Unbreakable Enterprise kernel-container security update

[5.15.0-5.76.5.1]

• proc: proc_skip_spaces() shouldn’t think it is working on C strings (Linus Torvalds) [Orabug: 34883037] {CVE-2022-4378}
• proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34883037] {CVE-2022-4378}
  [5.15.0-5.76.5]
• KVM: x86: Use SRCU to protect zap in __kvm_set_or_clear_apicv_inhibit() (Ben Gardon) [Orabug: 34817119]
• KVM: x86: Don’t inhibit APICv/AVIC if xAPIC ID mismatch is due to 32-bit ID (Sean Christopherson) [Orabug: 34817119]
• KVM: x86: Track xAPIC ID only on userspace SET, after vAPIC is updated (Sean Christopherson) [Orabug: 34817119]
• KVM: SVM: Process ICR on AVIC IPI delivery failure due to invalid target (Sean Christopherson) [Orabug: 34817119]
• KVM: SVM: Flush the ‘current’ TLB when activating AVIC (Sean Christopherson) [Orabug: 34817119]
• KVM: x86: Purge ‘highest ISR’ cache when updating APICv state (Sean Christopherson) [Orabug: 34817119]
• iommu/amd: Simplify and Consolidate Virtual APIC (AVIC) Enablement (Suravee Suthikulpanit) [Orabug: 34817119]
• KVM: SVM: Add AVIC doorbell tracepoint (Suravee Suthikulpanit) [Orabug: 34817119]
• KVM: x86: Warning APICv inconsistency only when vcpu APIC mode is valid (Suravee Suthikulpanit) [Orabug: 34817119]
• KVM: SVM: Introduce hybrid-AVIC mode (Suravee Suthikulpanit) [Orabug: 34817119]
• KVM: SVM: Do not throw warning when calling avic_vcpu_load on a running vcpu (Suravee Suthikulpanit) [Orabug: 34817119]
• KVM: SVM: Introduce logic to (de)activate x2AVIC mode (Suravee Suthikulpanit) [Orabug: 34817119]
• KVM: SVM: Refresh AVIC configuration when changing APIC mode (Suravee Suthikulpanit) [Orabug: 34817119]
• KVM: x86: Deactivate APICv on vCPU with APIC disabled (Suravee Suthikulpanit) [Orabug: 34817119]
• KVM: SVM: Do not virtualize MSR accesses for APIC LVTT register (Suravee Suthikulpanit) [Orabug: 34817119]
• KVM: SVM: Fix x2APIC MSRs interception (Suravee Suthikulpanit) [Orabug: 34817119]
• KVM: SVM: Adding support for configuring x2APIC MSRs interception (Suravee Suthikulpanit) [Orabug: 34817119]
• KVM: SVM: Do not support updating APIC ID when in x2APIC mode (Suravee Suthikulpanit) [Orabug: 34817119]
• KVM: SVM: Compute dest based on sender’s x2APIC status for AVIC kick (Sean Christopherson) [Orabug: 34817119]
• KVM: SVM: Update avic_kick_target_vcpus to support 32-bit APIC ID (Suravee Suthikulpanit) [Orabug: 34817119]
• KVM: SVM: Update max number of vCPUs supported for x2AVIC mode (Suravee Suthikulpanit) [Orabug: 34817119]
• KVM: SVM: Detect X2APIC virtualization (x2AVIC) support (Suravee Suthikulpanit) [Orabug: 34817119]
• KVM: x86: lapic: Rename [GET/SET]_APIC_DEST_FIELD to [GET/SET]_XAPIC_DEST_FIELD (Suravee Suthikulpanit) [Orabug: 34817119]
• x86/cpufeatures: Introduce x2AVIC CPUID bit (Suravee Suthikulpanit) [Orabug: 34817119]
• KVM: x86: Blindly get current x2APIC reg value on ‘nodecode write’ traps (Sean Christopherson) [Orabug: 34817119]
• KVM: x86: Bug the VM if an accelerated x2APIC trap occurs on a ‘bad’ reg (Sean Christopherson) [Orabug: 34817119]
• KVM: x86: Do not block APIC write for non ICR registers (Suravee Suthikulpanit) [Orabug: 34817119]
• KVM: x86: Add support for vICR APIC-write VM-Exits in x2APIC mode (Zeng Guang) [Orabug: 34817119]
• KVM: x86: disable preemption while updating apicv inhibition (Maxim Levitsky) [Orabug: 34817119]
• KVM: SVM: Fix x2APIC Logical ID calculation for avic_kick_target_vcpus_fast (Suravee Suthikulpanit) [Orabug: 34817119]
• KVM: x86: SVM: fix avic_kick_target_vcpus_fast (Maxim Levitsky) [Orabug: 34817119]
• KVM: x86: SVM: remove avic’s broken code that updated APIC ID (Maxim Levitsky) [Orabug: 34817119]
• KVM: x86: Don’t inhibit APICv/AVIC on xAPIC ID ‘change’ if APIC is disabled (Sean Christopherson) [Orabug: 34817119]
• KVM: x86: inhibit APICv/AVIC on changes to APIC ID or APIC base (Maxim Levitsky) [Orabug: 34817119]
• KVM: x86: document AVIC/APICv inhibit reasons (Maxim Levitsky) [Orabug: 34817119]
• KVM: x86: SVM: allow to force AVIC to be enabled (Maxim Levitsky) [Orabug: 34817119]
• KVM: SVM: Introduce trace point for the slow-path of avic_kic_target_vcpus (Suravee Suthikulpanit) [Orabug: 34817119]
• KVM: SVM: Use target APIC ID to complete AVIC IRQs when possible (Suravee Suthikulpanit) [Orabug: 34817119]
• KVM: x86: Skip KVM_GUESTDBG_BLOCKIRQ APICv update if APICv is disabled (Sean Christopherson) [Orabug: 34817119]
• KVM: SVM: Do not activate AVIC for SEV-enabled guest (Suravee Suthikulpanit) [Orabug: 34817119]
• KVM: x86: Trace all APICv inhibit changes and capture overall status (Sean Christopherson) [Orabug: 34817119]
• KVM: x86: Add wrappers for setting/clearing APICv inhibits (Sean Christopherson) [Orabug: 34817119]
• KVM: x86: Make APICv inhibit reasons an enum and cleanup naming (Sean Christopherson) [Orabug: 34817119]
