Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.197 upstream stable release
from git://git.kernel.org/
UBUNTU: SAUCE: drm/amd/display: Fix incorrect code path taken in
amdgpu_dm_atomic_check()
selftests: net: veth: test the ability to independently manipulate GRO and XDP
UBUNTU: [SAUCE] Fix selftest/net/rtnetlink.sh for Big Endian
UBUNTU: SAUCE: selftests: net: veth: use short form gro for ethtool -K
UBUNTU: SAUCE: selftests: net: veth: accept 0 for unsupported combined channels
selftests: net: use slowwait to stabilize vrf_route_leaking test
bridge: mcast: Fix use-after-free during router port configuration
xfrm: delete x->tunnel as we delete x
xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were
never added
net/sched: sch_qfq: Fix null-deref in agg_dequeue
x86/bugs: Fix reporting of LFENCE retpoline
btrfs: scrub: replace max_t()/min_t() with clamp() in scrub_throttle_dev_io()
btrfs: always drop log root tree reference in btrfs_replay_log()
btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot()
NFSD: Fix crash in nfsd4_read_release()
net: usb: asix_devices: Check return value of usbnet_get_endpoints
fbdev: atyfb: Check if pll_ops->init_pll failed
ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
fbdev: bitblit: bound-check glyph index in bit_putcs*
wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode
fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS
fbdev: valkyriefb: Fix reference count leak in valkyriefb_init
mptcp: restore window probe
ASoC: qdsp6: q6asm: do not sleep while atomic
wifi: ath10k: Fix memory leak on unsupported WMI command
drm/msm/a6xx: Fix GMU firmware parser
ALSA: usb-audio: fix control pipe direction
bpf: Sync pending IRQ work before freeing ring buffer
bpf: Do not audit capability check in do_jit()
riscv, libbpf: Add RISC-V (RV64) support to bpf_tracing.h
libbpf: Normalize PT_REGS_xxx() macro definitions
libbpf: Fix powerpc's stack register definition in bpf_tracing.h
usbnet: Prevents free active kevent
drm/etnaviv: fix flush sequence logic
net: hns3: return error code when function fails
drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table()
drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji
drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland
block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL
regmap: slimbus: fix bus_context pointer in regmap init calls
serial: 8250_dw: Use devm_add_action_or_reset()
serial: 8250_dw: handle reset control deassert error
dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp
ravb: Exclude gPTP feature support for RZ/G2L
net: ravb: Enforce descriptor type ordering
can: gs_usb: increase max interface to U8_MAX
net: phy: dp83867: Disable EEE support as not implemented
x86/resctrl: Fix miscount of bandwidth event when reactivating previously
unavailable RMID
xhci: dbc: Provide sysfs option to configure dbc descriptors
xhci: dbc: poll at different rate depending on data transfer activity
xhci: dbc: Allow users to modify DbC poll interval via sysfs
xhci: dbc: Improve performance by removing delay in transfer event polling.
xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive.
xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event
x86/boot: Compile boot code with -std=gnu11 too
arch: back to -std=gnu89 in < v5.18
Revert "docs/process/howto: Replace C89 with C11"
usb: gadget: f_fs: Fix epfile null pointer access after ep enable.
drm/sched: Fix race in drm_sched_entity_select_rq()
drm/sysfb: Do not dereference NULL pointer in plane reset
block: make REQ_OP_ZONE_OPEN a write operation
soc: aspeed: socinfo: Add AST27xx silicon IDs
soc: qcom: smem: Fix endian-unaware access of num_entries
spi: loopback-test: Don't use %pK through printk
soc: ti: pruss: don't use %pK through printk
bpf: Don't use %pK through printk
pinctrl: single: fix bias pull up/down handling in pin_config_set
mmc: host: renesas_sdhi: Fix the actual clock
memstick: Add timeout to prevent indefinite waiting
ACPI: video: force native for Lenovo 82K8
selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2
cpufreq/longhaul: handle NULL policy in longhaul_exit
arc: Fix __fls() const-foldability via __builtin_clzl()
irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment
ACPI: PRM: Skip handlers with NULL handler_address or NULL VA
ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[]
hwmon: (sbtsi_temp) AMD CPU extended temperature range support
power: supply: sbs-charger: Support multiple devices
mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card
ACPICA: dispatcher: Use acpi_ds_clear_operands() in
acpi_ds_call_control_method()
tee: allow a driver to allocate a tee_device without a pool
nvmet-fc: avoid scheduling association deletion twice
nvme-fc: use lock accessing port_state and rport state
video: backlight: lp855x_bl: Set correct EPROM start for LP8556
tools/cpupower: fix error return value in cpupower_write_sysfs()
cpuidle: Fail cpuidle device registration if there is one already
clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel
uprobe: Do not emulate/sstep original instruction when ip is changed
hwmon: (dell-smm) Add support for Dell OptiPlex 7040
tools/cpupower: Fix incorrect size in cpuidle_state_disable()
tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage
tools/power x86_energy_perf_policy: Enhance HWP enable
tools/power x86_energy_perf_policy: Prefer driver HWP limits
mfd: stmpe: Remove IRQ domain upon removal
mfd: stmpe-i2c: Add missing MODULE_LICENSE
mfd: madera: Work around false-positive -Wininitialized warning
mfd: da9063: Split chip variant reading in two bus transactions
drm/amd/pm: Use cached metrics data on aldebaran
drm/amd/pm: Use cached metrics data on arcturus
drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff
drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf()
PCI: Disable MSI on RDC PCI to PCIe bridges
selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8
selftests/net: Ensure assert() triggers in psock_tpacket.c
drm/amdkfd: return -ENOTTY for unsupported IOCTLs
media: pci: ivtv: Don't create fake v4l2_fh
drm/tidss: Use the crtc_* timings when programming the HW
drm/tidss: Set crtc modesetting parameters with adjusted mode
x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall
net: stmmac: Check stmmac_hw_setup() in stmmac_resume()
thunderbolt: Use is_pciehp instead of is_hotplug_bridge
powerpc/eeh: Use result of error_detected() in uevent
bridge: Redirect to backup port when port is administratively down
net: ipv6: fix field-spanning memcpy warning in AH output
media: imon: make send_packet() more robust
drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts
iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before
setting register
usb: gadget: f_ncm: Fix MAC assignment NCM ethernet
char: misc: Does not request module for miscdevice with dynamic minor
net: When removing nexthops, don't call synchronize_net if it is not necessary
net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV.
PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call
ALSA: usb-audio: Add validation of UAC2/UAC3 effect units
rds: Fix endianness annotation for RDS_MPATH_HASH
scsi: mpi3mr: Fix controller init failure on fault during queue creation
scsi: pm80xx: Fix race condition caused by static variables
extcon: adc-jack: Fix wakeup source leaks on device unbind
drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption
media: fix uninitialized symbol warnings
mips: lantiq: danube: add missing properties to cpu node
mips: lantiq: danube: add missing device_type in pci node
mips: lantiq: xway: sysctrl: rename stp clock
scsi: pm8001: Use int instead of u32 to store error codes
ptp: Limit time setting of PTP clocks
dmaengine: sh: setup_xref error handling
dmaengine: mv_xor: match alloc_wc and free_wc
dmaengine: dw-edma: Set status for callback_result
drm/msm/dsi/phy: Toggle back buffer resync after preparing PLL
drm/msm/dsi/phy_7nm: Fix missing initial VCO rate
ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled
net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms
net: call cond_resched() less often in __release_sock()
iommu/amd: Skip enabling command/event buffers for kdump
usb: gadget: f_hid: Fix zero length packet transfer
usb: cdns3: gadget: Use-after-free during failed initialization and exit of
cdnsp gadget
drm/msm: make sure to not queue up recovery more than once
net: phy: marvell: Fix 88e1510 downshift counter errata
ntfs3: pretend $Extend records as regular files
phy: cadence: cdns-dphy: Enable lower resolutions in dphy
phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0
net: sh_eth: Disable WoL if system can not suspend
media: redrat3: use int type to store negative error codes
selftests: traceroute: Use require_command()
netfilter: nf_reject: don't reply to icmp error messages
x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of PV_UNHALT
selftests: Disable dad for ipv6 in fcnal-test.sh
eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP
UBUNTU: [Config] Disable CONFIG_8139TOO_PIO for armhf
selftests: Replace sleep with slowwait
udp_tunnel: use netdev_warn() instead of netdev_WARN()
net/cls_cgroup: Fix task_get_classid() during qdisc run
drm/amdgpu: Use memdup_array_user in amdgpu_cs_wait_fences_ioctl
page_pool: always add GFP_NOWARN for ATOMIC allocations
selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean
net/lib dependency
scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET
scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup
scsi: lpfc: Define size of debugfs entry for xri rebalancing
allow finish_no_open(file, ERR_PTR(-E...))
usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs
usb: xhci: plat: Facilitate using autosuspend for xhci plat devices
ipv6: np->rxpmtu race annotation
jfs: Verify inode mode when loading from disk
jfs: fix uninitialized waitqueue in transaction manager
net: ethernet: microchip: sparx5: make it selectable for ARCH_LAN969X
iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot()
wifi: ath10k: Fix connection after GTK rekeying
net: intel: fm10k: Fix parameter idx set but not used
r8169: set EEE speed down ratio to 1
PCI: cadence: Check for the existence of cdns_pcie::ops before using it
sparc/module: Add R_SPARC_UA64 relocation handling
remoteproc: qcom: q6v5: Avoid handling handover twice
NFSv4: handle ERR_GRACE on delegation recalls
NFSv4.1: fix mount hang after CREATE_SESSION failure
nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing
scsi: libfc: Fix potential buffer overflow in fc_ct_ms_fill()
fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock
net: macb: avoid dealing with endianness in macb_set_hwaddr()
Bluetooth: SCO: Fix UAF on sco_conn_free
Bluetooth: bcsp: receive data only if registered
ALSA: usb-audio: add mono main switch to Presonus S1824c
exfat: limit log print for IO error
page_pool: Clamp pool size to max 16K pages
orangefs: fix xattr related buffer overflow...
ACPICA: Update dsmethod.c to get rid of unused variable warning
RDMA/irdma: Fix SD index calculation
RDMA/irdma: Remove unused struct irdma_cq fields
RDMA/irdma: Set irdma_cq cq_num field during CQ create
RDMA/hns: Fix wrong WQE data when QP wraps around
btrfs: mark dirty extent range for out of bound prealloc extents
fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink
um: Fix help message for ssl-non-raw
rtc: pcf2127: clear minute/second interrupt
ARM: at91: pm: save and restore ACR during PLL disable/enable
clk: at91: clk-master: Add check for divide by 3
clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled
9p: fix /sys/fs/9p/caches overwriting itself
cpufreq: tegra186: Initialize all cores to max frequencies
9p: sysfs_init: don't hardcode error to ENOMEM
ACPI: property: Return present device nodes only on fwnode interface
fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
ASoC: meson: aiu-encoder-i2s: fix bit clock polarity
ceph: add checking of wait_for_completion_killable() return value
ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again
Revert "wifi: ath10k: avoid unnecessary wait for service ready message"
riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro
net: dsa: tag_brcm: legacy: fix untagged rx on unbridged ports for bcm63xx
selftests/net: fix out-of-order delivery of FIN in gro:tcp test
selftests/net: fix GRO coalesce test and add ext header coalesce tests
selftests/net: use destination options instead of hop-by-hop
netdevsim: add Makefile for selftests
selftests: netdevsim: Fix ethtool-coalesce.sh fail by installing
ethtool-common.sh
net: vlan: sync VLAN features with lower device
net: dsa: b53: fix resetting speed and pause on forced link
net: dsa: b53: fix enabling ip multicast
net: dsa: b53: stop reading ARL entries if search is done
sctp: Hold RCU read lock while iterating over address list
sctp: Prevent TOCTOU out-of-bounds write
sctp: Hold sock lock while iterating over address list
net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
bnxt_en: PTP: Refactor PTP initialization functions
bnxt_en: Fix a possible memory leak in bnxt_ptp_init
tracing: Fix memory leaks in create_field_var()
rtc: rx8025: fix incorrect register reference
lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC
extcon: adc-jack: Cleanup wakeup source only if it was enabled
selftests: netdevsim: set test timeout to 10 minutes
drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD
compiler_types: Move unused static inline functions warning to W=2
RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence
errors
NFS4: Fix state renewals missing after boot
HID: quirks: avoid Cooler Master MM712 dongle wakeup bug
NFS: check if suid/sgid was cleared after a write as needed
ASoC: max98090/91: fixed max98091 ALSA widget powering up/down
net: fec: correct rx_bytes statistic for the case SHIFT16 is set
Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion
Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions
sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto
net/smc: fix mismatch between CLC header and proposal
tipc: Fix use-after-free in tipc_mon_reinit_self().
net: mdio: fix resource leak in mdiobus_register_device()
wifi: mac80211: skip rate verification for not captured PSDUs
net: sched: act: move global static variable net_id to tc_action_ops
net: sched: act_connmark: get rid of tcf_connmark_walker and tcf_connmark_search
net/sched: act_connmark: transition to percpu stats and rcu
net_sched: act_connmark: use RCU in tcf_connmark_dump()
net: sched: act_connmark: initialize struct tc_ife to fix kernel leak
net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
net/mlx5e: Fix maxrate wraparound in threshold between units
net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps
net_sched: limit try_bulk_dequeue_skb() batches
hsr: Fix supervision frame sending on HSRv0
Bluetooth: L2CAP: export l2cap_chan_hold for modules
acpi,srat: Fix incorrect device handle check for Generic Initiator
regulator: fixed: fix GPIO descriptor leak on register failure
ASoC: cs4271: Fix regulator leak on probe failure
drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
NFSv4: Fix an incorrect parameter when calling nfs4_call_sync()
ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd
bpf: Add bpf_prog_run_data_pointers()
mptcp: pm: in-kernel: C-flag: handle late ADD_ADDR
mm/ksm: fix flag-dropping behavior in ksm_madvise
lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN
mtd: onenand: Pass correct pointer to IRQ handler
HID: hid-ntrig: Prevent memory leak in ntrig_report_version()
NFSD: free copynotify stateid in nfs4_free_ol_stateid()
gcov: add support for GCC 15
strparser: Fix signed/unsigned mismatch bug
ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe
fs/proc: fix uaf in proc_readdir_de()
ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check
spi: Try to get ACPI GPIO IRQ earlier
EDAC/altera: Handle OCRAM ECC enable after warm reset
EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection
isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
net/sched: act_connmark: handle errno on tcf_idr_check_alloc
HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155
mtd: rawnand: cadence: fix DMA device NULL pointer dereference
exfat: check return value of sb_min_blocksize in exfat_read_boot_sector
be2net: pass wrb_params in case of OS2BMC
Input: cros_ec_keyb - fix an invalid memory access
Input: imx_sc_key - fix memory corruption on unload
nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
scsi: sg: Do not sleep in atomic context
scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
MIPS: Malta: Fix !EVA SOC-it PCI MMIO
mptcp: fix race condition in mptcp_schedule_work()
drm/tegra: dc: Fix reference leak in tegra_dc_couple()
mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats()
net: dsa: hellcreek: fix missing error handling in LED registration
net: openvswitch: remove never-working support for setting nsh fields
s390/ctcm: Fix double-kfree
platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos
kernel.h: Move ARRAY_SIZE() to a separate header
net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and
qede_tpa_end()
vsock: Ignore signal/timeout on connect() if already established
scsi: core: Fix a regression triggered by scsi_host_busy()
selftests: net: use BASH for bareudp testing
net: tls: Cancel RX async resync request on rcd_delta overflow
kconfig/mconf: Initialize the default locale at startup
kconfig/nconf: Initialize the default locale at startup
mm/mm_init: fix hash table order logging in alloc_large_system_hash()
mm/secretmem: fix use-after-free race in fault handler
ALSA: usb-audio: fix uac2 clock source at terminal parser
net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on
error
tracing/tools: Fix incorrcet short option in usage text for --threads
