Oracle Linux 6266 Published by

An unbreakable enterprise kernel security update has been released for Oracle Linux 9.



ELSA-2023-12393 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update


Oracle Linux Security Advisory ELSA-2023-12393

http://linux.oracle.com/errata/ELSA-2023-12393.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

aarch64:
bpftool-5.15.0-102.110.5.el9uek.aarch64.rpm
kernel-uek-5.15.0-102.110.5.el9uek.aarch64.rpm
kernel-uek-core-5.15.0-102.110.5.el9uek.aarch64.rpm
kernel-uek-debug-5.15.0-102.110.5.el9uek.aarch64.rpm
kernel-uek-debug-core-5.15.0-102.110.5.el9uek.aarch64.rpm
kernel-uek-debug-devel-5.15.0-102.110.5.el9uek.aarch64.rpm
kernel-uek-debug-modules-5.15.0-102.110.5.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-5.15.0-102.110.5.el9uek.aarch64.rpm
kernel-uek-devel-5.15.0-102.110.5.el9uek.aarch64.rpm
kernel-uek-doc-5.15.0-102.110.5.el9uek.noarch.rpm
kernel-uek-modules-5.15.0-102.110.5.el9uek.aarch64.rpm
kernel-uek-modules-extra-5.15.0-102.110.5.el9uek.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//kernel-uek-5.15.0-102.110.5.el9uek.src.rpm

Related CVEs:

CVE-2023-32233

Description of changes:

[5.15.0-102.110.5]
- RISC-V: Fix up a cherry-pick warning in setup_vm_final() (Alexandre Ghiti)
- Revert 'Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work' (Liu Jian)
- riscv: mm: remove redundant parameter of create_fdt_early_page_table (Song Shuai)
- kernfs: change kernfs_rename_lock into a read-write lock. (Imran Khan) [Orabug: 35257584]
- kernfs: Use a per-fs rwsem to protect per-fs list of kernfs_super_info. (Imran Khan) [Orabug: 35257584]
- kernfs: Introduce separate rwsem to protect inode attributes. (Imran Khan) [Orabug: 35257584]
- debugfs: allow access blktrace trace files in lockdown mode (Junxiao Bi) [Orabug: 35275017]
- rds: Add time_spent and payload info for send_cqe handler (Rohit Nair) [Orabug: 35302534]
- KVM: x86: Always enable legacy FP/SSE in allowed user XFEATURES (Dr. David Alan Gilbert) [Orabug: 35309074]
- KVM: x86: Reinstate kvm_vcpu_arch.guest_supported_xcr0 (Sean Christopherson) [Orabug: 35309074]
- x86/kvm: Fix compilation warning in non-x86_64 builds (Leonardo Bras) [Orabug: 35309074]
- x86/kvm/fpu: Remove kvm_vcpu_arch.guest_supported_xcr0 (Leonardo Bras) [Orabug: 35309074]
- x86/kvm/fpu: Limit guest user_xfeatures to supported bits of XCR0 (Leonardo Bras) [Orabug: 35309074]
- KVM: x86: Move CPUID.(EAX=0x12,ECX=1) mangling to __kvm_update_cpuid_runtime() (Vitaly Kuznetsov) [Orabug: 35309074]
- KVM: x86: Remove defunct setting of XCR0 for guest during vCPU create (Sean Christopherson) [Orabug: 35309074]
- netfilter: nf_tables: deactivate anonymous set from preparation phase (Pablo Neira Ayuso) [Orabug: 35382083] {CVE-2023-32233}
- uek-rpm: Enable CONFIG_VIRTIO_FS in UEK7 (Harshit Mogalapalli) [Orabug: 35383136]
- drm/hyperv: Add ratelimit on error message (Saurabh Sengar) [Orabug: 35388012]
- drm/hyperv: Don't overwrite dirt_needed value set by host (Saurabh Sengar) [Orabug: 35388012]
- SUNRPC: remove the maximum number of retries in call_bind_status (Dai Ngo) [Orabug: 35397524]
- scsi: target: iscsi: Handle abort for WRITE_PENDING cmds (Dmitry Bogdanov) [Orabug: 35404019]
- scsi: target: iscsit: Fix TAS handling during conn cleanup (Mike Christie) [Orabug: 35404019]
- scsi: target: Fix multiple LUN_RESET handling (Mike Christie) [Orabug: 35404019]
- scsi: target: iscsit: Free cmds before session free (Dmitry Bogdanov) [Orabug: 35404019]
- scsi: target: iscsit: Stop/wait on cmds during conn close (Mike Christie) [Orabug: 35404019]
- scsi: target: iscsit: isert: Alloc per conn cmd counter (Mike Christie) [Orabug: 35404019]
- scsi: target: Pass in cmd counter to use during cmd setup (Mike Christie) [Orabug: 35404019]
- scsi: target: Move cmd counter allocation (Mike Christie) [Orabug: 35404019]
- scsi: target: Move sess cmd counter to new struct (Mike Christie) [Orabug: 35404019]
- net/rds: Fix copy&paste error (Gerd Rausch) [Orabug: 35416946]

[5.15.0-102.110.4]
- vdpa/mlx5: Extend driver support for new features (Eli Cohen) [Orabug: 35210565]
- vdpa/mlx5: Make VIRTIO_NET_F_MRG_RXBUF off by default (Eli Cohen) [Orabug: 35210565]
- vhost-vdpa: free iommu domain after last use during cleanup (Gautam Dawar) [Orabug: 35210565]
- vdpa/mlx5: should not activate virtq object when suspended (Si-Wei Liu) [Orabug: 35210565]
- vp_vdpa: fix the crash in hot unplug with vp_vdpa (Cindy Lu) [Orabug: 35210565]
- vdpa/mlx5: support device features provisioning (Si-Wei Liu) [Orabug: 35210565]
- vdpa/mlx5: make MTU/STATUS presence conditional on feature bits (Si-Wei Liu) [Orabug: 35210565]
- vdpa: validate device feature provisioning against supported class (Si-Wei Liu) [Orabug: 35210565]
- vdpa: validate provisioned device features against specified attribute (Si-Wei Liu) [Orabug: 35210565]
- vdpa: conditionally read STATUS in config space (Si-Wei Liu) [Orabug: 35210565]
- vdpa: fix improper error message when adding vdpa dev (Si-Wei Liu) [Orabug: 35210565]
- vdpa/mlx5: Initialize CVQ iotlb spinlock (Eli Cohen) [Orabug: 35210565]
- vdpa/mlx5: Don't clear mr struct on destroy MR (Eli Cohen) [Orabug: 35210565]
- vdpa/mlx5: Directly assign memory key (Eli Cohen) [Orabug: 35210565]
- vhost-vdpa: print warning when vhost_vdpa_alloc_domain fails (Alvaro Karsz) [Orabug: 35210565]
- vdpa: Fix a couple of spelling mistakes in some messages (Colin Ian King) [Orabug: 35210565]
- vdpa: mlx5: support per virtqueue dma device (Jason Wang) [Orabug: 35210565]
- vdpa: set dma mask for vDPA device (Jason Wang) [Orabug: 35210565]
- virtio-vdpa: support per vq dma device (Jason Wang) [Orabug: 35210565]
- vdpa: introduce get_vq_dma_device() (Jason Wang) [Orabug: 35210565]
- virtio_ring: per virtqueue dma device (Jason Wang) [Orabug: 35210565]
- vhost: remove unused paramete (Liming Wu) [Orabug: 35210565]
- vhost-test: remove meaningless debug info (Liming Wu) [Orabug: 35210565]
- vdpa_sim: get rid of DMA ops (Jason Wang) [Orabug: 35210565]
- vdpa_sim_net: vendor satistics (Jason Wang) [Orabug: 35210565]
- vdpa_sim: support vendor statistics (Jason Wang) [Orabug: 35210565]
- vdpasim: customize allocation size (Jason Wang) [Orabug: 35210565]
- vdpa_sim: switch to use __vdpa_alloc_device() (Jason Wang) [Orabug: 35210565]
- vdpa_sim: use weak barriers (Jason Wang) [Orabug: 35210565]
- vdpa_sim: Implement resume vdpa op (Sebastien Boeuf) [Orabug: 35210565]
- vhost-vdpa: uAPI to resume the device (Sebastien Boeuf) [Orabug: 35210565]
- vhost-vdpa: Introduce RESUME backend feature bit (Sebastien Boeuf) [Orabug: 35210565]
- vdpa: Add resume operation (Sebastien Boeuf) [Orabug: 35210565]
- vdpa_sim_net: Offer VIRTIO_NET_F_STATUS (Eugenio Perez) [Orabug: 35210565]
- vdpa/mlx5: Move some definitions to a new header file (Eli Cohen) [Orabug: 35210565]
- vdpa_sim_net: should not drop the multicast/broadcast packet (Cindy Lu) [Orabug: 35210565]
- vdpasim: fix memory leak when freeing IOTLBs (Jason Wang) [Orabug: 35210565]
- vdpa: conditionally fill max max queue pair for stats (Jason Wang) [Orabug: 35210565]
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove (Rong Wang) [Orabug: 35210565]
- vhost_vdpa: fix the crash in unmap a large memory (Cindy Lu) [Orabug: 35210565]
- vhost-vdpa: fix an iotlb memory leak (Stefano Garzarella) [Orabug: 35210565]
- RDMA/mlx5: remove variable i (Colin Ian King) [Orabug: 35210565]
- vdpa/mlx5: Avoid overwriting CVQ iotlb (Eli Cohen) [Orabug: 35210565]
- vdpa/mlx5: Avoid using reslock in event_handler (Eli Cohen) [Orabug: 35210565]
- vdpa/mlx5: Fix wrong mac address deletion (Eli Cohen) [Orabug: 35210565]
- vdpa/mlx5: Return error on vlan ctrl commands if not supported (Eli Cohen) [Orabug: 35210565]
- vdpa/mlx5: Fix rule forwarding VLAN to TIR (Eli Cohen) [Orabug: 35210565]
- vdpa: merge functionally duplicated dev_features attributes (Si-Wei Liu) [Orabug: 35210565]
- vDPA: conditionally read MTU and MAC in dev cfg space (Zhu Lingshan) [Orabug: 35210565]
- vDPA: fix spars cast warning in vdpa_dev_net_mq_config_fill (Zhu Lingshan) [Orabug: 35210565]
- vDPA: check virtio device features to detect MQ (Zhu Lingshan) [Orabug: 35210565]
- vDPA: check VIRTIO_NET_F_RSS for max_virtqueue_paris's presence (Zhu Lingshan) [Orabug: 35210565]
- vDPA: only report driver features if FEATURES_OK is set (Zhu Lingshan) [Orabug: 35210565]
- vDPA: allow userspace to query features of a vDPA device (Zhu Lingshan) [Orabug: 35210565]
- vp_vdpa: support feature provisioning (Jason Wang) [Orabug: 35210565]