• KVM: SVM: Disable preemption across AVIC load/put during APICv refresh (Sean Christopherson) [Orabug: 34817119]
• KVM: x86: Treat x2APIC’s ICR as a 64-bit register, not two 32-bit regs (Sean Christopherson) [Orabug: 34817119]
• KVM: x86: Add helpers to handle 64-bit APIC MSR read/writes (Sean Christopherson) [Orabug: 34817119]
• KVM: x86: WARN if KVM emulates an IPI without clearing the BUSY flag (Sean Christopherson) [Orabug: 34817119]
• KVM: SVM: Don’t rewrite guest ICR on AVIC IPI virtualization failure (Sean Christopherson) [Orabug: 34817119]
• KVM: x86: Use ‘raw’ APIC register read for handling APIC-write VM-Exit (Sean Christopherson) [Orabug: 34817119]
• KVM: VMX: Handle APIC-write offset wrangling in VMX code (Sean Christopherson) [Orabug: 34817119]
• KVM: SVM: Rename AVIC helpers to use ‘avic’ prefix instead of ‘svm’ (Sean Christopherson) [Orabug: 34817119]
• KVM: VMX: Rename VMX functions to conform to kvm_x86_ops names (Sean Christopherson) [Orabug: 34817119]
• KVM: x86: Rename kvm_x86_ops pointers to align w/ preferred vendor names (Sean Christopherson) [Orabug: 34817119]
• KVM: x86: Drop export for .tlb_flush_current() static_call key (Sean Christopherson) [Orabug: 34817119]
• KVM: x86: Skip APICv update if APICv is disable at the module level (Sean Christopherson) [Orabug: 34817119]
• KVM: x86: Unexport __kvm_request_apicv_update() (Sean Christopherson) [Orabug: 34817119]
• KVM: SVM: fix race between interrupt delivery and AVIC inhibition (Maxim Levitsky) [Orabug: 34817119]
• KVM: SVM: set IRR in svm_deliver_interrupt (Paolo Bonzini) [Orabug: 34817119]
• KVM: SVM: extract avic_ring_doorbell (Maxim Levitsky) [Orabug: 34817119]
• KVM: x86: SVM: move avic definitions from AMD’s spec to svm.h (Maxim Levitsky) [Orabug: 34817119]
• KVM: x86: lapic: don’t touch irr_pending in kvm_apic_update_apicv when inhibiting it (Maxim Levitsky) [Orabug: 34817119]
• KVM: x86: Move delivery of non-APICv interrupt into vendor code (Sean Christopherson) [Orabug: 34817119]
• KVM: SVM: Drop AVIC’s intermediate avic_set_running() helper (Sean Christopherson) [Orabug: 34817119]
• KVM: SVM: Skip AVIC and IRTE updates when loading blocking vCPU (Sean Christopherson) [Orabug: 34817119]
• KVM: SVM: Use kvm_vcpu_is_blocking() in AVIC load to handle preemption (Sean Christopherson) [Orabug: 34817119]
• KVM: SVM: Remove unnecessary APICv/AVIC update in vCPU unblocking path (Sean Christopherson) [Orabug: 34817119]
• KVM: SVM: Don’t bother checking for ‘running’ AVIC when kicking for IPIs (Sean Christopherson) [Orabug: 34817119]
• KVM: SVM: Signal AVIC doorbell iff vCPU is in guest mode (Sean Christopherson) [Orabug: 34817119]
• KVM: x86: add a tracepoint for APICv/AVIC interrupt delivery (Maxim Levitsky) [Orabug: 34817119]
• KVM: Add helpers to wake/query blocking vCPU (Sean Christopherson) [Orabug: 34817119]
• KVM: SVM: Ensure target pCPU is read once when signalling AVIC doorbell (Sean Christopherson) [Orabug: 34817119]
• KVM: ensure APICv is considered inactive if there is no APIC (Paolo Bonzini) [Orabug: 34817119]
• KVM: x86: inhibit APICv when KVM_GUESTDBG_BLOCKIRQ active (Maxim Levitsky) [Orabug: 34817119]
• KVM: x86: Use rw_semaphore for APICv lock to allow vCPU parallelism (Sean Christopherson) [Orabug: 34817119]
• KVM: x86: Move SVM’s APICv sanity check to common x86 (Sean Christopherson) [Orabug: 34817119]
• rds: Remove the cp_rdsinfo_pending flag (Hakon Bugge) [Orabug: 34658657]
• RDMA/mlx5: Change debug log level for remote access error syndromes (Arumugam Kolappan) [Orabug: 34798451]
• uek-rpm: kernel-uek.spec: make -modules-extra depend on -modules (Todd Vierling) [Orabug: 34820756]
• Feature: Add cmdline param sched_uek=[preempt,wakeidle] (Libo Chen) [Orabug: 34779451]
• rds: ib: Fix cleanup of rds_ib_cache_gc_worker (Hakon Bugge) [Orabug: 34806076]
• KVM: nVMX: Add tracepoint for nested VM-Enter (David Matlack) [Orabug: 34806794]
• KVM: x86: Update trace function for nested VM entry to support VMX (Mingwei Zhang) [Orabug: 34806794]
• KVM: nVMX: Allow VMREAD when Enlightened VMCS is in use (Vitaly Kuznetsov) [Orabug: 34806794]
• KVM: nVMX: Implement evmcs_field_offset() suitable for handle_vmread() (Vitaly Kuznetsov) [Orabug: 34806794]
• KVM: nVMX: Rename vmcs_to_field_offset{,_table} (Vitaly Kuznetsov) [Orabug: 34806794]
• x86/kvm: Always inline evmcs_write64() (Peter Zijlstra) [Orabug: 34806794]
• RDMA/uverbs: restrack shared PDs (Sharath Srinivasan) [Orabug: 34812520]
  [5.15.0-5.76.4]
• x86: Ignore iommu=off for AMD cpus (Dave Kleikamp) [Orabug: 34211826]
• virtio-net: use mtu size as buffer length for big packets (Gavin Li) [Orabug: 34756664]
• virtio-net: introduce and use helper function for guest gso support checks (Gavin Li) [Orabug: 34756664]
• vdpa/mlx5: Use consistent RQT size (Eli Cohen) [Orabug: 34756664]
• vdpa: mlx5: synchronize driver status with CVQ (Jason Wang) [Orabug: 34756664]
