Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.148 upstream stable release
from git://git.kernel.org/
f2fs: explicitly null-terminate the xattr list
pinctrl: lochnagar: Don't build on MIPS
ALSA: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro
mptcp: fix uninit-value in mptcp_incoming_options
wifi: cfg80211: lock wiphy mutex for rfkill poll
debugfs: fix automount d_fsdata usage
drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
nvme-core: check for too small lba shift
ASoC: wm8974: Correct boost mixer inputs
ASoC: Intel: Skylake: Fix mem leak in few functions
ASoC: nau8822: Fix incorrect type in assignment and cast to restricted __be16
ASoC: Intel: Skylake: mem leak in skl register function
ASoC: cs43130: Fix the position of const qualifier
ASoC: cs43130: Fix incorrect frame delay configuration
ASoC: rt5650: add mutex to avoid the jack detection failure
nouveau/tu102: flush all pdbs on vmm flush
net/tg3: fix race condition in tg3_reset_task()
ASoC: da7219: Support low DC impedance headset
ASoC: ops: add correct range check for limiting volume
nvme: introduce helper function to get ctrl state
drm/amdgpu: Add NULL checks for function pointers
drm/exynos: fix a potential error pointer dereference
drm/exynos: fix a wrong error checking
hwmon: (corsair-psu) Fix probe when built-in
clk: rockchip: rk3128: Fix HCLK_OTG gate register
jbd2: correct the printing of write_flags in jbd2_write_superblock()
drm/crtc: Fix uninit-value bug in drm_mode_setcrtc
neighbour: Don't let neigh_forced_gc() disable preemption for long
platform/x86: intel-vbtn: Fix missing tablet-mode-switch events
jbd2: fix soft lockup in journal_finish_inode_data_buffers()
tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing
tracing: Add size check when printing trace_marker output
stmmac: dwmac-loongson: drop useless check for compatible fallback
MIPS: dts: loongson: drop incorrect dwmac fallback compatible
tracing: Fix uaf issue when open the hist or hist_debug file
ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI
reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning
Input: atkbd - skip ATKBD_CMD_GETID in translated mode
Input: i8042 - add nomux quirk for Acer P459-G2-M
s390/scm: fix virtual vs physical address confusion
ARC: fix spare error
wifi: iwlwifi: pcie: avoid a NULL pointer dereference
Input: xpad - add Razer Wolverine V2 support
ASoC: Intel: bytcr_rt5640: Add quirk for the Medion Lifetab S10346
i2c: rk3x: fix potential spinlock recursion on poll
net: qrtr: ns: Return 0 if server port is not present
ARM: sun9i: smp: fix return code check of of_property_match_string
drm/crtc: fix uninitialized variable use
ACPI: resource: Add another DMI match for the TongFang GMxXGxx
Revert "ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek"
bpf: Add --skip_encoding_btf_inconsistent_proto, --btf_gen_optimized to pahole
flags for v1.25
kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list
Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
binder: use EPOLLERR from eventpoll.h
binder: fix use-after-free in shinker's callback
binder: fix trivial typo of binder_free_buf_locked()
binder: fix comment on binder_alloc_new_buf() return value
uio: Fix use-after-free in uio_open
parport: parport_serial: Add Brainboxes BAR details
parport: parport_serial: Add Brainboxes device IDs and geometry
leds: ledtrig-tty: Free allocated ttyname buffer on deactivate
PCI: Add ACS quirk for more Zhaoxin Root Ports
coresight: etm4x: Fix width of CCITMIN field
x86/lib: Fix overflow when counting digits
EDAC/thunderx: Fix possible out-of-bounds string access
powerpc: Mark .opd section read-only
powerpc/toc: Future proof kernel toc
powerpc: remove checks for binutils older than 2.25
powerpc: add crtsavres.o to always-y instead of extra-y
powerpc/44x: select I2C for CURRITUCK
powerpc/pseries/memhp: Fix access beyond end of drmem array
selftests/powerpc: Fix error handling in FPU/VMX preemption tests
powerpc/powernv: Add a null pointer check to scom_debug_init_one()
powerpc/powernv: Add a null pointer check in opal_event_init()
powerpc/powernv: Add a null pointer check in opal_powercap_init()
powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
spi: spi-zynqmp-gqspi: fix driver kconfig dependencies
mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response
ACPI: video: check for error while searching for backlight device parent
ACPI: LPIT: Avoid u32 multiplication overflow
of: property: define of_property_read_u{8,16,32,64}_array() unconditionally
of: Add of_property_present() helper
cpufreq: Use of_property_present() for testing DT property presence
cpufreq: scmi: process the result of devm_of_clk_add_hw_provider()
calipso: fix memory leak in netlbl_calipso_add_pass()
efivarfs: force RO when remounting if SetVariable is not supported
spi: sh-msiof: Enforce fixed DTDL for R-Car H3
ACPI: LPSS: Fix the fractional clock divider flags
ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the error
kunit: debugfs: Fix unchecked dereference in debugfs_print_results()
mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket
crypto: virtio - Handle dataq logic with tasklet
crypto: sa2ul - Return crypto_aead_setkey to transfer the error
crypto: ccp - fix memleak in ccp_init_dm_workarea
crypto: af_alg - Disallow multiple in-flight AIO requests
crypto: sahara - remove FLAGS_NEW_KEY logic
crypto: sahara - fix cbc selftest failure
crypto: sahara - fix ahash selftest failure
crypto: sahara - fix processing requests with cryptlen < sg->length
crypto: sahara - fix error handling in sahara_hw_descriptor_create()
pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
fs: indicate request originates from old mount API
gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
crypto: virtio - Wait for tasklet to complete on device remove
crypto: sahara - avoid skcipher fallback code duplication
crypto: sahara - handle zero-length aes requests
crypto: sahara - fix ahash reqsize
crypto: sahara - fix wait_for_completion_timeout() error handling
crypto: sahara - improve error handling in sahara_sha_process()
crypto: sahara - fix processing hash requests with req->nbytes < sg->length
crypto: sahara - do not resize req->src when doing hash operations
crypto: scomp - fix req->dst buffer overflow
blocklayoutdriver: Fix reference leak of pnfs_device_node
NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT
wifi: rtw88: fix RX filter in FIF_ALLMULTI flag
bpf, lpm: Fix check prefixlen before walking trie
bpf: Add crosstask check to __bpf_get_stack
wifi: ath11k: Defer on rproc_get failure
wifi: libertas: stop selecting wext
ARM: dts: qcom: apq8064: correct XOADC register address
net/ncsi: Fix netlink major/minor version numbers
firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create()
firmware: meson_sm: populate platform devices from sm device tree data
wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior
arm64: dts: ti: k3-am65-main: Fix DSS irq trigger type
bpf: enforce precision of R0 on callback return
ARM: dts: qcom: sdx65: correct SPMI node name
arm64: dts: qcom: sc7180: Make watchdog bark interrupt edge triggered
arm64: dts: qcom: sc7280: Make watchdog bark interrupt edge triggered
arm64: dts: qcom: sdm845: Make watchdog bark interrupt edge triggered
arm64: dts: qcom: sm8150: Make watchdog bark interrupt edge triggered
arm64: dts: qcom: sm8250: Make watchdog bark interrupt edge triggered
bpf: fix check for attempt to corrupt spilled pointer
scsi: fnic: Return error if vmalloc() failed
arm64: dts: qcom: qrb5165-rb5: correct LED panic indicator
arm64: dts: qcom: sdm845-db845c: correct LED panic indicator
arm64: dts: qcom: sc7280: fix usb_2 wakeup interrupt types
bpf: Fix verification of indirect var-off stack access
block: Set memalloc_noio to false on device_add_disk() error path
scsi: hisi_sas: Rename HISI_SAS_{RESET -> RESETTING}_BIT
scsi: hisi_sas: Prevent parallel FLR and controller reset
scsi: hisi_sas: Replace with standard error code return value
scsi: hisi_sas: Rollback some operations if FLR failed
