Lucene search

K
oraclelinuxOracleLinuxELSA-2023-12018
HistoryJan 12, 2023 - 12:00 a.m.

Unbreakable Enterprise kernel-container security update

2023-01-1200:00:00
linux.oracle.com
23

8.8 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

5.8 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

43.3%

[5.15.0-6.80.3.1]

  • Revert ‘rds: ib: Enable FC by default’ (Hakon Bugge) [Orabug: 34964359]
    [5.15.0-6.80.3]
  • net/mlx5: Suppress error logging on UCTX creation (Marina) [Orabug: 34888471]
  • rds: ib: Fix leaked MRs during kexec (Hakon Bugge) [Orabug: 34892082]
  • uek-rpm: Add ptp_kvm.ko to core rpm (Somasundaram Krishnasamy) [Orabug: 34901414]
  • Revert ‘tracing/ring-buffer: Have polling block on watermark’ (Harshit Mogalapalli) [Orabug: 34890999]
    [5.15.0-6.80.2]
  • scsi: mpi3mr: Remove unnecessary cast (Jules Irenge) [Orabug: 34640445]
  • scsi: mpi3mr: Update driver version to 8.2.0.3.0 (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Fix scheduling while atomic type bug (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Scan the devices during resume time (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Free enclosure objects during driver unload (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Handle 0xF003 Fault Code (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Graceful handling of surprise removal of PCIe HBA (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Support new power management framework (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Update mpi3 header files (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Fix error code in mpi3mr_transport_smp_handler() (Dan Carpenter) [Orabug: 34640445]
  • scsi: mpi3mr: Fix error codes in mpi3mr_report_manufacture() (Dan Carpenter) [Orabug: 34640445]
  • scsi: mpi3mr: Block I/Os while refreshing target dev objects (Chandrakanth patil) [Orabug: 34640445]
  • scsi: mpi3mr: Refresh SAS ports during soft reset (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Support SAS transport class callbacks (Chandrakanth patil) [Orabug: 34640445]
  • scsi: mpi3mr: Add framework to issue MPT transport cmds (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Add SAS SATA end devices to STL (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Get target object based on rphy (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Add expander devices to STL (Chandrakanth patil) [Orabug: 34640445]
  • scsi: mpi3mr: Enable STL on HBAs where multipath is disabled (Chandrakanth patil) [Orabug: 34640445]
  • scsi: mpi3mr: Add helper functions to manage device’s port (Chandrakanth patil) [Orabug: 34640445]
  • scsi: mpi3mr: Add helper functions to retrieve device objects (Chandrakanth patil) [Orabug: 34640445]
  • scsi: mpi3mr: Add framework to add phys to STL (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Enable Enclosure device add event (Chandrakanth patil) [Orabug: 34640445]
  • scsi: mpi3mr: Add helper functions to retrieve config pages (Chandrakanth patil) [Orabug: 34640445]
  • scsi: mpi3mr: Add framework to issue config requests (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Add config and transport related debug flags (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Delete a stray tab (Dan Carpenter) [Orabug: 34640445]
  • scsi: mpi3mr: Unlock on error path (Dan Carpenter) [Orabug: 34640445]
  • scsi: mpi3mr: Reduce VD queue depth on detecting throttling (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Resource Based Metering (Chandrakanth patil) [Orabug: 34640445]
  • scsi: mpi3mr: Increase cmd_per_lun to 128 (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Enable shared host tagset (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Fix kernel-doc (Chandrakanth patil) [Orabug: 34640445]
  • scsi: mpi3mr: Rework mrioc->bsg_device model to fix warnings (Sumit Saxena) [Orabug: 34640445]
  • scsi: mpi3mr: Add target device related sysfs (Chandrakanth patil) [Orabug: 34640445]
  • scsi: mpi3mr: Add shost related sysfs attributes (Chandrakanth patil) [Orabug: 34640445]
  • scsi: mpi3mr: Return error if dma_alloc_coherent() fails (Dan Carpenter) [Orabug: 34640445]
  • scsi: mpi3mr: Fix a NULL vs IS_ERR() bug in mpi3mr_bsg_init() (Dan Carpenter) [Orabug: 34640445]
  • scsi: mpi3mr: Return I/Os to an unrecoverable HBA with DID_ERROR (Chandrakanth patil) [Orabug: 34640445]
  • scsi: mpi3mr: Hidden drives not removed during soft reset (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Increase I/O timeout value to 60s (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Update driver version to 8.0.0.69.0 (Sumit Saxena) [Orabug: 34640445]
  • scsi: mpi3mr: Add support for NVMe passthrough (Sumit Saxena) [Orabug: 34640445]
  • scsi: mpi3mr: Expose adapter state to sysfs (Chandrakanth patil) [Orabug: 34640445]
  • scsi: mpi3mr: Add support for PEL commands (Sumit Saxena) [Orabug: 34640445]
  • scsi: mpi3mr: Add support for MPT commands (Sumit Saxena) [Orabug: 34640445]
  • scsi: mpi3mr: Move data structures/definitions from MPI headers to uapi header (Sumit Saxena) [Orabug: 34640445]
  • scsi: mpi3mr: Add support for driver commands (Sumit Saxena) [Orabug: 34640445]
  • scsi: mpi3mr: Add bsg device support (Sumit Saxena) [Orabug: 34640445]
  • scsi: mpi3mr: Fix flushing !WQ_MEM_RECLAIM events warning (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Bump driver version to 8.0.0.68.0 (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Update the copyright year (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Fix cmnd getting marked as in use forever (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Fix hibernation issue (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Update MPI3 headers (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Fix printing of pending I/O count (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Fix deadlock while canceling the fw event (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Fix formatting problems in some kernel-doc comments (Yang Li) [Orabug: 34640445]
  • scsi: mpi3mr: Fix some spelling mistakes (Colin Ian King) [Orabug: 34640445]
