Oracle9: ELSA-2022-9930: kernel Important Security Update | LinuxS...
Oracle Linux Security Advisory ELSA-2022-9930

https://linux.oracle.com/errata/ELSA-2022-9930.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:


aarch64:
bpftool-5.15.0-3.60.5.1.el9uek.aarch64.rpm
kernel-uek-5.15.0-3.60.5.1.el9uek.aarch64.rpm
kernel-uek-core-5.15.0-3.60.5.1.el9uek.aarch64.rpm
kernel-uek-debug-5.15.0-3.60.5.1.el9uek.aarch64.rpm
kernel-uek-debug-core-5.15.0-3.60.5.1.el9uek.aarch64.rpm
kernel-uek-debug-devel-5.15.0-3.60.5.1.el9uek.aarch64.rpm
kernel-uek-debug-modules-5.15.0-3.60.5.1.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-5.15.0-3.60.5.1.el9uek.aarch64.rpm
kernel-uek-devel-5.15.0-3.60.5.1.el9uek.aarch64.rpm
kernel-uek-doc-5.15.0-3.60.5.1.el9uek.noarch.rpm
kernel-uek-modules-5.15.0-3.60.5.1.el9uek.aarch64.rpm
kernel-uek-modules-extra-5.15.0-3.60.5.1.el9uek.aarch64.rpm


SRPMS:
https://oss.oracle.com/ol9/SRPMS-updates/kernel-uek-5.15.0-3.60.5.1.el9uek.src.rpm

Related CVEs:

CVE-2022-3028




Description of changes:

[5.15.0-3.60.5.1.el9uek]
- fs: remove no_llseek (Jason A. Donenfeld)  [Orabug: 34721465]
- vfio: do not set FMODE_LSEEK flag (Jason A. Donenfeld)  [Orabug: 34721465]
- dma-buf: remove useless FMODE_LSEEK flag (Jason A. Donenfeld)  [Orabug: 34721465]
- fs: do not compare against ->llseek (Jason A. Donenfeld)  [Orabug: 34721465]
- fs: clear or set FMODE_LSEEK based on llseek function (Jason A. Donenfeld)  [Orabug: 34721465]

[5.15.0-3.60.5.el9uek]
- hwmon: (opbmc) Add support for AST2600 based Pilot (Jan Zdarek)  [Orabug: 34605427]
- random: Fix incorrect type for 'rc' variable (Harshit Mogalapalli)  [Orabug: 34596909]

[5.15.0-3.60.4.el9uek]
- netfilter: ebtables: reject blobs that don't provide all entry points (Florian Westphal)  [Orabug: 34513977]
- uek-rpm: Disable CONFIG_CRYPTO_STREEBOG (Victor Erminpour)  [Orabug: 34538054]
- uek-rpm: Disable CONFIG_CRYPTO_SM3 (Victor Erminpour)  [Orabug: 34538054]
- uek-rpm: Disable CONFIG_CRYPTO_SM4 (Victor Erminpour)  [Orabug: 34538054]
- af_key: Do not call xfrm_probe_algs in parallel (Herbert Xu)  [Orabug: 34566751]  {CVE-2022-3028}
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Tetsuo Handa)  [Orabug: 34567776]
cpus_read_lock() deadlock (Tejun Heo)  [Orabug: 34567776]

[5.15.0-3.60.3.el9uek]
- audit: annotate branch direction for audit_in_mask() (Ankur Arora)  [Orabug: 34544783]
- audit: cache ctx->major in audit_filter_syscall() (Ankur Arora)  [Orabug: 34544783]