scsi: hisi_sas: Correct the number of global debugfs registers
selftests/net: fix grep checking for fib_nexthop_multiprefix
virtio/vsock: fix logic which reduces credit update messages
dma-mapping: Add dma_release_coherent_memory to DMA API
dma-mapping: clear dev->dma_mem to NULL after freeing it
soc: qcom: llcc: Fix dis_cap_alloc and retain_on_pc configuration
arm64: dts: qcom: sm8150-hdk: fix SS USB regulators
block: add check of 'minors' and 'first_minor' in device_add_disk()
arm64: dts: qcom: sc7280: Mark SDHCI hosts as cache-coherent
wifi: rtlwifi: add calculate_bit_shift()
wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift()
wifi: rtlwifi: rtl8192c: using calculate_bit_shift()
wifi: rtlwifi: rtl8192cu: using calculate_bit_shift()
wifi: rtlwifi: rtl8192ce: using calculate_bit_shift()
wifi: rtlwifi: rtl8192de: using calculate_bit_shift()
wifi: rtlwifi: rtl8192ee: using calculate_bit_shift()
wifi: rtlwifi: rtl8192se: using calculate_bit_shift()
wifi: iwlwifi: mvm: set siso/mimo chains to 1 in FW SMPS request
wifi: iwlwifi: mvm: send TX path flush in rfkill
netfilter: nf_tables: mark newset as dead on transaction abort
Bluetooth: Fix bogus check for re-auth no supported with non-ssp
Bluetooth: btmtkuart: fix recv_buf() return value
block: make BLK_DEF_MAX_SECTORS unsigned
null_blk: don't cap max_hw_sectors to BLK_DEF_MAX_SECTORS
net/sched: act_ct: fix skb leak and crash on ooo frags
mlxbf_gige: Fix intermittent no ip issue
net: mellanox: mlxbf_gige: Replace non-standard interrupt handling
mlxbf_gige: Enable the GigE port in mlxbf_gige_open
ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
ARM: davinci: always select CONFIG_CPU_ARM926T
Revert "drm/tidss: Annotate dma-fence critical section in commit path"
Revert "drm/omapdrm: Annotate dma-fence critical section in commit path"
RDMA/usnic: Silence uninitialized symbol smatch warnings
RDMA/hns: Fix inappropriate err code for unsupported operations
drm/panel-elida-kd35t133: hold panel in reset for unprepare
drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer
drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
drm/tilcdc: Fix irq free on unload
media: pvrusb2: fix use after free on context disconnection
drm/bridge: Fix typo in post_disable() description
f2fs: fix to avoid dirent corruption
drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg()
drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check()
drm/radeon: check return value of radeon_ring_lock()
ASoC: cs35l33: Fix GPIO name and drop legacy include
ASoC: cs35l34: Fix GPIO name and drop legacy include
drm/msm/mdp4: flush vblank event on disable
drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks
drm/drv: propagate errors from drm_modeset_register_all()
drm/radeon: check the alloc_workqueue return value in radeon_crtc_init()
drm/radeon/dpm: fix a memleak in sumo_parse_power_table
drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table
drm/bridge: cdns-mhdp8546: Fix use of uninitialized variable
drm/bridge: tc358767: Fix return value on error case
media: cx231xx: fix a memleak in cx231xx_init_isoc
clk: qcom: gpucc-sm8150: Update the gpu_cc_pll1 config
media: rkisp1: Disable runtime PM in probe error path
f2fs: fix to check compress file in f2fs_move_file_range()
f2fs: fix to update iostat correctly in f2fs_filemap_fault()
f2fs: fix the f2fs_file_write_iter tracepoint
media: dvbdev: drop refcount on error path in dvb_device_open()
media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path of
m88ds3103_probe()
drm/amdgpu/debugfs: fix error code when smc register accessors are NULL
drm/amd/pm: fix a double-free in si_dpm_init
drivers/amd/pm: fix a use-after-free in kv_parse_power_table
gpu/drm/radeon: fix two memleaks in radeon_vm_init
dt-bindings: clock: Update the videocc resets for sm8150
clk: qcom: videocc-sm8150: Update the videocc resets
clk: qcom: videocc-sm8150: Add missing PLL config property
drivers: clk: zynqmp: calculate closest mux rate
clk: zynqmp: make bestdiv unsigned
clk: zynqmp: Add a check for NULL pointer
drivers: clk: zynqmp: update divider round rate logic
watchdog: set cdev owner before adding
watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO
watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling
watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused
clk: si5341: fix an error code problem in si5341_output_clk_set_rate
clk: asm9260: use parent index to link the reference clock
clk: fixed-rate: add devm_clk_hw_register_fixed_rate
clk: fixed-rate: fix clk_hw_register_fixed_rate_with_accuracy_parent_hw
pwm: stm32: Use regmap_clear_bits and regmap_set_bits where applicable
pwm: stm32: Use hweight32 in stm32_pwm_detect_channels
pwm: stm32: Fix enable count for clk in .probe()
ASoC: rt5645: Drop double EF20 entry from dmi_platform_data[]
ALSA: scarlett2: Add missing error check to scarlett2_config_save()
ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config()
ALSA: scarlett2: Allow passing any output to line_out_remap()
ALSA: scarlett2: Add missing error checks to *_ctl_get()
ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
mmc: sdhci_am654: Fix TI SoC dependencies
UBUNTU: [Config] update annotations for CONFIG_MMC_SDHCI_AM654
UBUNTU: [Config] remove sdhci_am654 module for armhf/ppc64el
mmc: sdhci_omap: Fix TI SoC dependencies
UBUNTU: [Config] update annotations for CONFIG_MMC_SDHCI_OMAP
UBUNTU: [Config] remove sdhci-omap module for arm64/ppc64el
IB/iser: Prevent invalidating wrong MR
drm/amd/pm/smu7: fix a memleak in smu7_hwmgr_backend_init
ksmbd: validate the zero field of packet header
of: Fix double free in of_parse_phandle_with_args_map
of: unittest: Fix of_count_phandle_with_args() expected value message
selftests/bpf: Add assert for user stacks in test_task_stack
binder: fix async space check for 0-sized buffers
binder: fix unused alloc->free_async_space
Input: atkbd - use ab83 as id when skipping the getid command
dma-mapping: Fix build error unused-value
virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session()
binder: fix race between mmput() and do_exit()
tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug
usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host()
usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart
Revert "usb: dwc3: Soft reset phy on probe for host"
Revert "usb: dwc3: don't reset device side if dwc3 was configured as host-only"
usb: chipidea: wait controller resume finished for wakeup irq
usb: cdns3: fix uvc failure work since sg support enabled
usb: cdns3: fix iso transfer error when mult is not zero
usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs"
usb: typec: class: fix typec_altmode_put_partner to put plugs
usb: mon: Fix atomicity violation in mon_bin_vma_fault
serial: imx: Ensure that imx_uart_rs485_config() is called with enabled clock
ALSA: oxygen: Fix right channel of capture volume mixer
ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx
fbdev: flush deferred work in fb_deferred_io_fsync()
scsi: mpi3mr: Refresh sdev queue depth after controller reset
block: add check that partition length needs to be aligned with block size
pwm: jz4740: Don't use dev_err_probe() in .request()
io_uring/rw: ensure io->bytes_done is always initialized
rootfs: Fix support for rootfstype= when root= is given
Bluetooth: Fix atomicity violation in {min,max}_key_size_set
bpf: Fix re-attachment branch in bpf_tracing_prog_attach
iommu/arm-smmu-qcom: Add missing GMU entry to match table
wifi: mt76: fix broken precal loading from MTD for mt7915
wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code
wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors
wifi: mwifiex: configure BSSID consistently when starting AP
PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
PCI: mediatek: Clear interrupt status before dispatching handler
x86/kvm: Do not try to disable kvmclock if it was not enabled
KVM: arm64: vgic-v4: Restore pending state on host userspace write
KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
iio: adc: ad7091r: Pass iio_dev to event handler
