Public bug reported:
SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.15.161 upstream stable release from git://git.kernel.org/ x86/tsc: Trust initial offset in architectural TSC-adjust MSRs tty: n_gsm: fix missing receive state reset after mode switch speakup: Fix sizeof() vs ARRAY_SIZE() bug serial: 8250_bcm7271: use default_mux_rate if possible Revert "r8169: don't try to disable interrupts if NAPI is, scheduled already" r8169: Fix possible ring buffer corruption on fragmented Tx packets. ring-buffer: Fix a race between readers and resize checks tools/latency-collector: Fix -Wformat-security compile warns net: smc91x: Fix m68k kernel compilation for ColdFire CPU nilfs2: fix unexpected freezing of nilfs_segctor_sync() nilfs2: fix potential hang in nilfs_detach_log_writer() fs/ntfs3: Remove max link count info display during driver init fs/ntfs3: Taking DOS names into account during link counting fs/ntfs3: Fix case when index is reused during tree transformation fs/ntfs3: Break dir enumeration if directory contents error ALSA: core: Fix NULL module pointer assignment at card init wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class dt-bindings: rockchip: grf: Add missing type to 'pcie-phy' node net: usb: qmi_wwan: add Telit FN920C04 compositions drm/amd/display: Set color_mgmt_changed to true on unsuspend selftests: sud_test: return correct emulated syscall value on RISC-V regulator: irq_helpers: duplicate IRQ name ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating ASoC: dt-bindings: rt5645: add cbj sleeve gpio property regulator: vqmmc-ipq4019: fix module autoloading ASoC: rt715: add vendor clear control register ASoC: rt715-sdca: volume step modification softirq: Fix suspicious RCU usage in __do_softirq() ASoC: da7219-aad: fix usage of device_get_named_child_node() drm/amdkfd: Flush the process wq before creating a kfd_process x86/mm: Remove broken vsyscall emulation code from the page fault code nvme: find numa distance only if controller has valid numa id epoll: be better about file lifetimes openpromfs: finish conversion to the new mount API crypto: bcm - Fix pointer arithmetic mm/slub, kunit: Use inverted data to corrupt kmem cache firmware: raspberrypi: Use correct device for DMA mappings ecryptfs: Fix buffer size for tag 66 packet nilfs2: fix out-of-range warning parisc: add missing export of __cmpxchg_u8() crypto: ccp - drop platform ifdef checks crypto: x86/nh-avx2 - add missing vzeroupper crypto: x86/sha256-avx2 - add missing vzeroupper crypto: x86/sha512-avx2 - add missing vzeroupper s390/cio: fix tracepoint subchannel type field jffs2: prevent xattr node from overflowing the eraseblock soc: mediatek: cmdq: Fix typo of CMDQ_JUMP_RELATIVE null_blk: Fix missing mutex_destroy() at module removal md: fix resync softlockup when bitmap size is less than array size wifi: ath10k: poll service ready message before failing x86/boot: Ignore relocations in .notes sections in walk_relocs() too sched/fair: Add EAS checks before updating root_domain::overutilized qed: avoid truncating work queue length bpf: Pack struct bpf_fib_lookup scsi: ufs: qcom: Perform read back after writing reset bit scsi: ufs: qcom: Perform read back after writing REG_UFS_SYS1CLK_1US scsi: ufs: ufs-qcom: Fix the Qcom register name for offset 0xD0 scsi: ufs: ufs-qcom: Clear qunipro_g4_sel for HW version major 5 scsi: ufs: qcom: Perform read back after writing unipro mode scsi: ufs: qcom: Perform read back after writing CGC enable scsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV scsi: ufs: core: Perform read back after disabling interrupts scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL irqchip/alpine-msi: Fix off-by-one in allocation error path irqchip/loongson-pch-msi: Fix off-by-one on allocation error path ACPI: disable -Wstringop-truncation gfs2: Don't forget to complete delayed withdraw gfs2: Fix "ignore unlock failures after withdraw" selftests/bpf: Fix umount cgroup2 error in test_sockmap cpufreq: Reorganize checks in cpufreq_offline() cpufreq: Split cpufreq_offline() cpufreq: Rearrange locking in cpufreq_remove_dev() cpufreq: exit() callback is optional net: export inet_lookup_reuseport and inet6_lookup_reuseport net: remove duplicate reuseport_lookup functions udp: Avoid call to compute_score on multiple sites cppc_cpufreq: Fix possible null pointer dereference scsi: libsas: Fix the failure of adding phy with zero-address to port scsi: hpsa: Fix allocation size for Scsi_Host private data x86/purgatory: Switch to the position-independent small code model thermal/drivers/tsens: Fix null pointer dereference wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger() wifi: ath10k: populate board data for WCN3990 net: dsa: mv88e6xxx: Add support for model-specific pre- and post-reset handlers net: dsa: mv88e6xxx: Avoid EEPROM timeout without EEPROM on 88E6250-family switches tcp: avoid premature drops in tcp_add_backlog() pwm: sti: Convert to platform remove callback returning void pwm: sti: Prepare removing pwm_chip from driver data pwm: sti: Simplify probe function using devm functions net: give more chances to rcu in netdev_wait_allrefs_any() macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" wifi: carl9170: add a proper sanity check for endpoints wifi: ar5523: enable proper endpoint verification sh: kprobes: Merge arch_copy_kprobe() into arch_prepare_kprobe() Revert "sh: Handle calling csum_partial with misaligned data" selftests/binderfs: use the Makefile's rules, not Make's implicit rules selftests/resctrl: fix clang build failure: use LOCAL_HDRS HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors scsi: bfa: Ensure the copied buf is NUL terminated scsi: qedf: Ensure the copied buf is NUL terminated scsi: qla2xxx: Fix debugfs output for fw_resource_count wifi: mwl8k: initialize cmd->addr[] properly usb: aqc111: stop lying about skb->truesize net: usb: sr9700: stop lying about skb->truesize m68k: Fix spinlock race in kernel thread creation m68k: mac: Fix reboot hang on Mac IIci net: ipv6: fix wrong start position when receive hop-by-hop fragment eth: sungem: remove .ndo_poll_controller to avoid deadlocks net: ethernet: cortina: Locking fixes af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg net: usb: smsc95xx: stop lying about skb->truesize net: openvswitch: fix overwriting ct original tuple for ICMPv6 ipv6: sr: add missing seg6_local_exit ipv6: sr: fix incorrect unregister order ipv6: sr: fix invalid unregister error path net/mlx5: Discard command completions in internal error s390/bpf: Emit a barrier for BPF_FETCH instructions mptcp: SO_KEEPALIVE: fix getsockopt support printk: Let no_printk() use _printk() dev_printk: Add and use dev_no_printk() drm/amd/display: Fix potential index out of bounds in color transformation function ASoC: Intel: Disable route checks for Skylake boards mtd: core: Report error if first mtd_otp_size() call fails in mtd_otp_nvmem_add() mtd: rawnand: hynix: fixed typo fbdev: shmobile: fix snprintf truncation ASoC: kirkwood: Fix potential NULL dereference drm/meson: vclk: fix calculation of 59.94 fractional rates drm/mediatek: Add 0 size check to mtk_drm_gem_obj powerpc/fsl-soc: hide unused const variable fbdev: sisfb: hide unused variables media: ngene: Add dvb_ca_en50221_init return value check media: radio-shark2: Avoid led_names truncations drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference media: ipu3-cio2: Use temporary storage for struct device pointer media: ipu3-cio2: Request IRQ earlier media: dt-bindings: ovti,ov2680: Fix the power supply names fbdev: sh7760fb: allow modular build media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries drm/arm/malidp: fix a possible null pointer dereference drm: vc4: Fix possible null pointer dereference ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value drm/bridge: lt8912b: Don't log an error when DSI host can't be found drm/bridge: lt9611: Don't log an error when DSI host can't be found drm/bridge: tc358775: Don't log an error when DSI host can't be found drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector drm/mipi-dsi: use correct return type for the DSC functions RDMA/mlx5: Adding remote atomic access flag to updatable flags RDMA/hns: Fix return value in hns_roce_map_mr_sg RDMA/hns: Fix deadlock on SRQ async events. RDMA/hns: Fix GMV table pagesize RDMA/hns: Use