  • scsi: mpi3mr: Bump driver version to 8.0.0.61.0 (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Enhanced Task Management Support Reply handling (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Use TM response codes from MPI3 headers (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Add io_uring interface support in I/O-polled mode (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Print cable mngnt and temp threshold events (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Support Prepare for Reset event (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Add Event acknowledgment logic (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Gracefully handle online FW update operation (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Detect async reset that occurred in firmware (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Add IOC reinit function (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Handle offline FW activation in graceful manner (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Code refactor of IOC init - part2 (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Code refactor of IOC init - part1 (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Fault IOC when internal command gets timeout (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Display IOC firmware package version (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Handle unaligned PLL in unmap cmnds (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Increase internal cmnds timeout to 60s (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Do access status validation before adding devices (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Add support for PCIe Managed Switch SES device (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Update MPI3 headers - part2 (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Update MPI3 headers - part1 (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Don’t reset IOC if cmnds flush with reset status (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Replace spin_lock() with spin_lock_irqsave() (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Add debug APIs based on logging_level bits (Sreekanth Reddy) [Orabug: 34640445]
  • scsi: mpi3mr: Use scnprintf() instead of snprintf() (Dan Carpenter) [Orabug: 34640445]
  • scsi: mpi3mr: Clean up mpi3mr_print_ioc_info() (Dan Carpenter) [Orabug: 34640445]
  • rds: ib: Remove unnecessary call to rds_ib_ring_unalloc (Hakon Bugge) [Orabug: 34768825]
  • rds: ib: Remove unnecessary i_flowctl term from conditions (Hakon Bugge) [Orabug: 34768825]
  • rds: ib: Remove unnesesarry variable initialization (Hakon Bugge) [Orabug: 34768825]
  • rds: ib: Make sure receives are posted before connection is up (Hakon Bugge) [Orabug: 34768825]
  • rds: ib: Fix the Retry counter dependency on RNR NAK Retry counter (Hakon Bugge) [Orabug: 34768825]
  • rds: Deduct one credit on the passive side (Hakon Bugge) [Orabug: 34768825]
  • rds: Use all eight bits for credit updates (Hakon Bugge) [Orabug: 34768825]
  • RDS/IB: Fix the misplaced counter update rdma dto path (Devesh Sharma) [Orabug: 34865847]
  • uek-rpm: Enable CONFIG_HP_ILO for aarch64 (Saeed Mirzamohammadi) [Orabug: 34869880]
  • uek-rpm: ol8: Choose right annobin plugin for UEK build (Somasundaram Krishnasamy) [Orabug: 34873882]
  • proc: proc_skip_spaces() shouldn’t think it is working on C strings (Linus Torvalds) [Orabug: 34882775] {CVE-2022-4378}
  • proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34882775] {CVE-2022-4378}
    [5.15.0-6.80.1]
  • LTS version: v5.15.80 (Jack Vogel)
  • ntfs: check overflow when iterating ATTR_RECORDs (Hawkins Jiawei)
  • ntfs: fix out-of-bounds read in ntfs_attr_find() (Hawkins Jiawei)
  • ntfs: fix use-after-free in ntfs_attr_find() (Hawkins Jiawei)
  • net/9p: use a dedicated spinlock for trans_fd (Dominique Martinet)
  • mm: fs: initialize fsdata passed to write_begin/write_end interface (Alexander Potapenko)
  • wifi: wext: use flex array destination for memcpy() (Hawkins Jiawei)
  • 9p/trans_fd: always use O_NONBLOCK read/write (Tetsuo Handa)
  • gfs2: Switch from strlcpy to strscpy (Andreas Gruenbacher)
  • gfs2: Check sb_bsize_shift after reading superblock (Andrew Price)
  • 9p: trans_fd/p9_conn_cancel: drop client lock earlier (Dominique Martinet)
  • kcm: close race conditions on sk_receive_queue (Cong Wang)
  • kcm: avoid potential race in kcm_tx_work (Eric Dumazet)
  • tcp: cdg: allow tcp_cdg_release() to be called multiple times (Eric Dumazet)
  • macvlan: enforce a consistent minimal mtu (Eric Dumazet)
  • Input: i8042 - fix leaking of platform device on module removal (Chen Jun)
  • kprobes: Skip clearing aggrprobe’s post_handler in kprobe-on-ftrace case (Li Huafei)
  • scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper() (Yuan Can)
  • scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() (Yang Yingliang)
  • net: use struct_group to copy ip/ipv6 header addresses (Hangbin Liu)
  • tracing: Fix warning on variable ‘struct trace_array’ (Aashish Sharma)
  • ring-buffer: Include dropped pages in counting dirty patches (Steven Rostedt (Google))
  • perf: Improve missing SIGTRAP checking (Marco Elver)
  • serial: 8250_lpss: Use 16B DMA burst with Elkhart Lake (Ilpo Jarvinen)
  • nvme: ensure subsystem reset is single threaded (Keith Busch)
  • nvme: restrict management ioctls to admin (Keith Busch)
  • perf/x86/intel/pt: Fix sampling using single range output (Adrian Hunter)
  • misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (Alexander Potapenko)
  • docs: update mediator contact information in CoC doc (Shuah Khan)
  • mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() (Xiongfeng Wang)
  • mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout (Chevron Li)
  • mmc: core: properly select voltage range without power cycle (Yann Gautier)
  • firmware: coreboot: Register bus in module init (Brian Norris)
  • iommu/vt-d: Set SRE bit only when hardware has SRS cap (Tina Zhang)
  • iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (Tina Zhang)
  • scsi: zfcp: Fix double free of FSF request when qdio send fails (Benjamin Block)
  • net: phy: marvell: add sleep time after enabling the loopback bit (Aminuddin Jamaluddin)
  • maccess: Fix writing offset in case of fault in strncpy_from_kernel_nofault() (Alban Crequy)
  • Input: iforce - invert valid length check when fetching device IDs (Tetsuo Handa)
  • serial: 8250_lpss: Configure DMA also w/o DMA filter (Ilpo Jarvinen)
  • serial: 8250: Flush DMA Rx on RLSI (Ilpo Jarvinen)
  • serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs (Ilpo Jarvinen)
  • dm ioctl: fix misbehavior if list_versions races with module loading (Mikulas Patocka)
  • iio: pressure: ms5611: changed hardcoded SPI speed to value limited (Mitja Spes)
  • iio: adc: mp2629: fix potential array out of bound access (Saravanan Sekar)
  • iio: adc: mp2629: fix wrong comparison of channel (Saravanan Sekar)
  • iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() (Yang Yingliang)
  • iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() (Yang Yingliang)
  • usb: typec: mux: Enter safe mode only when pins need to be reconfigured (Rajat Khandelwal)
  • usb: cdns3: host: fix endless superspeed hub port reset (Li Jun)
  • usb: chipidea: fix deadlock in ci_otg_del_timer (Duoming Zhou)
  • usb: add NO_LPM quirk for Realforce 87U Keyboard (Nicolas Dumazet)
  • USB: serial: option: add Fibocom FM160 0x0111 composition (Reinhard Speyerer)
  • USB: serial: option: add u-blox LARA-L6 modem (Davide Tronchin)
  • USB: serial: option: add u-blox LARA-R6 00B modem (Davide Tronchin)
  • USB: serial: option: remove old LARA-R6 PID (Davide Tronchin)
  • USB: serial: option: add Sierra Wireless EM9191 (Benoit Monin)