HID: wacom: Correct behavior when processing some confidence == false touches
serial: sc16is7xx: add check for unsupported SPI modes during probe
serial: sc16is7xx: set safe default SPI clock frequency
iommu/dma: Trace bounce buffer usage when mapping buffers
ARM: 9330/1: davinci: also select PINCTRL
mfd: syscon: Fix null pointer dereference in of_syscon_register()
leds: aw2013: Select missing dependency REGMAP_I2C
mfd: intel-lpss: Fix the fractional clock divider flags
mips: dmi: Fix early remap on MIPS32
mips: Fix incorrect max_low_pfn adjustment
riscv: Check if the code to patch lies in the exit section
riscv: Fix module_alloc() that did not reset the linear mapping permissions
MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup()
MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup()
power: supply: cw2015: correct time_to_empty units in sysfs
power: supply: bq256xx: fix some problem in bq256xx_hw_init
serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get()
failed
libapi: Add missing linux/types.h header to get the __u64 type on io.h
software node: Let args be NULL in software_node_get_reference_args
serial: imx: fix tx statemachine deadlock
selftests/sgx: Fix uninitialized pointer dereference in error path
selftests/sgx: Skip non X86_64 platform
iio: adc: ad9467: Benefit from devm_clk_get_enabled() to simplify
iio: adc: ad9467: fix reset gpio handling
iio: adc: ad9467: don't ignore error codes
iio: adc: ad9467: fix scale setting
perf genelf: Set ELF program header addresses properly
tty: change tty_write_lock()'s ndelay parameter to bool
tty: early return from send_break() on TTY_DRIVER_HARDWARE_BREAK
tty: don't check for signal_pending() in send_break()
tty: use 'if' in send_break() instead of 'goto'
usb: cdc-acm: return correct error code on unsupported break
nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
nvmet-tcp: fix a crash in nvmet_req_complete()
perf env: Avoid recursively taking env->bpf_progs.lock
apparmor: avoid crash when parsed profile name is empty
usb: xhci-mtk: fix a short packet issue of gen1 isoc-in transfer
serial: imx: Correct clock error message in function probe()
nvmet: re-fix tracing strncpy() warning
nvmet-tcp: Fix the H2C expected PDU len calculation
PCI: keystone: Fix race condition when initializing PHYs
s390/pci: fix max size calculation in zpci_memcpy_toio()
net: qualcomm: rmnet: fix global oob in rmnet_policy
net: ethernet: ti: am65-cpsw: Fix max mtu to fit ethernet frames
net: phy: micrel: populate .soft_reset for KSZ9131
mptcp: mptcp_parse_option() fix for MPTCPOPT_MP_JOIN
mptcp: drop unused sk in mptcp_get_options
mptcp: strict validation before using mp_opt->hmac
mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req()
net: ravb: Fix dma_addr_t truncation in error case
net: stmmac: ethtool: Fixed calltrace caused by unbalanced disable_irq_wake
calls
bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe
netfilter: nf_tables: reject invalid set policy
netfilter: nft_connlimit: move stateful fields out of expression data
netfilter: nft_last: move stateful fields out of expression data
netfilter: nft_quota: move stateful fields out of expression data
netfilter: nft_limit: rename stateful structure
netfilter: nft_limit: move stateful fields out of expression data
netfilter: nf_tables: memcg accounting for dynamically allocated objects
netfilter: nft_limit: do not ignore unsupported flags
netfilter: nf_tables: do not allow mismatch field size and set key length
netfilter: nf_tables: skip dead set elements in netlink dump
netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description
ipvs: avoid stat macros calls from preemptible context
kdb: Fix a potential buffer overflow in kdb_local()
ethtool: netlink: Add missing ethnl_ops_begin/complete
mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
mlxsw: spectrum_acl_tcam: Make fini symmetric to init
mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
mlxsw: spectrum_acl_tcam: Fix stack corruption
selftests: mlxsw: qos_pfc: Adjust the test to support 8 lanes
ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work
i2c: s3c24xx: fix read transfers in polling mode
i2c: s3c24xx: fix transferring more than one message in polling mode
block: Remove special-casing of compound pages
netfilter: nf_tables: typo NULL check in _clone() function
netfilter: nft_connlimit: memleak if nf_ct_netns_get() fails
netfilter: nft_limit: fix stateful object memory leak
netfilter: nft_limit: Clone packet limits' cost value
netfilter: nft_last: copy content when cloning expression
netfilter: nft_quota: copy content when cloning expression
arm64: dts: armada-3720-turris-mox: set irq type for RTC
Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
Linux 5.15.148
UBUNTU: Upstream stable to v5.15.148
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Jammy)
Importance: Medium
Assignee: Manuel Diewald (diewald)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Jammy)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Jammy)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Jammy)
Status: New => In Progress
** Changed in: linux (Ubuntu Jammy)
Assignee: (unassigned) => Manuel Diewald (diewald)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.148 upstream stable release
from git://git.kernel.org/
-
+ f2fs: explicitly null-terminate the xattr list
+ pinctrl: lochnagar: Don't build on MIPS
+ ALSA: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro
+ mptcp: fix uninit-value in mptcp_incoming_options
+ wifi: cfg80211: lock wiphy mutex for rfkill poll
+ debugfs: fix automount d_fsdata usage
+ drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
+ nvme-core: check for too small lba shift
+ ASoC: wm8974: Correct boost mixer inputs
+ ASoC: Intel: Skylake: Fix mem leak in few functions
+ ASoC: nau8822: Fix incorrect type in assignment and cast to restricted __be16
+ ASoC: Intel: Skylake: mem leak in skl register function
+ ASoC: cs43130: Fix the position of const qualifier
+ ASoC: cs43130: Fix incorrect frame delay configuration
+ ASoC: rt5650: add mutex to avoid the jack detection failure
+ nouveau/tu102: flush all pdbs on vmm flush
+ net/tg3: fix race condition in tg3_reset_task()
+ ASoC: da7219: Support low DC impedance headset
+ ASoC: ops: add correct range check for limiting volume
+ nvme: introduce helper function to get ctrl state
+ drm/amdgpu: Add NULL checks for function pointers
+ drm/exynos: fix a potential error pointer dereference
+ drm/exynos: fix a wrong error checking
+ hwmon: (corsair-psu) Fix probe when built-in
+ clk: rockchip: rk3128: Fix HCLK_OTG gate register
+ jbd2: correct the printing of write_flags in jbd2_write_superblock()
+ drm/crtc: Fix uninit-value bug in drm_mode_setcrtc
+ neighbour: Don't let neigh_forced_gc() disable preemption for long
+ platform/x86: intel-vbtn: Fix missing tablet-mode-switch events
+ jbd2: fix soft lockup in journal_finish_inode_data_buffers()
+ tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing
+ tracing: Add size check when printing trace_marker output
+ stmmac: dwmac-loongson: drop useless check for compatible fallback
+ MIPS: dts: loongson: drop incorrect dwmac fallback compatible
+ tracing: Fix uaf issue when open the hist or hist_debug file
+ ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI
+ reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning
+ Input: atkbd - skip ATKBD_CMD_GETID in translated mode
+ Input: i8042 - add nomux quirk for Acer P459-G2-M
+ s390/scm: fix virtual vs physical address confusion
+ ARC: fix spare error
+ wifi: iwlwifi: pcie: avoid a NULL pointer dereference
+ Input: xpad - add Razer Wolverine V2 support
+ ASoC: Intel: bytcr_rt5640: Add quirk for the Medion Lifetab S10346
+ i2c: rk3x: fix potential spinlock recursion on poll
+ net: qrtr: ns: Return 0 if server port is not present
+ ARM: sun9i: smp: fix return code check of of_property_match_string
+ drm/crtc: fix uninitialized variable use
+ ACPI: resource: Add another DMI match for the TongFang GMxXGxx