complete parentheses in macros RDMA/hns: Modify the print level of CQE error clk: qcom: mmcc-msm8998: fix venus clock issue x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map ext4: avoid excessive credit estimate in ext4_tmpfile() virt: acrn: Prefer array_size and struct_size over open coded arithmetic virt: acrn: stop using follow_pfn drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() sunrpc: removed redundant procp check ext4: simplify calculation of blkoff in ext4_mb_new_blocks_simple ext4: fix unit mismatch in ext4_mb_new_blocks_simple ext4: try all groups in ext4_mb_new_blocks_simple ext4: remove unused parameter from ext4_mb_new_blocks_simple() ext4: fix potential unnitialized variable SUNRPC: Fix gss_free_in_token_pages() selftests/kcmp: Make the test output consistent and clear selftests/kcmp: remove unused open mode RDMA/IPoIB: Fix format truncation compilation errors selftests: net: bridge: increase IGMP/MLD exclude timeout membership interval net: qrtr: ns: Fix module refcnt netrom: fix possible dead-lock in nr_rt_ioctl() af_packet: do not call packet_read_pending() from tpacket_destruct_skb() sched/fair: Allow disabling sched_balance_newidle with sched_relax_domain_level sched/core: Fix incorrect initialization of the 'burst' parameter in cpu_max_write() greybus: lights: check return of get_channel_from_mode f2fs: Delete f2fs_copy_page() and replace with memcpy_page() f2fs: fix to wait on page writeback in __clone_blkaddrs() soundwire: cadence: fix invalid PDI offset dmaengine: idma64: Add check for dma_set_max_seg_size firmware: dmi-id: add a release callback function serial: max3100: Lock port->lock when calling uart_handle_cts_change() serial: max3100: Update uart_driver_registered on driver removal serial: max3100: Fix bitwise types greybus: arche-ctrl: move device table to its right location PCI: tegra194: Fix probe path for Endpoint mode serial: sc16is7xx: add proper sched.h include for sched_set_fifo() dt-bindings: PCI: rcar-pci-host: Add optional regulators dt-bindings: PCI: rcar-pci-host: Add missing IOMMU properties f2fs: compress: fix to relocate check condition in f2fs_{release,reserve}_compress_blocks() f2fs: convert to use sbi directly f2fs: compress: fix to relocate check condition in f2fs_ioc_{,de}compress_file() f2fs: do not allow partial truncation on pinned file f2fs: fix typos in comments f2fs: fix to relocate check condition in f2fs_fallocate() f2fs: fix to check pinfile flag in f2fs_move_file_range() coresight: etm4x: Fix unbalanced pm_runtime_enable() iio: pressure: dps310: support negative temperature values coresight: etm4x: Do not hardcode IOMEM access for register restore coresight: etm4x: Do not save/restore Data trace control registers coresight: no-op refactor to make INSTP0 check more idiomatic coresight: etm4x: Cleanup TRCIDR0 register accesses coresight: etm4x: Safe access for TRCQCLTR coresight: etm4x: Fix access to resource selector registers fpga: region: Use standard dev_release for class driver fpga: region: add owner module and take its refcount microblaze: Remove gcc flag for non existing early_printk.c file microblaze: Remove early printk call from cpuinfo-static.c dt-bindings: pinctrl: mediatek: mt7622: fix array properties watchdog: bd9576_wdt: switch to using devm_fwnode_gpiod_get() watchdog: bd9576: Drop "always-running" property usb: gadget: u_audio: Clear uac pointer when freed. stm class: Fix a double free in stm_register_device() ppdev: Remove usage of the deprecated ida_simple_xx() API ppdev: Add an error check in register_device extcon: max8997: select IRQ_DOMAIN instead of depending on it PCI/EDR: Align EDR_PORT_DPC_ENABLE_DSM with PCI Firmware r3.3 PCI/EDR: Align EDR_PORT_LOCATE_DSM with PCI Firmware r3.3 f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock f2fs: fix to release node block count in error path of f2fs_new_node_page() f2fs: compress: don't allow unaligned truncation on released compress inode serial: sh-sci: protect invalidating RXDMA on shutdown libsubcmd: Fix parse-options memory leak s390/vdso: filter out mno-pic-data-is-text-relative cflag s390/vdso64: filter out munaligned-symbols flag for vdso s390/vdso: Generate unwind information for C modules s390/vdso: Use standard stack frame layout s390/ipl: Fix incorrect initialization of len fields in nvme reipl block s390/ipl: Fix incorrect initialization of nvme dump block s390/boot: Remove alt_stfle_fac_list from decompressor Input: ims-pcu - fix printf string overflow Input: ioc3kbd - convert to platform remove callback returning void Input: ioc3kbd - add device table mmc: sdhci_am654: Add tuning algorithm for delay chain mmc: sdhci_am654: Write ITAPDLY for DDR52 timing mmc: sdhci_am654: Drop lookup for deprecated ti,otap-del-sel mmc: sdhci_am654: Add OTAP/ITAP delay enable mmc: sdhci_am654: Add ITAPDLYSEL in sdhci_j721e_4bit_set_clock mmc: sdhci_am654: Fix ITAPDLY for HS400 timing Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation drm/msm/dsi: Print dual-DSI-adjusted pclk instead of original mode pclk drm/msm/dpu: Always flush the slave INTF on the CTL um: Fix return value in ubd_init() um: Add winch to winch_handlers before registering winch IRQ um: vector: fix bpfflash parameter evaluation fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow fs/ntfs3: Use variable length array instead of fixed size drm/bridge: tc358775: fix support for jeida-18 and jeida-24 media: stk1160: fix bounds checking in stk1160_copy_video() scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() Input: cyapa - add missing input core locking to suspend/resume functions media: flexcop-usb: clean up endpoint sanity checks media: flexcop-usb: fix sanity check of bNumEndpoints powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp um: Fix the -Wmissing-prototypes warning for __switch_mm media: cec: cec-adap: always cancel work in cec_transmit_msg_fh media: cec: cec-api: add locking in cec_release() media: cec: call enable_adap on s_log_addrs media: cec: abort if the current transmit was canceled media: cec: correctly pass on reply results media: cec: use call_op and check for !unregistered media: cec-adap.c: drop activate_cnt, use state info instead media: cec: core: avoid recursive cec_claim_log_addrs media: cec: core: avoid confusing "transmit timed out" message null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION() ASoC: mediatek: mt8192: fix register configuration for tdm regulator: bd71828: Don't overwrite runtime voltages x86/kconfig: Select ARCH_WANT_FRAME_POINTERS again when UNWINDER_FRAME_POINTER=y UBUNTU: [Config] Update CONFIG_ARCH_WANT_FRAME_POINTERS net: Always descend into dsa/ folder with CONFIG_NET_DSA enabled ipv6: sr: fix missing sk_buff release in seg6_input_core nfc: nci: Fix uninit-value in nci_rx_work ASoC: tas2552: Add TX path for capturing AUDIO-OUT data NFSv4: Fixup smatch warning for ambiguous return sunrpc: fix NFSACL RPC retry on soft mount rpcrdma: fix handling for RDMA_CM_EVENT_DEVICE_REMOVAL af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock. ipv6: sr: fix memleak in seg6_hmac_init_algo tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). openvswitch: Set the skbuff pkt_type for proper pmtud support. arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY virtio: delete vq in vp_find_vqs_msix() when request_irq() fails riscv: stacktrace: Make walk_stackframe cross pt_regs frame riscv: stacktrace: fixed walk_stackframe() net: fec: avoid lock evasion when reading pps_enable tls: fix missing memory barrier in tls_init nfc: nci: Fix kcov check in nci_rx_work() nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() ice: Interpret .set_channels() input differently netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() netfilter: nft_payload: restore vlan q-in-q match support spi: Don't mark message DMA mapped when no transfer in it is dma-mapping: benchmark: fix node id validation dma-mapping: benchmark: handle NUMA_NO_NODE correctly nvmet: fix ns enable/disable possible hang net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8061 net/mlx5e: Fix IPsec tunnel mode offload feature check net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion dma-buf/sw-sync: don't enable IRQ from sync_print_obj() bpf: Fix potential integer overflow in resolve_btfids enic: Validate length of nl attributes in enic_set_vf_port