- vdpa_sim_net: support feature provisioning (Jason Wang) [Orabug: 35210565]
- vdpa: device feature provisioning (Jason Wang) [Orabug: 35210565]
- virtio: drop vp_legacy_set_queue_size (Michael S. Tsirkin) [Orabug: 35210565]
- vdpa/mlx5: Fix MQ to support non power of two num queues (Eli Cohen) [Orabug: 35210565]
- vdpa/mlx5: Fix possible uninitialized return value (Eli Cohen) [Orabug: 35210565]
- vdpa/mlx5: Support different address spaces for control and data (Eli Cohen) [Orabug: 35210565]
- vdpa/mlx5: Implement susupend virtqueue callback (Eli Cohen) [Orabug: 35210565]
- vdpa/mlx5: Use eth_broadcast_addr() to assign broadcast address (Xu Qiang) [Orabug: 35210565]
- vdpa_sim: Implement suspend vdpa op (Eugenio Perez) [Orabug: 35210565]
- vhost-vdpa: uAPI to suspend the device (Eugenio Perez) [Orabug: 35210565]
- vhost-vdpa: introduce SUSPEND backend feature bit (Eugenio Perez) [Orabug: 35210565]
- vdpa: Add suspend operation (Eugenio Perez) [Orabug: 35210565]
- vhost-vdpa: Call ida_simple_remove() when failed (Bo Liu) [Orabug: 35210565]
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c (Zhu Lingshan) [Orabug: 35210565]
- vDPA: !FEATURES_OK should not block querying device config space (Zhu Lingshan) [Orabug: 35210565]
- vdpa_sim: use max_iotlb_entries as a limit in vhost_iotlb_init (Stefano Garzarella) [Orabug: 35210565]
- vringh: iterate on iotlb_translate to handle large translations (Stefano Garzarella) [Orabug: 35210565]
- vhost-vdpa: call vhost_vdpa_cleanup during the release (Stefano Garzarella) [Orabug: 35210565]
- vdpa/mlx5: Add RX MAC VLAN filter support (Eli Cohen) [Orabug: 35210565]
- vdpa/mlx5: Remove flow counter from steering (Eli Cohen) [Orabug: 35210565]
- vhost-vdpa: return -EFAULT on copy_to_user() failure (Dan Carpenter) [Orabug: 35210565]
- vdpasim: Off by one in vdpasim_set_group_asid() (Dan Carpenter) [Orabug: 35210565]
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa (Cindy Lu) [Orabug: 35210565]
- vdpasim: control virtqueue support (Gautam Dawar) [Orabug: 35210565]
- vdpa_sim: filter destination mac address (Gautam Dawar) [Orabug: 35210565]
- vdpa_sim: factor out buffer completion logic (Gautam Dawar) [Orabug: 35210565]
- vdpa_sim: advertise VIRTIO_NET_F_MTU (Gautam Dawar) [Orabug: 35210565]
- vhost-vdpa: support ASID based IOTLB API (Gautam Dawar) [Orabug: 35210565]
- vhost-vdpa: introduce uAPI to set group ASID (Gautam Dawar) [Orabug: 35210565]
- vhost-vdpa: uAPI to get virtqueue group id (Gautam Dawar) [Orabug: 35210565]
- vhost-vdpa: introduce uAPI to get the number of address spaces (Gautam Dawar) [Orabug: 35210565]
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups (Gautam Dawar) [Orabug: 35210565]
- vhost-vdpa: introduce asid based IOTLB (Gautam Dawar) [Orabug: 35210565]
- vhost: support ASID in IOTLB API (Gautam Dawar) [Orabug: 35210565]
- vhost_iotlb: split out IOTLB initialization (Gautam Dawar) [Orabug: 35210565]
- vdpa: introduce config operations for associating ASID to a virtqueue group (Gautam Dawar) [Orabug: 35210565]
- vdpa: multiple address spaces support (Gautam Dawar) [Orabug: 35210565]
- vdpa: introduce virtqueue groups (Gautam Dawar) [Orabug: 35210565]
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB (Gautam Dawar) [Orabug: 35210565]
- vhost-vdpa: passing iotlb to IOMMU mapping helpers (Gautam Dawar) [Orabug: 35210565]
- virtio-vdpa: don't set callback if virtio doesn't need it (Gautam Dawar) [Orabug: 35210565]
- vhost: move the backend feature bits to vhost_types.h (Gautam Dawar) [Orabug: 35210565]
- vdpa/mlx5: Use readers/writers semaphore instead of mutex (Eli Cohen) [Orabug: 35210565]
- vdpa/mlx5: Add support for reading descriptor statistics (Eli Cohen) [Orabug: 35210565]
- net/vdpa: Use readers/writers semaphore instead of cf_mutex (Eli Cohen) [Orabug: 35210565]
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex (Eli Cohen) [Orabug: 35210565]
- vdpa: Add support for querying vendor statistics (Eli Cohen) [Orabug: 35210565]
- net/mlx5: Add support for configuring max device MTU (Eli Cohen) [Orabug: 35210565]
- uek-rpm: Install dtb files under /lib/modules (Dave Kleikamp) [Orabug: 35333240]
- Revert 'mm: track driver pinned pages across exec' (Anthony Yznaga) [Orabug: 35346656]
- Revert 'cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset' (Tom Hromatka) [Orabug: 35361250]
- Revert 'rds: ib: Fix non-parenthetical mutex/semaphore use' (Hakon Bugge) [Orabug: 35377399]

[5.15.0-102.110.3]
- uek-rpm: Fix the core lists to match changes in qrtr build. (Jack Vogel)
- Revert 'KVM: arm64: PMU: Restore the guest's EL0 event counting after migration' (Jack Vogel)

[5.15.0-102.110.2]
- LTS version: v5.15.110 (Jack Vogel)
- riscv: No need to relocate the dtb as it lies in the fixmap region (Alexandre Ghiti)
- riscv: Do not set initial_boot_params to the linear address of the dtb (Alexandre Ghiti)
- riscv: Move early dtb mapping into the fixmap region (Alexandre Ghiti)
- selftests: mptcp: join: fix 'invalid address, ADD_ADDR timeout' (Matthieu Baerts)
- driver core: Don't require dynamic_debug for initcall_debug probe timing (Stephen Boyd)
- USB: serial: option: add UNISOC vendor and TOZED LT70C product (Ar?nc UNAL)
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (Ruihan Li)
- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var (Daniel Vetter)
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (Jisoo Jang)
- KVM: arm64: Fix buffer overflow in kvm_arm_set_fw_reg() (Dan Carpenter)
- KVM: arm64: Retry fault if vma_lookup() results become invalid (David Matlack)
- selftests/kselftest/runner/run_one(): allow running non-executable files (SeongJae Park)
- PCI/ASPM: Remove pcie_aspm_pm_state_change() (Kai-Heng Feng)
- LTS version: v5.15.109 (Jack Vogel)
- soc: sifive: l2_cache: fix missing of_node_put() in sifive_l2_init() (Yang Yingliang)
- soc: sifive: l2_cache: fix missing free_irq() in error path in sifive_l2_init() (Yang Yingliang)
- soc: sifive: l2_cache: fix missing iounmap() in error path in sifive_l2_init() (Yang Yingliang)
- ASN.1: Fix check for strdup() success (Ekaterina Orlova)
- ASoC: fsl_asrc_dma: fix potential null-ptr-deref (Nikita Zhandarovich)
- mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock (Tetsuo Handa)
- iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() (Dan Carpenter)
- counter: 104-quad-8: Fix race condition between FLAG and CNTR reads (William Breathitt Gray)
- pwm: hibvt: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig)
- pwm: iqs620a: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig)
- pwm: meson: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig)
- sctp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima)
- dccp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima)
- inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy(). (Kuniyuki Iwashima)
- tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct(). (Kuniyuki Iwashima)
- udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM). (Kuniyuki Iwashima)
- fuse: fix deadlock between atomic O_TRUNC and page invalidation (Miklos Szeredi)
- fuse: always revalidate rename target dentry (Jiachen Zhang)
- fuse: fix attr version comparison in fuse_read_update_size() (Miklos Szeredi)
- purgatory: fix disabling debug info (Alyssa Ross)
- docs: futex: Fix kernel-doc references after code split-up preparation (Salvatore Bonaccorso)
- MIPS: Define RUNTIME_DISCARD_EXIT in LD script (Jiaxun Yang)
- sched/fair: Fixes for capacity inversion detection (Qais Yousef)
- sched/uclamp: Fix a uninitialized variable warnings (Qais Yousef)
- sched/fair: Consider capacity inversion in util_fits_cpu() (Qais Yousef)
- sched/fair: Detect capacity inversion (Qais Yousef)
- sched/uclamp: Cater for uclamp in find_energy_efficient_cpu()'s early exit condition (Qais Yousef)
- sched/uclamp: Make cpu_overutilized() use util_fits_cpu() (Qais Yousef)
- sched/uclamp: Fix fits_capacity() check in feec() (Qais Yousef)
- mm: page_alloc: skip regions with hugetlbfs pages when allocating 1G pages (Mel Gorman)
- mm/khugepaged: check again on anon uffd-wp during isolation (Peter Xu)
- drm/i915: Fix fast wake AUX sync len (Ville Syrjala)
- mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25 (Bhavya Kapoor)
- kernel/sys.c: fix and improve control flow in __sys_setres[ug]id() (Ondrej Mosnacek)
- memstick: fix memory leak if card device is never registered (Greg Kroah-Hartman)
- nilfs2: initialize unused bytes in segment summary blocks (Ryusuke Konishi)
- iio: light: tsl2772: fix reading proximity-diodes from device tree (Brian Masney)
