An unbreakable Enterprise kernel security update has been released for Oracle Linux 9.

El-errata: ELSA-2023-12116 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update

Oracle Linux Security Advisory ELSA-2023-12116

  http://linux.oracle.com/errata/ELSA-2023-12116.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

aarch64:
bpftool-5.15.0-7.86.6.1.el9uek.aarch64.rpm
kernel-uek-5.15.0-7.86.6.1.el9uek.aarch64.rpm
kernel-uek-core-5.15.0-7.86.6.1.el9uek.aarch64.rpm
kernel-uek-debug-5.15.0-7.86.6.1.el9uek.aarch64.rpm
kernel-uek-debug-core-5.15.0-7.86.6.1.el9uek.aarch64.rpm
kernel-uek-debug-devel-5.15.0-7.86.6.1.el9uek.aarch64.rpm
kernel-uek-debug-modules-5.15.0-7.86.6.1.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-5.15.0-7.86.6.1.el9uek.aarch64.rpm
kernel-uek-devel-5.15.0-7.86.6.1.el9uek.aarch64.rpm
kernel-uek-doc-5.15.0-7.86.6.1.el9uek.noarch.rpm
kernel-uek-modules-5.15.0-7.86.6.1.el9uek.aarch64.rpm
kernel-uek-modules-extra-5.15.0-7.86.6.1.el9uek.aarch64.rpm

SRPMS:
  http://oss.oracle.com/ol9/SRPMS-updates//kernel-uek-5.15.0-7.86.6.1.el9uek.src.rpm

Related CVEs:

CVE-2022-3545
CVE-2022-4139
CVE-2022-45869
CVE-2023-0179



Description of changes:

[5.15.0-7.86.6.1.el9uek]
- net/rds: Delegate fan-out to a background worker (Gerd Rausch) [Orabug: 35051226]

[5.15.0-7.86.6.el9uek]
- runtime revert of virtio_net: Stripe queue affinities across cores. (Konrad Rzeszutek Wilk) [Orabug: 35001044]
- rds: ib: Make sure messages that errors out also get unmapped (Håkon Bugge) [Orabug: 35015598]
- Ignore hot plug events when force powering off a device (James Puthukattukaran) [Orabug: 35015761]
- mptcp: UEK: disable mptcp protocol (Jack Vogel) [Orabug: 34821286]

[5.15.0-7.86.5.el9uek]
- uek-rpm: Enable HP watchdog for aarch64 (Saeed Mirzamohammadi) [Orabug: 34902069]
- watchdog/hpwdt: Include nmi.h only if CONFIG_HPWDT_NMI_DECODING (Jerry Hoemann) [Orabug: 34902069]
- watchdog/hpwdt: Enable HP_WATCHDOG for ARM64 systems. (Jerry Hoemann) [Orabug: 34902069]
- Revert "selftests/bpf: Add test for unstable CT lookup API" (Alan Maguire) [Orabug: 34951842]
- uek-rpm: config-x86-64*: enable CONFIG_MT7921E (Todd Vierling) [Orabug: 34970472]
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits (Pablo Neira Ayuso) [Orabug: 34978152] {CVE-2023-0179}
- perf/x86/rapl: Use standard Energy Unit for SPR Dram RAPL domain (Zhang Rui) [Orabug: 34978296]
- powercap: intel_rapl: support new layout of Psys PowerLimit Register on SPR (Zhang Rui) [Orabug: 34978296]
- uek: kabi: enable aarch64 kABI checking (Saeed Mirzamohammadi) [Orabug: 34339132]

[5.15.0-7.86.4.el9uek]
- net/rds: Fill in rds_exthdr_size gaps (Gerd Rausch) [Orabug: 34979170]
- Revert "uek: kabi: enable aarch64 kABI checking" (Jack Vogel)
- Revert "uek-rpm: Disable kABI checking for aarch64 64k builds" (Jack Vogel)

[5.15.0-7.86.3.el9uek]
- uek-rpm: Disable kABI checking for aarch64 64k builds (Saeed Mirzamohammadi) [Orabug: 34339132]

[5.15.0-7.86.2.el9uek]
- net/rds: Trigger rds_send_hs_ping() more than once (Gerd Rausch) [Orabug: 34607844]
- Revert "RDS: TCP: Track peer's connection generation number" (Gerd Rausch) [Orabug: 34700109]
- net/rds: Use the first lane until RDS_EXTHDR_NPATHS arrives (Gerd Rausch) [Orabug: 34314502]
- net/rds: Kick-start TCP receiver after accept (Gerd Rausch) [Orabug: 34600819]
- net/rds: rds_tcp_conn_path_shutdown must not discard messages (Gerd Rausch) [Orabug: 34560700]
- net/rds: Encode cp_index in TCP source port (Gerd Rausch) [Orabug: 34556036]
- uek: kabi: enable aarch64 kABI checking (Saeed Mirzamohammadi) [Orabug: 34339132]
- uek-rpm: Disable Promise SuperTrak EX series storage controllers (Somasundaram Krishnasamy) [Orabug: 34670747]
- uek-rpm: ol9: Disable CONFIG_IR_MCEUSB from UEK7 OL9. (Harshit Mogalapalli) [Orabug: 34820237]
- IB/mlx5: Add a signature check to received EQEs and CQEs (Rohit Nair) [Orabug: 34821073]
- rds: ib: Avoid tear-down of caches unless already initialized (Håkon Bugge) [Orabug: 34826403]
- KVM: SVM: Fix AVIC GATag to support max number of vCPUs (Suravee Suthikulpanit) [Orabug: 34961703]
- Revert "rds: ib: Enable FC by default" (Håkon Bugge) [Orabug: 34964359]
- uek-rpm: Add nft_reject* modules to core rpm. (Somasundaram Krishnasamy) [Orabug: 34970060]
- cpufreq: intel_pstate: Support Sapphire Rapids OOB mode (Srinivas Pandruvada) [Orabug: 34961609]

