Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.202 upstream stable release
from git://git.kernel.org/
RDMA/siw: Fix potential NULL pointer dereference in header processing
RDMA/umad: Reject negative data_len in ib_umad_write
auxdisplay: arm-charlcd: fix release_mem_region() size
hfsplus: return error when node already exists in hfs_bnode_create
i3c: remove i2c board info from i2c_dev_desc
i3c: Move device name assignment after i3c_bus_init
fs: add <linux/init_task.h> for 'init_fs'
gfs2: Add metapath_dibh helper
gfs2: Fix use-after-free in iomap inline data write path
tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure
tpm: st33zp24: Fix missing cleanup on get_burstcount() error
btrfs: qgroup: return correct error when deleting qgroup relation item
md/raid10: fix any_working flag handling in raid10_sync_request
iomap: fix submission side handling of completion side errors
PM: wakeup: Handle empty list in wakeup_sources_walk_start()
PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races
libbpf: Fix dumping big-endian bitfields
libbpf: Fix OOB read in btf_dump_get_bitfield_value
ARM: VDSO: Patch out __vdso_clock_getres() if unavailable
crypto: cavium - fix dma_free_coherent() size
crypto: octeontx - fix dma_free_coherent() size
hrtimer: Fix trace oddity
crypto: hisilicon/trng - modifying the order of header files
crypto: hisilicon/trng - support tfms sharing the device
scsi: efct: Use IRQF_ONESHOT and default primary handler
EDAC/altera: Remove IRQF_ONESHOT
mfd: wm8350-core: Use IRQF_ONESHOT
sched/rt: Skip currently executing CPU in rto_next_cpu()
pstore/ram: fix buffer overflow in persistent_ram_save_old()
EDAC/i5000: Fix snprintf() size calculation in calculate_dimm_size()
EDAC/i5400: Fix snprintf() limit calculation in calculate_dimm_size()
clk: qcom: Return correct error code in qcom_cc_probe_by_index()
arm64: dts: qcom: sdm630: correct QFPROM byte offsets
arm64: dts: qcom: sdm630: fix gpu_speed_bin size
arm64: dts: qcom: sdm845-oneplus: Don't mark ts supply boot-on
ARM: dts: allwinner: sun5i-a13-utoo-p66: delete "power-gpios" property
powerpc/uaccess: Move barrier_nospec() out of allow_read_{from/write}_user()
soc: qcom: cmd-db: Use devm_memremap() to fix memory leak in cmd_db_dev_probe
powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling
ARM: dts: lpc32xx: Set motor PWM #pwm-cells property value to 3 cells
arm: dts: lpc32xx: add clocks property to Motor Control PWM device tree node
arm64: dts: amlogic: axg: assign the MMC signal clocks
arm64: dts: amlogic: gx: assign the MMC signal clocks
arm64: dts: amlogic: g12: assign the MMC B and C signal clocks
arm64: dts: amlogic: g12: assign the MMC A signal clock
arm64: dts: qcom: sdm845-db845c: specify power for WiFi CH1
smack: /smack/doi must be > 0
smack: /smack/doi: accept previously used values
drm/amdgpu: Use explicit VCN instance 0 in SR-IOV init
regulator: core: move supply check earlier in set_machine_constraints()
HID: playstation: Add missing check for input_ff_create_memless
media: ccs: Accommodate C-PHY into the calculation
media: uvcvideo: Fix allocation for small frame sizes
platform/chrome: cros_ec_lightbar: Fix response size initialization
spi: tools: Add include folder to .gitignore
PCI: mediatek: Fix IRQ domain leak when MSI allocation fails
PCI: Do not attempt to set ExtTag for VFs
PCI/portdrv: Fix potential resource leak
netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH
netfilter: nf_conncount: increase the connection clean up limit to 64
PCI: Mark 3ware-9650SA Root Port Extended Tags as broken
iommu/vt-d: Flush cache for PASID table before using it
nfsd: never defer requests during idmap lookup
fat: avoid parent link count underflow in rmdir
tcp: tcp_tx_timestamp() must look at the rtx queue
wifi: ath10k: sdio: add missing lock protection in ath10k_sdio_fw_crashed_dump()
PCI: Initialize RCB from pci_configure_device()
ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit()
octeontx2-af: Fix PF driver crash with kexec kernel booting
bonding: only set speed/duplex to unknown, if getting speed failed
nfc: hci: shdlc: Stop timers and work before freeing context
netfilter: nft_set_hash: fix get operation on big endian
netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets
ethtool: add support to set/get tx copybreak buf size via ethtool
net: hns3: add support to set/get tx copybreak buf size via ethtool for hns3
driver
net: hns3: remove the way to set tx spare buf via module parameter
net: hns3: fix ethtool tx copybreak buf size indicating not aligned issue
net: hns3: add max order judgement for tx spare buffer
net: hns3: fix double free issue for tx spare buffer
procfs: fix missing RCU protection when reading real_parent in do_task_stat()
net: atm: fix crash due to unvalidated vcc pointer in sigd_send()
serial: caif: fix use-after-free in caif_serial ldisc_close()
ionic: Rate limit unknown xcvr type messages
octeontx2-pf: Unregister devlink on probe failure
RDMA/rtrs: server: remove dead code
IB/cache: update gid cache on client reregister event
RDMA/hns: Notify ULP of remaining soft-WCs during reset
power: supply: ab8500_bmdata: Use standard phandle
power: supply: ab8500: Use core battery parser
power: supply: ab8500: Fix use-after-free in power_supply_changed()
power: supply: act8945a: Fix use-after-free in power_supply_changed()
power: supply: bq256xx: Fix use-after-free in power_supply_changed()
power: supply: bq25980: Fix use-after-free in power_supply_changed()
power: supply: cpcap-battery: Fix use-after-free in power_supply_changed()
power: supply: goldfish: Fix use-after-free in power_supply_changed()
power: supply: rt9455: Fix use-after-free in power_supply_changed()
power: supply: sbs-battery: Fix use-after-free in power_supply_changed()
power: reset: nvmem-reboot-mode: respect cell size for nvmem_cell_write
power: supply: bq27xxx: fix wrong errno when bus ops are unsupported
power: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed()
RDMA/rtrs-srv: Refactor the handling of failure case in map_cont_bufs
RDMA/rtrs-srv: Correct the checking of ib_map_mr_sg
RDMA/rtrs-srv: fix SG mapping
RDMA/rxe: Fix double free in rxe_srq_from_init
mtd: rawnand: cadence: Fix return type of CDMA send-and-wait helper
crypto: ccp - Add an S4 restore flow
RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send
RDMA/core: Fix a couple of obvious typos in comments
svcrdma: Remove queue-shortening warnings
svcrdma: Clean up comment in svc_rdma_accept()
svcrdma: Increase the per-transport rw_ctx count
svcrdma: Reduce the number of rdma_rw contexts per-QP
RDMA/core: add rdma_rw_max_sge() helper for SQ sizing
mtd: parsers: ofpart: fix OF node refcount leak in parse_fixed_partitions()
RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc
pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN
scsi: csiostor: Fix dereference of null pointer rn
nvdimm: virtio_pmem: serialize flush requests
tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros
fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe()
clk: qcom: rcg2: compute 2d using duty fraction directly
clk: meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs
clk: qcom: gcc-msm8953: Remove ALWAYS_ON flag from cpp_gdsc
clk: Move clk_{save,restore}_context() to COMMON_CLK section
clk: qcom: dispcc-sdm845: Enable parents for pixel clocks
dmaengine: mediatek: uart-apdma: Fix above 4G addressing TX/RX
dma: dma-axi-dmac: fix SW cyclic transfers
staging: greybus: lights: avoid NULL deref
serial: imx: change SERIAL_IMX_CONSOLE to bool
serial: SH_SCI: improve "DMA support" prompt
mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms
coresight: etm3x: Fix cpulocked warning on cpuhp
Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms"
mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer()
failure
drivers: iio: mpu3050: use dev_err_probe for regulator request
usb: bdc: fix sleep during atomic
pinctrl: equilibrium: Fix device node reference leak in pinbank_init()
ovl: Fix uninit-value in ovl_fill_real
iio: sca3000: Fix a resource leak in sca3000_probe()
pinctrl: qcom: Update macro name to LPI specific
pinctrl: qcom: Update lpi pin group custiom functions with framework generic
functions
pinctrl: qcom: Extract chip specific LPASS LPI code
UBUNTU: [Config] Enable CONFIG_PINCTRL_SM8250_LPASS_LPI=m
pinctrl: qcom: sm8250-lpass-lpi: Fix i2s2_data_groups definition
pinctrl: single: fix refcount leak in pcs_add_gpio_func()
backlight: qcom-wled: Support ovp values for PMI8994
fs/ntfs3: prevent infinite loops caused by the next valid being the same
fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot
ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online CPUs
cpuidle: Skip governor when only one idle state is available
selftests: mlxsw: tc_restrictions: Fix test failure with new iproute2
xen-netback: reject zero-queue configuration from guest
net/rds: rds_sendmsg should not discard payload_len
