Public bug reported:

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.15.153 upstream stable release
       from git://git.kernel.org/

io_uring/unix: drop usage of io_uring socket
io_uring: drop any code related to SCM_RIGHTS
rcu-tasks: Provide rcu_trace_implies_rcu_gp()
bpf: Defer the free of inner map when necessary
selftests: tls: use exact comparison in recv_partial
ASoC: rt5645: Make LattePanda board DMI match more precise
x86/xen: Add some null pointer checking to smp.c
MIPS: Clear Cause.BD in instruction_pointer_set
HID: multitouch: Add required quirk for Synaptics 0xcddc device
gen_compile_commands: fix invalid escape sequence warning
RDMA/mlx5: Fix fortify source warning while accessing Eth segment
RDMA/mlx5: Relax DEVX access upon modify commands
riscv: dts: sifive: add missing #interrupt-cells to pmic
x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h
x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
net/iucv: fix the allocation size of iucv_path_table array
parisc/ftrace: add missing CONFIG_DYNAMIC_FTRACE check
block: sed-opal: handle empty atoms when parsing response
dm-verity, dm-crypt: align "struct bvec_iter" correctly
scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
ALSA: hda/realtek - ALC285 reduce pop noise from Headphone port
drm/amdgpu: Enable gpu reset for S3 abort cases on Raven series
Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
firewire: core: use long bus reset on gap count error
ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet
Input: gpio_keys_polled - suppress deferred probe error for gpio
ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC
ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode
ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll
do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
s390/dasd: put block allocation in separate function
s390/dasd: add query PPRC function
s390/dasd: add copy pair setup
s390/dasd: add autoquiesce feature
s390/dasd: Use dev_*() for device log messages
s390/dasd: fix double module refcount decrement
fs/select: rework stack allocation hack for clang
md: Don't clear MD_CLOSING when the raid is about to stop
lib/cmdline: Fix an invalid format specifier in an assertion msg
time: test: Fix incorrect format specifier
rtc: test: Fix invalid format specifier.
aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
timekeeping: Fix cross-timestamp interpolation on counter wrap
timekeeping: Fix cross-timestamp interpolation corner case decision
timekeeping: Fix cross-timestamp interpolation for non-x86
sched/fair: Take the scheduling domain into account in select_idle_core()
wifi: ath10k: fix NULL pointer dereference in 
ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled
wifi: b43: Stop correct queue in DMA worker when QoS is disabled
wifi: b43: Disable QoS for bcm4331
wifi: wilc1000: fix declarations ordering
wifi: wilc1000: fix RCU usage in connect path
wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
wifi: wilc1000: fix multi-vif management when deleting a vif
wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir()
cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value
cpufreq: Explicitly include correct DT includes
cpufreq: mediatek-hw: Wait for CPU supplies before probing
sock_diag: annotate data-races around sock_diag_handlers[family]
inet_diag: annotate data-races around inet_diag_table[]
bpftool: Silence build warning about calloc()
af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc().
cpufreq: mediatek-hw: Don't error out if supply is not found
arm64: dts: imx8mm-kontron: Disable pullups for I2C signals on SL/BL i.MX8MM
arm64: dts: imx8mm-kontron: Disable pullups for onboard UART signals on BL board
arm64: dts: imx8mm-kontron: Add support for ultra high speed modes on SD card
arm64: dts: imx8mm-kontron: Use the VSELECT signal to switch SD card IO voltage
arm64: dts: imx8mm-kontron: Disable pull resistors for SD card signals on BL 
board
wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete
wifi: iwlwifi: mvm: report beacon protection failures
wifi: iwlwifi: dbg-tlv: ensure NUL termination
wifi: iwlwifi: fix EWRD table validity check
arm64: dts: imx8mm-venice-gw71xx: fix USB OTG VBUS
pwm: atmel-hlcdc: Convert to platform remove callback returning void
pwm: atmel-hlcdc: Use consistent variable naming
pwm: atmel-hlcdc: Fix clock imbalance related to suspend support
net: blackhole_dev: fix build warning for ethh set but not used
wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
pwm: sti: Implement .apply() callback
pwm: sti: Fix capture for st,pwm-num-chan < st,capture-num-chan
wifi: iwlwifi: mvm: don't set replay counters to 0xff
s390/vdso: drop '-fPIC' from LDFLAGS
ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down()
arm64: dts: mt8183: kukui: Add Type C node
arm64: dts: mt8183: kukui: Split out keyboard node and describe detachables
arm64: dts: mt8183: Move CrosEC base detection node to kukui-based DTs
arm64: dts: mediatek: mt7622: add missing "device_type" to memory nodes
bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly
wireless: Remove redundant 'flush_workqueue()' calls
wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces
ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
bus: tegra-aconnect: Update dependency to ARCH_TEGRA
UBUNTU: [Config]: update CONFIG_TEGRA_ACONNECT
iommu/amd: Mark interrupt as managed
wifi: brcmsmac: avoid function pointer casts
net: ena: Remove ena_select_queue
ARM: dts: arm: realview: Fix development chip ROM compatible value
arm64: dts: renesas: r8a779a0: Update to R-Car Gen4 compatible values
arm64: dts: renesas: r8a779a0: Correct avb[01] reg sizes
ARM: dts: imx6dl-yapp4: Move phy reset into switch node
ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address
ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node
arm64: dts: marvell: reorder crypto interrupts on Armada SoCs
ACPI: resource: Add Infinity laptops to irq1_edge_low_force_override
ACPI: resource: Do IRQ override on Lunnen Ground laptops
ACPI: resource: Add MAIBENBEN X577 to irq1_edge_low_force_override
ACPI: scan: Fix device check notification handling
x86, relocs: Ignore relocations in .notes section
SUNRPC: fix some memleaks in gssx_dec_option_array
mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove 
function
wifi: rtw88: 8821c: Fix false alarm count
PCI: Make pci_dev_is_disconnected() helper public for other drivers
iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected
igb: move PEROUT and EXTTS isr logic to separate functions
igb: Fix missing time sync events
Bluetooth: Remove superfluous call to hci_conn_check_pending()
Bluetooth: hci_qca: Add support for QTI Bluetooth chip wcn6855
Bluetooth: hci_qca: don't use IS_ERR_OR_NULL() with gpiod_get_optional()
Bluetooth: hci_core: Fix possible buffer overflow
sr9800: Add check for usbnet_get_endpoints
bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
bpf: Fix hashtab overflow check on 32-bit arches
bpf: Fix stackmap overflow check on 32-bit arches
ipv6: fib6_rules: flush route cache when rule is changed
net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
net: phy: fix phy_get_internal_delay accessing an empty array
net: hns3: fix kernel crash when 1588 is received on HIP08 devices
net: hns3: fix port duplex configure error in IMP reset
net: phy: DP83822: enable rgmii mode if phy_interface_is_rgmii
net: phy: dp83822: Fix RGMII TX delay configuration
OPP: debugfs: Fix warning around icc_get_name()
tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function
net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
bpf: net: Change sk_getsockopt() to take the sockptr_t argument
bpf: net: Change do_ip_getsockopt() to take the sockptr_t argument
ipmr: fix incorrect parameter validation in the ip_mroute_getsockopt() function
l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function
udp: fix incorrect parameter validation in the udp_lib_getsockopt() function
net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function
net/x25: fix incorrect parameter validation in the x25_getsockopt() function
nfp: flower: handle acti_netdevs allocation failure
dm raid: fix false positive for requeue needed during reshape
dm: call the resume method on internal suspend
drm/tegra: dsi: Add missing check for of_find_device_by_node
drm/tegra: dpaux: Populate AUX bus
drm/tegra: dpaux: Fix PM disable depth imbalance in tegra_dpaux_probe
drm/tegra: dsi: Make use of the helper function dev_err_probe()
drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe()
drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of 
tegra_dsi_probe()
drm/tegra: dc: rgb: Allow changing PLLD rate on Tegra30+
drm/tegra: rgb: Fix some error handling paths in tegra_dc_rgb_probe()
