* [SRU][Jammy] CONFIG_PCI_MESON is not enabled (LP: #2007745)
- [Config] arm64: Enable PCI_MESON module
* sched: cpumask: improve on cpumask_local_spread() locality (LP: #2008824)
- lib/find: introduce find_nth_and_andnot_bit
- cpumask: introduce cpumask_nth_and_andnot
- sched: add sched_numa_find_nth_cpu()
- cpumask: improve on cpumask_local_spread() locality
- lib/cpumask: reorganize cpumask_local_spread() logic
- sched/topology: Introduce sched_numa_hop_mask()
- sched/topology: Introduce for_each_numa_hop_mask()
- net/mlx5e: Improve remote NUMA preferences used for the IRQ affinity hints
- lib/cpumask: update comment for cpumask_local_spread()
- sched/topology: fix KASAN warning in hop_cmp()
* Fix E-star testing failure with RTK 8852BE (LP: #2012019)
- wifi: rtw89: 8852be: enable CLKREQ of PCI capability
- wifi: rtw89: release RX standby timer of beamformee CSI to save power
* vmd may fail to create sysfs entry while `pci_rescan_bus()` called in some
other drivers like wwan (LP: #2011389)
- SAUCE: PCI: vmd: guard device addition and removal
* Lunar update: v6.2.11 upstream stable release (LP: #2016879)
- dm cache: Add some documentation to dm-cache-background-tracker.h
- dm integrity: Remove bi_sector that's only used by commented debug code
- dm: change "unsigned" to "unsigned int"
- dm: fix improper splitting for abnormal bios
- drm/i915: Move the DSB setup/cleaup into the color code
- drm/i915: Add a .color_post_update() hook
- gpio: GPIO_REGMAP: select REGMAP instead of depending on it
- Drivers: vmbus: Check for channel allocation before looking up relids
- ASoC: SOF: ipc4: Ensure DSP is in D0I0 during sof_ipc4_set_get_data()
- pwm: hibvt: Explicitly set .polarity in .get_state()
- pwm: cros-ec: Explicitly set .polarity in .get_state()
- pwm: iqs620a: Explicitly set .polarity in .get_state()
- pwm: sprd: Explicitly set .polarity in .get_state()
- pwm: meson: Explicitly set .polarity in .get_state()
- ASoC: codecs: lpass: fix the order or clks turn off during suspend
- KVM: s390: pv: fix external interruption loop not always detected
- wifi: mac80211: fix the size calculation of ieee80211_ie_len_eht_cap()
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded
sta
- net: qrtr: Fix a refcount bug in qrtr_recvmsg()
- net: phylink: add phylink_expects_phy() method
- net: stmmac: check if MAC needs to attach to a PHY
- net: stmmac: remove redundant fixup to support fixed-link mode
- wifi: brcmfmac: Fix SDIO suspend/resume regression
- NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL
- nfsd: call op_release, even when op_func returns an error
- icmp: guard against too small mtu
- ALSA: hda/hdmi: Preserve the previous PCM device upon re-enablement
- net: don't let netpoll invoke NAPI if in xmit context
- net: dsa: mv88e6xxx: Reset mv88e6393x force WD event bit
- net: ethernet: mtk_eth_soc: fix remaining throughput regression
- sctp: check send stream number after wait_for_sndbuf
- drm/i915/huc: Cancel HuC delayed load timer on reset.
- net: qrtr: Do not do DEL_SERVER broadcast after DEL_CLIENT
- ipv6: Fix an uninit variable access bug in __ip6_make_skb()
- platform/x86: think-lmi: Fix memory leak when showing current settings
- platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI
strings
- platform/x86: think-lmi: Clean up display of current_value on Thinkstation
- gpio: davinci: Do not clear the bank intr enable bit in save_context
- gpio: davinci: Add irq chip flag to skip set wake
- net: ethernet: ti: am65-cpsw: Fix mdio cleanup in probe
- net: stmmac: fix up RX flow hash indirection table when setting channels
- sunrpc: only free unix grouplist after RCU settles
- NFSD: callback request does not use correct credential for AUTH_SYS
- ice: fix wrong fallback logic for FDIR
- ice: Reset FDIR counter in FDIR init stage
- raw: use net_hash_mix() in hash function
- raw: Fix NULL deref in raw_get_next().
- ping: Fix potentail NULL deref for /proc/net/icmp.
- ethtool: reset #lanes when lanes is omitted
- netlink: annotate lockless accesses to nlk->max_recvmsg_len
- gve: Secure enough bytes in the first TX desc for all TCP pkts
- arm64: compat: Work around uninitialized variable warning
- net: stmmac: check fwnode for phy device before scanning for phy
- cxl/pci: Fix CDAT retrieval on big endian
- cxl/pci: Handle truncated CDAT header
- cxl/pci: Handle truncated CDAT entries
- cxl/pci: Handle excessive CDAT length
- PCI/DOE: Silence WARN splat with CONFIG_DEBUG_OBJECTS=y
- PCI/DOE: Fix memory leak with CONFIG_DEBUG_OBJECTS=y
- Revert "usb: xhci-pci: Set PROBE_PREFER_ASYNCHRONOUS"
- usb: xhci: tegra: fix sleep in atomic call
- xhci: Free the command allocated for setting LPM if we return early
- xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu
- usb: cdnsp: Fixes error: uninitialized symbol 'len'
- usb: dwc3: pci: add support for the Intel Meteor Lake-S
- USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs
- usb: typec: altmodes/displayport: Fix configure initial pin assignment
- USB: serial: option: add Telit FE990 compositions
- USB: serial: option: add Quectel RM500U-CN modem
- drivers: iio: adc: ltc2497: fix LSB shift
- iio: adis16480: select CONFIG_CRC32
- iio: adc: qcom-spmi-adc5: Fix the channel name
- iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip
- iio: dac: cio-dac: Fix max DAC write value check for 12-bit
- iio: adc: max11410: fix read_poll_timeout() usage
- iio: accel: kionix-kx022a: Get the timestamp from the driver's private data
in the trigger_handler
- iio: buffer: correctly return bytes written in output buffers
- iio: buffer: make sure O_NONBLOCK is respected
- iio: light: cm32181: Unregister second I2C client if present
- iio: light: vcnl4000: Fix WARN_ON on uninitialized lock
- tty: serial: sh-sci: Fix transmit end interrupt handler
- tty: serial: sh-sci: Fix Rx on RZ/G2L SCI
- tty: serial: fsl_lpuart: avoid checking for transfer complete when
UARTCTRL_SBK is asserted in lpuart32_tx_empty
- tty: serial: fsl_lpuart: fix crash in lpuart_uport_is_active
- nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread()
- nilfs2: fix sysfs interface lifetime
- fsdax: dedupe should compare the min of two iters' length
- fsdax: unshare: zero destination if srcmap is HOLE or UNWRITTEN
- fsdax: force clear dirty mark if CoW
- dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs
- serial: 8250: Prevent starting up DMA Rx on THRI interrupt
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ALSA: hda/realtek: Add quirk for Clevo X370SNW
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
- x86/acpi/boot: Correct acpi_is_processor_usable() check
- x86/ACPI/boot: Use FADT version to check support for online capable
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception
injection
- KVM: nVMX: Do not report error code when synthesizing VM-Exit from Real Mode
- KVM: SVM: Flush Hyper-V TLB when required
- mm: kfence: fix PG_slab and memcg_data clearing
- mm: kfence: fix handling discontiguous page
- coresight: etm4x: Do not access TRCIDR1 for identification
- coresight-etm4: Fix for() loop drvdata->nr_addr_cmp range bug
- counter: 104-quad-8: Fix race condition between FLAG and CNTR reads
- counter: 104-quad-8: Fix Synapse action reported for Index signals
- blk-mq: directly poll requests
- ftrace: Mark get_lock_parent_ip() __always_inline
- ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct()
- fs: drop peer group ids under namespace lock
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access
- can: isotp: fix race between isotp_sendsmg() and isotp_release()
- can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events
- can: isotp: isotp_recvmsg(): use sock_recv_cmsgs() to get SOCK_RXQ_OVFL
infos
- ACPI: video: Add auto_detect arg to __acpi_video_get_backlight_type()
- ACPI: video: Make acpi_backlight=video work independent from GPU driver
- ACPI: video: Add acpi_backlight=video quirk for Apple iMac14,1 and iMac14,2
- ACPI: video: Add acpi_backlight=video quirk for Lenovo ThinkPad W530
- net: stmmac: Add queue reset into stmmac_xdp_open() function
- tracing/synthetic: Fix races on freeing last_cmd
- tracing/timerlat: Notify new max thread latency
- tracing/osnoise: Fix notify new tracing_max_latency
- tracing: Free error logs of tracing instances
- iommufd: Check for uptr overflow
- iommufd: Fix unpinning of pages when an access is present
- iommufd: Do not corrupt the pfn list when doing batch carry
- ASoC: hdac_hdmi: use set_stream() instead of set_tdm_slots()
- ASoC: SOF: avoid a NULL dereference with unsupported widgets
- iio: adc: ad7791: fix IRQ flags
- io_uring: fix return value when removing provided buffers
- io_uring: fix memory leak when removing provided buffers
- scsi: qla2xxx: Fix memory leak in qla2x00_probe_one()
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- nvme: fix discard support without oncs
- cifs: sanitize paths in cifs_update_super_prepath.
- block: ublk: make sure that block size is set correctly
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- perf: Optimize perf_pmu_migrate_context()
- perf/core: Fix the same task check in perf_event_set_output
- tracing/synthetic: Make lastcmd_mutex static
- zsmalloc: document freeable stats
- mm: vmalloc: avoid warn_alloc noise caused by fatal signal
- wifi: mt76: mt7921: fix fw used for offload check for mt7922
- wifi: mt76: ignore key disable commands
- ublk: read any SQE values upfront
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- drm/nouveau/disp: Support more modes by checking with lower bpc
- drm/i915: Fix context runtime accounting
- drm/i915: fix race condition UAF in i915_perf_add_config_ioctl
- ring-buffer: Fix race while reader and writer are on the same page
- mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()
- mm/hugetlb: fix uffd wr-protection for CoW optimization path
- maple_tree: fix get wrong data_end in mtree_lookup_walk()
- maple_tree: fix a potential concurrency bug in RCU mode
- drm/amd/display: Clear MST topology if it fails to resume
- drm/amdgpu: for S0ix, skip SDMA 5.x+ suspend/resume
- drm/amdgpu: skip psp suspend for IMU enabled ASICs mode2 reset
- drm/bridge: lt9611: Fix PLL being unable to lock
- mm: take a page reference when removing device exclusive entries
- maple_tree: remove GFP_ZERO from kmem_cache_alloc() and
kmem_cache_alloc_bulk()
- maple_tree: fix potential rcu issue
- maple_tree: reduce user error potential
- maple_tree: fix handle of invalidated state in mas_wr_store_setup()
- maple_tree: fix mas_prev() and mas_find() state handling
- maple_tree: be more cautious about dead nodes
- maple_tree: refine ma_state init from mas_start()
- maple_tree: detect dead nodes in mas_start()
- maple_tree: fix freeing of nodes in rcu mode
- maple_tree: remove extra smp_wmb() from mas_dead_leaves()
- maple_tree: add smp_rmb() to dead node detection
- maple_tree: add RCU lock checking to rcu callback functions
- mm: enable maple tree RCU mode by default.
- Linux 6.2.11
* Lunar update: v6.2.10 upstream stable release (LP: #2016878)
- thunderbolt: Limit USB3 bandwidth of certain Intel USB4 host routers
- cifs: update ip_addr for ses only for primary chan setup
- cifs: prevent data race in cifs_reconnect_tcon()
- cifs: avoid race conditions with parallel reconnects
- zonefs: Reorganize code
- zonefs: Simplify IO error handling
- zonefs: Reduce struct zonefs_inode_info size
- zonefs: Separate zone information from inode information
- zonefs: Fix error message in zonefs_file_dio_append()
- btrfs: rename BTRFS_FS_NO_OVERCOMMIT to BTRFS_FS_ACTIVE_ZONE_TRACKING
- btrfs: zoned: count fresh BG region as zone unusable
- btrfs: zoned: drop space_info->active_total_bytes
- fsverity: don't drop pagecache at end of FS_IOC_ENABLE_VERITY
- cifs: fix missing unload_nls() in smb2_reconnect()
- xfrm: Zero padding when dumping algos and encap
- ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds
- ASoC: Intel: avs: max98357a: Explicitly define codec format
- ASoC: Intel: avs: da7219: Explicitly define codec format
- ASoC: Intel: avs: rt5682: Explicitly define codec format
- ASoC: Intel: avs: ssm4567: Remove nau8825 bits
- ASoC: Intel: avs: nau8825: Adjust clock control
- lib: zstd: Backport fix for in-place decompression
- zstd: Fix definition of assert()
- ACPI: video: Add backlight=native DMI quirk for Dell Vostro 15 3535
- ACPI: x86: Introduce an acpi_quirk_skip_gpio_event_handlers() helper
- ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 7 B1-750
- ACPI: x86: Add skip i2c clients quirk for Lenovo Yoga Book X90
- ASoC: SOF: ipc3: Check for upper size limit for the received message
- ASoC: SOF: ipc4-topology: Fix incorrect sample rate print unit
- ASoC: SOF: Intel: pci-tng: revert invalid bar size setting
- ASoC: SOF: Intel: hda-dsp: harden D0i3 programming sequence
- ASoC: SOF: Intel: hda-ctrl: re-add sleep after entering and exiting reset
- ASoC: SOF: IPC4: update gain ipc msg definition to align with fw
- ASoC: hdmi-codec: only startup/shutdown on supported streams
- wifi: mac80211: check basic rates validity
- md: avoid signed overflow in slot_store()
- x86/PVH: obtain VGA console info in Dom0
- drm/amdkfd: Fix BO offset for multi-VMA page migration
- drm/amdkfd: fix a potential double free in pqm_create_queue
- drm/amdgpu/vcn: custom video info caps for sriov
- drm/amdkfd: fix potential kgd_mem UAFs
- drm/amd/display: Fix HDCP failing to enable after suspend
- net: hsr: Don't log netdev_err message on unknown prp dst node
- ALSA: asihpi: check pao in control_message()
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
- fbdev: tgafb: Fix potential divide by zero
- ACPI: tools: pfrut: Check if the input of level and type is in the right
numeric range
- sched_getaffinity: don't assume 'cpumask_size()' is fully initialized
- nvme-pci: fixing memory leak in probe teardown path
- nvme-pci: add NVME_QUIRK_BOGUS_NID for Lexar NM620
- drm/amdkfd: Fixed kfd_process cleanup on module exit.
- net/mlx5e: Lower maximum allowed MTU in XSK to match XDP prerequisites
- fbdev: nvidia: Fix potential divide by zero
- fbdev: intelfb: Fix potential divide by zero
- fbdev: lxfb: Fix potential divide by zero
- fbdev: au1200fb: Fix potential divide by zero
- tools/power turbostat: Fix /dev/cpu_dma_latency warnings
- tools/power turbostat: fix decoding of HWP_STATUS
- tracing: Fix wrong return in kprobe_event_gen_test.c
- btrfs: fix uninitialized variable warning in btrfs_update_block_group
- btrfs: use temporary variable for space_info in btrfs_update_block_group
- mtd: rawnand: meson: initialize struct with zeroes
- mtd: nand: mxic-ecc: Fix mxic_ecc_data_xfer_wait_for_completion() when irq
is used
- ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx()
- riscv/kvm: Fix VM hang in case of timer delta being zero.
- mips: bmips: BCM6358: disable RAC flush for TP1
- ALSA: usb-audio: Fix recursive locking at XRUN during syncing
- PCI: dwc: Fix PORT_LINK_CONTROL update when CDM check enabled
- platform/x86: think-lmi: add missing type attribute
- platform/x86: think-lmi: use correct possible_values delimiters
- platform/x86: think-lmi: only display possible_values if available
- platform/x86: think-lmi: Add possible_values for ThinkStation
- platform/surface: aggregator: Add missing fwnode_handle_put()
- mtd: rawnand: meson: invalidate cache on polling ECC bit
- SUNRPC: fix shutdown of NFS TCP client socket
- sfc: ef10: don't overwrite offload features at NIC reset
- scsi: megaraid_sas: Fix crash after a double completion
- scsi: mpt3sas: Don't print sense pool info twice
- net: dsa: realtek: fix out-of-bounds access
- ptp_qoriq: fix memory leak in probe()
- net: dsa: microchip: ksz8: fix ksz8_fdb_dump()
- net: dsa: microchip: ksz8: fix ksz8_fdb_dump() to extract all 1024 entries
- net: dsa: microchip: ksz8: fix offset for the timestamp filed
- net: dsa: microchip: ksz8: ksz8_fdb_dump: avoid extracting ghost entry from
empty dynamic MAC table.
- net: dsa: microchip: ksz8863_smi: fix bulk access
- net: dsa: microchip: ksz8: fix MDB configuration with non-zero VID
- r8169: fix RTL8168H and RTL8107E rx crc error
- regulator: Handle deferred clk
- net/net_failover: fix txq exceeding warning
- net: stmmac: don't reject VLANs when IFF_PROMISC is set
- drm/i915/pmu: Use functions common with sysfs to read actual freq
- drm/i915/tc: Fix the ICL PHY ownership check in TC-cold state
- drm/i915/perf: Drop wakeref on GuC RC error
- platform/x86/intel/pmc: Alder Lake PCH slp_s0_residency fix
- can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write
- s390/vfio-ap: fix memory leak in vfio_ap device driver
- ACPI: bus: Rework system-level device notification handling
- loop: LOOP_CONFIGURE: send uevents for partitions
- net: mvpp2: classifier flow fix fragmentation flags
- net: mvpp2: parser fix QinQ
- net: mvpp2: parser fix PPPoE
- smsc911x: avoid PHY being resumed when interface is not up
- ice: Fix ice_cfg_rdma_fltr() to only update relevant fields
- ice: add profile conflict check for AVF FDIR
- ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg()
- net: ethernet: mtk_eth_soc: fix tx throughput regression with direct 1G
links
- ALSA: ymfpci: Create card with device-managed snd_devm_card_new()
- ALSA: ymfpci: Fix BUG_ON in probe function
- net: wwan: iosm: fixes 7560 modem crash
- drm/nouveau/kms: Fix backlight registration
- net: ipa: compute DMA pool size properly
- bnx2x: use the right build_skb() helper
- i40e: fix registers dump after run ethtool adapter self test
- bnxt_en: Fix reporting of test result in ethtool selftest
- bnxt_en: Fix typo in PCI id to device description string mapping
- bnxt_en: Add missing 200G link speed reporting
- net: dsa: mv88e6xxx: Enable IGMP snooping on user ports only
- net: dsa: sync unicast and multicast addresses for VLAN filters too
- net: ethernet: mtk_eth_soc: fix flow block refcounting logic
- net: ethernet: mtk_eth_soc: fix L2 offloading with DSA untag offload
- net: ethernet: mtk_eth_soc: add missing ppe cache flush when deleting a flow
- pinctrl: ocelot: Fix alt mode for ocelot
- Input: xpad - fix incorrectly applied patch for MAP_PROFILE_BUTTON
- iommu/vt-d: Allow zero SAGAW if second-stage not supported
- Revert "venus: firmware: Correct non-pix start and end addresses"
- Input: i8042 - add TUXEDO devices to i8042 quirk tables for partial fix
- Input: alps - fix compatibility with -funsigned-char
- Input: focaltech - use explicitly signed char type
- cifs: prevent infinite recursion in CIFSGetDFSRefer()
- cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL
- Input: i8042 - add quirk for Fujitsu Lifebook A574/H
- Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table
- btrfs: fix deadlock when aborting transaction during relocation with scrub
- btrfs: fix race between quota disable and quota assign ioctls
- btrfs: scan device in non-exclusive mode
- btrfs: ignore fiemap path cache when there are multiple paths for a node
- zonefs: Do not propagate iomap_dio_rw() ENOTBLK error to user space
- io_uring/poll: clear single/double poll flags on poll arming
- io_uring/rsrc: fix rogue rsrc node grabbing
- io_uring: fix poll/netmsg alloc caches
- vmxnet3: use gro callback when UPT is enabled
- zonefs: Always invalidate last cached page on append write
- dm: fix __send_duplicate_bios() to always allow for splitting IO
- can: j1939: prevent deadlock by moving j1939_sk_errqueue()
- xen/netback: don't do grant copy across page boundary
- net: phy: dp83869: fix default value for tx-/rx-internal-delay
- modpost: Fix processing of CRCs on 32-bit build machines
- pinctrl: amd: Disable and mask interrupts on resume
- pinctrl: at91-pio4: fix domain name assignment
- platform/x86: ideapad-laptop: Stop sending KEY_TOUCHPAD_TOGGLE
- thermal: intel: int340x: processor_thermal: Fix additional deadlock
- powerpc: Don't try to copy PPR for task with NULL pt_regs
- powerpc/pseries/vas: Ignore VAS update for DLPAR if copy/paste is not
enabled
- powerpc/64s: Fix __pte_needs_flush() false positive warning
- NFSv4: Fix hangs when recovering open state after a server reboot
- ALSA: hda/conexant: Partial revert of a quirk for Lenovo
- ALSA: usb-audio: Fix regression on detection of Roland VS-100
- ALSA: hda/realtek: Add quirks for some Clevo laptops
- ALSA: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z
- xtensa: fix KASAN report for show_stack
- rcu: Fix rcu_torture_read ftrace event
- dt-bindings: mtd: jedec,spi-nor: Document CPOL/CPHA support
- s390/uaccess: add missing earlyclobber annotations to __clear_user()
- s390: reintroduce expoline dependence to scripts
- drm/etnaviv: fix reference leak when mmaping imported buffer
- drm/amdgpu: allow more APUs to do mode2 reset when go to S4
- drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub
- drm/amd/display: Take FEC Overhead into Timeslot Calculation
- drm/i915/gem: Flush lmem contents after construction
- drm/i915/dpt: Treat the DPT BO as a framebuffer
- drm/i915: Disable DC states for all commits
- drm/i915: Split icl_color_commit_noarm() from skl_color_commit_noarm()
- drm/i915: Move CSC load back into .color_commit_arm() when PSR is enabled on
skl/glk
- KVM: arm64: PMU: Fix GET_ONE_REG for vPMC regs to return the current value
- KVM: arm64: PMU: Don't save PMCR_EL0.{C,P} for the vCPU
- KVM: arm64: Retry fault if vma_lookup() results become invalid
- KVM: arm64: Disable interrupts while walking userspace PTs
- KVM: arm64: Check for kvm_vma_mte_allowed in the critical section
- usb: ucsi: Fix ucsi->connector race
- libbpf: Fix BTF-to-C converter's padding logic
- selftests/bpf: Add few corner cases to test padding handling of btf_dump
- libbpf: Fix btf_dump's packed struct determination
- drm/amdkfd: Get prange->offset after svm_range_vram_node_new
- hsr: ratelimit only when errors are printed
- x86/PVH: avoid 32-bit build warning when obtaining VGA console info
- Revert "cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*"
- Linux 6.2.10
* Lunar update: v6.2.9 upstream stable release (LP: #2016877)
- interconnect: qcom: osm-l3: fix icc_onecell_data allocation
- interconnect: qcom: sm8450: switch to qcom_icc_rpmh_* function
- interconnect: qcom: qcm2290: Fix MASTER_SNOC_BIMC_NRT
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in
perf_event_bpf_output
- perf: fix perf_event_context->time
- tracing/hwlat: Replace sched_setaffinity with set_cpus_allowed_ptr
- drm/amd/display: fix k1 k2 divider programming for phantom streams
- drm/amd/display: Remove OTG DIV register write for Virtual signals.
- drm/amd/display: Fix DP MST sinks removal issue
- arm64: dts: freescale: imx8-ss-lsio: Fix flexspi clock order
- arm64: dts: qcom: sc8280xp: Add label property to vadc channel nodes
- arm64: dts: qcom: sm6375: Add missing power-domain-named to CDSP
- arm64: dts: qcom: sm8450: correct WSA2 assigned clocks
- arm64: dts: qcom: sm8450: Mark UFS controller as cache coherent
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race
condition
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due
to race condition
- wifi: mt76: do not run mt76_unregister_device() on unregistered hw
- wifi: mt76: connac: do not check WED status for non-mmio devices
- efi: earlycon: Reprobe after parsing config tables
- arm64: dts: imx8dxl-evk: Disable hibernation mode of AR8031 for EQOS
- arm64: dts: imx8dxl-evk: Fix eqos phy reset gpio
- ARM: dts: imx6sll: e70k02: fix usbotg1 pinctrl
- ARM: dts: imx6sll: e60k02: fix usbotg1 pinctrl
- ARM: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl
- arm64: dts: imx8mn: specify #sound-dai-cells for SAI nodes
- arm64: dts: imx93: add missing #address-cells and #size-cells to i2c nodes
- NFS: Fix /proc/PID/io read_bytes for buffered reads
- xsk: Add missing overflow check in xdp_umem_reg
- iavf: fix inverted Rx hash condition leading to disabled hash
- iavf: fix non-tunneled IPv6 UDP packet type and hashing
- iavf: do not track VLAN 0 filters
- intel/igbvf: free irq on the error path in igbvf_request_msix()
- igbvf: Regard vf reset nack as success
- igc: fix the validation logic for taprio's gate list
- i2c: imx-lpi2c: check only for enabled interrupt flags
- i2c: mxs: ensure that DMA buffers are safe for DMA
- i2c: hisi: Only use the completion interrupt to finish the transfer
- scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate()
- nfsd: don't replace page in rq_pages if it's a continuation of last page
- net: dsa: b53: mmap: fix device tree support
- net: usb: smsc95xx: Limit packet length to skb->len
- qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- net: phy: Ensure state transitions are processed from phy_stop()
- net: mdio: fix owner field for mdio buses registered using device-tree
- net: mdio: fix owner field for mdio buses registered using ACPI
- net: stmmac: Fix for mismatched host/device DMA address width
- thermal/drivers/mellanox: Use generic thermal_zone_get_trip() function
- mlxsw: core_thermal: Fix fan speed in maximum cooling state
- drm/i915/fbdev: lock the fbdev obj before vma pin
- drm/i915/mtl: Disable MC6 for MTL A step
- drm/i915/guc: Rename GuC register state capture node to be more obvious
- drm/i915/guc: Fix missing ecodes
- drm/i915/gt: perform uc late init after probe error injection
- drm/i915: Fix format for perf_limit_reasons
- drm/i915: Update vblank timestamping stuff on seamless M/N change
- net: dsa: report rx_bytes unadjusted for ETH_HLEN
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: usb: lan78xx: Limit packet length to skb->len
- net/ps3_gelic_net: Fix RX sk_buff length
- net/ps3_gelic_net: Use dma_mapping_error
- octeontx2-vf: Add missing free for alloc_percpu
- bootconfig: Fix testcase to increase max node
- keys: Do not cache key in task struct if key is requested from kernel thread
- ice: check if VF exists before mode check
- iavf: fix hang on reboot with ice
- i40e: fix flow director packet filter programming
- bpf: Adjust insufficient default bpf_jit_limit
- net/mlx5e: Set uplink rep as NETNS_LOCAL
- net/mlx5e: Block entering switchdev mode with ns inconsistency
- net/mlx5: Fix steering rules cleanup
- net/mlx5e: Overcome slow response for first macsec ASO WQE
- net/mlx5: Read the TC mapping of all priorities on ETS query
- net/mlx5: E-Switch, Fix an Oops in error handling code
- net: dsa: tag_brcm: legacy: fix daisy-chained switches
- atm: idt77252: fix kmemleak when rmmod idt77252
- erspan: do not use skb_mac_header() in ndo_start_xmit()
- net: mscc: ocelot: fix stats region batching
- net/sonic: use dma_mapping_error() for error check
- nvme-tcp: fix nvme_tcp_term_pdu to match spec
- mlxsw: spectrum_fid: Fix incorrect local port type
- hvc/xen: prevent concurrent accesses to the shared ring
- ksmbd: add low bound validation to FSCTL_SET_ZERO_DATA
- ksmbd: add low bound validation to FSCTL_QUERY_ALLOCATED_RANGES
- ksmbd: fix possible refcount leak in smb2_open()
- Bluetooth: hci_sync: Resume adv with no RPA when active scan
- Bluetooth: hci_core: Detect if an ACL packet is in fact an ISO packet
- Bluetooth: btusb: Remove detection of ISO packets over bulk
- Bluetooth: ISO: fix timestamped HCI ISO data packet parsing
- Bluetooth: Remove "Power-on" check from Mesh feature
- gve: Cache link_speed value from device
- net: asix: fix modprobe "sysfs: cannot create duplicate filename"
- net: dsa: mt7530: move enabling disabling core clock to mt7530_pll_setup()
- net: dsa: mt7530: move lowering TRGMII driving to mt7530_setup()
- net: dsa: mt7530: move setting ssc_delta to PHY_INTERFACE_MODE_TRGMII case
- net: mdio: thunder: Add missing fwnode_handle_put()
- efi/libstub: Use relocated version of kernel's struct screen_info
- drm/amd/display: Set dcn32 caps.seamless_odm
- Bluetooth: btqcomsmd: Fix command timeout after setting BD address
- Bluetooth: L2CAP: Fix responding with wrong PDU type
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished
work
- Bluetooth: mgmt: Fix MGMT add advmon with RSSI command
- Bluetooth: HCI: Fix global-out-of-bounds
- platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl
- entry: Fix noinstr warning in __enter_from_user_mode()
- perf/x86/amd/core: Always clear status for idx
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- hwmon: fix potential sensor registration fail if of_node is missing
- hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs
- scsi: qla2xxx: Synchronize the IOCB count to be in order
- scsi: qla2xxx: Perform lockless command completion in abort path
- smb3: lower default deferred close timeout to address perf regression
- smb3: fix unusable share after force unmount failure
- uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2
- thunderbolt: Use scale field when allocating USB3 bandwidth
- thunderbolt: Call tb_check_quirks() after initializing adapters
- thunderbolt: Add quirk to disable CLx
- thunderbolt: Fix memory leak in margining
- thunderbolt: Disable interrupt auto clear for rings
- thunderbolt: Add missing UNSET_INBOUND_SBTX for retimer access
- thunderbolt: Use const qualifier for `ring_interrupt_index`
- thunderbolt: Rename shadowed variables bit to interrupt_bit and
auto_clear_bit
- ASoC: amd: yp: Add OMEN by HP Gaming Laptop 16z-n000 to quirks
- ASoC: Intel: sof_rt5682: Add quirk for Rex board with mx98360a amplifier
- ASoC: amd: yc: Add DMI entries to support HP OMEN 16-n0xxx (8A43)
- ACPI: x86: Drop quirk for HP Elitebook
- ACPI: x86: utils: Add Cezanne to the list for forcing StorageD3Enable
- riscv: Bump COMMAND_LINE_SIZE value to 1024
- drm/cirrus: NULL-check pipe->plane.state->fb in cirrus_pipe_update()
- HID: cp2112: Fix driver not registering GPIO IRQ chip as threaded
- ca8210: fix mac_len negative array access
- HID: logitech-hidpp: Add support for Logitech MX Master 3S mouse
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- m68k: mm: Fix systems with memory at end of 32-bit address space
- m68k: Only force 030 bus error if PC not in exception table
- selftests/bpf: check that modifier resolves after pointer
- cpumask: fix incorrect cpumask scanning result checks
- scsi: target: iscsi: Fix an error message in iscsi_check_key()
- scsi: qla2xxx: Add option to disable FC2 Target support
- scsi: hisi_sas: Check devm_add_action() return value
- scsi: ufs: core: Add soft dependency on governor_simpleondemand
- scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read()
- scsi: lpfc: Avoid usage of list iterator variable after loop
- scsi: mpi3mr: Driver unload crashes host when enhanced logging is enabled
- scsi: mpi3mr: Wait for diagnostic save during controller init
- scsi: mpi3mr: NVMe command size greater than 8K fails
- scsi: mpi3mr: Bad drive in topology results kernel crash
- scsi: storvsc: Handle BlockSize change in Hyper-V VHD/VHDX file
- platform/x86: int3472: Add GPIOs to Surface Go 3 Board data
- net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990
- net: usb: qmi_wwan: add Telit 0x1080 composition
- drm/amd/display: Update clock table to include highest clock setting
- sh: sanitize the flags on sigreturn
- drm/amdgpu: Fix call trace warning and hang when removing amdgpu device
- drm/amd: Fix initialization mistake for NBIO 7.3.0
- net/sched: act_mirred: better wording on protection against excessive stack
growth
- act_mirred: use the backlog for nested calls to mirred ingress
- cifs: lock chan_lock outside match_session
- cifs: append path to open_enter trace event
- cifs: do not poll server interfaces too regularly
- cifs: empty interface list when server doesn't support query interfaces
- cifs: dump pending mids for all channels in DebugData
- cifs: print session id while listing open files
- cifs: fix dentry lookups in directory handle cache
- x86/mm: Do not shuffle CPU entry areas without KASLR
- x86/fpu/xstate: Prevent false-positive warning in __copy_xstate_uabi_buf()
- selftests/x86/amx: Add a ptrace test
- scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR
- usb: misc: onboard-hub: add support for Microchip USB2517 USB 2.0 hub
- usb: dwc2: fix a race, don't power off/on phy for dual-role mode
- usb: dwc2: drd: fix inconsistent mode if role-switch-default-mode="host"
- usb: dwc2: fix a devres leak in hw_enable upon suspend resume
- block/io_uring: pass in issue_flags for uring_cmd task_work handling
- usb: gadget: u_audio: don't let userspace block driver unbind
- btrfs: zoned: fix btrfs_can_activate_zone() to support DUP profile
- Bluetooth: Fix race condition in hci_cmd_sync_clear
- efi: sysfb_efi: Fix DMI quirks not working for simpledrm
- mm/slab: Fix undefined init_cache_node_node() for NUMA and !SMP
- efi/libstub: zboot: Mark zboot EFI application as NX compatible
- arm64: efi: Set NX compat flag in PE/COFF header
- fscrypt: destroy keyring after security_sb_delete()
- fsverity: Remove WQ_UNBOUND from fsverity read workqueue
- lockd: set file_lock start and end when decoding nlm4 testargs
- arm64: dts: imx8mm-nitrogen-r2: fix WM8960 clock name
- igb: revert rtnl_lock() that causes deadlock
- dm thin: fix deadlock when swapping to thin device
- usb: typec: tcpm: fix create duplicate source-capabilities file
- usb: typec: tcpm: fix warning when handle discover_identity message
- usb: cdns3: Fix issue with using incorrect PCI device function
- usb: cdnsp: Fixes issue with redundant Status Stage
- usb: cdnsp: changes PCI Device ID to fix conflict with CNDS3 driver
- usb: chipdea: core: fix return -EINVAL if request role is the same with
current role
- usb: chipidea: core: fix possible concurrent when switch role
- usb: dwc3: gadget: Add 1ms delay after end transfer command without IOC
- usb: ucsi: Fix NULL pointer deref in ucsi_connector_change()
- usb: ucsi_acpi: Increase the command completion timeout
- mm: kfence: fix using kfence_metadata without initialization in
show_object()
- kfence: avoid passing -g for test
- io_uring/net: avoid sending -ECONNABORTED on repeated connection requests
- io_uring/rsrc: fix null-ptr-deref in io_file_bitmap_get()
- Revert "kasan: drop skip_kasan_poison variable in free_pages_prepare"
- kcsan: avoid passing -g for test
- test_maple_tree: add more testing for mas_empty_area()
- maple_tree: fix mas_skip_node() end slot detection
- ksmbd: fix wrong signingkey creation when encryption is AES256
- ksmbd: set FILE_NAMED_STREAMS attribute in FS_ATTRIBUTE_INFORMATION
- ksmbd: don't terminate inactive sessions after a few seconds
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect
- ksmbd: return unsupported error on smb1 mount
- wifi: mac80211: fix qos on mesh interfaces
- wifi: mac80211: Serialize ieee80211_handle_wake_tx_queue()
- nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy()
- drm/bridge: lt8912b: return EPROBE_DEFER if bridge is not found
- drm/amd/display: fix wrong index used in dccg32_set_dpstreamclk
- drm/meson: fix missing component unbind on bind errors
- drm/amdgpu/nv: Apply ASPM quirk on Intel ADL + AMD Navi
- drm/i915/active: Fix missing debug object activation
- drm/i915: Preserve crtc_state->inherited during state clearing
- drm/amdgpu: skip ASIC reset for APUs when go to S4
- drm/amdgpu: reposition the gpu reset checking for reuse
- riscv: mm: Fix incorrect ASID argument when flushing TLB
- riscv: Handle zicsr/zifencei issues between clang and binutils
- tee: amdtee: fix race condition in amdtee_open_session
- firmware: arm_scmi: Fix device node validation for mailbox transport
- arm64: dts: qcom: sc8280xp-x13s: mark s11b regulator as always-on
- arm64: dts: qcom: sc7280: Mark PCIe controller as cache coherent
- arm64: dts: qcom: sm8150: Fix the iommu mask used for PCIe controllers
- soc: qcom: llcc: Fix slice configuration values for SC8280XP
- mm/ksm: fix race with VMA iteration and mm_struct teardown
- bus: imx-weim: fix branch condition evaluates to a garbage value
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- dm stats: check for and propagate alloc_percpu failure
- dm crypt: add cond_resched() to dmcrypt_write()
- dm crypt: avoid accessing uninitialized tasklet
- sched/fair: sanitize vruntime of entity being placed
- sched/fair: Sanitize vruntime of entity being migrated
- Linux 6.2.9
- [Config] ppc64: updateconfigs following v6.2.9 stable updates
* Lunar update: v6.2.8 upstream stable release (LP: #2016876)
- xfrm: Allow transport-mode states with AF_UNSPEC selector
- drm/virtio: Pass correct device to dma_sync_sgtable_for_device()
- drm/msm/gem: Prevent blocking within shrinker loop
- drm/panfrost: Don't sync rpm suspension after mmu flushing
- fbdev: chipsfb: Fix error codes in chipsfb_pci_init()
- cifs: Move the in_send statistic to __smb_send_rqst()
- drm/meson: fix 1px pink line on GXM when scaling video overlay
- clk: HI655X: select REGMAP instead of depending on it
- selftests: amd-pstate: fix TEST_FILES
- ASoC: SOF: Intel: MTL: Fix the device description
- ASoC: SOF: Intel: HDA: Fix device description
- ASoC: SOF: Intel: SKL: Fix device description
- ASOC: SOF: Intel: pci-tgl: Fix device description
- ASoC: SOF: ipc4-topology: set dmic dai index from copier
- docs: Correct missing "d_" prefix for dentry_operations member
d_weak_revalidate
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpi3mr: Fix throttle_groups memory leak
- scsi: mpi3mr: Fix config page DMA memory leak
- scsi: mpi3mr: Fix mpi3mr_hba_port memory leak in mpi3mr_remove()
- scsi: mpi3mr: Fix sas_hba.phy memory leak in mpi3mr_remove()
- scsi: mpi3mr: Return proper values for failures in firmware init path
- scsi: mpi3mr: Fix memory leaks in mpi3mr_init_ioc()
- scsi: mpi3mr: ioctl timeout when disabling/enabling interrupt
- scsi: mpi3mr: Fix expander node leak in mpi3mr_remove()
- ALSA: hda: Match only Intel devices with CONTROLLER_IN_GPU()
- netfilter: nft_nat: correct length for loading protocol registers
- netfilter: nft_masq: correct length for loading protocol registers
- netfilter: nft_redir: correct length for loading protocol registers
- netfilter: nft_redir: correct value of inet type `.maxattrs`
- scsi: core: Add BLIST_NO_VPD_SIZE for some VDASD
- scsi: core: Fix a procfs host directory removal regression
- ftrace,kcfi: Define ftrace_stub_graph conditionally
- tcp: tcp_make_synack() can be called from process context
- vdpa/mlx5: should not activate virtq object when suspended
- wifi: nl80211: fix NULL-ptr deref in offchan check
- wifi: cfg80211: fix MLO connection ownership
- selftests: fix LLVM build for i386 and x86_64
- nfc: pn533: initialize struct pn533_out_arg properly
- ipvlan: Make skb->skb_iif track skb->dev for l3s mode
- i40e: Fix kernel crash during reboot when adapter is in recovery mode
- vhost-vdpa: free iommu domain after last use during cleanup
- vdpa_sim: not reset state in vdpasim_queue_ready
- vdpa_sim: set last_used_idx as last_avail_idx in vdpasim_queue_ready
- PCI: s390: Fix use-after-free of PCI resources with per-function hotplug
- bnxt_en: reset PHC frequency in free-running mode
- net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler()
- qed/qed_dev: guard against a possible division by zero
- net: dsa: mt7530: remove now incorrect comment regarding port 5
- net: dsa: mt7530: set PLL frequency and trgmii only when trgmii is used
- block: do not reverse request order when flushing plug list
- loop: Fix use-after-free issues
- blk-mq: fix "bad unlock balance detected" on q->srcu in
__blk_mq_run_dispatch_ops
- net: tunnels: annotate lockless accesses to dev->needed_headroom
- net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails
- tcp: Fix bind() conflict check for dual-stack wildcard address.