- rtmutex: Add acquire semantics for rtmutex lock acquisition slow path (Mel Gorman)
- platform/x86: gigabyte-wmi: add support for X570S AORUS ELITE (Hans de Goede)
- xen/netback: use same error messages for same errors (Juergen Gross)
- nvme-tcp: fix a possible UAF when failing to allocate an io queue (Sagi Grimberg)
- s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling (Heiko Carstens)
- net: dsa: b53: mmap: add phy ops (Alvaro Fernandez Rojas)
- scsi: core: Improve scsi_vpd_inquiry() checks (Damien Le Moal)
- scsi: megaraid_sas: Fix fw_crash_buffer_show() (Tomas Henzl)
- selftests: sigaltstack: fix -Wuninitialized (Nick Desaulniers)
- platform/x86 (gigabyte-wmi): Add support for A320M-S2H V2 (Frank Crawford)
- Input: i8042 - add quirk for Fujitsu Lifebook A574/H (Jonathan Denose)
- f2fs: Fix f2fs_truncate_partial_nodes ftrace event (Douglas Raillard)
- e1000e: Disable TSO on i219-LM card to increase speed (Sebastian Basierski)
- bpf: Fix incorrect verifier pruning due to missing register precision taints (Daniel Borkmann)
- spi: spi-rockchip: Fix missing unwind goto in rockchip_sfc_probe() (Li Lanzhe)
- mlxsw: pci: Fix possible crash during initialization (Ido Schimmel)
- net: rpl: fix rpl header size calculation (Alexander Aring)
- bonding: Fix memory leak when changing bond type to Ethernet (Ido Schimmel)
- mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() (Nikita Zhandarovich)
- bnxt_en: Do not initialize PTP on older P3/P4 chips (Michael Chan)
- netfilter: nf_tables: tighten netlink attribute requirements for catch-all elements (Pablo Neira Ayuso)
- netfilter: nf_tables: validate catch-all set elements (Pablo Neira Ayuso)
- i40e: fix i40e_setup_misc_vector() error handling (Aleksandr Loktionov)
- i40e: fix accessing vsi->active_filters without holding lock (Aleksandr Loktionov)
- netfilter: nf_tables: fix ifdef to also consider nf_tables=m (Florian Westphal)
- sfc: Fix use-after-free due to selftest_work (Ding Hui)
- sfc: Split STATE_READY in to STATE_NET_DOWN and STATE_NET_UP. (Jonathan Cooper)
- virtio_net: bugfix overflow inside xdp_linearize_page() (Xuan Zhuo)
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Gwangun Jung)
- regulator: fan53555: Fix wrong TCS_SLEW_MASK (Cristian Ciocaltea)
- regulator: fan53555: Explicitly include bits header (Cristian Ciocaltea)
- netfilter: br_netfilter: fix recent physdev match breakage (Florian Westphal)
- arm64: dts: imx8mm-evk: correct pmic clock source (Peng Fan)
- arm64: dts: meson-g12-common: specify full DMC range (Marc Gonzalez)
- arm64: dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node (Dmitry Baryshkov)
- ARM: dts: rockchip: fix a typo error for rk3288 spdif node (Jianqun Xu)
- LTS version: v5.15.108 (Jack Vogel)
- nvme-pci: avoid the deepest sleep state on ZHITAI TiPro5000 SSDs (Xi Ruoyao)
- counter: Add the necessary colons and indents to the comments of counter_compi (Yanteng Si)
- counter: fix docum. build problems after filename change (Randy Dunlap)
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider)
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider)
- nvme-pci: add NVME_QUIRK_BOGUS_NID for T-FORCE Z330 SSD (Duy Truong)
- nvme-pci: mark Lexar NM760 as IGNORE_DEV_SUBNQN (Juraj Pecigos)
- nvme-pci: add NVME_QUIRK_BOGUS_NID for Lexar NM760 (Abhijit)
- nvme-pci: add NVME_QUIRK_BOGUS_NID for Lexar NM610 (Shyamin Ayesh)
- nvme-pci: Crucial P2 has bogus namespace ids (Tobias Gruetzmacher)
- nvme-pci: avoid the deepest sleep state on ZHITAI TiPro7000 SSDs (Ning Wang)
- nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG GAMMIX S50 (Stefan Reiter)
- i2c: ocores: generate stop condition after timeout in polling mode (Gregor Herburger)
- x86/rtc: Remove __init for runtime functions (Matija Glavinic Pecotic)
- sched/fair: Fix imbalance overflow (Vincent Guittot)
- sched/fair: Move calculate of avg_load to a better location (zgpeng)
- powerpc/papr_scm: Update the NUMA distance table for the target node (Aneesh Kumar K.V)
- ubi: Fix deadlock caused by recursively holding work_sem (ZhaoLong Wang)
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size (Zhihao Cheng)
- mptcp: stricter state check in mptcp_worker (Paolo Abeni)
- mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni)
- cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (Waiman Long)
- x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot (Basavaraj Natikar)
- scsi: ses: Handle enclosure with just a primary component gracefully (Jiri Kosina)
- net: phy: nxp-c45-tja11xx: fix unsigned long multiplication overflow (Radu Pirea (OSS))
- net: phy: nxp-c45-tja11xx: add remove callback (Radu Pirea (OSS))
- net: sfp: initialize sfp->i2c_block_size at sfp allocation (Ivan Bornyakov)
- riscv: add icache flush for nommu sigreturn trampoline (Mathis Salmen)
- drm/i915: fix race condition UAF in i915_perf_add_config_ioctl (Min Li)
- i915/perf: Replace DRM_DEBUG with driver specific drm_dbg call (Umesh Nerlige Ramappa)
- tracing: Have tracing_snapshot_instance_cond() write errors to the appropriate instance (Steven Rostedt (Google))
- tracing: Add trace_array_puts() to write into instance (Steven Rostedt (Google))
- counter: 104-quad-8: Fix Synapse action reported for Index signals (William Breathitt Gray)
- counter: Internalize sysfs interface code (William Breathitt Gray)
- counter: stm32-timer-cnt: Provide defines for slave mode selection (William Breathitt Gray)
- counter: stm32-lptimer-cnt: Provide defines for clock polarities (William Breathitt Gray)
- ACPI: resource: Add Medion S17413 to IRQ override quirk (Aymeric Wibo)
- wifi: iwlwifi: mvm: fix mvmtxq->stopped handling (Johannes Berg)
- asymmetric_keys: log on fatal failures in PE/pkcs7 (Robbie Harwood)
- verify_pefile: relax wrapper length check (Robbie Harwood)
- drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F (Hans de Goede)
- efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (Hans de Goede)
- i2c: hisi: Avoid redundant interrupts (Yicong Yang)
- i2c: imx-lpi2c: clean rx/tx buffers upon new message (Alexander Stein)
- wifi: mwifiex: mark OF related data as maybe unused (Krzysztof Kozlowski)
- power: supply: cros_usbpd: reclassify 'default case!' as debug (Grant Grundler)
- ARM: 9290/1: uaccess: Fix KASAN false-positives (Andrew Jeffery)
- libbpf: Fix single-line struct definition output in btf_dump (Andrii Nakryiko)
- skbuff: Fix a race between coalescing and releasing SKBs (Liang Chen)
- net: macb: fix a memory corruption in extended buffer descriptor mode (Roman Gushchin)
- udp6: fix potential access to stale information (Eric Dumazet)
- RDMA/core: Fix GID entry ref leak when create_ah fails (Saravanan Vajravel)
- sctp: fix a potential overflow in sctp_ifwdtsn_skip (Xin Long)
- net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() (Ziyang Xuan)
- qlcnic: check pci_reset_function result (Denis Plotnikov)
- drm/armada: Fix a potential double free in an error handling path (Christophe JAILLET)
- tcp: restrict net.ipv4.tcp_app_win (YueHaibing)
- niu: Fix missing unwind goto in niu_alloc_channels() (Harshit Mogalapalli)
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition (Zheng Wang)
- bpf: tcp: Use sock_gen_put instead of sock_put in bpf_iter_tcp (Martin KaFai Lau)
- IB/mlx5: Add support for 400G_8X lane speed (Maher Sanalla)
- RDMA/irdma: Add ipv4 check to irdma_find_listener() (Tatyana Nikolova)
- RDMA/irdma: Increase iWARP CM default rexmit count (Mustafa Ismail)
- RDMA/irdma: Fix memory leak of PBLE objects (Mustafa Ismail)
- clk: sprd: set max_register according to mapping range (Chunyan Zhang)
- drm/i915/dsi: fix DSS CTL register offsets for TGL+ (Jani Nikula)
- KVM: arm64: PMU: Restore the guest's EL0 event counting after migration (Reiji Watanabe)
- mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min (Christophe Kerello)
- mtd: rawnand: stm32_fmc2: remove unsupported EDO mode (Christophe Kerello)
- mtd: rawnand: meson: fix bitmask for length in command word (Arseniy Krasnov)
- mtdblock: tolerate corrected bit-flips (Bang Li)
- fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace (Daniel Vetter)
- btrfs: fix fast csum implementation detection (Christoph Hellwig)
- btrfs: print checksum type and implementation at mount time (David Sterba)
- Bluetooth: Fix race condition in hidp_session_thread (Min Li)
- Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (Luiz Augusto von Dentz)
- ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards (Oswald Buddenhagen)