selftests: forwarding: vxlan_bridge_1d: fix test failure with br_netfilter
enabled
netfilter: nf_conntrack_h323: don't pass uninitialised l3num value
net: remove WARN_ON_ONCE when accessing forward path array
ipv6: fix a race in ip6_sock_set_v6only()
bpftool: Fix truncated netlink dumps
octeontx2-af: Fix default entries mcam entry action
bonding: alb: fix UAF in rlb_arp_recv during bond up/down
apparmor: fix NULL sock in aa_sock_file_perm
apparmor: fix rlimit for posix cpu timers
apparmor: fix invalid deref of rawdata when export_binary is unset
drm/i915/acpi: free _DSM package when no connectors
btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found
MIPS: Work around LLVM bug when gp is used as global register variable
ext4: don't cache extent during splitting extent
ext4: fix memory leak in ext4_ext_shift_extents()
ext4: use optimized mballoc scanning regardless of inode format
ata: pata_ftide010: Fix some DMA timings
SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths
SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path
perf callchain: Fix srcline printing with inlines
libperf: Don't remove -g when EXTRA_CFLAGS are used
libperf build: Always place libperf includes first
rtc: interface: Alarm race handling should not discard preceding error
audit: add fchmodat2() to change attributes class
hfsplus: fix volume corruption issue for generic/498
audit: add missing syscalls to read class
hfsplus: pretend special inodes as regular files
i3c: master: svc: Initialize 'dev' to NULL in svc_i3c_master_ibi_isr()
minix: Add required sanity checking to minix_check_superblock()
gfs2: fiemap page fault fix
tools/power cpupower: Reset errno before strtoull()
s390/purgatory: Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS
arm64: Add support for TSV110 Spectre-BHB mitigation
rnbd-srv: Zero the rsp buffer before using it
x86/xen/pvh: Enable PAE mode for 32-bit guest only when CONFIG_X86_PAE is set
EFI/CPER: don't dump the entire memory region
APEI/GHES: ensure that won't go past CPER allocated record
EFI/CPER: don't go past the ARM processor CPER record buffer
ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4()
ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP
s390/perf: Disable register readout on sampling events
xenbus: Use .freeze/.thaw to handle xenbus devices
blk-mq-debugfs: add missing debugfs_mutex in blk_mq_debugfs_register_hctxs()
sparc: Synchronize user stack on fork and clone
sparc: don't reference obsolete termio struct for TC* constants
bpf: verifier improvement in 32bit shift sign extension pattern
clocksource/drivers/sh_tmu: Always leave device running after probe
clocksource/drivers/timer-integrator-ap: Add missing Kconfig dependency on OF
mailbox: bcm-ferxrm-mailbox: Use default primary handler
char: tpm: cr50: Remove IRQF_ONESHOT
pstore: ram_core: fix incorrect success return when vmap() fails
arm64: tegra: smaug: Add usb-role-switch support
parisc: Prevent interrupts during reboot
media: dvb-core: dmxdevfilter must always flush bufs
spi: stm32: fix Overrun issue at < 8bpw
drm/v3d: Set DMA segment size to avoid debug warnings
media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes
media: omap3isp: isppreview: always clamp in preview_try_format()
media: omap3isp: set initial format
ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask
ASoC: wm8962: Don't report a microphone if it's shorted to ground on plug
media: adv7180: fix frame interval in progressive mode
media: pvrusb2: fix URB leak in pvr2_send_request_ex
media: solo6x10: Check for out of bounds chip_id
media: cx25821: Fix a resource leak in cx25821_dev_setup()
drm/amdkfd: Fix GART PTE for non-4K pagesize in svm_migrate_gart_map()
drm: Account property blob allocations to memcg
hyper-v: Mark inner union in hv_kvp_exchg_msg_value as packed
virt: vbox: uapi: Mark inner unions in packed structs as packed
drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback
drm/atmel-hlcdc: don't reject the commit if the src rect has fractional parts
drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release
HID: multitouch: add eGalaxTouch EXC3188 support
HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK
gpio: aspeed-sgpio: Change the macro to support deferred probe
spi: spi-mem: Protect dirmap_create() with spi_mem_access_start/end
ASoC: es8328: Add error unwind in resume
modpost: Amend ppc64 save/restfpr symnames for -Os build
ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio
jfs: Add missing set_freezable() for freezable kthread
jfs: nlink overflow in jfs_rename
dm: remove fake timeout to avoid leak request
iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency
wifi: libertas: fix WARNING in usb_tx_block
ipv6: annotate data-races in ip6_multipath_hash_{policy,fields}()
ipv6: exthdrs: annotate data-race over multiple sysctl
ext4: mark group add fast-commit ineligible
ext4: mark group extend fast-commit ineligible
netfilter: nf_conntrack: Add allow_clash to generic protocol handler
netfilter: xt_tcpmss: check remaining length before reading optlen
openrisc: define arch-specific version of nop()
net: usb: r8152: fix transmit queue timeout
net/rds: No shortcut out of RDS_CONN_ERROR
net: hns3: extend HCLGE_FD_AD_QID to 11 bits
wifi: iwlegacy: add missing mutex protection in il4965_store_tx_power()
wifi: iwlegacy: add missing mutex protection in il3945_store_measurement()
ipv4: fib: Annotate access to struct fib_alias.fa_state.
Bluetooth: hci_conn: use mod_delayed_work for active mode timeout
Bluetooth: btusb: Add device ID for Realtek RTL8761BU
octeontx2-af: Workaround SQM/PSE stalls by disabling sticky
wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg()
net: usb: sr9700: remove code to drive nonexistent multicast filter
vmw_vsock: bypass false-positive Wnonnull warning with gcc-16
net/rds: Clear reconnect pending bit
PCI: Mark ASM1164 SATA controller to avoid bus reset
PCI/AER: Clear stale errors on reporting agents upon probe
PCI: Fix pci_slot_lock () device locking
PCI: Add ACS quirk for Qualcomm Hamoa & Glymur
PCI: Mark Nvidia GB10 to avoid bus reset
myri10ge: avoid uninitialized variable use
nfc: nxp-nci: remove interrupt trigger type
RDMA/rtrs-clt: For conn rejection use actual err number
scsi: buslogic: Reduce stack usage
tracing: Fix false sharing in hwlat get_sample()
mailbox: sprd: mask interrupts that are not handled
remoteproc: mediatek: Break lock dependency to `prepare_lock`
mailbox: sprd: clear delivery flag before handling TX done
clk: microchip: core: correct return value on *_get_parent()
m68k: nommu: fix memmove() with differently aligned src and dest for 68000
staging: rtl8723bs: fix missing status update on sdio_alloc_irq() failure
serial: 8250_dw: handle clock enable errors in runtime_resume
misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66
staging: rtl8723bs: fix memory leak on failure path
serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA
termination is done
fix it87_wdt early reboot by reporting running timer
binder: don't use %pK through printk
phy: mvebu-cp110-utmi: fix dr_mode property read from dts
phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature
Revert "mfd: da9052-spi: Change read-mask to write-mask"
iio: Use IRQF_NO_THREAD
iio: magnetometer: Remove IRQF_ONESHOT
MIPS: Loongson: Make cpumask_of_node() robust against NUMA_NO_NODE
fs: ntfs3: check return value of indx_find to avoid infinite loop
fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata
fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST
fs/ntfs3: avoid calling run_get_entry() when run == NULL in
ntfs_read_run_nb_ra()
libceph: define and enforce CEPH_MAX_KEY_LEN
include: uapi: netfilter_bridge.h: Cover for musl libc
ARM: 9467/1: mm: Don't use %pK through printk
drm/amd/display: Avoid updating surface with the same surface under MPO
drm/amdgpu: Adjust usleep_range in fence wait
ALSA: usb-audio: Update the number of packets properly at receiving
drm/amdgpu: Add HAINAN clock adjustment
drm/radeon: Add HAINAN clock adjustment
ALSA: usb-audio: Add sanity check for OOB writes at silencing
btrfs: replace BUG() with error handling in __btrfs_balance()
ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access
ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut
xfrm6: fix uninitialized saddr in xfrm6_get_saddr()
net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode
lan78xx: Fix memory allocation bug
net: usb: lan78xx: scan all MDIO addresses on LAN7801
wifi: cfg80211: wext: fix IGTK key ID off-by-one
Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ
Bluetooth: hci_qca: Cleanup on all setup failures
Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ
Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ
tipc: fix duplicate publication key in tipc_service_insert_publ()
RDMA/core: Fix stale RoCE GIDs during netdev events at registration
net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets
RDMA/efa: Fix typo in efa_alloc_mr()
