Public bug reported: SRU Justification
Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2024-01-22 from git://git.kernel.org/ locking/ww_mutex/test: Fix potential workqueue corruption perf/core: Bail out early if the request AUX area is out of bound clocksource/drivers/timer-imx-gpt: Fix potential memory leak clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware workqueue: Provide one lock class key per work_on_cpu() callsite x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size wifi: mac80211_hwsim: fix clang-specific fortify warning wifi: mac80211: don't return unset power in ieee80211_get_tx_power() atl1c: Work around the DMA RX overflow issue bpf: Detect IP == ksym.end as part of BPF program wifi: ath9k: fix clang-specific fortify warnings wifi: ath10k: fix clang-specific fortify warning net: annotate data-races around sk->sk_tx_queue_mapping net: annotate data-races around sk->sk_dst_pending_confirm wifi: ath10k: Don't touch the CE interrupt registers after power up Bluetooth: btusb: Add date->evt_skb is NULL check Bluetooth: Fix double free in hci_conn_cleanup platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e drm/komeda: drop all currently held locks if deadlock happens drm/amdkfd: Fix a race condition of vram buffer unref in svm code drm/amd/display: use full update for clip size increase of large plane source string.h: add array-wrappers for (v)memdup_user() kernel: kexec: copy user-array safely kernel: watch_queue: copy user-array safely drm: vmwgfx_surface.c: copy user-array safely drm/msm/dp: skip validity check for DP CTS EDID checksum drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga drm/amdgpu: Fix potential null pointer derefernce drm/panel: fix a possible null pointer dereference drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference drm/amdgpu/vkms: fix a possible null pointer dereference drm/panel: st7703: Pick different reset sequence drm/amdkfd: Fix shift out-of-bounds issue drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL arm64: dts: ls208xa: use a pseudo-bus to constrain usb dma size selftests/efivarfs: create-read: fix a resource leak ASoC: soc-card: Add storage for PCI SSID crypto: pcrypt - Fix hungtask for PADATA_RESET RDMA/hfi1: Use FIELD_GET() to extract Link Width scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool fs/jfs: Add check for negative db_l2nbperpage fs/jfs: Add validity check for db_maxag and db_agpref jfs: fix array-index-out-of-bounds in dbFindLeaf jfs: fix array-index-out-of-bounds in diAlloc HID: lenovo: Detect quirk-free fw on cptkbd and stop applying workaround ARM: 9320/1: fix stack depot IRQ stack filter ALSA: hda: Fix possible null-ptr-deref when assigning a stream PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields atm: iphase: Do PCI error checks on own line scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() PCI: Use FIELD_GET() to extract Link Width PCI: Extract ATS disabling to a helper function PCI: Disable ATS for specific Intel IPU E2000 devices misc: pci_endpoint_test: Add Device ID for R-Car S4-8 PCIe controller PCI: Use FIELD_GET() in Sapphire RX 5600 XT Pulse quirk HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W exfat: support handle zero-size directory tty: vcc: Add check for kstrdup() in vcc_probe() usb: gadget: f_ncm: Always set current gadget in ncm_bind() 9p/trans_fd: Annotate data-racy writes to file::f_flags 9p: v9fs_listxattr: fix %s null argument warning i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler i2c: sun6i-p2wi: Prevent potential division by zero virtio-blk: fix implicit overflow on virtio_max_dma_size i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data. media: gspca: cpia1: shift-out-of-bounds in set_flicker media: vivid: avoid integer overflow gfs2: ignore negated quota changes gfs2: fix an oops in gfs2_permission media: cobalt: Use FIELD_GET() to extract Link Width media: ccs: Fix driver quirk struct documentation media: imon: fix access to invalid resource for the second interface drm/amd/display: Avoid NULL dereference of timing generator kgdb: Flush console before entering kgdb on panic i2c: dev: copy userspace array safely ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings drm/qxl: prevent memory leak drm/amdgpu: fix software pci_unplug on some chips pwm: Fix double shift bug wifi: iwlwifi: Use FW rate for non-data frames tracing: Reuse logic from perf's get_recursion_context() tracing/perf: Add interrupt_context_level() helper sched/core: Optimize in_task() and in_interrupt() a bit media: cadence: csi2rx: Unregister v4l2 async notifier media: cec: meson: always include meson sub-directory in Makefile SUNRPC: ECONNRESET might require a rebind SUNRPC: Add an IS_ERR() check back to where it was NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO SUNRPC: Fix RPC client cleaned up the freed pipefs dentries gfs2: Silence "suspicious RCU usage in gfs2_permission" warning mptcp: diag: switch to context structure mptcp: listen diag dump support net: inet: Remove count from inet_listen_hashbucket net: inet: Open code inet_hash2 and inet_unhash2 net: inet: Retire port only listening_hash net: set SOCK_RCU_FREE before inserting socket into hashtable ipvlan: add ipvlan_route_v6_outbound() helper tty: Fix uninit-value access in ppp_sync_receive() net: hns3: fix add VLAN fail issue net: hns3: refine the definition for struct hclge_pf_to_vf_msg net: hns3: add byte order conversion for PF to VF mailbox message net: hns3: add barrier in vf mailbox reply process net: hns3: fix incorrect capability bit display for copper port net: hns3: fix variable may not initialized problem in hns3_init_mac_addr() net: hns3: fix VF reset fail issue net: hns3: fix VF wrong speed and duplex issue tipc: Fix kernel-infoleak due to uninitialized TLV value ppp: limit MRU to 64K xen/events: fix delayed eoi list handling ptp: annotate data-race around q->head and q->tail bonding: stop the device in bond_setup_by_slave() net: ethernet: cortina: Fix max RX frame define net: ethernet: cortina: Handle large frames net: ethernet: cortina: Fix MTU max setting af_unix: fix use-after-free in unix_stream_read_actor() netfilter: nf_conntrack_bridge: initialize err to 0 netfilter: nf_tables: use the correct get/put helpers netfilter: nf_tables: add and use BE register load-store helpers netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() net: stmmac: fix rx budget limit check net/mlx5e: Remove incorrect addition of action fwd flag net/mlx5e: Move mod hdr allocation to a single place net/mlx5e: Refactor mod header management API net/mlx5e: Fix pedit endianness net/mlx5e: Reduce the size of icosq_str net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors macvlan: Don't propagate promisc change to lower dev in passthru tools/power/turbostat: Fix a knl bug tools/power/turbostat: Enable the C-state Pre-wake printing cifs: spnego: add ';' in HOST_KEY_LEN cifs: fix check of rc in function generate_smb3signingkey xfs: refactor buffer cancellation table allocation xfs: don't leak xfs_buf_cancel structures when recovery fails xfs: convert buf_cancel_table allocation to kmalloc_array xfs: use invalidate_lock to check the state of mmap_lock xfs: prevent a UAF when log IO errors race with unmount xfs: flush inode gc workqueue before clearing agi bucket xfs: fix use-after-free in xattr node block inactivation xfs: don't leak memory when attr fork loading fails xfs: fix intermittent hang during quotacheck xfs: add missing cmap->br_state = XFS_EXT_NORM update xfs: Fix false ENOSPC when performing direct write on a delalloc extent in cow fork xfs: fix inode reservation space for removing transaction xfs: avoid a UAF when log intent item recovery fails xfs: fix exception caused by unexpected illegal bestcount in leaf dir xfs: fix memory leak in xfs_errortag_init xfs: Fix unreferenced object reported by kmemleak in xfs_sysfs_init() i915/perf: Fix NULL deref bugs with drm_dbg() calls media: venus: hfi: add checks to perform sanity on queue pointers powerpc/perf: Fix disabling BHRB and instruction sampling randstruct: Fix gcc-plugin performance mode to stay in group bpf: Fix check_stack_write_fixed_off() to correctly spill imm bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END scsi: mpt3sas: Fix loop logic scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers scsi: qla2xxx: Fix system crash due to bad pointer access crypto: x86/sha - load modules based on CPU features x86/cpu/hygon: Fix the CPU topology evaluation for real KVM: x86: hyper-v: Don't auto-enable stimer on write from user-space KVM: x86: Ignore MSR_AMD64_TW_CFG access audit: don't take task_lock() in audit_exe_compare() code path audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() tty/sysrq: replace smp_processor_id() with get_cpu() hvc/xen: fix console unplug hvc/xen: fix error path in xen_hvc_init() to always register frontend driver hvc/xen: fix event channel handling for secondary consoles PCI/sysfs: Protect driver's D3cold preference from user space watchdog: move softlockup_panic back to early_param ACPI: resource: Do IRQ override on TongFang GMxXGxx arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer parisc/pdc: Add width field to struct pdc_model clk: socfpga: Fix undefined behavior bug in struct stratix10_clock_data clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks clk: qcom: ipq6018: drop the CLK_SET_RATE_PARENT flag from PLL clocks mmc: vub300: fix an error code mmc: sdhci_am654: fix start loop index for TAP value parsing PCI/ASPM: Fix L1 substate handling in aspm_attr_store_common() PCI: exynos: Don't discard .remove() callback wifi: wilc1000: use vmm_table as array in wilc struct svcrdma: Drop connection after an RDMA Read error rcu/tree: Defer setting of jiffies during stall reset arm64: dts: qcom: ipq6018: Fix hwlock index for SMEM PM: hibernate: Use __get_safe_page() rather than touching the list PM: hibernate: Clean up sync_read handling in snapshot_write_next() rcu: kmemleak: Ignore kmemleak false positives when RCU-freeing objects btrfs: don't arbitrarily slow down delalloc if we're committing firmware: qcom_scm: use 64-bit calling convention only when client is 64-bit ACPI: FPDT: properly handle invalid FPDT subtables ima: annotate iint mutex to avoid lockdep false positive warnings ima: detect changes to the backing overlay file wifi: ath11k: fix temperature event locking wifi: ath11k: fix dfs radar event locking wifi: ath11k: fix htt pktlog locking mmc: meson-gx: Remove setting of CMD_CFG_ERROR genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware KEYS: trusted: Rollback init_trusted() consistently PCI: keystone: Don't discard .remove() callback PCI: keystone: Don't discard .probe() callback netfilter: nf_tables: split async and sync catchall in two functions selftests/resctrl: Remove duplicate feature check from CMT test selftests/resctrl: Reduce failures due to outliers in MBA/MBM tests ASoC: codecs: wsa-macro: fix uninitialized stack variables with name prefix jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev quota: explicitly forbid quota files from being encrypted kernel/reboot: emergency_restart: Set correct system_state i2c: core: Run atomic i2c xfer when !preemptible tracing: Have the user copy of synthetic event address use correct context mcb: fix error handling for different scenarios when parsing dmaengine: stm32-mdma: correct desc prep when channel running s390/cmma: fix detection of DAT pages mm/cma: use nth_page() in place of direct struct page manipulation mm/memory_hotplug: use pfn math in place of direct struct page manipulation mtd: cfi_cmdset_0001: Byte swap OTP info i3c: master: cdns: Fix reading status register i3c: master: svc: fix race condition in ibi work thread i3c: master: svc: fix wrong data return when IBI happen during start frame i3c: master: svc: fix ibi may not return mandatory data byte i3c: master: svc: fix check wrong status register in irq handler i3c: master: svc: fix SDA keep low when polling IBIWON timeout happen parisc: Prevent booting 64-bit kernels on PA1.x machines parisc/pgtable: Do not drop upper 5 address bits of physical address xhci: Enable RPM on controllers that support low-power states ALSA: info: Fix potential deadlock at disconnection ALSA: hda/realtek - Add Dell ALC295 to pin fall back table ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC serial: meson: Use platform_get_irq() to get the interrupt tty: serial: meson: fix hard LOCKUP on crtscts mode regmap: Ensure range selector registers are updated after cache sync cpufreq: stats: Fix buffer overflow detection in trans_stats() Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559 bluetooth: Add device 0bda:887b to device tables bluetooth: Add device 13d3:3571 to device tables Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE ksmbd: fix slab out of bounds write in smb_inherit_dacl() arm64: dts: qcom: ipq6018: switch TCSR mutex to MMIO arm64: dts: qcom: ipq6018: Fix tcsr_mutex register size powerpc/pseries/ddw: simplify enable_ddw() Revert ncsi: Propagate carrier gain/loss events to the NCSI controller Revert "i2c: pxa: move to generic GPIO recovery" lsm: fix default return value for vm_enough_memory lsm: fix default return value for inode_getsecctx sbsa_gwdt: Calculate timeout with 64-bit math i2c: designware: Disable TX_EMPTY irq while waiting for block length byte s390/ap: fix AP bus crash on early config change callback invocation net: ethtool: Fix documentation of ethtool_sprintf() net: dsa: lan9303: consequently nested-lock physical MDIO net: phylink: initialize carrier state at creation i2c: i801: fix potential race in i801_block_transaction_byte_by_byte f2fs: avoid format-overflow warning media: lirc: drop trailing space from scancode transmit media: sharp: fix sharp encoding media: venus: hfi_parser: Add check to keep the number of codecs within range media: venus: hfi: fix the check to handle session buffer requirement media: venus: hfi: add checks to handle capabilities from firmware media: ccs: Correctly initialise try compose rectangle nfsd: fix file memleak on client_opens_release riscv: kprobes: allow writing to x0 mmc: sdhci-pci-gli: A workaround to allow GL9750 to enter ASPM L1.2 mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors r8169: fix network lost after resume on DASH systems mmc: sdhci-pci-gli: GL9750: Mask the replay timer timeout of AER media: qcom: camss: Fix pm_domain_on sequence in probe media: qcom: camss: Fix vfe_get() error jump media: qcom: camss: Fix VFE-17x vfe_disable_output() media: qcom: camss: Fix missing vfe_lite clocks check Revert "net: r8169: Disable multicast filter for RTL8168H and RTL8107E" ext4: apply umask if ACL support is disabled ext4: correct offset of gdb backup in non meta_bg group to update_backups ext4: correct return value of ext4_convert_meta_bg ext4: correct the start block of counting reserved clusters ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks ext4: add missed brelse in update_backups drm/amd/pm: Handle non-terminated overdrive commands. drm/i915: Fix potential spectre vulnerability drm/amdgpu: don't use ATRM for external devices drm/amdgpu: fix error handling in amdgpu_bo_list_get() drm/amd/display: Change the DMCUB mailbox memory location from FB to inbox io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid powerpc/powernv: Fix fortify source warnings in opal-prd.c tracing: Have trace_event_file have ref counters Input: xpad - add VID for Turtle Beach controllers driver core: Release all resources during unbind before updating device links Linux 5.15.140 UBUNTU: Upstream stable to v5.15.140 ** Affects: linux (Ubuntu) Importance: Undecided Status: Confirmed ** Affects: linux (Ubuntu Jammy) Importance: Undecided Status: New ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Jammy) Importance: Undecided Status: New ** Summary changed: - Jammy update: upstream stable patchset 2024-01-22 + Jammy update: v5.15.140 upstream stable release ** Description changed: + SRU Justification - SRU Justification + Impact: + The upstream process for stable tree updates is quite similar + in scope to the Ubuntu SRU process, e.g., each patch has to + demonstrably fix a bug, and each patch is vetted by upstream + by originating either directly from a mainline/stable Linux tree or + a minimally backported form of that patch. The following upstream + stable patches should be included in the Ubuntu kernel: - Impact: - The upstream process for stable tree updates is quite similar - in scope to the Ubuntu SRU process, e.g., each patch has to - demonstrably fix a bug, and each patch is vetted by upstream - by originating either directly from a mainline/stable Linux tree or - a minimally backported form of that patch. The following upstream - stable patches should be included in the Ubuntu kernel: + upstream stable patchset 2024-01-22 + from git://git.kernel.org/ - upstream stable patchset 2024-01-22 - from git://git.kernel.org/ + locking/ww_mutex/test: Fix potential workqueue corruption + perf/core: Bail out early if the request AUX area is out of bound + clocksource/drivers/timer-imx-gpt: Fix potential memory leak + clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware + workqueue: Provide one lock class key per work_on_cpu() callsite + x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size + wifi: mac80211_hwsim: fix clang-specific fortify warning + wifi: mac80211: don't return unset power in ieee80211_get_tx_power() + atl1c: Work around the DMA RX overflow issue + bpf: Detect IP == ksym.end as part of BPF program + wifi: ath9k: fix clang-specific fortify warnings + wifi: ath10k: fix clang-specific fortify warning + net: annotate data-races around sk->sk_tx_queue_mapping + net: annotate data-races around sk->sk_dst_pending_confirm + wifi: ath10k: Don't touch the CE interrupt registers after power up + Bluetooth: btusb: Add date->evt_skb is NULL check + Bluetooth: Fix double free in hci_conn_cleanup + platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e + drm/komeda: drop all currently held locks if deadlock happens + drm/amdkfd: Fix a race condition of vram buffer unref in svm code + drm/amd/display: use full update for clip size increase of large plane source + string.h: add array-wrappers for (v)memdup_user() + kernel: kexec: copy user-array safely + kernel: watch_queue: copy user-array safely + drm: vmwgfx_surface.c: copy user-array safely + drm/msm/dp: skip validity check for DP CTS EDID checksum + drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 + drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga + drm/amdgpu: Fix potential null pointer derefernce + drm/panel: fix a possible null pointer dereference + drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference + drm/amdgpu/vkms: fix a possible null pointer dereference + drm/panel: st7703: Pick different reset sequence + drm/amdkfd: Fix shift out-of-bounds issue + drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL + arm64: dts: ls208xa: use a pseudo-bus to constrain usb dma size + selftests/efivarfs: create-read: fix a resource leak + ASoC: soc-card: Add storage for PCI SSID + crypto: pcrypt - Fix hungtask for PADATA_RESET + RDMA/hfi1: Use FIELD_GET() to extract Link Width + scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs + scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool + fs/jfs: Add check for negative db_l2nbperpage + fs/jfs: Add validity check for db_maxag and db_agpref + jfs: fix array-index-out-of-bounds in dbFindLeaf + jfs: fix array-index-out-of-bounds in diAlloc + HID: lenovo: Detect quirk-free fw on cptkbd and stop applying workaround + ARM: 9320/1: fix stack depot IRQ stack filter + ALSA: hda: Fix possible null-ptr-deref when assigning a stream + PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields + atm: iphase: Do PCI error checks on own line + scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() + PCI: Use FIELD_GET() to extract Link Width + PCI: Extract ATS disabling to a helper function + PCI: Disable ATS for specific Intel IPU E2000 devices + misc: pci_endpoint_test: Add Device ID for R-Car S4-8 PCIe controller + PCI: Use FIELD_GET() in Sapphire RX 5600 XT Pulse quirk + HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W + exfat: support handle zero-size directory + tty: vcc: Add check for kstrdup() in vcc_probe() + usb: gadget: f_ncm: Always set current gadget in ncm_bind() + 9p/trans_fd: Annotate data-racy writes to file::f_flags + 9p: v9fs_listxattr: fix %s null argument warning + i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler + i2c: sun6i-p2wi: Prevent potential division by zero + virtio-blk: fix implicit overflow on virtio_max_dma_size + i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data. + media: gspca: cpia1: shift-out-of-bounds in set_flicker + media: vivid: avoid integer overflow + gfs2: ignore negated quota changes + gfs2: fix an oops in gfs2_permission + media: cobalt: Use FIELD_GET() to extract Link Width + media: ccs: Fix driver quirk struct documentation + media: imon: fix access to invalid resource for the second interface + drm/amd/display: Avoid NULL dereference of timing generator + kgdb: Flush console before entering kgdb on panic + i2c: dev: copy userspace array safely + ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings + drm/qxl: prevent memory leak + drm/amdgpu: fix software pci_unplug on some chips + pwm: Fix double shift bug + wifi: iwlwifi: Use FW rate for non-data frames + tracing: Reuse logic from perf's get_recursion_context() + tracing/perf: Add interrupt_context_level() helper + sched/core: Optimize in_task() and in_interrupt() a bit + media: cadence: csi2rx: Unregister v4l2 async notifier + media: cec: meson: always include meson sub-directory in Makefile + SUNRPC: ECONNRESET might require a rebind + SUNRPC: Add an IS_ERR() check back to where it was + NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO + SUNRPC: Fix RPC client cleaned up the freed pipefs dentries + gfs2: Silence "suspicious RCU usage in gfs2_permission" warning + mptcp: diag: switch to context structure + mptcp: listen diag dump support + net: inet: Remove count from inet_listen_hashbucket + net: inet: Open code inet_hash2 and inet_unhash2 + net: inet: Retire port only listening_hash + net: set SOCK_RCU_FREE before inserting socket into hashtable + ipvlan: add ipvlan_route_v6_outbound() helper + tty: Fix uninit-value access in ppp_sync_receive() + net: hns3: fix add VLAN fail issue + net: hns3: refine the definition for struct hclge_pf_to_vf_msg + net: hns3: add byte order conversion for PF to VF mailbox message + net: hns3: add barrier in vf mailbox reply process + net: hns3: fix incorrect capability bit display for copper port + net: hns3: fix variable may not initialized problem in hns3_init_mac_addr() + net: hns3: fix VF reset fail issue + net: hns3: fix VF wrong speed and duplex issue + tipc: Fix kernel-infoleak due to uninitialized TLV value + ppp: limit MRU to 64K + xen/events: fix delayed eoi list handling + ptp: annotate data-race around q->head and q->tail + bonding: stop the device in bond_setup_by_slave() + net: ethernet: cortina: Fix max RX frame define + net: ethernet: cortina: Handle large frames + net: ethernet: cortina: Fix MTU max setting + af_unix: fix use-after-free in unix_stream_read_actor() + netfilter: nf_conntrack_bridge: initialize err to 0 + netfilter: nf_tables: use the correct get/put helpers + netfilter: nf_tables: add and use BE register load-store helpers + netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() + net: stmmac: fix rx budget limit check + net/mlx5e: Remove incorrect addition of action fwd flag + net/mlx5e: Move mod hdr allocation to a single place + net/mlx5e: Refactor mod header management API + net/mlx5e: Fix pedit endianness + net/mlx5e: Reduce the size of icosq_str + net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors + macvlan: Don't propagate promisc change to lower dev in passthru + tools/power/turbostat: Fix a knl bug + tools/power/turbostat: Enable the C-state Pre-wake printing + cifs: spnego: add ';' in HOST_KEY_LEN + cifs: fix check of rc in function generate_smb3signingkey + xfs: refactor buffer cancellation table allocation + xfs: don't leak xfs_buf_cancel structures when recovery fails + xfs: convert buf_cancel_table allocation to kmalloc_array + xfs: use invalidate_lock to check the state of mmap_lock + xfs: prevent a UAF when log IO errors race with unmount + xfs: flush inode gc workqueue before clearing agi bucket + xfs: fix use-after-free