drm/tegra: rgb: Fix missing clk_put() in the error handling paths of 
tegra_dc_rgb_probe()
drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths of 
tegra_output_probe()
drm/rockchip: inno_hdmi: Fix video timing
drm: Don't treat 0 as -1 in drm_fixp2int_ceil
drm/ttm: add ttm_resource_fini v2
drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node
drm/rockchip: lvds: do not overwrite error code
drm/rockchip: lvds: do not print scary message when probing defer
drm/lima: fix a memleak in lima_heap_alloc
dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA
UBUNTU: [Config]: update CONFIG_TEGRA210_ADMA
media: tc358743: register v4l2 async device only after successful setup
PCI/DPC: Print all TLP Prefixes, not just the first
perf record: Fix possible incorrect free in record__switch_output()
HID: lenovo: Add middleclick_workaround sysfs knob for cptkbd
drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
drm/amd/display: Fix potential NULL pointer dereferences in 
'dcn10_set_output_transfer_func()'
perf evsel: Fix duplicate initialization of data->id in evsel__parse_sample()
clk: meson: Add missing clocks to axg_clk_regmaps
media: em28xx: annotate unchecked call to media_device_register()
media: v4l2-tpg: fix some memleaks in tpg_alloc
media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity
media: edia: dvbdev: fix a use-after-free
pinctrl: mediatek: Drop bogus slew rate register range for MT8192
clk: qcom: reset: Commonize the de/assert functions
clk: qcom: reset: Ensure write completion on reset de/assertion
quota: simplify drop_dquot_ref()
quota: Fix potential NULL pointer dereference
quota: Fix rcu annotations of inode dquot pointers
PCI/P2PDMA: Fix a sleeping issue in a RCU read section
PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
crypto: xilinx - call finalize with bh disabled
perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str()
drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode()
ALSA: seq: fix function cast warnings
perf stat: Avoid metric-only segv
ASoC: meson: Use dev_err_probe() helper
ASoC: meson: aiu: fix function pointer type mismatch
ASoC: meson: t9015: fix function pointer type mismatch
powerpc: Force inlining of arch_vmap_p{u/m}d_supported()
PCI: endpoint: Support NTB transfer between RC and EP
UBUNTU: [Config]: update CONFIG_PCI_EPF_VNTB
NTB: EPF: fix possible memory leak in pci_vntb_probe()
NTB: fix possible name leak in ntb_register_device()
media: sun8i-di: Fix coefficient writes
media: sun8i-di: Fix power on/off sequences
media: sun8i-di: Fix chroma difference threshold
media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak
media: go7007: add check of return value of go7007_read_addr()
media: pvrusb2: remove redundant NULL check
media: pvrusb2: fix pvr2_stream_callback casts
clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times
drm/mediatek: dsi: Fix DSI RGB666 formats and definitions
PCI: Mark 3ware-9650SE Root Port Extended Tags as broken
clk: hisilicon: hi3519: Release the correct number of gates in 
hi3519_clk_unregister()
clk: hisilicon: hi3559a: Fix an erroneous devm_kfree()
drm/tegra: put drm_gem_object ref on error in tegra_fb_create
mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref
mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref
crypto: arm/sha - fix function cast warnings
drm/tidss: Fix initial plane zpos values
mtd: maps: physmap-core: fix flash size larger than 32-bit
mtd: rawnand: lpc32xx_mlc: fix irq handler prototype
ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs
ASoC: meson: axg-tdm-interface: add frame rate constraint
HID: amd_sfh: Update HPD sensor structure elements
drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int()
media: pvrusb2: fix uaf in pvr2_context_set_notify
media: dvb-frontends: avoid stack overflow warnings with clang
media: go7007: fix a memleak in go7007_load_encoder
media: ttpci: fix two memleaks in budget_av_attach
media: mediatek: vcodec: avoid -Wcast-function-type-strict warning
drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks
drm/msm/dpu: add division of drm_display_mode's hskew parameter
module: Add support for default value for module async_probe
modules: wait do_free_init correctly
powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc.
leds: aw2013: Unlock mutex before destroying it
leds: sgm3140: Add missing timer cleanup and flash gpio control
backlight: lm3630a: Initialize backlight_properties on init
backlight: lm3630a: Don't set bl->props.brightness in get_brightness
backlight: da9052: Fully initialize backlight_properties during probe
backlight: lm3639: Fully initialize backlight_properties during probe
backlight: lp8788: Fully initialize backlight_properties during probe
sparc32: Fix section mismatch in leon_pci_grpci
clk: Fix clk_core_get NULL dereference
clk: zynq: Prevent null pointer dereference caused by kmalloc failure
ALSA: hda/realtek: fix ALC285 issues on HP Envy x360 laptops
ALSA: usb-audio: Stop parsing channels bits when all channels are found.
RDMA/srpt: Do not register event handler until srpt device is fully setup
f2fs: multidevice: support direct IO
f2fs: invalidate META_MAPPING before IPU/DIO write
f2fs: replace congestion_wait() calls with io_schedule_timeout()
f2fs: fix to invalidate META_MAPPING before DIO write
f2fs: invalidate meta pages only for post_read required inode
f2fs: reduce stack memory cost by using bitfield in struct f2fs_io_info
f2fs: compress: fix to cover normal cluster write with cp_rwsem
f2fs: compress: fix to check unreleased compressed cluster
scsi: csiostor: Avoid function pointer casts
RDMA/device: Fix a race between mad_client and cm_client init
RDMA/rtrs-clt: Check strnlen return len in sysfs mpath_policy_store()
scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn
net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr()
NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
NFSv4.2: fix listxattr maximum XDR buffer size
watchdog: stm32_iwdg: initialize default timeout
NFS: Fix an off by one in root_nfs_cat()
f2fs: compress: fix reserve_cblocks counting error when out of space
afs: Revert "afs: Hide silly-rename files from userspace"
comedi: comedi_test: Prevent timers rescheduling during deletion
remoteproc: stm32: use correct format strings on 64-bit
remoteproc: stm32: Fix incorrect type in assignment for va
remoteproc: stm32: Fix incorrect type assignment returned by 
stm32_rproc_get_loaded_rsc_tablef
tty: vt: fix 20 vs 0x20 typo in EScsiignore
serial: max310x: fix syntax error in IRQ error message
tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT
arm64: dts: broadcom: bcmbca: bcm4908: drop invalid switch cells
kconfig: fix infinite loop when expanding a macro at the end of file
rtc: mt6397: select IRQ_DOMAIN instead of depending on it
serial: 8250_exar: Don't remove GPIO device on suspend
staging: greybus: fix get_channel_from_mode() failure path
usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin
io_uring: don't save/restore iowait state
nouveau: reset the bo resource bus info after an eviction
octeontx2-af: Use matching wake_up API variant in CGX command interface
s390/vtime: fix average steal time calculation
soc: fsl: dpio: fix kcalloc() argument order
hsr: Fix uninit-value access in hsr_get_node()
net: mtk_eth_soc: move MAC_MCR setting to mac_finish()
net: mediatek: mtk_eth_soc: clear MAC_MCR_FORCE_LINK only when MAC is up
net: ethernet: mtk_eth_soc: fix PPE hanging issue
packet: annotate data-races around ignore_outgoing
net: veth: do not manipulate GRO when using XDP
net: dsa: mt7530: prevent possible incorrect XTAL frequency selection
vdpa/mlx5: Allow CVQ size changes
wireguard: receive: annotate data-race around receiving_counter.counter
rds: introduce acquire/release ordering in acquire/release_in_xmit()
hsr: Handle failures in module init
net: phy: fix phy_read_poll_timeout argument type in genphy_loopback
net/bnx2x: Prevent access to a freed page in page_pool
octeontx2-af: Use separate handlers for interrupts
netfilter: nft_set_pipapo: release elements in clone only from destroy path
netfilter: nf_tables: do not compare internal table flags on updates
rcu: add a helper to report consolidated flavor QS
net: report RCU QS on threaded NAPI repolling
bpf: report RCU QS in cpumap kthread
net: dsa: mt7530: fix handling of LLDP frames
net: dsa: mt7530: fix handling of 802.1X PAE frames
net: dsa: mt7530: fix link-local frames that ingress vlan filtering ports
net: dsa: mt7530: fix handling of all link-local frames
spi: spi-mt65xx: Fix NULL pointer access in interrupt handler
regmap: Add missing map->bus check
remoteproc: stm32: fix incorrect optional pointers
UBUNTU: Upstream stable to v5.15.153