[5.15.0-7.86.1.el9uek]
- LTS version: v5.15.86 (Jack Vogel)
- pwm: tegra: Fix 32 bit build (Steven Price)
- mfd: qcom_rpm: Use devm_of_platform_populate() to simplify code (Christophe JAILLET)
- extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered (Yassine Oudjana)
- media: dvbdev: fix refcnt bug (Lin Ma)
- media: dvbdev: fix build warning due to comments (Lin Ma)
- net: stmmac: fix errno when create_singlethread_workqueue() fails (Gaosheng Cui)
- scsi: qla2xxx: Fix crash when I/O abort times out (Arun Easi)
- btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range (Filipe Manana)
- ovl: fix use inode directly in rcu-walk mode (Chen Zhongjin)
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed (Tetsuo Handa)
- gcov: add support for checksum field (Rickard x Andersson)
- floppy: Fix memory leak in do_floppy_init() (Yuan Can)
- regulator: core: fix deadlock on regulator enable (Johan Hovold)
- iio: adc128s052: add proper .data members in adc128_of_match table (Rasmus Villemoes)
- iio: adc: ad_sigma_delta: do not use internal iio_dev lock (Nuno Sá)
- iio: fix memory leak in iio_device_register_eventset() (Zeng Heng)
- reiserfs: Add missing calls to reiserfs_security_free() (Roberto Sassu)
- security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 (Nathan Chancellor)
- 9p: set req refcount to zero to avoid uninitialized usage (Schspa Shi)
- loop: Fix the max_loop commandline argument treatment when it is set to 0 (Isaac J. Manjarres)
- HID: mcp2221: don't connect hidraw (Enrik Berkhan)
- HID: wacom: Ensure bootloader PID is usable in hidraw mode (Jason Gerecke)
- xhci: Prevent infinite loop in transaction errors recovery for streams (Mathias Nyman)
- usb: dwc3: core: defer probe on ulpi_read_id timeout (Ferry Toth)
- usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode (Sven Peter)
- arm64: dts: qcom: sm8250: fix USB-DP PHY registers (Johan Hovold)
- usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq (Chunfeng Yun)
- usb: cdnsp: fix lack of ZLP for ep0 (Pawel Laszczak)
- ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list (Jiao Zhou)
- ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB (Edward Pacman)
- ALSA: usb-audio: add the quirk for KT0206 device (wangdicheng)
- ima: Simplify ima_lsm_copy_rule (GUO Zihua)
- pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES (John Stultz)
- afs: Fix lost servers_outstanding count (David Howells)
- perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Yang Jihong)
- pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion (John Stultz)
- LoadPin: Ignore the "contents" argument of the LSM hooks (Kees Cook)
- drm/i915/display: Don't disable DDI/Transcoder when setting phy test pattern (Khaled Almahallawy)
- ASoC: rt5670: Remove unbalanced pm_runtime_put() (Hans de Goede)
- ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() (Wang Jingjin)
- ASoC: wm8994: Fix potential deadlock (Marek Szyprowski)
- ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe() (Wang Yufen)
- ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() (Wang Jingjin)
- ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() (Wang Yufen)
- ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() (Wang Yufen)
- ASoC: Intel: Skylake: Fix driver hang during shutdown (Cezary Rojewski)
- ALSA: hda: add snd_hdac_stop_streams() helper (Pierre-Louis Bossart)
- ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c (Pierre-Louis Bossart)
- hwmon: (jc42) Fix missing unlock on error in jc42_write() (Yang Yingliang)
- KVM: selftests: Fix build regression by using accessor function (Tyler Hicks)
- tools/include: Add _RET_IP_ and math definitions to kernel.h (Karolina Drobnik)
- orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() (Zhang Xiaoxu)
- orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() (Zhang Xiaoxu)
- drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() (Nathan Chancellor)
- drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() (Nathan Chancellor)
- hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (Hawkins Jiawei)
- scsi: elx: libefc: Fix second parameter type in state callbacks (Nathan Chancellor)
- scsi: ufs: Reduce the START STOP UNIT timeout (Bart Van Assche)
- scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs (Justin Tee)
- crypto: hisilicon/hpre - fix resource leak in remove process (Zhiqi Song)
- clk: st: Fix memory leak in st_of_quadfs_setup() (Xiu Jianfeng)
- media: si470x: Fix use-after-free in si470x_int_in_callback() (Shigeru Yoshida)
- mmc: renesas_sdhi: better reset from HS400 mode (Wolfram Sang)
- mmc: f-sdh30: Add quirks for broken timeout clock capability (Kunihiko Hayashi)
- wifi: mt76: do not run mt76u_status_worker if the device is not running (Lorenzo Bianconi)
- regulator: core: fix use_count leakage when handling boot-on (Rui Zhang)
- libbpf: Avoid enum forward-declarations in public API in C++ mode (Andrii Nakryiko)
- drm/amd/display: Use the largest vready_offset in pipe group (Wesley Chalmers)
- blk-mq: fix possible memleak when register 'hctx' failed (Ye Bin)
- media: dvb-usb: fix memory leak in dvb_usb_adapter_init() (Mazin Al Haddad)
- media: dvbdev: adopts refcnt to avoid UAF (Lin Ma)
- media: dvb-frontends: fix leak of memory fw (Yan Lei)
- ethtool: avoiding integer overflow in ethtool_phys_id() (Maxim Korotkov)
- bpf: Prevent decl_tag from being referenced in func_proto arg (Stanislav Fomichev)
- ppp: associate skb with a device at tx (Stanislav Fomichev)
- mrp: introduce active flags to prevent UAF when applicant uninit (Schspa Shi)
- ipv6/sit: use DEV_STATS_INC() to avoid data-races (Eric Dumazet)
- net: add atomic_long_t to net_device_stats fields (Eric Dumazet)
- drm/amd/display: fix array index out of bound error in bios parser (Aurabindo Pillai)
- md/raid1: stop mdx_raid1 thread when raid1 array run failed (Jiang Li)
- drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (Li Zhong)
- drm/mediatek: Fix return type of mtk_hdmi_bridge_mode_valid() (Nathan Chancellor)
- drm/sti: Use drm_mode_copy() (Ville Syrjälä)
- drm/rockchip: Use drm_mode_copy() (Ville Syrjälä)
- drm/msm: Use drm_mode_copy() (Ville Syrjälä)
- s390/lcs: Fix return type of lcs_start_xmit() (Nathan Chancellor)
- s390/netiucv: Fix return type of netiucv_tx() (Nathan Chancellor)
- s390/ctcm: Fix return type of ctc{mp,}m_tx() (Nathan Chancellor)
- drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback (Nathan Chancellor)
- drm/amdgpu: Fix type of second parameter in trans_msg() callback (Nathan Chancellor)
- igb: Do not free q_vector unless new one was allocated (Kees Cook)
- wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() (Minsuk Kang)
- hamradio: baycom_epp: Fix return type of baycom_send_packet() (Nathan Chancellor)
- net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() (Nathan Chancellor)
- bpf: make sure skb->len != 0 when redirecting to a tunneling device (Stanislav Fomichev)
- qed (gcc13): use u16 for fid to be big enough (Jiri Slaby (SUSE))
- Revert "drm/amd/display: Limit max DSC target bpp for specific monitors" (Hamza Mahfooz)
- drm/amd/display: prevent memory leak (gehao)
- ipmi: fix memleak when unload ipmi driver (Zhang Yuchen)
- ASoC: codecs: rt298: Add quirk for KBL-R RVP platform (Amadeusz Sławiński)
- wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out (Shigeru Yoshida)
- wifi: ath9k: verify the expected usb_endpoints are present (Fedor Pchelkin)
- brcmfmac: return error when getting invalid max_flowrings from dongle (Wright Feng)
- media: imx-jpeg: Disable useless interrupt to avoid kernel panic (Ming Qian)
- drm/etnaviv: add missing quirks for GC300 (Doug Brown)
- hfs: fix OOB Read in __hfs_brec_find (ZhangPeng)
- acct: fix potential integer overflow in encode_comp_t() (Zheng Yejian)
- nilfs2: fix shift-out-of-bounds due to too large exponent of block size (Ryusuke Konishi)
- nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() (Ryusuke Konishi)
- ACPICA: Fix error code path in acpi_ds_call_control_method() (Rafael J. Wysocki)
- fs: jfs: fix shift-out-of-bounds in dbDiscardAG (Hoi Pok Wu)
- jfs: Fix fortify moan in symlink (Dr. David Alan Gilbert)
- udf: Avoid double brelse() in udf_rename() (Shigeru Yoshida)
- fs: jfs: fix shift-out-of-bounds in dbAllocAG (Dongliang Mu)
- binfmt_misc: fix shift-out-of-bounds in check_special_flags (Liu Shixin)
- x86/hyperv: Remove unregister syscore call from Hyper-V cleanup (Gaurav Kohli)
- video: hyperv_fb: Avoid taking busy spinlock on panic path (Guilherme G. Piccoli)
- arm64: make is_ttbrX_addr() noinstr-safe (Mark Rutland)
- rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() (Zqiang)
- HID: amd_sfh: Add missing check for dma_alloc_coherent (Jiasheng Jiang)
- net: stream: purge sk_error_queue in sk_stream_kill_queues() (Eric Dumazet)
- myri10ge: Fix an error handling path in myri10ge_probe() (Christophe JAILLET)
- rxrpc: Fix missing unlock in rxrpc_do_sendmsg() (David Howells)
- net_sched: reject TCF_EM_SIMPLE case for complex ematch module (Cong Wang)
- mailbox: zynq-ipi: fix error handling while device_register() fails (Yang Yingliang)
- mailbox: arm_mhuv2: Fix return value check in mhuv2_probe() (Yang Yingliang)
- mailbox: mpfs: read the system controller's status (Conor Dooley)
- skbuff: Account for tail adjustment during pull operations (Subash Abhinov Kasiviswanathan)
- arm64: dts: mt8183: Fix Mali GPU clock (Chen-Yu Tsai)
- soc: mediatek: pm-domains: Fix the power glitch issue (Chun-Jie Chen)
- openvswitch: Fix flow lookup to use unmasked key (Eelco Chaudron)
- selftests: devlink: fix the fd redirect in dummy_reporter_test (Jakub Kicinski)
- rtc: mxc_v2: Add missing clk_disable_unprepare() (GUO Zihua)
- igc: Set Qbv start_time and end_time to end_time if not being configured in GCL (Tan Tee Min)
- igc: Lift TAPRIO schedule restriction (Kurt Kanzenbach)
- igc: recalculate Qbv end_time by considering cycle time (Tan Tee Min)
- igc: allow BaseTime 0 enrollment for Qbv (Tan Tee Min)
- igc: Add checking for basetime less than zero (Muhammad Husaini Zulkifli)
- igc: Use strict cycles for Qbv scheduling (Vinicius Costa Gomes)
- igc: Enhance Qbv scheduling by using first flag bit (Vinicius Costa Gomes)
- r6040: Fix kmemleak in probe and remove (Li Zetao)
- unix: Fix race in SOCK_SEQPACKET's unix_dgram_sendmsg() (Kirill Tkhai)
- nfc: pn533: Clear nfc_target before being used (Minsuk Kang)
- net: enetc: avoid buffer leaks on xdp_do_redirect() failure (Vladimir Oltean)
- selftests/bpf: Add test for unstable CT lookup API (Kumar Kartikeya Dwivedi)
- block, bfq: fix possible uaf for 'bfqq->bic' (Yu Kuai)
- mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang)
- mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang)
- mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang)
- net: macsec: fix net device access prior to holding a lock (Emeel Hakim)
- nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (Dan Aloni)
- rtc: pcf85063: fix pcf85063_clkout_control (Alexandre Belloni)
- rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() (Gaosheng Cui)
- rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() (Gaosheng Cui)
- netfilter: flowtable: really fix NAT IPv6 offload (Qingfang DENG)
- mfd: pm8008: Fix return value check in pm8008_probe() (Yang Yingliang)
- mfd: pm8008: Remove driver data structure pm8008_data (Lee Jones)
- mfd: qcom_rpm: Fix an error handling path in qcom_rpm_probe() (Christophe JAILLET)
- mfd: bd957x: Fix Kconfig dependency on REGMAP_IRQ (Matti Vaittinen)
- powerpc/pseries/eeh: use correct API for error log size (Nathan Lynch)
- powerpc/eeh: Drop redundant spinlock initialization (Haowen Bai)
- remoteproc: qcom: q6v5: Fix missing clk_disable_unprepare() in q6v5_wcss_qcs404_power_on() (Shang XiaoJing)
- remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() (Yuan Can)
- remoteproc: qcom_q6v5_pas: detach power domains on remove (Luca Weiss)
- remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove (Luca Weiss)
- remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() (Shang XiaoJing)
- remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() (Gaosheng Cui)
- pwm: mediatek: always use bus clock for PWM on MT7622 (Daniel Golle)
- pwm: mtk-disp: Fix the parameters calculated by the enabled flag of disp_pwm (xinlei lee)
- pwm: sifive: Call pwm_sifive_update_clock() while mutex is held (Uwe Kleine-König)
- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (Jason Gunthorpe)
- selftests/powerpc: Fix resource leaks (Miaoqian Lin)
- powerpc/hv-gpci: Fix hv_gpci event list (Kajol Jain)
- powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() (Yang Yingliang)
- powerpc/perf: callchain validate kernel stack pointer bounds (Nicholas Piggin)
- powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() (Yang Yingliang)
- powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds (Gustavo A. R. Silva)
- cxl: Fix refcount leak in cxl_calc_capp_routing (Miaoqian Lin)
- powerpc/52xx: Fix a resource leak in an error handling path (Christophe JAILLET)
- macintosh/macio-adb: check the return value of ioremap() (Xie Shaowen)
- macintosh: fix possible memory leak in macio_add_one_device() (Yang Yingliang)
- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (Yuan Can)
- iommu/amd: Fix pci device refcount leak in ppr_notifier() (Yang Yingliang)
- rtc: pcf85063: Fix reading alarm (Alexander Stein)
- rtc: snvs: Allow a time difference on clock register read (Stefan Eichenberger)
- rtc: cmos: Disable ACPI RTC event on removal (Rafael J. Wysocki)
- rtc: cmos: Rename ACPI-related functions (Rafael J. Wysocki)
- rtc: cmos: Eliminate forward declarations of some functions (Rafael J. Wysocki)
- rtc: cmos: Call rtc_wake_setup() from cmos_do_probe() (Rafael J. Wysocki)
- rtc: cmos: Call cmos_wake_setup() from cmos_do_probe() (Rafael J. Wysocki)
- rtc: cmos: fix build on non-ACPI platforms (Alexandre Belloni)
- rtc: cmos: Fix wake alarm breakage (Rafael J. Wysocki)
- rtc: cmos: Fix event handler registration ordering issue (Rafael J. Wysocki)
- rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0 (Rafael J. Wysocki)
- dmaengine: idxd: Fix crc_val field for completion record (Fenghua Yu)
- fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs (Abdun Nihaal)
- pwm: tegra: Improve required rate calculation (Jon Hunter)
- include/uapi/linux/swab: Fix potentially missing __always_inline (Matt Redfearn)
- phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices (Al Cooper)
- iommu/rockchip: fix permission bits in page table entries v2 (Michael Riesch)
- iommu/sun50i: Fix flush size (Jernej Skrabec)
- iommu/sun50i: Fix R/W permission check (Jernej Skrabec)
- iommu/sun50i: Consider all fault sources for reset (Jernej Skrabec)
- iommu/sun50i: Fix reset release (Jernej Skrabec)
- fs/ntfs3: Harden against integer overflows (Dan Carpenter)
- overflow: Implement size_t saturating arithmetic helpers (Kees Cook)
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst() (Shigeru Yoshida)
- RDMA/siw: Fix pointer cast warning (Arnd Bergmann)
- perf stat: Do not delay the workload with --delay (Namhyung Kim)
- perf stat: Refactor __run_perf_stat() common code (Adrián Herrera Arcila)
- power: supply: fix null pointer dereferencing in power_supply_get_battery_info (ruanjinjie)
- power: supply: ab8500: Fix error handling in ab8500_charger_init() (Yuan Can)
- HSI: omap_ssi_core: Fix error handling in ssi_init() (Yuan Can)
- power: supply: z2_battery: Fix possible memleak in z2_batt_probe() (Zhang Qilong)
- perf symbol: correction while adjusting symbol (Ajay Kaher)
- perf trace: Handle failure when trace point folder is missed (Leo Yan)
- perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number (Leo Yan)
- perf trace: Return error if a system call doesn't exist (Leo Yan)
- power: supply: fix residue sysfs file in error handle route of __power_supply_register() (Zeng Heng)
- HSI: omap_ssi_core: fix possible memory leak in ssi_probe() (Yang Yingliang)
- HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() (Yang Yingliang)
- fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() (Christophe JAILLET)
- fbdev: uvesafb: don't build on UML (Randy Dunlap)
- fbdev: geode: don't build on UML (Randy Dunlap)
- fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() (Gaosheng Cui)
- fbdev: vermilion: decrease reference count in error path (Xiongfeng Wang)
- fbdev: via: Fix error in via_core_init() (Shang XiaoJing)
- fbdev: pm2fb: fix missing pci_disable_device() (Yang Yingliang)
- fbdev: ssd1307fb: Drop optional dependency (Andy Shevchenko)
- thermal/drivers/qcom/lmh: Fix irq handler return value (Bjorn Andersson)
- thermal/drivers/qcom/temp-alarm: Fix inaccurate warning for gen2 (Luca Weiss)
- thermal/drivers/imx8mm_thermal: Validate temperature range (Marcus Folkesson)
- samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() (Shang XiaoJing)
- ksmbd: Fix resource leak in ksmbd_session_rpc_open() (Xiu Jianfeng)
- tracing/hist: Fix issue of losting command info in error_log (Zheng Yejian)
- usb: storage: Add check for kcalloc (Jiasheng Jiang)
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Zheyu Ma)
- i2c: mux: reg: check return value after calling platform_get_resource() (Yang Yingliang)
- gpiolib: protect the GPIO device against being dropped while in use by user-space (Bartosz Golaszewski)
- gpiolib: make struct comments into real kernel docs (Bartosz Golaszewski)
- gpiolib: cdev: fix NULL-pointer dereferences (Bartosz Golaszewski)
- gpiolib: Get rid of redundant 'else' (Andy Shevchenko)
- vme: Fix error not catched in fake_init() (Chen Zhongjin)
- staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() (YueHaibing)
- staging: rtl8192u: Fix use after free in ieee80211_rx() (Dan Carpenter)
- i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe (Hui Tang)
- chardev: fix error handling in cdev_device_add() (Yang Yingliang)
- mcb: mcb-parse: fix error handing in chameleon_parse_gdd() (Yang Yingliang)
- drivers: mcb: fix resource leak in mcb_probe() (Zhengchao Shao)
- usb: gadget: f_hid: fix refcount leak on error path (John Keeping)
- usb: gadget: f_hid: fix f_hidg lifetime vs cdev (John Keeping)
- usb: roles: fix of node refcount leak in usb_role_switch_is_parent() (Yang Yingliang)
- coresight: trbe: remove cpuhp instance node before remove cpuhp state (Yang Shen)
- counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update (Fabrice Gasnier)
- iio: adis: add '__adis_enable_irq()' implementation (Ramona Bolboaca)
- iio:imu:adis: Move exports into IIO_ADISLIB namespace (Jonathan Cameron)
- iio: adis: stylistic changes (Nuno Sá)
- iio: adis: handle devices that cannot unmask the drdy pin (Nuno Sá)
- iio: temperature: ltc2983: make bulk write buffer DMA-safe (Cosmin Tanislav)
- cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() (Yang Yingliang)
- cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() (Yang Yingliang)
- firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() (Yang Yingliang)
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (Zheng Wang)
- misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() (ruanjinjie)
- ocxl: fix pci device refcount leak when calling get_function_0() (Yang Yingliang)
- misc: ocxl: fix possible name leak in ocxl_file_register_afu() (Yang Yingliang)
- test_firmware: fix memory leak in test_firmware_init() (Zhengchao Shao)
- serial: sunsab: Fix error handling in sunsab_init() (Yuan Can)
- serial: altera_uart: fix locking in polling mode (Gabriel Somlo)
- tty: serial: altera_uart_{r,t}x_chars() need only uart_port (Jiri Slaby)
- tty: serial: clean up stop-tx part in altera_uart_tx_chars() (Jiri Slaby)
- serial: pch: Fix PCI device refcount leak in pch_request_dma() (Xiongfeng Wang)
- serial: stm32: move dma_request_chan() before clk_prepare_enable() (Valentin Caron)
- serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. (delisun)
- serial: amba-pl011: avoid SBSA UART accessing DMACR register (Jiamei Xie)
- extcon: usbc-tusb320: Update state on probe even if no IRQ pending (Marek Vasut)
- extcon: usbc-tusb320: Add USB TYPE-C support (Marek Vasut)
- extcon: usbc-tusb320: Factor out extcon into dedicated functions (Marek Vasut)
- usb: typec: Factor out non-PD fwnode properties (Samuel Holland)
- extcon: usbc-tusb320: Add support for TUSB320L (Yassine Oudjana)
- extcon: usbc-tusb320: Add support for mode setting and reset (Yassine Oudjana)
- usb: typec: tipd: Fix spurious fwnode_handle_put in error path (Sven Peter)
- usb: typec: tipd: Cleanup resources if devm_tps6598_psy_register fails (Sven Peter)
- usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() (Yang Yingliang)
- usb: typec: Check for ops->exit instead of ops->enter in altmode_exit (Sven Peter)
- staging: vme_user: Fix possible UAF in tsi148_dma_list_add (Gaosheng Cui)
- usb: fotg210-udc: Fix ages old endianness issues (Linus Walleij)
- uio: uio_dmem_genirq: Fix deadlock between irq config and handling (Rafael Mendonca)
- uio: uio_dmem_genirq: Fix missing unlock in irq configuration (Rafael Mendonca)
- vfio: platform: Do not pass return buffer to ACPI _RST method (Rafael Mendonca)
- class: fix possible memory leak in __class_register() (Yang Yingliang)
- serial: 8250_bcm7271: Fix error handling in brcmuart_init() (Yuan Can)
- serial: tegra: Read DMA status before terminating (Kartik)
- drivers: dio: fix possible memory leak in dio_init() (Yang Yingliang)
- RISC-V: Align the shadow stack (Palmer Dabbelt)
- IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces (Dragos Tatulea)
- hwrng: geode - Fix PCI device refcount leak (Xiongfeng Wang)
- hwrng: amd - Fix PCI device refcount leak (Xiongfeng Wang)
- crypto: img-hash - Fix variable dereferenced before check 'hdev->req' (Gaosheng Cui)
- RDMA/hns: Fix error code of CMD (Chengchang Tang)
- RDMA/hns: Fix page size cap from firmware (Chengchang Tang)
- RDMA/hns: Fix PBL page MTR find (Chengchang Tang)
- RDMA/hns: Fix AH attr queried by query_qp (Chengchang Tang)
- orangefs: Fix sysfs not cleanup when dev init failed (Zhang Xiaoxu)
- PCI: mt7621: Add sentinel to quirks table (John Thomson)
- PCI: mt7621: Rename mt7621_pci_ to mt7621_pcie_ (Bjorn Helgaas)
- RDMA/srp: Fix error return code in srp_parse_options() (Wang Yufen)
- RDMA/hfi1: Fix error return code in parse_platform_config() (Wang Yufen)
- riscv/mm: add arch hook arch_clear_hugepage_flags (Tong Tiangen)
- crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() (Shang XiaoJing)
- crypto: amlogic - Remove kcalloc without check (Christophe JAILLET)
- RDMA/nldev: Fix failure to send large messages (Mark Zhang)
- f2fs: avoid victim selection from previous victim section (Yonggil Song)
- RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() (Yuan Can)
- scsi: snic: Fix possible UAF in snic_tgt_create() (Gaosheng Cui)
- scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails (Chen Zhongjin)
- scsi: ipr: Fix WARNING in ipr_init() (Shang XiaoJing)
- scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper() (Yang Yingliang)
- scsi: fcoe: Fix possible name leak when device_register() fails (Yang Yingliang)
- scsi: scsi_debug: Fix a warning in resp_report_zones() (Harshit Mogalapalli)
- scsi: scsi_debug: Fix a warning in resp_verify() (Harshit Mogalapalli)
- scsi: efct: Fix possible memleak in efct_device_init() (Chen Zhongjin)
- scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() (Yang Yingliang)
- scsi: hpsa: Fix error handling in hpsa_add_sas_host() (Yang Yingliang)
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() (Yang Yingliang)
- padata: Fix list iterator in padata_do_serial() (Daniel Jordan)
- padata: Always leave BHs disabled when running ->parallel() (Daniel Jordan)
- crypto: tcrypt - Fix multibuffer skcipher speed test mem leak (Zhang Yiqun)
- scsi: hpsa: Fix possible memory leak in hpsa_init_one() (Yuan Can)
- dt-bindings: visconti-pcie: Fix interrupts array max constraints (Serge Semin)
- dt-bindings: imx6q-pcie: Fix clock names for imx6sx and imx8mq (Serge Semin)
- RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed (Zhang Xiaoxu)
- RDMA/hns: fix memory leak in hns_roce_alloc_mr() (Zhengchao Shao)
- crypto: ccree - Make cc_debugfs_global_fini() available for module init function (Uwe Kleine-König)
- RDMA/hfi: Decrease PCI device reference count in error path (Xiongfeng Wang)
- PCI: Check for alloc failure in pci_request_irq() (Zeng Heng)
- RDMA/hns: Fix ext_sge num error when post send (Luoyouming)
- RDMA/hns: Repacing 'dseg_len' by macros in fill_ext_sge_inl_data() (Luoyouming)
- crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() (Xiongfeng Wang)
- crypto: cryptd - Use request context instead of stack for sub-request (Herbert Xu)
- crypto: ccree - Remove debugfs when platform_driver_register failed (Gaosheng Cui)
- scsi: scsi_debug: Fix a warning in resp_write_scat() (Harshit Mogalapalli)
- RDMA/siw: Set defined status for work completion with undefined status (Bernard Metzler)
- RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port (Mark Zhang)
- RDMA/core: Make sure "ib_port" is valid when access sysfs node (Mark Zhang)
- RDMA/restrack: Release MR restrack when delete (Mark Zhang)
- PCI: vmd: Disable MSI remapping after suspend (Nirmal Patel)
- IB/mad: Don't call to function that might sleep while in atomic context (Leonid Ravich)
- RDMA/siw: Fix immediate work request flush to completion queue (Bernard Metzler)
- scsi: qla2xxx: Fix set-but-not-used variable warnings (Bart Van Assche)
