Unbreakable Enterprise kernel security update

[5.15.0-8.91.4.1]

• uek-rpm: Add opbmc to core rpm (Somasundaram Krishnasamy) [Orabug: 35157130]
  [5.15.0-8.91.4]
• selftests/vm: remove ARRAY_SIZE define from individual tests (Shuah Khan) [Orabug: 35088471]
• selftests: Provide local define of __cpuid_count() (Reinette Chatre) [Orabug: 35088471]
• tools: fix ARRAY_SIZE defines in tools and selftests hdrs (Shuah Khan) [Orabug: 35088471]
• uek-rpm: aarch64 enable DETECT_HUNG_TASK (Tom Saeger) [Orabug: 34580801]
  [5.15.0-8.91.3]
• Update README with UEK Text Description (Somasundaram Krishnasamy) [Orabug: 35084845]
• uek-rpm: config-x86-64*: Disable CONFIG_AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT (Alejandro Jimenez) [Orabug: 35059109]
• Revert ‘RDMA/irdma: Fix warning, move switch variable into case’ (Jack Vogel) [Orabug: 35048858]
• Revert ‘RDMA/irdma: Move variable into switch case’ (Jack Vogel) [Orabug: 35048858]
• Revert ‘ACPI/IORT: Move variables in switch, fix for build warnings.’ (Jack Vogel) [Orabug: 35048858]
  [5.15.0-8.91.2]
• RDMA/addr: Refresh neighbour entries upon rdma_resolve_addr() (Gerd Rausch) [Orabug: 35060575]
• net/rds: Go back to alloc_ordered_workqueue() (Gerd Rausch) [Orabug: 35042697]
• sched/core: Remove sched_uek cmdline parameter (Konrad Rzeszutek Wilk) [Orabug: 35049222]
• uek-misc: Initial version (Konrad Rzeszutek Wilk) [Orabug: 35049222]
• treewide: Move the definition in a global file (Konrad Rzeszutek Wilk) [Orabug: 35049222]
• treewide: Rename wake_affine_idle_pull into on_exadata (Konrad Rzeszutek Wilk) [Orabug: 35049222]
• sched/core: Remove sched_uek=preempt (Konrad Rzeszutek Wilk) [Orabug: 35049222]
• perf/x86/uncore: Don’t WARN_ON_ONCE() for a broken discovery table (Kan Liang) [Orabug: 35038311]
• perf/x86/uncore: Add a quirk for UPI on SPR (Kan Liang) [Orabug: 35038311]
• perf/x86/uncore: Ignore broken units in discovery table (Kan Liang) [Orabug: 35038311]
• perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name (Kan Liang) [Orabug: 35038311]
• perf/x86/uncore: Factor out uncore_device_to_die() (Kan Liang) [Orabug: 35038311]
• perf/x86/intel/uncore: Enable UPI topology discovery for Sapphire Rapids (Alexander Antonov) [Orabug: 35038311]
• perf/x86/intel/uncore: Enable UPI topology discovery for Skylake Server (Alexander Antonov) [Orabug: 35038311]
• perf/x86/intel/uncore: Generalize get_topology() for SKX PMUs (Alexander Antonov) [Orabug: 35038311]
• perf/x86/intel/uncore: Introduce UPI topology type (Alexander Antonov) [Orabug: 35038311]
• perf/x86/intel/uncore: Get UPI NodeID and GroupID (Alexander Antonov) [Orabug: 35038311]
• perf/x86/intel/uncore: Enable UPI topology discovery for Icelake Server (Alexander Antonov) [Orabug: 35038311]
• perf/x86/intel/uncore: Generalize IIO topology support (Alexander Antonov) [Orabug: 35038311]
• net/rds: Delegate fan-out to a background worker (Gerd Rausch) [Orabug: 34994148]
• i40e: Add basic support for I710 devices (Stanislaw Grzeszczak) [Orabug: 35059783]
  [5.15.0-8.91.1]
• LTS version: v5.15.91 (Jack Vogel)
• perf/x86/amd: fix potential integer overflow on shift of a int (Colin Ian King)
• netfilter: conntrack: unify established states for SCTP paths (Sriram Yagnaraman)
• x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (Thomas Gleixner)
• block: fix and cleanup bio_check_ro (Christoph Hellwig)
• kbuild: Allow kernel installation packaging to override pkg-config (Chun-Tse Shao)
• cpufreq: governor: Use kobject release() method to free dbs_data (Kevin Hao)
• cpufreq: Move to_gov_attr_set() to cpufreq.h (Kevin Hao)
• Revert ‘Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode’ (Dmitry Torokhov)
• tools: gpio: fix -c option of gpio-event-mon (Ivo Borisov Shopov)
• treewide: fix up files incorrectly marked executable (Linus Torvalds)
• net: mdio-mux-meson-g12a: force internal PHY off on mux switch (Jerome Brunet)
• net/tg3: resolve deadlock in tg3_reset_task() during EEH (David Christensen)
• thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type() (Rafael J. Wysocki)
• net: mctp: mark socks as dead on unhash, prevent re-add (Jeremy Kerr)
• net: ravb: Fix possible hang if RIS2_QFF1 happen (Yoshihiro Shimoda)
• net: ravb: Fix lack of register setting after system resumed for Gen3 (Yoshihiro Shimoda)
• ravb: Rename ‘no_ptp_cfg_active’ and ‘ptp_cfg_active’ variables (Biju Das)
• gpio: mxc: Unlock on error path in mxc_flip_edge() (Dan Carpenter)
• nvme: fix passthrough csi check (Keith Busch)
• riscv/kprobe: Fix instruction simulation of JALR (Liao Chang)
• sctp: fail if no bound addresses can be used for a given scope (Marcelo Ricardo Leitner)
• net/sched: sch_taprio: do not schedule in taprio_reset() (Eric Dumazet)
• netrom: Fix use-after-free of a listening socket. (Kuniyuki Iwashima)
• netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE (Sriram Yagnaraman)
• ipv4: prevent potential spectre v1 gadget in fib_metrics_match() (Eric Dumazet)
• ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() (Eric Dumazet)
• netlink: annotate data races around sk_state (Eric Dumazet)
• netlink: annotate data races around dst_portid and dst_group (Eric Dumazet)
• netlink: annotate data races around nlk->portid (Eric Dumazet)
• netfilter: nft_set_rbtree: skip elements in transaction from garbage collection (Pablo Neira Ayuso)
• netfilter: nft_set_rbtree: Switch to node list walk for overlap detection (Pablo Neira Ayuso)
• drm/i915/selftest: fix intel_selftest_modify_policy argument types (Arnd Bergmann)
• net: fix UaF in netns ops registration error path (Paolo Abeni)
• netlink: prevent potential spectre v1 gadgets (Eric Dumazet)
• i2c: designware: use casting of u64 in clock multiplication to avoid overflow (Lareine Khawaly)
• scsi: ufs: core: Fix devfreq deadlocks (Johan Hovold)
• net: mana: Fix IRQ name - add PCI and queue number (Haiyang Zhang)
• EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info’s pvt_info (Manivannan Sadhasivam)
• EDAC/device: Respect any driver-supplied workqueue polling value (Manivannan Sadhasivam)
• ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment (Giulio Benetti)
• ipv6: fix reachability confirmation with proxy_ndp (Gergely Risko)
• thermal: intel: int340x: Protect trip temperature from concurrent updates (Srinivas Pandruvada)
• KVM: arm64: GICv4.1: Fix race with doorbell on VPE activation/deactivation (Marc Zyngier)
• KVM: x86/vmx: Do not skip segment attributes if unusable bit is set (Hendrik Borghorst)
• ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi)
• ksmbd: limit pdu length size according to connection status (Namjae Jeon)
• ksmbd: downgrade ndr version error message to debug (Namjae Jeon)
• ksmbd: do not sign response to session request for guest login (Marios Makassikis)
• ksmbd: add max connections parameter (Namjae Jeon)
• ksmbd: add smbd max io size parameter (Namjae Jeon)
• i2c: mv64xxx: Add atomic_xfer method to driver (Chris Morgan)
• i2c: mv64xxx: Remove shutdown method from driver (Chris Morgan)
• cifs: Fix oops due to uncleared server->smbd_conn in reconnect (David Howells)
• ftrace/scripts: Update the instructions for ftrace-bisect.sh (Steven Rostedt (Google))
