linux-hwe-6.2 (6.2.0-39.40~22.04.1) jammy; urgency=medium
* jammy/linux-hwe-6.2: 6.2.0-39.40~22.04.1 -proposed tracker (LP: #2041556)
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
- [Packaging] resync update-dkms-versions helper
- [Packaging] update variants
[ Ubuntu: 6.2.0-39.40 ]
* lunar/linux: 6.2.0-39.40 -proposed tracker (LP: #2043451)
* USB bus error after upgrading to proposed kernel on lunar and jammy
(LP: #2043197)
- USB: core: Fix oversight in SuperSpeed initialization
* Include cifs.ko in linux-modules package (LP: #2042546)
- [Packaging] Replace fs/cifs with fs/smb/client in inclusion list
[ Ubuntu: 6.2.0-38.39 ]
* lunar/linux: 6.2.0-38.39 -proposed tracker (LP: #2041557)
* CVE-2023-25775
- RDMA/irdma: Prevent zero-length STAG registration
* CVE-2023-5345
- fs/smb/client: Reset password pointer to NULL
* CVE-2023-39189
- netfilter: nfnetlink_osf: avoid OOB read
* SMC stats: Wrong bucket calculation for payload of exactly 4096 bytes
(LP: #2039575)
- net/smc: Fix pos miscalculation in statistics
* [SRU][J/L/M] UBUNTU: [Packaging] Make WWAN driver a loadable module
(LP: #2033406)
- [Packaging] Make WWAN driver loadable modules
* CVE-2023-45871
- igb: set max size RX buffer when store bad packet is enabled
* CVE-2023-39193
- netfilter: xt_sctp: validate the flag_info count
* CVE-2023-39192
- netfilter: xt_u32: validate user space input
* CVE-2023-31085
- ubi: Refuse attaching if mtd's erasesize is 0
* CVE-2023-5717
- perf: Disallow mis-matched inherited group reads
* CVE-2023-5178
- nvmet-tcp: Fix a possible UAF in queue intialization setup
* CVE-2023-5158
- vringh: don't use vringh_kiov_advance() in vringh_iov_xfer()
* CVE-2023-5090
- x86: KVM: SVM: always update the x2avic msr interception
* usbip: error: failed to open /usr/share/hwdata//usb.ids (LP: #2039439)
- [Packaging] Make linux-tools-common depend on hwdata
* Unable to use nvme drive to install Ubuntu 23.10 (LP: #2040157)
- misc: rtsx: Fix some platforms can not boot and move the l1ss judgment to
probe
* Lunar update: upstream stable patchset 2023-10-19 (LP: #2039884)
- ACPI: thermal: Drop nocrt parameter
- module: Expose module_init_layout_section()
- arm64: module-plts: inline linux/moduleloader.h
- arm64: module: Use module_init_layout_section() to spot init sections
- ARM: module: Use module_init_layout_section() to spot init sections
- lockdep: fix static memory detection even more
- parisc: Cleanup mmap implementation regarding color alignment
- parisc: sys_parisc: parisc_personality() is called from asm code
- io_uring/parisc: Adjust pgoff in io_uring mmap() for parisc
- kallsyms: Fix kallsyms_selftest failure
- module/decompress: use vmalloc() for zstd decompression workspace
- Upstream stable to v6.1.51, v6.4.14
- erofs: ensure that the post-EOF tails are all zeroed
- ksmbd: fix wrong DataOffset validation of create context
- ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()
- ksmbd: replace one-element array with flex-array member in struct
smb2_ea_info
- ksmbd: reduce descriptor size if remaining bytes is less than request size
- ARM: pxa: remove use of symbol_get()
- mmc: au1xmmc: force non-modular build and remove symbol_get usage
- net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index
- rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff
- modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules
- USB: serial: option: add Quectel EM05G variant (0x030e)
- USB: serial: option: add FOXCONN T99W368/T99W373 product
- ALSA: usb-audio: Fix init call orders for UAC1
- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption
- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0
- HID: wacom: remove the battery when the EKR is off
- staging: rtl8712: fix race condition
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race
condition
- wifi: mt76: mt7921: do not support one stream on secondary antenna only
- wifi: mt76: mt7921: fix skb leak by txs missing in AMSDU
- serial: qcom-geni: fix opp vote on shutdown
- serial: sc16is7xx: fix broken port 0 uart init
- serial: sc16is7xx: fix bug when first setting GPIO direction
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
- fsi: master-ast-cf: Add MODULE_FIRMWARE macro
- tcpm: Avoid soft reset when partner does not support get_status
- dt-bindings: sc16is7xx: Add property to change GPIO function
- nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers()
- nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse
- usb: typec: tcpci: clear the fault status bit
- pinctrl: amd: Don't show `Invalid config param` errors
- wifi: rtw88: usb: kill and free rx urbs on probe failure
- Upstream stable to v6.1.52, v6.4.15
* Lunar update: upstream stable patchset 2023-10-18 (LP: #2039742)
- NFSv4.2: fix error handling in nfs42_proc_getxattr
- NFSv4: fix out path in __nfs4_get_acl_uncached
- xprtrdma: Remap Receive buffers after a reconnect
- drm/ast: Use drm_aperture_remove_conflicting_pci_framebuffers
- fbdev/radeon: use pci aperture helpers
- PCI: acpiphp: Reassign resources on bridge if necessary
- MIPS: cpu-features: Enable octeon_cache by cpu_type
- MIPS: cpu-features: Use boot_cpu_type for CPU type based features
- jbd2: remove t_checkpoint_io_list
- jbd2: remove journal_clean_one_cp_list()
- jbd2: fix a race when checking checkpoint buffer busy
- can: raw: fix receiver memory leak
- can: raw: fix lockdep issue in raw_release()
- s390/zcrypt: remove unnecessary (void *) conversions
- s390/zcrypt: fix reply buffer calculations for CCA replies
- drm/i915: Add the gen12_needs_ccs_aux_inv helper
- drm/i915/gt: Ensure memory quiesced before invalidation
- drm/i915/gt: Poll aux invalidation register bit on invalidation
- drm/i915/gt: Support aux invalidation on all engines
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- tracing: Fix memleak due to race between current_tracer and trace
- octeontx2-af: SDP: fix receive link config
- devlink: move code to a dedicated directory
- devlink: add missing unregister linecard notification
- net: dsa: felix: fix oversize frame dropping for always closed tc-taprio
gates
- sock: annotate data-races around prot->memory_pressure
- dccp: annotate data-races in dccp_poll()
- ipvlan: Fix a reference count leak warning in ipvlan_ns_exit()
- mlxsw: pci: Set time stamp fields also when its type is MIRROR_UTC
- mlxsw: reg: Fix SSPR register layout
- mlxsw: Fix the size of 'VIRT_ROUTER_MSB'
- selftests: mlxsw: Fix test failure on Spectrum-4
- net: dsa: mt7530: fix handling of 802.1X PAE frames
- net: bgmac: Fix return value check for fixed_phy_register()
- net: bcmgenet: Fix return value check for fixed_phy_register()
- net: validate veth and vxcan peer ifindexes
- ipv4: fix data-races around inet->inet_id
- ice: fix receive buffer size miscalculation
- Revert "ice: Fix ice VF reset during iavf initialization"
- ice: Fix NULL pointer deref during VF reset
- selftests: bonding: do not set port down before adding to bond
- can: isotp: fix support for transmission of SF without flow control
- igb: Avoid starting unnecessary workqueues
- igc: Fix the typo in the PTM Control macro
- net/sched: fix a qdisc modification with ambiguous command request
- i40e: fix potential NULL pointer dereferencing of pf->vf
i40e_sync_vsi_filters()
- netfilter: nf_tables: flush pending destroy work before netlink notifier
- netfilter: nf_tables: fix out of memory error handling
- rtnetlink: Reject negative ifindexes in RTM_NEWLINK
- bonding: fix macvlan over alb bond support
- KVM: x86/mmu: Fix an sign-extension bug with mmu_seq that hangs vCPUs
- ASoC: amd: yc: Add VivoBook Pro 15 to quirks list for acp6x
- ASoC: cs35l41: Correct amp_gain_tlv values
- ibmveth: Use dcbf rather than dcbfl
- wifi: mac80211: limit reorder_buf_filtered to avoid UBSAN warning
- platform/x86: ideapad-laptop: Add support for new hotkeys found on ThinkBook
14s Yoga ITL
- NFSv4: Fix dropped lock for racing OPEN and delegation return
- clk: Fix slab-out-of-bounds error in devm_clk_release()
- mm,ima,kexec,of: use memblock_free_late from ima_free_kexec_buffer
- shmem: fix smaps BUG sleeping while atomic
- ALSA: ymfpci: Fix the missing snd_card_free() call at probe error
- mm/gup: handle cont-PTE hugetlb pages correctly in gup_must_unshare() via
GUP-fast
- mm: add a call to flush_cache_vmap() in vmap_pfn()
- mm: memory-failure: fix unexpected return value in soft_offline_page()
- NFS: Fix a use after free in nfs_direct_join_group()
- nfsd: Fix race to FREE_STATEID and cl_revoked
- selinux: set next pointer before attaching to list
- batman-adv: Trigger events for auto adjusted MTU
- batman-adv: Don't increase MTU when set by user
- batman-adv: Do not get eth header before batadv_check_management_packet
- batman-adv: Fix TT global entry leak when client roamed back
- batman-adv: Fix batadv_v_ogm_aggr_send memory leak
- batman-adv: Hold rtnl lock during MTU update via netlink
- lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels
- riscv: Handle zicsr/zifencei issue between gcc and binutils
- riscv: Fix build errors using binutils2.37 toolchains
- radix tree: remove unused variable
- of: unittest: Fix EXPECT for parse_phandle_with_args_map() test
- of: dynamic: Refactor action prints to not use "%pOF" inside devtree_lock
- pinctrl: amd: Mask wake bits on probe again
- media: vcodec: Fix potential array out-of-bounds in encoder queue_setup
- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root
bus
- drm/vmwgfx: Fix shader stage validation
- drm/display/dp: Fix the DP DSC Receiver cap size
- x86/fpu: Invalidate FPU state correctly on exec()
- hwmon: (aquacomputer_d5next) Add selective 200ms delay after sending ctrl
report
- nfs: use vfs setgid helper
- nfsd: use vfs setgid helper
- cgroup/cpuset: Rename functions dealing with DEADLINE accounting
- sched/cpuset: Bring back cpuset_mutex
- sched/cpuset: Keep track of SCHED_DEADLINE task in cpusets
- cgroup/cpuset: Iterate only if DEADLINE tasks are present
- sched/deadline: Create DL BW alloc, free & check overflow interface
- cgroup/cpuset: Free DL BW in case can_attach() fails
- ublk: remove check IO_URING_F_SQE128 in ublk_ch_uring_cmd
- can: raw: add missing refcount for memory leak fix
- madvise:madvise_free_pte_range(): don't use mapcount() against large folio
for sharing check
- scsi: snic: Fix double free in snic_tgt_create()
- scsi: core: raid_class: Remove raid_component_add()
- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
- pinctrl: renesas: rzg2l: Fix NULL pointer dereference in
rzg2l_dt_subnode_to_map()
- pinctrl: renesas: rzv2m: Fix NULL pointer dereference in
rzv2m_dt_subnode_to_map()
- pinctrl: renesas: rza2: Add lock around
pinctrl_generic{{add,remove}_group,{add,remove}_function}
- dma-buf/sw_sync: Avoid recursive lock during fence signal
- gpio: sim: dispose of irq mappings before destroying the irq_sim domain
- gpio: sim: pass the GPIO device's software node to irq domain
- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ
- maple_tree: disable mas_wr_append() when other readers are possible
- ASoC: amd: vangogh: select CONFIG_SND_AMD_ACP_CONFIG
- tg3: Use slab_build_skb() when needed
- Upstream stable to v6.1.50, v6.4.13
* CVE-2023-42754
- ipv4: fix null-deref in ipv4_link_failure
* Remove duplication of devm_pwmchip_add function definition (LP: #2039542)
- Revert "pwm: Add a stub for devm_pwmchip_add()"
* Lunar update: upstream stable patchset 2023-10-11 (LP: #2039110)
- selftests: forwarding: tc_actions: cleanup temporary files when test is
aborted
- net/smc: replace mutex rmbs_lock and sndbufs_lock with rw_semaphore
- net: phy: at803x: Use devm_regulator_get_enable_optional()
- net: phy: at803x: fix the wol setting functions
- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini
- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1
- drm/amdgpu: fix memory leak in mes self test
- ASoC: Intel: sof_sdw: add quirk for MTL RVP
- ASoC: Intel: sof_sdw: add quirk for LNL RVP
- PCI: tegra194: Fix possible array out of bounds access
- ASoC: SOF: amd: Add pci revision id check
- drm/stm: ltdc: fix late dereference check
- drm: rcar-du: remove R-Car H3 ES1.* workarounds
- ASoC: amd: vangogh: Add check for acp config flags in vangogh platform
- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings
- ASoC: Intel: sof_sdw_rt_sdca_jack_common: test SOF_JACK_JDSRC in _exit
- ASoC: Intel: sof_sdw: Add support for Rex soundwire
- iopoll: Call cpu_relax() in busy loops
- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion
- dma-remap: use kvmalloc_array/kvfree for larger dma memory remap
- accel/habanalabs: add pci health check during heartbeat
- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL
Keyboard
- iommu/amd: Introduce Disable IRTE Caching Support
- drm/amdgpu: install stub fence into potential unused fence pointers
- drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz
- RDMA/mlx5: Return the firmware result upon destroying QP/RQ
- drm/amd/display: Skip DPP DTO update if root clock is gated
- drm/amd/display: Enable dcn314 DPP RCO
- ASoC: SOF: core: Free the firmware trace before calling snd_sof_shutdown()
- HID: intel-ish-hid: ipc: Add Arrow Lake PCI device ID
- ALSA: hda/realtek: Add quirks for ROG ALLY CS35l41 audio
- smb: client: fix warning in cifs_smb3_do_mount()
- cifs: fix session state check in reconnect to avoid use-after-free issue
- serial: stm32: Ignore return value of uart_remove_one_port() in .remove()
- led: qcom-lpg: Fix resource leaks in for_each_available_child_of_node()
loops
- media: v4l2-mem2mem: add lock to protect parameter num_rdy
- media: camss: set VFE bpl_alignment to 16 for sdm845 and sm8250
- usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push
- usb: gadget: uvc: queue empty isoc requests if no video buffer is available
- media: platform: mediatek: vpu: fix NULL ptr dereference
- thunderbolt: Read retimer NVM authentication status prior
tb_retimer_set_inbound_sbtx()
- usb: chipidea: imx: don't request QoS for imx8ulp
- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
- gfs2: Fix possible data races in gfs2_show_options()
- pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()
- thunderbolt: Add Intel Barlow Ridge PCI ID
- thunderbolt: Limit Intel Barlow Ridge USB3 bandwidth
- firewire: net: fix use after free in fwnet_finish_incoming_packet()
- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub)
- Bluetooth: L2CAP: Fix use-after-free
- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
- ceph: try to dump the msgs when decoding fails
- drm/amdgpu: Fix potential fence use-after-free v2
- fs/ntfs3: Enhance sanity check while generating attr_list
- fs: ntfs3: Fix possible null-pointer dereferences in mi_read()
- fs/ntfs3: Mark ntfs dirty when on-disk struct is corrupted
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760
- ALSA: hda: fix a possible null-pointer dereference due to data race in
snd_hdac_regmap_sync()
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X
- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V
- powerpc/kasan: Disable KCOV in KASAN code
- Bluetooth: MGMT: Use correct address for memcpy()
- ring-buffer: Do not swap cpu_buffer during resize process
- igc: read before write to SRRCTL register
- drm/amd/display: save restore hdcp state when display is unplugged from mst
hub
- drm/amd/display: phase3 mst hdcp for multiple displays
- drm/amd/display: fix access hdcp_workqueue assert
- fbdev/hyperv-fb: Do not set struct fb_info.apertures
- btrfs: move out now unused BG from the reclaim list
- btrfs: fix use-after-free of new block group that became unused
- virtio-mmio: don't break lifecycle of vm_dev
- vduse: Use proper spinlock for IRQ injection
- vdpa/mlx5: Fix mr->initialized semantics
- vdpa/mlx5: Delete control vq iotlb in destroy_mr only when necessary
- cifs: fix potential oops in cifs_oplock_break
- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
- i2c: hisi: Only handle the interrupt of the driver's transfer
- i2c: tegra: Fix i2c-tegra DMA config option processing
- fbdev: mmp: fix value check in mmphw_probe()
- powerpc/rtas_flash: allow user copy to flash block cache objects
- vdpa: Add features attr to vdpa_nl_policy for nlattr length check
- vdpa: Add queue index attr to vdpa_nl_policy for nlattr length check
- vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check
- vdpa: Enable strict validation for netlinks ops
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32
platforms
- btrfs: fix incorrect splitting in btrfs_drop_extent_map_range
- btrfs: fix BUG_ON condition in btrfs_cancel_balance
- i2c: designware: Correct length byte validation logic
- i2c: designware: Handle invalid SMBus block data response length value
- net: xfrm: Fix xfrm_address_filter OOB read
- net: af_key: fix sadb_x_filter validation
- net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure
- xfrm: fix slab-use-after-free in decode_session6
- ip6_vti: fix slab-use-after-free in decode_session6
- ip_vti: fix potential slab-use-after-free in decode_session6
- xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH
- virtio_net: notify MAC address change on device initialization
- virtio-net: set queues after driver_ok
- net: pcs: Add missing put_device call in miic_create
- net: phy: fix IRQ-based wake-on-lan over hibernate / power off
- selftests: mirror_gre_changes: Tighten up the TTL test match
- drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs
- net: macb: In ZynqMP resume always configure PS GTR for non-wakeup source
- octeon_ep: cancel tx_timeout_task later in remove sequence
- netfilter: nf_tables: fix false-positive lockdep splat
- ipvs: fix racy memcpy in proc_do_sync_threshold
- net: phy: broadcom: stub c45 read/write for 54810
- team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- net: openvswitch: reject negative ifindex
- iavf: fix FDIR rule fields masks validation
- i40e: fix misleading debug logs
- net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset
- sfc: don't unregister flow_indr if it was never registered
- sock: Fix misuse of sk_under_memory_pressure()
- net: do not allow gso_size to be set to GSO_BY_FRAGS
- qede: fix firmware halt over suspend and resume
- ice: Block switchdev mode when ADQ is active and vice versa
- bus: ti-sysc: Flush posted write on enable before reset
- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict
- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK 4C+
- ARM: dts: imx: align LED node names with dtschema
- ARM: dts: imx6: phytec: fix RTC interrupt level
- arm64: dts: imx8mm: Drop CSI1 PHY reference clock configuration
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- arm64: dts: imx93: Fix anatop node size
- ASoC: rt5665: add missed regulator_bulk_disable
- ASoC: meson: axg-tdm-formatter: fix channel slot allocation
- ALSA: hda/realtek: Add quirks for HP G11 Laptops
- soc: aspeed: uart-routing: Use __sysfs_match_string
- soc: aspeed: socinfo: Add kfree for kstrdup
- ALSA: hda/realtek - Remodified 3k pull low procedure
- riscv: uaccess: Return the number of bytes effectively not copied
- serial: 8250: Fix oops for port->pm on uart_change_pm()
- ALSA: usb-audio: Add support for Mythware XA001AU capture and playback
interfaces.
- cifs: Release folio lock on fscache read hit.
- virtio-net: Zero max_tx_vq field for VIRTIO_NET_CTRL_MQ_HASH_CONFIG case
- arm64: dts: rockchip: Fix Wifi/Bluetooth on ROCK Pi 4 boards
- blk-crypto: dynamically allocate fallback profile
- mmc: wbsd: fix double mmc_free_host() in wbsd_init()
- mmc: block: Fix in_flight[issue_type] value error
- drm/qxl: fix UAF on handle creation
- drm/i915/sdvo: fix panel_type initialization
- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7
- ASoC: amd: vangogh: select CONFIG_SND_AMD_ACP_CONFIG
- drm/amd/display: disable RCO for DCN314
- zsmalloc: allow only one active pool compaction context
- sched/fair: unlink misfit task from cpu overutilized
- sched/fair: Remove capacity inversion detection
- drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV
register
- netfilter: set default timeout to 3 secs for sctp shutdown send and recv
state
- arm64/ptrace: Ensure that SME is set up for target when writing SSVE state
- drm/amdgpu: keep irq count in amdgpu_irq_disable_all
- drm/nouveau/disp: fix use-after-free in error handling of
nouveau_connector_create
- net: fix the RTO timer retransmitting skb every 1ms if linear option is
enabled
- mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove
- rust: macros: vtable: fix `HAS_*` redefinition (`gen_const_name`)
- media: mtk-jpeg: Set platform driver data earlier
- xfrm: delete offloaded policy
- xfrm: don't skip free of empty state in acquire policy
- ARM: dts: imx: Set default tuning step for imx7d usdhc
- smb: client: fix null auth
- mmc: sunplus: fix return value check of mmc_add_host()
- Upstream stable to v6.1.47, v6.4.12
* Lunar update: upstream stable patchset 2023-10-10 (LP: #2038969)
- tpm: Disable RNG for all AMD fTPMs
- tpm: Add a helper for checking hwrng enabled
- ksmbd: validate command request size
- ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea()
- wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems()
- wifi: rtw89: fix 8852AE disconnection caused by RX full flags
- selftests: forwarding: Set default IPv6 traceroute utility
- wireguard: allowedips: expand maximum node depth
- mmc: moxart: read scr register without changing byte order
- ipv6: adjust ndisc_is_useropt() to also return true for PIO
- selftests: mptcp: join: fix 'delete and re-add' test
- selftests: mptcp: join: fix 'implicit EP' test
- mptcp: avoid bogus reset on fallback close
- mptcp: fix disconnect vs accept race
- dmaengine: pl330: Return DMA_PAUSED when transaction is paused
- net: mana: Fix MANA VF unload when hardware is unresponsive
- riscv/kexec: load initrd high in available memory
- riscv,mmio: Fix readX()-to-delay() ordering
- riscv/kexec: handle R_RISCV_CALL_PLT relocation type
- nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM9B1 256G and 512G
- drm/nouveau/gr: enable memory loads on helper invocation on all channels
- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues
- drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap()
- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1()
- drm/amd/display: check attr flag before set cursor degamma on DCN3+
- drm/amd/display: limit DPIA link rate to HBR3
- cpuidle: dt_idle_genpd: Add helper function to remove genpd topology
- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100
- radix tree test suite: fix incorrect allocation size for pthreads
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings
- drm/amd/pm: expose swctf threshold setting for legacy powerplay
- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock
settings
- drm/amd/pm: avoid unintentional shutdown due to temperature momentary
fluctuation
- io_uring: correct check for O_TMPFILE
- iio: cros_ec: Fix the allocation size for cros_ec_command
- iio: frequency: admv1013: propagate errors from regulator_get_voltage()
- iio: adc: ad7192: Fix ac excitation feature
- iio: adc: ina2xx: avoid NULL pointer dereference on OF device match
- binder: fix memory leak in binder_init()
- misc: rtsx: judge ASPM Mode to set PETXCFG Reg
- usb-storage: alauda: Fix uninit-value in alauda_check_media()
- usb: dwc3: Properly handle processing of pending events
- USB: Gadget: core: Help prevent panic during UVC unconfigure
- usb: common: usb-conn-gpio: Prevent bailing out if initial role is none
- usb: typec: tcpm: Fix response to vsafe0V event
- usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/mm: Fix VDSO and VVAR placement on 5-level paging machines
- x86/sev: Do not try to parse for the CC blob on non-AMD hardware
- x86/speculation: Add cpu_show_gds() prototype
- drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes
- iio: core: Prevent invalid memory access when there is no parent
- interconnect: qcom: Add support for mask-based BCMs
- interconnect: qcom: sm8450: add enable_mask for bcm nodes
- selftests/rseq: Fix build with undefined __weak
- selftests: forwarding: Add a helper to skip test when using veth pairs
- selftests: forwarding: ethtool: Skip when using veth pairs
- selftests: forwarding: ethtool_extended_state: Skip when using veth pairs
- selftests: forwarding: hw_stats_l3_gre: Skip when using veth pairs
- selftests: forwarding: Skip test when no interfaces are specified
- selftests: forwarding: Switch off timeout
- selftests: forwarding: tc_flower: Relax success criterion
- net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail()
- bpf, sockmap: Fix map type error in sock_map_del_link
- bpf, sockmap: Fix bug that strp_done cannot be called
- mISDN: Update parameter type of dsp_cmx_send()
- macsec: use DEV_STATS_INC()
- mptcp: fix the incorrect judgment for msk->cb_flags
- net/packet: annotate data-races around tp->status
- tcp: add missing family to tcp_set_ca_state() tracepoint
- tunnels: fix kasan splat when generating ipv4 pmtu error
- xsk: fix refcount underflow in error path
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- dccp: fix data-race around dp->dccps_mss_cache
- drivers: net: prevent tun_build_skb() to exceed the packet size limit
- drivers: vxlan: vnifilter: free percpu vni stats on error path
- iavf: fix potential races for FDIR filters
- IB/hfi1: Fix possible panic during hotplug remove
- drm/rockchip: Don't spam logs in atomic check
- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
- RDMA/umem: Set iova in ODP flow
- net: tls: avoid discarding data on record close
- net: marvell: prestera: fix handling IPv4 routes with nhid
- net: phy: at803x: remove set/get wol callbacks for AR8032
- net: dsa: ocelot: call dsa_tag_8021q_unregister() under rtnl_lock() on
driver remove
- net: hns3: refactor hclge_mac_link_status_wait for interface reuse
- net: hns3: add wait until mac link down
- net: hns3: fix deadlock issue when externel_lb and reset are executed
together
- nexthop: Fix infinite nexthop dump when using maximum nexthop ID
- nexthop: Make nexthop bucket dump more efficient
- nexthop: Fix infinite nexthop bucket dump when using maximum nexthop ID
- net: hns3: fix strscpy causing content truncation issue
- dmaengine: mcf-edma: Fix a potential un-allocated memory access
- dmaengine: owl-dma: Modify mismatched function name
- net/mlx5: Allow 0 for total host VFs
- net/mlx5: LAG, Check correct bucket when modifying LAG
- net/mlx5: Skip clock update work when device is in error state
- net/mlx5: Reload auxiliary devices in pci error handlers
- ibmvnic: Enforce stronger sanity checks on login response
- ibmvnic: Unmap DMA login rsp buffer on send login fail
- ibmvnic: Handle DMA unmapping of login buffs in release functions
- ibmvnic: Do partial reset on login failure
- ibmvnic: Ensure login failure recovery is safe from other resets
- gpio: ws16c48: Fix off-by-one error in WS16C48 resource region extent
- gpio: sim: mark the GPIO chip as a one that can sleep
- btrfs: wait for actual caching progress during allocation
- btrfs: don't stop integrity writeback too early
- btrfs: properly clear end of the unreserved range in cow_file_range
- btrfs: exit gracefully if reloc roots don't match
- btrfs: reject invalid reloc tree root keys with stack dump
- btrfs: set cache_block_group_error if we find an error
- nvme-tcp: fix potential unbalanced freeze & unfreeze
- nvme-rdma: fix potential unbalanced freeze & unfreeze
- netfilter: nf_tables: report use refcount overflow
- scsi: core: Fix legacy /proc parsing buffer overflow
- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
- scsi: ufs: renesas: Fix private allocation
- scsi: 53c700: Check that command slot is not NULL
- scsi: snic: Fix possible memory leak if device_add() fails
- scsi: core: Fix possible memory leak if device_add() fails
- scsi: fnic: Replace return codes in fnic_clean_pending_aborts()
- scsi: qedi: Fix firmware halt over suspend and resume
- scsi: qedf: Fix firmware halt over suspend and resume
- platform/x86: serial-multi-instantiate: Auto detect IRQ resource for CSC3551
- ACPI: scan: Create platform device for CS35L56
- alpha: remove __init annotation from exported page_is_ram()
- drm/amd/pm/smu7: move variables to where they are used
- mmc: sdhci-f-sdh30: Replace with sdhci_pltfm
- cpuidle: psci: Move enabling OSI mode after power domains creation
- zsmalloc: fix races between modifications of fullness and isolated
- hugetlb: do not clear hugetlb dtor until allocating vmemmap
- mm: memory-failure: fix potential unexpected return value from
unpoison_memory()
- mm: memory-failure: avoid false hwpoison page mapped error info
- x86/linkage: Fix typo of BUILD_VDSO in asm/linkage.h
- selftests: forwarding: bridge_mdb: Check iproute2 version
- selftests: forwarding: tc_actions: Use ncat instead of nc
- selftests: forwarding: bridge_mdb: Make test more robust
- drm/bridge: it6505: Check power state with it6505->powered in IRQ handler
- drm/nouveau: remove unused tu102_gr_load() function
- Upstream stable to v6.1.46, v6.4.11
* Lunar update: upstream stable patchset 2023-10-02 (LP: #2038236)
- Upstream stable to v6.1.44, v6.4.9
- net/mlx5: Free irqs only on shutdown callback
- iommu/arm-smmu-v3: Work around MMU-600 erratum 1076982
- iommu/arm-smmu-v3: Document MMU-700 erratum 2812531
- iommu/arm-smmu-v3: Add explicit feature for nesting
- iommu/arm-smmu-v3: Document nesting-related errata
- arm64: dts: imx8mm-venice-gw7903: disable disp_blk_ctrl
- arm64: dts: imx8mm-venice-gw7904: disable disp_blk_ctrl
- arm64: dts: phycore-imx8mm: Label typo-fix of VPU
- arm64: dts: phycore-imx8mm: Correction in gpio-line-names
- arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux
- arm64: dts: freescale: Fix VPU G2 clock
- firmware: smccc: Fix use of uninitialised results structure
- lib/bitmap: workaround const_eval test build failure
- firmware: arm_scmi: Fix chan_free cleanup on SMC
- word-at-a-time: use the same return type for has_zero regardless of
endianness
- KVM: s390: fix sthyi error handling
- erofs: fix wrong primary bvec selection on deduplicated extents
- wifi: cfg80211: Fix return value in scan logic
- net/mlx5e: fix double free in macsec_fs_tx_create_crypto_table_groups
- net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx
- net/mlx5: fix potential memory leak in mlx5e_init_rep_rx
- net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer()
- net/mlx5e: Fix crash moving to switchdev mode when ntuple offload is set
- net/mlx5e: Move representor neigh cleanup to profile cleanup_tx
- bpf: Add length check for SK_DIAG_BPF_STORAGE_REQ_MAP_FD parsing
- rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length
- net: dsa: fix value check in bcm_sf2_sw_probe()
- perf test uprobe_from_different_cu: Skip if there is no gcc
- net: sched: cls_u32: Fix match key mis-addressing
- mISDN: hfcpci: Fix potential deadlock on &hc->lock
- qed: Fix scheduling in a tasklet while getting stats
- net: annotate data-races around sk->sk_reserved_mem
- net: annotate data-race around sk->sk_txrehash
- net: annotate data-races around sk->sk_max_pacing_rate
- net: add missing READ_ONCE(sk->sk_rcvlowat) annotation
- net: add missing READ_ONCE(sk->sk_sndbuf) annotation
- net: add missing READ_ONCE(sk->sk_rcvbuf) annotation
- net: annotate data-races around sk->sk_mark
- net: add missing data-race annotations around sk->sk_peek_off
- net: add missing data-race annotation for sk_ll_usec
- net: annotate data-races around sk->sk_priority
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ice: Fix RDMA VSI removal during queue rebuild
- bpf, cpumap: Handle skb as well when clean up ptr_ring
- bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire
- net: ll_temac: fix error checking of irq_of_parse_and_map()
- net: korina: handle clk prepare error in korina_probe()
- net: netsec: Ignore 'phy-mode' on SynQuacer in DT mode
- bnxt_en: Fix page pool logic for page size >= 64K
- bnxt_en: Fix max_mtu setting for multi-buf XDP
- net: dcb: choose correct policy to parse DCB_ATTR_BCN
- s390/qeth: Don't call dev_close/dev_open (DOWN/UP)
- ip6mr: Fix skb_under_panic in ip6mr_cache_report()
- vxlan: Fix nexthop hash size
- net/mlx5: fs_core: Make find_closest_ft more generic
- net/mlx5: fs_core: Skip the FTs in the same FS_TYPE_PRIO_CHAINS fs_prio
- prestera: fix fallback to previous version on same major version
- tcp_metrics: fix addr_same() helper
- tcp_metrics: annotate data-races around tm->tcpm_stamp
- tcp_metrics: annotate data-races around tm->tcpm_lock
- tcp_metrics: annotate data-races around tm->tcpm_vals[]
- tcp_metrics: annotate data-races around tm->tcpm_net
- tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen
- rust: allocator: Prevent mis-aligned allocation
- scsi: zfcp: Defer fc_rport blocking until after ADISC response
- scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices
- libceph: fix potential hang in ceph_osdc_notify()
- USB: zaurus: Add ID for A-300/B-500/C-700
- ceph: defer stopping mdsc delayed_work
- firmware: arm_scmi: Drop OF node reference in the transport channel setup
- exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree
- exfat: release s_lock before calling dir_emit()
- mtd: spinand: toshiba: Fix ecc_get_status
- mtd: rawnand: meson: fix OOB available bytes for ECC
- bpf: Disable preemption in bpf_perf_event_output
- arm64: dts: stratix10: fix incorrect I2C property for SCL signal
- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC)
- x86/hyperv: Disable IBT when hypercall page lacks ENDBR instruction
- rbd: prevent busy loop when requesting exclusive lock
- bpf: Disable preemption in bpf_event_output
- powerpc/ftrace: Create a dummy stackframe to fix stack unwind
- arm64/fpsimd: Sync and zero pad FPSIMD state for streaming SVE
- arm64/fpsimd: Clear SME state in the target task when setting the VL
- arm64/fpsimd: Sync FPSIMD state with SVE for SME only systems
- open: make RESOLVE_CACHED correctly test for O_TMPFILE
- drm/ttm: check null pointer before accessing when swapping
- drm/i915: Fix premature release of request's reusable memory
- drm/i915/gt: Cleanup aux invalidation registers
- clk: imx93: Propagate correct error in imx93_clocks_probe()
- bpf, cpumap: Make sure kthread is running before map update returns
- file: reinstate f_pos locking optimization for regular files
- mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
- fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_load_attr_list()
- fs/sysv: Null check to prevent null-ptr-deref bug
- debugobjects: Recheck debug_objects_enabled before reporting
- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
- fs: Protect reconfiguration of sb read-write from racing writes
- ext2: Drop fragment support
- btrfs: remove BUG_ON()'s in add_new_free_space()
- io_uring: annotate offset timeout races
- mtd: rawnand: omap_elm: Fix incorrect type in assignment
- mtd: rawnand: rockchip: fix oobfree offset and description
- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts
- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
- powerpc/mm/altmap: Fix altmap boundary check
- drm/imx/ipuv3: Fix front porch adjustment upon hactive aligning
- drm/amd/display: Ensure that planes are in the same order
- drm/amd/display: skip CLEAR_PAYLOAD_ID_TABLE if device mst_en is 0
- selftests/rseq: Play nice with binaries statically linked against glibc
2.35+
- arm64/ptrace: Don't enable SVE when setting streaming SVE
- drm/amdgpu: Use apt name for FW reserved region
- Revert "drm/i915: Disable DC states for all commits"
- net/mlx5: Honor user input for migratable port fn attr
- net/mlx5e: xsk: Fix crash on regular rq reactivation
- net: stmmac: tegra: Properly allocate clock bulk data
- net: gro: fix misuse of CB in udp socket lookup
- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs
- bnxt: don't handle XDP in netpoll
- selftest: net: Assert on a proper value in so_incoming_cpu.c.
- mtd: spinand: winbond: Fix ecc_get_status
- smb: client: fix dfs link mount against w2k8
- ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node
- Upstream stable to v6.1.45, v6.4.10
* CVE-2023-37453
- USB: core: Unite old scheme and new scheme descriptor reads
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Fix race by not overwriting udev->descriptor in hub_port_init()
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
-- Stefan Bader <stefan.bader@canonical.com> Thu, 16 Nov 2023 10:48:35 +0100
linux-hwe-6.2 (6.2.0-37.38~22.04.1) jammy; urgency=medium
* jammy/linux-hwe-6.2: 6.2.0-37.38~22.04.1 -proposed tracker (LP: #2041898)
* Include cifs.ko in linux-modules package (LP: #2042546)
- [Packaging] Replace fs/cifs with fs/smb/client in inclusion list
[ Ubuntu: 6.2.0-37.38 ]
* lunar/linux: 6.2.0-37.38 -proposed tracker (LP: #2041899)
* CVE-2023-31085
- ubi: Refuse attaching if mtd's erasesize is 0
* CVE-2023-25775
- RDMA/irdma: Prevent zero-length STAG registration
* CVE-2023-45871
- igb: set max size RX buffer when store bad packet is enabled
* CVE-2023-5345
- fs/smb/client: Reset password pointer to NULL
* CVE-2023-5090
- x86: KVM: SVM: always update the x2avic msr interception
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
-- Stefan Bader <stefan.bader@canonical.com> Thu, 02 Nov 2023 18:02:54 +0100
linux-hwe-6.2 (6.2.0-36.37~22.04.1) jammy; urgency=medium
* jammy/linux-hwe-6.2: 6.2.0-36.37~22.04.1 -proposed tracker (LP: #2038075)
[ Ubuntu: 6.2.0-36.37 ]
* lunar/linux: 6.2.0-36.37 -proposed tracker (LP: #2038076)
* Regression for ubuntu_bpf test build caused by upstream bdeeed3498c7
(LP: #2035181)
- selftests/bpf: fix static assert compilation issue for test_cls_*.c
* CVE-2023-4244
- netfilter: nf_tables: don't skip expired elements during walk
- netfilter: nf_tables: adapt set backend to use GC transaction API
- netfilter: nft_set_hash: mark set element as dead when deleting from packet
path
- netfilter: nf_tables: GC transaction API to avoid race with control plane
- netfilter: nf_tables: don't fail inserts if duplicate has expired
- netfilter: nf_tables: fix kdoc warnings after gc rework
- netfilter: nf_tables: fix GC transaction races with netns and netlink event
exit path
- netfilter: nf_tables: GC transaction race with netns dismantle
- netfilter: nf_tables: GC transaction race with abort path
- netfilter: nf_tables: use correct lock to protect gc_list
- netfilter: nf_tables: defer gc run if previous batch is still pending
- netfilter: nft_dynset: disallow object maps
- netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
* CVE-2023-4563
- netfilter: nf_tables: remove busy mark and gc batch API
* CVE-2023-42756
- netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
* CVE-2023-4623
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
* Fix unstable audio at low levels on Thinkpad P1G4 (LP: #2037077)
- ALSA: hda/realtek - ALC287 I2S speaker platform support
* Lunar update: upstream stable patchset 2023-09-21 (LP: #2037005)
- Upstream stable to v6.1.41, v6.4.6
- io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq
- ALSA: hda/realtek - remove 3k pull low procedure
- ALSA: hda/realtek: Add quirk for Clevo NS70AU
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx
- maple_tree: set the node limit when creating a new root node
- maple_tree: fix node allocation testing on 32 bit
- keys: Fix linking a duplicate key to a keyring's assoc_array
- perf probe: Add test for regression introduced by switch to
die_get_decl_file()
- btrfs: fix warning when putting transaction with qgroups enabled after abort
- fuse: revalidate: don't invalidate if interrupted
- fuse: Apply flags2 only when userspace set the FUSE_INIT_EXT
- btrfs: set_page_extent_mapped after read_folio in btrfs_cont_expand
- btrfs: zoned: fix memory leak after finding block group with super blocks
- fuse: ioctl: translate ENOSYS in outarg
- btrfs: fix race between balance and cancel/pause
- selftests: tc: set timeout to 15 minutes
- selftests: tc: add 'ct' action kconfig dep
- regmap: Drop initial version of maximum transfer length fixes
- of: Preserve "of-display" device name for compatibility
- regmap: Account for register length in SMBus I/O limits
- arm64/fpsimd: Ensure SME storage is allocated after SVE VL changes
- can: mcp251xfd: __mcp251xfd_chip_set_mode(): increase poll timeout
- can: bcm: Fix UAF in bcm_proc_show()
- can: gs_usb: gs_can_open(): improve error handling
- selftests: tc: add ConnTrack procfs kconfig
- dma-buf/dma-resv: Stop leaking on krealloc() failure
- drm/amdgpu/vkms: relax timer deactivation by hrtimer_try_to_cancel
- drm/amdgpu/pm: make gfxclock consistent for sienna cichlid
- drm/amdgpu/pm: make mclk consistent for smu 13.0.7
- drm/client: Fix memory leak in drm_client_target_cloned
- drm/client: Fix memory leak in drm_client_modeset_probe
- drm/amd/display: only accept async flips for fast updates
- drm/amd/display: Disable MPC split by default on special asic
- drm/amd/display: check TG is non-null before checking if enabled
- drm/amd/display: Keep PHY active for DP displays on DCN31
- ASoC: fsl_sai: Disable bit clock with transmitter
- ASoC: fsl_sai: Revert "ASoC: fsl_sai: Enable MCTL_MCLK_EN bit for master
mode"
- ASoC: tegra: Fix ADX byte map
- ASoC: rt5640: Fix sleep in atomic context
- ASoC: cs42l51: fix driver to properly autoload with automatic module loading
- ASoC: codecs: wcd938x: fix missing clsh ctrl error handling
- ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove
- ASoC: qdsp6: audioreach: fix topology probe deferral
- ASoC: tegra: Fix AMX byte map
- ASoC: codecs: wcd938x: fix resource leaks on component remove
- ASoC: codecs: wcd938x: fix missing mbhc init error handling
- ASoC: codecs: wcd934x: fix resource leaks on component remove
- ASoC: codecs: wcd938x: fix codec initialisation race
- ASoC: codecs: wcd938x: fix soundwire initialisation race
- ext4: correct inline offset when handling xattrs in inode body
- drm/radeon: Fix integer overflow in radeon_cs_parser_init
- ALSA: emu10k1: roll up loops in DSP setup code for Audigy
- quota: Properly disable quotas when add_dquot_ref() fails
- quota: fix warning in dqgrab()
- HID: add quirk for 03f0:464a HP Elite Presenter Mouse
- ovl: check type and offset of struct vfsmount in ovl_entry
- udf: Fix uninitialized array access for some pathnames
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- MIPS: dec: prom: Address -Warray-bounds warning
- FS: JFS: Fix null-ptr-deref Read in txBegin
- FS: JFS: Check for read-only mounted filesystem in txBegin
- ACPI: video: Add backlight=native DMI quirk for Dell Studio 1569
- rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic()
- rcu: Mark additional concurrent load from ->cpu_no_qs.b.exp
- sched/fair: Don't balance task to its current running CPU
- wifi: ath11k: fix registration of 6Ghz-only phy without the full channel
range
- bpf: Print a warning only if writing to unprivileged_bpf_disabled.