- RDMA/irdma: Report the correct link speed (Shiraz Saleem)
- f2fs: fix to destroy sbi->post_read_wq in error path of f2fs_fill_super() (Chao Yu)
- f2fs: fix normal discard process (Dongdong Zhang)
- f2fs: fix to invalidate dcc->f2fs_issue_discard in error path (Chao Yu)
- apparmor: Fix memleak in alloc_ns() (Xiu Jianfeng)
- crypto: rockchip - rework by using crypto_engine (Corentin Labbe)
- crypto: rockchip - remove non-aligned handling (Corentin Labbe)
- crypto: rockchip - better handle cipher key (Corentin Labbe)
- crypto: rockchip - add fallback for ahash (Corentin Labbe)
- crypto: rockchip - add fallback for cipher (Corentin Labbe)
- crypto: rockchip - do not store mode globally (Corentin Labbe)
- crypto: rockchip - do not do custom power management (Corentin Labbe)
- f2fs: Fix the race condition of resize flag between resizefs (Zhang Qilong)
- PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled (Kunihiko Hayashi)
- RDMA/core: Fix order of nldev_exit call (Leon Romanovsky)
- PCI: dwc: Fix n_fts[] array overrun (Vidya Sagar)
- apparmor: Use pointer to struct aa_label for lbs_cred (Xiu Jianfeng)
- scsi: core: Fix a race between scsi_done() and scsi_timeout() (Bart Van Assche)
- crypto: nitrox - avoid double free on error path in nitrox_sriov_init() (Natalia Petrova)
- crypto: sun8i-ss - use dma_addr instead u32 (Corentin Labbe)
- crypto: hisilicon/qm - fix missing destroy qp_idr (Weili Qian)
- apparmor: Fix abi check to include v8 abi (John Johansen)
- apparmor: fix lockdep warning when removing a namespace (John Johansen)
- apparmor: fix a memleak in multi_transaction_new() (Gaosheng Cui)
- net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path (Vladimir Oltean)
- i40e: Fix the inability to attach XDP program on downed interface (Bartosz Staszewski)
- stmmac: fix potential division by 0 (Piergiorgio Beruto)
- Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)
- Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)
- Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)
- Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)
- Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)
- Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)
- Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)
- Bluetooth: btintel: Fix missing free skb in btintel_setup_combined() (Wang ShaoBo)
- Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS (Inga Stotland)
- sctp: sysctl: make extra pointers netns aware (Firo Yang)
- ntb_netdev: Use dev_kfree_skb_any() in interrupt context (Eric Pilmore)
- net: lan9303: Fix read error execution path (Jerry Ray)
- can: tcan4x5x: Fix use of register error status mask (Markus Schneider-Pargmann)
- can: m_can: Call the RAM init directly from m_can_chip_config (Vivek Yadav)
- can: tcan4x5x: Remove invalid write in clear_interrupts (Markus Schneider-Pargmann)
- net: amd-xgbe: Check only the minimum speed for active/passive cables (Tom Lendacky)
- net: amd-xgbe: Fix logic around active and passive cables (Tom Lendacky)
- af_unix: call proto_unregister() in the error path in af_unix_init() (Yang Yingliang)
- net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)
- hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)
- net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)
- net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)
- net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)
- net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)
- net/tunnel: wait until all sk_user_data reader finish before releasing the sock (Hangbin Liu)
- net: farsync: Fix kmemleak when rmmods farsync (Li Zetao)
- ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)
- of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() (ruanjinjie)
- drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() (Yuan Can)
- net: stmmac: fix possible memory leak in stmmac_dvr_probe() (Gaosheng Cui)
- net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() (Zhang Changzhong)
- net: defxx: Fix missing err handling in dfx_init() (Yongqiang Liu)
- net: vmw_vsock: vmci: Check memcpy_from_msg() (Artem Chernyshev)
- clk: socfpga: Fix memory leak in socfpga_gate_init() (Xiu Jianfeng)
- bpf: Do not zero-extend kfunc return values (Björn Töpel)
- blktrace: Fix output non-blktrace event when blk_classic option enabled (Yang Jihong)
- wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() (Wang Yufen)
- wifi: rtl8xxxu: Fix the channel width reporting (Bitterblue Smith)
- wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h (Bitterblue Smith)
- spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode (Kris Bahnsen)
- clk: samsung: Fix memory leak in _samsung_clk_register_pll() (Xiu Jianfeng)
- media: coda: Add check for kmalloc (Jiasheng Jiang)
- media: coda: Add check for dcoda_iram_alloc (Jiasheng Jiang)
- media: c8sectpfe: Add of_node_put() when breaking out of loop (Liang He)
- regulator: qcom-labibb: Fix missing of_node_put() in qcom_labibb_regulator_probe() (Yuan Can)
- mmc: core: Normalize the error handling branch in sd_read_ext_regs() (Zhen Lei)
- memstick/ms_block: Add check for alloc_ordered_workqueue (Jiasheng Jiang)
- memstick: ms_block: Add error handling support for add_disk() (Luis Chamberlain)
- mmc: renesas_sdhi: alway populate SCC pointer (Wolfram Sang)
- mmc: mmci: fix return value check of mmc_add_host() (Yang Yingliang)
- mmc: wbsd: fix return value check of mmc_add_host() (Yang Yingliang)
- mmc: via-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang)
- mmc: meson-gx: fix return value check of mmc_add_host() (Yang Yingliang)
- mmc: omap_hsmmc: fix return value check of mmc_add_host() (Yang Yingliang)
- mmc: atmel-mci: fix return value check of mmc_add_host() (Yang Yingliang)
- mmc: wmt-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang)
- mmc: vub300: fix return value check of mmc_add_host() (Yang Yingliang)
- mmc: toshsd: fix return value check of mmc_add_host() (Yang Yingliang)
- mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() (Yang Yingliang)
- mmc: rtsx_pci: fix return value check of mmc_add_host() (Yang Yingliang)
- mmc: pxamci: fix return value check of mmc_add_host() (Yang Yingliang)
- mmc: mxcmmc: fix return value check of mmc_add_host() (Yang Yingliang)
- mmc: moxart: fix return value check of mmc_add_host() (Yang Yingliang)
- mmc: alcor: fix return value check of mmc_add_host() (Yang Yingliang)
- riscv, bpf: Emit fixed-length instructions for BPF_PSEUDO_FUNC (Pu Lehui)
- NFSv4.x: Fail client initialisation if state manager thread can't run (Trond Myklebust)
- SUNRPC: Fix missing release socket in rpc_sockname() (Wang ShaoBo)
- xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (Zhang Xiaoxu)
- ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt (Gaosheng Cui)
- media: saa7164: fix missing pci_disable_device() (Liu Shixin)
- ALSA: pcm: Set missing stop_operating flag at undoing trigger start (Takashi Iwai)
- bpf, sockmap: fix race in sock_map_free() (Eric Dumazet)
- hwmon: (jc42) Restore the min/max/critical temperatures on resume (Martin Blumenstingl)
- hwmon: (jc42) Convert register access and caching to regmap/regcache (Martin Blumenstingl)
- regulator: core: fix resource leak in regulator_register() (Yang Yingliang)
- configfs: fix possible memory leak in configfs_create_dir() (Chen Zhongjin)
- hsr: Synchronize sequence number updates. (Sebastian Andrzej Siewior)
- hsr: Synchronize sending frames to have always incremented outgoing seq nr. (Sebastian Andrzej Siewior)
- hsr: Disable netpoll. (Sebastian Andrzej Siewior)
- hsr: Avoid double remove of a node. (Sebastian Andrzej Siewior)
- hsr: Add a rcu-read lock to hsr_forward_skb(). (Sebastian Andrzej Siewior)
- clk: qcom: clk-krait: fix wrong div2 functions (Christian Marangi)
- clk: qcom: lpass-sc7180: Fix pm_runtime usage (Douglas Anderson)
- regulator: core: fix module refcount leak in set_supply() (Yang Yingliang)
- wifi: mt76: fix coverity overrun-call in mt76_get_txpower() (Deren Wu)
- wifi: mt76: mt7921: fix reporting of TX AGGR histogram (Lorenzo Bianconi)
- mt76: stop the radar detector after leaving dfs channel (Xing Song)
- wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails (Chen Zhongjin)
- wifi: mac80211: fix memory leak in ieee80211_if_add() (Zhengchao Shao)
- spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE (Alexander Sverdlin)
- bonding: uninitialized variable in bond_miimon_inspect() (Dan Carpenter)
- bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect (Pengcheng Yang)
- bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes (Pengcheng Yang)
- bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data (Pengcheng Yang)
- Input: wistron_btns - disable on UML (Randy Dunlap)
- netfilter: conntrack: set icmpv6 redirects as RELATED (Florian Westphal)
- ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe (Zhang Qilong)
- drm/amdkfd: Fix memory leakage (Konstantin Meskhidze)
- drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() (Xiongfeng Wang)
- drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() (Xiongfeng Wang)
- drm/amd/pm/smu11: BACO is supported when it's in BACO state (Guchun Chen)
- ASoC: mediatek: mt8173: Enable IRQ when pdata is ready (Ricardo Ribalda)
- ASoC: mediatek: mt8173: Fix debugfs registration for components (AngeloGioacchino Del Regno)
- wifi: iwlwifi: mvm: fix double free on tx path. (Ben Greear)
- ALSA: asihpi: fix missing pci_disable_device() (Liu Shixin)
- NFS: Fix an Oops in nfs_d_automount() (Trond Myklebust)
- NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (Trond Myklebust)
- NFSv4: Fix a credential leak in _nfs4_discover_trunking() (Trond Myklebust)
- NFSv4.2: Fix initialisation of struct nfs4_label (Trond Myklebust)
- NFSv4.2: Fix a memory stomp in decode_attr_security_label (Trond Myklebust)
- NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding (Trond Myklebust)
- ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd (Jiasheng Jiang)
- ASoC: dt-bindings: wcd9335: fix reset line polarity in example (Dmitry Torokhov)
- drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() (Zhang Zekun)
- media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC (Aakarsh Jain)
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() (Baisong Zhong)
- media: dvb-core: Fix ignored return value in dvb_register_frontend() (Chen Zhongjin)
- pinctrl: pinconf-generic: add missing of_node_put() (ZhangPeng)
- clk: imx8mn: fix imx8mn_enet_phy_sels clocks list (Dario Binacchi)
- clk: imx8mn: fix imx8mn_sai2_sels clocks list (Dario Binacchi)
- clk: imx: replace osc_hdmi with dummy (Dario Binacchi)
- clk: imx8mn: rename vpu_pll to m7_alt_pll (Dario Binacchi)
- media: imon: fix a race condition in send_packet() (Gautam Menghani)
- media: vimc: Fix wrong function called when vimc_init() fails (Chen Zhongjin)
- ASoC: qcom: Add checks for devm_kcalloc (Yuan Can)
- drbd: destroy workqueue when drbd device was freed (Wang ShaoBo)
- drbd: remove call to memset before free device/resource/connection (Wang ShaoBo)
- mtd: maps: pxa2xx-flash: fix memory leak in probe (Zheng Yongjun)
- bonding: fix link recovery in mode 2 when updelay is nonzero (Jonathan Toppins)
- drm/amdgpu: fix pci device refcount leak (Yang Yingliang)
- clk: rockchip: Fix memory leak in rockchip_clk_register_pll() (Xiu Jianfeng)
- regulator: core: use kfree_const() to free space conditionally (Wang ShaoBo)
- ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT (Baisong Zhong)
- ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT (Baisong Zhong)
- pinctrl: k210: call of_node_put() (ZhangPeng)
- HID: hid-sensor-custom: set fixed size for custom attributes (Marcus Folkesson)
- bpf: Move skb->len == 0 checks into __bpf_redirect (Stanislav Fomichev)
- mtd: spi-nor: Fix the number of bytes for the dummy cycles (Allen-KH Cheng)
- mtd: spi-nor: hide jedec_id sysfs attribute if not present (Michael Walle)
- inet: add READ_ONCE(sk->sk_bound_dev_if) in inet_csk_bind_conflict() (Eric Dumazet)
- media: videobuf-dma-contig: use dma_mmap_coherent (Christoph Hellwig)
- media: platform: exynos4-is: Fix error handling in fimc_md_init() (Yuan Can)
- media: solo6x10: fix possible memory leak in solo_sysfs_init() (Yang Yingliang)
- media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init() (Chen Zhongjin)
- Input: elants_i2c - properly handle the reset GPIO when power is off (Douglas Anderson)
- mtd: lpddr2_nvm: Fix possible null-ptr-deref (Hui Tang)
- drm/msm/a6xx: Fix speed-bin detection vs probe-defer (Rob Clark)
- wifi: ath10k: Fix return value in ath10k_pci_init() (Xiu Jianfeng)
- block: clear ->slave_dir when dropping the main slave_dir reference (Christoph Hellwig)
- ima: Fix misuse of dereference of pointer in template_desc_init_fields() (Xiu Jianfeng)
