Oracle Linux Security Advisory ELSA-2022-10023

https://linux.oracle.com/errata/ELSA-2022-10023.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-container-5.15.0-4.70.5.2.el8.x86_64.rpm
kernel-uek-container-debug-5.15.0-4.70.5.2.el8.x86_64.rpm



SRPMS:
https://oss.oracle.com:443/ol8/SRPMS-updates/kernel-uek-container-5.15.0-4.70.5.2.el8.src.rpm

Related CVEs:

CVE-2022-1184




Description of changes:

[5.15.0-4.70.5.2.el8]
- Revert "sched: Remove the limitation of WF_ON_CPU on wakelist if wakee cpu is
  idle" (Samasth Norway Ananda)  [Orabug: 34783367]

[5.15.0-4.70.5.1.el8]
- NFSv4: Fixes for nfs4_inode_return_delegation() (Trond Myklebust)  [Orabug:
  34751176]

[5.15.0-4.70.5.el8]
- uek: kabi: update kABI files for new symbols (Saeed Mirzamohammadi)  [Orabug: 34595591]
- Revert "scsi: lpfc: SLI path split: Refactor lpfc_iocbq" (John Donnelly)  [Orabug: 34678989]
- Revert "scsi: lpfc: SLI path split: Refactor fast and slow paths to native SLI4" (John Donnelly)  [Orabug: 34678989]
- Revert "scsi: lpfc: SLI path split: Refactor SCSI paths" (John Donnelly)  [Orabug: 34678989]
- Revert "scsi: lpfc: Remove extra atomic_inc on cmd_pending in queuecommand after VMID" (John Donnelly)  [Orabug: 34678989]
- Revert "scsi: lpfc: Fix locking for lpfc_sli_iocbq_lookup()" (John Donnelly)  [Orabug: 34678989]
- Revert "scsi: lpfc: Fix element offset in __lpfc_sli_release_iocbq_s4()" (John Donnelly)  [Orabug: 34678989]
- Revert "scsi: lpfc: Resolve some cleanup issues following SLI path refactoring" (John Donnelly)  [Orabug: 34678989]
- Revert "scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input" (John Donnelly)  [Orabug: 34678989]
- Revert "scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE" (John Donnelly)  [Orabug: 34678989]
- RDS/IB Fix allocation warning (Hans Westgaard Ry)  [Orabug: 34684321]
- fs: remove no_llseek (Jason A. Donenfeld)  [Orabug: 34705082]
- vfio: do not set FMODE_LSEEK flag (Jason A. Donenfeld)  [Orabug: 34705082]
- dma-buf: remove useless FMODE_LSEEK flag (Jason A. Donenfeld)  [Orabug: 34705082]
- fs: do not compare against ->llseek (Jason A. Donenfeld)  [Orabug: 34705082]
- fs: clear or set FMODE_LSEEK based on llseek function (Jason A. Donenfeld)  [Orabug: 34705082]
- hwmon: (opbmc) AST2600 SP reset driver adjustment (Jan Zdarek)  [Orabug: 34710681]
- hwmon: (opbmc) Driver message prefixes (Jan Zdarek)  [Orabug: 34710681]
- NFSD: fix use-after-free on source server when doing inter-server copy (Dai Ngo)  [Orabug: 34716070]

[5.15.0-4.70.4.el8]
- xen/ovmapi: Build OVM guest messaging driver (Jonah Palmer)  [Orabug: 34512197]
- net/rds: Send congestion map updates only via path zero (Anand Khoje)  [Orabug: 34578048]
- Revert "RDS/IB: Fix RDS IB SRQ implementation and tune it" (Hans Westgaard Ry)  [Orabug: 34662659]
- RDMA/cma: Use output interface for net_dev check (HÃ¥kon Bugge)  [Orabug: 34694979]
- crypto: qat - add support for 401xx devices (Giovanni Cabiddu)  [Orabug: 34686738]

