Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.180 upstream stable release
from git://git.kernel.org/
vlan: fix memory leak in vlan_newlink()
clockevents/drivers/i8253: Fix stop sequence for timer 0
sched/isolation: Prevent boot crash when the boot CPU is nohz_full
ipv6: Fix signed integer overflow in __ip6_append_data
fbdev: hyperv_fb: iounmap() the correct memory when removing a device
pinctrl: bcm281xx: Fix incorrect regmap max_registers value
netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.
ice: fix memory leak in aRFS after reset
net: dsa: mv88e6xxx: Verify after ATU Load ops
netpoll: hold rcu read lock in __netpoll_send_skb()
Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
net/mlx5: handle errors in mlx5_chains_create_table()
netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in
insert_tree()
ipvs: prevent integer overflow in do_ip_vs_get_ctl()
netfilter: nft_exthdr: fix offset with ipv4_find_option()
gre: Fix IPv6 link-local address generation.
slab: clean up function prototypes
slab: Introduce kmalloc_size_roundup()
openvswitch: Use kmalloc_size_roundup() to match ksize() usage
net: openvswitch: remove misbehaving actions length check
net/mlx5: Bridge, fix the crash caused by LAG state check
net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices
nvme-fc: go straight to connecting state when initializing
hrtimers: Mark is_migration_base() with __always_inline
powercap: call put_device() on an error path in powercap_register_control_type()
scsi: core: Use GFP_NOIO to avoid circular locking dependency
scsi: qla1280: Fix kernel oops when debug level > 2
ACPI: resource: IRQ override for Eluktronics MECH-17
alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
vboxsf: fix building with GCC 15
HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
HID: ignore non-functional sensor in HP 5MP Camera
sched: Clarify wake_up_q()'s write to task->wake_q.next
s390/cio: Fix CHPID "configure" attribute caching
thermal/cpufreq_cooling: Remove structure member documentation
ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors
nvmet-rdma: recheck queue state is LIVE in state lock in recv done
sctp: Fix undefined behavior in left shift operation
nvme: only allow entering LIVE from CONNECTING state
ASoC: tas2770: Fix volume scale
ASoC: tas2764: Fix power control mask
ASoC: tas2764: Set the SDOUT polarity correctly
fuse: don't truncate cached, mutated symlink
x86/irq: Define trace events conditionally
mptcp: safety check before fallback
drm/nouveau: Do not override forced connector status
block: fix 'kmem_cache of name 'bio-108' already exists'
USB: serial: ftdi_sio: add support for Altera USB Blaster 3
USB: serial: option: add Telit Cinterion FE990B compositions
USB: serial: option: fix Telit Cinterion FE990A name
USB: serial: option: match on interface class for Telit FN990B
x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
drm/atomic: Filter out redundant DPMS calls
drm/amd/display: Restore correct backlight brightness after a GPU reset
drm/amd/display: Assign normalized_pix_clk when color depth = 14
drm/amd/display: Fix slab-use-after-free on hdcp_work
qlcnic: fix memory leak issues in qlcnic_sriov_common.c
lib/buildid: Handle memfd_secret() files in build_id_parse()
tcp: fix races in tcp_abort()
ASoC: ops: Consistently treat platform_max as control value
drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
cifs: Fix integer overflow while processing acregmax mount option
cifs: Fix integer overflow while processing acdirmax mount option
cifs: Fix integer overflow while processing actimeo mount option
cifs: Fix integer overflow while processing closetimeo mount option
i2c: ali1535: Fix an error handling path in ali1535_probe()
i2c: ali15x3: Fix an error handling path in ali15x3_probe()
i2c: sis630: Fix an error handling path in sis630_probe()
drm/amd/display: Check for invalid input params when building scaling params
drm/amd/display: Fix null check for pipe_ctx->plane_state in
resource_build_scaling_params
smb: client: Fix match_session bug preventing session reuse
Revert "smb: client: fix potential UAF in cifs_debug_files_proc_show()"
smb: client: fix potential UAF in cifs_debug_files_proc_show()
firmware: imx-scu: fix OF node leak in .probe()
xfrm_output: Force software GSO only in tunnel mode
ARM: dts: bcm2711: PL011 UARTs are actually r1p5
RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx
ARM: dts: bcm2711: Don't mark timer regs unconfigured
RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path
RDMA/hns: Remove redundant 'phy_addr' in hns_roce_hem_list_find_mtt()
RDMA/hns: Fix soft lockup during bt pages loop
RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
RDMA/hns: Fix wrong value of max_sge_rd
Bluetooth: Fix error code in chan_alloc_skb_cb()
ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().
net: atm: fix use after free in lec_send()
net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES
Revert "gre: Fix IPv6 link-local address generation."
i2c: omap: fix IRQ storms
drm/v3d: Don't run jobs that have errors flagged in its fence
regulator: check that dummy regulator has been probed before using it
mmc: atmel-mci: Add missing clk_disable_unprepare()
proc: fix UAF in proc_get_inode()
ARM: shmobile: smp: Enforce shmobile_smp_* alignment
batman-adv: Ignore own maximum aggregation size during RX
soc: qcom: pdr: Fix the potential deadlock
drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
drm/amdgpu: Fix JPEG video caps max size for navi1x and raven
mptcp: Fix data stream corruption in the address announcement
arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S
Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
bpf, sockmap: Fix race between element replace and close()
ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names
HID: hid-plantronics: Add mic mute mapping and generalize quirks
atm: Fix NULL pointer dereference
ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed()
ARM: 9351/1: fault: Add "cut here" line for prefetch aborts
ARM: Remove address checking for MMUless devices
netfilter: socket: Lookup orig tuple for IPv6 SNAT
ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx
counter: stm32-lptimer-cnt: fix error handling when enabling
counter: microchip-tcb-capture: Fix undefined counter channel state on probe
tty: serial: 8250: Add some more device IDs
tty: serial: 8250: Add Brainboxes XC devices
net: usb: qmi_wwan: add Telit Cinterion FN990B composition
net: usb: qmi_wwan: add Telit Cinterion FE990B composition
net: usb: usbnet: restore usb%d name exception for local mac addresses
memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
serial: 8250_dma: terminate correct DMA in tx_dma_flush()
watch_queue: fix pipe accounting mismatch
x86/mm/pat: cpa-test: fix length for CPA_ARRAY test
cpufreq: scpi: compare kHz instead of Hz
cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct()
x86/platform: Only allow CONFIG_EISA for 32-bit
UBUNTU: [Config] updateconfigs for HAVE_EISA
PM: sleep: Adjust check before setting power.must_resume
selinux: Chain up tool resolving errors in install_policy.sh
EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
EDAC/ie31200: Fix the DIMM size mask for several SoCs
EDAC/ie31200: Fix the error path order of ie31200_init()
thermal: int340x: Add NULL check for adev
PM: sleep: Fix handling devices with direct_complete set on errors
lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()
perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
media: platform: allgro-dvt: unregister v4l2_device on the error path
HID: remove superfluous (and wrong) Makefile entry for
CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER
ALSA: hda/realtek: Always honor no_shutup_pins
ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible
drm/bridge: ti-sn65dsi86: Fix multiple instances
drm/dp_mst: Fix drm RAD print
drm: xlnx: zynqmp: Fix max dma segment size
drm/vkms: Fix use after free and double free on init error
drm/mediatek: mtk_hdmi: Unregister audio platform device on failure
drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member
PCI/ASPM: Fix link state exit during switch upstream function removal
PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload
PCI: brcmstb: Use internal register to change link capability
PCI/portdrv: Only disable pciehp interrupts early when needed
PCI: Avoid reset when disabled via sysfs
drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters()
PCI: Remove stray put_device() in pci_register_host_bridge()
PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe
drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer()
PCI: pciehp: Don't enable HPIE when resuming in poll mode
fbdev: au1100fb: Move a variable assignment behind a null pointer check
mdacon: rework dependency list
fbdev: sm501fb: Add some geometry checks.