• vdpa: support exposing the count of vqs to userspace (Longpeng) [Orabug: 34756664]
• vdpa: change the type of nvqs to u32 (Longpeng) [Orabug: 34756664]
• vdpa: support exposing the config size to userspace (Longpeng) [Orabug: 34756664]
• vdpa/mlx5: re-create forwarding rules after mac modified (Michael Qiu) [Orabug: 34756664]
• Add definition of VIRTIO_F_IN_ORDER feature bit (Gautam Dawar) [Orabug: 34756664]
• vdpa: factor out vdpa_set_features_unlocked for vdpa internal use (Si-Wei Liu) [Orabug: 34756664]
• RDMA/cma: Use output interface for net_dev check (Hakon Bugge) [Orabug: 34774007]
• Revert ‘RDMA/cma: Use output interface for net_dev check’ (Hakon Bugge) [Orabug: 34774007]
• Revert ‘rdmaip: Flush ARP cache after address has been cleared’ (Sharath Srinivasan) [Orabug: 34783631]
• Revert ‘sched: Remove the limitation of WF_ON_CPU on wakelist if wakee cpu is idle’ (Samasth Norway Ananda) [Orabug: 34807135]
  [5.15.0-5.76.3]
• uek-rpm: Add Documentation to kernel-uek-devel (Somasundaram Krishnasamy) [Orabug: 34734127]
• kfence: add sysfs interface to disable kfence for selected slabs. (Imran Khan) [Orabug: 34744270]
• scsi: target: core: Silence the message about unknown VPD pages (Konstantin Shelekhin) [Orabug: 34764767]
• x86/microcode/AMD: Apply the patch late on every logical thread (Mihai Carabas) [Orabug: 34765295]
• perf/x86/intel: Hide Topdown metrics events if slots is not enumerated (Kan Liang) [Orabug: 34771183]
  [5.15.0-5.76.2]
• LTS version: v5.15.76 (Jack Vogel)
• mm: /proc/pid/smaps_rollup: fix no vma’s null-deref (Seth Jenkins)
• mmc: core: Add SD card quirk for broken discard (Avri Altman)
• Makefile.debug: re-enable debug info for .S files (Nick Desaulniers)
• x86/Kconfig: Drop check for -mabi=ms for CONFIG_EFI_STUB (Nathan Chancellor)
• ACPI: video: Force backlight native for more TongFang devices (Werner Sembach)
• perf: Skip and warn on unknown format ‘configN’ attrs (Rob Herring)
• mmc: sdhci-tegra: Use actual clock rate for SW tuning correction (Prathamesh Shete)
• tracing: Do not free snapshot if tracer is on cmdline (Steven Rostedt (Google))
• tracing: Simplify conditional compilation code in tracing_set_tracer() (sunliming)
• ksmbd: fix incorrect handling of iterate_dir (Namjae Jeon)
• ksmbd: handle smb2 query dir request for OutputBufferLength that is too small (Namjae Jeon)
• arm64: mte: move register initialization to C (Peter Collingbourne)
• fs: dlm: fix invalid derefence of sb_lvbptr (Alexander Aring)
• iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar)
• iommu/vt-d: Allow NVS regions in arch_rmrr_sanity_check() (Charlotte Tan)
• net: phy: dp83822: disable MDI crossover status change interrupt (Felix Riemann)
• net: sched: fix race condition in qdisc_graft() (Eric Dumazet)
• net: hns: fix possible memory leak in hnae_ae_register() (Yang Yingliang)
• wwan_hwsim: fix possible memory leak in wwan_hwsim_dev_new() (Yang Yingliang)
• sfc: include vport_id in filter spec hash and equal() (Pieter Jansen van Vuuren)
• net: sched: sfb: fix null pointer access issue when sfb_init() fails (Zhengchao Shao)
• net: sched: delete duplicate cleanup of backlog and qlen (Zhengchao Shao)
• net: sched: cake: fix null pointer access issue when cake_init() fails (Zhengchao Shao)
• nvmet: fix workqueue MEM_RECLAIM flushing dependency (Sagi Grimberg)
• nvme-hwmon: kmalloc the NVME SMART log buffer (Serge Semin)
• nvme-hwmon: consistently ignore errors from nvme_hwmon_init (Christoph Hellwig)
• netfilter: nf_tables: relax NFTA_SET_ELEM_KEY_END set flags requirements (Pablo Neira Ayuso)
• ionic: catch NULL pointer issue on reconfig (Brett Creeley)
• net: hsr: avoid possible NULL deref in skb_clone() (Eric Dumazet)
• dm: remove unnecessary assignment statement in alloc_dev() (Genjian Zhang)
• cifs: Fix xid leak in cifs_ses_add_channel() (Zhang Xiaoxu)
• cifs: Fix xid leak in cifs_flock() (Zhang Xiaoxu)
• cifs: Fix xid leak in cifs_copy_file_range() (Zhang Xiaoxu)
• cifs: Fix xid leak in cifs_create() (Zhang Xiaoxu)
• udp: Update reuse->has_conns under reuseport_lock. (Kuniyuki Iwashima)
• scsi: lpfc: Fix memory leak in lpfc_create_port() (Rafael Mendonca)
• net: phylink: add mac_managed_pm in phylink_config structure (Shenwei Wang)
• net: phy: dp83867: Extend RX strap quirk for SGMII mode (Harini Katakam)
• net/atm: fix proc_mpc_write incorrect return value (Xiaobo Liu)
• sfc: Change VF mac via PF as first preference if available. (Jonathan Cooper)
• HID: magicmouse: Do not set BTN_MOUSE on double report (Jose Exposito)
• i40e: Fix DMA mappings leak (Jan Sokolowski)
• tipc: fix an information leak in tipc_topsrv_kern_subscr (Alexander Potapenko)
• tipc: Fix recognition of trial period (Mark Tomlinson)
• ACPI: extlog: Handle multiple records (Tony Luck)
• drm/vc4: Add module dependency on hdmi-codec (Maxime Ripard)
• btrfs: fix processing of delayed tree block refs during backref walking (Filipe Manana)