- ALSA: emu10k1: don't create old pass-through playback device on Audigy (Oswald Buddenhagen)
- ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() (Xu Biang)
- ALSA: i2c/cs8427: fix iec958 mixer control deactivation (Oswald Buddenhagen)
- ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard (Oswald Buddenhagen)
- ALSA: emu10k1: fix capture interrupt handler unlinking (Oswald Buddenhagen)
- Revert 'pinctrl: amd: Disable and mask interrupts on resume' (Kornel Duleba)
- LTS version: v5.15.107 (Jack Vogel)
- bpftool: Print newline before '}' for struct with padding only fields (Eduard Zingerman)
- ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown (Heming Zhao)
- kbuild: fix single directory build (Masahiro Yamada)
- mm: take a page reference when removing device exclusive entries (Alistair Popple)
- drm/bridge: lt9611: Fix PLL being unable to lock (Robert Foss)
- mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() (Rongwei Wang)
- ring-buffer: Fix race while reader and writer are on the same page (Zheng Yejian)
- drm/nouveau/disp: Support more modes by checking with lower bpc (Karol Herbst)
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path (Boris Brezillon)
- mm: vmalloc: avoid warn_alloc noise caused by fatal signal (Yafang Shao)
- ASoC: hdac_hdmi: use set_stream() instead of set_tdm_slots() (Jason Montleon)
- tracing: Free error logs of tracing instances (Steven Rostedt (Google))
- can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events (Michal Sojka)
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access (Oleksij Rempel)
- fs: drop peer group ids under namespace lock (Christian Brauner)
- ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct() (Zheng Yejian)
- ftrace: Mark get_lock_parent_ip() __always_inline (John Keeping)
- perf/core: Fix the same task check in perf_event_set_output (Kan Liang)
- cifs: sanitize paths in cifs_update_super_prepath. (Thiago Rafael Becker)
- smb3: lower default deferred close timeout to address perf regression (Steve French)
- smb3: allow deferred close timeout to be configurable (Steve French)
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() (Zhong Jinghua)
- scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() (Li Zetao)
- iio: adc: ad7791: fix IRQ flags (Nuno Sa)
- coresight-etm4: Fix for() loop drvdata->nr_addr_cmp range bug (Steve Clevenger)
- coresight: etm4x: Do not access TRCIDR1 for identification (Suzuki K Poulose)
- ALSA: hda/realtek: Add quirk for Clevo X370SNW (Jeremy Soller)
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN (Marios Makassikis)
- dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs (Geert Uytterhoeven)
- nilfs2: fix sysfs interface lifetime (Ryusuke Konishi)
- nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (Ryusuke Konishi)
- tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty (Sherry Sun)
- tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (Biju Das)
- tty: serial: sh-sci: Fix transmit end interrupt handler (Biju Das)
- iio: light: cm32181: Unregister second I2C client if present (Kai-Heng Feng)
- iio: dac: cio-dac: Fix max DAC write value check for 12-bit (William Breathitt Gray)
- iio: adc: ti-ads7950: Set can_sleep flag for GPIO chip (Lars-Peter Clausen)
- iio: adis16480: select CONFIG_CRC32 (Arnd Bergmann)
- USB: serial: option: add Quectel RM500U-CN modem (Bj?rn Mork)
- USB: serial: option: add Telit FE990 compositions (Enrico Sau)
- usb: typec: altmodes/displayport: Fix configure initial pin assignment (RD Babiera)
- USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs (Kees Jan Koster)
- usb: dwc3: pci: add support for the Intel Meteor Lake-S (Heikki Krogerus)
- usb: cdnsp: Fixes error: uninitialized symbol 'len' (Pawel Laszczak)
- xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu (D Scott Phillips)
- usb: xhci: tegra: fix sleep in atomic call (Wayne Chang)
- kbuild: refactor single builds of *.ko (Masahiro Yamada)
- gve: Secure enough bytes in the first TX desc for all TCP pkts (Shailend Chand)
- ethtool: reset #lanes when lanes is omitted (Andy Roulin)
- ice: Reset FDIR counter in FDIR init stage (Lingyu Liu)
- ice: fix wrong fallback logic for FDIR (Simei Su)
- NFSD: callback request does not use correct credential for AUTH_SYS (Dai Ngo)
- sunrpc: only free unix grouplist after RCU settles (Jeff Layton)
- net: stmmac: fix up RX flow hash indirection table when setting channels (Corinna Vinschen)
- net: ethernet: ti: am65-cpsw: Fix mdio cleanup in probe (Siddharth Vadapalli)
- gpio: davinci: Add irq chip flag to skip set wake (Dhruva Gole)
- platform/x86: think-lmi: Clean up display of current_value on Thinkstation (Mark Pearson)
- platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings (Mark Pearson)
- platform/x86: think-lmi: Fix memory leak when showing current settings (Armin Wolf)
- ipv6: Fix an uninit variable access bug in __ip6_make_skb() (Ziyang Xuan)
- net: qrtr: Do not do DEL_SERVER broadcast after DEL_CLIENT (Sricharan Ramabadhran)
- sctp: check send stream number after wait_for_sndbuf (Xin Long)
- net: dsa: mv88e6xxx: Reset mv88e6393x force WD event bit (Gustav Ekelund)
- net: don't let netpoll invoke NAPI if in xmit context (Jakub Kicinski)
- icmp: guard against too small mtu (Eric Dumazet)
- NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL (Chuck Lever)
- net: qrtr: Fix a refcount bug in qrtr_recvmsg() (Ziyang Xuan)
- net: qrtr: combine nameservice into main module (Luca Weiss)
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (Felix Fietkau)
- KVM: s390: pv: fix external interruption loop not always detected (Nico Boehr)
- pwm: sprd: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig)
- pwm: cros-ec: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig)
- Drivers: vmbus: Check for channel allocation before looking up relids (Mohammed Gamal)
- gpio: GPIO_REGMAP: select REGMAP instead of depending on it (Randy Dunlap)
- bpf: hash map, avoid deadlock with suitable hash mask (Tonghao Zhang)
- serial: exar: Add support for Sealevel 7xxxC serial cards (Matthew Howell)
- serial: 8250_exar: derive nr_ports from PCI ID for Acces I/O cards (Andy Shevchenko)
- iavf/iavf_main: actually log ->src mask when talking about it (Daniil Tatianin)
- iavf: return errno code instead of status code (Jacob Keller)
- platform/x86: int3472/discrete: Ensure the clk/power enable pins are in output mode (Hans de Goede)
- platform/x86: int3472: Split into 2 drivers (Hans de Goede)
- RDMA/irdma: Do not request 2-level PBLEs for CQ alloc (Mustafa Ismail)
- NFSD: pass range end to vfs_fsync_range() instead of count (Brian Foster)
- NFSD: Fix sparse warning (Chuck Lever)
- ocfs2: fix memory leak in ocfs2_mount_volume() (Li Zetao)
- ocfs2: rewrite error handling of ocfs2_fill_super (Heming Zhao via Ocfs2-devel)
- ocfs2: ocfs2_mount_volume does cleanup job before return error (Heming Zhao via Ocfs2-devel)
- LTS version: v5.15.106 (Jack Vogel)
- x86/PVH: avoid 32-bit build warning when obtaining VGA console info (Jan Beulich)
- hsr: ratelimit only when errors are printed (Matthieu Baerts)
- libbpf: Fix btf_dump's packed struct determination (Andrii Nakryiko)
- selftests/bpf: Add few corner cases to test padding handling of btf_dump (Andrii Nakryiko)
- libbpf: Fix BTF-to-C converter's padding logic (Andrii Nakryiko)
- selftests/bpf: Test btf dump for struct with padding only fields (Eduard Zingerman)
- zonefs: Fix error message in zonefs_file_dio_append() (Damien Le Moal)
hrtimer dance to common x86 (Sean Christopherson)
- s390/uaccess: add missing earlyclobber annotations to __clear_user() (Heiko Carstens)
- KVM: arm64: Disable interrupts while walking userspace PTs (Marc Zyngier)
- drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub (Fangzhi Zuo)
- drm/etnaviv: fix reference leak when mmaping imported buffer (Lucas Stach)
- rcu: Fix rcu_torture_read ftrace event (Douglas Raillard)
- xtensa: fix KASAN report for show_stack (Max Filippov)
- ALSA: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z (huangwenhui)
- ALSA: hda/realtek: Add quirks for some Clevo laptops (Tim Crawford)
- ALSA: usb-audio: Fix regression on detection of Roland VS-100 (Takashi Iwai)
- ALSA: hda/conexant: Partial revert of a quirk for Lenovo (Takashi Iwai)
- NFSv4: Fix hangs when recovering open state after a server reboot (Trond Myklebust)
- powerpc: Don't try to copy PPR for task with NULL pt_regs (Jens Axboe)
- pinctrl: at91-pio4: fix domain name assignment (Johan Hovold)
- pinctrl: amd: Disable and mask interrupts on resume (Kornel Duleba)