uio_hv_generic: Set event for all channels on the device
Makefile.compiler: replace cc-ifversion with compiler-specific macros
btrfs: add helper to truncate inode items when logging inode
btrfs: fix crash on racing fsync and size-extending write into prealloc
mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4
net: netpoll: fix incorrect refcount handling causing incorrect cleanup
pmdomain: imx: Fix reference count leak in imx_gpc_remove
pmdomain: arm: scmi: Fix genpd leak on provider registration failure
pmdomain: samsung: plug potential memleak during probe
selftests: mptcp: connect: fix fallback note due to OoO
mptcp: Disallow MPTCP subflows from sockmap
usb: deprecate the third argument of usb_maxpacket()
Input: remove third argument of usb_maxpacket()
Input: pegasus-notetaker - fix potential out-of-bounds access
ata: libata-scsi: Fix system suspend for a security locked drive
dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups
mptcp: fix ack generation for fallback msk
mptcp: fix premature close in case of fallback
mptcp: fix a race in mptcp_pm_del_add_timer()
mptcp: do not fallback when OoO is present
Revert "block: Move checking GENHD_FL_NO_PART to bdev_add_partition()"
Revert "block: don't add or resize partition on the disk with GENHD_FL_NO_PART"
can: kvaser_usb: leaf: Fix potential infinite loop in command parsers
Bluetooth: SMP: Fix not generating mackey and ltk when repairing
platform/x86: intel: punit_ipc: fix memory corruption
net: aquantia: Add missing descriptor cache invalidation on ATL2
net/mlx5e: Fix validation logic in rate limiting
net: sxgbe: fix potential NULL dereference in sxgbe_rx()
net: dsa: sja1105: Convert to mdiobus_c45_read
net: dsa: sja1105: simplify static configuration reload
net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic
net: atlantic: fix fragment overflow handling in RX path
mailbox: mailbox-test: Fix debugfs_create_dir error checking
spi: bcm63xx: fix premature CS deassertion on RX-only transactions
Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()"
iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields
iio:common:ssp_sensors: Fix an error handling path ssp_probe()
iio: accel: bmc150: Fix irq assumption regression
MIPS: mm: Prevent a TLB shutdown on initial uniquification
atm/fore200e: Fix possible data race in fore200e_open()
can: sja1000: fix max irq loop handling
can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling
dm-verity: fix unreliable memory allocation
drivers/usb/dwc3: fix PCI parent check
thunderbolt: Add support for Intel Wildcat Lake
slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves
firmware: stratix10-svc: fix bug in saving controller data
serial: amba-pl011: prefer dma_mapping_error() over explicit address checking
most: usb: fix double free on late probe failure
usb: cdns3: Fix double resource release in cdns3_pci_probe
usb: gadget: f_eem: Fix memory leak in eem_unwrap
usb: storage: Fix memory leak in USB bulk transport
USB: storage: Remove subclass and protocol overrides from Novatek quirk
usb: storage: sddr55: Reject out-of-bound new_pba
usb: uas: fix urb unmapping issue when the uas device is remove during ongoing
data transfer
usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call
paths
xhci: dbgtty: Fix data corruption when transmitting data form DbC to host
USB: serial: ftdi_sio: add support for u-blox EVK-M101
USB: serial: option: add support for Rolling RW101R-GL
drm: sti: fix device leaks at component probe
drm/amd/display: Check NULL before accessing
libceph: fix potential use-after-free in have_mon_and_osd_map()
libceph: prevent potential out-of-bounds writes in handle_auth_session_key()
staging: rtl8712: Remove driver using deprecated API wext
UBUNTU: [Config] Remove config option for CONFIG_R8712U
selftests: mptcp: join: rm: set backup flag
mptcp: avoid unneeded subflow-level drops
mptcp: Fix proto fallback detection with BPF
smb: client: fix memory leak in cifs_construct_tcon()
usb: renesas_usbhs: Convert to platform remove callback returning void
usb: renesas_usbhs: Fix synchronous external abort on unbind
usb: typec: ucsi: psy: Set max current to zero when disconnected
scsi: pm80xx: Set phy->enable_completion only when we
selftests/bpf: Don't rely on preserving volatile in PT_REGS macros in loop3
libbpf: Fix riscv register names
libbpf, riscv: Use a0 for RC register
libbpf: Fix invalid return address register in s390
Linux 5.15.197
UBUNTU: Upstream stable to v5.15.197
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Jammy)
Importance: Medium
Assignee: Alice C. Munduruca (cremfuelled)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Jammy)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Jammy)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Jammy)
Status: New => In Progress
** Changed in: linux (Ubuntu Jammy)
Assignee: (unassigned) => Alice C. Munduruca (cremfuelled)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.197 upstream stable release
from git://git.kernel.org/
-
+ UBUNTU: SAUCE: drm/amd/display: Fix incorrect code path taken in
amdgpu_dm_atomic_check()
+ selftests: net: veth: test the ability to independently manipulate GRO and XDP
+ UBUNTU: [SAUCE] Fix selftest/net/rtnetlink.sh for Big Endian
+ UBUNTU: SAUCE: selftests: net: veth: use short form gro for ethtool -K
+ UBUNTU: SAUCE: selftests: net: veth: accept 0 for unsupported combined
channels
+ selftests: net: use slowwait to stabilize vrf_route_leaking test
+ bridge: mcast: Fix use-after-free during router port configuration
+ xfrm: delete x->tunnel as we delete x
+ xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were
never added
+ net/sched: sch_qfq: Fix null-deref in agg_dequeue
+ x86/bugs: Fix reporting of LFENCE retpoline
+ btrfs: scrub: replace max_t()/min_t() with clamp() in scrub_throttle_dev_io()
+ btrfs: always drop log root tree reference in btrfs_replay_log()
+ btrfs: use smp_mb__after_atomic() when forcing COW in
create_pending_snapshot()
+ NFSD: Fix crash in nfsd4_read_release()
+ net: usb: asix_devices: Check return value of usbnet_get_endpoints
+ fbdev: atyfb: Check if pll_ops->init_pll failed
+ ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
+ fbdev: bitblit: bound-check glyph index in bit_putcs*
+ wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode
+ fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS
+ fbdev: valkyriefb: Fix reference count leak in valkyriefb_init
+ mptcp: restore window probe
+ ASoC: qdsp6: q6asm: do not sleep while atomic
+ wifi: ath10k: Fix memory leak on unsupported WMI command
+ drm/msm/a6xx: Fix GMU firmware parser
+ ALSA: usb-audio: fix control pipe direction
+ bpf: Sync pending IRQ work before freeing ring buffer
+ bpf: Do not audit capability check in do_jit()
+ riscv, libbpf: Add RISC-V (RV64) support to bpf_tracing.h
+ libbpf: Normalize PT_REGS_xxx() macro definitions
+ libbpf: Fix powerpc's stack register definition in bpf_tracing.h
+ usbnet: Prevents free active kevent
+ drm/etnaviv: fix flush sequence logic
+ net: hns3: return error code when function fails
+ drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table()
+ drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji
+ drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland
+ block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL
+ regmap: slimbus: fix bus_context pointer in regmap init calls
+ serial: 8250_dw: Use devm_add_action_or_reset()
+ serial: 8250_dw: handle reset control deassert error
+ dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp
+ ravb: Exclude gPTP feature support for RZ/G2L
+ net: ravb: Enforce descriptor type ordering
+ can: gs_usb: increase max interface to U8_MAX
+ net: phy: dp83867: Disable EEE support as not implemented
+ x86/resctrl: Fix miscount of bandwidth event when reactivating previously
unavailable RMID
+ xhci: dbc: Provide sysfs option to configure dbc descriptors
+ xhci: dbc: poll at different rate depending on data transfer activity
+ xhci: dbc: Allow users to modify DbC poll interval via sysfs
+ xhci: dbc: Improve performance by removing delay in transfer event polling.
+ xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive.
+ xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event
+ x86/boot: Compile boot code with -std=gnu11 too
+ arch: back to -std=gnu89 in < v5.18
+ Revert "docs/process/howto: Replace C89 with C11"
+ usb: gadget: f_fs: Fix epfile null pointer access after ep enable.
+ drm/sched: Fix race in drm_sched_entity_select_rq()
+ drm/sysfb: Do not dereference NULL pointer in plane reset
+ block: make REQ_OP_ZONE_OPEN a write operation
+ soc: aspeed: socinfo: Add AST27xx silicon IDs
+ soc: qcom: smem: Fix endian-unaware access of num_entries
+ spi: loopback-test: Don't use %pK through printk
+ soc: ti: pruss: don't use %pK through printk
+ bpf: Don't use %pK through printk
+ pinctrl: single: fix bias pull up/down handling in pin_config_set
+ mmc: host: renesas_sdhi: Fix the actual clock
+ memstick: Add timeout to prevent indefinite waiting
+ ACPI: video: force native for Lenovo 82K8
+ selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2
+ cpufreq/longhaul: handle NULL policy in longhaul_exit
+ arc: Fix __fls() const-foldability via __builtin_clzl()
+ irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment
+ ACPI: PRM: Skip handlers with NULL handler_address or NULL VA
+ ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[]
+ hwmon: (sbtsi_temp) AMD CPU extended temperature range support
+ power: supply: sbs-charger: Support multiple devices
+ mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card
+ ACPICA: dispatcher: Use acpi_ds_clear_operands() in
acpi_ds_call_control_method()
+ tee: allow a driver to allocate a tee_device without a pool
+ nvmet-fc: avoid scheduling association deletion twice
+ nvme-fc: use lock accessing port_state and rport state
+ video: backlight: lp855x_bl: Set correct EPROM start for LP8556
+ tools/cpupower: fix error return value in cpupower_write_sysfs()
+ cpuidle: Fail cpuidle device registration if there is one already
+ clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel
+ uprobe: Do not emulate/sstep original instruction when ip is changed
+ hwmon: (dell-smm) Add support for Dell OptiPlex 7040
+ tools/cpupower: Fix incorrect size in cpuidle_state_disable()
+ tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage
+ tools/power x86_energy_perf_policy: Enhance HWP enable
+ tools/power x86_energy_perf_policy: Prefer driver HWP limits
+ mfd: stmpe: Remove IRQ domain upon removal
+ mfd: stmpe-i2c: Add missing MODULE_LICENSE
+ mfd: madera: Work around false-positive -Wininitialized warning
+ mfd: da9063: Split chip variant reading in two bus transactions
+ drm/amd/pm: Use cached metrics data on aldebaran
+ drm/amd/pm: Use cached metrics data on arcturus
+ drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff
+ drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf()
+ PCI: Disable MSI on RDC PCI to PCIe bridges
+ selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8
+ selftests/net: Ensure assert() triggers in psock_tpacket.c
+ drm/amdkfd: return -ENOTTY for unsupported IOCTLs
+ media: pci: ivtv: Don't create fake v4l2_fh
+ drm/tidss: Use the crtc_* timings when programming the HW
+ drm/tidss: Set crtc modesetting parameters with adjusted mode
+ x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall
+ net: stmmac: Check stmmac_hw_setup() in stmmac_resume()
+ thunderbolt: Use is_pciehp instead of is_hotplug_bridge
+ powerpc/eeh: Use result of error_detected() in uevent
+ bridge: Redirect to backup port when port is administratively down
+ net: ipv6: fix field-spanning memcpy warning in AH output
+ media: imon: make send_packet() more robust
+ drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts
+ iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before
setting register
+ usb: gadget: f_ncm: Fix MAC assignment NCM ethernet
+ char: misc: Does not request module for miscdevice with dynamic minor
+ net: When removing nexthops, don't call synchronize_net if it is not necessary
+ net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV.
+ PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call
+ ALSA: usb-audio: Add validation of UAC2/UAC3 effect units
+ rds: Fix endianness annotation for RDS_MPATH_HASH
+ scsi: mpi3mr: Fix controller init failure on fault during queue creation
+ scsi: pm80xx: Fix race condition caused by static variables
+ extcon: adc-jack: Fix wakeup source leaks on device unbind
+ drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption
+ media: fix uninitialized symbol warnings
+ mips: lantiq: danube: add missing properties to cpu node
+ mips: lantiq: danube: add missing device_type in pci node
+ mips: lantiq: xway: sysctrl: rename stp clock
+ scsi: pm8001: Use int instead of u32 to store error codes
+ ptp: Limit time setting of PTP clocks
+ dmaengine: sh: setup_xref error handling
+ dmaengine: mv_xor: match alloc_wc and free_wc
+ dmaengine: dw-edma: Set status for callback_result
+ drm/msm/dsi/phy: Toggle back buffer resync after preparing PLL
+ drm/msm/dsi/phy_7nm: Fix missing initial VCO rate
+ ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled
+ net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms
+ net: call cond_resched() less often in __release_sock()
+ iommu/amd: Skip enabling command/event buffers for kdump
+ usb: gadget: f_hid: Fix zero length packet transfer
+ usb: cdns3: gadget: Use-after-free during failed initialization and exit of
cdnsp gadget
+ drm/msm: make sure to not queue up recovery more than once
+ net: phy: marvell: Fix 88e1510 downshift counter errata
+ ntfs3: pretend $Extend records as regular files
+ phy: cadence: cdns-dphy: Enable lower resolutions in dphy
+ phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0
+ net: sh_eth: Disable WoL if system can not suspend
+ media: redrat3: use int type to store negative error codes
+ selftests: traceroute: Use require_command()
+ netfilter: nf_reject: don't reply to icmp error messages
+ x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of PV_UNHALT
+ selftests: Disable dad for ipv6 in fcnal-test.sh
+ eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP
+ UBUNTU: [Config] Disable CONFIG_8139TOO_PIO for armhf
+ selftests: Replace sleep with slowwait
+ udp_tunnel: use netdev_warn() instead of netdev_WARN()
+ net/cls_cgroup: Fix task_get_classid() during qdisc run
+ drm/amdgpu: Use memdup_array_user in amdgpu_cs_wait_fences_ioctl
+ page_pool: always add GFP_NOWARN for ATOMIC allocations
+ selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean
net/lib dependency
+ scsi: lpfc: Check return status of lpfc_reset_flush_io_context during
TGT_RESET
+ scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup
+ scsi: lpfc: Define size of debugfs entry for xri rebalancing
+ allow finish_no_open(file, ERR_PTR(-E...))
+ usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs
+ usb: xhci: plat: Facilitate using autosuspend for xhci plat devices
+ ipv6: np->rxpmtu race annotation
+ jfs: Verify inode mode when loading from disk
+ jfs: fix uninitialized waitqueue in transaction manager
+ net: ethernet: microchip: sparx5: make it selectable for ARCH_LAN969X
+ iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot()
+ wifi: ath10k: Fix connection after GTK rekeying
+ net: intel: fm10k: Fix parameter idx set but not used
+ r8169: set EEE speed down ratio to 1
+ PCI: cadence: Check for the existence of cdns_pcie::ops before using it
+ sparc/module: Add R_SPARC_UA64 relocation handling
+ remoteproc: qcom: q6v5: Avoid handling handover twice
+ NFSv4: handle ERR_GRACE on delegation recalls
+ NFSv4.1: fix mount hang after CREATE_SESSION failure
+ nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode
dereferencing
+ scsi: libfc: Fix potential buffer overflow in fc_ct_ms_fill()
+ fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock
+ net: macb: avoid dealing with endianness in macb_set_hwaddr()
+ Bluetooth: SCO: Fix UAF on sco_conn_free
+ Bluetooth: bcsp: receive data only if registered
+ ALSA: usb-audio: add mono main switch to Presonus S1824c
+ exfat: limit log print for IO error
+ page_pool: Clamp pool size to max 16K pages
+ orangefs: fix xattr related buffer overflow...