- integrity: Fix memory leakage in keyring allocation error path (GUO Zihua)
- drm/fourcc: Fix vsub/hsub for Q410 and Q401 (Brian Starkey)
- drm/fourcc: Add packed 10bit YUV 4:2:0 format (Dave Stevenson)
- regulator: qcom-rpmh: Fix PMR735a S3 regulator spec (Konrad Dybcio)
- nvme: return err on nvme_init_non_mdts_limits fail (Joel Granados)
- amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() (Dan Carpenter)
- regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() (Yang Yingliang)
- nvmet: only allocate a single slab for bvecs (Christoph Hellwig)
- libbpf: Fix uninitialized warning in btf_dump_dump_type_data (David Michael)
- ASoC: pxa: fix null-pointer dereference in filter() (Zeng Heng)
- drm/mediatek: Modify dpi power on/off sequence. (Xinlei Lee)
- drm/radeon: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo)
- bfq: fix waker_bfqq inconsistency crash (Khazhismel Kumykov)
- rxrpc: Fix ack.bufferSize to be 0 when generating an ack (David Howells)
- net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write() (David Howells)
- media: camss: Clean up received buffers on failed start of streaming (Vladimir Zapolskiy)
- wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port (Marek Vasut)
- Input: joystick - fix Kconfig warning for JOYSTICK_ADC (Randy Dunlap)
- mtd: Fix device name leak when register device failed in add_mtd_device() (Zhang Xiaoxu)
- clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs (Manivannan Sadhasivam)
- bpf: propagate precision across all frames, not just the last one (Andrii Nakryiko)
- bpf: Check the other end of slot_type for STACK_SPILL (Martin KaFai Lau)
- bpf: propagate precision in ALU/ALU64 operations (Andrii Nakryiko)
- media: platform: exynos4-is: fix return value check in fimc_md_probe() (Yang Yingliang)
- media: vivid: fix compose size exceed boundary (Liu Shixin)
- bpf: Fix slot type check in check_stack_write_var_off (Kumar Kartikeya Dwivedi)
- drm/msm/hdmi: use devres helper for runtime PM management (Dmitry Baryshkov)
- drm/msm/hdmi: drop unused GPIO support (Dmitry Baryshkov)
- ima: Handle -ESTALE returned by ima_filter_rule_match() (GUO Zihua)
- drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure (Marek Vasut)
- spi: Update reference to struct spi_controller (Jonathan Neuschäfer)
- clk: renesas: r9a06g032: Repair grave increment error (Marek Vasut)
- drm/rockchip: lvds: fix PM usage counter unbalance in poweron (Zhang Qilong)
- can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming (Jimmy Assarsson)
- can: kvaser_usb: Add struct kvaser_usb_busparams (Jimmy Assarsson)
- can: kvaser_usb_leaf: Fix bogus restart events (Anssi Hannula)
- can: kvaser_usb_leaf: Fix wrong CAN state after stopping (Anssi Hannula)
- can: kvaser_usb_leaf: Fix improved state not being reported (Anssi Hannula)
- can: kvaser_usb: make use of units.h in assignment of frequency (Jimmy Assarsson)
- can: kvaser_usb_leaf: Set Warning state even without bus errors (Anssi Hannula)
- can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT (Jimmy Assarsson)
- can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event (Jimmy Assarsson)
- can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device (Jimmy Assarsson)
- can: kvaser_usb: do not increase tx statistics when sending error message frames (Vincent Mailhol)
- libbpf: Btf dedup identical struct test needs check for nested structs/arrays (Alan Maguire)
- media: exynos4-is: don't rely on the v4l2_async_subdev internals (Marek Szyprowski)
- soreuseport: Fix socket selection for SO_INCOMING_CPU. (Kuniyuki Iwashima)
- venus: pm_helpers: Fix error check in vcodec_domains_get() (Tang Bin)
- media: i2c: ad5820: Fix error path (Ricardo Ribalda)
- media: adv748x: afe: Select input port when initializing AFE (Niklas Söderlund)
- media: coda: jpeg: Add check for kmalloc (Jiasheng Jiang)
- media: v4l2-ctrls: Fix off-by-one error in integer menu control check (Laurent Pinchart)
- drm/amdgpu/powerplay/psm: Fix memory leak in power state init (Rafael Mendonca)
- ipmi: kcs: Poll OBF briefly to reduce OBE latency (Andrew Jeffery)
- ata: libata: fix NCQ autosense logic (Niklas Cassel)
- ata: add/use ata_taskfile::{error|status} fields (Sergey Shtylyov)
- ata: libata: move ata_{port,link,dev}_dbg to standard pr_XXX() macros (Hannes Reinecke)
- libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() (Shung-Hsi Yu)
- libbpf: Fix use-after-free in btf_dump_name_dups (Xu Kuohai)
- drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge (Abhinav Kumar)
- wifi: rtl8xxxu: Fix reading the vendor of combo chips (Bitterblue Smith)
- wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() (Fedor Pchelkin)
- wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() (Fedor Pchelkin)
- platform/mellanox: mlxbf-pmc: Fix event typo (James Hurley)
- rapidio: devices: fix missing put_device in mport_cdev_open (Cai Xinchen)
- hfs: Fix OOB Write in hfs_asc2mac (ZhangPeng)
- relay: fix type mismatch when allocating memory in relay_create_buf() (Gavrilov Ilia)
- eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD (Zhang Qilong)
- rapidio: fix possible UAF when kfifo_alloc() fails (Wang Weiyang)
- fs: sysv: Fix sysv_nblocks() returns wrong value (Chen Zhongjin)
- lockd: set other missing fields when unlocking files (Trond Myklebust)
- MIPS: OCTEON: warn only once if deprecated link status is being used (Ladislav Michl)
- MIPS: BCM63xx: Add check for NULL for clk in clk_enable (Anastasia Belova)
- platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register() (Yang Yingliang)
- platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() (Yu Liao)
- platform/chrome: cros_ec_typec: zero out stale pointers (Victor Ding)
- platform/chrome: cros_ec_typec: Cleanup switch handle return paths (Prashant Malani)
- PM: runtime: Do not call __rpm_callback() from rpm_idle() (Rafael J. Wysocki)
- xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() (Harshit Mogalapalli)
- x86/xen: Fix memory leak in xen_init_lock_cpu() (Xiu Jianfeng)
- x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Xiu Jianfeng)
- uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix (Oleg Nesterov)
- ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (Li Zetao)
- clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock() (Yang Yingliang)
- cpu/hotplug: Do not bail-out in DYING/STARTING sections (Vincent Donnefort)
- cpu/hotplug: Make target_store() a nop when target == state (Phil Auld)
- futex: Resend potentially swallowed owner death notification (Alexey Izbyshev)
- futex: Move to kernel/futex/ (Peter Zijlstra)
- mips: ralink: mt7621: do not use kzalloc too early (John Thomson)
- mips: ralink: mt7621: soc queries and tests as functions (John Thomson)
- mips: ralink: mt7621: define MT7621_SYSC_BASE with __iomem (John Thomson)
- clocksource/drivers/sh_cmt: Access registers according to spec (Wolfram Sang)
- rapidio: rio: fix possible name leak in rio_register_mport() (Yang Yingliang)
- rapidio: fix possible name leaks when rio_add_device() fails (Yang Yingliang)
- debugfs: fix error when writing negative value to atomic_t debugfs file (Akinobu Mita)
- lib/notifier-error-inject: fix error when writing -errno to debugfs file (Akinobu Mita)
- libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value (Akinobu Mita)
- cpufreq: amd_freq_sensitivity: Add missing pci_dev_put() (Xiongfeng Wang)
- genirq/irqdesc: Don't try to remove non-existing sysfs files (Yang Yingliang)
- nfsd: don't call nfsd_file_put from client states seqfile display (Jeff Layton)
- NFSD: Finish converting the NFSv2 GETACL result encoder (Chuck Lever)
- SUNRPC: Return true/false (not 1/0) from bool functions (Haowen Bai)
- EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (Yang Yingliang)
- irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init() (Wei Yongjun)
- irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() (Shang XiaoJing)
- thermal: core: fix some possible name leaks in error paths (Yang Yingliang)
- platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() (Yuan Can)
- perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() (Xiongfeng Wang)
- perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() (Xiongfeng Wang)
- perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() (Xiongfeng Wang)
- perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() (Xiongfeng Wang)
- PNP: fix name memory leak in pnp_alloc_dev() (Yang Yingliang)
- selftests/efivarfs: Add checking of the test return value (Zhao Gongyi)
- MIPS: vpe-cmp: fix possible memory leak while module exiting (Yang Yingliang)
- MIPS: vpe-mt: fix possible memory leak while module exiting (Yang Yingliang)
- ocfs2: fix memory leak in ocfs2_stack_glue_init() (Shang XiaoJing)
- lib/fonts: fix undefined behavior in bit shift for get_default_font (Gaosheng Cui)
- proc: fixup uptime selftest (Alexey Dobriyan)
- timerqueue: Use rb_entry_safe() in timerqueue_getnext() (Barnabás Pőcze)
- platform/x86: huawei-wmi: fix return value calculation (Barnabás Pőcze)
- lib/debugobjects: fix stat count and optimize debug_objects_mem_init (wuchi)
- perf: Fix possible memleak in pmu_dev_alloc() (Chen Zhongjin)
- selftests/ftrace: event_triggers: wait longer for test_event_enable (Yipeng Zou)
- cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut() (Chen Hui)
- fs: don't audit the capability check in simple_xattr_list() (Ondrej Mosnacek)
- PM: hibernate: Fix mistake in kerneldoc comment (xiongxin)
- x86/sgx: Reduce delay and interference of enclave release (Reinette Chatre)
- alpha: fix syscall entry in !AUDUT_SYSCALL case (Al Viro)
- alpha: fix TIF_NOTIFY_SIGNAL handling (Al Viro)
- cpuidle: dt: Return the correct numbers of parsed idle states (Ulf Hansson)
- sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() (Qais Yousef)
- sched/core: Introduce sched_asym_cpucap_active() (Dietmar Eggemann)
- sched/fair: Removed useless update of p->recent_used_cpu (Vincent Guittot)
- sched/uclamp: Make select_idle_capacity() use util_fits_cpu() (Qais Yousef)
- sched/uclamp: Make task_fits_capacity() use util_fits_cpu() (Qais Yousef)
- sched/uclamp: Fix relationship between uclamp and migration margin (Qais Yousef)
- sched/fair: Cleanup task_util and capacity type (Vincent Donnefort)
- ovl: remove privs in ovl_fallocate() (Amir Goldstein)
- ovl: remove privs in ovl_copyfile() (Amir Goldstein)
- ovl: use ovl_copy_{real,upper}attr() wrappers (Christian Brauner)
- ovl: store lower path in ovl_inode (Amir Goldstein)
- tpm/tpm_crb: Fix error message in __crb_relinquish_locality() (Michael Kelley)
- tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init() (Yuan Can)
- pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP (Stephen Boyd)
- ARM: mmp: fix timer_read delay (Doug Brown)
- pstore/ram: Fix error return code in ramoops_probe() (Wang Yufen)
- seccomp: Move copy_seccomp() to no failure path. (Kuniyuki Iwashima)
- arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC (Pali Rohár)
- ARM: dts: turris-omnia: Add switch port 6 node (Pali Rohár)
- ARM: dts: turris-omnia: Add ethernet aliases (Pali Rohár)
- ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)
- ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)
- ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)
- ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)
- ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)
- ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)
- arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name (AngeloGioacchino Del Regno)
- arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings (AngeloGioacchino Del Regno)
- arm64: dts: mt2712-evb: Fix usb vbus regulators unit names (AngeloGioacchino Del Regno)
- arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names (AngeloGioacchino Del Regno)
- arm64: dts: mt2712e: Fix unit address for pinctrl node (AngeloGioacchino Del Regno)
- arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators (AngeloGioacchino Del Regno)
- arm64: dts: mt6779: Fix devicetree build warnings (AngeloGioacchino Del Regno)
- ARM: dts: nuvoton: Remove bogus unit addresses from fixed-partition nodes (Jonathan Neuschäfer)
- arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node (Jayesh Choudhary)
- arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node (Jayesh Choudhary)
- perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() (Shang XiaoJing)
- perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() (Shang XiaoJing)
- perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() (Yuan Can)
- arm64: mm: kfence: only handle translation faults (Mark Rutland)
- arm64: Treat ESR_ELx as a 64-bit register (Alexandru Elisei)
- soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe (Zhang Qilong)
- soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe (Zhang Qilong)
- soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync (Minghao Chi)
- arm: dts: spear600: Fix clcd interrupt (Kory Maincent)
- arm64: dts: qcom: sm6125: fix SDHCI CQE reg names (Krzysztof Kozlowski)
- soc: qcom: apr: Add check for idr_alloc and of_property_read_string_index (Jiasheng Jiang)
- soc: qcom: apr: make code more reuseable (Srinivas Kandagatla)
- arm64: dts: qcom: sm8250: drop bogus DP PHY clock (Johan Hovold)
- arm64: dts: qcom: sm8350: fix UFS PHY registers (Johan Hovold)
- arm64: dts: qcom: sm8250: fix UFS PHY registers (Johan Hovold)
- arm64: dts: qcom: sm8150: fix UFS PHY registers (Johan Hovold)
- arm64: dts: qcom: Correct QMP PHY child node name (Shawn Guo)
- soc: qcom: llcc: make irq truly optional (Luca Weiss)
- arm64: dts: qcom: sm8250: correct LPASS pin pull down (Krzysztof Kozlowski)
- arm64: dts: qcom: pm660: Use unique ADC5_VCOIN address in node name (Marijn Suijten)
- drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static (Chen Jiahao)
- ARM: dts: stm32: Fix AV96 WLAN regulator gpio property (Marek Vasut)
- ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96 (Marek Vasut)
- objtool, kcsan: Add volatile read/write instrumentation to whitelist (Marco Elver)
- arm64: dts: qcom: msm8916: Drop MSS fallback compatible (Stephan Gerhold)
- arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias (Krzysztof Kozlowski)
- arm64: dts: qcom: sdm630: fix UART1 pin bias (Krzysztof Kozlowski)
- ARM: dts: qcom: apq8064: fix coresight compatible (Luca Weiss)
- arm64: dts: qcom: msm8996: fix GPU OPP table (Dmitry Baryshkov)
- arm64: dts: qcom: msm8996: fix supported-hw in cpufreq OPP tables (Dmitry Baryshkov)
- arm64: dts: qcom: msm8996: Add MSM8996 Pro support (Yassine Oudjana)
- arm64: dts: qcom: sm8250-sony-xperia-edo: fix touchscreen bias-disable (Krzysztof Kozlowski)
- arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins (Krzysztof Kozlowski)
- usb: musb: remove extra check in musb_gadget_vbus_draw (Ivaylo Dimitrov)
- drm/amd/display: Manually adjust strobe for DCN303 (Martin Leung)
- LTS version: v5.15.85 (Jack Vogel)
- net: loopback: use NET_NAME_PREDICTABLE for name_assign_type (Rasmus Villemoes)
- selftests: net: Use "grep -E" instead of "egrep" (Tiezhu Yang)
- Bluetooth: L2CAP: Fix u8 overflow (Sungwoo Kim)
- HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk (José Expósito)
- usb: dwc3: pci: Update PCIe device ID for USB3 controller on CPU sub-system for Raptor Lake (Shruthi Sanil)
- igb: Initialize mailbox message for VF reset (Tony Nguyen)
- xhci: Apply XHCI_RESET_TO_DEFAULT quirk to ADL-N (Reka Norman)
- USB: serial: f81534: fix division by zero on line-speed change (Johan Hovold)
- USB: serial: f81232: fix division by zero on line-speed change (Johan Hovold)
- USB: serial: cp210x: add Kamstrup RF sniffer PIDs (Bruno Thomsen)
- USB: serial: option: add Quectel EM05-G modem (Duke Xin)
- usb: gadget: uvc: Prevent buffer overflow in setup handler (Szymon Heidrich)
- udf: Fix extending file within last block (Jan Kara)
- udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size (Jan Kara)
- udf: Fix preallocation discarding at indirect extent boundary (Jan Kara)
- udf: Discard preallocation before extending file with a hole (Jan Kara)
- LTS version: v5.15.84 (Jack Vogel)
- net: fec: properly guard irq coalesce setup (Rasmus Villemoes)
- ASoC: ops: Correct bounds check for second channel on SX controls (Charles Keepax)
- nvme-pci: clear the prp2 field when not used (Lei Rao)
- perf: Fix perf_pending_task() UaF (Peter Zijlstra)
- ASoC: cs42l51: Correct PGA Volume minimum value (Charles Keepax)
- net: fec: don't reset irq coalesce settings to defaults on "ip link up" (Rasmus Villemoes)
- can: mcba_usb: Fix termination command argument (Yasushi SHOJI)
- can: sja1000: fix size of OCR_MODE_MASK define (Heiko Schocher)
- pinctrl: meditatek: Startup with the IRQs disabled (Ricardo Ribalda)
- libbpf: Use page size as max_entries when probing ring buffer map (Hou Tao)
- ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() (Mark Brown)
- ASoC: fsl_micfil: explicitly clear CHnF flags (Shengjiu Wang)
- ASoC: fsl_micfil: explicitly clear software reset bit (Shengjiu Wang)
- nfp: fix use-after-free in area_cache_get() (Jialiang Wang) [Orabug: 34719738] {CVE-2022-3545}
- vfs: fix copy_file_range() averts filesystem freeze protection (Amir Goldstein)
- x86/vdso: Conditionally export __vdso_sgx_enter_enclave() (Nathan Chancellor)
- LTS version: v5.15.83 (Jack Vogel)
- io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() (Harshit Mogalapalli)
- io_uring: move to separate directory (Jens Axboe)
- block: move CONFIG_BLOCK guard to top Makefile (Masahiro Yamada)
- can: esd_usb: Allow REC and TEC to return to zero (Frank Jungclaus)
- s390/qeth: fix use-after-free in hsci (Alexandra Winter)
- s390/qeth: fix various format strings (Heiko Carstens)
- macsec: add missing attribute validation for offload (Emeel Hakim)
- net: mvneta: Fix an out of bounds check (Dan Carpenter)
- net: thunderbolt: fix memory leak in tbnet_open() (Zhengchao Shao)
- ipv6: avoid use-after-free in ip6_fragment() (Eric Dumazet)
- net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq() (Yang Yingliang)
- net: phy: mxl-gpy: fix version reporting (Michael Walle)
- xen/netback: fix build warning (Juergen Gross)
- dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove() (Yuan Can)
- ethernet: aeroflex: fix potential skb leak in greth_init_rings() (Zhang Changzhong)
- tipc: call tipc_lxc_xmit without holding node_read_lock (Xin Long)
- net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() (Zhengchao Shao)
- ipv4: Fix incorrect route flushing when table ID 0 is used (Ido Schimmel)
- ipv4: Fix incorrect route flushing when source address is deleted (Ido Schimmel)
- tipc: Fix potential OOB in tipc_link_proto_rcv() (YueHaibing)
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (Liu Jian)
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release() (Zeng Heng)
- net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (Liu Jian)
- net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq (Yongqiang Liu)
- net: microchip: sparx5: Fix missing destroy_workqueue of mact_queue (Qiheng Lin)
- ip_gre: do not report erspan version on GRE interface (Hangbin Liu)
- net: stmmac: fix "snps,axi-config" node property parsing (Jisheng Zhang)
- gpio/rockchip: fix refcount leak in rockchip_gpiolib_register() (Wang Yufen)
- nvme initialize core quirks before calling nvme_init_subsystem (Pankaj Raghav)
- NFC: nci: Bounds check struct nfc_target arrays (Kees Cook)
- i40e: Disallow ip4 and ip6 l4_4_bytes (Przemyslaw Patynowski)
- i40e: Fix for VF MAC address 0 (Sylwester Dziedziuch)
- i40e: Fix not setting default xps_cpus after reset (Michal Jaron)
- net: mvneta: Prevent out of bounds read in mvneta_config_rss() (Dan Carpenter)
- xen-netfront: Fix NULL sring after live migration (Lin Liu)
- octeontx2-pf: Fix potential memory leak in otx2_init_tc() (Ziyang Xuan)
- net: mdiobus: fix double put fwnode in the error path (Yang Yingliang)
- net: mdiobus: fwnode_mdiobus_register_phy() rework error handling (Oleksij Rempel)
- net: encx24j600: Fix invalid logic in reading of MISTAT register (Valentina Goncharenko)
- net: encx24j600: Add parentheses to fix precedence (Valentina Goncharenko)
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (Wei Yongjun)
- selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload (Zhengchao Shao)
- net: dsa: sja1105: Check return value (Artem Chernyshev)
- net: dsa: hellcreek: Check return value (Artem Chernyshev)
- net: dsa: ksz: Check return value (Artem Chernyshev)
- Bluetooth: Fix not cleanup led when bt_init fails (Chen Zhongjin)
- Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() (Wang ShaoBo)
- vmxnet3: use correct intrConf reference when using extended queues (Ronak Doshi)
- vmxnet3: correctly report encapsulated LRO packet (Ronak Doshi)
- af_unix: Get user_ns from in_skb in unix_diag_get_exact(). (Kuniyuki Iwashima)
- drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420 (Guillaume BRUN)
- net: broadcom: Add PTP_1588_CLOCK_OPTIONAL dependency for BCMGENET under ARCH_BCM2835 (YueHaibing)
- igb: Allocate MSI-X vector when testing (Akihiko Odaki)
- e1000e: Fix TX dispatch condition (Akihiko Odaki)
- gpio: amd8111: Fix PCI device reference count leak (Xiongfeng Wang)
- drm/bridge: ti-sn65dsi86: Fix output polarity setting bug (Qiqi Zhang)
- netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark (Pablo Neira Ayuso)
- ca8210: Fix crash by zero initializing data (Hauke Mehrtens)
- ieee802154: cc2520: Fix error return code in cc2520_hw_init() (Ziyang Xuan)
- drm/vmwgfx: Fix race issue calling pin_user_pages (Dawei Li)
- netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one (Stefano Brivio)
- gpiolib: fix memory leak in gpiochip_setup_dev() (Zeng Heng)
- gpiolib: check the 'ngpios' property in core gpiolib code (Bartosz Golaszewski)
- gpiolib: improve coding style for local variables (Bartosz Golaszewski)
- clk: Fix pointer casting to prevent oops in devm_clk_release() (Uwe Kleine-König)
- can: af_can: fix NULL pointer dereference in can_rcv_filter (Oliver Hartkopp)
- HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10 (Hans de Goede)
- HID: core: fix shift-out-of-bounds in hid_report_raw_event (ZhangPeng)
- HID: hid-lg4ff: Add check for empty lbuf (Anastasia Belova)
- HID: usbhid: Add ALWAYS_POLL quirk for some mice (Ankit Patel)
- net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() (Radu Nicolae Pirea (OSS))
- drm/shmem-helper: Avoid vm_open error paths (Rob Clark)
- drm/shmem-helper: Remove errant put in error path (Rob Clark)
- drm/amdgpu/sdma_v4_0: turn off SDMA ring buffer in the s2idle suspend (Prike Liang)
- drm/vmwgfx: Don't use screen objects when SEV is active (Zack Rusin)
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth)
- Bluetooth: Fix crash when replugging CSR fake controllers (Luiz Augusto von Dentz)
- Bluetooth: btusb: Add debug message for CSR controllers (Ismael Ferreras Morezuelas)
- mm/gup: fix gup_pud_range() for dax (John Starks)
- memcg: fix possible use-after-free in memcg_write_event_control() (Tejun Heo)
- media: v4l2-dv-timings.c: fix too strict blanking sanity checks (Hans Verkuil)
- Revert "ARM: dts: imx7: Fix NAND controller size-cells" (Francesco Dolcini)
- soundwire: intel: Initialize clock stop timeout (Sjoerd Simons)
- media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area() (Hans Verkuil)
- xen/netback: don't call kfree_skb() with interrupts disabled (Juergen Gross)
- xen/netback: do some code cleanup (Juergen Gross)
- xen/netback: Ensure protocol headers don't fall in the non-linear area (Ross Lagerwall)
- drm/bridge: anx7625: Fix edid_read break case in sp_tx_edid_read() (Hsin-Yi Wang)
- cifs: fix use-after-free caused by invalid pointer hostname (Zeng Heng)
- rtc: cmos: avoid UIP when reading alarm time (Mateusz Jończyk)
- rtc: cmos: avoid UIP when writing alarm time (Mateusz Jończyk)
- rtc: mc146818-lib: extract mc146818_avoid_UIP (Mateusz Jończyk)
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths (Jann Horn)
- mm/khugepaged: fix GUP-fast interaction by sending IPI (Jann Horn)
- mm/khugepaged: take the right locks for page table retraction (Jann Horn)
- net: usb: qmi_wwan: add u-blox 0x1342 composition (Davide Tronchin)
- 9p/xen: check logical size for buffer size (Dominique Martinet)
- usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer (Thinh Nguyen)
- fbcon: Use kzalloc() in fbcon_prepare_logo() (Tetsuo Handa)
- regulator: twl6030: fix get status of twl6032 regulators (Andreas Kemnade)
- ASoC: soc-pcm: Add NULL check in BE reparenting (Srinivasa Rao Mandadapu)
- btrfs: send: avoid unaligned encoded writes when attempting to clone range (Filipe Manana)
- selftests/net: Find nettest in current directory (Daniel Díaz)
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event (Kees Cook)
- regulator: slg51000: Wait after asserting CS pin (Konrad Dybcio)
- 9p/fd: Use P9_HDRSZ for header size (GUO Zihua)
- ASoC: rt711-sdca: fix the latency time of clock stop prepare state machine transitions (Shuming Fan)
- ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188 (Johan Jonker)
- spi: mediatek: Fix DEVAPC Violation at KO Remove (Zhichao Liu)
- ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register (Chancel Liu)
- ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation (Giulio Benetti)
- ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels (Tomislav Novak)
- fs: use acquire ordering in __fget_light() (Jann Horn)
- ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name (Johan Jonker)