[5.15.0-3.60.2.el9uek]
- LTS version: v5.15.60 (Jack Vogel) 
- x86/speculation: Add LFENCE to RSB fill sequence (Pawan Gupta) 
- x86/speculation: Add RSB VM Exit protections (Daniel Sneddon) 
- macintosh/adb: fix oob read in do_adb_query() function (Ning Qiang) 
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3586 (Hilda Wu) 
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3587 (Hilda Wu) 
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0CB8:0xC558 (Hilda Wu) 
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04C5:0x1675 (Hilda Wu) 
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04CA:0x4007 (Hilda Wu) 
- Bluetooth: btusb: Add support of IMC Networks PID 0x3568 (Aaron Ma) 
- dt-bindings: bluetooth: broadcom: Add BCM4349B1 DT binding (Ahmad Fatoum) 
- Bluetooth: hci_bcm: Add DT compatible for CYW55572 (Hakan Jansson) 
- Bluetooth: hci_bcm: Add BCM4349B1 variant (Ahmad Fatoum) 
- btrfs: zoned: fix critical section of relocation inode writeback (Naohiro Aota) 
- btrfs: zoned: prevent allocation from previous data relocation BG (Naohiro Aota) 
- arm64: set UXN on swapper page tables (Peter Collingbourne) 
- KVM: x86/svm: add __GFP_ACCOUNT to __sev_dbg_{en,de}crypt_user() (Mingwei Zhang) 
- selftests: KVM: Handle compiler optimizations in ucall (Raghavendra Rao Ananta) 
- tools/kvm_stat: fix display of error when multiple processes are found (Dmitry Klochkov) 
- KVM: selftests: Make hyperv_clock selftest more stable (Vitaly Kuznetsov) 
- KVM: x86: do not set st->preempted when going back to user space (Paolo Bonzini) 
- KVM: x86: do not report a vCPU as preempted outside instruction boundaries (Paolo Bonzini) [Orabug: 34571000] {CVE-2022-39189}
- crypto: arm64/poly1305 - fix a read out-of-bound (GUO Zihua) 
- ACPI: APEI: Better fix to avoid spamming the console with old error logs (Tony Luck) 
- ACPI: video: Shortening quirk list by identifying Clevo by board_name only (Werner Sembach) 
- ACPI: video: Force backlight native for some TongFang devices (Werner Sembach) 
- tools/vm/slabinfo: Handle files in debugfs (Stéphane Graber) 
- block: fix default IO priority handling again (Jan Kara) 
- selftests/bpf: Check dst_port only on the client socket (Jakub Sitnicki) 
- selftests/bpf: Extend verifier and bpf_sock tests for dst_port loads (Jakub Sitnicki) 
- x86/speculation: Make all RETbleed mitigations 64-bit only (Ben Hutchings) 
- LTS version: v5.15.59 (Jack Vogel) 
- x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available (Thadeu Lima de Souza Cascardo) 
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Eiichi Tsukata) 
- EDAC/ghes: Set the DIMM label unconditionally (Toshi Kani) 
- ARM: 9216/1: Fix MAX_DMA_ADDRESS overflow (Florian Fainelli) 
- page_alloc: fix invalid watermark check on a negative value (Jaewon Kim) 
- mm/hmm: fault non-owner device private entries (Ralph Campbell) 
- ARM: crypto: comment out gcc warning that breaks clang builds (Greg Kroah-Hartman) 
- sctp: leave the err path free in sctp_stream_init to sctp_stream_free (Xin Long) 
- sfc: disable softirqs for ptp TX (Alejandro Lucero) 
- perf symbol: Correct address for bss symbols (Leo Yan) 
- virtio-net: fix the race between refill work and close (Jason Wang) 
- netfilter: nf_queue: do not allow packet truncation below transport header offset (Florian Westphal) 
- octeontx2-pf: cn10k: Fix egress ratelimit configuration (Sunil Goutham) 
- sctp: fix sleep in atomic context bug in timer handlers (Duoming Zhou) 
- i40e: Fix interface init with MSI interrupts (no MSI-X) (Michal Maloszewski) 
- ipv4: Fix data-races around sysctl_fib_notify_on_flag_change. (Kuniyuki Iwashima) 
- tcp: Fix data-races around sysctl_tcp_reflect_tos. (Kuniyuki Iwashima) 
- tcp: Fix a data-race around sysctl_tcp_comp_sack_nr. (Kuniyuki Iwashima) 
- tcp: Fix a data-race around sysctl_tcp_comp_sack_slack_ns. (Kuniyuki Iwashima) 
- tcp: Fix a data-race around sysctl_tcp_comp_sack_delay_ns. (Kuniyuki Iwashima) 
- net: Fix data-races around sysctl_[rw]mem(_offset)?. (Kuniyuki Iwashima) 
- tcp: Fix data-races around sk_pacing_rate. (Kuniyuki Iwashima) 
- net: mld: fix reference count leak in mld_{query | report}_work() (Taehee Yoo) 
- net: macsec: fix potential resource leak in macsec_add_rxsa() and macsec_add_txsa() (Jianglei Nie) 
- macsec: always read MACSEC_SA_ATTR_PN as a u64 (Sabrina Dubroca) 
- macsec: limit replay window size with XPN (Sabrina Dubroca) 
- macsec: fix error message in macsec_add_rxsa and _txsa (Sabrina Dubroca) 
- macsec: fix NULL deref in macsec_add_rxsa (Sabrina Dubroca) 
- Documentation: fix sctp_wmem in ip-sysctl.rst (Xin Long) 
- tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit. (Kuniyuki Iwashima) 
- tcp: Fix a data-race around sysctl_tcp_autocorking. (Kuniyuki Iwashima) 
- tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen. (Kuniyuki Iwashima) 
- tcp: Fix a data-race around sysctl_tcp_min_tso_segs. (Kuniyuki Iwashima) 
- net: sungem_phy: Add of_node_put() for reference returned by of_get_parent() (Liang He) 
- net: pcs: xpcs: propagate xpcs_read error to xpcs_get_state_c37_sgmii (Vladimir Oltean) 
- igmp: Fix data-races around sysctl_igmp_qrv. (Kuniyuki Iwashima) 
- net/tls: Remove the context from the list in tls_device_down (Maxim Mikityanskiy) 
- ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr (Ziyang Xuan) 
- net: ping6: Fix memleak in ipv6_renew_options(). (Kuniyuki Iwashima) 
- scsi: mpt3sas: Stop fw fault watchdog work item during system shutdown (David Jeffery) 
- tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit. (Kuniyuki Iwashima) 
- tcp: Fix a data-race around sysctl_tcp_limit_output_bytes. (Kuniyuki Iwashima) 
- tcp: Fix data-races around sysctl_tcp_moderate_rcvbuf. (Kuniyuki Iwashima) 
- octeontx2-pf: Fix UDP/TCP src and dst port tc filters (Subbaraya Sundeep) 
- Revert "tcp: change pingpong threshold to 3" (Wei Wang) 
- scsi: ufs: host: Hold reference returned by of_parse_phandle() (Liang He) 
- ice: do not setup vlan for loopback VSI (Maciej Fijalkowski) 
- ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) (Maciej Fijalkowski) 
- tcp: Fix data-races around sysctl_tcp_no_ssthresh_metrics_save. (Kuniyuki Iwashima) 
- tcp: Fix a data-race around sysctl_tcp_nometrics_save. (Kuniyuki Iwashima) 
- tcp: Fix a data-race around sysctl_tcp_frto. (Kuniyuki Iwashima) 
- tcp: Fix a data-race around sysctl_tcp_adv_win_scale. (Kuniyuki Iwashima) 
- tcp: Fix a data-race around sysctl_tcp_app_win. (Kuniyuki Iwashima) 
- tcp: Fix data-races around sysctl_tcp_dsack. (Kuniyuki Iwashima) 
- watch_queue: Fix missing locking in add_watch_to_object() (Linus Torvalds) 
- watch_queue: Fix missing rcu annotation (David Howells) 
- drm/simpledrm: Fix return type of simpledrm_simple_display_pipe_mode_valid() (Nathan Chancellor) 
- nouveau/svm: Fix to migrate all requested pages (Alistair Popple) 
- s390/archrandom: prevent CPACF trng invocations in interrupt context (Harald Freudenberger) 
- asm-generic: remove a broken and needless ifdef conditional (Lukas Bulwahn) 
- hugetlb: fix memoryleak in hugetlb_mcopy_atomic_pte (Miaohe Lin) 
- mm: fix page leak with multiple threads mapping the same page (Josef Bacik) 
- secretmem: fix unhandled fault in truncate (Mike Rapoport) 
- fs: sendfile handles O_NONBLOCK of out_fd (Andrei Vagin) 
- ntfs: fix use-after-free in ntfs_ucsncmp() (ChenXiaoSong) 
- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put (Luiz Augusto von Dentz) 
- LTS version: v5.15.58 (Jack Vogel) 
- drm/amd/display: Fix wrong format specifier in amdgpu_dm.c (Hayden Goodfellow) 
- x86/entry_32: Fix segment exceptions (Peter Zijlstra) 
- drm/amdgpu: Off by one in dm_dmub_outbox1_low_irq() (Dan Carpenter) 
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm() (Jan Beulich) 
- KVM: x86: fix typo in __try_cmpxchg_user causing non-atomicness (Maxim Levitsky) 
- x86/extable: Prefer local labels in .set directives (Nick Desaulniers) 
- drm/amd/display: invalid parameter check in dmub_hpd_callback (José Expósito) 
- drm/amd/display: Don't lock connection_mutex for DMUB HPD (Nicholas Kazlauskas) 
- watch-queue: remove spurious double semicolon (Linus Torvalds) 
- net: usb: ax88179_178a needs FLAG_SEND_ZLP (Jose Alonso) 
- tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() (Jiri Slaby) 
- tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() (Jiri Slaby) 
- tty: drop tty_schedule_flip() (Jiri Slaby) 
- tty: the rest, stop using tty_schedule_flip() (Jiri Slaby) 
- tty: drivers/tty/, stop using tty_schedule_flip() (Jiri Slaby) 
- watchqueue: make sure to serialize 'wqueue->defunct' properly (Linus Torvalds) 
- drm/amd/display: Fix surface optimization regression on Carrizo (Nicholas Kazlauskas) 
- drm/amd/display: Optimize bandwidth on following fast update (Nicholas Kazlauskas) 
- drm/amd/display: Reset DMCUB before HW init (Nicholas Kazlauskas) 
- exfat: use updated exfat_chain directly during renaming (Sungjong Seo) 
- Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks (Luiz Augusto von Dentz) 
- Bluetooth: SCO: Fix sco_send_frame returning skb->len (Luiz Augusto von Dentz) 
- Bluetooth: Fix passing NULL to PTR_ERR (Luiz Augusto von Dentz) 
- Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg (Luiz Augusto von Dentz) 
- Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg (Luiz Augusto von Dentz) 
- Bluetooth: Add bt_skb_sendmmsg helper (Luiz Augusto von Dentz) 
- Bluetooth: Add bt_skb_sendmsg helper (Luiz Augusto von Dentz) 
- um: virtio_uml: Fix broken device handling in time-travel (Johannes Berg) 
- um: virtio_uml: Allow probing from devicetree (Vincent Whitchurch) 
- tracing: Fix return value of trace_pid_write() (Wonhyuk Yang) 
- tracing: Place trace_pid_list logic into abstract functions (Steven Rostedt (VMware)) 
- tracing: Have event format check not flag %p* on __get_dynamic_array() (Steven Rostedt (Google)) 
- exfat: fix referencing wrong parent directory information after renaming (Yuezhang Mo) 
- crypto: qat - re-enable registration of algorithms (Giovanni Cabiddu) 
- crypto: qat - add param check for DH (Giovanni Cabiddu) 
- crypto: qat - add param check for RSA (Giovanni Cabiddu) 
- crypto: qat - remove dma_free_coherent() for DH (Giovanni Cabiddu) 
- crypto: qat - remove dma_free_coherent() for RSA (Giovanni Cabiddu) 
- crypto: qat - fix memory leak in RSA (Giovanni Cabiddu) 
- crypto: qat - add backlog mechanism (Giovanni Cabiddu) 
- crypto: qat - refactor submission logic (Giovanni Cabiddu) 
- crypto: qat - use pre-allocated buffers in datapath (Giovanni Cabiddu) 
- crypto: qat - set to zero DH parameters before free (Giovanni Cabiddu) 
- iwlwifi: fw: uefi: add missing include guards (Johannes Berg) 
- mt76: fix use-after-free by removing a non-RCU wcid pointer (Felix Fietkau) 
- xhci: Set HCD flag to defer primary roothub registration (Kishon Vijay Abraham I) 
- xhci: dbc: Rename xhci_dbc_init and xhci_dbc_exit (Mathias Nyman) 
- xhci: dbc: create and remove dbc structure in dbgtty driver. (Mathias Nyman) 
- xhci: dbc: refactor xhci_dbc_init() (Mathias Nyman) 
- KVM: x86: Use __try_cmpxchg_user() to emulate atomic accesses (Sean Christopherson) 
- x86/extable: Extend extable functionality (Peter Zijlstra) 
- x86/entry_32: Remove .fixup usage (Peter Zijlstra) 
- bitfield.h: Fix "type of reg too small for mask" test (Peter Zijlstra) 
- x86/extable: Provide EX_TYPE_DEFAULT_MCE_SAFE and EX_TYPE_FAULT_MCE_SAFE (Thomas Gleixner) 
- x86/extable: Rework the exception table mechanics (Thomas Gleixner) 
- x86/mce: Deduplicate exception handling (Thomas Gleixner) 
- x86/extable: Get rid of redundant macros (Thomas Gleixner) 
- x86/extable: Tidy up redundant handler functions (Thomas Gleixner) 
- x86/uaccess: Implement macros for CMPXCHG on user addresses (Peter Zijlstra) 
- dlm: fix pending remove if msg allocation fails (Alexander Aring) 
- sched/deadline: Fix BUG_ON condition for deboosted tasks (Juri Lelli) 
- bpf: Make sure mac_header was set before using it (Eric Dumazet) 
- mm/mempolicy: fix uninit-value in mpol_rebind_policy() (Wang Cheng) 
- KVM: Don't null dereference ops->destroy (Alexey Kardashevskiy) 
- spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers (Marc Kleine-Budde) 
- KVM: selftests: Fix target thread to be migrated in rseq_test (Gavin Shan) 
- gpio: gpio-xilinx: Fix integer overflow (Srinivas Neeli) 
- tcp: Fix data-races around sysctl_tcp_max_reordering. (Kuniyuki Iwashima) 
- tcp: Fix a data-race around sysctl_tcp_abort_on_overflow. (Kuniyuki Iwashima) 
- tcp: Fix a data-race around sysctl_tcp_rfc1337. (Kuniyuki Iwashima) 
- tcp: Fix a data-race around sysctl_tcp_stdurg. (Kuniyuki Iwashima) 
- tcp: Fix a data-race around sysctl_tcp_retrans_collapse. (Kuniyuki Iwashima) 
- tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. (Kuniyuki Iwashima) 
- tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. (Kuniyuki Iwashima) 
- tcp: Fix data-races around sysctl_tcp_recovery. (Kuniyuki Iwashima) 
- tcp: Fix a data-race around sysctl_tcp_early_retrans. (Kuniyuki Iwashima) 
- tcp: Fix data-races around sysctl knobs related to SYN option. (Kuniyuki Iwashima) 
- udp: Fix a data-race around sysctl_udp_l3mdev_accept. (Kuniyuki Iwashima) 
- ip: Fix data-races around sysctl_ip_prot_sock. (Kuniyuki Iwashima) 
- ipv4: Fix data-races around sysctl_fib_multipath_hash_fields. (Kuniyuki Iwashima) 
- ipv4: Fix data-races around sysctl_fib_multipath_hash_policy. (Kuniyuki Iwashima) 
- ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. (Kuniyuki Iwashima) 
- drm/imx/dcss: Add missing of_node_put() in fail path (Liang He) 
- net: dsa: vitesse-vsc73xx: silent spi_device_id warnings (Oleksij Rempel) 
- net: dsa: sja1105: silent spi_device_id warnings (Oleksij Rempel) 
- be2net: Fix buffer overflow in be_get_module_eeprom (Hristo Venev) 
- gpio: pca953x: use the correct register address when regcache sync during init (Haibo Chen) 
- gpio: pca953x: use the correct range when do regmap sync (Haibo Chen) 
- gpio: pca953x: only use single read/write for No AI mode (Haibo Chen) 
- net: stmmac: remove redunctant disable xPCS EEE call (Wong Vee Khee) 
- ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero (Piotr Skajewski) 
- i40e: Fix erroneous adapter reinitialization during recovery process (Dawid Lukwinski) 
- pinctrl: armada-37xx: use raw spinlocks for regmap to avoid invalid wait context (Vladimir Oltean) 
- pinctrl: armada-37xx: Convert to use dev_err_probe() (Andy Shevchenko) 
- pinctrl: armada-37xx: Make use of the devm_platform_ioremap_resource() (Andy Shevchenko) 
- pinctrl: armada-37xx: Use temporary variable for struct device (Andy Shevchenko) 
- iavf: Fix handling of dummy receive descriptors (Przemyslaw Patynowski) 
- tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. (Kuniyuki Iwashima) 
- tcp: Fix data-races around sysctl_tcp_fastopen. (Kuniyuki Iwashima) 
- tcp: Fix data-races around sysctl_max_syn_backlog. (Kuniyuki Iwashima) 
- tcp: Fix a data-race around sysctl_tcp_tw_reuse. (Kuniyuki Iwashima) 
- tcp: Fix a data-race around sysctl_tcp_notsent_lowat. (Kuniyuki Iwashima) 
- tcp: Fix data-races around some timeout sysctl knobs. (Kuniyuki Iwashima) 
- tcp: Fix data-races around sysctl_tcp_reordering. (Kuniyuki Iwashima) 
- tcp: Fix data-races around sysctl_tcp_migrate_req. (Kuniyuki Iwashima) 
- tcp: Fix data-races around sysctl_tcp_syncookies. (Kuniyuki Iwashima) 
- tcp: Fix data-races around sysctl_tcp_syn(ack)?_retries. (Kuniyuki Iwashima) 
- tcp: Fix data-races around keepalive sysctl knobs. (Kuniyuki Iwashima) 
- igmp: Fix data-races around sysctl_igmp_max_msf. (Kuniyuki Iwashima) 
- igmp: Fix a data-race around sysctl_igmp_max_memberships. (Kuniyuki Iwashima) 
- igmp: Fix data-races around sysctl_igmp_llm_reports. (Kuniyuki Iwashima) 
- net/tls: Fix race in TLS device down flow (Tariq Toukan) 
- net: stmmac: fix dma queue left shift overflow issue (Junxiao Chang) 
- perf tests: Fix Convert perf time to TSC test for hybrid (Adrian Hunter) 
- i2c: cadence: Change large transfer count reset logic to be unconditional (Robert Hancock) 
- i2c: mlxcpld: Fix register setting for 400KHz frequency (Vadim Pasternak) 
- net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core() (Menglong Dong) 
- net: ipv4: use kfree_skb_reason() in ip_rcv_core() (Menglong Dong) 
- net: netfilter: use kfree_drop_reason() for NF_DROP (Menglong Dong) 
- net: skb_drop_reason: add document for drop reasons (Menglong Dong) 
- net: socket: rename SKB_DROP_REASON_SOCKET_FILTER (Menglong Dong) 
- net: skb: use kfree_skb_reason() in __udp4_lib_rcv() (Menglong Dong) 
- net: skb: use kfree_skb_reason() in tcp_v4_rcv() (Menglong Dong) 
- net: skb: introduce kfree_skb_reason() (Menglong Dong) 
- net: dsa: microchip: ksz_common: Fix refcount leak bug (Liang He) 
- mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on program/erase times (Sascha Hauer) 
- mtd: rawnand: gpmi: validate controller clock rate (Dario Binacchi) 
- net: stmmac: fix unbalanced ptp clock issue in suspend/resume flow (Biao Huang) 
- net: stmmac: fix pm runtime issue in stmmac_dvr_remove() (Biao Huang) 
- tcp: Fix a data-race around sysctl_tcp_probe_interval. (Kuniyuki Iwashima) 
- tcp: Fix a data-race around sysctl_tcp_probe_threshold. (Kuniyuki Iwashima) 
- tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. (Kuniyuki Iwashima) 
- tcp: Fix data-races around sysctl_tcp_min_snd_mss. (Kuniyuki Iwashima) 
- tcp: Fix data-races around sysctl_tcp_base_mss. (Kuniyuki Iwashima) 
- tcp: Fix data-races around sysctl_tcp_mtu_probing. (Kuniyuki Iwashima) 
- tcp: Fix data-races around sysctl_tcp_l3mdev_accept. (Kuniyuki Iwashima) 
- tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if() (Eric Dumazet) 
- tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. (Kuniyuki Iwashima) 
- ip: Fix a data-race around sysctl_fwmark_reflect. (Kuniyuki Iwashima) 
- ip: Fix a data-race around sysctl_ip_autobind_reuse. (Kuniyuki Iwashima) 
- ip: Fix data-races around sysctl_ip_nonlocal_bind. (Kuniyuki Iwashima) 
- ip: Fix data-races around sysctl_ip_fwd_update_priority. (Kuniyuki Iwashima) 
- ip: Fix data-races around sysctl_ip_fwd_use_pmtu. (Kuniyuki Iwashima) 
- ip: Fix data-races around sysctl_ip_no_pmtu_disc. (Kuniyuki Iwashima) 
- igc: Reinstate IGC_REMOVED logic and implement it properly (Lennert Buytenhek) 
- Revert "e1000e: Fix possible HW unit hang after an s0ix exit" (Sasha Neftin) 
- e1000e: Enable GPT clock before sending message to CSME (Sasha Neftin) 
- nvme: fix block device naming collision (Israel Rukshin) 
- nvme: check for duplicate identifiers earlier (Christoph Hellwig) 
- scsi: ufs: core: Drop loglevel of WriteBoost message (Bjorn Andersson) 
- scsi: megaraid: Clear READ queue map's nr_queues (Ming Lei) 
- drm/amd/display: Ignore First MST Sideband Message Return Error (Fangzhi Zuo) 
- drm/amdgpu/display: add quirk handling for stutter mode (Alex Deucher) 
- drm/amd/display: Fork thread to offload work of hpd_rx_irq (Wayne Lin) 
- drm/amd/display: Add option to defer works of hpd_rx_irq (Wayne Lin) 
- drm/amd/display: Support for DMUB HPD interrupt handling (Jude Shih) 
- tcp: Fix data-races around sysctl_tcp_ecn. (Kuniyuki Iwashima) 
- sysctl: move some boundary constants from sysctl.c to sysctl_vals (Xiaoming Ni) 
- mm/pagealloc: sysctl: change watermark_scale_factor max limit to 30% (Suren Baghdasaryan) 
- net: tun: split run_ebpf_filter() and pskb_trim() into different "if statement" (Dongli Zhang) 
- ipv4/tcp: do not use per netns ctl sockets (Eric Dumazet) 
- perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() (Peter Zijlstra) 
- pinctrl: ralink: Check for null return of devm_kcalloc (William Dean) 
- pinctrl: ralink: rename pinctrl-rt2880 to pinctrl-ralink (Arınç ÜNAL) 
- pinctrl: ralink: rename MT7628(an) functions to MT76X8 (Arınç ÜNAL) 
- RDMA/irdma: Fix sleep from invalid context BUG (Mustafa Ismail) 
- RDMA/irdma: Do not advertise 1GB page size for x722 (Mustafa Ismail) 
- power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe (Miaoqian Lin) 
- xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() (Hangyu Hua) 
- ip: Fix data-races around sysctl_ip_default_ttl. (Kuniyuki Iwashima) 
- r8152: fix a WOL issue (Hayes Wang) 
- xfs: fix perag reference leak on iteration race with growfs (Brian Foster) 
- xfs: terminate perag iteration reliably on agcount (Brian Foster) 
- xfs: rename the next_agno perag iteration variable (Brian Foster) 
- xfs: fold perag loop iteration logic into helper function (Brian Foster) 
- xfs: fix maxlevels comparisons in the btree staging code (Darrick J. Wong) 
- mt76: mt7921: Fix the error handling path of mt7921_pci_probe() (Christophe JAILLET) 
- mt76: mt7921e: fix possible probe failure after reboot (Sean Wang) 
- mt76: mt7921: use physical addr to unify register access (Sean Wang) 
- Revert "mt76: mt7921e: fix possible probe failure after reboot" (Sean Wang) 
- Revert "mt76: mt7921: Fix the error handling path of mt7921_pci_probe()" (Sean Wang) 