+ Revert "ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek"
+ bpf: Add --skip_encoding_btf_inconsistent_proto, --btf_gen_optimized to
pahole flags for v1.25
+ kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list
+ Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
+ binder: use EPOLLERR from eventpoll.h
+ binder: fix use-after-free in shinker's callback
+ binder: fix trivial typo of binder_free_buf_locked()
+ binder: fix comment on binder_alloc_new_buf() return value
+ uio: Fix use-after-free in uio_open
+ parport: parport_serial: Add Brainboxes BAR details
+ parport: parport_serial: Add Brainboxes device IDs and geometry
+ leds: ledtrig-tty: Free allocated ttyname buffer on deactivate
+ PCI: Add ACS quirk for more Zhaoxin Root Ports
+ coresight: etm4x: Fix width of CCITMIN field
+ x86/lib: Fix overflow when counting digits
+ EDAC/thunderx: Fix possible out-of-bounds string access
+ powerpc: Mark .opd section read-only
+ powerpc/toc: Future proof kernel toc
+ powerpc: remove checks for binutils older than 2.25
+ powerpc: add crtsavres.o to always-y instead of extra-y
+ powerpc/44x: select I2C for CURRITUCK
+ powerpc/pseries/memhp: Fix access beyond end of drmem array
+ selftests/powerpc: Fix error handling in FPU/VMX preemption tests
+ powerpc/powernv: Add a null pointer check to scom_debug_init_one()
+ powerpc/powernv: Add a null pointer check in opal_event_init()
+ powerpc/powernv: Add a null pointer check in opal_powercap_init()
+ powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
+ spi: spi-zynqmp-gqspi: fix driver kconfig dependencies
+ mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response
+ ACPI: video: check for error while searching for backlight device parent
+ ACPI: LPIT: Avoid u32 multiplication overflow
+ of: property: define of_property_read_u{8,16,32,64}_array() unconditionally
+ of: Add of_property_present() helper
+ cpufreq: Use of_property_present() for testing DT property presence
+ cpufreq: scmi: process the result of devm_of_clk_add_hw_provider()
+ calipso: fix memory leak in netlbl_calipso_add_pass()
+ efivarfs: force RO when remounting if SetVariable is not supported
+ spi: sh-msiof: Enforce fixed DTDL for R-Car H3
+ ACPI: LPSS: Fix the fractional clock divider flags
+ ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the error
+ kunit: debugfs: Fix unchecked dereference in debugfs_print_results()
+ mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
+ selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket
+ crypto: virtio - Handle dataq logic with tasklet
+ crypto: sa2ul - Return crypto_aead_setkey to transfer the error
+ crypto: ccp - fix memleak in ccp_init_dm_workarea
+ crypto: af_alg - Disallow multiple in-flight AIO requests
+ crypto: sahara - remove FLAGS_NEW_KEY logic
+ crypto: sahara - fix cbc selftest failure
+ crypto: sahara - fix ahash selftest failure
+ crypto: sahara - fix processing requests with cryptlen < sg->length
+ crypto: sahara - fix error handling in sahara_hw_descriptor_create()
+ pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
+ fs: indicate request originates from old mount API
+ gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
+ crypto: virtio - Wait for tasklet to complete on device remove
+ crypto: sahara - avoid skcipher fallback code duplication
+ crypto: sahara - handle zero-length aes requests
+ crypto: sahara - fix ahash reqsize
+ crypto: sahara - fix wait_for_completion_timeout() error handling
+ crypto: sahara - improve error handling in sahara_sha_process()
+ crypto: sahara - fix processing hash requests with req->nbytes < sg->length
+ crypto: sahara - do not resize req->src when doing hash operations
+ crypto: scomp - fix req->dst buffer overflow
+ blocklayoutdriver: Fix reference leak of pnfs_device_node
+ NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT
+ wifi: rtw88: fix RX filter in FIF_ALLMULTI flag
+ bpf, lpm: Fix check prefixlen before walking trie
+ bpf: Add crosstask check to __bpf_get_stack
+ wifi: ath11k: Defer on rproc_get failure
+ wifi: libertas: stop selecting wext
+ ARM: dts: qcom: apq8064: correct XOADC register address
+ net/ncsi: Fix netlink major/minor version numbers
+ firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create()
+ firmware: meson_sm: populate platform devices from sm device tree data
+ wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior
+ arm64: dts: ti: k3-am65-main: Fix DSS irq trigger type
+ bpf: enforce precision of R0 on callback return
+ ARM: dts: qcom: sdx65: correct SPMI node name
+ arm64: dts: qcom: sc7180: Make watchdog bark interrupt edge triggered
+ arm64: dts: qcom: sc7280: Make watchdog bark interrupt edge triggered
+ arm64: dts: qcom: sdm845: Make watchdog bark interrupt edge triggered
+ arm64: dts: qcom: sm8150: Make watchdog bark interrupt edge triggered
+ arm64: dts: qcom: sm8250: Make watchdog bark interrupt edge triggered
+ bpf: fix check for attempt to corrupt spilled pointer
+ scsi: fnic: Return error if vmalloc() failed
+ arm64: dts: qcom: qrb5165-rb5: correct LED panic indicator
+ arm64: dts: qcom: sdm845-db845c: correct LED panic indicator
+ arm64: dts: qcom: sc7280: fix usb_2 wakeup interrupt types
+ bpf: Fix verification of indirect var-off stack access
+ block: Set memalloc_noio to false on device_add_disk() error path
+ scsi: hisi_sas: Rename HISI_SAS_{RESET -> RESETTING}_BIT
+ scsi: hisi_sas: Prevent parallel FLR and controller reset
+ scsi: hisi_sas: Replace with standard error code return value
+ scsi: hisi_sas: Rollback some operations if FLR failed
+ scsi: hisi_sas: Correct the number of global debugfs registers
+ selftests/net: fix grep checking for fib_nexthop_multiprefix
+ virtio/vsock: fix logic which reduces credit update messages
+ dma-mapping: Add dma_release_coherent_memory to DMA API
+ dma-mapping: clear dev->dma_mem to NULL after freeing it
+ soc: qcom: llcc: Fix dis_cap_alloc and retain_on_pc configuration
+ arm64: dts: qcom: sm8150-hdk: fix SS USB regulators
+ block: add check of 'minors' and 'first_minor' in device_add_disk()
+ arm64: dts: qcom: sc7280: Mark SDHCI hosts as cache-coherent
+ wifi: rtlwifi: add calculate_bit_shift()
+ wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift()
+ wifi: rtlwifi: rtl8192c: using calculate_bit_shift()
+ wifi: rtlwifi: rtl8192cu: using calculate_bit_shift()
+ wifi: rtlwifi: rtl8192ce: using calculate_bit_shift()
+ wifi: rtlwifi: rtl8192de: using calculate_bit_shift()
+ wifi: rtlwifi: rtl8192ee: using calculate_bit_shift()
+ wifi: rtlwifi: rtl8192se: using calculate_bit_shift()
+ wifi: iwlwifi: mvm: set siso/mimo chains to 1 in FW SMPS request
+ wifi: iwlwifi: mvm: send TX path flush in rfkill
+ netfilter: nf_tables: mark newset as dead on transaction abort
+ Bluetooth: Fix bogus check for re-auth no supported with non-ssp
+ Bluetooth: btmtkuart: fix recv_buf() return value
+ block: make BLK_DEF_MAX_SECTORS unsigned
+ null_blk: don't cap max_hw_sectors to BLK_DEF_MAX_SECTORS
+ net/sched: act_ct: fix skb leak and crash on ooo frags
+ mlxbf_gige: Fix intermittent no ip issue
+ net: mellanox: mlxbf_gige: Replace non-standard interrupt handling
+ mlxbf_gige: Enable the GigE port in mlxbf_gige_open
+ ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
+ ARM: davinci: always select CONFIG_CPU_ARM926T
+ Revert "drm/tidss: Annotate dma-fence critical section in commit path"
+ Revert "drm/omapdrm: Annotate dma-fence critical section in commit path"
+ RDMA/usnic: Silence uninitialized symbol smatch warnings
+ RDMA/hns: Fix inappropriate err code for unsupported operations
+ drm/panel-elida-kd35t133: hold panel in reset for unprepare
+ drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer
+ drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
+ drm/tilcdc: Fix irq free on unload
+ media: pvrusb2: fix use after free on context disconnection
+ drm/bridge: Fix typo in post_disable() description
+ f2fs: fix to avoid dirent corruption
+ drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg()
+ drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check()