- bpf: Address KCSAN report on bpf_lru_list
- bpf: tcp: Avoid taking fast sock lock in iterator
- wifi: ath11k: add support default regdb while searching board-2.bin for
WCN6855
- wifi: mac80211_hwsim: Fix possible NULL dereference
- spi: dw: Add compatible for Intel Mount Evans SoC
- wifi: ath11k: fix memory leak in WMI firmware stats
- net: ethernet: litex: add support for 64 bit stats
- devlink: report devlink_port_type_warn source device
- wifi: wext-core: Fix -Wstringop-overflow warning in
ioctl_standard_iw_point()
- wifi: iwlwifi: Add support for new PCI Id
- wifi: iwlwifi: mvm: avoid baid size integer overflow
- wifi: iwlwifi: pcie: add device id 51F1 for killer 1675
- net: hns3: fix strncpy() not using dest-buf length as length issue
- ASoC: amd: acp: fix for invalid dai id handling in acp_get_byte_count()
- ASoC: codecs: wcd938x: fix mbhc impedance loglevel
- ASoC: codecs: wcd938x: fix dB range for HPHL and HPHR
- ASoC: qcom: q6apm: do not close GPR port before closing graph
- sched/fair: Use recent_used_cpu to test p->cpus_ptr
- sched/psi: Rearrange polling code in preparation
- sched/psi: Rename existing poll members in preparation
- sched/psi: Extract update_triggers side effect
- sched/psi: Allow unprivileged polling of N*2s period
- sched/psi: use kernfs polling functions for PSI trigger polling
- pinctrl: renesas: rzv2m: Handle non-unique subnode names
- pinctrl: renesas: rzg2l: Handle non-unique subnode names
- spi: bcm63xx: fix max prepend length
- fbdev: imxfb: warn about invalid left/right margin
- fbdev: imxfb: Removed unneeded release_mem_region
- perf build: Fix library not found error when using CSLIBS
- btrfs: be a bit more careful when setting mirror_num_ret in btrfs_map_block
- spi: s3c64xx: clear loopback bit after loopback test
- kallsyms: strip LTO-only suffixes from promoted global functions
- dsa: mv88e6xxx: Do a final check before timing out
- net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field()
- net: ethernet: mtk_eth_soc: handle probe deferral
- ASoC: SOF: ipc3-dtrace: uninitialized data in dfsentry_trace_filter_write()
- net: sched: cls_matchall: Undo tcf_bind_filter in case of failure after
mall_set_parms
- net: sched: cls_u32: Undo tcf_bind_filter if u32_replace_hw_knode
- net: sched: cls_u32: Undo refcount decrement in case update failed
- net: sched: cls_bpf: Undo tcf_bind_filter in case of an error
- net: dsa: microchip: ksz8: Separate static MAC table operations for code
reuse
- net: dsa: microchip: ksz8: Make ksz8_r_sta_mac_table() static
- net: dsa: microchip: ksz8_r_sta_mac_table(): Avoid using error code for
empty entries
- net: dsa: microchip: correct KSZ8795 static MAC table access
- iavf: Fix use-after-free in free_netdev
- iavf: Fix out-of-bounds when setting channels on remove
- iavf: use internal state to free traffic IRQs
- iavf: make functions static where possible
- iavf: Wait for reset in callbacks which trigger it
- iavf: fix a deadlock caused by rtnl and driver's lock circular dependencies
- iavf: fix reset task race with iavf_remove()
- security: keys: Modify mismatched function name
- octeontx2-pf: Dont allocate BPIDs for LBK interfaces
- bpf: Fix subprog idx logic in check_max_stack_depth
- bpf: Repeat check_max_stack_depth for async callbacks
- bpf, arm64: Fix BTI type used for freplace attached functions
- igc: Avoid transmit queue timeout for XDP
- igc: Prevent garbled TX queue with XDP ZEROCOPY
- net: ipv4: use consistent txhash in TIME_WAIT and SYN_RECV
- tcp: annotate data-races around tcp_rsk(req)->txhash
- tcp: annotate data-races around tcp_rsk(req)->ts_recent
- net: ipv4: Use kfree_sensitive instead of kfree
- net:ipv6: check return value of pskb_trim()
- Revert "tcp: avoid the lookup process failing to get sk in ehash table"
- fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe
- llc: Don't drop packet from non-root netns.
- ALSA: hda/realtek: Fix generic fixup definition for cs35l41 amp
- netfilter: nf_tables: fix spurious set element insertion failure
- netfilter: nf_tables: can't schedule in nft_chain_validate
- Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync
- Bluetooth: hci_event: call disconnect callback before deleting conn
- Bluetooth: ISO: fix iso_conn related locking and validity issues
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
hci_remove_adv_monitor()
- tcp: annotate data-races around tp->tcp_tx_delay
- tcp: annotate data-races around tp->tsoffset
- tcp: annotate data-races around tp->keepalive_time
- tcp: annotate data-races around tp->keepalive_intvl
- tcp: annotate data-races around tp->keepalive_probes
- tcp: annotate data-races around icsk->icsk_syn_retries
- tcp: annotate data-races around tp->linger2
- tcp: annotate data-races around rskq_defer_accept
- tcp: annotate data-races around tp->notsent_lowat
- tcp: annotate data-races around icsk->icsk_user_timeout
- tcp: annotate data-races around fastopenq.max_qlen
- net: phy: prevent stale pointer dereference in phy_init()
- jbd2: recheck chechpointing non-dirty buffer
- tracing/histograms: Return an error if we fail to add histogram to hist_vars
list
- drm/ttm: fix bulk_move corruption when adding a entry
- spi: dw: Remove misleading comment for Mount Evans SoC
- kallsyms: add kallsyms_seqs_of_names to list of special symbols
- scripts/kallsyms: update the usage in the comment block
- selftests/bpf: Workaround verification failure for
fexit_bpf2bpf/func_replace_return_code
- selftests/bpf: Fix sk_assign on s390x
- drm/amd/display: fix some coding style issues
- drm/dp_mst: Clear MSG_RDY flag before sending new message
- drm/amd/display: force connector state when bpc changes during compliance
- drm/amd/display: Clean up errors & warnings in amdgpu_dm.c
- drm/amd/display: fix linux dp link lost handled only one time
- drm/amd/display: Add polling method to handle MST reply packet
- perf probe: Read DWARF files from the correct CU
- btrfs: raid56: always verify the P/Q contents for scrub
- can: gs_usb: fix time stamp counter initialization
- KVM: arm64: Correctly handle page aging notifiers for unaligned memslot
- KVM: arm64: vgic-v4: Make the doorbell request robust w.r.t preemption
- gso: fix dodgy bit handling for GSO_UDP_L4
- drm/i915/perf: add sentinel to xehp_oa_b_counters
- net: ethernet: mtk_eth_soc: always mtk_get_ib1_pkt_type
- Upstream stable to v6.1.42, v6.4.7
- netfilter: nf_tables: fix underflow in object reference counter
- netfilter: nf_tables: fix underflow in chain reference counter
- platform/x86/amd/pmf: Notify OS power slider update
- platform/x86/amd/pmf: reduce verbosity of apmf_get_system_params
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- blk-mq: Fix stall due to recursive flush plug
- powerpc/pseries/vas: Hold mmap_mutex after mmap lock during window close
- KVM: s390: pv: fix index value of replaced ASCE
- io_uring: don't audit the capability check in io_uring_create()
- gpio: tps68470: Make tps68470_gpio_output() always set the initial value
- pwm: Add a stub for devm_pwmchip_add()
- gpio: mvebu: Make use of devm_pwmchip_add
- gpio: mvebu: fix irq domain leak
- btrfs: fix race between quota disable and relocation
- i2c: Delete error messages for failed memory allocations
- i2c: Improve size determinations
- i2c: nomadik: Remove unnecessary goto label
- i2c: nomadik: Use devm_clk_get_enabled()
- i2c: nomadik: Remove a useless call in the remove function
- MIPS: Loongson: Move arch cflags to MIPS top level Makefile
- MIPS: Loongson: Fix build error when make modules_install
- PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link()
- PCI/ASPM: Factor out pcie_wait_for_retrain()
- PCI/ASPM: Avoid link retraining race
- PCI: rockchip: Remove writes to unused registers
- PCI: rockchip: Fix window mapping and address translation for endpoint
- PCI: rockchip: Don't advertise MSI-X in PCIe capabilities
- drm/amd/display: add ODM case when looking for first split pipe
- drm/amd/display: add pixel rate based CRB allocation support
- drm/amd/display: fix dcn315 single stream crb allocation
- drm/amd/display: Update correct DCN314 register header
- drm/amd/display: Set minimum requirement for using PSR-SU on Rembrandt
- drm/amd/display: Set minimum requirement for using PSR-SU on Phoenix
- drm/ttm: Don't print error message if eviction was interrupted
- drm/ttm: Don't leak a resource on eviction error
- drm/ttm: never consider pinned BOs for eviction&swap
- KVM: arm64: Condition HW AF updates on config option
- [Config] updateconfigs for AMPERE_ERRATUM_AC03_CPU_38
- arm64: errata: Mitigate Ampere1 erratum AC03_CPU_38 at stage-2
- mptcp: introduce 'sk' to replace 'sock->sk' in mptcp_listen()
- tracing: Allow synthetic events to pass around stacktraces
- Revert "tracing: Add "(fault)" name injection to kernel probes"
- tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if
fails
- test_maple_tree: test modifications while iterating
- maple_tree: add __init and __exit to test module
- maple_tree: fix 32 bit mas_next testing
- drm/amd/display: fix dc/core/dc.c kernel-doc
- drm/amd/display: Add FAMS validation before trying to use it
- drm/amd/display: update extended blank for dcn314 onwards
- drm/amd/display: Fix possible underflow for displays with large vblank
- drm/amd/display: Prevent vtotal from being set to 0
- phy: phy-mtk-dp: Fix an error code in probe()
- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc
- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend
- phy: qcom-snps-femto-v2: properly enable ref clock
- soundwire: qcom: update status correctly with mask
- media: staging: atomisp: select V4L2_FWNODE
- media: amphion: Fix firmware path to match linux-firmware
- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
- iavf: fix potential deadlock on allocation failure
- iavf: check for removal state before IAVF_FLAG_PF_COMMS_FAILED
- net: phy: marvell10g: fix 88x3310 power up
- net: hns3: fix the imp capability bit cannot exceed 32 bits issue
- net: hns3: fix wrong tc bandwidth weight data issue
- net: hns3: fix wrong bw weight of disabled tc issue
- vxlan: calculate correct header length for GPE
- vxlan: generalize vxlan_parse_gpe_hdr and remove unused args
- vxlan: fix GRO with VXLAN-GPE
- phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()
- atheros: fix return value check in atl1_tso()
- ethernet: atheros: fix return value check in atl1e_tso_csum()
- ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new
temporary address
- ice: Fix memory management in ice_ethtool_fdir.c
- bonding: reset bond's flags when down link is P2P device
- team: reset team's flags when down link is P2P device
- octeontx2-af: Removed unnecessary debug messages.
- octeontx2-af: Fix hash extraction enable configuration
- net: stmmac: Apply redundant write work around on 4.xx too
- platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100
- x86/traps: Fix load_unaligned_zeropad() handling for shared TDX memory
- igc: Fix Kernel Panic during ndo_tx_timeout callback
- netfilter: nft_set_rbtree: fix overlap expiration walk
- mm: suppress mm fault logging if fatal signal already pending
- net/sched: mqprio: refactor nlattr parsing to a separate function
- net/sched: mqprio: add extack to mqprio_parse_nlattr()
- net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64
- benet: fix return value check in be_lancer_xmit_workarounds()
- tipc: check return value of pskb_trim()
- tipc: stop tipc crypto on failure in tipc_node_create
- RDMA/mlx4: Make check for invalid flags stricter
- drm/msm/dpu: drop enum dpu_core_perf_data_bus_id
- drm/msm/adreno: Fix snapshot BINDLESS_DATA size
- RDMA/irdma: Add missing read barriers
- RDMA/irdma: Fix data race on CQP completion stats
- RDMA/irdma: Fix data race on CQP request done
- RDMA/mthca: Fix crash when polling CQ for shared QPs
- RDMA/bnxt_re: Prevent handling any completions after qp destroy
- drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb()
- cxl/acpi: Fix a use-after-free in cxl_parse_cfmws()
- cxl/acpi: Return 'rc' instead of '0' in cxl_parse_cfmws()
- ASoC: fsl_spdif: Silence output on stop
- block: Fix a source code comment in include/uapi/linux/blkzoned.h
- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request
- drm/i915: Fix an error handling path in igt_write_huge()
- xenbus: check xen_domain in xenbus_probe_initcall
- dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths
- dm raid: clean up four equivalent goto tags in raid_ctr()
- dm raid: protect md_stop() with 'reconfig_mutex'
- drm/amd: Fix an error handling mistake in psp_sw_init()
- drm/amd/display: Unlock on error path in
dm_handle_mst_sideband_msg_ready_event()
- RDMA/irdma: Fix op_type reporting in CQEs
- RDMA/irdma: Report correct WC error
- drm/msm: Switch idr_lock to spinlock
- drm/msm: Disallow submit with fence id 0
- ublk_drv: move ublk_get_device_from_id into ublk_ctrl_uring_cmd
- ublk: fail to start device if queue setup is interrupted
- ublk: fail to recover device if queue setup is interrupted
- ata: pata_ns87415: mark ns87560_tf_read static
- ring-buffer: Fix wrong stat of cpu_buffer->read
- tracing: Fix warning in trace_buffered_event_disable()
- Revert "usb: gadget: tegra-xudc: Fix error check in
tegra_xudc_powerdomain_init()"
- usb: gadget: call usb_gadget_check_config() to verify UDC capability
- USB: gadget: Fix the memory leak in raw_gadget driver
- usb: gadget: core: remove unbalanced mutex_unlock in usb_gadget_activate
- KVM: Grab a reference to KVM for VM and vCPU stats file descriptors
- KVM: VMX: Don't fudge CR0 and CR4 for restricted L2 guest
- KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid
- serial: qcom-geni: drop bogus runtime pm state update
- serial: 8250_dw: Preserve original value of DLF register
- serial: sifive: Fix sifive_serial_console_setup() section
- USB: serial: option: support Quectel EM060K_128
- USB: serial: option: add Quectel EC200A module support
- USB: serial: simple: add Kaufmann RKS+CAN VCP
- USB: serial: simple: sort driver entries
- can: gs_usb: gs_can_close(): add missing set of CAN state to
CAN_STATE_STOPPED
- usb: typec: Set port->pd before adding device for typec_port
- usb: typec: Iterate pds array when showing the pd list
- usb: typec: Use sysfs_emit_at when concatenating the string
- Revert "usb: dwc3: core: Enable AutoRetry feature in the controller"
- usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy
- usb: dwc3: don't reset device side if dwc3 was configured as host-only
- usb: misc: ehset: fix wrong if condition
- usb: ohci-at91: Fix the unhandle interrupt when resume
- USB: quirks: add quirk for Focusrite Scarlett
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one
config
- usb: xhci-mtk: set the dma max_seg_size
- Revert "usb: xhci: tegra: Fix error check"
- Documentation: security-bugs.rst: update preferences when dealing with the
linux-distros group
- Documentation: security-bugs.rst: clarify CVE handling
- staging: r8712: Fix memory leak in _r8712_init_xmit_priv()
- staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()
- tty: n_gsm: fix UAF in gsm_cleanup_mux
- Revert "xhci: add quirk for host controllers that don't update endpoint DCS"
- ALSA: hda/realtek: Support ASUS G713PV laptop
- ALSA: hda/relatek: Enable Mute LED on HP 250 G8
- hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature
- hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled
- btrfs: account block group tree when calculating global reserve size
- btrfs: check if the transaction was aborted at btrfs_wait_for_commit()
- btrfs: check for commit error at btrfs_attach_transaction_barrier()
- x86/MCE/AMD: Decrement threshold_bank refcount when removing threshold
blocks
- file: always lock position for FMODE_ATOMIC_POS
- nfsd: Remove incorrect check in nfsd4_validate_stateid
- ACPI/IORT: Remove erroneous id_count check in iort_node_get_rmr_info()
- tpm_tis: Explicitly check for error code
- irq-bcm6345-l1: Do not assume a fixed block to cpu mapping
- irqchip/gic-v4.1: Properly lock VPEs when doing a directLPI invalidation
- locking/rtmutex: Fix task->pi_waiters integrity
- proc/vmcore: fix signedness bug in read_from_oldmem()
- xen: speed up grant-table reclaim
- virtio-net: fix race between set queues and probe
- net: dsa: qca8k: fix search_and_insert wrong handling of new rule
- net: dsa: qca8k: fix broken search_and_del
- net: dsa: qca8k: fix mdb add/del case with 0 VID
- selftests: mptcp: join: only check for ip6tables if needed
- soundwire: fix enumeration completion
- Revert "um: Use swap() to make code cleaner"
- LoongArch: BPF: Fix check condition to call lu32id in move_imm()
- LoongArch: BPF: Enable bpf_probe_read{, str}() on LoongArch
- s390/dasd: fix hanging device after quiesce/resume
- s390/dasd: print copy pair message only for the correct error
- ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register
- arm64/sme: Set new vector length before reallocating
- PM: sleep: wakeirq: fix wake irq arming
- ceph: never send metrics if disable_send_metrics is set
- drm/i915/dpt: Use shmem for dpt objects
- dm cache policy smq: ensure IO doesn't prevent cleaner policy progress
- rbd: make get_lock_owner_info() return a single locker or NULL
- rbd: harden get_lock_owner_info() a bit
- rbd: retrieve and check lock owner twice before blocklisting
- tracing: Fix trace_event_raw_event_synth() if else statement
- ACPI: processor: perflib: Use the "no limit" frequency QoS
- ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily
- cpufreq: intel_pstate: Drop ACPI _PSS states table patching
- dma-buf: keep the signaling time of merged fences v3
- dma-buf: fix an error pointer vs NULL bug
- KVM: s390: pv: simplify shutdown and fix race
- media: tc358746: Address compiler warnings
- net: fec: avoid tx queue timeout when XDP is enabled
- drm/msm/dsi: Drop unused regulators from QCM2290 14nm DSI PHY config
- RDMA/core: Update CMA destination address on rdma_resolve_addr
- RDMA/bnxt_re: Fix hang during driver unload
- iommufd: IOMMUFD_DESTROY should not increase the refcount
- TIOCSTI: always enable for CAP_SYS_ADMIN
- hwmon: (aquacomputer_d5next) Fix incorrect PWM value readout
- btrfs: zoned: do not enable async discard
- net: ipa: only reset hashed tables when supported
- iommufd: Set end correctly when doing batch carry
- mptcp: more accurate NL event generation
- Upstream stable to v6.1.43, v6.4.8
* CVE-2023-42755
- net/sched: Retire rsvp classifier
- [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
* CVE-2023-42753
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
ip_set_hash_netportnet.c
* CVE-2023-34319
- xen/netback: Fix buffer overrun triggered by unusual packet
* CVE-2023-5197
- netfilter: nf_tables: skip bound chain in netns release path
- netfilter: nf_tables: disallow rule removal from chain binding
* CVE-2023-4921
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
* CVE-2023-42752
- igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
- net: remove osize variable in __alloc_skb()
- net: factorize code in kmalloc_reserve()
- net: deal with integer overflows in kmalloc_reserve()
* CVE-2023-42572
- net: add SKB_HEAD_ALIGN() helper
* Fix RCU warning on AMD laptops (LP: #2036377)
- power: supply: core: Use blocking_notifier_call_chain to avoid RCU complaint
* Fix non-working I219 after system sleep (LP: #2035313)
- mei: mei-me: resume device in prepare
* Avoid address overwrite in kernel_connect (LP: #2035163)
- net: Avoid address overwrite in kernel_connect
* Ethernet not stable 23.04 (RTL8168/8169) (LP: #2031537)
- r8169: fix ASPM-related problem for chip version 42 and 43
- r8169: revert 2ab19de62d67 ("r8169: remove ASPM restrictions now that ASPM
is disabled during NAPI poll")
- Revert "r8169: disable ASPM during NAPI poll"
- r8169: fix ASPM-related issues on a number of systems with NIC version from
RTL8168h
* Enable ASPM for NVMe behind VMD (LP: #2034504)
- Revert "UBUNTU: SAUCE: vmd: fixup bridge ASPM by driver name instead"
- Revert "UBUNTU: SAUCE: PCI/ASPM: Enable LTR for endpoints behind VMD"
- Revert "UBUNTU: SAUCE: PCI/ASPM: Enable ASPM for links under VMD domain"
- PCI/ASPM: Add pci_enable_link_state()
- PCI: vmd: Use PCI_VDEVICE in device list
- PCI: vmd: Create feature grouping for client products
- PCI: vmd: Add quirk to configure PCIe ASPM and LTR
- SAUCE: PCI/ASPM: Allow ASPM override over FADT default
- SAUCE: PCI: vmd: Mark ASPM override for device behind VMD bridge
* Fix suspend hang on Lenovo workstation (LP: #2034479)
- igb: Fix igb_down hung on surprise removal
* Fix blank display when Thunderbolt monitor is plugged second time
(LP: #2034491)
- drm/amd: Disable S/G for APUs when 64GB or more host memory
- thunderbolt: Fix Thunderbolt 3 display flickering issue on 2nd hot plug
onwards
- thunderbolt: Fix a backport error for display flickering issue
* [regression] Unable to initialize SGX enclaves with XFRM other than 3
(LP: #2034745)
- x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4
* CVE-2023-4881
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
* CVE-2023-4622
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
* Lunar update: upstream stable patchset 2023-09-14 (LP: #2036075)
- net: lan743x: Don't sleep in atomic context
- workqueue: clean up WORK_* constant types, clarify masking
- ksmbd: add missing compound request handing in some commands
- ksmbd: fix out of bounds read in smb2_sess_setup
- drm/panel: simple: Add connector_type for innolux_at043tn24
- drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime
- swiotlb: always set the number of areas before allocating the pool
- swiotlb: reduce the number of areas to match actual memory pool size
- drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags
- ice: Fix max_rate check while configuring TX rate limits
- igc: Remove delay during TX ring configuration
- net/mlx5e: fix double free in mlx5e_destroy_flow_table
- net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create
- net/mlx5e: fix memory leak in mlx5e_ptp_open
- net/mlx5e: Check for NOT_READY flag state after locking
- igc: set TP bit in 'supported' and 'advertising' fields of
ethtool_link_ksettings
- igc: Handle PPS start time programming for past time values
- blk-crypto: use dynamic lock class for blk_crypto_profile::lock
- scsi: qla2xxx: Fix error code in qla2x00_start_sp()
- scsi: ufs: ufs-mediatek: Add dependency for RESET_CONTROLLER
- bpf: Fix max stack depth check for async callbacks
- net: mvneta: fix txq_map in case of txq_number==1
- gve: Set default duplex configuration to full
- octeontx2-af: Promisc enable/disable through mbox
- octeontx2-af: Move validation of ptp pointer before its usage
- ionic: remove WARN_ON to prevent panic_on_warn
- net: bgmac: postpone turning IRQs off to avoid SoC hangs
- net: prevent skb corruption on frag list segmentation
- icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev().
- udp6: fix udp6_ehashfn() typo
- ntb: idt: Fix error handling in idt_pci_driver_init()
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
- NTB: ntb_transport: fix possible memory leak while device_register() fails
- NTB: ntb_tool: Add check for devm_kcalloc
- ipv6/addrconf: fix a potential refcount underflow for idev
- net: dsa: qca8k: Add check for skb_copy
- platform/x86: wmi: Break possible infinite loop when parsing GUID
- kernel/trace: Fix cleanup logic of enable_trace_eprobe
- igc: Fix launchtime before start of cycle
- igc: Fix inserting of empty frame for launchtime
- nvme: fix the NVME_ID_NS_NVM_STS_MASK definition
- riscv, bpf: Fix inconsistent JIT image generation
- drm/i915: Don't preserve dpll_hw_state for slave crtc in Bigjoiner
- drm/i915: Fix one wrong caching mode enum usage
- octeontx2-pf: Add additional check for MCAM rules
- erofs: avoid useless loops in z_erofs_pcluster_readmore() when reading
beyond EOF
- erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF
- erofs: fix fsdax unavailability for chunk-based regular files
- wifi: airo: avoid uninitialized warning in airo_get_rate()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- net/sched: flower: Ensure both minimum and maximum ports are specified
- riscv: mm: fix truncation warning on RV32
- netdevsim: fix uninitialized data in nsim_dev_trap_fa_cookie_write()
- net/sched: make psched_mtu() RTNL-less safe
- wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set()
- nvme-pci: fix DMA direction of unmapping integrity data
- cifs: fix session state check in smb2_find_smb_ses
- drm/client: Send hotplug event after registering a client
- drm/amdgpu/sdma4: set align mask to 255
- drm/amd/pm: revise the ASPM settings for thunderbolt attached scenario
- drm/amd/pm: add abnormal fan detection for smu 13.0.0
- f2fs: fix deadlock in i_xattr_sem and inode page lock
- pinctrl: amd: Add Z-state wake control bits
- pinctrl: amd: Adjust debugfs output
- pinctrl: amd: Add fields for interrupt status and wake status
- pinctrl: amd: Detect internal GPIO0 debounce handling
- pinctrl: amd: Fix mistake in handling clearing pins at startup
- pinctrl: amd: Detect and mask spurious interrupts
- pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts on probe"
- pinctrl: amd: Only use special debounce behavior for GPIO 0
- pinctrl: amd: Use amd_pinconf_set() for all config options
- pinctrl: amd: Drop pull up select configuration
- pinctrl: amd: Unify debounce handling into amd_pinconf_set()
- tpm: Do not remap from ACPI resources again for Pluton TPM
- tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
- tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
- tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
- tpm: return false from tpm_amd_is_rng_defective on non-x86 platforms
- mtd: rawnand: meson: fix unaligned DMA buffers handling
- net: bcmgenet: Ensure MDIO unregistration has clocks enabled
- net: phy: dp83td510: fix kernel stall during netboot in DP83TD510E PHY
driver
- kasan: add kasan_tag_mismatch prototype
- tracing/user_events: Fix incorrect return value for writing operation when
events are disabled
- powerpc: Fail build if using recordmcount with binutils v2.37
- misc: fastrpc: Create fastrpc scalar with correct buffer count
- powerpc/security: Fix Speculation_Store_Bypass reporting on Power10
- powerpc/64s: Fix native_hpte_remove() to be irq-safe
- MIPS: Loongson: Fix cpu_probe_loongson() again
- MIPS: KVM: Fix NULL pointer dereference
- ext4: Fix reusing stale buffer heads from last failed mounting
- ext4: fix wrong unit use in ext4_mb_clear_bb
- ext4: get block from bh in ext4_free_blocks for fast commit replay
- ext4: fix wrong unit use in ext4_mb_new_blocks
- ext4: fix to check return value of freeze_bdev() in ext4_shutdown()
- ext4: turn quotas off if mount failed after enabling quotas
- ext4: only update i_reserved_data_blocks on successful block allocation
- fs: dlm: revert check required context while close
- soc: qcom: mdt_loader: Fix unconditional call to scm_pas_mem_setup
- ext2/dax: Fix ext2_setsize when len is page aligned
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- hwrng: imx-rngc - fix the timeout for init and self check
- dm integrity: reduce vmalloc space footprint on 32-bit architectures
- scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O
- s390/zcrypt: do not retry administrative requests
- PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold
- PCI: Release resource invalidated by coalescing
- PCI: Add function 1 DMA alias quirk for Marvell 88SE9235
- PCI: qcom: Disable write access to read only registers for IP v2.3.3
- PCI: epf-test: Fix DMA transfer completion initialization
- PCI: epf-test: Fix DMA transfer completion detection
- PCI: rockchip: Assert PCI Configuration Enable bit after probe
- PCI: rockchip: Write PCI Device ID to correct register
- PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked
- PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core
- PCI: rockchip: Use u32 variable to access 32-bit registers
- PCI: rockchip: Set address alignment for endpoint mode
- misc: pci_endpoint_test: Free IRQs before removing the device
- misc: pci_endpoint_test: Re-init completion for every test
- mfd: pm8008: Fix module autoloading
- md/raid0: add discard support for the 'original' layout
- fs: dlm: return positive pid value for F_GETLK
- fs: dlm: fix cleanup pending ops when interrupted
- fs: dlm: interrupt posix locks only when process is killed
- fs: dlm: make F_SETLK use unkillable wait_event
- fs: dlm: fix mismatch of plock results from userspace
- scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by
lpfc_nlp_not_used()
- drm/atomic: Allow vblank-enabled + self-refresh "disable"
- drm/rockchip: vop: Leave vblank enabled in self-refresh
- drm/amd/display: fix seamless odm transitions
- drm/amd/display: Remove Phantom Pipe Check When Calculating K1 and K2
- drm/amd/display: disable seamless boot if force_odm_combine is enabled
- drm/amdgpu: fix clearing mappings for BOs that are always valid in VM
- drm/amd: Disable PSR-SU on Parade 0803 TCON
- drm/amd/display: add a NULL pointer check
- drm/amd/display: Correct `DMUB_FW_VERSION` macro
- drm/amd/display: Add monitor specific edid quirk
- drm/amdgpu: avoid restore process run into dead loop.
- drm/ttm: Don't leak a resource on swapout move error
- serial: atmel: don't enable IRQs prematurely
- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in
case of error
- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when
iterating clk
- tty: serial: imx: fix rs485 rx after tx
- firmware: stratix10-svc: Fix a potential resource leak in
svc_create_memory_pool()
- libceph: harden msgr2.1 frame segment length checks
- ceph: add a dedicated private data for netfs rreq
- ceph: fix blindly expanding the readahead windows
- ceph: don't let check_caps skip sending responses for revoke msgs
- xhci: Fix resume issue of some ZHAOXIN hosts
- xhci: Fix TRB prefetch issue of ZHAOXIN hosts
- xhci: Show ZHAOXIN xHCI root hub speed correctly
- meson saradc: fix clock divider mask length
- opp: Fix use-after-free in lazy_opp_tables after probe deferral
- soundwire: qcom: fix storing port config out-of-bounds
- Revert "8250: add support for ASIX devices with a FIFO bug"
- bus: ixp4xx: fix IXP4XX_EXP_T1_MASK
- s390/decompressor: fix misaligned symbol build error
- dm: verity-loadpin: Add NULL pointer check for 'bdev' parameter
- tracing/histograms: Add histograms to hist_vars if they have referenced
variables
- tracing: Fix memory leak of iter->temp when reading trace_pipe
- nvme: don't reject probe due to duplicate IDs for single-ported PCIe devices
- samples: ftrace: Save required argument registers in sample trampolines
- perf: RISC-V: Remove PERF_HES_STOPPED flag checking in riscv_pmu_start()
- regmap-irq: Fix out-of-bounds access when allocating config buffers
- net: ena: fix shift-out-of-bounds in exponential backoff
- ring-buffer: Fix deadloop issue on reading trace_pipe
- ftrace: Fix possible warning on checking all pages used in
ftrace_process_locs()
- cifs: if deferred close is disabled then close files immediately
- xtensa: ISS: fix call to split_if_spec
- perf/x86: Fix lockdep warning in for_each_sibling_event() on SPR
- PM: QoS: Restore support for default value on frequency QoS
- pwm: meson: modify and simplify calculation in meson_pwm_get_state
- pwm: meson: fix handling of period/duty if greater than UINT_MAX
- fprobe: Release rethook after the ftrace_ops is unregistered
- fprobe: Ensure running fprobe_exit_handler() finished before calling
rethook_free()
- tracing: Fix null pointer dereference in tracing_err_log_open()
- selftests: mptcp: connect: fail if nft supposed to work
- selftests: mptcp: sockopt: return error if wrong mark
- selftests: mptcp: userspace_pm: use correct server port
- selftests: mptcp: userspace_pm: report errors with 'remove' tests
- selftests: mptcp: depend on SYN_COOKIES
- selftests: mptcp: pm_nl_ctl: fix 32-bit support
- tracing/probes: Fix not to count error code to total length
- tracing/probes: Fix to update dynamic data counter if fetcharg uses it
- tracing/user_events: Fix struct arg size match check
- scsi: qla2xxx: Multi-que support for TMF
- scsi: qla2xxx: Fix task management cmd failure
- scsi: qla2xxx: Fix task management cmd fail due to unavailable resource
- scsi: qla2xxx: Fix hang in task management
- scsi: qla2xxx: Wait for io return on terminate rport
- scsi: qla2xxx: Fix mem access after free
- scsi: qla2xxx: Array index may go out of bound
- scsi: qla2xxx: Avoid fcport pointer dereference
- scsi: qla2xxx: Fix potential NULL pointer dereference
- scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()
- scsi: qla2xxx: Correct the index of array
- scsi: qla2xxx: Pointer may be dereferenced
- scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue
- scsi: qla2xxx: Fix end of loop test
- MIPS: kvm: Fix build error with KVM_MIPS_DEBUG_COP0_COUNTERS enabled
- Revert "drm/amd: Disable PSR-SU on Parade 0803 TCON"
- net/sched: sch_qfq: reintroduce lmax bound check for MTU
- drm/atomic: Fix potential use-after-free in nonblocking commits
- net/ncsi: make one oem_gma function for all mfr id
- net/ncsi: change from ndo_set_mac_address to dev_set_mac_address
- HID: input: fix mapping for camera access keys
- xen/virtio: Fix NULL deref when a bridge of PCI root bus has no parent
- netfilter: conntrack: don't fold port numbers into addresses before hashing
- net/mlx5: Query hca_cap_2 only when supported
- udp6: add a missing call into udp_fail_queue_rcv_skb tracepoint
- HID: hyperv: avoid struct memcpy overrun warning
- igc: Rename qbv_enable to taprio_offload_enable
- igc: No strict mode in pure launchtime/CBS offload
- net: fec: increase the size of tx ring and update tx_wake_threshold
- drm/nouveau/disp: fix HDMI on gt215+
- drm/nouveau/disp/g94: enable HDMI
- drm/nouveau: bring back blit subchannel for pre nv50 GPUs
- net: txgbe: fix eeprom calculation error
- kasan, slub: fix HW_TAGS zeroing with slub_debug
- drm/amd/display: perform a bounds check before filling dirty rectangles
- fs: dlm: clear pending bit when queue was empty
- fs: dlm: fix missing pending to false
- tty: fix hang on tty device with no_room set
- nfp: clean mc addresses in application firmware when closing port
- mptcp: do not rely on implicit state check in mptcp_listen()
- mptcp: ensure subflow is unhashed before cleaning the backlog
- selftests: mptcp: sockopt: use 'iptables-legacy' if available
- smb: client: Fix -Wstringop-overflow issues
- tracing/probes: Fix to avoid double count of the string length on the array
- Upstream stable to v6.1.40, v6.4.5
* Nouveau driver crash - Ubuntu 22.04.3 LTS stuck on power-off/reboot screen
(LP: #2031352) // Lunar update: upstream stable patchset 2023-09-14
(LP: #2036075)
- drm/nouveau/acr: Abort loading ACR if no firmware was found
* Lunar update: upstream stable patchset 2023-09-05 (LP: #2034469)
- drm: use mgr->dev in drm_dbg_kms in drm_dp_add_payload_part2
- fs: pipe: reveal missing function protoypes
- block: Fix the type of the second bdev_op_is_zoned_write() argument
- erofs: avoid tagged pointers to mark sync decompression
- erofs: remove tagged pointer helpers
- erofs: move zdata.h into zdata.c
- erofs: kill hooked chains to avoid loops on deduplicated compressed images
- x86/resctrl: Only show tasks' pid in current pid namespace
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- x86/sev: Fix calculation of end address based on number of pages
- virt: sevguest: Add CONFIG_CRYPTO dependency
- blk-mq: fix potential io hang by wrong 'wake_batch'
- lockd: drop inappropriate svc_get() from locked_get()
- nvme-core: fix memory leak in dhchap_secret_store
- nvme-core: fix memory leak in dhchap_ctrl_secret
- nvme-core: add missing fault-injection cleanup
- nvme-core: fix dev_pm_qos memleak
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- md/raid10: fix overflow of md/safe_mode_delay
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid1-10: factor out a helper to add bio to plug
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: submit write io directly if bitmap is not enabled
- block: fix blktrace debugfs entries leakage
- irqchip/stm32-exti: Fix warning on initialized field overwritten
- irqchip/jcore-aic: Fix missing allocation of IRQ descriptors
- svcrdma: Prevent page release when nothing was received
- erofs: simplify iloc()
- erofs: fix compact 4B support for 16k block size
- posix-timers: Prevent RT livelock in itimer_delete()
- tick/rcu: Fix bogus ratelimit condition
- tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode().
- clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe
- PM: domains: fix integer overflow issues in genpd_parse_state()
- perf/arm-cmn: Fix DTC reset
- x86/mm: Allow guest.enc_status_change_prepare() to fail
- x86/tdx: Fix race between set_memory_encrypted() and
load_unaligned_zeropad()
- drivers/perf: hisi: Don't migrate perf to the CPU going to teardown
- powercap: RAPL: Fix CONFIG_IOSF_MBI dependency
- PM: domains: Move the verification of in-params from genpd_add_device()
- ARM: 9303/1: kprobes: avoid missing-declaration warnings
- cpufreq: intel_pstate: Fix energy_performance_preference for passive
- thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe()
- rcu: Make rcu_cpu_starting() rely on interrupts being disabled
- rcu-tasks: Stop rcu_tasks_invoke_cbs() from using never-onlined CPUs
- rcutorture: Correct name of use_softirq module parameter
- rcuscale: Move shutdown from wait_event() to wait_event_idle()
- rcu/rcuscale: Move rcu_scale_*() after kfree_scale_cleanup()
- rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale
- kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME
is undefined
- perf/ibs: Fix interface via core pmu events
- x86/mm: Fix __swp_entry_to_pte() for Xen PV guests
- locking/atomic: arm: fix sync ops
- evm: Complete description of evm_inode_setattr()
- evm: Fix build warnings
- ima: Fix build warnings
- pstore/ram: Add check for kstrdup
- igc: Enable and fix RX hash usage by netstack
- wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation
- wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx
- libbpf: btf_dump_type_data_check_overflow needs to consider
BTF_MEMBER_BITFIELD_SIZE
- samples/bpf: Fix buffer overflow in tcp_basertt
- spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG
- wifi: wilc1000: fix for absent RSN capabilities WFA testcase
- wifi: mwifiex: Fix the size of a memory allocation in
mwifiex_ret_802_11_scan()
- sctp: add bpf_bypass_getsockopt proto callback
- libbpf: fix offsetof() and container_of() to work with CO-RE
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- spi: dw: Round of n_bytes to power of 2
- nfc: llcp: fix possible use of uninitialized variable in
nfc_llcp_send_connect()
- bpftool: JIT limited misreported as negative value on aarch64
- bpf: Remove bpf trampoline selector
- bpf: Fix memleak due to fentry attach failure
- selftests/bpf: Do not use sign-file as testcase
- regulator: core: Fix more error checking for debugfs_create_dir()
- regulator: core: Streamline debugfs operations
- wifi: orinoco: Fix an error handling path in spectrum_cs_probe()
- wifi: orinoco: Fix an error handling path in orinoco_cs_probe()
- wifi: atmel: Fix an error handling path in atmel_probe()
- wifi: wl3501_cs: Fix an error handling path in wl3501_probe()
- wifi: ray_cs: Fix an error handling path in ray_probe()
- wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
- samples/bpf: xdp1 and xdp2 reduce XDPBUFSIZE to 60
- wifi: ath10k: Trigger STA disconnect after reconfig complete on hardware
restart
- wifi: mac80211: recalc min chandef for new STA links
- selftests/bpf: Fix check_mtu using wrong variable type
- wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled
- wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown
- ice: handle extts in the miscellaneous interrupt thread
- selftests: cgroup: fix unexpected failure on test_memcg_low
- watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct
config
- watchdog/perf: more properly prevent false positives with turbo modes
- kexec: fix a memory leak in crash_shrink_memory()
- mmc: mediatek: Avoid ugly error message when SDIO wakeup IRQ isn't used
- memstick r592: make memstick_debug_get_tpc_name() static
- wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key()
- wifi: mac80211: Fix permissions for valid_links debugfs entry
- rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO
- wifi: ath11k: Add missing check for ioremap
- wifi: iwlwifi: pull from TXQs with softirqs disabled
- wifi: iwlwifi: pcie: fix NULL pointer dereference in
iwl_pcie_irq_rx_msix_handler()
- wifi: mac80211: Remove "Missing iftype sband data/EHT cap" spam
- wifi: cfg80211: rewrite merging of inherited elements
- wifi: cfg80211: drop incorrect nontransmitted BSS update code
- wifi: cfg80211: fix regulatory disconnect with OCB/NAN
- wifi: ieee80211: Fix the common size calculation for reconfiguration ML
- mmc: Add MMC_QUIRK_BROKEN_SD_CACHE for Kingston Canvas Go Plus from 11/2019
- wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection
- wifi: ath9k: convert msecs to jiffies where needed
- bpf: Factor out socket lookup functions for the TC hookpoint.
- bpf: Call __bpf_sk_lookup()/__bpf_skc_lookup() directly via TC hookpoint
- bpf: Fix bpf socket lookup from tc/xdp to respect socket VRF bindings
- can: length: fix bitstuffing count
- can: kvaser_pciefd: Add function to set skb hwtstamps
- can: kvaser_pciefd: Set hardware timestamp on transmitted packets
- net: stmmac: fix double serdes powerdown
- netlink: fix potential deadlock in netlink_set_err()
- netlink: do not hard code device address lenth in fdb dumps
- bonding: do not assume skb mac_header is set
- selftests: rtnetlink: remove netdevsim device after ipsec offload test
- gtp: Fix use-after-free in __gtp_encap_destroy().
- net: axienet: Move reset before 64-bit DMA detection
- ocfs2: Fix use of slab data with sendpage
- sfc: fix crash when reading stats while NIC is resetting
- lib/ts_bm: reset initial match offset for every block of text
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just
basic one
- netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return
value.
- ipvlan: Fix return value of ipvlan_queue_xmit()
- netlink: Add __sock_i_ino() for __netlink_diag_dump().