- batman-adv: Use netif_rx_any_context() any. (Sebastian Andrzej Siewior) 
- serial: mvebu-uart: correctly report configured baudrate value (Pali Rohár) 
- PCI: hv: Fix interrupt mapping for multi-MSI (Jeffrey Hugo) 
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Jeffrey Hugo) 
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Jeffrey Hugo) 
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Jeffrey Hugo) 
- Revert "selftest/vm: verify mmap addr in mremap_test" (Oleksandr Tymoshenko) 
- Revert "selftest/vm: verify remap destination address in mremap_test" (Oleksandr Tymoshenko) 
- bus: mhi: host: pci_generic: add Telit FN990 (Daniele Palmas) 
- bus: mhi: host: pci_generic: add Telit FN980 v1 hardware revision (Daniele Palmas) 
- drm/ttm: fix locking in vmap/vunmap TTM GEM helpers (Christian König) 
- mlxsw: spectrum_router: Fix IPv4 nexthop gateway indication (Ido Schimmel) 
- riscv: add as-options for modules with assembly compontents (Ben Dooks) 
- pinctrl: stm32: fix optional IRQ support to gpios (Fabien Dessenne) 
- LTS version: v5.15.57 (Jack Vogel) 
- x86: Use -mindirect-branch-cs-prefix for RETPOLINE builds (Peter Zijlstra) 
- um: Add missing apply_returns() (Peter Zijlstra) 
- x86/asm/32: Fix ANNOTATE_UNRET_SAFE use on 32-bit (Jiri Slaby) 
- x86/xen: Fix initialisation in hypercall_page after rethunk (Ben Hutchings) 
- x86/static_call: Serialize __static_call_fixup() properly (Thomas Gleixner) 
- x86/speculation: Disable RRSBA behavior (Pawan Gupta) 
- x86/kexec: Disable RET on kexec (Konrad Rzeszutek Wilk) 
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Thadeu Lima de Souza Cascardo) 
- x86/entry: Move PUSH_AND_CLEAR_REGS() back into error_entry (Peter Zijlstra) 
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Pawan Gupta) 
- x86/retbleed: Add fine grained Kconfig knobs (Peter Zijlstra) 
- objtool: Re-add UNWIND_HINT_{SAVE_RESTORE} (Josh Poimboeuf) 
- objtool: Add entry UNRET validation (Peter Zijlstra) 
- x86/xen: Add UNTRAIN_RET (Peter Zijlstra) 
- intel_idle: Disable IBRS during long idle (Peter Zijlstra) 
- x86: Add magic AMD return-thunk (Peter Zijlstra) 
- x86/entry: Avoid very early RET (Peter Zijlstra) 
- x86/ftrace: Use alternative RET encoding (Peter Zijlstra) 
- objtool: skip non-text sections when adding return-thunk sites (Thadeu Lima de Souza Cascardo) 
- bpf,x86: Respect X86_FEATURE_RETPOLINE* (Peter Zijlstra) 
- bpf,x86: Simplify computing label offsets (Peter Zijlstra) 
- x86/alternative: Add debug prints to apply_retpolines() (Peter Zijlstra) 
- x86/alternative: Try inline spectre_v2=retpoline,amd (Peter Zijlstra) 
- x86/alternative: Handle Jcc __x86_indirect_thunk_eg (Peter Zijlstra) 
- x86/alternative: Implement .retpoline_sites support (Peter Zijlstra) 
- x86/retpoline: Create a retpoline thunk array (Peter Zijlstra) 
- x86/retpoline: Move the retpoline thunk declarations to nospec-branch.h (Peter Zijlstra) 
- x86/asm: Fixup odd GEN-for-each-reg.h usage (Peter Zijlstra) 
- x86/asm: Fix register order (Peter Zijlstra) 
- x86/retpoline: Remove unused replacement symbols (Peter Zijlstra) 
- objtool: Introduce CFI hash (Peter Zijlstra) 
- objtool,x86: Replace alternatives with .retpoline_sites (Peter Zijlstra) 
- objtool: Shrink struct instruction (Peter Zijlstra) 
- objtool: Explicitly avoid self modifying code in .altinstr_replacement (Peter Zijlstra) 
- objtool: Fix SLS validation for kcov tail-call replacement (Peter Zijlstra) 
- objtool: Classify symbols (Peter Zijlstra) 
- x86/entry: Don't call error_entry() for XENPV (Lai Jiangshan) 
- x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry() (Lai Jiangshan) 
- x86/entry: Switch the stack after error_entry() returns (Lai Jiangshan) 
- x86/traps: Use pt_regs directly in fixup_bad_iret() (Lai Jiangshan) 
- LTS version: v5.15.56 (Jack Vogel) 
- drm/aperture: Run fbdev removal before internal helpers (Thomas Zimmermann) 
- x86/pat: Fix x86_has_pat_wp() (Juergen Gross) 
- serial: 8250: Fix PM usage_count for console handover (Ilpo Järvinen) 
- serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle (Ilpo Järvinen) 
- serial: stm32: Clear prev values before setting RTS delays (Ilpo Järvinen) 
- serial: 8250: fix return error code in serial8250_request_std_resource() (Yi Yang) 
- vt: fix memory overlapping when deleting chars in the buffer (Yangxi Xiang) 
- tty: serial: samsung_tty: set dma burst_size to 1 (Chanho Park) 
- usb: dwc3: gadget: Fix event pending check (Thinh Nguyen) 
- usb: typec: add missing uevent when partner support PD (Linyu Yuan) 
- USB: serial: ftdi_sio: add Belimo device ids (Lucien Buchmann) 
- signal handling: don't use BUG_ON() for debugging (Linus Torvalds) 
- nvme-pci: phison e16 has bogus namespace ids (Keith Busch) 
- ALSA: usb-audio: Add quirk for Fiero SC-01 (fw v1.0.0) (Egor Vorontsov) 
- ALSA: usb-audio: Add quirk for Fiero SC-01 (Egor Vorontsov) 
- ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices (John Veness) 
- Revert "can: xilinx_can: Limit CANFD brp to 2" (Srinivas Neeli) 
- ARM: dts: stm32: use the correct clock source for CEC on stm32mp151 (Gabriel Fernandez) 
- soc: ixp4xx/npe: Fix unused match warning (Linus Walleij) 
- x86: Clear .brk area at early boot (Juergen Gross) 
- irqchip: or1k-pic: Undefine mask_ack for level triggered hardware (Stafford Horne) 
- ASoC: madera: Fix event generation for rate controls (Charles Keepax) 
- ASoC: madera: Fix event generation for OUT1 demux (Charles Keepax) 
- ASoC: cs47l15: Fix event generation for low power mux control (Charles Keepax) 
- ASoC: dapm: Initialise kcontrol data for mux/demux controls (Charles Keepax) 
- ASoC: rt711-sdca: fix kernel NULL pointer dereference when IO error (Shuming Fan) 
- ASoC: wm5110: Fix DRE control (Charles Keepax) 
- ASoC: Intel: bytcr_wm5102: Fix GPIO related probe-ordering problem (Hans de Goede) 
- ASoC: wcd938x: Fix event generation for some controls (Mark Brown) 
- ASoC: SOF: Intel: hda-loader: Clarify the cl_dsp_init() flow (Peter Ujfalusi) 
- ASoC: codecs: rt700/rt711/rt711-sdca: initialize workqueues in probe (Pierre-Louis Bossart) 
- ASoC: rt7*-sdw: harden jack_detect_handler (Pierre-Louis Bossart) 
- ASoC: rt711: fix calibrate mutex initialization (Pierre-Louis Bossart) 
- ASoC: Intel: sof_sdw: handle errors on card registration (Pierre-Louis Bossart) 
- ASoC: rt711-sdca-sdw: fix calibrate mutex initialization (Pierre-Louis Bossart) 
- ASoC: Realtek/Maxim SoundWire codecs: disable pm_runtime on remove (Pierre-Louis Bossart) 
- pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux() (Haowen Bai) 
- ASoC: ops: Fix off by one in range control validation (Mark Brown) 
- net: sfp: fix memory leak in sfp_probe() (Jianglei Nie) 
- nvme: fix regression when disconnect a recovering ctrl (Ruozhu Li) 
- nvme-tcp: always fail a request when sending it failed (Sagi Grimberg) 
- NFC: nxp-nci: don't print header length mismatch on i2c error (Michael Walle) 
- net: tipc: fix possible refcount leak in tipc_sk_create() (Hangyu Hua) 
- fbdev: Disable sysfb device registration when removing conflicting FBs (Javier Martinez Canillas) 
- firmware: sysfb: Add sysfb_disable() helper function (Javier Martinez Canillas) 
- firmware: sysfb: Make sysfb_create_simplefb() return a pdev pointer (Javier Martinez Canillas) 
- platform/x86: hp-wmi: Ignore Sanitization Mode event (Kai-Heng Feng) 
- cpufreq: pmac32-cpufreq: Fix refcount leak bug (Liang He) 
- scsi: hisi_sas: Limit max hw sectors for v3 HW (John Garry) 
- netfilter: br_netfilter: do not skip all hooks with 0 priority (Florian Westphal) 
- virtio_mmio: Restore guest page size on resume (Stephan Gerhold) 
- virtio_mmio: Add missing PM calls to freeze/restore (Stephan Gerhold) 
- vduse: Tie vduse mgmtdev and its device (Parav Pandit) 
- vdpa/mlx5: Initialize CVQ vringh only once (Eli Cohen) 
- powerpc/xive/spapr: correct bitmap allocation size (Nathan Lynch) 
- ksmbd: use SOCK_NONBLOCK type for kernel_accept() (Namjae Jeon) 
- btrfs: zoned: fix a leaked bioc in read_zone_info (Christoph Hellwig) 
- btrfs: rename btrfs_bio to btrfs_io_context (Qu Wenruo) 
- mm: sysctl: fix missing numa_stat when !CONFIG_HUGETLB_PAGE (Muchun Song) 
- ACPI: video: Fix acpi_video_handles_brightness_key_presses() (Hans de Goede) 
- net/tls: Check for errors in tls_device_init (Tariq Toukan) 
- KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op() (Vitaly Kuznetsov) 
- net: atlantic: remove aq_nic_deinit() when resume (Chia-Lin Kao (AceLan)) 
- net: atlantic: remove deep parameter on suspend/resume functions (Chia-Lin Kao (AceLan)) 
- sfc: fix kernel panic when creating VF (Íñigo Huguet) 
- seg6: bpf: fix skb checksum in bpf_push_seg6_encap() (Andrea Mayer) 
- seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors (Andrea Mayer) 
- seg6: fix skb checksum evaluation in SRH encapsulation/insertion (Andrea Mayer) 
- ceph: switch netfs read ops to use rreq->inode instead of rreq->mapping->host (Jeff Layton) 
- sfc: fix use after free when disabling sriov (Íñigo Huguet) 
- drm/amd/pm: Prevent divide by zero (Yefim Barashkin) 
- drm/amd/display: Only use depth 36 bpp linebuffers on DCN display engines. (Mario Kleiner) 
- ima: Fix potential memory leak in ima_init_crypto() (Jianglei Nie) 
- ima: force signature verification when CONFIG_KEXEC_SIG is configured (Coiby Xu) 
- net: stmmac: fix leaks in probe (Dan Carpenter) 
- net: ftgmac100: Hold reference returned by of_get_child_by_name() (Liang He) 
- nexthop: Fix data-races around nexthop_compat_mode. (Kuniyuki Iwashima) 
- ipv4: Fix data-races around sysctl_ip_dynaddr. (Kuniyuki Iwashima) 
- tcp: Fix a data-race around sysctl_tcp_ecn_fallback. (Kuniyuki Iwashima) 
- raw: Fix a data-race around sysctl_raw_l3mdev_accept. (Kuniyuki Iwashima) 
- icmp: Fix a data-race around sysctl_icmp_ratemask. (Kuniyuki Iwashima) 
- icmp: Fix a data-race around sysctl_icmp_ratelimit. (Kuniyuki Iwashima) 
- icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr. (Kuniyuki Iwashima) 
- icmp: Fix a data-race around sysctl_icmp_ignore_bogus_error_responses. (Kuniyuki Iwashima) 
- icmp: Fix data-races around sysctl_icmp_echo_enable_probe. (Kuniyuki Iwashima) 
- sysctl: Fix data-races in proc_dointvec_ms_jiffies(). (Kuniyuki Iwashima) 
- sysctl: Fix data-races in proc_dou8vec_minmax(). (Kuniyuki Iwashima) 
- bnxt_en: Fix bnxt_refclk_read() (Pavan Chebbi) 
- bnxt_en: Fix bnxt_reinit_after_abort() code path (Michael Chan) 
- drm/i915: Require the vm mutex for i915_vma_bind() (Thomas Hellström) 
- drm/i915/uc: correctly track uc_fw init failure (Daniele Ceraolo Spurio) 
- drm/i915/gt: Serialize TLB invalidates with GT resets (Chris Wilson) 
- drm/i915/gt: Serialize GRDOM access between multiple engine resets (Chris Wilson) 
- drm/i915/dg2: Add Wa_22011100796 (Bruce Chang) 
- drm/i915/selftests: fix a couple IS_ERR() vs NULL tests (Dan Carpenter) 
- tracing: Fix sleeping while atomic in kdb ftdump (Douglas Anderson) 
- lockd: fix nlm_close_files (Jeff Layton) 
- lockd: set fl_owner when unlocking files (Jeff Layton) 
- xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE (Demi Marie Obenour) 
- drm/i915/gvt: IS_ERR() vs NULL bug in intel_gvt_update_reg_whitelist() (Dan Carpenter) 
- netfilter: nf_tables: replace BUG_ON by element length check (Pablo Neira Ayuso) 
- netfilter: nf_log: incorrect offset to network header (Pablo Neira Ayuso) 
- arm64: dts: broadcom: bcm4908: Fix cpu node for smp boot (William Zhang) 
- arm64: dts: broadcom: bcm4908: Fix timer node for BCM4906 SoC (William Zhang) 
- ARM: dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero (Michal Suchanek) 
- ARM: dts: at91: sama5d2: Fix typo in i2s1 node (Ryan Wanner) 
- ipv4: Fix a data-race around sysctl_fib_sync_mem. (Kuniyuki Iwashima) 
- icmp: Fix data-races around sysctl. (Kuniyuki Iwashima) 
- cipso: Fix data-races around sysctl. (Kuniyuki Iwashima) 
- net: Fix data-races around sysctl_mem. (Kuniyuki Iwashima) 
- inetpeer: Fix data-races around sysctl. (Kuniyuki Iwashima) 
- tcp: Fix a data-race around sysctl_tcp_max_orphans. (Kuniyuki Iwashima) 
- sysctl: Fix data races in proc_dointvec_jiffies(). (Kuniyuki Iwashima) 
- sysctl: Fix data races in proc_doulongvec_minmax(). (Kuniyuki Iwashima) 
- sysctl: Fix data races in proc_douintvec_minmax(). (Kuniyuki Iwashima) 
- sysctl: Fix data races in proc_dointvec_minmax(). (Kuniyuki Iwashima) 
- sysctl: Fix data races in proc_douintvec(). (Kuniyuki Iwashima) 
- sysctl: Fix data races in proc_dointvec(). (Kuniyuki Iwashima) 
- net: ethernet: ti: am65-cpsw: Fix devlink port register sequence (Siddharth Vadapalli) 
- net: stmmac: dwc-qos: Disable split header for Tegra194 (Jon Hunter) 
- ASoC: Intel: Skylake: Correct the handling of fmt_config flexible array (Peter Ujfalusi) 
- ASoC: Intel: Skylake: Correct the ssp rate discovery in skl_get_ssp_clks() (Peter Ujfalusi) 
- ASoC: tas2764: Fix amp gain register offset & default (Hector Martin) 
- ASoC: tas2764: Correct playback volume range (Hector Martin) 
- ASoC: tas2764: Fix and extend FSYNC polarity handling (Martin Povišer) 
- ASoC: tas2764: Add post reset delays (Martin Povišer) 
- ASoC: sgtl5000: Fix noise on shutdown/remove (Francesco Dolcini) 
- ima: Fix a potential integer overflow in ima_appraise_measurement (Huaxin Lu) 
- drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector() (Hangyu Hua) 
- net/mlx5e: Ring the TX doorbell on DMA errors (Maxim Mikityanskiy) 
- net/mlx5e: Fix capability check for updating vnic env counters (Gal Pressman) 
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Paul Blakey) 
- net/mlx5e: kTLS, Fix build time constant test in RX (Tariq Toukan) 
- net/mlx5e: kTLS, Fix build time constant test in TX (Tariq Toukan) 
- ARM: 9210/1: Mark the FDT_FIXED sections as shareable (Zhen Lei) 
- ARM: 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle (Ard Biesheuvel) 
- spi: amd: Limit max transfer and message size (Cristian Ciocaltea) 
- ARM: dts: imx6qdl-ts7970: Fix ngpio typo and count (Kris Bahnsen) 
- reset: Fix devm bulk optional exclusive control getter (Serge Semin) 
- xfs: drop async cache flushes from CIL commits. (Dave Chinner) 
- xfs: don't include bnobt blocks when reserving free block pool (Darrick J. Wong) 
- Revert "evm: Fix memleak in init_desc" (Xiu Jianfeng) 
- sh: convert nommu io{re,un}map() to static inline functions (Geert Uytterhoeven) 
- nilfs2: fix incorrect masking of permission flags for symlinks (Ryusuke Konishi) 
- fs/remap: constrain dedupe of EOF blocks (Dave Chinner) 
- drm/panfrost: Fix shrinker list corruption by madvise IOCTL (Dmitry Osipenko) 
- drm/panfrost: Put mapping instead of shmem obj on panfrost_mmu_map_fault_addr() error (Dmitry Osipenko) 
- btrfs: return -EAGAIN for NOWAIT dio reads/writes on compressed and inline extents (Filipe Manana) 
- cgroup: Use separate src/dst nodes when preloading css_sets for migration (Tejun Heo) 
- wifi: mac80211: fix queue selection for mesh/OCB interfaces (Felix Fietkau) 
- ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction (Ard Biesheuvel) 
- ARM: 9213/1: Print message about disabled Spectre workarounds only once (Dmitry Osipenko) 
- ip: fix dflt addr selection for connected nexthop (Nicolas Dichtel) 
- net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale pointer (Steven Rostedt (Google)) 
- tracing/histograms: Fix memory leak problem (Zheng Yejian) 
- mm: split huge PUD on wp_huge_pud fallback (Gowans, James) 
- mm: userfaultfd: fix UFFDIO_CONTINUE on fallocated shmem pages (Axel Rasmussen) 
- xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue (Juergen Gross) 
- ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop (Meng Tang) 
- ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc221 (Meng Tang) 
- ALSA: hda/realtek: fix mute/micmute LEDs for HP machines (Jeremy Szu) 
- ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 (Meng Tang) 
- ALSA: hda/realtek: Fix headset mic for Acer SF313-51 (Meng Tang) 
- ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model (Meng Tang) 
- ALSA: hda - Add fixup for Dell Latitidue E5430 (Meng Tang) 
- LTS version: v5.15.55 (Jack Vogel) 
- Revert "mtd: rawnand: gpmi: Fix setting busy timeout setting" (Greg Kroah-Hartman) 
- LTS version: v5.15.54 (Jack Vogel) 
- selftests/net: fix section name when using xdp_dummy.o (Hangbin Liu) 
- dmaengine: idxd: force wq context cleanup on device disable path (Dave Jiang) 
- dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate (Miaoqian Lin) 
- dmaengine: qcom: bam_dma: fix runtime PM underflow (Caleb Connolly) 
- dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate (Miaoqian Lin) 
- dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly (Michael Walle) 
- dmaengine: lgm: Fix an error handling path in intel_ldma_probe() (Christophe JAILLET) 
- dmaengine: pl330: Fix lockdep warning about non-static key (Dmitry Osipenko) 
- ida: don't use BUG_ON() for debugging (Linus Torvalds) 
- dt-bindings: dma: allwinner,sun50i-a64-dma: Fix min/max typo (Samuel Holland) 
- Revert "serial: 8250_mtk: Make sure to select the right FEATURE_SEL" (AngeloGioacchino Del Regno) 
- Revert "mm/memory-failure.c: fix race with changing page compound again" (Naoya Horiguchi) 
- misc: rtsx_usb: set return value in rsp_buf alloc err path (Shuah Khan) 
- misc: rtsx_usb: use separate command and response buffers (Shuah Khan) 
- misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer (Shuah Khan) 
- dmaengine: imx-sdma: Allow imx8m for imx7 FW revs (Peter Robinson) 
- i2c: cadence: Unregister the clk notifier in error path (Satish Nagireddy) 
- r8169: fix accessing unset transport header (Heiner Kallweit) 
- selftests: forwarding: fix error message in learning_test (Vladimir Oltean) 
- selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT (Vladimir Oltean) 
- selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT (Vladimir Oltean) 
- ibmvnic: Properly dispose of all skbs during a failover. (Rick Lindsley) 
- ARM: dts: stm32: add missing usbh clock and fix clk order on stm32mp15 (Fabrice Gasnier) 
- ARM: dts: stm32: use usbphyc ck_usbo_48m as USBH OHCI clock on stm32mp151 (Amelie Delaunay) 
- i40e: Fix VF's MAC Address change on VM (Norbert Zulinski) 
- i40e: Fix dropped jumbo frames statistics (Lukasz Cieplicki) 
- i2c: piix4: Fix a memory leak in the EFCH MMIO support (Jean Delvare) 
- xsk: Clear page contiguity bit when unmapping pool (Ivan Malov) 
- ARM: at91: fix soc detection for SAM9X60 SiPs (Mihai Sain) 
- ARM: dts: at91: sama5d2_icp: fix eeprom compatibles (Eugen Hristev) 
- ARM: dts: at91: sam9x60ek: fix eeprom compatible and size (Eugen Hristev) 
- ARM: at91: pm: use proper compatibles for sama7g5's rtc and rtt (Claudiu Beznea) 
- ARM: at91: pm: use proper compatibles for sam9x60's rtc and rtt (Claudiu Beznea) 
- ARM: at91: pm: use proper compatible for sama5d2's rtc (Claudiu Beznea) 
- arm64: dts: qcom: msm8992-*: Fix vdd_lvs1_2-supply typo (Stephan Gerhold) 
- pinctrl: sunxi: sunxi_pconf_set: use correct offset (Andrei Lalaev) 
- arm64: dts: imx8mp-phyboard-pollux-rdk: correct i2c2 & mmc settings (Peng Fan) 
- arm64: dts: imx8mp-phyboard-pollux-rdk: correct eqos pad settings (Peng Fan) 
- arm64: dts: imx8mp-phyboard-pollux-rdk: correct uart pad settings (Peng Fan) 
- arm64: dts: imx8mp-evk: correct I2C3 pad settings (Peng Fan) 
- arm64: dts: imx8mp-evk: correct I2C1 pad settings (Peng Fan) 
- arm64: dts: imx8mp-evk: correct eqos pad settings (Peng Fan) 
- arm64: dts: imx8mp-evk: correct vbus pad settings (Peng Fan) 
- arm64: dts: imx8mp-evk: correct gpio-led pad settings (Peng Fan) 
- arm64: dts: imx8mp-evk: correct the uart2 pinctl value (Sherry Sun) 
- arm64: dts: imx8mp-evk: correct mmc pad settings (Peng Fan) 
- ARM: mxs_defconfig: Enable the framebuffer (Fabio Estevam) 
- arm64: dts: qcom: sdm845: use dispcc AHB clock for mdss node (Dmitry Baryshkov) 
- arm64: dts: qcom: msm8994: Fix CPU6/7 reg values (Konrad Dybcio) 
- ASoC: codecs: rt700/rt711/rt711-sdca: resume bus/codec in .set_jack_detect (Pierre-Louis Bossart) 
- ASoC: rt711-sdca: Add endianness flag in snd_soc_component_driver (Charles Keepax) 
- ASoC: rt711: Add endianness flag in snd_soc_component_driver (Charles Keepax) 
- pinctrl: sunxi: a83t: Fix NAND function name for some pins (Samuel Holland) 
- ARM: meson: Fix refcount leak in meson_smp_prepare_cpus (Miaoqian Lin) 
- tty: n_gsm: fix encoding of command/response bit ([email protected]) 
- btrfs: fix use of uninitialized variable at rm device ioctl (Tom Rix) 
- virtio-blk: modify the value type of num in virtio_queue_rq() (Ye Guojin) 
- btrfs: fix error pointer dereference in btrfs_ioctl_rm_dev_v2() (Dan Carpenter) 
- Revert "serial: sc16is7xx: Clear RS485 bits in the shutdown" (Hui Wang) 
- can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits (Jimmy Assarsson) 
- can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression (Jimmy Assarsson) 
- can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info (Jimmy Assarsson) 
- net: dsa: qca8k: reset cpu port on MTU change (Christian Marangi) 
- powerpc/powernv: delay rng platform device creation until later in boot (Jason A. Donenfeld) 
- video: of_display_timing.h: include errno.h (Hsin-Yi Wang) 
- memregion: Fix memregion_free() fallback definition (Dan Williams) 
- PM: runtime: Redefine pm_runtime_release_supplier() (Rafael J. Wysocki) 
- fbcon: Prevent that screen size is smaller than font size (Helge Deller) 
- fbcon: Disallow setting font bigger than screen size (Helge Deller) 
- fbmem: Check virtual screen sizes in fb_set_var() (Helge Deller) 
- fbdev: fbmem: Fix logo center image dx issue (Guiling Deng) 
- iommu/vt-d: Fix PCI bus rescan device hot add (Yian Chen) 
- module: fix [e_shstrndx].sh_size=0 OOB access (Alexey Dobriyan) 
- module: change to print useful messages from elf_validity_check() (Shuah Khan) 
- dt-bindings: soc: qcom: smd-rpm: Fix missing MSM8936 compatible (Bryan O'Donoghue) 
- dt-bindings: soc: qcom: smd-rpm: Add compatible for MSM8953 SoC (Vladimir Lypak) 
- rxrpc: Fix locking issue (David Howells) 
- irqchip/gic-v3: Refactor ISB + EOIR at ack time (Mark Rutland) 
- irqchip/gic-v3: Ensure pseudo-NMIs have an ISB between ack and handling (Mark Rutland) 
- io_uring: avoid io-wq -EAGAIN looping for !IOPOLL (Pavel Begunkov) 
- Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event (Sean Wang) 
- Bluetooth: protect le accept and resolv lists with hdev->lock (Niels Dossche) 
- drm/mediatek: Add vblank register/unregister callback functions (Rex-BC Chen) 
- drm/mediatek: Add cmdq_handle in mtk_crtc (Chun-Kuang Hu) 
- drm/mediatek: Detect CMDQ execution timeout (Chun-Kuang Hu) 
- drm/mediatek: Remove the pointer of struct cmdq_client (Chun-Kuang Hu) 
- drm/mediatek: Use mailbox rx_callback instead of cmdq_task_cb (Chun-Kuang Hu) 
- drm/i915: Fix a race between vma / object destruction and unbinding (Thomas Hellström) 
- drm/amdgpu: vi: disable ASPM on Intel Alder Lake based systems (Richard Gong) 
- drm/amd: Refactor amdgpu_aspm to be evaluated per device (Mario Limonciello) 
- tty: n_gsm: fix invalid gsmtty_write_room() result (Daniel Starke) 
- serial: 8250_mtk: Make sure to select the right FEATURE_SEL (AngeloGioacchino Del Regno) 
- tty: n_gsm: fix sometimes uninitialized warning in gsm_dlci_modem_output() (Daniel Starke) 
- tty: n_gsm: fix invalid use of MSC in advanced option (Daniel Starke) 
- mm/hwpoison: fix race between hugetlb free/demotion and memory_failure_hugetlb() (Naoya Horiguchi) 
- mm/memory-failure.c: fix race with changing page compound again (Miaohe Lin) 
- mm/hwpoison: avoid the impact of hwpoison_filter() return value on mce handler (luofei) 
- mm/hwpoison: mf_mutex for soft offline and unpoison (Naoya Horiguchi) 
- KVM: Initialize debugfs_dentry when a VM is created to avoid NULL deref (Sean Christopherson) 
- btrfs: zoned: use dedicated lock for data relocation (Naohiro Aota) 
- btrfs: zoned: encapsulate inode locking for zoned relocation (Johannes Thumshirn) 
- tty: n_gsm: fix missing update of modem controls after DLCI open (Daniel Starke) 
- ALSA: usb-audio: add mapping for MSI MAG X570S Torpedo MAX. (Maurizio Avogadro) 
- ALSA: usb-audio: add mapping for MSI MPG X570S Carbon Max Wifi. (Johannes Schickel) 
- tty: n_gsm: fix frame reception handling (Daniel Starke) 
- tty: n_gsm: Save dlci address open status when config requester (Zhenguo Zhao) 
- tty: n_gsm: Modify CR,PF bit when config requester (Zhenguo Zhao) 
- KVM: Don't create VM debugfs files outside of the VM directory (Oliver Upton) 
- drm/amd/vcn: fix an error msg on vcn 3.0 (tiancyin) 
- ASoC: rt5682: fix an incorrect NULL check on list iterator (Xiaomeng Tong) 
- ASoC: rt5682: move clk related code to rt5682_i2c_probe (Jack Yu) 
- uapi/linux/stddef.h: Add include guards (Tadeusz Struk) 
- stddef: Introduce DECLARE_FLEX_ARRAY() helper (Kees Cook) 
- bus: mhi: Fix pm_state conversion to string (Paul Davey) 
- bus: mhi: core: Use correctly sized arguments for bit field (Kees Cook) 
- serial: sc16is7xx: Clear RS485 bits in the shutdown (Hui Wang) 
- powerpc/tm: Fix more userspace r13 corruption (Nicholas Piggin) 
- powerpc: flexible GPR range save/restore macros (Nicholas Piggin) 
- powerpc/32: Don't use lmw/stmw for saving/restoring non volatile regs (Christophe Leroy) 
- scsi: qla2xxx: Fix loss of NVMe namespaces after driver reload test (Arun Easi) 
- KVM: s390x: fix SCK locking (Claudio Imbrenda) 
- btrfs: don't access possibly stale fs_info data in device_list_add (Dongliang Mu) 
- KVM: use __vcalloc for very large allocations (Paolo Bonzini) 
- mm: vmalloc: introduce array allocation functions (Paolo Bonzini) 
- Compiler Attributes: add __alloc_size() for better bounds checking (Kees Cook) 
- mtd: spi-nor: Skip erase logic when SPI_NOR_NO_ERASE is set (Tudor Ambarus) 
- batman-adv: Use netif_rx(). (Sebastian Andrzej Siewior) 
- iio: accel: mma8452: use the correct logic to get mma8452_data (Haibo Chen) 
- riscv/mm: Add XIP_FIXUP for riscv_pfn_base (Palmer Dabbelt) 
- NFSD: COMMIT operations must not return NFS?ERR_INVAL (Chuck Lever) 
- NFSD: De-duplicate net_generic(nf->nf_net, nfsd_net_id) (Chuck Lever) 
- drm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bw (CHANDAN VURDIGERE NATARAJ) 
- drm/amd/display: Set min dcfclk if pipe count is 0 (Michael Strauss) 
- drbd: fix an invalid memory access caused by incorrect use of list iterator (Xiaomeng Tong) 
- drbd: Fix double free problem in drbd_create_device (Wu Bo) 
- drbd: add error handling support for add_disk() (Luis Chamberlain) 
- btrfs: remove device item and update super block in the same transaction (Qu Wenruo) 
- btrfs: use btrfs_get_dev_args_from_path in dev removal ioctls (Josef Bacik) 
- btrfs: add a btrfs_get_dev_args_from_path helper (Josef Bacik) 
- btrfs: handle device lookup with btrfs_dev_lookup_args (Josef Bacik) 
- vdpa/mlx5: Avoid processing works if workqueue was destroyed (Eli Cohen) 
- gfs2: Fix gfs2_file_buffered_write endless loop workaround (Andreas Gruenbacher) 
- scsi: qla2xxx: Fix crash during module load unload test (Arun Easi) 
- scsi: qla2xxx: edif: Replace list_for_each_safe with list_for_each_entry_safe (Quinn Tran) 
- scsi: qla2xxx: Fix laggy FC remote port session recovery (Quinn Tran) 
- scsi: qla2xxx: Move heartbeat handling from DPC thread to workqueue (Manish Rangankar) 
- KVM: x86/mmu: Use common TDP MMU zap helper for MMU notifier unmap hook (Sean Christopherson) 
- KVM: x86/mmu: Use yield-safe TDP MMU root iter in MMU notifier unmapping (Sean Christopherson) 
- clk: renesas: r9a07g044: Update multiplier and divider values for PLL2/3 (Lad Prabhakar) 
- cxl/port: Hold port reference until decoder release (Dan Williams) 
- mt76: mt7921: do not always disable fw runtime-pm (Lorenzo Bianconi) 
- mt76: mt76_connac: fix MCU_CE_CMD_SET_ROC definition error (Sean Wang) 
- media: davinci: vpif: fix use-after-free on driver unbind (Johan Hovold) 
- media: omap3isp: Use struct_group() for memcpy() region (Kees Cook) 
- stddef: Introduce struct_group() helper macro (Kees Cook) 
- block: fix rq-qos breakage from skipping rq_qos_done_bio() (Tejun Heo) 
- block: only mark bio as tracked if it really is tracked (Jens Axboe) 
- block: use bdev_get_queue() in bio.c (Pavel Begunkov) 
- io_uring: ensure that fsnotify is always called (Jens Axboe) 
- virtio-blk: avoid preallocating big SGL for data (Max Gurtovoy) 
- ibmvnic: Allow queueing resets during probe (Sukadev Bhattiprolu) 
- ibmvnic: clear fop when retrying probe (Sukadev Bhattiprolu) 
- ibmvnic: init init_done_rc earlier (Sukadev Bhattiprolu) 
- s390/setup: preserve memory at OLDMEM_BASE and OLDMEM_SIZE (Alexander Egorenkov) 
- s390/setup: use physical pointers for memblock_reserve() (Alexander Gordeev) 
- s390/boot: allocate amode31 section in decompressor (Alexander Gordeev) 
- netfilter: nft_payload: don't allow th access for fragments (Florian Westphal) 
- netfilter: nft_payload: support for inner header matching / mangling (Pablo Neira Ayuso) 
- netfilter: nf_tables: convert pktinfo->tprot_set to flags field (Pablo Neira Ayuso) 
- ASoC: rt5682: Fix deadlock on resume (Peter Ujfalusi) 
- ASoC: rt5682: Re-detect the combo jack after resuming (Derek Fang) 
- ASoC: rt5682: Avoid the unexpected IRQ event during going to suspend (Derek Fang) 
- net/mlx5e: TC, Reject rules with forward and drop actions (Roi Dayan) 
- net/mlx5e: TC, Reject rules with drop and modify hdr action (Roi Dayan) 
- net/mlx5e: Split actions_match_supported() into a sub function (Roi Dayan) 
- net/mlx5e: Check action fwd/drop flag exists also for nic flows (Roi Dayan) 
- RISC-V: defconfigs: Set CONFIG_FB=y, for FB console (Palmer Dabbelt) 
- riscv: defconfig: enable DRM_NOUVEAU (Heinrich Schuchardt) 
- bpf, arm64: Use emit_addr_mov_i64() for BPF_PSEUDO_FUNC (Hou Tao) 
- bpf: Stop caching subprog index in the bpf_pseudo_func insn (Martin KaFai Lau) 
- mt76: mt7921: fix a possible race enabling/disabling runtime-pm (Lorenzo Bianconi) 
- mt76: mt7921: introduce mt7921_mcu_set_beacon_filter utility routine (Lorenzo Bianconi) 
- mt76: mt7921: get rid of mt7921_mac_set_beacon_filter (Lorenzo Bianconi) 
- platform/x86: wmi: Fix driver->notify() vs ->probe() race (Hans de Goede) 
- platform/x86: wmi: Replace read_takes_no_args with a flags field (Hans de Goede) 
- platform/x86: wmi: introduce helper to convert driver to WMI driver (Barnabás Pőcze) 
- qed: Improve the stack space of filter_config() (Shai Malin) 
- ath11k: add hw_param for wakeup_mhi (Seevalamuthu Mariappan) 
- memory: renesas-rpc-if: Avoid unaligned bus access for HyperFlash (Andrew Gabbasov) 
- media: ir_toy: prevent device from hanging during transmit (Sean Young) 
- PCI: pciehp: Ignore Link Down/Up caused by error-induced Hot Reset (Lukas Wunner) 
- PCI/portdrv: Rename pm_iter() to pcie_port_device_iter() (Lukas Wunner) 
- drm/i915: Replace the unconditional clflush with drm_clflush_virt_range() (Ville Syrjälä) 
- drm/i915/gt: Register the migrate contexts with their engines (Thomas Hellström) 
- drm/i915: Disable bonding on gen12+ platforms (Matthew Brost) 
- btrfs: fix deadlock between chunk allocation and chunk btree modifications (Filipe Manana) 
- dma-buf/poll: Get a file reference for outstanding fence callbacks (Michel Dänzer) 
- Input: goodix - try not to touch the reset-pin on x86/ACPI devices (Hans de Goede) 
- Input: goodix - refactor reset handling (Hans de Goede) 
- Input: goodix - add a goodix.h header file (Hans de Goede) 
- Input: goodix - change goodix_i2c_write() len parameter type to int (Hans de Goede) 
- Input: cpcap-pwrbutton - handle errors from platform_get_irq() (Tang Bin) 
- btrfs: fix warning when freeing leaf after subvolume creation failure (Filipe Manana) 
- btrfs: fix invalid delayed ref after subvolume creation failure (Filipe Manana) 
- btrfs: add additional parameters to btrfs_init_tree_ref/btrfs_init_data_ref (Nikolay Borisov) 
- btrfs: rename btrfs_alloc_chunk to btrfs_create_chunk (Nikolay Borisov) 
- netfilter: nft_set_pipapo: release elements in clone from abort path (Pablo Neira Ayuso) 
- net: rose: fix UAF bug caused by rose_t0timer_expiry (Duoming Zhou) 
- usbnet: fix memory leak in error case (Oliver Neukum) 
- bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals (Daniel Borkmann) 
- bpf: Fix incorrect verifier simulation around jmp32's jeq/jne (Daniel Borkmann) 
- can: mcp251xfd: mcp251xfd_regmap_crc_read(): update workaround broken CRC on TBC register (Thomas Kopp) 
- can: mcp251xfd: mcp251xfd_regmap_crc_read(): improve workaround handling for mcp2517fd (Thomas Kopp) 
- can: m_can: m_can_{read_fifo,echo_tx_event}(): shift timestamp to full 32 bits (Marc Kleine-Budde) 
- can: m_can: m_can_chip_config(): actually enable internal timestamping (Marc Kleine-Budde) 
- can: gs_usb: gs_usb_open/close(): fix memory leak (Rhett Aultman) 
- can: grcan: grcan_probe(): remove extra of_node_get() (Liang He) 
- can: bcm: use call_rcu() instead of costly synchronize_rcu() (Oliver Hartkopp) 
- ALSA: cs46xx: Fix missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: hda/realtek: Add quirk for Clevo L140PU (Tim Crawford) 
- ALSA: usb-audio: Workarounds for Behringer UMC 204/404 HD (Takashi Iwai) 
- Revert "selftests/bpf: Add test for bpf_timer overwriting crash" (Po-Hsu Lin) 
- mm/filemap: fix UAF in find_lock_entries (Liu Shixin) 
- mm/slub: add missing TID updates on slab deactivation (Jann Horn) 
- LTS version: v5.15.53 (Jack Vogel) 
- hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails (Yang Yingliang) 
- hwmon: (occ) Prevent power cap command overwriting poll response (Eddie James) 
- hwmon: (occ) Remove sequence numbering and checksum calculation (Eddie James) 
- drm/fourcc: fix integer type usage in uapi header (Carlos Llamas) 
- platform/x86: panasonic-laptop: filter out duplicate volume up/down/mute keypresses (Hans de Goede) 
- platform/x86: panasonic-laptop: don't report duplicate brightness key-presses (Hans de Goede) 
- platform/x86: panasonic-laptop: revert "Resolve hotkey double trigger bug" (Hans de Goede) 
- platform/x86: panasonic-laptop: sort includes alphabetically (Hans de Goede) 
- platform/x86: panasonic-laptop: de-obfuscate button codes (Stefan Seyfried) 
- drivers: cpufreq: Add missing of_node_put() in qoriq-cpufreq.c (Liang He) 
- drm/msm/gem: Fix error return on fence id alloc fail (Rob Clark) 
- drm/i915/gem: add missing else (katrinzhou) 
- net: fix IFF_TX_SKB_NO_LINEAR definition (Dan Carpenter) 
- fsi: occ: Force sequence numbering per OCC (Eddie James) 
- clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup() (Greg Kroah-Hartman) 
- net: usb: qmi_wwan: add Telit 0x1070 composition (Daniele Palmas) 
- xen/arm: Fix race in RB-tree based P2M accounting (Oleksandr Tyshchenko) 
- xen-netfront: restore __skb_queue_tail() positioning in xennet_get_responses() (Jan Beulich) 
- xen/blkfront: force data bouncing when backend is untrusted (Roger Pau Monne) 
- xen/netfront: force data bouncing when backend is untrusted (Roger Pau Monne) 
- xen/netfront: fix leaking data in shared pages (Roger Pau Monne) 
- xen/blkfront: fix leaking data in shared pages (Roger Pau Monne) 
- selftests/rseq: Change type of rseq_offset to ptrdiff_t (Mathieu Desnoyers) 
- selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread area (Mathieu Desnoyers) 
- selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread area (Mathieu Desnoyers) 
- selftests/rseq: Fix: work-around asm goto compiler bugs (Mathieu Desnoyers) 
- selftests/rseq: Remove arm/mips asm goto compiler work-around (Mathieu Desnoyers) 
- selftests/rseq: Fix warnings about #if checks of undefined tokens (Mathieu Desnoyers) 
- selftests/rseq: Fix ppc32 offsets by using long rather than off_t (Mathieu Desnoyers) 
- selftests/rseq: Fix ppc32 missing instruction selection "u" and "x" for load/store (Mathieu Desnoyers) 
- selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian (Mathieu Desnoyers) 
- selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35 (Mathieu Desnoyers) 
- selftests/rseq: Introduce thread pointer getters (Mathieu Desnoyers) 
- selftests/rseq: Introduce rseq_get_abi() helper (Mathieu Desnoyers) 
- selftests/rseq: Remove volatile from __rseq_abi (Mathieu Desnoyers) 
- selftests/rseq: Remove useless assignment to cpu variable (Mathieu Desnoyers) 
- selftests/rseq: introduce own copy of rseq uapi header (Mathieu Desnoyers) 
- selftests/rseq: remove ARRAY_SIZE define from individual tests (Shuah Khan) 
- selftests/bpf: Add test_verifier support to fixup kfunc call insns (Kumar Kartikeya Dwivedi) 
- tcp: add a missing nf_reset_ct() in 3WHS handling (Eric Dumazet) 
- MAINTAINERS: add Leah as xfs maintainer for 5.15.y (Leah Rumancik) 
- net: tun: avoid disabling NAPI twice (Jakub Kicinski) 
- mlxsw: spectrum_router: Fix rollback in tunnel next hop init (Petr Machata) 
- ipv6: fix lockdep splat in in6_dump_addrs() (Eric Dumazet) 
- ipv6/sit: fix ipip6_tunnel_get_prl return value (katrinzhou) 
- tunnels: do not assume mac header is set in skb_tunnel_check_pmtu() (Eric Dumazet) 
- ACPI: video: Change how we determine if brightness key-presses are handled (Hans de Goede) 
- io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio (Jens Axboe) 
- epic100: fix use after free on rmmod (Tong Zhang) 
- tipc: move bc link creation back to tipc_node_create (Xin Long) 
- NFC: nxp-nci: Don't issue a zero length i2c_master_read() (Michael Walle) 
- nfc: nfcmrvl: Fix irq_of_parse_and_map() return value (Krzysztof Kozlowski) 
- powerpc/memhotplug: Add add_pages override for PPC (Aneesh Kumar K.V) 
- net: bonding: fix use-after-free after 802.3ad slave unbind (Yevhen Orlov) 
- net: phy: ax88772a: fix lost pause advertisement configuration (Oleksij Rempel) 
- net: bonding: fix possible NULL deref in rlb code (Eric Dumazet) 
- net: asix: fix "can't send until first packet is send" issue (Oleksij Rempel) 
- net/sched: act_api: Notify user space if any actions were flushed before error (Victor Nogueira) 
- net/dsa/hirschmann: Add missing of_node_get() in hellcreek_led_setup() (Liang He) 
- netfilter: nft_dynset: restore set element counter when failing to update (Pablo Neira Ayuso) 
- s390: remove unneeded 'select BUILD_BIN2C' (Masahiro Yamada) 
- vdpa/mlx5: Update Control VQ callback information (Eli Cohen) 
- PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events (Miaoqian Lin) 
- caif_virtio: fix race between virtio_device_ready() and ndo_open() (Jason Wang) 
- vfs: fix copy_file_range() regression in cross-fs copies (Amir Goldstein) 
- NFSD: restore EINVAL error translation in nfsd_commit() (Alexey Khoroshilov) 
- net: ipv6: unexport __init-annotated seg6_hmac_net_init() (YueHaibing) 
- selftests: mptcp: more stable diag tests (Paolo Abeni) 
- usbnet: fix memory allocation in helpers (Oliver Neukum) 
- net: usb: asix: do not force pause frames support (Oleksij Rempel) 
- linux/dim: Fix divide by 0 in RDMA DIM (Tao Liu) 
- RDMA/cm: Fix memory leak in ib_cm_insert_listen (Miaoqian Lin) 
- RDMA/qedr: Fix reporting QP timeout attribute (Kamal Heib) 
- net: dp83822: disable rx error interrupt (Enguerrand de Ribaucourt) 
- net: dp83822: disable false carrier interrupt (Enguerrand de Ribaucourt) 
- net: tun: stop NAPI when detaching queues (Jakub Kicinski) 
- net: tun: unlink NAPI from device on destruction (Jakub Kicinski) 
- net: dsa: bcm_sf2: force pause link settings (Doug Berger) 
- selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test (Dimitris Michailidis) 
- virtio-net: fix race between ndo_open() and virtio_device_ready() (Jason Wang) 
- net: usb: ax88179_178a: Fix packet receiving (Jose Alonso) 
- net: rose: fix UAF bugs caused by timer handler (Duoming Zhou) 
- SUNRPC: Fix READ_PLUS crasher (Chuck Lever) 
- s390/archrandom: simplify back to earlier design and initialize earlier (Jason A. Donenfeld) 
- dm raid: fix KASAN warning in raid5_add_disks (Mikulas Patocka) 
- dm raid: fix accesses beyond end of raid member array (Heinz Mauelshagen) 
- powerpc/bpf: Fix use of user_pt_regs in uapi (Naveen N. Rao) 
- powerpc/book3e: Fix PUD allocation size in map_kernel_page() (Christophe Leroy) 
- powerpc/prom_init: Fix kernel config grep (Liam Howlett) 
- nvdimm: Fix badblocks clear off-by-one error (Chris Ye) 
- nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA IM2P33F8ABR1 (Lamarque Vieira Souza) 
- nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG SX6000LNP (AKA SPECTRIX S40G) (Pablo Greco) 
- net: phy: Don't trigger state machine while in suspend (Lukas Wunner) 
- ipv6: take care of disable_policy when restoring routes (Nicolas Dichtel) 
- ksmbd: use vfs_llseek instead of dereferencing NULL (Jason A. Donenfeld) 
- ksmbd: check invalid FileOffset and BeyondFinalZero in FSCTL_ZERO_DATA (Namjae Jeon) 
- ksmbd: set the range of bytes to zero without extending file size in FSCTL_ZERO_DATA (Namjae Jeon) 
- drm/amdgpu: To flush tlb for MMHUB of RAVEN series (Ruili Ji) 
- Revert "drm/amdgpu/display: set vblank_disable_immediate for DC" (Alex Deucher) 
- cpufreq:cppc_cpufreq: prevent crash on reading freqdomain_cpus (chris hyser)  [Orabug: 34327463]
- vmcoreinfo: add kallsyms_num_syms symbol (Stephen Brennan)  [Orabug: 34475877]
- vmcoreinfo: include kallsyms symbols (Stephen Brennan)  [Orabug: 34475877]
- kallsyms: move declarations to internal header (Stephen Brennan)  [Orabug: 34475877]
- Revert "KVM: x86: Print error code in exception injection tracepoint iff valid" (Sherry Yang)  [Orabug: 34539458]
- uek-rpm: Enable IMA_APPRAISE_SB_BOOTPARAM (Eric Snowberg)  [Orabug: 34549007]
- integrity: Allow ima_appraise bootparam to be set when SB is enabled (Eric Snowberg)  [Orabug: 34549007]
- net/mlx5: E-Switch, change VFs default admin state to auto in switchdev (Maor Dickman)  [Orabug: 34533007]
- Revert "net/mlx5: E-Switch, change VFs default admin state to auto in switchdev" (Devesh Sharma)  [Orabug: 34532946]
- uek-rpm: Install kernel-rpm-macros as build dependency (Somasundaram Krishnasamy)  [Orabug: 34529696]

[5.15.0-3.52.1.el9uek]
- rds: ib: Fix lfstack to acquire visibility to list head (HÃ¥kon Bugge)  [Orabug: 34522536]
- locking/atomic: Make test_and_*_bit() ordered on failure (Hector Martin)  [Orabug: 34520178]
- intel_idle: make SPR C1 and C1E be independent (Artem Bityutskiy)  [Orabug: 34510397]
- intel_idle: Add AlderLake support (Zhang Rui)  [Orabug: 34510397]
- intel_idle: Fix SPR C6 optimization (Artem Bityutskiy)  [Orabug: 34510397]
- intel_idle: Fix the 'preferred_cstates' module parameter (Artem Bityutskiy)  [Orabug: 34510397]
- cpuidle: intel_idle: Drop redundant backslash at line end (Rafael J. Wysocki)  [Orabug: 34510397]
- mlx4: Subscribe to PXM notifier (Konrad Rzeszutek Wilk)  [Orabug: 27206634] [Orabug: 34509446]
- xen/pci: Add PXM node notifier for PXM (NUMA) changes. (Konrad Rzeszutek Wilk)  [Orabug: 27206634] [Orabug: 34509446]
- xen/pcifront: Walk the PCI bus after XenStore notification (Konrad Rzeszutek Wilk)  [Orabug: 27206634] [Orabug: 34509446]
- xen-pcifront/hvm: Slurp up "pxm" entry and set NUMA node on PCIe device. (V5) (Konrad Rzeszutek Wilk)  [Orabug: 34509446]
- scsi: core: Fix warning in scsi_alloc_sgtables() (Jason Yan)  [Orabug: 33857787]


_______________________________________________
El-errata mailing list
[email protected]
https://oss.oracle.com/mailman/listinfo/el-errata

Oracle9: ELSA-2022-9930: kernel Important Security Update

Summary

Description of changes: [5.15.0-3.60.5.1.el9uek] - fs: remove no_llseek (Jason A. Donenfeld) [Orabug: 34721465] - vfio: do not set FMODE_LSEEK flag (Jason A. Donenfeld) [Orabug: 34721465] - dma-buf: remove useless FMODE_LSEEK flag (Jason A. Donenfeld) [Orabug: 34721465] - fs: do not compare against ->llseek (Jason A. Donenfeld) [Orabug: 34721465] - fs: clear or set FMODE_LSEEK based on llseek function (Jason A. Donenfeld) [Orabug: 34721465] [5.15.0-3.60.5.el9uek] - hwmon: (opbmc) Add support for AST2600 based Pilot (Jan Zdarek) [Orabug: 34605427] - random: Fix incorrect type for 'rc' variable (Harshit Mogalapalli) [Orabug: 34596909] [5.15.0-3.60.4.el9uek] - netfilter: ebtables: reject blobs that don't provide all entry points (Florian Westphal) [Orabug: 34513977] - uek-rpm: Disable CONFIG_CRYPTO_STREEBOG (Victor Erminpour) [Orabug: 34538054] - uek-rpm: Disable CONFIG_CRYPTO_SM3 (Victor Erminpour) [Orabug: 34538054] - uek-rpm: Disable CONFIG_CRYPTO_SM4 (Victor Erminpour) [Orabug: 34538054] - af_key: Do not call xfrm_probe_algs in parallel (Herbert Xu) [Orabug: 34566751] {CVE-2022-3028} - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Tetsuo Handa) [Orabug: 34567776] cpus_read_lock() deadlock (Tejun Heo) [Orabug: 34567776] [5.15.0-3.60.3.el9uek] - audit: annotate branch direction for audit_in_mask() (Ankur Arora) [Orabug: 34544783] - audit: cache ctx->major in audit_filter_syscall() (Ankur Arora) [Orabug: 34544783] [5.15.0-3.60.2.el9uek] - LTS version: v5.15.60 (Jack Vogel) - x86/speculation: Add LFENCE to RSB fill sequence (Pawan Gupta) - x86/speculation: Add RSB VM Exit protections (Daniel Sneddon) - macintosh/adb: fix oob read in do_adb_query() function (Ning Qiang) - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3586 (Hilda Wu) - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3587 (Hilda Wu) - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0CB8:0xC558 (Hilda Wu) - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04C5:0x1675 (Hilda Wu) - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04CA:0x4007 (Hilda Wu) - Bluetooth: btusb: Add support of IMC Networks PID 0x3568 (Aaron Ma) - dt-bindings: bluetooth: broadcom: Add BCM4349B1 DT binding (Ahmad Fatoum) - Bluetooth: hci_bcm: Add DT compatible for CYW55572 (Hakan Jansson) - Bluetooth: hci_bcm: Add BCM4349B1 variant (Ahmad Fatoum) - btrfs: zoned: fix critical section of relocation inode writeback (Naohiro Aota) - btrfs: zoned: prevent allocation from previous data relocation BG (Naohiro Aota) - arm64: set UXN on swapper page tables (Peter Collingbourne) - KVM: x86/svm: add __GFP_ACCOUNT to __sev_dbg_{en,de}crypt_user() (Mingwei Zhang) - selftests: KVM: Handle compiler optimizations in ucall (Raghavendra Rao Ananta) - tools/kvm_stat: fix display of error when multiple processes are found (Dmitry Klochkov) - KVM: selftests: Make hyperv_clock selftest more stable (Vitaly Kuznetsov) - KVM: x86: do not set st->preempted when going back to user space (Paolo Bonzini) - KVM: x86: do not report a vCPU as preempted outside instruction boundaries (Paolo Bonzini) [Orabug: 34571000] {CVE-2022-39189} - crypto: arm64/poly1305 - fix a read out-of-bound (GUO Zihua) - ACPI: APEI: Better fix to avoid spamming the console with old error logs (Tony Luck) - ACPI: video: Shortening quirk list by identifying Clevo by board_name only (Werner Sembach) - ACPI: video: Force backlight native for some TongFang devices (Werner Sembach) - tools/vm/slabinfo: Handle files in debugfs (Stéphane Graber) - block: fix default IO priority handling again (Jan Kara) - selftests/bpf: Check dst_port only on the client socket (Jakub Sitnicki) - selftests/bpf: Extend verifier and bpf_sock tests for dst_port loads (Jakub Sitnicki) - x86/speculation: Make all RETbleed mitigations 64-bit only (Ben Hutchings) - LTS version: v5.15.59 (Jack Vogel) - x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available (Thadeu Lima de Souza Cascardo) - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Eiichi Tsukata) - EDAC/ghes: Set the DIMM label unconditionally (Toshi Kani) - ARM: 9216/1: Fix MAX_DMA_ADDRESS overflow (Florian Fainelli) - page_alloc: fix invalid watermark check on a negative value (Jaewon Kim) - mm/hmm: fault non-owner device private entries (Ralph Campbell) - ARM: crypto: comment out gcc warning that breaks clang builds (Greg Kroah-Hartman) - sctp: leave the err path free in sctp_stream_init to sctp_stream_free (Xin Long) - sfc: disable softirqs for ptp TX (Alejandro Lucero) - perf symbol: Correct address for bss symbols (Leo Yan) - virtio-net: fix the race between refill work and close (Jason Wang) - netfilter: nf_queue: do not allow packet truncation below transport header offset (Florian Westphal) - octeontx2-pf: cn10k: Fix egress ratelimit configuration (Sunil Goutham) - sctp: fix sleep in atomic context bug in timer handlers (Duoming Zhou) - i40e: Fix interface init with MSI interrupts (no MSI-X) (Michal Maloszewski) - ipv4: Fix data-races around sysctl_fib_notify_on_flag_change. (Kuniyuki Iwashima) - tcp: Fix data-races around sysctl_tcp_reflect_tos. (Kuniyuki Iwashima) - tcp: Fix a data-race around sysctl_tcp_comp_sack_nr. (Kuniyuki Iwashima) - tcp: Fix a data-race around sysctl_tcp_comp_sack_slack_ns. (Kuniyuki Iwashima) - tcp: Fix a data-race around sysctl_tcp_comp_sack_delay_ns. (Kuniyuki Iwashima) - net: Fix data-races around sysctl_[rw]mem(_offset)?. (Kuniyuki Iwashima) - tcp: Fix data-races around sk_pacing_rate. (Kuniyuki Iwashima) - net: mld: fix reference count leak in mld_{query | report}_work() (Taehee Yoo) - net: macsec: fix potential resource leak in macsec_add_rxsa() and macsec_add_txsa() (Jianglei Nie) - macsec: always read MACSEC_SA_ATTR_PN as a u64 (Sabrina Dubroca) - macsec: limit replay window size with XPN (Sabrina Dubroca) - macsec: fix error message in macsec_add_rxsa and _txsa (Sabrina Dubroca) - macsec: fix NULL deref in macsec_add_rxsa (Sabrina Dubroca) - Documentation: fix sctp_wmem in ip-sysctl.rst (Xin Long) - tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit. (Kuniyuki Iwashima) - tcp: Fix a data-race around sysctl_tcp_autocorking. (Kuniyuki Iwashima) - tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen. (Kuniyuki Iwashima) - tcp: Fix a data-race around sysctl_tcp_min_tso_segs. (Kuniyuki Iwashima) - net: sungem_phy: Add of_node_put() for reference returned by of_get_parent() (Liang He) - net: pcs: xpcs: propagate xpcs_read error to xpcs_get_state_c37_sgmii (Vladimir Oltean) - igmp: Fix data-races around sysctl_igmp_qrv. (Kuniyuki Iwashima) - net/tls: Remove the context from the list in tls_device_down (Maxim Mikityanskiy) - ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr (Ziyang Xuan) - net: ping6: Fix memleak in ipv6_renew_options(). (Kuniyuki Iwashima) - scsi: mpt3sas: Stop fw fault watchdog work item during system shutdown (David Jeffery) - tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit. (Kuniyuki Iwashima) - tcp: Fix a data-race around sysctl_tcp_limit_output_bytes. (Kuniyuki Iwashima) - tcp: Fix data-races around sysctl_tcp_moderate_rcvbuf. (Kuniyuki Iwashima) - octeontx2-pf: Fix UDP/TCP src and dst port tc filters (Subbaraya Sundeep) - Revert "tcp: change pingpong threshold to 3" (Wei Wang) - scsi: ufs: host: Hold reference returned by of_parse_phandle() (Liang He) - ice: do not setup vlan for loopback VSI (Maciej Fijalkowski) - ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) (Maciej Fijalkowski) - tcp: Fix data-races around sysctl_tcp_no_ssthresh_metrics_save. (Kuniyuki Iwashima) - tcp: Fix a data-race around sysctl_tcp_nometrics_save. (Kuniyuki Iwashima) - tcp: Fix a data-race around sysctl_tcp_frto. (Kuniyuki Iwashima) - tcp: Fix a data-race around sysctl_tcp_adv_win_scale. (Kuniyuki Iwashima) - tcp: Fix a data-race around sysctl_tcp_app_win. (Kuniyuki Iwashima) - tcp: Fix data-races around sysctl_tcp_dsack. (Kuniyuki Iwashima) - watch_queue: Fix missing locking in add_watch_to_object() (Linus Torvalds) - watch_queue: Fix missing rcu annotation (David Howells) - drm/simpledrm: Fix return type of simpledrm_simple_display_pipe_mode_valid() (Nathan Chancellor) - nouveau/svm: Fix to migrate all requested pages (Alistair Popple) - s390/archrandom: prevent CPACF trng invocations in interrupt context (Harald Freudenberger) - asm-generic: remove a broken and needless ifdef conditional (Lukas Bulwahn) - hugetlb: fix memoryleak in hugetlb_mcopy_atomic_pte (Miaohe Lin) - mm: fix page leak with multiple threads mapping the same page (Josef Bacik) - secretmem: fix unhandled fault in truncate (Mike Rapoport) - fs: sendfile handles O_NONBLOCK of out_fd (Andrei Vagin) - ntfs: fix use-after-free in ntfs_ucsncmp() (ChenXiaoSong) - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put (Luiz Augusto von Dentz) - LTS version: v5.15.58 (Jack Vogel) - drm/amd/display: Fix wrong format specifier in amdgpu_dm.c (Hayden Goodfellow) - x86/entry_32: Fix segment exceptions (Peter Zijlstra) - drm/amdgpu: Off by one in dm_dmub_outbox1_low_irq() (Dan Carpenter) - x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm() (Jan Beulich) - KVM: x86: fix typo in __try_cmpxchg_user causing non-atomicness (Maxim Levitsky) - x86/extable: Prefer local labels in .set directives (Nick Desaulniers) - drm/amd/display: invalid parameter check in dmub_hpd_callback (José Expósito) - drm/amd/display: Don't lock connection_mutex for DMUB HPD (Nicholas Kazlauskas) - watch-queue: remove spurious double semicolon (Linus Torvalds) - net: usb: ax88179_178a needs FLAG_SEND_ZLP (Jose Alonso) - tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() (Jiri Slaby) - tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() (Jiri Slaby) - tty: drop tty_schedule_flip() (Jiri Slaby) - tty: the rest, stop using tty_schedule_flip() (Jiri Slaby) - tty: drivers/tty/, stop using tty_schedule_flip() (Jiri Slaby) - watchqueue: make sure to serialize 'wqueue->defunct' properly (Linus Torvalds) - drm/amd/display: Fix surface optimization regression on Carrizo (Nicholas Kazlauskas) - drm/amd/display: Optimize bandwidth on following fast update (Nicholas Kazlauskas) - drm/amd/display: Reset DMCUB before HW init (Nicholas Kazlauskas) - exfat: use updated exfat_chain directly during renaming (Sungjong Seo) - Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks (Luiz Augusto von Dentz) - Bluetooth: SCO: Fix sco_send_frame returning skb->len (Luiz Augusto von Dentz) - Bluetooth: Fix passing NULL to PTR_ERR (Luiz Augusto von Dentz) - Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg (Luiz Augusto von Dentz) - Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg (Luiz Augusto von Dentz) - Bluetooth: Add bt_skb_sendmmsg helper (Luiz Augusto von Dentz) - Bluetooth: Add bt_skb_sendmsg helper (Luiz Augusto von Dentz) - um: virtio_uml: Fix broken device handling in time-travel (Johannes Berg) - um: virtio_uml: Allow probing from devicetree (Vincent Whitchurch) - tracing: Fix return value of trace_pid_write() (Wonhyuk Yang) - tracing: Place trace_pid_list logic into abstract functions (Steven Rostedt (VMware)) - tracing: Have event format check not flag %p* on __get_dynamic_array() (Steven Rostedt (Google)) - exfat: fix referencing wrong parent directory information after renaming (Yuezhang Mo) - crypto: qat - re-enable registration of algorithms (Giovanni Cabiddu) - crypto: qat - add param check for DH (Giovanni Cabiddu) - crypto: qat - add param check for RSA (Giovanni Cabiddu) - crypto: qat - remove dma_free_coherent() for DH (Giovanni Cabiddu) - crypto: qat - remove dma_free_coherent() for RSA (Giovanni Cabiddu) - crypto: qat - fix memory leak in RSA (Giovanni Cabiddu) - crypto: qat - add backlog mechanism (Giovanni Cabiddu) - crypto: qat - refactor submission logic (Giovanni Cabiddu) - crypto: qat - use pre-allocated buffers in datapath (Giovanni Cabiddu) - crypto: qat - set to zero DH parameters before free (Giovanni Cabiddu) - iwlwifi: fw: uefi: add missing include guards (Johannes Berg) - mt76: fix use-after-free by removing a non-RCU wcid pointer (Felix Fietkau) - xhci: Set HCD flag to defer primary roothub registration (Kishon Vijay Abraham I) - xhci: dbc: Rename xhci_dbc_init and xhci_dbc_exit (Mathias Nyman) - xhci: dbc: create and remove dbc structure in dbgtty driver. (Mathias Nyman) - xhci: dbc: refactor xhci_dbc_init() (Mathias Nyman) - KVM: x86: Use __try_cmpxchg_user() to emulate atomic accesses (Sean Christopherson) - x86/extable: Extend extable functionality (Peter Zijlstra) - x86/entry_32: Remove .fixup usage (Peter Zijlstra) - bitfield.h: Fix "type of reg too small for mask" test (Peter Zijlstra) - x86/extable: Provide EX_TYPE_DEFAULT_MCE_SAFE and EX_TYPE_FAULT_MCE_SAFE (Thomas Gleixner) - x86/extable: Rework the exception table mechanics (Thomas Gleixner) - x86/mce: Deduplicate exception handling (Thomas Gleixner) - x86/extable: Get rid of redundant macros (Thomas Gleixner) - x86/extable: Tidy up redundant handler functions (Thomas Gleixner) - x86/uaccess: Implement macros for CMPXCHG on user addresses (Peter Zijlstra) - dlm: fix pending remove if msg allocation fails (Alexander Aring) - sched/deadline: Fix BUG_ON condition for deboosted tasks (Juri Lelli) - bpf: Make sure mac_header was set before using it (Eric Dumazet) - mm/mempolicy: fix uninit-value in mpol_rebind_policy() (Wang Cheng) - KVM: Don't null dereference ops->destroy (Alexey Kardashevskiy) - spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers (Marc Kleine-Budde) - KVM: selftests: Fix target thread to be migrated in rseq_test (Gavin Shan) - gpio: gpio-xilinx: Fix integer overflow (Srinivas Neeli) - tcp: Fix data-races around sysctl_tcp_max_reordering. (Kuniyuki Iwashima) - tcp: Fix a data-race around sysctl_tcp_abort_on_overflow. (Kuniyuki Iwashima) - tcp: Fix a data-race around sysctl_tcp_rfc1337. (Kuniyuki Iwashima) - tcp: Fix a data-race around sysctl_tcp_stdurg. (Kuniyuki Iwashima) - tcp: Fix a data-race around sysctl_tcp_retrans_collapse. (Kuniyuki Iwashima) - tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. (Kuniyuki Iwashima) - tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. (Kuniyuki Iwashima) - tcp: Fix data-races around sysctl_tcp_recovery. (Kuniyuki Iwashima) - tcp: Fix a data-race around sysctl_tcp_early_retrans. (Kuniyuki Iwashima) - tcp: Fix data-races around sysctl knobs related to SYN option. (Kuniyuki Iwashima) - udp: Fix a data-race around sysctl_udp_l3mdev_accept. (Kuniyuki Iwashima) - ip: Fix data-races around sysctl_ip_prot_sock. (Kuniyuki Iwashima) - ipv4: Fix data-races around sysctl_fib_multipath_hash_fields. (Kuniyuki Iwashima) - ipv4: Fix data-races around sysctl_fib_multipath_hash_policy. (Kuniyuki Iwashima) - ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. (Kuniyuki Iwashima) - drm/imx/dcss: Add missing of_node_put() in fail path (Liang He) - net: dsa: vitesse-vsc73xx: silent spi_device_id warnings (Oleksij Rempel) - net: dsa: sja1105: silent spi_device_id warnings (Oleksij Rempel) - be2net: Fix buffer overflow in be_get_module_eeprom (Hristo Venev) - gpio: pca953x: use the correct register address when regcache sync during init (Haibo Chen) - gpio: pca953x: use the correct range when do regmap sync (Haibo Chen) - gpio: pca953x: only use single read/write for No AI mode (Haibo Chen) - net: stmmac: remove redunctant disable xPCS EEE call (Wong Vee Khee) - ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero (Piotr Skajewski) - i40e: Fix erroneous adapter reinitialization during recovery process (Dawid Lukwinski) - pinctrl: armada-37xx: use raw spinlocks for regmap to avoid invalid wait context (Vladimir Oltean) - pinctrl: armada-37xx: Convert to use dev_err_probe() (Andy Shevchenko) - pinctrl: armada-37xx: Make use of the devm_platform_ioremap_resource() (Andy Shevchenko) - pinctrl: armada-37xx: Use temporary variable for struct device (Andy Shevchenko) - iavf: Fix handling of dummy receive descriptors (Przemyslaw Patynowski) - tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. (Kuniyuki Iwashima) - tcp: Fix data-races around sysctl_tcp_fastopen. (Kuniyuki Iwashima) - tcp: Fix data-races around sysctl_max_syn_backlog. (Kuniyuki Iwashima) - tcp: Fix a data-race around sysctl_tcp_tw_reuse. (Kuniyuki Iwashima) - tcp: Fix a data-race around sysctl_tcp_notsent_lowat. (Kuniyuki Iwashima) - tcp: Fix data-races around some timeout sysctl knobs. (Kuniyuki Iwashima) - tcp: Fix data-races around sysctl_tcp_reordering. (Kuniyuki Iwashima) - tcp: Fix data-races around sysctl_tcp_migrate_req. (Kuniyuki Iwashima) - tcp: Fix data-races around sysctl_tcp_syncookies. (Kuniyuki Iwashima) - tcp: Fix data-races around sysctl_tcp_syn(ack)?_retries. (Kuniyuki Iwashima) - tcp: Fix data-races around keepalive sysctl knobs. (Kuniyuki Iwashima) - igmp: Fix data-races around sysctl_igmp_max_msf. (Kuniyuki Iwashima) - igmp: Fix a data-race around sysctl_igmp_max_memberships. (Kuniyuki Iwashima) - igmp: Fix data-races around sysctl_igmp_llm_reports. (Kuniyuki Iwashima) - net/tls: Fix race in TLS device down flow (Tariq Toukan) - net: stmmac: fix dma queue left shift overflow issue (Junxiao Chang) - perf tests: Fix Convert perf time to TSC test for hybrid (Adrian Hunter) - i2c: cadence: Change large transfer count reset logic to be unconditional (Robert Hancock) - i2c: mlxcpld: Fix register setting for 400KHz frequency (Vadim Pasternak) - net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core() (Menglong Dong) - net: ipv4: use kfree_skb_reason() in ip_rcv_core() (Menglong Dong) - net: netfilter: use kfree_drop_reason() for NF_DROP (Menglong Dong) - net: skb_drop_reason: add document for drop reasons (Menglong Dong) - net: socket: rename SKB_DROP_REASON_SOCKET_FILTER (Menglong Dong) - net: skb: use kfree_skb_reason() in __udp4_lib_rcv() (Menglong Dong) - net: skb: use kfree_skb_reason() in tcp_v4_rcv() (Menglong Dong) - net: skb: introduce kfree_skb_reason() (Menglong Dong) - net: dsa: microchip: ksz_common: Fix refcount leak bug (Liang He) - mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on program/erase times (Sascha Hauer) - mtd: rawnand: gpmi: validate controller clock rate (Dario Binacchi) - net: stmmac: fix unbalanced ptp clock issue in suspend/resume flow (Biao Huang) - net: stmmac: fix pm runtime issue in stmmac_dvr_remove() (Biao Huang) - tcp: Fix a data-race around sysctl_tcp_probe_interval. (Kuniyuki Iwashima) - tcp: Fix a data-race around sysctl_tcp_probe_threshold. (Kuniyuki Iwashima) - tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. (Kuniyuki Iwashima) - tcp: Fix data-races around sysctl_tcp_min_snd_mss. (Kuniyuki Iwashima) - tcp: Fix data-races around sysctl_tcp_base_mss. (Kuniyuki Iwashima) - tcp: Fix data-races around sysctl_tcp_mtu_probing. (Kuniyuki Iwashima) - tcp: Fix data-races around sysctl_tcp_l3mdev_accept. (Kuniyuki Iwashima) - tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if() (Eric Dumazet) - tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. (Kuniyuki Iwashima) - ip: Fix a data-race around sysctl_fwmark_reflect. (Kuniyuki Iwashima) - ip: Fix a data-race around sysctl_ip_autobind_reuse. (Kuniyuki Iwashima) - ip: Fix data-races around sysctl_ip_nonlocal_bind. (Kuniyuki Iwashima) - ip: Fix data-races around sysctl_ip_fwd_update_priority. (Kuniyuki Iwashima) - ip: Fix data-races around sysctl_ip_fwd_use_pmtu. (Kuniyuki Iwashima) - ip: Fix data-races around sysctl_ip_no_pmtu_disc. (Kuniyuki Iwashima) - igc: Reinstate IGC_REMOVED logic and implement it properly (Lennert Buytenhek) - Revert "e1000e: Fix possible HW unit hang after an s0ix exit" (Sasha Neftin) - e1000e: Enable GPT clock before sending message to CSME (Sasha Neftin) - nvme: fix block device naming collision (Israel Rukshin) - nvme: check for duplicate identifiers earlier (Christoph Hellwig) - scsi: ufs: core: Drop loglevel of WriteBoost message (Bjorn Andersson) - scsi: megaraid: Clear READ queue map's nr_queues (Ming Lei) - drm/amd/display: Ignore First MST Sideband Message Return Error (Fangzhi Zuo) - drm/amdgpu/display: add quirk handling for stutter mode (Alex Deucher) - drm/amd/display: Fork thread to offload work of hpd_rx_irq (Wayne Lin) - drm/amd/display: Add option to defer works of hpd_rx_irq (Wayne Lin) - drm/amd/display: Support for DMUB HPD interrupt handling (Jude Shih) - tcp: Fix data-races around sysctl_tcp_ecn. (Kuniyuki Iwashima) - sysctl: move some boundary constants from sysctl.c to sysctl_vals (Xiaoming Ni) - mm/pagealloc: sysctl: change watermark_scale_factor max limit to 30% (Suren Baghdasaryan) - net: tun: split run_ebpf_filter() and pskb_trim() into different "if statement" (Dongli Zhang) - ipv4/tcp: do not use per netns ctl sockets (Eric Dumazet) - perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() (Peter Zijlstra) - pinctrl: ralink: Check for null return of devm_kcalloc (William Dean) - pinctrl: ralink: rename pinctrl-rt2880 to pinctrl-ralink (Arınç ÜNAL) - pinctrl: ralink: rename MT7628(an) functions to MT76X8 (Arınç ÜNAL) - RDMA/irdma: Fix sleep from invalid context BUG (Mustafa Ismail) - RDMA/irdma: Do not advertise 1GB page size for x722 (Mustafa Ismail) - power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe (Miaoqian Lin) - xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() (Hangyu Hua) - ip: Fix data-races around sysctl_ip_default_ttl. (Kuniyuki Iwashima) - r8152: fix a WOL issue (Hayes Wang) - xfs: fix perag reference leak on iteration race with growfs (Brian Foster) - xfs: terminate perag iteration reliably on