+ drm/radeon: check return value of radeon_ring_lock()
+ ASoC: cs35l33: Fix GPIO name and drop legacy include
+ ASoC: cs35l34: Fix GPIO name and drop legacy include
+ drm/msm/mdp4: flush vblank event on disable
+ drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks
+ drm/drv: propagate errors from drm_modeset_register_all()
+ drm/radeon: check the alloc_workqueue return value in radeon_crtc_init()
+ drm/radeon/dpm: fix a memleak in sumo_parse_power_table
+ drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table
+ drm/bridge: cdns-mhdp8546: Fix use of uninitialized variable
+ drm/bridge: tc358767: Fix return value on error case
+ media: cx231xx: fix a memleak in cx231xx_init_isoc
+ clk: qcom: gpucc-sm8150: Update the gpu_cc_pll1 config
+ media: rkisp1: Disable runtime PM in probe error path
+ f2fs: fix to check compress file in f2fs_move_file_range()
+ f2fs: fix to update iostat correctly in f2fs_filemap_fault()
+ f2fs: fix the f2fs_file_write_iter tracepoint
+ media: dvbdev: drop refcount on error path in dvb_device_open()
+ media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path
of m88ds3103_probe()
+ drm/amdgpu/debugfs: fix error code when smc register accessors are NULL
+ drm/amd/pm: fix a double-free in si_dpm_init
+ drivers/amd/pm: fix a use-after-free in kv_parse_power_table
+ gpu/drm/radeon: fix two memleaks in radeon_vm_init
+ dt-bindings: clock: Update the videocc resets for sm8150
+ clk: qcom: videocc-sm8150: Update the videocc resets
+ clk: qcom: videocc-sm8150: Add missing PLL config property
+ drivers: clk: zynqmp: calculate closest mux rate
+ clk: zynqmp: make bestdiv unsigned
+ clk: zynqmp: Add a check for NULL pointer
+ drivers: clk: zynqmp: update divider round rate logic
+ watchdog: set cdev owner before adding
+ watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO
+ watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling
+ watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused
+ clk: si5341: fix an error code problem in si5341_output_clk_set_rate
+ clk: asm9260: use parent index to link the reference clock
+ clk: fixed-rate: add devm_clk_hw_register_fixed_rate
+ clk: fixed-rate: fix clk_hw_register_fixed_rate_with_accuracy_parent_hw
+ pwm: stm32: Use regmap_clear_bits and regmap_set_bits where applicable
+ pwm: stm32: Use hweight32 in stm32_pwm_detect_channels
+ pwm: stm32: Fix enable count for clk in .probe()
+ ASoC: rt5645: Drop double EF20 entry from dmi_platform_data[]
+ ALSA: scarlett2: Add missing error check to scarlett2_config_save()
+ ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config()
+ ALSA: scarlett2: Allow passing any output to line_out_remap()
+ ALSA: scarlett2: Add missing error checks to *_ctl_get()
+ ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
+ mmc: sdhci_am654: Fix TI SoC dependencies
+ UBUNTU: [Config] update annotations for CONFIG_MMC_SDHCI_AM654
+ UBUNTU: [Config] remove sdhci_am654 module for armhf/ppc64el
+ mmc: sdhci_omap: Fix TI SoC dependencies
+ UBUNTU: [Config] update annotations for CONFIG_MMC_SDHCI_OMAP
+ UBUNTU: [Config] remove sdhci-omap module for arm64/ppc64el
+ IB/iser: Prevent invalidating wrong MR
+ drm/amd/pm/smu7: fix a memleak in smu7_hwmgr_backend_init
+ ksmbd: validate the zero field of packet header
+ of: Fix double free in of_parse_phandle_with_args_map
+ of: unittest: Fix of_count_phandle_with_args() expected value message
+ selftests/bpf: Add assert for user stacks in test_task_stack
+ binder: fix async space check for 0-sized buffers
+ binder: fix unused alloc->free_async_space
+ Input: atkbd - use ab83 as id when skipping the getid command
+ dma-mapping: Fix build error unused-value
+ virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session()
+ binder: fix race between mmput() and do_exit()
+ tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug
+ usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host()
+ usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart
+ Revert "usb: dwc3: Soft reset phy on probe for host"
+ Revert "usb: dwc3: don't reset device side if dwc3 was configured as
host-only"
+ usb: chipidea: wait controller resume finished for wakeup irq
+ usb: cdns3: fix uvc failure work since sg support enabled
+ usb: cdns3: fix iso transfer error when mult is not zero
+ usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
+ Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs"
+ usb: typec: class: fix typec_altmode_put_partner to put plugs
+ usb: mon: Fix atomicity violation in mon_bin_vma_fault
+ serial: imx: Ensure that imx_uart_rs485_config() is called with enabled clock
+ ALSA: oxygen: Fix right channel of capture volume mixer
+ ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx
+ fbdev: flush deferred work in fb_deferred_io_fsync()
+ scsi: mpi3mr: Refresh sdev queue depth after controller reset
+ block: add check that partition length needs to be aligned with block size
+ pwm: jz4740: Don't use dev_err_probe() in .request()
+ io_uring/rw: ensure io->bytes_done is always initialized
+ rootfs: Fix support for rootfstype= when root= is given
+ Bluetooth: Fix atomicity violation in {min,max}_key_size_set
+ bpf: Fix re-attachment branch in bpf_tracing_prog_attach
+ iommu/arm-smmu-qcom: Add missing GMU entry to match table
+ wifi: mt76: fix broken precal loading from MTD for mt7915
+ wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code
+ wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors
+ wifi: mwifiex: configure BSSID consistently when starting AP
+ PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
+ PCI: mediatek: Clear interrupt status before dispatching handler
+ x86/kvm: Do not try to disable kvmclock if it was not enabled
+ KVM: arm64: vgic-v4: Restore pending state on host userspace write
+ KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
+ iio: adc: ad7091r: Pass iio_dev to event handler
+ HID: wacom: Correct behavior when processing some confidence == false touches
+ serial: sc16is7xx: add check for unsupported SPI modes during probe
+ serial: sc16is7xx: set safe default SPI clock frequency
+ iommu/dma: Trace bounce buffer usage when mapping buffers
+ ARM: 9330/1: davinci: also select PINCTRL
+ mfd: syscon: Fix null pointer dereference in of_syscon_register()
+ leds: aw2013: Select missing dependency REGMAP_I2C
+ mfd: intel-lpss: Fix the fractional clock divider flags
+ mips: dmi: Fix early remap on MIPS32
+ mips: Fix incorrect max_low_pfn adjustment
+ riscv: Check if the code to patch lies in the exit section
+ riscv: Fix module_alloc() that did not reset the linear mapping permissions
+ MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup()
+ MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup()
+ power: supply: cw2015: correct time_to_empty units in sysfs
+ power: supply: bq256xx: fix some problem in bq256xx_hw_init
+ serial: 8250: omap: Don't skip resource freeing if
pm_runtime_resume_and_get() failed
+ libapi: Add missing linux/types.h header to get the __u64 type on io.h
+ software node: Let args be NULL in software_node_get_reference_args
+ serial: imx: fix tx statemachine deadlock
+ selftests/sgx: Fix uninitialized pointer dereference in error path
+ selftests/sgx: Skip non X86_64 platform
+ iio: adc: ad9467: Benefit from devm_clk_get_enabled() to simplify
+ iio: adc: ad9467: fix reset gpio handling
+ iio: adc: ad9467: don't ignore error codes
+ iio: adc: ad9467: fix scale setting
+ perf genelf: Set ELF program header addresses properly
+ tty: change tty_write_lock()'s ndelay parameter to bool
+ tty: early return from send_break() on TTY_DRIVER_HARDWARE_BREAK
+ tty: don't check for signal_pending() in send_break()
+ tty: use 'if' in send_break() instead of 'goto'
+ usb: cdc-acm: return correct error code on unsupported break
+ nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
+ nvmet-tcp: fix a crash in nvmet_req_complete()
+ perf env: Avoid recursively taking env->bpf_progs.lock
+ apparmor: avoid crash when parsed profile name is empty