net: usb: pegasus: enable basic endpoint checking
net: consume xmit errors of GSO frames
dpaa2-switch: validate num_ifs to prevent out-of-bounds write
netfilter: nf_conntrack_h323: fix OOB read in decode_choice()
rpmsg: core: fix race in driver_override_show() and use core helper
fpga: dfl: use subsys_initcall to allow built-in drivers to be added
dm-verity: correctly handle dm_bufio_client_create() failure
media: mtk-mdp: Fix error handling in probe function
media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove()
KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding
arm64: Disable branch profiling for all arm64 code
HID: hid-pl: handle probe errors
HID: magicmouse: Do not crash on missing msc->input
HID: prodikeys: Check presence of pm->input_ep82
HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()
media: radio-keene: fix memory leak in error path
media: cx88: Add missing unmap in snd_cx88_hw_params()
media: cx23885: Add missing unmap in snd_cx23885_hw_params()
media: cx25821: Add missing unmap in snd_cx25821_hw_params()
media: i2c/tw9903: Fix potential memory leak in tw9903_probe()
media: i2c/tw9906: Fix potential memory leak in tw9906_probe()
media: ccs: Avoid possible division by zero
media: i2c: ov5647: Initialize subdev before controls
media: i2c: ov5647: Correct pixel array offset
media: i2c: ov5647: Correct minimum VBLANK value
media: i2c: ov5647: Sensor should report RAW color space
media: i2c: ov5647: Fix PIXEL_RATE value for VGA mode
media: i2c: ov5647: use our own mutex for the ctrl lock
dm-integrity: fix a typo in the code for write/discard race
dm: clear cloned request bio pointer when last clone bio completes
soc: ti: k3-socinfo: Fix regmap leak on probe failure
soc: ti: pruss: Fix double free in pruss_clk_mux_setup()
KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation
clk: tegra: tegra124-emc: Fix potential memory leak in
tegra124_clk_register_emc()
s390/pci: Handle futile config accesses of disabled devices directly
dm-unstripe: fix mapping bug when there are multiple targets in a table
arm64: dts: rockchip: Do not enable hdmi_sound node on Pinebook Pro
media: venus: vdec: fix error state assignment for zero bytesused
drm: of: drm_of_panel_bridge_remove(): fix device_node leak
mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations
selftests/mm/charge_reserved_hugetlb: drop mount size for hugetlbfs
xfs: mark data structures corrupt on EIO and ENODATA
iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode
xfs: delete attr leaf freemap entries when empty
xfs: fix freemap adjustments when adding xattrs to leaf blocks
xfs: fix remote xattr valuelblk check
PCI: endpoint: Fix swapped parameters in
pci_{primary/secondary}_epc_epf_unlink() functions
md/bitmap: fix GPF in write_page caused by resize race
nfsd: fix return error code for nfsd_map_name_to_[ug]id
usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN
bus: fsl-mc: fix an error handling in fsl_mc_device_add()
dm mpath: make pg_init_delay_msecs settable
powerpc/smp: Add check for kcalloc() failure in parse_thread_groups()
iio: gyro: itg3200: Fix unchecked return value in read_raw
rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net()
ocfs2: fix reflink preserve cleanup issue
kexec: derive purgatory entry from symbol
Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV"
PCI/IOV: Fix race between SR-IOV enable/disable and hotplug
arm64: Fix non-atomic __READ_ONCE() with CONFIG_LTO=y
btrfs: continue trimming remaining devices on failure
remoteproc: imx_rproc: Fix invalid loaded resource table detection
scsi: ufs: core: Flush exception handling work when RPM level is zero
usb: dwc2: fix resume failure if dr_mode is host
mtd: rawnand: pl353: Fix software ECC support
tipc: fix RCU dereference race in tipc_aead_users_dec()
drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()
net: cpsw_new: Fix unnecessary netdev unregistration in cpsw_probe() error path
PCI: Fix pci_slot_trylock() error handling
parisc: kernel: replace kfree() with put_device() in create_tree_node()
staging: rtl8723bs: fix null dereference in find_network
MIPS: rb532: Fix MMIO UART resource registration
ceph: supply snapshot context in ceph_zero_partial_object()
net: ethernet: marvell: skge: remove incorrect conflicting PCI ID
net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean()
tracing: Fix to set write permission to per-cpu buffer_size_kb
net: intel: fix PCI device ID conflict between i40e and ipw2200
atm: fore200e: fix use-after-free in tasklets during device removal
ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()
fbdev: vt8500lcdfb: fix missing dma_free_coherent()
fbdev: of: display_timing: fix refcount leak in of_get_display_timings()
fbdev: ffb: fix corrupted video output on Sun FFB1
net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle
drm/amdgpu: keep vga memory on MacBooks with switchable graphics
net: nfc: nci: Fix parameter validation for packet data
NTB: ntb_transport: Fix too small buffer for debugfs_name
Linux 5.15.202
UBUNTU: Upstream stable to v5.15.202
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Jammy)
Importance: Medium
Assignee: Vinicius Peixoto (vpeixoto)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Jammy)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Jammy)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Jammy)
Status: New => In Progress
** Changed in: linux (Ubuntu Jammy)
Assignee: (unassigned) => Vinicius Peixoto (vpeixoto)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.202 upstream stable release
from git://git.kernel.org/
-
+ RDMA/siw: Fix potential NULL pointer dereference in header processing
+ RDMA/umad: Reject negative data_len in ib_umad_write
+ auxdisplay: arm-charlcd: fix release_mem_region() size
+ hfsplus: return error when node already exists in hfs_bnode_create
+ i3c: remove i2c board info from i2c_dev_desc
+ i3c: Move device name assignment after i3c_bus_init
+ fs: add <linux/init_task.h> for 'init_fs'
+ gfs2: Add metapath_dibh helper
+ gfs2: Fix use-after-free in iomap inline data write path
+ tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure
+ tpm: st33zp24: Fix missing cleanup on get_burstcount() error
+ btrfs: qgroup: return correct error when deleting qgroup relation item
+ md/raid10: fix any_working flag handling in raid10_sync_request
+ iomap: fix submission side handling of completion side errors
+ PM: wakeup: Handle empty list in wakeup_sources_walk_start()
+ PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races
+ libbpf: Fix dumping big-endian bitfields
+ libbpf: Fix OOB read in btf_dump_get_bitfield_value
+ ARM: VDSO: Patch out __vdso_clock_getres() if unavailable
+ crypto: cavium - fix dma_free_coherent() size
+ crypto: octeontx - fix dma_free_coherent() size
+ hrtimer: Fix trace oddity
+ crypto: hisilicon/trng - modifying the order of header files
+ crypto: hisilicon/trng - support tfms sharing the device
+ scsi: efct: Use IRQF_ONESHOT and default primary handler
+ EDAC/altera: Remove IRQF_ONESHOT
+ mfd: wm8350-core: Use IRQF_ONESHOT
+ sched/rt: Skip currently executing CPU in rto_next_cpu()
+ pstore/ram: fix buffer overflow in persistent_ram_save_old()
+ EDAC/i5000: Fix snprintf() size calculation in calculate_dimm_size()
+ EDAC/i5400: Fix snprintf() limit calculation in calculate_dimm_size()
+ clk: qcom: Return correct error code in qcom_cc_probe_by_index()
+ arm64: dts: qcom: sdm630: correct QFPROM byte offsets
+ arm64: dts: qcom: sdm630: fix gpu_speed_bin size
+ arm64: dts: qcom: sdm845-oneplus: Don't mark ts supply boot-on
+ ARM: dts: allwinner: sun5i-a13-utoo-p66: delete "power-gpios" property
+ powerpc/uaccess: Move barrier_nospec() out of allow_read_{from/write}_user()
+ soc: qcom: cmd-db: Use devm_memremap() to fix memory leak in cmd_db_dev_probe
+ powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event
handling
+ ARM: dts: lpc32xx: Set motor PWM #pwm-cells property value to 3 cells
+ arm: dts: lpc32xx: add clocks property to Motor Control PWM device tree node
+ arm64: dts: amlogic: axg: assign the MMC signal clocks
+ arm64: dts: amlogic: gx: assign the MMC signal clocks
+ arm64: dts: amlogic: g12: assign the MMC B and C signal clocks
+ arm64: dts: amlogic: g12: assign the MMC A signal clock
+ arm64: dts: qcom: sdm845-db845c: specify power for WiFi CH1
+ smack: /smack/doi must be > 0
+ smack: /smack/doi: accept previously used values
+ drm/amdgpu: Use explicit VCN instance 0 in SR-IOV init
+ regulator: core: move supply check earlier in set_machine_constraints()
+ HID: playstation: Add missing check for input_ff_create_memless
+ media: ccs: Accommodate C-PHY into the calculation
+ media: uvcvideo: Fix allocation for small frame sizes
+ platform/chrome: cros_ec_lightbar: Fix response size initialization
+ spi: tools: Add include folder to .gitignore
+ PCI: mediatek: Fix IRQ domain leak when MSI allocation fails