  • USB: bcma: Make GPIO explicitly optional (Linus Walleij)
  • speakup: fix a segfault caused by switching consoles (Mushahid Hussain)
  • slimbus: stream: correct presence rate frequencies (Krzysztof Kozlowski)
  • slimbus: qcom-ngd: Fix build error when CONFIG_SLIM_QCOM_NGD_CTRL=y && CONFIG_QCOM_RPROC_COMMON=m (Zheng Bin)
  • Revert ‘usb: dwc3: disable USB core PHY management’ (Johan Hovold)
  • ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 (Takashi Iwai)
  • ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro (Emil Flink)
  • ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() (Takashi Iwai)
  • drm/amd/display: Add HUBP surface flip interrupt handler (Rodrigo Siqueira)
  • tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit() (Shang XiaoJing)
  • tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit() (Shang XiaoJing)
  • tracing: Fix race where eprobes can be called before the event (Steven Rostedt (Google))
  • tracing: Fix wild-memory-access in register_synth_event() (Shang XiaoJing)
  • tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() (Shang XiaoJing)
  • tracing/ring-buffer: Have polling block on watermark (Steven Rostedt (Google))
  • tracing: Fix memory leak in tracing_read_pipe() (Wang Yufen)
  • ring_buffer: Do not deactivate non-existant pages (Daniil Tatianin)
  • ftrace: Fix null pointer dereference in ftrace_add_mod() (Xiu Jianfeng)
  • ftrace: Optimize the allocation for mcount entries (Wang Wensheng)
  • ftrace: Fix the possible incorrect kernel message (Wang Wensheng)
  • cifs: add check for returning value of SMB2_set_info_init (Anastasia Belova)
  • net: thunderbolt: Fix error handling in tbnet_init() (Yuan Can)
  • net: microchip: sparx5: Fix potential null-ptr-deref in sparx_stats_init() and sparx5_start() (Shang XiaoJing)
  • cifs: Fix wrong return value checking when GETFLAGS (Zhang Xiaoxu)
  • net/x25: Fix skb leak in x25_lapb_receive_frame() (Wei Yongjun)
  • net: ag71xx: call phylink_disconnect_phy if ag71xx_hw_enable() fail in ag71xx_open() (Liu Jian)
  • cifs: add check for returning value of SMB2_close_init (Anastasia Belova)
  • platform/surface: aggregator: Do not check for repeated unsequenced packets (Maximilian Luz)
  • platform/x86/intel: pmc: Don’t unconditionally attach Intel PMC when virtualized (Roger Pau Monne)
  • drbd: use after free in drbd_create_device() (Dan Carpenter)
  • bridge: switchdev: Fix memory leaks when changing VLAN protocol (Ido Schimmel)
  • net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process (Guangbin Huang)
  • net: ena: Fix error handling in ena_init() (Yuan Can)
  • net: ionic: Fix error handling in ionic_init_module() (Yuan Can)
  • xen/pcpu: fix possible memory leak in register_pcpu() (Yang Yingliang)
  • net: dsa: make dsa_master_ioctl() see through port_hwtstamp_get() shims (Vladimir Oltean)
  • net: mhi: Fix memory leak in mhi_net_dellink() (Wei Yongjun)
  • bnxt_en: Remove debugfs when pci_register_driver failed (Gaosheng Cui)
  • net: caif: fix double disconnect client in chnl_net_open() (Zhengchao Shao)
  • net: macvlan: Use built-in RCU list checking (Chuang Wang)
  • mISDN: fix misuse of put_device() in mISDN_register_device() (Wang ShaoBo)
  • net: liquidio: release resources when liquidio driver open failed (Zhengchao Shao)
  • soc: imx8m: Enable OCOTP clock before reading the register (Xiaolei Wang)
  • net: stmmac: ensure tx function is not running in stmmac_xdp_release() (Mohd Faizal Abdul Rahim)
  • net: hinic: Fix error handling in hinic_module_init() (Yuan Can)
  • mISDN: fix possible memory leak in mISDN_dsp_element_register() (Yang Yingliang)
  • net: bgmac: Drop free_netdev() from bgmac_enet_remove() (Wei Yongjun)
  • bpf: Initialize same number of free nodes for each pcpu_freelist (Xu Kuohai)
  • MIPS: Loongson64: Add WARN_ON on kexec related kmalloc failed (Liao Chang)
  • MIPS: fix duplicate definitions for exported symbols (Rongwei Zhang)
  • nfp: change eeprom length to max length enumerators (Jaco Coetzee)
  • ata: libata-transport: fix error handling in ata_tdev_add() (Yang Yingliang)
  • ata: libata-transport: fix error handling in ata_tlink_add() (Yang Yingliang)
  • ata: libata-transport: fix error handling in ata_tport_add() (Yang Yingliang)
  • ata: libata-transport: fix double ata_host_put() in ata_tport_add() (Yang Yingliang)
  • arm64: dts: imx8mn: Fix NAND controller size-cells (Marek Vasut)
  • arm64: dts: imx8mm: Fix NAND controller size-cells (Marek Vasut)
  • ARM: dts: imx7: Fix NAND controller size-cells (Marek Vasut)
  • drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker() (Shang XiaoJing)
  • drm/drv: Fix potential memory leak in drm_dev_init() (Shang XiaoJing)
  • drm/panel: simple: set bpc field for logic technologies displays (Aishwarya Kothari)
  • drm/vc4: kms: Fix IS_ERR() vs NULL check for vc4_kms (Gaosheng Cui)
  • pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map (Zeng Heng)
  • parport_pc: Avoid FIFO port location truncation (Maciej W. Rozycki)
  • siox: fix possible memory leak in siox_device_add() (Yang Yingliang)
  • arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro (D Scott Phillips)
  • bpf: Fix memory leaks in __check_func_call (Wang Yufen)
  • block: sed-opal: kmalloc the cmd/resp buffers (Serge Semin)
  • scsi: scsi_transport_sas: Fix error handling in sas_phy_add() (Yang Yingliang)
  • pinctrl: rockchip: list all pins in a possible mux route for PX30 (Quentin Schulz)
  • ASoC: soc-utils: Remove __exit for snd_soc_util_exit() (Chen Zhongjin)
  • bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() (Baisong Zhong)
  • tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send (Duoming Zhou)
  • serial: imx: Add missing .thaw_noirq hook (Shawn Guo)
  • serial: 8250: omap: Flush PM QOS work on remove (Tony Lindgren)
  • serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove() (Tony Lindgren)
  • serial: 8250_omap: remove wait loop from Errata i202 workaround (Matthias Schiffer)
  • serial: 8250: omap: Fix missing PM runtime calls for omap8250_set_mctrl() (Tony Lindgren)
  • ARM: at91: pm: avoid soft resetting AC DLL (Claudiu Beznea)
  • ASoC: tas2764: Fix set_tdm_slot in case of single slot (Martin Poviser)
  • ASoC: tas2770: Fix set_tdm_slot in case of single slot (Martin Poviser)
  • ASoC: core: Fix use-after-free in snd_soc_exit() (Chen Zhongjin)
  • ARM: dts: at91: sama7g5: fix signal name of pin PB2 (Mihai Sain)
  • spi: stm32: Print summary ‘callbacks suppressed’ message (Marek Vasut)
  • arm64: dts: qcom: sm8350-hdk: Specify which LDO modes are allowed (Douglas Anderson)
  • arm64: dts: qcom: sm8250-xperia-edo: Specify which LDO modes are allowed (Douglas Anderson)
  • arm64: dts: qcom: sm8150-xperia-kumano: Specify which LDO modes are allowed (Douglas Anderson)
  • arm64: dts: qcom: sa8155p-adp: Specify which LDO modes are allowed (Douglas Anderson)
  • KVM: x86/pmu: Do not speculatively query Intel GP PMCs that don’t exist yet (Like Xu)
  • spi: intel: Use correct mask for flash and protected regions (Mika Westerberg)
  • mtd: spi-nor: intel-spi: Disable write protection only if asked (Mika Westerberg)
  • ASoC: codecs: jz4725b: Fix spelling mistake ‘Sourc’ -> ‘Source’, ‘Routee’ -> ‘Route’ (Colin Ian King)
  • x86/cpu: Add several Intel server CPU model numbers (Tony Luck)
  • Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (Luiz Augusto von Dentz)
  • btrfs: remove pointless and double ulist frees in error paths of qgroup tests (Filipe Manana)
  • drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid (Nathan Huckleberry)
  • i2c: i801: add lis3lv02d’s I2C address for Vostro 5568 (Nam Cao)
  • i2c: tegra: Allocate DMA memory for DMA engine (Thierry Reding)
  • firmware: arm_scmi: Cleanup the core driver removal callback (Cristian Marussi)
  • ACPI: x86: Add another system to quirk list for forcing StorageD3Enable (Mario Limonciello)
  • NFSv4: Retry LOCK on OLD_STATEID during delegation return (Benjamin Coddington)
  • btrfs: raid56: properly handle the error when unable to find the missing stripe (Qu Wenruo)
  • RDMA/efa: Add EFA 0xefa2 PCI ID (Michael Margolin)
  • ACPI: scan: Add LATT2021 to acpi_ignore_dep_ids[] (Hans de Goede)
  • drm/amd/display: Remove wrong pipe control lock (Rodrigo Siqueira)
  • ASoC: rt1308-sdw: add the default value of some registers (Shuming Fan)
  • selftests/intel_pstate: fix build for ARCH=x86_64 (Ricardo Canuelo)
  • selftests/futex: fix build for clang (Ricardo Canuelo)
  • ASoC: Intel: sof_sdw: add quirk variant for LAPBC710 NUC15 (Pierre-Louis Bossart)
  • ASoC: codecs: jz4725b: fix capture selector naming (Siarhei Volkau)
  • ASoC: codecs: jz4725b: use right control for Capture Volume (Siarhei Volkau)
  • ASoC: codecs: jz4725b: fix reported volume for Master ctl (Siarhei Volkau)
  • ASoC: codecs: jz4725b: add missed Line In power control bit (Siarhei Volkau)
  • spi: intel: Fix the offset to get the 64K erase opcode (Mauro Lima)
  • ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK (Xiaolei Wang)
  • ASoC: rt1019: Fix the TDM settings (Derek Fang)
  • ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe (Zhang Qilong)
  • ASoC: wm8997: Revert ‘ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe’ (Zhang Qilong)
  • ASoC: wm5110: Revert ‘ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe’ (Zhang Qilong)
  • ASoC: wm5102: Revert ‘ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe’ (Zhang Qilong)
  • LTS version: v5.15.79 (Jack Vogel)
  • x86/cpu: Restore AMD’s DE_CFG MSR after resume (Borislav Petkov)
  • net: tun: call napi_schedule_prep() to ensure we own a napi (Eric Dumazet)
  • drm/amdkfd: Migrate in CPU page fault use current mm (Philip Yang)
  • marvell: octeontx2: build error: unknown type name ‘u64’ (Anders Roxell)
  • dmaengine: at_hdmac: Check return code of dma_async_device_register (Tudor Ambarus)
  • dmaengine: at_hdmac: Fix impossible condition (Tudor Ambarus)
  • dmaengine: at_hdmac: Don’t allow CPU to reorder channel enable (Tudor Ambarus)
  • dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors (Tudor Ambarus)
  • dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware (Tudor Ambarus)
  • dmaengine: at_hdmac: Fix concurrency over the active list (Tudor Ambarus)
  • dmaengine: at_hdmac: Free the memset buf without holding the chan lock (Tudor Ambarus)
  • dmaengine: at_hdmac: Fix concurrency over descriptor (Tudor Ambarus)
  • dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all() (Tudor Ambarus)
  • dmaengine: at_hdmac: Protect atchan->status with the channel lock (Tudor Ambarus)
  • dmaengine: at_hdmac: Do not call the complete callback on device_terminate_all (Tudor Ambarus)
  • dmaengine: at_hdmac: Fix premature completion of desc in issue_pending (Tudor Ambarus)
  • dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending (Tudor Ambarus)
  • dmaengine: at_hdmac: Don’t start transactions at tx_submit level (Tudor Ambarus)
  • dmaengine: at_hdmac: Fix at_lli struct definition (Tudor Ambarus)
  • cert host tools: Stop complaining about deprecated OpenSSL functions (Linus Torvalds)
  • can: j1939: j1939_send_one(): fix missing CAN header initialization (Oliver Hartkopp)
  • mm/shmem: use page_mapping() to detect page cache for uffd continue (Peter Xu)
  • mm/memremap.c: map FS_DAX device memory as decrypted (Pankaj Gupta)
  • mm/damon/dbgfs: check if rm_contexts input is for a real context (SeongJae Park)
  • udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (ZhangPeng)
  • mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)
  • btrfs: zoned: initialize device’s zone info for seeding (Johannes Thumshirn)
  • btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() (Zhang Xiaoxu)
  • btrfs: fix match incorrectly in dev_args_match_device (Liu Shixin)
  • wifi: ath11k: avoid deadlock during regulatory update in ath11k_regd_update() (Wen Gong)
  • platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi (Jorge Lopez)
  • drm/amdgpu: disable BACO on special BEIGE_GOBY card (Guchun Chen)
  • drm/i915/dmabuf: fix sg_table handling in map_dma_buf (Matthew Auld)
  • nilfs2: fix use-after-free bug of ns_writer on remount (Ryusuke Konishi)
  • nilfs2: fix deadlock in nilfs_count_free_blocks() (Ryusuke Konishi)
  • ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure (Shin’ichiro Kawasaki)
  • vmlinux.lds.h: Fix placement of ‘.data…decrypted’ section (Nathan Chancellor)
  • ALSA: usb-audio: Add DSD support for Accuphase DAC-60 (Jussi Laako)
  • ALSA: usb-audio: Add quirk entry for M-Audio Micro (Takashi Iwai)
  • ALSA: usb-audio: Yet more regression for for the delayed card registration (Takashi Iwai)
  • ALSA: hda/realtek: Add Positivo C6300 model quirk (Edson Juliano Drosdeck)
  • ALSA: hda: fix potential memleak in ‘add_widget_node’ (Ye Bin)
  • ALSA: hda/ca0132: add quirk for EVGA Z390 DARK (Xian Wang)
  • ALSA: hda/hdmi - enable runtime pm for more AMD display audio (Evan Quan)
  • mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA (Haibo Chen)
  • mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)
  • mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)
  • mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)
  • mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI (Brian Norris)
  • MIPS: jump_label: Fix compat branch range check (Jiaxun Yang)
  • arm64: efi: Fix handling of misaligned runtime regions and drop warning (Ard Biesheuvel)
  • riscv: fix reserved memory setup (Conor Dooley)
  • riscv: vdso: fix build with llvm (Jisheng Zhang)
  • riscv: process: fix kernel info leakage (Jisheng Zhang)
  • net: macvlan: fix memory leaks of macvlan_common_newlink (Chuang Wang)
  • ethernet: tundra: free irq when alloc ring failed in tsi108_open() (Zhengchao Shao)
  • net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open() (Zhengchao Shao)
  • ethernet: s2io: disable napi when start nic failed in s2io_card_up() (Zhengchao Shao)