clk: amlogic: gxbb: drop incorrect flag on 32k clock
crypto: hisilicon/sec2 - fix for aead authsize alignment
remoteproc: core: Clear table_sz when rproc_shutdown
of: property: Increase NR_FWNODE_REFERENCE_ARGS
remoteproc: qcom_q6v5_pas: Make single-PD handling more robust
libbpf: Fix hypothetical STT_SECTION extern NULL deref case
clk: samsung: Fix UBSAN panic in samsung_clk_init()
clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock
bpf: Use preempt_count() directly in bpf_send_signal_common()
lib: 842: Improve error handling in sw842_compress()
pinctrl: renesas: rza2: Fix missing of_node_put() call
pinctrl: renesas: rzg2l: Fix missing of_node_put() call
clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent
RDMA/core: Don't expose hw_counters outside of init net namespace
remoteproc: qcom_q6v5_mss: Handle platforms with one power domain
IB/mad: Check available slots before posting receive WRs
pinctrl: tegra: Set SFIO mode to Mux Register
clk: amlogic: g12b: fix cluster A parent data
clk: amlogic: gxbb: drop non existing 32k clock parent
clk: amlogic: g12a: fix mmc A peripheral clock
x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
power: supply: max77693: Fix wrong conversion of charge input threshold value
crypto: nx - Fix uninitialised hv_nxc on error
RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
mfd: sm501: Switch to BIT() to mitigate integer overflows
x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced
assignment
crypto: hisilicon/sec2 - fix for aead auth key length
clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock
isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
soundwire: slave: fix an OF node reference leak in soundwire slave device
coresight: catu: Fix number of pages while using 64k pages
iio: accel: mma8452: Ensure error return on failure to matching oversampling
ratio
fs/ntfs3: Fix a couple integer overflows on 32bit systems
iio: adc: ad7124: Fix comparison of channel configs
perf units: Fix insufficient array space
kexec: initialize ELF lowest address to ULONG_MAX
ocfs2: validate l_tree_depth to avoid out-of-bounds access
NFSv4: Don't trigger uneccessary scans for return-on-close delegations
fuse: fix dax truncate/punch_hole fault path
i3c: master: svc: Fix missing the IBI rules
perf python: Fixup description of sample.id event member
perf python: Decrement the refcount of just created event on failure
perf python: Don't keep a raw_data pointer to consumed ring buffer space
perf python: Check if there is space to copy all the event
fs/procfs: fix the comment above proc_pid_wchan()
objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
exfat: fix the infinite loop in exfat_find_last_cluster()
rtnetlink: Allocate vfinfo size for VF GUIDs when supported
ksmbd: use aead_request_free to match aead_request_alloc
ksmbd: fix multichannel connection failure
ring-buffer: Fix bytes_dropped calculation issue
ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are
invalid
octeontx2-af: Fix mbox INTR handler when num VFs > 64
octeontx2-af: Free NIX_AF_INT_VEC_GEN irq
sched/smt: Always inline sched_smt_active()
wifi: iwlwifi: fw: allocate chained SG tables for dump
nvme-tcp: fix possible UAF in nvme_tcp_poll
nvme-pci: clean up CMBMSC when registering CMB fails
nvme-pci: skip CMB blocks incompatible with PCI P2P DMA
affs: generate OFS sequence numbers starting at 1
affs: don't write overlarge OFS data block size fields
ksmbd: fix incorrect validation for num_aces field of smb_acl
sched/deadline: Use online cpus for validating runtime
locking/semaphore: Use wake_q to wake up processes outside lock critical section
x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled
drm/amd: Keep display off while going into S4
ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx
can: statistics: use atomic access in hot path
hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}
spufs: fix a leak on spufs_new_file() failure
spufs: fix a leak in spufs_create_context()
riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and
make_call_ra
ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
ntb: intel: Fix using link status DB's
ASoC: imx-card: Add NULL check in imx_card_probe()
netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only
netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
net_sched: skbprio: Remove overly strict queue assertions
net: mvpp2: Prevent parser TCAM memory corruption
vsock: avoid timeout during connect() if the socket is closing
tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().
netfilter: nft_tunnel: fix geneve_opt type confusion addition
ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS
net: fix geneve_opt length integer overflow
arcnet: Add NULL check in com20020pci_probe()
can: flexcan: only change CAN state when link up in system PM
can: flexcan: disable transceiver during system PM
mmc: sdhci-brcmstb: Add ability to increase max clock rate for 72116b0
mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops
tty: serial: fsl_lpuart: use UARTMODIR register bits for lpuart32 platform
tty: serial: fsl_lpuart: disable transmitter before changing RS485 related
registers
drm/amd/pm: Fix negative array index read
drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
usbnet:fix NPE during rx_complete
platform/x86: ISST: Correct command storage data length
ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()
btrfs: handle errors from btrfs_dec_ref() properly
x86/tsc: Always save/restore TSC sched_clock() on suspend/resume
x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP
mmc: sdhci-pxav3: set NEED_RSP_BUSY capability
tracing: Fix use-after-free in print_graph_function_flags during tracer
switching
tracing: Ensure module defining synth event cannot be unloaded while tracing
tracing: Fix synth event printk format for str fields
tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
ext4: don't over-report free space or inodes in statvfs
ext4: fix OOB read when checking dotdot dir
jfs: fix slab-out-of-bounds read in ea_get()
jfs: add index corruption check to DT_GETPAGE()
nfsd: put dl_stid if fail to queue dl_recall
NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up
mmc: sdhci-brcmstb: use clk_get_rate(base_clk) in PM resume
mm, slab: remove duplicate kernel-doc comment for ksize()
tracing: Do not use PERF enums when perf is not defined
mmc: sdhci-brcmstb: Initialize base_clk to NULL in sdhci_brcmstb_probe()
Linux 5.15.180
UBUNTU: Upstream stable to v5.15.180
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Jammy)
Importance: Medium
Assignee: Manuel Diewald (diewald)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Jammy)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Jammy)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Jammy)
Status: New => In Progress
** Changed in: linux (Ubuntu Jammy)
Assignee: (unassigned) => Manuel Diewald (diewald)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.180 upstream stable release
from git://git.kernel.org/
-
+ vlan: fix memory leak in vlan_newlink()
+ clockevents/drivers/i8253: Fix stop sequence for timer 0
+ sched/isolation: Prevent boot crash when the boot CPU is nohz_full
+ ipv6: Fix signed integer overflow in __ip6_append_data
+ fbdev: hyperv_fb: iounmap() the correct memory when removing a device
+ pinctrl: bcm281xx: Fix incorrect regmap max_registers value
+ netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.