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Invalid

** Affects: linux (Ubuntu Jammy)
     Importance: Medium
     Assignee: Portia Stephens (portias)
         Status: In Progress


** Tags: kernel-stable-tracking-bug

** Changed in: linux (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Jammy)
   Importance: Undecided
       Status: New

** Changed in: linux (Ubuntu)
       Status: Confirmed => Invalid

** Changed in: linux (Ubuntu Jammy)
   Importance: Undecided => Medium

** Changed in: linux (Ubuntu Jammy)
       Status: New => In Progress

** Changed in: linux (Ubuntu Jammy)
     Assignee: (unassigned) => Portia Stephens (portias)

** Description changed:

  
      SRU Justification
  
      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:
  
         v5.15.153 upstream stable release
         from git://git.kernel.org/
  
-             
- Linux 5.15.153
+ io_uring/unix: drop usage of io_uring socket
+ io_uring: drop any code related to SCM_RIGHTS
+ rcu-tasks: Provide rcu_trace_implies_rcu_gp()
+ bpf: Defer the free of inner map when necessary
+ selftests: tls: use exact comparison in recv_partial
+ ASoC: rt5645: Make LattePanda board DMI match more precise
+ x86/xen: Add some null pointer checking to smp.c
+ MIPS: Clear Cause.BD in instruction_pointer_set
+ HID: multitouch: Add required quirk for Synaptics 0xcddc device
+ gen_compile_commands: fix invalid escape sequence warning
+ RDMA/mlx5: Fix fortify source warning while accessing Eth segment
+ RDMA/mlx5: Relax DEVX access upon modify commands
+ riscv: dts: sifive: add missing #interrupt-cells to pmic
+ x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h
+ x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
+ net/iucv: fix the allocation size of iucv_path_table array
+ parisc/ftrace: add missing CONFIG_DYNAMIC_FTRACE check
+ block: sed-opal: handle empty atoms when parsing response
+ dm-verity, dm-crypt: align "struct bvec_iter" correctly
+ scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
+ ALSA: hda/realtek - ALC285 reduce pop noise from Headphone port
+ drm/amdgpu: Enable gpu reset for S3 abort cases on Raven series
+ Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
+ firewire: core: use long bus reset on gap count error
+ ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet
+ Input: gpio_keys_polled - suppress deferred probe error for gpio
+ ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC
+ ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode
+ ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll
+ do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
+ s390/dasd: put block allocation in separate function
+ s390/dasd: add query PPRC function
+ s390/dasd: add copy pair setup
+ s390/dasd: add autoquiesce feature
+ s390/dasd: Use dev_*() for device log messages
+ s390/dasd: fix double module refcount decrement
+ fs/select: rework stack allocation hack for clang
+ md: Don't clear MD_CLOSING when the raid is about to stop
+ lib/cmdline: Fix an invalid format specifier in an assertion msg
+ time: test: Fix incorrect format specifier
+ rtc: test: Fix invalid format specifier.
+ aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
+ timekeeping: Fix cross-timestamp interpolation on counter wrap
+ timekeeping: Fix cross-timestamp interpolation corner case decision
+ timekeeping: Fix cross-timestamp interpolation for non-x86
+ sched/fair: Take the scheduling domain into account in select_idle_core()
+ wifi: ath10k: fix NULL pointer dereference in 
ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
+ wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
+ wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled
+ wifi: b43: Stop correct queue in DMA worker when QoS is disabled
+ wifi: b43: Disable QoS for bcm4331
+ wifi: wilc1000: fix declarations ordering
+ wifi: wilc1000: fix RCU usage in connect path
+ wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
+ wifi: wilc1000: fix multi-vif management when deleting a vif
+ wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir()
+ cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value
+ cpufreq: Explicitly include correct DT includes
+ cpufreq: mediatek-hw: Wait for CPU supplies before probing
+ sock_diag: annotate data-races around sock_diag_handlers[family]
+ inet_diag: annotate data-races around inet_diag_table[]
+ bpftool: Silence build warning about calloc()
+ af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc().
+ cpufreq: mediatek-hw: Don't error out if supply is not found
+ arm64: dts: imx8mm-kontron: Disable pullups for I2C signals on SL/BL i.MX8MM
+ arm64: dts: imx8mm-kontron: Disable pullups for onboard UART signals on BL 
board
+ arm64: dts: imx8mm-kontron: Add support for ultra high speed modes on SD card
+ arm64: dts: imx8mm-kontron: Use the VSELECT signal to switch SD card IO 
voltage
+ arm64: dts: imx8mm-kontron: Disable pull resistors for SD card signals on BL 
board
+ wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete
+ wifi: iwlwifi: mvm: report beacon protection failures
+ wifi: iwlwifi: dbg-tlv: ensure NUL termination
+ wifi: iwlwifi: fix EWRD table validity check
+ arm64: dts: imx8mm-venice-gw71xx: fix USB OTG VBUS
+ pwm: atmel-hlcdc: Convert to platform remove callback returning void
+ pwm: atmel-hlcdc: Use consistent variable naming
+ pwm: atmel-hlcdc: Fix clock imbalance related to suspend support
+ net: blackhole_dev: fix build warning for ethh set but not used
+ wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
+ pwm: sti: Implement .apply() callback
+ pwm: sti: Fix capture for st,pwm-num-chan < st,capture-num-chan
+ wifi: iwlwifi: mvm: don't set replay counters to 0xff
+ s390/vdso: drop '-fPIC' from LDFLAGS
+ ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down()
+ arm64: dts: mt8183: kukui: Add Type C node
+ arm64: dts: mt8183: kukui: Split out keyboard node and describe detachables
+ arm64: dts: mt8183: Move CrosEC base detection node to kukui-based DTs
+ arm64: dts: mediatek: mt7622: add missing "device_type" to memory nodes
+ bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly
+ wireless: Remove redundant 'flush_workqueue()' calls
+ wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces
+ ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
+ bus: tegra-aconnect: Update dependency to ARCH_TEGRA
+ UBUNTU: [Config]: update CONFIG_TEGRA_ACONNECT
+ iommu/amd: Mark interrupt as managed
+ wifi: brcmsmac: avoid function pointer casts
+ net: ena: Remove ena_select_queue
+ ARM: dts: arm: realview: Fix development chip ROM compatible value
+ arm64: dts: renesas: r8a779a0: Update to R-Car Gen4 compatible values
+ arm64: dts: renesas: r8a779a0: Correct avb[01] reg sizes
+ ARM: dts: imx6dl-yapp4: Move phy reset into switch node
+ ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address
+ ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node
+ arm64: dts: marvell: reorder crypto interrupts on Armada SoCs
+ ACPI: resource: Add Infinity laptops to irq1_edge_low_force_override
+ ACPI: resource: Do IRQ override on Lunnen Ground laptops
+ ACPI: resource: Add MAIBENBEN X577 to irq1_edge_low_force_override
+ ACPI: scan: Fix device check notification handling
+ x86, relocs: Ignore relocations in .notes section
+ SUNRPC: fix some memleaks in gssx_dec_option_array
+ mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove 
function
+ wifi: rtw88: 8821c: Fix false alarm count
+ PCI: Make pci_dev_is_disconnected() helper public for other drivers
+ iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected
+ igb: move PEROUT and EXTTS isr logic to separate functions
+ igb: Fix missing time sync events
+ Bluetooth: Remove superfluous call to hci_conn_check_pending()
+ Bluetooth: hci_qca: Add support for QTI Bluetooth chip wcn6855
+ Bluetooth: hci_qca: don't use IS_ERR_OR_NULL() with gpiod_get_optional()
+ Bluetooth: hci_core: Fix possible buffer overflow
+ sr9800: Add check for usbnet_get_endpoints
+ bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
+ bpf: Fix hashtab overflow check on 32-bit arches
+ bpf: Fix stackmap overflow check on 32-bit arches
+ ipv6: fib6_rules: flush route cache when rule is changed
+ net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
+ net: phy: fix phy_get_internal_delay accessing an empty array
+ net: hns3: fix kernel crash when 1588 is received on HIP08 devices
+ net: hns3: fix port duplex configure error in IMP reset
+ net: phy: DP83822: enable rgmii mode if phy_interface_is_rgmii
+ net: phy: dp83822: Fix RGMII TX delay configuration
+ OPP: debugfs: Fix warning around icc_get_name()
+ tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function
+ net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
+ bpf: net: Change sk_getsockopt() to take the sockptr_t argument
+ bpf: net: Change do_ip_getsockopt() to take the sockptr_t argument
+ ipmr: fix incorrect parameter validation in the ip_mroute_getsockopt() 
function
+ l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function