• trace_events_hist: add check for return value of ‘create_hist_field’ (Natalia Petrova)
• tracing: Make sure trace_printk() can output as soon as it can be used (Steven Rostedt (Google))
• module: Don’t wait for GOING modules (Petr Pavlu)
• KVM: SVM: fix tsc scaling cache logic (Maxim Levitsky)
• scsi: hpsa: Fix allocation size for scsi_host_alloc() (Alexey V. Vissarionov)
• drm/amdgpu: complete gfxoff allow signal during suspend without delay (Harsh Jain)
• Bluetooth: hci_sync: cancel cmd_timer if hci_open failed (Archie Pusaka)
• exit: Use READ_ONCE() for all oops/warn limit reads (Kees Cook)
• docs: Fix path paste-o for /sys/kernel/warn_count (Kees Cook)
• panic: Expose ‘warn_count’ to sysfs (Kees Cook)
• panic: Introduce warn_limit (Kees Cook)
• panic: Consolidate open-coded panic_on_warn checks (Kees Cook)
• exit: Allow oops_limit to be disabled (Kees Cook)
• exit: Expose ‘oops_count’ to sysfs (Kees Cook)
• exit: Put an upper limit on how often we can oops (Jann Horn)
• panic: Separate sysctl logic from CONFIG_SMP (Kees Cook)
• ia64: make IA64_MCA_RECOVERY bool instead of tristate (Randy Dunlap)
• csky: Fix function name in csky_alignment() and die() (Nathan Chancellor)
• h8300: Fix build errors from do_exit() to make_task_dead() transition (Nathan Chancellor)
• hexagon: Fix function name in die() (Nathan Chancellor)
• objtool: Add a missing comma to avoid string concatenation (Eric W. Biederman)
• exit: Add and use make_task_dead. (Eric W. Biederman)
• kasan: no need to unset panic_on_warn in end_report() (Tiezhu Yang)
• ubsan: no need to unset panic_on_warn in ubsan_epilogue() (Tiezhu Yang)
• panic: unset panic_on_warn inside panic() (Tiezhu Yang)
• kernel/panic: move panic sysctls to its own file (tangmeng)
• sysctl: add a new register_sysctl_init() interface (Xiaoming Ni)
• fs: reiserfs: remove useless new_opts in reiserfs_remount (Dongliang Mu)
• x86: ACPI: cstate: Optimize C3 entry on AMD CPUs (Deepak Sharma)
• drm/i915: Remove unused variable (Nirmoy Das)
• Revert ‘selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID’ (Sasha Levin)
• drm/i915: Allow switching away via vga-switcheroo if uninitialized (Thomas Zimmermann)
• firmware: coreboot: Check size of table entry and use flex-array (Kees Cook)
• lockref: stop doing cpu_relax in the cmpxchg loop (Mateusz Guzik)
• platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK (Hans de Goede)
• platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD (Michael Klein)
• r8152: add vendor/device ID pair for Microsoft Devkit (Andre Przywara)
• scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id (Yihang Li)
• KVM: s390: interrupt: use READ_ONCE() before cmpxchg() (Heiko Carstens)
• spi: spidev: remove debug messages that access spidev->spi without locking (Bartosz Golaszewski)
• ASoC: fsl-asoc-card: Fix naming of AC’97 CODEC widgets (Mark Brown)
• ASoC: fsl_ssi: Rename AC’97 streams to avoid collisions with AC’97 CODEC (Mark Brown)
• cpufreq: armada-37xx: stop using 0 as NULL pointer (Miles Chen)
• perf/x86/intel/uncore: Add Emerald Rapids (Kan Liang)
• perf/x86/msr: Add Emerald Rapids (Kan Liang)
• s390: expicitly align _edata and _end symbols on page boundary (Alexander Gordeev)
• s390/debug: add ASM_S390 prefix to header guard (Niklas Schnelle)
• drm: Add orientation quirk for Lenovo ideapad D330-10IGL (Patrick Thompson)
• net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem (Hui Wang)
• ASoC: fsl_micfil: Correct the number of steps on SX controls (Chancel Liu)
• cpufreq: Add SM6375 to cpufreq-dt-platdev blocklist (Konrad Dybcio)
• kcsan: test: don’t put the expect array on the stack (Max Filippov)
• cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist (Sumit Gupta)
• scsi: iscsi: Fix multiple iSCSI session unbind events sent to userspace (Wenchao Hao)
• tcp: fix rate_app_limited to default to 1 (David Morley)
• net: stmmac: enable all safety features by default (Andrew Halaney)
• thermal: core: call put_device() only after device_register() fails (Viresh Kumar)
• thermal/core: fix error code in __thermal_cooling_device_register() (Dan Carpenter)
• thermal: Validate new state in cur_state_store() (Viresh Kumar)
• thermal/core: Rename ‘trips’ to ‘num_trips’ (Daniel Lezcano)
• thermal/core: Remove duplicate information when an error occurs (Daniel Lezcano)
• net: dsa: microchip: ksz9477: port map correction in ALU table entry register (Rakesh Sankaranarayanan)
• selftests/net: toeplitz: fix race on tpacket_v3 block close (Willem de Bruijn)
• driver core: Fix test_async_probe_init saves device in wrong array (Chen Zhongjin)
• w1: fix WARNING after calling w1_process() (Yang Yingliang)
• w1: fix deadloop in __w1_remove_master_device() (Yang Yingliang)
• device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() (Yang Yingliang)
• ptdma: pt_core_execute_cmd() should use spinlock (Eric Pilmore)
• octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt (Kevin Hao)
• tcp: avoid the lookup process failing to get sk in ehash table (Jason Xing)
• nvme-pci: fix timeout request state check (Keith Busch)
• drm/amd/display: fix issues with driver unload (Hamza Mahfooz)
• phy: phy-can-transceiver: Skip warning if no ‘max-bitrate’ (Geert Uytterhoeven)
• dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node() (Liu Shixin)
• cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara)
• HID: betop: check shape of output reports (Pietro Borrello)
• l2tp: prevent lockdep issue in l2tp_tunnel_register() (Eric Dumazet)
• virtio-net: correctly enable callback during start_xmit (Jason Wang)
• net: macb: fix PTP TX timestamp failure due to packet padding (Robert Hancock)
• dmaengine: Fix double increment of client_count in dma_chan_get() (Koba Ko)
• drm/panfrost: fix GENERIC_ATOMIC64 dependency (Arnd Bergmann)
• net: mlx5: eliminate anonymous module_init & module_exit (Randy Dunlap)
• net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT (Maor Dickman)
• net: ipa: disable ipa interrupt during suspend (Caleb Connolly)
• Bluetooth: Fix possible deadlock in rfcomm_sk_state_change (Ying Hsu)
• usb: gadget: f_fs: Ensure ep0req is dequeued before free_request (Udipto Goswami)
• usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait (Udipto Goswami)
• HID: revert CHERRY_MOUSE_000C quirk (Jiri Kosina)
• pinctrl: rockchip: fix mux route data for rk3568 (Jonas Karlman)
• net: stmmac: fix invalid call to mdiobus_get_phy() (Heiner Kallweit)
• HID: check empty report_list in bigben_probe() (Pietro Borrello)
• HID: check empty report_list in hid_validate_values() (Pietro Borrello)
• net: mdio: validate parameter addr in mdiobus_get_phy() (Heiner Kallweit)
• net: usb: sr9700: Handle negative len (Szymon Heidrich)
• octeontx2-pf: Avoid use of GFP_KERNEL in atomic context (Geetha sowjanya)
• l2tp: close all race conditions in l2tp_tunnel_register() (Cong Wang)
• l2tp: convert l2tp_tunnel_list to idr (Cong Wang)
• l2tp: Don’t sleep and disable BH under writer-side sk_callback_lock (Jakub Sitnicki)
• l2tp: Serialize access to sk_user_data with sk_callback_lock (Jakub Sitnicki) [Orabug: 34951574] {CVE-2022-4129}
• net/sched: sch_taprio: fix possible use-after-free (Eric Dumazet)