+ ice: fix memory leak in aRFS after reset
+ net: dsa: mv88e6xxx: Verify after ATU Load ops
+ netpoll: hold rcu read lock in __netpoll_send_skb()
+ Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
+ net/mlx5: handle errors in mlx5_chains_create_table()
+ netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in
insert_tree()
+ ipvs: prevent integer overflow in do_ip_vs_get_ctl()
+ netfilter: nft_exthdr: fix offset with ipv4_find_option()
+ gre: Fix IPv6 link-local address generation.
+ slab: clean up function prototypes
+ slab: Introduce kmalloc_size_roundup()
+ openvswitch: Use kmalloc_size_roundup() to match ksize() usage
+ net: openvswitch: remove misbehaving actions length check
+ net/mlx5: Bridge, fix the crash caused by LAG state check
+ net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices
+ nvme-fc: go straight to connecting state when initializing
+ hrtimers: Mark is_migration_base() with __always_inline
+ powercap: call put_device() on an error path in
powercap_register_control_type()
+ scsi: core: Use GFP_NOIO to avoid circular locking dependency
+ scsi: qla1280: Fix kernel oops when debug level > 2
+ ACPI: resource: IRQ override for Eluktronics MECH-17
+ alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
+ vboxsf: fix building with GCC 15
+ HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
+ HID: ignore non-functional sensor in HP 5MP Camera
+ sched: Clarify wake_up_q()'s write to task->wake_q.next
+ s390/cio: Fix CHPID "configure" attribute caching
+ thermal/cpufreq_cooling: Remove structure member documentation
+ ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
+ ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
+ ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
+ net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors
+ nvmet-rdma: recheck queue state is LIVE in state lock in recv done
+ sctp: Fix undefined behavior in left shift operation
+ nvme: only allow entering LIVE from CONNECTING state
+ ASoC: tas2770: Fix volume scale
+ ASoC: tas2764: Fix power control mask
+ ASoC: tas2764: Set the SDOUT polarity correctly
+ fuse: don't truncate cached, mutated symlink
+ x86/irq: Define trace events conditionally
+ mptcp: safety check before fallback
+ drm/nouveau: Do not override forced connector status
+ block: fix 'kmem_cache of name 'bio-108' already exists'
+ USB: serial: ftdi_sio: add support for Altera USB Blaster 3
+ USB: serial: option: add Telit Cinterion FE990B compositions
+ USB: serial: option: fix Telit Cinterion FE990A name
+ USB: serial: option: match on interface class for Telit FN990B
+ x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
+ drm/atomic: Filter out redundant DPMS calls
+ drm/amd/display: Restore correct backlight brightness after a GPU reset
+ drm/amd/display: Assign normalized_pix_clk when color depth = 14
+ drm/amd/display: Fix slab-use-after-free on hdcp_work
+ qlcnic: fix memory leak issues in qlcnic_sriov_common.c
+ lib/buildid: Handle memfd_secret() files in build_id_parse()
+ tcp: fix races in tcp_abort()
+ ASoC: ops: Consistently treat platform_max as control value
+ drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
+ ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
+ cifs: Fix integer overflow while processing acregmax mount option
+ cifs: Fix integer overflow while processing acdirmax mount option
+ cifs: Fix integer overflow while processing actimeo mount option
+ cifs: Fix integer overflow while processing closetimeo mount option
+ i2c: ali1535: Fix an error handling path in ali1535_probe()
+ i2c: ali15x3: Fix an error handling path in ali15x3_probe()
+ i2c: sis630: Fix an error handling path in sis630_probe()
+ drm/amd/display: Check for invalid input params when building scaling params
+ drm/amd/display: Fix null check for pipe_ctx->plane_state in
resource_build_scaling_params
+ smb: client: Fix match_session bug preventing session reuse
+ Revert "smb: client: fix potential UAF in cifs_debug_files_proc_show()"
+ smb: client: fix potential UAF in cifs_debug_files_proc_show()
+ firmware: imx-scu: fix OF node leak in .probe()
+ xfrm_output: Force software GSO only in tunnel mode
+ ARM: dts: bcm2711: PL011 UARTs are actually r1p5
+ RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx
+ ARM: dts: bcm2711: Don't mark timer regs unconfigured
+ RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path
+ RDMA/hns: Remove redundant 'phy_addr' in hns_roce_hem_list_find_mtt()
+ RDMA/hns: Fix soft lockup during bt pages loop
+ RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
+ RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
+ RDMA/hns: Fix wrong value of max_sge_rd
+ Bluetooth: Fix error code in chan_alloc_skb_cb()
+ ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
+ ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().
+ net: atm: fix use after free in lec_send()
+ net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES
+ Revert "gre: Fix IPv6 link-local address generation."
+ i2c: omap: fix IRQ storms
+ drm/v3d: Don't run jobs that have errors flagged in its fence
+ regulator: check that dummy regulator has been probed before using it
+ mmc: atmel-mci: Add missing clk_disable_unprepare()
+ proc: fix UAF in proc_get_inode()
+ ARM: shmobile: smp: Enforce shmobile_smp_* alignment
+ batman-adv: Ignore own maximum aggregation size during RX
+ soc: qcom: pdr: Fix the potential deadlock
+ drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
+ drm/amdgpu: Fix JPEG video caps max size for navi1x and raven
+ mptcp: Fix data stream corruption in the address announcement
+ arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S
+ Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
+ bpf, sockmap: Fix race between element replace and close()
+ ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names
+ HID: hid-plantronics: Add mic mute mapping and generalize quirks
+ atm: Fix NULL pointer dereference
+ ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed()
+ ARM: 9351/1: fault: Add "cut here" line for prefetch aborts
+ ARM: Remove address checking for MMUless devices
+ netfilter: socket: Lookup orig tuple for IPv6 SNAT
+ ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx
+ counter: stm32-lptimer-cnt: fix error handling when enabling
+ counter: microchip-tcb-capture: Fix undefined counter channel state on probe
+ tty: serial: 8250: Add some more device IDs
+ tty: serial: 8250: Add Brainboxes XC devices
+ net: usb: qmi_wwan: add Telit Cinterion FN990B composition
+ net: usb: qmi_wwan: add Telit Cinterion FE990B composition
+ net: usb: usbnet: restore usb%d name exception for local mac addresses
+ memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
+ serial: 8250_dma: terminate correct DMA in tx_dma_flush()
+ watch_queue: fix pipe accounting mismatch
+ x86/mm/pat: cpa-test: fix length for CPA_ARRAY test
+ cpufreq: scpi: compare kHz instead of Hz
+ cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
+ x86/fpu: Avoid copying dynamic FP state from init_task in
arch_dup_task_struct()
+ x86/platform: Only allow CONFIG_EISA for 32-bit
+ UBUNTU: [Config] updateconfigs for HAVE_EISA
+ PM: sleep: Adjust check before setting power.must_resume
+ selinux: Chain up tool resolving errors in install_policy.sh
+ EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
+ EDAC/ie31200: Fix the DIMM size mask for several SoCs
+ EDAC/ie31200: Fix the error path order of ie31200_init()
+ thermal: int340x: Add NULL check for adev
+ PM: sleep: Fix handling devices with direct_complete set on errors
+ lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()
+ perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
+ media: platform: allgro-dvt: unregister v4l2_device on the error path
+ HID: remove superfluous (and wrong) Makefile entry for
CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER
+ ALSA: hda/realtek: Always honor no_shutup_pins
+ ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible
+ drm/bridge: ti-sn65dsi86: Fix multiple instances
+ drm/dp_mst: Fix drm RAD print
+ drm: xlnx: zynqmp: Fix max dma segment size
+ drm/vkms: Fix use after free and double free on init error
+ drm/mediatek: mtk_hdmi: Unregister audio platform device on failure
+ drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member
+ PCI/ASPM: Fix link state exit during switch upstream function removal
+ PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload
+ PCI: brcmstb: Use internal register to change link capability
+ PCI/portdrv: Only disable pciehp interrupts early when needed
+ PCI: Avoid reset when disabled via sysfs
+ drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters()
+ PCI: Remove stray put_device() in pci_register_host_bridge()
+ PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe
+ drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer()
+ PCI: pciehp: Don't enable HPIE when resuming in poll mode
+ fbdev: au1100fb: Move a variable assignment behind a null pointer check
+ mdacon: rework dependency list
+ fbdev: sm501fb: Add some geometry checks.