[5.15.0-4.70.3.el8]
- Revert "Makefile: link with -z noexecstack --no-warn-rwx-segments" (Jack Vogel)
- Revert "x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments" (Jack Vogel)
- LTS version: v5.15.70 (Jack Vogel)
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change (Takashi Iwai)
- KVM: SEV: add cache flush to solve SEV cache incoherency issues (Mingwei Zhang)
- net: Find dst with sk's xfrm policy not ctl_sk (sewookseo)
- video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write (Hyunwoo Kim)
- mksysmap: Fix the mismatch of 'L0' symbols in System.map (Youling Tang)
- drm/panfrost: devfreq: set opp to the recommended one to configure regulator (Clément Péron)
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping() (Alexander Sverdlin)
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked (David Howells)
- net: usb: qmi_wwan: add Quectel RM520N (jerry.meng)
- ALSA: hda/tegra: Align BDL entry to 4KB boundary (Mohan Kumar)
- ALSA: hda/sigmatel: Keep power up while beep is enabled (Takashi Iwai)
- wifi: mac80211_hwsim: check length for virtio packets (Soenke Huster)
- rxrpc: Fix calc of resend age (David Howells)
- rxrpc: Fix local destruction being repeated (David Howells)
- scsi: lpfc: Return DID_TRANSPORT_DISRUPTED instead of DID_REQUEUE (Hannes Reinecke)
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe() (Xiaolei Wang)
- ASoC: nau8824: Fix semaphore unbalance at error paths (Takashi Iwai)
- arm64: dts: juno: Add missing MHU secure-irq (Jassi Brar)
- video: fbdev: i740fb: Error out if 'pixclock' equals zero (Zheyu Ma)
- binder: remove inaccurate mmap_assert_locked() (Carlos Llamas)
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega (Alex Deucher)
- drm/amdgpu: move nbio ih_doorbell_range() into ih code for vega (Alex Deucher)
- drm/amdgpu: Don't enable LTR if not supported (Lijo Lazar)
- tools/include/uapi: Fix  for parisc and xtensa (Ben Hutchings)
- parisc: Allow CONFIG_64BIT with ARCH=parisc (Helge Deller)
- cifs: always initialize struct msghdr smb_msg completely (Stefan Metzmacher)
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Stefan Metzmacher)
- cifs: revalidate mapping when doing direct writes (Ronnie Sahlberg)
- of/device: Fix up of_dma_configure_id() stub (Thierry Reding)
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe() (Yang Yingliang)
- block: blk_queue_enter() / __bio_queue_enter() must return -EAGAIN for nowait (Stefan Roesch)
- drm/meson: Fix OSD1 RGB to YCbCr coefficient (Stuart Menefy)
- drm/meson: Correct OSD1 global alpha value (Stuart Menefy)
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx (Pali Rohár)
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0 (Trond Myklebust)
- pinctrl: sunxi: Fix name for A100 R_PIO (Michael Wu)
- pinctrl: rockchip: Enhance support for IRQ_TYPE_EDGE_BOTH (João H. Spies)
- pinctrl: qcom: sc8180x: Fix wrong pin numbers (Molly Sophia)
- pinctrl: qcom: sc8180x: Fix gpio_wakeirq_map (Molly Sophia)
- of: fdt: fix off-by-one error in unflatten_dt_nodes() (Sergey Shtylyov)
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled (Sergiu Moga)
- serial: atmel: remove redundant assignment in rs485_config (Lino Sanfilippo)
- drm/tegra: vic: Fix build warning when CONFIG_PM=n (YueHaibing)
- LTS version: v5.15.69 (Jack Vogel)
- Input: goodix - add compatible string for GT1158 (Jarrah Gosbell)
- RDMA/irdma: Use s/g array in post send only when its valid (Sindhu-Devale)
- usb: gadget: f_uac2: fix superspeed transfer (Jing Leng)
- usb: gadget: f_uac2: clean up some inconsistent indenting (Colin Ian King)
- soc: fsl: select FSL_GUTS driver for DPIO (Mathew McBride)
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region() (Jann Horn)
- usb: storage: Add ASUS <0x0b05:0x1932> to IGNORE_UAS (Hu Xiaoying)
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes (Hans de Goede)
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure (Yu Zhe)
- net: dsa: hellcreek: Print warning only once (Kurt Kanzenbach)
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0 (Chengming Gui)
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() (Maurizio Lombardi)
- Input: iforce - add support for Boeder Force Feedback Wheel (Greg Tulli)
- ieee802154: cc2520: add rc code in cc2520_tx() (Li Qiong)
- gpio: mockup: remove gpio debugfs when remove device (Wei Yongjun)
- tg3: Disable tg3 device on system reboot to avoid triggering AER (Kai-Heng Feng)
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message (Even Xu)
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo (Jason Wang)
- dt-bindings: iio: gyroscope: bosch,bmg160: correct number of pins (Krzysztof Kozlowski)
- drm/msm/rd: Fix FIFO-full deadlock (Rob Clark)
- platform/surface: aggregator_registry: Add support for Surface Laptop Go 2 (Maximilian Luz)
- Input: goodix - add support for GT1158 (Ondrej Jirman)
- iommu/vt-d: Fix kdump kernels boot failure with scalable mode (Lu Baolu)
- tracefs: Only clobber mode/uid/gid on remount if asked (Brian Norris)
- tracing: hold caller_addr to hardirq_{enable,disable}_ip (Yipeng Zou)
- task_stack, x86/cea: Force-inline stack helpers (Borislav Petkov)
- x86/mm: Force-inline __phys_addr_nodebug() (Borislav Petkov)
- lockdep: Fix -Wunused-parameter for _THIS_IP_ (Nick Desaulniers)
- ARM: dts: at91: sama7g5ek: specify proper regulator output ranges (Claudiu Beznea)
- ARM: dts: at91: fix low limit for CPU regulator (Claudiu Beznea)
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible (Marco Felsch)
- ARM: dts: imx: align SPI NOR node name with dtschema (Krzysztof Kozlowski)
- ACPI: resource: skip IRQ override on AMD Zen platforms (Chuanhong Guo)
- NFS: Fix WARN_ON due to unionization of nfs_inode.nrequests (Dave Wysochanski)
- LTS version: v5.15.68 (Jack Vogel)
- ARM: at91: ddr: remove CONFIG_SOC_SAMA7 dependency (Claudiu Beznea)
- perf machine: Use path__join() to compose a path instead of snprintf(dir, '/', filename) (Arnaldo Carvalho de Melo)
- drm/bridge: display-connector: implement bus fmts callbacks (Neil Armstrong)
- arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly (Ionela Voinescu)
- iommu/vt-d: Correctly calculate sagaw value of IOMMU (Lu Baolu)
- arm64/bti: Disable in kernel BTI when cross section thunks are broken (Mark Brown)
- Revert "arm64: kasan: Revert "arm64: mte: reset the page tag in page->flags"" (Sasha Levin)
- hwmon: (mr75203) enable polling for all VM channels (Eliav Farber)
- hwmon: (mr75203) fix multi-channel voltage reading (Eliav Farber)
- hwmon: (mr75203) fix voltage equation for negative source input (Eliav Farber)
- hwmon: (mr75203) update pvt->v_num and vm_num to the actual number of used sensors (Eliav Farber)
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined (Eliav Farber)
- s390/boot: fix absolute zero lowcore corruption on boot (Alexander Gordeev)
- iommu/amd: use full 64-bit value in build_completion_wait() (John Sperbeck)
- swiotlb: avoid potential left shift overflow (Chao Gao)
- i40e: Fix ADQ rate limiting for PF (Przemyslaw Patynowski)
- i40e: Refactor tc mqprio checks (Przemyslaw Patynowski)
- kbuild: disable header exports for UML in a straightforward way (Masahiro Yamada)
- MIPS: loongson32: ls1c: Fix hang during startup (Yang Ling)
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion (Nathan Chancellor)
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps (Claudiu Beznea)
- hwmon: (tps23861) fix byte order in resistance register (Alexandru Gagniuc)
- perf script: Fix Cannot print 'iregs' field for hybrid systems (Zhengjun Xing)
- sch_sfb: Also store skb len before calling child enqueue (Toke Høiland-Jørgensen)
- RDMA/irdma: Report RNR NAK generation in device caps (Sindhu-Devale)
- RDMA/irdma: Return correct WC error for bind operation failure (Sindhu-Devale)
- RDMA/irdma: Report the correct max cqes from query device (Sindhu-Devale)
- nvmet: fix mar and mor off-by-one errors (Dennis Maisenbacher)
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO (Neal Cardwell)
- nvme-tcp: fix regression that causes sporadic requests to time out (Sagi Grimberg)
- nvme-tcp: fix UAF when detecting digest errors (Sagi Grimberg)
- erofs: fix pcluster use-after-free on UP platforms (Gao Xiang)
- RDMA/mlx5: Set local port to one when accessing counters (Chris Mi)
- IB/core: Fix a nested dead lock as part of ODP flow (Yishai Hadas)
- ipv6: sr: fix out-of-bounds read when setting HMAC data. (David Lebrun)
- RDMA/siw: Pass a pointer to virt_to_page() (Linus Walleij)
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed (Paul Durrant)
- iavf: Detach device during reset task (Ivan Vecera)
- i40e: Fix kernel crash during module removal (Ivan Vecera)
- ice: use bitmap_free instead of devm_kfree (Michal Swiatkowski)
- tcp: TX zerocopy should not sense pfmemalloc status (Eric Dumazet)
- net: introduce __skb_fill_page_desc_noacc (Pavel Begunkov)
- tipc: fix shift wrapping bug in map_get() (Dan Carpenter)
- sch_sfb: Don't assume the skb is still around after enqueueing to child (Toke Høiland-Jørgensen)
- Revert "net: phy: meson-gxl: improve link-up behavior" (Heiner Kallweit)
- afs: Use the operation issue time instead of the reply time for callbacks (David Howells)
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() (David Howells)
- rxrpc: Fix ICMP/ICMP6 error handling (David Howells)
- ALSA: usb-audio: Register card again for iface over delayed_register option (Takashi Iwai)
- ALSA: usb-audio: Inform the delayed registration more properly (Takashi Iwai)
- RDMA/srp: Set scmnd->result only when scmnd is not NULL (yangx.jy@fujitsu.com)
- netfilter: nf_conntrack_irc: Fix forged IP logic (David Leadbeater)
- netfilter: nf_tables: clean up hook list when offload flags check fails (Pablo Neira Ayuso)
- netfilter: br_netfilter: Drop dst references before setting. (Harsh Modi)
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time (Claudiu Beznea)
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time (Claudiu Beznea)
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges (Claudiu Beznea)
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges (Claudiu Beznea)
- ARM: at91: pm: fix DDR recalibration when resuming from backup and self-refresh (Claudiu Beznea)
- ARM: at91: pm: fix self-refresh for sama7g5 (Claudiu Beznea)
- wifi: wilc1000: fix DMA on stack objects (Ajay.Kathat@microchip.com)
- RDMA/hns: Fix wrong fixed value of qp->rq.wqe_shift (Wenpeng Liang)
- RDMA/hns: Fix supported page size (Chengchang Tang)
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs (Liang He)
- RDMA/cma: Fix arguments order in net device validation (Michael Guralnik)
- tee: fix compiler warning in tee_shm_register() (Jens Wiklander)
- regulator: core: Clean up on enable failure (Andrew Halaney)
- soc: imx: gpcv2: Assert reset before ungating clock (Marek Vasut)
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node (Marco Felsch)
- RDMA/rtrs-srv: Pass the correct number of entries for dma mapped SGL (Jack Wang)
- RDMA/rtrs-clt: Use the right sg_cnt after ib_dma_map_sg (Jack Wang)
- ASoC: qcom: sm8250: add missing module owner (Srinivas Kandagatla)
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Tejun Heo)
- NFS: Fix another fsync() issue after a server reboot (Trond Myklebust)
- NFS: Save some space in the inode (Trond Myklebust)
- NFS: Further optimisations for 'ls -l' (Trond Myklebust)
- scsi: lpfc: Add missing destroy_workqueue() in error path (Yang Yingliang)
- scsi: mpt3sas: Fix use-after-free warning (Sreekanth Reddy)
- drm/i915: Implement WaEdpLinkRateDataReload (Ville Syrjälä)
- nvmet: fix a use-after-free (Bart Van Assche)
- drm/amd/display: fix memory leak when using debugfs_lookup() (Greg Kroah-Hartman)
- sched/debug: fix dentry leak in update_sched_domain_debugfs (Greg Kroah-Hartman)
- debugfs: add debugfs_lookup_and_remove() (Greg Kroah-Hartman)
- kprobes: Prohibit probes in gate area (Christian A. Ehrhardt)
- vfio/type1: Unpin zero pages (Alex Williamson)
- btrfs: zoned: set pseudo max append zone limit in zone emulation mode (Shin'ichiro Kawasaki)
- tracing: Fix to check event_mutex is held while accessing trigger list (Masami Hiramatsu (Google))