• btrfs: fix processing of delayed data refs during backref walking (Filipe Manana)
• x86/topology: Fix duplicated core ID within a package (Zhang Rui)
• x86/topology: Fix multiple packages shown on a single-package system (Zhang Rui)
• media: venus: dec: Handle the case where find_format fails (Bryan O’Donoghue)
• media: mceusb: set timeout to at least timeout provided (Sean Young)
• media: ipu3-imgu: Fix NULL pointer dereference in active selection access (Sakari Ailus)
• KVM: arm64: vgic: Fix exit condition in scan_its_table() (Eric Ren)
• kvm: Add support for arch compat vm ioctls (Alexander Graf)
• mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages (Rik van Riel)
• drm/amdgpu: fix sdma doorbell init ordering on APUs (Alex Deucher)
• cpufreq: qcom: fix memory leak in error path (Fabien Parent)
• x86/resctrl: Fix min_cbm_bits for AMD (Babu Moger)
• ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS (Kai-Heng Feng)
• ata: ahci-imx: Fix MODULE_ALIAS (Alexander Stein)
• hwmon/coretemp: Handle large core ID value (Zhang Rui)
• x86/microcode/AMD: Apply the patch early on every logical thread (Borislav Petkov)
• i2c: qcom-cci: Fix ordering of pm_runtime_xx and i2c_add_adapter (Bryan O’Donoghue)
• cpufreq: qcom: fix writes in read-only memory region (Fabien Parent)
• selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context() (GONG, Ruiqi)
• ocfs2: fix BUG when iput after ocfs2_mknod fails (Joseph Qi)
• ocfs2: clear dinode links count in case of error (Joseph Qi)
• btrfs: enhance unsupported compat RO flags handling (Qu Wenruo)
• perf/x86/intel/pt: Relax address filter validation (Adrian Hunter)
• arm64: errata: Remove AES hwcap for COMPAT tasks (James Morse)
• usb: gadget: uvc: improve sg exit condition (Michael Grzeschik)
• usb: gadget: uvc: giveback vb2 buffer on req complete (Michael Grzeschik)
• usb: gadget: uvc: rework uvcg_queue_next_buffer to uvcg_complete_buffer (Michael Grzeschik)
• usb: gadget: uvc: use on returned header len in video_encode_isoc_sg (Michael Grzeschik)
• usb: gadget: uvc: consistently use define for headerlen (Michael Grzeschik)
• arm64/mm: Consolidate TCR_EL1 fields (Anshuman Khandual)
• r8152: add PID for the Lenovo OneLink+ Dock (Jean-Francois Le Fillatre)
• LTS version: v5.15.75 (Jack Vogel)
• io-wq: Fix memory leak in worker creation (Rafael Mendonca)
• gcov: support GCC 12.1 and newer compilers (Martin Liska)
• thermal: intel_powerclamp: Use first online CPU as control_cpu (Rafael J. Wysocki)
• ext4: continue to expand file system when the target size doesn’t reach (Jerry Lee )
• lib/Kconfig.debug: Add check for non-constant .{s,u}leb128 support to DWARF5 (Nathan Chancellor)
• Kconfig.debug: add toolchain checks for DEBUG_INFO_DWARF_TOOLCHAIN_DEFAULT (Masahiro Yamada)
• Kconfig.debug: simplify the dependency of DEBUG_INFO_DWARF4/5 (Masahiro Yamada)
• drm/amd/display: Fix build breakage with CONFIG_DEBUG_FS=n (Nathan Chancellor)
• net/ieee802154: don’t warn zero-sized raw_sendmsg() (Tetsuo Handa)
• Revert ‘net/ieee802154: reject zero-sized raw_sendmsg()’ (Alexander Aring)
• net: ethernet: ti: davinci_mdio: fix build for mdio bitbang uses (Randy Dunlap)
• blk-wbt: fix that ‘rwb->wc’ is always set to 1 in wbt_init() (Yu Kuai)
• ALSA: usb-audio: Fix last interface check for registration (Takashi Iwai)
• net: ieee802154: return -EINVAL for unknown addr type (Alexander Aring)
• mm: hugetlb: fix UAF in hugetlb_handle_userfault (Liu Shixin)
• io_uring/rw: fix unexpected link breakage (Pavel Begunkov)
• io_uring/rw: fix error’ed retry return values (Pavel Begunkov)
• io_uring/rw: fix short rw error handling (Pavel Begunkov)
• io_uring: correct pinned_vm accounting (Pavel Begunkov)
• io_uring/af_unix: defer registered files gc to io_uring release (Pavel Begunkov)
• perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc (Adrian Hunter)
• clk: bcm2835: Round UART input clock up (Ivan T. Ivanov)
• clk: bcm2835: Make peripheral PLLC critical (Maxime Ripard)
• usb: idmouse: fix an uninit-value in idmouse_open (Dongliang Mu)
• nvmet-tcp: add bounds check on Transfer Tag (Varun Prakash)
• nvme: copy firmware_rev on each init (Keith Busch)
• ext2: Use kvmalloc() for group descriptor array (Jan Kara)
• scsi: tracing: Fix compile error in trace_array calls when TRACING is disabled (Arun Easi)
• staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() (Xiaoke Wang)
• staging: rtl8723bs: fix potential memory leak in rtw_init_drv_sw() (Xiaoke Wang)
• Revert ‘usb: storage: Add quirk for Samsung Fit flash’ (sunghwan jung)
• usb: dwc3: core: Enable GUCTL1 bit 10 for fixing termination error after resume bug (Piyush Mehta)
• arm64: dts: imx8mp: Add snps,gfladj-refclk-lpm-sel quirk to USB nodes (Alexander Stein)
• usb: musb: Fix musb_gadget.c rxstate overflow bug (Robin Guo)
• usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() (Jianglei Nie)