agcount (Brian Foster) - xfs: rename the next_agno perag iteration variable (Brian Foster) - xfs: fold perag loop iteration logic into helper function (Brian Foster) - xfs: fix maxlevels comparisons in the btree staging code (Darrick J. Wong) - mt76: mt7921: Fix the error handling path of mt7921_pci_probe() (Christophe JAILLET) - mt76: mt7921e: fix possible probe failure after reboot (Sean Wang) - mt76: mt7921: use physical addr to unify register access (Sean Wang) - Revert "mt76: mt7921e: fix possible probe failure after reboot" (Sean Wang) - Revert "mt76: mt7921: Fix the error handling path of mt7921_pci_probe()" (Sean Wang) - batman-adv: Use netif_rx_any_context() any. (Sebastian Andrzej Siewior) - serial: mvebu-uart: correctly report configured baudrate value (Pali Rohár) - PCI: hv: Fix interrupt mapping for multi-MSI (Jeffrey Hugo) - PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Jeffrey Hugo) - PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Jeffrey Hugo) - PCI: hv: Fix multi-MSI to allow more than one MSI vector (Jeffrey Hugo) - Revert "selftest/vm: verify mmap addr in mremap_test" (Oleksandr Tymoshenko) - Revert "selftest/vm: verify remap destination address in mremap_test" (Oleksandr Tymoshenko) - bus: mhi: host: pci_generic: add Telit FN990 (Daniele Palmas) - bus: mhi: host: pci_generic: add Telit FN980 v1 hardware revision (Daniele Palmas) - drm/ttm: fix locking in vmap/vunmap TTM GEM helpers (Christian König) - mlxsw: spectrum_router: Fix IPv4 nexthop gateway indication (Ido Schimmel) - riscv: add as-options for modules with assembly compontents (Ben Dooks) - pinctrl: stm32: fix optional IRQ support to gpios (Fabien Dessenne) - LTS version: v5.15.57 (Jack Vogel) - x86: Use -mindirect-branch-cs-prefix for RETPOLINE builds (Peter Zijlstra) - um: Add missing apply_returns() (Peter Zijlstra) - x86/asm/32: Fix ANNOTATE_UNRET_SAFE use on 32-bit (Jiri Slaby) - x86/xen: Fix initialisation in hypercall_page after rethunk (Ben Hutchings) - x86/static_call: Serialize __static_call_fixup() properly (Thomas Gleixner) - x86/speculation: Disable RRSBA behavior (Pawan Gupta) - x86/kexec: Disable RET on kexec (Konrad Rzeszutek Wilk) - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Thadeu Lima de Souza Cascardo) - x86/entry: Move PUSH_AND_CLEAR_REGS() back into error_entry (Peter Zijlstra) - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Pawan Gupta) - x86/retbleed: Add fine grained Kconfig knobs (Peter Zijlstra) - objtool: Re-add UNWIND_HINT_{SAVE_RESTORE} (Josh Poimboeuf) - objtool: Add entry UNRET validation (Peter Zijlstra) - x86/xen: Add UNTRAIN_RET (Peter Zijlstra) - intel_idle: Disable IBRS during long idle (Peter Zijlstra) - x86: Add magic AMD return-thunk (Peter Zijlstra) - x86/entry: Avoid very early RET (Peter Zijlstra) - x86/ftrace: Use alternative RET encoding (Peter Zijlstra) - objtool: skip non-text sections when adding return-thunk sites (Thadeu Lima de Souza Cascardo) - bpf,x86: Respect X86_FEATURE_RETPOLINE* (Peter Zijlstra) - bpf,x86: Simplify computing label offsets (Peter Zijlstra) - x86/alternative: Add debug prints to apply_retpolines() (Peter Zijlstra) - x86/alternative: Try inline spectre_v2=retpoline,amd (Peter Zijlstra) - x86/alternative: Handle Jcc __x86_indirect_thunk_eg (Peter Zijlstra) - x86/alternative: Implement .retpoline_sites support (Peter Zijlstra) - x86/retpoline: Create a retpoline thunk array (Peter Zijlstra) - x86/retpoline: Move the retpoline thunk declarations to nospec-branch.h (Peter Zijlstra) - x86/asm: Fixup odd GEN-for-each-reg.h usage (Peter Zijlstra) - x86/asm: Fix register order (Peter Zijlstra) - x86/retpoline: Remove unused replacement symbols (Peter Zijlstra) - objtool: Introduce CFI hash (Peter Zijlstra) - objtool,x86: Replace alternatives with .retpoline_sites (Peter Zijlstra) - objtool: Shrink struct instruction (Peter Zijlstra) - objtool: Explicitly avoid self modifying code in .altinstr_replacement (Peter Zijlstra) - objtool: Fix SLS validation for kcov tail-call replacement (Peter Zijlstra) - objtool: Classify symbols (Peter Zijlstra) - x86/entry: Don't call error_entry() for XENPV (Lai Jiangshan) - x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry() (Lai Jiangshan) - x86/entry: Switch the stack after error_entry() returns (Lai Jiangshan) - x86/traps: Use pt_regs directly in fixup_bad_iret() (Lai Jiangshan) - LTS version: v5.15.56 (Jack Vogel) - drm/aperture: Run fbdev removal before internal helpers (Thomas Zimmermann) - x86/pat: Fix x86_has_pat_wp() (Juergen Gross) - serial: 8250: Fix PM usage_count for console handover (Ilpo Järvinen) - serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle (Ilpo Järvinen) - serial: stm32: Clear prev values before setting RTS delays (Ilpo Järvinen) - serial: 8250: fix return error code in serial8250_request_std_resource() (Yi Yang) - vt: fix memory overlapping when deleting chars in the buffer (Yangxi Xiang) - tty: serial: samsung_tty: set dma burst_size to 1 (Chanho Park) - usb: dwc3: gadget: Fix event pending check (Thinh Nguyen) - usb: typec: add missing uevent when partner support PD (Linyu Yuan) - USB: serial: ftdi_sio: add Belimo device ids (Lucien Buchmann) - signal handling: don't use BUG_ON() for debugging (Linus Torvalds) - nvme-pci: phison e16 has bogus namespace ids (Keith Busch) - ALSA: usb-audio: Add quirk for Fiero SC-01 (fw v1.0.0) (Egor Vorontsov) - ALSA: usb-audio: Add quirk for Fiero SC-01 (Egor Vorontsov) - ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices (John Veness) - Revert "can: xilinx_can: Limit CANFD brp to 2" (Srinivas Neeli) - ARM: dts: stm32: use the correct clock source for CEC on stm32mp151 (Gabriel Fernandez) - soc: ixp4xx/npe: Fix unused match warning (Linus Walleij) - x86: Clear .brk area at early boot (Juergen Gross) - irqchip: or1k-pic: Undefine mask_ack for level triggered hardware (Stafford Horne) - ASoC: madera: Fix event generation for rate controls (Charles Keepax) - ASoC: madera: Fix event generation for OUT1 demux (Charles Keepax) - ASoC: cs47l15: Fix event generation for low power mux control (Charles Keepax) - ASoC: dapm: Initialise kcontrol data for mux/demux controls (Charles Keepax) - ASoC: rt711-sdca: fix kernel NULL pointer dereference when IO error (Shuming Fan) - ASoC: wm5110: Fix DRE control (Charles Keepax) - ASoC: Intel: bytcr_wm5102: Fix GPIO related probe-ordering problem (Hans de Goede) - ASoC: wcd938x: Fix event generation for some controls (Mark Brown) - ASoC: SOF: Intel: hda-loader: Clarify the cl_dsp_init() flow (Peter Ujfalusi) - ASoC: codecs: rt700/rt711/rt711-sdca: initialize workqueues in probe (Pierre-Louis Bossart) - ASoC: rt7*-sdw: harden jack_detect_handler (Pierre-Louis Bossart) - ASoC: rt711: fix calibrate mutex initialization (Pierre-Louis Bossart) - ASoC: Intel: sof_sdw: handle errors on card registration (Pierre-Louis Bossart) - ASoC: rt711-sdca-sdw: fix calibrate mutex initialization (Pierre-Louis Bossart) - ASoC: Realtek/Maxim SoundWire codecs: disable pm_runtime on remove (Pierre-Louis Bossart) - pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux() (Haowen Bai) - ASoC: ops: Fix off by one in range control validation (Mark Brown) - net: sfp: fix memory leak in sfp_probe() (Jianglei Nie) - nvme: fix regression when disconnect a recovering ctrl (Ruozhu Li) - nvme-tcp: always fail a request when sending it failed (Sagi Grimberg) - NFC: nxp-nci: don't print header length mismatch on i2c error (Michael Walle) - net: tipc: fix possible refcount leak in tipc_sk_create() (Hangyu Hua) - fbdev: Disable sysfb device registration when removing conflicting FBs (Javier Martinez Canillas) - firmware: sysfb: Add sysfb_disable() helper function (Javier Martinez Canillas) - firmware: sysfb: Make sysfb_create_simplefb() return a pdev pointer (Javier Martinez Canillas) - platform/x86: hp-wmi: Ignore Sanitization Mode event (Kai-Heng Feng) - cpufreq: pmac32-cpufreq: Fix refcount leak bug (Liang He) - scsi: hisi_sas: Limit max hw sectors for v3 HW (John Garry) - netfilter: br_netfilter: do not skip all hooks with 0 priority (Florian Westphal) - virtio_mmio: Restore guest page size on resume (Stephan Gerhold) - virtio_mmio: Add missing PM calls to freeze/restore (Stephan Gerhold) - vduse: Tie vduse mgmtdev and its device (Parav Pandit) - vdpa/mlx5: Initialize CVQ vringh only once (Eli Cohen) - powerpc/xive/spapr: correct bitmap allocation size (Nathan Lynch) - ksmbd: use SOCK_NONBLOCK type for kernel_accept() (Namjae Jeon) - btrfs: zoned: fix a leaked bioc in read_zone_info (Christoph Hellwig) - btrfs: rename btrfs_bio to btrfs_io_context (Qu Wenruo) - mm: sysctl: fix missing numa_stat when !CONFIG_HUGETLB_PAGE (Muchun Song) - ACPI: video: Fix acpi_video_handles_brightness_key_presses() (Hans de Goede) - net/tls: Check for errors in tls_device_init (Tariq Toukan) - KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op() (Vitaly Kuznetsov) - net: atlantic: remove aq_nic_deinit() when resume (Chia-Lin Kao (AceLan)) - net: atlantic: remove deep parameter on suspend/resume functions (Chia-Lin Kao (AceLan)) - sfc: fix kernel panic when creating VF (Íñigo Huguet) - seg6: bpf: fix skb checksum in bpf_push_seg6_encap() (Andrea Mayer) - seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors (Andrea Mayer) - seg6: fix skb checksum evaluation in SRH encapsulation/insertion (Andrea Mayer) - ceph: switch netfs read ops to use rreq->inode instead of rreq->mapping->host (Jeff Layton) - sfc: fix use after free when disabling sriov (Íñigo Huguet) - drm/amd/pm: Prevent divide by zero (Yefim Barashkin) - drm/amd/display: Only use depth 36 bpp linebuffers on DCN display engines. (Mario Kleiner) - ima: Fix potential memory leak in ima_init_crypto() (Jianglei Nie) - ima: force signature verification when CONFIG_KEXEC_SIG is configured (Coiby Xu) - net: stmmac: fix leaks in probe (Dan Carpenter) - net: ftgmac100: Hold reference returned by of_get_child_by_name() (Liang He) - nexthop: Fix data-races around nexthop_compat_mode. (Kuniyuki Iwashima) - ipv4: Fix data-races around sysctl_ip_dynaddr. (Kuniyuki Iwashima) - tcp: Fix a data-race around sysctl_tcp_ecn_fallback. (Kuniyuki Iwashima) - raw: Fix a data-race around sysctl_raw_l3mdev_accept. (Kuniyuki Iwashima) - icmp: Fix a data-race around sysctl_icmp_ratemask. (Kuniyuki Iwashima) - icmp: Fix a data-race around sysctl_icmp_ratelimit. (Kuniyuki Iwashima) - icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr. (Kuniyuki Iwashima) - icmp: Fix a data-race around sysctl_icmp_ignore_bogus_error_responses. (Kuniyuki Iwashima) - icmp: Fix data-races around sysctl_icmp_echo_enable_probe. (Kuniyuki Iwashima) - sysctl: Fix data-races in proc_dointvec_ms_jiffies(). (Kuniyuki Iwashima) - sysctl: Fix data-races in proc_dou8vec_minmax(). (Kuniyuki Iwashima) - bnxt_en: Fix bnxt_refclk_read() (Pavan Chebbi) - bnxt_en: Fix bnxt_reinit_after_abort() code path (Michael Chan) - drm/i915: Require the vm mutex for i915_vma_bind() (Thomas Hellström) - drm/i915/uc: correctly track uc_fw init failure (Daniele Ceraolo Spurio) - drm/i915/gt: Serialize TLB invalidates with GT resets (Chris Wilson) - drm/i915/gt: Serialize GRDOM access between multiple engine resets (Chris Wilson) - drm/i915/dg2: Add Wa_22011100796 (Bruce Chang) - drm/i915/selftests: fix a couple IS_ERR() vs NULL tests (Dan Carpenter) - tracing: Fix sleeping while atomic in kdb ftdump (Douglas Anderson) - lockd: fix nlm_close_files (Jeff Layton) - lockd: set fl_owner when unlocking files (Jeff Layton) - xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE (Demi Marie Obenour) - drm/i915/gvt: IS_ERR() vs NULL bug in intel_gvt_update_reg_whitelist() (Dan Carpenter) - netfilter: nf_tables: replace BUG_ON by element length check (Pablo Neira Ayuso) - netfilter: nf_log: incorrect offset to network header (Pablo Neira Ayuso) - arm64: dts: broadcom: bcm4908: Fix cpu node for smp boot (William Zhang) - arm64: dts: broadcom: bcm4908: Fix timer node for BCM4906 SoC (William Zhang) - ARM: dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero (Michal Suchanek) - ARM: dts: at91: sama5d2: Fix typo in i2s1 node (Ryan Wanner) - ipv4: Fix a data-race around sysctl_fib_sync_mem. (Kuniyuki Iwashima) - icmp: Fix data-races around sysctl. (Kuniyuki Iwashima) - cipso: Fix data-races around sysctl. (Kuniyuki Iwashima) - net: Fix data-races around sysctl_mem. (Kuniyuki Iwashima) - inetpeer: Fix data-races around sysctl. (Kuniyuki Iwashima) - tcp: Fix a data-race around sysctl_tcp_max_orphans. (Kuniyuki Iwashima) - sysctl: Fix data races in proc_dointvec_jiffies(). (Kuniyuki Iwashima) - sysctl: Fix data races in proc_doulongvec_minmax(). (Kuniyuki Iwashima) - sysctl: Fix data races in proc_douintvec_minmax(). (Kuniyuki Iwashima) - sysctl: Fix data races in proc_dointvec_minmax(). (Kuniyuki Iwashima) - sysctl: Fix data races in proc_douintvec(). (Kuniyuki Iwashima) - sysctl: Fix data races in proc_dointvec(). (Kuniyuki Iwashima) - net: ethernet: ti: am65-cpsw: Fix devlink port register sequence (Siddharth Vadapalli) - net: stmmac: dwc-qos: Disable split header for Tegra194 (Jon Hunter) - ASoC: Intel: Skylake: Correct the handling of fmt_config flexible array (Peter Ujfalusi) - ASoC: Intel: Skylake: Correct the ssp rate discovery in skl_get_ssp_clks() (Peter Ujfalusi) - ASoC: tas2764: Fix amp gain register offset & default (Hector Martin) - ASoC: tas2764: Correct playback volume range (Hector Martin) - ASoC: tas2764: Fix and extend FSYNC polarity handling (Martin PoviÅ¡er) - ASoC: tas2764: Add post reset delays (Martin PoviÅ¡er) - ASoC: sgtl5000: Fix noise on shutdown/remove (Francesco Dolcini) - ima: Fix a potential integer overflow in ima_appraise_measurement (Huaxin Lu) - drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector() (Hangyu Hua) - net/mlx5e: Ring the TX doorbell on DMA errors (Maxim Mikityanskiy) - net/mlx5e: Fix capability check for updating vnic env counters (Gal Pressman) - net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Paul Blakey) - net/mlx5e: kTLS, Fix build time constant test in RX (Tariq Toukan) - net/mlx5e: kTLS, Fix build time constant test in TX (Tariq Toukan) - ARM: 9210/1: Mark the FDT_FIXED sections as shareable (Zhen Lei) - ARM: 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle (Ard Biesheuvel) - spi: amd: Limit max transfer and message size (Cristian Ciocaltea) - ARM: dts: imx6qdl-ts7970: Fix ngpio typo and count (Kris Bahnsen) - reset: Fix devm bulk optional exclusive control getter (Serge Semin) - xfs: drop async cache flushes from CIL commits. (Dave Chinner) - xfs: don't include bnobt blocks when reserving free block pool (Darrick J. Wong) - Revert "evm: Fix memleak in init_desc" (Xiu Jianfeng) - sh: convert nommu io{re,un}map() to static inline functions (Geert Uytterhoeven) - nilfs2: fix incorrect masking of permission flags for symlinks (Ryusuke Konishi) - fs/remap: constrain dedupe of EOF blocks (Dave Chinner) - drm/panfrost: Fix shrinker list corruption by madvise IOCTL (Dmitry Osipenko) - drm/panfrost: Put mapping instead of shmem obj on panfrost_mmu_map_fault_addr() error (Dmitry Osipenko) - btrfs: return -EAGAIN for NOWAIT dio reads/writes on compressed and inline extents (Filipe Manana) - cgroup: Use separate src/dst nodes when preloading css_sets for migration (Tejun Heo) - wifi: mac80211: fix queue selection for mesh/OCB interfaces (Felix Fietkau) - ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction (Ard Biesheuvel) - ARM: 9213/1: Print message about disabled Spectre workarounds only once (Dmitry Osipenko) - ip: fix dflt addr selection for connected nexthop (Nicolas Dichtel) - net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale pointer (Steven Rostedt (Google)) - tracing/histograms: Fix memory leak problem (Zheng Yejian) - mm: split huge PUD on wp_huge_pud fallback (Gowans, James) - mm: userfaultfd: fix UFFDIO_CONTINUE on fallocated shmem pages (Axel Rasmussen) - xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue (Juergen Gross) - ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop (Meng Tang) - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc221 (Meng Tang) - ALSA: hda/realtek: fix mute/micmute LEDs for HP machines (Jeremy Szu) - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 (Meng Tang) - ALSA: hda/realtek: Fix headset mic for Acer SF313-51 (Meng Tang) - ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model (Meng Tang) - ALSA: hda - Add fixup for Dell Latitidue E5430 (Meng Tang) - LTS version: v5.15.55 (Jack Vogel) - Revert "mtd: rawnand: gpmi: Fix setting busy timeout setting" (Greg Kroah-Hartman) - LTS version: v5.15.54 (Jack Vogel) - selftests/net: fix section name when using xdp_dummy.o (Hangbin Liu) - dmaengine: idxd: force wq context cleanup on device disable path (Dave Jiang) - dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate (Miaoqian Lin) - dmaengine: qcom: bam_dma: fix runtime PM underflow (Caleb Connolly) - dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate (Miaoqian Lin) - dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly (Michael Walle) - dmaengine: lgm: Fix an error handling path in intel_ldma_probe() (Christophe JAILLET) - dmaengine: pl330: Fix lockdep warning about non-static key (Dmitry Osipenko) - ida: don't use BUG_ON() for debugging (Linus Torvalds) - dt-bindings: dma: allwinner,sun50i-a64-dma: Fix min/max typo (Samuel Holland) - Revert "serial: 8250_mtk: Make sure to select the right FEATURE_SEL" (AngeloGioacchino Del Regno) - Revert "mm/memory-failure.c: fix race with changing page compound again" (Naoya Horiguchi) - misc: rtsx_usb: set return value in rsp_buf alloc err path (Shuah Khan) - misc: rtsx_usb: use separate command and response buffers (Shuah Khan) - misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer (Shuah Khan) - dmaengine: imx-sdma: Allow imx8m for imx7 FW revs (Peter Robinson) - i2c: cadence: Unregister the clk notifier in error path (Satish Nagireddy) - r8169: fix accessing unset transport header (Heiner Kallweit) - selftests: forwarding: fix error message in learning_test (Vladimir Oltean) - selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT (Vladimir Oltean) - selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT (Vladimir Oltean) - ibmvnic: Properly dispose of all skbs during a failover. (Rick Lindsley) - ARM: dts: stm32: add missing usbh clock and fix clk order on stm32mp15 (Fabrice Gasnier) - ARM: dts: stm32: use usbphyc ck_usbo_48m as USBH OHCI clock on stm32mp151 (Amelie Delaunay) - i40e: Fix VF's MAC Address change on VM (Norbert Zulinski) - i40e: Fix dropped jumbo frames statistics (Lukasz Cieplicki) - i2c: piix4: Fix a memory leak in the EFCH MMIO support (Jean Delvare) - xsk: Clear page contiguity bit when unmapping pool (Ivan Malov) - ARM: at91: fix soc detection for SAM9X60 SiPs (Mihai Sain) - ARM: dts: at91: sama5d2_icp: fix eeprom compatibles (Eugen Hristev) - ARM: dts: at91: sam9x60ek: fix eeprom compatible and size (Eugen Hristev) - ARM: at91: pm: use proper compatibles for sama7g5's rtc and rtt (Claudiu Beznea) - ARM: at91: pm: use proper compatibles for sam9x60's rtc and rtt (Claudiu Beznea) - ARM: at91: pm: use proper compatible for sama5d2's rtc (Claudiu Beznea) - arm64: dts: qcom: msm8992-*: Fix vdd_lvs1_2-supply typo (Stephan Gerhold) - pinctrl: sunxi: sunxi_pconf_set: use correct offset (Andrei Lalaev) - arm64: dts: imx8mp-phyboard-pollux-rdk: correct i2c2 & mmc settings (Peng Fan) - arm64: dts: imx8mp-phyboard-pollux-rdk: correct eqos pad settings (Peng Fan) - arm64: dts: imx8mp-phyboard-pollux-rdk: correct uart pad settings (Peng Fan) - arm64: dts: imx8mp-evk: correct I2C3 pad settings (Peng Fan) - arm64: dts: imx8mp-evk: correct I2C1 pad settings (Peng Fan) - arm64: dts: imx8mp-evk: correct eqos pad settings (Peng Fan) - arm64: dts: imx8mp-evk: correct vbus pad settings (Peng Fan) - arm64: dts: imx8mp-evk: correct gpio-led pad settings (Peng Fan) - arm64: dts: imx8mp-evk: correct the uart2 pinctl value (Sherry Sun) - arm64: dts: imx8mp-evk: correct mmc pad settings (Peng Fan) - ARM: mxs_defconfig: Enable the framebuffer (Fabio Estevam) - arm64: dts: qcom: sdm845: use dispcc AHB clock for mdss node (Dmitry Baryshkov) - arm64: dts: qcom: msm8994: Fix CPU6/7 reg values (Konrad Dybcio) - ASoC: codecs: rt700/rt711/rt711-sdca: resume bus/codec in .set_jack_detect (Pierre-Louis Bossart) - ASoC: rt711-sdca: Add endianness flag in snd_soc_component_driver (Charles Keepax) - ASoC: rt711: Add endianness flag in snd_soc_component_driver (Charles Keepax) - pinctrl: sunxi: a83t: Fix NAND function name for some pins (Samuel Holland) - ARM: meson: Fix refcount leak in meson_smp_prepare_cpus (Miaoqian Lin) - tty: n_gsm: fix encoding of command/response bit ([email protected]) - btrfs: fix use of uninitialized variable at rm device ioctl (Tom Rix) - virtio-blk: modify the value type of num in virtio_queue_rq() (Ye Guojin) - btrfs: fix error pointer dereference in btrfs_ioctl_rm_dev_v2() (Dan Carpenter) - Revert "serial: sc16is7xx: Clear RS485 bits in the shutdown" (Hui Wang) - can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits (Jimmy Assarsson) - can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression (Jimmy Assarsson) - can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info (Jimmy Assarsson) - net: dsa: qca8k: reset cpu port on MTU change (Christian Marangi) - powerpc/powernv: delay rng platform device creation until later in boot (Jason A. Donenfeld) - video: of_display_timing.h: include errno.h (Hsin-Yi Wang) - memregion: Fix memregion_free() fallback definition (Dan Williams) - PM: runtime: Redefine pm_runtime_release_supplier() (Rafael J. Wysocki) - fbcon: Prevent that screen size