  • net: atlantic: macsec: clear encryption keys from the stack (Antoine Tenart)
  • net: phy: mscc: macsec: clear encryption keys when freeing a flow (Antoine Tenart)
  • stmmac: dwmac-loongson: fix missing of_node_put() while module exiting (Yang Yingliang)
  • stmmac: dwmac-loongson: fix missing pci_disable_device() in loongson_dwmac_probe() (Yang Yingliang)
  • stmmac: dwmac-loongson: fix missing pci_disable_msi() while module exiting (Yang Yingliang)
  • cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open() (Zhengchao Shao)
  • mctp: Fix an error handling path in mctp_init() (Wei Yongjun)
  • stmmac: intel: Update PCH PTP clock rate from 200MHz to 204.8MHz (Tan, Tee Min)
  • stmmac: intel: Enable 2.5Gbps for Intel AlderLake-S (Wong Vee Khee)
  • net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() (Zhengchao Shao)
  • net: cpsw: disable napi in cpsw_ndo_open() (Zhengchao Shao)
  • net/mlx5e: E-Switch, Fix comparing termination table instance (Roi Dayan)
  • net/mlx5: Allow async trigger completion execution on single CPU systems (Roy Novich)
  • net/mlx5: Bridge, verify LAG state when adding bond to bridge (Vlad Buslov)
  • net: wwan: iosm: fix memory leak in ipc_pcie_read_bios_cfg (M Chetan Kumar)
  • net: nixge: disable napi when enable interrupts failed in nixge_open() (Zhengchao Shao)
  • net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init() (Zhengchao Shao)
  • netfilter: Cleanup nft_net->module_list from nf_tables_exit_net() (Shigeru Yoshida)
  • netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg() (Ziyang Xuan)
  • perf tools: Add the include/perf/ directory to .gitignore (Donglin Peng)
  • perf stat: Fix printing os->prefix in CSV metrics output (Athira Rajeev)
  • drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() (Zhengchao Shao)
  • net: lapbether: fix issue of invalid opcode in lapbeth_open() (Zhengchao Shao)
  • dmaengine: ti: k3-udma-glue: fix memory leak when register device fail (Yang Yingliang)
  • dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() (Christophe JAILLET)
  • dmaengine: pxa_dma: use platform_get_irq_optional (Doug Brown)
  • tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header (Xin Long)
  • net: broadcom: Fix BCMGENET Kconfig (YueHaibing)
  • net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable() (Rasmus Villemoes)
  • can: af_can: fix NULL pointer dereference in can_rx_register() (Zhengchao Shao)
  • ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network (Alexander Potapenko)
  • tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent (Lu Wei)
  • drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() (Yuan Can)
  • net: wwan: mhi: fix memory leak in mhi_mbim_dellink (HW He)
  • net: wwan: iosm: fix memory leak in ipc_wwan_dellink (HW He)
  • hamradio: fix issue of dev reference count leakage in bpq_device_event() (Zhengchao Shao)
  • net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event() (Zhengchao Shao)
  • KVM: s390: pv: don’t allow userspace to set the clock under PV (Nico Boehr)
  • phy: ralink: mt7621-pci: add sentinel to quirks table (John Thomson)
  • capabilities: fix undefined behavior in bit shift for CAP_TO_MASK (Gaosheng Cui)
  • net: fman: Unregister ethernet device on removal (Sean Anderson)
  • bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer (Alex Barba)
  • bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() (Michael Chan)
  • net: tun: Fix memory leaks of napi_get_frags (Wang Yufen)
  • octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT] (Ratheesh Kannoth)
  • octeontx2-pf: Use hardware register for CQE count (Geetha sowjanya)
  • macsec: clear encryption keys from the stack after setting up offload (Sabrina Dubroca)
  • macsec: fix detection of RXSCs when toggling offloading (Sabrina Dubroca)
  • macsec: fix secy->n_rx_sc accounting (Sabrina Dubroca)
  • macsec: delete new rxsc when offload fails (Sabrina Dubroca)
  • net: gso: fix panic on frag_list with mixed head alloc types (Jiri Benc)
  • bpf: Fix wrong reg type conversion in release_reference() (Youlin Li)
  • bpf: Add helper macro bpf_for_each_reg_in_vstate (Kumar Kartikeya Dwivedi)
  • bpf, sock_map: Move cancel_work_sync() out of sock lock (Cong Wang)
  • bpf: Fix sockmap calling sleepable function in teardown path (John Fastabend)
  • bpf, sockmap: Fix sk->sk_forward_alloc warn_on in sk_stream_kill_queues (Wang Yufen)
  • HID: hyperv: fix possible memory leak in mousevsc_probe() (Yang Yingliang)
  • bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE (Pu Lehui)
  • wifi: mac80211: Set TWT Information Frame Disabled bit as 1 (Howard Hsu)
  • bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues (Wang Yufen)
  • bpf, verifier: Fix memory leak in array reallocation for stack state (Kees Cook)
  • soundwire: qcom: check for outanding writes before doing a read (Srinivas Kandagatla)
  • soundwire: qcom: reinit broadcast completion (Srinivas Kandagatla)
  • wifi: cfg80211: fix memory leak in query_regdb_file() (Arend van Spriel)
  • wifi: cfg80211: silence a sparse RCU warning (Johannes Berg)
  • phy: stm32: fix an error code in probe (Dan Carpenter)
  • hwspinlock: qcom: correct MMIO max register for newer SoCs (Krzysztof Kozlowski)
  • drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram() (Yang Li)
  • drm/amdkfd: handle CPU fault on COW mapping (Philip Yang)
  • drm/amdkfd: avoid recursive lock in migrations back to RAM (Alex Sierra)
  • fuse: fix readdir cache race (Miklos Szeredi)
  • thunderbolt: Add DP OUT resource when DP tunnel is discovered (Sanjay R Mehta)
  • thunderbolt: Tear down existing tunnels when resuming from hibernate (Mika Westerberg)
  • LTS version: v5.15.78 (Jack Vogel)
  • wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() (Dokyung Song)
  • drm/i915/sdvo: Setup DDC fully before output init (Ville Syrjala)
  • drm/i915/sdvo: Filter out invalid outputs more sensibly (Ville Syrjala)
  • drm/rockchip: dsi: Force synchronous probe (Brian Norris)
  • drm/rockchip: dsi: Clean up ‘usage_mode’ when failing to attach (Brian Norris)
  • cifs: fix regression in very old smb1 mounts (Ronnie Sahlberg)
  • ext4,f2fs: fix readahead of verity data (Matthew Wilcox (Oracle))
  • tee: Fix tee_shm_register() for kernel TEE drivers (Sumit Garg)
  • KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky)
  • KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky)
  • KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky)
  • KVM: x86: emulator: em_sysexit should update ctxt->mode (Maxim Levitsky)
  • KVM: arm64: Fix bad dereference on MTE-enabled systems (Ryan Roberts)
  • KVM: VMX: fully disable SGX if SECONDARY_EXEC_ENCLS_EXITING unavailable (Emanuele Giuseppe Esposito)
  • KVM: x86: Mask off reserved bits in CPUID.8000001FH (Jim Mattson)
  • KVM: x86: Mask off reserved bits in CPUID.80000001H (Jim Mattson)
  • KVM: x86: Mask off reserved bits in CPUID.80000008H (Jim Mattson)
  • KVM: x86: Mask off reserved bits in CPUID.8000001AH (Jim Mattson)