• md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d (Logan Gunthorpe)
• eventfd: guard wake_up in eventfd fs calls as well (Dylan Yudaken)
• HID: roccat: Fix use-after-free in roccat_read() (Hyunwoo Kim)
• soundwire: intel: fix error handling on dai registration issues (Pierre-Louis Bossart)
• soundwire: cadence: Don’t overwrite msg->buf during write commands (Richard Fitzgerald)
• bcache: fix set_at_max_writeback_rate() for multiple attached devices (Coly Li)
• ata: libahci_platform: Sanity check the DT child nodes number (Serge Semin)
• blk-throttle: prevent overflow while calculating wait time (Yu Kuai)
• staging: vt6655: fix potential memory leak (Nam Cao)
• power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() (Wei Yongjun)
• iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (Yicong Yang)
• nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (Shigeru Yoshida)
• scsi: 3w-9xxx: Avoid disabling device if failing to enable it (Letu Ren)
• dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent overflow (Vaishnav Achath)
• usb: host: xhci-plat: suspend/resume clks for brcm (Justin Chen)
• usb: host: xhci-plat: suspend and resume clocks (Justin Chen)
• clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate (Quanyang Wang)
• media: platform: fix some double free in meson-ge2d and mtk-jpeg and s5p-mfc (Hangyu Hua)
• media: cx88: Fix a null-ptr-deref bug in buffer_prepare() (Zheyu Ma)
• clk: zynqmp: Fix stack-out-of-bounds in strncpy (Ian Nam)
• ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n (Alex Sverdlin)
• btrfs: don’t print information about space cache or tree every remount (Maciej S. Szmigiero)
• btrfs: scrub: try to fix super block errors (Qu Wenruo)
• btrfs: dump extra info if one free space cache has more bitmaps than it should (Qu Wenruo)
• arm64: dts: imx8mq-librem5: Add bq25895 as max17055’s power supply (Sebastian Krzyszkowiak)
• kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT (Mark Brown)
• ARM: dts: imx6sx: add missing properties for sram (Alexander Stein)
• ARM: dts: imx6sll: add missing properties for sram (Alexander Stein)
• ARM: dts: imx6sl: add missing properties for sram (Alexander Stein)
• ARM: dts: imx6qp: add missing properties for sram (Alexander Stein)
• ARM: dts: imx6dl: add missing properties for sram (Alexander Stein)
• ARM: dts: imx6q: add missing properties for sram (Alexander Stein)
• ARM: dts: imx7d-sdb: config the max pressure for tsc2046 (Haibo Chen)
• drm/amd/display: Remove interface for periodic interrupt 1 (Aric Cyr)
• drm/dp: Don’t rewrite link config when setting phy test pattern (Khaled Almahallawy)
• mmc: sdhci-msm: add compatible string check for sdm670 (Richard Acayan)
• drm/meson: explicitly remove aggregate driver at module unload time (Adrian Larumbe)
• drm/meson: reorder driver deinit sequence to fix use-after-free bug (Adrian Larumbe)
• drm/amdgpu: fix initial connector audio value (hongao)
• ASoC: SOF: pci: Change DMI match info to support all Chrome platforms (Jairaj Arava)
• platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading (Hans de Goede)
• platform/chrome: cros_ec: Notify the PM of wake events during resume (Jameson Thies)
• drm: panel-orientation-quirks: Add quirk for Anbernic Win600 (Maya Matuszczyk)
• drm/vc4: vec: Fix timings for VEC modes (Mateusz Kwiatkowski)
• ALSA: usb-audio: Register card at the last interface (Takashi Iwai)
• drm: bridge: dw_hdmi: only trigger hotplug event on link change (Lucas Stach)
• udmabuf: Set ubuf->sg = NULL if the creation of sg table fails (Vivek Kasireddy)
• drm/amd/display: fix overflow on MIN_I64 definition (David Gow)
• gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init() (Zeng Jingxiang)
• drm/komeda: Fix handling of atomic commits in the atomic_commit_tail hook (Liviu Dudau)
• drm: Prevent drm_copy_field() to attempt copying a NULL pointer (Javier Martinez Canillas)
• drm: Use size_t type for len variable in drm_copy_field() (Javier Martinez Canillas)
• drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() (Jianglei Nie)
• r8152: Rate limit overflow messages (Andrew Gaul)
• Bluetooth: L2CAP: Fix user-after-free (Luiz Augusto von Dentz)
• net: If sock is dead don’t access sock’s sk_wq in sk_stream_wait_memory (Liu Jian)
• hwmon: (sht4x) do not overflow clamping operation on 32-bit platforms (Jason A. Donenfeld)
• wifi: rt2x00: correctly set BBP register 86 for MT7620 (Daniel Golle)
• wifi: rt2x00: set SoC wmac clock register (Daniel Golle)
• wifi: rt2x00: set VGC gain for both chains of MT7620 (Daniel Golle)
• wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 (Daniel Golle)
• wifi: rt2x00: don’t run Rt5592 IQ calibration on MT7620 (Daniel Golle)
• can: bcm: check the result of can_send() in bcm_can_tx() (Ziyang Xuan)
• Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times (Luiz Augusto von Dentz)
• Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() (Tetsuo Handa)
• wifi: mt76: mt7921: reset msta->airtime_ac while clearing up hw value (Sean Wang)
• regulator: core: Prevent integer underflow (Patrick Rudolph)
• Bluetooth: btintel: Mark Intel controller to support LE_STATES quirk (Kiran K)
• wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() (Alexander Coffin)
• iavf: Fix race between iavf_close and iavf_reset_task (Michal Jaron)
• xfrm: Update ipcomp_scratches with NULL when freed (Khalid Masum)
• thunderbolt: Add back Intel Falcon Ridge end-to-end flow control workaround (Mika Westerberg)
• wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() (Tetsuo Handa)
• x86/mce: Retrieve poison range from hardware (Jane Chu)
• tcp: annotate data-race around tcp_md5sig_pool_populated (Eric Dumazet)
• openvswitch: Fix overreporting of drops in dropwatch (Mike Pattrick)
• openvswitch: Fix double reporting of drops in dropwatch (Mike Pattrick)
• net: ethernet: ti: davinci_mdio: Add workaround for errata i2329 (Ravi Gunasekaran)
• ice: set tx_tstamps when creating new Tx rings via ethtool (Jacob Keller)
• bpftool: Clear errno after libcap’s checks (Quentin Monnet)
• wifi: brcmfmac: fix invalid address access when enabling SCAN log level (Wright Feng)
• NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data (Anna Schumaker)
• x86/entry: Work around Clang __bdos() bug (Kees Cook)
• ACPI: x86: Add a quirk for Dell Inspiron 14 2-in-1 for StorageD3Enable (Mario Limonciello)
• ARM: decompressor: Include .data.rel.ro.local (Kees Cook)
• thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash (Srinivas Pandruvada)
• powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue (Chao Qin)
• MIPS: BCM47XX: Cast memcmp() of function to (void *) (Kees Cook)
• cpufreq: intel_pstate: Add Tigerlake support in no-HWP mode (Doug Smythies)
• ACPI: tables: FPDT: Don’t call acpi_os_map_memory() on invalid phys address (Hans de Goede)
• ACPI: video: Add Toshiba Satellite/Portege Z830 quirk (Arvid Norlander)
• rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE() (Zqiang)
• rcu: Back off upon fill_page_cache_func() allocation failure (Michal Hocko)
• rcu: Avoid triggering strict-GP irq-work when RCU is idle (Zqiang)
• fs: dlm: fix race in lowcomms (Alexander Aring)
• selftest: tpm2: Add Client.del() to close /dev/tpm* handle (Stefan Berger)
• f2fs: fix to account FS_CP_DATA_IO correctly (Chao Yu)
• f2fs: fix race condition on setting FI_NO_EXTENT flag (Zhang Qilong)
• ACPI: APEI: do not add task_work to kernel thread to avoid memory leak (Shuai Xue)
• thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id (Vincent Knecht)
• crypto: cavium - prevent integer overflow loading firmware (Dan Carpenter)
• crypto: marvell/octeontx - prevent integer overflows (Dan Carpenter)
• kbuild: rpm-pkg: fix breakage when V=1 is used (Janis Schoetterl-Glausch)
• kbuild: remove the target in signal traps when interrupted (Masahiro Yamada)
• tracing/osnoise: Fix possible recursive locking in stop_per_cpu_kthreads (Nico Pache)
• tracing: kprobe: Make gen test module work in arm and riscv (Yipeng Zou)
• tracing: kprobe: Fix kprobe event gen test module on exit (Yipeng Zou)
• iommu/iova: Fix module config properly (Robin Murphy)
• cifs: return correct error in ->calc_signature() (Enzo Matsumiya)
• crypto: qat - fix DMA transfer direction (Damian Muszynski)
• crypto: inside-secure - Change swab to swab32 (Peter Harliman Liem)
• crypto: ccp - Release dma channels before dmaengine unrgister (Koba Ko)
• crypto: akcipher - default implementation for setting a private key (Ignat Korchagin)
• iommu/omap: Fix buffer overflow in debugfs (Dan Carpenter)
• cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset (Waiman Long)
• crypto: hisilicon/qm - fix missing put dfx access (Weili Qian)
• crypto: qat - fix default value of WDT timer (Lucas Segarra Fernandez)
• hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear() (Kshitiz Varshney)
• cgroup: Honor caller’s cgroup NS when resolving path (Michal Koutny)
• hwrng: arm-smccc-trng - fix NO_ENTROPY handling (James Cowgill)
• crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr (Ye Weihua)
• crypto: sahara - don’t sleep when in softirq (Zhengchao Shao)
• powerpc/pseries/vas: Pass hw_cpu_id to node associativity HCALL (Haren Myneni)
• powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe() (Li Huafei)
• powerpc: Fix SPE Power ISA properties for e500v1 platforms (Pali Rohar)
• powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5 (Nicholas Piggin)
• x86/hyperv: Fix ‘struct hv_enlightened_vmcs’ definition (Vitaly Kuznetsov)
• powerpc: Fix fallocate and fadvise64_64 compat parameter combination (Rohan McLure)
• powerpc/powernv: add missing of_node_put() in opal_export_attrs() (Zheng Yongjun)
• powerpc/pci_dn: Add missing of_node_put() (Liang He)
• powerpc/sysdev/fsl_msi: Add missing of_node_put() (Liang He)
• powerpc/math_emu/efp: Include module.h (Nathan Chancellor)
• powerpc/configs: Properly enable PAPR_SCM in pseries_defconfig (Michael Ellerman)
• mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg (Jack Wang)
• mailbox: mpfs: account for mbox offsets while sending (Conor Dooley)
• mailbox: mpfs: fix handling of the reg property (Conor Dooley)
• clk: ast2600: BCLK comes from EPLL (Joel Stanley)
• clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe (Miaoqian Lin)
• clk: imx: scu: fix memleak on platform_device_add() fails (Lin Yujun)
• clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration (Stefan Wahren)
• clk: baikal-t1: Add SATA internal ref clock buffer (Serge Semin)
• clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent (Serge Semin)
• clk: baikal-t1: Fix invalid xGMAC PTP clock divider (Serge Semin)
• clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD (Serge Semin)
• spmi: pmic-arb: correct duplicate APID to PPID mapping logic (David Collins)
• usb: mtu3: fix failed runtime suspend in host only mode (Chunfeng Yun)
• dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() (Dave Jiang)
• clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent (Chen-Yu Tsai)
• mfd: sm501: Add check for platform_driver_register() (Jiasheng Jiang)
• mfd: fsl-imx25: Fix check for platform_get_irq() errors (Dan Carpenter)
• mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() (Christophe JAILLET)
• mfd: lp8788: Fix an error handling path in lp8788_probe() (Christophe JAILLET)
• mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() (Christophe JAILLET)
• mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() (Christophe JAILLET)
• fsi: core: Check error number after calling ida_simple_get (Jiasheng Jiang)
• RDMA/rxe: Fix resize_finish() in rxe_queue.c (Bob Pearson)
• clk: qcom: gcc-sm6115: Override default Alpha PLL regs (Adam Skladowski)
• clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical (Robert Marko)
• scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() (Mike Christie)
• scsi: iscsi: Run recv path from workqueue (Mike Christie)
• scsi: iscsi: Add recv workqueue helpers (Mike Christie)
• scsi: iscsi: Rename iscsi_conn_queue_work() (Mike Christie)
• scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() (Duoming Zhou)
• serial: 8250: Fix restoring termios speed after suspend (Pali Rohar)
• firmware: google: Test spinlock on panic path to avoid lockups (Guilherme G. Piccoli)
• slimbus: qcom-ngd-ctrl: allow compile testing without QCOM_RPROC_COMMON (Krzysztof Kozlowski)
• staging: vt6655: fix some erroneous memory clean-up loops (Nam Cao)
• phy: qualcomm: call clk_disable_unprepare in the error handling (Dongliang Mu)
• tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown (Sherry Sun)
• serial: 8250: Toggle IER bits on only after irq has been set up (Ilpo Jarvinen)
• drivers: serial: jsm: fix some leaks in probe (Dan Carpenter)
• usb: gadget: function: fix dangling pnp_string in f_printer.c (Albert Briscoe)
• xhci: Don’t show warning for reinit on known broken suspend (Mario Limonciello)
• IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers (Daisuke Matsuda)
• RDMA/cm: Use SLID in the work completion as the DLID in responder side (Mark Zhang)
• md/raid5: Remove unnecessary bio_put() in raid5_read_one_chunk() (David Sloan)
• md/raid5: Ensure stripe_fill happens on non-read IO with journal (Logan Gunthorpe)
• md: Replace snprintf with scnprintf (Saurabh Sengar)
• mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() (Dan Carpenter)
• ata: fix ata_id_has_dipm() (Niklas Cassel)
• ata: fix ata_id_has_ncq_autosense() (Niklas Cassel)
• ata: fix ata_id_has_devslp() (Niklas Cassel)
• ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() (Niklas Cassel)
• RDMA/siw: Fix QP destroy to wait for all references dropped. (Bernard Metzler)
• RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. (Bernard Metzler)
• RDMA/srp: Fix srp_abort() (Bart Van Assche)
• RDMA/irdma: Align AE id codes to correct flush code and event (Sindhu-Devale)
• mtd: rawnand: fsl_elbc: Fix none ECC mode (Pali Rohar)
• mtd: rawnand: intel: Remove undocumented compatible string (Martin Blumenstingl)
• mtd: rawnand: intel: Read the chip-select line from the correct OF node (Martin Blumenstingl)
• phy: phy-mtk-tphy: fix the phy type setting issue (Chunfeng Yun)
• phy: amlogic: phy-meson-axg-mipi-pcie-analog: Hold reference returned by of_get_parent() (Liang He)
• mtd: devices: docg3: check the return value of devm_ioremap() in the probe (William Dean)
• clk: qcom: sm6115: Select QCOM_GDSC (Dang Huynh)
• dyndbg: drop EXPORTed dynamic_debug_exec_queries (Jim Cromie)
• dyndbg: let query-modname override actual module name (Jim Cromie)
• dyndbg: fix module.dyndbg handling (Jim Cromie)
• dyndbg: fix static_branch manipulation (Jim Cromie)