net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM bpf: Allow delete from sockmap/sockhash only if update is allowed net:fec: Add fec_enet_deinit() netfilter: nft_payload: move struct nft_payload_set definition where it belongs netfilter: nft_payload: rebuild vlan header when needed netfilter: nft_payload: rebuild vlan header on h_proto access netfilter: nft_payload: skbuff vlan metadata mangle support netfilter: tproxy: bail out if IP has been disabled on the device kconfig: fix comparison to constant symbols, 'm', 'n' spi: stm32: Don't warn about spurious interrupts net: ena: Add capabilities field with support for ENI stats capability net: ena: Extract recurring driver reset code into a function net: ena: Do not waste napi skb cache net: ena: Add dynamic recycling mechanism for rx buffers net: ena: Reduce lines with longer column width boundary net: ena: Fix redundant device NUMA node override ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound hwmon: (shtc1) Fix property misspelling ALSA: timer: Set lower bound of start tick time KVM: x86: Don't advertise guest.MAXPHYADDR as host.MAXPHYADDR in CPUID genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline net: ena: Fix DMA syncing in XDP path when SWIOTLB is on media: cec: core: add adap_nb_transmit_canceled() callback SUNRPC: Fix loop termination condition in gss_free_in_token_pages() drm: Check output polling initialized before disabling drm: Check polling initialized before enabling in drm_helper_probe_single_connector_modes mmc: core: Do not force a retune before RPMB switch io_uring: fail NOP if non-zero op flags is passed in afs: Don't cross .backup mountpoint from backup volume nilfs2: fix use-after-free of timer for log writer thread mptcp: fix full TCP keep-alive support vxlan: Fix regression when dropping packets due to invalid src addresses net: dsa: sja1105: always enable the INCL_SRCPT option net: dsa: tag_sja1105: always prefer source port information from INCL_SRCPT scripts/gdb: fix SB_* constants parsing sunrpc: exclude from freezer when waiting for requests: f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() media: lgdt3306a: Add a check against null-pointer-def drm/amdgpu: add error handle to avoid out-of-bounds ata: pata_legacy: make legacy_exit() work again thermal/drivers/qcom/lmh: Check for SCM availability at probe soc: qcom: rpmh-rsc: Enhance check for VRM in-flight request ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx arm64: tegra: Correct Tegra132 I2C alias arm64: dts: qcom: qcs404: fix bluetooth device address md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU wifi: rtlwifi: rtl8192de: Fix low speed with WPA3-SAE wifi: rtlwifi: rtl8192de: Fix endianness issue in RX path arm64: dts: hi3798cv200: fix the size of GICR media: mc: mark the media devnode as registered from the, start media: mxl5xx: Move xpt structures off stack media: v4l2-core: hold videodev_lock until dev reg, finishes mmc: core: Add mmc_gpiod_set_cd_config() function mmc: sdhci-acpi: Sort DMI quirks alphabetically mmc: sdhci-acpi: Fix Lenovo Yoga Tablet 2 Pro 1380 sdcard slot not working mmc: sdhci-acpi: Disable write protect detection on Toshiba WT10-A fbdev: savage: Handle err return when savagefb_check_var failed drm/amdgpu/atomfirmware: add intergrated info v2.3 table KVM: arm64: Fix AArch32 register narrowing on userspace write KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode crypto: ecdsa - Fix module auto-load on add-key crypto: ecrdsa - Fix module auto-load on add_key crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak net/ipv6: Fix route deleting failure when metric equals 0 net/9p: fix uninit-value in p9_client_rpc() intel_th: pci: Add Meteor Lake-S CPU support sparc64: Fix number of online CPUs watchdog: rti_wdt: Set min_hw_heartbeat_ms to accommodate a safety margin kdb: Fix buffer overflow during tab-complete kdb: Use format-strings rather than '\0' injection in kdb_read() kdb: Fix console handling when editing and tab-completing commands kdb: Merge identical case statements in kdb_read() kdb: Use format-specifiers rather than memset() for padding in kdb_read() net: fix __dst_negative_advice() race sparc: move struct termio to asm/termios.h ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() s390/ap: Fix crash in AP internal function modify_bitmap() s390/cpacf: Split and rework cpacf query functions s390/cpacf: Make use of invalid opcode produce a link error i3c: master: svc: fix invalidate IBI type and miss call client IBI handler EDAC/igen6: Convert PCIBIOS_* return codes to errnos nfs: fix undefined behavior in nfs_block_bits() NFS: Fix READ_PLUS when server doesn't support OP_READ_PLUS scsi: ufs: ufs-qcom: Clear qunipro_g4_sel for HW major version > 5 Linux 5.15.161 UBUNTU: Upstream stable to v5.15.161 ** Affects: linux (Ubuntu) Importance: Undecided Status: Invalid ** Affects: linux (Ubuntu Jammy) Importance: Medium Assignee: Portia Stephens (portias) Status: In Progress ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Jammy) Importance: Undecided Status: New ** Changed in: linux (Ubuntu) Status: Confirmed => Invalid ** Changed in: linux (Ubuntu Jammy) Importance: Undecided => Medium ** Changed in: linux (Ubuntu Jammy) Status: New => In Progress ** Changed in: linux (Ubuntu Jammy) Assignee: (unassigned) => Portia Stephens (portias) ** Description changed: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.15.161 upstream stable release from git://git.kernel.org/ - + x86/tsc: Trust initial offset in architectural TSC-adjust MSRs + tty: n_gsm: fix missing receive state reset after mode switch + speakup: Fix sizeof() vs ARRAY_SIZE() bug + serial: 8250_bcm7271: use default_mux_rate if possible + Revert "r8169: don't try to disable interrupts if NAPI is, scheduled already" + r8169: Fix possible ring buffer corruption on fragmented Tx packets. + ring-buffer: Fix a race between readers and resize checks + tools/latency-collector: Fix -Wformat-security compile warns + net: smc91x: Fix m68k kernel compilation for ColdFire CPU + nilfs2: fix unexpected freezing of nilfs_segctor_sync() + nilfs2: fix potential hang in nilfs_detach_log_writer() + fs/ntfs3: Remove max link count info display during driver init + fs/ntfs3: Taking DOS names into account during link counting + fs/ntfs3: Fix case when index is reused during tree transformation + fs/ntfs3: Break dir enumeration if directory contents error + ALSA: core: Fix NULL module pointer assignment at card init + wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class + dt-bindings: rockchip: grf: Add missing type to 'pcie-phy' node + net: usb: qmi_wwan: add Telit FN920C04 compositions + drm/amd/display: Set color_mgmt_changed to true on unsuspend + selftests: sud_test: return correct emulated syscall value on RISC-V + regulator: irq_helpers: duplicate IRQ name + ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating + ASoC: dt-bindings: rt5645: add cbj sleeve gpio property + regulator: vqmmc-ipq4019: fix module autoloading + ASoC: rt715: add vendor clear control register + ASoC: rt715-sdca: volume step modification + softirq: Fix suspicious RCU usage in __do_softirq() + ASoC: da7219-aad: fix usage of device_get_named_child_node() + drm/amdkfd: Flush the process wq before creating a kfd_process + x86/mm: Remove broken vsyscall emulation code from the page fault code + nvme: find numa distance only if controller has valid numa id + epoll: be better about file lifetimes + openpromfs: finish conversion to the new mount API + crypto: bcm - Fix pointer arithmetic + mm/slub, kunit: Use inverted data to corrupt kmem cache + firmware: raspberrypi: Use correct device for DMA mappings + ecryptfs: Fix buffer size for tag 66 packet + nilfs2: fix out-of-range warning + parisc: add missing export of __cmpxchg_u8() + crypto: ccp - drop platform ifdef checks + crypto: x86/nh-avx2 - add missing vzeroupper + crypto: x86/sha256-avx2 - add missing vzeroupper + crypto: x86/sha512-avx2 - add missing vzeroupper + s390/cio: fix tracepoint subchannel type field + jffs2: prevent xattr node from overflowing the eraseblock + soc: mediatek: cmdq: Fix typo of CMDQ_JUMP_RELATIVE + null_blk: Fix missing mutex_destroy() at module removal + md: fix resync softlockup when bitmap size is less than array size + wifi: ath10k: poll service ready message before failing + x86/boot: Ignore