+ clk: amlogic: gxbb: drop incorrect flag on 32k clock
+ crypto: hisilicon/sec2 - fix for aead authsize alignment
+ remoteproc: core: Clear table_sz when rproc_shutdown
+ of: property: Increase NR_FWNODE_REFERENCE_ARGS
+ remoteproc: qcom_q6v5_pas: Make single-PD handling more robust
+ libbpf: Fix hypothetical STT_SECTION extern NULL deref case
+ clk: samsung: Fix UBSAN panic in samsung_clk_init()
+ clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock
+ bpf: Use preempt_count() directly in bpf_send_signal_common()
+ lib: 842: Improve error handling in sw842_compress()
+ pinctrl: renesas: rza2: Fix missing of_node_put() call
+ pinctrl: renesas: rzg2l: Fix missing of_node_put() call
+ clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent
+ RDMA/core: Don't expose hw_counters outside of init net namespace
+ remoteproc: qcom_q6v5_mss: Handle platforms with one power domain
+ IB/mad: Check available slots before posting receive WRs
+ pinctrl: tegra: Set SFIO mode to Mux Register
+ clk: amlogic: g12b: fix cluster A parent data
+ clk: amlogic: gxbb: drop non existing 32k clock parent
+ clk: amlogic: g12a: fix mmc A peripheral clock
+ x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
+ power: supply: max77693: Fix wrong conversion of charge input threshold value
+ crypto: nx - Fix uninitialised hv_nxc on error
+ RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
+ mfd: sm501: Switch to BIT() to mitigate integer overflows
+ x86/dumpstack: Fix inaccurate unwinding from exception stacks due to
misplaced assignment
+ crypto: hisilicon/sec2 - fix for aead auth key length
+ clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock
+ isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
+ soundwire: slave: fix an OF node reference leak in soundwire slave device
+ coresight: catu: Fix number of pages while using 64k pages
+ iio: accel: mma8452: Ensure error return on failure to matching oversampling
ratio
+ fs/ntfs3: Fix a couple integer overflows on 32bit systems
+ iio: adc: ad7124: Fix comparison of channel configs
+ perf units: Fix insufficient array space
+ kexec: initialize ELF lowest address to ULONG_MAX
+ ocfs2: validate l_tree_depth to avoid out-of-bounds access
+ NFSv4: Don't trigger uneccessary scans for return-on-close delegations
+ fuse: fix dax truncate/punch_hole fault path
+ i3c: master: svc: Fix missing the IBI rules
+ perf python: Fixup description of sample.id event member
+ perf python: Decrement the refcount of just created event on failure
+ perf python: Don't keep a raw_data pointer to consumed ring buffer space
+ perf python: Check if there is space to copy all the event
+ fs/procfs: fix the comment above proc_pid_wchan()
+ objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
+ exfat: fix the infinite loop in exfat_find_last_cluster()
+ rtnetlink: Allocate vfinfo size for VF GUIDs when supported
+ ksmbd: use aead_request_free to match aead_request_alloc
+ ksmbd: fix multichannel connection failure
+ ring-buffer: Fix bytes_dropped calculation issue
+ ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are
invalid
+ octeontx2-af: Fix mbox INTR handler when num VFs > 64
+ octeontx2-af: Free NIX_AF_INT_VEC_GEN irq
+ sched/smt: Always inline sched_smt_active()
+ wifi: iwlwifi: fw: allocate chained SG tables for dump
+ nvme-tcp: fix possible UAF in nvme_tcp_poll
+ nvme-pci: clean up CMBMSC when registering CMB fails
+ nvme-pci: skip CMB blocks incompatible with PCI P2P DMA
+ affs: generate OFS sequence numbers starting at 1
+ affs: don't write overlarge OFS data block size fields
+ ksmbd: fix incorrect validation for num_aces field of smb_acl
+ sched/deadline: Use online cpus for validating runtime
+ locking/semaphore: Use wake_q to wake up processes outside lock critical
section
+ x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled
+ drm/amd: Keep display off while going into S4
+ ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx
+ can: statistics: use atomic access in hot path
+ hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}
+ spufs: fix a leak on spufs_new_file() failure
+ spufs: fix a leak in spufs_create_context()
+ riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and
make_call_ra
+ ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
+ ntb: intel: Fix using link status DB's
+ ASoC: imx-card: Add NULL check in imx_card_probe()
+ netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets
only
+ netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
+ net_sched: skbprio: Remove overly strict queue assertions
+ net: mvpp2: Prevent parser TCAM memory corruption
+ vsock: avoid timeout during connect() if the socket is closing
+ tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().