• dmaengine: hisilicon: Add multi-thread support for a DMA channel (Jie Hai)
• dmaengine: hisilicon: Fix CQ head update (Jie Hai)
• dmaengine: hisilicon: Disable channels when unregister hisi_dma (Jie Hai)
• fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() (Dan Carpenter)
• misc: ocxl: fix possible refcount leak in afu_ioctl() (Hangyu Hua)
• RDMA/rxe: Fix the error caused by qp->sk (Zhu Yanjun)
• RDMA/rxe: Fix ‘kernel NULL pointer dereference’ error (Zhu Yanjun)
• media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init (Miaoqian Lin)
• media: uvcvideo: Use entity get_cur in uvc_ctrl_set (Yunke Cao)
• media: uvcvideo: Fix memory leak in uvc_gpio_parse (Jose Exposito)
• media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start() (Xu Qiang)
• tty: xilinx_uartps: Fix the ignore_status (Shubhrajyoti Datta)
• media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop (Liang He)
• HSI: omap_ssi_port: Fix dma_map_sg error check (Jack Wang)
• HSI: omap_ssi: Fix refcount leak in ssi_probe (Miaoqian Lin)
• clk: tegra20: Fix refcount leak in tegra20_clock_init (Miaoqian Lin)
• clk: tegra: Fix refcount leak in tegra114_clock_init (Miaoqian Lin)
• clk: tegra: Fix refcount leak in tegra210_clock_init (Miaoqian Lin)
• clk: sprd: Hold reference returned by of_get_parent() (Liang He)
• clk: berlin: Add of_node_put() for of_get_parent() (Liang He)
• clk: qoriq: Hold reference returned by of_get_parent() (Liang He)
• clk: oxnas: Hold reference returned by of_get_parent() (Liang He)
• clk: meson: Hold reference returned by of_get_parent() (Liang He)
• usb: common: debug: Check non-standard control requests (Thinh Nguyen)
• RDMA/mlx5: Don’t compare mkey tags in DEVX indirect mkey (Aharon Landau)
• iio: magnetometer: yas530: Change data type of hard_offsets to signed (Jakob Hauser)
• iio: ABI: Fix wrong format of differential capacitance channel ABI. (Jonathan Cameron)
• iio: inkern: fix return value in devm_of_iio_channel_get_by_name() (Nuno Sa)
• iio: inkern: only release the device node when done with it (Nuno Sa)
• iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume (Claudiu Beznea)
• iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq (Claudiu Beznea)
• iio: adc: at91-sama5d2_adc: check return status for pressure and touch (Claudiu Beznea)
• iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX (Claudiu Beznea)
• ARM: dts: exynos: fix polarity of VBUS GPIO of Origen (Dmitry Torokhov)
• arm64: ftrace: fix module PLTs with mcount (Mark Rutland)
• ext4: don’t run ext4lazyinit for read-only filesystems (Josh Triplett)
• ARM: Drop CMDLINE_* dependency on ATAGS (Geert Uytterhoeven)
• ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family (Dmitry Torokhov)
• arm64: dts: ti: k3-j7200: fix main pinmux range (Matt Ranostay)
• soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA (Dmitry Osipenko)
• ia64: export memory_add_physaddr_to_nid to fix cxl build error (Randy Dunlap)
• ARM: dts: kirkwood: lsxl: remove first ethernet port (Michael Walle)
• ARM: dts: kirkwood: lsxl: fix serial line (Michael Walle)
• ARM: dts: turris-omnia: Fix mpp26 pin name and comment (Marek Behun)
• ARM: dts: imx6qdl-kontron-samx6i: hook up DDC i2c bus (Lucas Stach)
• soc: qcom: smem_state: Add refcounting for the ‘state->of_node’ (Liang He)
• soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() (Liang He)
• locks: fix TOCTOU race when granting write lease (Amir Goldstein)
• memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() (Liang He)
• memory: of: Fix refcount leak bug in of_get_ddr_timings() (Liang He)
• memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() (Liang He)
• ALSA: hda/hdmi: Don’t skip notification handling during PM operation (Takashi Iwai)
• ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe (Zhang Qilong)
• ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe (Zhang Qilong)
• ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe (Zhang Qilong)
• ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe (Zhang Qilong)
• mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() (Christophe JAILLET)
• ALSA: dmaengine: increment buffer pointer atomically (Andreas Pape)
• ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() (Christophe JAILLET)
• ASoC: codecs: tx-macro: fix kcontrol put (Srinivas Kandagatla)
• drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() (Rafael Mendonca)
• drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa() (Kuogee Hsieh)
• drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx (Dmitry Baryshkov)
• ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API (Liang He)
• mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() (Christophe JAILLET)
• drm/amdgpu: Fix memory leak in hpd_rx_irq_create_workqueue() (Rafael Mendonca)
• drm/omap: dss: Fix refcount leak bugs (Liang He)
• drm/bochs: fix blanking (Gerd Hoffmann)