  • KVM: x86: Mask off reserved bits in CPUID.80000006H (Jim Mattson)
  • x86/syscall: Include asm/ptrace.h in syscall_wrapper header (Jiri Olsa)
  • ext4: fix BUG_ON() when directory entry has invalid rec_len (Luis Henriques)
  • ext4: fix warning in ‘ext4_da_release_space’ (Ye Bin)
  • parisc: Avoid printing the hardware path twice (Helge Deller)
  • parisc: Export iosapic_serial_irq() symbol for serial port driver (Helge Deller)
  • parisc: Make 8250_gsc driver dependend on CONFIG_PARISC (Helge Deller)
  • perf/x86/intel: Fix pebs event constraints for SPR (Kan Liang)
  • perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[] (Kan Liang)
  • perf/x86/intel: Fix pebs event constraints for ICL (Kan Liang)
  • arm64: entry: avoid kprobe recursion (Mark Rutland)
  • efi: random: Use ‘ACPI reclaim’ memory for random seed (Ard Biesheuvel)
  • efi: random: reduce seed size to 32 bytes (Ard Biesheuvel)
  • fuse: add file_modified() to fallocate (Miklos Szeredi)
  • capabilities: fix potential memleak on error path from vfs_getxattr_alloc() (Gaosheng Cui)
  • tracing/histogram: Update document for KEYS_MAX size (Zheng Yejian)
  • tools/nolibc/string: Fix memcmp() implementation (Rasmus Villemoes)
  • ring-buffer: Check for NULL cpu_buffer in ring_buffer_wake_waiters() (Steven Rostedt (Google))
  • kprobe: reverse kp->flags when arm_kprobe failed (Li Qiang)
  • tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() (Shang XiaoJing)
  • tcp/udp: Make early_demux back namespacified. (Kuniyuki Iwashima)
  • ftrace: Fix use-after-free for dynamic ftrace_ops (Li Huafei)
  • btrfs: fix type of parameter generation in btrfs_get_dentry (David Sterba)
  • btrfs: fix tree mod log mishandling of reallocated nodes (Josef Bacik)
  • btrfs: fix lost file sync on direct IO write with nowait and dsync iocb (Filipe Manana)
  • fscrypt: fix keyring memory leak on mount failure (Eric Biggers)
  • fscrypt: stop using keyrings subsystem for fscrypt_master_key (Eric Biggers)
  • af_unix: Fix memory leaks of the whole sk due to OOB skb. (Kuniyuki Iwashima)
  • block, bfq: protect ‘bfqd->queued’ by ‘bfqd->lock’ (Yu Kuai)
  • Bluetooth: L2CAP: Fix attempting to access uninitialized memory (Luiz Augusto von Dentz) {CVE-2022-42895}
  • Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (Luiz Augusto von Dentz) {CVE-2022-42896}
  • i2c: piix4: Fix adapter not be removed in piix4_remove() (Chen Zhongjin)
  • arm64: dts: juno: Add thermal critical trip points (Cristian Marussi)
  • firmware: arm_scmi: Fix devres allocation device in virtio transport (Cristian Marussi)
  • firmware: arm_scmi: Make Rx chan_setup fail on memory errors (Cristian Marussi)
  • firmware: arm_scmi: Suppress the driver’s bind attributes (Cristian Marussi)
  • block: Fix possible memory leak for rq_wb on add_disk failure (Chen Zhongjin)
  • arm64: dts: ls208xa: specify clock frequencies for the MDIO controllers (Ioana Ciornei)
  • arm64: dts: ls1088a: specify clock frequencies for the MDIO controllers (Ioana Ciornei)
  • arm64: dts: lx2160a: specify clock frequencies for the MDIO controllers (Ioana Ciornei)
  • arm64: dts: imx8: correct clock order (Peng Fan)
  • ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset (Tim Harvey)
  • clk: qcom: Update the force mem core bit for GPU clocks (Taniya Das)
  • efi/tpm: Pass correct address to memblock_reserve (Jerry Snitselaar)
  • i2c: xiic: Add platform module alias (Martin Tuma)
  • drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case (Danijel Slivka)
  • HID: saitek: add madcatz variant of MMO7 mouse device ID (Samuel Bailey)
  • scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar)
  • ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() (Ashish Kalra)
  • media: v4l: subdev: Fail graciously when getting try data for NULL state (Sakari Ailus)
  • media: meson: vdec: fix possible refcount leak in vdec_probe() (Hangyu Hua)
  • media: dvb-frontends/drxk: initialize err to 0 (Hans Verkuil)
  • media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE (Hans Verkuil)
  • media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE (Hans Verkuil)
  • media: rkisp1: Zero v4l2_subdev_format fields in when validating links (Laurent Pinchart)
  • media: rkisp1: Use correct macro for gradient registers (Laurent Pinchart)
  • media: rkisp1: Initialize color space on resizer sink and source pads (Laurent Pinchart)
  • media: rkisp1: Don’t pass the quantization to rkisp1_csm_config() (Laurent Pinchart)
  • s390/cio: fix out-of-bounds access on cio_ignore free (Peter Oberparleiter)
  • s390/cio: derive cdev information only for IO-subchannels (Vineeth Vijayan)
  • s390/boot: add secure boot trailer (Peter Oberparleiter)
  • s390/uaccess: add missing EX_TABLE entries to __clear_user() (Heiko Carstens)
  • mtd: parsers: bcm47xxpart: Fix halfblock reads (Linus Walleij)
  • mtd: parsers: bcm47xxpart: print correct offset on read error (Rafal Milecki)
  • fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards (Helge Deller)
  • video/fbdev/stifb: Implement the stifb_fillrect() function (Helge Deller)
  • drm/msm/hdmi: fix IRQ lifetime (Johan Hovold)
  • drm/msm/hdmi: Remove spurious IRQF_ONESHOT flag (Daniel Thompson)
  • vsock: fix possible infinite sleep in vsock_connectible_wait_data() (Dexuan Cui)
  • ipv6: fix WARNING in ip6_route_net_exit_late() (Zhengchao Shao)
  • net, neigh: Fix null-ptr-deref in neigh_table_clear() (Chen Zhongjin)
  • net/smc: Fix possible leaked pernet namespace in smc_init() (Chen Zhongjin)
  • stmmac: dwmac-loongson: fix invalid mdio_node (Liu Peibao)
  • ibmvnic: Free rwi on reset success (Nick Child)
  • net: mdio: fix undefined behavior in bit shift for __mdiobus_register (Gaosheng Cui)
  • Bluetooth: L2CAP: Fix memory leak in vhci_write (Hawkins Jiawei)
  • Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() (Zhengchao Shao)
  • Bluetooth: virtio_bt: Use skb_put to set length (Soenke Huster)
  • Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Maxim Mikityanskiy)
  • netfilter: ipset: enforce documented limit to prevent allocating huge memory (Jozsef Kadlecsik)
  • btrfs: fix ulist leaks in error paths of qgroup self tests (Filipe Manana)
  • btrfs: fix inode list leak during backref walking at find_parent_nodes() (Filipe Manana)
  • btrfs: fix inode list leak during backref walking at resolve_indirect_refs() (Filipe Manana)
  • isdn: mISDN: netjet: fix wrong check of device registration (Yang Yingliang)
  • mISDN: fix possible memory leak in mISDN_register_device() (Yang Yingliang)
  • rose: Fix NULL pointer dereference in rose_send_frame() (Zhang Qilong)
  • ipvs: fix WARNING in ip_vs_app_net_cleanup() (Zhengchao Shao)
  • ipvs: fix WARNING in __ip_vs_cleanup_batch() (Zhengchao Shao)
  • ipvs: use explicitly signed chars (Jason A. Donenfeld)
  • netfilter: nf_tables: release flow rule object from commit path (Pablo Neira Ayuso)
  • netfilter: nf_tables: netlink notifier might race to release objects (Pablo Neira Ayuso)