+ usb: xhci-mtk: fix a short packet issue of gen1 isoc-in transfer
+ serial: imx: Correct clock error message in function probe()
+ nvmet: re-fix tracing strncpy() warning
+ nvmet-tcp: Fix the H2C expected PDU len calculation
+ PCI: keystone: Fix race condition when initializing PHYs
+ s390/pci: fix max size calculation in zpci_memcpy_toio()
+ net: qualcomm: rmnet: fix global oob in rmnet_policy
+ net: ethernet: ti: am65-cpsw: Fix max mtu to fit ethernet frames
+ net: phy: micrel: populate .soft_reset for KSZ9131
+ mptcp: mptcp_parse_option() fix for MPTCPOPT_MP_JOIN
+ mptcp: drop unused sk in mptcp_get_options
+ mptcp: strict validation before using mp_opt->hmac
+ mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
+ mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req()
+ net: ravb: Fix dma_addr_t truncation in error case
+ net: stmmac: ethtool: Fixed calltrace caused by unbalanced disable_irq_wake
calls
+ bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
+ net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe
+ netfilter: nf_tables: reject invalid set policy
+ netfilter: nft_connlimit: move stateful fields out of expression data
+ netfilter: nft_last: move stateful fields out of expression data
+ netfilter: nft_quota: move stateful fields out of expression data
+ netfilter: nft_limit: rename stateful structure
+ netfilter: nft_limit: move stateful fields out of expression data
+ netfilter: nf_tables: memcg accounting for dynamically allocated objects
+ netfilter: nft_limit: do not ignore unsupported flags
+ netfilter: nf_tables: do not allow mismatch field size and set key length
+ netfilter: nf_tables: skip dead set elements in netlink dump
+ netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description
+ ipvs: avoid stat macros calls from preemptible context
+ kdb: Fix a potential buffer overflow in kdb_local()
+ ethtool: netlink: Add missing ethnl_ops_begin/complete
+ mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
+ mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
+ mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
+ mlxsw: spectrum_acl_tcam: Make fini symmetric to init
+ mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
+ mlxsw: spectrum_acl_tcam: Fix stack corruption
+ selftests: mlxsw: qos_pfc: Adjust the test to support 8 lanes
+ ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work
+ i2c: s3c24xx: fix read transfers in polling mode
+ i2c: s3c24xx: fix transferring more than one message in polling mode
+ block: Remove special-casing of compound pages
+ netfilter: nf_tables: typo NULL check in _clone() function
+ netfilter: nft_connlimit: memleak if nf_ct_netns_get() fails
+ netfilter: nft_limit: fix stateful object memory leak
+ netfilter: nft_limit: Clone packet limits' cost value
+ netfilter: nft_last: copy content when cloning expression
+ netfilter: nft_quota: copy content when cloning expression
+ arm64: dts: armada-3720-turris-mox: set irq type for RTC
+ Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
Linux 5.15.148
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- arm64: dts: armada-3720-turris-mox: set irq type for RTC
- netfilter: nft_quota: copy content when cloning expression
- netfilter: nft_last: copy content when cloning expression
- netfilter: nft_limit: Clone packet limits' cost value
- netfilter: nft_limit: fix stateful object memory leak
- netfilter: nft_connlimit: memleak if nf_ct_netns_get() fails
- netfilter: nf_tables: typo NULL check in _clone() function
- block: Remove special-casing of compound pages
- i2c: s3c24xx: fix transferring more than one message in polling mode
- i2c: s3c24xx: fix read transfers in polling mode
- ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work
- selftests: mlxsw: qos_pfc: Adjust the test to support 8 lanes
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- ethtool: netlink: Add missing ethnl_ops_begin/complete
- kdb: Fix a potential buffer overflow in kdb_local()
- ipvs: avoid stat macros calls from preemptible context
- netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description
- netfilter: nf_tables: skip dead set elements in netlink dump
- netfilter: nf_tables: do not allow mismatch field size and set key length
- netfilter: nft_limit: do not ignore unsupported flags
- netfilter: nf_tables: memcg accounting for dynamically allocated objects
- netfilter: nft_limit: move stateful fields out of expression data
- netfilter: nft_limit: rename stateful structure
- netfilter: nft_quota: move stateful fields out of expression data
- netfilter: nft_last: move stateful fields out of expression data
- netfilter: nft_connlimit: move stateful fields out of expression data
- netfilter: nf_tables: reject invalid set policy
- net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- net: stmmac: ethtool: Fixed calltrace caused by unbalanced disable_irq_wake
calls
- net: ravb: Fix dma_addr_t truncation in error case
- mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req()
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- mptcp: strict validation before using mp_opt->hmac
- mptcp: drop unused sk in mptcp_get_options
- mptcp: mptcp_parse_option() fix for MPTCPOPT_MP_JOIN
- net: phy: micrel: populate .soft_reset for KSZ9131
- net: ethernet: ti: am65-cpsw: Fix max mtu to fit ethernet frames
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- s390/pci: fix max size calculation in zpci_memcpy_toio()
- PCI: keystone: Fix race condition when initializing PHYs
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet: re-fix tracing strncpy() warning
- serial: imx: Correct clock error message in function probe()
- usb: xhci-mtk: fix a short packet issue of gen1 isoc-in transfer
- apparmor: avoid crash when parsed profile name is empty
- perf env: Avoid recursively taking env->bpf_progs.lock
- nvmet-tcp: fix a crash in nvmet_req_complete()
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: cdc-acm: return correct error code on unsupported break
- tty: use 'if' in send_break() instead of 'goto'
- tty: don't check for signal_pending() in send_break()
- tty: early return from send_break() on TTY_DRIVER_HARDWARE_BREAK
- tty: change tty_write_lock()'s ndelay parameter to bool
- perf genelf: Set ELF program header addresses properly
- iio: adc: ad9467: fix scale setting
- iio: adc: ad9467: don't ignore error codes
- iio: adc: ad9467: fix reset gpio handling
- iio: adc: ad9467: Benefit from devm_clk_get_enabled() to simplify
- selftests/sgx: Skip non X86_64 platform
- selftests/sgx: Fix uninitialized pointer dereference in error path
- serial: imx: fix tx statemachine deadlock
- software node: Let args be NULL in software_node_get_reference_args
- libapi: Add missing linux/types.h header to get the __u64 type on io.h
- serial: 8250: omap: Don't skip resource freeing if
pm_runtime_resume_and_get() failed
- power: supply: bq256xx: fix some problem in bq256xx_hw_init
- power: supply: cw2015: correct time_to_empty units in sysfs
- MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup()
- MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup()
- riscv: Fix module_alloc() that did not reset the linear mapping permissions
- riscv: Check if the code to patch lies in the exit section
- mips: Fix incorrect max_low_pfn adjustment
- mips: dmi: Fix early remap on MIPS32
- mfd: intel-lpss: Fix the fractional clock divider flags
- leds: aw2013: Select missing dependency REGMAP_I2C
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- ARM: 9330/1: davinci: also select PINCTRL
- iommu/dma: Trace bounce buffer usage when mapping buffers
- serial: sc16is7xx: set safe default SPI clock frequency
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- HID: wacom: Correct behavior when processing some confidence == false touches
- iio: adc: ad7091r: Pass iio_dev to event handler
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- KVM: arm64: vgic-v4: Restore pending state on host userspace write
- x86/kvm: Do not try to disable kvmclock if it was not enabled
- PCI: mediatek: Clear interrupt status before dispatching handler
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- wifi: mwifiex: configure BSSID consistently when starting AP
- wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors
- wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code
- wifi: mt76: fix broken precal loading from MTD for mt7915
- iommu/arm-smmu-qcom: Add missing GMU entry to match table
- bpf: Fix re-attachment branch in bpf_tracing_prog_attach
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- rootfs: Fix support for rootfstype= when root= is given
- io_uring/rw: ensure io->bytes_done is always initialized
- pwm: jz4740: Don't use dev_err_probe() in .request()
- netfilter: nf_tables: check if catch-all set element is active in next
generation
- block: add check that partition length needs to be aligned with block size
- scsi: mpi3mr: Refresh sdev queue depth after controller reset
- fbdev: flush deferred work in fb_deferred_io_fsync()
- ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx
- ALSA: oxygen: Fix right channel of capture volume mixer
- serial: imx: Ensure that imx_uart_rs485_config() is called with enabled clock
- usb: mon: Fix atomicity violation in mon_bin_vma_fault
- usb: typec: class: fix typec_altmode_put_partner to put plugs
- Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs"
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: chipidea: wait controller resume finished for wakeup irq
- Revert "usb: dwc3: don't reset device side if dwc3 was configured as
host-only"
- Revert "usb: dwc3: Soft reset phy on probe for host"
- usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart
- usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host()
- tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug
- binder: fix race between mmput() and do_exit()
- xen-netback: don't produce zero-size SKB frags
- virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session()
- dma-mapping: Fix build error unused-value
- Input: atkbd - use ab83 as id when skipping the getid command
- binder: fix unused alloc->free_async_space
- binder: fix async space check for 0-sized buffers
- keys, dns: Fix size check of V1 server-list header
- selftests/bpf: Add assert for user stacks in test_task_stack
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- ksmbd: validate the zero field of packet header
- drm/amd/pm/smu7: fix a memleak in smu7_hwmgr_backend_init
- IB/iser: Prevent invalidating wrong MR
- mmc: sdhci_omap: Fix TI SoC dependencies
- mmc: sdhci_am654: Fix TI SoC dependencies
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- ALSA: scarlett2: Allow passing any output to line_out_remap()
- ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config()
- ALSA: scarlett2: Add missing error check to scarlett2_config_save()
- ASoC: rt5645: Drop double EF20 entry from dmi_platform_data[]
- pwm: stm32: Fix enable count for clk in .probe()
- pwm: stm32: Use hweight32 in stm32_pwm_detect_channels
- pwm: stm32: Use regmap_clear_bits and regmap_set_bits where applicable
- clk: fixed-rate: fix clk_hw_register_fixed_rate_with_accuracy_parent_hw
- clk: fixed-rate: add devm_clk_hw_register_fixed_rate
- clk: asm9260: use parent index to link the reference clock
- clk: si5341: fix an error code problem in si5341_output_clk_set_rate
- watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused
- watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling
- watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO
- watchdog: set cdev owner before adding
- drivers: clk: zynqmp: update divider round rate logic
- clk: zynqmp: Add a check for NULL pointer
- clk: zynqmp: make bestdiv unsigned
- drivers: clk: zynqmp: calculate closest mux rate
- clk: qcom: videocc-sm8150: Add missing PLL config property
- clk: qcom: videocc-sm8150: Update the videocc resets
- dt-bindings: clock: Update the videocc resets for sm8150
- gpu/drm/radeon: fix two memleaks in radeon_vm_init
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- drm/amd/pm: fix a double-free in si_dpm_init
- drm/amdgpu/debugfs: fix error code when smc register accessors are NULL
- media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path
of m88ds3103_probe()
- media: dvbdev: drop refcount on error path in dvb_device_open()
- f2fs: fix the f2fs_file_write_iter tracepoint
- f2fs: fix to update iostat correctly in f2fs_filemap_fault()
- f2fs: fix to check compress file in f2fs_move_file_range()
- media: rkisp1: Disable runtime PM in probe error path
- clk: qcom: gpucc-sm8150: Update the gpu_cc_pll1 config
- media: cx231xx: fix a memleak in cx231xx_init_isoc
- drm/bridge: tc358767: Fix return value on error case
- drm/bridge: cdns-mhdp8546: Fix use of uninitialized variable
- drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table
- drm/radeon/dpm: fix a memleak in sumo_parse_power_table
- drm/radeon: check the alloc_workqueue return value in radeon_crtc_init()
- drm/drv: propagate errors from drm_modeset_register_all()
- drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks
- drm/msm/mdp4: flush vblank event on disable
- ASoC: cs35l34: Fix GPIO name and drop legacy include
- ASoC: cs35l33: Fix GPIO name and drop legacy include
- drm/radeon: check return value of radeon_ring_lock()
- drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check()
- drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg()
- f2fs: fix to avoid dirent corruption
- drm/bridge: Fix typo in post_disable() description
- media: pvrusb2: fix use after free on context disconnection
- drm/tilcdc: Fix irq free on unload
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer
- drm/panel-elida-kd35t133: hold panel in reset for unprepare
- RDMA/hns: Fix inappropriate err code for unsupported operations
- RDMA/usnic: Silence uninitialized symbol smatch warnings
- Revert "drm/omapdrm: Annotate dma-fence critical section in commit path"
- Revert "drm/tidss: Annotate dma-fence critical section in commit path"
- ARM: davinci: always select CONFIG_CPU_ARM926T
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- mlxbf_gige: Enable the GigE port in mlxbf_gige_open
- net: mellanox: mlxbf_gige: Replace non-standard interrupt handling
- mlxbf_gige: Fix intermittent no ip issue
- net/sched: act_ct: fix skb leak and crash on ooo frags
- null_blk: don't cap max_hw_sectors to BLK_DEF_MAX_SECTORS
- block: make BLK_DEF_MAX_SECTORS unsigned
- Bluetooth: btmtkuart: fix recv_buf() return value
- Bluetooth: Fix bogus check for re-auth no supported with non-ssp
- netfilter: nf_tables: mark newset as dead on transaction abort
- wifi: iwlwifi: mvm: send TX path flush in rfkill
- wifi: iwlwifi: mvm: set siso/mimo chains to 1 in FW SMPS request
- wifi: rtlwifi: rtl8192se: using calculate_bit_shift()
- wifi: rtlwifi: rtl8192ee: using calculate_bit_shift()
- wifi: rtlwifi: rtl8192de: using calculate_bit_shift()
- wifi: rtlwifi: rtl8192ce: using calculate_bit_shift()
- wifi: rtlwifi: rtl8192cu: using calculate_bit_shift()
- wifi: rtlwifi: rtl8192c: using calculate_bit_shift()
- wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift()
- wifi: rtlwifi: add calculate_bit_shift()
- arm64: dts: qcom: sc7280: Mark SDHCI hosts as cache-coherent
- block: add check of 'minors' and 'first_minor' in device_add_disk()
- arm64: dts: qcom: sm8150-hdk: fix SS USB regulators
- soc: qcom: llcc: Fix dis_cap_alloc and retain_on_pc configuration
- dma-mapping: clear dev->dma_mem to NULL after freeing it
- dma-mapping: Add dma_release_coherent_memory to DMA API
- virtio/vsock: fix logic which reduces credit update messages
- selftests/net: fix grep checking for fib_nexthop_multiprefix
- scsi: hisi_sas: Correct the number of global debugfs registers
- scsi: hisi_sas: Rollback some operations if FLR failed
- scsi: hisi_sas: Replace with standard error code return value
- scsi: hisi_sas: Prevent parallel FLR and controller reset
- scsi: hisi_sas: Rename HISI_SAS_{RESET -> RESETTING}_BIT
- block: Set memalloc_noio to false on device_add_disk() error path
- bpf: Fix verification of indirect var-off stack access
- arm64: dts: qcom: sc7280: fix usb_2 wakeup interrupt types
- arm64: dts: qcom: sdm845-db845c: correct LED panic indicator
- arm64: dts: qcom: qrb5165-rb5: correct LED panic indicator
- scsi: fnic: Return error if vmalloc() failed
- bpf: fix check for attempt to corrupt spilled pointer
- arm64: dts: qcom: sm8250: Make watchdog bark interrupt edge triggered
- arm64: dts: qcom: sm8150: Make watchdog bark interrupt edge triggered
- arm64: dts: qcom: sdm845: Make watchdog bark interrupt edge triggered
- arm64: dts: qcom: sc7280: Make watchdog bark interrupt edge triggered
- arm64: dts: qcom: sc7180: Make watchdog bark interrupt edge triggered
- ARM: dts: qcom: sdx65: correct SPMI node name
- bpf: enforce precision of R0 on callback return
- arm64: dts: ti: k3-am65-main: Fix DSS irq trigger type
- wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior
- firmware: meson_sm: populate platform devices from sm device tree data
- firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create()
- net/ncsi: Fix netlink major/minor version numbers
- ARM: dts: qcom: apq8064: correct XOADC register address
- wifi: libertas: stop selecting wext
- wifi: ath11k: Defer on rproc_get failure
- bpf: Add crosstask check to __bpf_get_stack
- bpf, lpm: Fix check prefixlen before walking trie
- wifi: rtw88: fix RX filter in FIF_ALLMULTI flag
- NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT
- blocklayoutdriver: Fix reference leak of pnfs_device_node
- crypto: scomp - fix req->dst buffer overflow
- crypto: sahara - do not resize req->src when doing hash operations
- crypto: sahara - fix processing hash requests with req->nbytes < sg->length
- crypto: sahara - improve error handling in sahara_sha_process()
- crypto: sahara - fix wait_for_completion_timeout() error handling
- crypto: sahara - fix ahash reqsize
- crypto: sahara - handle zero-length aes requests
- crypto: sahara - avoid skcipher fallback code duplication
- crypto: virtio - Wait for tasklet to complete on device remove
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- fs: indicate request originates from old mount API
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- crypto: sahara - fix error handling in sahara_hw_descriptor_create()
- crypto: sahara - fix processing requests with cryptlen < sg->length
- crypto: sahara - fix ahash selftest failure
- crypto: sahara - fix cbc selftest failure
- crypto: sahara - remove FLAGS_NEW_KEY logic
- crypto: af_alg - Disallow multiple in-flight AIO requests
- crypto: ccp - fix memleak in ccp_init_dm_workarea
- crypto: sa2ul - Return crypto_aead_setkey to transfer the error
- crypto: virtio - Handle dataq logic with tasklet
- selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- kunit: debugfs: Fix unchecked dereference in debugfs_print_results()
- ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the error
- ACPI: LPSS: Fix the fractional clock divider flags
- spi: sh-msiof: Enforce fixed DTDL for R-Car H3
- efivarfs: force RO when remounting if SetVariable is not supported
- calipso: fix memory leak in netlbl_calipso_add_pass()
- cpufreq: scmi: process the result of devm_of_clk_add_hw_provider()
- cpufreq: Use of_property_present() for testing DT property presence
- of: Add of_property_present() helper
- of: property: define of_property_read_u{8,16,32,64}_array() unconditionally
- ACPI: LPIT: Avoid u32 multiplication overflow
- ACPI: video: check for error while searching for backlight device parent
- mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response
- spi: spi-zynqmp-gqspi: fix driver kconfig dependencies
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- powerpc/powernv: Add a null pointer check in opal_event_init()
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- selftests/powerpc: Fix error handling in FPU/VMX preemption tests
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/44x: select I2C for CURRITUCK
- powerpc: add crtsavres.o to always-y instead of extra-y
- powerpc: remove checks for binutils older than 2.25
- powerpc/toc: Future proof kernel toc
- powerpc: Mark .opd section read-only
- EDAC/thunderx: Fix possible out-of-bounds string access
- x86/lib: Fix overflow when counting digits
- coresight: etm4x: Fix width of CCITMIN field
- PCI: Add ACS quirk for more Zhaoxin Root Ports
- leds: ledtrig-tty: Free allocated ttyname buffer on deactivate
- parport: parport_serial: Add Brainboxes device IDs and geometry
- parport: parport_serial: Add Brainboxes BAR details
- uio: Fix use-after-free in uio_open
- binder: fix comment on binder_alloc_new_buf() return value
- binder: fix trivial typo of binder_free_buf_locked()
- binder: fix use-after-free in shinker's callback
- binder: use EPOLLERR from eventpoll.h
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list
- bpf: Add --skip_encoding_btf_inconsistent_proto, --btf_gen_optimized to
pahole flags for v1.25
- Revert "ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek"
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx
- drm/crtc: fix uninitialized variable use
- ARM: sun9i: smp: fix return code check of of_property_match_string
- net: qrtr: ns: Return 0 if server port is not present
- ida: Fix crash in ida_free when the bitmap is empty
- i2c: rk3x: fix potential spinlock recursion on poll
- ASoC: Intel: bytcr_rt5640: Add quirk for the Medion Lifetab S10346
- Input: xpad - add Razer Wolverine V2 support
- wifi: iwlwifi: pcie: avoid a NULL pointer dereference
- ARC: fix spare error
- s390/scm: fix virtual vs physical address confusion
- Input: i8042 - add nomux quirk for Acer P459-G2-M
- Input: atkbd - skip ATKBD_CMD_GETID in translated mode
- reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning
- ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI
- tracing: Fix uaf issue when open the hist or hist_debug file
- MIPS: dts: loongson: drop incorrect dwmac fallback compatible
- stmmac: dwmac-loongson: drop useless check for compatible fallback
- tracing: Add size check when printing trace_marker output
- tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing
- jbd2: fix soft lockup in journal_finish_inode_data_buffers()
- platform/x86: intel-vbtn: Fix missing tablet-mode-switch events
- neighbour: Don't let neigh_forced_gc() disable preemption for long
- drm/crtc: Fix uninit-value bug in drm_mode_setcrtc
- jbd2: correct the printing of write_flags in jbd2_write_superblock()
- clk: rockchip: rk3128: Fix HCLK_OTG gate register
- hwmon: (corsair-psu) Fix probe when built-in
- drm/exynos: fix a wrong error checking
- drm/exynos: fix a potential error pointer dereference
- drm/amdgpu: Add NULL checks for function pointers
- nvme: introduce helper function to get ctrl state
- ASoC: ops: add correct range check for limiting volume
- ASoC: da7219: Support low DC impedance headset
- net/tg3: fix race condition in tg3_reset_task()
- nouveau/tu102: flush all pdbs on vmm flush
- ASoC: rt5650: add mutex to avoid the jack detection failure
- ASoC: cs43130: Fix incorrect frame delay configuration
- ASoC: cs43130: Fix the position of const qualifier
- ASoC: Intel: Skylake: mem leak in skl register function
- ASoC: nau8822: Fix incorrect type in assignment and cast to restricted __be16
- ASoC: Intel: Skylake: Fix mem leak in few functions
- ASoC: wm8974: Correct boost mixer inputs
- nvme-core: check for too small lba shift
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- debugfs: fix automount d_fsdata usage
- wifi: cfg80211: lock wiphy mutex for rfkill poll
- mptcp: fix uninit-value in mptcp_incoming_options
- ALSA: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro
- pinctrl: lochnagar: Don't build on MIPS
- f2fs: explicitly null-terminate the xattr list
+ UBUNTU: Upstream stable to v5.15.148
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2055145
Title:
Jammy update: v5.15.148 upstream stable release
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2055145/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