- drm/amd/display: Add logging for display MALL refresh setting
- radeon: avoid double free in ci_dpm_init()
- drm/amd/display: Explicitly specify update type per plane info change
- drm/bridge: it6505: Move a variable assignment behind a null pointer check
in receive_timing_debugfs_show()
- Input: drv260x - sleep between polling GO bit
- drm/bridge: ti-sn65dsi83: Fix enable error path
- drm/bridge: tc358768: always enable HS video mode
- drm/bridge: tc358768: fix PLL parameters computation
- drm/bridge: tc358768: fix PLL target frequency
- drm/bridge: tc358768: fix TCLK_ZEROCNT computation
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation
- drm/bridge: tc358768: fix THS_ZEROCNT computation
- drm/bridge: tc358768: fix TXTAGOCNT computation
- drm/bridge: tc358768: fix THS_TRAILCNT computation
- drm/vram-helper: fix function names in vram helper doc
- ARM: dts: BCM5301X: Drop "clock-names" from the SPI node
- ARM: dts: meson8b: correct uart_B and uart_C clock references
- mm: call arch_swap_restore() from do_swap_page()
- clk: vc5: Use `clamp()` to restrict PLL range
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- clk: vc5: Fix .driver_data content in i2c_device_id
- clk: vc7: Fix .driver_data content in i2c_device_id
- clk: rs9: Fix .driver_data content in i2c_device_id
- Input: adxl34x - do not hardcode interrupt trigger type
- drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks`
- drm/panel: sharp-ls043t1le01: adjust mode settings
- driver: soc: xilinx: use _safe loop iterator to avoid a use after free
- ASoC: Intel: sof_sdw: remove SOF_SDW_TGL_HDMI for MeteorLake devices
- drm/vkms: isolate pixel conversion functionality
- drm: Add fixed-point helper to get rounded integer values
- drm/vkms: Fix RGB565 pixel conversion
- ARM: dts: stm32: Move ethernet MAC EEPROM from SoM to carrier boards
- bus: ti-sysc: Fix dispc quirk masking bool variables
- arm64: dts: microchip: sparx5: do not use PSCI on reference boards
- drm/bridge: tc358767: Switch to devm MIPI-DSI helpers
- clk: imx: scu: use _safe list iterator to avoid a use after free
- hwmon: (f71882fg) prevent possible division by zero
- RDMA/bnxt_re: Disable/kill tasklet only if it is enabled
- RDMA/bnxt_re: Fix to remove unnecessary return labels
- RDMA/bnxt_re: Use unique names while registering interrupts
- RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid
- RDMA/bnxt_re: Fix to remove an unnecessary log
- drm/msm/dsi: don't allow enabling 14nm VCO with unprogrammed rate
- drm/msm/disp/dpu: get timing engine status from intf status register
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
- iommu/virtio: Detach domain on endpoint release
- iommu/virtio: Return size mapped for a detached domain
- clk: renesas: rzg2l: Fix CPG_SIPLL5_CLK1 register write
- ARM: dts: gta04: Move model property out of pinctrl node
- drm/bridge: anx7625: Convert to i2c's .probe_new()
- drm/bridge: anx7625: Prevent endless probe loop
- ARM: dts: qcom: msm8974: do not use underscore in node name (again)
- arm64: dts: qcom: msm8916: correct camss unit address
- arm64: dts: qcom: msm8916: correct MMC unit address
- arm64: dts: qcom: msm8994: correct SPMI unit address
- arm64: dts: qcom: msm8996: correct camss unit address
- arm64: dts: qcom: sdm630: correct camss unit address
- arm64: dts: qcom: sdm845: correct camss unit address
- arm64: dts: qcom: sm8350: correct DMA controller unit address
- arm64: dts: qcom: sdm845-polaris: add missing touchscreen child node reg
- arm64: dts: qcom: apq8016-sbc: Fix regulator constraints
- arm64: dts: qcom: apq8016-sbc: Fix 1.8V power rail on LS expansion
- drm/bridge: Introduce pre_enable_prev_first to alter bridge init order
- drm/bridge: ti-sn65dsi83: Fix enable/disable flow to meet spec
- drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H
- ARM: ep93xx: fix missing-prototype warnings
- ARM: omap2: fix missing tick_broadcast() prototype
- arm64: dts: qcom: pm7250b: add missing spmi-vadc include
- arm64: dts: qcom: apq8096: fix fixed regulator name property
- arm64: dts: mediatek: mt8183: Add mediatek,broken-save-restore-fw to kukui
- ARM: dts: stm32: Shorten the AV96 HDMI sound card name
- memory: brcmstb_dpfe: fix testing array offset after use
- ARM: dts: qcom: apq8074-dragonboard: Set DMA as remotely controlled
- ASoC: es8316: Increment max value for ALC Capture Target Volume control
- ASoC: es8316: Do not set rate constraints for unsupported MCLKs
- ARM: dts: meson8: correct uart_B and uart_C clock references
- soc/fsl/qe: fix usb.c build errors
- RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes
- IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate
- RDMA/hns: Fix hns_roce_table_get return value
- ARM: dts: iwg20d-q7-common: Fix backlight pwm specifier
- arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1
- drm/msm/dpu: set DSC flush bit correctly at MDP CTL flush register
- fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe()
- arm64: dts: ti: k3-j7200: Fix physical address of pin
- Input: pm8941-powerkey - fix debounce on gen2+ PMICs
- ARM: dts: stm32: Fix audio routing on STM32MP15xx DHCOM PDK2
- ARM: dts: stm32: fix i2s endpoint format property for stm32mp15xx-dkx
- hwmon: (gsc-hwmon) fix fan pwm temperature scaling
- hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272
- ARM: dts: BCM5301X: fix duplex-full => full-duplex
- clk: Export clk_hw_forward_rate_request()
- drm/amd/display: Fix a test CalculatePrefetchSchedule()
- drm/amd/display: Fix a test dml32_rq_dlg_get_rq_reg()
- drm/amdkfd: Fix potential deallocation of previously deallocated memory.
- soc: mediatek: SVS: Fix MT8192 GPU node name
- drm/amd/display: Fix artifacting on eDP panels when engaging freesync video
mode
- drm/radeon: fix possible division-by-zero errors
- HID: uclogic: Modular KUnit tests should not depend on KUNIT=y
- RDMA/rxe: Fix access checks in rxe_check_bind_mw
- amdgpu: validate offset_in_bo of drm_amdgpu_gem_va
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
- RDMA/bnxt_re: wraparound mbox producer index
- RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context
- clk: imx: clk-imxrt1050: fix memory leak in imxrt1050_clocks_probe
- clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe
- clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe
- clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe()
- arm64: dts: qcom: sdm845: Flush RSC sleep & wake votes
- arm64: dts: qcom: sm8250-edo: Panel framebuffer is 2.5k instead of 4k
- clk: bcm: rpi: Fix off by one in raspberrypi_discover_clocks()
- clk: clocking-wizard: Fix Oops in clk_wzrd_register_divider()
- clk: tegra: tegra124-emc: Fix potential memory leak
- ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer
- drm/msm/dpu: do not enable color-management if DSPPs are not available
- drm/msm/dpu: Fix slice_last_group_size calculation
- drm/msm/dsi: Use DSC slice(s) packet size to compute word count
- drm/msm/dsi: Flip greater-than check for slice_count and slice_per_intf
- drm/msm/dsi: Remove incorrect references to slice_count
- drm/msm/dp: Free resources after unregistering them
- arm64: dts: mediatek: Add cpufreq nodes for MT8192
- arm64: dts: mediatek: mt8192: Fix CPUs capacity-dmips-mhz
- drm/amdgpu: Fix memcpy() in sienna_cichlid_append_powerplay_table function.
- drm/amdgpu: Fix usage of UMC fill record in RAS
- drm/msm/dpu: correct MERGE_3D length
- clk: vc5: check memory returned by kasprintf()
- clk: cdce925: check return value of kasprintf()
- clk: si5341: return error if one synth clock registration fails
- clk: si5341: check return value of {devm_}kasprintf()
- clk: si5341: free unused memory on probe failure
- clk: keystone: sci-clk: check return value of kasprintf()
- clk: ti: clkctrl: check return value of kasprintf()
- drivers: meson: secure-pwrc: always enable DMA domain
- ovl: update of dentry revalidate flags after copy up
- ASoC: imx-audmix: check return value of devm_kasprintf()
- clk: Fix memory leak in devm_clk_notifier_register()
- ARM: dts: lan966x: kontron-d10: fix board reset
- ARM: dts: lan966x: kontron-d10: fix SPI CS
- ASoC: amd: acp: clear pdm dma interrupt mask
- PCI: cadence: Fix Gen2 Link Retraining process
- PCI: vmd: Reset VMD config register between soft reboots
- scsi: qedf: Fix NULL dereference in error handling
- pinctrl: bcm2835: Handle gpiochip_add_pin_range() errors
- platform/x86: lenovo-yogabook: Fix work race on remove()
- platform/x86: lenovo-yogabook: Reprobe devices on remove()
- platform/x86: lenovo-yogabook: Set default keyboard backligh brightness on
probe()
- PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free
- scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe()
- PCI: pciehp: Cancel bringup sequence if card is not present
- PCI: ftpci100: Release the clock resources
- pinctrl: sunplus: Add check for kmalloc
- PCI: Add pci_clear_master() stub for non-CONFIG_PCI
- scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on
nlp_state
- perf bench: Add missing setlocale() call to allow usage of %'d style
formatting
- pinctrl: cherryview: Return correct value if pin in push-pull mode
- platform/x86: think-lmi: mutex protection around multiple WMI calls
- platform/x86: think-lmi: Correct System password interface
- platform/x86: think-lmi: Correct NVME password handling
- pinctrl:sunplus: Add check for kmalloc
- pinctrl: npcm7xx: Add missing check for ioremap
- kcsan: Don't expect 64 bits atomic builtins from 32 bits architectures
- powerpc/interrupt: Don't read MSR from interrupt_exit_kernel_prepare()
- powerpc/signal32: Force inlining of __unsafe_save_user_regs() and
save_tm_user_regs_unsafe()
- perf script: Fix allocation of evsel->priv related to per-event dump files
- platform/x86: thinkpad_acpi: Fix lkp-tests warnings for platform profiles
- perf dwarf-aux: Fix off-by-one in die_get_varname()
- platform/x86/dell/dell-rbtn: Fix resources leaking on error path
- perf tool x86: Consolidate is_amd check into single function
- perf tool x86: Fix perf_env memory leak
- powerpc/64s: Fix VAS mm use after free
- pinctrl: microchip-sgpio: check return value of devm_kasprintf()
- pinctrl: at91-pio4: check return value of devm_kasprintf()
- powerpc/powernv/sriov: perform null check on iov before dereferencing iov
- powerpc: update ppc_save_regs to save current r1 in pt_regs
- PCI: qcom: Remove PCIE20_ prefix from register definitions
- PCI: qcom: Sort and group registers and bitfield definitions
- PCI: qcom: Use lower case for hex
- PCI: qcom: Use DWC helpers for modifying the read-only DBI registers
- PCI: qcom: Disable write access to read only registers for IP v2.9.0
- riscv: uprobes: Restore thread.bad_cause
- powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo
- powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-
boundary
- PCI: endpoint: Fix a Kconfig prompt of vNTB driver
- PCI: endpoint: functions/pci-epf-test: Fix dma_chan direction
- PCI: vmd: Fix uninitialized variable usage in vmd_enable_domain()
- vfio/mdev: Move the compat_class initialization to module init
- hwrng: virtio - Fix race on data_avail and actual data
- modpost: remove broken calculation of exception_table_entry size
- crypto: nx - fix build warnings when DEBUG_FS is not enabled
- modpost: fix section mismatch message for R_ARM_ABS32
- modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24}
- crypto: marvell/cesa - Fix type mismatch warning
- crypto: jitter - correct health test during initialization
- modpost: fix off by one in is_executable_section()
- ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard
- crypto: qat - unmap buffer before free for DH
- crypto: qat - unmap buffers before free for RSA
- NFSv4.2: fix wrong shrinker_id
- NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION
- SMB3: Do not send lease break acknowledgment if all file handles have been
closed
- dax: Fix dax_mapping_release() use after free
- dax: Introduce alloc_dev_dax_id()
- dax/kmem: Pass valid argument to memory_group_register_static
- hwrng: st - keep clock enabled while hwrng is registered
- kbuild: Disable GCOV for *.mod.o
- efi/libstub: Disable PCI DMA before grabbing the EFI memory map
- cifs: prevent use-after-free by freeing the cfile later
- cifs: do all necessary checks for credits within or before locking
- smb: client: fix broken file attrs with nodfs mounts
- ksmbd: avoid field overflow warning
- arm64: sme: Use STR P to clear FFR context field in streaming SVE mode
- x86/efi: Make efi_set_virtual_address_map IBT safe
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- USB: serial: option: add LARA-R6 01B PIDs
- usb: dwc3: gadget: Propagate core init errors to UDC during pullup
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
- iio: adc: ad7192: Fix null ad7192_state pointer access
- iio: adc: ad7192: Fix internal/external clock selection
- iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF
- iio: accel: fxls8962af: fixup buffer scan element type
- mm/mmap: Fix VM_LOCKED check in do_vmi_align_munmap()
- ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on EliteBook
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx
- ALSA: jack: Fix mutex call in snd_jack_report()
- ALSA: pcm: Fix potential data race at PCM memory allocation helpers
- block: fix signed int overflow in Amiga partition support
- block: add overflow checks for Amiga partition support
- block: change all __u32 annotations to __be32 in affs_hardblocks.h
- block: increment diskseq on all media change events
- btrfs: fix race when deleting free space root from the dirty cow roots list
- SUNRPC: Fix UAF in svc_tcp_listen_data_ready()
- w1: w1_therm: fix locking behavior in convert_t
- w1: fix loop in w1_fini()
- dt-bindings: power: reset: qcom-pon: Only allow reboot-mode pre-pmk8350
- f2fs: do not allow to defragment files have FI_COMPRESS_RELEASED
- sh: j2: Use ioremap() to translate device tree address into kernel memory
- usb: dwc2: Fix some error handling paths
- serial: 8250: omap: Fix freeing of resources on failed register
- clk: qcom: mmcc-msm8974: remove oxili_ocmemgx_clk
- clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs
- clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks
- clk: qcom: gcc-qcm2290: Mark RCGs shared where applicable
- media: usb: Check az6007_read() return value
- media: amphion: drop repeated codec data for vc1l format
- media: amphion: drop repeated codec data for vc1g format
- media: amphion: initiate a drain of the capture queue in dynamic resolution
change
- media: videodev2.h: Fix struct v4l2_input tuner index comment
- media: i2c: Correct format propagation for st-mipid02
- media: hi846: fix usage of pm_runtime_get_if_in_use()
- media: mediatek: vcodec: using decoder status instead of core work count
- clk: qcom: ipq6018: fix networking resets
- clk: qcom: dispcc-qcm2290: Fix BI_TCXO_AO handling
- clk: qcom: dispcc-qcm2290: Fix GPLL0_OUT_DIV handling
- clk: qcom: mmcc-msm8974: use clk_rcg2_shared_ops for mdp_clk_src clock
- staging: vchiq_arm: mark vchiq_platform_init() static
- usb: dwc3: qcom: Fix potential memory leak
- usb: gadget: u_serial: Add null pointer check in gserial_suspend
- extcon: Fix kernel doc of property fields to avoid warnings
- extcon: Fix kernel doc of property capability fields to avoid warnings
- usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()
- usb: hide unused usbfs_notify_suspend/resume functions
- usb: misc: eud: Fix eud sysfs path (use 'qcom_eud')
- serial: core: lock port for stop_rx() in uart_suspend_port()
- serial: 8250: lock port for stop_rx() in omap8250_irq()
- serial: core: lock port for start_rx() in uart_resume_port()
- serial: 8250: lock port for UART_IER access in omap8250_irq()
- kernfs: fix missing kernfs_idr_lock to remove an ID from the IDR
- lkdtm: replace ll_rw_block with submit_bh
- i3c: master: svc: fix cpu schedule in spin lock
- coresight: Fix loss of connection info when a module is unloaded
- mfd: rt5033: Drop rt5033-battery sub-device
- media: venus: helpers: Fix ALIGN() of non power of two
- media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var()
- sh: Avoid using IRQ0 on SH3 and SH4
- gfs2: Fix duplicate should_fault_in_pages() call
- f2fs: fix potential deadlock due to unpaired node_write lock use
- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
- usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove()
- usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe()
- usb: common: usb-conn-gpio: Set last role to unknown before initial
detection
- usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe()
- mfd: wcd934x: Fix an error handling path in wcd934x_slim_probe()
- mfd: intel-lpss: Add missing check for platform_get_resource
- Revert "usb: common: usb-conn-gpio: Set last role to unknown before initial
detection"
- serial: 8250_omap: Use force_suspend and resume for system suspend
- device property: Clarify description of returned value in some functions
- drivers: fwnode: fix fwnode_irq_get[_byname]()
- nvmem: sunplus-ocotp: release otp->clk before return
- nvmem: rmem: Use NVMEM_DEVID_AUTO
- bus: fsl-mc: don't assume child devices are all fsl-mc devices
- mfd: stmfx: Fix error path in stmfx_chip_init
- mfd: stmfx: Nullify stmfx->vdd in case of error
- KVM: s390: vsie: fix the length of APCB bitmap
- KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler
- cpufreq: mediatek: correct voltages for MT7622 and MT7623
- misc: fastrpc: check return value of devm_kasprintf()
- clk: qcom: mmcc-msm8974: fix MDSS_GDSC power flags
- hwtracing: hisi_ptt: Fix potential sleep in atomic context
- mfd: stmpe: Only disable the regulators if they are enabled
- phy: tegra: xusb: check return value of devm_kzalloc()
- lib/bitmap: drop optimization of bitmap_{from,to}_arr64
- pwm: imx-tpm: force 'real_period' to be zero in suspend
- pwm: sysfs: Do not apply state to already disabled PWMs
- pwm: ab8500: Fix error code in probe()
- pwm: mtk_disp: Fix the disable flow of disp_pwm
- md/raid10: fix the condition to call bio_end_io_acct()
- rtc: st-lpc: Release some resources in st_rtc_probe() in case of error
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times
- drm/i915/guc/slpc: Apply min softlimit correctly
- f2fs: check return value of freeze_super()
- media: cec: i2c: ch7322: also select REGMAP
- sctp: fix potential deadlock on &net->sctp.addr_wq_lock
- net/sched: act_ipt: add sanity checks on table name and hook locations
- net: add a couple of helpers for iph tot_len
- net/sched: act_ipt: add sanity checks on skb before calling target
- spi: spi-geni-qcom: enable SPI_CONTROLLER_MUST_TX for GPI DMA mode
- net: mscc: ocelot: don't report that RX timestamping is enabled by default
- net: mscc: ocelot: don't keep PTP configuration of all ports in single
structure
- net: dsa: felix: don't drop PTP frames with tag_8021q when RX timestamping
is disabled
- net: dsa: sja1105: always enable the INCL_SRCPT option
- net: dsa: tag_sja1105: always prefer source port information from INCL_SRCPT
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- Bluetooth: fix invalid-bdaddr quirk for non-persistent setup
- Bluetooth: ISO: use hci_sync for setting CIG parameters
- Bluetooth: MGMT: add CIS feature bits to controller information
- Bluetooth: MGMT: Use BIT macro when defining bitfields
- Bluetooth: MGMT: Fix marking SCAN_RSP as not connectable
- ibmvnic: Do not reset dql stats on NON_FATAL err
- net: dsa: vsc73xx: fix MTU configuration
- mlxsw: minimal: fix potential memory leak in mlxsw_m_linecards_init
- spi: bcm-qspi: return error if neither hif_mspi nor mspi is available
- drm/amdgpu: fix number of fence calculations
- drm/amd: Don't try to enable secure display TA multiple times
- mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
- f2fs: fix error path handling in truncate_dnode()
- octeontx2-af: Fix mapping for NIX block from CGX connection
- octeontx2-af: Add validation before accessing cgx and lmac
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y
- powerpc: dts: turris1x.dts: Fix PCIe MEM size for pci2 node
- net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode
- net: dsa: tag_sja1105: fix source port decoding in vlan_filtering=0 bridge
mode
- net: fix net_dev_start_xmit trace event vs skb_transport_offset()
- tcp: annotate data races in __tcp_oow_rate_limited()
- bpf, btf: Warn but return no error for NULL btf from
__register_btf_kfunc_id_set()
- xsk: Honor SO_BINDTODEVICE on bind
- net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX
- fanotify: disallow mount/sb marks on kernel internal pseudo fs
- riscv: move memblock_allow_resize() after linear mapping is ready
- pptp: Fix fib lookup calls.
- net: dsa: tag_sja1105: fix MAC DA patching from meta frames
- net: dsa: sja1105: always enable the send_meta options
- octeontx-af: fix hardware timestamp configuration
- afs: Fix accidental truncation when storing data
- s390/qeth: Fix vipa deletion
- sh: dma: Fix DMA channel offset calculation
- apparmor: fix missing error check for rhashtable_insert_fast
- i2c: xiic: Don't try to handle more interrupt events after error
- dm: fix undue/missing spaces
- dm: avoid split of quoted strings where possible
- dm ioctl: have constant on the right side of the test
- dm ioctl: Avoid double-fetch of version
- extcon: usbc-tusb320: Unregister typec port on driver removal
- btrfs: do not BUG_ON() on tree mod log failure at balance_level()
- i2c: qup: Add missing unwind goto in qup_i2c_probe()
- irqchip/loongson-pch-pic: Fix potential incorrect hwirq assignment
- NFSD: add encoding of op_recall flag for write delegation
- irqchip/loongson-pch-pic: Fix initialization of HT vector register
- io_uring: wait interruptibly for request completions on exit
- mmc: core: disable TRIM on Kingston EMMC04G-M627
- mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M
- mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS
- mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is
used.
- wifi: cfg80211: fix regulatory disconnect for non-MLO
- wifi: ath10k: Serialize wake_tx_queue ops
- bcache: fixup btree_cache_wait list damage
- bcache: Remove unnecessary NULL point check in node allocations
- bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent
- watch_queue: prevent dangling pipe pointer
- um: Use HOST_DIR for mrproper
- integrity: Fix possible multiple allocation in integrity_inode_get()
- autofs: use flexible array in ioctl structure
- mm/damon/ops-common: atomically test and clear young on ptes and pmds
- shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs
- jffs2: reduce stack usage in jffs2_build_xattr_subsystem()
- fs: avoid empty option when generating legacy mount string
- ext4: Remove ext4 locking of moved directory
- Revert "f2fs: fix potential corruption when moving a directory"
- fs: Establish locking order for unrelated directories
- fs: Lock moved directories
- i2c: nvidia-gpu: Add ACPI property to align with device-tree
- i2c: nvidia-gpu: Remove ccgx,firmware-build property
- usb: typec: ucsi: Mark dGPUs as DEVICE scope
- ipvs: increase ip_vs_conn_tab_bits range for 64BIT
- btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profile
- btrfs: delete unused BGs while reclaiming BGs
- btrfs: bail out reclaim process if filesystem is read-only
- btrfs: add block-group tree to lockdep classes
- btrfs: reinsert BGs failed to reclaim
- btrfs: fix race when deleting quota root from the dirty cow roots list
- btrfs: fix extent buffer leak after tree mod log failure at split_node()
- btrfs: do not BUG_ON() on tree mod log failure at __btrfs_cow_block()
- ASoC: mediatek: mt8173: Fix irq error path
- ASoC: mediatek: mt8173: Fix snd_soc_component_initialize error path
- regulator: tps65219: Fix matching interrupts for their regulators
- ARM: dts: qcom: ipq4019: fix broken NAND controller properties override
- ARM: orion5x: fix d2net gpio initialization
- leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename
- blktrace: use inline function for blk_trace_remove() while blktrace is
disabled
- fs: no need to check source
- xfs: explicitly specify cpu when forcing inodegc delayed work to run
immediately
- xfs: check that per-cpu inodegc workers actually run on that cpu
- xfs: disable reaping in fscounters scrub
- xfs: fix xfs_inodegc_stop racing with mod_delayed_work
- mm/mmap: Fix extra maple tree write
- netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
- wireguard: queueing: use saner cpu selection wrapping
- wireguard: netlink: send staged packets when setting initial private key
- tty: serial: fsl_lpuart: add earlycon for imx8ulp platform
- block/partition: fix signedness issue for Amiga partitions
- sh: mach-r2d: Handle virq offset in cascaded IRL demux
- sh: mach-highlander: Handle virq offset in cascaded IRL demux
- sh: mach-dreamcast: Handle virq offset in cascaded IRQ demux
- sh: hd64461: Handle virq offset for offchip IRQ base and HD64461 IRQ
- blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()
- irqchip/loongson-eiointc: Fix irq affinity setting during resume
- perf: arm_cspmu: Set irq affinitiy only if overflow interrupt is used
- perf/arm_cspmu: Fix event attribute type
- APEI: GHES: correctly return NULL for ghes_get_devices()
- wifi: rtw88: usb: silence log flooding error message
- net: dsa: avoid suspicious RCU usage for synced VLAN-aware MAC addresses
- drm/amd/display: fix is_timing_changed() prototype
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- drm/nouveau: dispnv50: fix missing-prototypes warning
- arm64: dts: qcom: pm8998: don't use GIC_SPI for SPMI interrupts
- arm64: dts: qcom: ipq6018: correct qrng unit address
- arm64: dts: qcom: msm8953: correct IOMMU unit address
- arm64: dts: qcom: msm8976: correct MMC unit address
- arm64: dts: qcom: sm6115: correct thermal-sensor unit address
- drm/msm/dpu: always clear every individual pending flush mask
- MIPS: DTS: CI20: Fix ACT8600 regulator node names
- arm64: dts: qcom: sdm670: Flush RSC sleep & wake votes
- arm64: dts: ti: k3-j721e-beagleboneai64: Fix mailbox node status
- drm/msm/dp: Drop aux devices together with DP controller
- iommufd: Do not access the area pointer after unlocking
- iommufd: Call iopt_area_contig_done() under the lock
- perf evsel: Don't let for_each_group() treat the head of the list as one of
its nodes
- pinctrl: tegra: Duplicate pinmux functions table
- platform/x86:intel/pmc: Remove Meteor Lake S platform support
- perf tests task_analyzer: Fix bad substitution ${$1}
- perf tests task_analyzer: Skip tests if no libtraceevent support
- pinctrl: freescale: Fix a memory out of bounds when num_configs is 1
- perf stat: Reset aggr stats for each run
- platform/x86:intel/pmc: Update maps for Meteor Lake P/M platforms
- perf test: Set PERF_EXEC_PATH for script execution
- kbuild: Fix CFI failures with GCOV
- btrfs: fix range_end calculation in extent_write_locked_range
- igc: Fix race condition in PTP tx code
- igc: Check if hardware TX timestamping is enabled earlier
- igc: Work around HW bug causing missing timestamps
- sch_netem: fix issues in netem_change() vs get_dist_table()
- interconnect: qcom: rpm: Don't use clk_get_optional for bus clocks anymore
- media: videodev2.h: Fix p_s32 and p_s64 pointer types
- f2fs: fix the wrong condition to determine atomic context
- test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation
- media: tc358746: select CONFIG_GENERIC_PHY
- net/sched: act_ipt: zero skb->cb before calling target
- octeontx2-af: cn10kb: fix interrupt csr addresses
- octeontx2-af: Reset MAC features in FLR
- drm/i915/psr: Fix BDW PSR AUX CH data register offsets
- irqchip/loongson-liointc: Fix IRQ trigger polarity
- btrfs: fix dirty_metadata_bytes for redirtied buffers
- btrfs: add missing error handling when logging operation while COWing extent
buffer
- ARM: dts: qcom: msm8660: Fix regulator node names
- ovl: fix null pointer dereference in ovl_permission()
- ovl: let helper ovl_i_path_real() return the realinode
- ovl: fix null pointer dereference in ovl_get_acl_rcu()
- Upstream stable to v6.1.39, v6.3.13, v6.4.4
* Lunar update: upstream stable patchset 2023-09-01 (LP: #2033931)
- x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed
- test_firmware: Use kstrtobool() instead of strtobool()
- cgroup: bpf: use cgroup_lock()/cgroup_unlock() wrappers
- cgroup: always put cset in cgroup_css_set_put_fork
- cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks()
- qcom: llcc/edac: Fix the base address used for accessing LLCC banks
- EDAC/qcom: Get rid of hardcoded register offsets
- ksmbd: validate smb request protocol id
- of: overlay: Fix missing of_node_put() in error case of
init_overlay_changeset()
- power: supply: ab8500: Fix external_power_changed race
- power: supply: sc27xx: Fix external_power_changed race
- power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() +
schedule()
- ARM: dts: vexpress: add missing cache properties
- tools: gpio: fix debounce_period_us output of lsgpio
- selftests: gpio: gpio-sim: Fix BUG: test FAILED due to recent change
- power: supply: Ratelimit no data debug output
- PCI/DPC: Quirk PIO log size for Intel Ice Lake Root Ports
- platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0
- regulator: Fix error checking for debugfs_create_dir
- irqchip/gic-v3: Disable pseudo NMIs on Mediatek devices w/ firmware issues
- irqchip/meson-gpio: Mark OF related data as maybe unused
- power: supply: Fix logic checking if system is running from battery
- drm: panel-orientation-quirks: Change Air's quirk to support Air Plus
- btrfs: scrub: try harder to mark RAID56 block groups read-only
- btrfs: handle memory allocation failure in btrfs_csum_one_bio
- ASoC: soc-pcm: test if a BE can be prepared
- ASoC: Intel: avs: Account for UID of ACPI device
- ASoC: Intel: avs: Add missing checks on FE startup
- parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu()
- parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory()
- MIPS: unhide PATA_PLATFORM
- MIPS: Restore Au1300 support
- MIPS: Alchemy: fix dbdma2
- mips: Move initrd_start check after initrd address sanitisation.
- ASoC: cs35l41: Fix default regmap values for some registers
- ASoC: dwc: move DMA init to snd_soc_dai_driver probe()
- xen/blkfront: Only check REQ_FUA for writes
- drm:amd:amdgpu: Fix missing buffer object unlock in failure path
- io_uring: unlock sqd->lock before sq thread release CPU
- NVMe: Add MAXIO 1602 to bogus nid list.
- irqchip/gic: Correctly validate OF quirk descriptors
- wifi: cfg80211: fix locking in regulatory disconnect
- wifi: cfg80211: fix double lock bug in reg_wdev_chan_valid()
- epoll: ep_autoremove_wake_function should use list_del_init_careful
- ocfs2: fix use-after-free when unmounting read-only filesystem
- ocfs2: check new file size on fallocate call
- zswap: do not shrink if cgroup may not zswap
- nios2: dts: Fix tse_mac "max-frame-size" property
- nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key()
- nilfs2: fix possible out-of-bounds segment allocation in resize ioctl
- nilfs2: reject devices with insufficient block count
- LoongArch: Fix perf event id calculation
- io_uring/net: save msghdr->msg_control for retries
- kexec: support purgatories with .text.hot sections
- x86/purgatory: remove PGO flags
- riscv/purgatory: remove PGO flags
- powerpc/purgatory: remove PGO flags
- btrfs: do not ASSERT() on duplicated global roots
- btrfs: fix iomap_begin length for nocow writes
- btrfs: can_nocow_file_extent should pass down args->strict from callers
- ALSA: usb-audio: Fix broken resume due to UAC3 power state
- ALSA: usb-audio: Add quirk flag for HEM devices to enable native DSD
playback
- dm thin metadata: check fail_io before using data_sm
- dm thin: fix issue_discard to pass GFP_NOIO to __blkdev_issue_discard
- net: ethernet: stmicro: stmmac: fix possible memory leak in __stmmac_open
- nouveau: fix client work fence deletion race
- RDMA/uverbs: Restrict usage of privileged QKEYs
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
- net: usb: qmi_wwan: add support for Compal RXM-G1
- drm/amd: Make sure image is written to trigger VBIOS image update flow
- drm/amd: Tighten permissions on VBIOS flashing attributes
- drm/amd/pm: workaround for compute workload type on some skus
- drm/amdgpu: add missing radeon secondary PCI ID
- ALSA: hda/realtek: Add a quirk for Compaq N14JP6
- thunderbolt: dma_test: Use correct value for absent rings when creating
paths
- thunderbolt: Mask ring interrupt on Intel hardware as well
- clk: pxa: fix NULL pointer dereference in pxa3xx_clk_update_accr
- USB: serial: option: add Quectel EM061KGL series
- serial: lantiq: add missing interrupt ack
- usb: typec: ucsi: Fix command cancellation
- usb: typec: Fix fast_role_swap_current show function
- usb: gadget: udc: core: Offload usb_udc_vbus_handler processing
- usb: gadget: udc: core: Prevent soft_connect_store() race
- USB: dwc3: qcom: fix NULL-deref on suspend
- USB: dwc3: fix use-after-free on core driver unbind
- usb: dwc3: gadget: Reset num TRBs before giving back the request
- RDMA/rtrs: Fix the last iu->buf leak in err path
- RDMA/rtrs: Fix rxe_dealloc_pd warning
- RDMA/rxe: Fix packet length checks
- RDMA/rxe: Fix ref count error in check_rkey()
- spi: cadence-quadspi: Add missing check for dma_set_mask
- spi: fsl-dspi: avoid SCK glitches with continuous transfers
- netfilter: nf_tables: integrate pipapo into commit protocol
- netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM
- ice: Fix XDP memory leak when NIC is brought up and down
- net: enetc: correct the indexes of highest and 2nd highest TCs
- ping6: Fix send to link-local addresses with VRF.
- igb: Fix extts capture value format for 82580/i354/i350
- net/sched: simplify tcf_pedit_act
- net/sched: act_pedit: remove extra check for key type
- net/sched: act_pedit: Parse L3 Header for L4 offset
- octeontx2-af: Fix promiscuous mode
- wifi: mac80211: fix link activation settings order
- wifi: cfg80211: fix link del callback to call correct handler
- wifi: mac80211: take lock before setting vif links
- RDMA/rxe: Fix the use-before-initialization error of resp_pkts
- iavf: remove mask from iavf_irq_enable_queues()
- octeontx2-af: fixed resource availability check
- octeontx2-af: fix lbk link credits on cn10k
- RDMA/mlx5: Initiate dropless RQ for RAW Ethernet functions
- RDMA/mlx5: Create an indirect flow table for steering anchor
- RDMA/cma: Always set static rate to 0 for RoCE
- IB/uverbs: Fix to consider event queue closing also upon non-blocking mode
- RDMA/mlx5: Fix affinity assignment
- IB/isert: Fix dead lock in ib_isert
- IB/isert: Fix possible list corruption in CMA handler
- IB/isert: Fix incorrect release of isert connection
- net: ethtool: correct MAX attribute value for stats
- ipvlan: fix bound dev checking for IPv6 l3s mode
- sctp: fix an error code in sctp_sf_eat_auth()
- igc: Clean the TX buffer and TX descriptor ring
- igc: Fix possible system crash when loading module
- igb: fix nvm.ops.read() error handling
- net: phylink: report correct max speed for QUSGMII
- net: phylink: use a dedicated helper to parse usgmii control word
- drm/nouveau: don't detect DSM for non-NVIDIA device
- drm/bridge: ti-sn65dsi86: Avoid possible buffer overflow
- drm/nouveau/dp: check for NULL nv_connector->native_mode
- drm/nouveau: add nv_encoder pointer check for NULL
- selftests/tc-testing: Fix Error: Specified qdisc kind is unknown.
- selftests/tc-testing: Fix Error: failed to find target LOG
- selftests/tc-testing: Fix SFB db test
- sched: add new attr TCA_EXT_WARN_MSG to report tc extact message
- net/sched: Refactor qdisc_graft() for ingress and clsact Qdiscs
- net/sched: qdisc_destroy() old ingress and clsact Qdiscs before grafting
- selftests: forwarding: hw_stats_l3: Set addrgenmode in a separate step
- cifs: fix lease break oops in xfstest generic/098
- ext4: drop the call to ext4_error() from ext4_get_group_info()
- net/sched: cls_api: Fix lockup on flushing explicitly created chain
- net: dsa: felix: fix taprio guard band overflow at 10Mbps with jumbo frames
- net: lapbether: only support ethernet devices
- net: macsec: fix double free of percpu stats
- sfc: fix XDP queues mode with legacy IRQ
- dm: don't lock fs when the map is NULL during suspend or resume
- net: tipc: resize nlattr array to correct size
- selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET
- octeon_ep: Add missing check for ioremap
- afs: Fix vlserver probe RTT handling
- parisc: Delete redundant register definitions in <asm/assembly.h>
- net/sched: act_api: move TCA_EXT_WARN_MSG to the correct hierarchy
- Revert "net/sched: act_api: move TCA_EXT_WARN_MSG to the correct hierarchy"
- net/sched: act_api: add specific EXT_WARN_MSG for tc action
- neighbour: delete neigh_lookup_nodev as not used
- scsi: target: core: Fix error path in target_setup_session()
- x86/boot/compressed: prefer cc-option for CFLAGS additions
- MIPS: Move '-Wa,-msoft-float' check from as-option to cc-option
- MIPS: Prefer cc-option for additions to cflags
- kbuild: Update assembler calls to use proper flags and language target
- btrfs: properly enable async discard when switching from RO->RW
- wifi: mac80211: fragment per STA profile correctly
- RDMA/rxe: Fix rxe_cq_post
- blk-cgroup: Flush stats before releasing blkcg_gq
- Upstream stable to v6.1.35, v6.3.9
- drm/amd/display: Use dc_update_planes_and_stream
- drm/amd/display: Add wrapper to call planes and stream update
- drm/amd/display: fix the system hang while disable PSR
- tty: serial: fsl_lpuart: make rx_watermark configurable for different
platforms
- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A
- mm: Fix copy_from_user_nofault().
- tpm, tpm_tis: Claim locality in interrupt handler
- tpm_crb: Add support for CRB devices based on Pluton
- ksmbd: validate command payload size
- ksmbd: fix out-of-bound read in smb2_write
- ksmbd: validate session id and tree id in the compound request
- tick/common: Align tick period during sched_timer setup
- selftests: mptcp: remove duplicated entries in usage
- selftests: mptcp: join: fix ShellCheck warnings
- selftests: mptcp: lib: skip if missing symbol
- selftests: mptcp: connect: skip transp tests if not supported
- selftests: mptcp: connect: skip disconnect tests if not supported
- selftests: mptcp: pm nl: remove hardcoded default limits
- selftests: mptcp: pm nl: skip fullmesh flag checks if not supported
- selftests: mptcp: sockopt: relax expected returned size
- selftests: mptcp: sockopt: skip getsockopt checks if not supported
- selftests: mptcp: userspace pm: skip if 'ip' tool is unavailable
- selftests: mptcp: userspace pm: skip if not supported
- selftests: mptcp: lib: skip if not below kernel version
- selftests: mptcp: join: use 'iptables-legacy' if available
- selftests: mptcp: join: helpers to skip tests
- selftests: mptcp: join: skip check if MIB counter not supported
- selftests: mptcp: join: support local endpoint being tracked or not
- selftests: mptcp: join: skip Fastclose tests if not supported
- selftests: mptcp: join: support RM_ADDR for used endpoints or not
- selftests: mptcp: join: skip implicit tests if not supported
- selftests: mptcp: join: skip backup if set flag on ID not supported
- selftests: mptcp: join: skip fullmesh flag tests if not supported
- selftests: mptcp: join: skip MPC backups tests if not supported
- selftests/mount_setattr: fix redefine struct mount_attr build error
- selftests: mptcp: diag: skip listen tests if not supported
- selftests: mptcp: sockopt: skip TCP_INQ checks if not supported
- selftests: mptcp: join: skip test if iptables/tc cmds fail
- selftests: mptcp: join: skip userspace PM tests if not supported
- selftests: mptcp: join: skip fail tests if not supported
- selftests: mptcp: join: fix "userspace pm add & remove address"
- writeback: fix dereferencing NULL mapping->host on writeback_page_template
- scripts: fix the gfp flags header path in gfp-translate
- nilfs2: fix buffer corruption due to concurrent device reads
- ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep()
- KVM: Avoid illegal stage2 mapping on invalid memory slot
- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails
- Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs
- PCI: hv: Fix a race condition bug in hv_pci_query_relations()
- Revert "PCI: hv: Fix a timing issue which causes kdump to fail occasionally"
- PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev
- PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic
- PCI: hv: Add a per-bus mutex state_lock
- io_uring/net: clear msg_controllen on partial sendmsg retry
- io_uring/net: disable partial retries for recvmsg with cmsg
- mptcp: handle correctly disconnect() failures
- mptcp: fix possible divide by zero in recvmsg()
- mptcp: fix possible list corruption on passive MPJ
- mptcp: consolidate fallback and non fallback state machine
- cgroup: Do not corrupt task iteration when rebinding subsystem
- cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex in
freezer_css_{online,offline}()
- mmc: litex_mmc: set PROBE_PREFER_ASYNCHRONOUS
- mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916
- mmc: meson-gx: remove redundant mmc_request_done() call from irq context
- mmc: mmci: stm32: fix max busy timeout calculation
- mmc: sdhci-spear: fix deferred probing
- mmc: bcm2835: fix deferred probing
- mmc: sunxi: fix deferred probing
- bpf: ensure main program has an extable
- wifi: iwlwifi: pcie: Handle SO-F device for PCI id 0x7AF0
- spi: spi-geni-qcom: correctly handle -EPROBE_DEFER from dma_request_chan()
- regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK
- regmap: spi-avmm: Fix regmap_bus max_raw_write
- arm64: dts: rockchip: Fix rk356x PCIe register and range mappings
- nilfs2: prevent general protection fault in nilfs_clear_dirty_page()
- x86/mm: Avoid using set_pgd() outside of real PGD pages
- memfd: check for non-NULL file_seals in memfd_create() syscall
- mmc: meson-gx: fix deferred probing
- ieee802154: hwsim: Fix possible memory leaks
- xfrm: Treat already-verified secpath entries as optional
- xfrm: Ensure policies always checked on XFRM-I input path
- KVM: arm64: PMU: Restore the host's PMUSERENR_EL0
- bpf: track immediate values written to stack by BPF_ST instruction
- bpf: Fix verifier id tracking of scalars on spill
- xfrm: fix inbound ipv4/udp/esp packets to UDPv6 dualstack sockets
- bpf: Fix a bpf_jit_dump issue for x86_64 with sysctl bpf_jit_enable.
- selftests: net: tls: check if FIPS mode is enabled
- selftests: net: vrf-xfrm-tests: change authentication and encryption algos
- selftests: net: fcnal-test: check if FIPS mode is enabled
- xfrm: Linearize the skb after offloading if needed.