- net: phy: dp83869: fix default value for tx-/rx-internal-delay (Josua Mayer)
- xen/netback: don't do grant copy across page boundary (Juergen Gross)
- can: j1939: prevent deadlock by moving j1939_sk_errqueue() (Oleksij Rempel)
- zonefs: Always invalidate last cached page on append write (Damien Le Moal)
- btrfs: scan device in non-exclusive mode (Anand Jain)
- btrfs: fix race between quota disable and quota assign ioctls (Filipe Manana)
- Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table (Hans de Goede)
- cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (David Disseldorp)
- cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara)
- Input: focaltech - use explicitly signed char type (Jason A. Donenfeld)
- Input: alps - fix compatibility with -funsigned-char (msizanoen)
- iommu/vt-d: Allow zero SAGAW if second-stage not supported (Lu Baolu)
- pinctrl: ocelot: Fix alt mode for ocelot (Horatiu Vultur)
- net: ethernet: mtk_eth_soc: fix flow block refcounting logic (Felix Fietkau)
- net: dsa: mv88e6xxx: Enable IGMP snooping on user ports only (Steffen Batz)
- bnxt_en: Add missing 200G link speed reporting (Michael Chan)
- bnxt_en: Fix typo in PCI id to device description string mapping (Kalesh AP)
- bnxt_en: Fix reporting of test result in ethtool selftest (Kalesh AP)
- i40e: fix registers dump after run ethtool adapter self test (Radoslaw Tyl)
- net: ipa: compute DMA pool size properly (Alex Elder)
- ALSA: ymfpci: Fix BUG_ON in probe function (Tasos Sahanidis)
- ALSA: ymfpci: Create card with device-managed snd_devm_card_new() (Tasos Sahanidis)
- ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg() (Jakob Koschel)
- ice: add profile conflict check for AVF FDIR (Junfeng Guo)
- smsc911x: avoid PHY being resumed when interface is not up (Wolfram Sang)
- net: mvpp2: parser fix PPPoE (Sven Auhagen)
- net: mvpp2: parser fix QinQ (Sven Auhagen)
- net: mvpp2: classifier flow fix fragmentation flags (Sven Auhagen)
- loop: LOOP_CONFIGURE: send uevents for partitions (Alyssa Ross)
- loop: suppress uevents while reconfiguring the device (Christoph Hellwig)
- s390/vfio-ap: fix memory leak in vfio_ap device driver (Tony Krowiak)
- can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Ivan Orlov)
- platform/x86/intel/pmc: Alder Lake PCH slp_s0_residency fix (Rajvi Jingar)
- drm/i915/tc: Fix the ICL PHY ownership check in TC-cold state (Imre Deak)
- net: stmmac: don't reject VLANs when IFF_PROMISC is set (Vladimir Oltean)
- net/net_failover: fix txq exceeding warning (Faicker Mo)
- regulator: Handle deferred clk (Christophe JAILLET)
- r8169: fix RTL8168H and RTL8107E rx crc error (ChunHao Lin)
- net: dsa: microchip: ksz8863_smi: fix bulk access (Oleksij Rempel)
- ptp_qoriq: fix memory leak in probe() (SongJingyi)
- scsi: mpt3sas: Don't print sense pool info twice (Jerry Snitselaar)
- scsi: megaraid_sas: Fix crash after a double completion (Tomas Henzl)
- sfc: ef10: don't overwrite offload features at NIC reset (Inigo Huguet)
- SUNRPC: fix shutdown of NFS TCP client socket (Siddharth Kawar)
- mtd: rawnand: meson: invalidate cache on polling ECC bit (Arseniy Krasnov)
- platform/x86: think-lmi: Add possible_values for ThinkStation (Mark Pearson)
- platform/x86: think-lmi: only display possible_values if available (Mark Pearson)
- platform/x86: think-lmi: use correct possible_values delimiters (Mark Pearson)
- platform/x86: think-lmi: add missing type attribute (Mark Pearson)
- ALSA: usb-audio: Fix recursive locking at XRUN during syncing (Takashi Iwai)
- mips: bmips: BCM6358: disable RAC flush for TP1 (Alvaro Fernandez Rojas)
- ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() (Harshit Mogalapalli)
- tracing: Fix wrong return in kprobe_event_gen_test.c (Anton Gusev)
- tools/power turbostat: fix decoding of HWP_STATUS (Antti Laakso)
- tools/power turbostat: Fix /dev/cpu_dma_latency warnings (Prarit Bhargava)
- fbdev: au1200fb: Fix potential divide by zero (Wei Chen)
- fbdev: lxfb: Fix potential divide by zero (Wei Chen)
- fbdev: intelfb: Fix potential divide by zero (Wei Chen)
- fbdev: nvidia: Fix potential divide by zero (Wei Chen)
- sched_getaffinity: don't assume 'cpumask_size()' is fully initialized (Linus Torvalds)
- fbdev: tgafb: Fix potential divide by zero (Wei Chen)
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (Kuninori Morimoto)
- ALSA: asihpi: check pao in control_message() (Kuninori Morimoto)
- net: hsr: Don't log netdev_err message on unknown prp dst node (Kristian Overskeid)
- x86/PVH: obtain VGA console info in Dom0 (Jan Beulich)
- md: avoid signed overflow in slot_store() (NeilBrown)
- ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds (Ravulapati Vishnu Vardhan Rao)
- xfrm: Zero padding when dumping algos and encap (Herbert Xu)
- bus: imx-weim: fix branch condition evaluates to a garbage value (Ivan Bornyakov)
- ksmbd: don't terminate inactive sessions after a few seconds (Namjae Jeon)
- kcsan: avoid passing -g for test (Marco Elver)
- kernel: kcsan: kcsan_test: build without structleak plugin (Anders Roxell)
- usb: dwc3: gadget: Add 1ms delay after end transfer command without IOC (Wesley Cheng)
- usb: dwc3: gadget: move cmd_endtransfer to extra function (Michael Grzeschik)
- fsverity: don't drop pagecache at end of FS_IOC_ENABLE_VERITY (Eric Biggers)
- LTS version: v5.15.105 (Jack Vogel)
- NFSD: fix use-after-free in __nfs42_ssc_open() (Dai Ngo)
- ocfs2: fix data corruption after failed write (Jan Kara via Ocfs2-devel)
- mm: kfence: fix using kfence_metadata without initialization in show_object() (Muchun Song)
- sched/fair: Sanitize vruntime of entity being migrated (Vincent Guittot)
- sched/fair: sanitize vruntime of entity being placed (Zhang Qiao)
- dm crypt: avoid accessing uninitialized tasklet (Mike Snitzer)
- dm crypt: add cond_resched() to dmcrypt_write() (Mikulas Patocka)
- dm stats: check for and propagate alloc_percpu failure (Jiasheng Jiang)
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (Wei Chen)
- firmware: arm_scmi: Fix device node validation for mailbox transport (Cristian Marussi)
- tee: amdtee: fix race condition in amdtee_open_session (Rijo Thomas)
- riscv: Handle zicsr/zifencei issues between clang and binutils (Nathan Chancellor)
- riscv: mm: Fix incorrect ASID argument when flushing TLB (Dylan Jhong)
- drm/i915: Preserve crtc_state->inherited during state clearing (Ville Syrjala)
- drm/i915/active: Fix missing debug object activation (Nirmoy Das)
- drm/amdgpu/nv: Apply ASPM quirk on Intel ADL + AMD Navi (Kai-Heng Feng)
- drm/meson: fix missing component unbind on bind errors (Johan Hovold)
- drm/bridge: lt8912b: return EPROBE_DEFER if bridge is not found (Matheus Castello)
- nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (Ryusuke Konishi)
- wifi: mac80211: fix qos on mesh interfaces (Felix Fietkau)
- ksmbd: return unsupported error on smb1 mount (Namjae Jeon)
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect (Namjae Jeon)
- ksmbd: set FILE_NAMED_STREAMS attribute in FS_ATTRIBUTE_INFORMATION (Namjae Jeon)
- KVM: x86: hyper-v: Avoid calling kvm_make_vcpus_request_mask() with vcpu_mask==NULL (Vitaly Kuznetsov)
- kfence: avoid passing -g for test (Marco Elver)
- usb: ucsi: Fix NULL pointer deref in ucsi_connector_change() (Hans de Goede)
- usb: chipidea: core: fix possible concurrent when switch role (Xu Yang)
- usb: chipdea: core: fix return -EINVAL if request role is the same with current role (Xu Yang)
- usb: cdnsp: changes PCI Device ID to fix conflict with CNDS3 driver (Pawel Laszczak)
- usb: cdnsp: Fixes issue with redundant Status Stage (Pawel Laszczak)
- usb: cdns3: Fix issue with using incorrect PCI device function (Pawel Laszczak)
- usb: typec: tcpm: fix warning when handle discover_identity message (Xu Yang)
- dm thin: fix deadlock when swapping to thin device (Coly Li)
- igb: revert rtnl_lock() that causes deadlock (Lin Ma)
- arm64: dts: imx8mm-nitrogen-r2: fix WM8960 clock name (Krzysztof Kozlowski)
- lockd: set file_lock start and end when decoding nlm4 testargs (Jeff Layton)
- fsverity: Remove WQ_UNBOUND from fsverity read workqueue (Nathan Huckleberry)
- fscrypt: destroy keyring after security_sb_delete() (Eric Biggers)
- mm/slab: Fix undefined init_cache_node_node() for NUMA and !SMP (Geert Uytterhoeven)
- efi: sysfb_efi: Fix DMI quirks not working for simpledrm (Hans de Goede)
- usb: gadget: u_audio: don't let userspace block driver unbind (Alvin Sipraga)
- usb: dwc2: fix a devres leak in hw_enable upon suspend resume (Fabrice Gasnier)
- scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR (Joel Selvaraj)