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- mlxsw: spectrum: Fix incorrect parsing depth after reload
- net/smc: fix deadlock triggered by cancel_delayed_work_syn()
- net: usb: smsc75xx: Limit packet length to skb->len
- net: ethernet: mtk_eth_soc: reset PCS state
- net: ethernet: mtk_eth_soc: only write values if needed
- drm/bridge: Fix returned array size name for atomic_get_input_bus_fmts kdoc
- powerpc/mm: Fix false detection of read faults
- block: null_blk: Fix handling of fake timeout request
- nvme: fix handling single range discard request
- nvmet: avoid potential UAF in nvmet_req_complete()
- block: sunvdc: add check for mdesc_grab() returning NULL
- block: count 'ios' and 'sectors' when io is done for bio-based device
- net/mlx5e: Fix macsec ASO context alignment
- net/mlx5e: Don't cache tunnel offloads capability
- net/mlx5: Fix setting ec_function bit in MANAGE_PAGES
- net/mlx5: Disable eswitch before waiting for VF pages
- net/mlx5: E-switch, Fix wrong usage of source port rewrite in split rules
- net/mlx5: E-switch, Fix missing set of split_count when forward to ovs
internal port
- net/mlx5e: Fix cleanup null-ptr deref on encap lock
- net/mlx5: Set BREAK_FW_WAIT flag first when removing driver
- veth: Fix use after free in XDP_REDIRECT
- ice: xsk: disable txq irq before flushing hw
- net: dsa: don't error out when drivers return ETH_DATA_LEN in
.port_max_mtu()
- net: dsa: mv88e6xxx: fix max_mtu of 1492 on 6165, 6191, 6220, 6250, 6290
- ravb: avoid PHY being resumed when interface is not up
- sh_eth: avoid PHY being resumed when interface is not up
- ipv4: Fix incorrect table ID in IOCTL path
- net: usb: smsc75xx: Move packet length check to prevent kernel panic in
skb_pull
- net: atlantic: Fix crash when XDP is enabled but no program is loaded
- net/iucv: Fix size of interrupt data
- i825xx: sni_82596: use eth_hw_addr_set()
- qed/qed_mng_tlv: correctly zero out ->min instead of ->hour
- net: dsa: microchip: fix RGMII delay configuration on
KSZ8765/KSZ8794/KSZ8795
- ethernet: sun: add check for the mdesc_grab()
- net: renesas: rswitch: Rename rings in struct rswitch_gwca_queue
- net: renesas: rswitch: Fix the output value of quote from rswitch_rx()
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- hwmon: (adt7475) Display smoothing attributes in correct order
- hwmon: (adt7475) Fix masking of hysteresis registers
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race
condition
- hwmon: (ina3221) return prober error code
- hwmon: (ucd90320) Add minimum delay between bus accesses
- hwmon: tmp512: drop of_match_ptr for ID table
- kconfig: Update config changed flag before calling callback
- hwmon: (adm1266) Set `can_sleep` flag for GPIO chip
- hwmon: (ltc2992) Set `can_sleep` flag for GPIO chip
- media: m5mols: fix off-by-one loop termination error
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix task hung in ext4_xattr_delete_inode
- drm/amdkfd: Fix an illegal memory access
- net/9p: fix bug in client create for .L
- LoongArch: Only call get_timer_irq() once in constant_clockevent_init()
- sh: intc: Avoid spurious sizeof-pointer-div warning
- drm/amdgpu: fix ttm_bo calltrace warning in psp_hw_fini
- drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes
- ext4: fix possible double unlock when moving a directory
- Revert "tty: serial: fsl_lpuart: adjust SERIAL_FSL_LPUART_CONSOLE config
dependency"
- tty: serial: fsl_lpuart: fix race on RX DMA shutdown
- tty: serial: fsl_lpuart: skip waiting for transmission complete when
UARTCTRL_SBK is asserted
- serial: 8250_em: Fix UART port type
- serial: 8250_fsl: fix handle_irq locking
- serial: 8250: ASPEED_VUART: select REGMAP instead of depending on it
- firmware: xilinx: don't make a sleepable memory allocation from an atomic
context
- memory: tegra: fix interconnect registration race
- memory: tegra20-emc: fix interconnect registration race
- memory: tegra124-emc: fix interconnect registration race
- memory: tegra30-emc: fix interconnect registration race
- drm/ttm: Fix a NULL pointer dereference
- s390/ipl: add missing intersection check to ipl_report handling
- interconnect: fix icc_provider_del() error handling
- interconnect: fix provider registration API
- interconnect: imx: fix registration race
- interconnect: fix mem leak when freeing nodes
- interconnect: qcom: osm-l3: fix registration race
- interconnect: qcom: rpm: fix probe child-node error handling
- interconnect: qcom: rpm: fix registration race
- interconnect: qcom: rpmh: fix probe child-node error handling
- interconnect: qcom: rpmh: fix registration race
- interconnect: qcom: msm8974: fix registration race
- interconnect: exynos: fix node leak in probe PM QoS error path
- interconnect: exynos: fix registration race
- md: select BLOCK_LEGACY_AUTOLOAD
- cifs: generate signkey for the channel that's reconnecting
- tracing: Make splice_read available again
- tracing: Do not let histogram values have some modifiers
- tracing: Check field value in hist_field_name()
- tracing: Make tracepoint lockdep check actually test something
- cifs: Fix smb2_set_path_size()
- cifs: set DFS root session in cifs_get_smb_ses()
- cifs: fix use-after-free bug in refresh_cache_worker()
- cifs: return DFS root session id in DebugData
- cifs: use DFS root session instead of tcon ses
- KVM: SVM: Fix a benign off-by-one bug in AVIC physical table mask
- KVM: SVM: Modify AVIC GATag to support max number of 512 vCPUs
- ALSA: hda: intel-dsp-config: add MTL PCI id
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro
- Revert "riscv: mm: notify remote harts about mmu cache updates"
- riscv: asid: Fixup stale TLB entry cause application crash
- drm/edid: fix info leak when failing to get panel id
- drm/shmem-helper: Remove another errant put in error path
- drm/sun4i: fix missing component unbind on bind errors
- drm/i915/active: Fix misuse of non-idle barriers as fence trackers
- drm/i915/dg2: Add HDMI pixel clock frequencies 267.30 and 319.89 MHz
- drm/amdgpu: Don't resume IOMMU after incomplete init
- drm/amd/pm: Fix sienna cichlid incorrect OD volage after resume
- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
- drm/amd/pm: bump SMU 13.0.4 driver_if header version
- drm/amd/display: Do not set DRR on pipe Commit
- drm/amd/display: disconnect MPCC only on OTG change
- drm/amd/display: Write to correct dirty_rect
- mptcp: fix possible deadlock in subflow_error_report
- mptcp: refactor passive socket initialization
- mptcp: use the workqueue to destroy unaccepted sockets
- mptcp: fix UaF in listener shutdown
- mptcp: add ro_after_init for tcp{,v6}_prot_override
- mptcp: avoid setting TCP_CLOSE state twice
- mptcp: fix lockdep false positive in mptcp_pm_nl_create_listen_socket()
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- ocfs2: fix data corruption after failed write
- nvme-pci: add NVME_QUIRK_BOGUS_NID for Netac NV3000
- ice: avoid bonding causing auxiliary plug/unplug under RTNL lock
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- mm/userfaultfd: propagate uffd-wp bit when PTE-mapping the huge zeropage
- mm: teach mincore_hugetlb about pte markers
- powerpc/64: Set default CPU in Kconfig
- powerpc/boot: Don't always pass -mcpu=powerpc when building 32-bit uImage
- mmc: sdhci_am654: lower power-on failed message severity
- fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks
- trace/hwlat: Do not wipe the contents of per-cpu thread data
- trace/hwlat: Do not start per-cpu thread if it is already running
- ACPI: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent
- net: phy: nxp-c45-tja11xx: fix MII_BASIC_CONFIG_REV bit
- fbdev: Fix incorrect page mapping clearance at fb_deferred_io_release()
- RISC-V: mm: Support huge page in vmalloc_fault()
- io_uring/msg_ring: let target know allocated index
- cpuidle: psci: Iterate backwards over list in psci_pd_remove()
- ASoC: Intel: soc-acpi: fix copy-paste issue in topology names
- ASoC: qcom: q6prm: fix incorrect clk_root passed to ADSP
- x86/mce: Make sure logged MCEs are processed after sysfs update
- x86/mm: Fix use of uninitialized buffer in sme_enable()
- x86/resctrl: Clear staged_config[] before and after it is used
- powerpc: Pass correct CPU reference to assembler
- virt/coco/sev-guest: Check SEV_SNP attribute at probe time
- virt/coco/sev-guest: Simplify extended guest request handling
- virt/coco/sev-guest: Remove the disable_vmpck label in
handle_guest_request()
- virt/coco/sev-guest: Carve out the request issuing logic into a helper
- virt/coco/sev-guest: Do some code style cleanups
- virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case
- virt/coco/sev-guest: Add throttling awareness
- perf: Fix check before add_event_to_groups() in perf_group_detach()
- powerpc: Disable CPU unknown by CLANG when CC_IS_CLANG
- powerpc/64: Replace -mcpu=e500mc64 by -mcpu=e5500
- Linux 6.2.8
- [Config] ppc64: updateconfigs following v6.2.8 stable updates
* Lunar update: v6.2.8 upstream stable release (LP: #2016876) //
CVE-2023-30456
- KVM: nVMX: add missing consistency checks for CR0 and CR4
* Lunar update: v6.2.7 upstream stable release (LP: #2016875)
- fs: prevent out-of-bounds array speculation when closing a file descriptor
- btrfs: fix unnecessary increment of read error stat on write error
- btrfs: fix percent calculation for bg reclaim message
- btrfs: fix block group item corruption after inserting new block group
- io_uring/uring_cmd: ensure that device supports IOPOLL
- erofs: fix wrong kunmap when using LZMA on HIGHMEM platforms
- perf inject: Fix --buildid-all not to eat up MMAP2
- fork: allow CLONE_NEWTIME in clone3 flags
- RISC-V: Stop emitting attributes
- thermal: intel: int340x: processor_thermal: Fix deadlock
- x86/CPU/AMD: Disable XSAVES on AMD family 0x17
- drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc15
- drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc21
- drm/amdgpu: fix error checking in amdgpu_read_mm_registers for nv
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
- drm/connector: print max_requested_bpc in state debugfs
- drm/msm/adreno: fix runtime PM imbalance at unbind
- staging: rtl8723bs: Fix key-store index handling
- staging: rtl8723bs: Pass correct parameters to cfg80211_get_bss()
- ext4: fix cgroup writeback accounting with fs-layer encryption
- ext4: fix RENAME_WHITEOUT handling for inline directories
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- ext4: move where set the MAY_INLINE_DATA flag is set
- ext4: fix WARNING in ext4_update_inline_data
- ext4: zero i_disksize when initializing the bootloader inode
- HID: core: Provide new max_buffer_size attribute to over-ride the default
- HID: uhid: Over-ride the default maximum data buffer value with our own
- nfc: change order inside nfc_se_io error path
- KVM: VMX: Reset eVMCS controls in VP assist page during hardware disabling
- KVM: VMX: Don't bother disabling eVMCS static key on module exit
- KVM: x86: Move guts of kvm_arch_init() to standalone helper
- KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace
- udf: Fix off-by-one error when discarding preallocation
- bus: mhi: ep: Power up/down MHI stack during MHI RESET
- bus: mhi: ep: Change state_lock to mutex
- drm/i915: Introduce intel_panel_init_alloc()
- drm/i915: Do panel VBT init early if the VBT declares an explicit panel type
- drm/i915: Populate encoder->devdata for DSI on icl+
- block: Revert "block: Do not reread partition table on exclusively open
device"
- block: fix scan partition for exclusively open device again
- riscv: Add header include guards to insn.h
- scsi: core: Remove the /proc/scsi/${proc_name} directory earlier
- ext4: Fix possible corruption when moving a directory
- drm/nouveau/kms/nv50: fix nv50_wndw_new_ prototype
- drm/nouveau/fb/gp102-: cache scrubber binary on first load
- drm/msm: Fix potential invalid ptr free
- drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register
- drm/msm/a5xx: fix highest bank bit for a530
- drm/msm/a5xx: fix the emptyness check in the preempt code
- drm/msm/a5xx: fix context faults during ring switch
- bgmac: fix *initial* chip reset to support BCM5358
- nfc: fdp: add null check of devm_kmalloc_array in
fdp_nci_i2c_read_device_properties
- powerpc: dts: t1040rdb: fix compatible string for Rev A boards
- tls: rx: fix return value for async crypto
- drm/msm/dpu: disable features unsupported by QCM2290
- ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping()
- net: lan966x: Fix port police support using tc-matchall
- selftests: nft_nat: ensuring the listening side is up before starting the
client
- netfilter: nft_last: copy content when cloning expression
- netfilter: nft_quota: copy content when cloning expression
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and
do_tls_setsockopt_conf()
- net: use indirect calls helpers for sk_exit_memory_pressure()
- perf stat: Fix counting when initial delay configured
- net: lan78xx: fix accessing the LAN7800's internal phy specific registers
from the MAC driver
- net: caif: Fix use-after-free in cfusbl_device_notify()
- ice: copy last block omitted in ice_get_module_eeprom()
- nfp: fix incorrectly set csum flag for nfd3 path
- nfp: fix esp-tx-csum-offload doesn't take effect
- bpf, sockmap: Fix an infinite loop error when len is 0 in
tcp_bpf_recvmsg_parser()
- drm/msm/dpu: fix len of sc7180 ctl blocks
- drm/msm/dpu: fix sm6115 and qcm2290 mixer width limits
- drm/msm/dpu: correct sm8250 and sm8350 scaler
- drm/msm/dpu: correct sm6115 scaler
- drm/msm/dpu: drop DPU_DIM_LAYER from MIXER_MSM8998_MASK
- drm/msm/dpu: fix clocks settings for msm8998 SSPP blocks
- drm/msm/disp/dpu: fix sc7280_pp base offset
- drm/msm/dpu: clear DSPP reservations in rm release
- net: stmmac: add to set device wake up flag when stmmac init phy
- net: phylib: get rid of unnecessary locking
- bnxt_en: Avoid order-5 memory allocation for TPA data
- netfilter: ctnetlink: revert to dumping mark regardless of event type
- netfilter: tproxy: fix deadlock due to missing BH disable
- m68k: mm: Move initrd phys_to_virt handling after paging_init()
- btrfs: fix extent map logging bit not cleared for split maps after dropping
range
- bpf, test_run: fix &xdp_frame misplacement for LIVE_FRAMES
- btf: fix resolving BTF_KIND_VAR after ARRAY, STRUCT, UNION, PTR
- net: phy: smsc: fix link up detection in forced irq mode
- net: ethernet: mtk_eth_soc: fix RX data corruption issue
- net: tls: fix device-offloaded sendpage straddling records
- scsi: megaraid_sas: Update max supported LD IDs to 240
- scsi: sd: Fix wrong zone_write_granularity value during revalidate
- netfilter: conntrack: adopt safer max chain length
- platform/x86: dell-ddv: Return error if buffer is empty
- platform/x86: dell-ddv: Fix temperature scaling
- platform: mellanox: select REGMAP instead of depending on it
- platform: x86: MLX_PLATFORM: select REGMAP instead of depending on it
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- NFSD: Protect against filesystem freezing
- ice: Fix DSCP PFC TLV creation
- ethernet: ice: avoid gcc-9 integer overflow warning
- net/smc: fix fallback failed while sendmsg with fastopen
- octeontx2-af: Unlock contexts in the queue context cache in case of fault
detection
- SUNRPC: Fix a server shutdown leak
- net: dsa: mt7530: permit port 5 to work without port 6 on MT7621 SoC
- af_unix: fix struct pid leaks in OOB support
- erofs: Revert "erofs: fix kvcalloc() misuse with __GFP_NOFAIL"
- riscv: Use READ_ONCE_NOCHECK in imprecise unwinding stack mode
- RISC-V: Don't check text_mutex during stop_machine
- drm/amdgpu: fix return value check in kfd
- ext4: Fix deadlock during directory rename
- RISC-V: take text_mutex during alternative patching
- drm/amdgpu/soc21: don't expose AV1 if VCN0 is harvested
- drm/amdgpu/soc21: Add video cap query support for VCN_4_0_4
- watch_queue: fix IOC_WATCH_QUEUE_SET_SIZE alloc error paths
- tpm/eventlog: Don't abort tpm_read_log on faulty ACPI address
- MIPS: Fix a compilation issue
- powerpc/64: Don't recurse irq replay
- powerpc/iommu: fix memory leak with using debugfs_lookup()
- clk: renesas: rcar-gen3: Disable R-Car H3 ES1.*
- powerpc: Remove __kernel_text_address() in show_instructions()
- powerpc/bpf/32: Only set a stack frame when necessary
- powerpc/64: Fix task_cpu in early boot when booting non-zero cpuid
- powerpc/64: Move paca allocation to early_setup()
- powerpc/kcsan: Exclude udelay to prevent recursive instrumentation
- alpha: fix R_ALPHA_LITERAL reloc for large modules
- macintosh: windfarm: Use unsigned type for 1-bit bitfields
- PCI: Add SolidRun vendor ID
- scripts: handle BrokenPipeError for python scripts
- media: ov5640: Fix analogue gain control
- media: rc: gpio-ir-recv: add remove function
- drm/amd/display: Allow subvp on vactive pipes that are 2560x1440@60
- drm/amd/display: adjust MALL size available for DCN32 and DCN321
- filelocks: use mount idmapping for setlease permission check
- Revert "bpf, test_run: fix &xdp_frame misplacement for LIVE_FRAMES"
- RISC-V: fix taking the text_mutex twice during sifive errata patching
- UML: define RUNTIME_DISCARD_EXIT
- Linux 6.2.7
* Miscellaneous Ubuntu changes
- [Packaging] Move final-checks script to debian/scripts/checks
- [Packaging] checks/final-checks: Honor 'do_skip_checks'
- [Packaging] Drop wireguard DKMS
- [Packaging] Remove update-version-dkms
- [Packaging] debian/rules: Add DKMS info to 'printenv' output
* Miscellaneous upstream changes
- Revert "Revert "mm: kfence: apply kmemleak_ignore_phys on early allocated
pool""
[ Ubuntu: 6.2.0-21.21 ]
* lunar/linux: 6.2.0-21.21 -proposed tracker (LP: #2016249)
* efivarfs:efivarfs.sh in ubuntu_kernel_selftests crash L-6.2 ARM64 node
dazzle (rcu_preempt detected stalls) (LP: #2015741)
- efi/libstub: smbios: Use length member instead of record struct size
- arm64: efi: Use SMBIOS processor version to key off Ampere quirk
- efi/libstub: smbios: Drop unused 'recsize' parameter
* Miscellaneous Ubuntu changes
- SAUCE: selftests/bpf: ignore pointer types check with clang
- SAUCE: selftests/bpf: avoid conflicting data types in profiler.inc.h
- [Packaging] get rid of unnecessary artifacts in linux-headers
* Miscellaneous upstream changes
- Revert "UBUNTU: SAUCE: Revert "efi: random: refresh non-volatile random seed
when RNG is initialized""
- Revert "UBUNTU: SAUCE: Revert "efi: random: fix NULL-deref when refreshing
seed""
-- Khalid Elmously <email address hidden> Sun, 11 Jun 2023 23:37:22 -0400
-
linux-oracle (6.2.0-1004.4) lunar; urgency=medium
* lunar/linux-oracle: 6.2.0-1004.4 -proposed tracker (LP: #2016277)
* Kernel 6.1 bumped the disk consumption on default images by 15%
(LP: #2015867)
- [Config] disable Rust support
* Miscellaneous Ubuntu changes
- rebase on Ubuntu-6.2.0-21.21
* Rebase to Ubuntu-6.2.0-21.21
-- Paolo Pisati <email address hidden> Fri, 14 Apr 2023 13:29:41 +0200
-
linux-oracle (6.2.0-1003.3) lunar; urgency=medium
* lunar/linux-oracle: 6.2.0-1003.3 -proposed tracker (LP: #2015433)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/master)
[ Ubuntu: 6.2.0-20.20 ]
* lunar/linux: 6.2.0-20.20 -proposed tracker (LP: #2015429)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/master)
* FTBFS with different dkms or when makeflags are set (LP: #2015361)
- [Packaging] FTBFS with different dkms or when makeflags are set
* expoline.o is packaged unconditionally for s390x (LP: #2013209)
- [Packaging] Copy expoline.o only when produced by the build
* net:l2tp.sh failure with lunar:linux 6.2 (LP: #2013014)
- SAUCE: l2tp: generate correct module alias strings
* Miscellaneous Ubuntu changes
- [Packaging] annotations: prevent duplicate include lines
[ Ubuntu: 6.2.0-19.19 ]
* lunar/linux: 6.2.0-19.19 -proposed tracker (LP: #2012488)
* Neuter signing tarballs (LP: #2012776)
- [Packaging] neuter the signing tarball
* LSM stacking and AppArmor refresh for 6.2 kernel (LP: #2012136)
- Revert "UBUNTU: [Config] define CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS"
- Revert "UBUNTU: SAUCE: apparmor: add user namespace creation mediation"
- Revert "UBUNTU: SAUCE: apparmor: Add fine grained mediation of posix
mqueues"
- Revert "UBUNTU: SAUCE: Revert "apparmor: make __aa_path_perm() static""
- Revert "UBUNTU: SAUCE: LSM: Specify which LSM to display (using struct cred
as input)"
- Revert "UBUNTU: SAUCE: apparmor: Fix build error, make sk parameter const"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in smk_netlbl_mls()"
- Revert "UBUNTU: SAUCE: LSM: change ima_read_file() to use lsmblob"
- Revert "UBUNTU: SAUCE: apparmor: rename kzfree() to kfree_sensitive()"
- Revert "UBUNTU: SAUCE: AppArmor: Remove the exclusive flag"
- Revert "UBUNTU: SAUCE: LSM: Add /proc attr entry for full LSM context"
- Revert "UBUNTU: SAUCE: Audit: Fix incorrect static inline function
declration."
- Revert "UBUNTU: SAUCE: Audit: Fix for missing NULL check"
- Revert "UBUNTU: SAUCE: Audit: Add a new record for multiple object LSM
attributes"
- Revert "UBUNTU: SAUCE: Audit: Add new record for multiple process LSM
attributes"
- Revert "UBUNTU: SAUCE: NET: Store LSM netlabel data in a lsmblob"
- Revert "UBUNTU: SAUCE: LSM: security_secid_to_secctx in netlink netfilter"
- Revert "UBUNTU: SAUCE: LSM: Use lsmcontext in security_inode_getsecctx"
- Revert "UBUNTU: SAUCE: LSM: Use lsmcontext in security_secid_to_secctx"
- Revert "UBUNTU: SAUCE: LSM: Ensure the correct LSM context releaser"
- Revert "UBUNTU: SAUCE: LSM: Specify which LSM to display"
- Revert "UBUNTU: SAUCE: IMA: Change internal interfaces to use lsmblobs"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_cred_getsecid"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_inode_getsecid"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_task_getsecid"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_ipc_getsecid"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_secid_to_secctx"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_secctx_to_secid"
- Revert "UBUNTU: SAUCE: net: Prepare UDS for security module stacking"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_kernel_act_as"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_audit_rule_match"
- Revert "UBUNTU: SAUCE: LSM: Create and manage the lsmblob data structure."
- Revert "UBUNTU: SAUCE: LSM: Infrastructure management of the sock security"
- Revert "UBUNTU: SAUCE: apparmor: LSM stacking: switch from SK_CTX() to
aa_sock()"
- Revert "UBUNTU: SAUCE: apparmor: rename aa_sock() to aa_unix_sk()"
- Revert "UBUNTU: SAUCE: apparmor: disable showing the mode as part of a secid
to secctx"
- Revert "UBUNTU: SAUCE: apparmor: fix use after free in sk_peer_label"
- Revert "UBUNTU: SAUCE: apparmor: af_unix mediation"
- Revert "UBUNTU: SAUCE: apparmor: patch to provide compatibility with v2.x
net rules"
- Revert "UBUNTU: SAUCE: apparmor: add/use fns to print hash string hex value"
- SAUCE: apparmor: rename SK_CTX() to aa_sock and make it an inline fn
- SAUCE: apparmor: Add sysctls for additional controls of unpriv userns
restrictions
- SAUCE: Stacking v38: LSM: Identify modules by more than name
- SAUCE: Stacking v38: LSM: Add an LSM identifier for external use
- SAUCE: Stacking v38: LSM: Identify the process attributes for each module
- SAUCE: Stacking v38: LSM: Maintain a table of LSM attribute data
- SAUCE: Stacking v38: proc: Use lsmids instead of lsm names for attrs
- SAUCE: Stacking v38: integrity: disassociate ima_filter_rule from
security_audit_rule
- SAUCE: Stacking v38: LSM: Infrastructure management of the sock security
- SAUCE: Stacking v38: LSM: Add the lsmblob data structure.
- SAUCE: Stacking v38: LSM: provide lsm name and id slot mappings
- SAUCE: Stacking v38: IMA: avoid label collisions with stacked LSMs
- SAUCE: Stacking v38: LSM: Use lsmblob in security_audit_rule_match
- SAUCE: Stacking v38: LSM: Use lsmblob in security_kernel_act_as
- SAUCE: Stacking v38: LSM: Use lsmblob in security_secctx_to_secid
- SAUCE: Stacking v38: LSM: Use lsmblob in security_secid_to_secctx
- SAUCE: Stacking v38: LSM: Use lsmblob in security_ipc_getsecid
- SAUCE: Stacking v38: LSM: Use lsmblob in security_current_getsecid
- SAUCE: Stacking v38: LSM: Use lsmblob in security_inode_getsecid
- SAUCE: Stacking v38: LSM: Use lsmblob in security_cred_getsecid
- SAUCE: Stacking v38: LSM: Specify which LSM to display
- SAUCE: Stacking v38: LSM: Ensure the correct LSM context releaser
- SAUCE: Stacking v38: LSM: Use lsmcontext in security_secid_to_secctx
- SAUCE: Stacking v38: LSM: Use lsmcontext in security_inode_getsecctx
- SAUCE: Stacking v38: Use lsmcontext in security_dentry_init_security
- SAUCE: Stacking v38: LSM: security_secid_to_secctx in netlink netfilter
- SAUCE: Stacking v38: NET: Store LSM netlabel data in a lsmblob
- SAUCE: Stacking v38: binder: Pass LSM identifier for confirmation
- SAUCE: Stacking v38: LSM: security_secid_to_secctx module selection
- SAUCE: Stacking v38: Audit: Keep multiple LSM data in audit_names
- SAUCE: Stacking v38: Audit: Create audit_stamp structure
- SAUCE: Stacking v38: LSM: Add a function to report multiple LSMs
- SAUCE: Stacking v38: Audit: Allow multiple records in an audit_buffer
- SAUCE: Stacking v38: Audit: Add record for multiple task security contexts
- SAUCE: Stacking v38: audit: multiple subject lsm values for netlabel
- SAUCE: Stacking v38: Audit: Add record for multiple object contexts
- SAUCE: Stacking v38: netlabel: Use a struct lsmblob in audit data
- SAUCE: Stacking v38: LSM: Removed scaffolding function lsmcontext_init
- SAUCE: Stacking v38: AppArmor: Remove the exclusive flag
- SAUCE: apparmor: combine common_audit_data and apparmor_audit_data
- SAUCE: apparmor: setup slab cache for audit data
- SAUCE: apparmor: rename audit_data->label to audit_data->subj_label
- SAUCE: apparmor: pass cred through to audit info.
- SAUCE: apparmor: Improve debug print infrastructure
- SAUCE: apparmor: add the ability for profiles to have a learning cache
- SAUCE: apparmor: enable userspace upcall for mediation
- SAUCE: apparmor: cache buffers on percpu list if there is lock contention
- SAUCE: apparmor: fix policy_compat permission remap with extended
permissions
- SAUCE: apparmor: advertise availability of exended perms
- [Config] define CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS
* kinetic: apply new apparmor and LSM stacking patch set (LP: #1989983) // LSM
stacking and AppArmor refresh for 6.2 kernel (LP: #2012136)
- SAUCE: apparmor: add/use fns to print hash string hex value
- SAUCE: apparmor: patch to provide compatibility with v2.x net rules
- SAUCE: apparmor: add user namespace creation mediation
- SAUCE: apparmor: af_unix mediation
- SAUCE: apparmor: Add fine grained mediation of posix mqueues
* devlink_port_split from ubuntu_kernel_selftests.net fails on hirsute
(KeyError: 'flavour') (LP: #1937133)
- selftests: net: devlink_port_split.py: skip test if no suitable device
available
* NFS deathlock with last Kernel 5.4.0-144.161 and 5.15.0-67.74 (LP: #2009325)
- NFS: Correct timing for assigning access cache timestamp
[ Ubuntu: 6.2.0-18.18 ]
* lunar/linux: 6.2.0-18.18 -proposed tracker (LP: #2011750)
* lunar/linux 6.2 fails to boot on arm64 (LP: #2011748)
- SAUCE: Revert "efi: random: fix NULL-deref when refreshing seed"
- SAUCE: Revert "efi: random: refresh non-volatile random seed when RNG is
initialized"
[ Ubuntu: 6.2.0-17.17 ]
* lunar/linux: 6.2.0-17.17 -proposed tracker (LP: #2011593)
* lunar/linux 6.2 fails to boot on ppc64el (LP: #2011413)
- SAUCE: Revert "powerpc: remove STACK_FRAME_OVERHEAD"
- SAUCE: Revert "powerpc/pseries: hvcall stack frame overhead"
* Speaker / Audio/Mic mute LED don't work on a HP platform (LP: #2011379)
- SAUCE: ALSA: hda/realtek: fix speaker, mute/micmute LEDs not work on a HP
platform
* Some QHD panels fail to refresh when PSR2 enabled (LP: #2009014)
- SAUCE: drm/i915/psr: Use calculated io and fast wake lines
* Lunar update: v6.2.6 upstream stable release (LP: #2011431)
- tpm: disable hwrng for fTPM on some AMD designs
- wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext"
- staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script
- staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh
- Linux 6.2.6
* Lunar update: v6.2.5 upstream stable release (LP: #2011430)
- net/sched: Retire tcindex classifier
- auxdisplay: hd44780: Fix potential memory leak in hd44780_remove()
- fs/jfs: fix shift exponent db_agl2size negative
- driver: soc: xilinx: fix memory leak in xlnx_add_cb_for_notify_event()
- f2fs: don't rely on F2FS_MAP_* in f2fs_iomap_begin
- f2fs: fix to avoid potential deadlock
- objtool: Fix memory leak in create_static_call_sections()
- soc: mediatek: mtk-pm-domains: Allow mt8186 ADSP default power on
- soc: qcom: socinfo: Fix soc_id order
- memory: renesas-rpc-if: Split-off private data from struct rpcif
- memory: renesas-rpc-if: Move resource acquisition to .probe()
- soc: mediatek: mtk-svs: Enable the IRQ later
- pwm: sifive: Always let the first pwm_apply_state succeed
- pwm: stm32-lp: fix the check on arr and cmp registers update
- f2fs: introduce trace_f2fs_replace_atomic_write_block
- f2fs: clear atomic_write_task in f2fs_abort_atomic_write()
- soc: mediatek: mtk-svs: restore default voltages when svs_init02() fail
- soc: mediatek: mtk-svs: reset svs when svs_resume() fail
- soc: mediatek: mtk-svs: Use pm_runtime_resume_and_get() in svs_init01()
- f2fs: fix to do sanity check on extent cache correctly
- fs: f2fs: initialize fsdata in pagecache_write()
- f2fs: allow set compression option of files without blocks
- f2fs: fix to abort atomic write only during do_exist()
- um: vector: Fix memory leak in vector_config
- ubi: ensure that VID header offset + VID header size <= alloc, size
- ubifs: Fix build errors as symbol undefined
- ubifs: Fix memory leak in ubifs_sysfs_init()
- ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted
- ubifs: Rectify space budget for ubifs_xrename()
- ubifs: Fix wrong dirty space budget for dirty inode
- ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1
- ubifs: Reserve one leb for each journal head while doing budget
- ubi: Fix use-after-free when volume resizing failed
- ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume()
- ubifs: Fix memory leak in alloc_wbufs()
- ubi: Fix possible null-ptr-deref in ubi_free_volume()
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- ubifs: ubifs_writepage: Mark page dirty after writing inode failed
- ubifs: ubifs_releasepage: Remove ubifs_assert(0) to valid this process
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling
fastmap
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed
- f2fs: fix to handle F2FS_IOC_START_ATOMIC_REPLACE in f2fs_compat_ioctl()
- f2fs: fix to avoid potential memory corruption in __update_iostat_latency()
- f2fs: fix to update age extent correctly during truncation
- f2fs: fix to update age extent in f2fs_do_zero_range()
- soc: qcom: stats: Populate all subsystem debugfs files
- f2fs: introduce IS_F2FS_IPU_* macro
- f2fs: fix to set ipu policy
- ext4: use ext4_fc_tl_mem in fast-commit replay path
- ext4: don't show commit interval if it is zero
- netfilter: nf_tables: allow to fetch set elements when table has an owner
- x86: um: vdso: Add '%rcx' and '%r11' to the syscall clobber list
- um: virtio_uml: free command if adding to virtqueue failed
- um: virtio_uml: mark device as unregistered when breaking it
- um: virtio_uml: move device breaking into workqueue
- um: virt-pci: properly remove PCI device from bus
- f2fs: synchronize atomic write aborts
- watchdog: rzg2l_wdt: Issue a reset before we put the PM clocks
- watchdog: rzg2l_wdt: Handle TYPE-B reset for RZ/V2M
- watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in
error path
- watchdog: Fix kmemleak in watchdog_cdev_register
- watchdog: pcwd_usb: Fix attempting to access uninitialized memory
- watchdog: sbsa_wdog: Make sure the timeout programming is within the limits
- netfilter: ctnetlink: fix possible refcount leak in
ctnetlink_create_conntrack()
- netfilter: conntrack: fix rmmod double-free race
- netfilter: ip6t_rpfilter: Fix regression with VRF interfaces
- netfilter: ebtables: fix table blob use-after-free
- netfilter: xt_length: use skb len to match in length_mt6
- netfilter: ctnetlink: make event listener tracking global
- netfilter: x_tables: fix percpu counter block leak on error path when
creating new netns
- swiotlb: mark swiotlb_memblock_alloc() as __init
- ptp: vclock: use mutex to fix "sleep on atomic" bug
- drm/i915: move a Kconfig symbol to unbreak the menu presentation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- drm/i915/xelpmp: Consider GSI offset when doing MCR lookups
- octeontx2-pf: Recalculate UDP checksum for ptp 1-step sync packet
- net: sunhme: Fix region request
- sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop
- octeontx2-pf: Use correct struct reference in test condition
- net: fix __dev_kfree_skb_any() vs drop monitor
- 9p/xen: fix version parsing
- 9p/xen: fix connection sequence
- 9p/rdma: unmap receive dma buffer in rdma_request()/post_recv()
- spi: tegra210-quad: Fix validate combined sequence
- mlx5: fix skb leak while fifo resync and push
- mlx5: fix possible ptp queue fifo use-after-free
- net/mlx5: ECPF, wait for VF pages only after disabling host PFs
- net/mlx5e: Verify flow_source cap before using it
- net/mlx5: Geneve, Fix handling of Geneve object id as error code
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- nfc: fix memory leak of se_io context in nfc_genl_se_io
- net/sched: transition act_pedit to rcu and percpu stats
- net/sched: act_pedit: fix action bind logic
- net/sched: act_mpls: fix action bind logic
- net/sched: act_sample: fix action bind logic
- net: dsa: seville: ignore mscc-miim read errors from Lynx PCS
- net: dsa: felix: fix internal MDIO controller resource length
- ARM: dts: aspeed: p10bmc: Update battery node name
- ARM: dts: spear320-hmi: correct STMPE GPIO compatible
- tcp: tcp_check_req() can be called from process context
- vc_screen: modify vcs_size() handling in vcs_read()
- spi: tegra210-quad: Fix iterator outside loop
- rtc: sun6i: Always export the internal oscillator
- genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask()
- scsi: ipr: Work around fortify-string warning
- scsi: mpi3mr: Fix an issue found by KASAN
- scsi: mpi3mr: Use number of bits to manage bitmap sizes
- rtc: allow rtc_read_alarm without read_alarm callback
- io_uring: fix size calculation when registering buf ring
- loop: loop_set_status_from_info() check before assignment
- ASoC: adau7118: don't disable regulators on device unbind
- ASoC: apple: mca: Fix final status read on SERDES reset
- ASoC: apple: mca: Fix SERDES reset sequence
- ASoC: apple: mca: Improve handling of unavailable DMA channels
- nvme: bring back auto-removal of deleted namespaces during sequential scan
- nvme-tcp: don't access released socket during error recovery
- nvme-fabrics: show well known discovery name
- ASoC: zl38060 add gpiolib dependency
- ASoC: mediatek: mt8195: add missing initialization
- thermal: intel: quark_dts: fix error pointer dereference
- thermal: intel: BXT_PMIC: select REGMAP instead of depending on it
- cpufreq: apple-soc: Fix an IS_ERR() vs NULL check
- tracing: Add NULL checks for buffer in ring_buffer_free_read_page()
- kernel/printk/index.c: fix memory leak with using debugfs_lookup()
- firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3
- bootconfig: Increase max nodes of bootconfig from 1024 to 8192 for DCC
support
- mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak
- IB/hfi1: Update RMT size calculation
- iommu: Remove deferred attach check from __iommu_detach_device()
- PCI/ACPI: Account for _S0W of the target bridge in acpi_pci_bridge_d3()
- media: uvcvideo: Remove format descriptions
- media: uvcvideo: Handle cameras with invalid descriptors
- media: uvcvideo: Handle errors from calls to usb_string
- media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910
- media: uvcvideo: Silence memcpy() run-time false positive warnings
- USB: fix memory leak with using debugfs_lookup()
- cacheinfo: Fix shared_cpu_map to handle shared caches at different levels
- usb: fotg210: List different variants
- dt-bindings: usb: Add device id for Genesys Logic hub controller
- staging: emxx_udc: Add checks for dma_alloc_coherent()
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- tty: serial: fsl_lpuart: disable the CTS when send break signal
- serial: sc16is7xx: setup GPIO controller later in probe
- mei: bus-fixup:upon error print return values of send and receive
- tools/iio/iio_utils:fix memory leak
- bus: mhi: ep: Fix the debug message for MHI_PKT_TYPE_RESET_CHAN_CMD cmd
- iio: accel: mma9551_core: Prevent uninitialized variable in
mma9551_read_status_word()
- iio: accel: mma9551_core: Prevent uninitialized variable in
mma9551_read_config_word()
- media: uvcvideo: Add GUID for BGRA/X 8:8:8:8
- soundwire: bus_type: Avoid lockdep assert in sdw_drv_probe()
- PCI/portdrv: Prevent LS7A Bus Master clearing on shutdown
- PCI: loongson: Prevent LS7A MRRS increases
- staging: pi433: fix memory leak with using debugfs_lookup()
- USB: dwc3: fix memory leak with using debugfs_lookup()
- USB: chipidea: fix memory leak with using debugfs_lookup()
- USB: ULPI: fix memory leak with using debugfs_lookup()
- USB: uhci: fix memory leak with using debugfs_lookup()
- USB: sl811: fix memory leak with using debugfs_lookup()
- USB: fotg210: fix memory leak with using debugfs_lookup()
- USB: isp116x: fix memory leak with using debugfs_lookup()
- USB: isp1362: fix memory leak with using debugfs_lookup()
- USB: gadget: gr_udc: fix memory leak with using debugfs_lookup()
- USB: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup()
- USB: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup()
- USB: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup()
- USB: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup()
- usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer
math
- USB: ene_usb6250: Allocate enough memory for full object
- usb: uvc: Enumerate valid values for color matching
- usb: gadget: uvc: Make bSourceID read/write
- PCI: Align extra resources for hotplug bridges properly
- PCI: Take other bus devices into account when distributing resources
- PCI: Distribute available resources for root buses, too
- tty: pcn_uart: fix memory leak with using debugfs_lookup()
- misc: vmw_balloon: fix memory leak with using debugfs_lookup()
- drivers: base: component: fix memory leak with using debugfs_lookup()
- drivers: base: dd: fix memory leak with using debugfs_lookup()
- kernel/fail_function: fix memory leak with using debugfs_lookup()
- PCI: loongson: Add more devices that need MRRS quirk
- PCI: Add ACS quirk for Wangxun NICs
- PCI: pciehp: Add Qualcomm quirk for Command Completed erratum
- phy: rockchip-typec: Fix unsigned comparison with less than zero
- RDMA/cma: Distinguish between sockaddr_in and sockaddr_in6 by size
- soundwire: cadence: Remove wasted space in response_buf
- soundwire: cadence: Drain the RX FIFO after an IO timeout
- eth: fealnx: bring back this old driver
- net: tls: avoid hanging tasks on the tx_lock
- x86/resctl: fix scheduler confusion with 'current'
- vDPA/ifcvf: decouple hw features manipulators from the adapter
- vDPA/ifcvf: decouple config space ops from the adapter
- vDPA/ifcvf: alloc the mgmt_dev before the adapter
- vDPA/ifcvf: decouple vq IRQ releasers from the adapter
- vDPA/ifcvf: decouple config IRQ releaser from the adapter
- vDPA/ifcvf: decouple vq irq requester from the adapter
- vDPA/ifcvf: decouple config/dev IRQ requester and vectors allocator from the
adapter
- vDPA/ifcvf: ifcvf_request_irq works on ifcvf_hw
- vDPA/ifcvf: manage ifcvf_hw in the mgmt_dev
- vDPA/ifcvf: allocate the adapter in dev_add()
- drm/display/dp_mst: Add drm_atomic_get_old_mst_topology_state()
- drm/display/dp_mst: Fix down/up message handling after sink disconnect
- drm/display/dp_mst: Fix down message handling after a packet reception error
- drm/display/dp_mst: Fix payload addition on a disconnected sink
- drm/i915/dp_mst: Add the MST topology state for modesetted CRTCs
- drm/display/dp_mst: Handle old/new payload states in drm_dp_remove_payload()
- drm/i915/dp_mst: Fix payload removal during output disabling
- drm/i915: Fix system suspend without fbdev being initialized
- media: uvcvideo: Fix race condition with usb_kill_urb
- arm64: efi: Make efi_rt_lock a raw_spinlock
- usb: gadget: uvc: fix missing mutex_unlock() if kstrtou8() fails
- Linux 6.2.5
* Lunar update: v6.2.4 upstream stable release (LP: #2011428)
- Revert "blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and
blkcg_deactivate_policy()"
- Revert "blk-cgroup: dropping parent refcount after pd_free_fn() is done"
- Linux 6.2.4
* Lunar update: v6.2.3 upstream stable release (LP: #2011425)
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: use spinlock to safely schedule workers
- iommu/amd: Fix error handling for pdev_pri_ats_enable()
- iommu/amd: Skip attach device domain is same as new domain
- iommu/amd: Improve page fault error reporting
- iommu: Attach device group to old domain in error path
- powerpc/mm: Rearrange if-else block to avoid clang warning
- ata: ahci: Revert "ata: ahci: Add Tiger Lake UP{3,4} AHCI controller"
- ARM: OMAP2+: Fix memory leak in realtime_counter_init()
- arm64: dts: qcom: qcs404: use symbol names for PCIe resets
- arm64: dts: qcom: msm8996-tone: Fix USB taking 6 minutes to wake up
- arm64: dts: qcom: sm6115: Fix UFS node
- arm64: dts: qcom: sm6115: Provide xo clk to rpmcc
- arm64: dts: qcom: sm8150-kumano: Panel framebuffer is 2.5k instead of 4k
- arm64: dts: qcom: pmi8950: Correct rev_1250v channel label to mv
- arm64: dts: qcom: sm6350: Fix up the ramoops node
- arm64: dts: qcom: sdm670-google-sargo: keep pm660 ldo8 on
- arm64: dts: qcom: Re-enable resin on MSM8998 and SDM845 boards
- arm64: dts: qcom: sm8350-sagami: Configure SLG51000 PMIC on PDX215
- arm64: dts: qcom: sm8350-sagami: Add GPIO line names for PMIC GPIOs
- arm64: dts: qcom: sm8350-sagami: Rectify GPIO keys
- arm64: dts: qcom: sm6350-lena: Flatten gpio-keys pinctrl state
- arm64: dts: qcom: sm6125: Reorder HSUSB PHY clocks to match bindings
- arm64: dts: qcom: sm6125-seine: Clean up gpio-keys (volume down)
- arm64: dts: imx8m: Align SoC unique ID node unit address
- ARM: zynq: Fix refcount leak in zynq_early_slcr_init
- fs: dlm: fix return value check in dlm_memory_init()
- arm64: dts: mediatek: mt8195: Add power domain to U3PHY1 T-PHY
- arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description
- arm64: dts: mediatek: mt8192: Fix systimer 13 MHz clock description
- arm64: dts: mediatek: mt8195: Fix systimer 13 MHz clock description
- arm64: dts: mediatek: mt8186: Fix systimer 13 MHz clock description
- arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name
- arm64: dts: qcom: sdm845-xiaomi-beryllium: fix audio codec interrupt pin
name
- x86/acpi/boot: Do not register processors that cannot be onlined for x2APIC
- arm64: dts: qcom: sc7180: correct SPMI bus address cells
- arm64: dts: qcom: sc7280: correct SPMI bus address cells
- arm64: dts: qcom: sc8280xp: correct SPMI bus address cells
- arm64: dts: qcom: sm8450: correct Soundwire wakeup interrupt name
- arm64: dts: qcom: sdm845: make DP node follow the schema
- arm64: dts: qcom: msm8996-oneplus-common: drop vdda-supply from DSI PHY
- arm64: dts: qcom: sc8280xp: Vote for CX in USB controllers
- arm64: dts: meson-gxl: jethub-j80: Fix WiFi MAC address node
- arm64: dts: meson-gxl: jethub-j80: Fix Bluetooth MAC node name
- arm64: dts: meson-axg: jethub-j1xx: Fix MAC address node names
- arm64: dts: meson-gx: Fix Ethernet MAC address unit name
- arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name
- arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- arm64: dts: ti: k3-am62-main: Fix clocks for McSPI
- arm64: tegra: Fix duplicate regulator on Jetson TX1
- arm64: dts: qcom: msm8992-bullhead: Fix cont_splash_mem size
- arm64: dts: qcom: msm8992-bullhead: Disable dfps_data_mem
- arm64: dts: qcom: msm8956: use SoC-specific compat for tsens
- arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names
- arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY
- arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY
- arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges
- arm64: dts: qcom: ipq8074: fix Gen3 PCIe node
- arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names
- arm64: dts: meson: remove CPU opps below 1GHz for G12A boards
- ARM: OMAP1: call platform_device_put() in error case in
omap1_dm_timer_init()
- arm64: dts: mediatek: mt8192: Mark scp_adsp clock as broken
- ARM: bcm2835_defconfig: Enable the framebuffer
- ARM: s3c: fix s3c64xx_set_timer_source prototype
- arm64: dts: ti: k3-j7200: Fix wakeup pinmux range
- ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato
- ARM: imx: Call ida_simple_remove() for ida_simple_get
- arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name
- arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name
- arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible
- arm64: dts: amlogic: meson-axg-jethome-jethub-j1xx: fix supply name of USB
controller node
- arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names
property
- arm64: dts: amlogic: meson-gx: add missing unit address to rng node name
- arm64: dts: amlogic: meson-gxl-s905w-jethome-jethub-j80: fix invalid rtc
node name
- arm64: dts: amlogic: meson-axg-jethome-jethub-j1xx: fix invalid rtc node
name
- arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node
name
- arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name
- arm64: dts: amlogic: meson-sm1-bananapi-m5: fix adc keys node names
- arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name
- arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name
- arm64: dts: amlogic: meson-g12b-odroid-go-ultra: fix rk818 pmic properties
- arm64: dts: amlogic: meson-sm1-odroid-hc4: fix active fan thermal trip
- locking/rwsem: Disable preemption in all down_read*() and up_read() code
paths
- arm64: tegra: Mark host1x as dma-coherent on Tegra194/234
- arm64: dts: renesas: beacon-renesom: Fix gpio expander reference
- arm64: dts: meson: radxa-zero: allow usb otg mode
- arm64: dts: meson: bananapi-m5: switch VDDIO_C pin to OPEN_DRAIN
- ARM: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference
- ublk_drv: remove nr_aborted_queues from ublk_device
- ublk_drv: don't probe partitions if the ubq daemon isn't trusted
- ARM: dts: imx7s: correct iomuxc gpr mux controller cells
- sbitmap: remove redundant check in __sbitmap_queue_get_batch
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- arm64: dts: mt8195: Fix CPU map for single-cluster SoC
- arm64: dts: mt8192: Fix CPU map for single-cluster SoC
- arm64: dts: mt8186: Fix CPU map for single-cluster SoC
- arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node
- arm64: dts: mediatek: mt8186: Fix watchdog compatible
- arm64: dts: mediatek: mt8195: Fix watchdog compatible
- arm64: dts: mediatek: mt7986: Fix watchdog compatible
- ARM: dts: stm32: Update part number NVMEM description on stm32mp131
- arm64: dts: qcom: sm8450-nagara: Correct firmware paths
- blk-mq: avoid sleep in blk_mq_alloc_request_hctx
- blk-mq: remove stale comment for blk_mq_sched_mark_restart_hctx
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: correct stale comment of .get_budget
- arm64: dts: qcom: msm8996: support using GPLL0 as kryocc input
- arm64: dts: qcom: msm8996 switch from RPM_SMD_BB_CLK1 to RPM_SMD_XO_CLK_SRC
- arm64: dts: qcom: sm8350: drop incorrect cells from serial
- arm64: dts: qcom: sm8450: drop incorrect cells from serial
- arm64: dts: qcom: msm8992-lg-bullhead: Correct memory overlaps with the SMEM
and MPSS memory regions
- arm64: dts: qcom: msm8953: correct TLMM gpio-ranges
- arm64: dts: qcom: sm6115: correct TLMM gpio-ranges
- arm64: dts: qcom: msm8992-lg-bullhead: Enable regulators
- s390/dasd: Fix potential memleak in dasd_eckd_init()
- io_uring,audit: don't log IORING_OP_MADVISE
- sched/rt: pick_next_rt_entity(): check list_entry
- perf/x86/intel/ds: Fix the conversion from TSC to perf time
- x86/perf/zhaoxin: Add stepping check for ZXC
- KEYS: asymmetric: Fix ECDSA use via keyctl uapi
- block: ublk: check IO buffer based on flag need_get_data
- arm64: dts: qcom: pmk8350: Use the correct PON compatible
- erofs: relinquish volume with mutex held
- block: sync mixed merged request's failfast with 1st bio's
- block: Fix io statistics for cgroup in throttle path
- block: bio-integrity: Copy flags when bio_integrity_payload is cloned
- block: use proper return value from bio_failfast()
- wifi: mt76: mt7915: add missing of_node_put()
- wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host
- wifi: mt76: mt7915: fix mt7915_rate_txpower_get() resource leaks
- wifi: mt76: mt7996: fix insecure data handling of mt7996_mcu_ie_countdown()
- wifi: mt76: mt7996: fix insecure data handling of
mt7996_mcu_rx_radar_detected()
- wifi: mt76: mt7996: fix integer handling issue of mt7996_rf_regval_set()
- wifi: mt76: mt7915: check return value before accessing free_block_num
- wifi: mt76: mt7996: check return value before accessing free_block_num
- wifi: mt76: mt7915: drop always true condition of __mt7915_reg_addr()
- wifi: mt76: mt7996: drop always true condition of __mt7996_reg_addr()
- wifi: mt76: mt7996: fix endianness warning in mt7996_mcu_sta_he_tlv
- wifi: mt76: mt76x0: fix oob access in mt76x0_phy_get_target_power
- wifi: mt76: mt7996: fix unintended sign extension of mt7996_hw_queue_read()
- wifi: mt76: mt7915: fix unintended sign extension of mt7915_hw_queue_read()
- wifi: mt76: fix coverity uninit_use_in_call in
mt76_connac2_reverse_frag0_hdr_trans()
- wifi: mt76: mt7921: resource leaks at mt7921_check_offload_capability()
- wifi: rsi: Fix memory leak in rsi_coex_attach()
- wifi: rtlwifi: rtl8821ae: don't call kfree_skb() under spin_lock_irqsave()
- wifi: rtlwifi: rtl8188ee: don't call kfree_skb() under spin_lock_irqsave()
- wifi: rtlwifi: rtl8723be: don't call kfree_skb() under spin_lock_irqsave()
- wifi: iwlegacy: common: don't call dev_kfree_skb() under spin_lock_irqsave()
- wifi: libertas: fix memory leak in lbs_init_adapter()
- wifi: rtl8xxxu: Fix assignment to bit field priv->pi_enabled
- wifi: rtl8xxxu: Fix assignment to bit field priv->cck_agc_report_type
- wifi: rtl8xxxu: don't call dev_kfree_skb() under spin_lock_irqsave()
- wifi: rtw89: 8852c: rfk: correct DACK setting
- wifi: rtw89: 8852c: rfk: correct DPK settings
- wifi: rtlwifi: Fix global-out-of-bounds bug in
_rtl8812ae_phy_set_txpower_limit()
- libbpf: Fix single-line struct definition output in btf_dump
- libbpf: Fix btf__align_of() by taking into account field offsets
- wifi: ipw2x00: don't call dev_kfree_skb() under spin_lock_irqsave()
- wifi: ipw2200: fix memory leak in ipw_wdev_init()
- wifi: wilc1000: fix potential memory leak in wilc_mac_xmit()
- wifi: wilc1000: add missing unregister_netdev() in wilc_netdev_ifc_init()
- wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()
- wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid()
- wifi: libertas_tf: don't call kfree_skb() under spin_lock_irqsave()
- wifi: libertas: if_usb: don't call kfree_skb() under spin_lock_irqsave()
- wifi: libertas: main: don't call kfree_skb() under spin_lock_irqsave()
- wifi: libertas: cmdresp: don't call kfree_skb() under spin_lock_irqsave()
- wifi: wl3501_cs: don't call kfree_skb() under spin_lock_irqsave()
- libbpf: Fix invalid return address register in s390
- crypto: x86/ghash - fix unaligned access in ghash_setkey()
- crypto: ux500 - update debug config after ux500 cryp driver removal
- ACPICA: Drop port I/O validation for some regions
- genirq: Fix the return type of kstat_cpu_irqs_sum()
- rcu-tasks: Improve comments explaining tasks_rcu_exit_srcu purpose
- rcu-tasks: Remove preemption disablement around srcu_read_[un]lock() calls
- rcu-tasks: Fix synchronize_rcu_tasks() VS zap_pid_ns_processes()
- lib/mpi: Fix buffer overrun when SG is too long
- crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2
- platform/chrome: cros_ec_typec: Update port DP VDO
- ACPICA: nsrepair: handle cases without a return value correctly
- libbpf: Fix map creation flags sanitization
- bpf_doc: Fix build error with older python versions
- selftests/xsk: print correct payload for packet dump
- selftests/xsk: print correct error codes when exiting
- arm64/cpufeature: Fix field sign for DIT hwcap detection
- arm64/sysreg: Fix errors in 32 bit enumeration values
- kselftest/arm64: Fix syscall-abi for systems without 128 bit SME
- workqueue: Protects wq_unbound_cpumask with wq_pool_attach_mutex
- s390/early: fix sclp_early_sccb variable lifetime
- s390/vfio-ap: fix an error handling path in vfio_ap_mdev_probe_queue()
- x86/signal: Fix the value returned by strict_sas_size()
- thermal/drivers/tsens: Drop msm8976-specific defines
- thermal/drivers/tsens: Sort out msm8976 vs msm8956 data
- thermal/drivers/tsens: fix slope values for msm8939
- thermal/drivers/tsens: limit num_sensors to 9 for msm8939
- wifi: rtw89: fix potential leak in rtw89_append_probe_req_ie()
- wifi: rtw89: Add missing check for alloc_workqueue
- wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU
- wifi: orinoco: check return value of hermes_write_wordrec()
- wifi: rtw88: Use rtw_iterate_vifs() for rtw_vif_watch_dog_iter()
- wifi: rtw88: Use non-atomic sta iterator in rtw_ra_mask_info_update()
- thermal/drivers/imx_sc_thermal: Fix the loop condition
- wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback
function
- wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails
- wifi: ath9k: Fix potential stack-out-of-bounds write in
ath9k_wmi_rsp_callback()
- wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup
- wifi: cfg80211: Fix extended KCK key length check in
nl80211_set_rekey_data()
- ACPI: battery: Fix missing NUL-termination with large strings
- selftests/bpf: Fix build errors if CONFIG_NF_CONNTRACK=m
- crypto: ccp - Failure on re-initialization due to duplicate sysfs filename
- crypto: essiv - Handle EBUSY correctly
- crypto: seqiv - Handle EBUSY correctly
- powercap: fix possible name leak in powercap_register_zone()
- bpf: Fix state pruning for STACK_DYNPTR stack slots
- bpf: Fix missing var_off check for ARG_PTR_TO_DYNPTR
- bpf: Fix partial dynptr stack slot reads/writes
- x86/microcode: Add a parameter to microcode_check() to store CPU
capabilities
- x86/microcode: Check CPU capabilities after late microcode update correctly
- x86/microcode: Adjust late loading result reporting message
- net: ethernet: ti: am65-cpsw/cpts: Fix CPTS release action
- selftests/bpf: Fix vmtest static compilation error
- crypto: xts - Handle EBUSY correctly
- leds: led-class: Add missing put_device() to led_put()
- drm/nouveau/disp: Fix nvif_outp_acquire_dp() argument size
- s390/bpf: Add expoline to tail calls
- wifi: iwlwifi: mei: fix compilation errors in rfkill()
- kselftest/arm64: Fix enumeration of systems without 128 bit SME
- can: rcar_canfd: Fix R-Car V3U CAN mode selection
- can: rcar_canfd: Fix R-Car V3U GAFLCFG field accesses
- selftests/bpf: Initialize tc in xdp_synproxy
- crypto: ccp - Flush the SEV-ES TMR memory before giving it to firmware
- bpftool: profile online CPUs instead of possible
- wifi: mt76: mt7921: fix deadlock in mt7921_abort_roc
- wifi: mt76: mt7915: call mt7915_mcu_set_thermal_throttling() only after
init_work
- wifi: mt76: mt7915: rework mt7915_mcu_set_thermal_throttling
- wifi: mt76: mt7915: rework mt7915_thermal_temp_store()
- wifi: mt76: mt7921: fix channel switch fail in monitor mode
- wifi: mt76: mt7996: fix chainmask calculation in mt7996_set_antenna()
- wifi: mt76: mt7996: update register for CFEND_RATE
- wifi: mt76: connac: fix POWER_CTRL command name typo
- wifi: mt76: mt7921: fix invalid remain_on_channel duration
- wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit
- wifi: mt76: mt7996: fix memory leak in mt7996_mcu_exit
- wifi: mt76: dma: fix memory leak running mt76_dma_tx_cleanup
- wifi: mt76: fix switch default case in mt7996_reverse_frag0_hdr_trans
- wifi: mt76: mt7915: fix WED TxS reporting
- wifi: mt76: add memory barrier to SDIO queue kick
- wifi: mt76: mt7996: rely on mt76_connac2_mac_tx_rate_val
- net/mlx5: Enhance debug print in page allocation failure
- irqchip: Fix refcount leak in platform_irqchip_probe
- irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains
- irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe
- irqchip/ti-sci: Fix refcount leak in ti_sci_intr_irq_domain_probe
- s390/mem_detect: fix detect_memory() error handling
- s390/vmem: fix empty page tables cleanup under KASAN
- s390/boot: cleanup decompressor header files
- s390/mem_detect: rely on diag260() if sclp_early_get_memsize() fails
- s390/boot: fix mem_detect extended area allocation
- net: add sock_init_data_uid()
- tun: tun_chr_open(): correctly initialize socket uid
- tap: tap_open(): correctly initialize socket uid
- rxrpc: Fix overwaking on call poking
- OPP: fix error checking in opp_migrate_dentry()
- cpufreq: davinci: Fix clk use after free
- Bluetooth: hci_conn: Refactor hci_bind_bis() since it always succeeds
- Bluetooth: L2CAP: Fix potential user-after-free
- Bluetooth: hci_qca: get wakeup status from serdev device handle
- net: ipa: generic command param fix
- s390: vfio-ap: tighten the NIB validity check
- s390/ap: fix status returned by ap_aqic()
- s390/ap: fix status returned by ap_qact()
- libbpf: Fix alen calculation in libbpf_nla_dump_errormsg()
- xen/grant-dma-iommu: Implement a dummy probe_device() callback
- rds: rds_rm_zerocopy_callback() correct order for list_add_tail()
- crypto: rsa-pkcs1pad - Use akcipher_request_complete
- m68k: /proc/hardware should depend on PROC_FS
- RISC-V: time: initialize hrtimer based broadcast clock event device
- clocksource/drivers/riscv: Patch riscv_clock_next_event() jump before first
use
- wifi: iwl3945: Add missing check for create_singlethread_workqueue
- wifi: iwl4965: Add missing check for create_singlethread_workqueue()
- wifi: brcmfmac: Rename Cypress 89459 to BCM4355
- wifi: brcmfmac: pcie: Add IDs/properties for BCM4355
- wifi: brcmfmac: pcie: Add IDs/properties for BCM4377
- wifi: brcmfmac: pcie: Perform correct BCM4364 firmware selection
- wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize()
- wifi: rtw89: fix parsing offset for MCC C2H
- selftests/bpf: Fix out-of-srctree build
- ACPI: resource: Add IRQ overrides for MAINGEAR Vector Pro 2 models
- ACPI: resource: Do IRQ override on all TongFang GMxRGxx
- crypto: octeontx2 - Fix objects shared between several modules
- crypto: crypto4xx - Call dma_unmap_page when done
- vfio/ccw: remove WARN_ON during shutdown
- wifi: mac80211: move color collision detection report in a delayed work
- wifi: mac80211: make rate u32 in sta_set_rate_info_rx()
- wifi: mac80211: fix non-MLO station association
- wifi: mac80211: Don't translate MLD addresses for multicast
- wifi: mac80211: avoid u32_encode_bits() warning
- wifi: mac80211: fix off-by-one link setting
- tools/lib/thermal: Fix thermal_sampling_exit()
- thermal/drivers/hisi: Drop second sensor hi3660
- selftests/bpf: Fix map_kptr test.
- wifi: mac80211: pass 'sta' to ieee80211_rx_data_set_sta()
- bpf: Zeroing allocated object from slab in bpf memory allocator
- selftests/bpf: Fix xdp_do_redirect on s390x
- can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a
bus error
- can: esd_usb: Make use of can_change_state() and relocate checking skb for
NULL
- xsk: check IFF_UP earlier in Tx path
- LoongArch, bpf: Use 4 instructions for function address in JIT
- bpf: Fix global subprog context argument resolution logic
- irqchip/irq-brcmstb-l2: Set IRQ_LEVEL for level triggered interrupts
- irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: fix application data exception
- selftests/net: Interpret UDP_GRO cmsg data as an int value
- l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register()
- net: bcmgenet: fix MoCA LED control
- net: lan966x: Fix possible deadlock inside PTP
- net/mlx4_en: Introduce flexible array to silence overflow warning
- net/mlx5e: Align IPsec ASO result memory to be as required by hardware
- selftest: fib_tests: Always cleanup before exit
- sefltests: netdevsim: wait for devlink instance after netns removal
- drm: Fix potential null-ptr-deref due to drmm_mode_config_init()
- drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats
- drm/bridge: ti-sn65dsi83: Fix delay after reset deassert to match spec
- drm: mxsfb: DRM_IMX_LCDIF should depend on ARCH_MXC
- drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC
- drm/bridge: megachips: Fix error handling in i2c_register_driver()
- drm/vkms: Fix memory leak in vkms_init()
- drm/vkms: Fix null-ptr-deref in vkms_release()
- drm/modes: Use strscpy() to copy command-line mode name
- drm/vc4: dpi: Fix format mapping for RGB565
- drm/bridge: it6505: Guard bridge power in IRQ handler
- drm: tidss: Fix pixel format definition
- gpu: ipu-v3: common: Add of_node_put() for reference returned by
of_graph_get_port_by_id()
- drm/ast: Init iosys_map pointer as I/O memory for damage handling
- drm/vc4: drop all currently held locks if deadlock happens
- hwmon: (ftsteutates) Fix scaling of measurements
- drm/msm/dpu: check for null return of devm_kzalloc() in dpu_writeback_init()
- drm/msm/hdmi: Add missing check for alloc_ordered_workqueue
- pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins
- pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain
- pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups
- drm/vc4: hvs: Configure the HVS COB allocations
- drm/vc4: hvs: Set AXI panic modes
- drm/vc4: hvs: SCALER_DISPBKGND_AUTOHS is only valid on HVS4
- drm/vc4: hvs: Correct interrupt masking bit assignment for HVS5
- drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5
- drm/vc4: hdmi: Correct interlaced timings again
- drm/msm: clean event_thread->worker in case of an error
- drm/panel-edp: fix name for IVO product id 854b
- scsi: qla2xxx: Fix exchange oversubscription
- scsi: qla2xxx: Fix exchange oversubscription for management commands
- scsi: qla2xxx: edif: Fix clang warning
- ASoC: fsl_sai: initialize is_dsp_mode flag
- drm/bridge: tc358767: Set default CLRSIPO count
- drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup()
- ALSA: hda/ca0132: minor fix for allocation size
- drm/amdgpu: Use the sched from entity for amdgpu_cs trace
- drm/msm/gem: Add check for kmalloc
- drm/msm/dpu: Disallow unallocated resources to be returned
- drm/bridge: lt9611: fix sleep mode setup
- drm/bridge: lt9611: fix HPD reenablement
- drm/bridge: lt9611: fix polarity programming
- drm/bridge: lt9611: fix programming of video modes
- drm/bridge: lt9611: fix clock calculation
- drm/bridge: lt9611: pass a pointer to the of node
- regulator: tps65219: use IS_ERR() to detect an error pointer
- drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness
- drm: exynos: dsi: Fix MIPI_DSI*_NO_* mode flags
- drm/msm/dsi: Allow 2 CTRLs on v2.5.0
- scsi: ufs: exynos: Fix DMA alignment for PAGE_SIZE != 4096
- drm/msm/dpu: sc7180: add missing WB2 clock control
- drm/msm: use strscpy instead of strncpy