- arm64: dts: rockchip: fix ir-receiver node names (Johan Jonker)
- ARM: dts: rockchip: fix ir-receiver node names (Johan Jonker)
- arm: dts: rockchip: remove clock-frequency from rtc (Sebastian Reichel)
- arm: dts: rockchip: fix node name for hym8563 rtc (Sebastian Reichel)
- arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series (FUKAUMI Naoki)
- mmc: mtk-sd: Fix missing clk_disable_unprepare in msdc_of_clock_parse() (Gaosheng Cui)
- clk: Provide new devm_clk helpers for prepared and enabled clocks (Uwe Kleine-König)
- clk: generalize devm_clk_get() a bit (Uwe Kleine-König)
- LTS version: v5.15.82 (Jack Vogel)
- ipc/sem: Fix dangling sem_array access in semtimedop race (Jann Horn)
- Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send() (Zhang Xiaoxu)
- char: tpm: Protect tpm_pm_suspend with locks (Jan Dabros)
- Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend" (Conor Dooley)
- ACPI: HMAT: Fix initiator registration for single-initiator systems (Vishal Verma)
- ACPI: HMAT: remove unnecessary variable initialization (Vishal Verma)
- i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set (Andrew Lunn)
- i2c: npcm7xx: Fix error handling in npcm_i2c_init() (Yuan Can)
- serial: stm32: Deassert Transmit Enable on ->rs485_config() (Lukas Wunner)
- serial: stm32: Use TC interrupt to deassert GPIO RTS in RS485 mode (Marek Vasut)
- serial: stm32: Factor out GPIO RTS toggling into separate function (Marek Vasut)
- ipv4: Fix route deletion when nexthop info is not specified (Ido Schimmel)
- ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference (David Ahern) [Orabug: 34703911] {CVE-2022-3435}
- selftests: net: fix nexthop warning cleanup double ip typo (Nikolay Aleksandrov)
- selftests: net: add delete nexthop route warning test (Nikolay Aleksandrov)
- Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled (Lee Jones)
- parisc: Increase FRAME_WARN to 2048 bytes on parisc (Helge Deller)
- mm: migrate: fix THP's mapcount on isolation (Gavin Shan)
- mm: __isolate_lru_page_prepare() in isolate_migratepages_block() (Hugh Dickins)
- iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (Xiongfeng Wang)
- iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (Xiongfeng Wang)
- nvme: fix SRCU protection of nvme_ns_head list (Caleb Sander)
- riscv: kexec: Fixup irq controller broken in kexec crash path (Guo Ren)
- riscv: fix race when vmap stack overflow (Jisheng Zhang)
- riscv: Sync efi page table's kernel mappings before switching (Alexandre Ghiti)
- pinctrl: single: Fix potential division by zero (Maxim Korotkov)
- ASoC: ops: Fix bounds check for _sx controls (Mark Brown)
- KVM: x86/mmu: Fix race condition in direct_page_fault (Kazuki Takiguchi) [Orabug: 34951672] {CVE-2022-45869}
- io_uring/poll: fix poll_refs race with cancelation (Lin Ma)
- io_uring: make poll refs more robust (Pavel Begunkov)
- io_uring: cmpxchg for poll arm refs release (Pavel Begunkov)
- io_uring: fix tw losing poll events (Pavel Begunkov)
- io_uring: update res mask in io_poll_check_events (Pavel Begunkov)
- tracing: Free buffers when a used dynamic event is removed (Steven Rostedt (Google))
- tracing: Fix race where histograms can be called before the event (Steven Rostedt (Google))
- tracing/osnoise: Fix duration type (Daniel Bristot de Oliveira)
- drm/i915: Never return 0 if not all requests retired (Janusz Krzysztofik)
- drm/i915: Fix negative value passed as remaining time (Janusz Krzysztofik)
- drm/amdgpu: enable Vangogh VCN indirect sram mode (Leo Liu)
- drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame (Lee Jones)
- mmc: sdhci: Fix voltage switch delay (Adrian Hunter)
- mmc: sdhci-sprd: Fix no reset data and command after voltage switch (Wenchao Chen)
- mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check (Sebastian Falbesoner)
- mmc: core: Fix ambiguous TRIM and DISCARD arg (Christian Löhle)
- mmc: mmc_test: Fix removal of debugfs file (Ye Bin)
- net: stmmac: Set MAC's flow control register to reflect current settings (Goh, Wei Sheng)
- v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails (Linus Torvalds)
- pinctrl: intel: Save and restore pins in "direct IRQ" mode (Andy Shevchenko)
- x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 (Pawan Gupta)
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() (ZhangPeng)
- tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep" (Tiezhu Yang)
- error-injection: Add prompt for function error injection (Steven Rostedt (Google))
- ALSA: dice: fix regression for Lexicon I-ONIX FW810S (Takashi Sakamoto)
- riscv: mm: Proper page permissions after initmem free (Björn Töpel)
- riscv: vdso: fix section overlapping under some conditions (Jisheng Zhang)
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (Yang Yingliang)
- hwmon: (coretemp) Check for null before removing sysfs attrs (Phil Auld)
- net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed (Yoshihiro Shimoda)
- sctp: fix memory leak in sctp_stream_outq_migrate() (Zhengchao Shao)
- packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE (Willem de Bruijn)
- net: tun: Fix use-after-free in tun_detach() (Shigeru Yoshida)
- afs: Fix fileserver probe RTT handling (David Howells)
- net: mdiobus: fix unbalanced node reference count (Yang Yingliang)
- net: hsr: Fix potential use-after-free (YueHaibing)
- tipc: re-fetch skb cb after tipc_msg_validate (Xin Long)
- dsa: lan9303: Correct stat name (Jerry Ray)
- net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type (M Chetan Kumar)
- net: wwan: iosm: fix kernel test robot reported error (M Chetan Kumar)
- net: ethernet: nixge: fix NULL dereference (Yuri Karpov)
- net/9p: Fix a potential socket leak in p9_socket_open (Wang Hai)
- net: net_netdev: Fix error handling in ntb_netdev_init_module() (Yuan Can)
- net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe() (Zhang Changzhong)
- net: phy: fix null-ptr-deref while probe() failed (Yang Yingliang)
- wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration (Lorenzo Bianconi)
- wifi: cfg80211: don't allow multi-BSSID in S1G (Johannes Berg)
- wifi: cfg80211: fix buffer overflow in elem comparison (Johannes Berg)
- aquantia: Do not purge addresses when setting the number of rings (Izabela Bakollari)
- qlcnic: fix sleep-in-atomic-context bugs caused by msleep (Duoming Zhou)
- can: m_can: Add check for devm_clk_get (Jiasheng Jiang)
- can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (Zhang Changzhong)
- can: etas_es58x: es58x_init_netdev(): free netdev when register_candev() (Zhang Changzhong)
- can: cc770: cc770_isa_probe(): add missing free_cc770dev() (Zhang Changzhong)
- can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() (Zhang Changzhong)
- net/mlx5e: Fix use-after-free when reverting termination table (Roi Dayan)
- net/mlx5: Fix uninitialized variable bug in outlen_write() (YueHaibing)
- net/mlx5: DR, Fix uninitialized var warning (YueHaibing)
- net/mlx5: DR, Rename list field in matcher struct to list_node (Yevgeny Kliteynik)
- e100: Fix possible use after free in e100_xmit_prepare (Wang Hai)
- iavf: Fix error handling in iavf_init_module() (Yuan Can)
- iavf: remove redundant ret variable (Minghao Chi)
- fm10k: Fix error handling in fm10k_init_module() (Yuan Can)
- i40e: Fix error handling in i40e_init_module() (Shang XiaoJing)
- ixgbevf: Fix resource leak in ixgbevf_init_module() (Shang XiaoJing)
- of: property: decrement node refcount in of_fwnode_get_reference_args() (Yang Yingliang)
- nvmem: rmem: Fix return value check in rmem_read() (Wei Yongjun)
- bpf: Do not copy spin lock field from user in bpf_selem_alloc (Xu Kuohai)
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (Gaosheng Cui)
- hwmon: (i5500_temp) fix missing pci_disable_device() (Yang Yingliang)
- hwmon: (ina3221) Fix shunt sum critical calculation (Ninad Malwade)
- hwmon: (ltc2947) fix temperature scaling (Derek Nguyen)
- libbpf: Handle size overflow for ringbuf mmap (Hou Tao)
- ARM: at91: rm9200: fix usb device clock id (Michael Grzeschik)
- scripts/faddr2line: Fix regression in name resolution on ppc64le (Srikar Dronamraju)
- bpf, perf: Use subprog name when reporting subprog ksymbol (Hou Tao)
- iio: light: rpr0521: add missing Kconfig dependencies (Paul Gazzillo)
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw (Wei Yongjun)
- iio: health: afe4403: Fix oob read in afe4403_read_raw (Wei Yongjun)
- drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly when the edid is read" (Alex Deucher)
- drm/amdgpu: update drm_display_info correctly when the edid is read (Claudio Suarez)
- drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code (Lyude Paul)
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() (ChenXiaoSong)
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker (Nikolay Borisov)
- spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock (Frieder Schrempf)
- btrfs: free btrfs_path before copying inodes to userspace (Anand Jain)
- btrfs: sink iterator parameter to btrfs_ioctl_logical_to_ino (David Sterba)
- erofs: fix order >= MAX_ORDER warning due to crafted negative i_size (Gao Xiang)
- drm/i915/gt: Use i915_vm_put on ppgtt_create error paths (Chris Wilson)
- drm/i915: Create a dummy object for gen6 ppgtt (Maarten Lankhorst)
- arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored (Catalin Marinas)
- LTS version: v5.15.81 (Jack Vogel)
- cifs: fix missed refcounting of ipc tcon (Paulo Alcantara)
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Andrzej Hajda) [Orabug: 35005633] {CVE-2022-4139}
- drm/amdgpu: always register an MMU notifier for userptr (Christian König)
- drm/amdgpu: Enable Aldebaran devices to report CU Occupancy (Ramesh Errabolu)
- drm/amd/display: No display after resume from WB/CB (Tsung-hua Lin)
- drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN (Lyude Paul)
- btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs() (Zhen Lei)
- btrfs: use kvcalloc in btrfs_get_dev_zone_info (Christoph Hellwig)
- btrfs: zoned: fix missing endianness conversion in sb_write_pointer (Christoph Hellwig)
- btrfs: free btrfs_path before copying subvol info to userspace (Anand Jain)
- btrfs: free btrfs_path before copying fspath to userspace (Anand Jain)
- btrfs: free btrfs_path before copying root refs to userspace (Josef Bacik)
- genirq: Take the proposed affinity at face value if force==true (Luiz Capitulino)
- irqchip/gic-v3: Always trust the managed affinity provided by the core code (Luiz Capitulino)
- genirq: Always limit the affinity to online CPUs (Luiz Capitulino)
- genirq/msi: Shutdown managed interrupts with unsatifiable affinities (Luiz Capitulino)
- wifi: wilc1000: validate number of channels (Phil Turnbull)
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute (Phil Turnbull)
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute (Phil Turnbull)
- wifi: wilc1000: validate pairwise and authentication suite offsets (Phil Turnbull)
- fuse: lock inode unconditionally in fuse_fallocate() (Miklos Szeredi)
- dm integrity: clear the journal on suspend (Mikulas Patocka)
- dm integrity: flush the journal on suspend (Mikulas Patocka)
- gpu: host1x: Avoid trying to use GART on Tegra20 (Robin Murphy)
- scsi: iscsi: Fix possible memory leak when device_register() failed (Zhou Guanghui)
- net: usb: qmi_wwan: add Telit 0x103a composition (Enrico Sau)
- tcp: configurable source port perturb table size (Gleb Mazovetskiy)
- platform/x86: ideapad-laptop: Fix interrupt storm on fn-lock toggle on some Yoga laptops (Arnav Rawat)
- platform/x86: hp-wmi: Ignore Smart Experience App event (Kai-Heng Feng)
- zonefs: fix zone report size in __zonefs_io_error() (Damien Le Moal)
- drm/amdgpu: disable BACO support on more cards (Guchun Chen)
- platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) (Hans de Goede)
- platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() (Xiongfeng Wang)
- xen/platform-pci: add missing free_irq() in error path (ruanjinjie)
- xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too (Marek Marczykowski-Górecki)
- ASoC: stm32: dfsdm: manage cb buffers cleanup (Olivier Moysan)
- Input: i8042 - apply probe defer to more ASUS ZenBook models (Takashi Iwai)
- Input: soc_button_array - add Acer Switch V 10 to dmi_use_low_level_irq[] (Hans de Goede)
- Input: soc_button_array - add use_low_level_irq module parameter (Hans de Goede)
- Input: goodix - try resetting the controller when no config is set (Hans de Goede)
- serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios() (Lukas Wunner)
- tools: iio: iio_generic_buffer: Fix read size (Matti Vaittinen)
- ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 (Hans de Goede)
- Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode (Aman Dhoot)
- x86/ioremap: Fix page aligned size calculation in __ioremap_caller() (Michael Kelley)
- x86/pm: Add enumeration check before spec MSRs save/restore setup (Pawan Gupta)
- x86/tsx: Add a feature bit for TSX control MSR support (Pawan Gupta)
- KVM: x86: remove exit_int_info warning in svm_handle_exit (Maxim Levitsky)
- KVM: x86: add kvm_leave_nested (Maxim Levitsky)
- KVM: x86: nSVM: harden svm_free_nested against freeing vmcb02 while still in use (Maxim Levitsky)
- KVM: x86: forcibly leave nested mode on vCPU reset (Maxim Levitsky)
- KVM: x86: nSVM: leave nested mode on vCPU free (Maxim Levitsky)
- mm: vmscan: fix extreme overreclaim and swap floods (Johannes Weiner)
- gcov: clang: fix the buffer overflow issue (Mukesh Ojha)
- nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty (Chen Zhongjin)
- usb: dwc3: gadget: Clear ep descriptor last (Thinh Nguyen)
- usb: dwc3: gadget: Return -ESHUTDOWN on ep disable (Thinh Nguyen)
- usb: dwc3: gadget: conditionally remove requests (Michael Grzeschik)
- bus: ixp4xx: Don't touch bit 7 on IXP42x (Linus Walleij)
- iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails (Chen Zhongjin)
- iio: light: apds9960: fix wrong register for gesture gain (Alejandro Concepción Rodríguez)
- arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency (Jakob Unterwurzacher)
- ext4: fix use-after-free in ext4_ext_shift_extents (Baokun Li)
- usb: cdnsp: fix issue with ZLP - added TD_SIZE = 1 (Pawel Laszczak)
- usb: cdnsp: Fix issue with Clear Feature Halt Endpoint (Pawel Laszczak)
- usb: dwc3: exynos: Fix remove() function (Marek Szyprowski)
- KVM: arm64: pkvm: Fixup boot mode to reflect that the kernel resumes from EL1 (Marc Zyngier)
- mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)
- mmc: sdhci-brcmstb: Enable Clock Gating to save power (Al Cooper)
- mmc: sdhci-brcmstb: Re-organize flags (Al Cooper)
- nios2: add FORCE for vmlinuz.gz (Randy Dunlap)
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Alexandre Belloni)
- lib/vdso: use "grep -E" instead of "egrep" (Greg Kroah-Hartman)
- s390/crashdump: fix TOD programmable field size (Heiko Carstens)
- net: thunderx: Fix the ACPI memory leak (Yu Liao)
- octeontx2-af: Fix reference count issue in rvu_sdp_init() (Xiongfeng Wang)
- octeontx2-pf: Add check for devm_kcalloc (Jiasheng Jiang)
- net: enetc: preserve TX ring priority across reconfiguration (Vladimir Oltean)
- net: enetc: cache accesses to &priv->si->hw (Vladimir Oltean)
- net: enetc: manage ENETC_F_QBV in priv->active_offloads only when enabled (Vladimir Oltean)
- nfc: st-nci: fix incorrect sizing calculations in EVT_TRANSACTION (Martin Faltesek)
- nfc: st-nci: fix memory leaks in EVT_TRANSACTION (Martin Faltesek)
- nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION (Martin Faltesek)
- s390/dasd: fix no record found for raw_track_access (Stefan Haberland)
- arcnet: fix potential memory leak in com20020_probe() (Wang Hai)
- ipv4: Fix error return code in fib_table_insert() (Ziyang Xuan)
- dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). (Kuniyuki Iwashima)
- fs: do not update freeing inode i_io_list (Svyatoslav Feldsherov)
- netfilter: flowtable_offload: add missing locking (Felix Fietkau)
- netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface (Jozsef Kadlecsik)
- dma-buf: fix racing conflict of dma_heap_add() (Dawei Li)
- bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() (Yang Yingliang)
- regulator: twl6030: re-add TWL6032_SUBCLASS (Andreas Kemnade)
- NFC: nci: fix memory leak in nci_rx_data_packet() (Liu Shixin)
- net: sched: allow act_ct to be built without NF_NAT (Xin Long)
- net: sparx5: fix error handling in sparx5_port_open() (Liu Jian)
- sfc: fix potential memleak in __ef100_hard_start_xmit() (Zhang Changzhong)
- net: wwan: iosm: use ACPI_FREE() but not kfree() in ipc_pcie_read_bios_cfg() (Wang ShaoBo)
- xfrm: Fix ignored return value in xfrm6_init() (Chen Zhongjin)
- xfrm: Fix oops in __xfrm_state_delete() (Thomas Jarosch)
- tipc: check skb_linearize() return value in tipc_disc_rcv() (YueHaibing)
- tipc: add an extra conn_get in tipc_conn_alloc (Xin Long)
- tipc: set con sock in tipc_conn_alloc (Xin Long)
- net/mlx5: Fix handling of entry refcount when command is not issued to FW (Moshe Shemesh)
- net/mlx5: Fix FW tracer timestamp calculation (Moshe Shemesh)
- net/mlx5: Do not query pci info while pci disabled (Roy Novich)
- netfilter: ipset: regression in ip_set_hash_ip.c (Vishwanath Pai)
- Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() (Yang Yingliang)
- Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() (Yang Yingliang)
- macsec: Fix invalid error code set (YueHaibing)
- nfp: add port from netdev validation for EEPROM access (Jaco Coetzee)
- nfp: fill splittable of devlink_port_attrs correctly (Diana Wang)
- net: pch_gbe: fix pci device refcount leak while module exiting (Yang Yingliang)
- octeontx2-af: debugsfs: fix pci device refcount leak (Yang Yingliang)
- net/qla3xxx: fix potential memleak in ql3xxx_send() (Zhang Changzhong)
- net: mvpp2: fix possible invalid pointer dereference (Hui Tang)
- net/mlx4: Check retval of mlx4_bitmap_init (Peter Kosyh)
- net: ethernet: mtk_eth_soc: fix error handling in mtk_open() (Liu Jian)
- ARM: dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties (Fabio Estevam)
- ARM: mxs: fix memory leak in mxs_machine_init() (Zheng Yongjun)
- iavf: Fix race condition between iavf_shutdown and iavf_remove (Slawomir Laba)
- iavf: Do not restart Tx queues after reset task failure (Ivan Vecera)
- iavf: Fix a crash during reset task (Ivan Vecera)
- netfilter: nf_tables: do not set up extensions for end interval (Pablo Neira Ayuso)
- netfilter: conntrack: Fix data-races around ct mark (Daniel Xu)
- 9p/fd: fix issue of list_del corruption in p9_fd_cancel() (Zhengchao Shao)
- net: pch_gbe: fix potential memleak in pch_gbe_tx_queue() (Wang Hai)
- nfc/nci: fix race with opening and closing (Lin Ma)
- net: dsa: sja1105: disallow C45 transactions on the BASE-TX MDIO bus (Vladimir Oltean)
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] (David Howells)
- rxrpc: Use refcount_t rather than atomic_t (David Howells)
- rxrpc: Allow list of in-use local UDP endpoints to be viewed in /proc (David Howells)
- net: liquidio: simplify if expression (Leon Romanovsky)
- selftests: mptcp: fix mibit vs mbit mix up (Matthieu Baerts)
- selftests: mptcp: more stable simult_flows tests (Paolo Abeni)
- ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl (Michael Grzeschik)
- tee: optee: fix possible memory leak in optee_register_device() (Yang Yingliang)
- bus: sunxi-rsb: Support atomic transfers (Samuel Holland)
- bus: sunxi-rsb: Remove the shutdown callback (Samuel Holland)
- regulator: core: fix UAF in destroy_regulator() (Yang Yingliang)
- spi: dw-dma: decrease reference count in dw_spi_dma_init_mfld() (Xiongfeng Wang)
- regulator: core: fix kobject release warning and memory leak in regulator_register() (Zeng Heng)
- ASoC: max98373: Add checks for devm_kcalloc (Jiasheng Jiang)
- scsi: storvsc: Fix handling of srb_status and capacity change events (Michael Kelley)
- x86/hyperv: Restore VP assist page after cpu offlining/onlining (Vitaly Kuznetsov)
- ASoC: soc-pcm: Don't zero TDM masks in __soc_pcm_open() (Richard Fitzgerald)
- ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove (Detlev Casanova)
- ASoC: hdac_hda: fix hda pcm buffer overflow issue (Junxiao Chang)
- ARM: dts: am335x-pcm-953: Define fixed regulators in root node (Dominik Haller)
- af_key: Fix send_acquire race with pfkey_register (Herbert Xu)
- xfrm: replay: Fix ESN wrap around for GSO (Christian Langrock)
- xfrm: fix "disable_policy" on ipv4 early demux (Eyal Birger)
- MIPS: pic32: treat port as signed integer (Jason A. Donenfeld)
- RISC-V: vdso: Do not add missing symbols to version section in linker script (Nathan Chancellor)
- ALSA: usb-audio: add quirk to fix Hamedal C20 disconnect issue (Ai Chao)
- Revert "drm/amdgpu: Revert "drm/amdgpu: getting fan speed pwm for vega10 properly"" (Asher Song)
- nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked (Aleksandr Miloserdov)
- arm64/syscall: Include asm/ptrace.h in syscall_wrapper header. (Kuniyuki Iwashima)
- block, bfq: fix null pointer dereference in bfq_bio_bfqg() (Yu Kuai)
- drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017) (Hans de Goede)
- scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC (Bart Van Assche)
- scsi: ibmvfc: Avoid path failures during live migration (Brian King)
- platform/x86/intel/hid: Add some ACPI device IDs (Ivan Hu)
- platform/x86/intel/pmt: Sapphire Rapids PMT errata fix (David E. Box)
- platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1 (Hans de Goede)
- platform/x86: ideapad-laptop: Disable touchpad_switch (Manyi Li)
- Revert "net: macsec: report real_dev features when HW offloading is enabled" (Sabrina Dubroca)
- selftests/bpf: Add verifier test for release_reference() (Youlin Li)
- spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run (Sean Nyekjaer)
- wifi: ath11k: Fix QCN9074 firmware boot on x86 (Tyler J. Stachecki)
- wifi: mac80211: Fix ack frame idr leak when mesh has no route (Nicolas Cavallari)
- wifi: airo: do not assign -1 to unsigned char (Jason A. Donenfeld)
- audit: fix undefined behavior in bit shift for AUDIT_BIT (Gaosheng Cui)
- riscv: dts: sifive unleashed: Add PWM controlled LEDs (Emil Renner Berthing)
- wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support (Jonas Jelonek)
- wifi: mac80211: fix memory free error when registering wiphy fail (taozhang)
- ceph: fix NULL pointer dereference for req->r_session (Xiubo Li)
- ceph: Use kcalloc for allocating multiple elements (Kenneth Lee)
- binder: validate alloc->mm in ->mmap() handler (Carlos Llamas)
- x86/sgx: Add overflow check in sgx_validate_offset_length() (Borys Popławski)
- x86/sgx: Create utility to validate user provided offset and length (Reinette Chatre)
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li)
- ceph: do not update snapshot context when there is no new snapshot (Xiubo Li)
- iio: pressure: ms5611: fixed value compensation bug (Mitja Spes)
- iio: ms5611: Simplify IO callback parameters (Lars-Peter Clausen)
- nvme-pci: add NVME_QUIRK_BOGUS_NID for Netac NV7000 (Tiago Dias Ferreira)
- nvme-pci: disable write zeroes on various Kingston SSD (Xander Li)
- nvme-pci: disable namespace identifiers for the MAXIO MAP1001 (Christoph Hellwig)
- nvme-pci: add NVME_QUIRK_BOGUS_NID for Micron Nitro (Bean Huo)
- nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH (Leo Savernik)
- drm/display: Don't assume dual mode adaptors support i2c sub-addressing (Simon Rettberg)
- ata: libata-core: do not issue non-internal commands once EH is pending (Niklas Cassel)
- ata: libata-scsi: simplify __ata_scsi_queuecmd() (Wenchao Hao)
- cifs: Fix connections leak when tlink setup failed (Zhang Xiaoxu)
- cifs: support nested dfs links over reconnect (Paulo Alcantara)
- cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara)
- cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara)
- sctp: clear out_curr if all frag chunks of current msg are pruned (Xin Long)
- sctp: remove the unnecessary sinfo_stream check in sctp_prsctp_prune_unsent (Xin Long)
- tty: serial: fsl_lpuart: don't break the on-going transfer when global reset (Sherry Sun)
- serial: fsl_lpuart: Fill in rs485_supported (Ilpo Järvinen)
- serial: Add rs485_supported to uart_port (Ilpo Järvinen)
- ASoC: fsl_asrc fsl_esai fsl_sai: allow CONFIG_PM=N (Maarten Zanders)
- ASoC: fsl_sai: use local device pointer (Marco Felsch)
- net: mana: Fix race on per-CQ variable napi work_done (Haiyang Zhang) [Orabug: 34917684]
- vhost-scsi: Fix max number of virtqueues (Mike Christie) [Orabug: 34915127]
- uek_kabi: unneeded include of uek_kabi.h in ip.h (Alan Maguire) [Orabug: 34911234]
- uek-container: Enable CONFIG_IA32_EMULATION (Liam Merwick) [Orabug: 34909790]
- uek-rpm: Disable CONFIG_SND_PCM_OSS for OL8 and OL9 (Harshit Mogalapalli) [Orabug: 34885467]
- uek-container: ol9: Update config with that generated by 'make olddefconfig' (Liam Merwick) [Orabug: 34850980]
- uek-container: ol8: Update config with that generated by 'make olddefconfig' (Liam Merwick) [Orabug: 34850980]
- uek-container: Fix x86_64 PVH ELF note with binutils >= 2.36 (Liam Merwick) [Orabug: 34850980]
- uek-rpm: ol9: Add spec file changes to build container kernel (Liam Merwick) [Orabug: 34850980]
- uek-rpm: ol8: Add spec file changes to build container kernel (Liam Merwick) [Orabug: 34850980]
- uek-rpm: ol9: x86_64: Add kernel-uek-container config file (Liam Merwick) [Orabug: 34850980]
- uek-rpm: ol8: x86_64: Add kernel-uek-container config file (Liam Merwick) [Orabug: 34850980]

_______________________________________________