• net: stmmac: Fix queue statistics reading (Kurt Kanzenbach)
• pinctrl: rockchip: fix reading pull type on rk3568 (Jonas Karlman)
• pinctrl/rockchip: add error handling for pull/drive register getters (Sebastian Reichel)
• pinctrl/rockchip: Use temporary variable for struct device (Andy Shevchenko)
• wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid (Szymon Heidrich) [Orabug: 35037701] {CVE-2023-23559}
• gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode (Marek Vasut)
• gpio: mxc: Protect GPIO irqchip RMW with bgpio spinlock (Marek Vasut)
• gpio: use raw spinlock for gpio chip shadowed data (Schspa Shi)
• sch_htb: Avoid grafting on htb_destroy_class_offload when destroying htb (Rahul Rameshbabu)
• net: enetc: avoid deadlock in enetc_tx_onestep_tstamp() (Vladimir Oltean)
• net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs (Esina Ekaterina)
• net: nfc: Fix use-after-free in local_cleanup() (Jisoo Jang)
• phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() (Shang XiaoJing)
• bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation (Luis Gerhorst)
• amd-xgbe: Delay AN timeout during KR training (Raju Rangoju)
• amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent (Raju Rangoju)
• ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60 (Claudiu Beznea)
• NFSD: fix use-after-free in nfsd4_ssc_setup_dul() (Xingyuan Mo)
• phy: ti: fix Kconfig warning and operator precedence (Randy Dunlap)
• arm64: dts: qcom: msm8992-libra: Fix the memory map (Konrad Dybcio)
• arm64: dts: qcom: msm8992-libra: Add CPU regulators (Konrad Dybcio)
• arm64: dts: qcom: msm8992: Don’t use sfpb mutex (Konrad Dybcio)
• PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe() (Christophe JAILLET)
• affs: initialize fsdata in affs_truncate() (Alexander Potapenko)
• IB/hfi1: Remove user expected buffer invalidate race (Dean Luick)
• IB/hfi1: Immediately remove invalid memory from hardware (Dean Luick)
• IB/hfi1: Fix expected receive setup error exit issues (Dean Luick)
• IB/hfi1: Reserve user expected TIDs (Dean Luick)
• IB/hfi1: Reject a zero-length user expected buffer (Dean Luick)
• RDMA/core: Fix ib block iterator counter overflow (Yonatan Nachum)
• tomoyo: fix broken dependency on *.conf.default (Masahiro Yamada)
• firmware: arm_scmi: Harden shared memory access in fetch_notification (Cristian Marussi)
• firmware: arm_scmi: Harden shared memory access in fetch_response (Cristian Marussi)
• EDAC/highbank: Fix memory leak in highbank_mc_probe() (Miaoqian Lin)
• reset: uniphier-glue: Fix possible null-ptr-deref (Hui Tang)
• reset: uniphier-glue: Use reset_control_bulk API (Philipp Zabel)
• soc: imx8m: Fix incorrect check for of_clk_get_by_name() (Miaoqian Lin)
• arm64: dts: imx8mm-venice-gw7901: fix USB2 controller OC polarity (Tim Harvey)
• HID: intel_ish-hid: Add check for ishtp_dma_tx_map (Jiasheng Jiang)
• ARM: imx: add missing of_node_put() (Dario Binacchi)
• arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux (Adam Ford)
• ARM: dts: imx6qdl-gw560x: Remove incorrect ‘uart-has-rtscts’ (Fabio Estevam)
• ARM: dts: imx7d-pico: Use ‘clock-frequency’ (Fabio Estevam)
• ARM: dts: imx6ul-pico-dwarf: Use ‘clock-frequency’ (Fabio Estevam)
• arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property (Fabio Estevam)
• dmaengine: ti: k3-udma: Do conditional decrement of UDMA_CHAN_RT_PEER_BCNT_REG (Jayesh Choudhary)
• memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe() (Gaosheng Cui)
• memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe() (Gaosheng Cui)
• memory: tegra: Remove clients SID override programming (Ashish Mhetre)
• LTS version: v5.15.90 (Jack Vogel)
• io_uring/rw: remove leftover debug statement (Jens Axboe)
• io_uring/rw: ensure kiocb_end_write() is always called (Jens Axboe)
• io_uring: fix double poll leak on repolling (Pavel Begunkov)
• io_uring: Clean up a false-positive warning from GCC 9.3.0 (Alviro Iskandar Setiawan)
• mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Hugh Dickins)
• soc: qcom: apr: Make qcom,protection-domain optional again (Stephan Gerhold)
• Revert ‘wifi: mac80211: fix memory leak in ieee80211_if_add()’ (Eric Dumazet)
• block: mq-deadline: Rename deadline_is_seq_writes() (Damien Le Moal)
• net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() (Yang Yingliang)
• net/ulp: use consistent error code when blocking ULP (Paolo Abeni)
• io_uring/net: fix fast_iov assignment in io_setup_async_msg() (Stefan Metzmacher)
• io_uring: io_kiocb_update_pos() should not touch file for non -1 offset (Jens Axboe)
• tracing: Use alignof__(struct {type b;}) instead of offsetof() (Steven Rostedt (Google))
• x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN (YingChi Long)
• Revert ‘drm/amdgpu: make display pinning more flexible (v2)’ (Alex Deucher)
• efi: rt-wrapper: Add missing include (Ard Biesheuvel)
• arm64: efi: Execute runtime services from a dedicated stack (Ard Biesheuvel)
• fs/ntfs3: Fix attr_punch_hole() null pointer derenference (Alon Zahavi)
• drm/amdgpu: drop experimental flag on aldebaran (Alex Deucher)
• drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix (Joshua Ashton)
• drm/amd/display: Calculate output_color_space after pixel encoding adjustment (Joshua Ashton)
• drm/amd/display: Fix set scaling doesn’s work (hongao)
• drm/i915/display: Check source height is > 0 (Drew Davenport)
• drm/i915: re-disable RC6p on Sandy Bridge (Sasa Dragic)
• mei: me: add meteor lake point M DID (Alexander Usyskin)
• gsmi: fix null-deref in gsmi_get_variable (Khazhismel Kumykov)
• serial: atmel: fix incorrect baudrate setup (Tobias Schramm)
• serial: amba-pl011: fix high priority character transmission in rs486 mode (Lino Sanfilippo)
• dmaengine: idxd: Let probe fail when workqueue cannot be enabled (Reinette Chatre)
• dmaengine: tegra210-adma: fix global intr clear (Mohan Kumar)
• dmaengine: lgm: Move DT parsing after initialization (Peter Harliman Liem)
• serial: pch_uart: Pass correct sg to dma_unmap_sg() (Ilpo Jarvinen)
• dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation (Heiner Kallweit)
• dt-bindings: phy: g12a-usb2-phy: fix compatible string documentation (Heiner Kallweit)
• usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 (Juhyung Park)
• usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (Maciej zenczykowski)
• usb: gadget: g_webcam: Send color matching descriptor per frame (Daniel Scally)
• usb: typec: altmodes/displayport: Fix pin assignment calculation (Prashant Malani)
• usb: typec: altmodes/displayport: Add pin assignment helper (Prashant Malani)
• usb: typec: tcpm: Fix altmode re-registration causes sysfs create fail (ChiYuan Huang)
• usb: host: ehci-fsl: Fix module alias (Alexander Stein)
• usb: cdns3: remove fetched trb from cache before dequeuing (Pawel Laszczak)
• USB: serial: cp210x: add SCALANCE LPE-9000 device id (Michael Adler)
• USB: gadgetfs: Fix race between mounting and unmounting (Alan Stern)
• tty: fix possible null-ptr-defer in spk_ttyio_release (Gaosheng Cui)
• tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer (Krzysztof Kozlowski)
• staging: mt7621-dts: change some node hex addresses to lower case (Sergio Paracuellos)
• bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD (Paul Moore)
• riscv: dts: sifive: fu740: fix size of pcie 32bit memory (Ben Dooks)
• thunderbolt: Use correct function to calculate maximum USB3 link rate (Mika Westerberg)
• cifs: do not include page data when checking signature (Enzo Matsumiya)
• btrfs: fix race between quota rescan and disable leading to NULL pointer deref (Filipe Manana)
• btrfs: do not abort transaction on failure to write log tree when syncing log (Filipe Manana)
• mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting (Haibo Chen)
• mmc: sunxi-mmc: Fix clock refcount imbalance during unbind (Samuel Holland)
• ACPI: PRM: Check whether EFI runtime is available (Ard Biesheuvel)
• comedi: adv_pci1760: Fix PWM instruction handling (Ian Abbott)
• usb: core: hub: disable autosuspend for TI TUSB8041 (Flavio Suligoi)
• misc: fastrpc: Fix use-after-free race condition for maps (Ola Jeppsson)
• misc: fastrpc: Don’t remove map on creater_process and device_release (Abel Vesa)
• USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 (Greg Kroah-Hartman)
• staging: vchiq_arm: fix enum vchiq_status return types (Arnd Bergmann)
• USB: serial: option: add Quectel EM05CN modem (Duke Xin)
• USB: serial: option: add Quectel EM05CN (SG) modem (Duke Xin)
• USB: serial: option: add Quectel EC200U modem (Ali Mirghasemi)
• USB: serial: option: add Quectel EM05-G (RS) modem (Duke Xin)
• USB: serial: option: add Quectel EM05-G (CS) modem (Duke Xin)
• USB: serial: option: add Quectel EM05-G (GR) modem (Duke Xin)
• prlimit: do_prlimit needs to have a speculation check (Greg Kroah-Hartman)
• xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables (Mathias Nyman)
• usb: acpi: add helper to check port lpm capability using acpi _DSM (Mathias Nyman)
• xhci: Add a flag to disable USB3 lpm on a xhci root port level. (Mathias Nyman)
• xhci: Add update_hub_device override for PCI xHCI hosts (Mathias Nyman)
• xhci: Fix null pointer dereference when host dies (Mathias Nyman)
• usb: xhci: Check endpoint is valid before dereferencing it (Jimmy Hu)
• xhci-pci: set the dma max_seg_size (Ricardo Ribalda)
• io_uring/rw: defer fsnotify calls to task context (Jens Axboe)
• io_uring: do not recalculate ppos unnecessarily (Dylan Yudaken)
• io_uring: update kiocb->ki_pos at execution time (Dylan Yudaken)
• io_uring: remove duplicated calls to io_kiocb_ppos (Dylan Yudaken)
• io_uring: ensure that cached task references are always put on exit (Jens Axboe)
• io_uring: fix async accept on O_NONBLOCK sockets (Dylan Yudaken)
• io_uring: allow re-poll if we made progress (Jens Axboe)
• io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG) (Jens Axboe)
• io_uring: add flag for disabling provided buffer recycling (Jens Axboe)
• io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly (Jens Axboe)
• io_uring: improve send/recv error handling (Pavel Begunkov)
• io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups (Jens Axboe)
• eventfd: provide a eventfd_signal_mask() helper (Jens Axboe)
• eventpoll: add EPOLL_URING_WAKE poll wakeup flag (Jens Axboe)
• io_uring: don’t gate task_work run on TIF_NOTIFY_SIGNAL (Jens Axboe)
• hugetlb: unshare some PMDs when splitting VMAs (James Houghton)
• drm/amd: Delay removal of the firmware framebuffer (Sasha Levin)
• drm/amdgpu: disable runtime pm on several sienna cichlid cards(v2) (Guchun Chen)
• ALSA: hda/realtek: fix mute/micmute LEDs don’t work for a HP platform (Jeremy Szu)
• ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook (Andy Chi)
• efi: fix userspace infinite retry read efivars after EFI runtime services page fault (Ding Hui)
• nilfs2: fix general protection fault in nilfs_btree_insert() (Ryusuke Konishi)
• zonefs: Detect append writes at invalid locations (Damien Le Moal)
• Add exception protection processing for vd in axi_chan_handle_err function (Shawn.Shao)
• wifi: mac80211: sdata can be NULL during AMPDU start (Alexander Wetzel)
• wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices (Arend van Spriel)
• Bluetooth: hci_qca: Fix driver shutdown on closed serdev (Krzysztof Kozlowski)
• fbdev: omapfb: avoid stack overflow warning (Arnd Bergmann)
• perf/x86/rapl: Treat Tigerlake like Icelake (Chris Wilson)
• f2fs: let’s avoid panic if extent_tree is not created (Jaegeuk Kim)
• x86/asm: Fix an assembler warning with current binutils (Mikulas Patocka)
• btrfs: always report error in run_one_delayed_ref() (Qu Wenruo)
• RDMA/srp: Move large values to a new enum for gcc13 (Jiri Slaby (SUSE))
• r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down() (Chunhao Lin)
• net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats (Daniil Tatianin)
• vduse: Validate vq_num in vduse_validate_config() (Harshit Mogalapalli)
• virtio_pci: modify ENOENT to EINVAL (Angus Chen)
• tools/virtio: initialize spinlocks in vring_test.c (Ricardo Canuelo)
• selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID (Hao Sun)
• pNFS/filelayout: Fix coalescing test for single DS (Olga Kornievskaia)
• btrfs: fix trace event name typo for FLUSH_DELAYED_REFS (Naohiro Aota)
• LTS version: v5.15.89 (Jack Vogel)
• pinctrl: amd: Add dynamic debugging for active GPIOs (Mario Limonciello)
• Revert ‘usb: ulpi: defer ulpi_register on ulpi_read_id timeout’ (Ferry Toth)
• block: handle bio_split_to_limits() NULL return (Jens Axboe)
• io_uring/io-wq: only free worker if it was allocated for creation (Jens Axboe)
• io_uring/io-wq: free worker if task_work creation is canceled (Jens Axboe)
• efi: fix NULL-deref in init error path (Johan Hovold)
• arm64: cmpxchg_double*: hazard against entire exchange variable (Mark Rutland)
• arm64: atomics: remove LL/SC trampolines (Mark Rutland)
• arm64: atomics: format whitespace consistently (Mark Rutland)
• io_uring: lock overflowing for IOPOLL (Pavel Begunkov)
• KVM: x86: Do not return host topology information from KVM_GET_SUPPORTED_CPUID (Paolo Bonzini)
• Documentation: KVM: add API issues section (Paolo Bonzini)
• mm: Always release pages to the buddy allocator in memblock_free_late(). (Aaron Thompson)
• platform/surface: aggregator: Add missing call to ssam_request_sync_free() (Maximilian Luz)
• igc: Fix PPS delta between two synchronized end-points (Christopher S Hall)
• perf build: Properly guard libbpf includes (Ian Rogers)
• net/mlx5e: Don’t support encap rules with gbp option (Gavin Li)
• net/mlx5: Fix ptp max frequency adjustment range (Rahul Rameshbabu)
• net/sched: act_mpls: Fix warning during failed attribute validation (Ido Schimmel)
• tools/nolibc: fix the O_* fcntl/open macro definitions for riscv (Willy Tarreau)
• tools/nolibc: restore mips branch ordering in the _start block (Willy Tarreau)
• tools/nolibc: Remove .global _start from the entry point code (Ammar Faizi)
• tools/nolibc/arch: mark the _start symbol as weak (Willy Tarreau)
• tools/nolibc/arch: split arch-specific code into individual files (Willy Tarreau)
• tools/nolibc/types: split syscall-specific definitions into their own files (Willy Tarreau)
• tools/nolibc/std: move the standard type definitions to std.h (Willy Tarreau)
• tools/nolibc: use pselect6 on RISCV (Willy Tarreau)