is smaller than font size (Helge Deller) - fbcon: Disallow setting font bigger than screen size (Helge Deller) - fbmem: Check virtual screen sizes in fb_set_var() (Helge Deller) - fbdev: fbmem: Fix logo center image dx issue (Guiling Deng) - iommu/vt-d: Fix PCI bus rescan device hot add (Yian Chen) - module: fix [e_shstrndx].sh_size=0 OOB access (Alexey Dobriyan) - module: change to print useful messages from elf_validity_check() (Shuah Khan) - dt-bindings: soc: qcom: smd-rpm: Fix missing MSM8936 compatible (Bryan O'Donoghue) - dt-bindings: soc: qcom: smd-rpm: Add compatible for MSM8953 SoC (Vladimir Lypak) - rxrpc: Fix locking issue (David Howells) - irqchip/gic-v3: Refactor ISB + EOIR at ack time (Mark Rutland) - irqchip/gic-v3: Ensure pseudo-NMIs have an ISB between ack and handling (Mark Rutland) - io_uring: avoid io-wq -EAGAIN looping for !IOPOLL (Pavel Begunkov) - Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event (Sean Wang) - Bluetooth: protect le accept and resolv lists with hdev->lock (Niels Dossche) - drm/mediatek: Add vblank register/unregister callback functions (Rex-BC Chen) - drm/mediatek: Add cmdq_handle in mtk_crtc (Chun-Kuang Hu) - drm/mediatek: Detect CMDQ execution timeout (Chun-Kuang Hu) - drm/mediatek: Remove the pointer of struct cmdq_client (Chun-Kuang Hu) - drm/mediatek: Use mailbox rx_callback instead of cmdq_task_cb (Chun-Kuang Hu) - drm/i915: Fix a race between vma / object destruction and unbinding (Thomas Hellström) - drm/amdgpu: vi: disable ASPM on Intel Alder Lake based systems (Richard Gong) - drm/amd: Refactor amdgpu_aspm to be evaluated per device (Mario Limonciello) - tty: n_gsm: fix invalid gsmtty_write_room() result (Daniel Starke) - serial: 8250_mtk: Make sure to select the right FEATURE_SEL (AngeloGioacchino Del Regno) - tty: n_gsm: fix sometimes uninitialized warning in gsm_dlci_modem_output() (Daniel Starke) - tty: n_gsm: fix invalid use of MSC in advanced option (Daniel Starke) - mm/hwpoison: fix race between hugetlb free/demotion and memory_failure_hugetlb() (Naoya Horiguchi) - mm/memory-failure.c: fix race with changing page compound again (Miaohe Lin) - mm/hwpoison: avoid the impact of hwpoison_filter() return value on mce handler (luofei) - mm/hwpoison: mf_mutex for soft offline and unpoison (Naoya Horiguchi) - KVM: Initialize debugfs_dentry when a VM is created to avoid NULL deref (Sean Christopherson) - btrfs: zoned: use dedicated lock for data relocation (Naohiro Aota) - btrfs: zoned: encapsulate inode locking for zoned relocation (Johannes Thumshirn) - tty: n_gsm: fix missing update of modem controls after DLCI open (Daniel Starke) - ALSA: usb-audio: add mapping for MSI MAG X570S Torpedo MAX. (Maurizio Avogadro) - ALSA: usb-audio: add mapping for MSI MPG X570S Carbon Max Wifi. (Johannes Schickel) - tty: n_gsm: fix frame reception handling (Daniel Starke) - tty: n_gsm: Save dlci address open status when config requester (Zhenguo Zhao) - tty: n_gsm: Modify CR,PF bit when config requester (Zhenguo Zhao) - KVM: Don't create VM debugfs files outside of the VM directory (Oliver Upton) - drm/amd/vcn: fix an error msg on vcn 3.0 (tiancyin) - ASoC: rt5682: fix an incorrect NULL check on list iterator (Xiaomeng Tong) - ASoC: rt5682: move clk related code to rt5682_i2c_probe (Jack Yu) - uapi/linux/stddef.h: Add include guards (Tadeusz Struk) - stddef: Introduce DECLARE_FLEX_ARRAY() helper (Kees Cook) - bus: mhi: Fix pm_state conversion to string (Paul Davey) - bus: mhi: core: Use correctly sized arguments for bit field (Kees Cook) - serial: sc16is7xx: Clear RS485 bits in the shutdown (Hui Wang) - powerpc/tm: Fix more userspace r13 corruption (Nicholas Piggin) - powerpc: flexible GPR range save/restore macros (Nicholas Piggin) - powerpc/32: Don't use lmw/stmw for saving/restoring non volatile regs (Christophe Leroy) - scsi: qla2xxx: Fix loss of NVMe namespaces after driver reload test (Arun Easi) - KVM: s390x: fix SCK locking (Claudio Imbrenda) - btrfs: don't access possibly stale fs_info data in device_list_add (Dongliang Mu) - KVM: use __vcalloc for very large allocations (Paolo Bonzini) - mm: vmalloc: introduce array allocation functions (Paolo Bonzini) - Compiler Attributes: add __alloc_size() for better bounds checking (Kees Cook) - mtd: spi-nor: Skip erase logic when SPI_NOR_NO_ERASE is set (Tudor Ambarus) - batman-adv: Use netif_rx(). (Sebastian Andrzej Siewior) - iio: accel: mma8452: use the correct logic to get mma8452_data (Haibo Chen) - riscv/mm: Add XIP_FIXUP for riscv_pfn_base (Palmer Dabbelt) - NFSD: COMMIT operations must not return NFS?ERR_INVAL (Chuck Lever) - NFSD: De-duplicate net_generic(nf->nf_net, nfsd_net_id) (Chuck Lever) - drm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bw (CHANDAN VURDIGERE NATARAJ) - drm/amd/display: Set min dcfclk if pipe count is 0 (Michael Strauss) - drbd: fix an invalid memory access caused by incorrect use of list iterator (Xiaomeng Tong) - drbd: Fix double free problem in drbd_create_device (Wu Bo) - drbd: add error handling support for add_disk() (Luis Chamberlain) - btrfs: remove device item and update super block in the same transaction (Qu Wenruo) - btrfs: use btrfs_get_dev_args_from_path in dev removal ioctls (Josef Bacik) - btrfs: add a btrfs_get_dev_args_from_path helper (Josef Bacik) - btrfs: handle device lookup with btrfs_dev_lookup_args (Josef Bacik) - vdpa/mlx5: Avoid processing works if workqueue was destroyed (Eli Cohen) - gfs2: Fix gfs2_file_buffered_write endless loop workaround (Andreas Gruenbacher) - scsi: qla2xxx: Fix crash during module load unload test (Arun Easi) - scsi: qla2xxx: edif: Replace list_for_each_safe with list_for_each_entry_safe (Quinn Tran) - scsi: qla2xxx: Fix laggy FC remote port session recovery (Quinn Tran) - scsi: qla2xxx: Move heartbeat handling from DPC thread to workqueue (Manish Rangankar) - KVM: x86/mmu: Use common TDP MMU zap helper for MMU notifier unmap hook (Sean Christopherson) - KVM: x86/mmu: Use yield-safe TDP MMU root iter in MMU notifier unmapping (Sean Christopherson) - clk: renesas: r9a07g044: Update multiplier and divider values for PLL2/3 (Lad Prabhakar) - cxl/port: Hold port reference until decoder release (Dan Williams) - mt76: mt7921: do not always disable fw runtime-pm (Lorenzo Bianconi) - mt76: mt76_connac: fix MCU_CE_CMD_SET_ROC definition error (Sean Wang) - media: davinci: vpif: fix use-after-free on driver unbind (Johan Hovold) - media: omap3isp: Use struct_group() for memcpy() region (Kees Cook) - stddef: Introduce struct_group() helper macro (Kees Cook) - block: fix rq-qos breakage from skipping rq_qos_done_bio() (Tejun Heo) - block: only mark bio as tracked if it really is tracked (Jens Axboe) - block: use bdev_get_queue() in bio.c (Pavel Begunkov) - io_uring: ensure that fsnotify is always called (Jens Axboe) - virtio-blk: avoid preallocating big SGL for data (Max Gurtovoy) - ibmvnic: Allow queueing resets during probe (Sukadev Bhattiprolu) - ibmvnic: clear fop when retrying probe (Sukadev Bhattiprolu) - ibmvnic: init init_done_rc earlier (Sukadev Bhattiprolu) - s390/setup: preserve memory at OLDMEM_BASE and OLDMEM_SIZE (Alexander Egorenkov) - s390/setup: use physical pointers for memblock_reserve() (Alexander Gordeev) - s390/boot: allocate amode31 section in decompressor (Alexander Gordeev) - netfilter: nft_payload: don't allow th access for fragments (Florian Westphal) - netfilter: nft_payload: support for inner header matching / mangling (Pablo Neira Ayuso) - netfilter: nf_tables: convert pktinfo->tprot_set to flags field (Pablo Neira Ayuso) - ASoC: rt5682: Fix deadlock on resume (Peter Ujfalusi) - ASoC: rt5682: Re-detect the combo jack after resuming (Derek Fang) - ASoC: rt5682: Avoid the unexpected IRQ event during going to suspend (Derek Fang) - net/mlx5e: TC, Reject rules with forward and drop actions (Roi Dayan) - net/mlx5e: TC, Reject rules with drop and modify hdr action (Roi Dayan) - net/mlx5e: Split actions_match_supported() into a sub function (Roi Dayan) - net/mlx5e: Check action fwd/drop flag exists also for nic flows (Roi Dayan) - RISC-V: defconfigs: Set CONFIG_FB=y, for FB console (Palmer Dabbelt) - riscv: defconfig: enable DRM_NOUVEAU (Heinrich Schuchardt) - bpf, arm64: Use emit_addr_mov_i64() for BPF_PSEUDO_FUNC (Hou Tao) - bpf: Stop caching subprog index in the bpf_pseudo_func insn (Martin KaFai Lau) - mt76: mt7921: fix a possible race enabling/disabling runtime-pm (Lorenzo Bianconi) - mt76: mt7921: introduce mt7921_mcu_set_beacon_filter utility routine (Lorenzo Bianconi) - mt76: mt7921: get rid of mt7921_mac_set_beacon_filter (Lorenzo Bianconi) - platform/x86: wmi: Fix driver->notify() vs ->probe() race (Hans de Goede) - platform/x86: wmi: Replace read_takes_no_args with a flags field (Hans de Goede) - platform/x86: wmi: introduce helper to convert driver to WMI driver (Barnabás Pőcze) - qed: Improve the stack space of filter_config() (Shai Malin) - ath11k: add hw_param for wakeup_mhi (Seevalamuthu Mariappan) - memory: renesas-rpc-if: Avoid unaligned bus access for HyperFlash (Andrew Gabbasov) - media: ir_toy: prevent device from hanging during transmit (Sean Young) - PCI: pciehp: Ignore Link Down/Up caused by error-induced Hot Reset (Lukas Wunner) - PCI/portdrv: Rename pm_iter() to pcie_port_device_iter() (Lukas Wunner) - drm/i915: Replace the unconditional clflush with drm_clflush_virt_range() (Ville Syrjälä) - drm/i915/gt: Register the migrate contexts with their engines (Thomas Hellström) - drm/i915: Disable bonding on gen12+ platforms (Matthew Brost) - btrfs: fix deadlock between chunk allocation and chunk btree modifications (Filipe Manana) - dma-buf/poll: Get a file reference for outstanding fence callbacks (Michel Dänzer) - Input: goodix - try not to touch the reset-pin on x86/ACPI devices (Hans de Goede) - Input: goodix - refactor reset handling (Hans de Goede) - Input: goodix - add a goodix.h header file (Hans de Goede) - Input: goodix - change goodix_i2c_write() len parameter type to int (Hans de Goede) - Input: cpcap-pwrbutton - handle errors from platform_get_irq() (Tang Bin) - btrfs: fix warning when freeing leaf after subvolume creation failure (Filipe Manana) - btrfs: fix invalid delayed ref after subvolume creation failure (Filipe Manana) - btrfs: add additional parameters to btrfs_init_tree_ref/btrfs_init_data_ref (Nikolay Borisov) - btrfs: rename btrfs_alloc_chunk to btrfs_create_chunk (Nikolay Borisov) - netfilter: nft_set_pipapo: release elements in clone from abort path (Pablo Neira Ayuso) - net: rose: fix UAF bug caused by rose_t0timer_expiry (Duoming Zhou) - usbnet: fix memory leak in error case (Oliver Neukum) - bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals (Daniel Borkmann) - bpf: Fix incorrect verifier simulation around jmp32's jeq/jne (Daniel Borkmann) - can: mcp251xfd: mcp251xfd_regmap_crc_read(): update workaround broken CRC on TBC register (Thomas Kopp) - can: mcp251xfd: mcp251xfd_regmap_crc_read(): improve workaround handling for mcp2517fd (Thomas Kopp) - can: m_can: m_can_{read_fifo,echo_tx_event}(): shift timestamp to full 32 bits (Marc Kleine-Budde) - can: m_can: m_can_chip_config(): actually enable internal timestamping (Marc Kleine-Budde) - can: gs_usb: gs_usb_open/close(): fix memory leak (Rhett Aultman) - can: grcan: grcan_probe(): remove extra of_node_get() (Liang He) - can: bcm: use call_rcu() instead of costly synchronize_rcu() (Oliver Hartkopp) - ALSA: cs46xx: Fix missing snd_card_free() call at probe error (Takashi Iwai) - ALSA: hda/realtek: Add quirk for Clevo L140PU (Tim Crawford) - ALSA: usb-audio: Workarounds for Behringer UMC 204/404 HD (Takashi Iwai) - Revert "selftests/bpf: Add test for bpf_timer overwriting crash" (Po-Hsu Lin) - mm/filemap: fix UAF in find_lock_entries (Liu Shixin) - mm/slub: add missing TID updates on slab deactivation (Jann Horn) - LTS version: v5.15.53 (Jack Vogel) - hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails (Yang Yingliang) - hwmon: (occ) Prevent power cap command overwriting poll response (Eddie James) - hwmon: (occ) Remove sequence numbering and checksum calculation (Eddie James) - drm/fourcc: fix integer type usage in uapi header (Carlos Llamas) - platform/x86: panasonic-laptop: filter out duplicate volume up/down/mute keypresses (Hans de Goede) - platform/x86: panasonic-laptop: don't report duplicate brightness key-presses (Hans de Goede) - platform/x86: panasonic-laptop: revert "Resolve hotkey double trigger bug" (Hans de Goede) - platform/x86: panasonic-laptop: sort includes alphabetically (Hans de Goede) - platform/x86: panasonic-laptop: de-obfuscate button codes (Stefan Seyfried) - drivers: cpufreq: Add missing of_node_put() in qoriq-cpufreq.c (Liang He) - drm/msm/gem: Fix error return on fence id alloc fail (Rob Clark) - drm/i915/gem: add missing else (katrinzhou) - net: fix IFF_TX_SKB_NO_LINEAR definition (Dan Carpenter) - fsi: occ: Force sequence numbering per OCC (Eddie James) - clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup() (Greg Kroah-Hartman) - net: usb: qmi_wwan: add Telit 0x1070 composition (Daniele Palmas) - xen/arm: Fix race in RB-tree based P2M accounting (Oleksandr Tyshchenko) - xen-netfront: restore __skb_queue_tail() positioning in xennet_get_responses() (Jan Beulich) - xen/blkfront: force data bouncing when backend is untrusted (Roger Pau Monne) - xen/netfront: force data bouncing when backend is untrusted (Roger Pau Monne) - xen/netfront: fix leaking data in shared pages (Roger Pau Monne) - xen/blkfront: fix leaking data in shared pages (Roger Pau Monne) - selftests/rseq: Change type of rseq_offset to ptrdiff_t (Mathieu Desnoyers) - selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread area (Mathieu Desnoyers) - selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread area (Mathieu Desnoyers) - selftests/rseq: Fix: work-around asm goto compiler bugs (Mathieu Desnoyers) - selftests/rseq: Remove arm/mips asm goto compiler work-around (Mathieu Desnoyers) - selftests/rseq: Fix warnings about #if checks of undefined tokens (Mathieu Desnoyers) - selftests/rseq: Fix ppc32 offsets by using long rather than off_t (Mathieu Desnoyers) - selftests/rseq: Fix ppc32 missing instruction selection "u" and "x" for load/store (Mathieu Desnoyers) - selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian (Mathieu Desnoyers) - selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35 (Mathieu Desnoyers) - selftests/rseq: Introduce thread pointer getters (Mathieu Desnoyers) - selftests/rseq: Introduce rseq_get_abi() helper (Mathieu Desnoyers) - selftests/rseq: Remove volatile from __rseq_abi (Mathieu Desnoyers) - selftests/rseq: Remove useless assignment to cpu variable (Mathieu Desnoyers) - selftests/rseq: introduce own copy of rseq uapi header (Mathieu Desnoyers) - selftests/rseq: remove ARRAY_SIZE define from individual tests (Shuah Khan) - selftests/bpf: Add test_verifier support to fixup kfunc call insns (Kumar Kartikeya Dwivedi) - tcp: add a missing nf_reset_ct() in 3WHS handling (Eric Dumazet) - MAINTAINERS: add Leah as xfs maintainer for 5.15.y (Leah Rumancik) - net: tun: avoid disabling NAPI twice (Jakub Kicinski) - mlxsw: spectrum_router: Fix rollback in tunnel next hop init (Petr Machata) - ipv6: fix lockdep splat in in6_dump_addrs() (Eric Dumazet) - ipv6/sit: fix ipip6_tunnel_get_prl return value (katrinzhou) - tunnels: do not assume mac header is set in skb_tunnel_check_pmtu() (Eric Dumazet) - ACPI: video: Change how we determine if brightness key-presses are handled (Hans de Goede) - io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio (Jens Axboe) - epic100: fix use after free on rmmod (Tong Zhang) - tipc: move bc link creation back to tipc_node_create (Xin Long) - NFC: nxp-nci: Don't issue a zero length i2c_master_read() (Michael Walle) - nfc: nfcmrvl: Fix irq_of_parse_and_map() return value (Krzysztof Kozlowski) - powerpc/memhotplug: Add add_pages override for PPC (Aneesh Kumar K.V) - net: bonding: fix use-after-free after 802.3ad slave unbind (Yevhen Orlov) - net: phy: ax88772a: fix lost pause advertisement configuration (Oleksij Rempel) - net: bonding: fix possible NULL deref in rlb code (Eric Dumazet) - net: asix: fix "can't send until first packet is send" issue (Oleksij Rempel) - net/sched: act_api: Notify user space if any actions were flushed before error (Victor Nogueira) - net/dsa/hirschmann: Add missing of_node_get() in hellcreek_led_setup() (Liang He) - netfilter: nft_dynset: restore set element counter when failing to update (Pablo Neira Ayuso) - s390: remove unneeded 'select BUILD_BIN2C' (Masahiro Yamada) - vdpa/mlx5: Update Control VQ callback information (Eli Cohen) - PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events (Miaoqian Lin) - caif_virtio: fix race between virtio_device_ready() and ndo_open() (Jason Wang) - vfs: fix copy_file_range() regression in cross-fs copies (Amir Goldstein) - NFSD: restore EINVAL error translation in nfsd_commit() (Alexey Khoroshilov) - net: ipv6: unexport __init-annotated seg6_hmac_net_init() (YueHaibing) - selftests: mptcp: more stable diag tests (Paolo Abeni) - usbnet: fix memory allocation in helpers (Oliver Neukum) - net: usb: asix: do not force pause frames support (Oleksij Rempel) - linux/dim: Fix divide by 0 in RDMA DIM (Tao Liu) - RDMA/cm: Fix memory leak in ib_cm_insert_listen (Miaoqian Lin) - RDMA/qedr: Fix reporting QP timeout attribute (Kamal Heib) - net: dp83822: disable rx error interrupt (Enguerrand de Ribaucourt) - net: dp83822: disable false carrier interrupt (Enguerrand de Ribaucourt) - net: tun: stop NAPI when detaching queues (Jakub Kicinski) - net: tun: unlink NAPI from device on destruction (Jakub Kicinski) - net: dsa: bcm_sf2: force pause link settings (Doug Berger) - selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test (Dimitris Michailidis) - virtio-net: fix race between ndo_open() and virtio_device_ready() (Jason Wang) - net: usb: ax88179_178a: Fix packet receiving (Jose Alonso) - net: rose: fix UAF bugs caused by timer handler (Duoming Zhou) - SUNRPC: Fix READ_PLUS crasher (Chuck Lever) - s390/archrandom: simplify back to earlier design and initialize earlier (Jason A. Donenfeld) - dm raid: fix KASAN warning in raid5_add_disks (Mikulas Patocka) - dm raid: fix accesses beyond end of raid member array (Heinz Mauelshagen) - powerpc/bpf: Fix use of user_pt_regs in uapi (Naveen N. Rao) - powerpc/book3e: Fix PUD allocation size in map_kernel_page() (Christophe Leroy) - powerpc/prom_init: Fix kernel config grep (Liam Howlett) - nvdimm: Fix badblocks clear off-by-one error (Chris Ye) - nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA IM2P33F8ABR1 (Lamarque Vieira Souza) - nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG SX6000LNP (AKA SPECTRIX S40G) (Pablo Greco) - net: phy: Don't trigger state machine while in suspend (Lukas Wunner) - ipv6: take care of disable_policy when restoring routes (Nicolas Dichtel) - ksmbd: use vfs_llseek instead of dereferencing NULL (Jason A. Donenfeld) - ksmbd: check invalid FileOffset and BeyondFinalZero in FSCTL_ZERO_DATA (Namjae Jeon) - ksmbd: set the range of bytes to zero without extending file size in FSCTL_ZERO_DATA (Namjae Jeon) - drm/amdgpu: To flush tlb for MMHUB of RAVEN series (Ruili Ji) - Revert "drm/amdgpu/display: set vblank_disable_immediate for DC" (Alex Deucher) - cpufreq:cppc_cpufreq: prevent crash on reading freqdomain_cpus (chris hyser) [Orabug: 34327463] - vmcoreinfo: add kallsyms_num_syms symbol (Stephen Brennan) [Orabug: 34475877] - vmcoreinfo: include kallsyms symbols (Stephen Brennan) [Orabug: 34475877] - kallsyms: move declarations to internal header (Stephen Brennan) [Orabug: 34475877] - Revert "KVM: x86: Print error code in exception injection tracepoint iff valid" (Sherry Yang) [Orabug: 34539458] - uek-rpm: Enable IMA_APPRAISE_SB_BOOTPARAM (Eric Snowberg) [Orabug: 34549007] - integrity: Allow ima_appraise bootparam to be set when SB is enabled (Eric Snowberg) [Orabug: 34549007] - net/mlx5: E-Switch, change VFs default admin state to auto in switchdev (Maor Dickman) [Orabug: 34533007] - Revert "net/mlx5: E-Switch, change VFs default admin state to auto in switchdev" (Devesh Sharma) [Orabug: 34532946] - uek-rpm: Install kernel-rpm-macros as build dependency (Somasundaram Krishnasamy) [Orabug: 34529696] [5.15.0-3.52.1.el9uek] - rds: ib: Fix lfstack to acquire visibility to list head (HÃ¥kon Bugge) [Orabug: 34522536] - locking/atomic: Make test_and_*_bit() ordered on failure (Hector Martin) [Orabug: 34520178] - intel_idle: make SPR C1 and C1E be independent (Artem Bityutskiy) [Orabug: 34510397] - intel_idle: Add AlderLake support (Zhang Rui) [Orabug: 34510397] - intel_idle: Fix SPR C6 optimization (Artem Bityutskiy) [Orabug: 34510397] - intel_idle: Fix the 'preferred_cstates' module parameter (Artem Bityutskiy) [Orabug: 34510397] - cpuidle: intel_idle: Drop redundant backslash at line end (Rafael J. Wysocki) [Orabug: 34510397] - mlx4: Subscribe to PXM notifier (Konrad Rzeszutek Wilk) [Orabug: 27206634] [Orabug: 34509446] - xen/pci: Add PXM node notifier for PXM (NUMA) changes. (Konrad Rzeszutek Wilk) [Orabug: 27206634] [Orabug: 34509446] - xen/pcifront: Walk the PCI bus after XenStore notification (Konrad Rzeszutek Wilk) [Orabug: 27206634] [Orabug: 34509446] - xen-pcifront/hvm: Slurp up "pxm" entry and set NUMA node on PCIe device. (V5) (Konrad Rzeszutek Wilk) [Orabug: 34509446] - scsi: core: Fix warning in scsi_alloc_sgtables() (Jason Yan) [Orabug: 33857787]

i386

x86_64

SRPMS

https://oss.oracle.com/ol9/SRPMS-updates/kernel-uek-5.15.0-3.60.5.1.el9uek.src.rpm

Severity
Related CVEs: CVE-2022-3028

We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.