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() (Dongxiang Ke)
- ALSA: usb-audio: Split endpoint setups for hw_params and prepare (Takashi Iwai)
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer (Pattara Teerapong)
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() (Tasos Sahanidis)
- ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC (Takashi Iwai)
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly (Qu Huang)
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() (Yang Yingliang)
- fbdev: fbcon: Destroy mutex on freeing struct fb_info (Shigeru Yoshida)
- md: Flush workqueue md_rdev_misc_wq in md_alloc() (David Sloan)
- net/core/skbuff: Check the return value of skb_copy_bits() (lily)
- cpufreq: check only freq_table in __resolve_freq() (Lukasz Luba)
- netfilter: conntrack: work around exceeded receive window (Florian Westphal)
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level (Sudeep Holla)
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines (Helge Deller)
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() (Li Qiong)
- Revert "parisc: Show error if wrong 32/64-bit compiler is being used" (Helge Deller)
- scsi: ufs: core: Reduce the power mode change timeout (Bart Van Assche)
- drm/radeon: add a force flush to delay work when radeon (Zhenneng Li)
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. (Candice Li)
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini (YiPeng Chai)
- drm/gem: Fix GEM handle release errors (Jeffy Chen)
- scsi: megaraid_sas: Fix double kfree() (Guixin Liu)
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX (Tony Battersby)
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()" (Yee Lee)
- fs: only do a memory barrier for the first set_buffer_uptodate() (Linus Torvalds)
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() (Stanislaw Gruszka)
- efi: capsule-loader: Fix use-after-free in efi_capsule_write (Hyunwoo Kim)
- efi: libstub: Disable struct randomization (Ard Biesheuvel)
- net: wwan: iosm: remove pointless null check (Jakub Kicinski)
- LTS version: v5.15.67 (Jack Vogel)
- kbuild: fix up permissions on scripts/pahole-flags.sh (Greg Kroah-Hartman)
- LTS version: v5.15.66 (Jack Vogel)
- USB: serial: ch341: fix disabled rx timer on older devices (Johan Hovold)
- USB: serial: ch341: fix lost character on LCR updates (Johan Hovold)
- usb: dwc3: disable USB core PHY management (Johan Hovold)
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup (Johan Hovold)
- usb: dwc3: fix PHY disable sequence (Johan Hovold)
- kbuild: Add skip_encoding_btf_enum64 option to pahole (Martin Rodriguez Reboredo)
- kbuild: Unify options for BTF generation for vmlinux and modules (Jiri Olsa)
- tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf() (Mazin Al Haddad)
- drm/i915: Skip wm/ddb readout for disabled pipes (Ville Syrjälä)
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk (Diego Santa Cruz)
- ALSA: seq: Fix data-race at module auto-loading (Takashi Iwai)
- ALSA: seq: oss: Fix data-race for max_midi_devs access (Takashi Iwai)
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298 (Kacper Michajłow)
- net: mac802154: Fix a condition in the receive path (Miquel Raynal)
- net: Use u64_stats_fetch_begin_irq() for stats fetch. (Sebastian Andrzej Siewior)
- ip: fix triggering of 'icmp redirect' (Nicolas Dichtel)
- wifi: mac80211: Fix UAF in ieee80211_scan_rx() (Siddh Raman Pant)
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected (Siddh Raman Pant)
- driver core: Don't probe devices after bus_type.match() probe deferral (Isaac J. Manjarres)
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS (Krishna Kurapati)
- usb: xhci-mtk: fix bandwidth release issue (Chunfeng Yun)
- usb: xhci-mtk: relax TT periodic bandwidth allocation (Chunfeng Yun)
- USB: core: Prevent nested device-reset calls (Alan Stern)
- s390: fix nospec table alignments (Josh Poimboeuf)
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages (Gerald Schaefer)
- usb-storage: Add ignore-residue quirk for NXP PN7462AU (Witold Lipieta)
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) (Thierry GUIBERT)
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer (Pawel Laszczak)
- usb: cdns3: fix issue with rearming ISO OUT endpoint (Pawel Laszczak)
- usb: dwc2: fix wrong order of phy_power_on and phy_init (Heiner Kallweit)
- usb: typec: tcpm: Return ENOTSUPP for power supply prop writes (Badhri Jagan Sridharan)
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device (Utkarsh Patel)
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles (Pablo Sun)
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode (Slark Xiao)
- USB: serial: option: add Quectel EM060K modem (Yonglin Tan)
- USB: serial: option: add support for OPPO R11 diag port (Yan Xinyu)
- USB: serial: cp210x: add Decagon UCA device id (Johan Hovold)
- xhci: Add grace period after xHC start to prevent premature runtime suspend. (Mathias Nyman)
- media: mceusb: Use new usb_control_msg_*() routines (Alan Stern)
- usb: dwc3: pci: Add support for Intel Raptor Lake (Heikki Krogerus)
- thunderbolt: Use the actual buffer in tb_async_error() (Mika Westerberg)
- xen-blkfront: Cache feature_persistent value before advertisement (SeongJae Park)
- xen-blkfront: Advertise feature-persistent as user requested (SeongJae Park)
- xen-blkback: Advertise feature-persistent as user requested (SeongJae Park)
- mm: pagewalk: Fix race between unmap and page walker (Steven Price)
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages() (Dan Carpenter)
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (Jim Mattson)
- gpio: pca953x: Add mutex_lock for regcache sync in PM (Haibo Chen)
- hwmon: (gpio-fan) Fix array out of bounds access (Armin Wolf)
- clk: bcm: rpi: Add missing newline (Stefan Wahren)
- clk: bcm: rpi: Prevent out-of-bounds access (Stefan Wahren)
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc() (Christophe JAILLET)
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate (Stefan Wahren)
- Input: rk805-pwrkey - fix module autoloading (Peter Robinson)
- clk: core: Fix runtime PM sequence in clk_core_unprepare() (Chen-Yu Tsai)
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops" (Stephen Boyd)
- drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported" (Colin Ian King)
- KVM: VMX: Heed the 'msr' argument in msr_write_intercepted() (Jim Mattson)
- cifs: fix small mempool leak in SMB2_negotiate() (Enzo Matsumiya)
- binder: fix alloc->vma_vm_mm null-ptr dereference (Carlos Llamas)
- binder: fix UAF of ref->proc caused by race condition (Carlos Llamas)
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure (Adrian Hunter)
- mmc: core: Fix UHS-I SD 1.8V workaround branch (Adrian Hunter)
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id (Niek Nooijens)
- misc: fastrpc: fix memory corruption on open (Johan Hovold)
- misc: fastrpc: fix memory corruption on probe (Johan Hovold)
- iio: adc: mcp3911: use correct formula for AD conversion (Marcus Folkesson)
- iio: ad7292: Prevent regulator double disable (Matti Vaittinen)
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag (Tetsuo Handa)
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete (Sherry Sun)
- musb: fix USB_MUSB_TUSB6010 dependency (Arnd Bergmann)
- vt: Clear selection before changing the font (Helge Deller)
- powerpc: align syscall table for ppc32 (Masahiro Yamada)
- staging: r8188eu: add firmware dependency (Grzegorz Szymaszek)
- staging: rtl8712: fix use after free bugs (Dan Carpenter)
- serial: fsl_lpuart: RS485 RTS polariy is inverse (Shenwei Wang)
- soundwire: qcom: fix device status array range (Srinivas Kandagatla)
- net/smc: Remove redundant refcount increase (Yacan Liu)
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb" (Jakub Kicinski)
- tcp: annotate data-race around challenge_timestamp (Eric Dumazet)
- kcm: fix strp_init() order and cleanup (Cong Wang)
- mlxbf_gige: compute MDIO period based on i1clk (David Thompson)
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler (Duoming Zhou)
- net/sched: fix netdevice reference leaks in attach_default_qdiscs() (Wang Hai)
- net: sched: tbf: don't call qdisc_put() while holding tree lock (Zhengchao Shao)
- net: dsa: xrs700x: Use irqsave variant for u64 stats update (Sebastian Andrzej Siewior)
- openvswitch: fix memory leak at failed datapath creation (Andrey Zhadchenko)
- net: smsc911x: Stop and start PHY during suspend and resume (Florian Fainelli)
- net: sparx5: fix handling uneven length packets in manual extraction (Casper Andersson)
- Revert "xhci: turn off port power in shutdown" (Mathias Nyman)
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() (Dan Carpenter)
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array (Peter Ujfalusi)
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg (Pierre-Louis Bossart)
- drm/i915/display: avoid warnings when registering dual panel backlight (Arun R Murthy)
- drm/i915/backlight: extract backlight code to a separate file (Jani Nikula)
- ieee802154/adf7242: defer destroy_workqueue call (Lin Ma)
- bpf, cgroup: Fix kernel BUG in purge_effective_progs (Pu Lehui)
- bpf: Restrict bpf_sys_bpf to CAP_PERFMON (YiFei Zhu)
- skmsg: Fix wrong last sg check in sk_msg_recvmsg() (Liu Jian)
- iio: adc: mcp3911: make use of the sign bit (Marcus Folkesson)
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask (Andy Shevchenko)
- drm/msm/dsi: Fix number of regulators for SDM660 (Douglas Anderson)
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg (Douglas Anderson)
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4 (Kuogee Hsieh)
- drm/msm/dsi: fix the inconsistent indenting (sunliming)
- LTS version: v5.15.65 (Jack Vogel)
- net: neigh: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)
- net/af_packet: check len when min_header_len equals to 0 (Zhengchao Shao)
- android: binder: fix lockdep check on clearing vma (Liam Howlett)
- btrfs: fix space cache corruption and potential double allocations (Omar Sandoval)
- kprobes: don't call disarm_kprobe() for disabled kprobes (Kuniyuki Iwashima)
- btrfs: tree-checker: check for overlapping extent items (Josef Bacik)
- btrfs: fix lockdep splat with reloc root extent buffers (Josef Bacik)
- btrfs: move lockdep class helpers to locking.c (Josef Bacik)
- testing: selftests: nft_flowtable.sh: use random netns names (Florian Westphal)
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y (Geert Uytterhoeven)
- drm/amd/display: avoid doing vm_init multiple time (Charlene Liu)
- drm/amdgpu: Increase tlb flush timeout for sriov (Dusica Milinkovic)
- drm/amd/display: Fix pixel clock programming (Ilya Bakoulin)
- drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid (Evan Quan)
- ksmbd: don't remove dos attribute xattr on O_TRUNC open (Namjae Jeon)
- s390/hypfs: avoid error message under KVM (Juergen Gross)
- neigh: fix possible DoS due to net iface start/stop loop (Denis V. Lunev)
- ksmbd: return STATUS_BAD_NETWORK_NAME error status if share is not configured (Namjae Jeon)
- drm/amd/display: clear optc underflow before turn off odm clock (Fudong Wang)
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME" (Alvin Lee)
- drm/amd/display: Fix HDMI VSIF V3 incorrect issue (Leo Ma)
- drm/amd/display: Avoid MPC infinite loop (Josip Pavic)
- ASoC: sh: rz-ssi: Improve error handling in rz_ssi_probe() error path (Biju Das)
- fs/ntfs3: Fix work with fragmented xattr (Konstantin Komarov)
- btrfs: fix warning during log replay when bumping inode link count (Filipe Manana)
- btrfs: add and use helper for unlinking inode during log replay (Filipe Manana)
- btrfs: remove no longer needed logic for replaying directory deletes (Filipe Manana)
- btrfs: remove root argument from btrfs_unlink_inode() (Filipe Manana)
- mmc: sdhci-of-dwcmshc: Re-enable support for the BlueField-3 SoC (Liming Sun)
- mmc: sdhci-of-dwcmshc: rename rk3568 to rk35xx (Sebastian Reichel)
- mmc: sdhci-of-dwcmshc: add reset call back for rockchip Socs (Yifeng Zhao)
- mmc: mtk-sd: Clear interrupts when cqe off/disable (Wenbin Mei)
- drm/i915/gt: Skip TLB invalidations once wedged (Chris Wilson)
- HID: thrustmaster: Add sparco wheel and fix array length (Michael Hübner)