relocations in .notes sections in walk_relocs() too + sched/fair: Add EAS checks before updating root_domain::overutilized + qed: avoid truncating work queue length + bpf: Pack struct bpf_fib_lookup + scsi: ufs: qcom: Perform read back after writing reset bit + scsi: ufs: qcom: Perform read back after writing REG_UFS_SYS1CLK_1US + scsi: ufs: ufs-qcom: Fix the Qcom register name for offset 0xD0 + scsi: ufs: ufs-qcom: Clear qunipro_g4_sel for HW version major 5 + scsi: ufs: qcom: Perform read back after writing unipro mode + scsi: ufs: qcom: Perform read back after writing CGC enable + scsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV + scsi: ufs: core: Perform read back after disabling interrupts + scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL + irqchip/alpine-msi: Fix off-by-one in allocation error path + irqchip/loongson-pch-msi: Fix off-by-one on allocation error path + ACPI: disable -Wstringop-truncation + gfs2: Don't forget to complete delayed withdraw + gfs2: Fix "ignore unlock failures after withdraw" + selftests/bpf: Fix umount cgroup2 error in test_sockmap + cpufreq: Reorganize checks in cpufreq_offline() + cpufreq: Split cpufreq_offline() + cpufreq: Rearrange locking in cpufreq_remove_dev() + cpufreq: exit() callback is optional + net: export inet_lookup_reuseport and inet6_lookup_reuseport + net: remove duplicate reuseport_lookup functions + udp: Avoid call to compute_score on multiple sites + cppc_cpufreq: Fix possible null pointer dereference + scsi: libsas: Fix the failure of adding phy with zero-address to port + scsi: hpsa: Fix allocation size for Scsi_Host private data + x86/purgatory: Switch to the position-independent small code model + thermal/drivers/tsens: Fix null pointer dereference + wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger() + wifi: ath10k: populate board data for WCN3990 + net: dsa: mv88e6xxx: Add support for model-specific pre- and post-reset handlers + net: dsa: mv88e6xxx: Avoid EEPROM timeout without EEPROM on 88E6250-family switches + tcp: avoid premature drops in tcp_add_backlog() + pwm: sti: Convert to platform remove callback returning void + pwm: sti: Prepare removing pwm_chip from driver data + pwm: sti: Simplify probe function using devm functions + net: give more chances to rcu in netdev_wait_allrefs_any() + macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" + wifi: carl9170: add a proper sanity check for endpoints + wifi: ar5523: enable proper endpoint verification + sh: kprobes: Merge arch_copy_kprobe() into arch_prepare_kprobe() + Revert "sh: Handle calling csum_partial with misaligned data" + selftests/binderfs: use the Makefile's rules, not Make's implicit rules + selftests/resctrl: fix clang build failure: use LOCAL_HDRS + HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors + scsi: bfa: Ensure the copied buf is NUL terminated + scsi: qedf: Ensure the copied buf is NUL terminated + scsi: qla2xxx: Fix debugfs output for fw_resource_count + wifi: mwl8k: initialize cmd->addr[] properly + usb: aqc111: stop lying about skb->truesize + net: usb: sr9700: stop lying about skb->truesize + m68k: Fix spinlock race in kernel thread creation + m68k: mac: Fix reboot hang on Mac IIci + net: ipv6: fix wrong start position when receive hop-by-hop fragment + eth: sungem: remove .ndo_poll_controller to avoid deadlocks + net: ethernet: cortina: Locking fixes + af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg + net: usb: smsc95xx: stop lying about skb->truesize + net: openvswitch: fix overwriting ct original tuple for ICMPv6 + ipv6: sr: add missing seg6_local_exit + ipv6: sr: fix incorrect unregister order + ipv6: sr: fix invalid unregister error path + net/mlx5: Discard command completions in internal error + s390/bpf: Emit a barrier for BPF_FETCH instructions + mptcp: SO_KEEPALIVE: fix getsockopt support + printk: Let no_printk() use _printk() + dev_printk: Add and use dev_no_printk() + drm/amd/display: Fix potential index out of bounds in color transformation function + ASoC: Intel: Disable route checks for Skylake boards + mtd: core: Report error if first mtd_otp_size() call fails in mtd_otp_nvmem_add() + mtd: rawnand: hynix: fixed typo + fbdev: shmobile: fix snprintf truncation + ASoC: kirkwood: Fix potential NULL dereference + drm/meson: vclk: fix calculation of 59.94 fractional rates + drm/mediatek: Add 0 size check to mtk_drm_gem_obj + powerpc/fsl-soc: hide unused const variable + fbdev: sisfb: hide unused variables + media: ngene: Add dvb_ca_en50221_init return value check + media: radio-shark2: Avoid led_names truncations + drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference + media: ipu3-cio2: Use temporary storage for struct device pointer + media: ipu3-cio2: Request IRQ earlier + media: dt-bindings: ovti,ov2680: Fix the power supply names + fbdev: sh7760fb: allow modular build + media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries + drm/arm/malidp: fix a possible null pointer dereference + drm: vc4: Fix possible null pointer dereference + ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value + drm/bridge: lt8912b: Don't log an error when DSI host can't be found + drm/bridge: lt9611: Don't log an error when DSI host can't be found + drm/bridge: tc358775: Don't log an error when DSI host can't be found + drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector + drm/mipi-dsi: use correct return type for the DSC functions + RDMA/mlx5: Adding remote atomic access flag to updatable flags + RDMA/hns: Fix return value in hns_roce_map_mr_sg + RDMA/hns: Fix deadlock on SRQ async events. + RDMA/hns: Fix GMV table pagesize + RDMA/hns: Use complete parentheses in macros + RDMA/hns: Modify the print level of CQE error + clk: qcom: mmcc-msm8998: fix venus clock issue + x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map + ext4: avoid excessive credit estimate in ext4_tmpfile() + virt: acrn: Prefer array_size and struct_size over open coded arithmetic + virt: acrn: stop using follow_pfn + drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() + sunrpc: removed redundant procp check + ext4: simplify calculation of blkoff in ext4_mb_new_blocks_simple + ext4: fix unit mismatch in ext4_mb_new_blocks_simple + ext4: try all groups in ext4_mb_new_blocks_simple + ext4: remove unused parameter from ext4_mb_new_blocks_simple() + ext4: fix potential unnitialized variable + SUNRPC: Fix gss_free_in_token_pages() + selftests/kcmp: Make the test output consistent and clear + selftests/kcmp: remove unused open mode + RDMA/IPoIB: Fix format truncation compilation errors + selftests: net: bridge: increase IGMP/MLD exclude timeout membership interval + net: qrtr: ns: Fix module refcnt + netrom: fix possible dead-lock in nr_rt_ioctl() + af_packet: do not call packet_read_pending() from tpacket_destruct_skb() + sched/fair: Allow disabling sched_balance_newidle with sched_relax_domain_level + sched/core: Fix incorrect initialization of the 'burst' parameter in cpu_max_write() + greybus: lights: check return of get_channel_from_mode + f2fs: Delete f2fs_copy_page() and replace with memcpy_page() + f2fs: fix to wait on page writeback in __clone_blkaddrs() + soundwire: cadence: fix invalid PDI offset + dmaengine: idma64: Add check for dma_set_max_seg_size + firmware: dmi-id: add a release callback function + serial: max3100: Lock port->lock when calling uart_handle_cts_change() + serial: max3100: Update uart_driver_registered on driver removal + serial: max3100: Fix bitwise types + greybus: arche-ctrl: move device table to its right location + PCI: tegra194: Fix probe path for Endpoint mode + serial: sc16is7xx: add proper sched.h include for sched_set_fifo() + dt-bindings: PCI: rcar-pci-host: Add optional regulators + dt-bindings: PCI: rcar-pci-host: Add missing IOMMU properties + f2fs: compress: fix to relocate check condition in f2fs_{release,reserve}_compress_blocks() + f2fs: convert to use sbi directly + f2fs: compress: fix to relocate check condition in f2fs_ioc_{,de}compress_file() + f2fs: do not allow partial truncation on pinned file + f2fs: fix typos in comments + f2fs: fix to relocate check condition in f2fs_fallocate() + f2fs: fix to check pinfile flag in f2fs_move_file_range() + coresight: etm4x: Fix unbalanced pm_runtime_enable() + iio: pressure: dps310: support negative temperature values + coresight: etm4x: Do not hardcode IOMEM access for register restore + coresight: etm4x: Do not save/restore Data trace control registers + coresight: no-op refactor to make INSTP0 check more idiomatic + coresight: etm4x: Cleanup TRCIDR0 register accesses + coresight: etm4x: Safe access for TRCQCLTR + coresight: etm4x: Fix access to resource selector registers + fpga: region: Use standard dev_release for class driver + fpga: region: add owner module and take its refcount + microblaze: Remove gcc flag for non existing early_printk.c file + microblaze: Remove early printk call from cpuinfo-static.c + dt-bindings: pinctrl: mediatek: mt7622: fix array properties + watchdog: bd9576_wdt: switch to using devm_fwnode_gpiod_get() + watchdog: bd9576: Drop "always-running" property + usb: gadget: u_audio: Clear uac pointer when freed. + stm class: Fix a double free in stm_register_device() + ppdev: Remove usage of the deprecated ida_simple_xx() API + ppdev: Add an error check in register_device + extcon: max8997: select IRQ_DOMAIN instead of depending on it + PCI/EDR: Align EDR_PORT_DPC_ENABLE_DSM with PCI Firmware r3.3 + PCI/EDR: Align EDR_PORT_LOCATE_DSM with PCI Firmware r3.3 + f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock + f2fs: fix to release node block count in error path of f2fs_new_node_page() + f2fs: compress: don't allow unaligned truncation on released compress inode + serial: sh-sci: protect invalidating RXDMA on shutdown + libsubcmd: Fix parse-options memory leak + s390/vdso: filter out mno-pic-data-is-text-relative cflag + s390/vdso64: filter out munaligned-symbols flag for vdso + s390/vdso: Generate unwind information for C modules + s390/vdso: Use standard stack frame layout + s390/ipl: Fix incorrect initialization of len fields in nvme reipl block + s390/ipl: Fix incorrect initialization of nvme dump block + s390/boot: Remove alt_stfle_fac_list from decompressor + Input: ims-pcu - fix printf string overflow + Input: ioc3kbd - convert to platform remove callback returning void + Input: ioc3kbd - add device table + mmc: sdhci_am654: Add tuning algorithm for delay chain + mmc: sdhci_am654: Write ITAPDLY for DDR52 timing + mmc: sdhci_am654: Drop lookup for deprecated ti,otap-del-sel + mmc: sdhci_am654: Add OTAP/ITAP delay enable + mmc: sdhci_am654: Add ITAPDLYSEL in sdhci_j721e_4bit_set_clock + mmc: sdhci_am654: Fix ITAPDLY for HS400 timing + Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation + drm/msm/dsi: Print dual-DSI-adjusted pclk instead of original mode pclk + drm/msm/dpu: Always flush the slave INTF on the CTL + um: Fix return value in ubd_init() + um: Add winch to winch_handlers before registering winch IRQ + um: vector: fix bpfflash parameter evaluation + fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow + fs/ntfs3: Use variable length array instead of fixed size + drm/bridge: tc358775: fix support for jeida-18 and jeida-24 + media: stk1160: fix bounds checking in stk1160_copy_video() + scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() + Input: cyapa - add missing input core locking to suspend/resume functions + media: flexcop-usb: clean up endpoint sanity checks + media: flexcop-usb: fix sanity check of bNumEndpoints + powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp + um: Fix the -Wmissing-prototypes warning for __switch_mm + media: cec: cec-adap: always cancel work in cec_transmit_msg_fh + media: cec: cec-api: add locking in cec_release() + media: cec: call enable_adap on s_log_addrs + media: cec: abort if the current transmit was canceled + media: cec: correctly pass on reply results + media: cec: use call_op and check for !unregistered + media: cec-adap.c: drop activate_cnt, use state info instead + media: cec: core: avoid recursive cec_claim_log_addrs + media: cec: core: avoid confusing "transmit timed out" message + null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION() + ASoC: mediatek: mt8192: fix register configuration for tdm + regulator: bd71828: Don't overwrite runtime voltages + x86/kconfig: Select ARCH_WANT_FRAME_POINTERS again when UNWINDER_FRAME_POINTER=y + UBUNTU: [Config] Update CONFIG_ARCH_WANT_FRAME_POINTERS + net: Always descend into dsa/ folder with CONFIG_NET_DSA enabled + ipv6: sr: fix missing sk_buff release in seg6_input_core + nfc: nci: Fix uninit-value in nci_rx_work + ASoC: tas2552: Add TX path for capturing AUDIO-OUT data + NFSv4: Fixup smatch warning for ambiguous return + sunrpc: fix NFSACL RPC retry on soft mount + rpcrdma: fix handling for RDMA_CM_EVENT_DEVICE_REMOVAL + af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock. + ipv6: sr: fix memleak in seg6_hmac_init_algo + tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). + openvswitch: Set the skbuff pkt_type for proper pmtud support. + arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY + virtio: delete vq in vp_find_vqs_msix() when request_irq() fails + riscv: stacktrace: Make walk_stackframe cross pt_regs frame + riscv: stacktrace: fixed walk_stackframe() + net: fec: avoid lock evasion when reading pps_enable + tls: fix missing memory barrier in tls_init + nfc: nci: Fix kcov check in nci_rx_work() + nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() + ice: Interpret .set_channels() input differently + netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() + netfilter: nft_payload: restore vlan q-in-q match support + spi: Don't mark message DMA mapped when no transfer in it is + dma-mapping: benchmark: fix node id validation + dma-mapping: benchmark: handle NUMA_NO_NODE correctly + nvmet: fix ns enable/disable possible hang + net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8061 + net/mlx5e: Fix IPsec tunnel mode offload feature check + net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion + dma-buf/sw-sync: don't enable IRQ from sync_print_obj() + bpf: Fix potential integer overflow in resolve_btfids + enic: Validate length of nl attributes in enic_set_vf_port + net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM + bpf: Allow delete from sockmap/sockhash only if update is allowed + net:fec: Add fec_enet_deinit() + netfilter: nft_payload: move struct nft_payload_set definition where it belongs + netfilter: nft_payload: rebuild vlan header when needed + netfilter: nft_payload: rebuild vlan header on h_proto access + netfilter: nft_payload: skbuff vlan metadata mangle support + netfilter: tproxy: bail out if IP has been disabled on the device + kconfig: fix comparison to constant symbols, 'm', 'n' + spi: stm32: Don't warn about spurious interrupts + net: ena: Add capabilities field with support for ENI stats capability + net: ena: Extract recurring driver reset code into a function + net: ena: Do not waste napi skb cache + net: ena: Add dynamic recycling mechanism for rx buffers + net: ena: Reduce lines with longer column width boundary + net: ena: Fix redundant device NUMA node override + ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound + hwmon: (shtc1) Fix property misspelling + ALSA: timer: Set lower bound of start tick time + KVM: x86: Don't advertise guest.MAXPHYADDR as host.MAXPHYADDR in CPUID + genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline + net: ena: Fix DMA syncing in XDP path when SWIOTLB is on + media: cec: core: add adap_nb_transmit_canceled() callback + SUNRPC: Fix loop termination condition in gss_free_in_token_pages() + drm: Check output polling initialized before disabling + drm: Check polling initialized before enabling in drm_helper_probe_single_connector_modes + mmc: core: Do not force a retune before RPMB switch + io_uring: fail NOP if non-zero op flags is passed in + afs: Don't cross .backup mountpoint from backup volume + nilfs2: fix use-after-free of timer for log writer thread + mptcp: fix full TCP keep-alive support + vxlan: Fix regression when dropping packets due to invalid src addresses + net: dsa: sja1105: always enable the INCL_SRCPT option + net: dsa: tag_sja1105: always prefer source port information from INCL_SRCPT + scripts/gdb: fix SB_* constants parsing + sunrpc: exclude from freezer when waiting for requests: + f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() + media: lgdt3306a: Add a check against null-pointer-def + drm/amdgpu: add error handle to avoid out-of-bounds + ata: pata_legacy: make legacy_exit() work again + thermal/drivers/qcom/lmh: Check for SCM