+ PCI: Do not attempt to set ExtTag for VFs
+ PCI/portdrv: Fix potential resource leak
+ netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH
+ netfilter: nf_conncount: increase the connection clean up limit to 64
+ PCI: Mark 3ware-9650SA Root Port Extended Tags as broken
+ iommu/vt-d: Flush cache for PASID table before using it
+ nfsd: never defer requests during idmap lookup
+ fat: avoid parent link count underflow in rmdir
+ tcp: tcp_tx_timestamp() must look at the rtx queue
+ wifi: ath10k: sdio: add missing lock protection in
ath10k_sdio_fw_crashed_dump()
+ PCI: Initialize RCB from pci_configure_device()
+ ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit()
+ octeontx2-af: Fix PF driver crash with kexec kernel booting
+ bonding: only set speed/duplex to unknown, if getting speed failed
+ nfc: hci: shdlc: Stop timers and work before freeing context
+ netfilter: nft_set_hash: fix get operation on big endian
+ netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets
+ ethtool: add support to set/get tx copybreak buf size via ethtool
+ net: hns3: add support to set/get tx copybreak buf size via ethtool for hns3
driver
+ net: hns3: remove the way to set tx spare buf via module parameter
+ net: hns3: fix ethtool tx copybreak buf size indicating not aligned issue
+ net: hns3: add max order judgement for tx spare buffer
+ net: hns3: fix double free issue for tx spare buffer
+ procfs: fix missing RCU protection when reading real_parent in do_task_stat()
+ net: atm: fix crash due to unvalidated vcc pointer in sigd_send()
+ serial: caif: fix use-after-free in caif_serial ldisc_close()
+ ionic: Rate limit unknown xcvr type messages
+ octeontx2-pf: Unregister devlink on probe failure
+ RDMA/rtrs: server: remove dead code
+ IB/cache: update gid cache on client reregister event
+ RDMA/hns: Notify ULP of remaining soft-WCs during reset
+ power: supply: ab8500_bmdata: Use standard phandle
+ power: supply: ab8500: Use core battery parser
+ power: supply: ab8500: Fix use-after-free in power_supply_changed()
+ power: supply: act8945a: Fix use-after-free in power_supply_changed()
+ power: supply: bq256xx: Fix use-after-free in power_supply_changed()
+ power: supply: bq25980: Fix use-after-free in power_supply_changed()
+ power: supply: cpcap-battery: Fix use-after-free in power_supply_changed()
+ power: supply: goldfish: Fix use-after-free in power_supply_changed()
+ power: supply: rt9455: Fix use-after-free in power_supply_changed()
+ power: supply: sbs-battery: Fix use-after-free in power_supply_changed()
+ power: reset: nvmem-reboot-mode: respect cell size for nvmem_cell_write
+ power: supply: bq27xxx: fix wrong errno when bus ops are unsupported
+ power: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed()
+ RDMA/rtrs-srv: Refactor the handling of failure case in map_cont_bufs
+ RDMA/rtrs-srv: Correct the checking of ib_map_mr_sg
+ RDMA/rtrs-srv: fix SG mapping
+ RDMA/rxe: Fix double free in rxe_srq_from_init
+ mtd: rawnand: cadence: Fix return type of CDMA send-and-wait helper
+ crypto: ccp - Add an S4 restore flow
+ RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send
+ RDMA/core: Fix a couple of obvious typos in comments
+ svcrdma: Remove queue-shortening warnings
+ svcrdma: Clean up comment in svc_rdma_accept()
+ svcrdma: Increase the per-transport rw_ctx count
+ svcrdma: Reduce the number of rdma_rw contexts per-QP
+ RDMA/core: add rdma_rw_max_sge() helper for SQ sizing
+ mtd: parsers: ofpart: fix OF node refcount leak in parse_fixed_partitions()
+ RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc
+ pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN
+ scsi: csiostor: Fix dereference of null pointer rn
+ nvdimm: virtio_pmem: serialize flush requests
+ tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros
+ fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe()
+ clk: qcom: rcg2: compute 2d using duty fraction directly
+ clk: meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs
+ clk: qcom: gcc-msm8953: Remove ALWAYS_ON flag from cpp_gdsc
+ clk: Move clk_{save,restore}_context() to COMMON_CLK section
+ clk: qcom: dispcc-sdm845: Enable parents for pixel clocks
+ dmaengine: mediatek: uart-apdma: Fix above 4G addressing TX/RX
+ dma: dma-axi-dmac: fix SW cyclic transfers
+ staging: greybus: lights: avoid NULL deref
+ serial: imx: change SERIAL_IMX_CONSOLE to bool
+ serial: SH_SCI: improve "DMA support" prompt
+ mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms
+ coresight: etm3x: Fix cpulocked warning on cpuhp
+ Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms"
+ mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer()
failure
+ drivers: iio: mpu3050: use dev_err_probe for regulator request
+ usb: bdc: fix sleep during atomic
+ pinctrl: equilibrium: Fix device node reference leak in pinbank_init()
+ ovl: Fix uninit-value in ovl_fill_real
+ iio: sca3000: Fix a resource leak in sca3000_probe()
+ pinctrl: qcom: Update macro name to LPI specific
+ pinctrl: qcom: Update lpi pin group custiom functions with framework generic
functions
+ pinctrl: qcom: Extract chip specific LPASS LPI code
+ UBUNTU: [Config] Enable CONFIG_PINCTRL_SM8250_LPASS_LPI=m
+ pinctrl: qcom: sm8250-lpass-lpi: Fix i2s2_data_groups definition
+ pinctrl: single: fix refcount leak in pcs_add_gpio_func()
+ backlight: qcom-wled: Support ovp values for PMI8994
+ fs/ntfs3: prevent infinite loops caused by the next valid being the same
+ fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot
+ ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online CPUs
+ cpuidle: Skip governor when only one idle state is available
+ selftests: mlxsw: tc_restrictions: Fix test failure with new iproute2
+ xen-netback: reject zero-queue configuration from guest
+ net/rds: rds_sendmsg should not discard payload_len
+ selftests: forwarding: vxlan_bridge_1d: fix test failure with br_netfilter
enabled
+ netfilter: nf_conntrack_h323: don't pass uninitialised l3num value
+ net: remove WARN_ON_ONCE when accessing forward path array
+ ipv6: fix a race in ip6_sock_set_v6only()
+ bpftool: Fix truncated netlink dumps
+ octeontx2-af: Fix default entries mcam entry action
+ bonding: alb: fix UAF in rlb_arp_recv during bond up/down
+ apparmor: fix NULL sock in aa_sock_file_perm
+ apparmor: fix rlimit for posix cpu timers
+ apparmor: fix invalid deref of rawdata when export_binary is unset
+ drm/i915/acpi: free _DSM package when no connectors
+ btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found
+ MIPS: Work around LLVM bug when gp is used as global register variable
+ ext4: don't cache extent during splitting extent
+ ext4: fix memory leak in ext4_ext_shift_extents()
+ ext4: use optimized mballoc scanning regardless of inode format
+ ata: pata_ftide010: Fix some DMA timings
+ SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths
+ SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path
+ perf callchain: Fix srcline printing with inlines
+ libperf: Don't remove -g when EXTRA_CFLAGS are used
+ libperf build: Always place libperf includes first
+ rtc: interface: Alarm race handling should not discard preceding error
+ audit: add fchmodat2() to change attributes class
+ hfsplus: fix volume corruption issue for generic/498
+ audit: add missing syscalls to read class
+ hfsplus: pretend special inodes as regular files
+ i3c: master: svc: Initialize 'dev' to NULL in svc_i3c_master_ibi_isr()
+ minix: Add required sanity checking to minix_check_superblock()
+ gfs2: fiemap page fault fix
+ tools/power cpupower: Reset errno before strtoull()
+ s390/purgatory: Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS
+ arm64: Add support for TSV110 Spectre-BHB mitigation
+ rnbd-srv: Zero the rsp buffer before using it
+ x86/xen/pvh: Enable PAE mode for 32-bit guest only when CONFIG_X86_PAE is set
+ EFI/CPER: don't dump the entire memory region
+ APEI/GHES: ensure that won't go past CPER allocated record
+ EFI/CPER: don't go past the ARM processor CPER record buffer
+ ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4()
+ ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP
+ s390/perf: Disable register readout on sampling events
+ xenbus: Use .freeze/.thaw to handle xenbus devices
+ blk-mq-debugfs: add missing debugfs_mutex in blk_mq_debugfs_register_hctxs()
+ sparc: Synchronize user stack on fork and clone
+ sparc: don't reference obsolete termio struct for TC* constants
+ bpf: verifier improvement in 32bit shift sign extension pattern
+ clocksource/drivers/sh_tmu: Always leave device running after probe
+ clocksource/drivers/timer-integrator-ap: Add missing Kconfig dependency on OF
+ mailbox: bcm-ferxrm-mailbox: Use default primary handler
+ char: tpm: cr50: Remove IRQF_ONESHOT
+ pstore: ram_core: fix incorrect success return when vmap() fails
+ arm64: tegra: smaug: Add usb-role-switch support
+ parisc: Prevent interrupts during reboot
+ media: dvb-core: dmxdevfilter must always flush bufs