• tools/nolibc: x86-64: Use mov 0,%eax instead of mov 0,%rax (Ammar Faizi)
• tools/nolibc: x86: Remove r8, r9 and r10 from the clobber list (Ammar Faizi)
• af_unix: selftest: Fix the size of the parameter to connect() (Mirsad Goran Todorovac)
• nfc: pn533: Wait for out_urb’s completion in pn533_usb_send_frame() (Minsuk Kang)
• hvc/xen: lock console list traversal (Roger Pau Monne)
• octeontx2-af: Fix LMAC config in cgx_lmac_rx_tx_enable (Angela Czubak)
• tipc: fix unexpected link reset due to discovery messages (Tung Nguyen)
• ALSA: usb-audio: Relax hw constraints for implicit fb sync (Takashi Iwai)
• ALSA: usb-audio: Make sure to stop endpoints before closing EPs (Takashi Iwai)
• ASoC: wm8904: fix wrong outputs volume after power reactivation (Emanuele Ghidoli)
• scsi: ufs: core: WLUN suspend SSU/enter hibern8 fail recovery (Peter Wang)
• scsi: ufs: Stop using the clock scaling lock in the error handler (Bart Van Assche)
• scsi: mpi3mr: Refer CONFIG_SCSI_MPI3MR in Makefile (Shin’ichiro Kawasaki)
• regulator: da9211: Use irq handler when ready (Ricardo Ribalda)
• x86/resctrl: Fix task CLOSID/RMID update race (Peter Newman)
• EDAC/device: Fix period calculation in edac_device_reset_delay_period() (Eliav Farber)
• x86/boot: Avoid using Intel mnemonics in AT&T syntax asm (Peter Zijlstra)
• powerpc/imc-pmu: Fix use of mutex in IRQs disabled section (Kajol Jain)
• netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. (Gavrilov Ilia)
• sched/core: Fix use-after-free bug in dup_user_cpus_ptr() (Waiman Long)
• iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe() (Christophe JAILLET)
• iommu/iova: Fix alloc iova overflows issue (Yunfei Wang)
• usb: ulpi: defer ulpi_register on ulpi_read_id timeout (Ferry Toth)
• bus: mhi: host: Fix race between channel preparation and M0 event (Qiang Yu)
• ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (Herbert Xu) [Orabug: 35005828] {CVE-2023-0394}
• ixgbe: fix pci device refcount leak (Yang Yingliang)
• platform/x86: sony-laptop: Don’t turn off 0x153 keyboard backlight during probe (Hans de Goede)
• dt-bindings: msm/dsi: Don’t require vcca-supply on 14nm PHY (Konrad Dybcio)
• dt-bindings: msm/dsi: Don’t require vdds-supply on 10nm PHY (Konrad Dybcio)
• drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer (Kuogee Hsieh)
• platform/x86: ideapad-laptop: Add Legion 5 15ARH05 DMI id to set_fn_lock_led_list[] (Hans de Goede)
• dt-bindings: msm: dsi-phy-28nm: Add missing qcom, dsi-phy-regulator-ldo-mode (Bryan O’Donoghue)
• dt-bindings: msm: dsi-controller-main: Fix description of core clock (Bryan O’Donoghue)
• dt-bindings: msm: dsi-controller-main: Fix power-domain constraint (Bryan O’Donoghue)
• drm/msm/adreno: Make adreno quirks not overwrite each other (Konrad Dybcio)
• dt-bindings: msm: dsi-controller-main: Fix operating-points-v2 constraint (Bryan O’Donoghue)
• platform/x86: dell-privacy: Fix SW_CAMERA_LENS_COVER reporting (Hans de Goede)
• platform/surface: aggregator: Ignore command messages not intended for us (Maximilian Luz)
• platform/x86: dell-privacy: Only register SW_CAMERA_LENS_COVER if present (Hans de Goede)
• cifs: Fix uninitialized memory read for smb311 posix symlink create (Volker Lendecke)
• net/mlx5e: Set action fwd flag when parsing tc action goto (Roi Dayan)
• drm/i915/gt: Reset twice (Chris Wilson)
• drm/virtio: Fix GEM handle creation UAF (Rob Clark)
• s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() (Heiko Carstens)
• s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops (Heiko Carstens)
• ASoC: qcom: lpass-cpu: Fix fallback SD line index handling (Brian Norris)
• s390/kexec: fix ipl report address for kdump (Alexander Egorenkov)
• perf auxtrace: Fix address filter duplicate symbol selection (Adrian Hunter)
• net: stmmac: add aux timestamps fifo clearance wait (Noor Azura Ahmad Tarmizi)
• docs: Fix the docs build with Sphinx 6.0 (Jonathan Corbet)
• efi: tpm: Avoid READ_ONCE() for accessing the event log (Ard Biesheuvel)
• selftests: kvm: Fix a compile error in selftests/kvm/rseq_test.c (Jinrong Liang)
• KVM: arm64: nvhe: Fix build with profile optimization (Denis Nikitin)
• KVM: arm64: Fix S1PTW handling on RO memslots (Marc Zyngier)
• ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360 13-aw0xxx (Luka Guzenko)
• ALSA: hda/realtek - Turn on power early (Yuchi Yang)
• ALSA: control-led: use strscpy in set_led_id() (Jaroslav Kysela)
• LTS version: v5.15.88 (Jack Vogel)
• ALSA: hda - Enable headset mic on another Dell laptop with ALC3254 (Chris Chiu)
• ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list (Adrian Chan)
• ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Clement Lecigne) [Orabug: 34983525] {CVE-2023-0266}
• net/ulp: prevent ULP without clone op from entering the LISTEN status (Paolo Abeni)
• net: sched: disallow noqueue for qdisc classes (Frederick Lawler) [Orabug: 35005790] {CVE-2022-47929}
• serial: fixup backport of ‘serial: Deassert Transmit Enable on probe in driver-specific way’ (Rasmus Villemoes)
• selftests/vm/pkeys: Add a regression test for setting PKRU through ptrace (Kyle Huey)
• x86/fpu: Emulate XRSTOR’s behavior if the xfeatures PKRU bit is not set (Kyle Huey)
• x86/fpu: Allow PKRU to be (once again) written by ptrace. (Kyle Huey)
• x86/fpu: Add a pkru argument to copy_uabi_to_xstate() (Kyle Huey)
• x86/fpu: Add a pkru argument to copy_uabi_from_kernel_to_xstate(). (Kyle Huey)
• x86/fpu: Take task_struct* in copy_sigframe_from_user_to_xstate() (Kyle Huey)
• parisc: Align parisc MADV_XXX constants with all other architectures (Helge Deller)
• LTS version: v5.15.87 (Jack Vogel)
• drm/mgag200: Fix PLL setup for G200_SE_A rev >=4 (Jocelyn Falempe)
• io_uring: Fix unsigned ‘res’ comparison with zero in io_fixup_rw_res() (Harshit Mogalapalli)
• efi: random: combine bootloader provided RNG seed with RNG protocol output (Ard Biesheuvel)
• mbcache: Avoid nesting of cache->c_list_lock under bit locks (Jan Kara)
• net: hns3: fix return value check bug of rx copybreak (Jie Wang)
• btrfs: make thaw time super block check to also verify checksum (Qu Wenruo)
• selftests: set the BUILD variable to absolute path (Muhammad Usama Anjum)
• ext4: don’t allow journal inode to have encrypt flag (Eric Biggers)
• mptcp: use proper req destructor for IPv6 (Matthieu Baerts)
• mptcp: dedicated request sock for subflow in v6 (Matthieu Baerts)
• Revert ‘ACPI: PM: Add support for upcoming AMD uPEP HID AMDI007’ (Mario Limonciello)
• ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob (William Liu)
• ksmbd: fix infinite loop in ksmbd_conn_handler_loop() (Namjae Jeon)
• hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (Linus Torvalds)
• hfs/hfsplus: use WARN_ON for sanity check (Arnd Bergmann)
• drm/i915/gvt: fix vgpu debugfs clean in remove (Zhenyu Wang)
• drm/i915/gvt: fix gvt debugfs destroy (Zhenyu Wang)
• riscv, kprobes: Stricter c.jr/c.jalr decoding (Bjorn Topel)
• riscv: uaccess: fix type of 0 variable on error in get_user() (Ben Dooks)
• thermal: int340x: Add missing attribute for data rate base (Srinivas Pandruvada)
• io_uring: fix CQ waiting timeout handling (Pavel Begunkov)
• block: don’t allow splitting of a REQ_NOWAIT bio (Jens Axboe)
• fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB (Paul Menzel)
• nfsd: fix handling of readdir in v4root vs. mount upcall timeout (Jeff Layton)
• x86/bugs: Flush IBP in ib_prctl_set() (Rodrigo Branco)
• x86/kexec: Fix double-free of elf header buffer (Takashi Iwai)
• btrfs: check superblock to ensure the fs was not modified at thaw time (Qu Wenruo)
• nvme: also return I/O command effects from nvme_command_effects (Christoph Hellwig)
• nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it (Christoph Hellwig)
• io_uring: check for valid register opcode earlier (Jens Axboe)
• nvme: fix multipath crash caused by flush request when blktrace is enabled (Yanjun Zhang)
• ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet (Hans de Goede)
• udf: Fix extension of the last extent in the file (Jan Kara)
• caif: fix memory leak in cfctrl_linkup_request() (Zhengchao Shao)
• drm/i915: unpin on error in intel_vgpu_shadow_mm_pin() (Dan Carpenter)
• perf stat: Fix handling of --for-each-cgroup with --bpf-counters to match non BPF mode (Namhyung Kim)
• usb: rndis_host: Secure rndis_query check against int overflow (Szymon Heidrich)
• octeontx2-pf: Fix lmtst ID used in aura free (Geetha sowjanya)
• drivers/net/bonding/bond_3ad: return when there’s no aggregator (Daniil Tatianin)
• fs/ntfs3: don’t hold ni_lock when calling truncate_setsize() (Tetsuo Handa)
• drm/imx: ipuv3-plane: Fix overlay plane width (Philipp Zabel)
• perf tools: Fix resources leak in perf_data__open_dir() (Miaoqian Lin)
• netfilter: ipset: Rework long task execution when adding/deleting entries (Jozsef Kadlecsik)
• netfilter: ipset: fix hash:net,port,net hang with /0 subnet (Jozsef Kadlecsik)
• net: sparx5: Fix reading of the MAC address (Horatiu Vultur)
• net: sched: cbq: dont intepret cls results when asked to drop (Jamal Hadi Salim) [Orabug: 34983582] {CVE-2023-23454}
• net: sched: atm: dont intepret cls results when asked to drop (Jamal Hadi Salim) [Orabug: 34983613] {CVE-2023-23455}
• gpio: sifive: Fix refcount leak in sifive_gpio_probe (Miaoqian Lin)
• ceph: switch to vfs_inode_has_locks() to fix file lock bug (Xiubo Li)
• filelock: new helper: vfs_inode_has_locks (Jeff Layton)
• drm/meson: Reduce the FIFO lines held when AFBC is not used (Carlo Caione)
• RDMA/mlx5: Fix validation of max_rd_atomic caps for DC (Maor Gottlieb)
• RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device (Shay Drory)
• net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe (Miaoqian Lin)
• net: ena: Update NUMA TPH hint register upon NUMA node update (David Arinzon)
• net: ena: Set default value for RX interrupt moderation (David Arinzon)
• net: ena: Fix rx_copybreak value update (David Arinzon)
• net: ena: Use bitmask to indicate packet redirection (David Arinzon)
• net: ena: Account for the number of processed bytes in XDP (David Arinzon)
• net: ena: Don’t register memory info on XDP exchange (David Arinzon)
• net: ena: Fix toeplitz initial hash value (David Arinzon)
• net: amd-xgbe: add missed tasklet_kill (Jiguang Xiao)
• net/mlx5e: Fix hw mtu initializing at XDP SQ allocation (Adham Faris)
• net/mlx5e: Always clear dest encap in neigh-update-del (Chris Mi)
• net/mlx5e: TC, Refactor mlx5e_tc_add_flow_mod_hdr() to get flow attr (Roi Dayan)
• net/mlx5e: IPoIB, Don’t allow CQE compression to be turned on by default (Dragos Tatulea)
• net/mlx5: Avoid recovery in probe flows (Shay Drory)
• net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path (Jiri Pirko)
• net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Moshe Shemesh)
• vdpa_sim: fix vringh initialization in vdpasim_queue_ready() (Stefano Garzarella)
• vhost: fix range used in translate_desc() (Stefano Garzarella)
• vringh: fix range used in iotlb_translate() (Stefano Garzarella)
• vhost/vsock: Fix error handling in vhost_vsock_init() (Yuan Can)
• vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() (ruanjinjie)
• nfc: Fix potential resource leaks (Miaoqian Lin)
• net: dsa: mv88e6xxx: depend on PTP conditionally (Johnny S. Lee)
• qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure (Daniil Tatianin)
• net: sched: fix memory leak in tcindex_set_parms (Hawkins Jiawei)
• net: hns3: fix VF promisc mode not update when mac table full (Jian Shen)
• net: hns3: fix miss L3E checking for rx packet (Jian Shen)
• net: hns3: extract macro to simplify ring stats update code (Peng Li)
• net: hns3: refactor hns3_nic_reuse_page() (Hao Chen)
• net: hns3: add interrupts re-initialization while doing VF FLR (Jie Wang)
• nfsd: shut down the NFSv4 state objects before the filecache (Jeff Layton)
• veth: Fix race with AF_XDP exposing old or uninitialized descriptors (Shawn Bohrer)
• netfilter: nf_tables: honor set timeout and garbage collection updates (Pablo Neira Ayuso)
• vmxnet3: correctly report csum_level for encapsulated packet (Ronak Doshi)
• netfilter: nf_tables: perform type checking for existing sets (Pablo Neira Ayuso)
• netfilter: nf_tables: add function to create set stateful expressions (Pablo Neira Ayuso)
• netfilter: nf_tables: consolidate set description (Pablo Neira Ayuso)
• drm/panfrost: Fix GEM handle creation ref-counting (Steven Price)
• bpf: pull before calling skb_postpull_rcsum() (Jakub Kicinski)
• btrfs: fix an error handling path in btrfs_defrag_leaves() (Sasha Levin)
• SUNRPC: ensure the matching upcall is in-flight upon downcall (minoura makoto)
• drm/i915/migrate: fix length calculation (Matthew Auld)
• drm/i915/migrate: fix offset calculation (Matthew Auld)
• drm/i915/migrate: don’t check the scratch page (Matthew Auld)
• ext4: fix deadlock due to mbcache entry corruption (Jan Kara)
• mbcache: automatically delete entries from cache on freeing (Jan Kara)
• ext4: correct inconsistent error msg in nojournal mode (Baokun Li)
• ext4: goto right label ‘failed_mount3a’ (Jason Yan)
• ravb: Fix ‘failed to switch device to config mode’ message during unbind (Biju Das)
• perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data (Masami Hiramatsu (Google))
• perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor (Masami Hiramatsu (Google))
• media: s5p-mfc: Fix in register read and write for H264 (Smitha T Murthy)
• media: s5p-mfc: Clear workbit to handle error condition (Smitha T Murthy)
• media: s5p-mfc: Fix to handle reference queue during finishing (Smitha T Murthy)
• x86/MCE/AMD: Clear DFR errors found in THR handler (Yazen Ghannam)
• x86/mce: Get rid of msr_ops (Borislav Petkov)
• btrfs: fix extent map use-after-free when handling missing device in read_one_chunk (void0red)
• btrfs: move missing device handling in a dedicate function (Nikolay Borisov)
• btrfs: replace strncpy() with strscpy() (Sasha Levin)
• phy: qcom-qmp-combo: fix out-of-bounds clock access (Sasha Levin)
• ARM: renumber bits related to _TIF_WORK_MASK (Jens Axboe)
• ext4: fix off-by-one errors in fast-commit block filling (Eric Biggers)
• ext4: fix unaligned memory access in ext4_fc_reserve_space() (Eric Biggers)
• ext4: add missing validation of fast-commit record lengths (Eric Biggers)
• ext4: don’t set up encryption key during jbd2 transaction (Eric Biggers)
• ext4: disable fast-commit of encrypted dir operations (Eric Biggers)