  • net: tun: fix bugs for oversize packet when napi frags enabled (Ziyang Xuan)
  • net: sched: Fix use after free in red_enqueue() (Dan Carpenter)
  • ata: pata_legacy: fix pdc20230_set_piomode() (Sergey Shtylyov)
  • net: fec: fix improper use of NETDEV_TX_BUSY (Zhang Changzhong)
  • nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() (Shang XiaoJing)
  • nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() (Shang XiaoJing)
  • nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() (Shang XiaoJing)
  • nfc: fdp: Fix potential memory leak in fdp_nci_send() (Shang XiaoJing)
  • net: dsa: fall back to default tagger if we can’t load the one from DT (Vladimir Oltean)
  • RDMA/qedr: clean up work queue on failure in qedr_alloc_resources() (Dan Carpenter)
  • RDMA/core: Fix null-ptr-deref in ib_core_cleanup() (Chen Zhongjin)
  • net: dsa: Fix possible memory leaks in dsa_loop_init() (Chen Zhongjin)
  • nfs4: Fix kmemleak when allocate slot failed (Zhang Xiaoxu)
  • NFSv4.2: Fixup CLONE dest file size for zero-length count (Benjamin Coddington)
  • SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed (Zhang Xiaoxu)
  • NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot (Trond Myklebust)
  • NFSv4.1: Handle RECLAIM_COMPLETE trunking errors (Trond Myklebust)
  • NFSv4: Fix a potential state reclaim deadlock (Trond Myklebust)
  • RDMA/hns: Disable local invalidate operation (Yangyang Li)
  • RDMA/hns: Use hr_reg_xxx() instead of remaining roce_set_xxx() (Wenpeng Liang)
  • RDMA/hns: Remove magic number (Xinhao Liu)
  • IB/hfi1: Correctly move list in sc_disable() (Dean Luick)
  • KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER (Alexander Graf)
  • KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() (Alexander Graf)
  • KVM: x86: Protect the unused bits in MSR exiting flags (Aaron Lewis)
  • HID: playstation: add initial DualSense Edge controller support (Roderick Colenbrander)
  • mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page (Baolin Wang)
  • drm/amd/display: explicitly disable psr_feature_enable appropriately (Shirish S)
  • KVM: x86: Treat #DBs from the emulator as fault-like (code and DR7.GD=1) (Sean Christopherson)
  • serial: ar933x: Deassert Transmit Enable on ->rs485_config() (Lukas Wunner)
  • scsi: lpfc: Rework MIB Rx Monitor debug info logic (James Smart)
  • scsi: lpfc: Adjust CMF total bytes and rxmonitor (James Smart)
  • scsi: lpfc: Adjust bytes received vales during cmf timer interval (James Smart)
  • LTS version: v5.15.77 (Jack Vogel)
  • tcp/udp: Fix memory leak in ipv6_renew_options(). (Kuniyuki Iwashima)
  • serial: Deassert Transmit Enable on probe in driver-specific way (Lukas Wunner)
  • serial: core: move RS485 configuration tasks from drivers into core (Lino Sanfilippo)
  • can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive (Biju Das)
  • can: rcar_canfd: fix channel specific IRQ handling for RZ/G2L (Biju Das)
  • scsi: sd: Revert ‘scsi: sd: Remove a local variable’ (Yu Kuai)
  • arm64: Add AMPERE1 to the Spectre-BHB affected list (D Scott Phillips)
  • net: enetc: survive memory pressure without crashing (Vladimir Oltean)
  • kcm: do not sense pfmemalloc status in kcm_sendpage() (Eric Dumazet)
  • net: do not sense pfmemalloc status in skb_append_pagefrags() (Eric Dumazet)
  • net/mlx5: Fix crash during sync firmware reset (Suresh Devarakonda)
  • net/mlx5: Update fw fatal reporter state on PCI handlers successful recover (Roy Novich)
  • net/mlx5: Print more info on pci error handlers (Saeed Mahameed)
  • net/mlx5: Fix possible use-after-free in async command interface (Tariq Toukan)
  • net/mlx5e: Extend SKB room check to include PTP-SQ (Aya Levin)
  • net/mlx5e: Do not increment ESN when updating IPsec ESN state (Hyong Youb Kim)
  • netdevsim: remove dir in nsim_dev_debugfs_init() when creating ports dir failed (Zhengchao Shao)
  • net: broadcom: bcm4908_enet: update TX stats after actual transmission (Rafal Milecki)
  • net: broadcom: bcm4908enet: remove redundant variable bytes (Colin Ian King)
  • nh: fix scope used to find saddr when adding non gw nh (Nicolas Dichtel)
  • net: bcmsysport: Indicate MAC is in charge of PHY PM (Florian Fainelli)
  • net: ehea: fix possible memory leak in ehea_register_port() (Yang Yingliang)
  • openvswitch: switch from WARN to pr_warn (Aaron Conole)
  • ALSA: aoa: Fix I2S device accounting (Takashi Iwai)
  • ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() (Yang Yingliang)
  • net: ethernet: ave: Fix MAC to be in charge of PHY PM (Kunihiko Hayashi)
  • net: fec: limit register access on i.MX6UL (Juergen Borleis)
  • perf vendor events arm64: Fix incorrect Hisi hip08 L3 metrics (Shang XiaoJing)
  • PM: domains: Fix handling of unavailable/disabled idle states (Sudeep Holla)
  • net: ksz884x: fix missing pci_disable_device() on error in pcidev_init() (Yang Yingliang)
  • i40e: Fix flow-type by setting GL_HASH_INSET registers (Slawomir Laba)
  • i40e: Fix VF hang when reset is triggered on another VF (Sylwester Dziedziuch)
  • i40e: Fix ethtool rx-flow-hash setting for X722 (Slawomir Laba)
  • ipv6: ensure sane device mtu in tunnels (Eric Dumazet)
  • perf vendor events power10: Fix hv-24x7 metric events (Kajol Jain)
  • media: vivid: set num_in/outputs to 0 if not supported (Hans Verkuil)
  • media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check ‘interlaced’ (Hans Verkuil)
  • media: v4l2-dv-timings: add sanity checks for blanking values (Hans Verkuil)
  • media: vivid: dev->bitmap_cap wasn’t freed in all cases (Hans Verkuil)
  • media: vivid: s_fbuf: add more sanity checks (Hans Verkuil)
  • PM: hibernate: Allow hybrid sleep to work with s2idle (Mario Limonciello)
  • can: mcp251x: mcp251x_can_probe(): add missing unregister_candev() in error path (Dongliang Mu)
  • can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path (Dongliang Mu)
  • drm/amdkfd: Fix memory leak in kfd_mem_dmamap_userptr() (Rafael Mendonca)
  • net-memcg: avoid stalls when under memory pressure (Jakub Kicinski)
  • tcp: fix indefinite deferral of RTO with SACK reneging (Neal Cardwell)
  • tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Lu Wei)
  • tcp: minor optimization in tcp_add_backlog() (Eric Dumazet)
  • net: lantiq_etop: don’t free skb when returning NETDEV_TX_BUSY (Zhang Changzhong)
  • net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed (Zhengchao Shao)
  • kcm: annotate data-races around kcm->rx_wait (Eric Dumazet)
  • kcm: annotate data-races around kcm->rx_psock (Eric Dumazet)
  • atlantic: fix deadlock at aq_nic_stop (Inigo Huguet)
  • drm/i915/dp: Reset frl trained flag before restarting FRL training (Ankit Nautiyal)
  • amd-xgbe: add the bit rate quirk for Molex cables (Raju Rangoju)
  • amd-xgbe: fix the SFP compliance codes check for DAC cables (Raju Rangoju)
  • x86/unwind/orc: Fix unreliable stack dump with gcov (Chen Zhongjin)
  • nfc: virtual_ncidev: Fix memory leak in virtual_nci_send() (Shang XiaoJing)