+ spi: stm32: fix Overrun issue at < 8bpw
+ drm/v3d: Set DMA segment size to avoid debug warnings
+ media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes
+ media: omap3isp: isppreview: always clamp in preview_try_format()
+ media: omap3isp: set initial format
+ ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask
+ ASoC: wm8962: Don't report a microphone if it's shorted to ground on plug
+ media: adv7180: fix frame interval in progressive mode
+ media: pvrusb2: fix URB leak in pvr2_send_request_ex
+ media: solo6x10: Check for out of bounds chip_id
+ media: cx25821: Fix a resource leak in cx25821_dev_setup()
+ drm/amdkfd: Fix GART PTE for non-4K pagesize in svm_migrate_gart_map()
+ drm: Account property blob allocations to memcg
+ hyper-v: Mark inner union in hv_kvp_exchg_msg_value as packed
+ virt: vbox: uapi: Mark inner unions in packed structs as packed
+ drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback
+ drm/atmel-hlcdc: don't reject the commit if the src rect has fractional parts
+ drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release
+ HID: multitouch: add eGalaxTouch EXC3188 support
+ HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK
+ gpio: aspeed-sgpio: Change the macro to support deferred probe
+ spi: spi-mem: Protect dirmap_create() with spi_mem_access_start/end
+ ASoC: es8328: Add error unwind in resume
+ modpost: Amend ppc64 save/restfpr symnames for -Os build
+ ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio
+ jfs: Add missing set_freezable() for freezable kthread
+ jfs: nlink overflow in jfs_rename
+ dm: remove fake timeout to avoid leak request
+ iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency
+ wifi: libertas: fix WARNING in usb_tx_block
+ ipv6: annotate data-races in ip6_multipath_hash_{policy,fields}()
+ ipv6: exthdrs: annotate data-race over multiple sysctl
+ ext4: mark group add fast-commit ineligible
+ ext4: mark group extend fast-commit ineligible
+ netfilter: nf_conntrack: Add allow_clash to generic protocol handler
+ netfilter: xt_tcpmss: check remaining length before reading optlen
+ openrisc: define arch-specific version of nop()
+ net: usb: r8152: fix transmit queue timeout
+ net/rds: No shortcut out of RDS_CONN_ERROR
+ net: hns3: extend HCLGE_FD_AD_QID to 11 bits
+ wifi: iwlegacy: add missing mutex protection in il4965_store_tx_power()
+ wifi: iwlegacy: add missing mutex protection in il3945_store_measurement()
+ ipv4: fib: Annotate access to struct fib_alias.fa_state.
+ Bluetooth: hci_conn: use mod_delayed_work for active mode timeout
+ Bluetooth: btusb: Add device ID for Realtek RTL8761BU
+ octeontx2-af: Workaround SQM/PSE stalls by disabling sticky
+ wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg()
+ net: usb: sr9700: remove code to drive nonexistent multicast filter
+ vmw_vsock: bypass false-positive Wnonnull warning with gcc-16
+ net/rds: Clear reconnect pending bit
+ PCI: Mark ASM1164 SATA controller to avoid bus reset
+ PCI/AER: Clear stale errors on reporting agents upon probe
+ PCI: Fix pci_slot_lock () device locking
+ PCI: Add ACS quirk for Qualcomm Hamoa & Glymur
+ PCI: Mark Nvidia GB10 to avoid bus reset
+ myri10ge: avoid uninitialized variable use
+ nfc: nxp-nci: remove interrupt trigger type
+ RDMA/rtrs-clt: For conn rejection use actual err number
+ scsi: buslogic: Reduce stack usage
+ tracing: Fix false sharing in hwlat get_sample()
+ mailbox: sprd: mask interrupts that are not handled
+ remoteproc: mediatek: Break lock dependency to `prepare_lock`
+ mailbox: sprd: clear delivery flag before handling TX done
+ clk: microchip: core: correct return value on *_get_parent()
+ m68k: nommu: fix memmove() with differently aligned src and dest for 68000
+ staging: rtl8723bs: fix missing status update on sdio_alloc_irq() failure
+ serial: 8250_dw: handle clock enable errors in runtime_resume
+ misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66
+ staging: rtl8723bs: fix memory leak on failure path
+ serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA
termination is done
+ fix it87_wdt early reboot by reporting running timer
+ binder: don't use %pK through printk
+ phy: mvebu-cp110-utmi: fix dr_mode property read from dts
+ phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature
+ Revert "mfd: da9052-spi: Change read-mask to write-mask"
+ iio: Use IRQF_NO_THREAD
+ iio: magnetometer: Remove IRQF_ONESHOT
+ MIPS: Loongson: Make cpumask_of_node() robust against NUMA_NO_NODE
+ fs: ntfs3: check return value of indx_find to avoid infinite loop
+ fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata
+ fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST
+ fs/ntfs3: avoid calling run_get_entry() when run == NULL in
ntfs_read_run_nb_ra()
+ libceph: define and enforce CEPH_MAX_KEY_LEN
+ include: uapi: netfilter_bridge.h: Cover for musl libc
+ ARM: 9467/1: mm: Don't use %pK through printk
+ drm/amd/display: Avoid updating surface with the same surface under MPO
+ drm/amdgpu: Adjust usleep_range in fence wait
+ ALSA: usb-audio: Update the number of packets properly at receiving
+ drm/amdgpu: Add HAINAN clock adjustment
+ drm/radeon: Add HAINAN clock adjustment
+ ALSA: usb-audio: Add sanity check for OOB writes at silencing
+ btrfs: replace BUG() with error handling in __btrfs_balance()
+ ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access
+ ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut
+ xfrm6: fix uninitialized saddr in xfrm6_get_saddr()
+ net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode
+ lan78xx: Fix memory allocation bug
+ net: usb: lan78xx: scan all MDIO addresses on LAN7801
+ wifi: cfg80211: wext: fix IGTK key ID off-by-one
+ Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ
+ Bluetooth: hci_qca: Cleanup on all setup failures
+ Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ
+ Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ
+ tipc: fix duplicate publication key in tipc_service_insert_publ()
+ RDMA/core: Fix stale RoCE GIDs during netdev events at registration
+ net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets
+ RDMA/efa: Fix typo in efa_alloc_mr()
+ net: usb: pegasus: enable basic endpoint checking
+ net: consume xmit errors of GSO frames
+ dpaa2-switch: validate num_ifs to prevent out-of-bounds write
+ netfilter: nf_conntrack_h323: fix OOB read in decode_choice()
+ rpmsg: core: fix race in driver_override_show() and use core helper
+ fpga: dfl: use subsys_initcall to allow built-in drivers to be added
+ dm-verity: correctly handle dm_bufio_client_create() failure
+ media: mtk-mdp: Fix error handling in probe function
+ media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove()
+ KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding
+ arm64: Disable branch profiling for all arm64 code
+ HID: hid-pl: handle probe errors
+ HID: magicmouse: Do not crash on missing msc->input
+ HID: prodikeys: Check presence of pm->input_ep82
+ HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()
+ media: radio-keene: fix memory leak in error path
+ media: cx88: Add missing unmap in snd_cx88_hw_params()
+ media: cx23885: Add missing unmap in snd_cx23885_hw_params()
+ media: cx25821: Add missing unmap in snd_cx25821_hw_params()
+ media: i2c/tw9903: Fix potential memory leak in tw9903_probe()
+ media: i2c/tw9906: Fix potential memory leak in tw9906_probe()
+ media: ccs: Avoid possible division by zero
+ media: i2c: ov5647: Initialize subdev before controls
+ media: i2c: ov5647: Correct pixel array offset
+ media: i2c: ov5647: Correct minimum VBLANK value
+ media: i2c: ov5647: Sensor should report RAW color space
+ media: i2c: ov5647: Fix PIXEL_RATE value for VGA mode
+ media: i2c: ov5647: use our own mutex for the ctrl lock
+ dm-integrity: fix a typo in the code for write/discard race
+ dm: clear cloned request bio pointer when last clone bio completes
+ soc: ti: k3-socinfo: Fix regmap leak on probe failure
+ soc: ti: pruss: Fix double free in pruss_clk_mux_setup()
+ KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation
+ clk: tegra: tegra124-emc: Fix potential memory leak in
tegra124_clk_register_emc()
+ s390/pci: Handle futile config accesses of disabled devices directly
+ dm-unstripe: fix mapping bug when there are multiple targets in a table
+ arm64: dts: rockchip: Do not enable hdmi_sound node on Pinebook Pro
+ media: venus: vdec: fix error state assignment for zero bytesused
+ drm: of: drm_of_panel_bridge_remove(): fix device_node leak
+ mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations
+ selftests/mm/charge_reserved_hugetlb: drop mount size for hugetlbfs
+ xfs: mark data structures corrupt on EIO and ENODATA
+ iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable
mode
+ xfs: delete attr leaf freemap entries when empty
+ xfs: fix freemap adjustments when adding xattrs to leaf blocks
+ xfs: fix remote xattr valuelblk check
+ PCI: endpoint: Fix swapped parameters in