- drm/msm/dpu: Add check for cstate
- drm/msm/dpu: Add check for pstates
- drm/msm/mdp5: Add check for kzalloc
- habanalabs: bugs fixes in timestamps buff alloc
- pinctrl: bcm2835: Remove of_node_put() in bcm2835_of_gpio_ranges_fallback()
- pinctrl: mediatek: Initialize variable pullen and pullup to zero
- pinctrl: mediatek: Initialize variable *buf to zero
- gpu: host1x: Fix mask for syncpoint increment register
- gpu: host1x: Don't skip assigning syncpoints to channels
- drm/tegra: firewall: Check for is_addr_reg existence in IMM check
- drm/i915/mtl: Add initial gt workarounds
- drm/i915/xehp: GAM registers don't need to be re-applied on engine resets
- pinctrl: renesas: rzg2l: Fix configuring the GPIO pins as interrupts
- drm/i915/xehp: Annotate a couple more workaround registers as MCR
- drm/msm/dpu: set pdpu->is_rt_pipe early in dpu_plane_sspp_atomic_update()
- drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd
- drm/mediatek: Use NULL instead of 0 for NULL pointer
- drm/mediatek: Drop unbalanced obj unref
- drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc
- drm/mediatek: Clean dangling pointer on bind error path
- ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress()
- dt-bindings: display: mediatek: Fix the fallback for mediatek,mt8186-disp-
ccorr
- gpio: pca9570: rename platform_data to chip_data
- gpio: vf610: connect GPIO label to dev name
- ASoC: topology: Properly access value coming from topology file
- spi: dw_bt1: fix MUX_MMIO dependencies
- ASoC: mchp-spdifrx: fix controls which rely on rsr register
- ASoC: mchp-spdifrx: fix return value in case completion times out
- ASoC: mchp-spdifrx: fix controls that works with completion mechanism
- ASoC: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove()
- dm: improve shrinker debug names
- regmap: apply reg_base and reg_downshift for single register ops
- accel: fix CONFIG_DRM dependencies
- ASoC: rsnd: fixup #endif position
- ASoC: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params()
- ASoC: dt-bindings: meson: fix gx-card codec node regex
- regulator: tps65219: use generic set_bypass()
- hwmon: (asus-ec-sensors) add missing mutex path
- hwmon: (ltc2945) Handle error case in ltc2945_value_store
- ALSA: hda: Fix the control element identification for multiple codecs
- drm/amdgpu: fix enum odm_combine_mode mismatch
- scsi: mpt3sas: Fix a memory leak
- scsi: aic94xx: Add missing check for dma_map_single()
- HID: multitouch: Add quirks for flipped axes
- HID: retain initial quirks set up when creating HID devices
- ASoC: qcom: q6apm-lpass-dai: unprepare stream if its already prepared
- ASoC: qcom: q6apm-dai: fix race condition while updating the position
pointer
- ASoC: qcom: q6apm-dai: Add SNDRV_PCM_INFO_BATCH flag
- ASoC: codecs: lpass: register mclk after runtime pm
- ASoC: codecs: lpass: fix incorrect mclk rate
- drm/amd/display: don't call dc_interrupt_set() for disabled crtcs
- HID: logitech-hidpp: Hard-code HID++ 1.0 fast scroll support
- spi: bcm63xx-hsspi: Fix multi-bit mode setting
- hwmon: (mlxreg-fan) Return zero speed for broken fan
- ASoC: tlv320adcx140: fix 'ti,gpio-config' DT property init
- dm: remove flush_scheduled_work() during local_exit()
- nfs4trace: fix state manager flag printing
- NFS: fix disabling of swap
- drm/i915/pvc: Implement recommended caching policy
- drm/i915/pvc: Annotate two more workaround/tuning registers as MCR
- drm/i915: Fix GEN8_MISCCPCTL
- spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one()
- ASoC: soc-dapm.h: fixup warning struct snd_pcm_substream not declared
- HID: bigben: use spinlock to protect concurrent accesses
- HID: bigben_worker() remove unneeded check on report_field
- HID: bigben: use spinlock to safely schedule workers
- hid: bigben_probe(): validate report count
- ALSA: hda/hdmi: Register with vga_switcheroo on Dual GPU Macbooks
- drm/shmem-helper: Fix locking for drm_gem_shmem_get_pages_sgt()
- NFSD: enhance inter-server copy cleanup
- NFSD: fix leaked reference count of nfsd4_ssc_umount_item
- nfsd: fix race to check ls_layouts
- nfsd: clean up potential nfsd_file refcount leaks in COPY codepath
- NFSD: fix problems with cleanup on errors in nfsd4_copy
- nfsd: fix courtesy client with deny mode handling in nfs4_upgrade_open
- nfsd: don't fsync nfsd_files on last close
- NFSD: copy the whole verifier in nfsd_copy_write_verifier
- cifs: Fix lost destroy smbd connection when MR allocate failed
- cifs: Fix warning and UAF when destroy the MR list
- cifs: use tcon allocation functions even for dummy tcon
- gfs2: jdata writepage fix
- perf llvm: Fix inadvertent file creation
- leds: led-core: Fix refcount leak in of_led_get()
- leds: is31fl319x: Wrap mutex_destroy() for devm_add_action_or_rest()
- leds: simatic-ipc-leds-gpio: Make sure we have the GPIO providing driver
- tools/tracing/rtla: osnoise_hist: use total duration for average calculation
- perf inject: Use perf_data__read() for auxtrace
- perf intel-pt: Do not try to queue auxtrace data on pipe
- perf stat: Hide invalid uncore event output for aggr mode
- perf jevents: Correct bad character encoding
- perf test bpf: Skip test if kernel-debuginfo is not present
- perf tools: Fix auto-complete on aarch64
- perf stat: Avoid merging/aggregating metric counts twice
- sparc: allow PM configs for sparc32 COMPILE_TEST
- selftests: find echo binary to use -ne options
- selftests/ftrace: Fix bash specific "==" operator
- selftests: use printf instead of echo -ne
- perf record: Fix segfault with --overwrite and --max-size
- printf: fix errname.c list
- perf tests stat_all_metrics: Change true workload to sleep workload for
system wide check
- objtool: add UACCESS exceptions for __tsan_volatile_read/write
- selftests/ftrace: Fix probepoint testcase to ignore __pfx_* symbols
- sysctl: fix proc_dobool() usability
- mfd: rk808: Re-add rk808-clkout to RK818
- mfd: cs5535: Don't build on UML
- mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read()
- dmaengine: idxd: Set traffic class values in GRPCFG on DSA 2.0
- RDMA/erdma: Fix refcount leak in erdma_mmap
- dmaengine: HISI_DMA should depend on ARCH_HISI
- RDMA/hns: Fix refcount leak in hns_roce_mmap
- iio: light: tsl2563: Do not hardcode interrupt trigger type
- usb: gadget: fusb300_udc: free irq on the error path in fusb300_probe()
- i2c: designware: fix i2c_dw_clk_rate() return size to be u32
- i2c: qcom-geni: change i2c_master_hub to static
- soundwire: cadence: Don't overflow the command FIFOs
- driver core: fix potential null-ptr-deref in device_add()
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- alpha/boot/tools/objstrip: fix the check for ELF header
- media: uvcvideo: Check for INACTIVE in uvc_ctrl_is_accessible()
- media: uvcvideo: Implement mask for V4L2_CTRL_TYPE_MENU
- media: uvcvideo: Refactor uvc_ctrl_mappings_uvcXX
- media: uvcvideo: Refactor power_line_frequency_controls_limited
- coresight: etm4x: Fix accesses to TRCSEQRSTEVR and TRCSEQSTR
- coresight: cti: Prevent negative values of enable count
- coresight: cti: Add PM runtime call in enable_store
- usb: typec: intel_pmc_mux: Don't leak the ACPI device reference count
- PCI/IOV: Enlarge virtfn sysfs name buffer
- PCI: switchtec: Return -EFAULT for copy_to_user() errors
- PCI: endpoint: pci-epf-vntb: Add epf_ntb_mw_bar_clear() num_mws kernel-doc
- hwtracing: hisi_ptt: Only add the supported devices to the filters list
- tty: serial: fsl_lpuart: disable Rx/Tx DMA in lpuart32_shutdown()
- tty: serial: fsl_lpuart: clear LPUART Status Register in lpuart32_shutdown()
- serial: tegra: Add missing clk_disable_unprepare() in tegra_uart_hw_init()
- Revert "char: pcmcia: cm4000_cs: Replace mdelay with usleep_range in
set_protocol"
- eeprom: idt_89hpesx: Fix error handling in idt_init()
- applicom: Fix PCI device refcount leak in applicom_init()
- firmware: stratix10-svc: add missing gen_pool_destroy() in
stratix10_svc_drv_probe()
- firmware: stratix10-svc: fix error handle while alloc/add device failed
- VMCI: check context->notify_page after call to get_user_pages_fast() to
avoid GPF
- mei: pxp: Use correct macros to initialize uuid_le
- misc/mei/hdcp: Use correct macros to initialize uuid_le
- misc: fastrpc: Fix an error handling path in fastrpc_rpmsg_probe()
- iommu/exynos: Fix error handling in exynos_iommu_init()
- driver core: fix resource leak in device_add()
- driver core: location: Free struct acpi_pld_info *pld before return false
- drivers: base: transport_class: fix possible memory leak
- drivers: base: transport_class: fix resource leak when
transport_add_device() fails
- firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle
- selftests: iommu: Fix test_cmd_destroy_access() call in user_copy
- iommufd: Add three missing structures in ucmd_buffer
- fotg210-udc: Add missing completion handler
- dmaengine: dw-edma: Fix missing src/dst address of interleaved xfers
- fpga: microchip-spi: move SPI I/O buffers out of stack
- fpga: microchip-spi: rewrite status polling in a time measurable way
- usb: early: xhci-dbc: Fix a potential out-of-bound memory access
- tty: serial: fsl_lpuart: Fix the wrong RXWATER setting for rx dma case
- RDMA/cxgb4: add null-ptr-check after ip_dev_find()
- usb: musb: mediatek: don't unregister something that wasn't registered
- usb: gadget: configfs: Restrict symlink creation is UDC already binded
- phy: mediatek: remove temporary variable @mask_
- PCI: mt7621: Delay phy ports initialization
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- power: supply: remove faulty cooling logic
- RDMA/siw: Fix user page pinning accounting
- RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish()
- usb: max-3421: Fix setting of I/O pins
- RDMA/irdma: Cap MSIX used to online CPUs + 1
- serial: fsl_lpuart: fix RS485 RTS polariy inverse issue
- tty: serial: imx: disable Ageing Timer interrupt request irq
- driver core: fw_devlink: Add DL_FLAG_CYCLE support to device links
- driver core: fw_devlink: Don't purge child fwnode's consumer links
- driver core: fw_devlink: Allow marking a fwnode link as being part of a
cycle
- driver core: fw_devlink: Consolidate device link flag computation
- driver core: fw_devlink: Improve check for fwnode with no device/driver
- driver core: fw_devlink: Make cycle detection more robust
- mtd: mtdpart: Don't create platform device that'll never probe
- usb: host: fsl-mph-dr-of: reuse device_set_of_node_from_dev
- dmaengine: dw-edma: Fix readq_ch() return value truncation
- PCI: Fix dropping valid root bus resources with .end = zero
- phy: rockchip-typec: fix tcphy_get_mode error case
- PCI: qcom: Fix host-init error handling
- iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry()
- iommu: Fix error unwind in iommu_group_alloc()
- iommu/amd: Do not identity map v2 capable device when snp is enabled
- dmaengine: sf-pdma: pdma_desc memory leak fix
- dmaengine: dw-axi-dmac: Do not dereference NULL structure
- dmaengine: ptdma: check for null desc before calling pt_cmd_callback
- iommu/vt-d: Fix error handling in sva enable/disable paths
- iommu/vt-d: Allow to use flush-queue when first level is default
- RDMA/rxe: Cleanup mr_check_range
- RDMA/rxe: Move rxe_map_mr_sg to rxe_mr.c
- RDMA-rxe: Isolate mr code from atomic_reply()
- RDMA-rxe: Isolate mr code from atomic_write_reply()
- RDMA/rxe: Cleanup page variables in rxe_mr.c
- RDMA/rxe: Replace rxe_map and rxe_phys_buf by xarray
- Subject: RDMA/rxe: Handle zero length rdma
- RDMA/mana_ib: Fix a bug when the PF indicates more entries for registering
memory on first packet
- RDMA/rxe: Fix missing memory barriers in rxe_queue.h
- IB/hfi1: Fix math bugs in hfi1_can_pin_pages()
- IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors
- Revert "remoteproc: qcom_q6v5_mss: map/unmap metadata region before/after
use"
- remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers
- media: ti: cal: fix possible memory leak in cal_ctx_create()
- media: platform: ti: Add missing check for devm_regulator_get
- media: imx: imx7-media-csi: fix missing clk_disable_unprepare() in
imx7_csi_init()
- powerpc: Remove linker flag from KBUILD_AFLAGS
- s390/vdso: Drop '-shared' from KBUILD_CFLAGS_64
- builddeb: clean generated package content
- media: max9286: Fix memleak in max9286_v4l2_register()
- media: ov2740: Fix memleak in ov2740_init_controls()
- media: ov5675: Fix memleak in ov5675_init_controls()
- media: i2c: tc358746: fix missing return assignment
- media: i2c: tc358746: fix ignoring read error in g_register callback
- media: i2c: tc358746: fix possible endianness issue
- media: ov5640: Fix soft reset sequence and timings
- media: ov5640: Handle delays when no reset_gpio set
- media: mc: Get media_device directly from pad
- media: i2c: ov772x: Fix memleak in ov772x_probe()
- media: i2c: imx219: Split common registers from mode tables
- media: i2c: imx219: Fix binning for RAW8 capture
- media: platform: mtk-mdp3: Fix return value check in mdp_probe()
- media: camss: csiphy-3ph: avoid undefined behavior
- media: platform: mtk-mdp3: fix Kconfig dependencies
- media: v4l2-jpeg: correct the skip count in jpeg_parse_app14_data
- media: v4l2-jpeg: ignore the unknown APP14 marker
- media: hantro: Fix JPEG encoder ENUM_FRMSIZE on RK3399
- media: imx-jpeg: Apply clk_bulk api instead of operating specific clk
- media: amphion: correct the unspecified color space
- media: drivers/media/v4l2-core/v4l2-h264 : add detection of null pointers
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- media: atomisp: fix videobuf2 Kconfig depenendency
- media: atomisp: Only set default_run_mode on first open of a stream/asd
- media: i2c: ov7670: 0 instead of -EINVAL was returned
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- media: saa7134: Use video_unregister_device for radio_dev
- rpmsg: glink: Avoid infinite loop on intent for missing channel
- rpmsg: glink: Release driver_override
- ARM: OMAP2+: omap4-common: Fix refcount leak bug
- arm64: dts: qcom: msm8996: Add additional A2NoC clocks
- udf: Define EFSCORRUPTED error code
- context_tracking: Fix noinstr vs KASAN
- exit: Detect and fix irq disabled state in oops
- ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- blk-iocost: fix divide by 0 error in calc_lcoefs()
- blk-cgroup: dropping parent refcount after pd_free_fn() is done
- blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and
blkcg_deactivate_policy()
- trace/blktrace: fix memory leak with using debugfs_lookup()
- btrfs: scrub: improve tree block error reporting
- arm64: zynqmp: Enable hs termination flag for USB dwc3 controller
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_INIT_XSTATE
- x86/fpu: Don't set TIF_NEED_FPU_LOAD for PF_IO_WORKER threads
- cpuidle: drivers: firmware: psci: Dont instrument suspend code
- cpuidle: lib/bug: Disable rcu_is_watching() during WARN/BUG
- perf/x86/intel/uncore: Add Meteor Lake support
- wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect()
- wifi: ath11k: fix monitor mode bringup crash
- wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds()
- rcu: Make RCU_LOCKDEP_WARN() avoid early lockdep checks
- rcu: Suppress smp_processor_id() complaint in
synchronize_rcu_expedited_wait()
- srcu: Delegate work to the boot cpu if using SRCU_SIZE_SMALL
- rcu-tasks: Make rude RCU-Tasks work well with CPU hotplug
- rcu-tasks: Handle queue-shrink/callback-enqueue race condition
- wifi: ath11k: debugfs: fix to work with multiple PCI devices
- thermal: intel: Fix unsigned comparison with less than zero
- timers: Prevent union confusion from unexpected restart_syscall()
- x86/bugs: Reset speculation control settings on init
- bpftool: Always disable stack protection for BPF objects
- wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-
of-bounds
- wifi: rtw89: fix assignation of TX BD RAM table
- wifi: mt7601u: fix an integer underflow
- inet: fix fast path in __inet_hash_connect()
- ice: restrict PTP HW clock freq adjustments to 100, 000, 000 PPB
- ice: add missing checks for PF vsi type
- Compiler attributes: GCC cold function alignment workarounds
- ACPI: Don't build ACPICA with '-Os'
- bpf, docs: Fix modulo zero, division by zero, overflow, and underflow
- thermal: intel: intel_pch: Add support for Wellsburg PCH
- clocksource: Suspend the watchdog temporarily when high read latency
detected
- crypto: hisilicon: Wipe entire pool on error
- net: bcmgenet: Add a check for oversized packets
- m68k: Check syscall_trace_enter() return code
- s390/mm,ptdump: avoid Kasan vs Memcpy Real markers swapping
- netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj()
- can: isotp: check CAN address family in isotp_bind()
- gcc-plugins: drop -std=gnu++11 to fix GCC 13 build
- tools/power/x86/intel-speed-select: Add Emerald Rapid quirk
- platform/x86: dell-ddv: Add support for interface version 3
- wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup
- ACPI: video: Fix Lenovo Ideapad Z570 DMI match
- net/mlx5: fw_tracer: Fix debug print
- coda: Avoid partial allocation of sig_inputArgs
- uaccess: Add minimum bounds check on kernel buffer size
- s390/idle: mark arch_cpu_idle() noinstr
- time/debug: Fix memory leak with using debugfs_lookup()
- PM: domains: fix memory leak with using debugfs_lookup()
- PM: EM: fix memory leak with using debugfs_lookup()
- Bluetooth: Fix issue with Actions Semi ATS2851 based devices
- Bluetooth: btusb: Add new PID/VID 0489:e0f2 for MT7921
- Bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE
- wifi: rtw89: debug: avoid invalid access on RTW89_DBG_SEL_MAC_30
- hv_netvsc: Check status in SEND_RNDIS_PKT completion message
- s390/kfence: fix page fault reporting
- devlink: Fix TP_STRUCT_entry in trace of devlink health report
- scm: add user copy checks to put_cmsg()
- drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Tab 3 X90F
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
- drm/amd/display: Reduce expected sdp bandwidth for dcn321
- drm/amd/display: Revert Reduce delay when sink device not able to ACK 00340h
write
- drm/amd/display: Fix potential null-deref in dm_resume
- drm/omap: dsi: Fix excessive stack usage
- HID: Add Mapping for System Microphone Mute
- drm/tiny: ili9486: Do not assume 8-bit only SPI controllers
- drm/amd/display: Defer DIG FIFO disable after VID stream enable
- drm/radeon: free iio for atombios when driver shutdown
- drm/amd: Avoid BUG() for case of SRIOV missing IP version
- drm/amdkfd: Page aligned memory reserve size
- scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
- Revert "fbcon: don't lose the console font across generic->chip driver
switch"
- drm/amd: Avoid ASSERT for some message failures
- drm: amd: display: Fix memory leakage
- drm/amd/display: fix mapping to non-allocated address
- HID: uclogic: Add frame type quirk
- HID: uclogic: Add battery quirk