+ udp: fix incorrect parameter validation in the udp_lib_getsockopt() function
+ net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function
+ net/x25: fix incorrect parameter validation in the x25_getsockopt() function
+ nfp: flower: handle acti_netdevs allocation failure
+ dm raid: fix false positive for requeue needed during reshape
+ dm: call the resume method on internal suspend
+ drm/tegra: dsi: Add missing check for of_find_device_by_node
+ drm/tegra: dpaux: Populate AUX bus
+ drm/tegra: dpaux: Fix PM disable depth imbalance in tegra_dpaux_probe
+ drm/tegra: dsi: Make use of the helper function dev_err_probe()
+ drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe()
+ drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path 
of tegra_dsi_probe()
+ drm/tegra: dc: rgb: Allow changing PLLD rate on Tegra30+
+ drm/tegra: rgb: Fix some error handling paths in tegra_dc_rgb_probe()
+ drm/tegra: rgb: Fix missing clk_put() in the error handling paths of 
tegra_dc_rgb_probe()
+ drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths 
of tegra_output_probe()
+ drm/rockchip: inno_hdmi: Fix video timing
+ drm: Don't treat 0 as -1 in drm_fixp2int_ceil
+ drm/ttm: add ttm_resource_fini v2
+ drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node
+ drm/rockchip: lvds: do not overwrite error code
+ drm/rockchip: lvds: do not print scary message when probing defer
+ drm/lima: fix a memleak in lima_heap_alloc
+ dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA
+ UBUNTU: [Config]: update CONFIG_TEGRA210_ADMA
+ media: tc358743: register v4l2 async device only after successful setup
+ PCI/DPC: Print all TLP Prefixes, not just the first
+ perf record: Fix possible incorrect free in record__switch_output()
+ HID: lenovo: Add middleclick_workaround sysfs knob for cptkbd
+ drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
+ drm/amd/display: Fix potential NULL pointer dereferences in 
'dcn10_set_output_transfer_func()'
+ perf evsel: Fix duplicate initialization of data->id in evsel__parse_sample()
+ clk: meson: Add missing clocks to axg_clk_regmaps
+ media: em28xx: annotate unchecked call to media_device_register()
+ media: v4l2-tpg: fix some memleaks in tpg_alloc
+ media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity
+ media: edia: dvbdev: fix a use-after-free
+ pinctrl: mediatek: Drop bogus slew rate register range for MT8192
+ clk: qcom: reset: Commonize the de/assert functions
+ clk: qcom: reset: Ensure write completion on reset de/assertion
+ quota: simplify drop_dquot_ref()
+ quota: Fix potential NULL pointer dereference
+ quota: Fix rcu annotations of inode dquot pointers
+ PCI/P2PDMA: Fix a sleeping issue in a RCU read section
+ PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
+ crypto: xilinx - call finalize with bh disabled
+ perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str()
+ drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode()
+ ALSA: seq: fix function cast warnings
+ perf stat: Avoid metric-only segv
+ ASoC: meson: Use dev_err_probe() helper
+ ASoC: meson: aiu: fix function pointer type mismatch
+ ASoC: meson: t9015: fix function pointer type mismatch
+ powerpc: Force inlining of arch_vmap_p{u/m}d_supported()
+ PCI: endpoint: Support NTB transfer between RC and EP
+ UBUNTU: [Config]: update CONFIG_PCI_EPF_VNTB
+ NTB: EPF: fix possible memory leak in pci_vntb_probe()
+ NTB: fix possible name leak in ntb_register_device()
+ media: sun8i-di: Fix coefficient writes
+ media: sun8i-di: Fix power on/off sequences
+ media: sun8i-di: Fix chroma difference threshold
+ media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak
+ media: go7007: add check of return value of go7007_read_addr()
+ media: pvrusb2: remove redundant NULL check
+ media: pvrusb2: fix pvr2_stream_callback casts
+ clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times
+ drm/mediatek: dsi: Fix DSI RGB666 formats and definitions
+ PCI: Mark 3ware-9650SE Root Port Extended Tags as broken
+ clk: hisilicon: hi3519: Release the correct number of gates in 
hi3519_clk_unregister()
+ clk: hisilicon: hi3559a: Fix an erroneous devm_kfree()
+ drm/tegra: put drm_gem_object ref on error in tegra_fb_create
+ mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref
+ mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a 
ref
+ crypto: arm/sha - fix function cast warnings
+ drm/tidss: Fix initial plane zpos values
+ mtd: maps: physmap-core: fix flash size larger than 32-bit
+ mtd: rawnand: lpc32xx_mlc: fix irq handler prototype
+ ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs
+ ASoC: meson: axg-tdm-interface: add frame rate constraint
+ HID: amd_sfh: Update HPD sensor structure elements
+ drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int()
+ media: pvrusb2: fix uaf in pvr2_context_set_notify
+ media: dvb-frontends: avoid stack overflow warnings with clang
+ media: go7007: fix a memleak in go7007_load_encoder
+ media: ttpci: fix two memleaks in budget_av_attach
+ media: mediatek: vcodec: avoid -Wcast-function-type-strict warning
+ drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
+ powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks
+ drm/msm/dpu: add division of drm_display_mode's hskew parameter
+ module: Add support for default value for module async_probe
+ modules: wait do_free_init correctly
+ powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc.
+ leds: aw2013: Unlock mutex before destroying it
+ leds: sgm3140: Add missing timer cleanup and flash gpio control
+ backlight: lm3630a: Initialize backlight_properties on init
+ backlight: lm3630a: Don't set bl->props.brightness in get_brightness
+ backlight: da9052: Fully initialize backlight_properties during probe
+ backlight: lm3639: Fully initialize backlight_properties during probe
+ backlight: lp8788: Fully initialize backlight_properties during probe
+ sparc32: Fix section mismatch in leon_pci_grpci
+ clk: Fix clk_core_get NULL dereference
+ clk: zynq: Prevent null pointer dereference caused by kmalloc failure
+ ALSA: hda/realtek: fix ALC285 issues on HP Envy x360 laptops
+ ALSA: usb-audio: Stop parsing channels bits when all channels are found.
+ RDMA/srpt: Do not register event handler until srpt device is fully setup
+ f2fs: multidevice: support direct IO
+ f2fs: invalidate META_MAPPING before IPU/DIO write
+ f2fs: replace congestion_wait() calls with io_schedule_timeout()
+ f2fs: fix to invalidate META_MAPPING before DIO write
+ f2fs: invalidate meta pages only for post_read required inode
+ f2fs: reduce stack memory cost by using bitfield in struct f2fs_io_info
+ f2fs: compress: fix to cover normal cluster write with cp_rwsem
+ f2fs: compress: fix to check unreleased compressed cluster
+ scsi: csiostor: Avoid function pointer casts
+ RDMA/device: Fix a race between mad_client and cm_client init
+ RDMA/rtrs-clt: Check strnlen return len in sysfs mpath_policy_store()
+ scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn
+ net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr()
+ NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
+ NFSv4.2: fix listxattr maximum XDR buffer size
+ watchdog: stm32_iwdg: initialize default timeout
+ NFS: Fix an off by one in root_nfs_cat()
+ f2fs: compress: fix reserve_cblocks counting error when out of space
+ afs: Revert "afs: Hide silly-rename files from userspace"
+ comedi: comedi_test: Prevent timers rescheduling during deletion
+ remoteproc: stm32: use correct format strings on 64-bit
+ remoteproc: stm32: Fix incorrect type in assignment for va
+ remoteproc: stm32: Fix incorrect type assignment returned by 
stm32_rproc_get_loaded_rsc_tablef
+ tty: vt: fix 20 vs 0x20 typo in EScsiignore
+ serial: max310x: fix syntax error in IRQ error message
+ tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT
+ arm64: dts: broadcom: bcmbca: bcm4908: drop invalid switch cells
+ kconfig: fix infinite loop when expanding a macro at the end of file
+ rtc: mt6397: select IRQ_DOMAIN instead of depending on it
+ serial: 8250_exar: Don't remove GPIO device on suspend
+ staging: greybus: fix get_channel_from_mode() failure path
+ usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin
+ io_uring: don't save/restore iowait state
+ nouveau: reset the bo resource bus info after an eviction
+ octeontx2-af: Use matching wake_up API variant in CGX command interface
+ s390/vtime: fix average steal time calculation
+ soc: fsl: dpio: fix kcalloc() argument order
+ hsr: Fix uninit-value access in hsr_get_node()
+ net: mtk_eth_soc: move MAC_MCR setting to mac_finish()
+ net: mediatek: mtk_eth_soc: clear MAC_MCR_FORCE_LINK only when MAC is up
+ net: ethernet: mtk_eth_soc: fix PPE hanging issue
+ packet: annotate data-races around ignore_outgoing
+ net: veth: do not manipulate GRO when using XDP
+ net: dsa: mt7530: prevent possible incorrect XTAL frequency selection
+ vdpa/mlx5: Allow CVQ size changes
+ wireguard: receive: annotate data-race around receiving_counter.counter
+ rds: introduce acquire/release ordering in acquire/release_in_xmit()