pci_{primary/secondary}_epc_epf_unlink() functions
+ md/bitmap: fix GPF in write_page caused by resize race
+ nfsd: fix return error code for nfsd_map_name_to_[ug]id
+ usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN
+ bus: fsl-mc: fix an error handling in fsl_mc_device_add()
+ dm mpath: make pg_init_delay_msecs settable
+ powerpc/smp: Add check for kcalloc() failure in parse_thread_groups()
+ iio: gyro: itg3200: Fix unchecked return value in read_raw
+ rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net()
+ ocfs2: fix reflink preserve cleanup issue
+ kexec: derive purgatory entry from symbol
+ Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV"
+ PCI/IOV: Fix race between SR-IOV enable/disable and hotplug
+ arm64: Fix non-atomic __READ_ONCE() with CONFIG_LTO=y
+ btrfs: continue trimming remaining devices on failure
+ remoteproc: imx_rproc: Fix invalid loaded resource table detection
+ scsi: ufs: core: Flush exception handling work when RPM level is zero
+ usb: dwc2: fix resume failure if dr_mode is host
+ mtd: rawnand: pl353: Fix software ECC support
+ tipc: fix RCU dereference race in tipc_aead_users_dec()
+ drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()
+ net: cpsw_new: Fix unnecessary netdev unregistration in cpsw_probe() error
path
+ PCI: Fix pci_slot_trylock() error handling
+ parisc: kernel: replace kfree() with put_device() in create_tree_node()
+ staging: rtl8723bs: fix null dereference in find_network
+ MIPS: rb532: Fix MMIO UART resource registration
+ ceph: supply snapshot context in ceph_zero_partial_object()
+ net: ethernet: marvell: skge: remove incorrect conflicting PCI ID
+ net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean()
+ tracing: Fix to set write permission to per-cpu buffer_size_kb
+ net: intel: fix PCI device ID conflict between i40e and ipw2200
+ atm: fore200e: fix use-after-free in tasklets during device removal
+ ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()
+ fbdev: vt8500lcdfb: fix missing dma_free_coherent()
+ fbdev: of: display_timing: fix refcount leak in of_get_display_timings()
+ fbdev: ffb: fix corrupted video output on Sun FFB1
+ net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle
+ drm/amdgpu: keep vga memory on MacBooks with switchable graphics
+ net: nfc: nci: Fix parameter validation for packet data
+ NTB: ntb_transport: Fix too small buffer for debugfs_name
Linux 5.15.202
- NTB: ntb_transport: Fix too small buffer for debugfs_name
- net: nfc: nci: Fix parameter validation for packet data
- drm/amdgpu: keep vga memory on MacBooks with switchable graphics
- net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle
- fbdev: ffb: fix corrupted video output on Sun FFB1
- fbdev: of: display_timing: fix refcount leak in of_get_display_timings()
- fbdev: vt8500lcdfb: fix missing dma_free_coherent()
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()
- atm: fore200e: fix use-after-free in tasklets during device removal
- net: intel: fix PCI device ID conflict between i40e and ipw2200
- tracing: Fix to set write permission to per-cpu buffer_size_kb
- net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean()
- net: ethernet: marvell: skge: remove incorrect conflicting PCI ID
- ceph: supply snapshot context in ceph_zero_partial_object()
- MIPS: rb532: Fix MMIO UART resource registration
- staging: rtl8723bs: fix null dereference in find_network
- parisc: kernel: replace kfree() with put_device() in create_tree_node()
- PCI: Fix pci_slot_trylock() error handling
- net: cpsw_new: Fix unnecessary netdev unregistration in cpsw_probe() error
path
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()
- tipc: fix RCU dereference race in tipc_aead_users_dec()
- mtd: rawnand: pl353: Fix software ECC support
- usb: dwc2: fix resume failure if dr_mode is host
- scsi: ufs: core: Flush exception handling work when RPM level is zero
- remoteproc: imx_rproc: Fix invalid loaded resource table detection
- btrfs: continue trimming remaining devices on failure
- arm64: Fix non-atomic __READ_ONCE() with CONFIG_LTO=y
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug
- Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV"
- kexec: derive purgatory entry from symbol
- ocfs2: fix reflink preserve cleanup issue
- rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net()
- iio: gyro: itg3200: Fix unchecked return value in read_raw
- powerpc/smp: Add check for kcalloc() failure in parse_thread_groups()
- dm mpath: make pg_init_delay_msecs settable
- bus: fsl-mc: fix an error handling in fsl_mc_device_add()
- usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN
- nfsd: fix return error code for nfsd_map_name_to_[ug]id
- md/bitmap: fix GPF in write_page caused by resize race
- PCI: endpoint: Fix swapped parameters in
pci_{primary/secondary}_epc_epf_unlink() functions
- xfs: fix remote xattr valuelblk check
- xfs: fix freemap adjustments when adding xattrs to leaf blocks
- xfs: delete attr leaf freemap entries when empty
- iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable
mode
- xfs: mark data structures corrupt on EIO and ENODATA
- selftests/mm/charge_reserved_hugetlb: drop mount size for hugetlbfs
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations
- drm: of: drm_of_panel_bridge_remove(): fix device_node leak
- media: venus: vdec: fix error state assignment for zero bytesused
- arm64: dts: rockchip: Do not enable hdmi_sound node on Pinebook Pro
- dm-unstripe: fix mapping bug when there are multiple targets in a table
- s390/pci: Handle futile config accesses of disabled devices directly
- clk: tegra: tegra124-emc: Fix potential memory leak in
tegra124_clk_register_emc()
- KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation
- soc: ti: pruss: Fix double free in pruss_clk_mux_setup()
- soc: ti: k3-socinfo: Fix regmap leak on probe failure
- dm: clear cloned request bio pointer when last clone bio completes
- dm-integrity: fix a typo in the code for write/discard race
- media: i2c: ov5647: use our own mutex for the ctrl lock
- media: i2c: ov5647: Fix PIXEL_RATE value for VGA mode
- media: i2c: ov5647: Sensor should report RAW color space
- media: i2c: ov5647: Correct minimum VBLANK value
- media: i2c: ov5647: Correct pixel array offset
- media: i2c: ov5647: Initialize subdev before controls
- media: ccs: Avoid possible division by zero
- media: i2c/tw9906: Fix potential memory leak in tw9906_probe()
- media: i2c/tw9903: Fix potential memory leak in tw9903_probe()
- media: cx25821: Add missing unmap in snd_cx25821_hw_params()
- media: cx23885: Add missing unmap in snd_cx23885_hw_params()
- media: cx88: Add missing unmap in snd_cx88_hw_params()
- media: radio-keene: fix memory leak in error path
- HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()
- HID: prodikeys: Check presence of pm->input_ep82
- HID: magicmouse: Do not crash on missing msc->input
- HID: hid-pl: handle probe errors
- arm64: Disable branch profiling for all arm64 code
- KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding
- media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove()
- media: mtk-mdp: Fix error handling in probe function
- dm-verity: correctly handle dm_bufio_client_create() failure
- fpga: dfl: use subsys_initcall to allow built-in drivers to be added
- rpmsg: core: fix race in driver_override_show() and use core helper
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice()
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write
- net: consume xmit errors of GSO frames
- net: usb: pegasus: enable basic endpoint checking
- RDMA/efa: Fix typo in efa_alloc_mr()
- net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets
- RDMA/core: Fix stale RoCE GIDs during netdev events at registration
- tipc: fix duplicate publication key in tipc_service_insert_publ()
- Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ
- Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ
- Bluetooth: hci_qca: Cleanup on all setup failures
- Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ
- wifi: cfg80211: wext: fix IGTK key ID off-by-one
- net: ethernet: xscale: Check for PTP support properly
- net: ixp4xx_eth: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set()
- net: usb: lan78xx: scan all MDIO addresses on LAN7801
- lan78xx: Fix memory allocation bug
- net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode
- xfrm6: fix uninitialized saddr in xfrm6_get_saddr()
- ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut
- ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access
- btrfs: replace BUG() with error handling in __btrfs_balance()
- ALSA: usb-audio: Add sanity check for OOB writes at silencing
- drm/radeon: Add HAINAN clock adjustment
- drm/amdgpu: Add HAINAN clock adjustment
- ALSA: usb-audio: Update the number of packets properly at receiving
- drm/amdgpu: Adjust usleep_range in fence wait
- drm/amd/display: Avoid updating surface with the same surface under MPO