- net/mlx5: DR, Fix wrong action data allocation in decap action
- sfc: use budget for TX completions
- net: qca_spi: Avoid high load if QCA7000 is not available
- mmc: mtk-sd: fix deferred probing
- mmc: mvsdio: fix deferred probing
- mmc: omap: fix deferred probing
- mmc: omap_hsmmc: fix deferred probing
- mmc: owl: fix deferred probing
- mmc: sdhci-acpi: fix deferred probing
- mmc: sh_mmcif: fix deferred probing
- mmc: usdhi60rol0: fix deferred probing
- ipvs: align inner_mac_header for encapsulation
- net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch
- net: dsa: mt7530: fix handling of BPDUs on MT7530 switch
- net: dsa: mt7530: fix handling of LLDP frames
- be2net: Extend xmit workaround to BE3 chip
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nft_set_pipapo: .walk does not deal with generations
- netfilter: nf_tables: disallow element updates of bound anonymous sets
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: disallow updates of anonymous sets
- netfilter: nfnetlink_osf: fix module autoload
- Revert "net: phy: dp83867: perform soft reset and retain established link"
- bpf/btf: Accept function names that contain dots
- bpf: Force kprobe multi expected_attach_type for kprobe_multi link
- io_uring/net: use the correct msghdr union member in io_sendmsg_copy_hdr
- selftests: forwarding: Fix race condition in mirror installation
- platform/x86/amd/pmf: Register notify handler only if SPS is enabled
- sch_netem: acquire qdisc lock in netem_change()
- revert "net: align SO_RCVMARK required privileges with SO_MARK"
- arm64: dts: rockchip: fix nEXTRST on SOQuartz
- gpiolib: Fix GPIO chip IRQ initialization restriction
- gpio: sifive: add missing check for platform_get_irq
- gpiolib: Fix irq_domain resource tracking for gpiochip_irqchip_add_domain()
- scsi: target: iscsi: Prevent login threads from racing between each other
- HID: wacom: Add error check to wacom_parse_and_register()
- arm64: Add missing Set/Way CMO encodings
- smb3: missing null check in SMB2_change_notify
- media: cec: core: disable adapter in cec_devnode_unregister
- media: cec: core: don't set last_initiator if tx in progress
- nfcsim.c: Fix error checking for debugfs_create_dir
- btrfs: fix an uninitialized variable warning in btrfs_log_inode
- usb: gadget: udc: fix NULL dereference in remove()
- nvme: double KA polling frequency to avoid KATO with TBKAS on
- nvme: check IO start time when deciding to defer KA
- nvme: improve handling of long keep alives
- Input: soc_button_array - add invalid acpi_index DMI quirk handling
- arm64: dts: qcom: sc7280-idp: drop incorrect dai-cells from WCD938x SDW
- arm64: dts: qcom: sc7280-qcard: drop incorrect dai-cells from WCD938x SDW
- s390/cio: unregister device when the only path is gone
- spi: lpspi: disable lpspi module irq in DMA mode
- ASoC: codecs: wcd938x-sdw: do not set can_multi_write flag
- ASoC: simple-card: Add missing of_node_put() in case of error
- soundwire: dmi-quirks: add new mapping for HP Spectre x360
- soundwire: qcom: add proper error paths in qcom_swrm_startup()
- ASoC: nau8824: Add quirk to active-high jack-detect
- ASoC: amd: yc: Add Thinkpad Neo14 to quirks list for acp6x
- gfs2: Don't get stuck writing page onto itself under direct I/O
- s390/purgatory: disable branch profiling
- ASoC: fsl_sai: Enable BCI bit if SAI works on synchronous mode with BYP
asserted
- ALSA: hda/realtek: Add "Intel Reference board" and "NUC 13" SSID in the
ALC256
- i2c: mchp-pci1xxxx: Avoid cast to incompatible function type
- ARM: dts: Fix erroneous ADS touchscreen polarities
- null_blk: Fix: memory release when memory_backed=1
- drm/exynos: vidi: fix a wrong error return
- drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl
- drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl
- vhost_vdpa: tell vqs about the negotiated
- vhost_net: revert upend_idx only on retriable error
- KVM: arm64: Restore GICv2-on-GICv3 functionality
- x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys
- i2c: imx-lpi2c: fix type char overflow issue when calculating the clock
cycle
- smb: move client and server files to common directory fs/smb
- [Config] updateconfigs for SMBFS_COMMON
- cifs: fix status checks in cifs_tree_connect
- udmabuf: revert 'Add support for mapping hugepages (v4)'
- selftests: mptcp: connect: skip TFO tests if not supported
- selftests: mptcp: join: skip PM listener tests if not supported
- selftests: mptcp: join: uniform listener tests
- block: make sure local irq is disabled when calling __blkcg_rstat_flush
- xfrm: add missed call to delete offloaded policies
- net: dsa: introduce preferred_default_local_cpu_port and use on MT7530
- iommu/amd: Fix possible memory leak of 'domain'
- Upstream stable to v6.1.36, v6.3.10
- mm/mmap: Fix error path in do_vmi_align_munmap()
- mm/mmap: Fix error return in do_vmi_align_munmap()
- mptcp: ensure listener is unhashed before updating the sk status
- x86/microcode/AMD: Load late on both threads too
- x86/smp: Remove pointless wmb()s from native_stop_other_cpus()
- x86/smp: Use dedicated cache-line for mwait_play_dead()
- x86/smp: Cure kexec() vs. mwait_play_dead() breakage
- can: isotp: isotp_sendmsg(): fix return error fix on TX path
- maple_tree: fix potential out-of-bounds access in mas_wr_end_piv()
- fbdev: fix potential OOB read in fast_imageblit()
- HID: hidraw: fix data race on device refcount
- HID: wacom: Use ktime_t rather than int when dealing with timestamps
- HID: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651.
- Revert "thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak
in mtk_thermal_probe"
- sparc32: fix lock_mm_and_find_vma() conversion
- parisc: fix expand_stack() conversion
- csky: fix up lock_mm_and_find_vma() conversion
- xtensa: fix NOMMU build with lock_mm_and_find_vma() conversion
- Upstream stable to v6.1.37, v6.3.11
- xtensa: fix lock_mm_and_find_vma in case VMA not found
- drm/amd/display: Do not update DRR while BW optimizations pending
- PCI/ACPI: Validate acpi_pci_set_power_state() parameter
- PCI/ACPI: Call _REG when transitioning D-states
- execve: always mark stack as growing down during early stack setup
- nubus: Partially revert proc_create_single_data() conversion
- perf symbols: Symbol lookup with kcore can fail if multiple segments match
stext
- scripts/tags.sh: Resolve gtags empty index generation
- docs: Set minimal gtags / GNU GLOBAL version to 6.6.5
- drm/amdgpu: Validate VM ioctl flags.
- drm/amd/display: Ensure vmin and vmax adjust for DCE
- Upstream stable to v6.1.38, v6.3.12
* allow io_uring to be disabled in runtime (LP: #2035116)
- io_uring: add a sysctl to disable io_uring system-wide
* CVE-2023-31083
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
* CVE-2023-4132
- media: usb: siano: Fix warning due to null work_func_t function pointer
* CVE-2023-3863
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
* CVE-2023-3772
- xfrm: add NULL check in xfrm_update_ae_params
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
-- Stefan Bader <stefan.bader@canonical.com> Mon, 09 Oct 2023 16:29:19 +0200
linux-hwe-6.2 (6.2.0-35.35~22.04.1) jammy; urgency=medium
* jammy/linux-hwe-6.2: 6.2.0-35.35~22.04.1 -proposed tracker (LP: #2038228)
* CVE-2023-42755
- [Config] hwe-6.2: Mark cls_rsv[p,p6] gone
[ Ubuntu: 6.2.0-35.35 ]
* lunar/linux: 6.2.0-35.35 -proposed tracker (LP: #2038229)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* CVE-2023-4244
- netfilter: nf_tables: don't skip expired elements during walk
- netfilter: nf_tables: integrate pipapo into commit protocol
- netfilter: nft_set_rbtree: fix overlap expiration walk
- netfilter: nf_tables: adapt set backend to use GC transaction API
- netfilter: nft_set_hash: mark set element as dead when deleting from packet
path
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nf_tables: GC transaction API to avoid race with control plane
- netfilter: nf_tables: remove busy mark and gc batch API
- netfilter: nf_tables: don't fail inserts if duplicate has expired
- netfilter: nf_tables: fix kdoc warnings after gc rework
- netfilter: nf_tables: fix GC transaction races with netns and netlink event
exit path
- netfilter: nf_tables: GC transaction race with netns dismantle
- netfilter: nf_tables: GC transaction race with abort path
- netfilter: nf_tables: use correct lock to protect gc_list
- netfilter: nf_tables: defer gc run if previous batch is still pending
- netfilter: nft_dynset: disallow object maps
- netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
* CVE-2023-5197
- netfilter: nf_tables: skip bound chain in netns release path
- netfilter: nf_tables: disallow rule removal from chain binding
* CVE-2023-4921
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
* CVE-2023-4881
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
* CVE-2023-4623
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
* CVE-2023-4622
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
* CVE-2023-42756
- netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
* CVE-2023-42755
- net/sched: Retire rsvp classifier
- [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
* CVE-2023-42753
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
ip_set_hash_netportnet.c
* CVE-2023-42752
- igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
- net: add SKB_HEAD_ALIGN() helper
- net: remove osize variable in __alloc_skb()
- net: factorize code in kmalloc_reserve()
- net: deal with integer overflows in kmalloc_reserve()
* CVE-2023-34319
- xen/netback: Fix buffer overrun triggered by unusual packet
-- Stefan Bader <stefan.bader@canonical.com> Fri, 06 Oct 2023 11:29:50 +0200
linux-hwe-6.2 (6.2.0-34.34~22.04.1) jammy; urgency=medium
* jammy/linux-hwe-6.2: 6.2.0-34.34~22.04.1 -proposed tracker (LP: #2033778)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
[ Ubuntu: 6.2.0-34.34 ]
* lunar/linux: 6.2.0-34.34 -proposed tracker (LP: #2033779)
* CVE-2023-20569
- x86/cpu, kvm: Add support for CPUID_80000021_EAX
- tools headers x86 cpufeatures: Sync with the kernel sources
- x86/alternative: Optimize returns patching
- x86/retbleed: Add __x86_return_thunk alignment checks
- x86/srso: Add a Speculative RAS Overflow mitigation
- x86/srso: Add IBPB_BRTYPE support
- x86/srso: Add SRSO_NO support
- x86/srso: Add IBPB
- x86/srso: Add IBPB on VMEXIT
- x86/srso: Fix return thunks in generated code
- x86/srso: Add a forgotten NOENDBR annotation
- x86/srso: Tie SBPB bit setting to microcode patch detection
- Documentation/hw-vuln: Unify filename specification in index
- Documentation/srso: Document IBPB aspect and fix formatting
- x86/srso: Fix build breakage with the LLVM linker
- x86: Move gds_ucode_mitigated() declaration to header
- x86/retpoline: Don't clobber RFLAGS during srso_safe_ret()
- x86/srso: Disable the mitigation on unaffected configurations
- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG
- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with
retpolines and IBT
- x86/cpu: Fix __x86_return_thunk symbol type
- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk()
- objtool/x86: Fix SRSO mess
- x86/alternative: Make custom return thunk unconditional
- x86/cpu: Clean up SRSO return thunk mess
- x86/cpu: Rename original retbleed methods
- x86/cpu: Rename srso_(.*)_alias to srso_alias_1
- x86/cpu: Cleanup the untrain mess
- x86/srso: Explain the untraining sequences a bit more
- objtool/x86: Fixup frame-pointer vs rethunk
- x86/static_call: Fix __static_call_fixup()
- x86/srso: Correct the mitigation status when SMT is disabled
- Ubuntu: [Config]: enable Speculative Return Stack Overflow mitigation
* Please enable Renesas RZ platform serial installer (LP: #2022361)
- [Config] enable hihope RZ/G2M serial console
- [Config] Mark sh-sci as built-in
* dGPU cannot resume because system firmware stuck in IPCS method
(LP: #2021572)
- drm/i915/tc: Abort DP AUX transfer on a disconnected TC port
- drm/i915/tc: switch to intel_de_* register accessors in display code
- drm/i915: Enable a PIPEDMC whenever its corresponding pipe is enabled
- drm/i915/tc: Fix TC port link ref init for DP MST during HW readout
- drm/i915/tc: Fix system resume MST mode restore for DP-alt sinks
- drm/i915/tc: Wait for IOM/FW PHY initialization of legacy TC ports
- drm/i915/tc: Factor out helpers converting HPD mask to TC mode
- drm/i915/tc: Fix target TC mode for a disconnected legacy port
- drm/i915/tc: Fix TC mode for a legacy port if the PHY is not ready
- drm/i915/tc: Fix initial TC mode on disabled legacy ports
- drm/i915/tc: Make the TC mode readout consistent in all PHY states
- drm/i915: Add encoder hook to get the PLL type used by TC ports
- drm/i915/tc: Assume a TC port is legacy if VBT says the port has HDMI
- drm/i915/tc: Factor out a function querying active links on a TC port
- drm/i915/tc: Check the PLL type used by an enabled TC port
- drm/i915/tc: Group the TC PHY setup/query functions per platform
- drm/i915/tc: Use the adlp prefix for ADLP TC PHY functions
- drm/i915/tc: Rename tc_phy_status_complete() to tc_phy_is_ready()
- drm/i915/tc: Use the tc_phy prefix for all TC PHY functions
- drm/i915/tc: Move TC port fields to a new intel_tc_port struct
- drm/i915/tc: Check for TC PHY explicitly in
intel_tc_port_fia_max_lane_count()
- drm/i915/tc: Move the intel_tc_port struct declaration to intel_tc.c
- drm/i915/tc: Add TC PHY hook to get the PHY HPD live status
- drm/i915/tc: Add TC PHY hooks to get the PHY ready/owned state
- drm/i915/tc: Add TC PHY hook to read out the PHY HW state
- drm/i915/tc: Add generic TC PHY connect/disconnect handlers
- drm/i915/tc: Factor out tc_phy_verify_legacy_or_dp_alt_mode()
- drm/i915/tc: Add TC PHY hooks to connect/disconnect the PHY
- drm/i915/tc: Fix up the legacy VBT flag only in disconnected mode
- drm/i915/tc: Check TC mode instead of the VBT legacy flag
- drm/i915/tc: Block/unblock TC-cold in the PHY connect/disconnect hooks
- drm/i915/tc: Remove redundant wakeref=0 check from unblock_tc_cold()
- drm/i915/tc: Drop tc_cold_block()/unblock()'s power domain parameter
- drm/i915/tc: Add TC PHY hook to get the TC-cold blocking power domain
- drm/i915/tc: Add asserts in TC PHY hooks that the required power is on
- drm/i915/tc: Add TC PHY hook to init the PHY
- drm/i915/adlp/tc: Use the DE HPD ISR register for hotplug detection
- drm/i915/tc: Get power ref for reading the HPD live status register
- drm/i915/tc: Don't connect the PHY in intel_tc_port_connected()
- drm/i915/adlp/tc: Align the connect/disconnect PHY sequence with bspec
- drm/i915: Move shared DPLL disabling into CRTC disable hook
- drm/i915: Disable DPLLs before disconnecting the TC PHY
- drm/i915: Remove TC PHY disconnect workaround
- drm/i915: Remove the encoder update_prepare()/complete() hooks
- drm/i915/dp_mst: Fix active port PLL selection for secondary MST streams
- drm/i915: Fix PIPEDMC disabling for a bigjoiner configuration
- drm/i915: Add helpers to reference/unreference a DPLL for a CRTC
- drm/i915: Make the CRTC state consistent during sanitize-disabling
- drm/i915: Update connector atomic state before crtc sanitize-disabling
- drm/i915: Separate intel_crtc_disable_noatomic_begin/complete()
- drm/i915: Factor out set_encoder_for_connector()
- drm/i915: Add support for disabling any CRTCs during HW readout/sanitization
- drm/i915/dp: Prevent link training fallback on disconnected port
- drm/i915/dp: Factor out intel_dp_get_active_pipes()
- drm/i915: Factor out a helper for handling atomic modeset locks/state
- drm/i915/tc: Call TypeC port flush_work/cleanup without modeset locks held
- drm/i915/tc: Reset TypeC PHYs left enabled in DP-alt mode after the sink
disconnects
* amdgpu: Fixes for S0i3 resume on Phoenix (LP: #2033654)
- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11
- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix
- drm/amd: flush any delayed gfxoff on suspend entry
* Fix panel brightness issues on HP laptops (LP: #2032704)
- ACPI: video: Put ACPI video and its child devices into D0 on boot
* Fix ACPI TAD on some Intel based systems (LP: #2032767)
- ACPI: TAD: Install SystemCMOS address space handler for ACPI000E
* kdump doesn't work with UEFI secure boot and kernel lockdown enabled on
ARM64 (LP: #2033007)
- [Config]: Enable CONFIG_KEXEC_IMAGE_VERIFY_SIG
* Request backport of xen timekeeping performance improvements (LP: #2033122)
- x86/xen/time: prefer tsc as clocksource when it is invariant
* Fix numerous AER related issues (LP: #2033025)
- SAUCE: PCI/AER: Disable AER service during suspend, again
- SAUCE: PCI/DPC: Disable DPC service during suspend, again
* Enable D3cold at s2idle for Intel DG2 GPU (LP: #2033452)
- drm/i915/dgfx: Enable d3cold at s2idle
* CVE-2023-4569
- netfilter: nf_tables: deactivate catchall elements in next generation
* Fix non-working MT7921e when pre-boot WiFi is enabled (LP: #2026322)
- wifi: mt76: mt7921e: fix init command fail with enabled device
* Fix unreliable ethernet cable detection on I219 NIC (LP: #2028122)
- e1000e: Use PME poll to circumvent unreliable ACPI wake
* [SRU][Ubuntu 22.04.1] Unable to interpret the frequency values in
cpuinfo_min_freq and cpuino_max_freq sysfs files. (LP: #2030924)
- cpufreq: intel_pstate: Fix scaling for hybrid-capable
* CVE-2023-40283
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
* CVE-2023-20588
- x86/bugs: Increase the x86 bugs vector size to two u32s
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
* CVE-2023-4194
- net: tun_chr_open(): set sk_uid from current_fsuid()
- net: tap_open(): set sk_uid from current_fsuid()
* CVE-2023-4155
- KVM: SEV: snapshot the GHCB before accessing it
- KVM: SEV: only access GHCB fields once
* CVE-2023-1206
- tcp: Reduce chance of collisions in inet6_hashfn().
* Lunar update: upstream stable patchset 2023-08-03 (LP: #2029808)
- RDMA/bnxt_re: Fix the page_size used during the MR creation
- phy: amlogic: phy-meson-g12a-mipi-dphy-analog: fix CNTL2_DIF_TX_CTL0 value
- RDMA/efa: Fix unsupported page sizes in device
- RDMA/hns: Fix timeout attr in query qp for HIP08
- RDMA/hns: Fix base address table allocation
- RDMA/hns: Modify the value of long message loopback slice
- dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved()
- RDMA/bnxt_re: Fix a possible memory leak
- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx
- iommu/rockchip: Fix unwind goto issue
- iommu/amd: Don't block updates to GATag if guest mode is on
- iommu/amd: Handle GALog overflows
- iommu/amd: Fix up merge conflict resolution
- nfsd: make a copy of struct iattr before calling notify_change
- dmaengine: pl330: rename _start to prevent build error
- riscv: Fix unused variable warning when BUILTIN_DTB is set
- net/mlx5: Drain health before unregistering devlink
- net/mlx5: SF, Drain health before removing device
- net/mlx5: fw_tracer, Fix event handling
- net/mlx5e: Don't attach netdev profile while handling internal error
- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory pressure
- netrom: fix info-leak in nr_write_internal()
- af_packet: Fix data-races of pkt_sk(sk)->num.
- tls: improve lockless access safety of tls_err_abort()
- amd-xgbe: fix the false linkup in xgbe_phy_status
- perf ftrace latency: Remove unnecessary "--" from --use-nsec option
- mtd: rawnand: ingenic: fix empty stub helper definitions
- RDMA/irdma: Prevent QP use after free
- RDMA/irdma: Fix Local Invalidate fencing
- af_packet: do not use READ_ONCE() in packet_bind()
- tcp: deny tcp_disconnect() when threads are waiting
- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set
- net/smc: Scan from current RMB list when no position specified
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/sched: sch_ingress: Only create under TC_H_INGRESS
- net/sched: sch_clsact: Only create under TC_H_CLSACT
- net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs
- net/sched: Prohibit regrafting ingress or clsact Qdiscs
- net: sched: fix NULL pointer dereference in mq_attach
- net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
- udp6: Fix race condition in udp6_sendmsg & connect
- nfsd: fix double fget() bug in __write_ports_addfd()
- nvme: fix the name of Zone Append for verbose logging
- net/mlx5e: Fix error handling in mlx5e_refresh_tirs
- net/mlx5: Read embedded cpu after init bit cleared
- iommu/mediatek: Flush IOTLB completely only if domain has been attached
- tcp: fix mishandling when the sack compression is deferred.
- net: dsa: mv88e6xxx: Increase wait after reset deactivation
- mtd: rawnand: marvell: ensure timing values are written
- mtd: rawnand: marvell: don't set the NAND frequency select
- rtnetlink: call validate_linkmsg in rtnl_create_link
- mptcp: avoid unneeded __mptcp_nmpc_socket() usage
- mptcp: add annotations around msk->subflow accesses
- mptcp: avoid unneeded address copy
- mptcp: simplify subflow_syn_recv_sock()
- mptcp: consolidate passive msk socket initialization
- mptcp: fix data race around msk->first access
- mptcp: add annotations around sk->sk_shutdown accesses
- drm/amdgpu: release gpu full access after "amdgpu_device_ip_late_init"
- watchdog: menz069_wdt: fix watchdog initialisation
- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs.
- ASoC: Intel: soc-acpi-cht: Add quirk for Nextbook Ares 8A tablet
- drm/amdgpu: Use the default reset when loading or reloading the driver
- mailbox: mailbox-test: Fix potential double-free in
mbox_test_message_write()
- btrfs: abort transaction when sibling keys check fails for leaves
- ARM: 9295/1: unwind:fix unwind abort for uleb128 case
- hwmon: (k10temp) Add PCI ID for family 19, model 78h
- media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
- platform/mellanox: fix potential race in mlxbf-tmfifo driver
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode
- fbdev: stifb: Fix info entry in sti_struct on error path
- nbd: Fix debugfs_create_dir error checking
- block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE
- nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G
- nvme-pci: add quirk for missing secondary temperature thresholds
- ASoC: amd: yc: Add DMI entry to support System76 Pangolin 12
- ASoC: dwc: limit the number of overrun messages
- um: harddog: fix modular build
- xfrm: Check if_id in inbound policy/secpath match
- ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI codecs
- ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V
- ASoC: ssm2602: Add workaround for playback distortions
- media: dvb_demux: fix a bug for the continuity counter
- media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer()
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer()
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
- media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address
- media: netup_unidvb: fix irq init by register it at the end of probe
- media: dvb_ca_en50221: fix a size write bug
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- ASoC: SOF: debug: conditionally bump runtime_pm counter on exceptions
- ASoC: SOF: pcm: fix pm_runtime imbalance in error handling
- ASoC: SOF: sof-client-probes: fix pm_runtime imbalance in error handling
- ASoC: SOF: pm: save io region state in case of errors in resume
- s390/pkey: zeroize key blobs
- s390/topology: honour nr_cpu_ids when adding CPUs
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
- wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value
- ARM: dts: stm32: add pin map for CAN controller on stm32f7
- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
- arm64: vdso: Pass (void *) to virt_to_page()
- wifi: mac80211: simplify chanctx allocation
- wifi: mac80211: consider reserved chanctx for mindef
- wifi: mac80211: recalc chanctx mindef before assigning
- wifi: iwlwifi: mvm: Add locking to the rate read flow
- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed
- wifi: b43: fix incorrect __packed annotation
- netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with
CONFIG_NF_NAT
- nvme-multipath: don't call blk_mark_disk_dead in nvme_mpath_remove_disk
- nvme: do not let the user delete a ctrl before a complete initialization
- ALSA: oss: avoid missing-prototype warnings
- drm/msm: Be more shouty if per-process pgtables aren't working
- atm: hide unused procfs functions
- ceph: silence smatch warning in reconnect_caps_cb()
- drm/amdgpu: skip disabling fence driver src_irqs when device is unplugged
- ublk: fix AB-BA lockdep warning
- nvme-pci: Add quirk for Teamgroup MP33 SSD
- block: Deny writable memory mapping if block is read-only
- KVM: arm64: vgic: Fix a circular locking issue
- KVM: arm64: vgic: Wrap vgic_its_create() with config_lock
- KVM: arm64: vgic: Fix locking comment
- media: mediatek: vcodec: Only apply 4K frame sizes on decoder formats
- mailbox: mailbox-test: fix a locking issue in mbox_test_message_write()
- drivers: base: cacheinfo: Fix shared_cpu_map changes in event of CPU hotplug
- media: uvcvideo: Don't expose unsupported formats to userspace
- iio: accel: st_accel: Fix invalid mount_matrix on devices without ACPI _ONT
method
- iio: adc: mxs-lradc: fix the order of two cleanup operations
- HID: google: add jewel USB id
- HID: wacom: avoid integer overflow in wacom_intuos_inout()
- iio: imu: inv_icm42600: fix timestamp reset
- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476 compatible value
- iio: light: vcnl4035: fixed chip ID check
- iio: adc: stm32-adc: skip adc-channels setup if none is present
- iio: adc: ad_sigma_delta: Fix IRQ issue by setting IRQ_DISABLE_UNLAZY flag
- iio: dac: mcp4725: Fix i2c_master_send() return value handling
- iio: addac: ad74413: fix resistance input processing
- iio: adc: ad7192: Change "shorted" channels to differential
- iio: adc: stm32-adc: skip adc-diff-channels setup if none is present
- iio: dac: build ad5758 driver when AD5758 is selected
- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
- usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM
- usb: gadget: f_fs: Add unbind event before functionfs_unbind
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- misc: fastrpc: return -EPIPE to invocations on device removal
- misc: fastrpc: reject new invocations during device removal
- scsi: stex: Fix gcc 13 warnings
- ata: libata-scsi: Use correct device no in ata_find_dev()
- drm/amdgpu: enable tmz by default for GC 11.0.1
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
- drm/amd/pm: resolve reboot exception for si oland
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
- mmc: vub300: fix invalid response handling
- mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order
- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of
UARTCTRL_SBK
- btrfs: fix csum_tree_block page iteration to avoid tripping on
-Werror=array-bounds
- phy: qcom-qmp-combo: fix init-count imbalance
- phy: qcom-qmp-pcie-msm8996: fix init-count imbalance
- block: fix revalidate performance regression
- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall
- iommu/amd: Fix domain flush size when syncing iotlb
- tpm, tpm_tis: correct tpm_tis_flags enumeration values
- riscv: perf: Fix callchain parse error with kernel tracepoint events
- io_uring: undeprecate epoll_ctl support
- selinux: don't use make's grouped targets feature yet
- mtdchar: mark bits of ioctl handler noinline
- tracing/timerlat: Always wakeup the timerlat thread
- tracing/histograms: Allow variables to have some modifiers
- tracing/probe: trace_probe_primary_from_call(): checked list_first_entry
- selftests: mptcp: connect: skip if MPTCP is not supported
- selftests: mptcp: pm nl: skip if MPTCP is not supported
- selftests: mptcp: join: skip if MPTCP is not supported
- selftests: mptcp: sockopt: skip if MPTCP is not supported
- selftests: mptcp: userspace pm: skip if MPTCP is not supported
- mptcp: fix connect timeout handling
- mptcp: fix active subflow finalization
- ext4: add EA_INODE checking to ext4_iget()
- ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find()
- ext4: disallow ea_inodes with extended attributes
- ext4: add lockdep annotations for i_data_sem for ea_inode's
- fbcon: Fix null-ptr-deref in soft_cursor
- serial: 8250_tegra: Fix an error handling path in tegra_uart_probe()
- serial: cpm_uart: Fix a COMPILE_TEST dependency
- powerpc/xmon: Use KSYM_NAME_LEN in array size
- test_firmware: fix a memory leak with reqs buffer
- test_firmware: fix the memory leak of the allocated firmware buffer
- KVM: arm64: Populate fault info for watchpoint
- KVM: x86: Account fastpath-only VM-Exits in vCPU stats
- ksmbd: fix credit count leakage
- ksmbd: fix UAF issue from opinfo->conn
- ksmbd: fix incorrect AllocationSize set in smb2_get_info
- ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate
- ksmbd: fix multiple out-of-bounds read during context decoding
- KEYS: asymmetric: Copy sig and digest in public_key_verify_signature()
- fs/ntfs3: Validate MFT flags before replaying logs
- regmap: Account for register length when chunking
- tpm, tpm_tis: Request threaded interrupt handler
- iommu/amd/pgtbl_v2: Fix domain max address
- drm/amd/display: Have Payload Properly Created After Resume
- tls: rx: strp: don't use GFP_KERNEL in softirq context
- selftests: mptcp: diag: skip if MPTCP is not supported
- selftests: mptcp: simult flows: skip if MPTCP is not supported
- selftests: mptcp: join: avoid using 'cmp --bytes'
- ext4: enable the lazy init thread when remounting read/write
- iommu: Make IPMMU_VMSA dependencies more strict
- [Config] updateconfigs for IPMMU_VMSA
- iommu/amd: Add missing domain type checks
- efi: Bump stub image version for macOS HVF compatibility
- rxrpc: Truncate UTS_RELEASE for rxrpc version
- net: renesas: rswitch: Fix return value in error path of xmit
- KVM: arm64: Prevent unconditional donation of unmapped regions from the host
- KVM: arm64: Reload PTE after invoking walker callback on preorder traversal
- iio: ad4130: Make sure clock provider gets removed
- iio: adc: mt6370: Fix ibus and ibat scaling value of some specific vendor ID
chips
- iio: accel: kx022a fix irq getting
- misc: fastrpc: Reassign memory ownership only for remote heap
- module/decompress: Fix error checking on zstd decompression
- dmaengine: at_hdmac: Repair bitfield macros for peripheral ID handling
- dmaengine: at_hdmac: Extend the Flow Controller bitfield to three bits
- test_firmware: prevent race conditions by a correct implementation of
locking
- KVM: arm64: Drop last page ref in kvm_pgtable_stage2_free_removed()
- KVM: x86/mmu: Grab memslot for correct address space in NX recovery worker
- Upstream stable to v6.1.33, v6.3.7
- scsi: megaraid_sas: Add flexible array member for SGLs
- net: sfp: fix state loss when updating state_hw_mask
- spi: mt65xx: make sure operations completed before unloading
- platform/surface: aggregator: Allow completion work-items to be executed in
parallel
- platform/surface: aggregator_tabletsw: Add support for book mode in KIP
subsystem
- spi: qup: Request DMA before enabling clocks
- afs: Fix setting of mtime when creating a file/dir/symlink
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
- bpf, sockmap: Avoid potential NULL dereference in
sk_psock_verdict_data_ready()
- neighbour: fix unaligned access to pneigh_entry
- net: dsa: lan9303: allow vid != 0 in port_fdb_{add|del} methods
- net/ipv4: ping_group_range: allow GID from 2147483648 to 4294967294
- bpf: Fix UAF in task local storage
- bpf: Fix elem_size not being set for inner maps
- net/ipv6: fix bool/int mismatch for skip_notify_on_dev_down
- net/smc: Avoid to access invalid RMBs' MRs in SMCRv1 ADD LINK CONT
- net: enetc: correct the statistics of rx bytes
- net: enetc: correct rx_bytes statistics of XDP
- net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values
- Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER
- Bluetooth: Fix l2cap_disconnect_req deadlock
- Bluetooth: ISO: don't try to remove CIG if there are bound CIS left
- Bluetooth: L2CAP: Add missing checks for invalid DCID
- wifi: mac80211: use correct iftype HE cap
- wifi: cfg80211: reject bad AP MLD address
- wifi: mac80211: mlme: fix non-inheritence element
- wifi: mac80211: don't translate beacon/presp addrs
- qed/qede: Fix scheduling while atomic
- wifi: cfg80211: fix locking in sched scan stop work
- selftests/bpf: Verify optval=NULL case
- selftests/bpf: Fix sockopt_sk selftest
- netfilter: nft_bitwise: fix register tracking
- netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper
- netfilter: ipset: Add schedule point in call_ad().
- netfilter: nf_tables: out-of-bound check in chain blob
- ipv6: rpl: Fix Route of Death.
- tcp: gso: really support BIG TCP
- rfs: annotate lockless accesses to sk->sk_rxhash
- rfs: annotate lockless accesses to RFS sock flow table
- net: sched: add rcu annotations around qdisc->qdisc_sleeping
- drm/i915/selftests: Add some missing error propagation
- net: sched: move rtm_tca_policy declaration to include file
- net: sched: act_police: fix sparse errors in tcf_police_dump()
- net: sched: fix possible refcount leak in tc_chain_tmplt_add()
- bpf: Add extra path pointer check to d_path helper
- drm/amdgpu: fix Null pointer dereference error in amdgpu_device_recover_vram
- lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release()
- net: bcmgenet: Fix EEE implementation
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Skip firmware fatal error recovery if chip is not accessible
- bnxt_en: Prevent kernel panic when receiving unexpected PHC_UPDATE event
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- batman-adv: Broken sync while rescheduling delayed work
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
- Input: psmouse - fix OOB access in Elantech protocol
- Input: fix open count when closing inhibited device
- ALSA: hda: Fix kctl->id initialization
- ALSA: ymfpci: Fix kctl->id initialization
- ALSA: gus: Fix kctl->id initialization
- ALSA: cmipci: Fix kctl->id initialization
- ALSA: hda/realtek: Add quirk for Clevo NS50AU
- ALSA: ice1712,ice1724: fix the kcontrol->id initialization
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using CS35L41
- drm/i915/gt: Use the correct error value when kernel_context() fails
- drm/amdgpu: fix xclk freq on CHIP_STONEY
- drm/amdgpu: change reserved vram info print
- drm/amd/pm: Fix power context allocation in SMU13
- drm/amd/display: Reduce sdp bw after urgent to 90%
- wifi: iwlwifi: mvm: Fix -Warray-bounds bug in iwl_mvm_wait_d3_notif()
- can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in
J1939 Socket
- can: j1939: change j1939_netdev_lock type to mutex
- can: j1939: avoid possible use-after-free when j1939_can_rx_register fails
- mptcp: only send RM_ADDR in nl_cmd_remove
- mptcp: add address into userspace pm list
- mptcp: update userspace pm infos
- selftests: mptcp: update userspace pm addr tests
- selftests: mptcp: update userspace pm subflow tests
- ceph: fix use-after-free bug for inodes when flushing capsnaps
- s390/dasd: Use correct lock while counting channel queue length
- Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk
- Bluetooth: fix debugfs registration
- Bluetooth: hci_qca: fix debugfs registration
- tee: amdtee: Add return_origin to 'struct tee_cmd_load_ta'
- rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting
- rbd: get snapshot context after exclusive lock is ensured to be held
- virtio_net: use control_buf for coalesce params
- soc: qcom: icc-bwmon: fix incorrect error code passed to dev_err_probe()
- pinctrl: meson-axg: add missing GPIOA_18 gpio group
- usb: usbfs: Enforce page requirements for mmap
- usb: usbfs: Use consistent mmap functions
- mm: page_table_check: Make it dependent on EXCLUSIVE_SYSTEM_RAM
- mm: page_table_check: Ensure user pages are not slab pages
- arm64: dts: qcom: sc8280xp: Flush RSC sleep & wake votes
- ARM: at91: pm: fix imbalanced reference counter for ethernet devices
- ARM: dts: at91: sama7g5ek: fix debounce delay property for shdwc
- ASoC: codecs: wsa883x: do not set can_multi_write flag
- ASoC: codecs: wsa881x: do not set can_multi_write flag
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified sc7180-lite
boards
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP signals
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
- ASoC: mediatek: mt8195-afe-pcm: Convert to platform remove callback
returning void
- ASoC: mediatek: mt8195: fix use-after-free in driver remove path
- ASoC: simple-card-utils: fix PCM constraint error check
- blk-mq: fix blk_mq_hw_ctx active request accounting
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
- firmware: arm_ffa: Set handle field to zero in memory descriptor
- gpio: sim: fix memory corruption when adding named lines and unnamed hogs
- i2c: sprd: Delete i2c adapter in .remove's error path
- riscv: mm: Ensure prot of VM_WRITE and VM_EXEC must be readable
- eeprom: at24: also select REGMAP
- soundwire: stream: Add missing clear of alloc_slave_rt
- riscv: fix kprobe __user string arg print fault issue
- [Config] updateconfigs for ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE
- vduse: avoid empty string for dev name
- vhost: support PACKED when setting-getting vring_base
- vhost_vdpa: support PACKED when setting-getting vring_base
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: fix out-of-bound read in parse_lease_state()
- ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop
- ext4: only check dquot_initialize_needed() when debugging
- wifi: rtw89: correct PS calculation for SUPPORTS_DYNAMIC_PS
- wifi: rtw88: correct PS calculation for SUPPORTS_DYNAMIC_PS
- Bluetooth: Split bt_iso_qos into dedicated structures
- Bluetooth: ISO: consider right CIS when removing CIG at cleanup
- Bluetooth: ISO: Fix CIG auto-allocation to select configurable CIG
- netfilter: nf_tables: Add null check for nla_nest_start_noflag() in
nft_dump_basechain_hook()
- drm/lima: fix sched context destroy
- net: openvswitch: fix upcall counter access before allocation
- bnxt_en: Fix bnxt_hwrm_update_rss_hash_cfg()
- Input: cyttsp5 - fix array length
- soc: qcom: rpmh-rsc: drop redundant unsigned >=0 comparision
- arm64: dts: qcom: sm6375-pdx225: Fix remoteproc firmware paths
- vdpa/mlx5: Fix hang when cvq commands are triggered during device unregister
- ksmbd: fix posix_acls and acls dereferencing possible ERR_PTR()
- Upstream stable to v6.1.34, v6.3.8
* CVE-2023-4273
- exfat: check if filename entries exceeds max filename length
* CVE-2023-4128
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-
free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-
free
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-
after-free
* CVE-2023-3212
- gfs2: Don't deref jdesc in evict
-- Stefan Bader <stefan.bader@canonical.com> Thu, 07 Sep 2023 14:17:29 +0200
linux-hwe-6.2 (6.2.0-32.32~22.04.1) jammy; urgency=medium
* jammy/linux-hwe-6.2: 6.2.0-32.32~22.04.1 -proposed tracker (LP: #2030380)
[ Ubuntu: 6.2.0-32.32 ]
* lunar/linux: 6.2.0-32.32 -proposed tracker (LP: #2031134)
* libgnutls report "trap invalid opcode" when trying to install packages over
https (LP: #2031093)
- [Config]: disable CONFIG_GDS_FORCE_MITIGATION
[ Ubuntu: 6.2.0-30.30 ]
* lunar/linux: 6.2.0-30.30 -proposed tracker (LP: #2030381)
* CVE-2022-40982
- init: Provide arch_cpu_finalize_init()
- x86/cpu: Switch to arch_cpu_finalize_init()
- ARM: cpu: Switch to arch_cpu_finalize_init()
- ia64/cpu: Switch to arch_cpu_finalize_init()
- m68k/cpu: Switch to arch_cpu_finalize_init()
- mips/cpu: Switch to arch_cpu_finalize_init()
- sh/cpu: Switch to arch_cpu_finalize_init()
- sparc/cpu: Switch to arch_cpu_finalize_init()
- um/cpu: Switch to arch_cpu_finalize_init()
- init: Remove check_bugs() leftovers
- init: Invoke arch_cpu_finalize_init() earlier
- init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init()
- x86/init: Initialize signal frame size late
- x86/fpu: Remove cpuinfo argument from init functions
- x86/fpu: Mark init functions __init
- x86/fpu: Move FPU initialization into arch_cpu_finalize_init()
- x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build
- x86/xen: Fix secondary processors' FPU initialization
- x86/speculation: Add Gather Data Sampling mitigation
- x86/speculation: Add force option to GDS mitigation
- x86/speculation: Add Kconfig option for GDS
- KVM: Add GDS_NO support to KVM
- Documentation/x86: Fix backwards on/off logic about YMM support
- [Config]: Enable CONFIG_ARCH_HAS_CPU_FINALIZE_INIT and
CONFIG_GDS_FORCE_MITIGATION
* CVE-2023-4015
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound
set/chain
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
* CVE-2023-3995
- netfilter: nf_tables: disallow rule addition to bound chain via
NFTA_RULE_CHAIN_ID
* CVE-2023-3777
- netfilter: nf_tables: skip bound chain on rule flush
* CVE-2023-3609
- net/sched: cls_u32: Fix reference counter leak leading to overflow
* NULL pointer dereference on CS35L41 HDA AMP (LP: #2029199)
- ASoC: cs35l41: Refactor error release code
- ALSA: cs35l41: Add shared boost feature
- ASoC: dt-bindings: cirrus, cs35l41: Document CS35l41 shared boost
- ALSA: hda: cs35l41: Ensure firmware/tuning pairs are always loaded
- ALSA: hda: cs35l41: Enable Amp High Pass Filter
- ALSA: cs35l41: Use mbox command to enable speaker output for external boost
- ALSA: cs35l41: Poll for Power Up/Down rather than waiting a fixed delay
- ALSA: hda: cs35l41: Check mailbox status of pause command after firmware
load
- ALSA: hda: cs35l41: Ensure we correctly re-sync regmap before system
suspending.
- ALSA: hda: cs35l41: Ensure we pass up any errors during system suspend.
- ALSA: hda: cs35l41: Move Play and Pause into separate functions
- ALSA: hda: hda_component: Add pre and post playback hooks to hda_component
- ALSA: hda: cs35l41: Use pre and post playback hooks
- ALSA: hda: cs35l41: Rework System Suspend to ensure correct call separation
- ALSA: hda: cs35l41: Add device_link between HDA and cs35l41_hda
- ALSA: hda: cs35l41: Ensure amp is only unmuted during playback
* Reboot command powers off the system (LP: #2029332)
- x86/smp: Make stop_other_cpus() more robust
- x86/smp: Dont access non-existing CPUID leaf
* losetup with mknod fails on jammy with kernel 5.15.0-69-generic
(LP: #2015400)
- loop: deprecate autoloading callback loop_probe()
- loop: do not enforce max_loop hard limit by (new) default
* Fix UBSAN in Intel EDAC driver (LP: #2028746)
- EDAC/skx_common: Enable EDAC support for the "near" memory
- EDAC/skx_common: Delete duplicated and unreachable code
- EDAC/i10nm: Add Intel Emerald Rapids server support
- EDAC/i10nm: Make more configurations CPU model specific
- EDAC/i10nm: Add Intel Granite Rapids server support
- EDAC/i10nm: Skip the absent memory controllers
* Make TTY switching possible for NVIDIA when it's boot VGA (LP: #2028749)
- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers
- video/aperture: use generic code to figure out the vga default device
- drm/aperture: Remove primary argument
- video/aperture: Only kick vgacon when the pdev is decoding vga
- video/aperture: Move vga handling to pci function
- video/aperture: Drop primary argument
- video/aperture: Only remove sysfb on the default vga pci device
- fbdev: Simplify fb_is_primary_device for x86
- video/aperture: Provide a VGA helper for gma500 and internal use
* Fix AMD gpu hang when screen off/on (LP: #2028740)
- drm/amd/display: Keep PHY active for dp config
* Various backlight issues with the 6.0/6.1 kernel (LP: #2023638)
- ACPI: video: Stop trying to use vendor backlight control on laptops from
after ~2012
* FM350(mtk_t7xx) failed to suspend, or early wake while suspending
(LP: #2020743)
- net: wwan: t7xx: Ensure init is completed before system sleep
* Include the MAC address pass through function on RTL8153DD-CG (LP: #2020295)
- r8152: add USB device driver for config selection
* CVE-2023-20593
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu/amd: Add a Zenbleed fix
* CVE-2023-4004
- netfilter: nft_set_pipapo: fix improper element removal
* CVE-2023-3611
- net/sched: sch_qfq: refactor parsing of netlink parameters
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
* CVE-2023-3610
- netfilter: nf_tables: fix chain binding transaction logic
* CVE-2023-2898
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
* Fix speaker volume too low on HP G10 laptops (LP: #2023197)
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP platform
* stacked overlay file system mounts that have chroot() called against them
appear to be getting locked (by the kernel most likely?) (LP: #2016398)
- SAUCE: overlayfs: fix reference count mismatch
* arm64+ast2600: No Output from BMC's VGA port (LP: #2026776)
- drm/ast: Fix ARM compatibility
* Fix eDP only displays 3/4 area after switching to mirror mode with external
HDMI 4K monitor (LP: #2024273)
- drm/i915: Allow arbitrary refresh rates with VRR eDP panels
* Fix AMDGPU: the screen freeze with W7500 (LP: #2027957)
- drm/amd/pm: share the code around SMU13 pcie parameters update
- drm/amd/pm: conditionally disable pcie lane/speed switching for SMU13
- drm/amd: Move helper for dynamic speed switch check out of smu13
- drm/amd: Align SMU11 SMU_MSG_OverridePcieParameters implementation with
SMU13
* UBSAN: shift-out-of-bounds in amd_sfh (LP: #2027773)
- HID: amd_sfh: Rename the float32 variable
- HID: amd_sfh: Fix for shift-out-of-bounds
* cifs: fix mid leak during reconnection after timeout threshold
(LP: #2029138)
- cifs: fix mid leak during reconnection after timeout threshold
* Lunar update: upstream stable patchset 2023-07-28 (LP: #2028979)
- usb: dwc3: fix gadget mode suspend interrupt handler issue
- tpm, tpm_tis: Avoid cache incoherency in test for interrupts
- tpm, tpm_tis: Only handle supported interrupts
- tpm_tis: Use tpm_chip_{start,stop} decoration inside tpm_tis_resume
- tpm, tpm_tis: startup chip before testing for interrupts
- tpm: Re-enable TPM chip boostrapping non-tpm_tis TPM drivers
- tpm: Prevent hwrng from activating during resume
- watchdog: sp5100_tco: Immediately trigger upon starting.
- drm/amd/display: hpd rx irq not working with eDP interface
- ocfs2: Switch to security_inode_init_security()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does
not complain
- ALSA: hda/ca0132: add quirk for EVGA X299 DARK
- ALSA: hda: Fix unhandled register update during auto-suspend period
- ALSA: hda/realtek: Enable headset onLenovo M70/M90
- SUNRPC: Don't change task->tk_status after the call to rpc_exit_task
- mmc: sdhci-esdhc-imx: make "no-mmc-hs400" works
- mmc: block: ensure error propagation for non-blk
- power: supply: axp288_fuel_gauge: Fix external_power_changed race
- power: supply: bq25890: Fix external_power_changed race
- ASoC: rt5682: Disable jack detection interrupt during suspend
- net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize
- m68k: Move signal frame following exception on 68020/030
- xtensa: fix signal delivery to FDPIC process
- xtensa: add __bswap{si,di}2 helpers
- parisc: Use num_present_cpus() in alternative patching code
- parisc: Handle kgdb breakpoints only in kernel context
- parisc: Fix flush_dcache_page() for usage from irq context
- parisc: Allow to reboot machine after system halt
- parisc: Enable LOCKDEP support
- parisc: Handle kprobes breakpoints only in kernel context
- gpio: mockup: Fix mode of debugfs files
- btrfs: use nofs when cleaning up aborted transactions
- dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type
- drm/mgag200: Fix gamma lut not initialized.
- drm/radeon: reintroduce radeon_dp_work_func content
- drm/amd/pm: add missing NotifyPowerSource message mapping for SMU13.0.7
- drm/amd/pm: Fix output of pp_od_clk_voltage
- Revert "binder_alloc: add missing mmap_lock calls when using the VMA"
- Revert "android: binder: stop saving a pointer to the VMA"
- binder: add lockless binder_alloc_(set|get)_vma()
- binder: fix UAF caused by faulty buffer cleanup
- binder: fix UAF of alloc->vma in race with munmap()
- selftests/memfd: Fix unknown type name build failure
- drm/amd/amdgpu: limit one queue per gang
- perf/x86/uncore: Correct the number of CHAs on SPR
- x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- irqchip/mips-gic: Use raw spinlock for gic_lock
- debugobjects: Don't wake up kswapd from fill_pool()
- fbdev: udlfb: Fix endpoint check
- net: fix stack overflow when LRO is disabled for virtual interfaces
- udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().
- USB: core: Add routines for endpoint checks in old drivers
- USB: sisusbvga: Add endpoint checks
- media: radio-shark: Add endpoint checks
- ASoC: lpass: Fix for KASAN use_after_free out of bounds
- net: fix skb leak in __skb_tstamp_tx()
- drm: fix drmm_mutex_init()
- selftests: fib_tests: mute cleanup error message
- octeontx2-pf: Fix TSOv6 offload
- bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields
- bpf: fix a memory leak in the LRU and LRU_PERCPU hash maps
- lan966x: Fix unloading/loading of the driver
- ipv6: Fix out-of-bounds access in ipv6_find_tlv()
- cifs: mapchars mount option ignored
- power: supply: leds: Fix blink to LED on transition
- power: supply: mt6360: add a check of devm_work_autocancel in
mt6360_charger_probe
- power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition
- power: supply: bq27xxx: Fix I2C IRQ race on remove
- power: supply: bq27xxx: Fix poll_interval handling and races on remove
- power: supply: bq27xxx: Add cache parameter to
bq27xxx_battery_current_and_status()
- power: supply: bq27xxx: Move bq27xxx_battery_update() down
- power: supply: bq27xxx: Ensure power_supply_changed() is called on current
sign changes
- power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to
stabilize
- power: supply: bq25890: Call power_supply_changed() after updating input
current or voltage
- power: supply: bq24190: Call power_supply_changed() after updating input
current
- power: supply: sbs-charger: Fix INHIBITED bit for Status reg
- optee: fix uninited async notif value
- firmware: arm_ffa: Check if ffa_driver remove is present before executing
- firmware: arm_ffa: Fix FFA device names for logical partitions
- fs: fix undefined behavior in bit shift for SB_NOUSER
- regulator: pca9450: Fix BUCK2 enable_mask
- platform/x86: ISST: Remove 8 socket limit
- coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet()
- ARM: dts: imx6qdl-mba6: Add missing pvcie-supply regulator
- xen/pvcalls-back: fix double frees with pvcalls_new_active_socket()
- x86/show_trace_log_lvl: Ensure stack pointer is aligned, again
- ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg
- ASoC: Intel: avs: Fix declaration of enum avs_channel_config
- ASoC: Intel: avs: Access path components under lock
- cxl: Wait Memory_Info_Valid before access memory related info
- sctp: fix an issue that plpmtu can never go to complete state
- forcedeth: Fix an error handling path in nv_probe()
- platform/mellanox: mlxbf-pmc: fix sscanf() error checking
- net/mlx5e: Fix SQ wake logic in ptp napi_poll context
- net/mlx5e: Fix deadlock in tc route query code
- net/mlx5e: Use correct encap attribute during invalidation
- net/mlx5e: do as little as possible in napi poll when budget is 0
- net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs
- net/mlx5: Handle pairing of E-switch via uplink un/load APIs
- net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE
- net/mlx5: Fix error message when failing to allocate device memory
- net/mlx5: Collect command failures data only for known commands
- net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device
- net/mlx5: Devcom, serialize devcom registration
- arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert delay
- firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors
- regulator: mt6359: add read check for PMIC MT6359
- net/smc: Reset connection when trying to use SMCRv2 fails.
- 3c589_cs: Fix an error handling path in tc589_probe()
- net: phy: mscc: add VSC8502 to MODULE_DEVICE_TABLE
- wifi: rtw89: 8852b: adjust quota to avoid SER L1 caused by access null page
- zsmalloc: move LRU update from zs_map_object() to zs_malloc()
- mm/vmemmap/devdax: fix kernel crash when probing devdax devices
- cifs: fix smb1 mount regression
- cxl: Move cxl_await_media_ready() to before capacity info retrieval
- net: ethernet: mtk_eth_soc: fix QoS on DSA MAC on non MTK_NETSYS_V2 SoCs
- Upstream stable to v6.1.31, v6.3.5
- inet: Add IP_LOCAL_PORT_RANGE socket option
- ipv{4,6}/raw: fix output xfrm lookup wrt protocol
- firmware: arm_ffa: Fix usage of partition info get count flag
- selftests/bpf: Fix pkg-config call building sign-file
- platform/x86/amd/pmf: Fix CnQF and auto-mode after resume
- tls: rx: device: fix checking decryption status
- tls: rx: strp: set the skb->len of detached / CoW'ed skbs
- tls: rx: strp: fix determining record length in copy mode
- tls: rx: strp: force mixed decrypted records into copy mode
- tls: rx: strp: factor out copying skb data
- tls: rx: strp: preserve decryption status of skbs when needed
- net/mlx5: E-switch, Devcom, sync devcom events and devcom comp register
- gpio-f7188x: fix chip name and pin count on Nuvoton chip
- bpf, sockmap: Pass skb ownership through read_skb
- bpf, sockmap: Convert schedule_work into delayed_work
- bpf, sockmap: Reschedule is now done through backlog
- bpf, sockmap: Improved check for empty queue
- bpf, sockmap: Handle fin correctly
- bpf, sockmap: TCP data stall on recv before accept
- bpf, sockmap: Wake up polling after data copy
- bpf, sockmap: Incorrectly handling copied_seq
- blk-mq: fix race condition in active queue accounting
- vfio/type1: check pfn valid before converting to struct page
- net: page_pool: use in_softirq() instead
- page_pool: fix inconsistency for page_pool_ring_[un]lock()
- net: phy: mscc: enable VSC8501/2 RGMII RX clock
- wifi: iwlwifi: mvm: support wowlan info notification version 2
- drm/amd: Don't allow s0ix on APUs older than Raven
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl()
- Revert "thermal/drivers/mellanox: Use generic thermal_zone_get_trip()
function"
- block: fix bio-cache for passthru IO
- cpufreq: amd-pstate: Update policy->cur in amd_pstate_adjust_perf()
- cpufreq: amd-pstate: Add ->fast_switch() callback
- netfilter: ctnetlink: Support offloaded conntrack entry deletion
- tools headers UAPI: Sync the linux/in.h with the kernel sources
- gpiolib: fix allocation of mixed dynamic/static GPIOs
- net: fec: add dma_wmb to ensure correct descriptor values
- cxl/port: Fix NULL pointer access in devm_cxl_add_port()
- blk-wbt: fix that wbt can't be disabled by default
- Upstream stable to v6.1.32, v6.3.6
* sysfs msi_irqs directory empty with kernel-5.19 when being a xen guest
(LP: #2022354) // Lunar update: upstream stable patchset 2023-07-28
(LP: #2028979)
- x86/pci/xen: populate MSI sysfs entries
* Lunar update: upstream stable patchset 2023-07-26 (LP: #2028808)
- drm/fbdev-generic: prohibit potential out-of-bounds access
- drm/mipi-dsi: Set the fwnode for mipi_dsi_device
- ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings
- net: skb_partial_csum_set() fix against transport header magic value
- net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe()
- scsi: ufs: core: Fix I/O hang that occurs when BKOPS fails in W-LUN suspend
- tick/broadcast: Make broadcast device replacement work correctly
- linux/dim: Do nothing if no time delta between samples
- net: stmmac: Initialize MAC_ONEUS_TIC_COUNTER register
- net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs().
- net: phy: bcm7xx: Correct read from expansion register
- netfilter: nf_tables: always release netdev hooks from notifier
- netfilter: conntrack: fix possible bug_on with enable_hooks=1
- bonding: fix send_peer_notif overflow
- netlink: annotate accesses to nlk->cb_running
- net: annotate sk->sk_err write from do_recvmmsg()
- net: deal with most data-races in sk_wait_event()
- net: add vlan_get_protocol_and_depth() helper
- tcp: add annotations around sk->sk_shutdown accesses
- gve: Remove the code of clearing PBA bit
- net: mscc: ocelot: fix stat counter register values
- net: datagram: fix data-races in datagram_poll()
- af_unix: Fix a data race of sk->sk_receive_queue->qlen.
- af_unix: Fix data races around sk->sk_shutdown.
- drm/i915/guc: Don't capture Gen8 regs on Xe devices
- drm/i915: Fix NULL ptr deref by checking new_crtc_state
- drm/i915/dp: prevent potential div-by-zero
- drm/i915: Expand force_probe to block probe of devices as well.
- drm/i915: taint kernel when force probing unsupported devices
- fbdev: arcfb: Fix error handling in arcfb_probe()
- ext4: reflect error codes from ext4_multi_mount_protect() to its callers
- ext4: allow to find by goal if EXT4_MB_HINT_GOAL_ONLY is set
- ext4: allow ext4_get_group_info() to fail
- refscale: Move shutdown from wait_event() to wait_event_idle()
- selftests: cgroup: Add 'malloc' failures checks in test_memcontrol
- rcu: Protect rcu_print_task_exp_stall() ->exp_tasks access
- open: return EINVAL for O_DIRECTORY | O_CREAT
- fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
- drm/displayid: add displayid_get_header() and check bounds better
- drm/amd/display: populate subvp cmd info only for the top pipe
- drm/amd/display: Correct DML calculation to align HW formula
- platform/x86: x86-android-tablets: Add Acer Iconia One 7 B1-750 data
- drm/amd/display: Enable HostVM based on rIOMMU active
- drm/amd/display: Use DC_LOG_DC in the trasform pixel function
- regmap: cache: Return error in cache sync operations for REGCACHE_NONE
- remoteproc: imx_dsp_rproc: Add custom memory copy implementation for i.MX
DSP Cores
- arm64: dts: qcom: msm8996: Add missing DWC3 quirks
- media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and
buffer_finish()
- media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish
- media: pvrusb2: VIDEO_PVRUSB2 depends on DVB_CORE to use dvb_* symbols
- ACPI: processor: Check for null return of devm_kzalloc() in fch_misc_setup()
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
- arm64: dts: imx8mq-librem5: Remove dis_u3_susphy_quirk from usb_dwc3_0
- firmware: arm_sdei: Fix sleep from invalid context BUG
- ACPI: EC: Fix oops when removing custom query handlers
- drm/amd/display: fixed dcn30+ underflow issue
- remoteproc: stm32_rproc: Add mutex protection for workqueue
- drm/tegra: Avoid potential 32-bit integer overflow
- drm/msm/dp: Clean up handling of DP AUX interrupts
- ACPICA: Avoid undefined behavior: applying zero offset to null pointer
- ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in
acpi_db_display_objects
- arm64: dts: qcom: sdm845-polaris: Drop inexistent properties
- irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4
- ACPI: video: Remove desktops without backlight DMI quirks
- drm/amd/display: Correct DML calculation to follow HW SPEC
- drm/amd: Fix an out of bounds error in BIOS parser
- drm/amdgpu: Fix sdma v4 sw fini error
- media: Prefer designated initializers over memset for subdev pad ops
- media: mediatek: vcodec: Fix potential array out-of-bounds in decoder
queue_setup
- wifi: ath: Silence memcpy run-time false positive warning
- bpf: Annotate data races in bpf_local_storage
- wifi: brcmfmac: pcie: Provide a buffer of random bytes to the device
- wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex
- ext2: Check block size validity during mount
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery
- bnxt: avoid overflow in bnxt_get_nvram_directory()
- net: pasemi: Fix return type of pasemi_mac_start_tx()
- net: Catch invalid index in XPS mapping
- netdev: Enforce index cap in netdev_get_tx_queue
- scsi: target: iscsit: Free cmds before session free
- lib: cpu_rmap: Avoid use after free on rmap->obj array entries
- scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race
condition
- gfs2: Fix inode height consistency check
- scsi: ufs: ufs-pci: Add support for Intel Lunar Lake
- ext4: set goal start correctly in ext4_mb_normalize_request
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()
- crypto: jitter - permanent and intermittent health errors
- f2fs: Fix system crash due to lack of free space in LFS
- f2fs: fix to drop all dirty pages during umount() if cp_error is set
- f2fs: fix to check readonly condition correctly
- samples/bpf: Fix fout leak in hbm's run_bpf_prog
- bpf: Add preempt_count_{sub,add} into btf id deny list
- md: fix soft lockup in status_resync
- wifi: iwlwifi: pcie: fix possible NULL pointer dereference
- wifi: iwlwifi: add a new PCI device ID for BZ device
- wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf
- wifi: iwlwifi: mvm: fix ptk_pn memory leak
- block, bfq: Fix division by zero error on zero wsum
- wifi: ath11k: Ignore frags from uninitialized peer in dp.
- wifi: iwlwifi: fix iwl_mvm_max_amsdu_size() for MLO
- null_blk: Always check queue mode setting from configfs
- wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace
- wifi: ath11k: Fix SKB corruption in REO destination ring
- nbd: fix incomplete validation of ioctl arg
- ipvs: Update width of source for ip_vs_sync_conn_options
- Bluetooth: btusb: Add new PID/VID 04ca:3801 for MT7663
- Bluetooth: Add new quirk for broken local ext features page 2
- Bluetooth: btrtl: add support for the RTL8723CS
- Bluetooth: Improve support for Actions Semi ATS2851 based devices
- Bluetooth: btrtl: check for NULL in btrtl_set_quirks()
- Bluetooth: btintel: Add LE States quirk support
- Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set
- Bluetooth: Add new quirk for broken set random RPA timeout for ATS2851
- Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
- Bluetooth: btrtl: Add the support for RTL8851B
- HID: apple: Set the tilde quirk flag on the Geyser 4 and later
- staging: axis-fifo: initialize timeouts in init only
- ASoC: amd: yc: Add DMI entries to support HP OMEN 16-n0xxx (8A42)
- HID: logitech-hidpp: Don't use the USB serial for USB devices
- HID: logitech-hidpp: Reconcile USB and Unifying serials
- spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3
- usb: typec: ucsi: acpi: add quirk for ASUS Zenbook UM325
- ALSA: hda: LNL: add HD Audio PCI ID
- ASoC: amd: Add Dell G15 5525 to quirks list
- ASoC: amd: yc: Add ThinkBook 14 G5+ ARP to quirks list for acp6x
- HID: apple: Set the tilde quirk flag on the Geyser 3
- HID: Ignore battery for ELAN touchscreen on ROG Flow X13 GV301RA
- HID: wacom: generic: Set battery quirk only when we see battery data
- usb: typec: tcpm: fix multiple times discover svids error
- serial: 8250: Reinit port->pm on port specific driver unbind
- mcb-pci: Reallocate memory region to avoid memory overlapping
- sched: Fix KCSAN noinstr violation
- lkdtm/stackleak: Fix noinstr violation
- recordmcount: Fix memory leaks in the uwrite function
- soundwire: dmi-quirks: add remapping for Intel 'Rooks County' NUC M15
- phy: st: miphy28lp: use _poll_timeout functions for waits
- soundwire: qcom: gracefully handle too many ports in DT
- soundwire: bus: Fix unbalanced pm_runtime_put() causing usage count
underflow
- mfd: intel_soc_pmic_chtwc: Add Lenovo Yoga Book X90F to intel_cht_wc_models
- mfd: dln2: Fix memory leak in dln2_probe()
- mfd: intel-lpss: Add Intel Meteor Lake PCH-S LPSS PCI IDs
- parisc: Replace regular spinlock with spin_trylock on panic path
- drm/amdgpu: drop gfx_v11_0_cp_ecc_error_irq_funcs
- xfrm: don't check the default policy if the policy allows the packet
- Revert "Fix XFRM-I support for nested ESP tunnels"
- drm/msm/dp: unregister audio driver during unbind
- drm/msm/dpu: Assign missing writeback log_mask
- drm/msm/dpu: Move non-MDP_TOP INTF_INTR offsets out of hwio header
- drm/msm/dpu: Remove duplicate register defines from INTF
- dt-bindings: display/msm: dsi-controller-main: Document qcom, master-dsi and
qcom, sync-dual-dsi
- ASoC: fsl_micfil: Fix error handler with pm_runtime_enable
- cpupower: Make TSC read per CPU for Mperf monitor
- xfrm: Reject optional tunnel/BEET mode templates in outbound policies
- af_key: Reject optional tunnel/BEET mode templates in outbound policies
- drm/msm: Fix submit error-path leaks
- selftests: seg6: disable DAD on IPv6 router cfg for srv6_end_dt4_l3vpn_test
- selftets: seg6: disable rp_filter by default in srv6_end_dt4_l3vpn_test
- net: fec: Better handle pm_runtime_get() failing in .remove()
- net: phy: dp83867: add w/a for packet errors seen with short cables
- ALSA: firewire-digi00x: prevent potential use after free
- wifi: mt76: connac: fix stats->tx_bytes calculation
- ALSA: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15
- sfc: disable RXFCS and RXALL features by default
- vsock: avoid to close connected socket after the timeout
- tcp: fix possible sk_priority leak in tcp_v4_send_reset()
- serial: arc_uart: fix of_iomap leak in `arc_serial_probe`
- serial: 8250_bcm7271: balance clk_enable calls
- serial: 8250_bcm7271: fix leak in `brcmuart_probe`
- erspan: get the proto with the md version for collect_md
- net: dsa: rzn1-a5psw: enable management frames for CPU port
- net: dsa: rzn1-a5psw: fix STP states handling
- net: dsa: rzn1-a5psw: disable learning for standalone ports
- net: hns3: fix output information incomplete for dumping tx queue info with
debugfs
- net: hns3: fix sending pfc frames after reset issue
- net: hns3: fix reset delay time to avoid configuration timeout
- net: hns3: fix reset timeout when enable full VF
- media: netup_unidvb: fix use-after-free at del_timer()
- SUNRPC: double free xprt_ctxt while still in use
- SUNRPC: always free ctxt when freeing deferred request
- SUNRPC: Fix trace_svc_register() call site
- ASoC: mediatek: mt8186: Fix use-after-free in driver remove path
- ASoC: SOF: topology: Fix logic for copying tuples
- drm/exynos: fix g2d_open/close helper function definitions
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- virtio-net: Maintain reverse cleanup order
- virtio_net: Fix error unwinding of XDP initialization
- tipc: add tipc_bearer_min_mtu to calculate min mtu
- tipc: do not update mtu if msg_max is too small in mtu negotiation
- tipc: check the bearer min mtu properly when setting it by netlink
- s390/cio: include subchannels without devices also for evaluation
- can: dev: fix missing CAN XL support in can_put_echo_skb()
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- ice: introduce clear_reset_state operation
- ice: Fix ice VF reset during iavf initialization
- wifi: cfg80211: Drop entries with invalid BSSIDs in RNR
- wifi: mac80211: fortify the spinlock against deadlock by interrupt
- wifi: mac80211: fix min center freq offset tracing
- wifi: mac80211: Abort running color change when stopping the AP
- wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock
- wifi: iwlwifi: fw: fix DBGI dump
- wifi: iwlwifi: fix OEM's name in the ppag approved list
- wifi: iwlwifi: mvm: fix OEM's name in the tas approved list
- wifi: iwlwifi: mvm: don't trust firmware n_channels
- scsi: storvsc: Don't pass unused PFNs to Hyper-V host
- tun: Fix memory leak for detached NAPI queue.
- cassini: Fix a memory leak in the error handling path of cas_init_one()
- net: dsa: mv88e6xxx: Fix mv88e6393x EPC write command offset
- igb: fix bit_shift to be in [1..8] range
- vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()
- net: wwan: iosm: fix NULL pointer dereference when removing device
- net: pcs: xpcs: fix C73 AN not getting enabled
- net: selftests: Fix optstring
- netfilter: nf_tables: fix nft_trans type confusion
- netfilter: nft_set_rbtree: fix null deref on element insertion
- bridge: always declare tunnel functions
- ALSA: usb-audio: Add a sample rate workaround for Line6 Pod Go
- USB: usbtmc: Fix direction for 0-length ioctl control messages
- usb-storage: fix deadlock when a scsi command timeouts more than once
- USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value
- usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume()
- usb: dwc3: debugfs: Resume dwc3 before accessing registers
- usb: gadget: u_ether: Fix host MAC address case
- usb: typec: altmodes/displayport: fix pin_assignment_show
- Revert "usb: gadget: udc: core: Prevent redundant calls to pullup"
- Revert "usb: gadget: udc: core: Invoke usb_gadget_connect only when started"
- xhci-pci: Only run d3cold avoidance quirk for s2idle
- xhci: Fix incorrect tracking of free space on transfer rings
- ALSA: hda: Fix Oops by 9.1 surround channel names
- ALSA: hda/realtek: Add quirk for Clevo L140AU
- ALSA: hda/realtek: Add a quirk for HP EliteDesk 805
- ALSA: hda/realtek: Add quirk for 2nd ASUS GU603
- ALSA: hda/realtek: Add quirk for HP EliteBook G10 laptops
- can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag
- can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag
- can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop()
- can: kvaser_pciefd: Call request_irq() before enabling interrupts
- can: kvaser_pciefd: Empty SRB buffer in probe
- can: kvaser_pciefd: Clear listen-only bit if not explicitly requested
- can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt
- can: kvaser_pciefd: Disable interrupts in probe error path
- wifi: rtw88: use work to update rate to avoid RCU warning
- SMB3: Close all deferred handles of inode in case of handle lease break
- SMB3: drop reference to cfile before sending oplock break
- ksmbd: smb2: Allow messages padded to 8byte boundary
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: fix wrong UserName check in session_user
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- KVM: Fix vcpu_array[0] races
- statfs: enforce statfs[64] structure initialization
- maple_tree: make maple state reusable after mas_empty_area()
- mm: fix zswap writeback race condition
- serial: Add support for Advantech PCI-1611U card
- serial: 8250_exar: Add support for USR298x PCI Modems
- serial: qcom-geni: fix enabling deactivated interrupt
- thunderbolt: Clear registers properly when auto clear isn't in use
- vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF
- ceph: force updating the msg pointer in non-split case
- drm/amd/pm: fix possible power mode mismatch between driver and PMFW
- drm/amdgpu/gmc11: implement get_vbios_fb_size()
- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating.
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11 as well
- dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries
- powerpc/iommu: DMA address offset is incorrectly calculated with 2MB TCEs
- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device
- tpm/tpm_tis: Disable interrupts for more Lenovo devices
- powerpc/64s/radix: Fix soft dirty tracking
- nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()
- s390/dasd: fix command reject error on ESE devices
- s390/crypto: use vector instructions only if available for ChaCha20
- s390/qdio: fix do_sqbs() inline assembly constraint
- arm64: mte: Do not set PG_mte_tagged if tags were not initialized
- rethook: use preempt_{disable, enable}_notrace in rethook_trampoline_handler
- rethook, fprobe: do not trace rethook related functions
- remoteproc: imx_dsp_rproc: Fix kernel test robot sparse warning
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin
- drm/nouveau/disp: More DP_RECEIVER_CAP_SIZE array fixes
- xfrm: release all offloaded policy memory
- xfrm: Fix leak of dev tracker
- media: pvrusb2: fix DVB_CORE dependency
- net: fec: remove the xdp_return_frame when lack of tx BDs
- iavf: send VLAN offloading caps once after VFR
- wifi: brcmfmac: Check for probe() id argument being NULL
- wifi: rtw88: correct qsel_to_ep[] type as int
- KVM: arm64: Infer the PA offset from IPA in stage-2 map walker
- perf script: Skip aggregation for stat events
- iommu/arm-smmu-qcom: Fix missing adreno_smmu's
- arm64: Also reset KASAN tag if page is not PG_mte_tagged
- Upstream stable to v6.1.30, v6.3.4
* Lunar update: v6.2.16 upstream stable release (LP: #2028580)
- USB: dwc3: gadget: drop dead hibernation code
- usb: dwc3: gadget: Execute gadget stop after halting the controller
- crypto: ccp - Clear PSP interrupt status register before calling handler
- ASoC: codecs: constify static sdw_slave_ops struct
- ASoC: codecs: wcd938x: fix accessing regmap on unattached devices
- mtd: spi-nor: Add a RWW flag
- mtd: spi-nor: spansion: Enable JFFS2 write buffer for Infineon s28hx SEMPER
flash
- qcom: llcc/edac: Support polling mode for ECC handling
- soc: qcom: llcc: Do not create EDAC platform device on SDM845
- mailbox: zynq: Switch to flexible array to simplify code
- mailbox: zynqmp: Fix counts of child nodes
- mtd: spi-nor: spansion: Enable JFFS2 write buffer for Infineon s25hx SEMPER
flash
- fs/ntfs3: Fix null-ptr-deref on inode->i_op in ntfs_lookup()
- drm/amd/display: Ext displays with dock can't recognized after resume
- KVM: x86/mmu: Avoid indirect call for get_cr3
- KVM: x86: Do not unload MMU roots when only toggling CR0.WP with TDP enabled
- KVM: x86: Make use of kvm_read_cr*_bits() when testing bits
- KVM: VMX: Make CR0.WP a guest owned bit
- KVM: x86/mmu: Refresh CR0.WP prior to checking for emulated permission
faults
- RDMA/rxe: Remove rxe_alloc()
- RDMA/rxe: Change rxe_dbg to rxe_dbg_dev
- RDMA/rxe: Extend dbg log messages to err and info
- ASoC: Intel: soc-acpi-byt: Fix "WM510205" match no longer working
- scsi: qedi: Fix use after free bug in qedi_remove()
- drm/amd/display: Add missing WA and MCLK validation
- drm/amd/display: Return error code on DSC atomic check failure
- drm/amd/display: Fixes for dcn32_clk_mgr implementation
- drm/amd/display: Reset OUTBOX0 r/w pointer on DMUB reset
- drm/amd/display: Do not clear GPINT register when releasing DMUB from reset
- drm/amd/display: Update bounding box values for DCN321
- rxrpc: Fix potential data race in rxrpc_wait_to_be_connected()
- ixgbe: Fix panic during XDP_TX with > 64 CPUs
- octeonxt2-af: mcs: Fix per port bypass config
- octeontx2-af: mcs: Write TCAM_DATA and TCAM_MASK registers at once
- octeontx2-af: mcs: Config parser to skip 8B header
- octeontx2-af: mcs: Fix MCS block interrupt
- octeontx2-pf: mcs: Fix NULL pointer dereferences
- octeontx2-pf: mcs: Match macsec ethertype along with DMAC
- octeontx2-pf: mcs: Clear stats before freeing resource
- octeontx2-pf: mcs: Fix shared counters logic
- octeontx2-pf: mcs: Do not reset PN while updating secy
- net/ncsi: clear Tx enable mode when handling a Config required AEN
- tcp: fix skb_copy_ubufs() vs BIG TCP
- net/sched: cls_api: remove block_cb from driver_list before freeing
- sit: update dev->needed_headroom in ipip6_tunnel_bind_dev()
- selftests: srv6: make srv6_end_dt46_l3vpn_test more robust
- net: ipv6: fix skb hash for some RST packets
- net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu
- writeback: fix call of incorrect macro
- block: Skip destroyed blkg when restart in blkg_destroy_all()
- watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe()
- RISC-V: mm: Enable huge page support to kernel_page_present() function
- i2c: tegra: Fix PEC support for SMBUS block read
- net/sched: act_mirred: Add carrier check
- r8152: fix flow control issue of RTL8156A
- r8152: fix the poor throughput for 2.5G devices
- r8152: move setting r8153b_rx_agg_chg_indicate()
- sfc: Fix module EEPROM reporting for QSFP modules
- rxrpc: Fix hard call timeout units
- rxrpc: Make it so that a waiting process can be aborted
- rxrpc: Fix timeout of a call that hasn't yet been granted a channel
- riscv: compat_syscall_table: Fixup compile warning
- net: ethernet: mtk_eth_soc: drop generic vlan rx offload, only use DSA
untagging
- drm/i915/mtl: Add the missing CPU transcoder mask in intel_device_info
- selftests: netfilter: fix libmnl pkg-config usage
- octeontx2-af: Secure APR table update with the lock
- octeontx2-af: Fix start and end bit for scan config
- octeontx2-af: Fix depth of cam and mem table.
- octeontx2-pf: Increase the size of dmac filter flows
- octeontx2-af: Add validation for lmac type
- octeontx2-af: Update correct mask to filter IPv4 fragments
- octeontx2-af: Update/Fix NPC field hash extract feature
- octeontx2-af: Fix issues with NPC field hash extract
- octeontx2-af: Skip PFs if not enabled
- octeontx2-pf: Disable packet I/O for graceful exit
- octeontx2-vf: Detach LF resources on probe cleanup
- ionic: remove noise from ethtool rxnfc error msg
- ethtool: Fix uninitialized number of lanes
- ionic: catch failure from devlink_alloc
- af_packet: Don't send zero-byte data in packet_sendmsg_spkt().
- drm/amdgpu: add a missing lock for AMDGPU_SCHED
- ALSA: caiaq: input: Add error handling for unsupported input methods in
`snd_usb_caiaq_input_init`
- KVM: s390: pv: fix asynchronous teardown for small VMs
- KVM: s390: fix race in gmap_make_secure()
- net: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621
- net: dsa: mt7530: split-off common parts from mt7531_setup
- net: dsa: mt7530: fix network connectivity with multiple CPU ports
- ice: block LAN in case of VF to VF offload
- virtio_net: suppress cpu stall when free_unused_bufs
- net: enetc: check the index of the SFI rather than the handle
- net: fec: correct the counting of XDP sent frames
- perf record: Fix "read LOST count failed" msg with sample read
- perf build: Support python/perf.so testing
- perf scripts intel-pt-events.py: Fix IPC output for Python 2
- perf script: Fix Python support when no libtraceevent
- perf hist: Improve srcfile sort key performance (really)
- perf vendor events s390: Remove UTF-8 characters from JSON file
- perf tests record_offcpu.sh: Fix redirection of stderr to stdin
- perf ftrace: Make system wide the default target for latency subcommand
- perf vendor events power9: Remove UTF-8 characters from JSON files
- perf pmu: zfree() expects a pointer to a pointer to zero it after freeing
its contents
- perf map: Delete two variable initialisations before null pointer checks in
sort__sym_from_cmp()
- perf cs-etm: Fix timeless decode mode detection
- crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs()
- crypto: api - Add scaffolding to change completion function signature
- crypto: engine - Use crypto_request_complete
- crypto: engine - fix crypto_queue backlog handling
- perf symbols: Fix return incorrect build_id size in elf_read_build_id()
- perf tracepoint: Fix memory leak in is_valid_tracepoint()
- perf stat: Separate bperf from bpf_profiler
- KVM: x86/mmu: Change tdp_mmu to a read-only parameter
- KVM: x86/mmu: Move TDP MMU VM init/uninit behind tdp_mmu_enabled
- KVM: x86/mmu: Replace open coded usage of tdp_mmu_page with
is_tdp_mmu_page()
- KVM: x86: Preserve TDP MMU roots until they are explicitly invalidated
- ksmbd: Implements sess->ksmbd_chann_list as xarray
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- wifi: iwlwifi: mvm: fix potential memory leak
- cifs: check only tcon status on tcon related functions
- cifs: avoid potential races when handling multiple dfs tcons
- netfilter: nf_tables: extended netlink error reporting for netdevice
- netfilter: nf_tables: rename function to destroy hook list
- netfilter: nf_tables: hit ENOENT on unexisting chain/flowtable update with
missing attributes
- x86/retbleed: Fix return thunk alignment
- btrfs: fix btrfs_prev_leaf() to not return the same key twice
- btrfs: zoned: fix wrong use of bitops API in btrfs_ensure_empty_zones
- btrfs: properly reject clear_cache and v1 cache for block-group-tree
- btrfs: fix assertion of exclop condition when starting balance
- btrfs: fix encoded write i_size corruption with no-holes
- btrfs: don't free qgroup space unless specified
- btrfs: zero the buffer before marking it dirty in btrfs_redirty_list_add
- btrfs: make clear_cache mount option to rebuild FST without disabling it
- btrfs: print-tree: parent bytenr must be aligned to sector size
- btrfs: fix space cache inconsistency after error loading it from disk
- btrfs: zoned: zone finish data relocation BG with last IO
- btrfs: zoned: fix full zone super block reading on ZNS
- btrfs: fix backref walking not returning all inode refs
- cifs: fix pcchunk length type in smb2_copychunk_range
- cifs: release leases for deferred close handles when freezing
- platform/x86/intel-uncore-freq: Return error on write frequency
- platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the
Juno Tablet
- platform/x86: thinkpad_acpi: Fix platform profiles on T490
- platform/x86: hp-wmi: add micmute to hp_wmi_keymap struct
- platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i
- platform/x86: thinkpad_acpi: Add profile force ability
- inotify: Avoid reporting event with invalid wd
- smb3: fix problem remounting a share after shutdown
- SMB3: force unmount was failing to close deferred close files
- sh: math-emu: fix macro redefined warning
- sh: mcount.S: fix build error when PRINTK is not enabled
- sh: init: use OF_EARLY_FLATTREE for early init
- sh: nmi_debug: fix return value of __setup handler
- proc_sysctl: update docs for __register_sysctl_table()
- proc_sysctl: enhance documentation
- remoteproc: stm32: Call of_node_put() on iteration error
- remoteproc: st: Call of_node_put() on iteration error
- remoteproc: imx_dsp_rproc: Call of_node_put() on iteration error
- remoteproc: imx_rproc: Call of_node_put() on iteration error
- remoteproc: rcar_rproc: Call of_node_put() on iteration error
- sysctl: clarify register_sysctl_init() base directory order
- ARM: dts: aspeed: asrock: Correct firmware flash SPI clocks
- ARM: dts: exynos: fix WM8960 clock name in Itop Elite
- ARM: dts: s5pv210: correct MIPI CSIS clock name
- ARM: dts: aspeed: romed8hm3: Fix GPIO polarity of system-fault LED
- drm/msm/adreno: fix runtime PM imbalance at gpu load
- drm/bridge: lt8912b: Fix DSI Video Mode
- drm/i915/color: Fix typo for Plane CSC indexes
- drm/msm: fix NULL-deref on snapshot tear down
- drm/msm: fix NULL-deref on irq uninstall
- drm/msm: fix drm device leak on bind errors
- drm/msm: fix vram leak on bind errors
- drm/msm: fix missing wq allocation error handling
- drm/msm: fix workqueue leak on bind errors
- drm/i915/dsi: Use unconditional msleep() instead of intel_dsi_msleep()
- f2fs: factor out victim_entry usage from general rb_tree use
- f2fs: fix null pointer panic in tracepoint in __replace_atomic_write_block
- f2fs: fix potential corruption when moving a directory
- irqchip/loongson-pch-pic: Fix pch_pic_acpi_init calling
- irqchip/loongson-pch-pic: Fix registration of syscore_ops
- irqchip/loongson-eiointc: Fix returned value on parsing MADT
- irqchip/loongson-eiointc: Fix incorrect use of acpi_get_vec_parent
- irqchip/loongson-eiointc: Fix registration of syscore_ops
- drm/panel: otm8009a: Set backlight parent to panel device
- drm/amd/display: Add NULL plane_state check for cursor disable logic
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
- drm/amd/display: filter out invalid bits in pipe_fuses
- drm/amd/display: fix flickering caused by S/G mode
- drm/amdgpu: drop redundant sched job cleanup when cs is aborted
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
- drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx
ras
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3
- drm/amdgpu: change gfx 11.0.4 external_id range
- drm/amdgpu: Fix vram recover doesn't work after whole GPU reset (v2)
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
- drm/amd/pm: parse pp_handle under appropriate conditions
- drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
- drm/amd: Load MES microcode during early_init
- drm/amd: Add a new helper for loading/validating microcode
- drm/amd: Use `amdgpu_ucode_*` helpers for MES
- HID: wacom: Set a default resolution for older tablets
- HID: wacom: insert timestamp to packed Bluetooth (BT) events
- fs/ntfs3: Refactoring of various minor issues
- drm/msm/adreno: adreno_gpu: Use suspend() instead of idle() on load error
- drm/i915/mtl: Add workarounds Wa_14017066071 and Wa_14017654203
- drm/i915/mtl: Add Wa_14017856879
- drm/i915: disable sampler indirect state in bindless heap
- drm/i915/mtl: update scaler source and destination limits for MTL
- drm/i915: Check pipe source size when using skl+ scalers
- drm/amd/display: Fix Z8 support configurations
- drm/amd/display: Add minimum Z8 residency debug option
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
- drm/amd/display: Lowering min Z8 residency time
- drm/amd/display: Update Z8 SR exit/enter latencies
- drm/amd/display: Change default Z8 watermark values
- drm: Add missing DP DSC extended capability definitions.
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
- locking/rwsem: Add __always_inline annotation to __down_read_common() and
inlined callers
- ext4: fix WARNING in mb_find_extent
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- ext4: fix data races when using cached status extents
- ext4: avoid deadlock in fs reclaim with page writeback
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- ext4: improve error recovery code paths in __ext4_remount()
- ext4: improve error handling from ext4_dirhash()
- ext4: fix deadlock when converting an inline directory in nojournal mode
- ext4: add bounds checking in get_max_inline_xattr_value_size()
- ext4: bail out of ext4_xattr_ibody_get() fails for any reason
- ext4: fix lockdep warning when enabling MMP
- ext4: remove a BUG_ON in ext4_mb_release_group_pa()
- ext4: fix invalid free tracking in ext4_xattr_move_to_block()
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values
- x86/amd_nb: Add PCI ID for family 19h model 78h
- x86: fix clear_user_rep_good() exception handling annotation
- spi: fsl-spi: Re-organise transfer bits_per_word adaptation
- spi: fsl-cpm: Use 16 bit mode for large transfers with even size
- drm/amd/display: Fix hang when skipping modeset
- Linux 6.2.16
* CVE-2023-31084 // CVE-2023-31084 was assigned to this bug.
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
* CVE-2023-3776
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
* Packaging resync (LP: #1786013)
- [Packaging] resync update-dkms-versions helper
- [Packaging] resync getabis
-- Stefan Bader <stefan.bader@canonical.com> Fri, 18 Aug 2023 11:38:55 +0200
linux-hwe-6.2 (6.2.0-31.31~22.04.1) jammy; urgency=medium
* jammy/linux-hwe-6.2: 6.2.0-31.31~22.04.1 -proposed tracker (LP: #2030546)
* Packaging resync (LP: #1786013)
- [Packaging] resync update-dkms-versions helper
- [Packaging] update variants
- [Packaging] resync getabis
[ Ubuntu: 6.2.0-31.31 ]
* lunar/linux: 6.2.0-31.31 -proposed tracker (LP: #2031146)
* libgnutls report "trap invalid opcode" when trying to install packages over
https (LP: #2031093)
- [Config]: disable CONFIG_GDS_FORCE_MITIGATION
[ Ubuntu: 6.2.0-28.29 ]
* lunar/linux: 6.2.0-28.29 -proposed tracker (LP: #2030547)
* CVE-2022-40982
- init: Provide arch_cpu_finalize_init()
- x86/cpu: Switch to arch_cpu_finalize_init()
- ARM: cpu: Switch to arch_cpu_finalize_init()
- ia64/cpu: Switch to arch_cpu_finalize_init()
- m68k/cpu: Switch to arch_cpu_finalize_init()
- mips/cpu: Switch to arch_cpu_finalize_init()
- sh/cpu: Switch to arch_cpu_finalize_init()
- sparc/cpu: Switch to arch_cpu_finalize_init()
- um/cpu: Switch to arch_cpu_finalize_init()
- init: Remove check_bugs() leftovers
- init: Invoke arch_cpu_finalize_init() earlier
- init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init()
- x86/init: Initialize signal frame size late
- x86/fpu: Remove cpuinfo argument from init functions
- x86/fpu: Mark init functions __init
- x86/fpu: Move FPU initialization into arch_cpu_finalize_init()
- x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build
- x86/xen: Fix secondary processors' FPU initialization
- x86/speculation: Add Gather Data Sampling mitigation
- x86/speculation: Add force option to GDS mitigation
- x86/speculation: Add Kconfig option for GDS
- KVM: Add GDS_NO support to KVM
- Documentation/x86: Fix backwards on/off logic about YMM support
- [Config]: Enable CONFIG_ARCH_HAS_CPU_FINALIZE_INIT and
CONFIG_GDS_FORCE_MITIGATION
* CVE-2023-4015
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound
set/chain
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
* CVE-2023-3777
- netfilter: nf_tables: skip bound chain on rule flush
* CVE-2023-3995
- netfilter: nf_tables: disallow rule addition to bound chain via
NFTA_RULE_CHAIN_ID
* CVE-2023-20593
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu/amd: Add a Zenbleed fix
* CVE-2023-3776
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
* CVE-2023-4004
- netfilter: nft_set_pipapo: fix improper element removal
* CVE-2023-3611
- net/sched: sch_qfq: refactor parsing of netlink parameters
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
* CVE-2023-3610
- netfilter: nf_tables: fix chain binding transaction logic
* CVE-2023-3609
- net/sched: cls_u32: Fix reference counter leak leading to overflow
[ Ubuntu: 6.2.0-27.28 ]
* lunar/linux: 6.2.0-27.28 -proposed tracker (LP: #2026488)
* Packaging resync (LP: #1786013)
- [Packaging] resync update-dkms-versions helper
- [Packaging] update annotations scripts
* CVE-2023-2640 // CVE-2023-32629
- Revert "UBUNTU: SAUCE: overlayfs: handle idmapped mounts in
ovl_do_(set|remove)xattr"
- Revert "UBUNTU: SAUCE: overlayfs: Skip permission checking for
trusted.overlayfs.* xattrs"
- SAUCE: overlayfs: default to userxattr when mounted from non initial user
namespace
* UNII-4 5.9G Band support request on 8852BE (LP: #2023952)
- wifi: rtw89: 8851b: add 8851B basic chip_info
- wifi: rtw89: introduce realtek ACPI DSM method
- wifi: rtw89: regd: judge UNII-4 according to BIOS and chip
- wifi: rtw89: support U-NII-4 channels on 5GHz band
* Disable hv-kvp-daemon if /dev/vmbus/hv_kvp is not present (LP: #2024900)
- [Packaging] disable hv-kvp-daemon if needed
* A deadlock issue in scsi rescan task while resuming from S3 (LP: #2018566)
- ata: libata-scsi: Avoid deadlock on rescan after device resume
* [SRU] Intel Sapphire Rapids HBM support needs CONFIG_NUMA_EMU (LP: #2008745)
- [Config] Intel Sapphire Rapids HBM support needs CONFIG_NUMA_EMU
* Lunar update: v6.2.15 upstream stable release (LP: #2025067)
- ASOC: Intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15
- ASoC: Intel: soc-acpi: add table for Intel 'Rooks County' NUC M15
- ASoC: soc-pcm: fix hw->formats cleared by soc_pcm_hw_init() for dpcm
- x86/hyperv: Block root partition functionality in a Confidential VM
- ASoC: amd: yc: Add DMI entries to support Victus by HP Laptop 16-e1xxx
(8A22)
- iio: adc: palmas_gpadc: fix NULL dereference on rmmod
- ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750
- ASoC: da7213.c: add missing pm_runtime_disable()
- net: wwan: t7xx: do not compile with -Werror
- wifi: mt76: mt7921: Fix use-after-free in fw features query.
- selftests mount: Fix mount_setattr_test builds failed
- scsi: mpi3mr: Handle soft reset in progress fault code (0xF002)
- net: sfp: add quirk enabling 2500Base-x for HG MXPD-483II
- platform/x86: thinkpad_acpi: Add missing T14s Gen1 type to s2idle quirk list
- wifi: ath11k: reduce the MHI timeout to 20s
- tracing: Error if a trace event has an array for a __field()
- asm-generic/io.h: suppress endianness warnings for readq() and writeq()
- asm-generic/io.h: suppress endianness warnings for relaxed accessors
- x86/cpu: Add model number for Intel Arrow Lake processor
- wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset
- ASoC: amd: ps: update the acp clock source.
- arm64: Always load shadow stack pointer directly from the task struct
- arm64: Stash shadow stack pointer in the task struct on interrupt
- powerpc/boot: Fix boot wrapper code generation with CONFIG_POWER10_CPU
- PCI: kirin: Select REGMAP_MMIO
- PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock
- PCI: qcom: Fix the incorrect register usage in v2.7.0 config
- bus: mhi: host: pci_generic: Revert "Add a secondary AT port to Telit FN990"
- phy: qcom-qmp-pcie: sc8180x PCIe PHY has 2 lanes
- IMA: allow/fix UML builds
- wifi: rtw88: usb: fix priority queue to endpoint mapping
- usb: gadget: udc: core: Invoke usb_gadget_connect only when started
- usb: gadget: udc: core: Prevent redundant calls to pullup
- usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive
- USB: dwc3: fix runtime pm imbalance on probe errors
- USB: dwc3: fix runtime pm imbalance on unbind
- hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write
- hwmon: (adt7475) Use device_property APIs when configuring polarity
- tpm: Add !tpm_amd_is_rng_defective() to the hwrng_unregister() call site
- posix-cpu-timers: Implement the missing timer_wait_running callback
- media: ov8856: Do not check for for module version
- drm/vmwgfx: Fix Legacy Display Unit atomic drm support
- blk-stat: fix QUEUE_FLAG_STATS clear
- blk-mq: release crypto keyslot before reporting I/O complete
- blk-crypto: make blk_crypto_evict_key() return void
- blk-crypto: make blk_crypto_evict_key() more robust
- staging: iio: resolver: ads1210: fix config mode
- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
- xhci: fix debugfs register accesses while suspended
- serial: fix TIOCSRS485 locking
- serial: 8250: Fix serial8250_tx_empty() race with DMA Tx
- serial: max310x: fix IO data corruption in batched operations
- tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem
- fs: fix sysctls.c built
- MIPS: fw: Allow firmware to pass a empty env
- ipmi:ssif: Add send_retries increment
- ipmi: fix SSIF not responding under certain cond.
- iio: addac: stx104: Fix race condition when converting analog-to-digital
- iio: addac: stx104: Fix race condition for stx104_write_raw()
- kheaders: Use array declaration instead of char
- wifi: mt76: add missing locking to protect against concurrent rx/status
calls
- wifi: rtw89: correct 5 MHz mask setting
- pwm: meson: Fix axg ao mux parents
- pwm: meson: Fix g12a ao clk81 name
- soundwire: qcom: correct setting ignore bit on v1.5.1
- pinctrl: qcom: lpass-lpi: set output value before enabling output
- ring-buffer: Ensure proper resetting of atomic variables in
ring_buffer_reset_online_cpus
- ring-buffer: Sync IRQ works before buffer destruction
- crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON()
- crypto: safexcel - Cleanup ring IRQ workqueues on load failure
- crypto: arm64/aes-neonbs - fix crash with CFI enabled
- crypto: testmgr - fix RNG performance in fuzz tests
- crypto: ccp - Don't initialize CCP for PSP 0x1649
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-
ed
- reiserfs: Add security prefix to xattr name in reiserfs_security_write()
- cpufreq: qcom-cpufreq-hw: fix double IO unmap and resource release on exit
- KVM: x86/pmu: Disallow legacy LBRs if architectural LBRs are available
- KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted
- KVM: arm64: Avoid vcpu->mutex v. kvm->lock inversion in CPU_ON
- KVM: arm64: Avoid lock inversion when setting the VM register width
- KVM: arm64: Use config_lock to protect data ordered against KVM_RUN
- KVM: arm64: Use config_lock to protect vgic state
- KVM: arm64: vgic: Don't acquire its_lock before config_lock
- relayfs: fix out-of-bounds access in relay_file_read
- drm/amd/display: Remove stutter only configurations
- drm/amd/display: limit timing for single dimm memory
- drm/amd/display: fix PSR-SU/DSC interoperability support
- drm/amd/display: fix a divided-by-zero error
- KVM: RISC-V: Retry fault if vma_lookup() results become invalid
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ACPI: video: Remove acpi_backlight=video quirk for Lenovo ThinkPad W530
- i2c: omap: Fix standard mode false ACK readings
- riscv: mm: remove redundant parameter of create_fdt_early_page_table
- tracing: Fix permissions for the buffer_percent file
- drm/amd/pm: re-enable the gfx imu when smu resume
- iommu/amd: Fix "Guest Virtual APIC Table Root Pointer" configuration in IRTE
- RISC-V: Align SBI probe implementation with spec
- Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path"
- ubifs: Fix memleak when insert_old_idx() failed
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- ubifs: Free memory for tmpfile name
- ubifs: Fix memory leak in do_rename
- ceph: fix potential use-after-free bug when trimming caps
- fs: dlm: fix DLM_IFL_CB_PENDING gets overwritten
- xfs: don't consider future format versions valid
- cxl/hdm: Fail upon detecting 0-sized decoders
- bus: mhi: host: Remove duplicate ee check for syserr
- bus: mhi: host: Use mhi_tryset_pm_state() for setting fw error state
- bus: mhi: host: Range check CHDBOFF and ERDBOFF
- ASoC: dt-bindings: qcom,lpass-rx-macro: correct minItems for clocks
- kunit: fix bug in the order of lines in debugfs logs
- rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check
- selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem
- selftests/resctrl: Move ->setup() call outside of test specific branches
- selftests/resctrl: Allow ->setup() to return errors
- selftests/resctrl: Check for return value after write_schemata()
- selinux: fix Makefile dependencies of flask.h
- selinux: ensure av_permissions.h is built when needed
- tpm, tpm_tis: Do not skip reset of original interrupt vector
- tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register
- tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed
- tpm, tpm_tis: Claim locality before writing interrupt registers
- tpm, tpm: Implement usage counter for locality
- tpm, tpm_tis: Claim locality when interrupts are reenabled on resume
- erofs: stop parsing non-compact HEAD index if clusterofs is invalid
- erofs: initialize packed inode after root inode is assigned
- erofs: fix potential overflow calculating xattr_isize
- drm/rockchip: Drop unbalanced obj unref
- drm/i915/dg2: Drop one PCI ID
- drm/vgem: add missing mutex_destroy
- drm/probe-helper: Cancel previous job before starting new one
- drm/amdgpu: register a vga_switcheroo client for MacBooks with apple-gmux
- tools/x86/kcpuid: Fix avx512bw and avx512lvl fields in Fn00000007
- soc: ti: k3-ringacc: Add try_module_get() to k3_dmaring_request_dual_ring()
- soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe
- arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table
- arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table
- arm64: dts: renesas: r9a07g044: Update IRQ numbers for SSI channels
- arm64: dts: renesas: r9a07g054: Update IRQ numbers for SSI channels
- arm64: dts: renesas: r9a07g043: Update IRQ numbers for SSI channels
- drm/mediatek: dp: Only trigger DRM HPD events if bridge is attached
- drm/msm/disp/dpu: check for crtc enable rather than crtc active to release
shared resources
- EDAC/skx: Fix overflows on the DRAM row address mapping arrays
- ARM: dts: qcom-apq8064: Fix opp table child name
- regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since
booted
- arm64: dts: ti: k3-am62-main: Fix GPIO numbers in DT
- arm64: dts: ti: k3-am62a7-sk: Fix DDR size to full 4GB
- arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property
- arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name
- arm64: dts: broadcom: bcmbca: bcm4908: fix LED nodenames
- arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename
- arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name
- arm64: dts: qcom: sc7280: fix EUD port properties
- arm64: dts: qcom: sdm845: correct dynamic power coefficients
- arm64: dts: qcom: sdm845: Fix the PCI I/O port range
- arm64: dts: qcom: msm8998: Fix the PCI I/O port range
- arm64: dts: qcom: sc7280: Fix the PCI I/O port range
- arm64: dts: qcom: ipq8074: Fix the PCI I/O port range
- arm64: dts: qcom: ipq6018: Add/remove some newlines
- arm64: dts: qcom: ipq6018: Fix the PCI I/O port range
- arm64: dts: qcom: msm8996: Fix the PCI I/O port range
- arm64: dts: qcom: sm8250: Fix the PCI I/O port range
- arm64: dts: qcom: sc8280xp: Fix the PCI I/O port range
- arm64: dts: qcom: sm8150: Fix the PCI I/O port range
- arm64: dts: qcom: sm8450: Fix the PCI I/O port range
- ARM: dts: qcom: ipq4019: Fix the PCI I/O port range
- ARM: dts: qcom: ipq8064: Fix the PCI I/O port range
- arm64: dts: qcom: msm8976: Add and provide xo clk to rpmcc
- ARM: dts: qcom: sdx55: Fix the unit address of PCIe EP node
- x86/MCE/AMD: Use an u64 for bank_map
- media: bdisp: Add missing check for create_workqueue
- media: platform: mtk-mdp3: Add missing check and free for ida_alloc
- media: amphion: decoder implement display delay enable
- media: av7110: prevent underflow in write_ts_to_decoder()
- firmware: qcom_scm: Clear download bit during reboot
- drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535
- media: max9286: Free control handler
- accel: Link to compute accelerator subsystem intro
- arm64: dts: ti: k3-am625: Correct L2 cache size to 512KB
- arm64: dts: ti: k3-am62a7: Correct L2 cache size to 512KB
- drm/msm/adreno: drop bogus pm_runtime_set_active()
- drm: msm: adreno: Disable preemption on Adreno 510
- virt/coco/sev-guest: Double-buffer messages
- arm64: dts: qcom: sm8350-microsoft-surface: fix USB dual-role mode property
- drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known
override-init warnings
- ACPI: processor: Fix evaluating _PDC method when running as Xen dom0
- mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data
- arm64: dts: qcom: sm8450: fix pcie1 gpios properties name
- drm: rcar-du: Fix a NULL vs IS_ERR() bug
- ARM: dts: gta04: fix excess dma channel usage
- firmware: arm_scmi: Fix xfers allocation on Rx channel
- perf/arm-cmn: Move overlapping wp_combine field
- perf/amlogic: Fix config1/config2 parsing issue
- ARM: dts: stm32: fix spi1 pin assignment on stm32mp15
- arm64: dts: apple: t8103: Disable unused PCIe ports
- cpufreq: mediatek: fix passing zero to 'PTR_ERR'
- cpufreq: mediatek: fix KP caused by handler usage after
regulator_put/clk_put
- cpufreq: mediatek: raise proc/sram max voltage for MT8516
- cpufreq: mediatek: Raise proc and sram max voltage for MT7622/7623
- cpufreq: qcom-cpufreq-hw: Revert adding cpufreq qos
- arm64: dts: mediatek: mt8192-asurada: Fix voltage constraint for Vgpu
- ACPI: VIOT: Initialize the correct IOMMU fwspec
- drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe()
- drm/mediatek: dp: Change the aux retries times when receiving AUX_DEFER
- mailbox: mpfs: switch to txdone_poll
- soc: bcm: brcmstb: biuctrl: fix of_iomap leak
- soc: renesas: renesas-soc: Release 'chipid' from ioremap()
- gpu: host1x: Fix potential double free if IOMMU is disabled
- gpu: host1x: Fix memory leak of device names
- arm64: dts: qcom: sc7280-herobrine-villager: correct trackpad supply
- arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply
- arm64: dts: qcom: sc7180-trogdor-pazquel: correct trackpad supply
- arm64: dts: qcom: msm8998-oneplus-cheeseburger: revert "fix backlight pin
function"
- arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator
- arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994
regulator
- arm64: dts: qcom: apq8096-db820c: drop unit address from PMI8994 regulator
- drm/ttm/pool: Fix ttm_pool_alloc error path
- regulator: core: Consistently set mutex_owner when using
ww_mutex_lock_slow()
- regulator: core: Avoid lockdep reports when resolving supplies
- x86/apic: Fix atomic update of offset in reserve_eilvt_offset()
- soc: qcom: rpmh-rsc: Support RSC v3 minor versions
- arm64: dts: qcom: msm8994-angler: Fix cont_splash_mem mapping
- arm64: dts: qcom: msm8994-angler: removed clash with smem_region
- arm64: dts: sc7180: Rename qspi data12 as data23
- arm64: dts: sc7280: Rename qspi data12 as data23
- arm64: dts: sdm845: Rename qspi data12 as data23
- media: mtk-jpeg: Fixes jpeghw multi-core judgement
- media: mtk-jpeg: Fixes jpeg enc&dec worker sw flow
- media: mediatek: vcodec: Use 4K frame size when supported by stateful
decoder
- media: mediatek: vcodec: Make MM21 the default capture format
- media: mediatek: vcodec: Force capture queue format to MM21
- media: mediatek: vcodec: add params to record lat and core lat_buf count
- media: mediatek: vcodec: using each instance lat_buf count replace core
ready list
- media: mediatek: vcodec: move lat_buf to the top of core list
- media: mediatek: vcodec: add core decode done event
- media: mediatek: vcodec: remove unused lat_buf
- media: mediatek: vcodec: making sure queue_work successfully
- media: mediatek: vcodec: change lat thread decode error condition
- media: cedrus: fix use after free bug in cedrus_remove due to race condition
- media: rkvdec: fix use after free bug in rkvdec_remove
- platform/x86/amd/pmf: Move out of BIOS SMN pair for driver probe
- platform/x86/amd: pmc: Don't try to read SMU version on Picasso
- platform/x86/amd: pmc: Hide SMU version and program attributes for Picasso
- platform/x86/amd: pmc: Don't dump data after resume from s0i3 on picasso
- platform/x86/amd: pmc: Move idlemask check into `amd_pmc_idlemask_read`
- platform/x86/amd: pmc: Utilize SMN index 0 for driver probe
- platform/x86/amd: pmc: Move out of BIOS SMN pair for STB init
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- media: saa7134: fix use after free bug in saa7134_finidev due to race
condition
- media: platform: mtk-mdp3: fix potential frame size overflow in
mdp_try_fmt_mplane()
- media: vsp1: Replace vb2_is_streaming() with vb2_start_streaming_called()
- platform: Provide a remove callback that returns no value
- media: rcar_fdp1: Convert to platform remove callback returning void
- media: rcar_fdp1: Fix refcount leak in probe and remove function
- media: v4l: async: Return async sub-devices to subnotifier list
- media: hi846: Fix memleak in hi846_init_controls()
- drm/amd/display: Fix potential null dereference
- media: rc: gpio-ir-recv: Fix support for wake-up
- media: venus: dec: Fix handling of the start cmd
- media: venus: dec: Fix capture formats enumeration order
- regulator: stm32-pwr: fix of_iomap leak
- x86/ioapic: Don't return 0 from arch_dynirq_lower_bound()
- arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step
- perf/arm-cmn: Fix port detection for CMN-700
- media: mediatek: vcodec: fix decoder disable pm crash
- media: mediatek: vcodec: add remove function for decoder platform driver
- debugobject: Prevent init race with static objects
- drm/i915: Make intel_get_crtc_new_encoder() less oopsy
- tick/common: Align tick period with the HZ tick.
- ACPI: bus: Ensure that notify handlers are not running after removal
- cpufreq: use correct unit when verify cur freq
- rpmsg: glink: Propagate TX failures in intentless mode as well
- hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E
- platform/chrome: cros_typec_switch: Add missing fwnode_handle_put()
- wifi: ath6kl: minor fix for allocation size
- wifi: ath9k: hif_usb: fix memory leak of remain_skbs
- wifi: ath11k: Use platform_get_irq() to get the interrupt
- wifi: ath5k: Use platform_get_irq() to get the interrupt
- wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list()
- wifi: ath11k: fix SAC bug on peer addition with sta band migration
- wifi: rtl8xxxu: Remove always true condition in rtl8xxxu_print_chipinfo
- wifi: brcmfmac: support CQM RSSI notification with older firmware
- wifi: ath6kl: reduce WARN to dev_dbg() in callback
- tools: bpftool: Remove invalid ' json escape
- wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser()
- wifi: rtw88: mac: Return the original error from rtw_mac_power_switch()
- bpf: take into account liveness when propagating precision
- bpf: fix precision propagation verbose logging
- crypto: qat - fix concurrency issue when device state changes
- scm: fix MSG_CTRUNC setting condition for SO_PASSSEC
- wifi: ath11k: fix deinitialization of firmware resources
- selftests/bpf: Fix a fd leak in an error path in network_helpers.c
- bpf: Remove misleading spec_v1 check on var-offset stack read
- net: pcs: xpcs: remove double-read of link state when using AN
- vlan: partially enable SIOCSHWTSTAMP in container
- net/packet: annotate accesses to po->xmit
- net/packet: convert po->origdev to an atomic flag
- net/packet: convert po->auxdata to an atomic flag
- libbpf: Fix ld_imm64 copy logic for ksym in light skeleton.
- net: dsa: qca8k: remove assignment of an_enabled in pcs_get_state()
- netfilter: keep conntrack reference until IPsecv6 policy checks are done
- bpf: return long from bpf_map_ops funcs
- bpf: Fix __reg_bound_offset 64->32 var_off subreg propagation
- scsi: target: Move sess cmd counter to new struct
- scsi: target: Move cmd counter allocation
- scsi: target: Pass in cmd counter to use during cmd setup
- scsi: target: iscsit: isert: Alloc per conn cmd counter
- scsi: target: iscsit: Stop/wait on cmds during conn close
- scsi: target: Fix multiple LUN_RESET handling
- scsi: target: iscsit: Fix TAS handling during conn cleanup
- scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS
- net: sunhme: Fix uninitialized return code
- f2fs: handle dqget error in f2fs_transfer_project_quota()
- f2fs: fix uninitialized skipped_gc_rwsem
- f2fs: apply zone capacity to all zone type
- f2fs: compress: fix to call f2fs_wait_on_page_writeback() in
f2fs_write_raw_pages()
- f2fs: fix scheduling while atomic in decompression path
- crypto: caam - Clear some memory in instantiate_rng
- crypto: sa2ul - Select CRYPTO_DES
- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg()
- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg()
- scsi: hisi_sas: Handle NCQ error when IPTT is valid
- wifi: rt2x00: Fix memory leak when handling surveys
- bpf: rename list_head -> graph_root in field info types
- bpf: Add __bpf_kfunc tag for marking kernel functions as kfuncs
- bpf: Migrate release_on_unlock logic to non-owning ref semantics
- bpf: Add basic bpf_rb_{root,node} support
- bpf: Add bpf_rbtree_{add,remove,first} kfuncs
- bpf: Add support for bpf_rb_root and bpf_rb_node in kfunc args
- bpf: Add callback validation to kfunc verifier logic
- bpf: factor out fetching basic kfunc metadata
- bpf: Fix struct_meta lookup for bpf_obj_free_fields kfunc call
- f2fs: fix iostat lock protection
- net: qrtr: correct types of trace event parameters
- selftests: xsk: Use correct UMEM size in testapp_invalid_desc
- selftests: xsk: Disable IPv6 on VETH1
- selftests: xsk: Deflakify STATS_RX_DROPPED test
- selftests/bpf: Wait for receive in cg_storage_multi test
- bpftool: Fix bug for long instructions in program CFG dumps
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- xsk: Fix unaligned descriptor validation
- f2fs: fix to avoid use-after-free for cached IPU bio
- wifi: iwlwifi: fix duplicate entry in iwl_dev_info_table
- bpf/btf: Fix is_int_ptr()
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- net: ethernet: stmmac: dwmac-rk: rework optional clock handling
- net: ethernet: stmmac: dwmac-rk: fix optional phy regulator handling
- wifi: ath11k: fix writing to unintended memory region
- bpf, sockmap: fix deadlocks in the sockhash and sockmap
- nvmet: fix error handling in nvmet_execute_identify_cns_cs_ns()
- nvmet: fix Identify Namespace handling
- nvmet: fix Identify Controller handling
- nvmet: fix Identify Active Namespace ID list handling
- nvmet: fix I/O Command Set specific Identify Controller
- nvme: fix async event trace event
- nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage"
- selftests/bpf: Use read_perf_max_sample_freq() in perf_event_stackmap
- selftests/bpf: Fix leaked bpf_link in get_stackid_cannot_attach
- blk-mq: don't plug for head insertions in blk_execute_rq_nowait
- wifi: iwlwifi: debug: fix crash in __iwl_err()
- wifi: iwlwifi: mvm: fix A-MSDU checks
- wifi: iwlwifi: trans: don't trigger d3 interrupt twice
- wifi: iwlwifi: mvm: don't set CHECKSUM_COMPLETE for unsupported protocols
- bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap
- f2fs: fix to check return value of f2fs_do_truncate_blocks()
- f2fs: fix to check return value of inc_valid_block_count()
- md/raid10: fix task hung in raid10d
- md/raid10: fix leak of 'r10bio->remaining' for recovery
- md/raid10: fix memleak for 'conf->bio_split'
- md/raid10: fix memleak of md thread
- md/raid10: don't call bio_start_io_acct twice for bio which experienced read
error
- wifi: iwlwifi: mvm: don't drop unencrypted MCAST frames
- wifi: iwlwifi: yoyo: skip dump correctly on hw error
- wifi: iwlwifi: yoyo: Fix possible division by zero
- wifi: iwlwifi: mvm: initialize seq variable
- wifi: iwlwifi: fw: move memset before early return
- jdb2: Don't refuse invalidation of already invalidated buffers
- io_uring/rsrc: use nospec'ed indexes
- wifi: iwlwifi: make the loop for card preparation effective
- wifi: mt76: remove redundent MCU_UNI_CMD_* definitions
- wifi: mt76: mt7921: fix wrong command to set STA channel
- wifi: mt76: mt7921: fix PCI DMA hang after reboot
- wifi: mt76: mt7915: unlock on error in mt7915_thermal_temp_store()
- wifi: mt76: mt7996: fix radiotap bitfield
- wifi: mt76: mt7915: expose device tree match table
- wifi: mt76: mt7915: add error message in
mt7915_thermal_set_cur_throttle_state()
- wifi: mt76: mt7915: rework init flow in mt7915_thermal_init()
- wifi: mt76: handle failure of vzalloc in mt7615_coredump_work
- wifi: mt76: mt7996: let non-bufferable MMPDUs use correct hw queue
- wifi: mt76: mt7996: fix pointer calculation in ie countdown event
- wifi: mt76: mt7996: fix eeprom tx path bitfields
- wifi: mt76: add flexible polling wait-interval support
- wifi: mt76: mt7921e: fix probe timeout after reboot
- wifi: mt76: fix 6GHz high channel not be scanned
- mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data
- wifi: mt76: mt7921: fix missing unwind goto in `mt7921u_probe`
- wifi: mt76: mt7921e: improve reliability of dma reset
- wifi: mt76: mt7921e: stop chip reset worker in unregister hook
- wifi: mt76: connac: fix txd multicast rate setting
- wifi: iwlwifi: mvm: check firmware response size
- netfilter: conntrack: restore IPS_CONFIRMED out of
nf_conntrack_hash_check_insert()
- wifi: mt76: mt7996: rely on mt76_connac_txp_common structure
- wifi: mt76: mt7996: fill txd by host driver
- netfilter: conntrack: fix wrong ct->timeout value
- wifi: iwlwifi: fw: fix memory leak in debugfs
- ixgbe: Allow flow hash to be set via ethtool
- ixgbe: Enable setting RSS table to default values
- net/mlx5e: Don't clone flow post action attributes second time
- net/mlx5: E-switch, Create per vport table based on devlink encap mode
- net/mlx5: E-switch, Don't destroy indirect table in split rule
- net/mlx5e: Fix error flow in representor failing to add vport rx rule
- net/mlx5: Remove "recovery" arg from mlx5_load_one() function
- net/mlx5: Suspend auxiliary devices only in case of PCI device suspend
- Revert "net/mlx5: Remove "recovery" arg from mlx5_load_one() function"
- net/mlx5: Use recovery timeout on sync reset flow
- net/mlx5e: Nullify table pointer when failing to create
- Revert "net/mlx5e: Don't use termination table when redundant"
- net: stmmac:fix system hang when setting up tag_8021q VLAN for DSA ports
- bpf: Fix race between btf_put and btf_idr walk.
- bpf: Don't EFAULT for getsockopt with optval=NULL
- netfilter: nf_tables: don't write table validation state without mutex
- net: dpaa: Fix uninitialized variable in dpaa_stop()
- net/sched: sch_fq: fix integer overflow of "credit"
- ipv4: Fix potential uninit variable access bug in __ip_make_skb()
- rxrpc: Fix error when reading rxrpc tokens
- Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to
unfinished work"
- netlink: Use copy_to_user() for optval in netlink_getsockopt().
- net: amd: Fix link leak when verifying config failed
- tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp.
- ipmi: ASPEED_BT_IPMI_BMC: select REGMAP_MMIO instead of depending on it
- ASoC: cs35l41: Only disable internal boost
- drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler()
- drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler()
- pstore: Revert pmsg_lock back to a normal mutex
- usb: host: xhci-rcar: remove leftover quirk handling
- usb: dwc3: gadget: Change condition for processing suspend event
- serial: stm32: Re-assert RTS/DE GPIO in RS485 mode only if more data are
transmitted
- fpga: bridge: fix kernel-doc parameter description
- iommufd/selftest: Catch overflow of uptr and length
- iio: light: max44009: add missing OF device matching
- serial: 8250_bcm7271: Fix arbitration handling
- spi: atmel-quadspi: Don't leak clk enable count in pm resume
- spi: atmel-quadspi: Free resources even if runtime resume failed in
.remove()
- spi: imx: Don't skip cleanup in remove's error path
- interconnect: qcom: drop obsolete OSM_L3/EPSS defines
- interconnect: qcom: osm-l3: drop unuserd header inclusion
- spi: f_ospi: Add missing spi_mem_default_supports_op() helper
- module/decompress: Never use kunmap() for local un-mappings
- usb: gadget: udc: renesas_usb3: Fix use after free bug in
renesas_usb3_remove due to race condition
- ASoC: soc-compress: Inherit atomicity from DAI link for Compress FE
- PCI: imx6: Install the fault handler only on compatible match
- ASoC: es8316: Handle optional IRQ assignment
- linux/vt_buffer.h: allow either builtin or modular for macros
- spi: qup: Don't skip cleanup in remove's error path
- interconnect: qcom: rpm: drop bogus pm domain attach
- spi: mchp-pci1xxxx: Fix length of SPI transactions not set properly in
driver
- spi: mchp-pci1xxxx: Fix SPI transactions not working after suspend and
resume
- spi: fsl-spi: Fix CPM/QE mode Litte Endian
- vmci_host: fix a race condition in vmci_host_poll() causing GPF
- of: Fix modalias string generation
- PCI/EDR: Clear Device Status after EDR error recovery
- ia64: mm/contig: fix section mismatch warning/error
- ia64: salinfo: placate defined-but-not-used warning
- scripts/gdb: bail early if there are no clocks
- scripts/gdb: bail early if there are no generic PD
- HID: amd_sfh: Correct the structure fields
- HID: amd_sfh: Correct the sensor enable and disable command
- HID: amd_sfh: Fix illuminance value
- HID: amd_sfh: Add support for shutdown operation
- HID: amd_sfh: Correct the stop all command
- HID: amd_sfh: Increase sensor command timeout for SFH1.1
- HID: amd_sfh: Handle "no sensors" enabled for SFH1.1
- cacheinfo: Check sib_leaf in cache_leaves_are_shared()
- coresight: etm_pmu: Set the module field
- drm/panel: novatek-nt35950: Improve error handling
- ASoC: fsl_mqs: move of_node_put() to the correct location
- PCI/PM: Extend D3hot delay for NVIDIA HDA controllers
- drm/panel: novatek-nt35950: Only unregister DSI1 if it exists
- spi: cadence-quadspi: fix suspend-resume implementations
- i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path
- i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path
- scripts/gdb: raise error with reduced debugging information
- uapi/linux/const.h: prefer ISO-friendly __typeof__
- sh: sq: Fix incorrect element size for allocating bitmap buffer
- usb: gadget: tegra-xudc: Fix crash in vbus_draw
- usb: chipidea: fix missing goto in `ci_hdrc_probe`
- usb: mtu3: fix kernel panic at qmu transfer done irq handler
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
- tty: serial: fsl_lpuart: adjust buffer length to the intended size
- serial: 8250: Add missing wakeup event reporting
- spi: cadence-quadspi: use macro DEFINE_SIMPLE_DEV_PM_OPS
- staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
- spmi: Add a check for remove callback when removing a SPMI driver
- virtio_ring: don't update event idx on get_buf
- fbdev: mmp: Fix deferred clk handling in mmphw_probe()
- selftests/powerpc/pmu: Fix sample field check in the
mmcra_thresh_marked_sample_test
- macintosh/windfarm_smu_sat: Add missing of_node_put()
- powerpc/perf: Properly detect mpc7450 family
- powerpc/mpc512x: fix resource printk format warning
- powerpc/wii: fix resource printk format warnings
- powerpc/sysdev/tsi108: fix resource printk format warnings
- macintosh: via-pmu-led: requires ATA to be set
- powerpc/rtas: use memmove for potentially overlapping buffer copy
- sched/fair: Fix inaccurate tally of ttwu_move_affine
- perf/core: Fix hardlockup failure caused by perf throttle
- Revert "objtool: Support addition to set CFA base"
- riscv: Fix ptdump when KASAN is enabled
- sched/rt: Fix bad task migration for rt tasks
- rv: Fix addition on an uninitialized variable 'run'
- tracing/user_events: Ensure write index cannot be negative
- clk: at91: clk-sam9x60-pll: fix return value check
- IB/hifi1: add a null check of kzalloc_node in hfi1_ipoib_txreq_init
- RDMA/siw: Fix potential page_array out of range access
- clk: mediatek: mt2712: Add error handling to clk_mt2712_apmixed_probe()
- clk: mediatek: Consistently use GATE_MTK() macro
- clk: mediatek: mt7622: Properly use CLK_IS_CRITICAL flag
- clk: mediatek: mt8135: Properly use CLK_IS_CRITICAL flag
- RDMA/rdmavt: Delete unnecessary NULL check
- clk: mediatek: clk-pllfh: fix missing of_node_put() in fhctl_parse_dt()
- clk: qcom: gcc-qcm2290: Fix up gcc_sdcc2_apps_clk_src
- workqueue: Fix hung time report of worker pools
- rtc: omap: include header for omap_rtc_power_off_program prototype
- RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()
- rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time
- rtc: k3: handle errors while enabling wake irq
- RDMA/rxe: Replace exists by rxe in rxe.c
- RDMA/erdma: Use fixed hardware page size
- fs/ntfs3: Fix memory leak if ntfs_read_mft failed
- fs/ntfs3: Add check for kmemdup
- fs/ntfs3: Fix OOB read in indx_insert_into_buffer
- fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de()
- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN
- RDMA/rxe: Remove tasklet call from rxe_cq.c
- power: supply: generic-adc-battery: fix unit scaling
- clk: add missing of_node_put() in "assigned-clocks" property parsing
- RDMA/siw: Remove namespace check from siw_netdev_event()
- clk: qcom: gcc-sm6115: Mark RCGs shared where applicable
- power: supply: rk817: Fix low SOC bugs
- RDMA/cm: Trace icm_send_rej event before the cm state is reset
- RDMA/srpt: Add a check for valid 'mad_agent' pointer
- IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order
- IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests
- clk: imx: fracn-gppll: fix the rate table
- clk: imx: fracn-gppll: disable hardware select control
- clk: imx: imx8ulp: Fix XBAR_DIVBUS and AD_SLOW clock parents
- NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease
- iommu/amd: Set page size bitmap during V2 domain allocation
- s390/checksum: always use cksm instruction
- clk: qcom: lpasscc-sc7280: Skip qdsp6ss clock registration
- clk: qcom: lpassaudiocc-sc7280: Add required gdsc power domain clks in
lpass_cc_sc7280_desc
- clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling
- clk: qcom: dispcc-qcm2290: get rid of test clock
- clk: qcom: dispcc-qcm2290: Remove inexistent DSI1PHY clk
- Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe
- swiotlb: relocate PageHighMem test away from rmem_swiotlb_setup
- swiotlb: fix debugfs reporting of reserved memory pools
- RDMA/rxe: Convert tasklet args to queue pairs
- RDMA/rxe: Remove __rxe_do_task()
- RDMA/rxe: Fix the error "trying to register non-static key in
rxe_cleanup_task"
- RDMA/mlx5: Check pcie_relaxed_ordering_enabled() in UMR
- RDMA/mlx5: Fix flow counter query via DEVX
- SUNRPC: remove the maximum number of retries in call_bind_status
- RDMA/mlx5: Use correct device num_ports when modify DC
- clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when
init fails
- openrisc: Properly store r31 to pt_regs on unhandled exceptions
- timekeeping: Fix references to nonexistent ktime_get_fast_ns()
- SMB3: Add missing locks to protect deferred close file list
- SMB3: Close deferred file handles in case of handle lease break
- ext4: fix i_disksize exceeding i_size problem in paritally written case
- ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline
- pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration
- pinctrl: renesas: r8a779f0: Fix tsn1_avtp_pps pin group
- pinctrl: renesas: r8a779g0: Fix Group 4/5 pin functions
- pinctrl: renesas: r8a779g0: Fix Group 6/7 pin functions
- pinctrl: renesas: r8a779g0: Fix ERROROUTC function names
- leds: TI_LMU_COMMON: select REGMAP instead of depending on it
- pinctrl: ralink: reintroduce ralink,rt2880-pinmux compatible string
- dmaengine: mv_xor_v2: Fix an error code.
- leds: tca6507: Fix error handling of using fwnode_property_read_string
- pwm: mtk-disp: Disable shadow registers before setting backlight values
- pwm: mtk-disp: Configure double buffering before reading in .get_state()
- soundwire: intel: don't save hw_params for use in prepare
- phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and
ulpi_port
- phy: ti: j721e-wiz: Fix unreachable code in wiz_mode_select()
- dma: gpi: remove spurious unlock in gpi_ch_init
- dmaengine: dw-edma: Fix to change for continuous transfer
- dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing
- dmaengine: at_xdmac: do not enable all cyclic channels
- pinctrl-bcm2835.c: fix race condition when setting gpio dir
- thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in
mtk_thermal_probe
- mfd: tqmx86: Do not access I2C_DETECT register through io_base
- mfd: tqmx86: Specify IO port register range more precisely
- mfd: tqmx86: Correct board names for TQMxE39x
- mfd: ocelot-spi: Fix unsupported bulk read
- mfd: arizona-spi: Add missing MODULE_DEVICE_TABLE
- hte: tegra: fix 'struct of_device_id' build error
- hte: tegra-194: Fix off by one in tegra_hte_map_to_line_id()
- ACPI: PM: Do not turn of unused power resources on the Toshiba Click Mini
- PM: hibernate: Turn snapshot_test into global variable
- PM: hibernate: Do not get block device exclusively in test_resume mode
- afs: Fix updating of i_size with dv jump from server
- afs: Fix getattr to report server i_size on dirs, not local size
- afs: Avoid endless loop if file is larger than expected
- parisc: Fix argument pointer in real64_call_asm()
- parisc: Ensure page alignment in flush functions
- ALSA: usb-audio: Add quirk for Pioneer DDJ-800
- ALSA: hda/realtek: Add quirk for ASUS UM3402YAR using CS35L41
- ALSA: hda/realtek: support HP Pavilion Aero 13-be0xxx Mute LED
- nilfs2: do not write dirty data after degenerating to read-only
- nilfs2: fix infinite loop in nilfs_mdt_get_block()
- mm: do not reclaim private data from pinned page
- drbd: correctly submit flush bio on barrier
- md/raid10: fix null-ptr-deref in raid10_sync_request
- md/raid5: Improve performance for sequential IO
- kasan: hw_tags: avoid invalid virt_to_page()
- mtd: core: provide unique name for nvmem device, take two
- mtd: core: fix nvmem error reporting
- mtd: core: fix error path for nvmem provider
- mtd: spi-nor: core: Update flash's current address mode when changing
address mode
- drivers: remoteproc: xilinx: Fix carveout names
- mailbox: zynqmp: Fix IPI isr handling
- kcsan: Avoid READ_ONCE() in read_instrumented_memory()
- mailbox: zynqmp: Fix typo in IPI documentation
- nfp: fix incorrect pointer deference when offloading IPsec with bonding
- wifi: rtl8xxxu: RTL8192EU always needs full init
- wifi: rtw88: rtw8821c: Fix rfe_option field width
- wifi: rtw89: fix potential race condition between napi_init and napi_enable
- clk: microchip: fix potential UAF in auxdev release callback
- clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent
- scripts/gdb: fix lx-timerlist for Python3
- btrfs: scrub: reject unsupported scrub flags
- s390/dasd: fix hanging blockdevice after request requeue
- ia64: fix an addr to taddr in huge_pte_offset()
- mm/mempolicy: correctly update prev when policy is equal on mbind
- vhost_vdpa: fix unmap process in no-batch mode
- dm verity: fix error handling for check_at_most_once on FEC
- dm clone: call kmem_cache_destroy() in dm_clone_init() error path
- dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path
- dm flakey: fix a crash with invalid table line
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- dm: don't lock fs when the map is NULL in process of resume
- blk-iocost: avoid 64-bit division in ioc_timer_fn
- cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname
- cifs: protect session status check in smb2_reconnect()
- cifs: fix sharing of DFS connections
- cifs: fix potential race when tree connecting ipc
- cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath
- thunderbolt: Use correct type in tb_port_is_clx_enabled() prototype
- perf auxtrace: Fix address filter entire kernel size
- perf intel-pt: Fix CYC timestamps after standalone CBR
- i40e: Remove unused i40e status codes
- i40e: Remove string printing for i40e_status
- i40e: use int for i40e_status
- debugobject: Ensure pool refill (again)
- Linux 6.2.15
* Lunar update: v6.2.14 upstream stable release (LP: #2025066)
- rust: arch/um: Disable FP/SIMD instruction to match x86
- um: Only disable SSE on clang to work around old GCC bugs
- rcu/kvfree: Avoid freeing new kfree_rcu() memory after old grace period
- mm/mempolicy: fix use-after-free of VMA iterator
- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
- gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xNU
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- wifi: brcmfmac: add Cypress 43439 SDIO ids
- btrfs: fix uninitialized variable warnings
- USB: serial: option: add UNISOC vendor and TOZED LT70C product
- driver core: Don't require dynamic_debug for initcall_debug probe timing
- riscv: Move early dtb mapping into the fixmap region
- riscv: Do not set initial_boot_params to the linear address of the dtb
- riscv: No need to relocate the dtb as it lies in the fixmap region
- Linux 6.2.14
* CVE-2023-35001
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
* CVE-2023-31248
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
* CVE-2023-3389
- io_uring/poll: serialize poll linked timer start with poll removal
* CVE-2023-3269
- mm: introduce new 'lock_mm_and_find_vma()' page fault helper
- mm: make the page fault mmap locking killable
- arm64/mm: Convert to using lock_mm_and_find_vma()
- powerpc/mm: Convert to using lock_mm_and_find_vma()
- mips/mm: Convert to using lock_mm_and_find_vma()
- riscv/mm: Convert to using lock_mm_and_find_vma()
- arm/mm: Convert to using lock_mm_and_find_vma()
- mm/fault: convert remaining simple cases to lock_mm_and_find_vma()
- powerpc/mm: convert coprocessor fault to lock_mm_and_find_vma()
- mm: make find_extend_vma() fail if write lock not held
- execve: expand new process stack manually ahead of time
- mm: always expand the stack with the mmap write lock held
- [CONFIG]: Set CONFIG_LOCK_MM_AND_FIND_VMA
* CVE-2023-3390
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
* CVE-2023-3141
- memstick: r592: Fix UAF bug in r592_remove due to race condition
* CVE-2023-3090
- ipvlan:Fix out-of-bounds caused by unclear skb->cb
-- Stefan Bader <stefan.bader@canonical.com> Wed, 16 Aug 2023 11:42:54 +0200
linux-hwe-6.2 (6.2.0-26.26~22.04.1) jammy; urgency=medium
* jammy/linux-hwe-6.2: 6.2.0-26.26~22.04.1 -proposed tracker (LP: #2026752)
[ Ubuntu: 6.2.0-26.26 ]
* lunar/linux: 6.2.0-26.26 -proposed tracker (LP: #2026753)
* CVE-2023-2640 // CVE-2023-32629
- Revert "UBUNTU: SAUCE: overlayfs: handle idmapped mounts in
ovl_do_(set|remove)xattr"
- Revert "UBUNTU: SAUCE: overlayfs: Skip permission checking for
trusted.overlayfs.* xattrs"
- SAUCE: overlayfs: default to userxattr when mounted from non initial user
namespace
* CVE-2023-35001
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
* CVE-2023-31248
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
* CVE-2023-3389
- io_uring/poll: serialize poll linked timer start with poll removal
* CVE-2023-3390
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
* CVE-2023-3090
- ipvlan:Fix out-of-bounds caused by unclear skb->cb
* CVE-2023-3269
- mm: introduce new 'lock_mm_and_find_vma()' page fault helper
- mm: make the page fault mmap locking killable
- arm64/mm: Convert to using lock_mm_and_find_vma()
- powerpc/mm: Convert to using lock_mm_and_find_vma()
- mips/mm: Convert to using lock_mm_and_find_vma()
- riscv/mm: Convert to using lock_mm_and_find_vma()
- arm/mm: Convert to using lock_mm_and_find_vma()
- mm/fault: convert remaining simple cases to lock_mm_and_find_vma()
- powerpc/mm: convert coprocessor fault to lock_mm_and_find_vma()
- mm: make find_extend_vma() fail if write lock not held
- execve: expand new process stack manually ahead of time
- mm: always expand the stack with the mmap write lock held
- [CONFIG]: Set CONFIG_LOCK_MM_AND_FIND_VMA
-- Stefan Bader <stefan.bader@canonical.com> Thu, 13 Jul 2023 15:22:42 +0200
linux-hwe-6.2 (6.2.0-25.25~22.04.2) jammy; urgency=medium
* jammy/linux-hwe-6.2: 6.2.0-25.25~22.04.2 -proposed tracker (LP: #2024539)
* Packaging resync (LP: #1786013)
- [Packaging] resync update-dkms-versions helper
[ Ubuntu: 6.2.0-25.25 ]
* lunar/linux: 6.2.0-25.25 -proposed tracker (LP: #2024167)
* ftrace in ubuntu_kernel_selftests failed with "check if duplicate events are
caught" on J-5.15 P9 / J-kvm / L-kvm (LP: #1977827)
- SAUCE: selftests/ftrace: Add test dependency
* Add microphone support of the front headphone port on P3 Tower
(LP: #2023650)
- ALSA: hda/realtek: Add Lenovo P3 Tower platform
* Add audio support for ThinkPad P1 Gen 6 and Z16 Gen 2 (LP: #2023539)
- ALSA: hda/realtek: Add quirk for ThinkPad P1 Gen 6
* Fix Disable thunderbolt clx make edp-monitor garbage while moving the
touchpad (LP: #2023004)
- drm/i915: Use 18 fast wake AUX sync len
* Fix Monitor lost after replug WD19TBS to SUT port with VGA/DVI to type-C
dongle (LP: #2021949)
- thunderbolt: Increase timeout of DP OUT adapter handshake
- thunderbolt: Do not touch CL state configuration during discovery
- thunderbolt: Increase DisplayPort Connection Manager handshake timeout
* Enable Tracing Configs for OSNOISE and TIMERLAT (LP: #2018591)
- [Config] Enable OSNOISE_TRACER and TIMERLAT_TRACER configs
* Fix only reach PC3 when ethernet is plugged r8169 (LP: #1946433)
- r8169: use spinlock to protect mac ocp register access
- r8169: use spinlock to protect access to registers Config2 and Config5
- r8169: enable cfg9346 config register access in atomic context
- r8169: prepare rtl_hw_aspm_clkreq_enable for usage in atomic context
- r8169: disable ASPM during NAPI poll
- r8169: remove ASPM restrictions now that ASPM is disabled during NAPI poll
* introduce do_lib_rust=true|false to enable/disable linux-lib-rust package
(LP: #2021605)
- [Packaging] introduce do_lib_rust and enable it only on generic amd64
* System either hang with black screen or rebooted on entering suspend on AMD
Ryzen 9 PRO 7940HS w/ Radeon 780M Graphics (LP: #2020685)
- drm/amdgpu: refine get gpu clock counter method
- drm/amdgpu/gfx11: update gpu_clock_counter logic
* generate linux-lib-rust only on amd64 (LP: #2020356)
- [Packaging] generate linux-lib-rust only on amd64
* No HDMI/DP audio output on dock(Nvidia GPU) (LP: #2020062)
- ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table
* Add support for mdev_set_iommu_device() kABI in Ubuntu 22.10 kernel
(LP: #1988806)
- SAUCE: Add mdev_set_iommu_device() kABI.
* Enable audio LEDs on HP laptops (LP: #2019915)
- ALSA: hda/realtek: Fix mute and micmute LEDs for an HP laptop
- ALSA: hda/realtek: Fix mute and micmute LEDs for yet another HP laptop
* linux-*: please enable dm-verity kconfigs to allow MoK/db verified root
images (LP: #2019040)
- [Config] CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG_SECONDARY_KEYRING=y
* Lunar update: v6.2.13 upstream stable release (LP: #2023929)
- ARM: dts: rockchip: fix a typo error for rk3288 spdif node
- arm64: dts: rockchip: Lower sd speed on rk3566-soquartz
- arm64: dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node
- arm64: dts: qcom: ipq8074-hk10: enable QMP device, not the PHY node
- arm64: dts: meson-g12-common: specify full DMC range
- arm64: dts: meson-g12-common: resolve conflict between canvas & pmu
- perf/amlogic: adjust register offsets
- arm64: dts: qcom: sc8280xp-pmics: fix pon compatible and registers
- arm64: dts: imx8mm-evk: correct pmic clock source
- arm64: dts: imx8mm-verdin: correct off-on-delay
- arm64: dts: imx8mp-verdin: correct off-on-delay
- netfilter: br_netfilter: fix recent physdev match breakage
- netfilter: nf_tables: Modify nla_memdup's flag to GFP_KERNEL_ACCOUNT
- rust: str: fix requierments->requirements typo
- regulator: fan53555: Explicitly include bits header
- regulator: fan53555: Fix wrong TCS_SLEW_MASK
- virtio_net: bugfix overflow inside xdp_linearize_page()
- sfc: Fix use-after-free due to selftest_work
- netfilter: nf_tables: fix ifdef to also consider nf_tables=m
- i40e: fix accessing vsi->active_filters without holding lock
- i40e: fix i40e_setup_misc_vector() error handling
- netfilter: nf_tables: validate catch-all set elements
- cxgb4: fix use after free bugs caused by circular dependency problem
- netfilter: nf_tables: tighten netlink attribute requirements for catch-all
elements
- bnxt_en: Do not initialize PTP on older P3/P4 chips
- mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next()
- LoongArch: Fix build error if CONFIG_SUSPEND is not set
- bonding: Fix memory leak when changing bond type to Ethernet
- net: rpl: fix rpl header size calculation
- mlxsw: pci: Fix possible crash during initialization
- spi: spi-rockchip: Fix missing unwind goto in rockchip_sfc_probe()
- bpf: Fix incorrect verifier pruning due to missing register precision taints
- net: dsa: microchip: ksz8795: Correctly handle huge frame configuration
- bnxt_en: fix free-runnig PHC mode
- e1000e: Disable TSO on i219-LM card to increase speed
- net: bridge: switchdev: don't notify FDB entries with "master dynamic"
- f2fs: Fix f2fs_truncate_partial_nodes ftrace event
- platform/x86/intel: vsec: Fix a memory leak in intel_vsec_add_aux
- platform/x86 (gigabyte-wmi): Add support for A320M-S2H V2
- selftests: sigaltstack: fix -Wuninitialized
- scsi: megaraid_sas: Fix fw_crash_buffer_show()
- scsi: core: Improve scsi_vpd_inquiry() checks
- net: dsa: b53: mmap: add phy ops
- platform/x86: gigabyte-wmi: add support for B650 AORUS ELITE AX
- s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
- drm: test: Fix 32-bit issue in drm_buddy_test
- nvme-tcp: fix a possible UAF when failing to allocate an io queue
- xen/netback: use same error messages for same errors
- platform/x86: gigabyte-wmi: add support for X570S AORUS ELITE
- platform/x86: asus-nb-wmi: Add quirk_asus_tablet_mode to other ROG Flow X13
models
- mtd: spi-nor: fix memory leak when using debugfs_lookup()
- pwm: Zero-initialize the pwm_state passed to driver's .get_state()
- Revert "userfaultfd: don't fail on unrecognized features"
- Revert "ACPICA: Events: Support fixed PCIe wake event"
- iio: dac: ad5755: Add missing fwnode_handle_put()
- iio: light: tsl2772: fix reading proximity-diodes from device tree
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
- btrfs: set default discard iops_limit to 1000
- btrfs: reinterpret async discard iops_limit=0 as no delay
- rust: kernel: Mark rust_fmt_argument as extern "C"
- LoongArch: module: set section addresses to 0x0
- LoongArch: Check unwind_error() in arch_stack_walk()
- LoongArch: Fix probing of the CRC32 feature
- LoongArch: Mark 3 symbol exports as non-GPL
- wifi: ath9k: Don't mark channelmap stack variable read-only in
ath9k_mci_update_wlan_channels()
- maple_tree: make maple state reusable after mas_empty_area_rev()
- maple_tree: fix mas_empty_area() search
- maple_tree: fix a potential memory leak, OOB access, or other unpredictable
bug
- ASoC: SOF: ipc4-topology: Clarify bind failure caused by missing fw_module
- nilfs2: initialize unused bytes in segment summary blocks
- mptcp: stops worker on unaccepted sockets at listener close
- mptcp: fix accept vs worker race
- tools/mm/page_owner_sort.c: fix TGID output when cull=tg is used
- memstick: fix memory leak if card device is never registered
- kernel/sys.c: fix and improve control flow in __sys_setres[ug]id()
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25
- drm/amdgpu: Fix desktop freezed after gpu-reset
- drm/amd/display: set dcn315 lb bpp to 48
- drm/rockchip: vop2: fix suspend/resume
- drm/rockchip: vop2: Use regcache_sync() to fix suspend/resume
- mm: fix memory leak on mm_init error handling
- mm/userfaultfd: fix uffd-wp handling for THP migration entries
- mm/khugepaged: check again on anon uffd-wp during isolation
- mm/huge_memory.c: warn with pr_warn_ratelimited instead of
VM_WARN_ON_ONCE_FOLIO
- mm: kmsan: handle alloc failures in kmsan_ioremap_page_range()
- mm: kmsan: handle alloc failures in kmsan_vmap_pages_range_noflush()
- mm: page_alloc: skip regions with hugetlbfs pages when allocating 1G pages
- mm/mmap: regression fix for unmapped_area{_topdown}
- cifs: avoid dup prefix path in dfs_get_automount_devname()
- KVM: arm64: Make vcpu flag updates non-preemptible
- KVM: arm64: Fix buffer overflow in kvm_arm_set_fw_reg()
- MIPS: Define RUNTIME_DISCARD_EXIT in LD script
- LoongArch: Make -mstrict-align configurable
- LoongArch: Make WriteCombine configurable for ioremap()
- purgatory: fix disabling debug info
- PCI/MSI: Remove over-zealous hardware size check in
pci_msix_validate_entries()
- [Config] updateconfigs for GCC12_NO_ARRAY_BOUNDS
- gcc: disable '-Warray-bounds' for gcc-13 too
- Input: cyttsp5 - fix sensing configuration data structure
- Input: pegasus-notetaker - check pipe type when probing
- iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger()
- fpga: bridge: properly initialize bridge device before populating children
- mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock
- ASoC: SOF: pm: Tear down pipelines only if DSP was active
- ASoC: fsl_asrc_dma: fix potential null-ptr-deref
- ASoC: fsl_sai: Fix pins setting for i.MX8QM platform
- ASN.1: Fix check for strdup() success
- Linux 6.2.13
* CVE-2023-2124
- xfs: verify buffer contents when we skip log replay
* cls_flower: off-by-one in fl_set_geneve_opt (LP: #2023577)
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
* Some INVLPG implementations can leave Global translations unflushed when
PCIDs are enabled (LP: #2023220)
- x86/mm: Avoid incomplete Global INVLPG flushes
* CVE-2023-2176
- RDMA/core: Refactor rdma_bind_addr
* support python < 3.9 with annotations (LP: #2020531)
- [Packaging] kconfig/annotations.py: support older way of merging dicts
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
- [Packaging] resync getabis
-- Luke Nowakowski-Krijger <luke.nowakowskikrijger@canonical.com> Tue, 27 Jun 2023 15:08:51 -0700
linux-hwe-6.2 (6.2.0-23.23~22.04.1) jammy; urgency=medium
* jammy/linux-hwe-6.2: 6.2.0-23.23~22.04.1 -proposed tracker (LP: #2021604)
* Packaging resync (LP: #1786013)
- [Packaging] update variants
- [Packaging] update Ubuntu.md
- [Packaging] resync getabis
- [Packaging] resync git-ubuntu-log
- [Packaging] enable rust only in the master kernel for amd64
* Revert variable symbol length modversion in all the jammy kernels
(LP: #2025134)
- Revert "UBUNTU: SAUCE: modpost: support arbitrary symbol length in
modversion"
[ Ubuntu: 6.2.0-23.23 ]
* lunar/linux: 6.2.0-23.23 -proposed tracker (LP: #2019845)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
- debian/dkms-versions -- update from kernel-versions (main/2023.05.15)
* Fix flicker display problem on some panels which support PSR2 (LP: #2002968)
- drm/i915/psr: Add continuous full frame bit together with single
* Kernel 6.1 bumped the disk consumption on default images by 15%
(LP: #2015867)
- [Packaging] introduce a separate linux-lib-rust package
* Update I915 PSR calculation on Linux 6.2 (LP: #2018655)
- drm/i915: Fix fast wake AUX sync len
- drm/i915: Explain the magic numbers for AUX SYNC/precharge length
* Computer with Intel Atom CPU will not boot with Kernel 6.2.0-20
(LP: #2017444)
- [Config]: Disable CONFIG_INTEL_ATOMISP
* udev fails to make prctl() syscall with apparmor=0 (as used by maas by
default) (LP: #2016908)
- SAUCE: (no-up) Stacking v38: Fix prctl() syscall with apparmor=0
* CVE-2023-32233
- netfilter: nf_tables: deactivate anonymous set from preparation phase
* CVE-2023-2612
- SAUCE: shiftfs: prevent lock unbalance in shiftfs_create_object()
* CVE-2023-31436
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
* CVE-2023-1380
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
* 5.19 not reporting cgroups v1 blkio.throttle.io_serviced (LP: #2016186)
- SAUCE: blk-throttle: Fix io statistics for cgroup v1
* LSM stacking and AppArmor for 6.2: additional fixes (LP: #2017903)
- SAUCE: (no-up) apparmor: fix policy_compat perms remap for file dfa
- SAUCE: (no-up) apparmor: fix profile verification and enable it
- SAUCE: (no-up) apparmor: fix: add missing failure check in
compute_xmatch_perms
- SAUCE: (no-up) apparmor: fix: kzalloc perms tables for shared dfas
* Lunar update: v6.2.12 upstream stable release (LP: #2017219)
- Revert "pinctrl: amd: Disable and mask interrupts on resume"
- drm/amd/display: Pass the right info to drm_dp_remove_payload
- drm/i915: Workaround ICL CSC_MODE sticky arming
- ALSA: emu10k1: fix capture interrupt handler unlinking
- ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard
- ALSA: i2c/cs8427: fix iec958 mixer control deactivation
- ALSA: hda: patch_realtek: add quirk for Asus N7601ZM
- ALSA: hda/realtek: Add quirks for Lenovo Z13/Z16 Gen2
- ALSA: firewire-tascam: add missing unwind goto in
snd_tscm_stream_start_duplex()
- ALSA: emu10k1: don't create old pass-through playback device on Audigy
- ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards
- ALSA: hda/hdmi: disable KAE for Intel DG2
- Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp}
- Bluetooth: Fix race condition in hidp_session_thread
- bluetooth: btbcm: Fix logic error in forming the board name.
- Bluetooth: Free potentially unfreed SCO connection
- Bluetooth: hci_conn: Fix possible UAF
- btrfs: restore the thread_pool= behavior in remount for the end I/O
workqueues
- btrfs: fix fast csum implementation detection
- fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace
- mtdblock: tolerate corrected bit-flips
- mtd: rawnand: meson: fix bitmask for length in command word
- mtd: rawnand: stm32_fmc2: remove unsupported EDO mode
- mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min
- KVM: arm64: PMU: Restore the guest's EL0 event counting after migration
- fbcon: Fix error paths in set_con2fb_map
- fbcon: set_con2fb_map needs to set con2fb_map!
- drm/i915/dsi: fix DSS CTL register offsets for TGL+
- io_uring: complete request via task work in case of DEFER_TASKRUN
- clk: sprd: set max_register according to mapping range
- RDMA/irdma: Do not generate SW completions for NOPs
- RDMA/irdma: Fix memory leak of PBLE objects
- RDMA/irdma: Increase iWARP CM default rexmit count
- RDMA/irdma: Add ipv4 check to irdma_find_listener()
- IB/mlx5: Add support for 400G_8X lane speed
- RDMA/erdma: Fix some typos
- RDMA/erdma: Update default EQ depth to 4096 and max_send_wr to 8192
- RDMA/erdma: Inline mtt entries into WQE if supported
- RDMA/erdma: Defer probing if netdevice can not be found
- clk: rs9: Fix suspend/resume
- RDMA/cma: Allow UD qp_type to join multicast only
- bpf: tcp: Use sock_gen_put instead of sock_put in bpf_iter_tcp
- LoongArch, bpf: Fix jit to skip speculation barrier opcode
- dmaengine: apple-admac: Handle 'global' interrupt flags
- dmaengine: apple-admac: Set src_addr_widths capability
- dmaengine: apple-admac: Fix 'current_tx' not getting freed
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race
condition
- bpf, arm64: Fixed a BTI error on returning to patched function
- KVM: arm64: Advertise ID_AA64PFR0_EL1.CSV2/3 to protected VMs
- niu: Fix missing unwind goto in niu_alloc_channels()
- tcp: restrict net.ipv4.tcp_app_win
- bonding: fix ns validation on backup slaves
- iavf: refactor VLAN filter states
- iavf: remove active_cvlans and active_svlans bitmaps
- net: openvswitch: fix race on port output
- Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure
- Bluetooth: Fix printing errors if LE Connection times out
- Bluetooth: SCO: Fix possible circular locking dependency sco_sock_getsockopt
- Bluetooth: Set ISO Data Path on broadcast sink
- drm/nouveau/fb: add missing sysmen flush callbacks
- drm/armada: Fix a potential double free in an error handling path
- qlcnic: check pci_reset_function result
- smc: Fix use-after-free in tcp_write_timer_handler().
- net: wwan: iosm: Fix error handling path in ipc_pcie_probe()
- cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex
- rtnetlink: Restore RTM_NEW/DELLINK notification behavior
- net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()
- sctp: fix a potential overflow in sctp_ifwdtsn_skip
- RDMA/core: Fix GID entry ref leak when create_ah fails
- selftests: openvswitch: adjust datapath NL message declaration
- udp6: fix potential access to stale information
- selftests: add the missing CONFIG_IP_SCTP in net config
- net: macb: fix a memory corruption in extended buffer descriptor mode
- skbuff: Fix a race between coalescing and releasing SKBs
- ARM: 9290/1: uaccess: Fix KASAN false-positives
- ARM: dts: qcom: apq8026-lg-lenok: add missing reserved memory
- arm64: dts: qcom: sa8540p-ride: correct name of remoteproc_nsp0 firmware
- power: supply: rk817: Fix unsigned comparison with less than zero
- power: supply: cros_usbpd: reclassify "default case!" as debug
- power: supply: axp288_fuel_gauge: Added check for negative values
- selftests/bpf: Fix progs/find_vma_fail1.c build error.
- wifi: mwifiex: mark OF related data as maybe unused
- i2c: imx-lpi2c: clean rx/tx buffers upon new message
- i2c: hisi: Avoid redundant interrupts
- efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L
- block: ublk_drv: mark device as LIVE before adding disk
- ACPI: video: Add backlight=native DMI quirk for Acer Aspire 3830TG
- drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F
- hwmon: (peci/cputemp) Fix miscalculated DTS for SKX
- hwmon: (xgene) Fix ioremap and memremap leak
- verify_pefile: relax wrapper length check
- asymmetric_keys: log on fatal failures in PE/pkcs7
- nvme: send Identify with CNS 06h only to I/O controllers
- wifi: iwlwifi: mvm: fix mvmtxq->stopped handling
- wifi: iwlwifi: mvm: protect TXQ list manipulation
- drm/amdgpu: add mes resume when do gfx post soft reset
- drm/amdgpu: Force signal hw_fences that are embedded in non-sched jobs
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
- ACPI: resource: Add Medion S17413 to IRQ override quirk
- tracing: Add trace_array_puts() to write into instance
- tracing: Have tracing_snapshot_instance_cond() write errors to the
appropriate instance
- maple_tree: fix write memory barrier of nodes once dead for RCU mode
- ksmbd: avoid out of bounds access in decode_preauth_ctxt()
- riscv: add icache flush for nommu sigreturn trampoline
- HID: intel-ish-hid: Fix kernel panic during warm reset
- net: sfp: initialize sfp->i2c_block_size at sfp allocation
- net: phy: nxp-c45-tja11xx: add remove callback
- net: phy: nxp-c45-tja11xx: fix unsigned long multiplication overflow
- scsi: ses: Handle enclosure with just a primary component gracefully
- thermal: intel: Avoid updating unsupported THERM_STATUS_CLEAR mask bits
- drm/amd/pm: correct the pcie link state check for SMU13
- PCI: Fix use-after-free in pci_bus_release_domain_nr()
- PCI/MSI: Provide missing stub for pci_msix_can_alloc_dyn()
- x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot
- cgroup: fix display of forceidle time at root
- cgroup/cpuset: Fix partition root's cpuset.cpus update bug
- cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach()
- cgroup/cpuset: Make cpuset_fork() handle CLONE_INTO_CGROUP properly
- cgroup/cpuset: Add cpuset_can_fork() and cpuset_cancel_fork() methods
- drm/amd/pm: correct SMU13.0.7 pstate profiling clock settings
- drm/amd/pm: correct SMU13.0.7 max shader clock reporting
- mptcp: use mptcp_schedule_work instead of open-coding it
- mptcp: stricter state check in mptcp_worker
- mptcp: fix NULL pointer dereference on fastopen early fallback
- selftests: mptcp: userspace pm: uniform verify events
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: Fix deadlock caused by recursively holding work_sem
- i2c: mchp-pci1xxxx: Update Timing registers
- powerpc/papr_scm: Update the NUMA distance table for the target node
- sched/fair: Fix imbalance overflow
- x86/rtc: Remove __init for runtime functions
- i2c: ocores: generate stop condition after timeout in polling mode
- cifs: fix negotiate context parsing
- nvme-pci: mark Lexar NM760 as IGNORE_DEV_SUBNQN
- nvme-pci: add NVME_QUIRK_BOGUS_NID for T-FORCE Z330 SSD
- Linux 6.2.12
* RFC: virtio and virtio-scsi should be built in (LP: #1685291)
- [Config] Mark CONFIG_SCSI_VIRTIO built-in
* Dell: Enable speaker mute hotkey LED indicator (LP: #2015972)
- platform/x86: dell-laptop: Register ctl-led for speaker-mute
* Debian autoreconstruct Fix restoration of execute permissions (LP: #2015498)
- [Debian] autoreconstruct - fix restoration of execute permissions
* Lost display on built-in monitor after suspend (LP: #2001599)
- drm/i915: Generalize the PPS vlv_pipe_check() stuff
- drm/i915: Try to use the correct power sequencer intiially on bxt/glk
- drm/i915: Extend dual PPS handlind for ICP+
- drm/i915: Reject unusable power sequencers
- drm/i915: Print the PPS registers using consistent format
- drm/i915: Fix whitespace
- drm/i915: Improve PPS debugs
* [SRU][Jammy] CONFIG_PCI_MESON is not enabled (LP: #2007745)
- [Config] arm64: Enable PCI_MESON module
* sched: cpumask: improve on cpumask_local_spread() locality (LP: #2008824)
- lib/find: introduce find_nth_and_andnot_bit
- cpumask: introduce cpumask_nth_and_andnot
- sched: add sched_numa_find_nth_cpu()
- cpumask: improve on cpumask_local_spread() locality
- lib/cpumask: reorganize cpumask_local_spread() logic
- sched/topology: Introduce sched_numa_hop_mask()
- sched/topology: Introduce for_each_numa_hop_mask()
- net/mlx5e: Improve remote NUMA preferences used for the IRQ affinity hints
- lib/cpumask: update comment for cpumask_local_spread()
- sched/topology: fix KASAN warning in hop_cmp()
* Fix E-star testing failure with RTK 8852BE (LP: #2012019)
- wifi: rtw89: 8852be: enable CLKREQ of PCI capability
- wifi: rtw89: release RX standby timer of beamformee CSI to save power
* vmd may fail to create sysfs entry while `pci_rescan_bus()` called in some
other drivers like wwan (LP: #2011389)
- SAUCE: PCI: vmd: guard device addition and removal
* Lunar update: v6.2.11 upstream stable release (LP: #2016879)
- dm cache: Add some documentation to dm-cache-background-tracker.h
- dm integrity: Remove bi_sector that's only used by commented debug code
- dm: change "unsigned" to "unsigned int"
- dm: fix improper splitting for abnormal bios
- drm/i915: Move the DSB setup/cleaup into the color code
- drm/i915: Add a .color_post_update() hook
- gpio: GPIO_REGMAP: select REGMAP instead of depending on it
- Drivers: vmbus: Check for channel allocation before looking up relids
- ASoC: SOF: ipc4: Ensure DSP is in D0I0 during sof_ipc4_set_get_data()
- pwm: hibvt: Explicitly set .polarity in .get_state()
- pwm: cros-ec: Explicitly set .polarity in .get_state()
- pwm: iqs620a: Explicitly set .polarity in .get_state()
- pwm: sprd: Explicitly set .polarity in .get_state()
- pwm: meson: Explicitly set .polarity in .get_state()
- ASoC: codecs: lpass: fix the order or clks turn off during suspend
- KVM: s390: pv: fix external interruption loop not always detected
- wifi: mac80211: fix the size calculation of ieee80211_ie_len_eht_cap()
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded
sta
- net: qrtr: Fix a refcount bug in qrtr_recvmsg()
- net: phylink: add phylink_expects_phy() method
- net: stmmac: check if MAC needs to attach to a PHY
- net: stmmac: remove redundant fixup to support fixed-link mode
- wifi: brcmfmac: Fix SDIO suspend/resume regression
- NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL
- nfsd: call op_release, even when op_func returns an error
- icmp: guard against too small mtu
- ALSA: hda/hdmi: Preserve the previous PCM device upon re-enablement
- net: don't let netpoll invoke NAPI if in xmit context
- net: dsa: mv88e6xxx: Reset mv88e6393x force WD event bit
- net: ethernet: mtk_eth_soc: fix remaining throughput regression
- sctp: check send stream number after wait_for_sndbuf
- drm/i915/huc: Cancel HuC delayed load timer on reset.
- net: qrtr: Do not do DEL_SERVER broadcast after DEL_CLIENT
- ipv6: Fix an uninit variable access bug in __ip6_make_skb()
- platform/x86: think-lmi: Fix memory leak when showing current settings
- platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI
strings
- platform/x86: think-lmi: Clean up display of current_value on Thinkstation
- gpio: davinci: Do not clear the bank intr enable bit in save_context
- gpio: davinci: Add irq chip flag to skip set wake
- net: ethernet: ti: am65-cpsw: Fix mdio cleanup in probe
- net: stmmac: fix up RX flow hash indirection table when setting channels
- sunrpc: only free unix grouplist after RCU settles
- NFSD: callback request does not use correct credential for AUTH_SYS
- ice: fix wrong fallback logic for FDIR
- ice: Reset FDIR counter in FDIR init stage
- raw: use net_hash_mix() in hash function
- raw: Fix NULL deref in raw_get_next().
- ping: Fix potentail NULL deref for /proc/net/icmp.
- ethtool: reset #lanes when lanes is omitted
- netlink: annotate lockless accesses to nlk->max_recvmsg_len
- gve: Secure enough bytes in the first TX desc for all TCP pkts
- arm64: compat: Work around uninitialized variable warning
- net: stmmac: check fwnode for phy device before scanning for phy
- cxl/pci: Fix CDAT retrieval on big endian
- cxl/pci: Handle truncated CDAT header
- cxl/pci: Handle truncated CDAT entries
- cxl/pci: Handle excessive CDAT length
- PCI/DOE: Silence WARN splat with CONFIG_DEBUG_OBJECTS=y
- PCI/DOE: Fix memory leak with CONFIG_DEBUG_OBJECTS=y
- Revert "usb: xhci-pci: Set PROBE_PREFER_ASYNCHRONOUS"
- usb: xhci: tegra: fix sleep in atomic call
- xhci: Free the command allocated for setting LPM if we return early
- xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu
- usb: cdnsp: Fixes error: uninitialized symbol 'len'
- usb: dwc3: pci: add support for the Intel Meteor Lake-S
- USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs
- usb: typec: altmodes/displayport: Fix configure initial pin assignment
- USB: serial: option: add Telit FE990 compositions
- USB: serial: option: add Quectel RM500U-CN modem
- drivers: iio: adc: ltc2497: fix LSB shift
- iio: adis16480: select CONFIG_CRC32
- iio: adc: qcom-spmi-adc5: Fix the channel name
- iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip
- iio: dac: cio-dac: Fix max DAC write value check for 12-bit
- iio: adc: max11410: fix read_poll_timeout() usage
- iio: accel: kionix-kx022a: Get the timestamp from the driver's private data
in the trigger_handler
- iio: buffer: correctly return bytes written in output buffers
- iio: buffer: make sure O_NONBLOCK is respected
- iio: light: cm32181: Unregister second I2C client if present
- iio: light: vcnl4000: Fix WARN_ON on uninitialized lock
- tty: serial: sh-sci: Fix transmit end interrupt handler
- tty: serial: sh-sci: Fix Rx on RZ/G2L SCI
- tty: serial: fsl_lpuart: avoid checking for transfer complete when
UARTCTRL_SBK is asserted in lpuart32_tx_empty
- tty: serial: fsl_lpuart: fix crash in lpuart_uport_is_active
- nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread()
- nilfs2: fix sysfs interface lifetime
- fsdax: dedupe should compare the min of two iters' length
- fsdax: unshare: zero destination if srcmap is HOLE or UNWRITTEN
- fsdax: force clear dirty mark if CoW
- dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs
- serial: 8250: Prevent starting up DMA Rx on THRI interrupt
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ALSA: hda/realtek: Add quirk for Clevo X370SNW
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
- x86/acpi/boot: Correct acpi_is_processor_usable() check
- x86/ACPI/boot: Use FADT version to check support for online capable
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception
injection
- KVM: nVMX: Do not report error code when synthesizing VM-Exit from Real Mode
- KVM: SVM: Flush Hyper-V TLB when required
- mm: kfence: fix PG_slab and memcg_data clearing
- mm: kfence: fix handling discontiguous page
- coresight: etm4x: Do not access TRCIDR1 for identification
- coresight-etm4: Fix for() loop drvdata->nr_addr_cmp range bug
- counter: 104-quad-8: Fix race condition between FLAG and CNTR reads
- counter: 104-quad-8: Fix Synapse action reported for Index signals
- blk-mq: directly poll requests
- ftrace: Mark get_lock_parent_ip() __always_inline
- ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct()
- fs: drop peer group ids under namespace lock
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access
- can: isotp: fix race between isotp_sendsmg() and isotp_release()
- can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events
- can: isotp: isotp_recvmsg(): use sock_recv_cmsgs() to get SOCK_RXQ_OVFL
infos
- ACPI: video: Add auto_detect arg to __acpi_video_get_backlight_type()
- ACPI: video: Make acpi_backlight=video work independent from GPU driver
- ACPI: video: Add acpi_backlight=video quirk for Apple iMac14,1 and iMac14,2
- ACPI: video: Add acpi_backlight=video quirk for Lenovo ThinkPad W530
- net: stmmac: Add queue reset into stmmac_xdp_open() function
- tracing/synthetic: Fix races on freeing last_cmd
- tracing/timerlat: Notify new max thread latency
- tracing/osnoise: Fix notify new tracing_max_latency
- tracing: Free error logs of tracing instances
- iommufd: Check for uptr overflow
- iommufd: Fix unpinning of pages when an access is present
- iommufd: Do not corrupt the pfn list when doing batch carry
- ASoC: hdac_hdmi: use set_stream() instead of set_tdm_slots()
- ASoC: SOF: avoid a NULL dereference with unsupported widgets
- iio: adc: ad7791: fix IRQ flags
- io_uring: fix return value when removing provided buffers
- io_uring: fix memory leak when removing provided buffers
- scsi: qla2xxx: Fix memory leak in qla2x00_probe_one()
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- nvme: fix discard support without oncs
- cifs: sanitize paths in cifs_update_super_prepath.
- block: ublk: make sure that block size is set correctly
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- perf: Optimize perf_pmu_migrate_context()
- perf/core: Fix the same task check in perf_event_set_output
- tracing/synthetic: Make lastcmd_mutex static
- zsmalloc: document freeable stats
- mm: vmalloc: avoid warn_alloc noise caused by fatal signal
- wifi: mt76: mt7921: fix fw used for offload check for mt7922
- wifi: mt76: ignore key disable commands
- ublk: read any SQE values upfront
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- drm/nouveau/disp: Support more modes by checking with lower bpc
- drm/i915: Fix context runtime accounting
- drm/i915: fix race condition UAF in i915_perf_add_config_ioctl
- ring-buffer: Fix race while reader and writer are on the same page
- mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()
- mm/hugetlb: fix uffd wr-protection for CoW optimization path
- maple_tree: fix get wrong data_end in mtree_lookup_walk()
- maple_tree: fix a potential concurrency bug in RCU mode
- drm/amd/display: Clear MST topology if it fails to resume
- drm/amdgpu: for S0ix, skip SDMA 5.x+ suspend/resume
- drm/amdgpu: skip psp suspend for IMU enabled ASICs mode2 reset
- drm/bridge: lt9611: Fix PLL being unable to lock
- mm: take a page reference when removing device exclusive entries
- maple_tree: remove GFP_ZERO from kmem_cache_alloc() and
kmem_cache_alloc_bulk()
- maple_tree: fix potential rcu issue
- maple_tree: reduce user error potential
- maple_tree: fix handle of invalidated state in mas_wr_store_setup()
- maple_tree: fix mas_prev() and mas_find() state handling
- maple_tree: be more cautious about dead nodes
- maple_tree: refine ma_state init from mas_start()
- maple_tree: detect dead nodes in mas_start()
- maple_tree: fix freeing of nodes in rcu mode
- maple_tree: remove extra smp_wmb() from mas_dead_leaves()
- maple_tree: add smp_rmb() to dead node detection
- maple_tree: add RCU lock checking to rcu callback functions
- mm: enable maple tree RCU mode by default.
- Linux 6.2.11
* Lunar update: v6.2.10 upstream stable release (LP: #2016878)
- thunderbolt: Limit USB3 bandwidth of certain Intel USB4 host routers
- cifs: update ip_addr for ses only for primary chan setup
- cifs: prevent data race in cifs_reconnect_tcon()
- cifs: avoid race conditions with parallel reconnects
- zonefs: Reorganize code
- zonefs: Simplify IO error handling
- zonefs: Reduce struct zonefs_inode_info size
- zonefs: Separate zone information from inode information
- zonefs: Fix error message in zonefs_file_dio_append()
- btrfs: rename BTRFS_FS_NO_OVERCOMMIT to BTRFS_FS_ACTIVE_ZONE_TRACKING
- btrfs: zoned: count fresh BG region as zone unusable
- btrfs: zoned: drop space_info->active_total_bytes
- fsverity: don't drop pagecache at end of FS_IOC_ENABLE_VERITY
- cifs: fix missing unload_nls() in smb2_reconnect()
- xfrm: Zero padding when dumping algos and encap
- ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds
- ASoC: Intel: avs: max98357a: Explicitly define codec format
- ASoC: Intel: avs: da7219: Explicitly define codec format
- ASoC: Intel: avs: rt5682: Explicitly define codec format
- ASoC: Intel: avs: ssm4567: Remove nau8825 bits
- ASoC: Intel: avs: nau8825: Adjust clock control
- lib: zstd: Backport fix for in-place decompression
- zstd: Fix definition of assert()
- ACPI: video: Add backlight=native DMI quirk for Dell Vostro 15 3535
- ACPI: x86: Introduce an acpi_quirk_skip_gpio_event_handlers() helper
- ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 7 B1-750
- ACPI: x86: Add skip i2c clients quirk for Lenovo Yoga Book X90
- ASoC: SOF: ipc3: Check for upper size limit for the received message
- ASoC: SOF: ipc4-topology: Fix incorrect sample rate print unit
- ASoC: SOF: Intel: pci-tng: revert invalid bar size setting
- ASoC: SOF: Intel: hda-dsp: harden D0i3 programming sequence
- ASoC: SOF: Intel: hda-ctrl: re-add sleep after entering and exiting reset
- ASoC: SOF: IPC4: update gain ipc msg definition to align with fw
- ASoC: hdmi-codec: only startup/shutdown on supported streams
- wifi: mac80211: check basic rates validity
- md: avoid signed overflow in slot_store()
- x86/PVH: obtain VGA console info in Dom0
- drm/amdkfd: Fix BO offset for multi-VMA page migration
- drm/amdkfd: fix a potential double free in pqm_create_queue
- drm/amdgpu/vcn: custom video info caps for sriov
- drm/amdkfd: fix potential kgd_mem UAFs
- drm/amd/display: Fix HDCP failing to enable after suspend
- net: hsr: Don't log netdev_err message on unknown prp dst node
- ALSA: asihpi: check pao in control_message()
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
- fbdev: tgafb: Fix potential divide by zero
- ACPI: tools: pfrut: Check if the input of level and type is in the right
numeric range
- sched_getaffinity: don't assume 'cpumask_size()' is fully initialized
- nvme-pci: fixing memory leak in probe teardown path
- nvme-pci: add NVME_QUIRK_BOGUS_NID for Lexar NM620
- drm/amdkfd: Fixed kfd_process cleanup on module exit.
- net/mlx5e: Lower maximum allowed MTU in XSK to match XDP prerequisites
- fbdev: nvidia: Fix potential divide by zero
- fbdev: intelfb: Fix potential divide by zero
- fbdev: lxfb: Fix potential divide by zero
- fbdev: au1200fb: Fix potential divide by zero
- tools/power turbostat: Fix /dev/cpu_dma_latency warnings
- tools/power turbostat: fix decoding of HWP_STATUS
- tracing: Fix wrong return in kprobe_event_gen_test.c
- btrfs: fix uninitialized variable warning in btrfs_update_block_group
- btrfs: use temporary variable for space_info in btrfs_update_block_group
- mtd: rawnand: meson: initialize struct with zeroes
- mtd: nand: mxic-ecc: Fix mxic_ecc_data_xfer_wait_for_completion() when irq
is used
- ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx()
- riscv/kvm: Fix VM hang in case of timer delta being zero.
- mips: bmips: BCM6358: disable RAC flush for TP1
- ALSA: usb-audio: Fix recursive locking at XRUN during syncing
- PCI: dwc: Fix PORT_LINK_CONTROL update when CDM check enabled
- platform/x86: think-lmi: add missing type attribute
- platform/x86: think-lmi: use correct possible_values delimiters
- platform/x86: think-lmi: only display possible_values if available
- platform/x86: think-lmi: Add possible_values for ThinkStation
- platform/surface: aggregator: Add missing fwnode_handle_put()
- mtd: rawnand: meson: invalidate cache on polling ECC bit
- SUNRPC: fix shutdown of NFS TCP client socket
- sfc: ef10: don't overwrite offload features at NIC reset
- scsi: megaraid_sas: Fix crash after a double completion
- scsi: mpt3sas: Don't print sense pool info twice
- net: dsa: realtek: fix out-of-bounds access
- ptp_qoriq: fix memory leak in probe()
- net: dsa: microchip: ksz8: fix ksz8_fdb_dump()
- net: dsa: microchip: ksz8: fix ksz8_fdb_dump() to extract all 1024 entries
- net: dsa: microchip: ksz8: fix offset for the timestamp filed
- net: dsa: microchip: ksz8: ksz8_fdb_dump: avoid extracting ghost entry from
empty dynamic MAC table.
- net: dsa: microchip: ksz8863_smi: fix bulk access
- net: dsa: microchip: ksz8: fix MDB configuration with non-zero VID
- r8169: fix RTL8168H and RTL8107E rx crc error
- regulator: Handle deferred clk
- net/net_failover: fix txq exceeding warning
- net: stmmac: don't reject VLANs when IFF_PROMISC is set
- drm/i915/pmu: Use functions common with sysfs to read actual freq
- drm/i915/tc: Fix the ICL PHY ownership check in TC-cold state
- drm/i915/perf: Drop wakeref on GuC RC error
- platform/x86/intel/pmc: Alder Lake PCH slp_s0_residency fix
- can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write
- s390/vfio-ap: fix memory leak in vfio_ap device driver
- ACPI: bus: Rework system-level device notification handling
- loop: LOOP_CONFIGURE: send uevents for partitions
- net: mvpp2: classifier flow fix fragmentation flags
- net: mvpp2: parser fix QinQ
- net: mvpp2: parser fix PPPoE
- smsc911x: avoid PHY being resumed when interface is not up
- ice: Fix ice_cfg_rdma_fltr() to only update relevant fields
- ice: add profile conflict check for AVF FDIR
- ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg()
- net: ethernet: mtk_eth_soc: fix tx throughput regression with direct 1G
links
- ALSA: ymfpci: Create card with device-managed snd_devm_card_new()
- ALSA: ymfpci: Fix BUG_ON in probe function
- net: wwan: iosm: fixes 7560 modem crash
- drm/nouveau/kms: Fix backlight registration
- net: ipa: compute DMA pool size properly
- bnx2x: use the right build_skb() helper
- i40e: fix registers dump after run ethtool adapter self test
- bnxt_en: Fix reporting of test result in ethtool selftest
- bnxt_en: Fix typo in PCI id to device description string mapping
- bnxt_en: Add missing 200G link speed reporting
- net: dsa: mv88e6xxx: Enable IGMP snooping on user ports only
- net: dsa: sync unicast and multicast addresses for VLAN filters too
- net: ethernet: mtk_eth_soc: fix flow block refcounting logic
- net: ethernet: mtk_eth_soc: fix L2 offloading with DSA untag offload
- net: ethernet: mtk_eth_soc: add missing ppe cache flush when deleting a flow
- pinctrl: ocelot: Fix alt mode for ocelot
- Input: xpad - fix incorrectly applied patch for MAP_PROFILE_BUTTON
- iommu/vt-d: Allow zero SAGAW if second-stage not supported
- Revert "venus: firmware: Correct non-pix start and end addresses"
- Input: i8042 - add TUXEDO devices to i8042 quirk tables for partial fix
- Input: alps - fix compatibility with -funsigned-char
- Input: focaltech - use explicitly signed char type
- cifs: prevent infinite recursion in CIFSGetDFSRefer()
- cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL
- Input: i8042 - add quirk for Fujitsu Lifebook A574/H
- Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table
- btrfs: fix deadlock when aborting transaction during relocation with scrub
- btrfs: fix race between quota disable and quota assign ioctls
- btrfs: scan device in non-exclusive mode
- btrfs: ignore fiemap path cache when there are multiple paths for a node
- zonefs: Do not propagate iomap_dio_rw() ENOTBLK error to user space
- io_uring/poll: clear single/double poll flags on poll arming
- io_uring/rsrc: fix rogue rsrc node grabbing
- io_uring: fix poll/netmsg alloc caches
- vmxnet3: use gro callback when UPT is enabled
- zonefs: Always invalidate last cached page on append write
- dm: fix __send_duplicate_bios() to always allow for splitting IO
- can: j1939: prevent deadlock by moving j1939_sk_errqueue()
- xen/netback: don't do grant copy across page boundary
- net: phy: dp83869: fix default value for tx-/rx-internal-delay
- modpost: Fix processing of CRCs on 32-bit build machines
- pinctrl: amd: Disable and mask interrupts on resume
- pinctrl: at91-pio4: fix domain name assignment
- platform/x86: ideapad-laptop: Stop sending KEY_TOUCHPAD_TOGGLE
- thermal: intel: int340x: processor_thermal: Fix additional deadlock
- powerpc: Don't try to copy PPR for task with NULL pt_regs
- powerpc/pseries/vas: Ignore VAS update for DLPAR if copy/paste is not
enabled
- powerpc/64s: Fix __pte_needs_flush() false positive warning
- NFSv4: Fix hangs when recovering open state after a server reboot
- ALSA: hda/conexant: Partial revert of a quirk for Lenovo
- ALSA: usb-audio: Fix regression on detection of Roland VS-100
- ALSA: hda/realtek: Add quirks for some Clevo laptops
- ALSA: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z
- xtensa: fix KASAN report for show_stack
- rcu: Fix rcu_torture_read ftrace event
- dt-bindings: mtd: jedec,spi-nor: Document CPOL/CPHA support
- s390/uaccess: add missing earlyclobber annotations to __clear_user()
- s390: reintroduce expoline dependence to scripts
- drm/etnaviv: fix reference leak when mmaping imported buffer
- drm/amdgpu: allow more APUs to do mode2 reset when go to S4
- drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub
- drm/amd/display: Take FEC Overhead into Timeslot Calculation
- drm/i915/gem: Flush lmem contents after construction
- drm/i915/dpt: Treat the DPT BO as a framebuffer
- drm/i915: Disable DC states for all commits
- drm/i915: Split icl_color_commit_noarm() from skl_color_commit_noarm()
- drm/i915: Move CSC load back into .color_commit_arm() when PSR is enabled on
skl/glk
- KVM: arm64: PMU: Fix GET_ONE_REG for vPMC regs to return the current value
- KVM: arm64: PMU: Don't save PMCR_EL0.{C,P} for the vCPU
- KVM: arm64: Retry fault if vma_lookup() results become invalid
- KVM: arm64: Disable interrupts while walking userspace PTs
- KVM: arm64: Check for kvm_vma_mte_allowed in the critical section
- usb: ucsi: Fix ucsi->connector race
- libbpf: Fix BTF-to-C converter's padding logic
- selftests/bpf: Add few corner cases to test padding handling of btf_dump
- libbpf: Fix btf_dump's packed struct determination
- drm/amdkfd: Get prange->offset after svm_range_vram_node_new
- hsr: ratelimit only when errors are printed
- x86/PVH: avoid 32-bit build warning when obtaining VGA console info
- Revert "cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*"
- Linux 6.2.10
* Lunar update: v6.2.9 upstream stable release (LP: #2016877)
- interconnect: qcom: osm-l3: fix icc_onecell_data allocation
- interconnect: qcom: sm8450: switch to qcom_icc_rpmh_* function
- interconnect: qcom: qcm2290: Fix MASTER_SNOC_BIMC_NRT
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in
perf_event_bpf_output
- perf: fix perf_event_context->time
- tracing/hwlat: Replace sched_setaffinity with set_cpus_allowed_ptr
- drm/amd/display: fix k1 k2 divider programming for phantom streams
- drm/amd/display: Remove OTG DIV register write for Virtual signals.
- drm/amd/display: Fix DP MST sinks removal issue
- arm64: dts: freescale: imx8-ss-lsio: Fix flexspi clock order
- arm64: dts: qcom: sc8280xp: Add label property to vadc channel nodes
- arm64: dts: qcom: sm6375: Add missing power-domain-named to CDSP
- arm64: dts: qcom: sm8450: correct WSA2 assigned clocks
- arm64: dts: qcom: sm8450: Mark UFS controller as cache coherent
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race
condition
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due
to race condition
- wifi: mt76: do not run mt76_unregister_device() on unregistered hw
- wifi: mt76: connac: do not check WED status for non-mmio devices
- efi: earlycon: Reprobe after parsing config tables
- arm64: dts: imx8dxl-evk: Disable hibernation mode of AR8031 for EQOS
- arm64: dts: imx8dxl-evk: Fix eqos phy reset gpio
- ARM: dts: imx6sll: e70k02: fix usbotg1 pinctrl
- ARM: dts: imx6sll: e60k02: fix usbotg1 pinctrl
- ARM: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl
- arm64: dts: imx8mn: specify #sound-dai-cells for SAI nodes
- arm64: dts: imx93: add missing #address-cells and #size-cells to i2c nodes
- NFS: Fix /proc/PID/io read_bytes for buffered reads
- xsk: Add missing overflow check in xdp_umem_reg
- iavf: fix inverted Rx hash condition leading to disabled hash
- iavf: fix non-tunneled IPv6 UDP packet type and hashing
- iavf: do not track VLAN 0 filters
- intel/igbvf: free irq on the error path in igbvf_request_msix()
- igbvf: Regard vf reset nack as success
- igc: fix the validation logic for taprio's gate list
- i2c: imx-lpi2c: check only for enabled interrupt flags
- i2c: mxs: ensure that DMA buffers are safe for DMA
- i2c: hisi: Only use the completion interrupt to finish the transfer
- scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate()
- nfsd: don't replace page in rq_pages if it's a continuation of last page
- net: dsa: b53: mmap: fix device tree support
- net: usb: smsc95xx: Limit packet length to skb->len
- qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- net: phy: Ensure state transitions are processed from phy_stop()
- net: mdio: fix owner field for mdio buses registered using device-tree
- net: mdio: fix owner field for mdio buses registered using ACPI
- net: stmmac: Fix for mismatched host/device DMA address width
- thermal/drivers/mellanox: Use generic thermal_zone_get_trip() function
- mlxsw: core_thermal: Fix fan speed in maximum cooling state
- drm/i915/fbdev: lock the fbdev obj before vma pin
- drm/i915/mtl: Disable MC6 for MTL A step
- drm/i915/guc: Rename GuC register state capture node to be more obvious
- drm/i915/guc: Fix missing ecodes
- drm/i915/gt: perform uc late init after probe error injection
- drm/i915: Fix format for perf_limit_reasons
- drm/i915: Update vblank timestamping stuff on seamless M/N change
- net: dsa: report rx_bytes unadjusted for ETH_HLEN
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: usb: lan78xx: Limit packet length to skb->len
- net/ps3_gelic_net: Fix RX sk_buff length
- net/ps3_gelic_net: Use dma_mapping_error
- octeontx2-vf: Add missing free for alloc_percpu
- bootconfig: Fix testcase to increase max node
- keys: Do not cache key in task struct if key is requested from kernel thread
- ice: check if VF exists before mode check
- iavf: fix hang on reboot with ice
- i40e: fix flow director packet filter programming
- bpf: Adjust insufficient default bpf_jit_limit
- net/mlx5e: Set uplink rep as NETNS_LOCAL
- net/mlx5e: Block entering switchdev mode with ns inconsistency
- net/mlx5: Fix steering rules cleanup
- net/mlx5e: Overcome slow response for first macsec ASO WQE
- net/mlx5: Read the TC mapping of all priorities on ETS query
- net/mlx5: E-Switch, Fix an Oops in error handling code
- net: dsa: tag_brcm: legacy: fix daisy-chained switches
- atm: idt77252: fix kmemleak when rmmod idt77252
- erspan: do not use skb_mac_header() in ndo_start_xmit()
- net: mscc: ocelot: fix stats region batching
- net/sonic: use dma_mapping_error() for error check
- nvme-tcp: fix nvme_tcp_term_pdu to match spec
- mlxsw: spectrum_fid: Fix incorrect local port type
- hvc/xen: prevent concurrent accesses to the shared ring
- ksmbd: add low bound validation to FSCTL_SET_ZERO_DATA
- ksmbd: add low bound validation to FSCTL_QUERY_ALLOCATED_RANGES
- ksmbd: fix possible refcount leak in smb2_open()
- Bluetooth: hci_sync: Resume adv with no RPA when active scan
- Bluetooth: hci_core: Detect if an ACL packet is in fact an ISO packet
- Bluetooth: btusb: Remove detection of ISO packets over bulk
- Bluetooth: ISO: fix timestamped HCI ISO data packet parsing
- Bluetooth: Remove "Power-on" check from Mesh feature
- gve: Cache link_speed value from device
- net: asix: fix modprobe "sysfs: cannot create duplicate filename"
- net: dsa: mt7530: move enabling disabling core clock to mt7530_pll_setup()
- net: dsa: mt7530: move lowering TRGMII driving to mt7530_setup()
- net: dsa: mt7530: move setting ssc_delta to PHY_INTERFACE_MODE_TRGMII case
- net: mdio: thunder: Add missing fwnode_handle_put()
- efi/libstub: Use relocated version of kernel's struct screen_info
- drm/amd/display: Set dcn32 caps.seamless_odm
- Bluetooth: btqcomsmd: Fix command timeout after setting BD address
- Bluetooth: L2CAP: Fix responding with wrong PDU type
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished
work
- Bluetooth: mgmt: Fix MGMT add advmon with RSSI command
- Bluetooth: HCI: Fix global-out-of-bounds
- platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl
- entry: Fix noinstr warning in __enter_from_user_mode()
- perf/x86/amd/core: Always clear status for idx
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- hwmon: fix potential sensor registration fail if of_node is missing
- hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs
- scsi: qla2xxx: Synchronize the IOCB count to be in order
- scsi: qla2xxx: Perform lockless command completion in abort path
- smb3: lower default deferred close timeout to address perf regression
- smb3: fix unusable share after force unmount failure
- uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2
- thunderbolt: Use scale field when allocating USB3 bandwidth
- thunderbolt: Call tb_check_quirks() after initializing adapters
- thunderbolt: Add quirk to disable CLx
- thunderbolt: Fix memory leak in margining
- thunderbolt: Disable interrupt auto clear for rings
- thunderbolt: Add missing UNSET_INBOUND_SBTX for retimer access
- thunderbolt: Use const qualifier for `ring_interrupt_index`
- thunderbolt: Rename shadowed variables bit to interrupt_bit and
auto_clear_bit
- ASoC: amd: yp: Add OMEN by HP Gaming Laptop 16z-n000 to quirks
- ASoC: Intel: sof_rt5682: Add quirk for Rex board with mx98360a amplifier
- ASoC: amd: yc: Add DMI entries to support HP OMEN 16-n0xxx (8A43)
- ACPI: x86: Drop quirk for HP Elitebook
- ACPI: x86: utils: Add Cezanne to the list for forcing StorageD3Enable
- riscv: Bump COMMAND_LINE_SIZE value to 1024
- drm/cirrus: NULL-check pipe->plane.state->fb in cirrus_pipe_update()
- HID: cp2112: Fix driver not registering GPIO IRQ chip as threaded
- ca8210: fix mac_len negative array access
- HID: logitech-hidpp: Add support for Logitech MX Master 3S mouse
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- m68k: mm: Fix systems with memory at end of 32-bit address space
- m68k: Only force 030 bus error if PC not in exception table
- selftests/bpf: check that modifier resolves after pointer
- cpumask: fix incorrect cpumask scanning result checks
- scsi: target: iscsi: Fix an error message in iscsi_check_key()
- scsi: qla2xxx: Add option to disable FC2 Target support
- scsi: hisi_sas: Check devm_add_action() return value
- scsi: ufs: core: Add soft dependency on governor_simpleondemand
- scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read()
- scsi: lpfc: Avoid usage of list iterator variable after loop
- scsi: mpi3mr: Driver unload crashes host when enhanced logging is enabled
- scsi: mpi3mr: Wait for diagnostic save during controller init
- scsi: mpi3mr: NVMe command size greater than 8K fails
- scsi: mpi3mr: Bad drive in topology results kernel crash
- scsi: storvsc: Handle BlockSize change in Hyper-V VHD/VHDX file
- platform/x86: int3472: Add GPIOs to Surface Go 3 Board data
- net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990
- net: usb: qmi_wwan: add Telit 0x1080 composition
- drm/amd/display: Update clock table to include highest clock setting
- sh: sanitize the flags on sigreturn
- drm/amdgpu: Fix call trace warning and hang when removing amdgpu device
- drm/amd: Fix initialization mistake for NBIO 7.3.0
- net/sched: act_mirred: better wording on protection against excessive stack
growth
- act_mirred: use the backlog for nested calls to mirred ingress
- cifs: lock chan_lock outside match_session
- cifs: append path to open_enter trace event
- cifs: do not poll server interfaces too regularly
- cifs: empty interface list when server doesn't support query interfaces
- cifs: dump pending mids for all channels in DebugData
- cifs: print session id while listing open files
- cifs: fix dentry lookups in directory handle cache
- x86/mm: Do not shuffle CPU entry areas without KASLR
- x86/fpu/xstate: Prevent false-positive warning in __copy_xstate_uabi_buf()
- selftests/x86/amx: Add a ptrace test
- scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR
- usb: misc: onboard-hub: add support for Microchip USB2517 USB 2.0 hub
- usb: dwc2: fix a race, don't power off/on phy for dual-role mode
- usb: dwc2: drd: fix inconsistent mode if role-switch-default-mode="host"
- usb: dwc2: fix a devres leak in hw_enable upon suspend resume
- block/io_uring: pass in issue_flags for uring_cmd task_work handling
- usb: gadget: u_audio: don't let userspace block driver unbind
- btrfs: zoned: fix btrfs_can_activate_zone() to support DUP profile
- Bluetooth: Fix race condition in hci_cmd_sync_clear
- efi: sysfb_efi: Fix DMI quirks not working for simpledrm
- mm/slab: Fix undefined init_cache_node_node() for NUMA and !SMP
- efi/libstub: zboot: Mark zboot EFI application as NX compatible
- arm64: efi: Set NX compat flag in PE/COFF header
- fscrypt: destroy keyring after security_sb_delete()
- fsverity: Remove WQ_UNBOUND from fsverity read workqueue
- lockd: set file_lock start and end when decoding nlm4 testargs
- arm64: dts: imx8mm-nitrogen-r2: fix WM8960 clock name
- igb: revert rtnl_lock() that causes deadlock
- dm thin: fix deadlock when swapping to thin device
- usb: typec: tcpm: fix create duplicate source-capabilities file
- usb: typec: tcpm: fix warning when handle discover_identity message
- usb: cdns3: Fix issue with using incorrect PCI device function
- usb: cdnsp: Fixes issue with redundant Status Stage
- usb: cdnsp: changes PCI Device ID to fix conflict with CNDS3 driver
- usb: chipdea: core: fix return -EINVAL if request role is the same with
current role
- usb: chipidea: core: fix possible concurrent when switch role
- usb: dwc3: gadget: Add 1ms delay after end transfer command without IOC
- usb: ucsi: Fix NULL pointer deref in ucsi_connector_change()
- usb: ucsi_acpi: Increase the command completion timeout
- mm: kfence: fix using kfence_metadata without initialization in
show_object()
- kfence: avoid passing -g for test
- io_uring/net: avoid sending -ECONNABORTED on repeated connection requests
- io_uring/rsrc: fix null-ptr-deref in io_file_bitmap_get()
- Revert "kasan: drop skip_kasan_poison variable in free_pages_prepare"
- kcsan: avoid passing -g for test
- test_maple_tree: add more testing for mas_empty_area()
- maple_tree: fix mas_skip_node() end slot detection
- ksmbd: fix wrong signingkey creation when encryption is AES256
- ksmbd: set FILE_NAMED_STREAMS attribute in FS_ATTRIBUTE_INFORMATION
- ksmbd: don't terminate inactive sessions after a few seconds
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect
- ksmbd: return unsupported error on smb1 mount
- wifi: mac80211: fix qos on mesh interfaces
- wifi: mac80211: Serialize ieee80211_handle_wake_tx_queue()
- nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy()
- drm/bridge: lt8912b: return EPROBE_DEFER if bridge is not found
- drm/amd/display: fix wrong index used in dccg32_set_dpstreamclk
- drm/meson: fix missing component unbind on bind errors
- drm/amdgpu/nv: Apply ASPM quirk on Intel ADL + AMD Navi
- drm/i915/active: Fix missing debug object activation
- drm/i915: Preserve crtc_state->inherited during state clearing
- drm/amdgpu: skip ASIC reset for APUs when go to S4
- drm/amdgpu: reposition the gpu reset checking for reuse
- riscv: mm: Fix incorrect ASID argument when flushing TLB
- riscv: Handle zicsr/zifencei issues between clang and binutils
- tee: amdtee: fix race condition in amdtee_open_session
- firmware: arm_scmi: Fix device node validation for mailbox transport
- arm64: dts: qcom: sc8280xp-x13s: mark s11b regulator as always-on
- arm64: dts: qcom: sc7280: Mark PCIe controller as cache coherent
- arm64: dts: qcom: sm8150: Fix the iommu mask used for PCIe controllers
- soc: qcom: llcc: Fix slice configuration values for SC8280XP
- mm/ksm: fix race with VMA iteration and mm_struct teardown
- bus: imx-weim: fix branch condition evaluates to a garbage value
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- dm stats: check for and propagate alloc_percpu failure
- dm crypt: add cond_resched() to dmcrypt_write()
- dm crypt: avoid accessing uninitialized tasklet
- sched/fair: sanitize vruntime of entity being placed
- sched/fair: Sanitize vruntime of entity being migrated
- Linux 6.2.9
- [Config] ppc64: updateconfigs following v6.2.9 stable updates
* Lunar update: v6.2.8 upstream stable release (LP: #2016876)
- xfrm: Allow transport-mode states with AF_UNSPEC selector
- drm/virtio: Pass correct device to dma_sync_sgtable_for_device()
- drm/msm/gem: Prevent blocking within shrinker loop
- drm/panfrost: Don't sync rpm suspension after mmu flushing
- fbdev: chipsfb: Fix error codes in chipsfb_pci_init()
- cifs: Move the in_send statistic to __smb_send_rqst()
- drm/meson: fix 1px pink line on GXM when scaling video overlay
- clk: HI655X: select REGMAP instead of depending on it
- selftests: amd-pstate: fix TEST_FILES
- ASoC: SOF: Intel: MTL: Fix the device description
- ASoC: SOF: Intel: HDA: Fix device description
- ASoC: SOF: Intel: SKL: Fix device description
- ASOC: SOF: Intel: pci-tgl: Fix device description
- ASoC: SOF: ipc4-topology: set dmic dai index from copier
- docs: Correct missing "d_" prefix for dentry_operations member
d_weak_revalidate
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpi3mr: Fix throttle_groups memory leak
- scsi: mpi3mr: Fix config page DMA memory leak
- scsi: mpi3mr: Fix mpi3mr_hba_port memory leak in mpi3mr_remove()
- scsi: mpi3mr: Fix sas_hba.phy memory leak in mpi3mr_remove()
- scsi: mpi3mr: Return proper values for failures in firmware init path
- scsi: mpi3mr: Fix memory leaks in mpi3mr_init_ioc()
- scsi: mpi3mr: ioctl timeout when disabling/enabling interrupt
- scsi: mpi3mr: Fix expander node leak in mpi3mr_remove()
- ALSA: hda: Match only Intel devices with CONTROLLER_IN_GPU()
- netfilter: nft_nat: correct length for loading protocol registers
- netfilter: nft_masq: correct length for loading protocol registers
- netfilter: nft_redir: correct length for loading protocol registers
- netfilter: nft_redir: correct value of inet type `.maxattrs`
- scsi: core: Add BLIST_NO_VPD_SIZE for some VDASD
- scsi: core: Fix a procfs host directory removal regression
- ftrace,kcfi: Define ftrace_stub_graph conditionally
- tcp: tcp_make_synack() can be called from process context
- vdpa/mlx5: should not activate virtq object when suspended
- wifi: nl80211: fix NULL-ptr deref in offchan check
- wifi: cfg80211: fix MLO connection ownership
- selftests: fix LLVM build for i386 and x86_64
- nfc: pn533: initialize struct pn533_out_arg properly
- ipvlan: Make skb->skb_iif track skb->dev for l3s mode
- i40e: Fix kernel crash during reboot when adapter is in recovery mode
- vhost-vdpa: free iommu domain after last use during cleanup
- vdpa_sim: not reset state in vdpasim_queue_ready
- vdpa_sim: set last_used_idx as last_avail_idx in vdpasim_queue_ready
- PCI: s390: Fix use-after-free of PCI resources with per-function hotplug
- bnxt_en: reset PHC frequency in free-running mode
- net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler()
- qed/qed_dev: guard against a possible division by zero
- net: dsa: mt7530: remove now incorrect comment regarding port 5
- net: dsa: mt7530: set PLL frequency and trgmii only when trgmii is used
- block: do not reverse request order when flushing plug list
- loop: Fix use-after-free issues
- blk-mq: fix "bad unlock balance detected" on q->srcu in
__blk_mq_run_dispatch_ops
- net: tunnels: annotate lockless accesses to dev->needed_headroom
- net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails
- tcp: Fix bind() conflict check for dual-stack wildcard address.
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- mlxsw: spectrum: Fix incorrect parsing depth after reload
- net/smc: fix deadlock triggered by cancel_delayed_work_syn()
- net: usb: smsc75xx: Limit packet length to skb->len
- net: ethernet: mtk_eth_soc: reset PCS state
- net: ethernet: mtk_eth_soc: only write values if needed
- drm/bridge: Fix returned array size name for atomic_get_input_bus_fmts kdoc
- powerpc/mm: Fix false detection of read faults
- block: null_blk: Fix handling of fake timeout request
- nvme: fix handling single range discard request
- nvmet: avoid potential UAF in nvmet_req_complete()
- block: sunvdc: add check for mdesc_grab() returning NULL
- block: count 'ios' and 'sectors' when io is done for bio-based device
- net/mlx5e: Fix macsec ASO context alignment
- net/mlx5e: Don't cache tunnel offloads capability
- net/mlx5: Fix setting ec_function bit in MANAGE_PAGES
- net/mlx5: Disable eswitch before waiting for VF pages
- net/mlx5: E-switch, Fix wrong usage of source port rewrite in split rules
- net/mlx5: E-switch, Fix missing set of split_count when forward to ovs
internal port
- net/mlx5e: Fix cleanup null-ptr deref on encap lock
- net/mlx5: Set BREAK_FW_WAIT flag first when removing driver
- veth: Fix use after free in XDP_REDIRECT
- ice: xsk: disable txq irq before flushing hw
- net: dsa: don't error out when drivers return ETH_DATA_LEN in
.port_max_mtu()
- net: dsa: mv88e6xxx: fix max_mtu of 1492 on 6165, 6191, 6220, 6250, 6290
- ravb: avoid PHY being resumed when interface is not up
- sh_eth: avoid PHY being resumed when interface is not up
- ipv4: Fix incorrect table ID in IOCTL path
- net: usb: smsc75xx: Move packet length check to prevent kernel panic in
skb_pull
- net: atlantic: Fix crash when XDP is enabled but no program is loaded
- net/iucv: Fix size of interrupt data
- i825xx: sni_82596: use eth_hw_addr_set()
- qed/qed_mng_tlv: correctly zero out ->min instead of ->hour
- net: dsa: microchip: fix RGMII delay configuration on
KSZ8765/KSZ8794/KSZ8795
- ethernet: sun: add check for the mdesc_grab()
- net: renesas: rswitch: Rename rings in struct rswitch_gwca_queue
- net: renesas: rswitch: Fix the output value of quote from rswitch_rx()
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- hwmon: (adt7475) Display smoothing attributes in correct order
- hwmon: (adt7475) Fix masking of hysteresis registers
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race
condition
- hwmon: (ina3221) return prober error code
- hwmon: (ucd90320) Add minimum delay between bus accesses
- hwmon: tmp512: drop of_match_ptr for ID table
- kconfig: Update config changed flag before calling callback
- hwmon: (adm1266) Set `can_sleep` flag for GPIO chip
- hwmon: (ltc2992) Set `can_sleep` flag for GPIO chip
- media: m5mols: fix off-by-one loop termination error
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix task hung in ext4_xattr_delete_inode
- drm/amdkfd: Fix an illegal memory access
- net/9p: fix bug in client create for .L
- LoongArch: Only call get_timer_irq() once in constant_clockevent_init()
- sh: intc: Avoid spurious sizeof-pointer-div warning
- drm/amdgpu: fix ttm_bo calltrace warning in psp_hw_fini
- drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes
- ext4: fix possible double unlock when moving a directory
- Revert "tty: serial: fsl_lpuart: adjust SERIAL_FSL_LPUART_CONSOLE config
dependency"
- tty: serial: fsl_lpuart: fix race on RX DMA shutdown
- tty: serial: fsl_lpuart: skip waiting for transmission complete when
UARTCTRL_SBK is asserted
- serial: 8250_em: Fix UART port type
- serial: 8250_fsl: fix handle_irq locking
- serial: 8250: ASPEED_VUART: select REGMAP instead of depending on it
- firmware: xilinx: don't make a sleepable memory allocation from an atomic
context
- memory: tegra: fix interconnect registration race
- memory: tegra20-emc: fix interconnect registration race
- memory: tegra124-emc: fix interconnect registration race
- memory: tegra30-emc: fix interconnect registration race
- drm/ttm: Fix a NULL pointer dereference
- s390/ipl: add missing intersection check to ipl_report handling
- interconnect: fix icc_provider_del() error handling
- interconnect: fix provider registration API
- interconnect: imx: fix registration race
- interconnect: fix mem leak when freeing nodes
- interconnect: qcom: osm-l3: fix registration race
- interconnect: qcom: rpm: fix probe child-node error handling
- interconnect: qcom: rpm: fix registration race
- interconnect: qcom: rpmh: fix probe child-node error handling
- interconnect: qcom: rpmh: fix registration race
- interconnect: qcom: msm8974: fix registration race
- interconnect: exynos: fix node leak in probe PM QoS error path
- interconnect: exynos: fix registration race
- md: select BLOCK_LEGACY_AUTOLOAD
- cifs: generate signkey for the channel that's reconnecting
- tracing: Make splice_read available again
- tracing: Do not let histogram values have some modifiers
- tracing: Check field value in hist_field_name()
- tracing: Make tracepoint lockdep check actually test something
- cifs: Fix smb2_set_path_size()
- cifs: set DFS root session in cifs_get_smb_ses()
- cifs: fix use-after-free bug in refresh_cache_worker()
- cifs: return DFS root session id in DebugData
- cifs: use DFS root session instead of tcon ses
- KVM: SVM: Fix a benign off-by-one bug in AVIC physical table mask
- KVM: SVM: Modify AVIC GATag to support max number of 512 vCPUs
- ALSA: hda: intel-dsp-config: add MTL PCI id
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro
- Revert "riscv: mm: notify remote harts about mmu cache updates"
- riscv: asid: Fixup stale TLB entry cause application crash
- drm/edid: fix info leak when failing to get panel id
- drm/shmem-helper: Remove another errant put in error path
- drm/sun4i: fix missing component unbind on bind errors
- drm/i915/active: Fix misuse of non-idle barriers as fence trackers
- drm/i915/dg2: Add HDMI pixel clock frequencies 267.30 and 319.89 MHz
- drm/amdgpu: Don't resume IOMMU after incomplete init
- drm/amd/pm: Fix sienna cichlid incorrect OD volage after resume
- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
- drm/amd/pm: bump SMU 13.0.4 driver_if header version
- drm/amd/display: Do not set DRR on pipe Commit
- drm/amd/display: disconnect MPCC only on OTG change
- drm/amd/display: Write to correct dirty_rect
- mptcp: fix possible deadlock in subflow_error_report
- mptcp: refactor passive socket initialization
- mptcp: use the workqueue to destroy unaccepted sockets
- mptcp: fix UaF in listener shutdown
- mptcp: add ro_after_init for tcp{,v6}_prot_override
- mptcp: avoid setting TCP_CLOSE state twice
- mptcp: fix lockdep false positive in mptcp_pm_nl_create_listen_socket()
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- ocfs2: fix data corruption after failed write
- nvme-pci: add NVME_QUIRK_BOGUS_NID for Netac NV3000
- ice: avoid bonding causing auxiliary plug/unplug under RTNL lock
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- mm/userfaultfd: propagate uffd-wp bit when PTE-mapping the huge zeropage
- mm: teach mincore_hugetlb about pte markers
- powerpc/64: Set default CPU in Kconfig
- powerpc/boot: Don't always pass -mcpu=powerpc when building 32-bit uImage
- mmc: sdhci_am654: lower power-on failed message severity
- fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks
- trace/hwlat: Do not wipe the contents of per-cpu thread data
- trace/hwlat: Do not start per-cpu thread if it is already running
- ACPI: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent
- net: phy: nxp-c45-tja11xx: fix MII_BASIC_CONFIG_REV bit
- fbdev: Fix incorrect page mapping clearance at fb_deferred_io_release()
- RISC-V: mm: Support huge page in vmalloc_fault()
- io_uring/msg_ring: let target know allocated index
- cpuidle: psci: Iterate backwards over list in psci_pd_remove()
- ASoC: Intel: soc-acpi: fix copy-paste issue in topology names
- ASoC: qcom: q6prm: fix incorrect clk_root passed to ADSP
- x86/mce: Make sure logged MCEs are processed after sysfs update
- x86/mm: Fix use of uninitialized buffer in sme_enable()
- x86/resctrl: Clear staged_config[] before and after it is used
- powerpc: Pass correct CPU reference to assembler
- virt/coco/sev-guest: Check SEV_SNP attribute at probe time
- virt/coco/sev-guest: Simplify extended guest request handling
- virt/coco/sev-guest: Remove the disable_vmpck label in
handle_guest_request()
- virt/coco/sev-guest: Carve out the request issuing logic into a helper
- virt/coco/sev-guest: Do some code style cleanups
- virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case
- virt/coco/sev-guest: Add throttling awareness
- perf: Fix check before add_event_to_groups() in perf_group_detach()
- powerpc: Disable CPU unknown by CLANG when CC_IS_CLANG
- powerpc/64: Replace -mcpu=e500mc64 by -mcpu=e5500
- Linux 6.2.8
- [Config] ppc64: updateconfigs following v6.2.8 stable updates
* Lunar update: v6.2.8 upstream stable release (LP: #2016876) //
CVE-2023-30456
- KVM: nVMX: add missing consistency checks for CR0 and CR4
* Lunar update: v6.2.7 upstream stable release (LP: #2016875)
- fs: prevent out-of-bounds array speculation when closing a file descriptor
- btrfs: fix unnecessary increment of read error stat on write error
- btrfs: fix percent calculation for bg reclaim message
- btrfs: fix block group item corruption after inserting new block group
- io_uring/uring_cmd: ensure that device supports IOPOLL
- erofs: fix wrong kunmap when using LZMA on HIGHMEM platforms
- perf inject: Fix --buildid-all not to eat up MMAP2
- fork: allow CLONE_NEWTIME in clone3 flags
- RISC-V: Stop emitting attributes
- thermal: intel: int340x: processor_thermal: Fix deadlock
- x86/CPU/AMD: Disable XSAVES on AMD family 0x17
- drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc15
- drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc21
- drm/amdgpu: fix error checking in amdgpu_read_mm_registers for nv
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
- drm/connector: print max_requested_bpc in state debugfs
- drm/msm/adreno: fix runtime PM imbalance at unbind
- staging: rtl8723bs: Fix key-store index handling
- staging: rtl8723bs: Pass correct parameters to cfg80211_get_bss()
- ext4: fix cgroup writeback accounting with fs-layer encryption
- ext4: fix RENAME_WHITEOUT handling for inline directories
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- ext4: move where set the MAY_INLINE_DATA flag is set
- ext4: fix WARNING in ext4_update_inline_data
- ext4: zero i_disksize when initializing the bootloader inode
- HID: core: Provide new max_buffer_size attribute to over-ride the default
- HID: uhid: Over-ride the default maximum data buffer value with our own
- nfc: change order inside nfc_se_io error path
- KVM: VMX: Reset eVMCS controls in VP assist page during hardware disabling
- KVM: VMX: Don't bother disabling eVMCS static key on module exit
- KVM: x86: Move guts of kvm_arch_init() to standalone helper
- KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace
- udf: Fix off-by-one error when discarding preallocation
- bus: mhi: ep: Power up/down MHI stack during MHI RESET
- bus: mhi: ep: Change state_lock to mutex
- drm/i915: Introduce intel_panel_init_alloc()
- drm/i915: Do panel VBT init early if the VBT declares an explicit panel type
- drm/i915: Populate encoder->devdata for DSI on icl+
- block: Revert "block: Do not reread partition table on exclusively open
device"
- block: fix scan partition for exclusively open device again
- riscv: Add header include guards to insn.h
- scsi: core: Remove the /proc/scsi/${proc_name} directory earlier
- ext4: Fix possible corruption when moving a directory
- drm/nouveau/kms/nv50: fix nv50_wndw_new_ prototype
- drm/nouveau/fb/gp102-: cache scrubber binary on first load
- drm/msm: Fix potential invalid ptr free
- drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register
- drm/msm/a5xx: fix highest bank bit for a530
- drm/msm/a5xx: fix the emptyness check in the preempt code
- drm/msm/a5xx: fix context faults during ring switch
- bgmac: fix *initial* chip reset to support BCM5358
- nfc: fdp: add null check of devm_kmalloc_array in
fdp_nci_i2c_read_device_properties
- powerpc: dts: t1040rdb: fix compatible string for Rev A boards
- tls: rx: fix return value for async crypto
- drm/msm/dpu: disable features unsupported by QCM2290
- ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping()
- net: lan966x: Fix port police support using tc-matchall
- selftests: nft_nat: ensuring the listening side is up before starting the
client
- netfilter: nft_last: copy content when cloning expression
- netfilter: nft_quota: copy content when cloning expression
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and
do_tls_setsockopt_conf()
- net: use indirect calls helpers for sk_exit_memory_pressure()
- perf stat: Fix counting when initial delay configured
- net: lan78xx: fix accessing the LAN7800's internal phy specific registers
from the MAC driver
- net: caif: Fix use-after-free in cfusbl_device_notify()
- ice: copy last block omitted in ice_get_module_eeprom()
- nfp: fix incorrectly set csum flag for nfd3 path
- nfp: fix esp-tx-csum-offload doesn't take effect
- bpf, sockmap: Fix an infinite loop error when len is 0 in
tcp_bpf_recvmsg_parser()
- drm/msm/dpu: fix len of sc7180 ctl blocks
- drm/msm/dpu: fix sm6115 and qcm2290 mixer width limits
- drm/msm/dpu: correct sm8250 and sm8350 scaler
- drm/msm/dpu: correct sm6115 scaler
- drm/msm/dpu: drop DPU_DIM_LAYER from MIXER_MSM8998_MASK
- drm/msm/dpu: fix clocks settings for msm8998 SSPP blocks
- drm/msm/disp/dpu: fix sc7280_pp base offset
- drm/msm/dpu: clear DSPP reservations in rm release
- net: stmmac: add to set device wake up flag when stmmac init phy
- net: phylib: get rid of unnecessary locking
- bnxt_en: Avoid order-5 memory allocation for TPA data
- netfilter: ctnetlink: revert to dumping mark regardless of event type
- netfilter: tproxy: fix deadlock due to missing BH disable
- m68k: mm: Move initrd phys_to_virt handling after paging_init()
- btrfs: fix extent map logging bit not cleared for split maps after dropping
range
- bpf, test_run: fix &xdp_frame misplacement for LIVE_FRAMES
- btf: fix resolving BTF_KIND_VAR after ARRAY, STRUCT, UNION, PTR
- net: phy: smsc: fix link up detection in forced irq mode
- net: ethernet: mtk_eth_soc: fix RX data corruption issue
- net: tls: fix device-offloaded sendpage straddling records
- scsi: megaraid_sas: Update max supported LD IDs to 240
- scsi: sd: Fix wrong zone_write_granularity value during revalidate
- netfilter: conntrack: adopt safer max chain length
- platform/x86: dell-ddv: Return error if buffer is empty
- platform/x86: dell-ddv: Fix temperature scaling
- platform: mellanox: select REGMAP instead of depending on it
- platform: x86: MLX_PLATFORM: select REGMAP instead of depending on it
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- NFSD: Protect against filesystem freezing
- ice: Fix DSCP PFC TLV creation
- ethernet: ice: avoid gcc-9 integer overflow warning
- net/smc: fix fallback failed while sendmsg with fastopen
- octeontx2-af: Unlock contexts in the queue context cache in case of fault
detection
- SUNRPC: Fix a server shutdown leak
- net: dsa: mt7530: permit port 5 to work without port 6 on MT7621 SoC
- af_unix: fix struct pid leaks in OOB support
- erofs: Revert "erofs: fix kvcalloc() misuse with __GFP_NOFAIL"
- riscv: Use READ_ONCE_NOCHECK in imprecise unwinding stack mode
- RISC-V: Don't check text_mutex during stop_machine
- drm/amdgpu: fix return value check in kfd
- ext4: Fix deadlock during directory rename
- RISC-V: take text_mutex during alternative patching
- drm/amdgpu/soc21: don't expose AV1 if VCN0 is harvested
- drm/amdgpu/soc21: Add video cap query support for VCN_4_0_4
- watch_queue: fix IOC_WATCH_QUEUE_SET_SIZE alloc error paths
- tpm/eventlog: Don't abort tpm_read_log on faulty ACPI address
- MIPS: Fix a compilation issue
- powerpc/64: Don't recurse irq replay
- powerpc/iommu: fix memory leak with using debugfs_lookup()
- clk: renesas: rcar-gen3: Disable R-Car H3 ES1.*
- powerpc: Remove __kernel_text_address() in show_instructions()
- powerpc/bpf/32: Only set a stack frame when necessary
- powerpc/64: Fix task_cpu in early boot when booting non-zero cpuid
- powerpc/64: Move paca allocation to early_setup()
- powerpc/kcsan: Exclude udelay to prevent recursive instrumentation
- alpha: fix R_ALPHA_LITERAL reloc for large modules
- macintosh: windfarm: Use unsigned type for 1-bit bitfields
- PCI: Add SolidRun vendor ID
- scripts: handle BrokenPipeError for python scripts
- media: ov5640: Fix analogue gain control
- media: rc: gpio-ir-recv: add remove function
- drm/amd/display: Allow subvp on vactive pipes that are 2560x1440@60
- drm/amd/display: adjust MALL size available for DCN32 and DCN321
- filelocks: use mount idmapping for setlease permission check
- Revert "bpf, test_run: fix &xdp_frame misplacement for LIVE_FRAMES"
- RISC-V: fix taking the text_mutex twice during sifive errata patching
- UML: define RUNTIME_DISCARD_EXIT
- Linux 6.2.7
* Miscellaneous Ubuntu changes
- [Packaging] Move final-checks script to debian/scripts/checks
- [Packaging] checks/final-checks: Honor 'do_skip_checks'
- [Packaging] Drop wireguard DKMS
- [Packaging] Remove update-version-dkms
- [Packaging] debian/rules: Add DKMS info to 'printenv' output
* Miscellaneous upstream changes
- Revert "Revert "mm: kfence: apply kmemleak_ignore_phys on early allocated
pool""
-- Andrea Righi <andrea.righi@canonical.com> Tue, 30 May 2023 12:46:10 +0200
# For older changelog entries, run 'apt-get changelog linux-headers-6.2.0-39-generic'
Generated by dwww version 1.14 on Thu Jan 23 03:29:46 CET 2025.