+ hsr: Handle failures in module init
+ net: phy: fix phy_read_poll_timeout argument type in genphy_loopback
+ net/bnx2x: Prevent access to a freed page in page_pool
+ octeontx2-af: Use separate handlers for interrupts
+ netfilter: nft_set_pipapo: release elements in clone only from destroy path
+ netfilter: nf_tables: do not compare internal table flags on updates
+ rcu: add a helper to report consolidated flavor QS
+ net: report RCU QS on threaded NAPI repolling
+ bpf: report RCU QS in cpumap kthread
+ net: dsa: mt7530: fix handling of LLDP frames
+ net: dsa: mt7530: fix handling of 802.1X PAE frames
+ net: dsa: mt7530: fix link-local frames that ingress vlan filtering ports
+ net: dsa: mt7530: fix handling of all link-local frames
+ spi: spi-mt65xx: Fix NULL pointer access in interrupt handler
+ regmap: Add missing map->bus check
  remoteproc: stm32: fix incorrect optional pointers
- regmap: Add missing map->bus check
- spi: spi-mt65xx: Fix NULL pointer access in interrupt handler
- net: dsa: mt7530: fix handling of all link-local frames
- net: dsa: mt7530: fix link-local frames that ingress vlan filtering ports
- net: dsa: mt7530: fix handling of 802.1X PAE frames
- net: dsa: mt7530: fix handling of LLDP frames
- bpf: report RCU QS in cpumap kthread
- net: report RCU QS on threaded NAPI repolling
- rcu: add a helper to report consolidated flavor QS
- netfilter: nf_tables: do not compare internal table flags on updates
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- octeontx2-af: Use separate handlers for interrupts
- net/bnx2x: Prevent access to a freed page in page_pool
- net: phy: fix phy_read_poll_timeout argument type in genphy_loopback
- hsr: Handle failures in module init
- rds: introduce acquire/release ordering in acquire/release_in_xmit()
- wireguard: receive: annotate data-race around receiving_counter.counter
- vdpa/mlx5: Allow CVQ size changes
- net: dsa: mt7530: prevent possible incorrect XTAL frequency selection
- net: veth: do not manipulate GRO when using XDP
- packet: annotate data-races around ignore_outgoing
- net: ethernet: mtk_eth_soc: fix PPE hanging issue
- net: mediatek: mtk_eth_soc: clear MAC_MCR_FORCE_LINK only when MAC is up
- net: mtk_eth_soc: move MAC_MCR setting to mac_finish()
- hsr: Fix uninit-value access in hsr_get_node()
- soc: fsl: dpio: fix kcalloc() argument order
- s390/vtime: fix average steal time calculation
- octeontx2-af: Use matching wake_up API variant in CGX command interface
- nouveau: reset the bo resource bus info after an eviction
- io_uring: don't save/restore iowait state
- usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin
- staging: greybus: fix get_channel_from_mode() failure path
- serial: 8250_exar: Don't remove GPIO device on suspend
- rtc: mt6397: select IRQ_DOMAIN instead of depending on it
- kconfig: fix infinite loop when expanding a macro at the end of file
- arm64: dts: broadcom: bcmbca: bcm4908: drop invalid switch cells
- tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT
- serial: max310x: fix syntax error in IRQ error message
- tty: vt: fix 20 vs 0x20 typo in EScsiignore
- remoteproc: stm32: Fix incorrect type assignment returned by 
stm32_rproc_get_loaded_rsc_tablef
- remoteproc: stm32: Fix incorrect type in assignment for va
- remoteproc: stm32: use correct format strings on 64-bit
- comedi: comedi_test: Prevent timers rescheduling during deletion
- afs: Revert "afs: Hide silly-rename files from userspace"
- f2fs: compress: fix reserve_cblocks counting error when out of space
- NFS: Fix an off by one in root_nfs_cat()
- watchdog: stm32_iwdg: initialize default timeout
- NFSv4.2: fix listxattr maximum XDR buffer size
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr()
- scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn
- RDMA/rtrs-clt: Check strnlen return len in sysfs mpath_policy_store()
- RDMA/device: Fix a race between mad_client and cm_client init
- scsi: csiostor: Avoid function pointer casts
- f2fs: compress: fix to check unreleased compressed cluster
- f2fs: compress: fix to cover normal cluster write with cp_rwsem
- f2fs: reduce stack memory cost by using bitfield in struct f2fs_io_info
- f2fs: invalidate meta pages only for post_read required inode
- f2fs: fix to invalidate META_MAPPING before DIO write
- f2fs: replace congestion_wait() calls with io_schedule_timeout()
- f2fs: invalidate META_MAPPING before IPU/DIO write
- f2fs: multidevice: support direct IO
- RDMA/srpt: Do not register event handler until srpt device is fully setup
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- ALSA: hda/realtek: fix ALC285 issues on HP Envy x360 laptops
- clk: zynq: Prevent null pointer dereference caused by kmalloc failure
- clk: Fix clk_core_get NULL dereference
- sparc32: Fix section mismatch in leon_pci_grpci
- backlight: lp8788: Fully initialize backlight_properties during probe
- backlight: lm3639: Fully initialize backlight_properties during probe
- backlight: da9052: Fully initialize backlight_properties during probe
- backlight: lm3630a: Don't set bl->props.brightness in get_brightness
- backlight: lm3630a: Initialize backlight_properties on init
- leds: sgm3140: Add missing timer cleanup and flash gpio control
- leds: aw2013: Unlock mutex before destroying it
- powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc.
- modules: wait do_free_init correctly
- module: Add support for default value for module async_probe
- drm/msm/dpu: add division of drm_display_mode's hskew parameter
- powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- media: mediatek: vcodec: avoid -Wcast-function-type-strict warning
- media: ttpci: fix two memleaks in budget_av_attach
- media: go7007: fix a memleak in go7007_load_encoder
- media: dvb-frontends: avoid stack overflow warnings with clang
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int()
- HID: amd_sfh: Update HPD sensor structure elements
- ASoC: meson: axg-tdm-interface: add frame rate constraint
- ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs
- mtd: rawnand: lpc32xx_mlc: fix irq handler prototype
- mtd: maps: physmap-core: fix flash size larger than 32-bit
- drm/tidss: Fix initial plane zpos values
- crypto: arm/sha - fix function cast warnings
- mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a 
ref
- mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref
- drm/tegra: put drm_gem_object ref on error in tegra_fb_create
- clk: hisilicon: hi3559a: Fix an erroneous devm_kfree()
- clk: hisilicon: hi3519: Release the correct number of gates in 
hi3519_clk_unregister()
- PCI: Mark 3ware-9650SE Root Port Extended Tags as broken
- drm/mediatek: dsi: Fix DSI RGB666 formats and definitions
- clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times
- media: pvrusb2: fix pvr2_stream_callback casts
- media: pvrusb2: remove redundant NULL check
- media: go7007: add check of return value of go7007_read_addr()
- media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak
- media: sun8i-di: Fix chroma difference threshold
- media: sun8i-di: Fix power on/off sequences
- media: sun8i-di: Fix coefficient writes
- NTB: fix possible name leak in ntb_register_device()
- NTB: EPF: fix possible memory leak in pci_vntb_probe()
- PCI: endpoint: Support NTB transfer between RC and EP
- powerpc: Force inlining of arch_vmap_p{u/m}d_supported()
- ASoC: meson: t9015: fix function pointer type mismatch
- ASoC: meson: aiu: fix function pointer type mismatch
- ASoC: meson: Use dev_err_probe() helper
- perf stat: Avoid metric-only segv
- ALSA: seq: fix function cast warnings
- drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode()
- perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str()
- crypto: xilinx - call finalize with bh disabled
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI/P2PDMA: Fix a sleeping issue in a RCU read section
- quota: Fix rcu annotations of inode dquot pointers
- quota: Fix potential NULL pointer dereference
- quota: simplify drop_dquot_ref()
- clk: qcom: reset: Ensure write completion on reset de/assertion
- clk: qcom: reset: Commonize the de/assert functions
- pinctrl: mediatek: Drop bogus slew rate register range for MT8192
- media: edia: dvbdev: fix a use-after-free
- media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity
- media: v4l2-tpg: fix some memleaks in tpg_alloc
- media: em28xx: annotate unchecked call to media_device_register()
- clk: meson: Add missing clocks to axg_clk_regmaps
- perf evsel: Fix duplicate initialization of data->id in evsel__parse_sample()
- drm/amd/display: Fix potential NULL pointer dereferences in 
'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- HID: lenovo: Add middleclick_workaround sysfs knob for cptkbd
- perf record: Fix possible incorrect free in record__switch_output()
- PCI/DPC: Print all TLP Prefixes, not just the first
- media: tc358743: register v4l2 async device only after successful setup
- dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA
- drm/lima: fix a memleak in lima_heap_alloc