- cifs: print session id while listing open files (Shyam Prasad N)
- cifs: empty interface list when server doesn't support query interfaces (Shyam Prasad N)
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti)
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti)
- sh: sanitize the flags on sigreturn (Al Viro)
- net: usb: qmi_wwan: add Telit 0x1080 composition (Enrico Sau)
- net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (Enrico Sau)
- scsi: storvsc: Handle BlockSize change in Hyper-V VHD/VHDX file (Michael Kelley)
- scsi: lpfc: Avoid usage of list iterator variable after loop (Jakob Koschel)
- scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() (Justin Tee)
- scsi: ufs: core: Add soft dependency on governor_simpleondemand (Adrien Thierry)
- scsi: hisi_sas: Check devm_add_action() return value (Kang Chen)
- scsi: target: iscsi: Fix an error message in iscsi_check_key() (Maurizio Lombardi)
- selftests/bpf: check that modifier resolves after pointer (Lorenz Bauer)
- m68k: Only force 030 bus error if PC not in exception table (Michael Schmitz)
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function (Reka Norman)
- ca8210: fix mac_len negative array access (Alexander Aring)
- HID: cp2112: Fix driver not registering GPIO IRQ chip as threaded (Danny Kaehn)
- drm/cirrus: NULL-check pipe->plane.state->fb in cirrus_pipe_update() (Alexandr Sapozhnikov)
- riscv: Bump COMMAND_LINE_SIZE value to 1024 (Alexandre Ghiti)
- ACPI: x86: utils: Add Cezanne to the list for forcing StorageD3Enable (Mario Limonciello)
- thunderbolt: Rename shadowed variables bit to interrupt_bit and auto_clear_bit (Tom Rix)
- thunderbolt: Use const qualifier for ring_interrupt_index (Mario Limonciello)
- thunderbolt: Add missing UNSET_INBOUND_SBTX for retimer access (Gil Fine)
- thunderbolt: Disable interrupt auto clear for rings (Mario Limonciello)
- thunderbolt: Call tb_check_quirks() after initializing adapters (Mika Westerberg)
- thunderbolt: Use scale field when allocating USB3 bandwidth (Mika Westerberg)
- uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 (Yaroslav Furman)
- hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs (Frank Crawford)
- hwmon: fix potential sensor registration fail if of_node is missing (Phinex Hung)
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up (Frederic Weisbecker)
- entry: Snapshot thread flags (Mark Rutland)
- thread_info: Add helpers to snapshot thread flags (Mark Rutland)
- platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl (Tzung-Bi Shih)
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (Zheng Wang)
- Bluetooth: L2CAP: Fix responding with wrong PDU type (Luiz Augusto von Dentz)
- Bluetooth: btqcomsmd: Fix command timeout after setting BD address (Stephan Gerhold)
- net: mdio: thunder: Add missing fwnode_handle_put() (Liang He)
- net: dsa: mt7530: move setting ssc_delta to PHY_INTERFACE_MODE_TRGMII case (Ar?nc UNAL)
- net: dsa: mt7530: move lowering TRGMII driving to mt7530_setup() (Ar?nc UNAL)
- net: dsa: mt7530: move enabling disabling core clock to mt7530_pll_setup() (Ar?nc UNAL)
- gve: Cache link_speed value from device (Joshua Washington)
- ksmbd: fix possible refcount leak in smb2_open() (ChenXiaoSong)
- ksmbd: add low bound validation to FSCTL_QUERY_ALLOCATED_RANGES (Namjae Jeon)
- ksmbd: add low bound validation to FSCTL_SET_ZERO_DATA (Namjae Jeon)
- hvc/xen: prevent concurrent accesses to the shared ring (Roger Pau Monne)
- nvme-tcp: fix nvme_tcp_term_pdu to match spec (Caleb Sander)
- net/sonic: use dma_mapping_error() for error check (Zhang Changzhong)
- erspan: do not use skb_mac_header() in ndo_start_xmit() (Eric Dumazet)
- atm: idt77252: fix kmemleak when rmmod idt77252 (Li Zetao)
- net: dsa: tag_brcm: legacy: fix daisy-chained switches (Alvaro Fernandez Rojas)
- net/mlx5: E-Switch, Fix an Oops in error handling code (Dan Carpenter)
- net/mlx5: Read the TC mapping of all priorities on ETS query (Maher Sanalla)
- net/mlx5: Fix steering rules cleanup (Lama Kayal)
- net/mlx5e: Set uplink rep as NETNS_LOCAL (Gavin Li)
- bpf: Adjust insufficient default bpf_jit_limit (Daniel Borkmann)
- i40e: fix flow director packet filter programming (Radoslaw Tyl)
- iavf: fix hang on reboot with ice (Stefan Assmann)
- keys: Do not cache key in task struct if key is requested from kernel thread (David Howells)
- bootconfig: Fix testcase to increase max node (Masami Hiramatsu (Google))
- octeontx2-vf: Add missing free for alloc_percpu (Jiasheng Jiang)
- net/ps3_gelic_net: Use dma_mapping_error (Geoff Levand)
- net/ps3_gelic_net: Fix RX sk_buff length (Geoff Levand)
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition (Zheng Wang)
- drm/i915/gt: perform uc late init after probe error injection (Andrzej Hajda)
- net: mdio: fix owner field for mdio buses registered using ACPI (Florian Fainelli)
- net: mdio: fix owner field for mdio buses registered using device-tree (Maxime Bizon)
- net: phy: Ensure state transitions are processed from phy_stop() (Florian Fainelli)
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach (Zheng Wang)
- qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (Daniil Tatianin)
- net: usb: smsc95xx: Limit packet length to skb->len (Szymon Heidrich)
- net: dsa: b53: mmap: fix device tree support (Alvaro Fernandez Rojas)
- scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (Yu Kuai)
- i2c: hisi: Only use the completion interrupt to finish the transfer (Yicong Yang)
- i2c: imx-lpi2c: check only for enabled interrupt flags (Alexander Stein)
- igc: fix the validation logic for taprio's gate list (AKASHI Takahiro)
- igbvf: Regard vf reset nack as success (Akihiko Odaki)
- intel/igbvf: free irq on the error path in igbvf_request_msix() (Gaosheng Cui)
- iavf: fix non-tunneled IPv6 UDP packet type and hashing (Alexander Lobakin)
- iavf: fix inverted Rx hash condition leading to disabled hash (Alexander Lobakin)
- xsk: Add missing overflow check in xdp_umem_reg (Kal Conley)
- arm64: dts: imx8mn: specify #sound-dai-cells for SAI nodes (Marek Vasut)
- ARM: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl (Peng Fan)
- ARM: dts: imx6sll: e60k02: fix usbotg1 pinctrl (Peng Fan)
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (Zheng Wang)
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition (Zheng Wang)
- power: supply: bq24190_charger: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (Minghao Chi)
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() (Hangyu Hua)
- trace/hwlat: Do not start per-cpu thread if it is already running (Tero Kristo)
- trace/hwlat: make use of the helper function kthread_run_on_cpu() (Cai Huoqing)
- kthread: add the helper function kthread_run_on_cpu() (Cai Huoqing)
- serial: 8250: ASPEED_VUART: select REGMAP instead of depending on it (Randy Dunlap)
- serial: 8250: SERIAL_8250_ASPEED_VUART should depend on ARCH_ASPEED (Geert Uytterhoeven)
- tty: serial: fsl_lpuart: fix race on RX DMA shutdown (Alexander Sverdlin)
- tty: serial: fsl_lpuart: switch to new dmaengine_terminate_* API (Sherry Sun)
- serial: fsl_lpuart: Fix comment typo (Jason Wang)
- tracing/hwlat: Replace sched_setaffinity with set_cpus_allowed_ptr (Costa Shulyupin)
- perf: fix perf_event_context->time (Song Liu)
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output (Yang Jihong)
- interconnect: qcom: osm-l3: fix icc_onecell_data allocation (Dmitry Baryshkov)
- LTS version: v5.15.104 (Jack Vogel)
- perf: Fix check before add_event_to_groups() in perf_group_detach() (Budimir Markovic)
- HID: uhid: Over-ride the default maximum data buffer value with our own (Lee Jones)
- HID: core: Provide new max_buffer_size attribute to over-ride the default (Lee Jones)
- PCI/DPC: Await readiness of secondary bus after reset (Lukas Wunner)
- PCI: Unify delay handling for reset and resume (Lukas Wunner)
- io_uring: avoid null-ptr-deref in io_arm_poll_handler (Fedor Pchelkin)
- drm/i915/active: Fix misuse of non-idle barriers as fence trackers (Janusz Krzysztofik)
- drm/i915: Don't use stolen memory for ring buffers with LLC (John Harrison)
- x86/resctrl: Clear staged_config[] before and after it is used (Shawn Wang)
- x86/mm: Fix use of uninitialized buffer in sme_enable() (Nikita Zhandarovich)
- x86/mce: Make sure logged MCEs are processed after sysfs update (Yazen Ghannam)
- cpuidle: psci: Iterate backwards over list in psci_pd_remove() (Shawn Guo)
- net: phy: nxp-c45-tja11xx: fix MII_BASIC_CONFIG_REV bit (Radu Pirea (OSS))
- trace/hwlat: Do not wipe the contents of per-cpu thread data (Tero Kristo)
- fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks (Helge Deller)
- mmc: sdhci_am654: lower power-on failed message severity (Francesco Dolcini)
- mm/userfaultfd: propagate uffd-wp bit when PTE-mapping the huge zeropage (David Hildenbrand)
- ice: avoid bonding causing auxiliary plug/unplug under RTNL lock (Dave Ertman)
- nvme-pci: add NVME_QUIRK_BOGUS_NID for Netac NV3000 (Elmer Miroslav Mosher Golovin)
- ftrace: Fix invalid address access in lookup_rec() when index is 0 (Chen Zhongjin)
- mptcp: fix lockdep false positive in mptcp_pm_nl_create_listen_socket() (Paolo Abeni)
- mptcp: avoid setting TCP_CLOSE state twice (Matthieu Baerts)
- mptcp: add ro_after_init for tcp{,v6}_prot_override (Geliang Tang)
- mptcp: fix possible deadlock in subflow_error_report (Paolo Abeni)
- drm/amd/pm: Fix sienna cichlid incorrect OD volage after resume (Blazej Szczygiel)
- drm/sun4i: fix missing component unbind on bind errors (Johan Hovold)
- drm/shmem-helper: Remove another errant put in error path (Dmitry Osipenko)
- riscv: asid: Fixup stale TLB entry cause application crash (Guo Ren)
- Revert 'riscv: mm: notify remote harts about mmu cache updates' (Sergey Matyukevich)
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro (Hamidreza H. Fard)
- ALSA: hda: intel-dsp-config: add MTL PCI id (Bard Liao)
- cifs: Fix smb2_set_path_size() (Volker Lendecke)
- tracing: Make tracepoint lockdep check actually test something (Steven Rostedt (Google))
- tracing: Check field value in hist_field_name() (Steven Rostedt (Google))
- tracing: Make splice_read available again (Sung-hun Kim)
- interconnect: exynos: fix node leak in probe PM QoS error path (Johan Hovold)
- interconnect: fix mem leak when freeing nodes (Johan Hovold)
- s390/ipl: add missing intersection check to ipl_report handling (Sven Schnelle)
- firmware: xilinx: don't make a sleepable memory allocation from an atomic context (Roman Gushchin)
- serial: 8250_fsl: fix handle_irq locking (Johan Hovold)
- serial: 8250_em: Fix UART port type (Biju Das)
- tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted (Sherry Sun)
- ext4: fix possible double unlock when moving a directory (Theodore Ts'o)
- drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes (Alex Hung)
- sh: intc: Avoid spurious sizeof-pointer-div warning (Michael Karcher)
- net/9p: fix bug in client create for .L (Eric Van Hensbergen)
- drm/amdkfd: Fix an illegal memory access (Qu Huang)
- ext4: fix task hung in ext4_xattr_delete_inode (Baokun Li)
- ext4: update s_journal_inum if it changes after journal replay (Baokun Li)
- ext4: fail ext4_iget if special inode unallocated (Baokun Li)
- jffs2: correct logic when creating a hole in jffs2_write_begin (Yifei Liu)
- mmc: atmel-mci: fix race between stop command and start of next command (Tobias Schramm)
- media: m5mols: fix off-by-one loop termination error (Linus Torvalds)
- hwmon: (ltc2992) Set can_sleep flag for GPIO chip (Lars-Peter Clausen)
- hwmon: (adm1266) Set can_sleep flag for GPIO chip (Lars-Peter Clausen)
- kconfig: Update config changed flag before calling callback (Jurica Vukadin)
- hwmon: tmp512: drop of_match_ptr for ID table (Krzysztof Kozlowski)
- hwmon: (ucd90320) Add minimum delay between bus accesses (Lars-Peter Clausen)
- hwmon: (ina3221) return prober error code (Marcus Folkesson)
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition (Zheng Wang)
- hwmon: (adt7475) Fix masking of hysteresis registers (Tony O'Brien)
- hwmon: (adt7475) Display smoothing attributes in correct order (Tony O'Brien)
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails (Nikolay Aleksandrov)
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change (Nikolay Aleksandrov)
- ethernet: sun: add check for the mdesc_grab() (Liang He)
- qed/qed_mng_tlv: correctly zero out ->min instead of ->hour (Daniil Tatianin)
- selftests: net: devlink_port_split.py: skip test if no suitable device available (Po-Hsu Lin)
- net/iucv: Fix size of interrupt data (Alexandra Winter)
- net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (Szymon Heidrich)
- ipv4: Fix incorrect table ID in IOCTL path (Ido Schimmel)
- sh_eth: avoid PHY being resumed when interface is not up (Wolfram Sang)
- ravb: avoid PHY being resumed when interface is not up (Wolfram Sang)
- net: dsa: mv88e6xxx: fix max_mtu of 1492 on 6165, 6191, 6220, 6250, 6290 (Vladimir Oltean)
- ice: xsk: disable txq irq before flushing hw (Maciej Fijalkowski)
- block: sunvdc: add check for mdesc_grab() returning NULL (Liang He)
- nvmet: avoid potential UAF in nvmet_req_complete() (Damien Le Moal)
- nvme: fix handling single range discard request (Ming Lei)
- block: null_blk: Fix handling of fake timeout request (Damien Le Moal)
- drm/bridge: Fix returned array size name for atomic_get_input_bus_fmts kdoc (Liu Ying)
- net: usb: smsc75xx: Limit packet length to skb->len (Szymon Heidrich)
- net/smc: fix deadlock triggered by cancel_delayed_work_syn() (Wenjia Zhang)
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition (Zheng Wang)
- net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails (Heiner Kallweit)
- net: tunnels: annotate lockless accesses to dev->needed_headroom (Eric Dumazet)
- loop: Fix use-after-free issues (Bart Van Assche)
- net: dsa: mt7530: set PLL frequency and trgmii only when trgmii is used (Ar?nc UNAL)
- net: dsa: mt7530: remove now incorrect comment regarding port 5 (Ar?nc UNAL)
- qed/qed_dev: guard against a possible division by zero (Daniil Tatianin)
- net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler() (D. Wythe)
- drm/i915/psr: Use calculated io and fast wake lines (Jouni Hogander)
- drm/i915/display: clean up comments (Tom Rix)
- drm/i915/display/psr: Handle plane and pipe restrictions at every page flip (Jose Roberto de Souza)
- drm/i915/display/psr: Use drm damage helpers to calculate plane damaged area (Jose Roberto de Souza)
- drm/i915/display: Workaround cursor left overs with PSR2 selective fetch enabled (Jose Roberto de Souza)
- PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (Niklas Schnelle)
- vdpa_sim: set last_used_idx as last_avail_idx in vdpasim_queue_ready (Eugenio Perez)
- vdpa_sim: not reset state in vdpasim_queue_ready (Eugenio Perez)
- i40e: Fix kernel crash during reboot when adapter is in recovery mode (Ivan Vecera)
- ipvlan: Make skb->skb_iif track skb->dev for l3s mode (Jianguo Wu)
- nfc: pn533: initialize struct pn533_out_arg properly (Fedor Pchelkin)
- tcp: tcp_make_synack() can be called from process context (Breno Leitao)
- scsi: core: Fix a procfs host directory removal regression (Bart Van Assche)
- netfilter: nft_redir: correct value of inet type .maxattrs (Jeremy Sowden)
- netfilter: nft_redir: correct length for loading protocol registers (Jeremy Sowden)
- netfilter: nft_masq: correct length for loading protocol registers (Jeremy Sowden)
- netfilter: nft_nat: correct length for loading protocol registers (Jeremy Sowden)
- ALSA: hda: Match only Intel devices with CONTROLLER_IN_GPU() (Bjorn Helgaas)
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() (Wenchao Hao)
- docs: Correct missing 'd_' prefix for dentry_operations member d_weak_revalidate (Glenn Washburn)
- clk: HI655X: select REGMAP instead of depending on it (Randy Dunlap)
- drm/meson: fix 1px pink line on GXM when scaling video overlay (Christian Hewitt)
- cifs: Move the in_send statistic to __smb_send_rqst() (Zhang Xiaoxu)
- drm/panfrost: Don't sync rpm suspension after mmu flushing (Dmitry Osipenko)
- xfrm: Allow transport-mode states with AF_UNSPEC selector (Herbert Xu)
- net: mana: Fix accessing freed irq affinity_hint (Haiyang Zhang) [Orabug: 35097498]
- net: mana: Assign interrupts to CPUs based on NUMA nodes (Saurabh Sengar) [Orabug: 35097498]
- crypto: qat - drop log level of msg in get_instance_node() (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - add resubmit logic for decompression (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: acomp - define max size for destination (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - enable deflate for QAT GEN4 (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - expose deflate through acomp api for QAT GEN2 (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - rename and relocate GEN2 config function (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - relocate qat_algs_alloc_flags() (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - relocate backlog related structures (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - extend buffer list interface (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - generalize crypto request buffers (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - change bufferlist logic interface (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - rename bufferlist functions (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - relocate bufferlist logic (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - fix error return code in adf_probe (Wang Yufen) [Orabug: 35177771]