+ netfilter: nft_tunnel: fix geneve_opt type confusion addition
+ ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS
+ net: fix geneve_opt length integer overflow
+ arcnet: Add NULL check in com20020pci_probe()
+ can: flexcan: only change CAN state when link up in system PM
+ can: flexcan: disable transceiver during system PM
+ mmc: sdhci-brcmstb: Add ability to increase max clock rate for 72116b0
+ mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops
+ tty: serial: fsl_lpuart: use UARTMODIR register bits for lpuart32 platform
+ tty: serial: fsl_lpuart: disable transmitter before changing RS485 related
registers
+ drm/amd/pm: Fix negative array index read
+ drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
+ usbnet:fix NPE during rx_complete
+ platform/x86: ISST: Correct command storage data length
+ ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()
+ btrfs: handle errors from btrfs_dec_ref() properly
+ x86/tsc: Always save/restore TSC sched_clock() on suspend/resume
+ x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
+ acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
+ ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP
+ mmc: sdhci-pxav3: set NEED_RSP_BUSY capability
+ tracing: Fix use-after-free in print_graph_function_flags during tracer
switching
+ tracing: Ensure module defining synth event cannot be unloaded while tracing
+ tracing: Fix synth event printk format for str fields
+ tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
+ ext4: don't over-report free space or inodes in statvfs
+ ext4: fix OOB read when checking dotdot dir
+ jfs: fix slab-out-of-bounds read in ea_get()
+ jfs: add index corruption check to DT_GETPAGE()
+ nfsd: put dl_stid if fail to queue dl_recall
+ NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up
+ mmc: sdhci-brcmstb: use clk_get_rate(base_clk) in PM resume
+ mm, slab: remove duplicate kernel-doc comment for ksize()
+ tracing: Do not use PERF enums when perf is not defined
+ mmc: sdhci-brcmstb: Initialize base_clk to NULL in sdhci_brcmstb_probe()
Linux 5.15.180
- mmc: sdhci-brcmstb: Initialize base_clk to NULL in sdhci_brcmstb_probe()
- tracing: Do not use PERF enums when perf is not defined
- mm, slab: remove duplicate kernel-doc comment for ksize()
- mmc: sdhci-brcmstb: use clk_get_rate(base_clk) in PM resume
- NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up
- nfsd: put dl_stid if fail to queue dl_recall
- jfs: add index corruption check to DT_GETPAGE()
- jfs: fix slab-out-of-bounds read in ea_get()
- ext4: fix OOB read when checking dotdot dir
- ext4: don't over-report free space or inodes in statvfs
- tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
- tracing: Fix synth event printk format for str fields
- tracing: Ensure module defining synth event cannot be unloaded while tracing
- tracing: Fix use-after-free in print_graph_function_flags during tracer
switching
- mmc: sdhci-pxav3: set NEED_RSP_BUSY capability
- ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP
- acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
- x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
- x86/tsc: Always save/restore TSC sched_clock() on suspend/resume
- btrfs: handle errors from btrfs_dec_ref() properly
- ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()
- platform/x86: ISST: Correct command storage data length
- usbnet:fix NPE during rx_complete
- drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- drm/amd/pm: Fix negative array index read
- tty: serial: fsl_lpuart: disable transmitter before changing RS485 related
registers
- tty: serial: fsl_lpuart: use UARTMODIR register bits for lpuart32 platform
- mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops
- mmc: sdhci-brcmstb: Add ability to increase max clock rate for 72116b0
- can: flexcan: disable transceiver during system PM
- can: flexcan: only change CAN state when link up in system PM
- arcnet: Add NULL check in com20020pci_probe()
- net: fix geneve_opt length integer overflow
- ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS
- netfilter: nft_tunnel: fix geneve_opt type confusion addition
- tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().
- vsock: avoid timeout during connect() if the socket is closing
- net: mvpp2: Prevent parser TCAM memory corruption
- net_sched: skbprio: Remove overly strict queue assertions
- netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
- netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets
only
- ASoC: imx-card: Add NULL check in imx_card_probe()
- ntb: intel: Fix using link status DB's
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
- riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and
make_call_ra
- spufs: fix a leak in spufs_create_context()
- spufs: fix a leak on spufs_new_file() failure
- hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}
- can: statistics: use atomic access in hot path
- ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx
- drm/amd: Keep display off while going into S4
- x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled
- locking/semaphore: Use wake_q to wake up processes outside lock critical
section
- sched/deadline: Use online cpus for validating runtime
- ksmbd: fix incorrect validation for num_aces field of smb_acl
- affs: don't write overlarge OFS data block size fields
- affs: generate OFS sequence numbers starting at 1
- nvme-pci: skip CMB blocks incompatible with PCI P2P DMA
- nvme-pci: clean up CMBMSC when registering CMB fails
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- wifi: iwlwifi: fw: allocate chained SG tables for dump
- sched/smt: Always inline sched_smt_active()
- octeontx2-af: Free NIX_AF_INT_VEC_GEN irq
- octeontx2-af: Fix mbox INTR handler when num VFs > 64
- ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are
invalid
- ring-buffer: Fix bytes_dropped calculation issue
- ksmbd: fix multichannel connection failure
- ksmbd: use aead_request_free to match aead_request_alloc
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported
- exfat: fix the infinite loop in exfat_find_last_cluster()
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- fs/procfs: fix the comment above proc_pid_wchan()
- perf python: Check if there is space to copy all the event
- perf python: Don't keep a raw_data pointer to consumed ring buffer space
- perf python: Decrement the refcount of just created event on failure
- perf python: Fixup description of sample.id event member
- i3c: master: svc: Fix missing the IBI rules
- fuse: fix dax truncate/punch_hole fault path
- NFSv4: Don't trigger uneccessary scans for return-on-close delegations
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- kexec: initialize ELF lowest address to ULONG_MAX
- perf units: Fix insufficient array space
- iio: adc: ad7124: Fix comparison of channel configs
- fs/ntfs3: Fix a couple integer overflows on 32bit systems
- iio: accel: mma8452: Ensure error return on failure to matching oversampling
ratio
- coresight: catu: Fix number of pages while using 64k pages
- soundwire: slave: fix an OF node reference leak in soundwire slave device
- isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
- clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock
- crypto: hisilicon/sec2 - fix for aead auth key length
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to
misplaced assignment
- mfd: sm501: Switch to BIT() to mitigate integer overflows
- RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
- crypto: nx - Fix uninitialised hv_nxc on error
- power: supply: max77693: Fix wrong conversion of charge input threshold value
- x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
- clk: amlogic: g12a: fix mmc A peripheral clock
- clk: amlogic: gxbb: drop non existing 32k clock parent
- clk: amlogic: g12b: fix cluster A parent data
- pinctrl: tegra: Set SFIO mode to Mux Register
- IB/mad: Check available slots before posting receive WRs
- remoteproc: qcom_q6v5_mss: Handle platforms with one power domain
- RDMA/core: Don't expose hw_counters outside of init net namespace
- clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent
- pinctrl: renesas: rzg2l: Fix missing of_node_put() call
- pinctrl: renesas: rza2: Fix missing of_node_put() call
- lib: 842: Improve error handling in sw842_compress()
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock
- clk: samsung: Fix UBSAN panic in samsung_clk_init()
- libbpf: Fix hypothetical STT_SECTION extern NULL deref case
- remoteproc: qcom_q6v5_pas: Make single-PD handling more robust
- of: property: Increase NR_FWNODE_REFERENCE_ARGS
- remoteproc: core: Clear table_sz when rproc_shutdown
- crypto: hisilicon/sec2 - fix for aead authsize alignment
- clk: amlogic: gxbb: drop incorrect flag on 32k clock
- fbdev: sm501fb: Add some geometry checks.