- drm/rockchip: lvds: do not print scary message when probing defer
- drm/rockchip: lvds: do not overwrite error code
- drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node
- drm/ttm: add ttm_resource_fini v2
- drm: Don't treat 0 as -1 in drm_fixp2int_ceil
- drm/rockchip: inno_hdmi: Fix video timing
- drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths 
of tegra_output_probe()
- drm/tegra: rgb: Fix missing clk_put() in the error handling paths of 
tegra_dc_rgb_probe()
- drm/tegra: rgb: Fix some error handling paths in tegra_dc_rgb_probe()
- drm/tegra: dc: rgb: Allow changing PLLD rate on Tegra30+
- drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path 
of tegra_dsi_probe()
- drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe()
- drm/tegra: dsi: Make use of the helper function dev_err_probe()
- drm/tegra: dpaux: Fix PM disable depth imbalance in tegra_dpaux_probe
- drm/tegra: dpaux: Populate AUX bus
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- dm: call the resume method on internal suspend
- dm raid: fix false positive for requeue needed during reshape
- nfp: flower: handle acti_netdevs allocation failure
- net/x25: fix incorrect parameter validation in the x25_getsockopt() function
- net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function
- udp: fix incorrect parameter validation in the udp_lib_getsockopt() function
- l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function
- ipmr: fix incorrect parameter validation in the ip_mroute_getsockopt() 
function
- bpf: net: Change do_ip_getsockopt() to take the sockptr_t argument
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function
- OPP: debugfs: Fix warning around icc_get_name()
- net: phy: dp83822: Fix RGMII TX delay configuration
- net: phy: DP83822: enable rgmii mode if phy_interface_is_rgmii
- net: hns3: fix port duplex configure error in IMP reset
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- net: phy: fix phy_get_internal_delay accessing an empty array
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- ipv6: fib6_rules: flush route cache when rule is changed
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- sr9800: Add check for usbnet_get_endpoints
- Bluetooth: hci_core: Fix possible buffer overflow
- Bluetooth: hci_qca: don't use IS_ERR_OR_NULL() with gpiod_get_optional()
- Bluetooth: hci_qca: Add support for QTI Bluetooth chip wcn6855
- Bluetooth: Remove superfluous call to hci_conn_check_pending()
- igb: Fix missing time sync events
- igb: move PEROUT and EXTTS isr logic to separate functions
- iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected
- PCI: Make pci_dev_is_disconnected() helper public for other drivers
- wifi: rtw88: 8821c: Fix false alarm count
- mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove 
function
- SUNRPC: fix some memleaks in gssx_dec_option_array
- x86, relocs: Ignore relocations in .notes section
- ACPI: scan: Fix device check notification handling
- ACPI: resource: Add MAIBENBEN X577 to irq1_edge_low_force_override
- ACPI: resource: Do IRQ override on Lunnen Ground laptops
- ACPI: resource: Add Infinity laptops to irq1_edge_low_force_override
- arm64: dts: marvell: reorder crypto interrupts on Armada SoCs
- ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node
- ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address
- ARM: dts: imx6dl-yapp4: Move phy reset into switch node
- arm64: dts: renesas: r8a779a0: Correct avb[01] reg sizes
- arm64: dts: renesas: r8a779a0: Update to R-Car Gen4 compatible values
- ARM: dts: arm: realview: Fix development chip ROM compatible value
- net: ena: Remove ena_select_queue
- wifi: brcmsmac: avoid function pointer casts
- iommu/amd: Mark interrupt as managed
- bus: tegra-aconnect: Update dependency to ARCH_TEGRA
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces
- wireless: Remove redundant 'flush_workqueue()' calls
- bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly
- arm64: dts: mediatek: mt7622: add missing "device_type" to memory nodes
- arm64: dts: mt8183: Move CrosEC base detection node to kukui-based DTs
- arm64: dts: mt8183: kukui: Split out keyboard node and describe detachables
- arm64: dts: mt8183: kukui: Add Type C node
- ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down()
- s390/vdso: drop '-fPIC' from LDFLAGS
- wifi: iwlwifi: mvm: don't set replay counters to 0xff
- pwm: sti: Fix capture for st,pwm-num-chan < st,capture-num-chan
- pwm: sti: Implement .apply() callback
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: blackhole_dev: fix build warning for ethh set but not used
- pwm: atmel-hlcdc: Fix clock imbalance related to suspend support
- pwm: atmel-hlcdc: Use consistent variable naming
- pwm: atmel-hlcdc: Convert to platform remove callback returning void
- arm64: dts: imx8mm-venice-gw71xx: fix USB OTG VBUS
- wifi: iwlwifi: fix EWRD table validity check
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- wifi: iwlwifi: mvm: report beacon protection failures
- wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete
- arm64: dts: imx8mm-kontron: Disable pull resistors for SD card signals on BL 
board
- arm64: dts: imx8mm-kontron: Use the VSELECT signal to switch SD card IO 
voltage
- arm64: dts: imx8mm-kontron: Add support for ultra high speed modes on SD card
- arm64: dts: imx8mm-kontron: Disable pullups for onboard UART signals on BL 
board
- arm64: dts: imx8mm-kontron: Disable pullups for I2C signals on SL/BL i.MX8MM
- cpufreq: mediatek-hw: Don't error out if supply is not found
- af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc().
- bpftool: Silence build warning about calloc()
- inet_diag: annotate data-races around inet_diag_table[]
- sock_diag: annotate data-races around sock_diag_handlers[family]
- cpufreq: mediatek-hw: Wait for CPU supplies before probing
- cpufreq: Explicitly include correct DT includes
- cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value
- wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir()
- wifi: wilc1000: fix multi-vif management when deleting a vif
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- wifi: wilc1000: fix RCU usage in connect path
- wifi: wilc1000: fix declarations ordering
- wifi: b43: Disable QoS for bcm4331
- wifi: b43: Stop correct queue in DMA worker when QoS is disabled
- wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- wifi: ath10k: fix NULL pointer dereference in 
ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- sched/fair: Take the scheduling domain into account in select_idle_core()
- timekeeping: Fix cross-timestamp interpolation for non-x86
- timekeeping: Fix cross-timestamp interpolation corner case decision
- timekeeping: Fix cross-timestamp interpolation on counter wrap
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- rtc: test: Fix invalid format specifier.
- time: test: Fix incorrect format specifier
- lib/cmdline: Fix an invalid format specifier in an assertion msg
- md: Don't clear MD_CLOSING when the raid is about to stop
- fs/select: rework stack allocation hack for clang
- nbd: null check for nla_nest_start
- s390/dasd: fix double module refcount decrement
- s390/dasd: Use dev_*() for device log messages
- s390/dasd: add autoquiesce feature
- s390/dasd: add copy pair setup
- s390/dasd: add query PPRC function
- s390/dasd: put block allocation in separate function
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll
- ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode
- ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC
- Input: gpio_keys_polled - suppress deferred probe error for gpio
- ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet
- firewire: core: use long bus reset on gap count error
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- drm/amdgpu: Enable gpu reset for S3 abort cases on Raven series
- ALSA: hda/realtek - ALC285 reduce pop noise from Headphone port
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- dm-verity, dm-crypt: align "struct bvec_iter" correctly
- block: sed-opal: handle empty atoms when parsing response
- parisc/ftrace: add missing CONFIG_DYNAMIC_FTRACE check
- net/iucv: fix the allocation size of iucv_path_table array
- x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
- x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h
- riscv: dts: sifive: add missing #interrupt-cells to pmic
- RDMA/mlx5: Relax DEVX access upon modify commands
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- gen_compile_commands: fix invalid escape sequence warning
- HID: multitouch: Add required quirk for Synaptics 0xcddc device
- MIPS: Clear Cause.BD in instruction_pointer_set
- x86/xen: Add some null pointer checking to smp.c
- ASoC: rt5645: Make LattePanda board DMI match more precise
- selftests: tls: use exact comparison in recv_partial
- bpf: Defer the free of inner map when necessary
- rcu-tasks: Provide rcu_trace_implies_rcu_gp()
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
+ UBUNTU: Upstream stable to v5.15.153