in xattr node block inactivation + xfs: don't leak memory when attr fork loading fails + xfs: fix intermittent hang during quotacheck + xfs: add missing cmap->br_state = XFS_EXT_NORM update + xfs: Fix false ENOSPC when performing direct write on a delalloc extent in cow fork + xfs: fix inode reservation space for removing transaction + xfs: avoid a UAF when log intent item recovery fails + xfs: fix exception caused by unexpected illegal bestcount in leaf dir + xfs: fix memory leak in xfs_errortag_init + xfs: Fix unreferenced object reported by kmemleak in xfs_sysfs_init() + i915/perf: Fix NULL deref bugs with drm_dbg() calls + media: venus: hfi: add checks to perform sanity on queue pointers + powerpc/perf: Fix disabling BHRB and instruction sampling + randstruct: Fix gcc-plugin performance mode to stay in group + bpf: Fix check_stack_write_fixed_off() to correctly spill imm + bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END + scsi: mpt3sas: Fix loop logic + scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers + scsi: qla2xxx: Fix system crash due to bad pointer access + crypto: x86/sha - load modules based on CPU features + x86/cpu/hygon: Fix the CPU topology evaluation for real + KVM: x86: hyper-v: Don't auto-enable stimer on write from user-space + KVM: x86: Ignore MSR_AMD64_TW_CFG access + audit: don't take task_lock() in audit_exe_compare() code path + audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() + tty/sysrq: replace smp_processor_id() with get_cpu() + hvc/xen: fix console unplug + hvc/xen: fix error path in xen_hvc_init() to always register frontend driver + hvc/xen: fix event channel handling for secondary consoles + PCI/sysfs: Protect driver's D3cold preference from user space + watchdog: move softlockup_panic back to early_param + ACPI: resource: Do IRQ override on TongFang GMxXGxx + arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer + parisc/pdc: Add width field to struct pdc_model + clk: socfpga: Fix undefined behavior bug in struct stratix10_clock_data + clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks + clk: qcom: ipq6018: drop the CLK_SET_RATE_PARENT flag from PLL clocks + mmc: vub300: fix an error code + mmc: sdhci_am654: fix start loop index for TAP value parsing + PCI/ASPM: Fix L1 substate handling in aspm_attr_store_common() + PCI: exynos: Don't discard .remove() callback + wifi: wilc1000: use vmm_table as array in wilc struct + svcrdma: Drop connection after an RDMA Read error + rcu/tree: Defer setting of jiffies during stall reset + arm64: dts: qcom: ipq6018: Fix hwlock index for SMEM + PM: hibernate: Use __get_safe_page() rather than touching the list + PM: hibernate: Clean up sync_read handling in snapshot_write_next() + rcu: kmemleak: Ignore kmemleak false positives when RCU-freeing objects + btrfs: don't arbitrarily slow down delalloc if we're committing + firmware: qcom_scm: use 64-bit calling convention only when client is 64-bit + ACPI: FPDT: properly handle invalid FPDT subtables + ima: annotate iint mutex to avoid lockdep false positive warnings + ima: detect changes to the backing overlay file + wifi: ath11k: fix temperature event locking + wifi: ath11k: fix dfs radar event locking + wifi: ath11k: fix htt pktlog locking + mmc: meson-gx: Remove setting of CMD_CFG_ERROR + genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware + KEYS: trusted: Rollback init_trusted() consistently + PCI: keystone: Don't discard .remove() callback + PCI: keystone: Don't discard .probe() callback + netfilter: nf_tables: split async and sync catchall in two functions + selftests/resctrl: Remove duplicate feature check from CMT test + selftests/resctrl: Reduce failures due to outliers in MBA/MBM tests + ASoC: codecs: wsa-macro: fix uninitialized stack variables with name prefix + jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev + quota: explicitly forbid quota files from being encrypted + kernel/reboot: emergency_restart: Set correct system_state + i2c: core: Run atomic i2c xfer when !preemptible + tracing: Have the user copy of synthetic event address use correct context + mcb: fix error handling for different scenarios when parsing + dmaengine: stm32-mdma: correct desc prep when channel running + s390/cmma: fix detection of DAT pages + mm/cma: use nth_page() in place of direct struct page manipulation + mm/memory_hotplug: use pfn math in place of direct struct page manipulation + mtd: cfi_cmdset_0001: Byte swap OTP info + i3c: master: cdns: Fix reading status register + i3c: master: svc: fix race condition in ibi work thread + i3c: master: svc: fix wrong data return when IBI happen during start frame + i3c: master: svc: fix ibi may not return mandatory data byte + i3c: master: svc: fix check wrong status register in irq handler + i3c: master: svc: fix SDA keep low when polling IBIWON timeout happen + parisc: Prevent booting 64-bit kernels on PA1.x machines + parisc/pgtable: Do not drop upper 5 address bits of physical address + xhci: Enable RPM on controllers that support low-power states + ALSA: info: Fix potential deadlock at disconnection + ALSA: hda/realtek - Add Dell ALC295 to pin fall back table + ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC + serial: meson: Use platform_get_irq() to get the interrupt + tty: serial: meson: fix hard LOCKUP on crtscts mode + regmap: Ensure range selector registers are updated after cache sync + cpufreq: stats: Fix buffer overflow detection in trans_stats() + Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559 + bluetooth: Add device 0bda:887b to device tables + bluetooth: Add device 13d3:3571 to device tables + Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables + Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE + ksmbd: fix slab out of bounds write in smb_inherit_dacl() + arm64: dts: qcom: ipq6018: switch TCSR mutex to MMIO + arm64: dts: qcom: ipq6018: Fix tcsr_mutex register size + powerpc/pseries/ddw: simplify enable_ddw() + Revert ncsi: Propagate carrier gain/loss events to the NCSI controller + Revert "i2c: pxa: move to generic GPIO recovery" + lsm: fix default return value for vm_enough_memory + lsm: fix default return value for inode_getsecctx + sbsa_gwdt: Calculate timeout with 64-bit math + i2c: designware: Disable TX_EMPTY irq while waiting for block length byte + s390/ap: fix AP bus crash on early config change callback invocation + net: ethtool: Fix documentation of ethtool_sprintf() + net: dsa: lan9303: consequently nested-lock physical MDIO + net: phylink: initialize carrier state at creation + i2c: i801: fix potential race in i801_block_transaction_byte_by_byte + f2fs: avoid format-overflow warning + media: lirc: drop trailing space from scancode transmit + media: sharp: fix sharp encoding + media: venus: hfi_parser: Add check to keep the number of codecs within range + media: venus: hfi: fix the check to handle session buffer requirement + media: venus: hfi: add checks to handle capabilities from firmware + media: ccs: Correctly initialise try compose rectangle + nfsd: fix file memleak on client_opens_release + riscv: kprobes: allow writing to x0 + mmc: sdhci-pci-gli: A workaround to allow GL9750 to enter ASPM L1.2 + mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors + r8169: fix network lost after resume on DASH systems + mmc: sdhci-pci-gli: GL9750: Mask the replay timer timeout of AER + media: qcom: camss: Fix pm_domain_on sequence in probe + media: qcom: camss: Fix vfe_get() error jump + media: qcom: camss: Fix VFE-17x vfe_disable_output() + media: qcom: camss: Fix missing vfe_lite clocks check + Revert "net: r8169: Disable multicast filter for RTL8168H and RTL8107E" + ext4: apply umask if ACL support is disabled + ext4: correct offset of gdb backup in non meta_bg group to update_backups + ext4: correct return value of ext4_convert_meta_bg + ext4: correct the start block of counting reserved clusters + ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks + ext4: add missed brelse in update_backups + drm/amd/pm: Handle non-terminated overdrive commands. + drm/i915: Fix potential spectre vulnerability + drm/amdgpu: don't use ATRM for external devices + drm/amdgpu: fix error handling in amdgpu_bo_list_get() + drm/amd/display: Change the DMCUB mailbox memory location from FB to inbox + io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid + powerpc/powernv: Fix fortify source warnings in opal-prd.c + tracing: Have trace_event_file have ref counters + Input: xpad - add VID for Turtle Beach controllers + driver core: Release all resources during unbind before updating device links + Linux 5.15.140 + UBUNTU: Upstream stable to v5.15.140 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/2050038 Title: Jammy update: v5.15.140 upstream stable release Status in linux package in Ubuntu: Confirmed Status in linux source package in Jammy: New Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2024-01-22 from git://git.kernel.org/ locking/ww_mutex/test: Fix potential workqueue corruption perf/core: Bail out early if the request AUX area is out of bound clocksource/drivers/timer-imx-gpt: Fix potential memory leak clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware workqueue: Provide one lock class key per work_on_cpu() callsite x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size wifi: mac80211_hwsim: fix clang-specific fortify warning wifi: mac80211: don't return unset power in ieee80211_get_tx_power() atl1c: Work around the DMA RX overflow issue bpf: Detect IP == ksym.end as part of BPF program wifi: ath9k: fix clang-specific fortify warnings wifi: ath10k: fix clang-specific fortify warning net: annotate data-races around sk->sk_tx_queue_mapping net: annotate data-races around sk->sk_dst_pending_confirm wifi: ath10k: Don't touch the CE interrupt registers after power up Bluetooth: btusb: Add date->evt_skb is NULL check Bluetooth: Fix double free in hci_conn_cleanup platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e drm/komeda: drop all currently held locks if deadlock happens drm/amdkfd: Fix a race condition of vram buffer unref in svm code drm/amd/display: use full update for clip size increase of large plane source string.h: add array-wrappers for (v)memdup_user() kernel: kexec: copy user-array safely kernel: watch_queue: copy user-array safely drm: vmwgfx_surface.c: copy user-array safely drm/msm/dp: skip validity check for DP CTS EDID checksum drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga drm/amdgpu: Fix potential null pointer derefernce drm/panel: fix a possible null pointer dereference drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference drm/amdgpu/vkms: fix a possible null pointer dereference drm/panel: st7703: Pick different reset sequence drm/amdkfd: Fix shift out-of-bounds issue drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL arm64: dts: ls208xa: use a pseudo-bus to constrain usb dma size selftests/efivarfs: create-read: fix a resource leak ASoC: soc-card: Add storage for PCI SSID crypto: pcrypt - Fix hungtask for PADATA_RESET RDMA/hfi1: Use FIELD_GET() to extract Link Width scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool fs/jfs: Add check for negative db_l2nbperpage fs/jfs: Add validity check for db_maxag and db_agpref jfs: fix array-index-out-of-bounds in dbFindLeaf jfs: fix array-index-out-of-bounds in diAlloc HID: lenovo: Detect quirk-free fw on cptkbd and stop applying workaround ARM: 9320/1: fix stack depot IRQ stack filter ALSA: hda: Fix possible null-ptr-deref when assigning a stream PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields atm: iphase: Do PCI error checks on own line scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() PCI: Use FIELD_GET() to extract Link Width PCI: Extract ATS disabling to a helper function PCI: Disable ATS for specific Intel IPU E2000 devices misc: pci_endpoint_test: Add Device ID for R-Car S4-8 PCIe controller PCI: Use FIELD_GET() in Sapphire RX 5600 XT Pulse quirk HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W exfat: support handle zero-size directory tty: vcc: Add check for kstrdup() in vcc_probe() usb: gadget: f_ncm: Always set current gadget in ncm_bind() 9p/trans_fd: Annotate data-racy writes to file::f_flags 9p: v9fs_listxattr: fix %s null argument warning