  • net: macb: Specify PHY PM management done by MAC (Sergiu Moga)
  • net: hinic: fix the issue of double release MBOX callback of VF (Zhengchao Shao)
  • net: hinic: fix the issue of CMDQ memory leaks (Zhengchao Shao)
  • net: hinic: fix memory leak when reading function table (Zhengchao Shao)
  • net: hinic: fix incorrect assignment issue in hinic_set_interrupt_cfg() (Zhengchao Shao)
  • net: netsec: fix error handling in netsec_register_mdio() (Yang Yingliang)
  • tipc: fix a null-ptr-deref in tipc_topsrv_accept (Xin Long)
  • perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap() (Maxim Levitsky)
  • ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() (Yang Yingliang)
  • ASoC: qcom: lpass-cpu: Mark HDMI TX parity register as volatile (Srinivasa Rao Mandadapu)
  • mtd: rawnand: intel: Add missing of_node_put() in ebu_nand_probe() (Yang Yingliang)
  • arc: iounmap() arg is volatile (Randy Dunlap)
  • sched/core: Fix comparison in sched_group_cookie_match() (Lin Shengwang)
  • perf: Fix missing SIGTRAPs (Peter Zijlstra)
  • ASoC: qcom: lpass-cpu: mark HDMI TX registers as volatile (Srinivasa Rao Mandadapu)
  • KVM: selftests: Fix number of pages for memory slot in memslot_modification_stress_test (Gavin Shan)
  • drm/msm: Fix return type of mdp4_lvds_connector_mode_valid (Nathan Huckleberry)
  • media: atomisp: prevent integer overflow in sh_css_set_black_frame() (Dan Carpenter)
  • media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation (Alexander Stein)
  • net: ieee802154: fix error return code in dgram_bind() (Wei Yongjun)
  • ethtool: eeprom: fix null-deref on genl_info in dump (Xin Long)
  • mmc: block: Remove error check of hw_reset on reset (Christian Lohle)
  • s390/pci: add missing EX_TABLE entries to __pcistg_mio_inuser()/__pcilg_mio_inuser() (Heiko Carstens)
  • s390/futex: add missing EX_TABLE entry to __futex_atomic_op() (Heiko Carstens)
  • perf auxtrace: Fix address filter symbol name match for modules (Adrian Hunter)
  • ARC: mm: fix leakage of memory allocated for PTE (Pavel Kozlov)
  • pinctrl: Ingenic: JZ4755 bug fixes (Siarhei Volkau)
  • kernfs: fix use-after-free in __kernfs_remove (Christian A. Ehrhardt)
  • counter: microchip-tcb-capture: Handle Signal1 read and Synapse (William Breathitt Gray)
  • mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on 8bit bus (Sascha Hauer)
  • mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake (Patrick Thompson)
  • mmc: core: Fix kernel panic when remove non-standard SDIO card (Matthew Ma)
  • mmc: sdhci_am654: ‘select’, not ‘depends’ REGMAP_MMIO (Brian Norris)
  • coresight: cti: Fix hang in cti_disable_hw() (James Clark)
  • drm/msm/dp: fix IRQ lifetime (Johan Hovold)
  • drm/msm/hdmi: fix memory corruption with too many bridges (Johan Hovold)
  • drm/msm/dsi: fix memory corruption with too many bridges (Johan Hovold)
  • drm/amdgpu: disallow gfxoff until GC IP blocks complete s2idle resume (Prike Liang)
  • scsi: qla2xxx: Use transport-defined speed mask for supported_speeds (Manish Rangankar)
  • mac802154: Fix LQI recording (Miquel Raynal)
  • exec: Copy oldsighand->action under spin-lock (Bernd Edlinger)
  • fs/binfmt_elf: Fix memory leak in load_elf_binary() (Li Zetao)
  • cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (Rafael J. Wysocki)
  • cpufreq: intel_pstate: Read all MSRs on the target CPU (Rafael J. Wysocki)
  • fbdev: smscufx: Fix several use-after-free bugs (Hyunwoo Kim)
  • iio: adxl372: Fix unsafe buffer attributes (Matti Vaittinen)
  • iio: temperature: ltc2983: allocate iio channels once (Cosmin Tanislav)
  • iio: light: tsl2583: Fix module unloading (Shreeya Patel)
  • tools: iio: iio_utils: fix digit calculation (Matti Vaittinen)
  • xhci: Remove device endpoints from bandwidth list when freeing the device (Mathias Nyman)
  • xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices (Mario Limonciello)
  • xhci: Add quirk to reset host back to default state at shutdown (Mathias Nyman)
  • mtd: rawnand: marvell: Use correct logic for nand-keep-config (Tony O’Brien)
  • usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller (Jens Glathe)
  • usb: bdc: change state when port disconnected (Justin Chen)
  • usb: dwc3: gadget: Don’t set IMI for no_interrupt (Thinh Nguyen)
  • usb: dwc3: gadget: Stop processing more requests on IMI (Thinh Nguyen)
  • usb: gadget: uvc: fix sg handling during video encode (Jeff Vanhoof)
  • usb: gadget: uvc: fix sg handling in error case (Dan Vacura)
  • USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM (Hannu Hartikainen)
  • ALSA: rme9652: use explicitly signed char (Jason A. Donenfeld)
  • ALSA: au88x0: use explicitly signed char (Jason A. Donenfeld)
  • ALSA: usb-audio: Add quirks for M-Audio Fast Track C400/600 (Takashi Iwai)
  • ALSA: Use del_timer_sync() before freeing timer (Steven Rostedt (Google))
  • can: kvaser_usb: Fix possible completions during init_completion (Anssi Hannula)
  • can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb() (Yang Yingliang)
  • NFSv4: Add an fattr allocation to _nfs4_discover_trunking() (Scott Mayhew)
  • NFSv4: Fix free of uninitialized nfs4_label on referral lookup. (Benjamin Coddington)
  • rds: ib: Enable FC by default (Hakon Bugge) [Orabug: 33930793]
  • Adding a new sysfs entry point – forcepower – to /sys/bus/pci/slots/X. (James Puthukattukaran) [Orabug: 34719459]
  • nvme: paring quiesce/unquiesce (Ming Lei) [Orabug: 34719459]
  • nvme: prepare for pairing quiescing and unquiescing (Ming Lei) [Orabug: 34719459]
  • nvme: apply nvme API to quiesce/unquiesce admin queue (Ming Lei) [Orabug: 34719459]
  • nvme: add APIs for stopping/starting admin queue (Ming Lei) [Orabug: 34719459]
  • hugetlbfs: don’t delete error page from pagecache (James Houghton) [Orabug: 34772616]
  • mm: shmem: don’t truncate page if memory failure happens (Yang Shi) [Orabug: 34772616]
  • mm: hwpoison: handle non-anonymous THP correctly (Yang Shi) [Orabug: 34772616]
  • mm: hwpoison: refactor refcount check handling (Yang Shi) [Orabug: 34772616]
  • net/rds: Quiesce heartbeat worker in rds_conn_path_destroy() (Sharath Srinivasan) [Orabug: 34815818]
  • net/rds: Add support for tracing RDS heartbeats (Sharath Srinivasan) [Orabug: 34815818]
  • net/rds: Enable RDS heartbeat by default (Sharath Srinivasan) [Orabug: 34815818]
  • uek-rpm: core.list: add VirtualBox guest drivers to core package (Todd Vierling) [Orabug: 34820755]
  • tools/power turbostat: fix SPR PC6 limits (Artem Bityutskiy) [Orabug: 34838996]
  • tools/power turbostat: separate SPR from ICX (Artem Bityutskiy) [Orabug: 34838996]
  • rds: ib: Fix incorrect error handling during QP creation (Hakon Bugge) [Orabug: 34857202]
  • Revert ‘random: clear fast pool, crng, and batches in cpuhp bring up’ (Somasundaram Krishnasamy) [Orabug: 34850847]

8.8 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

5.8 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

43.3%