- crypto: qat - expose device state through sysfs for 4xxx (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - honor CRYPTO_TFM_REQ_MAY_SLEEP flag (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - fix initialization of pfvf rts_map_msg structures (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - fix initialization of pfvf cap_msg structures (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - enable power management for QAT GEN4 (Wojciech Ziemba) [Orabug: 35177771]
- crypto: qat - move and rename GEN4 error register definitions (Wojciech Ziemba) [Orabug: 35177771]
- crypto: qat - add misc workqueue (Wojciech Ziemba) [Orabug: 35177771]
- crypto: qat - fix access to PFVF interrupt registers for GEN4 (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - fix a signedness bug in get_service_enabled() (Dan Carpenter) [Orabug: 35177771]
- crypto: qat - fix definition of ring reset results (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - add support for compression for 4xxx (Tomasz Kowalik) [Orabug: 35177771]
- crypto: qat - allow detection of dc capabilities for 4xxx (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - add PFVF support to enable the reset of ring pairs (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - add PFVF support to the GEN4 host driver (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - config VFs based on ring-to-svc mapping (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - exchange ring-to-service mappings over PFVF (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - support fast ACKs in the PFVF protocol (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - exchange device capabilities over PFVF (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - introduce support for PFVF block messages (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - store the ring-to-service mapping (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - store the PFVF protocol version of the endpoints (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - improve the ACK timings in PFVF send (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - leverage read_poll_timeout in PFVF send (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - leverage bitfield.h utils for PFVF messages (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - abstract PFVF messages with struct pfvf_message (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - set PFVF_MSGORIGIN just before sending (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - make PFVF send and receive direction agnostic (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - make PFVF message construction direction agnostic (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - add the adf_get_pmisc_base() helper function (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - support the reset of ring pairs on PF (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - extend crypto capability detection for 4xxx (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - get compression extended capabilities (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - improve logging of PFVF messages (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - fix VF IDs in PFVF log messages (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - do not rely on min version (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - refactor pfvf version request messages (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - pass the PF2VF responses back to the callers (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - use enums for PFVF protocol codes (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - reorganize PFVF protocol definitions (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - reorganize PFVF code (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - abstract PFVF receive logic (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - abstract PFVF send function (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - differentiate between pf2vf and vf2pf offset (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - add pfvf_ops (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - relocate PFVF disabled function (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - relocate PFVF VF related logic (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - relocate PFVF PF related logic (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - handle retries due to collisions in adf_iov_putmsg() (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - split PFVF message decoding from handling (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - re-enable interrupts for legacy PFVF messages (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - change PFVF ACK behaviour (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - move interrupt code out of the PFVF handler (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - move VF message handler to adf_vf2pf_msg.c (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - move vf2pf interrupt helpers (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - refactor PF top half for PFVF (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - fix undetected PFVF timeout in ACK loop (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - do not handle PFVF sources for qat_4xxx (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: testmgr - Only disable migration in crypto_disable_simd_for_test() (Sebastian Andrzej Siewior) [Orabug: 35177771]
- crypto: qat - share adf_enable_pf2vf_comms() from adf_pf2vf_msg.c (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - extract send and wait from adf_vf2pf_request_version() (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - add VF and PF wrappers to common send function (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - rename pfvf collision constants (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - move pfvf collision detection values (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - make pfvf send message direction agnostic (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - use hweight for bit counting (Giovanni Cabiddu) [Orabug: 35177771]
- crypto: qat - remove duplicated logic across GEN2 drivers (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - fix handling of VF to PF interrupts (Marco Chiappero) [Orabug: 35177771]
- crypto: qat - remove unneeded packed attribute (Giovanni Cabiddu) [Orabug: 35177771]
- Revert 'crypto: qat - make pfvf send message direction agnostic' (Thomas Tai) [Orabug: 35177771]
- Revert 'crypto: qat - fix undetected PFVF timeout in ACK loop' (Thomas Tai) [Orabug: 35177771]
- uek: kabi: Add with_kabichk flag to control kABI checking (Saeed Mirzamohammadi) [Orabug: 35241564]
- rds: Fix incorrect error pointer reference (William Kucharski) [Orabug: 35315449]
- Revert 'attr: use consistent sgid stripping checks' (Sherry Yang) [Orabug: 35335373]

[5.15.0-102.103.1]
- Revert 'iommu: Force iommu shutdown on panic' (Boris Ostrovsky) [Orabug: 35317719]
- perf/arm-cmn: Add more bits to child node address offset field (Ilkka Koskinen) [Orabug: 35289157]
- char: misc: Increase the maximum number of dynamic misc devices to 1048448 (D Scott Phillips) [Orabug: 35289110]
- net/rds: use appropriate return code while dropping a connection (Praveen Kumar Kannoju) [Orabug: 35279326]
- mm, hugepages: add hugetlb vma mremap() test (Mina Almasry) [Orabug: 35176740]
- mm: hugetlb: considering PMD sharing when flushing cache/TLBs (Baolin Wang) [Orabug: 35176740]
- mm: mremap: fix sign for EFAULT error return value (Niels Dossche) [Orabug: 35176740]
- mm/hugetlb: fix kernel crash with hugetlb mremap (Aneesh Kumar K.V) [Orabug: 35176740]
- hugetlbfs: flush before unlock on move_hugetlb_page_tables() (Nadav Amit) [Orabug: 35176740]
- hugetlb: fix hugetlb cgroup refcounting during mremap (Bui Quang Minh) [Orabug: 35176740]
- mm, hugepages: add mremap() support for hugepage backed vma (Mina Almasry) [Orabug: 35176740]