- mdacon: rework dependency list
- fbdev: au1100fb: Move a variable assignment behind a null pointer check
- PCI: pciehp: Don't enable HPIE when resuming in poll mode
- drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer()
- PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe
- PCI: Remove stray put_device() in pci_register_host_bridge()
- drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters()
- PCI: Avoid reset when disabled via sysfs
- PCI/portdrv: Only disable pciehp interrupts early when needed
- PCI: brcmstb: Use internal register to change link capability
- PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload
- PCI/ASPM: Fix link state exit during switch upstream function removal
- drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member
- drm/mediatek: mtk_hdmi: Unregister audio platform device on failure
- drm/vkms: Fix use after free and double free on init error
- drm: xlnx: zynqmp: Fix max dma segment size
- drm/dp_mst: Fix drm RAD print
- drm/bridge: ti-sn65dsi86: Fix multiple instances
- ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible
- ALSA: hda/realtek: Always honor no_shutup_pins
- HID: remove superfluous (and wrong) Makefile entry for
CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER
- media: platform: allgro-dvt: unregister v4l2_device on the error path
- perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
- lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()
- PM: sleep: Fix handling devices with direct_complete set on errors
- thermal: int340x: Add NULL check for adev
- EDAC/ie31200: Fix the error path order of ie31200_init()
- EDAC/ie31200: Fix the DIMM size mask for several SoCs
- EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
- selinux: Chain up tool resolving errors in install_policy.sh
- PM: sleep: Adjust check before setting power.must_resume
- x86/platform: Only allow CONFIG_EISA for 32-bit
- x86/fpu: Avoid copying dynamic FP state from init_task in
arch_dup_task_struct()
- cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
- cpufreq: scpi: compare kHz instead of Hz
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test
- watch_queue: fix pipe accounting mismatch
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- serial: 8250_dma: terminate correct DMA in tx_dma_flush()
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
- net: usb: usbnet: restore usb%d name exception for local mac addresses
- net: usb: qmi_wwan: add Telit Cinterion FE990B composition
- net: usb: qmi_wwan: add Telit Cinterion FN990B composition
- tty: serial: 8250: Add Brainboxes XC devices
- tty: serial: 8250: Add some more device IDs
- counter: microchip-tcb-capture: Fix undefined counter channel state on probe
- counter: stm32-lptimer-cnt: fix error handling when enabling
- ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx
- netfilter: socket: Lookup orig tuple for IPv6 SNAT
- ARM: Remove address checking for MMUless devices
- ARM: 9351/1: fault: Add "cut here" line for prefetch aborts
- ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed()
- atm: Fix NULL pointer dereference
- HID: hid-plantronics: Add mic mute mapping and generalize quirks
- ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names
- bpf, sockmap: Fix race between element replace and close()
- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
- arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S
- mptcp: Fix data stream corruption in the address announcement
- drm/amdgpu: Fix JPEG video caps max size for navi1x and raven
- drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
- soc: qcom: pdr: Fix the potential deadlock
- batman-adv: Ignore own maximum aggregation size during RX
- ARM: shmobile: smp: Enforce shmobile_smp_* alignment
- proc: fix UAF in proc_get_inode()
- mmc: atmel-mci: Add missing clk_disable_unprepare()
- regulator: check that dummy regulator has been probed before using it
- drm/v3d: Don't run jobs that have errors flagged in its fence
- i2c: omap: fix IRQ storms
- Revert "gre: Fix IPv6 link-local address generation."
- net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES
- net: atm: fix use after free in lec_send()
- ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().
- ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
- Bluetooth: Fix error code in chan_alloc_skb_cb()
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix soft lockup during bt pages loop
- RDMA/hns: Remove redundant 'phy_addr' in hns_roce_hem_list_find_mtt()
- RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path
- ARM: dts: bcm2711: Don't mark timer regs unconfigured
- RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx
- ARM: dts: bcm2711: PL011 UARTs are actually r1p5
- xfrm_output: Force software GSO only in tunnel mode
- firmware: imx-scu: fix OF node leak in .probe()
- smb: client: fix potential UAF in cifs_debug_files_proc_show()
- smb: client: Fix match_session bug preventing session reuse
- drm/amd/display: Fix null check for pipe_ctx->plane_state in
resource_build_scaling_params
- drm/amd/display: Check for invalid input params when building scaling params
- i2c: sis630: Fix an error handling path in sis630_probe()
- i2c: ali15x3: Fix an error handling path in ali15x3_probe()
- i2c: ali1535: Fix an error handling path in ali1535_probe()
- cifs: Fix integer overflow while processing closetimeo mount option
- cifs: Fix integer overflow while processing actimeo mount option
- cifs: Fix integer overflow while processing acdirmax mount option
- cifs: Fix integer overflow while processing acregmax mount option
- ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
- drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
- ASoC: ops: Consistently treat platform_max as control value
- tcp: fix races in tcp_abort()
- lib/buildid: Handle memfd_secret() files in build_id_parse()
- qlcnic: fix memory leak issues in qlcnic_sriov_common.c
- drm/amd/display: Fix slab-use-after-free on hdcp_work
- drm/amd/display: Assign normalized_pix_clk when color depth = 14
- drm/amd/display: Restore correct backlight brightness after a GPU reset
- drm/atomic: Filter out redundant DPMS calls
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
- USB: serial: option: match on interface class for Telit FN990B
- USB: serial: option: fix Telit Cinterion FE990A name
- USB: serial: option: add Telit Cinterion FE990B compositions
- USB: serial: ftdi_sio: add support for Altera USB Blaster 3
- block: fix 'kmem_cache of name 'bio-108' already exists'
- drm/nouveau: Do not override forced connector status
- mptcp: safety check before fallback
- x86/irq: Define trace events conditionally
- fuse: don't truncate cached, mutated symlink
- ASoC: tas2764: Set the SDOUT polarity correctly
- ASoC: tas2764: Fix power control mask
- ASoC: tas2770: Fix volume scale
- nvme: only allow entering LIVE from CONNECTING state
- sctp: Fix undefined behavior in left shift operation
- nvmet-rdma: recheck queue state is LIVE in state lock in recv done
- net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors
- ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
- ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
- ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
- thermal/cpufreq_cooling: Remove structure member documentation
- s390/cio: Fix CHPID "configure" attribute caching
- sched: Clarify wake_up_q()'s write to task->wake_q.next
- HID: ignore non-functional sensor in HP 5MP Camera
- HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
- vboxsf: fix building with GCC 15
- alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
- ACPI: resource: IRQ override for Eluktronics MECH-17
- scsi: qla1280: Fix kernel oops when debug level > 2
- scsi: core: Use GFP_NOIO to avoid circular locking dependency
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- powercap: call put_device() on an error path in
powercap_register_control_type()
- hrtimers: Mark is_migration_base() with __always_inline
- nvme-fc: go straight to connecting state when initializing
- net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices
- net/mlx5: Bridge, fix the crash caused by LAG state check
- net: openvswitch: remove misbehaving actions length check
- openvswitch: Use kmalloc_size_roundup() to match ksize() usage
- slab: Introduce kmalloc_size_roundup()
- slab: clean up function prototypes
- gre: Fix IPv6 link-local address generation.
- netfilter: nft_exthdr: fix offset with ipv4_find_option()
- net_sched: Prevent creation of classes with TC_H_ROOT
- ipvs: prevent integer overflow in do_ip_vs_get_ctl()
- netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in
insert_tree()
- net/mlx5: handle errors in mlx5_chains_create_table()
- Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
- netpoll: hold rcu read lock in __netpoll_send_skb()
- net: dsa: mv88e6xxx: Verify after ATU Load ops
- ice: fix memory leak in aRFS after reset
- netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.