• ext4: fix potential out of bound read in ext4_fc_replay_scan() (Eric Biggers)
• ext4: factor out ext4_fc_get_tl() (Eric Biggers)
• ext4: introduce EXT4_FC_TAG_BASE_LEN helper (Eric Biggers)
• ext4: use ext4_debug() instead of jbd_debug() (Eric Biggers)
• ext4: remove unused enum EXT4_FC_COMMIT_FAILED (Eric Biggers)
• tracing: Fix issue of missing one synthetic field (Zheng Yejian)
• block: mq-deadline: Fix dd_finish_request() for zoned devices (Damien Le Moal)
• drm/amdgpu: make display pinning more flexible (v2) (Alex Deucher)
• drm/amdgpu: handle polaris10/11 overlap asics (v2) (Alex Deucher)
• ext4: allocate extended attribute value in vmalloc area (Ye Bin)
• ext4: avoid unaccounted block allocation when expanding inode (Jan Kara)
• ext4: initialize quota before expanding inode in setproject ioctl (Jan Kara)
• ext4: fix inode leak in ext4_xattr_inode_create() on an error path (Ye Bin)
• ext4: fix kernel BUG in ‘ext4_write_inline_data_end()’ (Ye Bin)
• ext4: avoid BUG_ON when creating xattrs (Jan Kara)
• ext4: fix error code return to user-space in ext4_get_branch() (Luis Henriques)
• ext4: fix corruption when online resizing a 1K bigalloc fs (Baokun Li)
• ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline (Eric Whitney)
• ext4: init quota for ‘old.inode’ in ‘ext4_rename’ (Ye Bin)
• ext4: fix uninititialized value in ‘ext4_evict_inode’ (Ye Bin)
• ext4: fix leaking uninitialized memory in fast-commit journal (Eric Biggers)
• ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (Baokun Li)
• ext4: check and assert if marking an no_delete evicting inode dirty (Zhang Yi)
• ext4: fix reserved cluster accounting in __es_remove_extent() (Ye Bin)
• ext4: fix bug_on in __es_tree_search caused by bad quota inode (Baokun Li)
• ext4: add helper to check quota inums (Baokun Li)
• ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (Baokun Li)
• ext4: fix undefined behavior in bit shift for ext4_check_flag_values (Gaosheng Cui)
• ext4: fix use-after-free in ext4_orphan_cleanup (Baokun Li)
• fs: ext4: initialize fsdata in pagecache_write() (Alexander Potapenko)
• ext4: remove trailing newline from ext4_msg() message (Luis Henriques)
• ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop (Baokun Li)
• ext4: silence the warning when evicting inode with dioread_nolock (Zhang Yi)
• drm/ingenic: Fix missing platform_driver_unregister() call in ingenic_drm_init() (Yuan Can)
• drm/i915/dsi: fix VBT send packet port selection for dual link DSI (Mikko Kovanen)
• drm/vmwgfx: Validate the box size for the snooped cursor (Zack Rusin)
• drm/connector: send hotplug uevent on connector cleanup (Simon Ser)
• device_cgroup: Roll back to original exceptions after copy failure (Wang Weiyang)
• parisc: led: Fix potential null-ptr-deref in start_task() (Shang XiaoJing)
• remoteproc: core: Do pm_relax when in RPROC_OFFLINE state (Maria Yu)
• iommu/amd: Fix ivrs_acpihid cmdline parsing code (Kim Phillips)
• phy: qcom-qmp-combo: fix sc8180x reset (Johan Hovold)
• driver core: Fix bus_type.match() error handling in __driver_attach() (Isaac J. Manjarres)
• crypto: ccp - Add support for TEE for PCI ID 0x14CA (Mario Limonciello)
• crypto: n2 - add missing hash statesize (Corentin Labbe)
• riscv: mm: notify remote harts about mmu cache updates (Sergey Matyukevich)
• riscv: stacktrace: Fixup ftrace_graph_ret_addr retp argument (Guo Ren)
• PCI/sysfs: Fix double free in error path (Sascha Hauer)
• PCI: Fix pci_device_is_present() for VFs by checking PF (Michael S. Tsirkin)
• ipmi: fix use after free in _ipmi_destroy_user() (Dan Carpenter)
• ima: Fix a potential NULL pointer access in ima_restore_measurement_list (Huaxin Lu)
• mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type() (Alexander Sverdlin)
• ipmi: fix long wait in unload when IPMI disconnect (Zhang Yuchen)
• ipu3-imgu: Fix NULL pointer dereference in imgu_subdev_set_selection() (Maximilian Luz)
• ASoC: jz4740-i2s: Handle independent FIFO flush bits (Aidan MacDonald)
• wifi: wilc1000: sdio: fix module autoloading (Michael Walle)
• efi: Add iMac Pro 2017 to uefi skip cert quirk (Aditya Garg)
• md/bitmap: Fix bitmap chunk size overflow issues (Florian-Ewald Mueller)
• block: mq-deadline: Do not break sequential write streams to zoned HDDs (Damien Le Moal)
• rtc: ds1347: fix value written to century register (Ian Abbott)
• cifs: fix missing display of three mount options (Steve French)
• cifs: fix confusing debug message (Paulo Alcantara)
• media: dvb-core: Fix UAF due to refcount races at releasing (Takashi Iwai) [Orabug: 34820628] {CVE-2022-41218}
• media: dvb-core: Fix double free in dvb_register_device() (Keita Suzuki)
• ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod (Nick Desaulniers)
• staging: media: tegra-video: fix device_node use after free (Luca Ceresoli)
• staging: media: tegra-video: fix chan->mipi value on error (Luca Ceresoli)
• tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line (Yang Jihong)
• tracing/probes: Handle system names with hyphens (Steven Rostedt (Google))
• tracing/hist: Fix wrong return value in parse_action_params() (Zheng Yejian)
• tracing: Fix complicated dependency of CONFIG_TRACER_MAX_TRACE (Masami Hiramatsu (Google))
• tracing: Fix race where eprobes can be called before the event (Steven Rostedt (Google))
• x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK (Masami Hiramatsu (Google))
• x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK (Masami Hiramatsu (Google))
• ftrace/x86: Add back ftrace_expected for ftrace bug reports (Steven Rostedt (Google))
• x86/microcode/intel: Do not retry microcode reloading on the APs (Ashok Raj)
• KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 (Sean Christopherson)
• KVM: nVMX: Inject #GP, not #UD, if ‘generic’ VMXON CR0/CR4 check fails (Sean Christopherson)
• KVM: VMX: Resume guest immediately when injecting #GP on ECREATE (Sean Christopherson)
• of/kexec: Fix reading 32-bit ‘linux,initrd-{start,end}’ values (Rob Herring)
• perf/core: Call LSM hook after copying perf_event_attr (Namhyung Kim)
• tracing/hist: Fix out-of-bound write on ‘action_data.var_ref_idx’ (Zheng Yejian)
• dm cache: set needs_check flag after aborting metadata (Mike Snitzer)
• dm cache: Fix UAF in destroy() (Luo Meng)
• dm clone: Fix UAF in clone_dtr() (Luo Meng)
• dm integrity: Fix UAF in dm_integrity_dtr() (Luo Meng)
• dm thin: Fix UAF in run_timer_softirq() (Luo Meng)
• dm thin: resume even if in FAIL mode (Luo Meng)
• dm thin: Use last transaction’s pmd->root when commit failed (Zhihao Cheng)
• dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (Zhihao Cheng)
• dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort (Mike Snitzer)
• mptcp: remove MPTCP ‘ifdef’ in TCP SYN cookies (Matthieu Baerts)
• mptcp: mark ops structures as ro_after_init (Florian Westphal)
• fs: dlm: retry accept() until -EAGAIN or error returns (Alexander Aring)
• fs: dlm: fix sock release if listen fails (Alexander Aring)
• ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude laptops (Chris Chiu)
• ALSA: patch_realtek: Fix Dell Inspiron Plus 16 (Philipp Jungkamp)
• cpufreq: Init completion before kobject_init_and_add() (Yongqiang Liu)