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2063290

Title:
  Jammy update: v5.15.153 upstream stable release

Status in linux package in Ubuntu:
  Invalid
Status in linux source package in Jammy:
  In Progress

Bug description:
  
      SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         v5.15.153 upstream stable release
         from git://git.kernel.org/

  io_uring/unix: drop usage of io_uring socket
  io_uring: drop any code related to SCM_RIGHTS
  rcu-tasks: Provide rcu_trace_implies_rcu_gp()
  bpf: Defer the free of inner map when necessary
  selftests: tls: use exact comparison in recv_partial
  ASoC: rt5645: Make LattePanda board DMI match more precise
  x86/xen: Add some null pointer checking to smp.c
  MIPS: Clear Cause.BD in instruction_pointer_set
  HID: multitouch: Add required quirk for Synaptics 0xcddc device
  gen_compile_commands: fix invalid escape sequence warning
  RDMA/mlx5: Fix fortify source warning while accessing Eth segment
  RDMA/mlx5: Relax DEVX access upon modify commands
  riscv: dts: sifive: add missing #interrupt-cells to pmic
  x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h
  x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
  net/iucv: fix the allocation size of iucv_path_table array
  parisc/ftrace: add missing CONFIG_DYNAMIC_FTRACE check
  block: sed-opal: handle empty atoms when parsing response
  dm-verity, dm-crypt: align "struct bvec_iter" correctly
  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
  ALSA: hda/realtek - ALC285 reduce pop noise from Headphone port
  drm/amdgpu: Enable gpu reset for S3 abort cases on Raven series
  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
  firewire: core: use long bus reset on gap count error
  ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet
  Input: gpio_keys_polled - suppress deferred probe error for gpio
  ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC
  ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode
  ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll
  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
  s390/dasd: put block allocation in separate function
  s390/dasd: add query PPRC function
  s390/dasd: add copy pair setup
  s390/dasd: add autoquiesce feature
  s390/dasd: Use dev_*() for device log messages
  s390/dasd: fix double module refcount decrement
  fs/select: rework stack allocation hack for clang
  md: Don't clear MD_CLOSING when the raid is about to stop
  lib/cmdline: Fix an invalid format specifier in an assertion msg
  time: test: Fix incorrect format specifier
  rtc: test: Fix invalid format specifier.
  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
  timekeeping: Fix cross-timestamp interpolation on counter wrap
  timekeeping: Fix cross-timestamp interpolation corner case decision
  timekeeping: Fix cross-timestamp interpolation for non-x86
  sched/fair: Take the scheduling domain into account in select_idle_core()
  wifi: ath10k: fix NULL pointer dereference in 
ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
  wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled
  wifi: b43: Stop correct queue in DMA worker when QoS is disabled
  wifi: b43: Disable QoS for bcm4331
  wifi: wilc1000: fix declarations ordering
  wifi: wilc1000: fix RCU usage in connect path
  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
  wifi: wilc1000: fix multi-vif management when deleting a vif
  wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir()
  cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value
  cpufreq: Explicitly include correct DT includes
  cpufreq: mediatek-hw: Wait for CPU supplies before probing
  sock_diag: annotate data-races around sock_diag_handlers[family]
  inet_diag: annotate data-races around inet_diag_table[]
  bpftool: Silence build warning about calloc()
  af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc().
  cpufreq: mediatek-hw: Don't error out if supply is not found
  arm64: dts: imx8mm-kontron: Disable pullups for I2C signals on SL/BL i.MX8MM
  arm64: dts: imx8mm-kontron: Disable pullups for onboard UART signals on BL 
board
  arm64: dts: imx8mm-kontron: Add support for ultra high speed modes on SD card
  arm64: dts: imx8mm-kontron: Use the VSELECT signal to switch SD card IO 
voltage
  arm64: dts: imx8mm-kontron: Disable pull resistors for SD card signals on BL 
board
  wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete
  wifi: iwlwifi: mvm: report beacon protection failures
  wifi: iwlwifi: dbg-tlv: ensure NUL termination
  wifi: iwlwifi: fix EWRD table validity check
  arm64: dts: imx8mm-venice-gw71xx: fix USB OTG VBUS
  pwm: atmel-hlcdc: Convert to platform remove callback returning void
  pwm: atmel-hlcdc: Use consistent variable naming
  pwm: atmel-hlcdc: Fix clock imbalance related to suspend support
  net: blackhole_dev: fix build warning for ethh set but not used
  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
  pwm: sti: Implement .apply() callback
  pwm: sti: Fix capture for st,pwm-num-chan < st,capture-num-chan
  wifi: iwlwifi: mvm: don't set replay counters to 0xff
  s390/vdso: drop '-fPIC' from LDFLAGS
  ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down()
  arm64: dts: mt8183: kukui: Add Type C node
  arm64: dts: mt8183: kukui: Split out keyboard node and describe detachables
  arm64: dts: mt8183: Move CrosEC base detection node to kukui-based DTs
  arm64: dts: mediatek: mt7622: add missing "device_type" to memory nodes
  bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly
  wireless: Remove redundant 'flush_workqueue()' calls
  wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces
  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
  bus: tegra-aconnect: Update dependency to ARCH_TEGRA
  UBUNTU: [Config]: update CONFIG_TEGRA_ACONNECT
  iommu/amd: Mark interrupt as managed
  wifi: brcmsmac: avoid function pointer casts
  net: ena: Remove ena_select_queue
  ARM: dts: arm: realview: Fix development chip ROM compatible value
  arm64: dts: renesas: r8a779a0: Update to R-Car Gen4 compatible values
  arm64: dts: renesas: r8a779a0: Correct avb[01] reg sizes
  ARM: dts: imx6dl-yapp4: Move phy reset into switch node
  ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address
  ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node
  arm64: dts: marvell: reorder crypto interrupts on Armada SoCs
  ACPI: resource: Add Infinity laptops to irq1_edge_low_force_override
  ACPI: resource: Do IRQ override on Lunnen Ground laptops
  ACPI: resource: Add MAIBENBEN X577 to irq1_edge_low_force_override
  ACPI: scan: Fix device check notification handling
  x86, relocs: Ignore relocations in .notes section
  SUNRPC: fix some memleaks in gssx_dec_option_array
  mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove 
function
  wifi: rtw88: 8821c: Fix false alarm count
  PCI: Make pci_dev_is_disconnected() helper public for other drivers
  iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected
  igb: move PEROUT and EXTTS isr logic to separate functions
  igb: Fix missing time sync events
  Bluetooth: Remove superfluous call to hci_conn_check_pending()
  Bluetooth: hci_qca: Add support for QTI Bluetooth chip wcn6855
  Bluetooth: hci_qca: don't use IS_ERR_OR_NULL() with gpiod_get_optional()
  Bluetooth: hci_core: Fix possible buffer overflow
  sr9800: Add check for usbnet_get_endpoints
  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
  bpf: Fix hashtab overflow check on 32-bit arches
  bpf: Fix stackmap overflow check on 32-bit arches
  ipv6: fib6_rules: flush route cache when rule is changed
  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
  net: phy: fix phy_get_internal_delay accessing an empty array
  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
  net: hns3: fix port duplex configure error in IMP reset
  net: phy: DP83822: enable rgmii mode if phy_interface_is_rgmii
  net: phy: dp83822: Fix RGMII TX delay configuration
  OPP: debugfs: Fix warning around icc_get_name()
  tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function
  net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
  bpf: net: Change sk_getsockopt() to take the sockptr_t argument
  bpf: net: Change do_ip_getsockopt() to take the sockptr_t argument
  ipmr: fix incorrect parameter validation in the ip_mroute_getsockopt() 
function
  l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function
  udp: fix incorrect parameter validation in the udp_lib_getsockopt() function
  net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function
  net/x25: fix incorrect parameter validation in the x25_getsockopt() function
  nfp: flower: handle acti_netdevs allocation failure
  dm raid: fix false positive for requeue needed during reshape
  dm: call the resume method on internal suspend
  drm/tegra: dsi: Add missing check for of_find_device_by_node
  drm/tegra: dpaux: Populate AUX bus
  drm/tegra: dpaux: Fix PM disable depth imbalance in tegra_dpaux_probe
  drm/tegra: dsi: Make use of the helper function dev_err_probe()
  drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe()
  drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path 
of tegra_dsi_probe()
  drm/tegra: dc: rgb: Allow changing PLLD rate on Tegra30+