- HID: asus: ROG NKey: Ignore portion of 0x5a report (Josh Kilmer)
- HID: AMD_SFH: Add a DMI quirk entry for Chromebooks (Akihiko Odaki)
- HID: add Lenovo Yoga C630 battery quirk (Steev Klimaszewski)
- ALSA: usb-audio: Add quirk for LH Labs Geek Out HD Audio 1V5 (Takashi Iwai)
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Jann Horn)
- bpf: Don't redirect packets with invalid pkt_len (Zhengchao Shao)
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (Yang Jihong)
- fbdev: fb_pm2fb: Avoid potential divide by zero error (Letu Ren)
- net: fix refcount bug in sk_psock_get (2) (Hawkins Jiawei)
- HID: hidraw: fix memory leak in hidraw_release() (Karthik Alapati)
- media: pvrusb2: fix memory leak in pvr_probe (Dongliang Mu)
- udmabuf: Set the DMA mask for the udmabuf device (v2) (Vivek Kasireddy)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report (Lee Jones)
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()" (Greg Kroah-Hartman)
- Bluetooth: L2CAP: Fix build errors in some archs (Luiz Augusto von Dentz)
- kbuild: Fix include path in scripts/Makefile.modpost (Jing Leng)
- io_uring: fix UAF due to missing POLLFREE handling (Pavel Begunkov)
- io_uring: fix wrong arm_poll error handling (Pavel Begunkov)
- io_uring: fail links when poll fails (Pavel Begunkov)
- io_uring: bump poll refs to full 31-bits (Jens Axboe)
- io_uring: remove poll entry from list when canceling all (Jens Axboe)
- io_uring: Remove unused function req_ref_put (Jiapeng Chong)
- io_uring: poll rework (Pavel Begunkov)
- io_uring: inline io_poll_complete (Pavel Begunkov)
- io_uring: kill poll linking optimisation (Pavel Begunkov)
- io_uring: move common poll bits (Pavel Begunkov)
- io_uring: refactor poll update (Pavel Begunkov)
- io_uring: clean cqe filling functions (Pavel Begunkov)
- io_uring: correct fill events helpers types (Pavel Begunkov)
- arm64: errata: Add Cortex-A510 to the repeat tlbi list (James Morse)
- mm/hugetlb: avoid corrupting page->mapping in hugetlb_mcopy_atomic_pte (Miaohe Lin)
- Drivers: hv: balloon: Support status report for larger page sizes (Boqun Feng)
- crypto: lib - remove unneeded selection of XOR_BLOCKS (Eric Biggers)
- firmware: tegra: bpmp: Do only aligned access to IPC memory area (Timo Alho)
- drm/vc4: hdmi: Depends on CONFIG_PM (Maxime Ripard)
- drm/vc4: hdmi: Rework power up (Maxime Ripard)
- ACPI: thermal: drop an always true check (Adam Borowski)
- drm/bridge: Add stubs for devm_drm_of_get_bridge when OF is disabled (Maxime Ripard)
- mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() (Jann Horn)
- LTS version: v5.15.64 (Jack Vogel)
- bpf: Don't use tnum_range on array range checking for poke descriptors (Daniel Borkmann)
- scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq (Saurabh Sengar)
- scsi: ufs: core: Enable link lost interrupt (Kiwoong Kim)
- perf stat: Clear evsel->reset_group for each stat run (Ian Rogers)
- perf/x86/intel/ds: Fix precise store latency handling (Stephane Eranian)
- perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU (Stephane Eranian)
- perf python: Fix build when PYTHON_CONFIG is user supplied (James Clark)
- blk-mq: fix io hung due to missing commit_rqs (Yu Kuai)
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Salvatore Bonaccorso)
- x86/nospec: Fix i386 RSB stuffing (Peter Zijlstra)
- binder_alloc: add missing mmap_lock calls when using the VMA (Liam Howlett)
- arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76 (Zenghui Yu)
- mptcp: Fix crash due to tcp_tsorted_anchor was initialized before release skb (Yonglong Li)
- md: call __md_stop_writes in md_stop (Guoqing Jiang)
- Revert "md-raid: destroy the bitmap after destroying the thread" (Guoqing Jiang)
- mm/hugetlb: fix hugetlb not supporting softdirty tracking (David Hildenbrand)
- Revert "usbnet: smsc95xx: Forward PHY interrupts to PHY driver to avoid polling" (Greg Kroah-Hartman)
- Revert "usbnet: smsc95xx: Fix deadlock on runtime resume" (Greg Kroah-Hartman)
- io_uring: fix issue with io_write() not always undoing sb_start_write() (Jens Axboe)
- riscv: traps: add missing prototype (Conor Dooley)
- xen/privcmd: fix error exit of privcmd_ioctl_dm_op() (Juergen Gross)
- smb3: missing inode locks in punch hole (David Howells)
- nouveau: explicitly wait on the fence in nouveau_bo_move_m2mf (Karol Herbst)
- ACPI: processor: Remove freq Qos request for all CPUs (Riwen Lu)
- Revert "memcg: cleanup racy sum avoidance code" (Shakeel Butt)
- fbdev: fbcon: Properly revert changes when vc_resize() failed (Shigeru Yoshida)
- s390: fix double free of GS and RI CBs on fork() failure (Brian Foster)
- bootmem: remove the vmemmap pages from kmemleak in put_page_bootmem (Liu Shixin)
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE (Gerald Schaefer)
- mm/damon/dbgfs: avoid duplicate context directory creation (Badari Pulavarty)
- asm-generic: sections: refactor memory_intersects (Quanyang Wang)
- writeback: avoid use-after-free after removing device (Khazhismel Kumykov)
- loop: Check for overflow while configuring loop (Siddh Raman Pant)
- x86/nospec: Unwreck the RSB stuffing (Peter Zijlstra)
- x86/bugs: Add "unknown" reporting for MMIO Stale Data (Pawan Gupta)
- x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry (Chen Zhongjin)
- perf/x86/lbr: Enable the branch type for the Arch LBR by default (Kan Liang)
- btrfs: fix possible memory leak in btrfs_get_dev_args_from_path() (Zixuan Fu)
- btrfs: check if root is readonly while setting security xattr (Goldwyn Rodrigues)
- btrfs: add info when mount fails due to stale replace target (Anand Jain)
- btrfs: replace: drop assert for suspended replace (Anand Jain)
- btrfs: fix silent failure when deleting root reference (Filipe Manana)
- net: stmmac: work around sporadic tx issue on link-up (Heiner Kallweit)
- ionic: VF initial random MAC address if no assigned mac (R Mohamed Shah)
- ionic: fix up issues with handling EAGAIN on FW cmds (Shannon Nelson)
- ionic: clear broken state on generation change (Shannon Nelson)
- ionic: widen queue_lock use around lif init and deinit (Shannon Nelson)
- rxrpc: Fix locking in rxrpc's sendmsg (David Howells)
- i40e: Fix incorrect address type for IPv6 flow rules (Sylwester Dziedziuch)
- ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter (Jacob Keller)
- net: Fix a data-race around sysctl_somaxconn. (Kuniyuki Iwashima)
- net: Fix data-races around sysctl_devconf_inherit_init_net. (Kuniyuki Iwashima)
- net: Fix data-races around sysctl_fb_tunnels_only_for_init_net. (Kuniyuki Iwashima)
- net: Fix a data-race around netdev_budget_usecs. (Kuniyuki Iwashima)
- net: Fix data-races around sysctl_max_skb_frags. (Kuniyuki Iwashima)
- mptcp: stop relying on tcp_tx_skb_cache (Paolo Abeni)
- tcp: expose the tcp_mark_push() and tcp_skb_entail() helpers (Paolo Abeni)
- net: Fix a data-race around sysctl_net_busy_read. (Kuniyuki Iwashima)
- net: Fix a data-race around sysctl_net_busy_poll. (Kuniyuki Iwashima)
- net: Fix a data-race around sysctl_tstamp_allow_data. (Kuniyuki Iwashima)
- net: Fix data-races around sysctl_optmem_max. (Kuniyuki Iwashima)
- ratelimit: Fix data-races in ___ratelimit(). (Kuniyuki Iwashima)
- net: Fix data-races around netdev_tstamp_prequeue. (Kuniyuki Iwashima)
- net: Fix data-races around netdev_max_backlog. (Kuniyuki Iwashima)
- net: Fix data-races around weight_p and dev_weight_[rt]x_bias. (Kuniyuki Iwashima)
- net: Fix data-races around sysctl_[rw]mem_(max|default). (Kuniyuki Iwashima)
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Pablo Neira Ayuso)
- netfilter: flowtable: add function to invoke garbage collection immediately (Pablo Neira Ayuso)
- netfilter: nf_tables: disallow binding to already bound chain (Pablo Neira Ayuso)
- netfilter: nf_tables: disallow jump to implicit chain from set element (Pablo Neira Ayuso)
- netfilter: nf_tables: upfront validation of data via nft_data_init() (Pablo Neira Ayuso)
- netfilter: bitwise: improve error goto labels (Jeremy Sowden)
- netfilter: nft_cmp: optimize comparison for 16-bytes (Pablo Neira Ayuso)
- netfilter: nf_tables: consolidate rule verdict trace call (Pablo Neira Ayuso)
- netfilter: nft_tunnel: restrict it to netdev family (Pablo Neira Ayuso)
- netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families (Pablo Neira Ayuso)
- netfilter: nf_tables: do not leave chain stats enabled on error (Pablo Neira Ayuso)
- netfilter: nft_payload: do not truncate csum_offset and csum_type (Pablo Neira Ayuso)
- netfilter: nft_payload: report ERANGE for too long offset and length (Pablo Neira Ayuso)
- netfilter: nf_tables: make table handle allocation per-netns friendly (Pablo Neira Ayuso)
- netfilter: nf_tables: disallow updates of implicit chain (Pablo Neira Ayuso)
- bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (Vikas Gupta)
- net: ipvtap - add __init/__exit annotations to module init/exit funcs (Maciej Żenczykowski)
- bonding: 802.3ad: fix no transmission of LACPDUs (Jonathan Toppins)
- net: moxa: get rid of asymmetry in DMA mapping/unmapping (Sergei Antonov)
- net: phy: Don't WARN for PHY_READY state in mdio_bus_phy_resume() (Xiaolei Wang)
- net: ipa: don't assume SMEM is page-aligned (Alex Elder)
- net/mlx5e: Fix wrong tc flag used when set hw-tc-offload off (Maor Dickman)
- net/mlx5e: Fix wrong application of the LRO state (Aya Levin)
- net/mlx5: Avoid false positive lockdep warning by adding lock_class_key (Moshe Shemesh)
- net/mlx5e: Properly disable vlan strip on non-UL reps (Vlad Buslov)
- ice: xsk: prohibit usage of non-balanced queue id (Maciej Fijalkowski)
- ice: xsk: Force rings to be sized to power of 2 (Maciej Fijalkowski)
- nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout (Duoming Zhou)
- r8152: fix the RX FIFO settings when suspending (Hayes Wang)
- r8152: fix the units of some registers for RTL8156A (Hayes Wang)
- rose: check NULL rose_loopback_neigh->loopback (Bernard Pidoux)
- ntfs: fix acl handling (Christian Brauner)
- mm/smaps: don't access young/dirty bit if pte unpresent (Peter Xu)
- SUNRPC: RPC level errors should set task->tk_rpc_status (Trond Myklebust)
- NFSv4.2 fix problems with __nfs42_ssc_open (Olga Kornievskaia)
- NFS: Don't allocate nfs_fattr on the stack in __nfs42_ssc_open() (Trond Myklebust)
- Revert "net: macsec: update SCI upon MAC address change." (Sabrina Dubroca)
- net: use eth_hw_addr_set() instead of ether_addr_copy() (Jakub Kicinski)
- fs: require CAP_SYS_ADMIN in target namespace for idmapped mounts (Seth Forshee)
- xfrm: policy: fix metadata dst->dev xmit null pointer dereference (Nikolay Aleksandrov)
- xfrm: clone missing x->lastused in xfrm_do_migrate (Antony Antony)
- xfrm: fix refcount leak in __xfrm_policy_check() (Xin Xiong)
- riscv: lib: uaccess: fix CSR_STATUS SR_SUM bit (Chen Lifu)
- riscv: lib: uaccess: fold fixups into body (Jisheng Zhang)
- btrfs: remove unnecessary parameter delalloc_start for writepage_delalloc() (Qu Wenruo)
- btrfs: pass the dentry to btrfs_log_new_name() instead of the inode (Filipe Manana)
- btrfs: put initial index value of a directory in a constant (Filipe Manana)
- scsi: qla2xxx: edif: Fix dropped IKE message (Quinn Tran)
- scsi: qla2xxx: Fix response queue handler reading stale packets (Arun Easi)
- drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (Phil Auld)
- Input: i8042 - add additional TUXEDO devices to i8042 quirk tables (Werner Sembach)
- Input: i8042 - add TUXEDO devices to i8042 quirk tables (Werner Sembach)
- Input: i8042 - merge quirk tables (Werner Sembach)
- Input: i8042 - move __initconst to fix code styling warning (Werner Sembach)
- btrfs: convert count_max_extents() to use fs_info->max_extent_size (Naohiro Aota)
- btrfs: replace BTRFS_MAX_EXTENT_SIZE with fs_info->max_extent_size (Naohiro Aota)
- btrfs: zoned: revive max_zone_append_bytes (Naohiro Aota)
- block: add bdev_max_segments() helper (Naohiro Aota)
- block: add a bdev_max_zone_append_sectors helper (Christoph Hellwig)
- x86/entry: Move CLD to the start of the idtentry macro (Lai Jiangshan)
- kernel/sys_ni: add compat entry for fadvise64_64 (Randy Dunlap)
- parisc: Fix exception handler for fldw and fstw instructions (Helge Deller)

_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata

Oracle8: ELSA-2022-10023: kernel-container Important Security Update

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Summary

[5.15.0-4.70.5.2.el8] - Revert "sched: Remove the limitation of WF_ON_CPU on wakelist if wakee cpu is idle" (Samasth Norway Ananda) [Orabug: 34783367] [5.15.0-4.70.5.1.el8] - NFSv4: Fixes for nfs4_inode_return_delegation() (Trond Myklebust) [Orabug: 34751176] [5.15.0-4.70.5.el8] - uek: kabi: update kABI files for new symbols (Saeed Mirzamohammadi) [Orabug: 34595591] - Revert "scsi: lpfc: SLI path split: Refactor lpfc_iocbq" (John Donnelly) [Orabug: 34678989] - Revert "scsi: lpfc: SLI path split: Refactor fast and slow paths to native SLI4" (John Donnelly) [Orabug: 34678989] - Revert "scsi: lpfc: SLI path split: Refactor SCSI paths" (John Donnelly) [Orabug: 34678989] - Revert "scsi: lpfc: Remove extra atomic_inc on cmd_pending in queuecommand after VMID" (John Donnelly) [Orabug: 34678989] - Revert "scsi: lpfc: Fix locking for lpfc_sli_iocbq_lookup()" (John Donnelly) [Orabug: 34678989] - Revert "scsi: lpfc: Fix element offset in __lpfc_sli_release_iocbq_s4()" (John Donnelly) [Orabug: 34678989] - Revert "scsi: lpfc: Resolve some cleanup issues following SLI path refactoring" (John Donnelly) [Orabug: 34678989] - Revert "scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input" (John Donnelly) [Orabug: 34678989] - Revert "scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE" (John Donnelly) [Orabug: 34678989] - RDS/IB Fix allocation warning (Hans Westgaard Ry) [Orabug: 34684321] - fs: remove no_llseek (Jason A. Donenfeld) [Orabug: 34705082] - vfio: do not set FMODE_LSEEK flag (Jason A. Donenfeld) [Orabug: 34705082] - dma-buf: remove useless FMODE_LSEEK flag (Jason A. Donenfeld) [Orabug: 34705082] - fs: do not compare against ->llseek (Jason A. Donenfeld) [Orabug: 34705082] - fs: clear or set FMODE_LSEEK based on llseek function (Jason A. Donenfeld) [Orabug: 34705082] - hwmon: (opbmc) AST2600 SP reset driver adjustment (Jan Zdarek) [Orabug: 34710681] - hwmon: (opbmc) Driver message prefixes (Jan Zdarek) [Orabug: 34710681] - NFSD: fix use-after-free on source server when doing inter-server copy (Dai Ngo) [Orabug: 34716070] [5.15.0-4.70.4.el8] - xen/ovmapi: Build OVM guest messaging driver (Jonah Palmer) [Orabug: 34512197] - net/rds: Send congestion map updates only via path zero (Anand Khoje) [Orabug: 34578048] - Revert "RDS/IB: Fix RDS IB SRQ implementation and tune it" (Hans Westgaard Ry) [Orabug: 34662659] - RDMA/cma: Use output interface for net_dev check (Håkon Bugge) [Orabug: 34694979] - crypto: qat - add support for 401xx devices (Giovanni Cabiddu) [Orabug: 34686738] [5.15.0-4.70.3.el8] - Revert "Makefile: link with -z noexecstack --no-warn-rwx-segments" (Jack Vogel) - Revert "x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments" (Jack Vogel) - LTS version: v5.15.70 (Jack Vogel) - ALSA: hda/sigmatel: Fix unused variable warning for beep power change (Takashi Iwai) - KVM: SEV: add cache flush to solve SEV cache incoherency issues (Mingwei Zhang) - net: Find dst with sk's xfrm policy not ctl_sk (sewookseo) - video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write (Hyunwoo Kim) - mksysmap: Fix the mismatch of 'L0' symbols in System.map (Youling Tang) - drm/panfrost: devfreq: set opp to the recommended one to configure regulator (Clément Péron) - MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping() (Alexander Sverdlin) - afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked (David Howells) - net: usb: qmi_wwan: add Quectel RM520N (jerry.meng) - ALSA: hda/tegra: Align BDL entry to 4KB boundary (Mohan Kumar) - ALSA: hda/sigmatel: Keep power up while beep is enabled (Takashi Iwai) - wifi: mac80211_hwsim: check length for virtio packets (Soenke Huster) - rxrpc: Fix calc of resend age (David Howells) - rxrpc: Fix local destruction being repeated (David Howells) - scsi: lpfc: Return DID_TRANSPORT_DISRUPTED instead of DID_REQUEUE (Hannes Reinecke) - regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe() (Xiaolei Wang) - ASoC: nau8824: Fix semaphore unbalance at error paths (Takashi Iwai) - arm64: dts: juno: Add missing MHU secure-irq (Jassi Brar) - video: fbdev: i740fb: Error out if 'pixclock' equals zero (Zheyu Ma) - binder: remove inaccurate mmap_assert_locked() (Carlos Llamas) - drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega (Alex Deucher) - drm/amdgpu: move nbio ih_doorbell_range() into ih code for vega (Alex Deucher) - drm/amdgpu: Don't enable LTR if not supported (Lijo Lazar) - tools/include/uapi: Fix for parisc and xtensa (Ben Hutchings) - parisc: Allow CONFIG_64BIT with ARCH=parisc (Helge Deller) - cifs: always initialize struct msghdr smb_msg completely (Stefan Metzmacher) - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Stefan Metzmacher) - cifs: revalidate mapping when doing direct writes (Ronnie Sahlberg) - of/device: Fix up of_dma_configure_id() stub (Thierry Reding) - parisc: ccio-dma: Add missing iounmap in error path in ccio_probe() (Yang Yingliang) - block: blk_queue_enter() / __bio_queue_enter() must return -EAGAIN for nowait (Stefan Roesch) - drm/meson: Fix OSD1 RGB to YCbCr coefficient (Stuart Menefy) - drm/meson: Correct OSD1 global alpha value (Stuart Menefy) - gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx (Pali Rohár) - NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0 (Trond Myklebust) - pinctrl: sunxi: Fix name for A100 R_PIO (Michael Wu) - pinctrl: rockchip: Enhance support for IRQ_TYPE_EDGE_BOTH (João H. Spies) - pinctrl: qcom: sc8180x: Fix wrong pin numbers (Molly Sophia) - pinctrl: qcom: sc8180x: Fix gpio_wakeirq_map (Molly Sophia) - of: fdt: fix off-by-one error in unflatten_dt_nodes() (Sergey Shtylyov) - tty: serial: atmel: Preserve previous USART mode if RS485 disabled (Sergiu Moga) - serial: atmel: remove redundant assignment in rs485_config (Lino Sanfilippo) - drm/tegra: vic: Fix build warning when CONFIG_PM=n (YueHaibing) - LTS version: v5.15.69 (Jack Vogel) - Input: goodix - add compatible string for GT1158 (Jarrah Gosbell) - RDMA/irdma: Use s/g array in post send only when its valid (Sindhu-Devale) - usb: gadget: f_uac2: fix superspeed transfer (Jing Leng) - usb: gadget: f_uac2: clean up some inconsistent indenting (Colin Ian King) - soc: fsl: select FSL_GUTS driver for DPIO (Mathew McBride) - mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region() (Jann Horn) - usb: storage: Add ASUS <0x0b05:0x1932> to IGNORE_UAS (Hu Xiaoying) - platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes (Hans de Goede) - perf/arm_pmu_platform: fix tests for platform_get_irq() failure (Yu Zhe) - net: dsa: hellcreek: Print warning only once (Kurt Kanzenbach) - drm/amd/amdgpu: skip ucode loading if ucode_size == 0 (Chengming Gui) - nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() (Maurizio Lombardi) - Input: iforce - add support for Boeder Force Feedback Wheel (Greg Tulli) - ieee802154: cc2520: add rc code in cc2520_tx() (Li Qiong) - gpio: mockup: remove gpio debugfs when remove device (Wei Yongjun) - tg3: Disable tg3 device on system reboot to avoid triggering AER (Kai-Heng Feng) - hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message (Even Xu) - HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo (Jason Wang) - dt-bindings: iio: gyroscope: bosch,bmg160: correct number of pins (Krzysztof Kozlowski) - drm/msm/rd: Fix FIFO-full deadlock (Rob Clark) - platform/surface: aggregator_registry: Add support for Surface Laptop Go 2 (Maximilian Luz) - Input: goodix - add support for GT1158 (Ondrej Jirman) - iommu/vt-d: Fix kdump kernels boot failure with scalable mode (Lu Baolu) - tracefs: Only clobber mode/uid/gid on remount if asked (Brian Norris) - tracing: hold caller_addr to hardirq_{enable,disable}_ip (Yipeng Zou) - task_stack, x86/cea: Force-inline stack helpers (Borislav Petkov) - x86/mm: Force-inline __phys_addr_nodebug() (Borislav Petkov) - lockdep: Fix -Wunused-parameter for _THIS_IP_ (Nick Desaulniers) - ARM: dts: at91: sama7g5ek: specify proper regulator output ranges (Claudiu Beznea) - ARM: dts: at91: fix low limit for CPU regulator (Claudiu Beznea) - ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible (Marco Felsch) - ARM: dts: imx: align SPI NOR node name with dtschema (Krzysztof Kozlowski) - ACPI: resource: skip IRQ override on AMD Zen platforms (Chuanhong Guo) - NFS: Fix WARN_ON due to unionization of nfs_inode.nrequests (Dave Wysochanski) - LTS version: v5.15.68 (Jack Vogel) - ARM: at91: ddr: remove CONFIG_SOC_SAMA7 dependency (Claudiu Beznea) - perf machine: Use path__join() to compose a path instead of snprintf(dir, '/', filename) (Arnaldo Carvalho de Melo) - drm/bridge: display-connector: implement bus fmts callbacks (Neil Armstrong) - arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly (Ionela Voinescu) - iommu/vt-d: Correctly calculate sagaw value of IOMMU (Lu Baolu) - arm64/bti: Disable in kernel BTI when cross section thunks are broken (Mark Brown) - Revert "arm64: kasan: Revert "arm64: mte: reset the page tag in page->flags"" (Sasha Levin) - hwmon: (mr75203) enable polling for all VM channels (Eliav Farber) - hwmon: (mr75203) fix multi-channel voltage reading (Eliav Farber) - hwmon: (mr75203) fix voltage equation for negative source input (Eliav Farber) - hwmon: (mr75203) update pvt->v_num and vm_num to the actual number of used sensors (Eliav Farber) - hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined (Eliav Farber) - s390/boot: fix absolute zero lowcore corruption on boot (Alexander Gordeev) - iommu/amd: use full 64-bit value in build_completion_wait() (John Sperbeck) - swiotlb: avoid potential left shift overflow (Chao Gao) - i40e: Fix ADQ rate limiting for PF (Przemyslaw Patynowski) - i40e: Refactor tc mqprio checks (Przemyslaw Patynowski) - kbuild: disable header exports for UML in a straightforward way (Masahiro Yamada) - MIPS: loongson32: ls1c: Fix hang during startup (Yang Ling) - ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion (Nathan Chancellor) - ASoC: mchp-spdiftx: remove references to mchp_i2s_caps (Claudiu Beznea) - hwmon: (tps23861) fix byte order in resistance register (Alexandru Gagniuc) - perf script: Fix Cannot print 'iregs' field for hybrid systems (Zhengjun Xing) - sch_sfb: Also store skb len before calling child enqueue (Toke Høiland-Jørgensen) - RDMA/irdma: Report RNR NAK generation in device caps (Sindhu-Devale) - RDMA/irdma: Return correct WC error for bind operation failure (Sindhu-Devale) - RDMA/irdma: Report the correct max cqes from query device (Sindhu-Devale) - nvmet: fix mar and mor off-by-one errors (Dennis Maisenbacher) - tcp: fix early ETIMEDOUT after spurious non-SACK RTO (Neal Cardwell) - nvme-tcp: fix regression that causes sporadic requests to time out (Sagi Grimberg) - nvme-tcp: fix UAF when detecting digest errors (Sagi Grimberg) - erofs: fix pcluster use-after-free on UP platforms (Gao Xiang) - RDMA/mlx5: Set local port to one when accessing counters (Chris Mi) - IB/core: Fix a nested dead lock as part of ODP flow (Yishai Hadas) - ipv6: sr: fix out-of-bounds read when setting HMAC data. (David Lebrun) - RDMA/siw: Pass a pointer to virt_to_page() (Linus Walleij) - xen-netback: only remove 'hotplug-status' when the vif is actually destroyed (Paul Durrant) - iavf: Detach device during reset task (Ivan Vecera) - i40e: Fix kernel crash during module removal (Ivan Vecera) - ice: use bitmap_free instead of devm_kfree (Michal Swiatkowski) - tcp: TX zerocopy should not sense pfmemalloc status (Eric Dumazet) - net: introduce __skb_fill_page_desc_noacc (Pavel Begunkov) - tipc: fix shift wrapping bug in map_get() (Dan Carpenter) - sch_sfb: Don't assume the skb is still around after enqueueing to child (Toke Høiland-Jørgensen) - Revert "net: phy: meson-gxl: improve link-up behavior" (Heiner Kallweit) - afs: Use the operation issue time instead of the reply time for callbacks (David Howells) - rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() (David Howells) - rxrpc: Fix ICMP/ICMP6 error handling (David Howells) - ALSA: usb-audio: Register card again for iface over delayed_register option (Takashi Iwai) - ALSA: usb-audio: Inform the delayed registration more properly (Takashi Iwai) - RDMA/srp: Set scmnd->result only when scmnd is not NULL (yangx.jy@fujitsu.com) - netfilter: nf_conntrack_irc: Fix forged IP logic (David Leadbeater) - netfilter: nf_tables: clean up hook list when offload flags check fails (Pablo Neira Ayuso) - netfilter: br_netfilter: Drop dst references before setting. (Harsh Modi) - ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time (Claudiu Beznea) - ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time (Claudiu Beznea) - ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges (Claudiu Beznea) - ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges (Claudiu Beznea) - ARM: at91: pm: fix DDR recalibration when resuming from backup and self-refresh (Claudiu Beznea) - ARM: at91: pm: fix self-refresh for sama7g5 (Claudiu Beznea) - wifi: wilc1000: fix DMA on stack objects (Ajay.Kathat@microchip.com) - RDMA/hns: Fix wrong fixed value of qp->rq.wqe_shift (Wenpeng Liang) - RDMA/hns: Fix supported page size (Chengchang Tang) - soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs (Liang He) - RDMA/cma: Fix arguments order in net device validation (Michael Guralnik) - tee: fix compiler warning in tee_shm_register() (Jens Wiklander) - regulator: core: Clean up on enable failure (Andrew Halaney) - soc: imx: gpcv2: Assert reset before ungating clock (Marek Vasut) - ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node (Marco Felsch) - RDMA/rtrs-srv: Pass the correct number of entries for dma mapped SGL (Jack Wang) - RDMA/rtrs-clt: Use the right sg_cnt after ib_dma_map_sg (Jack Wang) - ASoC: qcom: sm8250: add missing module owner (Srinivas Kandagatla) - cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Tejun Heo) - NFS: Fix another fsync() issue after a server reboot (Trond Myklebust) - NFS: Save some space in the inode (Trond Myklebust) - NFS: Further optimisations for 'ls -l' (Trond Myklebust) - scsi: lpfc: Add missing destroy_workqueue() in error path (Yang Yingliang) - scsi: mpt3sas: Fix use-after-free warning (Sreekanth Reddy) - drm/i915: Implement WaEdpLinkRateDataReload (Ville Syrjälä) - nvmet: fix a use-after-free (Bart Van Assche) - drm/amd/display: fix memory leak when using debugfs_lookup() (Greg Kroah-Hartman) - sched/debug: fix dentry leak in update_sched_domain_debugfs (Greg Kroah-Hartman) - debugfs: add debugfs_lookup_and_remove() (Greg Kroah-Hartman) - kprobes: Prohibit probes in gate area (Christian A. Ehrhardt) - vfio/type1: Unpin zero pages (Alex Williamson) - btrfs: zoned: set pseudo max append zone limit in zone emulation mode (Shin'ichiro Kawasaki) - tracing: Fix to check event_mutex is held while accessing trigger list (Masami Hiramatsu (Google)) - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() (Dongxiang Ke) - ALSA: usb-audio: Split endpoint setups for hw_params and prepare (Takashi Iwai) - ALSA: aloop: Fix random zeros in capture data when using jiffies timer (Pattara Teerapong) - ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() (Tasos Sahanidis) - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC (Takashi Iwai) - drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly (Qu Huang) - fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() (Yang Yingliang) - fbdev: fbcon: Destroy mutex on freeing struct fb_info (Shigeru Yoshida) - md: Flush workqueue md_rdev_misc_wq in md_alloc() (David Sloan) - net/core/skbuff: Check the return value of skb_copy_bits() (lily) - cpufreq: check only freq_table in __resolve_freq() (Lukasz Luba) - netfilter: conntrack: work around exceeded receive window (Florian Westphal) - arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level (Sudeep Holla) - parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines (Helge Deller) - parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() (Li Qiong) - Revert "parisc: Show error if wrong 32/64-bit compiler is being used" (Helge Deller) - scsi: ufs: core: Reduce the power mode change timeout (Bart Van Assche) - drm/radeon: add a force flush to delay work when radeon (Zhenneng Li) - drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. (Candice Li) - drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini (YiPeng Chai) - drm/gem: Fix GEM handle release errors (Jeffy Chen) - scsi: megaraid_sas: Fix double kfree() (Guixin Liu) - scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX (Tony Battersby) - Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()" (Yee Lee) - fs: only do a memory barrier for the first set_buffer_uptodate() (Linus Torvalds) - wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() (Stanislaw Gruszka) - efi: capsule-loader: Fix use-after-free in efi_capsule_write (Hyunwoo Kim) - efi: libstub: Disable struct randomization (Ard Biesheuvel) - net: wwan: iosm: remove pointless null check (Jakub Kicinski) - LTS version: v5.15.67 (Jack Vogel) - kbuild: fix up permissions on scripts/pahole-flags.sh (Greg Kroah-Hartman) - LTS version: v5.15.66 (Jack Vogel) - USB: serial: ch341: fix disabled rx timer on older devices (Johan Hovold) - USB: serial: ch341: fix lost character on LCR updates (Johan Hovold) - usb: dwc3: disable USB core PHY management (Johan Hovold) - usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup (Johan Hovold) - usb: dwc3: fix PHY disable sequence (Johan Hovold) - kbuild: Add skip_encoding_btf_enum64 option to pahole (Martin Rodriguez Reboredo) - kbuild: Unify options for BTF generation for vmlinux and modules (Jiri Olsa) - tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf() (Mazin Al Haddad) - drm/i915: Skip wm/ddb readout for disabled pipes (Ville Syrjälä) - drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk (Diego Santa Cruz) - ALSA: seq: Fix data-race at module auto-loading (Takashi Iwai) - ALSA: seq: oss: Fix data-race for max_midi_devs access (Takashi Iwai) - ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298 (Kacper Michajłow) - net: mac802154: Fix a condition in the receive path (Miquel Raynal) - net: Use u64_stats_fetch_begin_irq() for stats fetch. (Sebastian Andrzej Siewior) - ip: fix triggering of 'icmp redirect' (Nicolas Dichtel) - wifi: mac80211: Fix UAF in ieee80211_scan_rx() (Siddh Raman Pant) - wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected (Siddh Raman Pant) - driver core: Don't probe devices after bus_type.match() probe deferral (Isaac J. Manjarres) - usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS (Krishna Kurapati) - usb: xhci-mtk: fix bandwidth release issue (Chunfeng Yun) - usb: xhci-mtk: relax TT periodic bandwidth allocation (Chunfeng Yun) - USB: core: Prevent nested device-reset calls (Alan Stern) - s390: fix nospec table alignments (Josh Poimboeuf) - s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages (Gerald Schaefer) - usb-storage: Add ignore-residue quirk for NXP PN7462AU (Witold Lipieta) - USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) (Thierry GUIBERT) - usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer (Pawel Laszczak) - usb: cdns3: fix issue with rearming ISO OUT endpoint (Pawel Laszczak) - usb: dwc2: fix wrong order of phy_power_on and phy_init (Heiner Kallweit) - usb: typec: tcpm: Return ENOTSUPP for power supply prop writes (Badhri Jagan Sridharan) - usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device (Utkarsh Patel) - usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles (Pablo Sun) - USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode (Slark Xiao) - USB: serial: option: add Quectel EM060K modem (Yonglin Tan) - USB: serial: option: add support for OPPO R11 diag port (Yan Xinyu) - USB: serial: cp210x: add Decagon UCA device id (Johan Hovold) - xhci: Add grace period after xHC start to prevent premature runtime suspend. (Mathias Nyman) - media: mceusb: Use new usb_control_msg_*() routines (Alan Stern) - usb: dwc3: pci: Add support for Intel Raptor Lake (Heikki Krogerus) - thunderbolt: Use the actual buffer in tb_async_error() (Mika Westerberg) - xen-blkfront: Cache feature_persistent value before advertisement (SeongJae Park) - xen-blkfront: Advertise feature-persistent as user requested (SeongJae Park) - xen-blkback: Advertise feature-persistent as user requested (SeongJae Park) - mm: pagewalk: Fix race between unmap and page walker (Steven Price) - xen/grants: prevent integer overflow in gnttab_dma_alloc_pages() (Dan Carpenter) - KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (Jim Mattson) - gpio: pca953x: Add mutex_lock for regcache sync in PM (Haibo Chen) - hwmon: (gpio-fan) Fix array out of bounds access (Armin Wolf) - clk: bcm: rpi: Add missing newline (Stefan Wahren) - clk: bcm: rpi: Prevent out-of-bounds access (Stefan Wahren) - clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc() (Christophe JAILLET) - clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate (Stefan Wahren) - Input: rk805-pwrkey - fix module autoloading (Peter Robinson) - clk: core: Fix runtime PM sequence in clk_core_unprepare() (Chen-Yu Tsai) - Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops" (Stephen Boyd) - drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported" (Colin Ian King) - KVM: VMX: Heed the 'msr' argument in msr_write_intercepted() (Jim Mattson) - cifs: fix small mempool leak in SMB2_negotiate() (Enzo Matsumiya) - binder: fix alloc->vma_vm_mm null-ptr dereference (Carlos Llamas) - binder: fix UAF of ref->proc caused by race condition (Carlos Llamas) - mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure (Adrian Hunter) - mmc: core: Fix UHS-I SD 1.8V workaround branch (Adrian Hunter) - USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id (Niek Nooijens) - misc: fastrpc: fix memory corruption on open (Johan Hovold) - misc: fastrpc: fix memory corruption on probe (Johan Hovold) - iio: adc: mcp3911: use correct formula for AD conversion (Marcus Folkesson) - iio: ad7292: Prevent regulator double disable (Matti Vaittinen) - Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag (Tetsuo Handa) - tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete (Sherry Sun) - musb: fix USB_MUSB_TUSB6010 dependency (Arnd Bergmann) - vt: Clear selection before changing the font (Helge Deller) - powerpc: align syscall table for ppc32 (Masahiro Yamada) - staging: r8188eu: add firmware dependency (Grzegorz Szymaszek) - staging: rtl8712: fix use after free bugs (Dan Carpenter) - serial: fsl_lpuart: RS485 RTS polariy is inverse (Shenwei Wang) - soundwire: qcom: fix device status array range (Srinivas Kandagatla) - net/smc: Remove redundant refcount increase (Yacan Liu) - Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb" (Jakub Kicinski) - tcp: annotate data-race around challenge_timestamp (Eric Dumazet) - kcm: fix strp_init() order and cleanup (Cong Wang) - mlxbf_gige: compute MDIO period based on i1clk (David Thompson) - ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler (Duoming Zhou) - net/sched: fix netdevice reference leaks in attach_default_qdiscs() (Wang Hai) - net: sched: tbf: don't call qdisc_put() while holding tree lock (Zhengchao Shao) - net: dsa: xrs700x: Use irqsave variant for u64 stats update (Sebastian Andrzej Siewior) - openvswitch: fix memory leak at failed datapath creation (Andrey Zhadchenko) - net: smsc911x: Stop and start PHY during suspend and resume (Florian Fainelli) - net: sparx5: fix handling uneven length packets in manual extraction (Casper Andersson) - Revert "xhci: turn off port power in shutdown" (Mathias Nyman) - wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() (Dan Carpenter) - ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array (Peter Ujfalusi) - ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg (Pierre-Louis Bossart) - drm/i915/display: avoid warnings when registering dual panel backlight (Arun R Murthy) - drm/i915/backlight: extract backlight code to a separate file (Jani Nikula) - ieee802154/adf7242: defer destroy_workqueue call (Lin Ma) - bpf, cgroup: Fix kernel BUG in purge_effective_progs (Pu Lehui) - bpf: Restrict bpf_sys_bpf to CAP_PERFMON (YiFei Zhu) - skmsg: Fix wrong last sg check in sk_msg_recvmsg() (Liu Jian) - iio: adc: mcp3911: make use of the sign bit (Marcus Folkesson) - platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask (Andy Shevchenko) - drm/msm/dsi: Fix number of regulators for SDM660 (Douglas Anderson) - drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg (Douglas Anderson) - drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4 (Kuogee Hsieh) - drm/msm/dsi: fix the inconsistent indenting (sunliming) - LTS version: v5.15.65 (Jack Vogel) - net: neigh: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net/af_packet: check len when min_header_len equals to 0 (Zhengchao Shao) - android: binder: fix lockdep check on clearing vma (Liam Howlett) - btrfs: fix space cache corruption and potential double allocations (Omar Sandoval) - kprobes: don't call disarm_kprobe() for disabled kprobes (Kuniyuki Iwashima) - btrfs: tree-checker: check for overlapping extent items (Josef Bacik) - btrfs: fix lockdep splat with reloc root extent buffers (Josef Bacik) - btrfs: move lockdep class helpers to locking.c (Josef Bacik) - testing: selftests: nft_flowtable.sh: use random netns names (Florian Westphal) - netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y (Geert Uytterhoeven) - drm/amd/display: avoid doing vm_init multiple time (Charlene Liu) - drm/amdgpu: Increase tlb flush timeout for sriov (Dusica Milinkovic) - drm/amd/display: Fix pixel clock programming (Ilya Bakoulin) - drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid (Evan Quan) - ksmbd: don't remove dos attribute xattr on O_TRUNC open (Namjae Jeon) - s390/hypfs: avoid error message under KVM (Juergen Gross) - neigh: fix possible DoS due to net iface start/stop loop (Denis V. Lunev) - ksmbd: return STATUS_BAD_NETWORK_NAME error status if share is not configured (Namjae Jeon) - drm/amd/display: clear optc underflow before turn off odm clock (Fudong Wang) - drm/amd/display: For stereo keep "FLIP_ANY_FRAME" (Alvin Lee) - drm/amd/display: Fix HDMI VSIF V3 incorrect issue (Leo Ma) - drm/amd/display: Avoid MPC infinite loop (Josip Pavic) - ASoC: sh: rz-ssi: Improve error handling in rz_ssi_probe() error path (Biju Das) - fs/ntfs3: Fix work with fragmented xattr (Konstantin Komarov) - btrfs: fix warning during log replay when bumping inode link count (Filipe Manana) - btrfs: add and use helper for unlinking inode during log replay (Filipe Manana) - btrfs: remove no longer needed logic for replaying directory deletes (Filipe Manana) - btrfs: remove root argument from btrfs_unlink_inode() (Filipe Manana) - mmc: sdhci-of-dwcmshc: Re-enable support for the BlueField-3 SoC (Liming Sun) - mmc: sdhci-of-dwcmshc: rename rk3568 to rk35xx (Sebastian Reichel) - mmc: sdhci-of-dwcmshc: add reset call back for rockchip Socs (Yifeng Zhao) - mmc: mtk-sd: Clear interrupts when cqe off/disable (Wenbin Mei) - drm/i915/gt: Skip TLB invalidations once wedged (Chris Wilson) - HID: thrustmaster: Add sparco wheel and fix array length (Michael Hübner) - HID: asus: ROG NKey: Ignore portion of 0x5a report (Josh Kilmer) - HID: AMD_SFH: Add a DMI quirk entry for Chromebooks (Akihiko Odaki) - HID: add Lenovo Yoga C630 battery quirk (Steev Klimaszewski) - ALSA: usb-audio: Add quirk for LH Labs Geek Out HD Audio 1V5 (Takashi Iwai) - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Jann Horn) - bpf: Don't redirect packets with invalid pkt_len (Zhengchao Shao) - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (Yang Jihong) - fbdev: fb_pm2fb: Avoid potential divide by zero error (Letu Ren) - net: fix refcount bug in sk_psock_get (2) (Hawkins Jiawei) - HID: hidraw: fix memory leak in hidraw_release() (Karthik Alapati) - media: pvrusb2: fix memory leak in pvr_probe (Dongliang Mu) - udmabuf: Set the DMA mask for the udmabuf device (v2) (Vivek Kasireddy) - HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report (Lee Jones) - Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()" (Greg Kroah-Hartman) - Bluetooth: L2CAP: Fix build errors in some archs (Luiz Augusto von Dentz) - kbuild: Fix include path in scripts/Makefile.modpost (Jing Leng) - io_uring: fix UAF due to missing POLLFREE handling (Pavel Begunkov) - io_uring: fix wrong arm_poll error handling (Pavel Begunkov) - io_uring: fail links when poll fails (Pavel Begunkov) - io_uring: bump poll refs to full 31-bits (Jens Axboe) - io_uring: remove poll entry from list when canceling all (Jens Axboe) - io_uring: Remove unused function req_ref_put (Jiapeng Chong) - io_uring: poll rework (Pavel Begunkov) - io_uring: inline io_poll_complete (Pavel Begunkov) - io_uring: kill poll linking optimisation (Pavel Begunkov) - io_uring: move common poll bits (Pavel Begunkov) - io_uring: refactor poll update (Pavel Begunkov) - io_uring: clean cqe filling functions (Pavel Begunkov) - io_uring: correct fill events helpers types (Pavel Begunkov) - arm64: errata: Add Cortex-A510 to the repeat tlbi list (James Morse) - mm/hugetlb: avoid corrupting page->mapping in hugetlb_mcopy_atomic_pte (Miaohe Lin) - Drivers: hv: balloon: Support status report for larger page sizes (Boqun Feng) - crypto: lib - remove unneeded selection of XOR_BLOCKS (Eric Biggers) - firmware: tegra: bpmp: Do only aligned access to IPC memory area (Timo Alho) - drm/vc4: hdmi: Depends on CONFIG_PM (Maxime Ripard) - drm/vc4: hdmi: Rework power up (Maxime Ripard) - ACPI: thermal: drop an always true check (Adam Borowski) - drm/bridge: Add stubs for devm_drm_of_get_bridge when OF is disabled (Maxime Ripard) - mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() (Jann Horn) - LTS version: v5.15.64 (Jack Vogel) - bpf: Don't use tnum_range on array range checking for poke descriptors (Daniel Borkmann) - scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq (Saurabh Sengar) - scsi: ufs: core: Enable link lost interrupt (Kiwoong Kim) - perf stat: Clear evsel->reset_group for each stat run (Ian Rogers) - perf/x86/intel/ds: Fix precise store latency handling (Stephane Eranian) - perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU (Stephane Eranian) - perf python: Fix build when PYTHON_CONFIG is user supplied (James Clark) - blk-mq: fix io hung due to missing commit_rqs (Yu Kuai) - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Salvatore Bonaccorso) - x86/nospec: Fix i386 RSB stuffing (Peter Zijlstra) - binder_alloc: add missing mmap_lock calls when using the VMA (Liam Howlett) - arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76 (Zenghui Yu) - mptcp: Fix crash due to tcp_tsorted_anchor was initialized before release skb (Yonglong Li) - md: call __md_stop_writes in md_stop (Guoqing Jiang) - Revert "md-raid: destroy the bitmap after destroying the thread" (Guoqing Jiang) - mm/hugetlb: fix hugetlb not supporting softdirty tracking (David Hildenbrand) - Revert "usbnet: smsc95xx: Forward PHY interrupts to PHY driver to avoid polling" (Greg Kroah-Hartman) - Revert "usbnet: smsc95xx: Fix deadlock on runtime resume" (Greg Kroah-Hartman) - io_uring: fix issue with io_write() not always undoing sb_start_write() (Jens Axboe) - riscv: traps: add missing prototype (Conor Dooley) - xen/privcmd: fix error exit of privcmd_ioctl_dm_op() (Juergen Gross) - smb3: missing inode locks in punch hole (David Howells) - nouveau: explicitly wait on the fence in nouveau_bo_move_m2mf (Karol Herbst) - ACPI: processor: Remove freq Qos request for all CPUs (Riwen Lu) - Revert "memcg: cleanup racy sum avoidance code" (Shakeel Butt) - fbdev: fbcon: Properly revert changes when vc_resize() failed (Shigeru Yoshida) - s390: fix double free of GS and RI CBs on fork() failure (Brian Foster) - bootmem: remove the vmemmap pages from kmemleak in put_page_bootmem (Liu Shixin) - s390/mm: do not trigger write fault when vma does not allow VM_WRITE (Gerald Schaefer) - mm/damon/dbgfs: avoid duplicate context directory creation (Badari Pulavarty) - asm-generic: sections: refactor memory_intersects (Quanyang Wang) - writeback: avoid use-after-free after removing device (Khazhismel Kumykov) - loop: Check for overflow while configuring loop (Siddh Raman Pant) - x86/nospec: Unwreck the RSB stuffing (Peter Zijlstra) - x86/bugs: Add "unknown" reporting for MMIO Stale Data (Pawan Gupta) - x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry (Chen Zhongjin) - perf/x86/lbr: Enable the branch type for the Arch LBR by default (Kan Liang) - btrfs: fix possible memory leak in btrfs_get_dev_args_from_path() (Zixuan Fu) - btrfs: check if root is readonly while setting security xattr (Goldwyn Rodrigues) - btrfs: add info when mount fails due to stale replace target (Anand Jain) - btrfs: replace: drop assert for suspended replace (Anand Jain) - btrfs: fix silent failure when deleting root reference (Filipe Manana) - net: stmmac: work around sporadic tx issue on link-up (Heiner Kallweit) - ionic: VF initial random MAC address if no assigned mac (R Mohamed Shah) - ionic: fix up issues with handling EAGAIN on FW cmds (Shannon Nelson) - ionic: clear broken state on generation change (Shannon Nelson) - ionic: widen queue_lock use around lif init and deinit (Shannon Nelson) - rxrpc: Fix locking in rxrpc's sendmsg (David Howells) - i40e: Fix incorrect address type for IPv6 flow rules (Sylwester Dziedziuch) - ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter (Jacob Keller) - net: Fix a data-race around sysctl_somaxconn. (Kuniyuki Iwashima) - net: Fix data-races around sysctl_devconf_inherit_init_net. (Kuniyuki Iwashima) - net: Fix data-races around sysctl_fb_tunnels_only_for_init_net. (Kuniyuki Iwashima) - net: Fix a data-race around netdev_budget_usecs. (Kuniyuki Iwashima) - net: Fix data-races around sysctl_max_skb_frags. (Kuniyuki Iwashima) - mptcp: stop relying on tcp_tx_skb_cache (Paolo Abeni) - tcp: expose the tcp_mark_push() and tcp_skb_entail() helpers (Paolo Abeni) - net: Fix a data-race around sysctl_net_busy_read. (Kuniyuki Iwashima) - net: Fix a data-race around sysctl_net_busy_poll. (Kuniyuki Iwashima) - net: Fix a data-race around sysctl_tstamp_allow_data. (Kuniyuki Iwashima) - net: Fix data-races around sysctl_optmem_max. (Kuniyuki Iwashima) - ratelimit: Fix data-races in ___ratelimit(). (Kuniyuki Iwashima) - net: Fix data-races around netdev_tstamp_prequeue. (Kuniyuki Iwashima) - net: Fix data-races around netdev_max_backlog. (Kuniyuki Iwashima) - net: Fix data-races around weight_p and dev_weight_[rt]x_bias. (Kuniyuki Iwashima) - net: Fix data-races around sysctl_[rw]mem_(max|default). (Kuniyuki Iwashima) - netfilter: flowtable: fix stuck flows on cleanup due to pending work (Pablo Neira Ayuso) - netfilter: flowtable: add function to invoke garbage collection immediately (Pablo Neira Ayuso) - netfilter: nf_tables: disallow binding to already bound chain (Pablo Neira Ayuso) - netfilter: nf_tables: disallow jump to implicit chain from set element (Pablo Neira Ayuso) - netfilter: nf_tables: upfront validation of data via nft_data_init() (Pablo Neira Ayuso) - netfilter: bitwise: improve error goto labels (Jeremy Sowden) - netfilter: nft_cmp: optimize comparison for 16-bytes (Pablo Neira Ayuso) - netfilter: nf_tables: consolidate rule verdict trace call (Pablo Neira Ayuso) - netfilter: nft_tunnel: restrict it to netdev family (Pablo Neira Ayuso) - netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families (Pablo Neira Ayuso) - netfilter: nf_tables: do not leave chain stats enabled on error (Pablo Neira Ayuso) - netfilter: nft_payload: do not truncate csum_offset and csum_type (Pablo Neira Ayuso) - netfilter: nft_payload: report ERANGE for too long offset and length (Pablo Neira Ayuso) - netfilter: nf_tables: make table handle allocation per-netns friendly (Pablo Neira Ayuso) - netfilter: nf_tables: disallow updates of implicit chain (Pablo Neira Ayuso) - bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (Vikas Gupta) - net: ipvtap - add __init/__exit annotations to module init/exit funcs (Maciej Żenczykowski) - bonding: 802.3ad: fix no transmission of LACPDUs (Jonathan Toppins) - net: moxa: get rid of asymmetry in DMA mapping/unmapping (Sergei Antonov) - net: phy: Don't WARN for PHY_READY state in mdio_bus_phy_resume() (Xiaolei Wang) - net: ipa: don't assume SMEM is page-aligned (Alex Elder) - net/mlx5e: Fix wrong tc flag used when set hw-tc-offload off (Maor Dickman) - net/mlx5e: Fix wrong application of the LRO state (Aya Levin) - net/mlx5: Avoid false positive lockdep warning by adding lock_class_key (Moshe Shemesh) - net/mlx5e: Properly disable vlan strip on non-UL reps (Vlad Buslov) - ice: xsk: prohibit usage of non-balanced queue id (Maciej Fijalkowski) - ice: xsk: Force rings to be sized to power of 2 (Maciej Fijalkowski) - nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout (Duoming Zhou) - r8152: fix the RX FIFO settings when suspending (Hayes Wang) - r8152: fix the units of some registers for RTL8156A (Hayes Wang) - rose: check NULL rose_loopback_neigh->loopback (Bernard Pidoux) - ntfs: fix acl handling (Christian Brauner) - mm/smaps: don't access young/dirty bit if pte unpresent (Peter Xu) - SUNRPC: RPC level errors should set task->tk_rpc_status (Trond Myklebust) - NFSv4.2 fix problems with __nfs42_ssc_open (Olga Kornievskaia) - NFS: Don't allocate nfs_fattr on the stack in __nfs42_ssc_open() (Trond Myklebust) - Revert "net: macsec: update SCI upon MAC address change." (Sabrina Dubroca) - net: use eth_hw_addr_set() instead of ether_addr_copy() (Jakub Kicinski) - fs: require CAP_SYS_ADMIN in target namespace for idmapped mounts (Seth Forshee) - xfrm: policy: fix metadata dst->dev xmit null pointer dereference (Nikolay Aleksandrov) - xfrm: clone missing x->lastused in xfrm_do_migrate (Antony Antony) - xfrm: fix refcount leak in __xfrm_policy_check() (Xin Xiong) - riscv: lib: uaccess: fix CSR_STATUS SR_SUM bit (Chen Lifu) - riscv: lib: uaccess: fold fixups into body (Jisheng Zhang) - btrfs: remove unnecessary parameter delalloc_start for writepage_delalloc() (Qu Wenruo) - btrfs: pass the dentry to btrfs_log_new_name() instead of the inode (Filipe Manana) - btrfs: put initial index value of a directory in a constant (Filipe Manana) - scsi: qla2xxx: edif: Fix dropped IKE message (Quinn Tran) - scsi: qla2xxx: Fix response queue handler reading stale packets (Arun Easi) - drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (Phil Auld) - Input: i8042 - add additional TUXEDO devices to i8042 quirk tables (Werner Sembach) - Input: i8042 - add TUXEDO devices to i8042 quirk tables (Werner Sembach) - Input: i8042 - merge quirk tables (Werner Sembach) - Input: i8042 - move __initconst to fix code styling warning (Werner Sembach) - btrfs: convert count_max_extents() to use fs_info->max_extent_size (Naohiro Aota) - btrfs: replace BTRFS_MAX_EXTENT_SIZE with fs_info->max_extent_size (Naohiro Aota) - btrfs: zoned: revive max_zone_append_bytes (Naohiro Aota) - block: add bdev_max_segments() helper (Naohiro Aota) - block: add a bdev_max_zone_append_sectors helper (Christoph Hellwig) - x86/entry: Move CLD to the start of the idtentry macro (Lai Jiangshan) - kernel/sys_ni: add compat entry for fadvise64_64 (Randy Dunlap) - parisc: Fix exception handler for fldw and fstw instructions (Helge Deller)

SRPMs

https://oss.oracle.com:443/ol8/SRPMS-updates/kernel-uek-container-5.15.0-4.70.5.2.el8.src.rpm

x86_64

kernel-uek-container-5.15.0-4.70.5.2.el8.x86_64.rpm kernel-uek-container-debug-5.15.0-4.70.5.2.el8.x86_64.rpm

aarch64

i386

Severity
Related CVEs: CVE-2022-1184

Related News