- HID: uclogic: Add support for XP-PEN Deco Pro SW
- HID: uclogic: Add support for XP-PEN Deco Pro MW
- drm/msm/dsi: Add missing check for alloc_ordered_workqueue
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
- drm: rcar-du: Fix setting a reserved bit in DPLLCR
- drm/drm_print: correct format problem
- drm/amd/display: Set hvm_enabled flag for S/G mode
- drm/client: Test for connectors before sending hotplug event
- habanalabs: extend fatal messages to contain PCI info
- habanalabs: fix bug in timestamps registration code
- docs/scripts/gdb: add necessary make scripts_gdb step
- drm/msm/dpu: Add DSC hardware blocks to register snapshot
- ASoC: soc-compress: Reposition and add pcm_mutex
- ASoC: kirkwood: Iterate over array indexes instead of using pointer math
- regulator: max77802: Bounds check regulator id against opmode
- regulator: s5m8767: Bounds check id indexing into arrays
- Revert "drm/amdgpu: TA unload messages are not actually sent to psp when
amdgpu is uninstalled"
- drm/amd/display: fix FCLK pstate change underflow
- gfs2: Improve gfs2_make_fs_rw error handling
- hwmon: (coretemp) Simplify platform device handling
- hwmon: (nct6775) Directly call ASUS ACPI WMI method
- hwmon: (nct6775) B650/B660/X670 ASUS boards support
- pinctrl: at91: use devm_kasprintf() to avoid potential leaks
- drm/amd/display: Do not commit pipe when updating DRR
- scsi: snic: Fix memory leak with using debugfs_lookup()
- scsi: ufs: core: Fix device management cmd timeout flow
- HID: logitech-hidpp: Don't restart communication if not necessary
- drm/amd/display: Enable P-state validation checks for DCN314
- drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5
- drm/amd/display: Disable HUBP/DPP PG on DCN314 for now
- drm/amd/display: disable SubVP + DRR to prevent underflow
- dm thin: add cond_resched() to various workqueue loops
- dm cache: add cond_resched() to various workqueue loops
- nfsd: zero out pointers after putting nfsd_files on COPY setup error
- nfsd: don't hand out delegation on setuid files being opened for write
- cifs: prevent data race in smb2_reconnect()
- drm/i915/mtl: Correct implementation of Wa_18018781329
- drm/shmem-helper: Revert accidental non-GPL export
- driver core: fw_devlink: Avoid spurious error message
- wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu
- firmware: coreboot: framebuffer: Ignore reserved pixel color bits
- block: don't allow multiple bios for IOCB_NOWAIT issue
- block: clear bio->bi_bdev when putting a bio back in the cache
- block: be a bit more careful in checking for NULL bdev while polling
- rtc: pm8xxx: fix set-alarm race
- ipmi: ipmb: Fix the MODULE_PARM_DESC associated to 'retry_time_ms'
- ipmi:ssif: resend_msg() cannot fail
- ipmi_ssif: Rename idle state and check
- ipmi:ssif: Add a timer between request retries
- io_uring: Replace 0-length array with flexible array
- io_uring: use user visible tail in io_uring_poll()
- io_uring: handle TIF_NOTIFY_RESUME when checking for task_work
- io_uring: add a conditional reschedule to the IOPOLL cancelation loop
- io_uring: add reschedule point to handle_tw_list()
- io_uring/rsrc: disallow multi-source reg buffers
- io_uring: remove MSG_NOSIGNAL from recvmsg
- io_uring/poll: allow some retries for poll triggering spuriously
- io_uring: fix fget leak when fs don't support nowait buffered read
- s390/extmem: return correct segment type in __segment_load()
- s390: discard .interp section
- s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler
- s390/kprobes: fix current_kprobe never cleared after kprobes reenter
- KVM: s390: disable migration mode when dirty tracking is disabled
- cifs: improve checking of DFS links over STATUS_OBJECT_NAME_INVALID
- cifs: Fix uninitialized memory read in smb3_qfs_tcon()
- cifs: Fix uninitialized memory reads for oparms.mode
- cifs: fix mount on old smb servers
- cifs: introduce cifs_io_parms in smb2_async_writev()
- cifs: split out smb3_use_rdma_offload() helper
- cifs: don't try to use rdma offload on encrypted connections
- cifs: Check the lease context if we actually got a lease
- cifs: return a single-use cfid if we did not get a lease
- scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization
- scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info()
- scsi: mpi3mr: Remove unnecessary memcpy() to alltgt_info->dmi
- btrfs: hold block group refcount during async discard
- btrfs: sysfs: update fs features directory asynchronously
- locking/rwsem: Prevent non-first waiter from spinning in down_write()
slowpath
- ksmbd: fix wrong data area length for smb2 lock request
- ksmbd: do not allow the actual frame length to be smaller than the rfc1002
length
- ksmbd: fix possible memory leak in smb2_lock()
- torture: Fix hang during kthread shutdown phase
- ARM: dts: exynos: correct HDMI phy compatible in Exynos4
- io_uring: mark task TASK_RUNNING before handling resume/task work
- hfs: fix missing hfs_bnode_get() in __hfs_bnode_create
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- exfat: fix reporting fs error when reading dir beyond EOF
- exfat: fix unexpected EOF while reading dir
- exfat: redefine DIR_DELETED as the bad cluster number
- exfat: fix inode->i_blocks for non-512 byte sector size device
- fs: dlm: start midcomms before scand
- fs: dlm: fix use after free in midcomms commit
- fs: dlm: be sure to call dlm_send_queue_flush()
- fs: dlm: fix race setting stop tx flag
- fs: dlm: don't set stop rx flag after node reset
- fs: dlm: move sending fin message into state change handling
- fs: dlm: send FIN ack back in right cases
- f2fs: fix information leak in f2fs_move_inline_dirents()
- f2fs: retry to update the inode page given data corruption
- f2fs: fix cgroup writeback accounting with fs-layer encryption
- f2fs: fix kernel crash due to null io->bio
- f2fs: Revert "f2fs: truncate blocks in batch in __complete_revoke_list()"
- ocfs2: fix defrag path triggering jbd2 ASSERT
- ocfs2: fix non-auto defrag path not working issue
- fs/cramfs/inode.c: initialize file_ra_state
- selftests/landlock: Skip overlayfs tests when not supported
- selftests/landlock: Test ptrace as much as possible with Yama
- udf: Truncate added extents on failed expansion
- udf: Do not bother merging very long extents
- udf: Do not update file length for failed writes to inline files
- udf: Preserve link count of system files
- udf: Detect system inodes linked into directory hierarchy
- udf: Fix file corruption when appending just after end of preallocated
extent
- md: don't update recovery_cp when curr_resync is ACTIVE
- KVM: Destroy target device if coalesced MMIO unregistration fails
- KVM: VMX: Fix crash due to uninitialized current_vmcs
- KVM: Register /dev/kvm as the _very_ last thing during initialization
- KVM: x86: Purge "highest ISR" cache when updating APICv state
- KVM: x86: Blindly get current x2APIC reg value on "nodecode write" traps
- KVM: x86: Don't inhibit APICv/AVIC on xAPIC ID "change" if APIC is disabled
- KVM: x86: Don't inhibit APICv/AVIC if xAPIC ID mismatch is due to 32-bit ID
- KVM: SVM: Flush the "current" TLB when activating AVIC
- KVM: SVM: Process ICR on AVIC IPI delivery failure due to invalid target
- KVM: SVM: Don't put/load AVIC when setting virtual APIC mode
- KVM: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI
- KVM: x86: Inject #GP on x2APIC WRMSR that sets reserved bits 63:32
- KVM: SVM: Fix potential overflow in SEV's send|receive_update_data()
- KVM: SVM: hyper-v: placate modpost section mismatch error
- selftests: x86: Fix incorrect kernel headers search path
- x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows)
- x86/crash: Disable virt in core NMI crash handler to avoid double shootdown
- x86/reboot: Disable virtualization in an emergency if SVM is supported
- x86/reboot: Disable SVM, not just VMX, when stopping CPUs
- x86/kprobes: Fix __recover_optprobed_insn check optimizing logic
- x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe
range
- x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Fix mixed steppings support
- x86/speculation: Allow enabling STIBP with legacy IBRS
- Documentation/hw-vuln: Document the interaction between IBRS and STIBP
- virt/sev-guest: Return -EIO if certificate buffer is not large enough
- brd: mark as nowait compatible
- brd: return 0/-error from brd_insert_page()
- brd: check for REQ_NOWAIT and set correct page allocation mask
- ima: fix error handling logic when file measurement failed
- ima: Align ima_file_mmap() parameters with mmap_file LSM hook
- selftests/powerpc: Fix incorrect kernel headers search path
- selftests/ftrace: Fix eprobe syntax test case to check filter support
- selftests: sched: Fix incorrect kernel headers search path
- selftests: core: Fix incorrect kernel headers search path
- selftests: pid_namespace: Fix incorrect kernel headers search path
- selftests: arm64: Fix incorrect kernel headers search path
- selftests: clone3: Fix incorrect kernel headers search path
- selftests: pidfd: Fix incorrect kernel headers search path
- selftests: membarrier: Fix incorrect kernel headers search path
- selftests: kcmp: Fix incorrect kernel headers search path
- selftests: media_tests: Fix incorrect kernel headers search path
- selftests: gpio: Fix incorrect kernel headers search path
- selftests: filesystems: Fix incorrect kernel headers search path
- selftests: user_events: Fix incorrect kernel headers search path
- selftests: ptp: Fix incorrect kernel headers search path
- selftests: sync: Fix incorrect kernel headers search path
- selftests: rseq: Fix incorrect kernel headers search path
- selftests: move_mount_set_group: Fix incorrect kernel headers search path
- selftests: mount_setattr: Fix incorrect kernel headers search path
- selftests: perf_events: Fix incorrect kernel headers search path
- selftests: ipc: Fix incorrect kernel headers search path
- selftests: futex: Fix incorrect kernel headers search path
- selftests: drivers: Fix incorrect kernel headers search path
- selftests: dmabuf-heaps: Fix incorrect kernel headers search path
- selftests: vm: Fix incorrect kernel headers search path
- selftests: seccomp: Fix incorrect kernel headers search path
- irqdomain: Fix association race
- irqdomain: Fix disassociation race
- irqdomain: Look for existing mapping only once
- irqdomain: Drop bogus fwspec-mapping error handling
- irqdomain: Refactor __irq_domain_alloc_irqs()
- irqdomain: Fix mapping-creation race
- irqdomain: Fix domain registration race
- crypto: qat - fix out-of-bounds read
- mm/damon/paddr: fix missing folio_put()
- ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls()
- ALSA: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC
- jbd2: fix data missing when reusing bh which is ready to be checkpointed
- ext4: optimize ea_inode block expansion
- ext4: refuse to create ea block when umounted
- cxl/pmem: Fix nvdimm registration races
- Input: exc3000 - properly stop timer on shutdown
- mtd: spi-nor: sfdp: Fix index value for SCCR dwords
- mtd: spi-nor: spansion: Consider reserved bits in CFR5 register
- dm: send just one event on resize, not two
- dm: add cond_resched() to dm_wq_work()
- dm: add cond_resched() to dm_wq_requeue_work()
- wifi: rtw88: use RTW_FLAG_POWERON flag to prevent to power on/off twice
- wifi: rtl8xxxu: Use a longer retry limit of 48
- wifi: ath11k: allow system suspend to survive ath11k
- wifi: cfg80211: Fix use after free for wext
- wifi: cfg80211: Set SSID if it is not already set
- cpuidle: add ARCH_SUSPEND_POSSIBLE dependencies
- qede: fix interrupt coalescing configuration
- thermal: intel: powerclamp: Fix cur_state for multi package system
- dm flakey: fix logic when corrupting a bio
- dm cache: free background tracker's queued work in btracker_destroy
- dm flakey: don't corrupt the zero page
- dm flakey: fix a bug with 32-bit highmem systems
- hwmon: (peci/cputemp) Fix off-by-one in coretemp_label allocation
- hwmon: (nct6775) Fix incorrect parenthesization in nct6775_write_fan_div()
- spi: intel: Check number of chip selects after reading the descriptor
- ARM: dts: qcom: sdx65: Add Qcom SMMU-500 as the fallback for IOMMU node
- ARM: dts: qcom: sdx55: Add Qcom SMMU-500 as the fallback for IOMMU node
- ARM: dts: exynos: correct TMU phandle in Exynos4210
- ARM: dts: exynos: correct TMU phandle in Exynos4
- ARM: dts: exynos: correct TMU phandle in Odroid XU3 family
- ARM: dts: exynos: correct TMU phandle in Exynos5250
- ARM: dts: exynos: correct TMU phandle in Odroid XU
- ARM: dts: exynos: correct TMU phandle in Odroid HC1
- arm64: acpi: Fix possible memory leak of ffh_ctxt
- arm64: mm: hugetlb: Disable HUGETLB_PAGE_OPTIMIZE_VMEMMAP
- arm64: Reset KASAN tag in copy_highpage with HW tags only
- fuse: add inode/permission checks to fileattr_get/fileattr_set
- rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails
- ceph: update the time stamps and try to drop the suid/sgid
- regulator: core: Use ktime_get_boottime() to determine how long a regulator
was off
- panic: fix the panic_print NMI backtrace setting
- mm/hwpoison: convert TTU_IGNORE_HWPOISON to TTU_HWPOISON
- genirq/msi, platform-msi: Ensure that MSI descriptors are unreferenced
- genirq/msi: Take the per-device MSI lock before validating the control
structure
- spi: spi-sn-f-ospi: fix duplicate flag while assigning to mode_bits
- alpha: fix FEN fault handling
- dax/kmem: Fix leak of memory-hotplug resources
- mips: fix syscall_get_nr
- media: ipu3-cio2: Fix PM runtime usage_count in driver unbind
- remoteproc/mtk_scp: Move clk ops outside send_lock
- vfio: Fix NULL pointer dereference caused by uninitialized group->iommufd
- docs: gdbmacros: print newest record
- mm: memcontrol: deprecate charge moving
- mm/thp: check and bail out if page in deferred queue already
- ktest.pl: Give back console on Ctrt^C on monitor
- kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list
- ktest.pl: Fix missing "end_monitor" when machine check fails
- ktest.pl: Add RUN_TIMEOUT option with default unlimited
- memory tier: release the new_memtier in find_create_memory_tier()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- tools/bootconfig: fix single & used for logical condition
- tracing/eprobe: Fix to add filter on eprobe description in README file
- iommu/amd: Add a length limitation for the ivrs_acpihid command-line
parameter
- scsi: aacraid: Allocate cmd_priv with scsicmd
- scsi: qla2xxx: Fix link failure in NPIV environment
- scsi: qla2xxx: Check if port is online before sending ELS
- scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests
- scsi: qla2xxx: Remove unintended flag clearing
- scsi: qla2xxx: Fix erroneous link down
- scsi: qla2xxx: Remove increment of interface err cnt
- scsi: ses: Don't attach if enclosure has no components
- scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()
- scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses
- scsi: ses: Fix possible desc_ptr out-of-bounds accesses
- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
- RISC-V: add a spin_shadow_stack declaration
- riscv: Avoid enabling interrupts in die()
- riscv: mm: fix regression due to update_mmu_cache change
- riscv: jump_label: Fixup unaligned arch_static_branch function
- riscv: ftrace: Fixup panic by disabling preemption
- riscv, mm: Perform BPF exhandler fixup on page fault
- riscv: ftrace: Remove wasted nops for !RISCV_ISA_C
- riscv: ftrace: Reduce the detour code size to half
- MIPS: DTS: CI20: fix otg power gpio
- PCI/PM: Observe reset delay irrespective of bridge_d3
- PCI: Unify delay handling for reset and resume
- PCI: hotplug: Allow marking devices as disconnected during bind/unbind
- PCI: Avoid FLR for AMD FCH AHCI adapters
- PCI/DPC: Await readiness of secondary bus after reset
- bus: mhi: ep: Only send -ENOTCONN status if client driver is available
- bus: mhi: ep: Move chan->lock to the start of processing queued ch ring
- bus: mhi: ep: Save channel state locally during suspend and resume
- iommufd: Make sure to zero vfio_iommu_type1_info before copying to user
- iommufd: Do not add the same hwpt to the ioas->hwpt_list twice
- iommu/vt-d: Avoid superfluous IOTLB tracking in lazy mode
- iommu/vt-d: Fix PASID directory pointer coherency
- vfio/type1: exclude mdevs from VFIO_UPDATE_VADDR
- vfio/type1: prevent underflow of locked_vm via exec()
- vfio/type1: track locked_vm per dma
- vfio/type1: restore locked_vm
- drm/amd: Fix initialization for nbio 7.5.1
- drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv
- drm/radeon: Fix eDP for single-display iMac11,2
- drm/i915: Don't use stolen memory for ring buffers with LLC
- drm/i915: Don't use BAR mappings for ring buffers with LLC
- drm/gud: Fix UBSAN warning
- drm/edid: fix AVI infoframe aspect ratio handling
- drm/edid: fix parsing of 3D modes from HDMI VSDB
- qede: avoid uninitialized entries in coal_entry array
- brd: use radix_tree_maybe_preload instead of radix_tree_preload
- net: avoid double iput when sock_alloc_file fails
- Linux 6.2.3
* Miscellaneous Ubuntu changes
- [Config] update annotations after applying 6.2.3 stable patches
- [Config] update annotations after applying 6.2.6 stable patches
-- Paolo Pisati <email address hidden> Thu, 06 Apr 2023 09:17:43 +0200
-
linux-oracle (6.2.0-1002.2) lunar; urgency=medium
* lunar/linux-oracle: 6.2.0-1002.2 -proposed tracker (LP: #2011519)
-- Paolo Pisati <email address hidden> Tue, 14 Mar 2023 11:42:35 +0100
-
linux-oracle (5.19.0-1010.11) kinetic; urgency=medium
[ Ubuntu: 5.19.0-23.24 ]
* CVE-2022-2602
- SAUCE: io_uring/af_unix: defer registered files gc to io_uring release
- SAUCE: io_uring/af_unix: fix memleak during unix GC
* CVE-2022-41674
- SAUCE: wifi: cfg80211: fix u8 overflow in
cfg80211_update_notlisted_nontrans()
- SAUCE: wifi: cfg80211/mac80211: reject bad MBSSID elements
- SAUCE: wifi: cfg80211: ensure length byte is present before access
- SAUCE: wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- SAUCE: wifi: cfg80211: update hidden BSSes to avoid WARN_ON
* CVE-2022-42722
- SAUCE: wifi: mac80211: fix crash in beacon protection for P2P-device
* CVE-2022-42721
- SAUCE: wifi: cfg80211: avoid nontransmitted BSS list corruption
* CVE-2022-42720
- SAUCE: wifi: cfg80211: fix BSS refcounting bugs
* CVE-2022-42719
- SAUCE: wifi: mac80211: fix MBSSID parsing use-after-free
-- Thadeu Lima de Souza Cascardo <email address hidden> Sat, 15 Oct 2022 17:37:34 -0300
-
linux-oracle (5.19.0-1008.8) kinetic; urgency=medium
* kinetic/linux-oracle: 5.19.0-1008.8 -proposed tracker (LP: #1992749)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/master)
* Miscellaneous Ubuntu changes
- [Config] updateconfigs following Ubuntu-5.19.0-21.21 rebase
-- Paolo Pisati <email address hidden> Thu, 13 Oct 2022 12:32:27 +0200