i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler i2c: sun6i-p2wi: Prevent potential division by zero virtio-blk: fix implicit overflow on virtio_max_dma_size i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data. media: gspca: cpia1: shift-out-of-bounds in set_flicker media: vivid: avoid integer overflow gfs2: ignore negated quota changes gfs2: fix an oops in gfs2_permission media: cobalt: Use FIELD_GET() to extract Link Width media: ccs: Fix driver quirk struct documentation media: imon: fix access to invalid resource for the second interface drm/amd/display: Avoid NULL dereference of timing generator kgdb: Flush console before entering kgdb on panic i2c: dev: copy userspace array safely ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings drm/qxl: prevent memory leak drm/amdgpu: fix software pci_unplug on some chips pwm: Fix double shift bug wifi: iwlwifi: Use FW rate for non-data frames tracing: Reuse logic from perf's get_recursion_context() tracing/perf: Add interrupt_context_level() helper sched/core: Optimize in_task() and in_interrupt() a bit media: cadence: csi2rx: Unregister v4l2 async notifier media: cec: meson: always include meson sub-directory in Makefile SUNRPC: ECONNRESET might require a rebind SUNRPC: Add an IS_ERR() check back to where it was NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO SUNRPC: Fix RPC client cleaned up the freed pipefs dentries gfs2: Silence "suspicious RCU usage in gfs2_permission" warning mptcp: diag: switch to context structure mptcp: listen diag dump support net: inet: Remove count from inet_listen_hashbucket net: inet: Open code inet_hash2 and inet_unhash2 net: inet: Retire port only listening_hash net: set SOCK_RCU_FREE before inserting socket into hashtable ipvlan: add ipvlan_route_v6_outbound() helper tty: Fix uninit-value access in ppp_sync_receive() net: hns3: fix add VLAN fail issue net: hns3: refine the definition for struct hclge_pf_to_vf_msg net: hns3: add byte order conversion for PF to VF mailbox message net: hns3: add barrier in vf mailbox reply process net: hns3: fix incorrect capability bit display for copper port net: hns3: fix variable may not initialized problem in hns3_init_mac_addr() net: hns3: fix VF reset fail issue net: hns3: fix VF wrong speed and duplex issue tipc: Fix kernel-infoleak due to uninitialized TLV value ppp: limit MRU to 64K xen/events: fix delayed eoi list handling ptp: annotate data-race around q->head and q->tail bonding: stop the device in bond_setup_by_slave() net: ethernet: cortina: Fix max RX frame define net: ethernet: cortina: Handle large frames net: ethernet: cortina: Fix MTU max setting af_unix: fix use-after-free in unix_stream_read_actor() netfilter: nf_conntrack_bridge: initialize err to 0 netfilter: nf_tables: use the correct get/put helpers netfilter: nf_tables: add and use BE register load-store helpers netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() net: stmmac: fix rx budget limit check net/mlx5e: Remove incorrect addition of action fwd flag net/mlx5e: Move mod hdr allocation to a single place net/mlx5e: Refactor mod header management API net/mlx5e: Fix pedit endianness net/mlx5e: Reduce the size of icosq_str net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors macvlan: Don't propagate promisc change to lower dev in passthru tools/power/turbostat: Fix a knl bug tools/power/turbostat: Enable the C-state Pre-wake printing cifs: spnego: add ';' in HOST_KEY_LEN cifs: fix check of rc in function generate_smb3signingkey xfs: refactor buffer cancellation table allocation xfs: don't leak xfs_buf_cancel structures when recovery fails xfs: convert buf_cancel_table allocation to kmalloc_array xfs: use invalidate_lock to check the state of mmap_lock xfs: prevent a UAF when log IO errors race with unmount xfs: flush inode gc workqueue before clearing agi bucket xfs: fix use-after-free in xattr node block inactivation xfs: don't leak memory when attr fork loading fails xfs: fix intermittent hang during quotacheck xfs: add missing cmap->br_state = XFS_EXT_NORM update xfs: Fix false ENOSPC when performing direct write on a delalloc extent in cow fork xfs: fix inode reservation space for removing transaction xfs: avoid a UAF when log intent item recovery fails xfs: fix exception caused by unexpected illegal bestcount in leaf dir xfs: fix memory leak in xfs_errortag_init xfs: Fix unreferenced object reported by kmemleak in xfs_sysfs_init() i915/perf: Fix NULL deref bugs with drm_dbg() calls media: venus: hfi: add checks to perform sanity on queue pointers powerpc/perf: Fix disabling BHRB and instruction sampling randstruct: Fix gcc-plugin performance mode to stay in group bpf: Fix check_stack_write_fixed_off() to correctly spill imm bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END scsi: mpt3sas: Fix loop logic scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers scsi: qla2xxx: Fix system crash due to bad pointer access crypto: x86/sha - load modules based on CPU features x86/cpu/hygon: Fix the CPU topology evaluation for real KVM: x86: hyper-v: Don't auto-enable stimer on write from user-space KVM: x86: Ignore MSR_AMD64_TW_CFG access audit: don't take task_lock() in audit_exe_compare() code path audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() tty/sysrq: replace smp_processor_id() with get_cpu() hvc/xen: fix console unplug hvc/xen: fix error path in xen_hvc_init() to always register frontend driver hvc/xen: fix event channel handling for secondary consoles PCI/sysfs: Protect driver's D3cold preference from user space watchdog: move softlockup_panic back to early_param ACPI: resource: Do IRQ override on TongFang GMxXGxx arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer parisc/pdc: Add width field to struct pdc_model clk: socfpga: Fix undefined behavior bug in struct stratix10_clock_data clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks clk: qcom: ipq6018: drop the CLK_SET_RATE_PARENT flag from PLL clocks mmc: vub300: fix an error code mmc: sdhci_am654: fix start loop index for TAP value parsing PCI/ASPM: Fix L1 substate handling in aspm_attr_store_common() PCI: exynos: Don't