  drm/tegra: rgb: Fix some error handling paths in tegra_dc_rgb_probe()
  drm/tegra: rgb: Fix missing clk_put() in the error handling paths of 
tegra_dc_rgb_probe()
  drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths 
of tegra_output_probe()
  drm/rockchip: inno_hdmi: Fix video timing
  drm: Don't treat 0 as -1 in drm_fixp2int_ceil
  drm/ttm: add ttm_resource_fini v2
  drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node
  drm/rockchip: lvds: do not overwrite error code
  drm/rockchip: lvds: do not print scary message when probing defer
  drm/lima: fix a memleak in lima_heap_alloc
  dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA
  UBUNTU: [Config]: update CONFIG_TEGRA210_ADMA
  media: tc358743: register v4l2 async device only after successful setup
  PCI/DPC: Print all TLP Prefixes, not just the first
  perf record: Fix possible incorrect free in record__switch_output()
  HID: lenovo: Add middleclick_workaround sysfs knob for cptkbd
  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
  drm/amd/display: Fix potential NULL pointer dereferences in 
'dcn10_set_output_transfer_func()'
  perf evsel: Fix duplicate initialization of data->id in evsel__parse_sample()
  clk: meson: Add missing clocks to axg_clk_regmaps
  media: em28xx: annotate unchecked call to media_device_register()
  media: v4l2-tpg: fix some memleaks in tpg_alloc
  media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity
  media: edia: dvbdev: fix a use-after-free
  pinctrl: mediatek: Drop bogus slew rate register range for MT8192
  clk: qcom: reset: Commonize the de/assert functions
  clk: qcom: reset: Ensure write completion on reset de/assertion
  quota: simplify drop_dquot_ref()
  quota: Fix potential NULL pointer dereference
  quota: Fix rcu annotations of inode dquot pointers
  PCI/P2PDMA: Fix a sleeping issue in a RCU read section
  PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
  crypto: xilinx - call finalize with bh disabled
  perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str()
  drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode()
  ALSA: seq: fix function cast warnings
  perf stat: Avoid metric-only segv
  ASoC: meson: Use dev_err_probe() helper
  ASoC: meson: aiu: fix function pointer type mismatch
  ASoC: meson: t9015: fix function pointer type mismatch
  powerpc: Force inlining of arch_vmap_p{u/m}d_supported()
  PCI: endpoint: Support NTB transfer between RC and EP
  UBUNTU: [Config]: update CONFIG_PCI_EPF_VNTB
  NTB: EPF: fix possible memory leak in pci_vntb_probe()
  NTB: fix possible name leak in ntb_register_device()
  media: sun8i-di: Fix coefficient writes
  media: sun8i-di: Fix power on/off sequences
  media: sun8i-di: Fix chroma difference threshold
  media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak
  media: go7007: add check of return value of go7007_read_addr()
  media: pvrusb2: remove redundant NULL check
  media: pvrusb2: fix pvr2_stream_callback casts
  clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times
  drm/mediatek: dsi: Fix DSI RGB666 formats and definitions
  PCI: Mark 3ware-9650SE Root Port Extended Tags as broken
  clk: hisilicon: hi3519: Release the correct number of gates in 
hi3519_clk_unregister()
  clk: hisilicon: hi3559a: Fix an erroneous devm_kfree()
  drm/tegra: put drm_gem_object ref on error in tegra_fb_create
  mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref
  mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a 
ref
  crypto: arm/sha - fix function cast warnings
  drm/tidss: Fix initial plane zpos values
  mtd: maps: physmap-core: fix flash size larger than 32-bit
  mtd: rawnand: lpc32xx_mlc: fix irq handler prototype
  ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs
  ASoC: meson: axg-tdm-interface: add frame rate constraint
  HID: amd_sfh: Update HPD sensor structure elements
  drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int()
  media: pvrusb2: fix uaf in pvr2_context_set_notify
  media: dvb-frontends: avoid stack overflow warnings with clang
  media: go7007: fix a memleak in go7007_load_encoder
  media: ttpci: fix two memleaks in budget_av_attach
  media: mediatek: vcodec: avoid -Wcast-function-type-strict warning
  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
  powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks
  drm/msm/dpu: add division of drm_display_mode's hskew parameter
  module: Add support for default value for module async_probe
  modules: wait do_free_init correctly
  powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc.
  leds: aw2013: Unlock mutex before destroying it
  leds: sgm3140: Add missing timer cleanup and flash gpio control
  backlight: lm3630a: Initialize backlight_properties on init
  backlight: lm3630a: Don't set bl->props.brightness in get_brightness
  backlight: da9052: Fully initialize backlight_properties during probe
  backlight: lm3639: Fully initialize backlight_properties during probe
  backlight: lp8788: Fully initialize backlight_properties during probe
  sparc32: Fix section mismatch in leon_pci_grpci
  clk: Fix clk_core_get NULL dereference
  clk: zynq: Prevent null pointer dereference caused by kmalloc failure
  ALSA: hda/realtek: fix ALC285 issues on HP Envy x360 laptops
  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
  RDMA/srpt: Do not register event handler until srpt device is fully setup
  f2fs: multidevice: support direct IO
  f2fs: invalidate META_MAPPING before IPU/DIO write
  f2fs: replace congestion_wait() calls with io_schedule_timeout()
  f2fs: fix to invalidate META_MAPPING before DIO write
  f2fs: invalidate meta pages only for post_read required inode
  f2fs: reduce stack memory cost by using bitfield in struct f2fs_io_info
  f2fs: compress: fix to cover normal cluster write with cp_rwsem
  f2fs: compress: fix to check unreleased compressed cluster
  scsi: csiostor: Avoid function pointer casts
  RDMA/device: Fix a race between mad_client and cm_client init
  RDMA/rtrs-clt: Check strnlen return len in sysfs mpath_policy_store()
  scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn
  net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr()
  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
  NFSv4.2: fix listxattr maximum XDR buffer size
  watchdog: stm32_iwdg: initialize default timeout
  NFS: Fix an off by one in root_nfs_cat()
  f2fs: compress: fix reserve_cblocks counting error when out of space
  afs: Revert "afs: Hide silly-rename files from userspace"
  comedi: comedi_test: Prevent timers rescheduling during deletion
  remoteproc: stm32: use correct format strings on 64-bit
  remoteproc: stm32: Fix incorrect type in assignment for va
  remoteproc: stm32: Fix incorrect type assignment returned by 
stm32_rproc_get_loaded_rsc_tablef
  tty: vt: fix 20 vs 0x20 typo in EScsiignore
  serial: max310x: fix syntax error in IRQ error message
  tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT
  arm64: dts: broadcom: bcmbca: bcm4908: drop invalid switch cells
  kconfig: fix infinite loop when expanding a macro at the end of file
  rtc: mt6397: select IRQ_DOMAIN instead of depending on it
  serial: 8250_exar: Don't remove GPIO device on suspend
  staging: greybus: fix get_channel_from_mode() failure path
  usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin
  io_uring: don't save/restore iowait state
  nouveau: reset the bo resource bus info after an eviction
  octeontx2-af: Use matching wake_up API variant in CGX command interface
  s390/vtime: fix average steal time calculation
  soc: fsl: dpio: fix kcalloc() argument order
  hsr: Fix uninit-value access in hsr_get_node()
  net: mtk_eth_soc: move MAC_MCR setting to mac_finish()
  net: mediatek: mtk_eth_soc: clear MAC_MCR_FORCE_LINK only when MAC is up
  net: ethernet: mtk_eth_soc: fix PPE hanging issue
  packet: annotate data-races around ignore_outgoing
  net: veth: do not manipulate GRO when using XDP
  net: dsa: mt7530: prevent possible incorrect XTAL frequency selection
  vdpa/mlx5: Allow CVQ size changes
  wireguard: receive: annotate data-race around receiving_counter.counter
  rds: introduce acquire/release ordering in acquire/release_in_xmit()
  hsr: Handle failures in module init
  net: phy: fix phy_read_poll_timeout argument type in genphy_loopback
  net/bnx2x: Prevent access to a freed page in page_pool
  octeontx2-af: Use separate handlers for interrupts
  netfilter: nft_set_pipapo: release elements in clone only from destroy path
  netfilter: nf_tables: do not compare internal table flags on updates
  rcu: add a helper to report consolidated flavor QS
  net: report RCU QS on threaded NAPI repolling
  bpf: report RCU QS in cpumap kthread
  net: dsa: mt7530: fix handling of LLDP frames
  net: dsa: mt7530: fix handling of 802.1X PAE frames
  net: dsa: mt7530: fix link-local frames that ingress vlan filtering ports
  net: dsa: mt7530: fix handling of all link-local frames
  spi: spi-mt65xx: Fix NULL pointer access in interrupt handler
  regmap: Add missing map->bus check
  remoteproc: stm32: fix incorrect optional pointers
  UBUNTU: Upstream stable to v5.15.153

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2063290/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to