• PM/devfreq: governor: Add a private governor_data for governor (Kant Fan)
• selftests: Use optional USERCFLAGS and USERLDFLAGS (Mickael Salaun)
• arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength (Krzysztof Kozlowski)
• ARM: ux500: do not directly dereference __iomem (Jason A. Donenfeld)
• btrfs: fix resolving backrefs for inline extent followed by prealloc (Boris Burkov)
• mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K (Wenchao Chen)
• arm64: dts: qcom: sdm845-db845c: correct SPI2 pins drive strength (Krzysztof Kozlowski)
• perf/x86/intel/uncore: Clear attr_update properly (Alexander Antonov)
• perf/x86/intel/uncore: Disable I/O stacks to PMU mapping on ICX-D (Alexander Antonov)
• jbd2: use the correct print format (Bixuan Cui)
• ktest.pl minconfig: Unset configs instead of just removing them (Steven Rostedt)
• kest.pl: Fix grub2 menu handling for rebooting (Steven Rostedt)
• soc: qcom: Select REMAP_MMIO for LLCC driver (Manivannan Sadhasivam)
• media: stv0288: use explicitly signed char (Jason A. Donenfeld)
• net/af_packet: make sure to pull mac header (Eric Dumazet)
• net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO (Hangbin Liu)
• rcu-tasks: Simplify trc_read_check_handler() atomic operations (Paul E. McKenney)
• ASoC/SoundWire: dai: expand ‘stream’ concept beyond SoundWire (Pierre-Louis Bossart)
• ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio (Pierre-Louis Bossart)
• kcsan: Instrument memcpy/memset/memmove with newer Clang (Marco Elver)
• SUNRPC: Don’t leak netobj memory when gss_read_proxy_verf() fails (Chuck Lever)
• tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo)
• tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo)
• tpm: acpi: Call acpi_put_table() to fix memory leak (Hanjun Guo)
• mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING (Deren Wu)
• f2fs: allow to read node block after shutdown (Jaegeuk Kim)
• f2fs: should put a page when checking the summary info (Pavel Machek)
• mm, compaction: fix fast_isolate_around() to stay within boundaries (NARIBAYASHI Akira)
• md: fix a crash in mempool_free (Mikulas Patocka)
• mfd: mt6360: Add bounds checking in Regmap read/write call-backs (ChiYuan Huang)
• pnode: terminate at peers of source (Christian Brauner)
• ALSA: line6: fix stack overflow in line6_midi_transmit (Artem Egorkine)
• ALSA: line6: correct midi status byte when receiving data from podxt (Artem Egorkine)
• ovl: Use ovl mounter’s fsuid and fsgid in ovl_link() (Zhang Tianci)
• binfmt: Fix error return code in load_elf_fdpic_binary() (Wang Yufen)
• hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount (Aditya Garg)
• pstore/zone: Use GFP_ATOMIC to allocate zone buffer (Qiujun Huang)
• pstore: Properly assign mem_type property (Luca Stefani)
• HID: plantronics: Additional PIDs for double volume key presses quirk (Terry Junge)
• HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint (Jose Exposito)
• powerpc/rtas: avoid scheduling in rtas_os_term() (Nathan Lynch)
• powerpc/rtas: avoid device tree lookups in rtas_os_term() (Nathan Lynch)
• objtool: Fix SEGFAULT (Christophe Leroy)
• fs/ntfs3: Fix slab-out-of-bounds in r_page (Yin Xiujiang)
• fs/ntfs3: Delete duplicate condition in ntfs_read_mft() (Dan Carpenter)
• fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_fill_super() (Tetsuo Handa)
• fs/ntfs3: Use __GFP_NOWARN allocation at wnd_init() (Tetsuo Handa)
• fs/ntfs3: Validate index root when initialize NTFS security (Edward Lo)
• soundwire: dmi-quirks: add quirk variant for LAPBC710 NUC15 (Pierre-Louis Bossart)
• fs/ntfs3: Fix slab-out-of-bounds read in run_unpack (Hawkins Jiawei)
• fs/ntfs3: Validate resident attribute name (Edward Lo)
• fs/ntfs3: Validate buffer length while parsing index (Edward Lo)
• fs/ntfs3: Validate attribute name offset (Edward Lo)
• fs/ntfs3: Add null pointer check for inode operations (Edward Lo)
• fs/ntfs3: Fix memory leak on ntfs_fill_super() error path (Shigeru Yoshida)
• fs/ntfs3: Add null pointer check to attr_load_runs_vcn (Edward Lo)
• fs/ntfs3: Validate data run offset (Edward Lo)
• fs/ntfs3: Add overflow check for attribute size (edward lo)
• fs/ntfs3: Validate BOOT record_size (edward lo)
• nvmet: don’t defer passthrough commands with trivial effects to the workqueue (Christoph Hellwig)
• nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition (Christoph Hellwig)
• ata: ahci: Fix PCS quirk application for suspend (Adam Vodopjan)
• block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq (Yu Kuai)
• ACPI: resource: do IRQ override on Lenovo 14ALC7 (Adrian Freund)
• ACPI: resource: do IRQ override on XMG Core 15 (Erik Schumacher)
• ACPI: resource: do IRQ override on LENOVO IdeaPad (Jiri Slaby (SUSE))
• ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA (Tamim Khan)
• nvme-pci: fix page size checks (Keith Busch)
• nvme-pci: fix mempool alloc size (Keith Busch)
• nvme-pci: fix doorbell buffer value endianness (Klaus Jensen)
• cifs: fix oops during encryption (Paulo Alcantara)
• usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init (Miaoqian Lin)
• IB/mlx4: Implement backend callback for ‘ib_get_vector_irqn’ (Gerd Rausch) [Orabug: 34276618]
• net/rds: Split send & receive vectors again (Gerd Rausch) [Orabug: 34276609]
• drivers: base: cacheinfo: export symbol ‘get_cpu_cacheinfo’ (Gerd Rausch) [Orabug: 34276609]
• net/rds: Bring tasklets back for better latency (Gerd Rausch) [Orabug: 34276240]
• net/rds: Throttle check for CQ CPU affinity (Gerd Rausch) [Orabug: 34276240]
• net/rds: Follow the observed CQ CPU affinity (Gerd Rausch) [Orabug: 34276240]
• net/rds: Add ‘preferred_cpu’ option to ‘rds_rdma.ko’ (Gerd Rausch) [Orabug: 34276240]
• net/mlx5: Add new verb ‘ib_get_vector_irqn’ (Gerd Rausch) [Orabug: 34276240]
• net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work (Gerd Rausch) [Orabug: 34276240]
• net/rds: Make workers use the designated CPU (Gerd Rausch) [Orabug: 34276240]
• net/rds: Put more CPU cores to work (Gerd Rausch) [Orabug: 34276240]
• net/rds: Get rid of tasklets (Gerd Rausch) [Orabug: 34276240]
• net/rds: Use the same vector for send & receive (Gerd Rausch) [Orabug: 34276240]
• net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid (Gerd Rausch) [Orabug: 34276240]
• net/rds: Allocate pages on HCA NUMA nodeid (Gerd Rausch) [Orabug: 34276240]
• uek-rpm: [act|cls]_bpf should be part of core (Alan Maguire) [Orabug: 34551630]
• net/rds: Do not RESET_ALT_CONN if conn drops with DR_IB_DISCONNECTED_EVENT (Sharath Srinivasan) [Orabug: 34864406]
• rds: ib: Keep IB MRs on clean_list unless we are tearing down the pool (Hakon Bugge) [Orabug: 34987233]
• rds: ib: Add FRWR related statistics counters (Hakon Bugge) [Orabug: 34987233]
• scsi: megaraid_sas: Skip syncing the RAID map on older controllers (Martin K. Petersen) [Orabug: 35028425]
• iommu/amd: Don’t block updates to GATag if guest mode is already on (Joao Martins) [Orabug: 34988288]
• IB/core: Make GID table entry (gid_idx) available immediately (Konrad Rzeszutek Wilk) [Orabug: 35015836]
• iommu/amd: Disable AVIC on certain systems BIOS (Joao Martins) [Orabug: 35018580]
• xfs: fix incorrect i_nlink caused by inode racing (Long Li) [Orabug: 35021004]