+ ACPICA: Update dsmethod.c to get rid of unused variable warning
+ RDMA/irdma: Fix SD index calculation
+ RDMA/irdma: Remove unused struct irdma_cq fields
+ RDMA/irdma: Set irdma_cq cq_num field during CQ create
+ RDMA/hns: Fix wrong WQE data when QP wraps around
+ btrfs: mark dirty extent range for out of bound prealloc extents
+ fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink
+ um: Fix help message for ssl-non-raw
+ rtc: pcf2127: clear minute/second interrupt
+ ARM: at91: pm: save and restore ACR during PLL disable/enable
+ clk: at91: clk-master: Add check for divide by 3
+ clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled
+ 9p: fix /sys/fs/9p/caches overwriting itself
+ cpufreq: tegra186: Initialize all cores to max frequencies
+ 9p: sysfs_init: don't hardcode error to ENOMEM
+ ACPI: property: Return present device nodes only on fwnode interface
+ fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
+ ASoC: meson: aiu-encoder-i2s: fix bit clock polarity
+ ceph: add checking of wait_for_completion_killable() return value
+ ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again
+ Revert "wifi: ath10k: avoid unnecessary wait for service ready message"
+ riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro
+ net: dsa: tag_brcm: legacy: fix untagged rx on unbridged ports for bcm63xx
+ selftests/net: fix out-of-order delivery of FIN in gro:tcp test
+ selftests/net: fix GRO coalesce test and add ext header coalesce tests
+ selftests/net: use destination options instead of hop-by-hop
+ netdevsim: add Makefile for selftests
+ selftests: netdevsim: Fix ethtool-coalesce.sh fail by installing
ethtool-common.sh
+ net: vlan: sync VLAN features with lower device
+ net: dsa: b53: fix resetting speed and pause on forced link
+ net: dsa: b53: fix enabling ip multicast
+ net: dsa: b53: stop reading ARL entries if search is done
+ sctp: Hold RCU read lock while iterating over address list
+ sctp: Prevent TOCTOU out-of-bounds write
+ sctp: Hold sock lock while iterating over address list
+ net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
+ bnxt_en: PTP: Refactor PTP initialization functions
+ bnxt_en: Fix a possible memory leak in bnxt_ptp_init
+ tracing: Fix memory leaks in create_field_var()
+ rtc: rx8025: fix incorrect register reference
+ lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC
+ extcon: adc-jack: Cleanup wakeup source only if it was enabled
+ selftests: netdevsim: set test timeout to 10 minutes
+ drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD
+ compiler_types: Move unused static inline functions warning to W=2
+ RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence
errors
+ NFS4: Fix state renewals missing after boot
+ HID: quirks: avoid Cooler Master MM712 dongle wakeup bug
+ NFS: check if suid/sgid was cleared after a write as needed
+ ASoC: max98090/91: fixed max98091 ALSA widget powering up/down
+ net: fec: correct rx_bytes statistic for the case SHIFT16 is set
+ Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
+ Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
+ Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion
+ Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions
+ sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto
+ net/smc: fix mismatch between CLC header and proposal
+ tipc: Fix use-after-free in tipc_mon_reinit_self().
+ net: mdio: fix resource leak in mdiobus_register_device()
+ wifi: mac80211: skip rate verification for not captured PSDUs
+ net: sched: act: move global static variable net_id to tc_action_ops
+ net: sched: act_connmark: get rid of tcf_connmark_walker and
tcf_connmark_search
+ net/sched: act_connmark: transition to percpu stats and rcu
+ net_sched: act_connmark: use RCU in tcf_connmark_dump()
+ net: sched: act_connmark: initialize struct tc_ife to fix kernel leak
+ net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
+ net/mlx5e: Fix maxrate wraparound in threshold between units
+ net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps
+ net_sched: limit try_bulk_dequeue_skb() batches
+ hsr: Fix supervision frame sending on HSRv0
+ Bluetooth: L2CAP: export l2cap_chan_hold for modules
+ acpi,srat: Fix incorrect device handle check for Generic Initiator
+ regulator: fixed: fix GPIO descriptor leak on register failure
+ ASoC: cs4271: Fix regulator leak on probe failure
+ drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
+ NFSv4: Fix an incorrect parameter when calling nfs4_call_sync()
+ ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd
+ bpf: Add bpf_prog_run_data_pointers()
+ mptcp: pm: in-kernel: C-flag: handle late ADD_ADDR
+ mm/ksm: fix flag-dropping behavior in ksm_madvise
+ lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN
+ mtd: onenand: Pass correct pointer to IRQ handler
+ HID: hid-ntrig: Prevent memory leak in ntrig_report_version()
+ NFSD: free copynotify stateid in nfs4_free_ol_stateid()
+ gcov: add support for GCC 15
+ strparser: Fix signed/unsigned mismatch bug
+ ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe
+ fs/proc: fix uaf in proc_readdir_de()
+ ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
+ ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check
+ spi: Try to get ACPI GPIO IRQ earlier
+ EDAC/altera: Handle OCRAM ECC enable after warm reset
+ EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection
+ isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
+ net/sched: act_connmark: handle errno on tcf_idr_check_alloc
+ HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155
+ mtd: rawnand: cadence: fix DMA device NULL pointer dereference
+ exfat: check return value of sb_min_blocksize in exfat_read_boot_sector
+ be2net: pass wrb_params in case of OS2BMC
+ Input: cros_ec_keyb - fix an invalid memory access
+ Input: imx_sc_key - fix memory corruption on unload
+ nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
+ scsi: sg: Do not sleep in atomic context
+ scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
+ MIPS: Malta: Fix !EVA SOC-it PCI MMIO
+ mptcp: fix race condition in mptcp_schedule_work()
+ drm/tegra: dc: Fix reference leak in tegra_dc_couple()
+ mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats()
+ net: dsa: hellcreek: fix missing error handling in LED registration
+ net: openvswitch: remove never-working support for setting nsh fields
+ s390/ctcm: Fix double-kfree
+ platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos
+ kernel.h: Move ARRAY_SIZE() to a separate header
+ net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and
qede_tpa_end()
+ vsock: Ignore signal/timeout on connect() if already established
+ scsi: core: Fix a regression triggered by scsi_host_busy()
+ selftests: net: use BASH for bareudp testing
+ net: tls: Cancel RX async resync request on rcd_delta overflow
+ kconfig/mconf: Initialize the default locale at startup
+ kconfig/nconf: Initialize the default locale at startup
+ mm/mm_init: fix hash table order logging in alloc_large_system_hash()
+ mm/secretmem: fix use-after-free race in fault handler
+ ALSA: usb-audio: fix uac2 clock source at terminal parser
+ net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on
error
+ tracing/tools: Fix incorrcet short option in usage text for --threads
+ uio_hv_generic: Set event for all channels on the device
+ Makefile.compiler: replace cc-ifversion with compiler-specific macros
+ btrfs: add helper to truncate inode items when logging inode
+ btrfs: fix crash on racing fsync and size-extending write into prealloc
+ mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4
+ net: netpoll: fix incorrect refcount handling causing incorrect cleanup
+ pmdomain: imx: Fix reference count leak in imx_gpc_remove
+ pmdomain: arm: scmi: Fix genpd leak on provider registration failure
+ pmdomain: samsung: plug potential memleak during probe
+ selftests: mptcp: connect: fix fallback note due to OoO
+ mptcp: Disallow MPTCP subflows from sockmap
+ usb: deprecate the third argument of usb_maxpacket()
+ Input: remove third argument of usb_maxpacket()
+ Input: pegasus-notetaker - fix potential out-of-bounds access
+ ata: libata-scsi: Fix system suspend for a security locked drive
+ dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups
+ mptcp: fix ack generation for fallback msk
+ mptcp: fix premature close in case of fallback