availability at probe + soc: qcom: rpmh-rsc: Enhance check for VRM in-flight request + ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx + arm64: tegra: Correct Tegra132 I2C alias + arm64: dts: qcom: qcs404: fix bluetooth device address + md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING + wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU + wifi: rtlwifi: rtl8192de: Fix low speed with WPA3-SAE + wifi: rtlwifi: rtl8192de: Fix endianness issue in RX path + arm64: dts: hi3798cv200: fix the size of GICR + media: mc: mark the media devnode as registered from the, start + media: mxl5xx: Move xpt structures off stack + media: v4l2-core: hold videodev_lock until dev reg, finishes + mmc: core: Add mmc_gpiod_set_cd_config() function + mmc: sdhci-acpi: Sort DMI quirks alphabetically + mmc: sdhci-acpi: Fix Lenovo Yoga Tablet 2 Pro 1380 sdcard slot not working + mmc: sdhci-acpi: Disable write protect detection on Toshiba WT10-A + fbdev: savage: Handle err return when savagefb_check_var failed + drm/amdgpu/atomfirmware: add intergrated info v2.3 table + KVM: arm64: Fix AArch32 register narrowing on userspace write + KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode + crypto: ecdsa - Fix module auto-load on add-key + crypto: ecrdsa - Fix module auto-load on add_key + crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak + net/ipv6: Fix route deleting failure when metric equals 0 + net/9p: fix uninit-value in p9_client_rpc() + intel_th: pci: Add Meteor Lake-S CPU support + sparc64: Fix number of online CPUs + watchdog: rti_wdt: Set min_hw_heartbeat_ms to accommodate a safety margin + kdb: Fix buffer overflow during tab-complete + kdb: Use format-strings rather than '\0' injection in kdb_read() + kdb: Fix console handling when editing and tab-completing commands + kdb: Merge identical case statements in kdb_read() + kdb: Use format-specifiers rather than memset() for padding in kdb_read() + net: fix __dst_negative_advice() race + sparc: move struct termio to asm/termios.h + ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow + ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() + s390/ap: Fix crash in AP internal function modify_bitmap() + s390/cpacf: Split and rework cpacf query functions + s390/cpacf: Make use of invalid opcode produce a link error + i3c: master: svc: fix invalidate IBI type and miss call client IBI handler + EDAC/igen6: Convert PCIBIOS_* return codes to errnos + nfs: fix undefined behavior in nfs_block_bits() + NFS: Fix READ_PLUS when server doesn't support OP_READ_PLUS + scsi: ufs: ufs-qcom: Clear qunipro_g4_sel for HW major version > 5 Linux 5.15.161 - scsi: ufs: ufs-qcom: Clear qunipro_g4_sel for HW major version > 5 - NFS: Fix READ_PLUS when server doesn't support OP_READ_PLUS - nfs: fix undefined behavior in nfs_block_bits() - EDAC/igen6: Convert PCIBIOS_* return codes to errnos - i3c: master: svc: fix invalidate IBI type and miss call client IBI handler - s390/cpacf: Make use of invalid opcode produce a link error - s390/cpacf: Split and rework cpacf query functions - s390/ap: Fix crash in AP internal function modify_bitmap() - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() - ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow - sparc: move struct termio to asm/termios.h - net: fix __dst_negative_advice() race - kdb: Use format-specifiers rather than memset() for padding in kdb_read() - kdb: Merge identical case statements in kdb_read() - kdb: Fix console handling when editing and tab-completing commands - kdb: Use format-strings rather than '\0' injection in kdb_read() - kdb: Fix buffer overflow during tab-complete - watchdog: rti_wdt: Set min_hw_heartbeat_ms to accommodate a safety margin - sparc64: Fix number of online CPUs - intel_th: pci: Add Meteor Lake-S CPU support - net/9p: fix uninit-value in p9_client_rpc() - net/ipv6: Fix route deleting failure when metric equals 0 - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak - crypto: ecrdsa - Fix module auto-load on add_key - crypto: ecdsa - Fix module auto-load on add-key - KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode - KVM: arm64: Fix AArch32 register narrowing on userspace write - drm/amdgpu/atomfirmware: add intergrated info v2.3 table - fbdev: savage: Handle err return when savagefb_check_var failed - mmc: sdhci-acpi: Disable write protect detection on Toshiba WT10-A - mmc: sdhci-acpi: Fix Lenovo Yoga Tablet 2 Pro 1380 sdcard slot not working - mmc: sdhci-acpi: Sort DMI quirks alphabetically - mmc: core: Add mmc_gpiod_set_cd_config() function - media: v4l2-core: hold videodev_lock until dev reg, finishes - media: mxl5xx: Move xpt structures off stack - media: mc: mark the media devnode as registered from the, start - arm64: dts: hi3798cv200: fix the size of GICR - wifi: rtlwifi: rtl8192de: Fix endianness issue in RX path - wifi: rtlwifi: rtl8192de: Fix low speed with WPA3-SAE - wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING - arm64: dts: qcom: qcs404: fix bluetooth device address - arm64: tegra: Correct Tegra132 I2C alias - ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx - soc: qcom: rpmh-rsc: Enhance check for VRM in-flight request - thermal/drivers/qcom/lmh: Check for SCM availability at probe - ata: pata_legacy: make legacy_exit() work again - drm/amdgpu: add error handle to avoid out-of-bounds - media: lgdt3306a: Add a check against null-pointer-def - f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() - sunrpc: exclude from freezer when waiting for requests: - scripts/gdb: fix SB_* constants parsing - net: dsa: tag_sja1105: always prefer source port information from INCL_SRCPT - net: dsa: sja1105: always enable the INCL_SRCPT option - vxlan: Fix regression when dropping packets due to invalid src addresses - mptcp: fix full TCP keep-alive support - Revert "drm/amdgpu: init iommu after amdkfd device init" - nilfs2: fix use-after-free of timer for log writer thread - afs: Don't cross .backup mountpoint from backup volume - io_uring: fail NOP if non-zero op flags is passed in - mmc: core: Do not force a retune before RPMB switch - drm: Check polling initialized before enabling in drm_helper_probe_single_connector_modes - drm: Check output polling initialized before disabling - SUNRPC: Fix loop termination condition in gss_free_in_token_pages() - media: cec: core: add adap_nb_transmit_canceled() callback - net: ena: Fix DMA syncing in XDP path when SWIOTLB is on - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline - KVM: x86: Don't advertise guest.MAXPHYADDR as host.MAXPHYADDR in CPUID - ALSA: timer: Set lower bound of start tick time - hwmon: (shtc1) Fix property misspelling - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound - net: ena: Fix redundant device NUMA node override - net: ena: Reduce lines with longer column width boundary - net: ena: Add dynamic recycling mechanism for rx buffers - net: ena: Do not waste napi skb cache - net: ena: Extract recurring driver reset code into a function - net: ena: Add capabilities field with support for ENI stats capability - spi: stm32: Don't warn about spurious interrupts - kconfig: fix comparison to constant symbols, 'm', 'n' - netfilter: tproxy: bail out if IP has been disabled on the device - netfilter: nft_payload: skbuff vlan metadata mangle support - netfilter: nft_payload: rebuild vlan header on h_proto access - netfilter: nft_payload: rebuild vlan header when needed - netfilter: nft_payload: move struct nft_payload_set definition where it belongs - net:fec: Add fec_enet_deinit() - bpf: Allow delete from sockmap/sockhash only if update is allowed - net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM - enic: Validate length of nl attributes in enic_set_vf_port - bpf: Fix potential integer overflow in resolve_btfids - dma-buf/sw-sync: don't enable IRQ from sync_print_obj() - net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion - net/mlx5e: Fix IPsec tunnel mode offload feature check - net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8061 - nvmet: fix ns enable/disable possible hang - dma-mapping: benchmark: handle NUMA_NO_NODE correctly - dma-mapping: benchmark: fix node id validation - spi: Don't mark message DMA mapped when no transfer in it is - netfilter: nft_payload: restore vlan q-in-q match support - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() - ice: Interpret .set_channels() input differently - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() - nfc: nci: Fix kcov check in nci_rx_work() - tls: fix missing memory barrier in tls_init - net: fec: avoid lock evasion when reading pps_enable - riscv: stacktrace: fixed walk_stackframe() - riscv: stacktrace: Make walk_stackframe cross pt_regs frame - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY - openvswitch: Set the skbuff pkt_type for proper pmtud support. - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). - ipv6: sr: fix memleak in seg6_hmac_init_algo - af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock. - rpcrdma: fix handling for RDMA_CM_EVENT_DEVICE_REMOVAL - sunrpc: fix NFSACL RPC retry on soft mount - NFSv4: Fixup smatch warning for ambiguous return - ASoC: tas2552: Add TX path for capturing AUDIO-OUT data - nfc: nci: Fix uninit-value in nci_rx_work - ipv6: sr: fix missing sk_buff release in seg6_input_core - net: Always descend into dsa/ folder with CONFIG_NET_DSA enabled - x86/kconfig: Select ARCH_WANT_FRAME_POINTERS again when UNWINDER_FRAME_POINTER=y - regulator: bd71828: Don't overwrite runtime voltages - ASoC: mediatek: mt8192: fix register configuration for tdm - null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION() - media: cec: core: avoid confusing "transmit timed out" message - media: cec: core: avoid recursive cec_claim_log_addrs - media: cec-adap.c: drop activate_cnt, use state info instead - media: cec: use call_op and check for !unregistered - media: cec: correctly pass on reply results - media: cec: abort if the current transmit was canceled - media: cec: call enable_adap on s_log_addrs - media: cec: cec-api: add locking in cec_release() - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh - um: Fix the -Wmissing-prototypes warning for __switch_mm - powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp - media: flexcop-usb: fix sanity check of bNumEndpoints - media: flexcop-usb: clean up endpoint sanity checks - Input: cyapa - add missing input core locking to suspend/resume functions - scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() - media: stk1160: fix bounds checking in stk1160_copy_video() - drm/bridge: tc358775: fix support for jeida-18 and jeida-24 - fs/ntfs3: Use variable length array instead of fixed size - fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow - um: vector: fix bpfflash parameter evaluation - um: Add winch to winch_handlers before registering winch IRQ - um: Fix return value in ubd_init() - drm/msm/dpu: Always flush the slave INTF on the CTL - drm/msm/dsi: Print dual-DSI-adjusted pclk instead of original mode pclk - Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation - mmc: sdhci_am654: Fix ITAPDLY for HS400 timing - mmc: sdhci_am654: Add ITAPDLYSEL in sdhci_j721e_4bit_set_clock - mmc: sdhci_am654: Add OTAP/ITAP delay enable - mmc: sdhci_am654: Drop lookup for deprecated ti,otap-del-sel - mmc: sdhci_am654: Write ITAPDLY for DDR52 timing - mmc: sdhci_am654: Add tuning algorithm for delay chain - Input: ioc3kbd - add device table - Input: ioc3kbd - convert to platform remove callback returning void - Input: ims-pcu - fix printf string overflow - s390/boot: Remove alt_stfle_fac_list from decompressor - s390/ipl: Fix incorrect initialization of nvme dump block - s390/ipl: Fix incorrect initialization of len fields in nvme reipl block - s390/vdso: Use standard stack frame layout - s390/vdso: Generate unwind information for C modules - s390/vdso64: filter out munaligned-symbols flag for vdso - s390/vdso: filter out mno-pic-data-is-text-relative cflag - libsubcmd: Fix parse-options memory leak - serial: sh-sci: protect invalidating RXDMA on shutdown - f2fs: compress: don't allow unaligned truncation on released compress inode - f2fs: fix to release node block count in error path of f2fs_new_node_page() - f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock - PCI/EDR: Align EDR_PORT_LOCATE_DSM with PCI Firmware r3.3 - PCI/EDR: Align EDR_PORT_DPC_ENABLE_DSM with PCI Firmware r3.3 - extcon: max8997: select IRQ_DOMAIN instead of depending on it - ppdev: Add an error check in register_device - ppdev: Remove usage of the deprecated ida_simple_xx() API - stm class: Fix a double free in stm_register_device() - usb: gadget: u_audio: Clear uac pointer when freed. - watchdog: bd9576: Drop "always-running" property - watchdog: bd9576_wdt: switch to using devm_fwnode_gpiod_get() - dt-bindings: pinctrl: mediatek: mt7622: fix array properties - microblaze: Remove early printk call from cpuinfo-static.c - microblaze: Remove gcc flag for non existing early_printk.c file - fpga: region: add owner module and take its refcount - fpga: region: Use standard dev_release for class driver - coresight: etm4x: Fix access to resource selector registers - coresight: etm4x: Safe access for TRCQCLTR - coresight: etm4x: Cleanup TRCIDR0 register accesses - coresight: no-op refactor to make INSTP0 check more idiomatic - coresight: etm4x: Do not save/restore Data trace control registers - coresight: etm4x: Do not hardcode IOMEM access for register restore - iio: pressure: dps310: support negative temperature values - coresight: etm4x: Fix unbalanced pm_runtime_enable() - f2fs: fix to check pinfile flag in f2fs_move_file_range() - f2fs: fix to relocate check condition in f2fs_fallocate() - f2fs: fix typos in comments - f2fs: do not allow partial truncation on pinned file - f2fs: compress: fix to relocate check condition in f2fs_ioc_{,de}compress_file() - f2fs: convert to use sbi directly - f2fs: compress: fix to relocate check condition in f2fs_{release,reserve}_compress_blocks() - dt-bindings: PCI: rcar-pci-host: Add missing IOMMU properties - dt-bindings: PCI: rcar-pci-host: Add optional regulators - serial: sc16is7xx: add proper sched.h include for sched_set_fifo() - PCI: tegra194: Fix probe path for Endpoint mode - greybus: arche-ctrl: move device table to its right location - serial: max3100: Fix bitwise types - serial: max3100: Update uart_driver_registered on driver removal - serial: max3100: Lock port->lock when calling uart_handle_cts_change() - firmware: dmi-id: add a release callback function - dmaengine: idma64: Add check for dma_set_max_seg_size - soundwire: cadence: fix invalid PDI offset - f2fs: fix to wait on page writeback in __clone_blkaddrs() - f2fs: Delete f2fs_copy_page() and replace with memcpy_page() - greybus: lights: check return of get_channel_from_mode - sched/core: Fix incorrect initialization of the 'burst' parameter in cpu_max_write() - sched/fair: Allow disabling sched_balance_newidle with sched_relax_domain_level - af_packet: do not call packet_read_pending() from tpacket_destruct_skb() - netrom: fix possible dead-lock in nr_rt_ioctl() - net: qrtr: ns: Fix module refcnt - selftests: net: bridge: increase IGMP/MLD exclude timeout membership interval - RDMA/IPoIB: Fix format truncation compilation errors - selftests/kcmp: remove unused open mode - selftests/kcmp: Make the test output consistent and clear - SUNRPC: Fix gss_free_in_token_pages() - ext4: fix potential unnitialized variable - ext4: remove unused parameter from ext4_mb_new_blocks_simple() - ext4: try all groups in ext4_mb_new_blocks_simple - ext4: fix unit mismatch in ext4_mb_new_blocks_simple - ext4: simplify calculation of blkoff in ext4_mb_new_blocks_simple - sunrpc: removed redundant procp check - drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() - virt: acrn: stop using follow_pfn - virt: acrn: Prefer array_size and struct_size over open coded arithmetic - ext4: avoid excessive credit estimate in ext4_tmpfile() - x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map - clk: qcom: mmcc-msm8998: fix venus clock issue - RDMA/hns: Modify the print level of CQE error - RDMA/hns: Use complete parentheses in macros - RDMA/hns: Fix GMV table pagesize - RDMA/hns: Fix deadlock on SRQ async events. - RDMA/hns: Fix return value in hns_roce_map_mr_sg - RDMA/mlx5: Adding remote atomic access flag to updatable flags - drm/mipi-dsi: use correct return type for the DSC functions - drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector - drm/bridge: tc358775: Don't log an error when DSI host can't be found - drm/bridge: lt9611: Don't log an error when DSI host can't be found - drm/bridge: lt8912b: Don't log an error when DSI host can't be found - ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value - drm: vc4: Fix possible null pointer dereference - drm/arm/malidp: fix a possible null pointer dereference - media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries - fbdev: sh7760fb: allow modular build - media: dt-bindings: ovti,ov2680: Fix the power supply names - media: ipu3-cio2: Request IRQ earlier - media: ipu3-cio2: Use temporary storage for struct device pointer - drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference - media: radio-shark2: Avoid led_names truncations - media: ngene: Add dvb_ca_en50221_init return value check - fbdev: sisfb: hide unused variables - powerpc/fsl-soc: hide unused const variable - drm/mediatek: Add 0 size check to mtk_drm_gem_obj - drm/meson: vclk: fix calculation of 59.94 fractional rates - ASoC: kirkwood: Fix potential NULL dereference - fbdev: shmobile: fix snprintf truncation - mtd: rawnand: hynix: fixed typo - mtd: core: Report error if first mtd_otp_size() call fails in mtd_otp_nvmem_add() - ASoC: Intel: Disable route checks for Skylake boards - drm/amd/display: Fix potential index out of bounds in color transformation function - dev_printk: Add and use dev_no_printk() - printk: Let no_printk() use _printk() - mptcp: SO_KEEPALIVE: fix getsockopt support - s390/bpf: Emit a barrier for BPF_FETCH instructions - net/mlx5: Discard command completions in internal error - ipv6: sr: fix invalid unregister error path - ipv6: sr: fix incorrect unregister order - ipv6: sr: add missing seg6_local_exit - net: openvswitch: fix overwriting ct original tuple for ICMPv6 - net: usb: smsc95xx: stop lying about skb->truesize - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg - net: ethernet: cortina: Locking fixes - eth: sungem: remove .ndo_poll_controller to avoid deadlocks - net: ipv6: fix wrong start position when receive hop-by-hop fragment - m68k: mac: Fix reboot hang on Mac IIci - m68k: Fix spinlock race in kernel thread creation - net: usb: sr9700: stop lying about skb->truesize - usb: aqc111: stop lying about skb->truesize - wifi: mwl8k: initialize cmd->addr[] properly - scsi: qla2xxx: Fix debugfs output for fw_resource_count - scsi: qedf: Ensure the copied buf is NUL terminated - scsi: bfa: Ensure the copied buf is NUL terminated - HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors - selftests/resctrl: fix clang build failure: use LOCAL_HDRS - selftests/binderfs: use the Makefile's rules, not Make's implicit rules - Revert "sh: Handle calling csum_partial with misaligned data" - sh: kprobes: Merge arch_copy_kprobe() into arch_prepare_kprobe() - wifi: ar5523: enable proper endpoint verification - wifi: carl9170: add a proper sanity check for endpoints - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" - net: give more chances to rcu in netdev_wait_allrefs_any() - pwm: sti: Simplify probe function using devm functions - pwm: sti: Prepare removing pwm_chip from driver data - pwm: sti: Convert to platform remove callback returning void - tcp: avoid premature drops in tcp_add_backlog() - net: dsa: mv88e6xxx: Avoid EEPROM timeout without EEPROM on 88E6250-family switches - net: dsa: mv88e6xxx: Add support for model-specific pre- and post-reset handlers - wifi: ath10k: populate board data for WCN3990 - wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger() - thermal/drivers/tsens: Fix null pointer dereference - x86/purgatory: Switch to the position-independent small code model - scsi: hpsa: Fix allocation size for Scsi_Host private data - scsi: libsas: Fix the failure of adding phy with zero-address to port - cppc_cpufreq: Fix possible null pointer dereference - udp: Avoid call to compute_score on multiple sites - net: remove duplicate reuseport_lookup functions - net: export inet_lookup_reuseport and inet6_lookup_reuseport - cpufreq: exit() callback is optional - cpufreq: Rearrange locking in cpufreq_remove_dev() - cpufreq: Split cpufreq_offline() - cpufreq: Reorganize checks in cpufreq_offline() - selftests/bpf: Fix umount cgroup2 error in test_sockmap - gfs2: Fix "ignore unlock failures after withdraw" - gfs2: Don't forget to complete delayed withdraw - ACPI: disable -Wstringop-truncation - irqchip/loongson-pch-msi: Fix off-by-one on allocation error path - irqchip/alpine-msi: Fix off-by-one in allocation error path - scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL - scsi: ufs: core: Perform read back after disabling interrupts - scsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV - scsi: ufs: qcom: Perform read back after writing CGC enable - scsi: ufs: qcom: Perform read back after writing unipro mode - scsi: ufs: ufs-qcom: Clear qunipro_g4_sel for HW version major 5 - scsi: ufs: ufs-qcom: Fix the Qcom register name for offset 0xD0 - scsi: ufs: qcom: Perform read back after writing REG_UFS_SYS1CLK_1US - scsi: ufs: qcom: Perform read back after writing reset bit - bpf: Pack struct bpf_fib_lookup - qed: avoid truncating work queue length - sched/fair: Add EAS checks before updating root_domain::overutilized - x86/boot: Ignore relocations in .notes sections in walk_relocs() too - wifi: ath10k: poll service ready message before failing - md: fix resync softlockup when bitmap size is less than array size - null_blk: Fix missing mutex_destroy() at module removal - soc: mediatek: cmdq: Fix typo of CMDQ_JUMP_RELATIVE - jffs2: prevent xattr node from overflowing the eraseblock - s390/cio: fix tracepoint subchannel type field - crypto: x86/sha512-avx2 - add missing vzeroupper - crypto: x86/sha256-avx2 - add missing vzeroupper - crypto: x86/nh-avx2 - add missing vzeroupper - crypto: ccp - drop platform ifdef checks - parisc: add missing export of __cmpxchg_u8() - nilfs2: fix out-of-range warning - ecryptfs: Fix buffer size for tag 66 packet - firmware: raspberrypi: Use correct device for DMA mappings - mm/slub, kunit: Use inverted data to corrupt kmem cache - crypto: bcm - Fix pointer arithmetic - openpromfs: finish conversion to the new mount API - epoll: be better about file lifetimes - nvme: find numa distance only if controller has valid numa id - x86/mm: Remove broken vsyscall emulation code from the page fault code - drm/amdkfd: Flush the process wq before creating a kfd_process - ASoC: da7219-aad: fix usage of device_get_named_child_node() - softirq: Fix suspicious RCU usage in __do_softirq() - ASoC: rt715-sdca: volume step modification - ASoC: rt715: add vendor clear control register - regulator: vqmmc-ipq4019: fix module autoloading - ASoC: dt-bindings: rt5645: add cbj sleeve gpio property - ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating - regulator: irq_helpers: duplicate IRQ name - selftests: sud_test: return correct emulated syscall value on RISC-V - drm/amd/display: Set color_mgmt_changed to true on unsuspend - net: usb: qmi_wwan: add Telit FN920C04 compositions - dt-bindings: rockchip: grf: Add missing type to 'pcie-phy' node - wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class - ALSA: Fix deadlocks with kctl removals at disconnection - ALSA: core: Fix NULL module pointer assignment at card init - fs/ntfs3: Break dir enumeration if directory contents error - fs/ntfs3: Fix case when index is reused during tree transformation - fs/ntfs3: Taking DOS names into account during link counting - fs/ntfs3: Remove max link count info display during driver init - nilfs2: fix potential hang in nilfs_detach_log_writer() - nilfs2: fix unexpected freezing of nilfs_segctor_sync() - net: smc91x: Fix m68k kernel compilation for ColdFire CPU - tools/latency-collector: Fix -Wformat-security compile warns - ring-buffer: Fix a race between readers and resize checks - r8169: Fix possible ring buffer corruption on fragmented Tx packets. - Revert "r8169: don't try to disable interrupts if NAPI is, scheduled already" - serial: 8250_bcm7271: use default_mux_rate if possible - speakup: Fix sizeof() vs ARRAY_SIZE() bug - tty: n_gsm: fix missing receive state reset after mode switch - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() - x86/tsc: Trust initial offset in architectural TSC-adjust MSRs + UBUNTU: Upstream stable to v5.15.161 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2072617 Title: Jammy update: v5.15.161 upstream stable release To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2072617/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs