Oracle9: ELSA-2022-9689: kernel Important Security Update
Summary
[5.15.0-1.43.4.1.el9uek] - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo) [Orabug: 34460936] {CVE-2022-2588} [5.15.0-1.43.4.el9uek] - Revert "selftests/bpf: add tests verifying unprivileged bpf behaviour" (Alan Maguire) [Orabug: 34399286] - Revert "selftests/bpf: Add test for reg2btf_ids out of bounds access" (Alan Maguire) [Orabug: 34399286] [5.15.0-1.43.3.el9uek] - x86/alternative: The retpoline alternative is not applied (Alexandre Chartre) [Orabug: 34395937] - x86/ftrace: Do not copy ftrace_stub() in ftrace trampoline (Alexandre Chartre) [Orabug: 34395937] [5.15.0-100.43.0.el9uek] - ocfs2: kill EBUSY from dlmfs_evict_inode (Junxiao Bi) [Orabug: 34364336] - ocfs2: dlmfs: don't clear USER_LOCK_ATTACHED when destroying lock (Junxiao Bi) [Orabug: 34364336] - ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock (Junxiao Bi via Ocfs2-devel) [Orabug: 34364336] - net/rds: Fix a NULL dereference in rds_tcp_accept_one() (Harshit Mogalapalli) [Orabug: 34366723] - lockdown: Fix kexec lockdown bypass with ima policy (Eric Snowberg) [Orabug: 34393053] {CVE-2022-21505} [5.15.0-1.43.1.el9uek] - LTS version: v5.15.43 (Jack Vogel) - mptcp: Do TCP fallback on early DSS checksum failure (Mat Martineau) - LTS version: v5.15.42 (Jack Vogel) - afs: Fix afs_getattr() to refetch file status if callback break occurred (David Howells) - i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe() (Yang Yingliang) - mt76: mt7921e: fix possible probe failure after reboot (Sean Wang) - dt-bindings: pinctrl: aspeed-g6: remove FWQSPID group (Jae Hyun Yoo) - Input: ili210x - fix reset timing (Marek Vasut) - arm64: Enable repeat tlbi workaround on KRYO4XX gold CPUs (Shreyas K K) - net: atlantic: verify hw_head_ lies within TX buffer ring (Grant Grundler) - net: atlantic: add check for MAX_SKB_FRAGS (Grant Grundler) - net: atlantic: reduce scope of is_rsc_complete (Grant Grundler) - net: atlantic: fix "frag[0] not initialized" (Grant Grundler) - net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe() (Yang Yingliang) - ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one() (Yang Yingliang) - nl80211: fix locking in nl80211_set_tx_bitrate_mask() (Johannes Berg) - net: fix wrong network header length (Lina Wang) - fbdev: Prevent possible use-after-free in fb_release() (Daniel Vetter) - Revert "fbdev: Make fb_release() return -ENODEV if fbdev was unregistered" (Javier Martinez Canillas) - selftests: add ping test with ping_group_range tuned (Nicolas Dichtel) - nl80211: validate S1G channel width (Kieran Frewen) - mac80211: fix rx reordering with non explicit / psmp ack policy (Felix Fietkau) - scsi: qla2xxx: Fix missed DMA unmap for aborted commands (Gleb Chesnokov) - scsi: scsi_dh_alua: Properly handle the ALUA transitioning state (Brian Bunker) - perf bench numa: Address compiler error on s390 (Thomas Richter) - perf regs x86: Fix arch__intr_reg_mask() for the hybrid platform (Kan Liang) - gpio: mvebu/pwm: Refuse requests with inverted polarity (Uwe Kleine-König) - gpio: gpio-vf610: do not touch other bits when set the target bit (Haibo Chen) - perf build: Fix check for btf__load_from_kernel_by_id() in libbpf (Arnaldo Carvalho de Melo) - scsi: ufs: core: Fix referencing invalid rsp field (Daejun Park) - riscv: dts: sifive: fu540-c000: align dma node name with dtschema (Krzysztof Kozlowski) - net: bridge: Clear offload_fwd_mark when passing frame up bridge interface. (Andrew Lunn) - netfilter: flowtable: move dst_check to packet path (Ritaro Takenaka) - netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Pablo Neira Ayuso) - netfilter: flowtable: fix TCP flow teardown (Pablo Neira Ayuso) - igb: skip phy status check where unavailable (Kevin Mitchell) - mptcp: fix checksum byte order (Paolo Abeni) - mptcp: reuse __mptcp_make_csum in validate_data_csum (Geliang Tang) - mptcp: change the parameter of __mptcp_make_csum (Geliang Tang) - ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2 (Ard Biesheuvel) - ARM: 9196/1: spectre-bhb: enable for Cortex-A15 (Ard Biesheuvel) - net: af_key: add check for pfkey_broadcast in function pfkey_process (Jiasheng Jiang) - net/mlx5e: Properly block LRO when XDP is enabled (Maxim Mikityanskiy) - net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table (Maor Dickman) - NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc (Duoming Zhou) - net/qla3xxx: Fix a test in ql_reset_work() (Christophe JAILLET) - clk: at91: generated: consider range when calculating best rate (Codrin Ciubotariu) - ice: Fix interrupt moderation settings getting cleared (Michal Wilczynski) - ice: move ice_container_type onto ice_ring_container (Maciej Fijalkowski) - ice: fix possible under reporting of ethtool Tx and Rx statistics (Paul Greenwalt) - ice: fix crash when writing timestamp on RX rings (Arkadiusz Kubalewski) - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() (Zixuan Fu) - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() (Zixuan Fu) - net: systemport: Fix an error handling path in bcm_sysport_probe() (Christophe JAILLET) - Revert "PCI: aardvark: Rewrite IRQ code to chained IRQ handler" (Pali Rohár) - netfilter: nft_flow_offload: fix offload with pppoe + vlan (Felix Fietkau) - net: fix dev_fill_forward_path with pppoe + bridge (Felix Fietkau) - netfilter: nft_flow_offload: skip dst neigh lookup for ppp devices (Felix Fietkau) - netfilter: flowtable: fix excessive hw offload attempts after failure (Felix Fietkau) - net/sched: act_pedit: sanitize shift argument before usage (Paolo Abeni) - xfrm: fix "disable_policy" flag use when arriving from different devices (Eyal Birger) - xfrm: rework default policy structure (Nicolas Dichtel) - net: macb: Increment rx bd head after allocating skb and buffer (Harini Katakam) - net: ipa: record proper RX transaction count (Alex Elder) - ALSA: hda - fix unused Realtek function when PM is not enabled (Randy Dunlap) - pinctrl: mediatek: mt8365: fix IES control pins (Mattijs Korpershoek) - ARM: dts: aspeed: Add video engine to g6 (Howard Chiu) - ARM: dts: aspeed: Add secure boot controller node (Joel Stanley) - ARM: dts: aspeed: Add ADC for AST2600 and enable for Rainier and Everest (Eddie James) - ARM: dts: aspeed-g6: fix SPI1/SPI2 quad pin group (Jae Hyun Yoo) - pinctrl: pinctrl-aspeed-g6: remove FWQSPID group in pinctrl (Jae Hyun Yoo) - ARM: dts: aspeed-g6: remove FWQSPID group in pinctrl dtsi (Jae Hyun Yoo) - dma-buf: ensure unique directory name for dmabuf stats (Charan Teja Kalla) - dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace (Jérôme Pouiller) - drm/dp/mst: fix a possible memory leak in fetch_monitor_name() (Hangyu Hua) - drm/i915/dmc: Add MMIO range restrictions (Anusha Srivatsa) - drm/amd: Don't reset dGPUs if the system is going to s2idle (Mario Limonciello) - libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) - crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ (Ondrej Mosnacek) - arm64: mte: Ensure the cleared tags are visible before setting the PTE (Catalin Marinas) - arm64: paravirt: Use RCU read locks to guard stolen_time (Prakruthi Deepak Heragu) - KVM: x86/mmu: Update number of zapped pages even if page list is stable (Sean Christopherson) - Revert "can: m_can: pci: use custom bit timings for Elkhart Lake" (Jarkko Nikula) - PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold (Rafael J. Wysocki) - Fix double fget() in vhost_net_set_backend() (Al Viro) - selinux: fix bad cleanup on error in hashtab_duplicate() (Ondrej Mosnacek) - ALSA: hda/realtek: Add quirk for TongFang devices with pop noise (Werner Sembach) - ALSA: wavefront: Proper check of get_user() error (Takashi Iwai) - ALSA: usb-audio: Restore Rane SL-1 quirk (Takashi Iwai) - nilfs2: fix lockdep warnings during disk space reclamation (Ryusuke Konishi) - nilfs2: fix lockdep warnings in page operations for btree nodes (Ryusuke Konishi) - ARM: 9191/1: arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame() (linyujun) - platform/chrome: cros_ec_debugfs: detach log reader wq from devm (Tzung-Bi Shih) - drbd: remove usage of list iterator variable after loop (Jakob Koschel) - MIPS: lantiq: check the return value of kzalloc() (Xiaoke Wang) - fs: fix an infinite loop in iomap_fiemap (Guo Xuenan) - rtc: mc146818-lib: Fix the AltCentury for AMD platforms (Mario Limonciello) - nvme-multipath: fix hang when disk goes live over reconnect (Anton Eidelman) - nvmet: use a private workqueue instead of the system workqueue (Sagi Grimberg) - tools/virtio: compile with -pthread (Michael S. Tsirkin) - vhost_vdpa: don't setup irq offloading when irq_num < 0 (Zhu Lingshan) - s390/pci: improve zpci_dev reference counting (Niklas Schnelle) - s390/traps: improve panic message for translation-specification exception (Heiko Carstens) - ALSA: hda/realtek: Enable headset mic on Lenovo P360 (Kai-Heng Feng) - crypto: x86/chacha20 - Avoid spurious jumps to other functions (Peter Zijlstra) - crypto: stm32 - fix reference leak in stm32_crc_remove (Zheng Yongjun) - rtc: sun6i: Fix time overflow handling (Andre Przywara) - gfs2: Disable page faults during lockless buffered reads (Andreas Gruenbacher) - nvme-pci: add quirks for Samsung X5 SSDs (Monish Kumar R) - Input: stmfts - fix reference leak in stmfts_input_open (Zheng Yongjun) - Input: add bounds checking to input_set_capability() (Jeff LaBundy) - um: Cleanup syscall_handler_t definition/cast, fix warning (David Gow) - rtc: pcf2127: fix bug when reading alarm registers (Hugo Villeneuve) - rtc: fix use-after-free on device removal (Vincent Whitchurch) - Revert "drm/i915/opregion: check port number bounds for SWSCI display power state" (Greg Thelen) - mm/kfence: reset PG_slab and memcg_data before freeing __kfence_pool (Hyeonggon Yoo) - Watchdog: sp5100_tco: Enable Family 17h+ CPUs (Terry Bowman) - Watchdog: sp5100_tco: Add initialization using EFCH MMIO (Terry Bowman) - Watchdog: sp5100_tco: Refactor MMIO base address initialization (Terry Bowman) - Watchdog: sp5100_tco: Move timer initialization into function (Terry Bowman) - i2c: piix4: Enable EFCH MMIO for Family 17h+ (Terry Bowman) - i2c: piix4: Add EFCH MMIO support for SMBus port select (Terry Bowman) - i2c: piix4: Add EFCH MMIO support to SMBus base address detect (Terry Bowman) - i2c: piix4: Add EFCH MMIO support to region request and release (Terry Bowman) - i2c: piix4: Move SMBus port selection into function (Terry Bowman) - i2c: piix4: Move SMBus controller base address detect into function (Terry Bowman) - i2c: piix4: Move port I/O region request/release code into functions (Terry Bowman) - i2c: piix4: Replace hardcoded memory map size with a #define (Terry Bowman) - kernel/resource: Introduce request_mem_region_muxed() (Terry Bowman) - io_uring: arm poll for non-nowait files (Pavel Begunkov) - usb: gadget: fix race when gadget driver register via ioctl (Schspa Shi) - LTS version: v5.15.41 (Jack Vogel) - usb: gadget: uvc: allow for application to cleanly shutdown (Dan Vacura) - usb: gadget: uvc: rename function to be more consistent (Michael Tretter) - ping: fix address binding wrt vrf (Nicolas Dichtel) - mm/hwpoison: use pr_err() instead of dump_page() in get_any_page() (Naoya Horiguchi) - dma-buf: call dma_buf_stats_setup after dmabuf is in valid list (Charan Teja Reddy) - Revert "drm/amd/pm: keep the BACO feature enabled for suspend" (Alex Deucher) - drm/vmwgfx: Initialize drm_mode_fb_cmd2 (Zack Rusin) - SUNRPC: Ensure that the gssproxy client can start in a connected state (Trond Myklebust) - net: phy: micrel: Pass .probe for KS8737 (Fabio Estevam) - net: phy: micrel: Do not use kszphy_suspend/resume for KSZ8061 (Fabio Estevam) - arm[64]/memremap: don't abuse pfn_valid() to ensure presence of linear map (Mike Rapoport) - cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() (Waiman Long) - writeback: Avoid skipping inode writeback (Jing Xia) - net: phy: Fix race condition on link status change (Francesco Dolcini) - net: atlantic: always deep reset on pm op, fixing up my null deref regression (Manuel Ullmann) - i40e: i40e_main: fix a missing check on list iterator (Xiaomeng Tong) - drm/nouveau/tegra: Stop using iommu_present() (Robin Murphy) - drm/vmwgfx: Disable command buffers on svga3 without gbobjects (Zack Rusin) - mm/huge_memory: do not overkill when splitting huge_zero_page (Xu Yu) - Revert "mm/memory-failure.c: skip huge_zero_page in memory_failure()" (Xu Yu) - ceph: fix setting of xattrs on async created inodes (Jeff Layton) - serial: 8250_mtk: Fix register address for XON/XOFF character (AngeloGioacchino Del Regno) - serial: 8250_mtk: Fix UART_EFR register address (AngeloGioacchino Del Regno) - fsl_lpuart: Don't enable interrupts too early (Indan Zupancic) - slimbus: qcom: Fix IRQ check in qcom_slim_probe (Miaoqian Lin) - USB: serial: option: add Fibocom MA510 modem (Sven Schwermer) - USB: serial: option: add Fibocom L610 modem (Sven Schwermer) - USB: serial: qcserial: add support for Sierra Wireless EM7590 (Ethan Yang) - USB: serial: pl2303: add device id for HP LM930 Display (Scott Chen) - usb: typec: tcpci_mt6360: Update for BMC PHY setting (ChiYuan Huang) - usb: typec: tcpci: Don't skip cleanup in .remove() on error (Uwe Kleine-König) - usb: cdc-wdm: fix reading stuck on device close (Sergey Ryazanov) - tty: n_gsm: fix mux activation issues in gsm_config() (Daniel Starke) - tty: n_gsm: fix buffer over-read in gsm_dlci_data() (Daniel Starke) - tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() (Yang Yingliang) - x86/mm: Fix marking of unused sub-pmd ranges (Adrian-Ken Rueegsegger) - usb: xhci-mtk: fix fs isoc's transfer error (Chunfeng Yun) - KVM: PPC: Book3S PR: Enable MSR_DR for switch_mmu_context() (Alexander Graf) - firmware_loader: use kernel credentials when reading firmware (Thiébaud Weksteen) - interconnect: Restore sync state by ignoring ipa-virt in provider count (Stephen Boyd) - tcp: drop the hash_32() part from the index calculation (Willy Tarreau) - tcp: increase source port perturb table to 2^16 (Willy Tarreau) - tcp: dynamically allocate the perturb table used by source ports (Willy Tarreau) - tcp: add small random increments to the source port (Willy Tarreau) - tcp: resalt the secret every 10 seconds (Eric Dumazet) - tcp: use different parts of the port_offset for index and offset (Willy Tarreau) - secure_seq: use the 64 bits of the siphash for port offset calculation (Willy Tarreau) - net: sfp: Add tx-fault workaround for Huawei MA5671A SFP ONT (Matthew Hagan) - net: emaclite: Don't advertise 1000BASE-T and do auto negotiation (Shravya Kumbham) - ASoC: SOF: Fix NULL pointer exception in sof_pci_probe callback (Ajit Kumar Pandey) - s390: disable -Warray-bounds (Sven Schnelle) - ASoC: ops: Validate input values in snd_soc_put_volsw_range() (Mark Brown) - ASoC: max98090: Generate notifications on changes for custom control (Mark Brown) - ASoC: max98090: Reject invalid values in custom control put() (Mark Brown) - iommu: arm-smmu: disable large page mappings for Nvidia arm-smmu (Ashish Mhetre) - RDMA/irdma: Fix deadlock in irdma_cleanup_cm_core() (Duoming Zhou) - hwmon: (f71882fg) Fix negative temperature (Ji-Ze Hong (Peter Hong)) - gfs2: Fix filesystem block deallocation for short writes (Andreas Gruenbacher) - drm/vmwgfx: Fix fencing on SVGAv3 (Zack Rusin) - tls: Fix context leak on tls_device_down (Maxim Mikityanskiy) - net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() (Taehee Yoo) - net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending (Guangguan Wang) - net: dsa: bcm_sf2: Fix Wake-on-LAN with mac_link_down() (Florian Fainelli) - drm/vc4: hdmi: Fix build error for implicit function declaration (Hui Tang) - net: bcmgenet: Check for Wake-on-LAN interrupt probe deferral (Florian Fainelli) - net: ethernet: mediatek: ppe: fix wrong size passed to memset() (Yang Yingliang) - net/sched: act_pedit: really ensure the skb is writable (Paolo Abeni) - s390/lcs: fix variable dereferenced before check (Alexandra Winter) - s390/ctcm: fix potential memory leak (Alexandra Winter) - s390/ctcm: fix variable dereferenced before check (Alexandra Winter) - virtio: fix virtio transitional ids (Shunsuke Mie) - arm64: vdso: fix makefile dependency on vdso.so (Joey Gouly) - selftests: vm: Makefile: rename TARGETS to VMTARGETS (Joel Savitz) - procfs: prevent unprivileged processes accessing fdinfo dir (Kalesh Singh) - hwmon: (ltq-cputemp) restrict it to SOC_XWAY (Randy Dunlap) - dim: initialize all struct fields (Jesse Brandeburg) - ionic: fix missing pci_release_regions() on error in ionic_probe() (Yang Yingliang) - nfs: fix broken handling of the softreval mount option (Dan Aloni) - mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection (Johannes Berg) - net: sfc: fix memory leak due to ptp channel (Taehee Yoo) - sfc: Use swap() instead of open coding it (Jiapeng Chong) - fbdev: efifb: Fix a use-after-free due early fb_info cleanup (Javier Martinez Canillas) - net: chelsio: cxgb4: Avoid potential negative array offset (Kees Cook) - netlink: do not reset transport header in netlink_recvmsg() (Eric Dumazet) - drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name() (Christophe JAILLET) - ipv4: drop dst in multicast routing path (Lokesh Dhoundiyal) - ice: fix PTP stale Tx timestamps cleanup (Michal Michalik) - ice: Fix race during aux device (un)plugging (Ivan Vecera) - platform/surface: aggregator: Fix initialization order when compiling as builtin module (Maximilian Luz) - fbdev: vesafb: Cleanup fb_info in .fb_destroy rather than .remove (Javier Martinez Canillas) - fbdev: efifb: Cleanup fb_info in .fb_destroy rather than .remove (Javier Martinez Canillas) - fbdev: simplefb: Cleanup fb_info in .fb_destroy rather than .remove (Javier Martinez Canillas) - net: mscc: ocelot: avoid corrupting hardware counters when moving VCAP filters (Vladimir Oltean) - net: mscc: ocelot: restrict tc-trap actions to VCAP IS2 lookup 0 (Vladimir Oltean) - net: mscc: ocelot: fix VCAP IS2 filters matching on both lookups (Vladimir Oltean) - net: mscc: ocelot: fix last VCAP IS1/IS2 filter persisting in hardware when deleted (Vladimir Oltean) - net: Fix features skip in for_each_netdev_feature() (Tariq Toukan) - mac80211: Reset MBSSID parameters upon connection (Manikanta Pubbisetty) - hwmon: (tmp401) Add OF device ID table (Camel Guo) - iwlwifi: iwl-dbg: Use del_timer_sync() before freeing (Guenter Roeck) - batman-adv: Don't skb_split skbuffs with frag_list (Sven Eckelmann) - LTS version: v5.15.40 (Jack Vogel) - mm: fix invalid page pointer returned with FOLL_PIN gups (Peter Xu) - mm/mlock: fix potential imbalanced rlimit ucounts adjustment (Miaohe Lin) - mm/hwpoison: fix error page recovered but reported "not recovered" (Naoya Horiguchi) - mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic() (Muchun Song) - mm: shmem: fix missing cache flush in shmem_mfill_atomic_pte() (Muchun Song) - mm: hugetlb: fix missing cache flush in copy_huge_page_from_user() (Muchun Song) - mm: fix missing cache flush for all tail pages of compound page (Muchun Song) - udf: Avoid using stale lengthOfImpUse (Jan Kara) - rfkill: uapi: fix RFKILL_IOCTL_MAX_SIZE ioctl request definition (Gleb Fotengauer-Malinovskiy) - Bluetooth: Fix the creation of hdev->name (Itay Iellin) - tools arch: Update arch/x86/lib/mem{cpy,set}_64.S copies used in 'perf bench mem memcpy' (Arnaldo Carvalho de Melo) - kbuild: move objtool_args back to scripts/Makefile.build (Masahiro Yamada) - LTS version: v5.15.39 (Jack Vogel) - PCI: aardvark: Update comment about link going down after link-up (Marek Behún) - PCI: aardvark: Drop __maybe_unused from advk_pcie_disable_phy() (Marek Behún) - PCI: aardvark: Don't mask irq when mapping (Pali Rohár) - PCI: aardvark: Remove irq_mask_ack() callback for INTx interrupts (Pali Rohár) - PCI: aardvark: Use separate INTA interrupt for emulated root bridge (Pali Rohár) - PCI: aardvark: Fix support for PME requester on emulated bridge (Pali Rohár) - PCI: aardvark: Add support for PME interrupts (Pali Rohár) - PCI: aardvark: Optimize writing PCI_EXP_RTCTL_PMEIE and PCI_EXP_RTSTA_PME on emulated bridge (Pali Rohár) - PCI: aardvark: Add support for ERR interrupt on emulated bridge (Pali Rohár) - PCI: aardvark: Enable MSI-X support (Pali Rohár) - PCI: aardvark: Fix setting MSI address (Pali Rohár) - PCI: aardvark: Add support for masking MSI interrupts (Pali Rohár) - PCI: aardvark: Refactor unmasking summary MSI interrupt (Pali Rohár) - PCI: aardvark: Use dev_fwnode() instead of of_node_to_fwnode(dev->of_node) (Marek Behún) - PCI: aardvark: Make msi_domain_info structure a static driver structure (Marek Behún) - PCI: aardvark: Make MSI irq_chip structures static driver structures (Marek Behún) - PCI: aardvark: Check return value of generic_handle_domain_irq() when processing INTx IRQ (Pali Rohár) - PCI: aardvark: Rewrite IRQ code to chained IRQ handler (Pali Rohár) - PCI: aardvark: Replace custom PCIE_CORE_INT_* macros with PCI_INTERRUPT_* (Pali Rohár) - PCI: aardvark: Disable common PHY when unbinding driver (Pali Rohár) - PCI: aardvark: Disable link training when unbinding driver (Pali Rohár) - PCI: aardvark: Assert PERST# when unbinding driver (Pali Rohár) - PCI: aardvark: Fix memory leak in driver unbind (Pali Rohár) - PCI: aardvark: Mask all interrupts when unbinding driver (Pali Rohár) - PCI: aardvark: Disable bus mastering when unbinding driver (Pali Rohár) - PCI: aardvark: Comment actions in driver remove method (Pali Rohár) - PCI: aardvark: Clear all MSIs at setup (Pali Rohár) - PCI: aardvark: Add support for DEVCAP2, DEVCTL2, LNKCAP2 and LNKCTL2 registers on emulated bridge (Pali Rohár) - PCI: pci-bridge-emul: Add definitions for missing capabilities registers (Pali Rohár) - PCI: pci-bridge-emul: Add description for class_revision field (Pali Rohár) - rcu: Apply callbacks processing time limit only on softirq (Frederic Weisbecker) - rcu: Fix callbacks processing time limit retaining cond_resched() (Frederic Weisbecker) - Revert "parisc: Mark sched_clock unstable only if clocks are not syncronized" (Helge Deller) - mmc: rtsx: add 74 Clocks in power on flow (Ricky WU) - selftest/vm: verify remap destination address in mremap_test (Sidhartha Kumar) - selftest/vm: verify mmap addr in mremap_test (Sidhartha Kumar) - KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised (Wanpeng Li) - KVM: x86/mmu: avoid NULL-pointer dereference on page freeing bugs (Paolo Bonzini) - KVM: x86: Do not change ICR on write to APIC_SELF_IPI (Paolo Bonzini) - x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume (Wanpeng Li) - KVM: selftests: Silence compiler warning in the kvm_page_table_test (Thomas Huth) - kvm: selftests: do not use bitfields larger than 32-bits for PTEs (Paolo Bonzini) - iommu/dart: Add missing module owner to ops structure (Hector Martin) - net/mlx5e: Lag, Don't skip fib events on current dst (Vlad Buslov) - net/mlx5e: Lag, Fix fib_info pointer assignment (Vlad Buslov) - net/mlx5e: Lag, Fix use-after-free in fib event handler (Vlad Buslov) - net/mlx5: Fix slab-out-of-bounds while reading resource dump menu (Aya Levin) - fbdev: Make fb_release() return -ENODEV if fbdev was unregistered (Javier Martinez Canillas) - kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU (Sandipan Das) - gpio: mvebu: drop pwm base assignment (Baruch Siach) - drm/amdgpu: Ensure HDA function is suspended before ASIC reset (Kai-Heng Feng) - drm/amdgpu: don't set s3 and s0ix at the same time (Mario Limonciello) - drm/amdgpu: explicitly check for s0ix when evicting resources (Mario Limonciello) - drm/amdgpu: unify BO evicting method in amdgpu_ttm (Nirmoy Das) - btrfs: always log symlinks in full mode (Filipe Manana) - btrfs: force v2 space cache usage for subpage mount (Qu Wenruo) - smsc911x: allow using IRQ0 (Sergey Shtylyov) - selftests: ocelot: tc_flower_chains: specify conform-exceed action for policer (Vladimir Oltean) - bnxt_en: Fix unnecessary dropping of RX packets (Michael Chan) - bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag (Somnath Kotur) - selftests: mirror_gre_bridge_1q: Avoid changing PVID while interface is operational (Ido Schimmel) - rxrpc: Enable IPv6 checksums on transport socket (David Howells) - mld: respect RCU rules in ip6_mc_source() and ip6_mc_msfilter() (Eric Dumazet) - hinic: fix bug of wq out of bound access (Qiao Ma) - btrfs: do not BUG_ON() on failure to update inode when setting xattr (Filipe Manana) - drm/msm/dp: remove fail safe mode related code (Kuogee Hsieh) - selftests/net: so_txtime: usage(): fix documentation of default clock (Marc Kleine-Budde) - selftests/net: so_txtime: fix parsing of start time stamp on 32 bit systems (Marc Kleine-Budde) - net: emaclite: Add error handling for of_address_to_resource() (Shravya Kumbham) - net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter() (Eric Dumazet) - net: cpsw: add missing of_node_put() in cpsw_probe_dt() (Yang Yingliang) - net: mdio: Fix ENOMEM return value in BCM6368 mux bus controller (Niels Dossche) - net: stmmac: dwmac-sun8i: add missing of_node_put() in sun8i_dwmac_register_mdio_mux() (Yang Yingliang) - net: dsa: mt7530: add missing of_node_put() in mt7530_setup() (Yang Yingliang) - net: ethernet: mediatek: add missing of_node_put() in mtk_sgmii_init() (Yang Yingliang) - NFSv4: Don't invalidate inode attributes on delegation return (Trond Myklebust) - RDMA/irdma: Fix possible crash due to NULL netdev in notifier (Mustafa Ismail) - RDMA/irdma: Reduce iWARP QP destroy time (Shiraz Saleem) - RDMA/irdma: Flush iWARP QP if modified to ERR from RTR state (Tatyana Nikolova) - RDMA/siw: Fix a condition race issue in MPA request processing (Cheng Xu) - SUNRPC release the transport of a relocated task with an assigned transport (Olga Kornievskaia) - selftests/seccomp: Don't call read() on TTY from background pgrp (Jann Horn) - net/mlx5: Fix deadlock in sync reset flow (Moshe Shemesh) - net/mlx5: Avoid double clear or set of sync reset requested (Moshe Shemesh) - net/mlx5e: Fix the calling of update_buffer_lossy() API (Mark Zhang) - net/mlx5e: CT: Fix queued up restore put() executing after relevant ft release (Paul Blakey) - net/mlx5e: Don't match double-vlan packets if cvlan is not set (Vlad Buslov) - net/mlx5e: Fix trust state reset in reload (Moshe Tal) - iommu/dart: check return value after calling platform_get_resource() (Yang Yingliang) - iommu/vt-d: Drop stop marker messages (Lu Baolu) - ASoC: soc-ops: fix error handling (Pierre-Louis Bossart) - ASoC: dmaengine: Restore NULL prepare_slave_config() callback (Codrin Ciubotariu) - hwmon: (pmbus) disable PEC if not enabled (Adam Wujek) - hwmon: (adt7470) Fix warning on module removal (Armin Wolf) - gpio: pca953x: fix irq_stat not updated when irq is disabled (irq_mask not set) (Puyou Lu) - gpio: visconti: Fix fwnode of GPIO IRQ (Nobuhiro Iwamatsu) - NFC: netlink: fix sleep in atomic bug when firmware download timeout (Duoming Zhou) - nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs (Duoming Zhou) - nfc: replace improper check device_is_registered() in netlink related functions (Duoming Zhou) - can: grcan: only use the NAPI poll budget for RX (Andreas Larsson) - can: grcan: grcan_probe(): fix broken system id check for errata workaround needs (Andreas Larsson) - can: grcan: use ofdev->dev when allocating DMA memory (Daniel Hellstrom) - can: isotp: remove re-binding of bound socket (Oliver Hartkopp) - can: grcan: grcan_close(): fix deadlock (Duoming Zhou) - s390/dasd: Fix read inconsistency for ESE DASD devices (Jan Höppner) - s390/dasd: Fix read for ESE with blksize < 4k (Jan Höppner) - s390/dasd: prevent double format of tracks for ESE devices (Stefan Haberland) - s390/dasd: fix data corruption for ESE devices (Stefan Haberland) - ASoC: meson: Fix event generation for AUI CODEC mux (Mark Brown) - ASoC: meson: Fix event generation for G12A tohdmi mux (Mark Brown) - ASoC: meson: Fix event generation for AUI ACODEC mux (Mark Brown) - ASoC: wm8958: Fix change notifications for DSP controls (Mark Brown) - ASoC: da7219: Fix change notifications for tone generator frequency (Mark Brown) - genirq: Synchronize interrupt thread startup (Thomas Pfaff) - net: stmmac: disable Split Header (SPH) for Intel platforms (Tan Tee Min) - firewire: core: extend card->lock in fw_core_handle_bus_reset (Niels Dossche) - firewire: remove check of list iterator against head past the loop body (Jakob Koschel) - firewire: fix potential uaf in outbound_phy_packet_callback() (Chengfeng Ye) - timekeeping: Mark NMI safe time accessors as notrace (Kurt Kanzenbach) - Revert "SUNRPC: attempt AF_LOCAL connect on setup" (Trond Myklebust) - RISC-V: relocate DTB if it's outside memory region (Nick Kossifidis) - drm/amdgpu: do not use passthrough mode in Xen dom0 (Marek Marczykowski-Górecki) - drm/amd/display: Avoid reading audio pattern past AUDIO_CHANNELS_COUNT (Harry Wentland) - iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range() (Nicolin Chen) - iommu/vt-d: Calculate mask for non-aligned flushes (David Stevens) - KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id (Kyle Huey) - x86/fpu: Prevent FPU state corruption (Thomas Gleixner) - gpiolib: of: fix bounds check for 'gpio-reserved-ranges' (Andrei Lalaev) - mmc: core: Set HS clock speed before sending HS CMD13 (Brian Norris) - mmc: sunxi-mmc: Fix DMA descriptors allocated above 32 bits (Samuel Holland) - mmc: sdhci-msm: Reset GCC_SDCC_BCR register for SDHC (Shaik Sajida Bhanu) - ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes (Takashi Sakamoto) - ALSA: hda/realtek: Add quirk for Yoga Duet 7 13ITL6 speakers (Zihao Wang) - parisc: Merge model and model name into one line in /proc/cpuinfo (Helge Deller) - MIPS: Fix CP0 counter erratum detection for R4k CPUs (Maciej W. Rozycki) - LTS version: v5.15.38 (Jack Vogel) - powerpc/64: Add UADDR64 relocation support (Alexey Kardashevskiy) - objtool: Fix type of reloc::addend (Peter Zijlstra) - objtool: Fix code relocs vs weak symbols (Peter Zijlstra) - eeprom: at25: Use DMA safe buffers (Christophe Leroy) - perf symbol: Remove arch__symbols__fixup_end() (Namhyung Kim) - tty: n_gsm: fix software flow control handling (Daniel Starke) - tty: n_gsm: fix incorrect UA handling (Daniel Starke) - tty: n_gsm: fix reset fifo race condition (Daniel Starke) - tty: n_gsm: fix missing tty wakeup in convergence layer type 2 (Daniel Starke) - tty: n_gsm: fix wrong signal octets encoding in MSC (Daniel Starke) - tty: n_gsm: fix wrong command frame length field encoding (Daniel Starke) - tty: n_gsm: fix wrong command retry handling (Daniel Starke) - tty: n_gsm: fix missing explicit ldisc flush (Daniel Starke) - tty: n_gsm: fix wrong DLCI release order (Daniel Starke) - tty: n_gsm: fix insufficient txframe size (Daniel Starke) - netfilter: nft_socket: only do sk lookups when indev is available (Florian Westphal) - tty: n_gsm: fix malformed counter for out of frame data (Daniel Starke) - tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2 (Daniel Starke) - tty: n_gsm: fix mux cleanup after unregister tty device (Daniel Starke) - tty: n_gsm: fix decoupled mux resource (Daniel Starke) - tty: n_gsm: fix restart handling via CLD command (Daniel Starke) - perf symbol: Update symbols__fixup_end() (Namhyung Kim) - perf symbol: Pass is_kallsyms to symbols__fixup_end() (Namhyung Kim) - x86/cpu: Load microcode during restore_processor_state() (Borislav Petkov) - ARM: dts: imx8mm-venice-gw{71xx,72xx,73xx}: fix OTG controller OC mode (Tim Harvey) - ARM: dts: at91: sama7g5ek: enable pull-up on flexcom3 console lines (Eugen Hristev) - btrfs: fix leaked plug after failure syncing log on zoned filesystems (Filipe Manana) - thermal: int340x: Fix attr.show callback prototype (Kees Cook) - ACPI: processor: idle: Avoid falling back to C3 type C-states (Ville Syrjälä) - net: ethernet: stmmac: fix write to sgmii_adapter_base (Dinh Nguyen) - drm/i915: Fix SEL_FETCH_PLANE_*(PIPE_B+) register addresses (Imre Deak) - drm/i915: Check EDID for HDR static metadata when choosing blc (Jouni Högander) - netfilter: Update ip6_route_me_harder to consider L3 domain (Martin Willi) - mtd: rawnand: qcom: fix memory corruption that causes panic (Md Sadre Alam) - kasan: prevent cpu_quarantine corruption when CPU offline and cache shrink occur at same time (Zqiang) - zonefs: Clear inode information flags on inode creation (Damien Le Moal) - zonefs: Fix management of open zones (Damien Le Moal) - Revert "ACPI: processor: idle: fix lockup regression on 32-bit ThinkPad T40" (Ville Syrjälä) - selftest/vm: verify remap destination address in mremap_test (Sidhartha Kumar) - selftest/vm: verify mmap addr in mremap_test (Sidhartha Kumar) - powerpc/perf: Fix 32bit compile (Alexey Kardashevskiy) - drivers: net: hippi: Fix deadlock in rr_close() (Duoming Zhou) - cifs: destage any unwritten data to the server before calling copychunk_write (Ronnie Sahlberg) - x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 (Mikulas Patocka) - bonding: do not discard lowest hash bit for non layer3+4 hashing (suresh kumar) - ksmbd: set fixed sector size to FS_SECTOR_SIZE_INFORMATION (Namjae Jeon) - ksmbd: increment reference count of parent fp (Namjae Jeon) - arch: xtensa: platforms: Fix deadlock in rs_close() (Duoming Zhou) - ext4: fix bug_on in start_this_handle during umount filesystem (Ye Bin) - ASoC: wm8731: Disable the regulator when probing fails (Zheyu Ma) - ASoC: Intel: soc-acpi: correct device endpoints for max98373 (Chao Song) - tcp: fix F-RTO may not work correctly when receiving DSACK (Pengcheng Yang) - Revert "ibmvnic: Add ethtool private flag for driver-defined queue limits" (Dany Madden) - ixgbe: ensure IPsec VF<->PF compatibility (Leon Romanovsky) - perf arm-spe: Fix addresses of synthesized SPE events (Timothy Hayes) - gfs2: No short reads or writes upon glock contention (Andreas Gruenbacher) - gfs2: Make sure not to return short direct writes (Andreas Gruenbacher) - gfs2: Minor retry logic cleanup (Andreas Gruenbacher) - gfs2: Prevent endless loops in gfs2_file_buffered_write (Andreas Gruenbacher) - net: fec: add missing of_node_put() in fec_enet_init_stop_mode() (Yang Yingliang) - bnx2x: fix napi API usage sequence (Manish Chopra) - tls: Skip tls_append_frag on zero copy size (Maxim Mikityanskiy) - drm/amd/display: Fix memory leak in dcn21_clock_source_create (Miaoqian Lin) - drm/amdkfd: Fix GWS queue count (David Yat Sin) - netfilter: conntrack: fix udp offload timeout sysctl (Volodymyr Mytnyk) - io_uring: check reserved fields for recv/recvmsg (Jens Axboe) - io_uring: check reserved fields for send/sendmsg (Jens Axboe) - net: dsa: lantiq_gswip: Don't set GSWIP_MII_CFG_RMII_CLK (Martin Blumenstingl) - drm/sun4i: Remove obsolete references to PHYS_OFFSET (Samuel Holland) - net: dsa: mv88e6xxx: Fix port_hidden_wait to account for port_base_addr (Nathan Rossi) - net: phy: marvell10g: fix return value on error (Baruch Siach) - net: bcmgenet: hide status block before TX timestamping (Jonathan Lemon) - cpufreq: qcom-cpufreq-hw: Clear dcvs interrupts (Vladimir Zapolskiy) - clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource() (Yang Yingliang) - bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create() (Christophe JAILLET) - tcp: make sure treq->af_specific is initialized (Eric Dumazet) - tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT (Eric Dumazet) - ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode (Peilin Ye) - ip6_gre: Make o_seqno start from 0 in native mode (Peilin Ye) - ip_gre: Make o_seqno start from 0 in native mode (Peilin Ye) - net/smc: sync err code when tcp connection was refused (liuyacan) - net: hns3: add return value for mailbox handling in PF (Jian Shen) - net: hns3: add validity check for message data length (Jian Shen) - net: hns3: modify the return code of hclge_get_ring_chain_from_mbx (Jie Wang) - net: hns3: clear inited state and stop client after failed to register netdev (Jian Shen) - cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe (Xiaobing Luo) - pinctrl: pistachio: fix use of irq_of_parse_and_map() (Lv Ruyi) - arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock (Fabio Estevam) - ARM: dts: imx6ull-colibri: fix vqmmc regulator (Max Krummenacher) - sctp: check asoc strreset_chunk in sctp_generate_reconf_event (Xin Long) - wireguard: device: check for metadata_dst with skb_valid_dst() (Nikolay Aleksandrov) - tcp: ensure to use the most recently sent skb when filling the rate sample (Pengcheng Yang) - pinctrl: stm32: Keep pinctrl block clock enabled when LEVEL IRQ requested (Marek Vasut) - tcp: md5: incorrect tcp_header_len for incoming connections (Francesco Ruggeri) - pinctrl: rockchip: fix RK3308 pinmux bits (Luca Ceresoli) - bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt hook (Eyal Birger) - netfilter: nft_set_rbtree: overlap detection with element re-addition after deletion (Pablo Neira Ayuso) - net: dsa: Add missing of_node_put() in dsa_port_link_register_of (Miaoqian Lin) - memory: renesas-rpc-if: Fix HF/OSPI data transfer in Manual Mode (Geert Uytterhoeven) - pinctrl: stm32: Do not call stm32_gpio_get() for edge triggered IRQs in EOI (Marek Vasut) - mtd: fix 'part' field data corruption in mtd_info (Oleksandr Ocheretnyi) - mtd: rawnand: Fix return value check of wait_for_completion_timeout (Miaoqian Lin) - pinctrl: mediatek: moore: Fix build error (YueHaibing) - phy: amlogic: fix error path in phy_g12a_usb3_pcie_probe() (Heiner Kallweit) - ipvs: correctly print the memory size of ip_vs_conn_tab (Pengcheng Yang) - ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35 (Adam Ford) - ARM: dts: am3517-evm: Fix misc pinmuxing (Adam Ford) - ARM: dts: Fix mmc order for omap3-gta04 (H. Nikolaus Schaller) - interconnect: qcom: sdx55: Drop IP0 interconnects (Stephen Boyd) - phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe (Miaoqian Lin) - phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe (Miaoqian Lin) - ARM: dts: at91: fix pinctrl phandles (Claudiu Beznea) - ARM: dts: at91: sama5d4_xplained: fix pinctrl phandle name (Claudiu Beznea) - ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek (Mark Brown) - phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks (Miaoqian Lin) - ARM: dts: dra7: Fix suspend warning for vpe powerdomain (Tony Lindgren) - bus: ti-sysc: Make omap3 gpt12 quirk handling SoC specific (Tony Lindgren) - ARM: OMAP2+: Fix refcount leak in omap_gic_of_init (Miaoqian Lin) - phy: samsung: exynos5250-sata: fix missing device put in probe error paths (Krzysztof Kozlowski) - phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe (Miaoqian Lin) - arm64: dts: meson-sm1-bananapi-m5: fix wrong GPIO pin labeling for CON1 (Guillaume Giraudon) - arm64: dts: imx8mn: Fix SAI nodes (Marek Vasut) - ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue (Fabio Estevam) - USB: Fix xhci event ring dequeue pointer ERDP update issue (Weitao Wang) - arm64: dts: imx8qm: Correct SCU clock controller's compatible property (Liu Ying) - xsk: Fix l2fwd for copy mode + busy poll combo (Maciej Fijalkowski) - mtd: rawnand: fix ecc parameters for mt7622 (Chuanhong Guo) - iio:imu:bmi160: disable regulator in error path (Tong Zhang) - arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards (Christian Hewitt) - arm64: dts: meson: remove CPU opps below 1GHz for G12B boards (Christian Hewitt) - video: fbdev: udlfb: properly check endpoint type (Pavel Skripkin) - cpufreq: qcom-cpufreq-hw: Fix throttle frequency value on EPSS platforms (Vladimir Zapolskiy) - cpufreq: qcom-hw: fix the race between LMH worker and cpuhp (Dmitry Baryshkov) - virtio_net: fix wrong buf address calculation when using xdp (Nikolay Aleksandrov) - iocost: don't reset the inuse weight of under-weighted debtors (Tejun Heo) - x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests (Thomas Gleixner) - riscv: patch_text: Fixup last cpu should be master (Guo Ren) - hex2bin: fix access beyond string end (Mikulas Patocka) - hex2bin: make the function hex_to_bin constant-time (Mikulas Patocka) - pinctrl: samsung: fix missing GPIOLIB on ARM64 Exynos config (Krzysztof Kozlowski) - arm64: dts: imx8mm-venice: fix spi2 pin configuration (Johan Hovold) - bus: mhi: host: pci_generic: Flush recovery worker during freeze (Manivannan Sadhasivam) - bus: mhi: host: pci_generic: Add missing poweroff() PM callback (Manivannan Sadhasivam) - ceph: fix possible NULL pointer dereference for req->r_session (Xiubo Li) - arch_topology: Do not set llc_sibling if llc_id is invalid (Wang Qing) - serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device (Maciej W. Rozycki) - serial: 8250: Also set sticky MCR bits in console restoration (Maciej W. Rozycki) - serial: amba-pl011: do not time out prematurely when draining tx fifo (Lino Sanfilippo) - serial: imx: fix overrun interrupts in DMA mode (Johan Hovold) - usb: phy: generic: Get the vbus supply (Sean Anderson) - usb: cdns3: Fix issue for clear halt endpoint (Pawel Laszczak) - usb: dwc3: pci: add support for the Intel Meteor Lake-P (Heikki Krogerus) - usb: dwc3: gadget: Return proper request status (Thinh Nguyen) - usb: dwc3: core: Only handle soft-reset in DCTL (Thinh Nguyen) - usb: dwc3: core: Fix tx/rx threshold settings (Thinh Nguyen) - usb: dwc3: Try usb-role-switch first in dwc3_drd_init (Sven Peter) - usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind() (Vijayavardhan Vennapusa) - usb: gadget: uvc: Fix crash when encoding data for usb request (Dan Vacura) - usb: typec: ucsi: Fix role swapping (Heikki Krogerus) - usb: typec: ucsi: Fix reuse of completion structure (Heikki Krogerus) - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Tasos Sahanidis) - usb: misc: fix improper handling of refcount in uss720_probe() (Hangyu Hua) - iio: imu: inv_icm42600: Fix I2C init possible nack (Fawzi Khaber) - iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on() (Zheyu Ma) - iio: dac: ad5446: Fix read_raw not returning set value (Michael Hennerich) - iio: dac: ad5592r: Fix the missing return value. (Zizhuang Deng) - xhci: increase usb U3 -> U0 link resume timeout from 100ms to 500ms (Mathias Nyman) - xhci: stop polling roothubs after shutdown (Henry Lin) - xhci: Enable runtime PM on second Alderlake controller (Evan Green) - usb: xhci: tegra:Fix PM usage reference leak of tegra_xusb_unpowergate_partitions (zhangqilong) - USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions (Daniele Palmas) - USB: serial: option: add support for Cinterion MV32-WA/MV32-WB (Slark Xiao) - USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader (Bruno Thomsen) - USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS (Kees Cook) - USB: quirks: add STRING quirk for VCOM device (Oliver Neukum) - USB: quirks: add a Realtek card reader (Oliver Neukum) - usb: mtu3: fix USB 3.0 dual-role-switch from device to host (Macpaul Lin) - LTS version: v4.15.37 (Jack Vogel) - selftests/bpf: Add test for reg2btf_ids out of bounds access (Kumar Kartikeya Dwivedi) - mm: gup: make fault_in_safe_writeable() use fixup_user_fault() (Linus Torvalds) - btrfs: fallback to blocking mode when doing async dio over multiple extents (Filipe Manana) - btrfs: fix deadlock due to page faults during direct IO reads and writes (Filipe Manana) - gfs2: Fix mmap + page fault deadlocks for direct I/O (Andreas Gruenbacher) - iomap: Add done_before argument to iomap_dio_rw (Andreas Gruenbacher) - iomap: Support partial direct I/O on user copy failures (Andreas Gruenbacher) - iomap: Fix iomap_dio_rw return value for user copies (Andreas Gruenbacher) - gfs2: Fix mmap + page fault deadlocks for buffered I/O (Andreas Gruenbacher) - gfs2: Eliminate ip->i_gh (Andreas Gruenbacher) - gfs2: Move the inode glock locking to gfs2_file_buffered_write (Andreas Gruenbacher) - gfs2: Introduce flag for glock holder auto-demotion (Bob Peterson) - gfs2: Clean up function may_grant (Andreas Gruenbacher) - gfs2: Add wrapper for iomap_file_buffered_write (Andreas Gruenbacher) - iov_iter: Introduce fault_in_iov_iter_writeable (Andreas Gruenbacher) - iov_iter: Turn iov_iter_fault_in_readable into fault_in_iov_iter_readable (Andreas Gruenbacher) - gup: Turn fault_in_pages_{readable,writeable} into fault_in_{readable,writeable} (Andreas Gruenbacher) - mm: kfence: fix objcgs vector allocation (Muchun Song) - ARM: dts: socfpga: change qspi to "intel,socfpga-qspi" (Dinh Nguyen) - spi: cadence-quadspi: fix write completion support (Dinh Nguyen) - floppy: disable FDRAWCMD by default (Willy Tarreau) - LTS version: v5.15.36 (Jack Vogel) - arm64: dts: qcom: add IPA qcom,qmp property (Alex Elder) - block/compat_ioctl: fix range check in BLKGETSIZE (Khazhismel Kumykov) - spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller (Tudor Ambarus) - jbd2: fix a potential race while discarding reserved buffers after an abort (Ye Bin) - netfilter: nft_ct: fix use after free when attaching zone template (Florian Westphal) - ext4: force overhead calculation if the s_overhead_cluster makes no sense (Theodore Ts'o) - ext4: fix overhead calculation to account for the reserved gdt blocks (Theodore Ts'o) - ext4, doc: fix incorrect h_reserved size (wangjianjian (C)) - ext4: limit length to bitmap_maxbytes - blocksize in punch_hole (Tadeusz Struk) - ext4: fix use-after-free in ext4_search_dir (Ye Bin) - ext4: fix symlink file size not match to file content (Ye Bin) - ext4: fix fallocate to use file_modified to update permissions consistently (Darrick J. Wong) - netfilter: conntrack: avoid useless indirection during conntrack destruction (Florian Westphal) - netfilter: conntrack: convert to refcount_t api (Florian Westphal) - KVM: SVM: Flush when freeing encrypted pages even on SME_COHERENT CPUs (Mingwei Zhang) - KVM: nVMX: Defer APICv updates while L2 is active until L1 is active (Sean Christopherson) - KVM: x86: Pend KVM_REQ_APICV_UPDATE during vCPU creation to fix a race (Sean Christopherson) - KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog (Like Xu) - arm_pmu: Validate single/group leader events (Rob Herring) - ARC: entry: fix syscall_trace_exit argument (Sergey Matyukevich) - e1000e: Fix possible overflow in LTR decoding (Sasha Neftin) - ASoC: soc-dapm: fix two incorrect uses of list iterator (Xiaomeng Tong) - gpio: Request interrupts after IRQ is initialized (Mario Limonciello) - openvswitch: fix OOB access in reserve_sfa_size() (Paolo Valerio) - xtensa: fix a7 clobbering in coprocessor context load/store (Max Filippov) - xtensa: patch_text: Fixup last cpu should be master (Guo Ren) - perf report: Set PERF_SAMPLE_DATA_SRC bit for Arm SPE event (Leo Yan) - perf script: Always allow field 'data_src' for auxtrace (Leo Yan) - powerpc/perf: Fix power10 event alternatives (Athira Rajeev) - powerpc/perf: Fix power9 event alternatives (Athira Rajeev) - drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage (Miaoqian Lin) - KVM: PPC: Fix TCE handling for VFIO (Alexey Kardashevskiy) - drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare (Dave Stevenson) - drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised (Dave Stevenson) - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled (Zhipeng Xie) - sched/pelt: Fix attach_entity_load_avg() corner case (kuyo chang) - scsi: sr: Do not leak information in ioctl (Tom Rix) - Input: omap4-keypad - fix pm_runtime_get_sync() error checking (Miaoqian Lin) - net: atlantic: invert deep par in pm functions, preventing null derefs (Manuel Ullmann) - dmaengine: imx-sdma: fix init of uart scripts (Kevin Groeneveld) - dma: at_xdmac: fix a missing check on list iterator (Xiaomeng Tong) - ata: pata_marvell: Check the 'bmdma_addr' beforing reading (Zheyu Ma) - mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() (Alistair Popple) - oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup (Nico Pache) - mm, hugetlb: allow for "high" userspace addresses (Christophe Leroy) - memcg: sync flush only if periodic flush is delayed (Shakeel Butt) - mm/memory-failure.c: skip huge_zero_page in memory_failure() (Xu Yu) - EDAC/synopsys: Read the error count from the correct register (Shubhrajyoti Datta) - nvme-pci: disable namespace identifiers for Qemu controllers (Christoph Hellwig) - nvme-pci: disable namespace identifiers for the MAXIO MAP1002/1202 (Christoph Hellwig) - nvme: add a quirk to disable namespace identifiers (Christoph Hellwig) - VFS: filename_create(): fix incorrect intent. (NeilBrown) - stat: fix inconsistency between struct stat and struct compat_stat (Mikulas Patocka) - scsi: qedi: Fix failed disconnect handling (Mike Christie) - scsi: iscsi: Fix NOP handling during conn recovery (Mike Christie) - scsi: iscsi: Merge suspend fields (Mike Christie) - scsi: iscsi: Release endpoint ID when its freed (Mike Christie) - net: macb: Restart tx only if queue pointer is lagging (Tomas Melin) - drm/msm/mdp5: check the return of kzalloc() (Xiaoke Wang) - dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info() (Lv Ruyi) - brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov) - mt76: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov) - net: atlantic: Avoid out-of-bounds indexing (Kai-Heng Feng) - cifs: Check the IOCB_DIRECT flag, not O_DIRECT (David Howells) - vxlan: fix error return code in vxlan_fdb_append (Hongbin Wang) - arm64: dts: imx: Fix imx8*-var-som touchscreen property sizes (Rob Herring) - drm/msm/disp: check the return value of kzalloc() (Xiaoke Wang) - ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov) - platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative (Jiapeng Chong) - reset: tegra-bpmp: Restore Handle errors in BPMP response (Sameer Pujar) - reset: renesas: Check return value of reset_control_deassert() (Heiner Kallweit) - ARM: vexpress/spc: Avoid negative array index when !SMP (Kees Cook) - arm64: mm: fix p?d_leaf() (Muchun Song) - selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets (Ido Schimmel) - dmaengine: idxd: skip clearing device context when device is read-only (Dave Jiang) - dmaengine: idxd: add RO check for wq max_transfer_size write (Dave Jiang) - dmaengine: idxd: add RO check for wq max_batch_size write (Dave Jiang) - net: stmmac: Use readl_poll_timeout_atomic() in atomic state (Kevin Hao) - drm/i915/display/psr: Unset enable_psr2_sel_fetch if other checks in intel_psr2_config_valid() fails (José Roberto de Souza) - netlink: reset network and mac headers in netlink_dump() (Eric Dumazet) - net: mscc: ocelot: fix broken IP multicast flooding (Vladimir Oltean) - net: dsa: hellcreek: Calculate checksums in tagger (Kurt Kanzenbach) - can: isotp: stop timeout monitoring when no first frame was sent (Oliver Hartkopp) - ipv6: make ip6_rt_gc_expire an atomic_t (Eric Dumazet) - l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu (David Ahern) - net/sched: cls_u32: fix possible leak in u32_init_knode() (Eric Dumazet) - net: restore alpha order to Ethernet devices in config (Stephen Hemminger) - ip6_gre: Fix skb_under_panic in __gre6_xmit() (Peilin Ye) - ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit() (Peilin Ye) - net/packet: fix packet_sock xmit return value checking (Hangbin Liu) - net/smc: Fix sock leak when release after smc_shutdown() (Tony Lu) - rxrpc: Restore removed timer deletion (David Howells) - ALSA: hda/hdmi: fix warning about PCM count when used with SOF (Kai Vehmanen) - igc: Fix suspending when PTM is active (Vinicius Costa Gomes) - igc: Fix BUG: scheduling while atomic (Sasha Neftin) - igc: Fix infinite loop in release_swfw_sync (Sasha Neftin) - spi: cadence-quadspi: fix incorrect supports_op() return value (Matthias Schiffer) - esp: limit skb_page_frag_refill use to a single page (Sabrina Dubroca) - spi: spi-mtk-nor: initialize spi controller after resume (Allen-KH Cheng) - dmaengine: dw-edma: Fix unaligned 64bit access (Herve Codina) - dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources (zhangqilong) - dmaengine: imx-sdma: Fix error checking in sdma_event_remap (Miaoqian Lin) - dmaengine: idxd: fix device cleanup on disable (Dave Jiang) - ASoC: codecs: wcd934x: do not switch off SIDO Buck when codec is in use (Srinivas Kandagatla) - ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component (Miaoqian Lin) - ASoC: rk817: Use devm_clk_get() in rk817_platform_probe (Miaoqian Lin) - ASoC: topology: Correct error handling in soc_tplg_dapm_widget_create() (Peter Ujfalusi) - ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek (Mark Brown) - ALSA: hda/realtek: Add quirk for Clevo NP70PNP (Tim Crawford) - ALSA: usb-audio: Clear MIDI port active flag after draining (Takashi Iwai) - net/sched: cls_u32: fix netns refcount changes in u32_change() (Eric Dumazet) - scsi: ufs: core: scsi_get_lba() error fix (Peter Wang) - gfs2: assign rgrp glock before compute_bitstructs (Bob Peterson) - mm, kfence: support kmem_dump_obj() for KFENCE objects (Marco Elver) - perf tools: Fix segfault accessing sample_id xyarray (Adrian Hunter) - mm: page_alloc: fix building error on -Werror=array-compare (Xiongwei Song) - etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead (Kees Cook) - arm64/mm: drop HAVE_ARCH_PFN_VALID (Anshuman Khandual) - dma-mapping: remove bogus test for pfn_valid from dma_map_resource (Mike Rapoport) - xfs: return errors in xfs_fs_sync_fs (Darrick J. Wong) - vfs: make sync_filesystem return errors from ->sync_fs (Darrick J. Wong) - block: simplify the block device syncing code (Christoph Hellwig) - block: remove __sync_blockdev (Christoph Hellwig) - fs: remove __sync_filesystem (Christoph Hellwig) - LTS version: v5.15.35 (Jack Vogel) - ax25: Fix UAF bugs in ax25 timers (Duoming Zhou) - ax25: Fix NULL pointer dereferences in ax25 timers (Duoming Zhou) - ax25: fix NPD bug in ax25_disconnect (Duoming Zhou) - ax25: fix UAF bug in ax25_send_control() (Duoming Zhou) - ax25: Fix refcount leaks caused by ax25_cb_del() (Duoming Zhou) - ax25: fix UAF bugs of net_device caused by rebinding operation (Duoming Zhou) - ax25: fix reference count leaks of ax25_dev (Duoming Zhou) - ax25: add refcount in ax25_dev to avoid UAF bugs (Duoming Zhou) - cpufreq: intel_pstate: ITMT support for overclocked system (Srinivas Pandruvada) - net: ipa: fix a build dependency (Alex Elder) - soc: qcom: aoss: Fix missing put_device call in qmp_get (Miaoqian Lin) - cpu/hotplug: Remove the 'cpu' member of cpuhp_cpu_state (Steven Price) - drm/i915: Sunset igpu legacy mmap support based on GRAPHICS_VER_FULL (Matt Roper) - dma-direct: avoid redundant memory sync for swiotlb (Chao Gao) - timers: Fix warning condition in __run_timers() (Anna-Maria Behnsen) - dt-bindings: net: snps: remove duplicate name (Dongjin Yang) - i2c: pasemi: Wait for write xfers to finish (Martin Povišer) - smp: Fix offline cpu check in flush_smp_call_function_queue() (Nadav Amit) - i2c: dev: check return value when calling dev_set_name() (Andy Shevchenko) - dm integrity: fix memory corruption when tag_size is less than digest size (Mikulas Patocka) - ARM: davinci: da850-evm: Avoid NULL pointer dereference (Nathan Chancellor) - tick/nohz: Use WARN_ON_ONCE() to prevent console saturation (Paul Gortmaker) - genirq/affinity: Consider that CPUs on nodes can be unbalanced (Rei Yamamoto) - x86/tsx: Disable TSX development mode at boot (Pawan Gupta) - x86/tsx: Use MSR_TSX_CTRL to clear CPUID bits (Pawan Gupta) - drm/amdgpu: Enable gfxoff quirk on MacBook Pro (Tomasz Moń) - drm/amd/display: don't ignore alpha property on pre-multiplied mode (Melissa Wen) - ipv6: fix panic when forwarding a pkt with no in6 dev (Nicolas Dichtel) - nl80211: correctly check NL80211_ATTR_REG_ALPHA2 size (Johannes Berg) - ALSA: pcm: Test for "silence" field in struct "pcm_format_data" (Fabio M. De Francesco) - ALSA: hda/realtek: add quirk for Lenovo Thinkpad X12 speakers (Tao Jin) - ALSA: hda/realtek: Add quirk for Clevo PD50PNT (Tim Crawford) - btrfs: mark resumed async balance as writing (Naohiro Aota) - btrfs: fix root ref counts in error handling in btrfs_get_root_ref (Jia-Ju Bai) - ath9k: Fix usage of driver-private space in tx_info (Toke Høiland-Jørgensen) - ath9k: Properly clear TX status area before reporting to mac80211 (Toke Høiland-Jørgensen) - cifs: verify that tcon is valid before dereference in cifs_kill_sb (Ronnie Sahlberg) - gcc-plugins: latent_entropy: use /dev/urandom (Jason A. Donenfeld) - memory: renesas-rpc-if: fix platform-device leak in error path (Johan Hovold) - SUNRPC: Fix NFSD's request deferral on RDMA transports (Chuck Lever) - KVM: x86/mmu: Resolve nx_huge_pages when kvm.ko is loaded (Sean Christopherson) - mm: kmemleak: take a full lowmem check in kmemleak_*_phys() (Patrick Wang) - mm: fix unexpected zeroed page mapping with zram swap (Minchan Kim) - mm, page_alloc: fix build_zonerefs_node() (Juergen Gross) - mm/secretmem: fix panic when growing a memfd_secret (Axel Rasmussen) - perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov) - io_uring: use nospec annotation for more indexes (Pavel Begunkov) - io_uring: zero tag on rsrc removal (Pavel Begunkov) - drivers: net: slip: fix NPD bug in sl_tx_timeout() (Duoming Zhou) - scsi: mvsas: Add PCI ID of RocketRaid 2640 (Alexey Galakhov) - scsi: mpt3sas: Fail reset operation if config request timed out (Sreekanth Reddy) - drbd: set QUEUE_FLAG_STABLE_WRITES (Christoph Böhmwalder) - drm/amd/display: Fix allocate_mst_payload assert on resume (Roman Li) - drm/amd/display: Revert FEC check in validation (Martin Leung) - drm/amd/display: Enable power gating before init_pipes (Roman Li) - spi: cadence-quadspi: fix protocol setup for non-1-1-X operations (Matthias Schiffer) - myri10ge: fix an incorrect free for skb in myri10ge_sw_tso (Xiaomeng Tong) - net: usb: aqc111: Fix out-of-bounds accesses in RX fixup (Marcin Kozlowski) - Drivers: hv: balloon: Disable balloon and hot-add accordingly (Boqun Feng) - net: axienet: setup mdio unconditionally (Andy Chiu) - tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry (Steve Capper) - arm64: alternatives: mark patch_alternative() as noinstr (Joey Gouly) - regulator: wm8994: Add an off-on delay for WM8994 variant (Jonathan Bakker) - gpu: ipu-v3: Fix dev_dbg frequency output (Leo Ruan) - ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs (Christian Lamparter) - net: micrel: fix KS8851_MLL Kconfig (Randy Dunlap) - scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 (Tyrel Datwyler) - scsi: lpfc: Fix queue failures when recovering from PCI parity error (James Smart) - scsi: target: tcmu: Fix possible page UAF (Xiaoguang Wang) - Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer (Michael Kelley) - PCI: hv: Propagate coherence from VMbus device to PCI device (Michael Kelley) - Drivers: hv: vmbus: Deactivate sysctl_record_panic_msg by default in isolated guests (Andrea Parri (Microsoft)) - drm/amdkfd: Check for potential null return of kmalloc_array() (QintaoShen) - drm/amdgpu/vcn: improve vcn dpg stop procedure (Tianci Yin) - drm/amdkfd: Fix Incorrect VMIDs passed to HWS (Tushar Patel) - drm/amd/display: Update VTEM Infopacket definition (Leo (Hanghong) Ma) - drm/amd/display: FEC check in timing validation (Chiawen Huang) - drm/amd/display: fix audio format not updated after edid updated (Charlene Liu) - drm/amdgpu/gmc: use PCI BARs for APUs in passthrough (Alex Deucher) - drm/amdgpu: conduct a proper cleanup of PDB bo (Guchun Chen) - btrfs: do not warn for free space inode in cow_file_range (Josef Bacik) - btrfs: fix fallocate to use file_modified to update permissions consistently (Darrick J. Wong) - drm/amd: Add USBC connector ID (Aurabindo Pillai) - block: fix offset/size check in bio_trim() (Ming Lei) - net: bcmgenet: Revert "Use stronger register read/writes to assure ordering" (Jeremy Linton) - vfio/pci: Fix vf_token mechanism when device-specific VF drivers are used (Jason Gunthorpe) - dm mpath: only use ktime_get_ns() in historical selector (Khazhismel Kumykov) - cifs: potential buffer overflow in handling symlinks (Harshit Mogalapalli) - nfc: nci: add flush_workqueue to prevent uaf (Lin Ma) - net: ftgmac100: access hardware register after clock ready (Dylan Hung) - macvlan: Fix leaking skb in source mode with nodst option (Martin Willi) - perf tools: Fix misleading add event PMU debug message (Adrian Hunter) - ALSA: usb-audio: Limit max buffer and period sizes per time (Takashi Iwai) - ALSA: usb-audio: Increase max buffer size (Takashi Iwai) - testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set (Athira Rajeev) - io_uring: verify pad field is 0 in io_get_ext_arg (Dylan Yudaken) - io_uring: verify that resv2 is 0 in io_uring_rsrc_update2 (Dylan Yudaken) - io_uring: move io_uring_rsrc_update2 validation (Dylan Yudaken) - ALSA: mtpav: Don't call card private_free at probe error path (Takashi Iwai) - ALSA: ad1889: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - netfilter: nf_tables: nft_parse_register can return a negative value (Antoine Tenart) - sctp: Initialize daddr on peeled off socket (Petr Malat) - scsi: iscsi: Fix unbound endpoint error handling (Mike Christie) - scsi: iscsi: Fix conn cleanup and stop race during iscsid restart (Mike Christie) - scsi: iscsi: Fix endpoint reuse regression (Mike Christie) - scsi: iscsi: Fix offload conn cleanup when iscsid restarts (Mike Christie) - scsi: iscsi: Move iscsi_ep_disconnect() (Mike Christie) - scsi: pm80xx: Enable upper inbound, outbound queues (Ajish Koshy) - scsi: pm80xx: Mask and unmask upper interrupt vectors 32-63 (Ajish Koshy) - net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() (Karsten Graul) - drm/msm/dp: add fail safe mode outside of event_mutex context (Kuogee Hsieh) - drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init() (Stephen Boyd) - drm/msm: Fix range size vs end confusion (Rob Clark) - netfilter: nft_socket: make cgroup match work in input too (Florian Westphal) - cfg80211: hold bss_lock while updating nontrans_list (Rameshkumar Sundaram) - net/sched: taprio: Check if socket flags are valid (Benedikt Spranger) - net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link (Dinh Nguyen) - net: dsa: felix: suppress -EPROBE_DEFER errors (Michael Walle) - net/sched: fix initialization order when updating chain 0 head (Marcelo Ricardo Leitner) - mlxsw: i2c: Fix initialization error flow (Vadim Pasternak) - net: mdio: don't defer probe forever if PHY IRQ provider is missing (Vladimir Oltean) - cifs: release cached dentries only if mount is complete (Shyam Prasad N) - gpiolib: acpi: use correct format characters (Linus Torvalds) - veth: Ensure eth header is in skb's linear part (Guillaume Nault) - net/sched: flower: fix parsing of ethertype following VLAN header (Vlad Buslov) - SUNRPC: Fix the svc_deferred_event trace class (Chuck Lever) - media: rockchip/rga: do proper error checking in probe (Kyle Copperfield) - firmware: arm_scmi: Fix sorting of retrieved clock rates (Cristian Marussi) - Revert "ath11k: mesh: add support for 256 bitmap in blockack frames in 11ax" (Anilkumar Kolli) - memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe (Miaoqian Lin) - firmware: arm_scmi: Remove clear channel call on the TX channel (Cristian Marussi) - drm/msm: Add missing put_task_struct() in debugfs path (Rob Clark) - ALSA: nm256: Don't call card private_free at probe error path (Takashi Iwai) - ALSA: usb-audio: Cap upper limits of buffer/period bytes for implicit fb (Takashi Iwai) - ALSA: via82xx: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: sonicvibes: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: sc6000: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: rme96: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: rme9652: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: rme32: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: riptide: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: oxygen: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: maestro3: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: lx6464es: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: lola: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: korg1212: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: intel_hdmi: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: intel8x0: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: ice1724: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: hdspm: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: hdsp: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: galaxy: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: fm801: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: es1968: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: es1938: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: ens137x: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: emu10k1x: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: echoaudio: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: cs5535audio: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: cs4281: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: cmipci: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: ca0106: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: bt87x: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: azt3328: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: aw2: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: au88x0: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: atiixp: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: als4000: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: als300: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: ali5451: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: sis7019: Fix the missing error handling (Takashi Iwai) - ALSA: core: Add snd_card_free_on_error() helper (Takashi Iwai) - btrfs: release correct delalloc amount in direct IO write path (Naohiro Aota) - net: ipa: request IPA register values be retained (Alex Elder) - dt-bindings: net: qcom,ipa: add optional qcom,qmp property (Alex Elder) - soc: qcom: aoss: Expose send for generic usecase (Deepak Kumar Singh) - btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups() (Nathan Chancellor) - btrfs: remove no longer used counter when reading data page (Filipe Manana) - btrfs: remove unused parameter nr_pages in add_ra_bio_pages() (Qu Wenruo) - ACPI: processor: idle: fix lockup regression on 32-bit ThinkPad T40 (Woody Suwalski) - ACPI: processor idle: Allow playing dead in C3 state (Richard Gong) - ACPI: processor idle: Check for architectural support for LPI (Mario Limonciello) - cpuidle: PSCI: Move the has_lpi check to the beginning of the function (Mario Limonciello) - hamradio: remove needs_free_netdev to avoid UAF (Lin Ma) - hamradio: defer 6pack kfree after unregister_netdev (Lin Ma) - drm/amd/display: Fix p-state allow debug index on dcn31 (Nicholas Kazlauskas) - drm/amd/display: Add pstate verification and recovery for DCN31 (Nicholas Kazlauskas) - LTS version: v5.15.34 (Jack Vogel) - stacktrace: move filter_irq_stacks() to kernel/stacktrace.c (Marco Elver) - powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit (Kefeng Wang) - static_call: Don't make __static_call_return0 static (Christophe Leroy) - mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning (Waiman Long) - irqchip/gic, gic-v3: Prevent GSI to SGI translations (Andre Przywara) - powerpc/64: Fix build failure with allyesconfig in book3s_64_entry.S (Christophe Leroy) - irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling (Marc Zyngier) - sched: Teach the forced-newidle balancer about CPU affinity limitation. (Sebastian Andrzej Siewior) - x86/bug: Prevent shadowing in __WARN_FLAGS (Vincent Mailhol) - Drivers: hv: vmbus: Replace smp_store_mb() with virt_store_mb() (Andrea Parri (Microsoft)) - mm: don't skip swap entry even if zap_details specified (Peter Xu) - selftests: cgroup: Test open-time cgroup namespace usage for migration checks (Tejun Heo) - selftests: cgroup: Test open-time credential usage for migration checks (Tejun Heo) - selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644 (Tejun Heo) - ubsan: remove CONFIG_UBSAN_OBJECT_SIZE (Kees Cook) - Revert "net/mlx5: Accept devlink user input after driver initialization complete" (dann frazier) - dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error" (Vinod Koul) - tools build: Use $(shell ) instead of to get embedded libperl's ccopts (Arnaldo Carvalho de Melo) - tools build: Filter out options and warnings not supported by clang (Arnaldo Carvalho de Melo) - perf python: Fix probing for some clang command line options (Arnaldo Carvalho de Melo) - perf build: Don't use -ffat-lto-objects in the python feature test when building with clang-13 (Arnaldo Carvalho de Melo) - Revert "nbd: fix possible overflow on 'first_minor' in nbd_dev_add()" (Jens Axboe) - SUNRPC: Don't call connect() more than once on a TCP socket (Trond Myklebust) - rtc: mc146818-lib: fix signedness bug in mc146818_get_time() (Dan Carpenter) - selftests/bpf: Fix u8 narrow load checks for bpf_sk_lookup remote_port (Jakub Sitnicki) - bpf: Make remote_port field in struct bpf_sk_lookup 16-bit wide (Jakub Sitnicki) - Revert "selftests: net: Add tls config dependency for tls selftests" (Jakub Kicinski) - net/smc: send directly on setting TCP_NODELAY (Dust Li) - KVM: SVM: Allow AVIC support on system w/ physical APIC ID > 255 (Suravee Suthikulpanit) - drm/amdgpu: don't use BACO for reset in S3 (Alex Deucher) - drm/amdkfd: Create file descriptor after client is added to smi_clients list (Lee Jones) - drm/nouveau/pmu: Add missing callbacks for Tegra devices (Karol Herbst) - drm/amdgpu/vcn: Fix the register setting for vcn1 (Emily Deng) - drm/amdgpu/smu10: fix SoC/fclk units in auto mode (Alex Deucher) - drm/amdgpu/display: change pipe policy for DCN 2.1 (Benjamin Marty) - drm/panel: ili9341: fix optional regulator handling (Daniel Mack) - SUNRPC: Prevent immediate close+reconnect (Trond Myklebust) - amd/display: set backlight only if required (Shirish S) - fbdev: Fix unregistering of framebuffers without device (Thomas Zimmermann) - irqchip/gic-v3: Fix GICR_CTLR.RWP polling (Marc Zyngier) - perf/core: Inherit event_caps (Namhyung Kim) - perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator (Xiaomeng Tong) - ata: sata_dwc_460ex: Fix crash due to OOB write (Christian Lamparter) - perf/x86/intel: Don't extend the pseudo-encoding to GP counters (Kan Liang) - x86/mm/tlb: Revert retpoline avoidance approach (Dave Hansen) - x86/msi: Fix msi message data shadow struct (Reto Buerki) - gpio: Restrict usage of GPIO chip irq members before initialization (Shreeya Patel) - RDMA/hfi1: Fix use-after-free bug for mm struct (Douglas Miller) - arm64: patch_text: Fixup last cpu should be master (Guo Ren) - spi: core: add dma_map_dev for __spi_unmap_msg() (Vinod Koul) - btrfs: prevent subvol with swapfile from being deleted (Kaiwen Hu) - btrfs: fix qgroup reserve overflow the qgroup limit (Ethan Lien) - perf/x86/intel: Update the FRONTEND MSR mask on Sapphire Rapids (Kan Liang) - x86/pm: Save the MSR validity status at context setup (Pawan Gupta) - io_uring: implement compat handling for IORING_REGISTER_IOWQ_AFF (Eugene Syromiatnikov) - io_uring: defer splice/tee file validity check until command issue (Jens Axboe) - io_uring: don't check req->file in io_fsync_prep() (Jens Axboe) - mm/mempolicy: fix mpol_new leak in shared_policy_replace (Miaohe Lin) - mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) (Paolo Bonzini) - highmem: fix checks in __kmap_local_sched_{in,out} (Max Filippov) - lz4: fix LZ4_decompress_safe_partial read out of bound (Guo Xuenan) - mmc: core: Fixup support for writeback-cache for eMMC and SD (Michael Wu) - mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is complete (Wolfram Sang) - mmc: mmci: stm32: correctly check all elements of sg list (Yann Gautier) - mmc: block: Check for errors after write on SPI (Christian Löhle) - Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning" (Pali Rohár) - scsi: ufs: ufs-pci: Add support for Intel MTL (Adrian Hunter) - scsi: mpt3sas: Fix use after free in _scsih_expander_node_remove() (Damien Le Moal) - arm64: Add part number for Arm Cortex-A78AE (Chanho Park) - perf session: Remap buf if there is no space for event (Denis Nikitin) - perf tools: Fix perf's libperf_print callback (Adrian Hunter) - perf: arm-spe: Fix perf report --mem-mode (James Clark) - iommu/omap: Fix regression in probe for NULL pointer dereference (Tony Lindgren) - SUNRPC: svc_tcp_sendmsg() should handle errors from xdr_alloc_bvec() (Trond Myklebust) - SUNRPC: Handle low memory situations in call_status() (Trond Myklebust) - SUNRPC: Handle ENOMEM in call_transmit_status() (Trond Myklebust) - io_uring: don't touch scm_fp_list after queueing skb (Pavel Begunkov) - io_uring: nospec index for tags on files update (Pavel Begunkov) - scsi: ufs: ufshpb: Fix a NULL check on list iterator (Xiaomeng Tong) - drbd: Fix five use after free bugs in get_initial_state (Lv Yunlong) - bpf: Support dual-stack sockets in bpf_tcp_check_syncookie (Maxim Mikityanskiy) - spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op() (Kamal Dasu) - qede: confirm skb is allocated before using (Jamie Bainbridge) - net: phy: mscc-miim: reject clause 45 register accesses (Michael Walle) - net: sfc: fix using uninitialized xdp tx_queue (Taehee Yoo) - rxrpc: fix a race in rxrpc_exit_net() (Eric Dumazet) - net: openvswitch: fix leak of nested actions (Ilya Maximets) - net: ethernet: mv643xx: Fix over zealous checking of_get_mac_address() (Andrew Lunn) - net: openvswitch: don't send internal clone attribute to the userspace. (Ilya Maximets) - ice: xsk: fix VSI state check in ice_xsk_wakeup() (Maciej Fijalkowski) - ice: synchronize_rcu() when terminating rings (Maciej Fijalkowski) - ipv6: Fix stats accounting in ip6_pkt_drop (David Ahern) - ice: Do not skip not enabled queues in ice_vc_dis_qs_msg (Anatolii Gerasymenko) - ice: Set txq_teid to ICE_INVAL_TEID on ring creation (Anatolii Gerasymenko) - dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe (Miaoqian Lin) - sctp: count singleton chunks in assoc user stats (Jamie Bainbridge) - IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition (Niels Dossche) - IB/cm: Cancel mad on the DREQ event when the state is MRA_REP_RCVD (Mark Zhang) - RDMA/mlx5: Add a missing update of cache->last_add (Aharon Landau) - RDMA/mlx5: Don't remove cache MRs when a delay is needed (Aharon Landau) - sfc: Do not free an empty page_ring (Martin Habets) - bnxt_en: Prevent XDP redirect from running when stopping TX queue (Ray Jui) - bnxt_en: reserve space inside receive page for skb_shared_info (Andy Gospodarek) - bnxt_en: Synchronize tx when xdp redirects happen on same ring (Pavan Chebbi) - arch/arm64: Fix topology initialization for core scheduling (Phil Auld) - regulator: atc260x: Fix missing active_discharge_on setting (Axel Lin) - regulator: rtq2134: Fix missing active_discharge_on setting (Axel Lin) - drm/imx: dw_hdmi-imx: Fix bailout in error cases of probe (Liu Ying) - drm/imx: Fix memory leak in imx_pd_connector_get_modes (José Expósito) - drm/imx: imx-ldb: Check for null pointer after calling kmemdup (Jiasheng Jiang) - net: stmmac: Fix unset max_speed difference between DT and non-DT platforms (Chen-Yu Tsai) - net: ipv4: fix route with nexthop object delete warning (Nikolay Aleksandrov) - mctp: Fix check for dev_hard_header() result (Matt Johnston) - ice: Clear default forwarding VSI during VSI release (Ivan Vecera) - skbuff: fix coalescing for page_pool fragment recycling (Jean-Philippe Brucker) - vrf: fix packet sniffing for traffic originating from ip tunnels (Eyal Birger) - net/tls: fix slab-out-of-bounds bug in decrypt_internal (Ziyang Xuan) - net: sfc: add missing xdp queue reinitialization (Taehee Yoo) - vdpa: mlx5: prevent cvq work from hogging CPU (Jason Wang) - vdpa/mlx5: Propagate link status from device to vdpa driver (Eli Cohen) - scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() (Christophe JAILLET) - scsi: core: Fix sbitmap depth in scsi_realloc_sdev_budget_map() (John Garry) - scsi: sr: Fix typo in CDROM(CLOSETRAY|EJECT) handling (Kevin Groeneveld) - NFSv4: fix open failure with O_ACCMODE flag (ChenXiaoSong) - Revert "NFSv4: Handle the special Linux file open access mode" (ChenXiaoSong) - Drivers: hv: vmbus: Fix potential crash on module unload (Guilherme G. Piccoli) - drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() (Dan Carpenter) - rtc: mc146818-lib: fix RTC presence check (Mateusz Jończyk) - rtc: Check return value from mc146818_get_time() (Mateusz Jończyk) - rtc: mc146818-lib: change return values of mc146818_get_time() (Mateusz Jończyk) - mm: fix race between MADV_FREE reclaim and blkdev direct IO read (Mauricio Faria de Oliveira) - parisc: Fix patch code locking and flushing (John David Anglin) - parisc: Fix CPU affinity for Lasi, WAX and Dino chips (Helge Deller) - selftests: net: Add tls config dependency for tls selftests (Naresh Kamboju) - NFS: Avoid writeback threads getting stuck in mempool_alloc() (Trond Myklebust) - NFS: nfsiod should not block forever in mempool_alloc() (Trond Myklebust) - SUNRPC: Fix socket waits for write buffer space (Trond Myklebust) - jfs: prevent NULL deref in diFree (Haimin Zhang) - virtio_console: eliminate anonymous module_init & module_exit (Randy Dunlap) - serial: samsung_tty: do not unlock port->lock for uart_write_wakeup() (Jiri Slaby) - x86/Kconfig: Do not allow CONFIG_X86_X32_ABI=y with llvm-objcopy (Nathan Chancellor) - x86: Annotate call_on_stack() (Peter Zijlstra) - NFS: swap-out must always use STABLE writes. (NeilBrown) - NFS: swap IO handling is slightly different for O_DIRECT IO (NeilBrown) - SUNRPC: remove scheduling boost for "SWAPPER" tasks. (NeilBrown) - SUNRPC/xprt: async tasks mustn't block waiting for memory (NeilBrown) - SUNRPC/call_alloc: async tasks mustn't block waiting for memory (NeilBrown) - clk: Enforce that disjoints limits are invalid (Maxime Ripard) - clk: ti: Preserve node in ti_dt_clocks_register() (Tony Lindgren) - habanalabs: fix possible memory leak in MMU DR fini (Ohad Sharabi) - NFSv4: Protect the state recovery thread against direct reclaim (Trond Myklebust) - NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify() (Xin Xiong) - w1: w1_therm: fixes w1_seq for ds28ea00 sensors (Lucas Denefle) - staging: wfx: fix an error handling in wfx_init_common() (Xiaoke Wang) - opp: Expose of-node's name in debugfs (Viresh Kumar) - cpufreq: CPPC: Fix performance/frequency conversion (Pierre Gondois) - clk: rockchip: drop CLK_SET_RATE_PARENT from dclk_vop* on rk3568 (Sascha Hauer) - phy: amlogic: meson8b-usb2: fix shared reset control use (Amjad Ouled-Ameur) - phy: amlogic: meson8b-usb2: Use dev_err_probe() (Amjad Ouled-Ameur) - phy: amlogic: phy-meson-gxl-usb2: fix shared reset controller use (Amjad Ouled-Ameur) - staging: vchiq_core: handle NULL result of find_service_by_handle (Stefan Wahren) - staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instances (Stefan Wahren) - clk: si5341: fix reported clk_rate when output divider is 2 (Adam Wujek) - minix: fix bug when opening a file with O_DIRECT (Qinghua Jin) - init/main.c: return 1 from handled __setup() functions (Randy Dunlap) - lib/Kconfig.debug: add ARCH dependency for FUNCTION_ALIGN option (Feng Tang) - ceph: fix memory leak in ceph_readdir when note_last_dentry returns error (Xiubo Li) - ceph: fix inode reference leakage in ceph_get_snapdir() (Xiubo Li) - netlabel: fix out-of-bounds memory accesses (Wang Yufen) - netfilter: conntrack: revisit gc autotuning (Florian Westphal) - Bluetooth: Fix use after free in hci_send_acl (Luiz Augusto von Dentz) - MIPS: ingenic: correct unit node address (Krzysztof Kozlowski) - xtensa: fix DTC warning unit_address_format (Max Filippov) - mt76: fix monitor mode crash with sdio driver (Deren Wu) - usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm (H. Nikolaus Schaller) - net: sfp: add 2500base-X quirk for Lantech SFP module (Michael Walle) - net/mlx5e: Remove overzealous validations in netlink EEPROM query (Gal Pressman) - net: limit altnames to 64k total (Jakub Kicinski) - net: account alternate interface name memory (Jakub Kicinski) - riscv: Fixed misaligned memory access. Fixed pointer comparison. (Michael T. Kloos) - can: etas_es58x: es58x_fd_rx_event_msg(): initialize rx_event_msg before calling es58x_check_msg_len() (Vincent Mailhol) - can: isotp: set default value for N_As to 50 micro seconds (Oliver Hartkopp) - scsi: libfc: Fix use after free in fc_exch_abts_resp() (Jianglei Nie) - powerpc/secvar: fix refcount leak in format_show() (Hangyu Hua) - powerpc/64e: Tie PPC_BOOK3E_64 to PPC_FSL_BOOK3E (Michael Ellerman) - MIPS: fix fortify panic when copying asm exception handlers (Alexander Lobakin) - PCI: endpoint: Fix misused goto label (Li Chen) - bnxt_en: Eliminate unintended link toggle during FW reset (Michael Chan) - Bluetooth: use memset avoid memory leaks (Minghao Chi (CGEL ZTE)) - Bluetooth: Fix not checking for valid hdev on bt_dev_{info,warn,err,dbg} (Luiz Augusto von Dentz) - tuntap: add sanity checks about msg_controllen in sendmsg (Harold Huang) - macvtap: advertise link netns via netlink (Sven Eckelmann) - mips: ralink: fix a refcount leak in ill_acc_of_setup() (Hangyu Hua) - net/smc: correct settings of RMB window update limit (Dust Li) - scsi: hisi_sas: Limit users changing debugfs BIST count value (Xiang Chen) - scsi: hisi_sas: Free irq vectors in order for v3 HW (Qi Liu) - scsi: aha152x: Fix aha152x_setup() __setup handler return value (Randy Dunlap) - mt76: mt7615: Fix assigning negative values to unsigned variable (Yang Li) - powerpc/64s/hash: Make hash faults work in NMI context (Nicholas Piggin) - mt76: mt7915: fix injected MPDU transmission to not use HW A-MSDU (Johan Almbladh) - scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req() (Damien Le Moal) - scsi: pm8001: Fix tag leaks on error (Damien Le Moal) - scsi: pm8001: Fix task leak in pm8001_send_abort_all() (Damien Le Moal) - scsi: pm8001: Fix pm8001_mpi_task_abort_resp() (Damien Le Moal) - scsi: pm8001: Fix pm80xx_pci_mem_copy() interface (Damien Le Moal) - vfio/pci: Stub vfio_pci_vga_rw when !CONFIG_VFIO_PCI_VGA (Alex Williamson) - drm/amdkfd: make CRAT table missing message informational only (Alex Deucher) - dm: requeue IO if mapping table not yet available (Mike Snitzer) - dm ioctl: prevent potential spectre v1 gadget (Jordy Zomer) - ipv4: Invalidate neighbour for broadcast address upon address addition (Ido Schimmel) - drm/msm/dsi: Remove spurious IRQF_ONESHOT flag (Daniel Thompson) - iwlwifi: mvm: move only to an enabled channel (Miri Korenblit) - iwlwifi: mvm: Correctly set fragmented EBS (Ilan Peer) - usb: dwc3: pci: Set the swnode from inside dwc3_pci_quirks() (Hans de Goede) - net/mlx5e: Disable TX queues before registering the netdev (Maxim Mikityanskiy) - power: supply: axp288-charger: Set Vhold to 4.4V (Hans de Goede) - powerpc/set_memory: Avoid spinlock recursion in change_page_attr() (Christophe Leroy) - scsi: mpi3mr: Fix memory leaks (Sreekanth Reddy) - scsi: mpi3mr: Fix reporting of actual data transfer size (Sreekanth Reddy) - PCI: pciehp: Add Qualcomm quirk for Command Completed erratum (Manivannan Sadhasivam) - tcp: Don't acquire inet_listen_hashbucket::lock with disabled BH. (Sebastian Andrzej Siewior) - PCI: endpoint: Fix alignment fault error in copy tests (Hou Zhiqiang) - usb: ehci: add pci device support for Aspeed platforms (Neal Liu) - iommu/arm-smmu-v3: fix event handling soft lockup (Zhou Guanghui) - PCI: aardvark: Fix support for MSI interrupts (Pali Rohár) - scsi: smartpqi: Fix kdump issue when controller is locked up (Mahesh Rajashekhara) - drm/amdgpu: Fix recursive locking warning (Rajneesh Bhardwaj) - powerpc: Set crashkernel offset to mid of RMA region (Sourabh Jain) - net: initialize init_net earlier (Eric Dumazet) - ipv6: make mc_forwarding atomic (Eric Dumazet) - libbpf: Fix build issue with llvm-readelf (Yonghong Song) - cfg80211: don't add non transmitted BSS to 6GHz scanned channels (Avraham Stern) - mt76: dma: initialize skip_unmap in mt76_dma_rx_fill (Lorenzo Bianconi) - mt76: mt7921: fix crash when startup fails. (Ben Greear) - power: supply: axp20x_battery: properly report current when discharging (Evgeny Boger) - drm/v3d: fix missing unlock (Yongzhi Liu) - scsi: bfa: Replace snprintf() with sysfs_emit() (Yang Guang) - scsi: mvsas: Replace snprintf() with sysfs_emit() (Yang Guang) - bpf: Make dst_port field in struct bpf_sock 16-bit wide (Jakub Sitnicki) - drm/bridge: Add missing pm_runtime_put_sync (Yongzhi Liu) - net/smc: Send directly when TCP_CORK is cleared (Tony Lu) - ath11k: mhi: use mhi_sync_power_up() (Kalle Valo) - ath11k: pci: fix crash on suspend if board file is not found (Kalle Valo) - ath11k: fix kernel panic during unload/load ath11k modules (Venkateswara Naralasetty) - powerpc: dts: t104xrdb: fix phy type for FMAN 4/5 (Maxim Kiselev) - drm/amdkfd: Don't take process mutex for svm ioctls (Philip Yang) - ptp: replace snprintf with sysfs_emit (Yang Guang) - usb: cdnsp: fix cdnsp_decode_trb function to properly handle ret value (Pawel Laszczak) - usb: gadget: tegra-xudc: Fix control endpoint's definitions (Wayne Chang) - usb: gadget: tegra-xudc: Do not program SPARAM (Wayne Chang) - drm/amd/display: Use PSR version selected during set_psr_caps (Nicholas Kazlauskas) - drm/amd/display: Fix memory leak (Yongzhi Liu) - drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj (Xin Xiong) - drm/amd/display: Add signal type check when verify stream backends same (Dale Zhao) - ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 (Zekun Shen) - drm: Add orientation quirk for GPD Win Max (Anisse Astier) - KVM: x86/emulator: Emulate RDPID only if it is enabled in guest (Hou Wenlong) - KVM: x86/pmu: Fix and isolate TSX-specific performance event logic (Like Xu) - KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs (Jim Mattson) - KVM: SVM: Fix kvm_cache_regs.h inclusions for is_guest_mode() (Peter Gonda) - KVM: x86/pmu: Use different raw event masks for AMD and Intel (Jim Mattson) - kfence: limit currently covered allocations when pool nearly full (Marco Elver) - kfence: move saving stack trace of allocations into __kfence_alloc() (Marco Elver) - kfence: count unexpectedly skipped allocations (Marco Elver) - nbd: fix possible overflow on 'first_minor' in nbd_dev_add() (Zhang Wensheng) - nbd: Fix hungtask when nbd_config_put (Ye Bin) - nbd: Fix incorrect error handle when first_minor is illegal in nbd_dev_add (Ye Bin) - nbd: add error handling support for add_disk() (Luis Chamberlain) - rtc: wm8350: Handle error for wm8350_register_irq (Jiasheng Jiang) - um: fix and optimize xor select template for CONFIG64 and timetravel mode (Benjamin Beichler) - lib/logic_iomem: correct fallback config references (Johannes Berg) - LTS version: v5.15.33 (Jack Vogel) - PCI: xgene: Revert "PCI: xgene: Use inbound resources for setup" (Marc Zyngier) - coredump: Use the vma snapshot in fill_files_note (Eric W. Biederman) - coredump/elf: Pass coredump_params into fill_note_info (Eric W. Biederman) - coredump: Remove the WARN_ON in dump_vma_snapshot (Eric W. Biederman) - coredump: Snapshot the vmas in do_coredump (Eric W. Biederman) - iommu/dma: Account for min_align_mask w/swiotlb (David Stevens) - swiotlb: Support aligned swiotlb buffers (David Stevens) - iommu/dma: Check CONFIG_SWIOTLB more broadly (David Stevens) - iommu/dma: Fold _swiotlb helpers into callers (David Stevens) - iommu/dma: Skip extra sync during unmap w/swiotlb (David Stevens) - mmc: rtsx: Fix build errors/warnings for unused variable (Ulf Hansson) - mmc: rtsx: Let MMC core handle runtime PM (Kai-Heng Feng) - n64cart: convert bi_disk to bi_bdev->bd_disk fix build (Jackie Liu) - torture: Make torture.sh help message match reality (Paul E. McKenney) - openvswitch: Fixed nd target mask field in the flow dump. (Martin Varghese) - docs: sysctl/kernel: add missing bit to panic_print (Guilherme G. Piccoli) - um: Fix uml_mconsole stop/go (Anton Ivanov) - arm64: dts: ls1046a: Update i2c node dma properties (Kuldeep Singh) - arm64: dts: ls1043a: Update i2c dma properties (Kuldeep Singh) - ARM: dts: spear13xx: Update SPI dma properties (Kuldeep Singh) - ARM: dts: spear1340: Update serial node properties (Kuldeep Singh) - spi: mediatek: support tick_delay without enhance_timing (Leilk Liu) - media: ov6650: Fix crop rectangle affected by set format (Janusz Krzysztofik) - media: ov6650: Add try support to selection API operations (Janusz Krzysztofik) - perf vendor events: Update metrics for SkyLake Server (Ian Rogers) - ASoC: topology: Allow TLV control to be either read or write (Amadeusz Sławiński) - ASoC: SOF: Intel: Fix build error without SND_SOC_SOF_PCI_DEV (Zheng Bin) - ubi: fastmap: Return error code if memory allocation fails in add_aeb() (Zhihao Cheng) - dt-bindings: pinctrl: pinctrl-microchip-sgpio: Fix example (Horatiu Vultur) - dt-bindings: memory: mtk-smi: No need mediatek,larb-id for mt8167 (Yong Wu) - dt-bindings: spi: mxic: The interrupt property is not mandatory (Miquel Raynal) - dt-bindings: mtd: nand-controller: Fix a comment in the examples (Miquel Raynal) - dt-bindings: mtd: nand-controller: Fix the reg property description (Miquel Raynal) - mmc: rtsx: Use pm_runtime_{get,put}() to handle runtime PM (Kai-Heng Feng) - bpf: Fix comment for helper bpf_current_task_under_cgroup() (Hengqi Chen) - bpf: Adjust BPF stack helper functions to accommodate skip > 0 (Namhyung Kim) - af_unix: Support POLLPRI for OOB. (Kuniyuki Iwashima) - mm/usercopy: return 1 from hardened_usercopy __setup() handler (Randy Dunlap) - mm/memcontrol: return 1 from cgroup.memory __setup() handler (Randy Dunlap) - ARM: 9187/1: JIVE: fix return value of __setup handler (Randy Dunlap) - mm/mmap: return 1 from stack_guard_gap __setup() handler (Randy Dunlap) - net: preserve skb_end_offset() in skb_unclone_keeptruesize() (Eric Dumazet) - net: add skb_set_end_offset() helper (Eric Dumazet) - tracing: Have type enum modifications copy the strings (Steven Rostedt (Google)) - Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" (Linus Torvalds) - ASoC: soc-compress: Change the check for codec_dai (Jiasheng Jiang) - arm64: mm: Drop 'const' from conditional arm64_dma_phys_limit definition (Will Deacon) - staging: mt7621-dts: fix pinctrl-0 items to be size-1 items on ethernet (Arınç ÜNAL) - scsi: qla2xxx: Add qla2x00_async_done() for async routines (Saurav Kashyap) - drm/connector: Fix typo in documentation (Maxime Ripard) - proc: bootconfig: Add null pointer check (Lv Ruyi) - can: isotp: restore accidentally removed MSG_PEEK feature (Oliver Hartkopp) - platform/chrome: cros_ec_typec: Check for EC device (Prashant Malani) - spi: Fix Tegra QSPI example (Jon Hunter) - vhost: handle error while adding split ranges to iotlb (Anirudh Rayabharam) - ACPI: CPPC: Avoid out of bounds access when parsing _CPC data (Rafael J. Wysocki) - riscv module: remove (NOLOAD) (Fangrui Song) - io_uring: fix memory leak of uid in files registration (Pavel Begunkov) - block: Fix the maximum minor value is blk_alloc_ext_minor() (Christophe JAILLET) - ARM: iop32x: offset IRQ numbers by 1 (Arnd Bergmann) - ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl (Baokun Li) - ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs (Jiaxin Yu) - pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE() (Jonathan Neuschäfer) - pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR() (Jonathan Neuschäfer) - net: sparx5: uses, depends on BRIDGE or !BRIDGE (Randy Dunlap) - watchdog: rti-wdt: Add missing pm_runtime_disable() in probe function (Miaoqian Lin) - pinctrl: pinconf-generic: Print arguments for bias-pull-* (Chen-Yu Tsai) - watch_queue: Free the page array when watch_queue is dismantled (Eric Dumazet) - crypto: arm/aes-neonbs-cbc - Select generic cbc and aes (Herbert Xu) - mailbox: imx: fix wakeup failure from freeze mode (Robin Gong) - rxrpc: Fix call timer start racing with call destruction (David Howells) - rxrpc: fix some null-ptr-deref bugs in server_key.c (Xiaolong Huang) - net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware (Guangbin Huang) - net: hns3: fix the concurrency between functions reading debugfs (Yufeng Mo) - gfs2: Make sure FITRIM minlen is rounded up to fs block size (Andrew Price) - gfs2: gfs2_setattr_size error path fix (Andreas Gruenbacher) - rtc: check if __rtc_read_time was successful (Tom Rix) - modpost: restore the warning message for missing symbol versions (Masahiro Yamada) - XArray: Update the LRU list in xas_split() (Matthew Wilcox (Oracle)) - can: mcp251xfd: mcp251xfd_register_get_dev_id(): fix return of error value (Tom Rix) - can: mcba_usb: properly check endpoint type (Pavel Skripkin) - can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path (Hangyu Hua) - XArray: Fix xas_create_range() when multi-order entry present (Matthew Wilcox (Oracle)) - wireguard: socket: ignore v6 endpoints when ipv6 is disabled (Jason A. Donenfeld) - wireguard: socket: free skb in send6 when ipv6 is disabled (Wang Hai) - wireguard: queueing: use CFI-safe ptr_ring cleanup function (Jason A. Donenfeld) - nvme: fix the read-only state for zoned namespaces with unsupposed features (Pankaj Raghav) - nvme: allow duplicate NSIDs for private namespaces (Sungup Moon) - ubifs: rename_whiteout: correct old_dir size computing (Baokun Li) - ubifs: Fix to add refcount once page is set private (Zhihao Cheng) - ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() (Zhihao Cheng) - ubifs: setflags: Make dirtied_ino_d 8 bytes aligned (Zhihao Cheng) - ubifs: Rectify space amount budget for mkdir/tmpfile operations (Zhihao Cheng) - ubifs: Fix 'ui->dirty' race between do_tmpfile() and writeback work (Zhihao Cheng) - ubifs: Rename whiteout atomically (Zhihao Cheng) - ubifs: Add missing iput if do_tmpfile() failed in rename whiteout (Zhihao Cheng) - ubifs: Fix deadlock in concurrent rename whiteout and inode writeback (Zhihao Cheng) - ubifs: rename_whiteout: Fix double free for whiteout_ui->data (Zhihao Cheng) - KVM: SVM: fix panic on out-of-bounds guest IRQ (Yi Wang) - KVM: x86: fix sending PV IPI (Li RongQing) - KVM: Prevent module exit until all VMs are freed (David Matlack) - KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated (Vitaly Kuznetsov) - KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() (Vitaly Kuznetsov) - KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq (Vitaly Kuznetsov) - platform: chrome: Split trace include file (Gwendal Grignou) - scsi: qla2xxx: Use correct feature type field during RFF_ID processing (Manish Rangankar) - scsi: qla2xxx: Reduce false trigger to login (Quinn Tran) - scsi: qla2xxx: Fix stuck session of PRLI reject (Quinn Tran) - scsi: qla2xxx: Fix N2N inconsistent PLOGI (Quinn Tran) - scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests (Arun Easi) - scsi: qla2xxx: Fix hang due to session stuck (Quinn Tran) - scsi: qla2xxx: Fix incorrect reporting of task management failure (Quinn Tran) - scsi: qla2xxx: Fix disk failure to rediscover (Quinn Tran) - scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() (Saurav Kashyap) - scsi: qla2xxx: Check for firmware dump already collected (Joe Carnuccio) - scsi: qla2xxx: Add devids and conditionals for 28xx (Joe Carnuccio) - scsi: qla2xxx: Fix T10 PI tag escape and IP guard options for 28XX adapters (Joe Carnuccio) - scsi: qla2xxx: edif: Fix clang warning (Quinn Tran) - scsi: qla2xxx: Fix device reconnect in loop topology (Arun Easi) - scsi: qla2xxx: Fix warning for missing error code (Nilesh Javali) - scsi: qla2xxx: Fix wrong FDMI data for 64G adapter (Bikash Hazarika) - scsi: qla2xxx: Fix premature hw access after PCI error (Quinn Tran) - scsi: qla2xxx: Fix scheduling while atomic (Quinn Tran) - scsi: qla2xxx: Fix warning message due to adisc being flushed (Quinn Tran) - scsi: qla2xxx: Fix stuck session in gpdb (Quinn Tran) - scsi: qla2xxx: Implement ref count for SRB (Saurav Kashyap) - scsi: qla2xxx: Refactor asynchronous command initialization (Daniel Wagner) - drm/i915: Reject unsupported TMDS rates on ICL+ (Ville Syrjälä) - drm/i915: Fix PSF GV point mask when SAGV is not possible (Ville Syrjälä) - drm/i915: Treat SAGV block time 0 as SAGV disabled (Ville Syrjälä) - drm/dp: Fix off-by-one in register cache size (Kees Cook) - powerpc: Fix build errors with newer binutils (Anders Roxell) - powerpc: Add set_memory_{p/np}() and remove set_memory_attr() (Christophe Leroy) - powerpc/lib/sstep: Fix build errors with newer binutils (Anders Roxell) - powerpc/lib/sstep: Fix 'sthcx' instruction (Anders Roxell) - powerpc/kasan: Fix early region not updated correctly (Chen Jingwen) - KVM: x86: hyper-v: HVCALL_SEND_IPI_EX is an XMM fast hypercall (Vitaly Kuznetsov) - KVM: x86: hyper-v: Fix the maximum number of sparse banks for XMM fast TLB flush hypercalls (Vitaly Kuznetsov) - KVM: x86: hyper-v: Drop redundant 'ex' parameter from kvm_hv_flush_tlb() (Vitaly Kuznetsov) - KVM: x86: hyper-v: Drop redundant 'ex' parameter from kvm_hv_send_ipi() (Vitaly Kuznetsov) - KVM: x86/mmu: Check for present SPTE when clearing dirty bit in TDP MMU (Sean Christopherson) - KVM: x86/mmu: Zap _all_ roots when unmapping gfn range in TDP MMU (Sean Christopherson) - KVM: x86/mmu: Move "invalid" check out of kvm_tdp_mmu_get_root() (Sean Christopherson) - KVM: x86: Reinitialize context if host userspace toggles EFER.LME (Paolo Bonzini) - ALSA: hda/realtek: Add alc256-samsung-headphone fixup (Matt Kramer) - media: atomisp: fix bad usage at error handling logic (Mauro Carvalho Chehab) - mmc: host: Return an error when ->enable_sdio_irq() ops is missing (Ulf Hansson) - tracing: Have TRACE_DEFINE_ENUM affect trace event types as well (Steven Rostedt (Google)) - ASoC: Intel: sof_sdw: fix quirks for 2022 HP Spectre x360 13" (Anthony I Gilea) - media: hdpvr: initialize dev->worker at hdpvr_register_videodev (Dongliang Mu) - media: Revert "media: em28xx: add missing em28xx_close_extension" (Pavel Skripkin) - media: i2c: ov5648: Fix lockdep error (Hans de Goede) - video: fbdev: sm712fb: Fix crash in smtcfb_write() (Zheyu Ma) - ASoC: amd: vg: fix for pm resume callback sequence (Vijendar Mukunda) - ARM: mmp: Fix failure to remove sram device (Uwe Kleine-König) - ARM: tegra: tamonten: Fix I2C3 pad setting (Richard Leitner) - lib/test_lockup: fix kernel pointer check for separate address spaces (Arnd Bergmann) - uaccess: fix type mismatch warnings from access_ok() (Arnd Bergmann) - media: cx88-mpeg: clear interrupt status register before streaming video (Daniel González Cabanelas) - media: imx-jpeg: fix a bug of accessing array out of bounds (Ming Qian) - ASoC: soc-core: skip zero num_dai component in searching dai name (Shengjiu Wang) - ARM: dts: bcm2711: Add the missing L1/L2 cache information (Richard Schleich) - video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit (Jing Yao) - video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() (Jing Yao) - video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() (Jing Yao) - arm64: defconfig: build imx-sdma as a module (Marcel Ziswiler) - ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk (Abel Vesa) - ARM: ftrace: avoid redundant loads or clobbering IP (Ard Biesheuvel) - media: atomisp: fix dummy_ptr check to avoid duplicate active_bo (Tsuchiya Yuto) - media: atomisp_gmin_platform: Add DMI quirk to not turn AXP ELDO2 regulator off on some boards (Hans de Goede) - ASoC: madera: Add dependencies on MFD (Charles Keepax) - ARM: dts: bcm2837: Add the missing L1/L2 cache information (Richard Schleich) - ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 (David Heidelberg) - video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit (Yang Guang) - video: fbdev: cirrusfb: check pixclock to avoid divide by zero (George Kennedy) - video: fbdev: w100fb: Reset global state (Evgeny Novikov) - video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow (Tim Gardner) - media: iommu/mediatek: Add device_link between the consumer and the larb devices (Yong Wu) - media: iommu/mediatek: Return ENODEV if the device is NULL (Yong Wu) - media: iommu/mediatek-v1: Free the existed fwspec if the master dev already has (Yong Wu) - media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers (Mirela Rabulea) - ASoC: SOF: Intel: match sdw version on link_slaves_found (Bard Liao) - ASoC: sh: rz-ssi: Make the data structures available before registering the handlers (Lad Prabhakar) - media: ir_toy: free before error exiting (Peiwei Hu) - media: atmel: atmel-isc-base: report frame sizes as full supported range (Eugen Hristev) - media: staging: media: zoran: fix various V4L2 compliance errors (Hans Verkuil) - media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com (Corentin Labbe) - media: staging: media: zoran: move videodev alloc (Corentin Labbe) - ntfs: add sanity check on allocation size (Dongliang Mu) - Adjust cifssb maximum read size (Rohith Surabattula) - f2fs: compress: fix to print raw data size in error path of lz4 decompression (Chao Yu) - f2fs: use spin_lock to avoid hang (Jaegeuk Kim) - btrfs: make search_csum_tree return 0 if we get -EFBIG (Josef Bacik) - btrfs: harden identification of a stale device (Anand Jain) - f2fs: don't get FREEZE lock in f2fs_evict_inode in frozen fs (Jaegeuk Kim) - NFSD: Fix nfsd_breaker_owns_lease() return values (Chuck Lever) - f2fs: fix to do sanity check on curseg->alloc_type (Chao Yu) - ext4: don't BUG if someone dirty pages without asking ext4 first (Theodore Ts'o) - sched/tracing: Report TASK_RTLOCK_WAIT tasks as TASK_UNINTERRUPTIBLE (Valentin Schneider) - ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit (Ritesh Harjani) - ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb (Ritesh Harjani) - locking/lockdep: Iterate lock_classes directly when reading lockdep files (Waiman Long) - atomics: Fix atomic64_{read_acquire,set_release} fallbacks (Mark Rutland) - spi: tegra20: Use of_device_get_match_data() (Minghao Chi) - nvme-tcp: lockdep: annotate in-kernel sockets (Chris Leech) - parisc: Fix handling off probe non-access faults (John David Anglin) - PM: core: keep irq flags in device_pm_check_callbacks() (Dmitry Baryshkov) - ACPI/APEI: Limit printable size of BERT table data (Darren Hart) - Revert "Revert "block, bfq: honor already-setup queue merges"" (Paolo Valente) - lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3 (Paul Menzel) - ACPICA: Avoid walking the ACPI Namespace if it is not there (Rafael J. Wysocki) - bfq: fix use-after-free in bfq_dispatch_request (Zhang Wensheng) - fs/binfmt_elf: Fix AT_PHDR for unusual ELF files (Akira Kawata) - irqchip/nvic: Release nvic_base upon failure (Souptick Joarder (HPE)) - irqchip/qcom-pdc: Fix broken locking (Marc Zyngier) - Fix incorrect type in assignment of ipv6 port for audit (Casey Schaufler) - loop: use sysfs_emit() in the sysfs xxx show() (Chaitanya Kulkarni) - selinux: allow FIOCLEX and FIONCLEX with policy capability (Richard Haines) - arm64: module: remove (NOLOAD) from linker script (Fangrui Song) - selinux: use correct type for context length (Christian Göttsche) - block, bfq: don't move oom_bfqq (Yu Kuai) - crypto: hisilicon/sec - not need to enable sm4 extra mode at HW V3 (Kai Ye) - crypto: xts - Add softdep on ecb (Herbert Xu) - block/bfq_wf2q: correct weight to ioprio (Yahu Gao) - rcu: Mark writes to the rcu_segcblist structure's ->flags field (Paul E. McKenney) - pinctrl: npcm: Fix broken references to chip->parent_device (Marc Zyngier) - gcc-plugins/stackleak: Exactly match strings instead of prefixes (Kees Cook) - crypto: hisilicon/qm - cleanup warning in qm_vf_read_qos (Kai Ye) - regulator: rpi-panel: Handle I2C errors/timing to the Atmel (Dave Stevenson) - LSM: general protection fault in legacy_parse_param (Casey Schaufler) - fs: fix fd table size alignment properly (Linus Torvalds) - lib/test: use after free in register_test_dev_kmod() (Dan Carpenter) - fs: fd tables have to be multiples of BITS_PER_LONG (Linus Torvalds) - net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator (Xiaomeng Tong) - NFSv4/pNFS: Fix another issue with a list iterator pointing to the head (Trond Myklebust) - net/sched: act_ct: fix ref leak when switching zones (Marcelo Ricardo Leitner) - net: prefer nf_ct_put instead of nf_conntrack_put (Florian Westphal) - octeontx2-af: initialize action variable (Tom Rix) - net: sparx5: switchdev: fix possible NULL pointer dereference (Zheng Yongjun) - net/x25: Fix null-ptr-deref caused by x25_disconnect (Duoming Zhou) - qlcnic: dcb: default to returning -EOPNOTSUPP (Tom Rix) - net: sparx5: depends on PTP_1588_CLOCK_OPTIONAL (Randy Dunlap) - net: hns3: clean residual vf config after disable sriov (Peng Li) - NFS: Don't loop forever in nfs_do_recoalesce() (Trond Myklebust) - selftests: test_vxlan_under_vrf: Fix broken test case (Ido Schimmel) - net: phy: broadcom: Fix brcm_fet_config_init() (Florian Fainelli) - net: hns3: refine the process when PF set VF VLAN (Jian Shen) - net: hns3: format the output of the MAC address (Yufeng Mo) - net: hns3: add vlan list lock to protect vlan list (Jian Shen) - net: hns3: fix port base vlan add fail when concurrent with reset (Jian Shen) - net: hns3: fix bug when PF set the duplicate MAC address for VFs (Jian Shen) - net: enetc: report software timestamping via SO_TIMESTAMPING (Vladimir Oltean) - xen: fix is_xen_pmu() (Juergen Gross) - clk: Initialize orphan req_rate (Maxime Ripard) - vsock/virtio: enable VQs early on probe (Stefano Garzarella) - vsock/virtio: read the negotiated features before using VQs (Stefano Garzarella) - vsock/virtio: initialize vdev->priv before using VQs (Stefano Garzarella) - clk: qcom: gcc-msm8994: Fix gpll4 width (Konrad Dybcio) - perf stat: Fix forked applications enablement of counters (Thomas Richter) - kdb: Fix the putarea helper function (Daniel Thompson) - NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error (Olga Kornievskaia) - SUNRPC don't resend a task on an offlined transport (Olga Kornievskaia) - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Pablo Neira Ayuso) - jfs: fix divide error in dbNextAG (Pavel Skripkin) - driver core: dd: fix return value of __setup handler (Randy Dunlap) - firmware: google: Properly state IOMEM dependency (David Gow) - kgdbts: fix return value of __setup handler (Randy Dunlap) - virt: acrn: fix a memory leak in acrn_dev_ioctl() (Xiaolong Huang) - virt: acrn: obtain pa from VMA with PFNMAP flag (Yonghua Huang) - serial: 8250: fix XOFF/XON sending when DMA is used (Ilpo Järvinen) - kgdboc: fix return value of __setup handler (Randy Dunlap) - tty: hvc: fix return value of __setup handler (Randy Dunlap) - pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe (Miaoqian Lin) - pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe (Miaoqian Lin) - pinctrl: microchip-sgpio: lock RMW access (Michael Walle) - pinctrl: microchip sgpio: use reset driver (Horatiu Vultur) - pinctrl: mediatek: paris: Skip custom extra pin config dump for virtual GPIOs (Chen-Yu Tsai) - pinctrl: mediatek: paris: Fix pingroup pin config state readback (Chen-Yu Tsai) - pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get() (Chen-Yu Tsai) - pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback (Chen-Yu Tsai) - pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init (Miaoqian Lin) - staging: mt7621-dts: fix GB-PC2 devicetree (Arınç ÜNAL) - staging: mt7621-dts: fix pinctrl properties for ethernet (Arınç ÜNAL) - staging: mt7621-dts: fix formatting (Arınç ÜNAL) - staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree (Arınç ÜNAL) - NFS: remove unneeded check in decode_devicenotify_args() (Alexey Khoroshilov) - mailbox: imx: fix crash in resume on i.mx8ulp (Robin Gong) - clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver (Miaoqian Lin) - clk: Fix clk_hw_get_clk() when dev is NULL (Maxime Ripard) - clk: clps711x: Terminate clk_div_table with sentinel element (Jonathan Neuschäfer) - clk: hisilicon: Terminate clk_div_table with sentinel element (Jonathan Neuschäfer) - clk: loongson1: Terminate clk_div_table with sentinel element (Jonathan Neuschäfer) - clk: actions: Terminate clk_div_table with sentinel element (Jonathan Neuschäfer) - nvdimm/region: Fix default alignment for small regions (Dan Williams) - remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region (Miaoqian Lin) - remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region (Miaoqian Lin) - remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region (Miaoqian Lin) - dmaengine: hisi_dma: fix MSI allocate fail when reload hisi_dma (Jie Hai) - clk: qcom: clk-rcg2: Update the frac table for pixel clock (Taniya Das) - clk: qcom: clk-rcg2: Update logic to calculate D value for RCG (Taniya Das) - clk: at91: sama7g5: fix parents of PDMCs' GCLK (Codrin Ciubotariu) - clk: imx: off by one in imx_lpcg_parse_clks_from_dt() (Dan Carpenter) - clk: imx7d: Remove audio_mclk_root_clk (Abel Vesa) - dma-debug: fix return value of __setup handlers (Randy Dunlap) - staging: r8188eu: fix endless loop in recv_func (Martin Kaiser) - NFS: Return valid errors from nfs2/3_decode_dirent() (Trond Myklebust) - habanalabs: Add check for pci_enable_device (Jiasheng Jiang) - iio: adc: Add check for devm_request_threaded_irq (Jiasheng Jiang) - serial: 8250: Fix race condition in RTS-after-send handling (Uwe Kleine-König) - NFS: Use of mapping_set_error() results in spurious errors (Trond Myklebust) - serial: 8250_lpss: Balance reference count for PCI DMA device (Andy Shevchenko) - serial: 8250_mid: Balance reference count for PCI DMA device (Andy Shevchenko) - phy: phy-brcm-usb: fixup BCM4908 support (Rafał Miłecki) - phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure}) (Liu Ying) - clk: qcom: ipq8074: Use floor ops for SDCC1 clock (Dirk Buchwalder) - pinctrl: renesas: checker: Fix miscalculation of number of states (Geert Uytterhoeven) - pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel (Geert Uytterhoeven) - staging:iio:adc:ad7280a: Fix handing of device address bit reversing. (Jonathan Cameron) - serial: 8250_aspeed_vuart: add PORT_ASPEED_VUART port type (Zev Weiss) - iio: mma8452: Fix probe failing when an i2c_device_id is used (Hans de Goede) - dmaengine: idxd: restore traffic class defaults after wq reset (Dave Jiang) - dmaengine: idxd: change bandwidth token to read buffers (Dave Jiang) - dmaengine: idxd: check GENCAP config support for gencfg register (Dave Jiang) - clk: qcom: ipq8074: fix PCI-E clock oops (Robert Marko) - soundwire: intel: fix wrong register name in intel_shim_wake (Libin Yang) - cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse (Luca Weiss) - misc: alcor_pci: Fix an error handling path (Christophe JAILLET) - fsi: Aspeed: Fix a potential double free (Christophe JAILLET) - pps: clients: gpio: Propagate return value from pps_gpio_probe (Robert Hancock) - pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() (Uwe Kleine-König) - fsi: scom: Remove retries in indirect scoms (Joel Stanley) - fsi: scom: Fix error handling (Joel Stanley) - mxser: fix xmit_buf leak in activate when LSR == 0xff (Jiri Slaby) - staging: r8188eu: release_firmware is not called if allocation fails (Michael Straube) - staging: r8188eu: convert DBG_88E_LEVEL call in hal/rtl8188e_hal_init.c (Phillip Potter) - kernel/resource: fix kfree() of bootmem memory again (Miaohe Lin) - drivers: ethernet: cpsw: fix panic when interrupt coaleceing is set via ethtool (Sondhauß, Jan) - ice: don't allow to run ice_send_event_to_aux() in atomic ctx (Alexander Lobakin) - ice: fix 'scheduling while atomic' on aux critical err interrupt (Alexander Lobakin) - mfd: asic3: Add missing iounmap() on error asic3_mfd_probe (Miaoqian Lin) - tipc: fix the timer expires after interval 100ms (Hoang Le) - net: dsa: fix panic on shutdown if multi-chip tree failed to probe (Vladimir Oltean) - openvswitch: always update flow key after nat (Aaron Conole) - tcp: ensure PMTU updates are processed during fastopen (Jakub Kicinski) - net: bcmgenet: Use stronger register read/writes to assure ordering (Jeremy Linton) - PCI: Avoid broken MSI on SB600 USB devices (Bjorn Helgaas) - selftests/bpf/test_lirc_mode2.sh: Exit with proper code (Hangbin Liu) - powerpc/pseries: Fix use after free in remove_phb_dynamic() (Michael Ellerman) - i2c: mux: demux-pinctrl: do not deactivate a master that is not active (Peter Rosin) - netfilter: conntrack: Add and use nf_ct_set_auto_assign_helper_warned() (Phil Sutter) - i2c: meson: Fix wrong speed use from probe (Lucas Tanure) - af_netlink: Fix shift out of bounds in group mask calculation (Petr Machata) - ipv4: Fix route lookups when handling ICMP redirects and PMTU updates (Guillaume Nault) - Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt (Yake Yang) - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (Niels Dossche) - Bluetooth: hci_uart: add missing NULL check in h5_enqueue (Pavel Skripkin) - selftests/bpf: Fix error reporting from sock_fields programs (Jakub Sitnicki) - af_unix: Fix some data-races around unix_sk(sk)->oob_skb. (Kuniyuki Iwashima) - ibmvnic: fix race between xmit and reset (Sukadev Bhattiprolu) - bareudp: use ipv6_mod_enabled to check if IPv6 enabled (Hangbin Liu) - can: isotp: support MSG_TRUNC flag when reading from socket (Oliver Hartkopp) - can: isotp: return -EADDRNOTAVAIL when reading from unbound socket (Oliver Hartkopp) - can: isotp: sanitize CAN ID checks in isotp_bind() (Oliver Hartkopp) - mt76: mt7921: fix mt7921_queues_acq implementation (Lorenzo Bianconi) - netfilter: flowtable: Fix QinQ and pppoe support for inet table (Pablo Neira Ayuso) - drm/i915/display: Fix HPD short pulse handling for eDP (José Roberto de Souza) - USB: storage: ums-realtek: fix error code in rts51x_read_mem() (Dan Carpenter) - samples/bpf, xdpsock: Fix race when running for fix duration of time (Niklas Söderlund) - bpf, sockmap: Fix double uncharge the mem of sk_msg (Wang Yufen) - bpf, sockmap: Fix more uncharged while msg has more_data (Wang Yufen) - bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full (Wang Yufen) - bpf, sockmap: Fix memleak in sk_psock_queue_msg (Wang Yufen) - RDMA/mlx5: Fix memory leak in error flow for subscribe event routine (Yongzhi Liu) - Revert "RDMA/core: Fix ib_qp_usecnt_dec() called when error" (Leon Romanovsky) - RDMA/irdma: Prevent some integer underflows (Dan Carpenter) - power: ab8500_chargalg: Use CLOCK_MONOTONIC (Linus Walleij) - mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init (Xin Xiong) - MIPS: pgalloc: fix memory leak caused by pgd_free() (Yaliang Wang) - MIPS: RB532: fix return value of __setup handler (Randy Dunlap) - mips: cdmm: Fix refcount leak in mips_cdmm_phys_base (Miaoqian Lin) - ath10k: Fix error handling in ath10k_setup_msa_resources (Miaoqian Lin) - vxcan: enable local echo for sent CAN frames (Oliver Hartkopp) - powerpc: 8xx: fix a return value error in mpc8xx_pic_init (Hangyu Hua) - scsi: mpt3sas: Fix incorrect 4GB boundary check (Sreekanth Reddy) - platform/x86: huawei-wmi: check the return value of device_create_file() (Jia-Ju Bai) - selftests/bpf: Make test_lwt_ip_encap more stable and faster (Felix Maurer) - libbpf: Unmap rings when umem deleted (lic121) - mfd: mc13xxx: Add check for mc13xxx_irq_request (Jiasheng Jiang) - powerpc/64s: Don't use DSISR for SLB faults (Michael Ellerman) - powerpc/sysdev: fix incorrect use to determine if list is empty (Jakob Koschel) - MIPS: Sanitise Cavium switch cases in TLB handler synthesizers (Maciej W. Rozycki) - mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n (Randy Dunlap) - drm/msm/a6xx: Fix missing ARRAY_SIZE() check (Rob Clark) - net: axienet: fix RX ring refill allocation failure handling (Robert Hancock) - PCI: Reduce warnings on possible RW1C corruption (Mark Tomlinson) - RDMA/core: Fix ib_qp_usecnt_dec() called when error (Yajun Deng) - IB/hfi1: Allow larger MTU without AIP (Mike Marciniszyn) - power: supply: wm8350-power: Add missing free in free_charger_irq (Jiasheng Jiang) - power: supply: wm8350-power: Handle error for wm8350_register_irq (Jiasheng Jiang) - i2c: xiic: Make bus names unique (Robert Hancock) - hv_balloon: rate-limit "Unhandled message" warning (Anssi Hannula) - KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() (Hou Wenlong) - KVM: x86: Fix emulation in writing cr8 (Zhenzhong Duan) - powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit (Michael Ellerman) - powerpc/mm/numa: skip NUMA_NO_NODE onlining in parse_numa_properties() (Daniel Henrique Barboza) - libbpf: Skip forward declaration when counting duplicated type names (Xu Kuohai) - gpu: host1x: Fix a memory leak in 'host1x_remove()' (Christophe JAILLET) - RDMA/irdma: Remove incorrect masking of PD (Mustafa Ismail) - RDMA/irdma: Fix Passthrough mode in VM (Mustafa Ismail) - RDMA/irdma: Fix netdev notifications for vlan's (Mustafa Ismail) - xsk: Fix race at socket teardown (Magnus Karlsson) - bpf, arm64: Feed byte-offset into bpf line info (Hou Tao) - bpf, arm64: Call build_prologue() first in first JIT pass (Hou Tao) - drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt (Nishanth Menon) - scsi: hisi_sas: Change permission of parameter prot_mask (Xiang Chen) - power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return (Hans de Goede) - drm/tegra: Fix reference leak in tegra_dsi_ganged_probe (Miaoqian Lin) - ext2: correct max file size computing (Zhang Yi) - power: supply: sbs-charger: Don't cancel work that is not initialized (Christophe JAILLET) - TOMOYO: fix __setup handlers return values (Randy Dunlap) - drm/amd/display: Remove vupdate_int_entry definition (Maíra Canal) - RDMA/mlx5: Fix the flow of a miss in the allocation of a cache ODP MR (Aharon Landau) - scsi: pm8001: Fix abort all task initialization (Damien Le Moal) - scsi: pm8001: Fix NCQ NON DATA command completion handling (Damien Le Moal) - scsi: pm8001: Fix NCQ NON DATA command task initialization (Damien Le Moal) - scsi: pm8001: Fix le32 values handling in pm80xx_chip_sata_req() (Damien Le Moal) - scsi: pm8001: Fix le32 values handling in pm80xx_chip_ssp_io_req() (Damien Le Moal) - scsi: pm8001: Fix payload initialization in pm80xx_encrypt_update() (Damien Le Moal) - scsi: pm8001: Fix le32 values handling in pm80xx_set_sas_protocol_timer_config() (Damien Le Moal) - scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() (Damien Le Moal) - scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() (Damien Le Moal) - scsi: pm8001: Fix command initialization in pm80XX_send_read_log() (Damien Le Moal) - scsi: fnic: Fix a tracing statement (Bart Van Assche) - vfio/pci: wake-up devices around reset functions (Abhishek Sahu) - vfio/pci: fix memory leak during D3hot to D0 transition (Abhishek Sahu) - dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS (Aashish Sharma) - drm/msm/dpu: fix dp audio condition (Dmitry Baryshkov) - drm/msm/dpu: add DSPP blocks teardown (Dmitry Baryshkov) - drm/msm/dsi/phy: fix 7nm v4.0 settings for C-PHY mode (Dmitry Baryshkov) - drm/msm/dsi: Use "ref" fw clock instead of global name for VCO parent (Marijn Suijten) - drm/msm/dp: always add fail-safe mode into connector mode list (Kuogee Hsieh) - drm/msm/dp: stop link training after link training 2 failed (Kuogee Hsieh) - drm/msm/dp: populate connector of struct dp_panel (Kuogee Hsieh) - mtd: rawnand: pl353: Set the nand chip node as the flash node (Amit Kumar Mahapatra) - iwlwifi: mvm: Fix an error code in iwl_mvm_up() (Dan Carpenter) - iwlwifi: Fix -EIO error code that is never returned (Colin Ian King) - iwlwifi: yoyo: remove DBGI_SRAM address reset writing (Rotem Saado) - iwlwifi: mvm: align locking in D3 test debugfs (Johannes Berg) - iwlwifi: mvm: don't iterate unadded vifs when handling FW SMPS req (Luca Coelho) - iwlwifi: mvm: Don't call iwl_mvm_sta_from_mac80211() with NULL sta (Takashi Iwai) - selftests: mptcp: add csum mib check for mptcp_connect (Geliang Tang) - dax: make sure inodes are flushed before destroy cache (Tong Zhang) - libbpf: Fix memleak in libbpf_netlink_recv() (Andrii Nakryiko) - drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug (Roman Li) - drm/amd/pm: enable pm sysfs write for one VF mode (Yiqing Yao) - bpftool: Fix the error when lookup in no-btf maps (Yinjun Zhang) - drm/bridge: anx7625: Fix overflow issue on reading EDID (Pin-Yen Lin) - iommu/ipmmu-vmsa: Check for error num after setting mask (Jiasheng Jiang) - HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports (Dmitry Torokhov) - power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init (Miaoqian Lin) - libbpf: Use dynamically allocated buffer when receiving netlink messages (Toke Høiland-Jørgensen) - drm/bridge: dw-hdmi: use safe format when first in bridge chain (Neil Armstrong) - libbpf: Fix compilation warning due to mismatched printf format (Andrii Nakryiko) - net:enetc: allocate CBD ring data memory using DMA coherent methods (Po Liu) - cxl/regs: Fix size of CXL Capability Header Register (Jonathan Cameron) - cxl/core: Fix cxl_probe_component_regs() error message (Dan Williams) - libbpf: Fix signedness bug in btf_dump_array_data() (Dan Carpenter) - RDMA/rxe: Check the last packet by RXE_END_MASK (Xiao Yang) - PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge (Pali Rohár) - PCI: aardvark: Fix reading MSI interrupt number (Pali Rohár) - igb: refactor XDP registration (Corinna Vinschen) - igc: avoid kernel warning when changing RX ring parameters (Corinna Vinschen) - mtd: mchp48l640: Add SPI ID table (Mark Brown) - mtd: mchp23k256: Add SPI ID table (Mark Brown) - i2c: bcm2835: Fix the error handling in 'bcm2835_i2c_probe()' (Christophe JAILLET) - i2c: bcm2835: Use platform_get_irq() to get the interrupt (Lad Prabhakar) - net: asix: add proper error handling of usb read errors (Pavel Skripkin) - livepatch: Fix build failure on 32 bits processors (Christophe Leroy) - scripts/dtc: Call pkg-config POSIXly correct (Thomas Bracht Laumann Jespersen) - mac80211: limit bandwidth in HE capabilities (Johannes Berg) - mac80211: Remove a couple of obsolete TODO (Ilan Peer) - net: dsa: mv88e6xxx: Enable port policy support on 6097 (Tobias Waldekranz) - ptp: unregister virtual clocks when unregistering physical clock. (Miroslav Lichvar) - mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update (Lorenzo Bianconi) - mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update (Lorenzo Bianconi) - mt76: mt7615: fix a leftover race in runtime-pm (Lorenzo Bianconi) - mt76: mt7921: fix a leftover race in runtime-pm (Lorenzo Bianconi) - mt76: mt7915: use proper aid value in mt7915_mcu_sta_basic_tlv (Lorenzo Bianconi) - mt76: mt7915: use proper aid value in mt7915_mcu_wtbl_generic_tlv in sta mode (Lorenzo Bianconi) - mt76: connac: fix sta_rec_wtbl tag len (Lorenzo Bianconi) - powerpc/perf: Don't use perf_hw_context for trace IMC PMU (Athira Rajeev) - KVM: PPC: Book3S HV: Check return value of kvmppc_radix_init (Fabiano Rosas) - powerpc: dts: t1040rdb: fix ports names for Seville Ethernet switch (Maxim Kiselev) - ray_cs: Check ioremap return value (Jiasheng Jiang) - power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe (Miaoqian Lin) - ixgbe: respect metadata on XSK Rx to skb (Alexander Lobakin) - ixgbe: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Alexander Lobakin) - ixgbe: pass bi->xdp to ixgbe_construct_skb_zc() directly (Alexander Lobakin) - igc: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Alexander Lobakin) - i40e: respect metadata on XSK Rx to skb (Alexander Lobakin) - i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Alexander Lobakin) - selftests/net: timestamping: Fix bind_phc check (Gerhard Engleder) - KVM: PPC: Fix vmx/vsx mixup in mmio emulation (Fabiano Rosas) - RDMA/core: Set MR type in ib_reg_user_mr (Maor Gottlieb) - ath9k_htc: fix uninit value bugs (Pavel Skripkin) - selftests/bpf/test_xdp_redirect_multi: use temp netns for testing (Hangbin Liu) - selftests/bpf: Normalize XDP section names in selftests (Andrii Nakryiko) - net: phy: at803x: move page selection fix to config_init (Robert Hancock) - drm/amd/pm: return -ENOTSUPP if there is no get_dpm_ultimate_freq function (Tom Rix) - drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() (Zhou Qingyang) - drm/nouveau/acr: Fix undefined behavior in nvkm_acr_hsfw_load_bl() (Zhou Qingyang) - ionic: Don't send reset commands if FW isn't running (Brett Creeley) - ionic: start watchdog after all is setup (Shannon Nelson) - ionic: fix type complaint in ionic_dev_cmd_clean() (Shannon Nelson) - drm/edid: Split deep color modes between RGB and YUV444 (Maxime Ripard) - drm/edid: Don't clear formats if using deep color (Maxime Ripard) - mtd: rawnand: gpmi: fix controller timings setting (Dario Binacchi) - mtd: onenand: Check for error irq (Jiasheng Jiang) - Bluetooth: hci_serdev: call init_rwsem() before p->open() (Pavel Skripkin) - Bluetooth: btintel: Fix WBS setting for Intel legacy ROM products (Tedd Ho-Jeong An) - selftests: bpf: Fix bind on used port (Felix Maurer) - drm/selftests/test-drm_dp_mst_helper: Fix memory leak in sideband_msg_req_encode_decode (José Expósito) - bpf: Fix UAF due to race between btf_try_get_module and load_module (Kumar Kartikeya Dwivedi) - udmabuf: validate ubuf->pagecount (Pavel Skripkin) - bpftool: Only set obj->skeleton on complete success (Wei Fu) - libbpf: Fix possible NULL pointer dereference when destroying skeleton (Yafang Shao) - drm/panfrost: Check for error num after setting mask (Jiasheng Jiang) - drm/v3d/v3d_drv: Check for error num after setting mask (Jiasheng Jiang) - ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern (Wen Gong) - drm: bridge: adv7511: Fix ADV7535 HPD enablement (Jagan Teki) - drm/bridge: nwl-dsi: Fix PM disable depth imbalance in nwl_dsi_probe (Miaoqian Lin) - drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe (Miaoqian Lin) - drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev (Miaoqian Lin) - drm/meson: Fix error handling when afbcd.ops->init fails (Martin Blumenstingl) - drm/meson: split out encoder from meson_dw_hdmi (Neil Armstrong) - drm/meson: Make use of the helper function devm_platform_ioremap_resourcexxx() (Cai Huoqing) - drm/meson: osd_afbcd: Add an exit callback to struct meson_afbcd_ops (Martin Blumenstingl) - ARM: configs: multi_v5_defconfig: re-enable DRM_PANEL and FB_xxx (Andre Przywara) - ARM: configs: multi_v5_defconfig: re-enable CONFIG_V4L_PLATFORM_DRIVERS (Andre Przywara) - ASoC: amd: Fix reference to PCM buffer address (Meng Tang) - ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data (Miaoqian Lin) - ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe (Miaoqian Lin) - ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe (Miaoqian Lin) - mmc: davinci_mmc: Handle error for clk_enable (Jiasheng Jiang) - ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe (Miaoqian Lin) - ASoC: SOF: Intel: enable DMI L1 for playback streams (Kai Vehmanen) - ASoC: imx-es8328: Fix error return code in imx_es8328_probe() (Wang Wensheng) - ASoC: fsl_spdif: Disable TX clock when stop (Shengjiu Wang) - ASoC: mxs: Fix error handling in mxs_sgtl5000_probe (Miaoqian Lin) - ASoC: dmaengine: do not use a NULL prepare_slave_config() callback (Codrin Ciubotariu) - ASoC: rk817: Fix missing clk_disable_unprepare() in rk817_platform_probe (Miaoqian Lin) - ASoC: mediatek: mt8192-mt6359: Fix error handling in mt8192_mt6359_dev_probe (Miaoqian Lin) - ASoC: mediatek: use of_device_get_match_data() (Tzung-Bi Shih) - ASoC: SOF: Add missing of_node_put() in imx8m_probe (Miaoqian Lin) - ASoC: rockchip: i2s: Fix missing clk_disable_unprepare() in rockchip_i2s_probe (Miaoqian Lin) - ASoC: atmel: Fix error handling in snd_proto_probe (Miaoqian Lin) - ivtv: fix incorrect device_caps for ivtvfb (Hans Verkuil) - media: saa7134: fix incorrect use to determine if list is empty (Jakob Koschel) - video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of (Miaoqian Lin) - ASoC: fsi: Add check for clk_enable (Jiasheng Jiang) - ASoC: wm8350: Handle error for wm8350_register_irq (Jiasheng Jiang) - ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe (Miaoqian Lin) - media: vidtv: Check for null return of vzalloc (Jiasheng Jiang) - media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED (Dafna Hirschfeld) - m68k: coldfire/device.c: only build for MCF_EDMA when h/w macros are defined (Randy Dunlap) - arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly (Rob Herring) - ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction (Takashi Sakamoto) - memory: emif: check the pointer temp in get_device_details() (Jia-Ju Bai) - memory: emif: Add check for setup_interrupts (Jiasheng Jiang) - ASoC: soc-compress: prevent the potentially use of null pointer (Jiasheng Jiang) - ASoC: dwc-i2s: Handle errors for clk_enable (Jiasheng Jiang) - ASoC: atmel_ssc_dai: Handle errors for clk_enable (Jiasheng Jiang) - ASoC: mxs-saif: Handle errors for clk_enable (Jiasheng Jiang) - printk: fix return value of printk.devkmsg __setup handler (Randy Dunlap) - arm64: dts: broadcom: Fix sata nodename (Frank Wunderlich) - arm64: dts: ns2: Fix spi-cpol and spi-cpha property (Kuldeep Singh) - ALSA: spi: Add check for clk_enable() (Jiasheng Jiang) - ASoC: ti: davinci-i2s: Add check for clk_enable() (Jiasheng Jiang) - mmc: sdhci_am654: Fix the driver data of AM64 SoC (Aswath Govindraju) - soc: mediatek: pm-domains: Add wakeup capacity support in power domain (Chun-Jie Chen) - ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp() (Jia-Ju Bai) - uaccess: fix nios2 and microblaze get_user_8() (Arnd Bergmann) - vsprintf: Fix %pK with kptr_restrict == 0 (Christophe Leroy) - lib: uninline simple_strntoull() as well (Alexey Dobriyan) - selftests/lkdtm: Add UBSAN config (Muhammad Usama Anjum) - media: ov5640: Fix set format, v4l2_mbus_pixelcode not updated (Mirela Rabulea) - media: v4l2-core: Initialize h264 scaling matrix (Nicolas Dufresne) - ASoC: codecs: wcd934x: fix return value of wcd934x_rx_hph_mode_put (Srinivas Kandagatla) - ASoC: codecs: wcd934x: fix kcontrol max values (Srinivas Kandagatla) - ASoC: codecs: wcd938x: fix kcontrol max values (Srinivas Kandagatla) - ASoC: codecs: wc938x: fix accessing array out of bounds for enum type (Srinivas Kandagatla) - ASoC: codecs: va-macro: fix accessing array out of bounds for enum type (Srinivas Kandagatla) - ASoC: codecs: rx-macro: fix accessing array out of bounds for enum type (Srinivas Kandagatla) - ASoC: codecs: rx-macro: fix accessing compander for aux (Srinivas Kandagatla) - media: cedrus: h264: Fix neighbour info buffer size (Jernej Skrabec) - media: cedrus: H265: Fix neighbour info buffer size (Jernej Skrabec) - media: usb: go7007: s2250-board: fix leak in probe() (Dan Carpenter) - media: em28xx: initialize refcount before kref_get (Dongliang Mu) - media: ti-vpe: cal: Fix a NULL pointer dereference in cal_ctx_v4l2_init_formats() (Zhou Qingyang) - media: video/hdmi: handle short reads of hdmi info frame. (Tom Rix) - media: mexon-ge2d: fixup frames size in registers (Neil Armstrong) - ARM: dts: imx: Add missing LVDS decoder on M53Menlo (Marek Vasut) - vsprintf: Fix potential unaligned access (Andy Shevchenko) - ARM: dts: sun8i: v3s: Move the csi1 block to follow address order (Paul Kocialkowski) - soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe (Miaoqian Lin) - firmware: ti_sci: Fix compilation failure when CONFIG_TI_SCI_PROTOCOL is not defined (Christophe JAILLET) - arm64: dts: qcom: sm8350: Correct TCS configuration for apps rsc (Maulik Shah) - arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc (Maulik Shah) - arm64: dts: broadcom: bcm4908: use proper TWD binding (Rafał Miłecki) - arm64: dts: qcom: sm8250: fix PCIe bindings to follow schema (Dmitry Baryshkov) - arm64: dts: qcom: sdm845: fix microphone bias properties and values (David Heidelberg) - soc: qcom: aoss: remove spurious IRQF_ONESHOT flags (Daniel Thompson) - soc: qcom: ocmem: Fix missing put_device() call in of_get_ocmem (Miaoqian Lin) - soc: qcom: rpmpd: Check for null return of devm_kcalloc (Jiasheng Jiang) - ARM: dts: qcom: ipq4019: fix sleep clock (Pavel Kubelun) - firmware: qcom: scm: Remove reassignment to desc following initializer (Marijn Suijten) - ARM: dts: Fix OpenBMC flash layout label addresses (Zev Weiss) - video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() (Dan Carpenter) - video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe() (Dan Carpenter) - video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() (Wang Hai) - video: fbdev: controlfb: Fix COMPILE_TEST build (YueHaibing) - video: fbdev: matroxfb: set maxvram of vbG200eW to the same as vbG200 to avoid black screen (Z. Liu) - media: aspeed: Correct value for h-total-pixels (Jammy Huang) - media: ov5648: Don't pack controls struct (Sakari Ailus) - media: v4l: Avoid unaligned access warnings when printing 4cc modifiers (Sakari Ailus) - media: ov6650: Fix set format try processing path (Janusz Krzysztofik) - media: hantro: Fix overfill bottom register field name (Chen-Yu Tsai) - media: meson: vdec: potential dereference of null pointer (Jiasheng Jiang) - media: coda: Fix missing put_device() call in coda_get_vdoa_data (Miaoqian Lin) - ASoC: simple-card-utils: Set sysclk on all components (Robert Hancock) - ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting (Robert Hancock) - ASoC: codecs: Check for error pointer after calling devm_regmap_init_mmio (Jiasheng Jiang) - ASoC: sh: rz-ssi: Drop calling rz_ssi_pio_recv() recursively (Lad Prabhakar) - media: atmel: atmel-sama7g5-isc: fix ispck leftover (Eugen Hristev) - media: bttv: fix WARNING regression on tunerless devices (Ondrej Zary) - media: imx: imx8mq-mipi_csi2: fix system resume (Martin Kepplinger) - media: imx: imx8mq-mipi-csi2: remove wrong irq config write operation (Martin Kepplinger) - media: mtk-vcodec: potential dereference of null pointer (Jiasheng Jiang) - media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls (Chen-Yu Tsai) - media: staging: media: imx: imx7-mipi-csis: Make subdev name unique (Laurent Pinchart) - media: camss: vfe-170: fix "VFE halt timeout" error (Jonathan Marek) - media: camss: csid-170: set the right HALT_CMD when disabled (Jonathan Marek) - media: camss: csid-170: don't enable unused irqs (Jonathan Marek) - media: camss: csid-170: fix non-10bit formats (Jonathan Marek) - media: staging: media: zoran: fix usage of vb2_dma_contig_set_max_seg_size (Corentin Labbe) - pinctrl: samsung: Remove EINT handler for Exynos850 ALIVE and CMGP gpios (Sam Protsenko) - kunit: make kunit_test_timeout compatible with comment (Peng Liu) - drivers/base/memory: add memory block to memory group after registration succeeded (David Hildenbrand) - selftests, x86: fix how check_cc.sh is being invoked (Guillaume Tucker) - f2fs: fix compressed file start atomic write may cause data corruption (Fengnan Chang) - btrfs: fix unexpected error path when reflinking an inline extent (Filipe Manana) - f2fs: fix to avoid potential deadlock (Chao Yu) - sched/rt: Plug rt_mutex_setprio() vs push_rt_task() race (Valentin Schneider) - sched/cpuacct: Fix charge percpu cpuusage (Chengming Zhou) - nfsd: more robust allocation failure handling in nfsd_file_cache_init (Amir Goldstein) - f2fs: fix missing free nid in f2fs_handle_failed_inode (Jaegeuk Kim) - sched/fair: Improve consistency of allowed NUMA balance calculations (Mel Gorman) - perf/x86/intel/pt: Fix address filter config for 32-bit kernel (Adrian Hunter) - perf/core: Fix address filter parser for multiple filters (Adrian Hunter) - rseq: Remove broken uapi field layout on 32-bit little endian (Mathieu Desnoyers) - sched/uclamp: Fix iowait boost escaping uclamp restriction (Qais Yousef) - sched/core: Export pelt_thermal_tp (Qais Yousef) - sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa (Bharata B Rao) - f2fs: fix to enable ATGC correctly via gc_idle sysfs interface (Chao Yu) - watch_queue: Actually free the watch (David Howells) - watch_queue: Fix NULL dereference in error cleanup (David Howells) - io_uring: terminate manual loop iterator loop correctly for non-vecs (Jens Axboe) - io_uring: don't check unrelated req->open.how in accept request (Jens Axboe) - clocksource: acpi_pm: fix return value of __setup handler (Randy Dunlap) - hwmon: (pmbus) Add Vin unit off handling (Brandon Wyman) - hwrng: nomadik - Change clk_disable to clk_disable_unprepare (Miaoqian Lin) - crypto: ccree - Fix use after free in cc_cipher_exit() (Jianglei Nie) - crypto: ccp - ccp_dmaengine_unregister release dma channels (Dāvis Mosāns) - ACPI: APEI: fix return value of __setup handlers (Randy Dunlap) - KEYS: trusted: Fix trusted key backends when building as module (Andreas Rammhold) - arm64: prevent instrumentation of bp hardening callbacks (Mark Rutland) - clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_init() (Guillaume Ranquet) - clocksource/drivers/timer-microchip-pit64b: Use notrace (Claudiu Beznea) - clocksource/drivers/exynos_mct: Handle DTS with higher number of interrupts (Krzysztof Kozlowski) - clocksource/drivers/exynos_mct: Refactor resources allocation (Marek Szyprowski) - clocksource/drivers/timer-ti-dm: Fix regression from errata i940 fix (Drew Fustini) - crypto: vmx - add missing dependencies (Petr Vorel) - crypto: gemini - call finalize with bh disabled (Corentin Labbe) - crypto: amlogic - call finalize with bh disabled (Corentin Labbe) - crypto: sun8i-ce - call finalize with bh disabled (Corentin Labbe) - crypto: sun8i-ss - call finalize with bh disabled (Corentin Labbe) - hwrng: atmel - disable trng on failure path (Claudiu Beznea) - spi: spi-zynqmp-gqspi: Handle error for dma_set_mask (Jiasheng Jiang) - PM: suspend: fix return value of __setup handler (Randy Dunlap) - PM: hibernate: fix __setup handler error handling (Randy Dunlap) - block: don't delete queue kobject before its children (Eric Biggers) - nvme: fix the check for duplicate unique identifiers (Christoph Hellwig) - nvme: cleanup __nvme_check_ids (Christoph Hellwig) - hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING (Armin Wolf) - hwmon: (pmbus) Add mutex to regulator ops (Patrick Rudolph) - spi: pxa2xx-pci: Balance reference count for PCI DMA device (Andy Shevchenko) - crypto: hisilicon/sec - fix the aead software fallback for engine (Kai Ye) - crypto: ccree - don't attempt 0 len DMA mappings (Gilad Ben-Yossef) - EVM: fix the evm= __setup handler return value (Randy Dunlap) - audit: log AUDIT_TIME_* records only from rules (Richard Guy Briggs) - crypto: rockchip - ECB does not need IV (Corentin Labbe) - selftests/sgx: Treat CC as one argument (Muhammad Usama Anjum) - selftests/x86: Add validity check and allow field splitting (Muhammad Usama Anjum) - blk-cgroup: set blkg iostat after percpu stat aggregation (Chengming Zhou) - arm64/mm: avoid fixmap race condition when create pud mapping (Jianyong Wu) - stack: Constrain and fix stack offset randomization with Clang builds (Marco Elver) - spi: tegra210-quad: Fix missin IRQ check in tegra_qspi_probe (Miaoqian Lin) - spi: tegra114: Add missing IRQ check in tegra_spi_probe (Miaoqian Lin) - crypto: octeontx2 - remove CONFIG_DM_CRYPT check (Shijith Thotton) - thermal: int340x: Check for NULL after calling kmemdup() (Jiasheng Jiang) - selinux: Fix selinux_sb_mnt_opts_compat() (Scott Mayhew) - crypto: mxs-dcp - Fix scatterlist processing (Tomas Paukrt) - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Herbert Xu) - crypto: sun8i-ss - really disable hash on A80 (Corentin Labbe) - hwrng: cavium - HW_RANDOM_CAVIUM should depend on ARCH_THUNDER (Geert Uytterhoeven) - hwrng: cavium - Check health status while reading random data (Sunil Goutham) - crypto: ccp - Ensure psp_ret is always init'd in __sev_platform_init_locked() (Peter Gonda) - selinux: check return value of sel_make_avc_files (Christian Göttsche) - selinux: access superblock_security_struct in LSM blob way (GONG, Ruiqi) - regulator: qcom_smd: fix for_each_child.cocci warnings (kernel test robot) - PCI: xgene: Revert "PCI: xgene: Fix IB window setup" (Marc Zyngier) - PCI: pciehp: Clear cmd_busy bit in polling mode (Liguang Zhang) - PCI: imx6: Allow to probe when dw_pcie_wait_for_link() fails (Fabio Estevam) - drm/i915/gem: add missing boundary check in vm_access (Mastan Katragadda) - drm/i915/opregion: check port number bounds for SWSCI display power state (Jani Nikula) - brcmfmac: pcie: Fix crashes due to early IRQs (Hector Martin) - brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio (Hector Martin) - brcmfmac: pcie: Declare missing firmware files in pcie.c (Hector Martin) - brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path (Hector Martin) - brcmfmac: firmware: Allocate space for default boardrev in nvram (Hector Martin) - drm/fb-helper: Mark screen buffers in system memory with FBINFO_VIRTFB (Thomas Zimmermann) - drm/nouveau/backlight: Just set all backlight types as RAW (Lyude Paul) - drm/nouveau/backlight: Fix LVDS backlight detection on some laptops (Lyude Paul) - drm/syncobj: flatten dma_fence_chains on transfer (Christian König) - xtensa: fix xtensa_wsr always writing 0 (Max Filippov) - xtensa: fix stop_machine_cpuslocked call in patch_text (Max Filippov) - xtensa: define update_mmu_tlb function (Max Filippov) - btrfs: verify the tranisd of the to-be-written dirty extent buffer (Qu Wenruo) - btrfs: extend locking to all space_info members accesses (Niels Dossche) - btrfs: zoned: mark relocation as writing (Naohiro Aota) - media: davinci: vpif: fix unbalanced runtime PM enable (Johan Hovold) - media: davinci: vpif: fix unbalanced runtime PM get (Johan Hovold) - media: venus: venc: Fix h264 8x8 transform control (Stanimir Varbanov) - media: venus: hfi_cmds: List HDR10 property as unsupported for v1 and v3 (Stanimir Varbanov) - media: gpio-ir-tx: fix transmit with long spaces on Orange Pi PC (Sean Young) - DEC: Limit PMAX memory probing to R3k systems (Maciej W. Rozycki) - PM: domains: Fix sleep-in-atomic bug caused by genpd_debug_remove() (Shawn Guo) - bcache: fixup multiple threads crash (Mingzhe Zou) - crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete() (Eric Biggers) - crypto: rsa-pkcs1pad - restore signature length check (Eric Biggers) - crypto: rsa-pkcs1pad - correctly get hash from source scatterlist (Eric Biggers) - crypto: rsa-pkcs1pad - only allow with rsa (Eric Biggers) - exec: Force single empty string when argv is empty (Kees Cook) - lib/raid6/test: fix multiple definition linking error (Dirk Müller) - thermal: int340x: Increase bitmap size (Srinivas Pandruvada) - pstore: Don't use semaphores in always-atomic-context code (Jann Horn) - carl9170: fix missing bit-wise or operator for tx_params (Colin Ian King) - mgag200 fix memmapsl configuration in GCTL6 register (Jocelyn Falempe) - ARM: dts: exynos: add missing HDMI supplies on SMDK5420 (Krzysztof Kozlowski) - ARM: dts: exynos: add missing HDMI supplies on SMDK5250 (Krzysztof Kozlowski) - ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 (Krzysztof Kozlowski) - ARM: dts: at91: sama5d2: Fix PMERRLOC resource size (Tudor Ambarus) - ARM: dts: at91: sama7g5: Remove unused properties in i2c nodes (Tudor Ambarus) - rfkill: make new event layout opt-in (Johannes Berg) - video: fbdev: atari: Atari 2 bpp (STe) palette bugfix (Michael Schmitz) - video: fbdev: sm712fb: Fix crash in smtcfb_read() (Helge Deller) - fbdev: Hot-unplug firmware fb devices on forced removal (Thomas Zimmermann) - drm/edid: check basic audio support on CEA extension block (Cooper Chiou) - block: don't merge across cgroup boundaries if blkcg is enabled (Tejun Heo) - block: limit request dispatch loop duration (Shin'ichiro Kawasaki) - mailbox: tegra-hsp: Flush whole channel (Pekka Pessi) - landlock: Use square brackets around "landlock-ruleset" (Christian Brauner) - samples/landlock: Fix path_list memory leak (Tom Rix) - drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() (Duoming Zhou) - ext4: make mb_optimize_scan performance mount option work with extents (Ojaswin Mujoo) - ext4: fix fs corruption when tring to remove a non-empty directory with IO error (Ye Bin) - ext4: fix ext4_fc_stats trace point (Ritesh Harjani) - coredump: Also dump first pages of non-executable ELF libraries (Jann Horn) - ACPI: properties: Consistently return -ENOENT if there are no more references (Sakari Ailus) - Revert "ACPI: Pass the same capabilities to the _OSC regardless of the query flag" (Rafael J. Wysocki) - ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM (Ammar Faizi) - arm64: dts: ti: k3-am64: Fix gic-v3 compatible regs (Nishanth Menon) - arm64: dts: ti: k3-j7200: Fix gic-v3 compatible regs (Nishanth Menon) - arm64: dts: ti: k3-j721e: Fix gic-v3 compatible regs (Nishanth Menon) - arm64: dts: ti: k3-am65: Fix gic-v3 compatible regs (Nishanth Menon) - arm64: dts: qcom: sm8250: Fix MSI IRQ for PCIe1 and PCIe2 (Manivannan Sadhasivam) - arm64: Do not defer reserve_crashkernel() for platforms with no DMA memory zones (Vijay Balakrishna) - arm64: signal: nofpsimd: Do not allocate fp/simd context when not available (David Engraf) - PCI: fu740: Force 2.5GT/s for initial device probe (Ben Dooks) - powerpc/kvm: Fix kvm_use_magic_page (Andreas Gruenbacher) - drbd: fix potential silent data corruption (Lars Ellenberg) - tracing: Have trace event string test handle zero length strings (Steven Rostedt (Google)) - dm integrity: set journal entry unused when shrinking device (Mikulas Patocka) - dm: fix double accounting of flush with data (Mike Snitzer) - dm: interlock pending dm_io and dm_wait_for_bios_completion (Mike Snitzer) - dm: fix use-after-free in dm_cleanup_zoned_dev() (Kirill Tkhai) - dm stats: fix too short end duration_ns when using precise_timestamps (Mike Snitzer) - mm/kmemleak: reset tag when compare object pointer (Kuan-Ying Lee) - mm,hwpoison: unmap poisoned page before invalidation (Rik van Riel) - Revert "mm: madvise: skip unmapped vma holes passed to process_madvise" (Charan Teja Kalla) - mm: madvise: return correct bytes advised with process_madvise (Charan Teja Kalla) - mm: madvise: skip unmapped vma holes passed to process_madvise (Charan Teja Kalla) - drm/simpledrm: Add "panel orientation" property on non-upright mounted LCD panels (Hans de Goede) - ocfs2: fix crash when mount with quota enabled (Joseph Qi) - rtc: pl031: fix rtc features null pointer dereference (Ali Pouladi) - rtc: mc146818-lib: fix locking in mc146818_set_time (Mateusz Jończyk) - ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020 (Kai-Heng Feng) - ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock (Takashi Iwai) - ALSA: hda: Avoid unsol event during RPM suspending (Mohan Kumar) - ALSA: cs4236: fix an incorrect NULL check on list iterator (Xiaomeng Tong) - cifs: fix NULL ptr dereference in smb2_ioctl_query_info() (Paulo Alcantara) - cifs: prevent bad output lengths in smb2_ioctl_query_info() (Paulo Alcantara) - Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" (José Expósito) - riscv: Increase stack size under KASAN (Dmitry Vyukov) - riscv: Fix fill_callchain return value (Nikita Shubin) - riscv: dts: canaan: Fix SPI3 bus width (Niklas Cassel) - qed: validate and restrict untrusted VFs vlan promisc mode (Manish Chopra) - qed: display VF trust config (Manish Chopra) - scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands (Damien Le Moal) - scsi: scsi_transport_fc: Fix FPIN Link Integrity statistics counters (James Smart) - scsi: ufs: Fix runtime PM messages never-ending cycle (Adrian Hunter) - scsi: core: sd: Add silence_suspend flag to suppress some PM messages (Adrian Hunter) - mempolicy: mbind_range() set_policy() after vma_merge() (Hugh Dickins) - mm: invalidate hwpoison page cache page in fault path (Rik van Riel) - mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node (Alistair Popple) - mm: fs: fix lru_cache_disabled race in bh_lru (Minchan Kim) - jffs2: fix memory leak in jffs2_scan_medium (Baokun Li) - jffs2: fix memory leak in jffs2_do_mount_fs (Baokun Li) - jffs2: fix use-after-free in jffs2_clear_xattr_subsystem (Baokun Li) - can: m_can: m_can_tx_handler(): fix use after free of skb (Marc Kleine-Budde) - mtd: rawnand: protect access to rawnand devices while in suspend (Sean Nyekjaer) - spi: mxic: Fix the transmit path (Miquel Raynal) - net: bnxt_ptp: fix compilation error (Damien Le Moal) - pinctrl: samsung: drop pin banks references on error paths (Krzysztof Kozlowski) - pinctrl: ingenic: Fix regmap on X series SoCs (Aidan MacDonald) - mm/mlock: fix two bugs in user_shm_lock() (Miaohe Lin) - remoteproc: Fix count check in rproc_coredump_write() (Alistair Delva) - f2fs: fix to do sanity check on .cp_pack_total_block_count (Chao Yu) - f2fs: quota: fix loop condition at f2fs_quota_sync() (Juhyung Park) - f2fs: fix to unlock page correctly in error path of is_alive() (Chao Yu) - NFSD: prevent integer overflow on 32 bit systems (Dan Carpenter) - NFSD: prevent underflow in nfssvc_decode_writeargs() (Dan Carpenter) - NFS: NFSv2/v3 clients should never be setting NFS_CAP_XATTR (Trond Myklebust) - SUNRPC: avoid race between mod_timer() and del_timer_sync() (NeilBrown) - HID: intel-ish-hid: Use dma_alloc_coherent for firmware update (Gwendal Grignou) - firmware: sysfb: fix platform-device leak in error path (Johan Hovold) - firmware: stratix10-svc: add missing callback parameter on RSU (Ang Tien Sung) - Documentation: update stable tree link (Bagas Sanjaya) - Documentation: add link to stable release candidate tree (Bagas Sanjaya) - KEYS: asymmetric: properly validate hash_algo and encoding (Eric Biggers) - KEYS: asymmetric: enforce that sig algo matches key algo (Eric Biggers) - KEYS: fix length validation in keyctl_pkey_params_get_2() (Eric Biggers) - cifs: we do not need a spinlock around the tree access during umount (Ronnie Sahlberg) - cifs: fix handlecache and multiuser (Ronnie Sahlberg) - clk: uniphier: Fix fixed-rate initialization (Kunihiko Hayashi) - clk: rockchip: re-add rational best approximation algorithm to the fractional divider (Quentin Schulz) - greybus: svc: fix an error handling bug in gb_svc_hello() (Dan Carpenter) - iio: inkern: make a best effort on offset calculation (Liam Beguin) - iio: inkern: apply consumer scale when no channel scale is available (Liam Beguin) - iio: inkern: apply consumer scale on IIO_VAL_INT cases (Liam Beguin) - iio: afe: rescale: use s64 for temporary scale calculations (Liam Beguin) - coresight: syscfg: Fix memleak on registration failure in cscfg_create_device (Miaoqian Lin) - coresight: Fix TRCCONFIGR.QE sysfs interface (James Clark) - docs: sphinx/requirements: Limit jinja2<3.1 (Akira Yokosawa) - bus: mhi: Fix MHI DMA structure endianness (Paul Davey) - bus: mhi: pci_generic: Add mru_default for Quectel EM1xx series (Yonglin Tan) - mei: avoid iterator usage outside of list_for_each_entry (Alexander Usyskin) - mei: me: add Alder Lake N device id. (Alexander Usyskin) - xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx() (Anssi Hannula) - xhci: make xhci_handshake timeout for xhci_reset() adjustable (Mathias Nyman) - xhci: fix runtime PM imbalance in USB2 resume (Henry Lin) - xhci: fix garbage USBSTS being logged in some cases (Anssi Hannula) - USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c (Alan Stern) - usb: typec: tipd: Forward plug orientation to typec subsystem (Sven Peter) - tpm: fix reference counting for struct tpm_chip (Lino Sanfilippo) - virtio-blk: Use blk_validate_block_size() to validate block size (Xie Yongji) - iommu/iova: Improve 32-bit free space estimate (Robin Murphy) - drm/amdgpu: only check for _PR3 on dGPUs (Alex Deucher) - drm/amdgpu: move PX checking into amdgpu_device_ip_early_init (Alex Deucher) - locking/lockdep: Avoid potential access of invalid memory in lock_class (Waiman Long) - selftests: vm: fix clang build error multiple output files (Yosry Ahmed) - net: dsa: microchip: add spi_device_id tables (Claudiu Beznea) - Input: zinitix - do not report shadow fingers (Linus Walleij) - spi: Fix erroneous sgs value with min_t() (Biju Das) - Revert "gpio: Revert regression in sysfs-gpio (gpiolib.c)" (Bartosz Golaszewski) - net:mcf8390: Use platform_get_irq() to get the interrupt (Minghao Chi (CGEL ZTE)) - spi: Fix invalid sgs value (Biju Das) - gpio: Revert regression in sysfs-gpio (gpiolib.c) (Marcelo Roberto Jimenez) - ethernet: sun: Free the coherent when failing in probing (Zheyu Ma) - tools/virtio: fix virtio_test execution (Stefano Garzarella) - vdpa/mlx5: should verify CTRL_VQ feature exists for MQ (Si-Wei Liu) - virtio_console: break out of buf poll on remove (Michael S. Tsirkin) - ARM: mstar: Select HAVE_ARM_ARCH_TIMER (Daniel Palmer) - xfrm: fix tunnel model fragmentation behavior (Lina Wang) - HID: Add support for open wheel and no attachment to T300 (Michael Hübner) - HID: logitech-dj: add new lightspeed receiver id (Lucas Zampieri) - hv: utils: add PTP_1588_CLOCK to Kconfig to fix build (Randy Dunlap) - mm: kfence: fix missing objcg housekeeping for SLAB (Muchun Song) - USB: serial: simple: add Nokia phone driver (Johan Hovold) - USB: serial: pl2303: fix GS type detection (Johan Hovold) - dt-bindings: usb: hcd: correct usb-device path (Krzysztof Kozlowski) - USB: serial: pl2303: add IBM device IDs (Eddie James) - Revert "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" (Linus Torvalds) - LTS version: v5.15.32 (Jack Vogel) - llc: only change llc->dev when bind() succeeds (Eric Dumazet) - nds32: fix access_ok() checks in get/put_user (Arnd Bergmann) - m68k: fix access_ok for coldfire (Arnd Bergmann) - wcn36xx: Differentiate wcn3660 from wcn3620 (Bryan O'Donoghue) - tpm: use try_get_ops() in tpm-space.c (James Bottomley) - mac80211: fix potential double free on mesh join (Linus Lüssing) - uaccess: fix integer overflow on access_ok() (Arnd Bergmann) - rcu: Don't deboost before reporting expedited quiescent state (Paul E. McKenney) - drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free() (Roberto Sassu) - Revert "ath: add support for special 0x0 regulatory domain" (Brian Norris) - Bluetooth: btusb: Add one more Bluetooth part for the Realtek RTL8852AE (Larry Finger) - crypto: qat - disable registration of algorithms (Giovanni Cabiddu) - ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU (Werner Sembach) - ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3 (Maximilian Luz) - ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board (Mark Cilissen) - drivers: net: xgene: Fix regression in CRC stripping (Stephane Graber) - ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec (Giacomo Guiduzzi) - ALSA: cmipci: Restore aux vol on suspend/resume (Jonathan Teh) - ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB (Lars-Peter Clausen) - ALSA: pcm: Add stream lock during PCM reset ioctl operations (Takashi Iwai) - ALSA: hda/realtek: Add quirk for ASUS GA402 (Jason Zheng) - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 (huangwenhui) - ALSA: hda/realtek: Add quirk for Clevo NP50PNJ (Tim Crawford) - ALSA: hda/realtek: Add quirk for Clevo NP70PNJ (Tim Crawford) - ALSA: usb-audio: add mapping for new Corsair Virtuoso SE (Reza Jahanbakhshi) - ALSA: oss: Fix PCM OSS buffer allocation overflow (Takashi Iwai) - ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call (Takashi Iwai) - llc: fix netdevice reference leaks in llc_ui_bind() (Eric Dumazet) - Bluetooth: btusb: Add another Realtek 8761BU (Helmut Grohne) - tpm: Fix error handling in async work (Tadeusz Struk) - net: ipv6: fix skb_over_panic in __ip6_append_data (Tadeusz Struk) - nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION (Jordy Zomer) - LTS version: v5.15.31 (Jack Vogel) - perf symbols: Fix symbol size calculation condition (Michael Petlan) - Input: aiptek - properly check endpoint type (Pavel Skripkin) - scsi: mpt3sas: Page fault in reply q processing (Matt Lupfer) - usb: usbtmc: Fix bug in pipe direction for control transfers (Alan Stern) - usb: gadget: Fix use-after-free bug by not setting udc->dev.driver (Alan Stern) - usb: gadget: rndis: prevent integer overflow in rndis_set_response() (Dan Carpenter) - arm64: fix clang warning about TRAMP_VALIAS (Arnd Bergmann) - iavf: Fix hang during reboot/shutdown (Ivan Vecera) - net: mscc: ocelot: fix backwards compatibility with single-chain tc-flower offload (Vladimir Oltean) - net: bcmgenet: skip invalid partial checksums (Doug Berger) - bnx2x: fix built-in kernel driver load failure (Manish Chopra) - net: phy: mscc: Add MODULE_FIRMWARE macros (Juerg Haefliger) - net: dsa: Add missing of_node_put() in dsa_port_parse_of (Miaoqian Lin) - drm: Don't make DRM_PANEL_BRIDGE dependent on DRM_KMS_HELPERS (Thomas Zimmermann) - net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit() (Nicolas Dichtel) - drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings (Marek Vasut) - drm/imx: parallel-display: Remove bus flags check in imx_pd_bridge_atomic_check() (Christoph Niedermaier) - hv_netvsc: Add check for kvmalloc_array (Jiasheng Jiang) - iavf: Fix double free in iavf_reset_task (Przemyslaw Patynowski) - atm: eni: Add check for dma_map_single (Jiasheng Jiang) - net/packet: fix slab-out-of-bounds access in packet_recvmsg() (Eric Dumazet) - net: phy: marvell: Fix invalid comparison in the resume and suspend functions (Kurt Cancemi) - esp6: fix check on ipv6_skip_exthdr's return value (Sabrina Dubroca) - vsock: each transport cycles only on its own sockets (Jiyong Park) - alx: acquire mutex for alx_reinit in alx_change_mtu (Niels Dossche) - efi: fix return value of __setup handlers (Randy Dunlap) - drm/mgag200: Fix PLL setup for g200wb and g200ew (Jocelyn Falempe) - block: release rq qos structures for queue without disk (Ming Lei) - mm: swap: get rid of livelock in swapin readahead (Guo Ziliang) - ocfs2: fix crash when initialize filecheck kobj fails (Joseph Qi) - crypto: qcom-rng - ensure buffer for generate is completely filled (Brian Masney) - bpf/selftests: Test PTR_TO_RDONLY_MEM (Hao Luo) [Orabug: 34358256] - bpf: Add MEM_RDONLY for helper args that are pointers to rdonly mem. (Hao Luo) [Orabug: 34358256] - bpf: Make per_cpu_ptr return rdonly PTR_TO_MEM. (Hao Luo) [Orabug: 34358256] - bpf: Convert PTR_TO_MEM_OR_NULL to composable types. (Hao Luo) [Orabug: 34358256] - bpf: Introduce MEM_RDONLY flag (Hao Luo) [Orabug: 34358256] - bpf: Replace PTR_TO_XXX_OR_NULL with PTR_TO_XXX | PTR_MAYBE_NULL (Hao Luo) [Orabug: 34358256] - bpf: Replace RET_XXX_OR_NULL with RET_XXX | PTR_MAYBE_NULL (Hao Luo) [Orabug: 34358256] - bpf: Replace ARG_XXX_OR_NULL with ARG_XXX | PTR_MAYBE_NULL (Hao Luo) [Orabug: 34358256] - bpf: Introduce composable reg, ret and arg types. (Hao Luo) [Orabug: 34358256] - RDS/IB: Fix RDS IB SRQ implementation and tune it (Hans Westgaard Ry) [Orabug: 34351577] - RDS/IB: Introduce bit_flag routines with memory-barrier for bit flags (Hans Westgaard Ry) [Orabug: 34351577] - rds: ib: Qualify RNR Retry Timer check with firmware version (Freddy Carrillo) [Orabug: 34330921] - mm/page_alloc: reuse tail struct pages for compound devmaps (Joao Martins) [Orabug: 34319096] - mm/sparse-vmemmap: improve memory savings for compound devmaps (Joao Martins) [Orabug: 34319096] - mm/sparse-vmemmap: refactor core of vmemmap_populate_basepages() to helper (Joao Martins) [Orabug: 34319096] - mm/sparse-vmemmap: add a pgmap argument to section activation (Joao Martins) [Orabug: 34319096] - netfilter: nf_tables: disallow non-stateful expression in sets earlier (Pablo Neira Ayuso) [Orabug: 34247340] {CVE-2022-32250}
SRPMs
https://oss.oracle.com:443/ol9/SRPMS-updates/kernel-uek-5.15.0-1.43.4.1.el9uek.src.rpm
x86_64
aarch64
bpftool-5.15.0-1.43.4.1.el9uek.aarch64.rpm kernel-uek-5.15.0-1.43.4.1.el9uek.aarch64.rpm kernel-uek-core-5.15.0-1.43.4.1.el9uek.aarch64.rpm kernel-uek-debug-5.15.0-1.43.4.1.el9uek.aarch64.rpm kernel-uek-debug-core-5.15.0-1.43.4.1.el9uek.aarch64.rpm kernel-uek-debug-devel-5.15.0-1.43.4.1.el9uek.aarch64.rpm kernel-uek-debug-modules-5.15.0-1.43.4.1.el9uek.aarch64.rpm kernel-uek-debug-modules-extra-5.15.0-1.43.4.1.el9uek.aarch64.rpm kernel-uek-devel-5.15.0-1.43.4.1.el9uek.aarch64.rpm kernel-uek-doc-5.15.0-1.43.4.1.el9uek.noarch.rpm kernel-uek-modules-5.15.0-1.43.4.1.el9uek.aarch64.rpm kernel-uek-modules-extra-5.15.0-1.43.4.1.el9uek.aarch64.rpm - uek-rpm/ol/config-aarch64: Enable CONFIG_ARM_RASPBERRYPI_CPUFREQ for RPi (Vijay Kumar) [Orabug: 33832414] - topology/sysfs: Hide PPIN on systems that do not support it. (Tony Luck) [Orabug: 34018367] - topology/sysfs: Add PPIN in sysfs under cpu topology (Tony Luck) [Orabug: 34018367] - topology/sysfs: Add format parameter to macro defining "show" functions for proc (Tony Luck) [Orabug: 34018367] - topology/sysfs: rework book and drawer topology ifdefery (Heiko Carstens) [Orabug: 34018367] - x86/cpu: Read/save PPIN MSR during initialization (Tony Luck) [Orabug: 34018367] - x86/cpu: X86_FEATURE_INTEL_PPIN finally has a CPUID bit (Tony Luck) [Orabug: 34018367] - x86/cpu: Merge Intel and AMD ppin_init() functions (Tony Luck) [Orabug: 34018367] - SUNRPC: Ensure we flush any closed sockets before xs_xprt_free() (Trond Myklebust) [Orabug: 34064432] {CVE-2022-28893} - selftests/bpf: add tests verifying unprivileged bpf behaviour (Alan Maguire) [Orabug: 34088278] - bpf: refine kernel.unprivileged_bpf_disabled behaviour (Alan Maguire) [Orabug: 34088278] - uek-rpm: Add modules to core rpm to allow kselftest rtnetlink tests pass (Somasundaram Krishnasamy) [Orabug: 34124398] - net/rds: Fix "use-after-free" warning (Gerd Rausch) [Orabug: 34137931] - assoc_array: Fix BUG_ON during garbage collect (Stephen Brennan) [Orabug: 34162062] - uek-rpm: Enable prerequisites for Secure Boot support (Eric Snowberg) [Orabug: 34206120] - ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE (Jann Horn) [Orabug: 34223453] {CVE-2022-30594} - scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan (Chandrakanth patil) [Orabug: 34242799] - mm/memcontrol: export memcg->watermark via sysfs for v2 memcg (Kamalesh Babulal) [Orabug: 34250986] - rds: Include congested flag in rds_sock struct. (Rohit Nair) [Orabug: 34261489] - cpu/hotplug: Allow the CPU in CPU_UP_PREPARE state to be brought up again. (Longpeng(Mike)) [Orabug: 34271922] - x86/xen: Allow to retry if cpu_initialize_context() failed. (Boris Ostrovsky) [Orabug: 34271922] - mstflint_access: Update driver code to v4.20.1-1 from Github (Qing Huang) [Orabug: 34286146] - net/rds: No shortcut out of RDS_CONN_ERROR (Gerd Rausch) [Orabug: 34276062] - net/rds: Don't force state RDS_CONN_RESETTING (Gerd Rausch) [Orabug: 34276062] - net/rds: Preserve essential connection state flags (Gerd Rausch) [Orabug: 34276062] - Revert "uek-rpm: Add crashkernel.default file" (John Donnelly) [Orabug: 34280005] - A/A Bonding: Add support for NETDEV_CHANGEADDR notifiers (Gerd Rausch) [Orabug: 34285239] - rdmaip: Flush ARP cache after address has been cleared (Gerd Rausch) [Orabug: 34285239]
i386