- pinctrl: bcm281xx: Fix incorrect regmap max_registers value
- fbdev: hyperv_fb: iounmap() the correct memory when removing a device
- ipv6: Fix signed integer overflow in __ip6_append_data
- sched/isolation: Prevent boot crash when the boot CPU is nohz_full
- clockevents/drivers/i8253: Fix stop sequence for timer 0
- vlan: fix memory leak in vlan_newlink()
+ UBUNTU: Upstream stable to v5.15.180
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2109355
Title:
Jammy update: v5.15.180 upstream stable release
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Jammy:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.180 upstream stable release
from git://git.kernel.org/
vlan: fix memory leak in vlan_newlink()
clockevents/drivers/i8253: Fix stop sequence for timer 0
sched/isolation: Prevent boot crash when the boot CPU is nohz_full
ipv6: Fix signed integer overflow in __ip6_append_data
fbdev: hyperv_fb: iounmap() the correct memory when removing a device
pinctrl: bcm281xx: Fix incorrect regmap max_registers value
netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.
ice: fix memory leak in aRFS after reset
net: dsa: mv88e6xxx: Verify after ATU Load ops
netpoll: hold rcu read lock in __netpoll_send_skb()
Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
net/mlx5: handle errors in mlx5_chains_create_table()
netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in
insert_tree()
ipvs: prevent integer overflow in do_ip_vs_get_ctl()
netfilter: nft_exthdr: fix offset with ipv4_find_option()
gre: Fix IPv6 link-local address generation.
slab: clean up function prototypes
slab: Introduce kmalloc_size_roundup()
openvswitch: Use kmalloc_size_roundup() to match ksize() usage
net: openvswitch: remove misbehaving actions length check
net/mlx5: Bridge, fix the crash caused by LAG state check
net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices
nvme-fc: go straight to connecting state when initializing
hrtimers: Mark is_migration_base() with __always_inline
powercap: call put_device() on an error path in
powercap_register_control_type()
scsi: core: Use GFP_NOIO to avoid circular locking dependency
scsi: qla1280: Fix kernel oops when debug level > 2
ACPI: resource: IRQ override for Eluktronics MECH-17
alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
vboxsf: fix building with GCC 15
HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
HID: ignore non-functional sensor in HP 5MP Camera
sched: Clarify wake_up_q()'s write to task->wake_q.next
s390/cio: Fix CHPID "configure" attribute caching
thermal/cpufreq_cooling: Remove structure member documentation
ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors
nvmet-rdma: recheck queue state is LIVE in state lock in recv done
sctp: Fix undefined behavior in left shift operation
nvme: only allow entering LIVE from CONNECTING state
ASoC: tas2770: Fix volume scale
ASoC: tas2764: Fix power control mask
ASoC: tas2764: Set the SDOUT polarity correctly
fuse: don't truncate cached, mutated symlink
x86/irq: Define trace events conditionally
mptcp: safety check before fallback
drm/nouveau: Do not override forced connector status
block: fix 'kmem_cache of name 'bio-108' already exists'
USB: serial: ftdi_sio: add support for Altera USB Blaster 3
USB: serial: option: add Telit Cinterion FE990B compositions
USB: serial: option: fix Telit Cinterion FE990A name
USB: serial: option: match on interface class for Telit FN990B
x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
drm/atomic: Filter out redundant DPMS calls
drm/amd/display: Restore correct backlight brightness after a GPU reset
drm/amd/display: Assign normalized_pix_clk when color depth = 14
drm/amd/display: Fix slab-use-after-free on hdcp_work
qlcnic: fix memory leak issues in qlcnic_sriov_common.c
lib/buildid: Handle memfd_secret() files in build_id_parse()
tcp: fix races in tcp_abort()
ASoC: ops: Consistently treat platform_max as control value
drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
cifs: Fix integer overflow while processing acregmax mount option
cifs: Fix integer overflow while processing acdirmax mount option
cifs: Fix integer overflow while processing actimeo mount option
cifs: Fix integer overflow while processing closetimeo mount option
i2c: ali1535: Fix an error handling path in ali1535_probe()
i2c: ali15x3: Fix an error handling path in ali15x3_probe()
i2c: sis630: Fix an error handling path in sis630_probe()
drm/amd/display: Check for invalid input params when building scaling params
drm/amd/display: Fix null check for pipe_ctx->plane_state in
resource_build_scaling_params
smb: client: Fix match_session bug preventing session reuse
Revert "smb: client: fix potential UAF in cifs_debug_files_proc_show()"
smb: client: fix potential UAF in cifs_debug_files_proc_show()
firmware: imx-scu: fix OF node leak in .probe()
xfrm_output: Force software GSO only in tunnel mode
ARM: dts: bcm2711: PL011 UARTs are actually r1p5
RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx
ARM: dts: bcm2711: Don't mark timer regs unconfigured
RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path
RDMA/hns: Remove redundant 'phy_addr' in hns_roce_hem_list_find_mtt()
RDMA/hns: Fix soft lockup during bt pages loop
RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
RDMA/hns: Fix wrong value of max_sge_rd
Bluetooth: Fix error code in chan_alloc_skb_cb()
ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().
net: atm: fix use after free in lec_send()
net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES
Revert "gre: Fix IPv6 link-local address generation."
i2c: omap: fix IRQ storms
drm/v3d: Don't run jobs that have errors flagged in its fence
regulator: check that dummy regulator has been probed before using it
mmc: atmel-mci: Add missing clk_disable_unprepare()
proc: fix UAF in proc_get_inode()
ARM: shmobile: smp: Enforce shmobile_smp_* alignment
batman-adv: Ignore own maximum aggregation size during RX
soc: qcom: pdr: Fix the potential deadlock
drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
drm/amdgpu: Fix JPEG video caps max size for navi1x and raven
mptcp: Fix data stream corruption in the address announcement
arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S
Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
bpf, sockmap: Fix race between element replace and close()
ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names
HID: hid-plantronics: Add mic mute mapping and generalize quirks
atm: Fix NULL pointer dereference
ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed()
ARM: 9351/1: fault: Add "cut here" line for prefetch aborts
ARM: Remove address checking for MMUless devices
netfilter: socket: Lookup orig tuple for IPv6 SNAT
ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx
counter: stm32-lptimer-cnt: fix error handling when enabling
counter: microchip-tcb-capture: Fix undefined counter channel state on probe
tty: serial: 8250: Add some more device IDs
tty: serial: 8250: Add Brainboxes XC devices
net: usb: qmi_wwan: add Telit Cinterion FN990B composition
net: usb: qmi_wwan: add Telit Cinterion FE990B composition
net: usb: usbnet: restore usb%d name exception for local mac addresses
memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
serial: 8250_dma: terminate correct DMA in tx_dma_flush()
watch_queue: fix pipe accounting mismatch
x86/mm/pat: cpa-test: fix length for CPA_ARRAY test
cpufreq: scpi: compare kHz instead of Hz
cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
x86/fpu: Avoid copying dynamic FP state from init_task in
arch_dup_task_struct()
x86/platform: Only allow CONFIG_EISA for 32-bit
UBUNTU: [Config] updateconfigs for HAVE_EISA
PM: sleep: Adjust check before setting power.must_resume
selinux: Chain up tool resolving errors in install_policy.sh
EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
EDAC/ie31200: Fix the DIMM size mask for several SoCs
EDAC/ie31200: Fix the error path order of ie31200_init()
thermal: int340x: Add NULL check for adev
PM: sleep: Fix handling devices with direct_complete set on errors
lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()
perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
media: platform: allgro-dvt: unregister v4l2_device on the error path
HID: remove superfluous (and wrong) Makefile entry for
CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER
ALSA: hda/realtek: Always honor no_shutup_pins
ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible
drm/bridge: ti-sn65dsi86: Fix multiple instances
drm/dp_mst: Fix drm RAD print
drm: xlnx: zynqmp: Fix max dma segment size
drm/vkms: Fix use after free and double free on init error
drm/mediatek: mtk_hdmi: Unregister audio platform device on failure
drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member
PCI/ASPM: Fix link state exit during switch upstream function removal
PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload
PCI: brcmstb: Use internal register to change link capability
PCI/portdrv: Only disable pciehp interrupts early when needed
PCI: Avoid reset when disabled via sysfs
drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters()
PCI: Remove stray put_device() in pci_register_host_bridge()
PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe
drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer()
PCI: pciehp: Don't enable HPIE when resuming in poll mode
fbdev: au1100fb: Move a variable assignment behind a null pointer check
mdacon: rework dependency list
fbdev: sm501fb: Add some geometry checks.
clk: amlogic: gxbb: drop incorrect flag on 32k clock
crypto: hisilicon/sec2 - fix for aead authsize alignment
remoteproc: core: Clear table_sz when rproc_shutdown
of: property: Increase NR_FWNODE_REFERENCE_ARGS
remoteproc: qcom_q6v5_pas: Make single-PD handling more robust
libbpf: Fix hypothetical STT_SECTION extern NULL deref case
clk: samsung: Fix UBSAN panic in samsung_clk_init()
clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock
bpf: Use preempt_count() directly in bpf_send_signal_common()
lib: 842: Improve error handling in sw842_compress()
pinctrl: renesas: rza2: Fix missing of_node_put() call
pinctrl: renesas: rzg2l: Fix missing of_node_put() call
clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent
RDMA/core: Don't expose hw_counters outside of init net namespace
remoteproc: qcom_q6v5_mss: Handle platforms with one power domain
IB/mad: Check available slots before posting receive WRs
pinctrl: tegra: Set SFIO mode to Mux Register
clk: amlogic: g12b: fix cluster A parent data
clk: amlogic: gxbb: drop non existing 32k clock parent
clk: amlogic: g12a: fix mmc A peripheral clock
x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
power: supply: max77693: Fix wrong conversion of charge input threshold value
crypto: nx - Fix uninitialised hv_nxc on error
RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
mfd: sm501: Switch to BIT() to mitigate integer overflows
x86/dumpstack: Fix inaccurate unwinding from exception stacks due to
misplaced assignment
crypto: hisilicon/sec2 - fix for aead auth key length
clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock
isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
soundwire: slave: fix an OF node reference leak in soundwire slave device
coresight: catu: Fix number of pages while using 64k pages
iio: accel: mma8452: Ensure error return on failure to matching oversampling
ratio
fs/ntfs3: Fix a couple integer overflows on 32bit systems
iio: adc: ad7124: Fix comparison of channel configs
perf units: Fix insufficient array space
kexec: initialize ELF lowest address to ULONG_MAX
ocfs2: validate l_tree_depth to avoid out-of-bounds access
NFSv4: Don't trigger uneccessary scans for return-on-close delegations
fuse: fix dax truncate/punch_hole fault path
i3c: master: svc: Fix missing the IBI rules
perf python: Fixup description of sample.id event member
perf python: Decrement the refcount of just created event on failure
perf python: Don't keep a raw_data pointer to consumed ring buffer space
perf python: Check if there is space to copy all the event
fs/procfs: fix the comment above proc_pid_wchan()
objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
exfat: fix the infinite loop in exfat_find_last_cluster()
rtnetlink: Allocate vfinfo size for VF GUIDs when supported
ksmbd: use aead_request_free to match aead_request_alloc
ksmbd: fix multichannel connection failure
ring-buffer: Fix bytes_dropped calculation issue
ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are
invalid
octeontx2-af: Fix mbox INTR handler when num VFs > 64
octeontx2-af: Free NIX_AF_INT_VEC_GEN irq
sched/smt: Always inline sched_smt_active()
wifi: iwlwifi: fw: allocate chained SG tables for dump
nvme-tcp: fix possible UAF in nvme_tcp_poll
nvme-pci: clean up CMBMSC when registering CMB fails
nvme-pci: skip CMB blocks incompatible with PCI P2P DMA
affs: generate OFS sequence numbers starting at 1
affs: don't write overlarge OFS data block size fields
ksmbd: fix incorrect validation for num_aces field of smb_acl
sched/deadline: Use online cpus for validating runtime
locking/semaphore: Use wake_q to wake up processes outside lock critical
section
x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled
drm/amd: Keep display off while going into S4
ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx
can: statistics: use atomic access in hot path
hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}
spufs: fix a leak on spufs_new_file() failure
spufs: fix a leak in spufs_create_context()
riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and
make_call_ra
ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
ntb: intel: Fix using link status DB's
ASoC: imx-card: Add NULL check in imx_card_probe()
netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets
only
netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
net_sched: skbprio: Remove overly strict queue assertions
net: mvpp2: Prevent parser TCAM memory corruption
vsock: avoid timeout during connect() if the socket is closing
tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().
netfilter: nft_tunnel: fix geneve_opt type confusion addition
ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS
net: fix geneve_opt length integer overflow
arcnet: Add NULL check in com20020pci_probe()
can: flexcan: only change CAN state when link up in system PM
can: flexcan: disable transceiver during system PM
mmc: sdhci-brcmstb: Add ability to increase max clock rate for 72116b0
mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops
tty: serial: fsl_lpuart: use UARTMODIR register bits for lpuart32 platform
tty: serial: fsl_lpuart: disable transmitter before changing RS485 related
registers
drm/amd/pm: Fix negative array index read
drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
usbnet:fix NPE during rx_complete
platform/x86: ISST: Correct command storage data length
ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()
btrfs: handle errors from btrfs_dec_ref() properly
x86/tsc: Always save/restore TSC sched_clock() on suspend/resume
x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP
mmc: sdhci-pxav3: set NEED_RSP_BUSY capability
tracing: Fix use-after-free in print_graph_function_flags during tracer
switching
tracing: Ensure module defining synth event cannot be unloaded while tracing
tracing: Fix synth event printk format for str fields
tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
ext4: don't over-report free space or inodes in statvfs
ext4: fix OOB read when checking dotdot dir
jfs: fix slab-out-of-bounds read in ea_get()
jfs: add index corruption check to DT_GETPAGE()
nfsd: put dl_stid if fail to queue dl_recall
NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up
mmc: sdhci-brcmstb: use clk_get_rate(base_clk) in PM resume
mm, slab: remove duplicate kernel-doc comment for ksize()
tracing: Do not use PERF enums when perf is not defined
mmc: sdhci-brcmstb: Initialize base_clk to NULL in sdhci_brcmstb_probe()
Linux 5.15.180
UBUNTU: Upstream stable to v5.15.180
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2109355/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