+ mptcp: fix a race in mptcp_pm_del_add_timer()
+ mptcp: do not fallback when OoO is present
+ Revert "block: Move checking GENHD_FL_NO_PART to bdev_add_partition()"
+ Revert "block: don't add or resize partition on the disk with
GENHD_FL_NO_PART"
+ can: kvaser_usb: leaf: Fix potential infinite loop in command parsers
+ Bluetooth: SMP: Fix not generating mackey and ltk when repairing
+ platform/x86: intel: punit_ipc: fix memory corruption
+ net: aquantia: Add missing descriptor cache invalidation on ATL2
+ net/mlx5e: Fix validation logic in rate limiting
+ net: sxgbe: fix potential NULL dereference in sxgbe_rx()
+ net: dsa: sja1105: Convert to mdiobus_c45_read
+ net: dsa: sja1105: simplify static configuration reload
+ net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic
+ net: atlantic: fix fragment overflow handling in RX path
+ mailbox: mailbox-test: Fix debugfs_create_dir error checking
+ spi: bcm63xx: fix premature CS deassertion on RX-only transactions
+ Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()"
+ iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields
+ iio:common:ssp_sensors: Fix an error handling path ssp_probe()
+ iio: accel: bmc150: Fix irq assumption regression
+ MIPS: mm: Prevent a TLB shutdown on initial uniquification
+ atm/fore200e: Fix possible data race in fore200e_open()
+ can: sja1000: fix max irq loop handling
+ can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling
+ dm-verity: fix unreliable memory allocation
+ drivers/usb/dwc3: fix PCI parent check
+ thunderbolt: Add support for Intel Wildcat Lake
+ slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves
+ firmware: stratix10-svc: fix bug in saving controller data
+ serial: amba-pl011: prefer dma_mapping_error() over explicit address checking
+ most: usb: fix double free on late probe failure
+ usb: cdns3: Fix double resource release in cdns3_pci_probe
+ usb: gadget: f_eem: Fix memory leak in eem_unwrap
+ usb: storage: Fix memory leak in USB bulk transport
+ USB: storage: Remove subclass and protocol overrides from Novatek quirk
+ usb: storage: sddr55: Reject out-of-bound new_pba
+ usb: uas: fix urb unmapping issue when the uas device is remove during
ongoing data transfer
+ usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call
paths
+ xhci: dbgtty: Fix data corruption when transmitting data form DbC to host
+ USB: serial: ftdi_sio: add support for u-blox EVK-M101
+ USB: serial: option: add support for Rolling RW101R-GL
+ drm: sti: fix device leaks at component probe
+ drm/amd/display: Check NULL before accessing
+ libceph: fix potential use-after-free in have_mon_and_osd_map()
+ libceph: prevent potential out-of-bounds writes in handle_auth_session_key()
+ staging: rtl8712: Remove driver using deprecated API wext
+ UBUNTU: [Config] Remove config option for CONFIG_R8712U
+ selftests: mptcp: join: rm: set backup flag
+ mptcp: avoid unneeded subflow-level drops
+ mptcp: Fix proto fallback detection with BPF
+ smb: client: fix memory leak in cifs_construct_tcon()
+ usb: renesas_usbhs: Convert to platform remove callback returning void
+ usb: renesas_usbhs: Fix synchronous external abort on unbind
+ usb: typec: ucsi: psy: Set max current to zero when disconnected
+ scsi: pm80xx: Set phy->enable_completion only when we
+ selftests/bpf: Don't rely on preserving volatile in PT_REGS macros in loop3
+ libbpf: Fix riscv register names
+ libbpf, riscv: Use a0 for RC register
+ libbpf: Fix invalid return address register in s390
Linux 5.15.197
- libbpf: Fix invalid return address register in s390
- libbpf, riscv: Use a0 for RC register
- libbpf: Fix riscv register names
- selftests/bpf: Don't rely on preserving volatile in PT_REGS macros in loop3
- scsi: pm80xx: Set phy->enable_completion only when we
- Bluetooth: Add more enc key size check
- usb: typec: ucsi: psy: Set max current to zero when disconnected
- usb: renesas_usbhs: Fix synchronous external abort on unbind
- usb: renesas_usbhs: Convert to platform remove callback returning void
- smb: client: fix memory leak in cifs_construct_tcon()
- mptcp: Fix proto fallback detection with BPF
- mptcp: avoid unneeded subflow-level drops
- selftests: mptcp: join: rm: set backup flag
- staging: rtl8712: Remove driver using deprecated API wext
- libceph: prevent potential out-of-bounds writes in handle_auth_session_key()
- libceph: fix potential use-after-free in have_mon_and_osd_map()
- drm/amd/display: Check NULL before accessing
- drm: sti: fix device leaks at component probe
- USB: serial: option: add support for Rolling RW101R-GL
- USB: serial: ftdi_sio: add support for u-blox EVK-M101
- xhci: dbgtty: Fix data corruption when transmitting data form DbC to host
- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call
paths
- usb: uas: fix urb unmapping issue when the uas device is remove during
ongoing data transfer
- usb: storage: sddr55: Reject out-of-bound new_pba
- USB: storage: Remove subclass and protocol overrides from Novatek quirk
- usb: storage: Fix memory leak in USB bulk transport
- usb: gadget: f_eem: Fix memory leak in eem_unwrap
- usb: cdns3: Fix double resource release in cdns3_pci_probe
- most: usb: fix double free on late probe failure
- serial: amba-pl011: prefer dma_mapping_error() over explicit address checking
- firmware: stratix10-svc: fix bug in saving controller data
- slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves
- thunderbolt: Add support for Intel Wildcat Lake
- drivers/usb/dwc3: fix PCI parent check
- dm-verity: fix unreliable memory allocation
- can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling
- can: sja1000: fix max irq loop handling
- atm/fore200e: Fix possible data race in fore200e_open()
- MIPS: mm: Prevent a TLB shutdown on initial uniquification
- iio: accel: bmc150: Fix irq assumption regression
- iio:common:ssp_sensors: Fix an error handling path ssp_probe()
- iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields
- Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()"
- spi: bcm63xx: fix premature CS deassertion on RX-only transactions
- mailbox: mailbox-test: Fix debugfs_create_dir error checking
- net: atlantic: fix fragment overflow handling in RX path
- net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic
- net: dsa: sja1105: simplify static configuration reload
- net: dsa: sja1105: Convert to mdiobus_c45_read
- net: sxgbe: fix potential NULL dereference in sxgbe_rx()
- net/mlx5e: Fix validation logic in rate limiting
- net: aquantia: Add missing descriptor cache invalidation on ATL2
- platform/x86: intel: punit_ipc: fix memory corruption
- Bluetooth: SMP: Fix not generating mackey and ltk when repairing
- can: kvaser_usb: leaf: Fix potential infinite loop in command parsers
- Revert "block: don't add or resize partition on the disk with
GENHD_FL_NO_PART"
- Revert "block: Move checking GENHD_FL_NO_PART to bdev_add_partition()"
- mptcp: do not fallback when OoO is present
- mptcp: fix a race in mptcp_pm_del_add_timer()
- mptcp: fix premature close in case of fallback
- mptcp: fix ack generation for fallback msk
- dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups
- ata: libata-scsi: Fix system suspend for a security locked drive
- Input: pegasus-notetaker - fix potential out-of-bounds access
- Input: remove third argument of usb_maxpacket()
- usb: deprecate the third argument of usb_maxpacket()
- mptcp: Disallow MPTCP subflows from sockmap
- selftests: mptcp: connect: fix fallback note due to OoO
- pmdomain: samsung: plug potential memleak during probe
- pmdomain: arm: scmi: Fix genpd leak on provider registration failure
- pmdomain: imx: Fix reference count leak in imx_gpc_remove
- net: netpoll: fix incorrect refcount handling causing incorrect cleanup
- mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4
- net: qede: Initialize qede_ll_ops with designated initializer
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- btrfs: add helper to truncate inode items when logging inode
- Makefile.compiler: replace cc-ifversion with compiler-specific macros
- uio_hv_generic: Set event for all channels on the device
- tracing/tools: Fix incorrcet short option in usage text for --threads
- net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on
error
- ALSA: usb-audio: fix uac2 clock source at terminal parser
- mm/secretmem: fix use-after-free race in fault handler
- mm/mm_init: fix hash table order logging in alloc_large_system_hash()
- kconfig/nconf: Initialize the default locale at startup
- kconfig/mconf: Initialize the default locale at startup
- net: tls: Cancel RX async resync request on rcd_delta overflow
- selftests: net: use BASH for bareudp testing
- scsi: core: Fix a regression triggered by scsi_host_busy()
- vsock: Ignore signal/timeout on connect() if already established
- net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and
qede_tpa_end()
- kernel.h: Move ARRAY_SIZE() to a separate header
- platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos
- s390/ctcm: Fix double-kfree
- net: openvswitch: remove never-working support for setting nsh fields
- net: dsa: hellcreek: fix missing error handling in LED registration
- mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats()
- drm/tegra: dc: Fix reference leak in tegra_dc_couple()
- mptcp: fix race condition in mptcp_schedule_work()
- MIPS: Malta: Fix !EVA SOC-it PCI MMIO
- scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
- scsi: sg: Do not sleep in atomic context
- nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
- Input: imx_sc_key - fix memory corruption on unload
- Input: cros_ec_keyb - fix an invalid memory access
- be2net: pass wrb_params in case of OS2BMC
- exfat: check return value of sb_min_blocksize in exfat_read_boot_sector
- mtd: rawnand: cadence: fix DMA device NULL pointer dereference
- HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155
- net/sched: act_connmark: handle errno on tcf_idr_check_alloc
- isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
- EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection
- EDAC/altera: Handle OCRAM ECC enable after warm reset
- spi: Try to get ACPI GPIO IRQ earlier
- ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
- fs/proc: fix uaf in proc_readdir_de()
- ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe
- strparser: Fix signed/unsigned mismatch bug
- gcov: add support for GCC 15
- NFSD: free copynotify stateid in nfs4_free_ol_stateid()
- HID: hid-ntrig: Prevent memory leak in ntrig_report_version()
- netfilter: nf_tables: reject duplicate device on updates
- mtd: onenand: Pass correct pointer to IRQ handler
- lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN
- mm/ksm: fix flag-dropping behavior in ksm_madvise
- mptcp: pm: in-kernel: C-flag: handle late ADD_ADDR
- bpf: Add bpf_prog_run_data_pointers()
- ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd
- NFSv4: Fix an incorrect parameter when calling nfs4_call_sync()
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
- ASoC: cs4271: Fix regulator leak on probe failure
- regulator: fixed: fix GPIO descriptor leak on register failure
- acpi,srat: Fix incorrect device handle check for Generic Initiator
- Bluetooth: L2CAP: export l2cap_chan_hold for modules
- hsr: Fix supervision frame sending on HSRv0
- net_sched: limit try_bulk_dequeue_skb() batches
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps
- net/mlx5e: Fix maxrate wraparound in threshold between units
- net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
- net: sched: act_connmark: initialize struct tc_ife to fix kernel leak
- net_sched: act_connmark: use RCU in tcf_connmark_dump()
- net/sched: act_connmark: transition to percpu stats and rcu
- net: sched: act_connmark: get rid of tcf_connmark_walker and
tcf_connmark_search
- net: sched: act: move global static variable net_id to tc_action_ops
- wifi: mac80211: skip rate verification for not captured PSDUs
- net: mdio: fix resource leak in mdiobus_register_device()
- tipc: Fix use-after-free in tipc_mon_reinit_self().
- net/smc: fix mismatch between CLC header and proposal
- sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto
- Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions
- Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion
- Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
- net: fec: correct rx_bytes statistic for the case SHIFT16 is set
- ASoC: max98090/91: fixed max98091 ALSA widget powering up/down
- NFS: check if suid/sgid was cleared after a write as needed
- HID: quirks: avoid Cooler Master MM712 dongle wakeup bug
- NFS4: Fix state renewals missing after boot
- RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence
errors
- compiler_types: Move unused static inline functions warning to W=2
- drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD
- selftests: netdevsim: set test timeout to 10 minutes
- extcon: adc-jack: Cleanup wakeup source only if it was enabled
- lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC
- rtc: rx8025: fix incorrect register reference
- tracing: Fix memory leaks in create_field_var()
- bnxt_en: Fix a possible memory leak in bnxt_ptp_init
- bnxt_en: PTP: Refactor PTP initialization functions
- net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
- sctp: Hold sock lock while iterating over address list
- sctp: Prevent TOCTOU out-of-bounds write
- sctp: Hold RCU read lock while iterating over address list
- net: dsa: b53: stop reading ARL entries if search is done
- net: dsa: b53: fix enabling ip multicast
- net: dsa: b53: fix resetting speed and pause on forced link
- net: vlan: sync VLAN features with lower device
- selftests: netdevsim: Fix ethtool-coalesce.sh fail by installing
ethtool-common.sh
- netdevsim: add Makefile for selftests
- selftests/net: use destination options instead of hop-by-hop
- selftests/net: fix GRO coalesce test and add ext header coalesce tests
- selftests/net: fix out-of-order delivery of FIN in gro:tcp test
- net: dsa: tag_brcm: legacy: fix untagged rx on unbridged ports for bcm63xx
- riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro
- Revert "wifi: ath10k: avoid unnecessary wait for service ready message"
- ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again
- ceph: add checking of wait_for_completion_killable() return value
- ASoC: meson: aiu-encoder-i2s: fix bit clock polarity
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
- ACPI: property: Return present device nodes only on fwnode interface
- 9p: sysfs_init: don't hardcode error to ENOMEM
- cpufreq: tegra186: Initialize all cores to max frequencies
- 9p: fix /sys/fs/9p/caches overwriting itself
- clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled
- clk: at91: clk-master: Add check for divide by 3
- ARM: at91: pm: save and restore ACR during PLL disable/enable
- rtc: pcf2127: clear minute/second interrupt
- um: Fix help message for ssl-non-raw
- fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink
- btrfs: mark dirty extent range for out of bound prealloc extents
- RDMA/hns: Fix wrong WQE data when QP wraps around
- RDMA/irdma: Set irdma_cq cq_num field during CQ create
- RDMA/irdma: Remove unused struct irdma_cq fields
- RDMA/irdma: Fix SD index calculation
- ACPICA: Update dsmethod.c to get rid of unused variable warning
- orangefs: fix xattr related buffer overflow...
- page_pool: Clamp pool size to max 16K pages
- exfat: limit log print for IO error
- ALSA: usb-audio: add mono main switch to Presonus S1824c
- Bluetooth: bcsp: receive data only if registered
- Bluetooth: SCO: Fix UAF on sco_conn_free
- net: macb: avoid dealing with endianness in macb_set_hwaddr()
- fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock
- scsi: libfc: Fix potential buffer overflow in fc_ct_ms_fill()
- nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode
dereferencing
- NFSv4.1: fix mount hang after CREATE_SESSION failure
- NFSv4: handle ERR_GRACE on delegation recalls
- remoteproc: qcom: q6v5: Avoid handling handover twice
- sparc/module: Add R_SPARC_UA64 relocation handling
- PCI: cadence: Check for the existence of cdns_pcie::ops before using it
- r8169: set EEE speed down ratio to 1
- net: intel: fm10k: Fix parameter idx set but not used
- wifi: ath10k: Fix connection after GTK rekeying
- iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot()
- net: ethernet: microchip: sparx5: make it selectable for ARCH_LAN969X
- jfs: fix uninitialized waitqueue in transaction manager
- jfs: Verify inode mode when loading from disk
- ipv6: np->rxpmtu race annotation
- usb: xhci: plat: Facilitate using autosuspend for xhci plat devices
- usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs
- allow finish_no_open(file, ERR_PTR(-E...))
- scsi: lpfc: Define size of debugfs entry for xri rebalancing
- scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup
- scsi: lpfc: Check return status of lpfc_reset_flush_io_context during
TGT_RESET
- selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean
net/lib dependency
- page_pool: always add GFP_NOWARN for ATOMIC allocations
- drm/amdgpu: Use memdup_array_user in amdgpu_cs_wait_fences_ioctl
- net/cls_cgroup: Fix task_get_classid() during qdisc run
- udp_tunnel: use netdev_warn() instead of netdev_WARN()
- selftests: Replace sleep with slowwait
- eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP
- selftests: Disable dad for ipv6 in fcnal-test.sh
- x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of PV_UNHALT
- netfilter: nf_reject: don't reply to icmp error messages
- selftests: traceroute: Use require_command()
- media: redrat3: use int type to store negative error codes
- net: sh_eth: Disable WoL if system can not suspend
- phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0
- phy: cadence: cdns-dphy: Enable lower resolutions in dphy
- ntfs3: pretend $Extend records as regular files
- net: phy: marvell: Fix 88e1510 downshift counter errata
- drm/msm: make sure to not queue up recovery more than once
- usb: cdns3: gadget: Use-after-free during failed initialization and exit of
cdnsp gadget
- usb: gadget: f_hid: Fix zero length packet transfer
- iommu/amd: Skip enabling command/event buffers for kdump
- net: call cond_resched() less often in __release_sock()
- net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms
- ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled
- drm/msm/dsi/phy_7nm: Fix missing initial VCO rate
- drm/msm/dsi/phy: Toggle back buffer resync after preparing PLL
- dmaengine: dw-edma: Set status for callback_result
- dmaengine: mv_xor: match alloc_wc and free_wc
- dmaengine: sh: setup_xref error handling
- ptp: Limit time setting of PTP clocks
- scsi: pm8001: Use int instead of u32 to store error codes
- mips: lantiq: xway: sysctrl: rename stp clock
- mips: lantiq: danube: add missing device_type in pci node
- mips: lantiq: danube: add missing properties to cpu node
- media: fix uninitialized symbol warnings
- drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption
- extcon: adc-jack: Fix wakeup source leaks on device unbind
- scsi: pm80xx: Fix race condition caused by static variables
- scsi: mpi3mr: Fix controller init failure on fault during queue creation
- rds: Fix endianness annotation for RDS_MPATH_HASH
- ALSA: usb-audio: Add validation of UAC2/UAC3 effect units
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call
- net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV.
- net: When removing nexthops, don't call synchronize_net if it is not necessary
- char: misc: Does not request module for miscdevice with dynamic minor
- usb: gadget: f_ncm: Fix MAC assignment NCM ethernet
- iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before
setting register
- drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts
- media: imon: make send_packet() more robust
- net: ipv6: fix field-spanning memcpy warning in AH output
- bridge: Redirect to backup port when port is administratively down
- powerpc/eeh: Use result of error_detected() in uevent
- thunderbolt: Use is_pciehp instead of is_hotplug_bridge
- net: stmmac: Check stmmac_hw_setup() in stmmac_resume()
- x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall
- drm/tidss: Set crtc modesetting parameters with adjusted mode
- drm/tidss: Use the crtc_* timings when programming the HW
- media: pci: ivtv: Don't create fake v4l2_fh
- drm/amdkfd: return -ENOTTY for unsupported IOCTLs
- selftests/net: Ensure assert() triggers in psock_tpacket.c
- selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8
- PCI: Disable MSI on RDC PCI to PCIe bridges
- drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf()
- drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff
- drm/amd/pm: Use cached metrics data on arcturus
- drm/amd/pm: Use cached metrics data on aldebaran
- mfd: da9063: Split chip variant reading in two bus transactions
- mfd: madera: Work around false-positive -Wininitialized warning
- mfd: stmpe-i2c: Add missing MODULE_LICENSE
- mfd: stmpe: Remove IRQ domain upon removal
- tools/power x86_energy_perf_policy: Prefer driver HWP limits
- tools/power x86_energy_perf_policy: Enhance HWP enable
- tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage
- tools/cpupower: Fix incorrect size in cpuidle_state_disable()
- hwmon: (dell-smm) Add support for Dell OptiPlex 7040
- uprobe: Do not emulate/sstep original instruction when ip is changed
- clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel
- cpuidle: Fail cpuidle device registration if there is one already
- tools/cpupower: fix error return value in cpupower_write_sysfs()
- video: backlight: lp855x_bl: Set correct EPROM start for LP8556
- nvme-fc: use lock accessing port_state and rport state
- nvmet-fc: avoid scheduling association deletion twice
- tee: allow a driver to allocate a tee_device without a pool
- ACPICA: dispatcher: Use acpi_ds_clear_operands() in
acpi_ds_call_control_method()
- mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card
- power: supply: sbs-charger: Support multiple devices
- hwmon: (sbtsi_temp) AMD CPU extended temperature range support
- ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[]
- ACPI: PRM: Skip handlers with NULL handler_address or NULL VA
- irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment
- arc: Fix __fls() const-foldability via __builtin_clzl()
- cpufreq/longhaul: handle NULL policy in longhaul_exit
- selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2
- ACPI: video: force native for Lenovo 82K8
- memstick: Add timeout to prevent indefinite waiting
- mmc: host: renesas_sdhi: Fix the actual clock
- pinctrl: single: fix bias pull up/down handling in pin_config_set
- bpf: Don't use %pK through printk
- soc: ti: pruss: don't use %pK through printk
- spi: loopback-test: Don't use %pK through printk
- soc: qcom: smem: Fix endian-unaware access of num_entries
- soc: aspeed: socinfo: Add AST27xx silicon IDs
- block: make REQ_OP_ZONE_OPEN a write operation
- drm/sysfb: Do not dereference NULL pointer in plane reset
- drm/sched: Fix race in drm_sched_entity_select_rq()
- usb: gadget: f_fs: Fix epfile null pointer access after ep enable.
- Revert "docs/process/howto: Replace C89 with C11"
- arch: back to -std=gnu89 in < v5.18
- x86/boot: Compile boot code with -std=gnu11 too
- xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event
- xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive.
- xhci: dbc: Improve performance by removing delay in transfer event polling.
- xhci: dbc: Allow users to modify DbC poll interval via sysfs
- xhci: dbc: poll at different rate depending on data transfer activity
- xhci: dbc: Provide sysfs option to configure dbc descriptors
- x86/resctrl: Fix miscount of bandwidth event when reactivating previously
unavailable RMID
- net: phy: dp83867: Disable EEE support as not implemented
- can: gs_usb: increase max interface to U8_MAX
- net: ravb: Enforce descriptor type ordering
- ravb: Exclude gPTP feature support for RZ/G2L
- dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp
- serial: 8250_dw: handle reset control deassert error
- serial: 8250_dw: Use devm_add_action_or_reset()
- regmap: slimbus: fix bus_context pointer in regmap init calls
- block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL
- drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland
- drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji
- drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table()
- net: hns3: return error code when function fails
- drm/etnaviv: fix flush sequence logic
- usbnet: Prevents free active kevent
- libbpf: Fix powerpc's stack register definition in bpf_tracing.h
- libbpf: Normalize PT_REGS_xxx() macro definitions
- riscv, libbpf: Add RISC-V (RV64) support to bpf_tracing.h
- bpf: Do not audit capability check in do_jit()
- bpf: Sync pending IRQ work before freeing ring buffer
- ALSA: usb-audio: fix control pipe direction
- drm/msm/a6xx: Fix GMU firmware parser
- wifi: ath10k: Fix memory leak on unsupported WMI command
- ASoC: qdsp6: q6asm: do not sleep while atomic
- mptcp: restore window probe
- fbdev: valkyriefb: Fix reference count leak in valkyriefb_init
- fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS
- wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode
- fbdev: bitblit: bound-check glyph index in bit_putcs*
- ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
- fbdev: atyfb: Check if pll_ops->init_pll failed
- net: usb: asix_devices: Check return value of usbnet_get_endpoints
- NFSD: Fix crash in nfsd4_read_release()
- btrfs: use smp_mb__after_atomic() when forcing COW in
create_pending_snapshot()
- btrfs: always drop log root tree reference in btrfs_replay_log()
- btrfs: scrub: replace max_t()/min_t() with clamp() in scrub_throttle_dev_io()
- x86/bugs: Fix reporting of LFENCE retpoline
- net/sched: sch_qfq: Fix null-deref in agg_dequeue
+ UBUNTU: Upstream stable to v5.15.197
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2138662
Title:
Jammy update: v5.15.197 upstream stable release
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2138662/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