- ARM: 9467/1: mm: Don't use %pK through printk
- include: uapi: netfilter_bridge.h: Cover for musl libc
- libceph: define and enforce CEPH_MAX_KEY_LEN
- fs/ntfs3: avoid calling run_get_entry() when run == NULL in
ntfs_read_run_nb_ra()
- fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST
- fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata
- fs: ntfs3: check return value of indx_find to avoid infinite loop
- MIPS: Loongson: Make cpumask_of_node() robust against NUMA_NO_NODE
- iio: magnetometer: Remove IRQF_ONESHOT
- iio: Use IRQF_NO_THREAD
- Revert "mfd: da9052-spi: Change read-mask to write-mask"
- phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature
- phy: mvebu-cp110-utmi: fix dr_mode property read from dts
- binder: don't use %pK through printk
- fix it87_wdt early reboot by reporting running timer
- serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA
termination is done
- staging: rtl8723bs: fix memory leak on failure path
- misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66
- serial: 8250_dw: handle clock enable errors in runtime_resume
- staging: rtl8723bs: fix missing status update on sdio_alloc_irq() failure
- m68k: nommu: fix memmove() with differently aligned src and dest for 68000
- clk: microchip: core: correct return value on *_get_parent()
- mailbox: sprd: clear delivery flag before handling TX done
- remoteproc: mediatek: Break lock dependency to `prepare_lock`
- mailbox: sprd: mask interrupts that are not handled
- tracing: Fix false sharing in hwlat get_sample()
- scsi: buslogic: Reduce stack usage
- RDMA/rtrs-clt: For conn rejection use actual err number
- nfc: nxp-nci: remove interrupt trigger type
- myri10ge: avoid uninitialized variable use
- PCI: Mark Nvidia GB10 to avoid bus reset
- PCI: Add ACS quirk for Qualcomm Hamoa & Glymur
- PCI: Enable ACS after configuring IOMMU for OF platforms
- PCI: Fix pci_slot_lock () device locking
- PCI/AER: Clear stale errors on reporting agents upon probe
- PCI: Mark ASM1164 SATA controller to avoid bus reset
- net/rds: Clear reconnect pending bit
- vmw_vsock: bypass false-positive Wnonnull warning with gcc-16
- net: usb: sr9700: remove code to drive nonexistent multicast filter
- wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg()
- octeontx2-af: Workaround SQM/PSE stalls by disabling sticky
- Bluetooth: btusb: Add device ID for Realtek RTL8761BU
- Bluetooth: hci_conn: use mod_delayed_work for active mode timeout
- ipv4: fib: Annotate access to struct fib_alias.fa_state.
- wifi: iwlegacy: add missing mutex protection in il3945_store_measurement()
- wifi: iwlegacy: add missing mutex protection in il4965_store_tx_power()
- net: hns3: extend HCLGE_FD_AD_QID to 11 bits
- net/rds: No shortcut out of RDS_CONN_ERROR
- net: usb: r8152: fix transmit queue timeout
- openrisc: define arch-specific version of nop()
- netfilter: xt_tcpmss: check remaining length before reading optlen
- netfilter: nf_conntrack: Add allow_clash to generic protocol handler
- ext4: mark group extend fast-commit ineligible
- ext4: mark group add fast-commit ineligible
- ipv6: exthdrs: annotate data-race over multiple sysctl
- ipv6: annotate data-races in ip6_multipath_hash_{policy,fields}()
- wifi: libertas: fix WARNING in usb_tx_block
- iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency
- dm: remove fake timeout to avoid leak request
- jfs: nlink overflow in jfs_rename
- jfs: Add missing set_freezable() for freezable kthread
- ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio
- modpost: Amend ppc64 save/restfpr symnames for -Os build
- ASoC: es8328: Add error unwind in resume
- spi: spi-mem: Protect dirmap_create() with spi_mem_access_start/end
- gpio: aspeed-sgpio: Change the macro to support deferred probe
- HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK
- HID: multitouch: add eGalaxTouch EXC3188 support
- drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release
- drm/atmel-hlcdc: don't reject the commit if the src rect has fractional parts
- drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback
- virt: vbox: uapi: Mark inner unions in packed structs as packed
- hyper-v: Mark inner union in hv_kvp_exchg_msg_value as packed
- drm: Account property blob allocations to memcg
- drm/amdkfd: Fix GART PTE for non-4K pagesize in svm_migrate_gart_map()
- media: cx25821: Fix a resource leak in cx25821_dev_setup()
- media: solo6x10: Check for out of bounds chip_id
- media: pvrusb2: fix URB leak in pvr2_send_request_ex
- media: adv7180: fix frame interval in progressive mode
- ASoC: wm8962: Don't report a microphone if it's shorted to ground on plug
- ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask
- media: omap3isp: set initial format
- media: omap3isp: isppreview: always clamp in preview_try_format()
- media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes
- drm/v3d: Set DMA segment size to avoid debug warnings
- spi: stm32: fix Overrun issue at < 8bpw
- media: dvb-core: dmxdevfilter must always flush bufs
- parisc: Prevent interrupts during reboot
- arm64: tegra: smaug: Add usb-role-switch support
- pstore: ram_core: fix incorrect success return when vmap() fails
- char: tpm: cr50: Remove IRQF_ONESHOT
- mailbox: bcm-ferxrm-mailbox: Use default primary handler
- clocksource/drivers/timer-integrator-ap: Add missing Kconfig dependency on OF
- clocksource/drivers/sh_tmu: Always leave device running after probe
- bpf: verifier improvement in 32bit shift sign extension pattern
- sparc: don't reference obsolete termio struct for TC* constants
- sparc: Synchronize user stack on fork and clone
- blk-mq-debugfs: add missing debugfs_mutex in blk_mq_debugfs_register_hctxs()
- xenbus: Use .freeze/.thaw to handle xenbus devices
- s390/perf: Disable register readout on sampling events
- ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP
- ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4()
- EFI/CPER: don't go past the ARM processor CPER record buffer
- APEI/GHES: ensure that won't go past CPER allocated record
- EFI/CPER: don't dump the entire memory region
- x86/xen/pvh: Enable PAE mode for 32-bit guest only when CONFIG_X86_PAE is set
- rnbd-srv: Zero the rsp buffer before using it
- arm64: Add support for TSV110 Spectre-BHB mitigation
- s390/purgatory: Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS
- tools/power cpupower: Reset errno before strtoull()
- gfs2: fiemap page fault fix
- minix: Add required sanity checking to minix_check_superblock()
- i3c: master: svc: Initialize 'dev' to NULL in svc_i3c_master_ibi_isr()
- hfsplus: pretend special inodes as regular files
- audit: add missing syscalls to read class
- hfsplus: fix volume corruption issue for generic/498
- audit: add fchmodat2() to change attributes class
- rtc: interface: Alarm race handling should not discard preceding error
- libperf build: Always place libperf includes first
- libperf: Don't remove -g when EXTRA_CFLAGS are used
- perf callchain: Fix srcline printing with inlines
- SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path
- SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths
- ata: pata_ftide010: Fix some DMA timings
- ext4: use optimized mballoc scanning regardless of inode format
- ext4: fix memory leak in ext4_ext_shift_extents()
- ext4: don't cache extent during splitting extent
- MIPS: Work around LLVM bug when gp is used as global register variable
- btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found
- drm/i915/acpi: free _DSM package when no connectors
- ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()
- apparmor: fix invalid deref of rawdata when export_binary is unset
- apparmor: fix rlimit for posix cpu timers
- apparmor: fix NULL sock in aa_sock_file_perm
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down
- octeontx2-af: Fix default entries mcam entry action
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path
- bpftool: Fix truncated netlink dumps
- ipv6: fix a race in ip6_sock_set_v6only()
- net: remove WARN_ON_ONCE when accessing forward path array
- netfilter: nf_conntrack_h323: don't pass uninitialised l3num value
- selftests: forwarding: vxlan_bridge_1d: fix test failure with br_netfilter
enabled
- net/rds: rds_sendmsg should not discard payload_len
- xen-netback: reject zero-queue configuration from guest
- selftests: mlxsw: tc_restrictions: Fix test failure with new iproute2
- cpuidle: Skip governor when only one idle state is available
- ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online CPUs
- fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot
- fs/ntfs3: prevent infinite loops caused by the next valid being the same
- backlight: qcom-wled: Support ovp values for PMI8994
- pinctrl: single: fix refcount leak in pcs_add_gpio_func()
- pinctrl: qcom: sm8250-lpass-lpi: Fix i2s2_data_groups definition
- pinctrl: qcom: Extract chip specific LPASS LPI code
- pinctrl: qcom: Update lpi pin group custiom functions with framework generic
functions
- pinctrl: qcom: Update macro name to LPI specific
- iio: sca3000: Fix a resource leak in sca3000_probe()
- ovl: Fix uninit-value in ovl_fill_real
- pinctrl: equilibrium: Fix device node reference leak in pinbank_init()
- usb: bdc: fix sleep during atomic
- drivers: iio: mpu3050: use dev_err_probe for regulator request
- mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer()
failure
- Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms"
- coresight: etm3x: Fix cpulocked warning on cpuhp
- mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms
- serial: SH_SCI: improve "DMA support" prompt
- serial: imx: change SERIAL_IMX_CONSOLE to bool
- staging: greybus: lights: avoid NULL deref
- dma: dma-axi-dmac: fix SW cyclic transfers
- dmaengine: mediatek: uart-apdma: Fix above 4G addressing TX/RX
- clk: qcom: dispcc-sdm845: Enable parents for pixel clocks
- clk: Move clk_{save,restore}_context() to COMMON_CLK section
- clk: qcom: gcc-msm8953: Remove ALWAYS_ON flag from cpp_gdsc
- clk: meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs
- clk: qcom: rcg2: compute 2d using duty fraction directly
- fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe()
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros
- nvdimm: virtio_pmem: serialize flush requests
- scsi: csiostor: Fix dereference of null pointer rn
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN
- RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc
- mtd: parsers: ofpart: fix OF node refcount leak in parse_fixed_partitions()
- RDMA/core: add rdma_rw_max_sge() helper for SQ sizing
- svcrdma: Reduce the number of rdma_rw contexts per-QP
- svcrdma: Increase the per-transport rw_ctx count
- svcrdma: Clean up comment in svc_rdma_accept()
- svcrdma: Remove queue-shortening warnings
- RDMA/core: Fix a couple of obvious typos in comments
- RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send
- crypto: ccp - Add an S4 restore flow
- mtd: rawnand: cadence: Fix return type of CDMA send-and-wait helper
- RDMA/rxe: Fix double free in rxe_srq_from_init
- RDMA/rtrs-srv: fix SG mapping
- RDMA/rtrs-srv: Correct the checking of ib_map_mr_sg
- RDMA/rtrs-srv: Refactor the handling of failure case in map_cont_bufs
- power: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed()
- power: supply: bq27xxx: fix wrong errno when bus ops are unsupported
- power: reset: nvmem-reboot-mode: respect cell size for nvmem_cell_write
- power: supply: sbs-battery: Fix use-after-free in power_supply_changed()
- power: supply: rt9455: Fix use-after-free in power_supply_changed()
- power: supply: goldfish: Fix use-after-free in power_supply_changed()
- power: supply: cpcap-battery: Fix use-after-free in power_supply_changed()
- power: supply: bq25980: Fix use-after-free in power_supply_changed()
- power: supply: bq256xx: Fix use-after-free in power_supply_changed()
- power: supply: act8945a: Fix use-after-free in power_supply_changed()
- power: supply: ab8500: Fix use-after-free in power_supply_changed()
- power: supply: ab8500: Use core battery parser
- power: supply: ab8500_bmdata: Use standard phandle
- RDMA/hns: Notify ULP of remaining soft-WCs during reset
- IB/cache: update gid cache on client reregister event
- RDMA/rtrs: server: remove dead code
- octeontx2-pf: Unregister devlink on probe failure
- ionic: Rate limit unknown xcvr type messages
- serial: caif: fix use-after-free in caif_serial ldisc_close()
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send()
- procfs: fix missing RCU protection when reading real_parent in do_task_stat()
- net: hns3: fix double free issue for tx spare buffer
- net: hns3: add max order judgement for tx spare buffer
- net: hns3: fix ethtool tx copybreak buf size indicating not aligned issue
- net: hns3: remove the way to set tx spare buf via module parameter
- net: hns3: add support to set/get tx copybreak buf size via ethtool for hns3
driver
- ethtool: add support to set/get tx copybreak buf size via ethtool
- netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets
- netfilter: nft_set_hash: fix get operation on big endian
- nfc: hci: shdlc: Stop timers and work before freeing context
- timers: Replace in_irq() with in_hardirq()
- bonding: only set speed/duplex to unknown, if getting speed failed
- octeontx2-af: Fix PF driver crash with kexec kernel booting
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit()
- PCI: Initialize RCB from pci_configure_device()
- wifi: ath10k: sdio: add missing lock protection in
ath10k_sdio_fw_crashed_dump()
- tcp: tcp_tx_timestamp() must look at the rtx queue
- fat: avoid parent link count underflow in rmdir
- nfsd: never defer requests during idmap lookup
- iommu/vt-d: Flush cache for PASID table before using it
- PCI: Mark 3ware-9650SA Root Port Extended Tags as broken
- netfilter: nf_conncount: fix tracking of connections from localhost
- netfilter: nf_conncount: increase the connection clean up limit to 64
- netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH
- wifi: cfg80211: stop NAN and P2P in cfg80211_leave
- PCI/portdrv: Fix potential resource leak
- PCI: Do not attempt to set ExtTag for VFs
- PCI: mediatek: Fix IRQ domain leak when MSI allocation fails
- spi: tools: Add include folder to .gitignore
- platform/chrome: cros_ec_lightbar: Fix response size initialization
- media: uvcvideo: Fix allocation for small frame sizes
- media: ccs: Accommodate C-PHY into the calculation
- HID: playstation: Add missing check for input_ff_create_memless
- regulator: core: move supply check earlier in set_machine_constraints()
- drm/amdgpu: Use explicit VCN instance 0 in SR-IOV init
- smack: /smack/doi: accept previously used values
- smack: /smack/doi must be > 0
- arm64: dts: qcom: sdm845-db845c: specify power for WiFi CH1
- arm64: dts: amlogic: g12: assign the MMC A signal clock
- arm64: dts: amlogic: g12: assign the MMC B and C signal clocks
- arm64: dts: amlogic: gx: assign the MMC signal clocks
- arm64: dts: amlogic: axg: assign the MMC signal clocks
- arm: dts: lpc32xx: add clocks property to Motor Control PWM device tree node
- ARM: dts: lpc32xx: Set motor PWM #pwm-cells property value to 3 cells
- powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event
handling
- soc: qcom: cmd-db: Use devm_memremap() to fix memory leak in cmd_db_dev_probe
- powerpc/uaccess: Move barrier_nospec() out of allow_read_{from/write}_user()
- ARM: dts: allwinner: sun5i-a13-utoo-p66: delete "power-gpios" property
- arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on
- arm64: dts: qcom: sdm845-oneplus: Don't mark ts supply boot-on
- arm64: dts: qcom: sdm630: fix gpu_speed_bin size
- arm64: dts: qcom: sdm630: correct QFPROM byte offsets
- clk: qcom: Return correct error code in qcom_cc_probe_by_index()
- EDAC/i5400: Fix snprintf() limit calculation in calculate_dimm_size()
- EDAC/i5000: Fix snprintf() size calculation in calculate_dimm_size()
- pstore/ram: fix buffer overflow in persistent_ram_save_old()
- sched/rt: Skip currently executing CPU in rto_next_cpu()
- mfd: wm8350-core: Use IRQF_ONESHOT
- EDAC/altera: Remove IRQF_ONESHOT
- scsi: efct: Use IRQF_ONESHOT and default primary handler
- crypto: hisilicon/trng - support tfms sharing the device
- crypto: hisilicon/trng - modifying the order of header files
- hrtimer: Fix trace oddity
- crypto: octeontx - fix dma_free_coherent() size
- crypto: cavium - fix dma_free_coherent() size
- ARM: VDSO: Patch out __vdso_clock_getres() if unavailable
- libbpf: Fix OOB read in btf_dump_get_bitfield_value
- libbpf: Fix dumping big-endian bitfields
- s390/cio: Fix device lifecycle handling in css_alloc_subchannel()
- PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races
- PM: wakeup: Handle empty list in wakeup_sources_walk_start()
- iomap: fix submission side handling of completion side errors
- md/raid10: fix any_working flag handling in raid10_sync_request
- btrfs: qgroup: return correct error when deleting qgroup relation item
- tpm: st33zp24: Fix missing cleanup on get_burstcount() error
- tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure
- gfs2: Fix use-after-free in iomap inline data write path
- gfs2: Add metapath_dibh helper
- fs: add <linux/init_task.h> for 'init_fs'
- i3c: Move device name assignment after i3c_bus_init
- i3c: remove i2c board info from i2c_dev_desc
- hfsplus: return error when node already exists in hfs_bnode_create
- auxdisplay: arm-charlcd: fix release_mem_region() size
- RDMA/umad: Reject negative data_len in ib_umad_write
- RDMA/siw: Fix potential NULL pointer dereference in header processing
+ UBUNTU: Upstream stable to v5.15.202
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2156272
Title:
Jammy update: v5.15.202 upstream stable release
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2156272/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