discard .remove() callback wifi: wilc1000: use vmm_table as array in wilc struct svcrdma: Drop connection after an RDMA Read error rcu/tree: Defer setting of jiffies during stall reset arm64: dts: qcom: ipq6018: Fix hwlock index for SMEM PM: hibernate: Use __get_safe_page() rather than touching the list PM: hibernate: Clean up sync_read handling in snapshot_write_next() rcu: kmemleak: Ignore kmemleak false positives when RCU-freeing objects btrfs: don't arbitrarily slow down delalloc if we're committing firmware: qcom_scm: use 64-bit calling convention only when client is 64-bit ACPI: FPDT: properly handle invalid FPDT subtables ima: annotate iint mutex to avoid lockdep false positive warnings ima: detect changes to the backing overlay file wifi: ath11k: fix temperature event locking wifi: ath11k: fix dfs radar event locking wifi: ath11k: fix htt pktlog locking mmc: meson-gx: Remove setting of CMD_CFG_ERROR genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware KEYS: trusted: Rollback init_trusted() consistently PCI: keystone: Don't discard .remove() callback PCI: keystone: Don't discard .probe() callback netfilter: nf_tables: split async and sync catchall in two functions selftests/resctrl: Remove duplicate feature check from CMT test selftests/resctrl: Reduce failures due to outliers in MBA/MBM tests ASoC: codecs: wsa-macro: fix uninitialized stack variables with name prefix jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev quota: explicitly forbid quota files from being encrypted kernel/reboot: emergency_restart: Set correct system_state i2c: core: Run atomic i2c xfer when !preemptible tracing: Have the user copy of synthetic event address use correct context mcb: fix error handling for different scenarios when parsing dmaengine: stm32-mdma: correct desc prep when channel running s390/cmma: fix detection of DAT pages mm/cma: use nth_page() in place of direct struct page manipulation mm/memory_hotplug: use pfn math in place of direct struct page manipulation mtd: cfi_cmdset_0001: Byte swap OTP info i3c: master: cdns: Fix reading status register i3c: master: svc: fix race condition in ibi work thread i3c: master: svc: fix wrong data return when IBI happen during start frame i3c: master: svc: fix ibi may not return mandatory data byte i3c: master: svc: fix check wrong status register in irq handler i3c: master: svc: fix SDA keep low when polling IBIWON timeout happen parisc: Prevent booting 64-bit kernels on PA1.x machines parisc/pgtable: Do not drop upper 5 address bits of physical address xhci: Enable RPM on controllers that support low-power states ALSA: info: Fix potential deadlock at disconnection ALSA: hda/realtek - Add Dell ALC295 to pin fall back table ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC serial: meson: Use platform_get_irq() to get the interrupt tty: serial: meson: fix hard LOCKUP on crtscts mode regmap: Ensure range selector registers are updated after cache sync cpufreq: stats: Fix buffer overflow detection in trans_stats() Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559 bluetooth: Add device 0bda:887b to device tables bluetooth: Add device 13d3:3571 to device tables Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE ksmbd: fix slab out of bounds write in smb_inherit_dacl() arm64: dts: qcom: ipq6018: switch TCSR mutex to MMIO arm64: dts: qcom: ipq6018: Fix tcsr_mutex register size powerpc/pseries/ddw: simplify enable_ddw() Revert ncsi: Propagate carrier gain/loss events to the NCSI controller Revert "i2c: pxa: move to generic GPIO recovery" lsm: fix default return value for vm_enough_memory lsm: fix default return value for inode_getsecctx sbsa_gwdt: Calculate timeout with 64-bit math i2c: designware: Disable TX_EMPTY irq while waiting for block length byte s390/ap: fix AP bus crash on early config change callback invocation net: ethtool: Fix documentation of ethtool_sprintf() net: dsa: lan9303: consequently nested-lock physical MDIO net: phylink: initialize carrier state at creation i2c: i801: fix potential race in i801_block_transaction_byte_by_byte f2fs: avoid format-overflow warning media: lirc: drop trailing space from scancode transmit media: sharp: fix sharp encoding media: venus: hfi_parser: Add check to keep the number of codecs within range media: venus: hfi: fix the check to handle session buffer requirement media: venus: hfi: add checks to handle capabilities from firmware media: ccs: Correctly initialise try compose rectangle nfsd: fix file memleak on client_opens_release riscv: kprobes: allow writing to x0 mmc: sdhci-pci-gli: A workaround to allow GL9750 to enter ASPM L1.2 mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors r8169: fix network lost after resume on DASH systems mmc: sdhci-pci-gli: GL9750: Mask the replay timer timeout of AER media: qcom: camss: Fix pm_domain_on sequence in probe media: qcom: camss: Fix vfe_get() error jump media: qcom: camss: Fix VFE-17x vfe_disable_output() media: qcom: camss: Fix missing vfe_lite clocks check Revert "net: r8169: Disable multicast filter for RTL8168H and RTL8107E" ext4: apply umask if ACL support is disabled ext4: correct offset of gdb backup in non meta_bg group to update_backups ext4: correct return value of ext4_convert_meta_bg ext4: correct the start block of counting reserved clusters ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks ext4: add missed brelse in update_backups drm/amd/pm: Handle non-terminated overdrive commands. drm/i915: Fix potential spectre vulnerability drm/amdgpu: don't use ATRM for external devices drm/amdgpu: fix error handling in amdgpu_bo_list_get() drm/amd/display: Change the DMCUB mailbox memory location from FB to inbox io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid powerpc/powernv: Fix fortify source warnings in opal-prd.c tracing: Have trace_event_file have ref counters Input: xpad - add VID for Turtle Beach controllers driver core: Release all resources during unbind before updating device links Linux 5.15.140 UBUNTU: Upstream stable to v5.15.140 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2050038/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp