# changelog

author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.177.3.el9uek]
changelog:
  - uek-rpm: Update network stress testing options for embedded2 (Joe Dobosenski)  [Orabug: 37530219]
  - mm, madvise: fix potential workingset node list_lru leaks (Kairui Song)  [Orabug: 37464586]
  - crypto: qat/qat_4xxx - fix off by one in uof_get_name() (Dan Carpenter)  [Orabug: 37427536] {CVE-2024-53162}
  - vdpa/mlx5: Fix error path during device add (Dragos Tatulea)  [Orabug: 37296163]
  - vp_vdpa: fix id_table array not null terminated error (Xiaoguang Wang)  [Orabug: 37296163] {CVE-2024-53110}
  - vdpa/mlx5: Postpone MR deletion (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Introduce init/destroy for MR resources (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Rename mr_mtx -> lock (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Extract mr members in own resource struct (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Rename function (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Delete direct MKEYs in parallel (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Create direct MKEYs in parallel (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Parallelize VQ suspend/resume for CVQ MQ command (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Small improvement for change_num_qps() (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Keep notifiers during suspend but ignore (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Parallelize device resume (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Parallelize device suspend (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Use async API for vq modify commands (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Use async API for vq query command (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Introduce async fw command wrapper (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Introduce error logging function (Dragos Tatulea)  [Orabug: 37296163]
  - net/mlx5: Support throttled commands from async API (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Add the support of set mac address (Cindy Lu)  [Orabug: 37296163]
  - vdpa_sim_net: Add the support of set mac address (Cindy Lu)  [Orabug: 37296163]
  - vdpa: support set mac address from vdpa tool (Cindy Lu)  [Orabug: 37296163]
  - vdpa/mlx5: Fix invalid mr resource destroy (Dragos Tatulea)  [Orabug: 37296163] {CVE-2024-47687}
  - vdpa/mlx5: Don't enable non-active VQs in .set_vq_ready() (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Don't reset VQs more than necessary (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Re-create HW VQs under certain conditions (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Pre-create hardware VQs at vdpa .dev_add time (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Use suspend/resume during VQP change (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Forward error in suspend/resume device (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Consolidate all VQ modify to Ready to use resume_vq() (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Add error code for suspend/resume VQ (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Accept Init -> Ready VQ transition in resume_vq() (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Allow creation of blank VQs (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Set mkey modified flags on all VQs (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Start off rqt_size with max VQPs (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Set an initial size on the VQ (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Add support for modifying the VQ features field (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Add support for modifying the virtio_version VQ field (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Rename init_mvqs (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Clear and reinitialize software VQ data on reset (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Initialize and reset device with one queue pair (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Remove duplicate suspend code (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Iterate over active VQs during suspend/resume (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Drop redundant check in teardown_virtqueues() (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Drop redundant code (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Make setup/teardown_vq_resources() symmetrical (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Clarify meaning thorough function rename (Dragos Tatulea)  [Orabug: 37296163]
  - vhost-vdpa: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET)  [Orabug: 37296163]
  - vp_vdpa: don't allocate unused msix vectors (Yuxue Liu)  [Orabug: 37296163]
  - vdpa: Convert sprintf/snprintf to sysfs_emit (Li Zhijian)  [Orabug: 37296163]
  - vp_vdpa: Fix return value check vp_vdpa_request_irq (Yuxue Liu)  [Orabug: 37296163]
  - vhost-vdpa: change ioctl # for VDPA_GET_VRING_SIZE (Michael S. Tsirkin)  [Orabug: 37296163]
  - virtio_vdpa: create vqs with the actual size (Zhu Lingshan)  [Orabug: 37296163]
  - vdpa_sim: implement vdpa_config_ops.get_vq_size for vDPA simulator (Zhu Lingshan)  [Orabug: 37296163]
  - vp_vdpa: implement vdpa_config_ops.get_vq_size (Zhu Lingshan)  [Orabug: 37296163]
  - vDPA: introduce get_vq_size to vdpa_config_ops (Zhu Lingshan)  [Orabug: 37296163]
  - vhost-vdpa: uapi to support reporting per vq size (Zhu Lingshan)  [Orabug: 37296163]
  - vdpa: skip suspend/resume ops if not DRIVER_OK (Steve Sistare)  [Orabug: 37296163]
  - vdpa_sim: reset must not run (Steve Sistare)  [Orabug: 37296163]
  - vdpa: Block vq property changes in DRIVER_OK (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa: Track device suspended state (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET)  [Orabug: 37296163]
  - SUNRPC: do not retry on EKEYEXPIRED when user TGT ticket expired (Dai Ngo)  [Orabug: 34162493]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.177.4.el9uek]
changelog:
  - Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null" (Greg Kroah-Hartman)
  - drm/v3d: Assign job pointer to NULL before signaling the fence (Maíra Canal)
  - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (Ranjan Kumar)  [Orabug: 37472354]  {CVE-2024-57804}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.177.4.1.el9uek]
changelog:
  - jbd2: increase maximum transaction size (Jan Kara)  [Orabug: 37741884]  
  - rtc: add new RTC_FEATURE_ALARM_WAKEUP_ONLY feature (Alexandre Belloni)  [Orabug: 37741883]  
  - thermal: core: Drop excessive lockdep_assert_held() calls (Rafael J. Wysocki)  [Orabug: 37741883]  
  - thermal: core: Introduce thermal_cooling_device_update() (Rafael J. Wysocki)  [Orabug: 37741883]  
  - thermal: core: Introduce thermal_cooling_device_present() (Rafael J. Wysocki)  [Orabug: 37741883]  
  - thermal: sysfs: Reuse cdev->max_state (Viresh Kumar)  [Orabug: 37741883]  
  - rtc: efi: Enable SET/GET WAKEUP services as optional (Shanker Donthineni)  [Orabug: 37741883]  
  - rtc: efi: Add wakeup support (Riwen Lu)  [Orabug: 37741883]  
  - rtc: efi: switch to RTC_FEATURE_UPDATE_INTERRUPT (Alexandre Belloni)  [Orabug: 37741883]  
  - rtc: add BSM parameter (Alexandre Belloni)  [Orabug: 37741883]  
  - rtc: add correction parameter (Alexandre Belloni)  [Orabug: 37741883]  
  - rtc: add parameter ioctl (Alexandre Belloni)  [Orabug: 37741883]  
  - rtc: expose correction feature (Alexandre Belloni)  [Orabug: 37741883]  
  - rtc: add alarm related features (Alexandre Belloni)  [Orabug: 37741883]  
  - rtc: efi: switch to devm_rtc_allocate_device (Alexandre Belloni)  [Orabug: 37741883]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.177.4.el9uek]
changelog:
  - Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null" (Greg Kroah-Hartman)   
  - drm/v3d: Assign job pointer to NULL before signaling the fence (Maíra Canal)   
  - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (Ranjan Kumar)  [Orabug: 37472354]  {CVE-2024-57804}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-307.177.1.el9uek]
changelog:
  - nvmet: always initialize cqe.result (Daniel Wagner)  [Orabug: 36897348]  {CVE-2024-41079} 
  - nvmet-auth: complete a request only after freeing the dhchap pointers (Maurizio Lombardi)  [Orabug: 36897348]  {CVE-2024-41079} 
  - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Justin Tee)  [Orabug: 37116505]  {CVE-2024-46842} 
  - netdevsim: use cond_resched() in nsim_dev_trap_report_work() (Eric Dumazet)  [Orabug: 37264120]  {CVE-2024-50155} 
  - nvmet-auth: assign dh_key to NULL after kfree_sensitive (Vitaliy Shevtsov)  [Orabug: 37268555]  {CVE-2024-50215} 
  - net: usb: lan78xx: Fix double free issue with interrupt buffer allocation (Oleksij Rempel)  [Orabug: 37433573]  {CVE-2024-53213} 
  - PCI/MSI: Handle lack of irqdomain gracefully (Thomas Gleixner)  [Orabug: 37452651]  {CVE-2024-56760} 
  - selftests: rtnetlink: update netdevsim ipsec output format (Hangbin Liu)  [Orabug: 37547931]  
  - netdevsim: print human readable IP address (Hangbin Liu)  [Orabug: 37547931]  
  - uek: kabi: Fix build error for HIDE_INCLUDE macro (Saeed Mirzamohammadi)  [Orabug: 37619141]  
  - Add __init annotation to pensando_efi_mem_reserve (Joe Dobosenski)  [Orabug: 37619785]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-305.171.1.el9uek]
changelog:
  - octeontx2-af: Fix CPT AF register offset calculation (Bharat Bhushan) [Orabug: 37445471]
  - perf/arm-cmn: Remove for loop intial declarations (Dave Kleikamp) [Orabug: 37409090]
  - perf/arm-cmn: Ensure port and device id bits are set properly (Namhyung Kim) [Orabug: 37409090]
  - perf/arm-cmn: Improve format attr printing (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Clean up unnecessary NUMA_NO_NODE check (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Support CMN S3 (Robin Murphy) [Orabug: 37409090]
  - dt-bindings: perf: arm-cmn: Add CMN S3 (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Refactor DTC PMU register access (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Make cycle counts less surprising (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Improve build-time assertion (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Ensure dtm_idx is big enough (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Fix CCLA register offset (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Refactor node ID handling. Again. (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Enable support for tertiary match group (Ilkka Koskinen) [Orabug: 37409090]
  - perf/arm-cmn: Decouple wp_config registers from filter group number (Ilkka Koskinen) [Orabug: 37409090]
  - perf/arm-cmn: Workaround AmpereOneX errata AC04_MESH_1 (incorrect child count) (Ilkka Koskinen) [Orabug: 37409090]
  - perf/arm-cmn: Improve debugfs pretty-printing for large configs (Robin Murphy) [Orabug: 37409090]
  - perf: arm-cmn: Convert to platform remove callback returning void (Uwe Kleine-König) [Orabug: 37409090]
  - perf/arm-cmn: Fail DTC counter allocation correctly (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Fix HN-F class_occup_id events (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Enable per-DTC counter allocation (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Rework DTC counters (again) (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Fix DTC domain detection (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Add CMN-700 r3 support (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Refactor HN-F event selector macros (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Remove spurious event aliases (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Add sysfs identifier (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Revamp model detection (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Fix port detection for CMN-700 (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Validate cycles events fully (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Move overlapping wp_combine field (Ilkka Koskinen) [Orabug: 37409090]
  - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Reset DTM_PMU_CONFIG at probe (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Decode CAL devices properly in debugfs (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Fix filter_sel lookup (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Add CMN-700 support (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Refactor occupancy filter selector (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Add CMN-650 support (Robin Murphy) [Orabug: 37409090]
  - dt-bindings: perf: arm-cmn: Add CMN-650 and CMN-700 (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Update watchpoint format (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Hide XP PUB events for CMN-600 (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Make arm_cmn_debugfs static (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Add debugfs topology info (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Add CI-700 Support (Robin Murphy) [Orabug: 37409090]
  - dt-bindings: perf: arm-cmn: Add CI-700 (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Support new IP features (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Demarcate CMN-600 specifics (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Move group validation data off-stack (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Optimise DTC counter accesses (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Optimise DTM counter reads (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Refactor DTM handling (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Streamline node iteration (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Refactor node ID handling (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Drop compile-test restriction (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Account for NUMA affinity (Robin Murphy) [Orabug: 37409090]
  - Acquire mem_cgroup_per_node.lruvec locks for online nodes only. (Imran Khan) [Orabug: 37405595]
  - Fix issues seen with mail thread patches. (Imran Khan) [Orabug: 37405595]
  - mm: lru: use lruvec lock to serialize memcg changes (Muchun Song) [Orabug: 37405595]
  - mm: lru: add VM_BUG_ON_PAGE to lru maintenance function (Muchun Song) [Orabug: 37405595]
  - mm: memcontrol: rename {un}lock_page_memcg() to {un}lock_page_objcg() (Muchun Song) [Orabug: 37405595]
  - mm: memcontrol: use obj_cgroup APIs to charge the LRU pages (Muchun Song) [Orabug: 37405595]
  - mm: memcontrol: introduce memcg_reparent_ops (Muchun Song) [Orabug: 37405595]
  - mm: memcontrol: make all the callers of page_memcg() safe (Muchun Song) [Orabug: 37405595]
  - mm: thp: make split queue lock safe when LRU pages reparented (Muchun Song) [Orabug: 37405595]
  - mm: thp: introduce split_queue_lock/unlock{_irqsave}() (Muchun Song) [Orabug: 37405595]
  - mm: vmscan: rework move_pages_to_lru() (Muchun Song) [Orabug: 37405595]
  - mm: memcontrol: make lruvec lock safe when the LRU pages reparented (Muchun Song) [Orabug: 37405595]
  - mm: memcontrol: introduce compact_lock_page_irqsave (Muchun Song) [Orabug: 37405595]
  - mm: memcontrol: prepare objcg API for non-kmem usage (Muchun Song) [Orabug: 37405595]
  - mm: move mem_cgroup_kmem_disabled() to memcontrol.h (Muchun Song) [Orabug: 37405595]
  - Uek-rpm/ol9: Enable CONFIG_FIPS_SIGNATURE_SELFTEST for mips64 (Vijay Kumar) [Orabug: 37390881,37509583]
  - sfc: Fix an error handling path in efx_pci_probe() (Christophe Jaillet) [Orabug: 37384497]
  - sfc: Separate netdev probe/remove from PCI probe/remove (Jonathan Cooper) [Orabug: 37384497]
  - sfc: replace function name in string with __func__ (Jonathan Cooper) [Orabug: 37384497]
  - sfc: Unsplit literal string. (Jonathan Cooper) [Orabug: 37384497]
  - sfc: Move EF100 efx_nic_type structs to the end of the file (Jonathan Cooper) [Orabug: 37384497]
  - sfc: Separate efx_nic memory from net_device memory (Jonathan Cooper) [Orabug: 37384497]
  - sfc: Encapsulate access to netdev_priv() (Jonathan Cooper) [Orabug: 37384497]
  - sfc: Add a PROBED state for EF100 VDPA use. (Jonathan Cooper) [Orabug: 37384497]
  - ACPICA: Allow PCC Data Type in MCTP resource. (Adam Young) [Orabug: 37311726,37356469]
  - ACPICA: Avoid undefined behavior: member access within misaligned address (Tamir Duberstein) [Orabug: 37311726,37356469]
  - arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a (D Scott Phillips) [Orabug: 37311726,37356469]
  - arm64: Expose the end of the linear map in PHYSMEM_END (D Scott Phillips) [Orabug: 37311726,37356469]
  - seqcount: replace smp_rmb() in read_seqcount() with load acquire (Christoph Lameter) [Orabug: 37311726,37356469]
  - uek-rpm: Enable new config options for Ampere (Dave Kleikamp) [Orabug: 37311726,37356469]
  - vmalloc: modify the alloc_vmap_area() error message for better diagnostics (Shubhang Kaushik) [Orabug: 37311726,37356469]
  - NUMA: early use of cpu_to_node() returns 0 instead of the correct node id (Huang Shijie) [Orabug: 37311726,37356469]
  - mm: mmap: no need to call khugepaged_enter_vma() for stack (Yang Shi) [Orabug: 37311726,37356469]
  - crash_core: export vmemmap when CONFIG_SPARSEMEM_VMEMMAP is enabled (Huang Shijie) [Orabug: 37311726,37356469]
  - PCI: acpiphp: Allow built-in drivers for Attention Indicators (D Scott Phillips) [Orabug: 37311726,37356469]
  - PCI: acpiphp: Add missing MODULE_DESCRIPTION() macro (Jeff Johnson) [Orabug: 37311726,37356469]
  - PCI: hotplug: Add Ampere Altra Attention Indicator extension driver (D Scott Phillips) [Orabug: 37311726,37356469]
  - mm: mempolicy: keep VMA walk if both MPOL_MF_STRICT and MPOL_MF_MOVE are specified (Yang Shi) [Orabug: 37311726,37356469]
  - arm64: compat: Work around uninitialized variable warning (Ard Biesheuvel) [Orabug: 37311726,37356469]
  - arm64: compat: Implement misalignment fixups for multiword loads (Ard Biesheuvel) [Orabug: 37311726,37356469]
  - RDMA/mlx5: Expose vhca id for all ports in multiport mode (Mark Bloch) [Orabug: 37234285]
  - rds/ib: avoid scq/rcq polling during rds connection shutdown (Arumugam Kolappan) [Orabug: 37055939]
  - RDMA/mlx5: Send UAR page index as ioctl attribute (Akiva Goldberger) [Orabug: 37029766]
  - RDMA: Pass entire uverbs attr bundle to create cq function (Akiva Goldberger) [Orabug: 37029766]
  - net/mlx5e: Fix CT entry update leaks of modify header context (Chris Mi) [Orabug: 36948578,36983969] {CVE-2024-43864}
  - net/mlx5e: Require mlx5 tc classifier action support for IPsec prio capability (Rahul Rameshbabu) [Orabug: 36948578]
  - net/mlx5: Fix missing lock on sync reset reload (Moshe Shemesh) [Orabug: 36948578,36963817] {CVE-2024-42268}
  - net/mlx5: Lag, don't use the hardcoded value of the first port (Mark Bloch) [Orabug: 36948578]
  - mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file (Aleksandr Mishin) [Orabug: 36948578] {CVE-2024-42138}
  - net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() (Jianbo Liu) [Orabug: 36948578]
  - net/mlx5: E-switch, Create ingress ACL when needed (Chris Mi) [Orabug: 36897834,36948578] {CVE-2024-42142}
  - mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems (Ido Schimmel) [Orabug: 36948578] {CVE-2024-42073}
  - RDMA/mlx5: Fix unwind flow as part of mlx5_ib_stage_init_init (Yishai Hadas) [Orabug: 36948578]
  - RDMA/mlx5: Ensure created mkeys always have a populated rb_key (Jason Gunthorpe) [Orabug: 36948578]
  - RDMA/mlx5: Follow rb_key.ats when creating new mkeys (Jason Gunthorpe) [Orabug: 36948578]
  - RDMA/mlx5: Remove extra unlock on error path (Jason Gunthorpe) [Orabug: 36948578]
  - net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (Aleksandr Mishin) [Orabug: 36948578] {CVE-2024-40939}
  - net/mlx5: Always stop health timer during driver removal (Shay Drory) [Orabug: 36835719,36948578] {CVE-2024-40906}
  - net/mlx5: Fix MTMP register capability offset in MCAM register (Gal Pressman) [Orabug: 36948578]
  - net/mlx5e: Advertise mlx5 ethernet driver updates sk_buff md_dst for MACsec (Rahul Rameshbabu) [Orabug: 36948578]
  - mlxsw: core_env: Fix driver initialization with old firmware (Ido Schimmel) [Orabug: 36948578]
  - net/mlx5: Lag, restore buckets number to default after hash LAG deactivation (Shay Drory) [Orabug: 36948578]
  - net/mlx5e: Do not produce metadata freelist entries in Tx port ts WQE xmit (Rahul Rameshbabu) [Orabug: 36948578]
  - RDMA/mlx5: Change check for cacheable mkeys (Or Har-Toov) [Orabug: 36948578]
  - RDMA/mlx5: Uncacheable mkey has neither rb_key or cache_ent (Or Har-Toov) [Orabug: 36948578]
  - mlx5: avoid truncating error message (Arnd Bergmann) [Orabug: 36948578]
  - net/mlx5: Check capability for fw_reset (Moshe Shemesh) [Orabug: 36948578]
  - net/mlx5: SF, Stop waiting for FW as teardown was called (Moshe Shemesh) [Orabug: 36948578]
  - netlink: Correct offload_xstats size (Christoph Paasch) [Orabug: 36948578]
  - net: fix net_dev_start_xmit trace event vs skb_transport_offset() (Eric Dumazet) [Orabug: 36948578]
  - lib/bitmap: drop optimization of bitmap_{from,to}_arr64 (Yury Norov) [Orabug: 36948578]
  - net: macsec: fix double free of percpu stats (Fedor Pchelkin) [Orabug: 36948578]
  - tcp: gso: really support BIG TCP (Eric Dumazet) [Orabug: 36948578]
  - RDMA/mlx5: Use rdma_umem_for_each_dma_block() (Jason Gunthorpe) [Orabug: 36948578]
  - nfp: flower: fix ingress police using matchall filter (Tianyu Yuan) [Orabug: 36948578]
  - lib/bitmap: fix off-by-one in bitmap_to_arr64() (Alexander Lobakin) [Orabug: 36948578]
  - RDMA/mlx5: Fix flow steering egress flow (Leon Romanovsky) [Orabug: 36948578]
  - rtnetlink: Fix handling of disabled L3 stats in RTM_GETSTATS replies (Petr Machata) [Orabug: 36948578]
  - tun: annotate access to queue->trans_start (Antoine Tenart) [Orabug: 36948578]
  - xsk: Do not write NULL in SW ring at allocation failure (Magnus Karlsson) [Orabug: 36948578]
  - net/sched: fix incorrect vlan_push_eth dest field (Louis Peens) [Orabug: 36948578]
  - RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit() (Dan Carpenter) [Orabug: 36948578]
  - net_tstamp: define new flag HWTSTAMP_FLAG_BONDED_PHC_INDEX (Hangbin Liu) [Orabug: 36948578]
  - net: add missing include in include/net/gro.h (Eric Dumazet) [Orabug: 36948578]
  - IB/hfi1: Properly allocate rdma counter desc memory (Dennis Dalessandro) [Orabug: 36948578]
  - xsk: Initialise xskb free_list_node (Ciara Loftus) [Orabug: 36948578]
  - xsk: Fix crash on double free in buffer pool (Magnus Karlsson) [Orabug: 36948578]
  - KVM: x86: WARN only once if KVM leaves a dangling userspace I/O request (Sean Christopherson) [Orabug: 36815282]
  - KVM: x86: Suppress pending MMIO write exits if emulator detects exception (Sean Christopherson) [Orabug: 36815282]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-305.171.2.el9uek]
changelog:
  - rds: ib: Avoid UAF on RDS Socket's rs_trans_lock (Håkon Bugge) [Orabug: 37475724,37475726]
  - rds: ib: Fix blocked processes related to race in rds_rdma_free_dev_rs_worker() (Håkon Bugge) [Orabug: 37475724,37475726]
  - rds: ib: Fix deterministic UAF in rds_rdma_free_dev_rs_worker() (Håkon Bugge) [Orabug: 37475724,37475726]
  - uek-misc: Define a prefix for uek module messages (Alejandro Jimenez) [Orabug: 37459409,37459411]
  - uek-misc: Clear the AVIC capability on platforms with known errata (Alejandro Jimenez) [Orabug: 37459409,37459411]
  - uek-misc: Add identification for OCI platform (Alejandro Jimenez) [Orabug: 37459409,37459411]
  - Revert "MIPS: do not call flush_tlb_all when setting pmd entry" (Vijay Kumar) [Orabug: 37454162]
  - cpufreq: intel_pstate: Support highest performance change interrupt (Srinivas Pandruvada) [Orabug: 37426908]
  - x86/cpufeatures: Add HWP highest perf change feature flag (Srinivas Pandruvada) [Orabug: 37426908]
  - cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE() annotations (Rafael J Wysocki) [Orabug: 37426908]
  - cpufreq: intel_pstate: Wait for canceled delayed work to complete (Rafael J Wysocki) [Orabug: 37426908]
  - cpufreq: intel_pstate: Simplify spinlock locking (Rafael J Wysocki) [Orabug: 37426908]
  - cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes (Rafael J Wysocki) [Orabug: 37426908]
  - uek-rpm: Enable CONFIG_FIPS_SIGNATURE_SELFTEST for all archs (Saeed Mirzamohammadi) [Orabug: 37400483,37459895,37509575]
  - uek-rpm: set DEFAULTKERNEL to other installed uek if possible (Sherry Yang) [Orabug: 37399094,37455023]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-305.176.3.el9uek]
changelog:
  - LTS version: v5.15.176 (Vijayendra Suman)
  - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [Orabug: 37484969] {CVE-2024-57884}
  - dt-bindings: display: adi,adv7533: Drop single lane support (Biju Das)
  - drm: adv7511: Drop dsi single lane support (Biju Das)
  - net/sctp: Prevent autoclose integer overflow in sctp_association_init() (Nikolay Kuratov) [Orabug: 37506731] {CVE-2024-57938}
  - sky2: Add device ID 11ab:4373 for Marvell 88E8075 (Pascal Hambourg)
  - pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking (Evgenii Shatokhin) {CVE-2024-57889}
  - RDMA/uverbs: Prevent integer overflow issue (Dan Carpenter) [Orabug: 37484995] {CVE-2024-57890}
  - kcov: mark in_softirq_really() as __always_inline (Arnd Bergmann)
  - modpost: fix the missed iteration for the max bit in do_input() (Masahiro Yamada)
  - modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host (Masahiro Yamada)
  - usb: xhci: Avoid queuing redundant Stop Endpoint commands (Michał Pecio)
  - ARC: build: Try to guess GCC variant of cross compiler (Leon Romanovsky)
  - irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (Uros Bizjak)
  - net: usb: qmi_wwan: add Telit FE910C04 compositions (Daniele Palmas)
  - bpf: fix potential error return (Anton Protopopov)
  - sound: usb: format: don't warn that raw DSD is unsupported (Adrian Ratiu)
  - sound: usb: enable DSD output for ddHiFi TC44C (Adrian Ratiu)
  - btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (Filipe Manana) [Orabug: 37485030] {CVE-2024-57896}
  - drm/amdkfd: Correct the migration DMA map direction (Prike Liang) [Orabug: 37485039] {CVE-2024-57897}
  - wifi: mac80211: wake the queues in case of failure in resume (Emmanuel Grumbach)
  - btrfs: sysfs: fix direct super block member reads (Qu Wenruo)
  - btrfs: sysfs: convert scnprintf and snprintf to sysfs_emit (Anand Jain)
  - btrfs: fix use-after-free when COWing tree bock and tracing is enabled (Filipe Manana) [Orabug: 37452645] {CVE-2024-56759}
  - btrfs: rename and export __btrfs_cow_block() (Filipe Manana)
  - ila: serialize calls to nf_register_net_hooks() (Eric Dumazet) {CVE-2024-57900}
  - af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Eric Dumazet) [Orabug: 37485099] {CVE-2024-57901}
  - af_packet: fix vlan_get_tci() vs MSG_PEEK (Eric Dumazet) [Orabug: 37485113] {CVE-2024-57902}
  - net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init() (Maciej S Szmigiero)
  - net: restrict SO_REUSEPORT to inet sockets (Eric Dumazet) [Orabug: 37485074] {CVE-2024-57903}
  - RDMA/rtrs: Ensure 'ib_sge list' is accessible (Li Zhijian) {CVE-2024-36476}
  - net: mv643xx_eth: fix an OF node reference leak (Joe Hattori)
  - eth: bcmsysport: fix call balance of priv->clk handling routines (Vitalii Mordan)
  - ALSA: usb-audio: US16x08: Initialize array before use (Tanya Agarwal)
  - net: llc: reset skb->transport_header (Antonio Pastor)
  - netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext (Pablo Neira Ayuso) [Orabug: 37522656] {CVE-2024-54031}
  - drm/i915/dg1: Fix power gate sequence. (Rodrigo Vivi)
  - netrom: check buffer length before accessing it (Ilya Shchipletsov) {CVE-2024-57802}
  - net: fix memory leak in tcp_conn_request() (Wang Liang) [Orabug: 37485137] {CVE-2024-57841}
  - net: stmmac: restructure the error path of stmmac_probe_config_dt() (Joe Hattori)
  - net: stmmac: don't create a MDIO bus if unnecessary (Andrew Halaney)
  - net: stmmac: platform: provide devm_stmmac_probe_config_dt() (Bartosz Golaszewski)
  - RDMA/hns: Fix missing flush CQE for DWQE (Chengchang Tang)
  - RDMA/hns: Fix warning storm caused by invalid input in IO path (Chengchang Tang)
  - RDMA/hns: Fix mapping error of zero-hop WQE buffer (Wenglianfa)
  - RDMA/hns: Remove redundant 'bt_level' for hem_list_alloc_item() (Yunsheng Lin)
  - RDMA/hns: Remove redundant 'attr_mask' in modify_qp_init_to_init() (Yixing Liu)
  - drm/bridge: adv7511_audio: Update Audio InfoFrame properly (Stefan Ekenberg)
  - RDMA/bnxt_re: Fix the locking while accessing the QP table (Selvin Xavier)
  - RDMA/bnxt_re: Fix max_qp_wrs reported (Selvin Xavier)
  - RDMA/bnxt_re: Fix reporting hw_ver in query_device (Kalesh Ap)
  - RDMA/bnxt_re: Add check for path mtu in modify_qp (Saravanan Vajravel)
  - RDMA/mlx5: Enforce same type port association for multiport RoCE (Patrisious Haddad)
  - xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic (Mathias Nyman)
  - usb: xhci: Limit Stop Endpoint retries (Michał Pecio)
  - xhci: retry Stop Endpoint on buggy NEC controllers (Michał Pecio)
  - thunderbolt: Add support for Intel Panther Lake-M/P (Mika Westerberg)
  - thunderbolt: Add support for Intel Lunar Lake (Mika Westerberg)
  - thunderbolt: Add Intel Barlow Ridge PCI ID (Mika Westerberg)
  - thunderbolt: Add support for Intel Meteor Lake (Mika Westerberg)
  - thunderbolt: Add support for Intel Raptor Lake (George D Sworo)
  - tracing: Have process_string() also allow arrays (Steven Rostedt) [Orabug: 37522630] {CVE-2024-57930}
  - selinux: ignore unknown extended permissions (Thiébaud Weksteen) [Orabug: 37506711] {CVE-2024-57931}
  - x86/hyperv: Fix hv tsc page based sched_clock for hibernation (Naman Jain)
  - net: dsa: improve shutdown sequence (Vladimir Oltean) [Orabug: 37206293] {CVE-2024-49998}
  - nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (Yang Erkun) [Orabug: 37252394] {CVE-2024-50121}
  - btrfs: avoid monopolizing a core when activating a swap file (Filipe Manana)
  - power: supply: gpio-charger: Fix set charge current limits (Dimitri Fedrau) [Orabug: 37472340] {CVE-2024-57792}
  - tracing: Prevent bad count for tracing_cpumask_write (Lizhi Xu) [Orabug: 37452666] {CVE-2024-56763}
  - tracing: Constify string literal data member in struct trace_event_call (Christian Göttsche)
  - ksmbd: fix racy issue from session lookup and expire (Namjae Jeon)
  - lib: stackinit: hide never-taken branch from compiler (Kees Cook)
  - drm/dp_mst: Verify request type in the corresponding down message reply (Imre Deak)
  - arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs (Catalin Marinas)
  - arm64: mm: Rename asid2idx() to ctxid2asid() (Yunfeng Ye)
  - ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write (Jordy Zomer) {CVE-2024-56626}
  - ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read (Jordy Zomer) {CVE-2024-56627}
  - drm/dp_mst: Fix MST sideband message body length check (Imre Deak) {CVE-2024-56616}
  - bpf: Check validity of link->type in bpf_link_show_fdinfo() (Hou Tao) [Orabug: 37331881] {CVE-2024-53099}
  - MIPS: Probe toolchain support of -msym32 (Jiaxun Yang)
  - vmalloc: fix accounting with i915 (Matthew Wilcox)
  - virtio-blk: don't keep queue frozen during system suspend (Ming Lei) [Orabug: 37506752] {CVE-2024-57946}
  - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery)
  - scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time (Ranjan Kumar)
  - platform/x86: asus-nb-wmi: Ignore unknown event 0xCF (Armin Wolf)
  - regmap: Use correct format specifier for logging range errors (Mark Brown)
  - ALSA: hda/conexant: fix Z60MR100 startup pop issue (Bo Liu)
  - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [Orabug: 37472363] {CVE-2024-57807}
  - scsi: qla1280: Fix hw revision numbering for ISP1020/1040 (Magnus Lindholm)
  - watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04 (James Hilliard)
  - tracing/kprobe: Make trace_kprobe's module callback called after jump_label update (Masami Hiramatsu)
  - mtd: rawnand: fix double free in atmel_pmecc_create_user() (Dan Carpenter) {CVE-2024-56766}
  - dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset (Chen Ridong) {CVE-2024-56767}
  - dmaengine: dw: Select only supported masters for ACPI devices (Andy Shevchenko)
  - dmaengine: mv_xor: fix child node refcount handling in early exit (Javier Carrasco)
  - phy: core: Fix that API devm_phy_destroy() fails to destroy the phy (Zijun Hu)
  - phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider (Zijun Hu)
  - phy: core: Fix that API devm_phy_put() fails to release the phy (Zijun Hu)
  - phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() (Zijun Hu)
  - phy: core: Fix an OF node refcount leakage in _of_phy_get() (Zijun Hu)
  - mtd: rawnand: arasan: Fix missing de-registration of NAND (Maciej Andrzejewski Iceye)
  - mtd: rawnand: arasan: Fix double assertion of chip-select (Maciej Andrzejewski Iceye)
  - mtd: diskonchip: Cast an operand to prevent potential overflow (Zichen Xie)
  - nfsd: restore callback functionality for NFSv4.0 (Neil Brown)
  - bpf: Check negative offsets in __bpf_skb_min_len() (Cong Wang)
  - tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection (Zijian Zhang)
  - tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress() (Cong Wang)
  - mm/vmstat: fix a W=1 clang compiler warning (Bart Van Assche)
  - media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (Nikita Zhandarovich) [Orabug: 37452686] {CVE-2024-56769}
  - drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update (Michel Dänzer)
  - epoll: Add synchronous wakeup support for ep_poll_callback (Xuewen Yan)
  - ceph: validate snapdirname option length when mounting (Ilya Dryomov)
  - of: Fix refcount leakage for OF node returned by __of_get_dma_parent() (Zijun Hu)
  - of: Fix error path in of_parse_phandle_with_args_map() (Herve Codina)
  - udmabuf: also check for F_SEAL_FUTURE_WRITE (Jann Horn)
  - nilfs2: prevent use of deleted inode (Edward Adam Davis) {CVE-2024-53690}
  - of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() (Zijun Hu)
  - NFS/pnfs: Fix a live lock between recalled layouts and layoutget (Trond Myklebust)
  - tracing: Add "%s" check in test_event_printk() (Steven Rostedt)
  - tracing: Add missing helper functions in event pointer dereference check (Steven Rostedt)
  - tracing: Fix test_event_printk() to process entire print argument (Steven Rostedt)
  - KVM: x86: Play nice with protected guests in complete_hypercall_exit() (Sean Christopherson) [Orabug: 37472314] {CVE-2024-55881}
  - Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (Michael Kelley) [Orabug: 37472318] {CVE-2024-55916}
  - btrfs: tree-checker: reject inline extent items with 0 ref count (Qu Wenruo)
  - zram: refuse to use zero sized block device as backing device (Kairui Song)
  - sh: clk: Fix clk_enable() to return 0 on NULL clk (Geert Uytterhoeven)
  - hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers (Murad Masimov)
  - hwmon: (tmp513) Fix Current Register value interpretation (Murad Masimov)
  - hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers (Murad Masimov)
  - hwmon: (tmp513) Use SI constants from units.h (Andy Shevchenko)
  - hwmon: (tmp513) Simplify with dev_err_probe() (Andy Shevchenko)
  - hwmon: (tmp513) Don't use "proxy" headers (Andy Shevchenko)
  - drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (Ville Syrjälä) [Orabug: 37472327] {CVE-2024-56369}
  - USB: serial: option: add Telit FE910C04 rmnet compositions (Daniele Palmas)
  - USB: serial: option: add MediaTek T7XX compositions (Jack Wu)
  - USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready (Mank Wang)
  - USB: serial: option: add MeiG Smart SLM770A (Michal Hrusecky)
  - USB: serial: option: add TCL IK512 MBIM & ECM (Daniel Swanemar)
  - efivarfs: Fix error on non-existent file (James E J Bottomley)
  - i2c: riic: Always round-up when calculating bus period (Geert Uytterhoeven)
  - chelsio/chtls: prevent potential integer overflow on 32bit (Dan Carpenter)
  - mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk (Prathamesh Shete)
  - net: mdiobus: fix an OF node reference leak (Joe Hattori)
  - netfilter: ipset: Fix for recursive locking warning (Phil Sutter)
  - net: ethernet: bgmac-platform: fix an OF node reference leak (Joe Hattori)
  - net: hinic: Fix cleanup in create_rxqs/txqs() (Dan Carpenter)
  - ionic: use ee->offset when returning sprom data (Shannon Nelson)
  - ionic: Fix netdev notifier unregister on failure (Brett Creeley) [Orabug: 37434407] {CVE-2024-56715}
  - netdevsim: prevent bad user input in nsim_dev_health_break_write() (Eric Dumazet) [Orabug: 37434410] {CVE-2024-56716}
  - net/smc: check return value of sock_recvmsg when draining clc data (Guangguan Wang) {CVE-2024-57791}
  - net/smc: check smcd_v2_ext_offset when receiving proposal msg (Guangguan Wang) {CVE-2024-47408}
  - net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (Guangguan Wang) {CVE-2024-49571}
  - net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll (Guangguan Wang)
  - erofs: fix incorrect symlink detection in fast symlink (Gao Xiang)
  - i2c: pnx: Fix timeout in wait functions (Vladimir Riabchun)
  - usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled (Peng Hongchi)
  - MIPS: Loongson64: DTS: Fix msi node for ls7a (Jiaxun Yang)
  - PCI: Add ACS quirk for Broadcom BCM5760X NIC (Ajit Khaparde)
  - PCI: vmd: Create domain symlink before pci_bus_add_devices() (Jiwei Sun)
  - ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP (Pierre-Louis Bossart)
  - usb: cdns3: Add quirk flag to enable suspend residency (Roger Quadros)
  - ALSA: usb: Fix UBSAN warning in parse_audio_unit() (Takashi Iwai)
  - PCI/AER: Disable AER service on suspend (Kai-Heng Feng)
  - PCI: Use preserve_config in place of pci_flags (Vidya Sagar)
  - net: sched: fix ordering of qlen adjustment (Lion Ackermann) [Orabug: 37433381] {CVE-2024-53164}
  - LTS version: v5.15.175 (Vijayendra Suman)
  - x86/static-call: fix 32-bit build (Juergen Gross)
  - ALSA: usb-audio: Fix a DMA to stack memory bug (Dan Carpenter)
  - x86/xen: remove hypercall page (Juergen Gross) {CVE-2024-53241}
  - x86/xen: use new hypercall functions instead of hypercall page (Juergen Gross) {CVE-2024-53241}
  - x86/xen: add central hypercall functions (Juergen Gross) {CVE-2024-53241}
  - x86/xen: don't do PV iret hypercall through hypercall page (Juergen Gross) [Orabug: 37427545] {CVE-2024-53241}
  - x86/static-call: provide a way to do very early static-call updates (Juergen Gross) {CVE-2024-53241}
  - objtool/x86: allow syscall instruction (Juergen Gross) {CVE-2024-53241}
  - x86: make get_cpu_vendor() accessible from Xen code (Juergen Gross) {CVE-2024-53241}
  - xen/netfront: fix crash when removing device (Juergen Gross) [Orabug: 37427541] {CVE-2024-53240}
  - Revert "parisc: fix a possible DMA corruption" (Greg Kroah-Hartman)
  - tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe() (Nikolay Kuratov)
  - bpf: sync_linked_regs() must preserve subreg_def (Eduard Zingerman) [Orabug: 37388801] {CVE-2024-53125}
  - blk-iocost: Avoid using clamp() on inuse in __propagate_weights() (Nathan Chancellor)
  - ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired (Daniil Tatianin)
  - team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Daniel Borkmann)
  - bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Daniel Borkmann)
  - net/sched: netem: account for backlog updates from child qdisc (Martin Ottens) [Orabug: 37462137] {CVE-2024-56770}
  - Documentation: PM: Clarify pm_runtime_resume_and_get() return value (Paul Barker)
  - qca_spi: Make driver probing reliable (Stefan Wahren)
  - qca_spi: Fix clock speed for multiple QCA7000 (Stefan Wahren)
  - cxgb4: use port number to set mac addr (Anumula Murali Mohan Reddy)
  - ACPI: resource: Fix memory resource type union access (Ilpo Järvinen)
  - net: sparx5: fix the maximum frame length register (Daniel Machon)
  - net: sparx5: fix FDMA performance issue (Daniel Machon)
  - net: lapb: increase LAPB_HEADER_LEN (Eric Dumazet) {CVE-2024-56659}
  - ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init() (Thomas Weißschuh)
  - ptp: kvm: Use decrypted memory in confidential guest on x86 (Jeremi Piotrowski)
  - selftests: mlxsw: sharedbuffer: Remove duplicate test cases (Danielle Ratson)
  - selftests: mlxsw: sharedbuffer: Remove h1 ingress test case (Danielle Ratson)
  - tipc: fix NULL deref in cleanup_bearer() (Eric Dumazet) [Orabug: 37522548] {CVE-2024-56661}
  - batman-adv: Do not let TT changes list grows indefinitely (Remi Pommarel)
  - batman-adv: Remove uninitialized data in full table TT response (Remi Pommarel)
  - batman-adv: Do not send uninitialized TT changes (Remi Pommarel)
  - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (Surajsonawane2415) [Orabug: 37434246] {CVE-2024-56662}
  - exfat: fix potential deadlock on __exfat_get_dentry_set (Sungjong Seo) [Orabug: 36964279] {CVE-2024-42315}
  - virtio/vsock: Fix accept_queue memory leak (Michal Luczaj) [Orabug: 37388777] {CVE-2024-53119}
  - bpf, sockmap: Fix update element with same (Michal Luczaj)
  - xfs: fix scrub tracepoints when inode-rooted btrees are involved (Darrick J Wong)
  - xfs: return from xfs_symlink_verify early on V4 filesystems (Darrick J Wong)
  - xfs: don't drop errno values when we fail to ficlone the entire range (Darrick J Wong)
  - xfs: update btree keys correctly when _insrec splits an inode root block (Darrick J Wong)
  - drm/i915: Fix memory leak by correcting cache object name in error handler (Jiasheng Jiang)
  - usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (Lianqin Hu) [Orabug: 37434263] {CVE-2024-56670}
  - usb: ehci-hcd: fix call balance of clocks handling routines (Vitalii Mordan)
  - usb: dwc2: Fix HCD port connection race (Stefan Wahren)
  - usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature (Stefan Wahren)
  - usb: dwc2: Fix HCD resume (Stefan Wahren)
  - ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() (Joe Hattori)
  - usb: host: max3421-hcd: Correctly abort a USB request. (Mark Tomlinson)
  - ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5 (Jaakko Salo)
  - tcp: check space before adding MPTCP SYN options (Moyuanhao)
  - LTS version: v5.15.174 (Vijayendra Suman)
  - Bluetooth: hci_core: Fix calling mgmt_device_connected (Luiz Augusto Von Dentz)
  - net/smc: Fix af_ops of child socket pointing to released memory (Karsten Graul)
  - media: venus: vdec: fixed possible memory leak issue (Ameer Hamza)
  - serial: amba-pl011: fix build regression (Arnd Bergmann)
  - drm/amdgpu: rework resume handling for display (v2) (Alex Deucher)
  - drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX (Wayne Lin) [Orabug: 37159692] {CVE-2024-46871}
  - net: dsa: microchip: correct KSZ8795 static MAC table access (Tristram Ha)
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect (Luiz Augusto Von Dentz) [Orabug: 37206073] {CVE-2024-49950}
  - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (Mark Rutland)
  - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Brown) [Orabug: 37298722] {CVE-2024-50275}
  - gve: Fixes for napi_poll when budget is 0 (Ziwei Xiao)
  - scsi: core: Fix scsi_mode_select() buffer length handling (Damien Le Moal)
  - Revert "drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()" (Zhang Zekun)
  - fou: remove warn in gue_gro_receive on unsupported protocol (Willem De Bruijn) {CVE-2024-44940}
  - ima: Fix use-after-free on a dentry's dname.name (Stefan Berger) [Orabug: 36835557] {CVE-2024-39494}
  - crypto: hisilicon/qm - inject error before stopping queue (Weili Qian) {CVE-2024-47730}
  - drm/amd/display: Check BIOS images before it is used (Alex Hung) [Orabug: 37116330] {CVE-2024-46809}
  - mmc: mtk-sd: Fix error handle of probe function (Andy-Ld Lu)
  - xhci: dbc: Fix STALL transfer event handling (Mathias Nyman)
  - mm/damon/vaddr: fix issue in damon_va_evenly_split_region() (Zheng Yejian)
  - mm/damon/vaddr-test: split a test function having >1024 bytes frame size (Seongjae Park)
  - jffs2: Fix rtime decompressor (Richard Weinberger)
  - jffs2: Prevent rtime decompress memory corruption (Kinsey Moore) [Orabug: 37472397] {CVE-2024-57850}
  - KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE (Kunkun Jiang)
  - KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device (Kunkun Jiang)
  - KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* (Jing Zhang)
  - tracing/eprobe: Fix to release eprobe when failed to add dyn_event (Masami Hiramatsu)
  - btrfs: fix missing snapshot drew unlock when root is dead during swap activation (Filipe Manana)
  - sched/core: Prevent wakeup of ksoftirqd during idle load balance (K Prateek Nayak)
  - sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy (K Prateek Nayak)
  - sched/fair: Add NOHZ balancer flag for nohz.next_balance updates (Valentin Schneider)
  - sched/core: Remove the unnecessary need_resched() check in nohz_csd_func() (K Prateek Nayak)
  - modpost: Add .irqentry.text to OTHER_SECTIONS (Thomas Gleixner)
  - modpost: Include '.text.*' in TEXT_SECTIONS (Nathan Chancellor)
  - misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle (Parker Newman)
  - powerpc/prom_init: Fixup missing powermac #size-cells (Michael Ellerman) {CVE-2024-56781}
  - MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a (Xi Ruoyao) {CVE-2024-56785}
  - usb: chipidea: udc: handle USB Error Interrupt if IOC not set (Xu Yang)
  - i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock (Defa Li) {CVE-2024-43098}
  - PCI: Add ACS quirk for Wangxun FF5xxx NICs (Mengyuan Lou)
  - PCI: Add 'reset_subordinate' to reset hierarchy below bridge (Keith Busch)
  - PCI: Detect and trust built-in Thunderbolt chips (Esther Shimanovich)
  - i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (Jarkko Nikula) {CVE-2024-45828}
  - f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode. (Qi Han) {CVE-2024-56586}
  - nvdimm: rectify the illogical code within nd_dax_probe() (Yi Yang)
  - pinctrl: qcom-pmic-gpio: add support for PM8937 (Barnabás Czémán)
  - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Kai Mäkisara)
  - scsi: st: Don't modify unknown block number in MTIOCGET (Kai Mäkisara)
  - leds: class: Protect brightness_show() with led_cdev->led_access mutex (Mukesh Ojha) [Orabug: 37433867] {CVE-2024-56587}
  - scsi: hisi_sas: Add cond_resched() for no forced preemption model (Yihang Li) [Orabug: 37433881] {CVE-2024-56589}
  - tracing: Use atomic64_inc_return() in trace_clock_counter() (Uros Bizjak)
  - pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU (Esben Haabendal)
  - netpoll: Use rcu_access_pointer() in __netpoll_setup (Breno Leitao)
  - net/neighbor: clear error in case strict check is not set (Jakub Kicinski)
  - rocker: fix link status detection in rocker_carrier_init() (Dmitry Antipov)
  - ASoC: hdmi-codec: reorder channel allocation list (Jonas Karlman)
  - Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet (Luiz Augusto Von Dentz) [Orabug: 37433887] {CVE-2024-56590}
  - wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (Norbert Van Bolhuis) [Orabug: 37433907] {CVE-2024-56593}
  - wifi: ipw2x00: libipw_rx_any(): fix bad alignment (Jiapeng Chong)
  - drm/amdgpu: set the right AMDGPU sg segment limitation (Prike Liang) [Orabug: 37433913] {CVE-2024-56594}
  - drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov (Victor Zhao)
  - jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (Nihar Chaithanya) {CVE-2024-56595}
  - jfs: fix array-index-out-of-bounds in jfs_readdir (Ghanshyam Agrawal) {CVE-2024-56596}
  - jfs: fix shift-out-of-bounds in dbSplit (Ghanshyam Agrawal) {CVE-2024-56597}
  - jfs: array-index-out-of-bounds fix in dtReadFirst (Ghanshyam Agrawal) {CVE-2024-56598}
  - dma-debug: fix a possible deadlock on radix_lock (Levi Yun) {CVE-2024-47143}
  - drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr (Lang Yu)
  - drm/amdgpu: Dereference the ATCS ACPI buffer (Prike Liang)
  - drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih (Victor Lu)
  - drm/panel: simple: Add Microchip AC69T88A LVDS Display panel (Manikandan Muralidharan)
  - wifi: ath5k: add PCI ID for Arcadyan devices (Rosen Penev)
  - wifi: ath5k: add PCI ID for SX76X (Rosen Penev)
  - net: inet6: do not leave a dangling sk pointer in inet6_create() (Ignat Korchagin) [Orabug: 37433954] {CVE-2024-56600}
  - net: inet: do not leave a dangling sk pointer in inet_create() (Ignat Korchagin) [Orabug: 37433961] {CVE-2024-56601}
  - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Ignat Korchagin) [Orabug: 37433968] {CVE-2024-56602}
  - net: af_can: do not leave a dangling sk pointer in can_create() (Ignat Korchagin) [Orabug: 37433975] {CVE-2024-56603}
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (Ignat Korchagin) [Orabug: 37433989] {CVE-2024-56605}
  - af_packet: avoid erroring out after sock_init_data() in packet_create() (Ignat Korchagin) [Orabug: 37433995] {CVE-2024-56606}
  - net/sched: cbs: Fix integer overflow in cbs_set_port_rate() (Elena Salomatkina)
  - net: ethernet: fs_enet: Use %pa to format resource_size_t (Simon Horman)
  - net: fec_mpc52xx_phy: Use %pa to format resource_size_t (Simon Horman)
  - samples/bpf: Fix a resource leak (Zhujun2)
  - r8169: don't apply UDP padding quirk on RTL8126A (Heiner Kallweit)
  - drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (Igor Artemiev)
  - drm/mcde: Enable module autoloading (Liao Chen)
  - drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (Joaquín Ignacio Aramendía)
  - drm/vc4: hvs: Set AXI panic modes for the HVS (Dave Stevenson)
  - soc: imx8m: Probe the SoC driver as platform driver (Marek Vasut) {CVE-2024-56787}
  - media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (Rohan Barar)
  - media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (David Given)
  - kcsan: Turn report_filterlist_lock into a raw_spinlock (Marco Elver) {CVE-2024-56610}
  - kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all() (Mark Brown)
  - btrfs: avoid unnecessary device path update for the same device (Qu Wenruo)
  - s390/cpum_sf: Handle CPU hotplug remove during sampling (Thomas Richter) {CVE-2024-57849}
  - epoll: annotate racy check (Christian Brauner)
  - iommu/arm-smmu: Defer probe of clients after smmu device bound (Pratyush Brahma) [Orabug: 37433775] {CVE-2024-56568}
  - ocfs2: update seq_file index in ocfs2_dlm_seq_next (Wengang Wang)
  - mmc: core: Further prevent card detect during shutdown (Ulf Hansson)
  - mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet (Hans de Goede)
  - regmap: detach regmap from dev on regmap_exit (Cosmin Tanislav)
  - xsk: fix OOB map writes when deleting elements (Maciej Fijalkowski) [Orabug: 37434040] {CVE-2024-56614}
  - dma-buf: fix dma_fence_array_signaled v4 (Christian König)
  - bpf: fix OOB devmap writes when deleting elements (Maciej Fijalkowski) [Orabug: 37434046] {CVE-2024-56615}
  - bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (Liequan Che) [Orabug: 37472224] {CVE-2024-48881}
  - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (Ryusuke Konishi) {CVE-2024-56619}
  - scsi: ufs: core: sysfs: Prevent div by zero (Gwendal Grignou) [Orabug: 37434075] {CVE-2024-56622}
  - scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (Saurav Kashyap)
  - scsi: qla2xxx: Fix use after free on unload (Quinn Tran) [Orabug: 37434078] {CVE-2024-56623}
  - scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (Anil Gurumurthy)
  - scsi: qla2xxx: Fix NVMe and NPIV connect issue (Quinn Tran)
  - ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG) (Sahas Leelodharry)
  - ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8 (Nazar Bilinskyi)
  - ALSA: usb-audio: add mixer mapping for Corsair HS80 (Marie Ramlow)
  - arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (Mark Rutland) [Orabug: 37472409] {CVE-2024-57874}
  - tracing: Fix cmp_entries_dup() to respect sort() comparison rules (Kuan-Wei Chiu)
  - can: dev: can_set_termination(): allow sleeping GPIOs (Marc Kleine-Budde) [Orabug: 37434086] {CVE-2024-56625}
  - watchdog: rti: of: honor timeout-sec property (Alexander Sverdlin)
  - HID: wacom: fix when get product name maybe null pointer (Yuli Wang) [Orabug: 37434107] {CVE-2024-56629}
  - bpf: Fix exact match conditions in trie_get_next_key() (Hou Tao)
  - bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie (Hou Tao)
  - ocfs2: free inode when ocfs2_get_init_inode() fails (Tetsuo Handa) [Orabug: 37434112] {CVE-2024-56630}
  - drm/v3d: Enable Performance Counters before clearing them (Maíra Canal)
  - spi: mpc52xx: Add cancel_work_sync before module remove (Pei Xiao) {CVE-2024-50051}
  - tools: Override makefile ARCH variable if defined, but empty (Björn Töpel)
  - ALSA: usb-audio: Notify xrun for low-latency mode (Takashi Iwai)
  - ALSA: pcm: Avoid reference to status->state (Takashi Iwai)
  - ALSA: pcm: Add more disconnection checks at file ops (Takashi Iwai)
  - tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (Zijian Zhang) [Orabug: 37434126] {CVE-2024-56633}
  - drm/sti: Add __iomem for mixer_dbg_mxn's parameter (Pei Xiao)
  - bpftool: fix potential NULL pointer dereferencing in prog_dump() (Amir Mohammadi)
  - bpftool: Remove asserts from JIT disassembler (Quentin Monnet)
  - serial: amba-pl011: Fix RX stall when DMA is used (Kartik)
  - serial: amba-pl011: Use port lock wrappers (Thomas Gleixner)
  - dt-bindings: serial: rs485: Fix rs485-rts-delay property (Michal Simek)
  - dt_bindings: rs485: Correct delay values (Lino Sanfilippo)
  - gpio: grgpio: Add NULL check in grgpio_probe (Charles Han) {CVE-2024-56634}
  - gpio: grgpio: use a helper variable to store the address of ofdev->dev (Bartosz Golaszewski)
  - geneve: do not assume mac header is set in geneve_xmit_skb() (Eric Dumazet) [Orabug: 37434137] {CVE-2024-56636}
  - ethtool: Fix wrong mod state in case of verbose and no_mask bitset (Kory Maincent)
  - netfilter: nft_set_hash: skip duplicated elements pending gc run (Pablo Neira Ayuso)
  - netfilter: ipset: Hold module reference while requesting a module (Phil Sutter) [Orabug: 37434142] {CVE-2024-56637}
  - net: sched: fix erspan_opt settings in cls_flower (Xin Long)
  - igb: Fix potential invalid memory access in igb_init_module() (Yuan Can) [Orabug: 37472255] {CVE-2024-52332}
  - net/qed: allow old cards not supporting "num_images" to work (Louis Leseur)
  - net/smc: fix LGR and link use-after-free issue (Wen Gu) {CVE-2024-56640}
  - net/smc: Limit backlog connections (D Wythe)
  - tipc: Fix use-after-free of kernel socket in cleanup_bearer(). (Kuniyuki Iwashima) [Orabug: 37434160] {CVE-2024-56642}
  - dccp: Fix memory leak in dccp_feat_change_recv (Ivan Solodovnikov) [Orabug: 37434167] {CVE-2024-56643}
  - net/ipv6: release expired exception dst cached in socket (Jiri Wiesner) [Orabug: 37434172] {CVE-2024-56644}
  - can: j1939: j1939_session_new(): fix skb reference counting (Dmitry Antipov) [Orabug: 37434180] {CVE-2024-56645}
  - net: hsr: avoid potential out-of-bound access in fill_frame_info() (Eric Dumazet) [Orabug: 37434192] {CVE-2024-56648}
  - net/sched: tbf: correct backlog statistic for GSO packets (Martin Ottens)
  - ptp: Add error handling for adjfine callback in ptp_clock_adjtime (Ajay Kaher)
  - netfilter: x_tables: fix LED ID check in led_tg_check() (Dmitry Antipov) [Orabug: 37434199] {CVE-2024-56650}
  - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (Jinghao Jia) [Orabug: 37472265] {CVE-2024-53680}
  - can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
  - can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
  - can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
  - can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
  - can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL (Dario Binacchi)
  - can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails (Dario Binacchi)
  - can: do not increase rx statistics when generating a CAN rx error message frame (Vincent Mailhol)
  - can: peak_usb: CANFD: store 64-bits hw timestamps (Stephane Grosjean)
  - watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() (Yassine Oudjana)
  - iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (Oleksandr Ocheretnyi)
  - drm/etnaviv: flush shader L1 cache after user commandstream (Lucas Stach)
  - drm/sti: avoid potential dereference of error pointers (Ma Ke) {CVE-2024-56776}
  - drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check (Ma Ke) {CVE-2024-56777}
  - drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check (Ma Ke) {CVE-2024-56778}
  - btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (Josef Bacik) [Orabug: 37116498] {CVE-2024-46841}
  - nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (Yangerkun) [Orabug: 37462182] {CVE-2024-56779}
  - nfsd: make sure exp active before svc_export_show (Yangerkun) [Orabug: 37433743] {CVE-2024-56558}
  - PCI: rockchip-ep: Fix address translation unit programming (Damien Le Moal)
  - dm thin: Add missing destroy_work_on_stack() (Yuan Can)
  - ovl: properly handle large files in ovl_security_fileattr (Oleksandr Tymoshenko)
  - PCI: keystone: Add link up check to ks_pcie_other_map_bus() (Kishon Vijay Abraham I)
  - i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (Frank Li) {CVE-2024-56562}
  - scsi: ufs: exynos: Fix hibern8 notify callbacks (Peter Griffin)
  - util_macros.h: fix/rework find_closest() macros (Alexandru Ardelean)
  - s390/entry: Mark IRQ entries to fix stack depot warnings (Vasily Gorbik) {CVE-2024-57838}
  - ad7780: fix division by zero in ad7780_write_raw() (Zicheng Qu) {CVE-2024-56567}
  - btrfs: ref-verify: fix use-after-free after invalid ref action (Filipe Manana) {CVE-2024-56581}
  - btrfs: add a sanity check for btrfs root in btrfs_search_slot() (Lizhi Xu) [Orabug: 37462151] {CVE-2024-56774}
  - btrfs: add might_sleep() annotations (Chenxiaosong)
  - quota: flush quota_release_work upon quota writeback (Ojaswin Mujoo) [Orabug: 37462190] {CVE-2024-56780}
  - xfs: remove unknown compat feature check in superblock write validation (Long Li)
  - xfs: fix log recovery when unknown rocompat bits are set (Darrick J Wong)
  - ASoC: fsl_micfil: fix the naming style for mask definition (Shengjiu Wang)
  - sh: intc: Fix use-after-free bug in register_intc_controller() (Dan Carpenter) {CVE-2024-53165}
  - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (Liu Jian) [Orabug: 37434313] {CVE-2024-56688}
  - sunrpc: remove unnecessary test in rpc_task_set_client() (Thiago Rafael Becker)
  - nfs: ignore SB_RDONLY when mounting nfs (Li Lingfeng)
  - modpost: remove incorrect code in do_eisa_entry() (Masahiro Yamada)
  - rtc: ab-eoz9: don't fail temperature reads on undervoltage notification (Maxime Chevallier)
  - 9p/xen: fix release of IRQ (Alex Zenla) {CVE-2024-56704}
  - 9p/xen: fix init sequence (Alex Zenla)
  - block: return unsigned int from bdev_io_min (Christoph Hellwig)
  - jffs2: fix use of uninitialized variable (Qingfang Deng)
  - ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit (Waqar Hameed) [Orabug: 37433413] {CVE-2024-53171}
  - ubi: fastmap: Fix duplicate slab cache names while attaching (Zhihao Cheng) [Orabug: 37433417] {CVE-2024-53172}
  - ubifs: Correct the total block count by deducting journal reservation (Zhihao Cheng)
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Yongliang Gao) [Orabug: 37434455] {CVE-2024-56739}
  - rtc: abx80x: Fix WDT bit position of the status register (Nobuhiro Iwamatsu)
  - rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - NFSv4.0: Fix a use-after-free problem in the asynchronous open() (Trond Myklebust) [Orabug: 37433425] {CVE-2024-53173}
  - um: Always dump trace for specified task in show_stack (Tiwei Bie)
  - um: Fix the return value of elf_core_copy_task_fpregs (Tiwei Bie)
  - um: Fix potential integer overflow during physmem setup (Tiwei Bie) {CVE-2024-53145}
  - rpmsg: glink: Propagate TX failures in intentless mode as well (Bjorn Andersson)
  - SUNRPC: make sure cache entry active before cache_show (Yangerkun) [Orabug: 37433432] {CVE-2024-53174}
  - NFSD: Prevent a potential integer overflow (Chuck Lever) [Orabug: 37427469] {CVE-2024-53146}
  - lib: string_helpers: silence snprintf() output truncation warning (Bartosz Golaszewski)
  - usb: dwc3: gadget: Fix looping of queued SG entries (Thinh Nguyen) [Orabug: 37434350] {CVE-2024-56698}
  - usb: dwc3: gadget: Fix checking for number of TRBs left (Thinh Nguyen)
  - ALSA: hda/realtek: Apply quirk for Medion E15433 (Takashi Iwai)
  - ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max (Dinesh Kumar)
  - ALSA: hda/realtek: Set PCBeep to default value for ALC274 (Kailang Yang)
  - ALSA: hda/realtek: Update ALC225 depop procedure (Kailang Yang)
  - ALSA: pcm: Add sanity NULL check for the default mmap fault handler (Takashi Iwai) [Orabug: 37433460] {CVE-2024-53180}
  - media: v4l2-core: v4l2-dv-timings: check cvt/gtf result (Hans Verkuil)
  - soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting() (Javier Carrasco)
  - media: wl128x: Fix atomicity violation in fmc_send_cmd() (Qiu-Ji Chen) {CVE-2024-56700}
  - HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (Jason Gerecke)
  - block: fix ordering between checking BLK_MQ_S_STOPPED request adding (Muchun Song)
  - arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (Will Deacon)
  - sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen)
  - um: vector: Do not use drvdata in release (Tiwei Bie) {CVE-2024-53181}
  - serial: 8250: omap: Move pm_runtime_get_sync (Bin Liu)
  - um: net: Do not use drvdata in release (Tiwei Bie) {CVE-2024-53183}
  - um: ubd: Do not use drvdata in release (Tiwei Bie) {CVE-2024-53184}
  - ubi: wl: Put source PEB into correct list if trying locking LEB failed (Zhihao Cheng)
  - platform/chrome: cros_ec_typec: fix missing fwnode reference decrement (Javier Carrasco)
  - cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power() (Jinjie Ruan)
  - mtd: spi-nor: core: replace dummy buswidth from addr to data (Cheng Ming Lin)
  - spi: Fix acpi deferred irq probe (Stanislaw Gruszka)
  - netfilter: ipset: add missing range check in bitmap_ip_uadt (Jeongjun Park) [Orabug: 37388866] {CVE-2024-53141}
  - gpio: exar: set value when external pull-up or pull-down is present (Sai Kumar Cholleti)
  - Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit" (Greg Kroah-Hartman)
  - serial: sh-sci: Clean sci_ports[0] after at earlycon exit (Claudiu Beznea)
  - Revert "usb: gadget: composite: fix OS descriptors w_value logic" (Michal Vrastil)
  - driver core: bus: Fix double free in driver API bus_register() (Zijun Hu) [Orabug: 37206509] {CVE-2024-50055}
  - usb: xhci: Fix TD invalidation under pending Set TR Dequeue (Michał Pecio)
  - Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() (Andrej Shadura)
  - exfat: fix uninit-value in __exfat_get_dentry_set (Namjae Jeon)
  - locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass() (Ahmed Ehab)
  - tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler (Nicolas Bouchinet)
  - apparmor: test: Fix memory leak for aa_unpack_strdup() (Jinjie Ruan)
  - comedi: Flush partial mappings in error case (Jann Horn) {CVE-2024-53148}
  - fsnotify: fix sending inotify event with unexpected filename (Amir Goldstein)
  - PCI: Fix use-after-free of slot->bus on hot remove (Lukas Wunner) [Orabug: 37433515] {CVE-2024-53194}
  - KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status (Raghavendra Rao Ananta)
  - powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector (Gautam Menghani)
  - crypto: x86/aegis128 - access 32-bit arguments as 32-bit (Eric Biggers)
  - perf/x86/intel/pt: Fix buffer full but size is 0 case (Adrian Hunter)
  - ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (Qiu-Ji Chen)
  - jfs: xattr: check invalid xattr size more strictly (Artem Sadovnikov)
  - ext4: fix FS_IOC_GETFSMAP handling (Theodore Ts'O)
  - ext4: supress data-race warnings in ext4_free_inodes_{count,set}() (Jeongjun Park)
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Benoît Sevens) [Orabug: 37433531] {CVE-2024-53197}
  - soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (Manikanta Mylavarapu)
  - ASoC: Intel: sst: Fix used of uninitialized ctx to log an error (Hans de Goede)
  - Revert "drivers: clk: zynqmp: update divider round rate logic" (Joel Guittet)
  - usb: ehci-spear: fix call balance of sehci clk handling routines (Vitalii Mordan)
  - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Takashi Iwai) [Orabug: 37427488] {CVE-2024-53150}
  - xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (Qiu-Ji Chen) [Orabug: 37433539] {CVE-2024-53198}
  - ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp (Namjae Jeon) {CVE-2024-50283}
  - parisc: fix a possible DMA corruption (Mikulas Patocka) {CVE-2024-44949}
  - apparmor: fix 'Do simple duplicate message elimination' (Chao Liu)
  - ALSA: hda/realtek: Update ALC256 depop procedure (Kailang Yang)
  - counter: stm32-timer-cnt: Add check for clk_enable() (Jiasheng Jiang)
  - misc: apds990x: Fix missing pm_runtime_disable() (Jinjie Ruan)
  - USB: chaoskey: Fix possible deadlock chaoskey_list_lock (Edward Adam Davis)
  - USB: chaoskey: fail open after removal (Oliver Neukum)
  - usb: yurex: make waiting on yurex_write interruptible (Oliver Neukum)
  - usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (Jeongjun Park)
  - iio: light: al3010: Fix an error handling path in al3010_probe() (Christophe Jaillet)
  - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (Saravanan Vajravel)
  - net: hsr: fix hsr_init_sk() vs network/transport headers. (Eric Dumazet)
  - spi: atmel-quadspi: Fix register name in verbose logging function (Csókás Bence)
  - octeontx2-af: RPM: Fix mismatch in lmac type (Hariprasad Kelam)
  - net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken (Maxime Chevallier)
  - marvell: pxa168_eth: fix call balance of pep->clk handling routines (Vitalii Mordan)
  - net: mdio-ipq4019: add missing error check (Rosen Penev)
  - net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration (Oleksij Rempel)
  - tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets (Pavan Chebbi)
  - net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device (Oleksij Rempel)
  - power: supply: bq27xxx: Fix registers of bq27426 (Barnabás Czémán)
  - power: supply: core: Remove might_sleep() from power_supply_put() (Bart Van Assche)
  - fs_parser: update mount_api doc to match function signature (Randy Dunlap)
  - vfio/pci: Properly hide first-in-list PCIe extended capability (Avihai Horon) [Orabug: 37433577] {CVE-2024-53214}
  - selftests/mount_setattr: Fix failures on 64K PAGE_SIZE kernels (Michael Ellerman)
  - vdpa/mlx5: Fix suboptimal range on iotlb iteration (Si-Wei Liu)
  - hwmon: (tps23861) Fix reporting of negative temperatures (Murad Masimov)
  - NFSD: Fix nfsd4_shutdown_copy() (Chuck Lever)
  - svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (Ye Bin) [Orabug: 37433585] {CVE-2024-53215}
  - sunrpc: simplify two-level sysctl registration for svcrdma_parm_table (Luis Chamberlain)
  - NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (Chuck Lever)
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (Chuck Lever) [Orabug: 37433593] {CVE-2024-53217}
  - remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region (Sibi Sankar)
  - rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length (Jonathan Marek)
  - rpmsg: glink: Fix GLINK command prefix (Bjorn Andersson)
  - rpmsg: glink: Send READ_NOTIFY command in FIFO full case (Arun Kumar Neelakantam)
  - rpmsg: glink: Add TX_DATA_CONT command while sending (Arun Kumar Neelakantam)
  - perf trace: Avoid garbage when not printing a syscall's arguments (Benjamin Peterson)
  - perf trace: Do not lose last events in a race (Benjamin Peterson)
  - svcrdma: Address an integer overflow (Chuck Lever) [Orabug: 37427495] {CVE-2024-53151}
  - m68k: coldfire/device.c: only build FEC when HW macros are defined (Antonio Quartulli)
  - m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x (Jean-Michel Hautbois)
  - perf trace: avoid garbage when not printing a trace event's arguments (Benjamin Peterson)
  - f2fs: check curseg->inited before write_sum_page in change_curseg (Yongpeng Yang)
  - f2fs: remove the unused flush argument to change_curseg (Christoph Hellwig)
  - f2fs: open code allocate_segment_by_default (Christoph Hellwig)
  - f2fs: remove struct segment_allocation default_salloc_ops (Christoph Hellwig)
  - f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block (Longping Wei)
  - PCI: cpqphp: Fix PCIBIOS_* return value confusion (Ilpo Järvinen)
  - PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (Weiyufeng)
  - perf probe: Correct demangled symbols in C++ program (Leo Yan)
  - perf probe: Fix libdw memory leak (Ian Rogers)
  - PCI: Fix reset_method_store() memory leak (Todd Kjos) [Orabug: 37434474] {CVE-2024-56745}
  - perf cs-etm: Don't flush when packet_queue fills up (James Clark)
  - mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb() (Dan Carpenter)
  - pinctrl: k210: Undef K210_PC_DEFAULT (Zhang Jiao)
  - clk: clk-axi-clkgen: make sure to enable the AXI bus clock (Nuno Sa)
  - dt-bindings: clock: axi-clkgen: include AXI clk (Nuno Sa)
  - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() (Zhen Lei) {CVE-2024-56746}
  - fbdev/sh7760fb: Alloc DMA memory from hardware device (Thomas Zimmermann)
  - powerpc/kexec: Fix return of uninitialized variable (Zhang Zekun)
  - powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static (Michal Suchanek)
  - ocfs2: fix uninitialized value in ocfs2_file_read_iter() (Dmitry Antipov) [Orabug: 37427502] {CVE-2024-53155}
  - RDMA/hns: Fix out-of-order issue of requester when setting FENCE (Junxian Huang)
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (Zhen Lei) [Orabug: 37434483] {CVE-2024-56747}
  - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (Zhen Lei) [Orabug: 37434488] {CVE-2024-56748}
  - scsi: fusion: Remove unused variable 'rc' (Zeng Heng)
  - scsi: bfa: Fix use-after-free in bfad_im_module_exit() (Ye Bin) [Orabug: 37433629] {CVE-2024-53227}
  - mfd: rt5033: Fix missing regmap_del_irq_chip() (Zhang Changzhong)
  - clk: imx: clk-scu: fix clk enable state save and restore (Aisheng Dong)
  - clk: imx: lpcg-scu: SW workaround for errata (e10858) (Peng Fan)
  - powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore (Michael Ellerman) {CVE-2024-56701}
  - powerpc/mm/fault: Fix kfence page fault reporting (Ritesh Harjani) {CVE-2024-56678}
  - mtd: rawnand: atmel: Fix possible memory leak (Miquel Raynal)
  - cpufreq: loongson2: Unregister platform_driver on failure (Yuan Can)
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices (Andy Shevchenko) {CVE-2024-56723}
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device (Andy Shevchenko) {CVE-2024-56724}
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device (Andy Shevchenko) {CVE-2024-56691}
  - mfd: intel_soc_pmic_bxtwc: Use dev_err_probe() (Andy Shevchenko)
  - mfd: da9052-spi: Change read-mask to write-mask (Marcus Folkesson)
  - mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race (Jinjie Ruan)
  - pinctrl: zynqmp: drop excess struct member description (Bartosz Golaszewski)
  - trace/trace_event_perf: remove duplicate samples on the first tracepoint event (Levi Yun)
  - bpf: fix recursive lock when verdict program return SK_PASS (Jiayuan Chen) [Orabug: 37434615] {CVE-2024-56694}
  - wireguard: selftests: load nf_conntrack if not present (Hangbin Liu)
  - netpoll: Use rcu_access_pointer() in netpoll_poll_lock (Breno Leitao)
  - Bluetooth: fix use-after-free in device_for_each_child() (Dmitry Antipov) [Orabug: 37433653] {CVE-2024-53237}
  - driver core: Introduce device_find_any_child() helper (Andy Shevchenko)
  - ALSA: 6fire: Release resources at card release (Takashi Iwai) [Orabug: 37433659] {CVE-2024-53239}
  - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [Orabug: 37433665] {CVE-2024-56531}
  - ALSA: us122l: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [Orabug: 37433671] {CVE-2024-56532}
  - ALSA: usx2y: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [Orabug: 37433679] {CVE-2024-56533}
  - net: rfkill: gpio: Add check for clk_enable() (Mingwei Zheng)
  - drm/amdkfd: Fix wrong usage of INIT_WORK() (Yuan Can)
  - selftests: net: really check for bg process completion (Paolo Abeni)
  - bpf, sockmap: Fix sk_msg_reset_curr (Zijian Zhang)
  - bpf, sockmap: Several fixes to bpf_msg_pop_data (Zijian Zhang) [Orabug: 37434418] {CVE-2024-56720}
  - bpf, sockmap: Several fixes to bpf_msg_push_data (Zijian Zhang)
  - selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap (Zijian Zhang)
  - selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap (Zijian Zhang)
  - selftests, bpf: Add one test for sockmap with strparser (Liu Jian)
  - selftests/bpf: Fix SENDPAGE data logic in test_sockmap (Zijian Zhang)
  - selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap (Zijian Zhang)
  - netlink: typographical error in nlmsg_type constants definition (Maurice Lambert)
  - netfilter: nf_tables: must hold rcu read lock while iterating object type list (Florian Westphal)
  - netfilter: nf_tables: skip transaction if update object is not implemented (Pablo Neira Ayuso)
  - drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk() (Zichen Xie)
  - wifi: wfx: Fix error handling in wfx_core_init() (Yuan Can)
  - drm/etnaviv: hold GPU lock across perfmon sampling (Lucas Stach)
  - drm/etnaviv: fix power register offset on GC300 (Doug Brown)
  - drm/etnaviv: Request pages from DMA32 zone on addressing_limited (Xiaolei Wang)
  - drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - drm/panfrost: Remove unused id_mask from struct panfrost_model (Steven Price)
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (Dipendra Khadka) {CVE-2024-56726}
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (Dipendra Khadka) {CVE-2024-56728}
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (Dipendra Khadka) {CVE-2024-56679}
  - drm: fsl-dcu: enable PIXCLK on LS1021A (Matthias Schiffer)
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (Alper Nebi Yasak) [Orabug: 37433694] {CVE-2024-56539}
  - selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap (Zijian Zhang)
  - selftests/bpf: Fix msg_verify_data in test_sockmap (Zijian Zhang)
  - drm/bridge: tc358767: Fix link properties discovery (Tomi Valkeinen)
  - netdevsim: copy addresses for both in and out paths (Hangbin Liu)
  - libbpf: fix sym_is_subprog() logic for weak global subprogs (Andrii Nakryiko)
  - bpf: Fix the xdp_adjust_tail sample prog issue (Yuan Chen)
  - libbpf: Fix output .symtab byte-order during linking (Tony Ambardar)
  - drm/bridge: anx7625: Drop EDID cache on bridge power off (Pin-Yen Lin)
  - ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode (Macpaul Lin)
  - ASoC: fsl_micfil: fix regmap_write_bits usage (Shengjiu Wang)
  - ASoC: fsl_micfil: use GENMASK to define register bit fields (Sascha Hauer)
  - ASoC: fsl_micfil: do not define SHIFT/MASK for single bits (Sascha Hauer)
  - ASoC: fsl_micfil: Drop unnecessary register read (Sascha Hauer)
  - dt-bindings: vendor-prefixes: Add NeoFidelity, Inc (Igor Prusov)
  - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 (Baochen Qiang)
  - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 (Baochen Qiang)
  - drm/v3d: Address race-condition in MMU flush (Maíra Canal)
  - drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - drm/omap: Fix locking in omap_gem_new_dmabuf() (Tomi Valkeinen)
  - drm/omap: Fix possible NULL dereference (Tomi Valkeinen)
  - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (Jeongjun Park) [Orabug: 37427508] {CVE-2024-53156}
  - drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (Andy Shevchenko)
  - platform/x86: panasonic-laptop: Return errno correctly in show callback (Yao Zi)
  - platform/x86: panasonic-laptop: Replace snprintf in show functions with sysfs_emit (Qing Wang)
  - media: atomisp: Add check for rgby_data memory allocation failure (Li Huafei) {CVE-2024-56705}
  - media: atomisp: remove #ifdef HAS_NO_HMEM (Mauro Carvalho Chehab)
  - media: venus: provide ctx queue lock for ioctl synchronization (Sergey Senozhatsky)
  - venus: venc: add handling for VIDIOC_ENCODER_CMD (Dikshita Agarwal)
  - media: venus : Addition of support for VIDIOC_TRY_ENCODER_CMD (Dikshita Agarwal)
  - media: venus : Addition of EOS Event support for Encoder (Viswanath Boma)
  - media: venus: vdec: decoded picture buffer handling during reconfig sequence (Mansur Alisha Shaik)
  - media: venus: venc: Use pmruntime autosuspend (Stanimir Varbanov)
  - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (Luo Qiu) [Orabug: 37427514] {CVE-2024-53157}
  - selftests/resctrl: Protect against array overrun during iMC config parsing (Reinette Chatre)
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add supplies for fixed regulators (Chen-Yu Tsai)
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Fix DP bridge supply names (Chen-Yu Tsai)
  - arm64: dts: mt8183: jacuzzi: Move panel under aux-bus (Hsin-Yi Wang)
  - arm64: dts: mt8183: jacuzzi: remove unused ddc-i2c-bus (Hsin-Yi Wang)
  - regmap: irq: Set lockdep class for hierarchical IRQ domains (Andy Shevchenko)
  - spi: zynqmp-gqspi: Undo runtime PM changes at driver exit time (Jinjie Ruan)
  - spi: tegra210-quad: Avoid shift-out-of-bounds (Breno Leitao)
  - pmdomain: ti-sci: Add missing of_node_put() for args.np (Zhang Zekun)
  - ARM: dts: cubieboard4: Fix DCDC5 regulator constraints (Andre Przywara)
  - pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle (Clark Wang)
  - arm64: dts: mt8183: Damu: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)
  - arm64: dts: mt8183: burnet: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)
  - arm64: dts: mt8183: fennel: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)
  - cgroup/bpf: only cgroup v2 can be attached by bpf programs (Chen Ridong)
  - Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline" (Chen Ridong)
  - arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source trackpad (Chen-Yu Tsai)
  - arm64: dts: mt8183: kukui: Fix the address of eeprom at i2c4 (Hsin-Te Yuan)
  - arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4 (Hsin-Te Yuan)
  - tpm: fix signed/unsigned bug when checking event logs (Gregory Price)
  - mmc: mmc_spi: drop buggy snprintf() (Bartosz Golaszewski)
  - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (Dan Carpenter) {CVE-2024-53158}
  - soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - spi: spi-fsl-lpspi: downgrade log level for pio mode (Alexander Stein)
  - clocksource/drivers:sp804: Make user selectable (Mark Brown)
  - kcsan, seqlock: Fix incorrect assumption in read_seqbegin() (Marco Elver)
  - kcsan, seqlock: Support seqcount_latch_t (Marco Elver)
  - seqlock/latch: Provide raw_read_seqcount_latch_retry() (Peter Zijlstra)
  - timekeeping: Consolidate fast timekeeper (Thomas Gleixner)
  - time: Fix references to _msecs_to_jiffies() handling of values (Miguel Ojeda)
  - crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (Christophe Jaillet)
  - crypto: bcm - add error check in the ahash_hmac_init function (Chen Ridong) [Orabug: 37434297] {CVE-2024-56681}
  - crypto: caam - add error check to caam_rsa_set_priv_key_form (Chen Ridong)
  - EDAC/igen6: Avoid segmentation fault on module unload (Orange Kao) [Orabug: 37434389] {CVE-2024-56708}
  - crypto: cavium - Fix the if condition to exit loop after timeout (Everest K C )
  - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (Yi Yang) [Orabug: 37434322] {CVE-2024-56690}
  - EDAC/fsl_ddr: Fix bad bit shift operations (Priyanka Singh)
  - thermal: core: Initialize thermal zones before registering them (Rafael J Wysocki)
  - crypto: qat - remove faulty arbiter config reset (Ahsan Atta)
  - EDAC/bluefield: Fix potential integer overflow (David Thompson) {CVE-2024-53161}
  - firmware: google: Unregister driver_info on failure (Yuan Can)
  - crypto: caam - Fix the pointer passed to caam_qi_shutdown() (Christophe Jaillet) {CVE-2024-56754}
  - hfsplus: don't query the device logical block size multiple times (Thadeu Lima De Souza Cascardo) {CVE-2024-56548}
  - s390/syscalls: Avoid creation of arch/arch/ directory (Masahiro Yamada)
  - acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() (Aleksandr Mishin)
  - arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG (Masahiro Yamada)
  - m68k: mvme147: Reinstate early console (Daniel Palmer)
  - m68k: mvme16x: Add and use "mvme16x.h" (Geert Uytterhoeven)
  - m68k: mvme147: Fix SCSI controller IRQ numbers (Daniel Palmer)
  - nvme-pci: fix freeing of the HMB descriptor table (Christoph Hellwig) [Orabug: 37434509] {CVE-2024-56756}
  - initramfs: avoid filename buffer overrun (David Disseldorp) [Orabug: 37388873] {CVE-2024-53142}
  - mips: asm: fix warning when disabling MIPS_FP_SUPPORT (Jonas Gorski)
  - brd: defer automatic disk creation until module initialization succeeds (Yangerkun) [Orabug: 37434341] {CVE-2024-56693}
  - brd: remove brd_devices_mutex mutex (Tetsuo Handa)
  - s390/cio: Do not unregister the subchannel based on DNV (Vineeth Vijayan)
  - kselftest/arm64: mte: fix printf type warnings about longs (Andre Przywara)
  - x86/barrier: Do not serialize MSR accesses on AMD (Borislav Petkov)
  - nvme: fix metadata handling in nvme-passthrough (Puranjay Mohan)
  - cifs: Fix buffer overflow when parsing NFS reparse points (Pali Rohár)
  - rcu-tasks: Idle tasks on offline CPUs are in quiescent states (Paul E Mckenney)
  - ipmr: Fix access to mfc_cache_list without lock held (Breno Leitao)
  - ARM: 9420/1: smp: Fix SMP for xip kernels (Harith George)
  - ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry (Eryk Zagorski)
  - proc/softirqs: replace seq_printf with seq_put_decimal_ull_width (David Wang)
  - ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() (Luo Yifan)
  - ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() (Luo Yifan)
  - can: j1939: fix error in J1939 documentation. (Alexander Hölzl)
  - platform/x86: dell-wmi-base: Handle META key Lock/Unlock events (Kurt Borja)
  - platform/x86: dell-smbios-base: Extends support to Alienware products (Kurt Borja)
  - regulator: rk808: Add apply_bit for BUCK3 on RK809 (Mikhail Rudenko)
  - soc: qcom: Add check devm_kasprintf() returned value (Charles Han)
  - net: usb: qmi_wwan: add Quectel RG650V (Benoît Monin)
  - x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB (Arnd Bergmann)
  - ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 (Piyush Raj Chouhan)
  - selftests/watchdog-test: Fix system accidentally reset after watchdog-test (Li Zhijian)
  - usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver (Benjamin Große)
  - mac80211: fix user-power when emulating chanctx (Ben Greear)
  - wifi: iwlwifi: mvm: Use the sync timepoint API in suspend (Daniel Gabay)
  - ASoC: Intel: sst: Support LPE0F28 ACPI HID (Hans de Goede)
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet (Hans de Goede)
  - ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec (Hans de Goede)
  - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Trond Myklebust)
  - mm: resolve faulty mmap_region() error path behaviour (Lorenzo Stoakes) [Orabug: 37331872] {CVE-2024-53096}
  - mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (Lorenzo Stoakes)
  - mm: unconditionally close VMAs on error (Lorenzo Stoakes)
  - mm: avoid unsafe VMA hook invocation when error arises on mmap hook (Lorenzo Stoakes)
  - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Paolo Abeni) [Orabug: 37388789] {CVE-2024-53122}
  - NFSD: Never decrement pending_async_copies on error (Chuck Lever) [Orabug: 37522552] {CVE-2024-53073}
  - NFSD: Initialize struct nfsd4_copy earlier (Chuck Lever) [Orabug: 37522573] {CVE-2024-50241}
  - NFSD: Limit the number of concurrent async COPY operations (Chuck Lever) [Orabug: 37206186,37516381] {CVE-2024-49974}
  - NFSD: Async COPY result needs to return a write verifier (Chuck Lever)
  - NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point (Dai Ngo)
  - media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set (Mauro Carvalho Chehab)
  - mmc: sunxi-mmc: Fix A100 compatible description (Andre Przywara)
  - mmc: sunxi-mmc: Add D1 MMC variant (Samuel Holland)
  - drm/bridge: tc358768: Fix DSI command tx (Francesco Dolcini)
  - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (Ryusuke Konishi) {CVE-2024-53130}
  - ocfs2: fix UBSAN warning in ocfs2_verify_volume() (Dmitry Antipov)
  - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (Ryusuke Konishi) {CVE-2024-53131}
  - KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (Sean Christopherson) [Orabug: 37388845] {CVE-2024-53135}
  - KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled (Sean Christopherson)
  - vdpa/mlx5: Fix PA offset with unaligned starting iotlb map (Si-Wei Liu)
  - ocfs2: uncache inode which has failed entering the group (Dmitry Antipov) [Orabug: 37388752] {CVE-2024-53112}
  - mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (Tu Jinjiang) [Orabug: 37388759] {CVE-2024-53113}
  - x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y (Baoquan He)
  - ARM: 9419/1: mm: Fix kernel memory mapping for xip kernels (Harith George)
  - samples: pktgen: correct dev to DEV (Wei Fang)
  - net/mlx5e: CT: Fix null-ptr-deref in add rule err flow (Moshe Shemesh) [Orabug: 37388780] {CVE-2024-53120}
  - net/mlx5e: kTLS, Fix incorrect page refcounting (Dragos Tatulea) [Orabug: 37388853] {CVE-2024-53138}
  - net/mlx5: fs, lock FTE when checking if active (Mark Bloch) [Orabug: 37388784] {CVE-2024-53121}
  - drm/rockchip: vop: Fix a dereferenced before check warning (Andy Yan) [Orabug: 37388814] {CVE-2024-53129}
  - netlink: terminate outstanding dump on socket close (Jakub Kicinski) [Orabug: 37388860] {CVE-2024-53140}
  - clk: qcom: gcc-qcs404: fix initial rate of GPLL3 (Gabor Juhos)
  - leds: lp55xx: Remove redundant test for invalid channel number (Michal Vokáč)
  - iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (Mostafa Saleh)
  - vmstat: call fold_vm_zone_numa_events() before show per zone NUMA event (Mengen Sun)
  - ftrace: Fix regression with module command in stack_trace_filter (Guoweikang) [Orabug: 37433783] {CVE-2024-56569}
  - ovl: Filter invalid inodes with missing lookup function (Vasiliy Kovalev) [Orabug: 37433788] {CVE-2024-56570}
  - media: uvcvideo: Require entities to have a non-zero unique ID (Thadeu Lima De Souza Cascardo)
  - media: uvcvideo: Stop stream during unregister (Ricardo Ribalda)
  - media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() (Gaosheng Cui) {CVE-2024-56572}
  - media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() (Jinjie Ruan)
  - media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled (Jinjie Ruan)
  - media: ts2020: fix null-ptr-deref in ts2020_probe() (Li Zetao) [Orabug: 37433804] {CVE-2024-56574}
  - media: imx-jpeg: Ensure power suppliers be suspended before detach them (Ming Qian) {CVE-2024-56575}
  - media: i2c: tc358743: Fix crash in the probe error path when using polling (Alexander Shiyan) [Orabug: 37433817] {CVE-2024-56576}
  - media: imx-jpeg: Set video drvdata before register video device (Ming Qian) {CVE-2024-56578}
  - arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer (Dragan Simic)
  - LTS version: v5.15.173 (Vijayendra Suman)
  - 9p: fix slab cache name creation for real (Linus Torvalds)
  - udf: Avoid directory type conversion failure due to ENOMEM (Jan Kara)
  - udf: Allocate name buffer in directory iterator on heap (Jan Kara)
  - mm/memory: add non-anonymous page check in the copy_present_page() (Yuanzheng Song)
  - io_uring: fix possible deadlock in io_register_iowq_max_workers() (Hagar Hemdan) [Orabug: 37565787] {CVE-2024-41080,CVE-2024-53052}
  - md/raid10: improve code of mrdev in raid10_sync_request (Li Nan)
  - net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
  - HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (Hans de Goede)
  - HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad (Kenneth Albanowski)
  - fs: Fix uninitialized value issue in from_kuid and from_kgid (Alessandro Zanni) [Orabug: 37331927] {CVE-2024-53101}
  - vDPA/ifcvf: Fix pci_read_config_byte() return code handling (Yuan Can)
  - powerpc/powernv: Free name on error in opal_event_init() (Michael Ellerman)
  - drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS (Ian Forbes)
  - sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML (Julian Vetter)
  - crypto: marvell/cesa - Disable hash algorithms (Herbert Xu)
  - bpf: use kvzmalloc to allocate BPF verifier environment (Rik Van Riel)
  - HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (Yuli Wang)
  - HID: multitouch: Add support for B2402FVA track point (Stefan Blum)
  - block: Fix elevator_get_default() checking for NULL q->tag_set (Surajsonawane2415)
  - irqchip/ocelot: Fix trigger register address (Sergey Matsievskiy)
  - 9p: Avoid creating multiple slab caches with the same name (Pedro Falcato)
  - LTS version: v5.15.172 (Vijayendra Suman)
  - ALSA: usb-audio: Add endianness annotations (Jan Schär)
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Hyunwoo Kim) [Orabug: 37298679] {CVE-2024-50264}
  - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (Hyunwoo Kim) [Orabug: 37344479] {CVE-2024-53103}
  - ALSA: usb-audio: Add quirks for Dell WD19 dock (Jan Schär)
  - ALSA: usb-audio: Support jack detection on Dell dock (Jan Schär)
  - ucounts: fix counter leak in inc_rlimit_get_ucounts() (Andrei Vagin)
  - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (Andrew Kanner) [Orabug: 37298684] {CVE-2024-50265}
  - irqchip/gic-v3: Force propagation of the active state with a read-back (Marc Zyngier)
  - USB: serial: option: add Quectel RG650V (Benoît Monin)
  - USB: serial: option: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
  - USB: serial: qcserial: add support for Sierra Wireless EM86xx (Jack Wu)
  - USB: serial: io_edgeport: fix use after free in debug printk (Dan Carpenter) [Orabug: 37298693] {CVE-2024-50267}
  - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() (Dan Carpenter) {CVE-2024-50268}
  - usb: musb: sunxi: Fix accessing an released usb phy (Zijun Hu) {CVE-2024-50269}
  - fs/proc: fix compile warning about variable 'vmcore_mmap_ops' (Qi Xi)
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Benoît Sevens) [Orabug: 37344484] {CVE-2024-53104}
  - net: do not delay dst_entries_add() in dst_release() (Eric Dumazet) [Orabug: 37206439] {CVE-2024-50036}
  - net: bridge: xmit: make sure we have at least eth header len bytes (Nikolay Aleksandrov) [Orabug: 36753371] {CVE-2024-38538}
  - btrfs: reinitialize delayed ref list after deleting it from the list (Filipe Manana) [Orabug: 37298714] {CVE-2024-50273}
  - nfs: Fix KMSAN warning in decode_getfattr_attrs() (Roberto Sassu) [Orabug: 37304778] {CVE-2024-53066}
  - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (Jens Axboe) [Orabug: 37304720,37565787] {CVE-2024-41080,CVE-2024-53052}
  - io_uring: use kiocb_{start,end}_write() helpers (Amir Goldstein) [Orabug: 37565787] {CVE-2024-41080,CVE-2024-53052}
  - fs: create kiocb_{start,end}_write() helpers (Amir Goldstein) [Orabug: 37565787] {CVE-2024-41080,CVE-2024-53052}
  - io_uring: rename kiocb_end_write() local helper (Amir Goldstein) [Orabug: 37565787] {CVE-2024-41080,CVE-2024-53052}
  - posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone (Benjamin Segall)
  - ALSA: usb-audio: Add quirk for HP 320 FHD Webcam (Takashi Iwai)
  - dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow (Zichen Xie)
  - dm cache: fix potential out-of-bounds access on the first resume (Ming-Hung Tsai) [Orabug: 37298731] {CVE-2024-50278}
  - dm cache: optimize dirty bit checking with find_next_bit when resizing (Ming-Hung Tsai)
  - dm cache: fix out-of-bounds access to the dirty bitset when resizing (Ming-Hung Tsai) [Orabug: 37298736] {CVE-2024-50279}
  - dm cache: correct the number of origin blocks to match the target length (Ming-Hung Tsai)
  - thermal/drivers/qcom/lmh: Remove false lockdep backtrace (Dmitry Baryshkov)
  - drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (Alex Deucher) [Orabug: 37298750] {CVE-2024-50282}
  - drm/amdgpu: Adjust debugfs eviction and IB access permissions (Alex Deucher)
  - pwm: imx-tpm: Use correct MODULO value for EPWM mode (Erik Schumacher)
  - media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl() (Mauro Carvalho Chehab)
  - media: v4l2-tpg: prevent the risk of a division by zero (Mauro Carvalho Chehab) {CVE-2024-50287}
  - media: pulse8-cec: fix data timestamp at pulse8_setup() (Mauro Carvalho Chehab)
  - media: cx24116: prevent overflows on SNR calculus (Mauro Carvalho Chehab) [Orabug: 37298796] {CVE-2024-50290}
  - media: s5p-jpeg: prevent buffer overflows (Mauro Carvalho Chehab) [Orabug: 37304761] {CVE-2024-53061}
  - ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove (Amelie Delaunay) {CVE-2024-50292}
  - ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() (Murad Masimov)
  - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer (Johannes Thumshirn)
  - media: adv7604: prevent underflow condition when reporting colorspace (Mauro Carvalho Chehab)
  - media: dvb_frontend: don't play tricks with underflow values (Mauro Carvalho Chehab)
  - media: dvbdev: prevent the risk of out of memory access (Mauro Carvalho Chehab) [Orabug: 37304768] {CVE-2024-53063}
  - media: stb0899_algo: initialize cfr before using it (Mauro Carvalho Chehab)
  - net: arc: fix the device for dma_map_single/dma_unmap_single (Johan Jonker) {CVE-2024-50295}
  - net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case (Nícolas F R A Prado)
  - net: phy: ti: add PHY_RST_AFTER_CLK_EN flag (Diogo Silva)
  - net: hns3: fix kernel crash when uninstalling driver (Peiyang Wang) {CVE-2024-50296}
  - i40e: fix race condition by adding filter's intermediate sync state (Aleksandr Loktionov) [Orabug: 37304818] {CVE-2024-53088}
  - can: c_can: fix {rx,tx}_errors statistics (Dario Binacchi)
  - sctp: properly validate chunk size in sctp_sf_ootb() (Xin Long) [Orabug: 37298819] {CVE-2024-50299}
  - net: enetc: set MAC address to the VF net_device (Wei Fang)
  - security/keys: fix slab-out-of-bounds in key_task_permission (Chen Ridong) [Orabug: 37298826,37516370] {CVE-2024-50301}
  - nfs: avoid i_lock contention in nfs_clear_invalid_mapping (Mike Snitzer)
  - NFSv3: handle out-of-order write replies. (Neil Brown)
  - NFS: Add a tracepoint to show the results of nfs_set_cache_invalid() (Benjamin Coddington)
  - NFSv3: only use NFS timeout for MOUNT when protocols are compatible (Neil Brown)
  - HID: core: zero-initialize the report buffer (Jiri Kosina) [Orabug: 37298832] {CVE-2024-50302}
  - ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin (Heiko Stuebner)
  - ARM: dts: rockchip: Fix the spi controller on rk3036 (Heiko Stuebner)
  - ARM: dts: rockchip: drop grf reference from rk3036 hdmi (Heiko Stuebner)
  - ARM: dts: rockchip: fix rk3036 acodec node (Heiko Stuebner)
  - arm64: dts: imx8mp: correct sdhc ipg clk (Peng Fan)
  - arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc (Heiko Stuebner)
  - arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion (Heiko Stuebner)
  - arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards (Heiko Stuebner)
  - arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 (Diederik De Haas)
  - arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator (Geert Uytterhoeven)


author: Brian Maly <brian.maly@oracle.com> [5.15.0-305.176.4.el9uek]
changelog:
  - x86/asm: Make serialize() always_inline (Juergen Gross)
  - hwmon: (tmp513) Fix division of negative numbers (David Lechner)
  - Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data" (Pratyush Yadav)
  - Revert "regmap: detach regmap from dev on regmap_exit" (Greg Kroah-Hartman)
  - Revert "drm/amdgpu: rework resume handling for display (v2)" (Greg Kroah-Hartman)
  - Revert "PCI: Use preserve_config in place of pci_flags" (Terry Tritton)
  - virtio-net: synchronize probe with ndo_set_features (Jason Wang) [Orabug: 36637822]
  - virtio-net: synchronize operstate with admin state on up/down (Jason Wang) [Orabug: 36637822]
  - virtio: allow driver to disable the configure change notification (Jason Wang) [Orabug: 36637822]
  - virtio: rename virtio_config_enabled to virtio_config_core_enabled (Jason Wang) [Orabug: 36637822]
  - mlxsw: pci: Fix driver initialization with Spectrum-4 (Ido Schimmel) [Orabug: 36811057]
  - mlxsw: pci: Fix driver initialization with old firmware (Ido Schimmel) [Orabug: 36811057]
  - mmc: sdhci-of-dwcmshc: th1520: Increase tuning loop count to 128 (Maksim Kiselev) [Orabug: 36811057]
  - net/mlx5e: Switch to using _bh variant of of spinlock API in port timestamping NAPI poll context (Rahul Rameshbabu) [Orabug: 36811057]
  - net/mlx5e: Fix MACsec state loss upon state update in offload path (Emeel Hakim) [Orabug: 36811057]
  - net/mlx5e: Change the warning when ignore_flow_level is not supported (Jianbo Liu) [Orabug: 36811057]
  - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Gavin Li) [Orabug: 36811057,36940500] {CVE-2023-52658}
  - IB/mlx5: Don't expose debugfs entries for RRoCE general parameters if not supported (Mark Zhang) [Orabug: 36811057]
  - net/mlx5e: Ignore IPsec replay window values on sender side (Leon Romanovsky) [Orabug: 36811057]
  - net/mlx5e: Allow software parsing when IPsec crypto is enabled (Leon Romanovsky) [Orabug: 36811057]
  - net/mlx5: Use mlx5 device constant for selecting CQ period mode for ASO (Rahul Rameshbabu) [Orabug: 36811057]
  - net/mlx5: Bridge, fix multicast packets sent to uplink (Moshe Shemesh) [Orabug: 36811057]
  - net/mlx5: Fix a WARN upon a callback command failure (Yishai Hadas) [Orabug: 36811057]
  - net/mlx5e: Fix peer flow lists handling (Vlad Buslov) [Orabug: 36811057]
  - net/mlx5: Fix query of sd_group field (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5e: Use the correct lag ports number when creating TISes (Saeed Mahameed) [Orabug: 36811057]
  - selftests: mlxsw: qos_pfc: Remove wrong description (Amit Cohen) [Orabug: 36811057]
  - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (Ido Schimmel) [Orabug: 36811057] {CVE-2024-26595}
  - gpio: mlxbf3: add an error code check in mlxbf3_gpio_probe (Su Hui) [Orabug: 36811057]
  - vdpa/mlx5: Add mkey leak detection (Dragos Tatulea) [Orabug: 36811057]
  - vdpa/mlx5: Introduce reference counting to mrs (Dragos Tatulea) [Orabug: 36811057]
  - vdpa/mlx5: Use vq suspend/resume during .set_map (Dragos Tatulea) [Orabug: 36811057]
  - vdpa/mlx5: Mark vq state for modification in hw vq (Dragos Tatulea) [Orabug: 36811057]
  - vdpa/mlx5: Mark vq addrs for modification in hw vq (Dragos Tatulea) [Orabug: 36811057]
  - vdpa/mlx5: Introduce per vq and device resume (Dragos Tatulea) [Orabug: 36811057]
  - vdpa/mlx5: Allow modifying multiple vq fields in one modify command (Dragos Tatulea) [Orabug: 36811057]
  - vdpa/mlx5: Expose resumable vq capability (Dragos Tatulea) [Orabug: 36811057]
  - Revert "mlx5 updates 2023-12-20" (Jakub Kicinski) [Orabug: 36811057]
  - net/mlx5: DPLL, Implement fractional frequency offset get pin op (Jiri Pirko) [Orabug: 36811057]
  - net/mlx5: DPLL, Use struct to get values from mlx5_dpll_synce_status_get() (Jiri Pirko) [Orabug: 36811057]
  - net: macsec: move sci_to_cpu to macsec header (Radu Pirea) [Orabug: 36811057]
  - net/mlx5: Implement management PF Ethernet profile (Armen Ratner) [Orabug: 36811057]
  - net/mlx5: Enable SD feature (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5e: Block TLS device offload on combined SD netdev (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5e: Support per-mdev queue counter (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5e: Support cross-vhca RSS (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5e: Let channels be SD-aware (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5e: Create EN core HW resources for all secondary devices (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5e: Create single netdev per SD group (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5: SD, Add informative prints in kernel log (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5: SD, Implement steering for primary and secondaries (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5: SD, Implement devcom communication and primary election (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5: SD, Implement basic query and instantiation (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5: SD, Introduce SD lib (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5: Fix query of sd_group field (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5e: Use the correct lag ports number when creating TISes (Saeed Mahameed) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Set NVE flood profile as part of FID configuration (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add an "any" packet type (Petr Machata) [Orabug: 36811057]
  - mlxsw: reg: Add nve_flood_prf_id field to SFMR (Petr Machata) [Orabug: 36811057]
  - net/mlx5: DR, Use swap() instead of open coding it (Jiapeng Chong) [Orabug: 36811057]
  - net/mlx5: devcom, Add component size getter (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5e: Decouple CQ from priv (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5e: Statify function mlx5e_monitor_counter_arm (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5: Move TISes from priv to mdev HW resources (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5e: Remove TLS-specific logic in generic create TIS API (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5: fs, Command to control TX flow table root (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5: fs, Command to control L2TABLE entry silent mode (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5: Expose Management PCIe Index Register (MPIR) (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5: Add mlx5_ifc bits used for supporting single netdev Socket-Direct (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5: Manage ICM type of SW encap (Shun Hao) [Orabug: 36811057]
  - RDMA/mlx5: Support handling of SW encap ICM area (Shun Hao) [Orabug: 36811057]
  - net/mlx5: Introduce indirect-sw-encap ICM properties (Shun Hao) [Orabug: 36811057]
  - mmc: sdhci-of-dwcmshc: Use logical OR instead of bitwise OR in dwcmshc_probe() (Nathan Chancellor) [Orabug: 36811057]
  - mmc: sdhci-of-dwcmshc: Add support for T-Head TH1520 (Drew Fustini) [Orabug: 36811057]
  - mmc: sdhci: add __sdhci_execute_tuning() to header (Drew Fustini) [Orabug: 36811057]
  - mlxsw: spectrum: Use CFF mode where available (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add support for rFID family in CFF flood mode (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add a family for bridge FIDs in CFF flood mode (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Initialize flood profiles in CFF mode (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add profile_id to flood profile (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add an object to keep flood profiles (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add hooks for RSP table maintenance (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add a not-UC packet type (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add an op for packing SFMR (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add an op to get PGT address of a FID (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add an op to get PGT allocation size (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add an op for flood table initialization (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Move mlxsw_sp_fid_flood_table_init() up (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Make mlxsw_sp_fid_ops.setup return an int (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Split a helper out of mlxsw_sp_fid_flood_table_mid() (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Rename FID ops, families, arrays (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Privatize FID families (Petr Machata) [Orabug: 36811057]
  - mlxsw: pci: Fix missing error checking (Ido Schimmel) [Orabug: 36811057]
  - mlxsw: spectrum_router: Call RIF setup before obtaining FID (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_router: Add a helper to get subport number from a RIF (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Extract SFMR packing into a helper (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Drop unnecessary conditions (Petr Machata) [Orabug: 36811057]
  - mlxsw: pci: Permit enabling CFF mode (Petr Machata) [Orabug: 36811057]
  - mlxsw: core, pci: Add plumbing related to CFF mode (Petr Machata) [Orabug: 36811057]
  - mlxsw: reg: Add to SFMR register the fields related to CFF flood mode (Petr Machata) [Orabug: 36811057]
  - mlxsw: reg: Extract flood-mode specific part of mlxsw_reg_sfmr_pack() (Petr Machata) [Orabug: 36811057]
  - mlxsw: reg: Drop unnecessary writes from mlxsw_reg_sfmr_pack() (Petr Machata) [Orabug: 36811057]
  - mlxsw: reg: Mark SFGC & some SFMR fields as reserved in CFF mode (Petr Machata) [Orabug: 36811057]
  - mlxsw: reg: Add Switch FID Flooding Profiles Register (Petr Machata) [Orabug: 36811057]
  - mlxsw: resources: Add max_cap_nve_flood_prf (Petr Machata) [Orabug: 36811057]
  - mlxsw: cmd: Add MLXSW_CMD_MBOX_CONFIG_PROFILE_FLOOD_MODE_CFF (Petr Machata) [Orabug: 36811057]
  - mlxsw: cmd: Add cmd_mbox.query_fw.cff_support (Petr Machata) [Orabug: 36811057]
  - EDAC/bluefield: Convert to platform remove callback returning void (Uwe Kleine-König) [Orabug: 36811057]
  - selftests: mlxsw: Add PCI reset test (Ido Schimmel) [Orabug: 36811057]
  - mlxsw: pci: Implement PCI reset handlers (Ido Schimmel) [Orabug: 36811057]
  - mlxsw: pci: Add support for new reset flow (Ido Schimmel) [Orabug: 36811057]
  - mlxsw: pci: Move software reset code to a separate function (Amit Cohen) [Orabug: 36811057]
  - mlxsw: pci: Rename mlxsw_pci_sw_reset() (Amit Cohen) [Orabug: 36811057]
  - mlxsw: Extend MRSR pack() function to support new commands (Amit Cohen) [Orabug: 36811057]
  - net/mlx5e: Remove early assignment to netdev->features (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5e: Add local loopback counter to vport rep stats (Or Har-Toov) [Orabug: 36811057]
  - net/mlx5: Query maximum frequency adjustment of the PTP hardware clock (Rahul Rameshbabu) [Orabug: 36811057]
  - net/mlx5: Convert scaled ppm values outside the s32 range for PHC frequency adjustments (Rahul Rameshbabu) [Orabug: 36811057]
  - net/mlx5: Initialize clock->ptp_info inside mlx5_init_timer_clock (Rahul Rameshbabu) [Orabug: 36811057]
  - net/mlx5: Refactor real time clock operation checks for PHC (Rahul Rameshbabu) [Orabug: 36811057]
  - net/mlx5e: Access array with enum values instead of magic numbers (Gal Pressman) [Orabug: 36811057]
  - net/mlx5: simplify mlx5_set_driver_version string assignments (Justin Stitt) [Orabug: 36811057]
  - net/mlx5: Annotate struct mlx5_flow_handle with __counted_by (Kees Cook) [Orabug: 36811057]
  - net/mlx5: Annotate struct mlx5_fc_bulk with __counted_by (Kees Cook) [Orabug: 36811057]
  - net/mlx5e: Some cleanup in mlx5e_tc_stats_matchall() (Amir Tzin) [Orabug: 36811057]
  - net/mlx5: Allow sync reset flow when BF MGT interface device is present (Moshe Shemesh) [Orabug: 36811057]
  - net/mlx5: print change on SW reset semaphore returns busy (Moshe Shemesh) [Orabug: 36811057]
  - vdpa/mlx5: clean up indenting in handle_ctrl_vlan() (Dan Carpenter) [Orabug: 36811057]
  - vdpa/mlx5: fix error code for deleting vlan (Dan Carpenter) [Orabug: 36811057]
  - vdpa/mlx5: Fix syntax errors in comments (Xiang Wangx) [Orabug: 36811057]
  - macsec: Fix use-after-free while sending the offloading packet (Jianbo Liu) [Orabug: 37268700,37516375] {CVE-2024-50261}
  - xfrm: Export symbol xfrm_dev_state_delete. (Steffen Klassert) [Orabug: 37357287]
  - xfrm: Fix unregister netdevice hang on hardware offload. (Steffen Klassert) [Orabug: 37357287]
  - xfrm: fix a data-race in xfrm_lookup_with_ifid() (Eric Dumazet) [Orabug: 37357287]
  - xfrm: generalize xdo_dev_state_update_curlft to allow statistics update (Leon Romanovsky) [Orabug: 37357287]
  - xfrm: copy_to_user_state fetch offloaded SA packets/bytes statistics (Raed Salem) [Orabug: 37357287]
  - xfrm: annotate data-race around use_time (Eric Dumazet) [Orabug: 37357287]
  - xfrm: consistently use time64_t in xfrm_timer_handler() (Eric Dumazet) [Orabug: 37357287]
  - cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids (Srinivas Pandruvada) [Orabug: 37383554]
  - cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids (Pedro Henrique Kopper) [Orabug: 37383554]
  - cpufreq: intel_pstate: Use Meteor Lake EPPs for Arrow Lake (Srinivas Pandruvada) [Orabug: 37383554]
  - cpufreq: intel_pstate: Update Meteor Lake EPPs (Srinivas Pandruvada) [Orabug: 37383554]
  - cpufreq: intel_pstate: Switch to new Intel CPU model defines (Tony Luck) [Orabug: 37383554]
  - cpufreq: Switch to new Intel CPU model defines (Tony Luck) [Orabug: 37383554]
  - x86/cpu/vfm: Update arch/x86/include/asm/intel-family.h (Tony Luck) [Orabug: 37383554]
  - x86/cpu: Add model number for another Intel Arrow Lake mobile processor (Tony Luck) [Orabug: 37383554]
  - cpufreq: intel_pstate: Update default EPPs for Meteor Lake (Srinivas Pandruvada) [Orabug: 37383554]
  - cpufreq: intel_pstate: Allow model specific EPPs (Srinivas Pandruvada) [Orabug: 37383554]
  - x86/cpu: Add model number for Intel Clearwater Forest processor (Tony Luck) [Orabug: 37383554]
  - cpufreq: intel_pstate: Update hybrid scaling factor for Meteor Lake (Srinivas Pandruvada) [Orabug: 37383554]
  - cpufreq: intel_pstate: Prioritize firmware-provided balance performance EPP (Srinivas Pandruvada) [Orabug: 37383554]
  - x86/cpu: Add model number for Intel Arrow Lake mobile processor (Tony Luck) [Orabug: 37383554]
  - x86/cpu: Update Hybrids (Peter Zijlstra) [Orabug: 37383554]
  - cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (Srinivas Pandruvada) [Orabug: 37383554]
  - cpufreq: intel_pstate: Enable HWP IO boost for all servers (Srinivas Pandruvada) [Orabug: 37383554]
  - cpufreq: intel_pstate: Allow EPP 0x80 setting by the firmware (Srinivas Pandruvada) [Orabug: 37383554]
  - cpufreq: intel_pstate: Use firmware default EPP (Srinivas Pandruvada) [Orabug: 37383554]
  - net/mlx5: Add a timeout to acquire the command queue semaphore (Akiva Goldberger) [Orabug: 36753441,37388415] {CVE-2024-38556}
  - PCI: Fix pci_enable_acs() support for the ACS quirks (Jason Gunthorpe) [Orabug: 37477375,37492139]
  - PCI: Clear Secondary Status errors after enumeration (Vidya Sagar) [Orabug: 37477375,37492139]
  - PCI/AER: Configure ECRC only if AER is native (Vidya Sagar) [Orabug: 37477375,37492139]
  - PCI: Extend ACS configurability (Vidya Sagar) [Orabug: 37477375,37492139]
  - NFSv4/pNFS: Do layout state recovery upon reboot (Trond Myklebust) [Orabug: 37477755,37487056]
  - NFSv4/pNFS: Remove redundant call to unhash the layout (Trond Myklebust) [Orabug: 37477755,37487056]
  - NFSv4/pnfs: Give nfs4_proc_layoutreturn() a flags argument (Trond Myklebust) [Orabug: 37477755,37487056]
  - NFSv4/pNFS: Retry the layout return later in case of a timeout or reboot (Trond Myklebust) [Orabug: 37477755,37487056]
  - NFSv4/pNFS: Handle server reboots in pnfs_poc_release() (Trond Myklebust) [Orabug: 37477755,37487056]
  - NFSv4/pNFS: Add a helper to defer failed layoutreturn calls (Trond Myklebust) [Orabug: 37477755,37487056]
  - NFSv4/pnfs: Add support for the PNFS_LAYOUT_FILE_BULK_RETURN flag (Trond Myklebust) [Orabug: 37477755,37487056]
  - pNFS: Add a flag argument to pnfs_destroy_layouts_byclid() (Trond Myklebust) [Orabug: 37477755,37487056]
  - NFSv4: Clean up encode_nfs4_stateid() (Trond Myklebust) [Orabug: 37477755,37487056]
  - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [Orabug: 37477755,37487056]
  - NFSv4/pnfs: Remove redundant list check (Trond Myklebust) [Orabug: 37477755,37487056]
  - uek-rpm: Enable CONFIG_SENSORS_ARM_SCMI and CONFIG_MVL_MHU (Thomas Tai) [Orabug: 37498899]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.176.1.el9uek]
changelog:
  - mm/page_alloc: fix min_free_kbytes calculation regarding ZONE_MOVABLE (Liuq) [Orabug: 37503579,37556932]
  - mm: Limit warning message in vmemmap_verify() to once (Ma Wupeng) [Orabug: 37503579,37556932]
  - assoc_array: fix the return value in assoc_array_insert_mid_shortcut() (Roman Smirnov) [Orabug: 37503579,37556932]
  - assoc_array: Avoid open coded arithmetic in allocator arguments (Len Baker) [Orabug: 37503579,37556932]
  - mm/page_alloc: use accumulated load when building node fallback list (Krupa Ramakrishnan) [Orabug: 37503525]
  - mm/page_alloc: print node fallback order (Bharata B Rao) [Orabug: 37503525]
  - PCI: Support BAR sizes up to 8TB (Dongdong Liu) [Orabug: 37503525]
  - uek-rpm: Enable USB_XHCI_PCI_RENESAS as a module for aarch64 platforms (Harshit Mogalapalli) [Orabug: 37552080,37556911]
  - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [Orabug: 37535421]
  - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [Orabug: 37535421]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.177.2.el9uek]
changelog:
  - LTS version: v5.15.177 (Vijayendra Suman)
  - Partial revert of xhci: use pm_ptr() instead #ifdef for CONFIG_PM conditionals (Ron Economos)
  - xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals (Arnd Bergmann)
  - net: fix data-races around sk->sk_forward_alloc (Wang Liang) [Orabug: 37388795] {CVE-2024-53124}
  - scsi: sg: Fix slab-use-after-free read in sg_release() (Surajsonawane2415) [Orabug: 37434117] {CVE-2024-56631}
  - x86/xen: fix SLS mitigation in xen_hypercall_iret() (Juergen Gross)
  - nfsd: add list_head nf_gc to struct nfsd_file (Youzhong Yang)
  - ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (Eric Dumazet) [Orabug: 37200706] {CVE-2024-47707}
  - vsock/virtio: discard packets if the transport changes (Stefano Garzarella) [Orabug: 37555796] {CVE-2025-21669}
  - blk-cgroup: Fix UAF in blkcg_unpin_online() (Tejun Heo) [Orabug: 37434276] {CVE-2024-56672}
  - iio: adc: rockchip_saradc: fix information leak in triggered buffer (Javier Carrasco) [Orabug: 37497164] {CVE-2024-57907}
  - iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on (Jean-Baptiste Maneyrol)
  - iio: imu: inv_icm42600: fix spi burst write not supported (Jean-Baptiste Maneyrol)
  - drm/i915/fb: Relax clear color alignment to 64 bytes (Ville Syrjälä)
  - irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly (Yogesh Lal)
  - gpiolib: cdev: Fix use after free in lineinfo_changed_notify (Zhongqiu Han) [Orabug: 36683269] {CVE-2024-36899}
  - fs/proc: fix softlockup in __read_vmcore (part 2) (Rik Van Riel) [Orabug: 37592151] {CVE-2025-21694}
  - filemap: avoid truncating 64-bit offset to 32 bits (Marco Nelissen) [Orabug: 37555782] {CVE-2025-21665}
  - vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (Stefano Garzarella) [Orabug: 37555785] {CVE-2025-21666}
  - vsock: reset socket state when de-assigning the transport (Stefano Garzarella)
  - vsock/virtio: cancel close work in the destructor (Stefano Garzarella)
  - net: ethernet: xgbe: re-add aneg to supported features in PHY quirks (Heiner Kallweit)
  - nvmet: propagate npwg topology (Luis Chamberlain)
  - poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll() (Oleg Nesterov)
  - ACPI: resource: acpi_dev_irq_override(): Check DMI match last (Hans de Goede)
  - kheaders: Ignore silly-rename files (David Howells)
  - fs: fix missing declaration of init_files (Zhang Kunbo)
  - hfs: Sanity check the root record (Leo Stone)
  - mac802154: check local interfaces before deleting sdata list (Lizhi Xu) [Orabug: 37555775] {CVE-2024-57948}
  - i2c: rcar: fix NACK handling when being a target (Wolfram Sang)
  - i2c: mux: demux-pinctrl: check initial mux selection, too (Wolfram Sang)
  - drm/v3d: Ensure job pointer is set to NULL after job completion (Maíra Canal)
  - net/mlx5: Fix RDMA TX steering prio (Patrisious Haddad)
  - net: xilinx: axienet: Fix IRQ coalescing packet count overflow (Sean Anderson)
  - nfp: bpf: prevent integer overflow in nfp_bpf_event_output() (Dan Carpenter)
  - pktgen: Avoid out-of-bounds access in get_imix_entries (Artem Chernyshev) [Orabug: 37555838] {CVE-2025-21680}
  - bpf: Fix bpf_sk_select_reuseport() memory leak (Michal Luczaj) [Orabug: 37555850] {CVE-2025-21683}
  - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field() (Sudheer Kumar Doredla)
  - phy: usb: Fix clock imbalance for suspend/resume (Justin Chen)
  - phy: usb: Use slow clock for wake enabled suspend (Justin Chen)
  - mptcp: fix TCP options overflow. (Paolo Abeni) [Orabug: 37484954] {CVE-2024-57882}
  - mptcp: drop port parameter of mptcp_pm_add_addr_signal (Geliang Tang)
  - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (Dennis Lam) [Orabug: 37485003] {CVE-2024-57892}
  - ocfs2: correct return value of ocfs2_local_free_info() (Joseph Qi)
  - phy: usb: Toggle the PHY power during init (Justin Chen)
  - phy: usb: Add "wake on" functionality for newer Synopsis XHCI controllers (Al Cooper)
  - of: address: Preserve the flags portion on 1:1 dma-ranges mapping (Andrea Della Porta)
  - of: address: Store number of bus flag cells rather than bool (Rob Herring)
  - of: address: Remove duplicated functions (Herve Codina)
  - of: address: Fix address translation when address-size is greater than 2 (Herve Codina)
  - of/address: Add support for 3 address cell bus (Rob Herring)
  - of: unittest: Add bus address range parsing tests (Rob Herring)
  - arm64: dts: rockchip: add hevc power domain clock to rk3328 (Peter Geis)
  - block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (Yu Kuai) [Orabug: 37497408] {CVE-2025-21631}
  - iio: adc: ad7124: Disable all channels at probe time (Uwe Kleine-König)
  - iio: inkern: call iio_device_put() only on mapped devices (Joe Hattori)
  - iio: adc: at91: call input_free_device() on allocated iio_dev (Joe Hattori) {CVE-2024-57904}
  - iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() (Fabio Estevam)
  - iio: gyro: fxas21002c: Fix missing data update in trigger handler (Carlos Song)
  - iio: adc: ti-ads8688: fix information leak in triggered buffer (Javier Carrasco) {CVE-2024-57906}
  - iio: imu: kmx61: fix information leak in triggered buffer (Javier Carrasco) {CVE-2024-57908}
  - iio: light: vcnl4035: fix information leak in triggered buffer (Javier Carrasco) {CVE-2024-57910}
  - iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (Javier Carrasco) {CVE-2024-57911}
  - iio: pressure: zpa2326: fix information leak in triggered buffer (Javier Carrasco) {CVE-2024-57912}
  - usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (Akash M) {CVE-2024-57913}
  - usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints (Prashanth K)
  - usb: fix reference leak in usb_new_device() (Ma Ke)
  - USB: core: Disable LPM only for non-suspended ports (Kai-Heng Feng)
  - USB: usblp: return error when setting unsupported protocol (Yan Jun)
  - usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null (Lianqin Hu)
  - topology: Keep the cpumask unchanged when printing cpumap (Li Huafei) [Orabug: 37497212] {CVE-2024-57917}
  - usb: dwc3: gadget: fix writing NYET threshold (André Draszik)
  - USB: serial: cp210x: add Phoenix Contact UPS Device (Johan Hovold)
  - usb-storage: Add max sectors quirk for Nokia 208 (Lubomir Rintel)
  - staging: iio: ad9832: Correct phase range check (Zicheng Qu)
  - staging: iio: ad9834: Correct phase range check (Zicheng Qu)
  - USB: serial: option: add Neoway N723-EA support (Michal Hrusecky)
  - USB: serial: option: add MeiG Smart SRM815 (Chukun Pan)
  - md/raid5: fix atomicity violation in raid5_cache_count (Gui-Dong Han)
  - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Kuan-Wei Chiu)
  - drm/amd/display: increase MAX_SURFACES to the value supported by hw (Melissa Wen)
  - ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (Hans de Goede)
  - ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (Hans de Goede)
  - riscv: Fix sleeping in invalid context in die() (Nam Cao) {CVE-2024-57939}
  - drm/amd/display: Add check for granularity in dml ceil/floor helpers (Roman Li) [Orabug: 37497224] {CVE-2024-57922}
  - sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (Matthieu Baerts) [Orabug: 37497275] {CVE-2025-21636}
  - sctp: sysctl: udp_port: avoid using current->nsproxy (Matthieu Baerts) [Orabug: 37497279] {CVE-2025-21637}
  - sctp: sysctl: auth_enable: avoid using current->nsproxy (Matthieu Baerts) [Orabug: 37497282] {CVE-2025-21638}
  - sctp: sysctl: rto_min/max: avoid using current->nsproxy (Matthieu Baerts) [Orabug: 37497289] {CVE-2025-21639}
  - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (Matthieu Baerts) [Orabug: 37497302] {CVE-2025-21640}
  - dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY (Mikulas Patocka)
  - dm thin: make get_first_thin use rcu-safe list first function (Krister Johansen) [Orabug: 37506782] {CVE-2025-21664}
  - afs: Fix the maximum cell name length (David Howells) {CVE-2025-21646}
  - ksmbd: fix a missing return value check bug (Wentao Liang) {CVE-2024-57925}
  - drm/mediatek: Add support for 180-degree rotation in the display driver (Jason-JH Lin)
  - netfilter: conntrack: clamp maximum hashtable size to INT_MAX (Pablo Neira Ayuso) [Orabug: 37497323] {CVE-2025-21648}
  - netfilter: nf_tables: imbalance in flowtable binding (Pablo Neira Ayuso)
  - tls: Fix tls_sw_sendmsg error handling (Benjamin Coddington)
  - cxgb4: Avoid removal of uninserted tid (Anumula Murali Mohan Reddy)
  - bnxt_en: Fix possible memory leak when hwrm_req_replace fails (Kalesh Ap)
  - net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (Eric Dumazet) [Orabug: 37497345] {CVE-2025-21653}
  - tcp/dccp: allow a connection when sk_max_ack_backlog is zero (Zhongqiu Duan)
  - tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog (Jason Xing)
  - net: 802: LLC+SNAP OID:PID lookup on start of skb data (Antonio Pastor)
  - ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() (Keisuke Nishimura)
  - ASoC: mediatek: disable buffer pre-allocation (Chen-Yu Tsai)
  - exfat: fix the infinite loop in __exfat_free_cluster() (Yuezhang Mo)
  - exfat: fix the infinite loop in exfat_readdir() (Yuezhang Mo) [Orabug: 37506742] {CVE-2024-57940}
  - dm array: fix cursor index when skipping across block boundaries (Ming-Hung Tsai)
  - dm array: fix unreleased btree blocks on closing a faulty array cursor (Ming-Hung Tsai)
  - dm array: fix releasing a faulty array block twice in dm_array_cursor_end (Ming-Hung Tsai) [Orabug: 37497248] {CVE-2024-57929}
  - jbd2: flush filesystem device before updating tail sequence (Zhang Yi)
  - ceph: give up on paths longer than PATH_MAX (Max Kellermann) [Orabug: 37472273] {CVE-2024-53685}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.177.3.el9uek]
changelog:
  - uek-rpm: Update network stress testing options for embedded2 (Joseph Dobosenski) [Orabug: 37530219]
  - mm, madvise: fix potential workingset node list_lru leaks (Kairui Song) [Orabug: 37464586]
  - crypto: qat/qat_4xxx - fix off by one in uof_get_name() (Dan Carpenter) [Orabug: 37427536] {CVE-2024-53162}
  - vdpa/mlx5: Fix error path during device add (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vp_vdpa: fix id_table array not null terminated error (Xiaoguang Wang) [Orabug: 37296163,37561499,37602514] {CVE-2024-53110}
  - vdpa/mlx5: Postpone MR deletion (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Introduce init/destroy for MR resources (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Rename mr_mtx -> lock (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Extract mr members in own resource struct (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Rename function (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Delete direct MKEYs in parallel (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Create direct MKEYs in parallel (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Parallelize VQ suspend/resume for CVQ MQ command (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Small improvement for change_num_qps() (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Keep notifiers during suspend but ignore (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Parallelize device resume (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Parallelize device suspend (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Use async API for vq modify commands (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Use async API for vq query command (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Introduce async fw command wrapper (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Introduce error logging function (Dragos Tatulea) [Orabug: 37296163,37561499]
  - net/mlx5: Support throttled commands from async API (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Add the support of set mac address (Cindy Lu) [Orabug: 37296163,37561499]
  - vdpa_sim_net: Add the support of set mac address (Cindy Lu) [Orabug: 37296163,37561499]
  - vdpa: support set mac address from vdpa tool (Cindy Lu) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Fix invalid mr resource destroy (Dragos Tatulea) [Orabug: 37296163,37561499,37602562] {CVE-2024-47687}
  - vdpa/mlx5: Don't enable non-active VQs in .set_vq_ready() (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Don't reset VQs more than necessary (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Re-create HW VQs under certain conditions (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Pre-create hardware VQs at vdpa .dev_add time (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Use suspend/resume during VQP change (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Forward error in suspend/resume device (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Consolidate all VQ modify to Ready to use resume_vq() (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Add error code for suspend/resume VQ (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Accept Init -> Ready VQ transition in resume_vq() (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Allow creation of blank VQs (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Set mkey modified flags on all VQs (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Start off rqt_size with max VQPs (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Set an initial size on the VQ (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Add support for modifying the VQ features field (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Add support for modifying the virtio_version VQ field (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Rename init_mvqs (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Clear and reinitialize software VQ data on reset (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Initialize and reset device with one queue pair (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Remove duplicate suspend code (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Iterate over active VQs during suspend/resume (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Drop redundant check in teardown_virtqueues() (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Drop redundant code (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Make setup/teardown_vq_resources() symmetrical (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Clarify meaning thorough function rename (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vhost-vdpa: Remove usage of the deprecated ida_simple_xx() API (Christophe Jaillet) [Orabug: 37296163,37561499]
  - vp_vdpa: don't allocate unused msix vectors (Yuxue Liu) [Orabug: 37296163,37561499]
  - vdpa: Convert sprintf/snprintf to sysfs_emit (Li Zhijian) [Orabug: 37296163,37561499]
  - vp_vdpa: Fix return value check vp_vdpa_request_irq (Yuxue Liu) [Orabug: 37296163,37561499]
  - vhost-vdpa: change ioctl # for VDPA_GET_VRING_SIZE (Michael S Tsirkin) [Orabug: 37296163,37561499]
  - virtio_vdpa: create vqs with the actual size (Zhu Lingshan) [Orabug: 37296163,37561499]
  - vdpa_sim: implement vdpa_config_ops.get_vq_size for vDPA simulator (Zhu Lingshan) [Orabug: 37296163,37561499]
  - vp_vdpa: implement vdpa_config_ops.get_vq_size (Zhu Lingshan) [Orabug: 37296163,37561499]
  - vDPA: introduce get_vq_size to vdpa_config_ops (Zhu Lingshan) [Orabug: 37296163,37561499]
  - vhost-vdpa: uapi to support reporting per vq size (Zhu Lingshan) [Orabug: 37296163,37561499]
  - vdpa: skip suspend/resume ops if not DRIVER_OK (Steve Sistare) [Orabug: 37296163,37561499]
  - vdpa_sim: reset must not run (Steve Sistare) [Orabug: 37296163,37561499]
  - vdpa: Block vq property changes in DRIVER_OK (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa: Track device suspended state (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa: Remove usage of the deprecated ida_simple_xx() API (Christophe Jaillet) [Orabug: 37296163,37561499]
  - SUNRPC: do not retry on EKEYEXPIRED when user TGT ticket expired (Dai Ngo) [Orabug: 34162493]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.177.4.el9uek]
changelog:
  - Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null" (Greg Kroah-Hartman)
  - drm/v3d: Assign job pointer to NULL before signaling the fence (Maíra Canal)
  - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (Ranjan Kumar) [Orabug: 37472354] {CVE-2024-57804}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-307.177.1.el9uek]
changelog:
  - nvmet: always initialize cqe.result (Daniel Wagner) [Orabug: 36897348] {CVE-2024-41079}
  - nvmet-auth: complete a request only after freeing the dhchap pointers (Maurizio Lombardi) [Orabug: 36897348] {CVE-2024-41079}
  - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Justin Tee) [Orabug: 37116505] {CVE-2024-46842}
  - netdevsim: use cond_resched() in nsim_dev_trap_report_work() (Eric Dumazet) [Orabug: 37264120] {CVE-2024-50155}
  - nvmet-auth: assign dh_key to NULL after kfree_sensitive (Vitaliy Shevtsov) [Orabug: 37268555] {CVE-2024-50215}
  - net: usb: lan78xx: Fix double free issue with interrupt buffer allocation (Oleksij Rempel) [Orabug: 37433573] {CVE-2024-53213}
  - PCI/MSI: Handle lack of irqdomain gracefully (Thomas Gleixner) [Orabug: 37452651] {CVE-2024-56760}
  - selftests: rtnetlink: update netdevsim ipsec output format (Hangbin Liu) [Orabug: 37547931]
  - netdevsim: print human readable IP address (Hangbin Liu) [Orabug: 37547931]
  - uek: kabi: Fix build error for HIDE_INCLUDE macro (Saeed Mirzamohammadi) [Orabug: 37619141]
  - Add __init annotation to pensando_efi_mem_reserve (Joseph Dobosenski) [Orabug: 37619785]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-307.177.2.el9uek]
changelog:
  - uek-rpm: Enable CONFIG_MICROSOFT_MANA as module in aarch64 (Vijayendra Suman)  [Orabug: 37647393]  
  - rtc: add new RTC_FEATURE_ALARM_WAKEUP_ONLY feature (Alexandre Belloni)  [Orabug: 37631796]  
  - thermal: core: Drop excessive lockdep_assert_held() calls (Rafael J. Wysocki)  [Orabug: 37631796]  
  - thermal: core: Introduce thermal_cooling_device_update() (Rafael J. Wysocki)  [Orabug: 37631796]  
  - thermal: core: Introduce thermal_cooling_device_present() (Rafael J. Wysocki)  [Orabug: 37631796]  
  - thermal: sysfs: Reuse cdev->max_state (Viresh Kumar)  [Orabug: 37631796]  
  - rtc: efi: Enable SET/GET WAKEUP services as optional (Shanker Donthineni)  [Orabug: 37631796]  
  - rtc: efi: Add wakeup support (Riwen Lu)  [Orabug: 37631796]  
  - rtc: efi: switch to RTC_FEATURE_UPDATE_INTERRUPT (Alexandre Belloni)  [Orabug: 37631796]  
  - rtc: add BSM parameter (Alexandre Belloni)  [Orabug: 37631796]  
  - rtc: add correction parameter (Alexandre Belloni)  [Orabug: 37631796]  
  - rtc: add parameter ioctl (Alexandre Belloni)  [Orabug: 37631796]  
  - rtc: expose correction feature (Alexandre Belloni)  [Orabug: 37631796]  
  - rtc: add alarm related features (Alexandre Belloni)  [Orabug: 37631796]  
  - rtc: efi: switch to devm_rtc_allocate_device (Alexandre Belloni)  [Orabug: 37631796]  
  - cgroup: Make operations on the cgroup root_list RCU safe (Yafang Shao)  [Orabug: 37621589]  
  - rds: ib: Avoid sleeping function inside RCU region by using sampled values instead (Håkon Bugge)  [Orabug: 37586089]  
  - bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (Michael Chan)  [Orabug: 37434220]  {CVE-2024-56656} 
  - bnxt_en: Fix receive ring space parameters when XDP is active (Shravya KN)  [Orabug: 37433562]  {CVE-2024-53209} 
  - bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (Aleksandr Mishin)  [Orabug: 37070333]  {CVE-2024-40919} 
  - bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init() (Vikas Gupta)  [Orabug: 37070270]  {CVE-2024-35972} 
  - bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (Somnath Kotur)  [Orabug: 37070266]  {CVE-2024-44984}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-307.177.2.el9uek]
changelog:
  - uek-rpm: Enable CONFIG_MICROSOFT_MANA as module in aarch64 (Vijayendra Suman)  [Orabug: 37647393]
  - rtc: add new RTC_FEATURE_ALARM_WAKEUP_ONLY feature (Alexandre Belloni)  [Orabug: 37631796]
  - thermal: core: Drop excessive lockdep_assert_held() calls (Rafael J. Wysocki)  [Orabug: 37631796]
  - thermal: core: Introduce thermal_cooling_device_update() (Rafael J. Wysocki)  [Orabug: 37631796]
  - thermal: core: Introduce thermal_cooling_device_present() (Rafael J. Wysocki)  [Orabug: 37631796]
  - thermal: sysfs: Reuse cdev->max_state (Viresh Kumar)  [Orabug: 37631796]
  - rtc: efi: Enable SET/GET WAKEUP services as optional (Shanker Donthineni)  [Orabug: 37631796]
  - rtc: efi: Add wakeup support (Riwen Lu)  [Orabug: 37631796]
  - rtc: efi: switch to RTC_FEATURE_UPDATE_INTERRUPT (Alexandre Belloni)  [Orabug: 37631796]
  - rtc: add BSM parameter (Alexandre Belloni)  [Orabug: 37631796]
  - rtc: add correction parameter (Alexandre Belloni)  [Orabug: 37631796]
  - rtc: add parameter ioctl (Alexandre Belloni)  [Orabug: 37631796]
  - rtc: expose correction feature (Alexandre Belloni)  [Orabug: 37631796]
  - rtc: add alarm related features (Alexandre Belloni)  [Orabug: 37631796]
  - rtc: efi: switch to devm_rtc_allocate_device (Alexandre Belloni)  [Orabug: 37631796]
  - cgroup: Make operations on the cgroup root_list RCU safe (Yafang Shao)  [Orabug: 37621589]
  - rds: ib: Avoid sleeping function inside RCU region by using sampled values instead (Håkon Bugge)  [Orabug: 37586089]
  - bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (Michael Chan)  [Orabug: 37434220]  {CVE-2024-56656}
  - bnxt_en: Fix receive ring space parameters when XDP is active (Shravya KN)  [Orabug: 37433562]  {CVE-2024-53209}
  - bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (Aleksandr Mishin)  [Orabug: 37070333]  {CVE-2024-40919}
  - bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init() (Vikas Gupta)  [Orabug: 37070270]  {CVE-2024-35972}
  - bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (Somnath Kotur)  [Orabug: 37070266]  {CVE-2024-44984}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-307.177.3.el9uek]
changelog:
  - jbd2: increase maximum transaction size (Jan Kara)  [Orabug: 37688920]
  - net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled (Carolina Jubran)  [Orabug: 37534698]
  - net/mlx5e: Always start IPsec sequence number from 1 (Leon Romanovsky)  [Orabug: 37534698]
  - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (Shravan Kumar Ramani)  [Orabug: 37534698]
  - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (Shravan Kumar Ramani)  [Orabug: 37534698]
  - platform/mellanox: mlxbf-pmc: incorrect type in assignment (Pei Xiao)  [Orabug: 37534698]
  - net/mlx5e: Disable loopback self-test on multi-PF netdev (Carolina Jubran)  [Orabug: 37534698]
  - net/mlx5: Unregister notifier on eswitch init failure (Cosmin Ratiu)  [Orabug: 37534698]
  - mmc: sdhci-of-dwcmshc: Prevent stale command interrupt handling (Michal Wilczynski)  [Orabug: 37534698]
  - net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice (Jianbo Liu)  [Orabug: 37534698]
  - platform/mellanox: mlxbf-pmc: fix lockdep warning (Luiz Capitulino)  [Orabug: 37534698]
  - net/mlx5: Fix bridge mode operations when there are no VFs (Benjamin Poirier)  [Orabug: 37534698]
  - mmc: sdhci-of-dwcmshc: Add hw_reset() support for BlueField-3 SoC (Liming Sun)  [Orabug: 37534698]
  - mmc: sdhci-of-dwcmshc: add dwcmshc_pltfm_data (Chen Wang)  [Orabug: 37534698]
  - mmc: sdhci-of-dwcmshc: factor out code into dwcmshc_rk35xx_init (Chen Wang)  [Orabug: 37534698]
  - mmc: sdhci-of-dwcmshc: factor out code for th1520_init() (Chen Wang)  [Orabug: 37534698]
  - mmc: sdhci-of-dwcmshc: move two rk35xx functions (Chen Wang)  [Orabug: 37534698]
  - mmc: sdhci-of-dwcmshc: add common bulk optional clocks support (Chen Wang)  [Orabug: 37534698]
  - net/mlx5e: Take state lock during tx timeout reporter (Dragos Tatulea)  [Orabug: 37534698]
  - net/mlx5: SD, Do not query MPIR register if no sd_group (Tariq Toukan)  [Orabug: 37534698]
  - net/mlx5: Always drain health in shutdown callback (Shay Drory)  [Orabug: 37534698]
  - mmc: dw_mmc-bluefield: Add support for eMMC HW reset (Liming Sun)  [Orabug: 37534698]
  - mmc: dw_mmc: Add support for platform specific eMMC HW reset (Liming Sun)  [Orabug: 37534698]
  - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Dragos Tatulea)  [Orabug: 37534698]
  - net/mlx5e: SHAMPO, Fix incorrect page release (Dragos Tatulea)  [Orabug: 37534698]
  - net/mlx5: Do not query MPIR on embedded CPU function (Tariq Toukan)  [Orabug: 37534698]
  - net/mlx5: Reload only IB representors upon lag disable/enable (Maher Sanalla)  [Orabug: 37534698]
  - mmc: sdhci-of-dwcmshc: Add tuning support for Sophgo CV1800B and SG200X (Jisheng Zhang)  [Orabug: 37534698]
  - macsec: Detect if Rx skb is macsec-related for offloading devices that update md_dst (Rahul Rameshbabu)  [Orabug: 37534698]
  - macsec: Enable devices to advertise whether they update sk_buff md_dst during offloads (Rahul Rameshbabu)  [Orabug: 37534698]
  - net/mlx5e: Prevent deadlock while disabling aRFS (Carolina Jubran)  [Orabug: 37534698]
  - net/mlx5e: Use channel mdev reference instead of global mdev instance for coalescing (Rahul Rameshbabu)  [Orabug: 37534698]
  - net/mlx5: SD, Handle possible devcom ERR_PTR (Tariq Toukan)  [Orabug: 37534698]
  - net/mlx5: Disallow SRIOV switchdev mode when in multi-PF netdev (Tariq Toukan)  [Orabug: 37534698]
  - mmc: sdhci-of-dwcmshc: Implement SDHCI CQE support (Sergey Khimich)  [Orabug: 37534698]
  - mmc: cqhci: Add cqhci set_tran_desc() callback (Sergey Khimich)  [Orabug: 37534698]
  - platform/mellanox: mlxbf-pmc: fix signedness bugs (Dan Carpenter)  [Orabug: 37534698]
  - net/mlx5e: Create EN core HW resources for all secondary devices (Tariq Toukan)  [Orabug: 37534698]
  - net/mlx5e: Create single netdev per SD group (Tariq Toukan)  [Orabug: 37534698]
  - net/mlx5: SD, Add debugfs (Tariq Toukan)  [Orabug: 37534698]
  - net/mlx5: SD, Add informative prints in kernel log (Tariq Toukan)  [Orabug: 37534698]
  - net/mlx5: SD, Implement steering for primary and secondaries (Tariq Toukan)  [Orabug: 37534698]
  - net/mlx5: SD, Implement devcom communication and primary election (Tariq Toukan)  [Orabug: 37534698]
  - net/mlx5: SD, Implement basic query and instantiation (Tariq Toukan)  [Orabug: 37534698]
  - net/mlx5: SD, Introduce SD lib (Tariq Toukan)  [Orabug: 37534698]
  - net/mlx5: Add MPIR bit in mcam_access_reg (Tariq Toukan)  [Orabug: 37534698]
  - lib: memcpy_kunit: Fix an invalid format specifier in an assertion msg (David Gow)  [Orabug: 37534698]
  - platform/mellanox: mlxbf-pmc: Ignore unsupported performance blocks (Luiz Capitulino)  [Orabug: 37534698]
  - platform/mellanox: mlxbf-pmc: mlxbf_pmc_event_list(): make size ptr optional (Luiz Capitulino)  [Orabug: 37534698]
  - mmc: sdhci-of-dwcmshc: Add support for Sophgo CV1800B and SG2002 (Jisheng Zhang)  [Orabug: 37534698]
  - platform/mellanox: mlxbf-pmc: Cleanup signed/unsigned mix-up (Shravan Kumar Ramani)  [Orabug: 37534698]
  - platform/mellanox: mlxbf-pmc: Replace uintN_t with kernel-style types (Shravan Kumar Ramani)  [Orabug: 37534698]
  - net: macsec: revert the MAC address if mdo_upd_secy fails (Radu Pirea (NXP OSS))  [Orabug: 37534698]
  - net: macsec: documentation for macsec_context and macsec_ops (Radu Pirea (NXP OSS))  [Orabug: 37534698]
  - fortify: Do not cast to "unsigned char" (Kees Cook)  [Orabug: 37534698]
  - fortify: Use SIZE_MAX instead of (size_t)-1 (Kees Cook)  [Orabug: 37534698]
  - fortify: Fix __compiletime_strlen() under UBSAN_BOUNDS_LOCAL (Kees Cook)  [Orabug: 37534698]
  - mmc: dw_mmc: Add driver callbacks for data read timeout (Mårten Lindahl)  [Orabug: 37534698]
  - mmc: dw_mmc-exynos: Add support for ARTPEC-8 (Mårten Lindahl)  [Orabug: 37534698]
  - mmc: dw_mmc: clean up a debug message (Dan Carpenter)  [Orabug: 37534698]
  - mmc: dw_mmc: exynos: use common_caps (John Keeping)  [Orabug: 37534698]
  - mmc: dw_mmc: add common capabilities to replace caps (John Keeping)  [Orabug: 37534698]
  - mmc: dw_mmc: Allow lower TMOUT value than maximum (Mårten Lindahl)  [Orabug: 37534698]
  - rds: Make sure transmit path and connection tear-down does not run concurrently (Håkon Bugge)  [Orabug: 36441944]
  - ice: always add legacy 32byte RXDID in supported_rxdids (Michal Schmidt)  [Orabug: 36252756]
  - ice: virtchnl rss hena support (Md Fahad Iqbal Polash)  [Orabug: 36252756]
  - ice: Add support Flex RXD (Michal Jaron)  [Orabug: 36252756]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-307.178.4.el9uek]
changelog:
  - LTS version: v5.15.178 (Vijayendra Suman)   
  - Input: xpad - add support for wooting two he (arm) (Jack Greiner)   
  - Input: xpad - add unofficial Xbox 360 wireless receiver clone (Nilton Perim Neto)   
  - Input: atkbd - map F23 key to support default copilot shortcut (Mark Pearson)   
  - ALSA: usb-audio: Add delay quirk for USB Audio Device (Lianqin Hu)   
  - USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (Qasim Ijaz)   
  - wifi: iwlwifi: add a few rate index validity checks (Anjaneyulu)   
  - scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (Easwar Hariharan)   
  - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (Ido Schimmel)   
  - platform/chrome: cros_ec_typec: Check for EC driver (Akihiko Odaki)   
  - fs/ntfs3: Additional check in ntfs_file_release (Konstantin Komarov)   
  - Bluetooth: RFCOMM: Fix not validating setsockopt user input (Luiz Augusto von Dentz)   
  - Bluetooth: SCO: Fix not validating setsockopt user input (Luiz Augusto von Dentz)   
  - vfio/platform: check the bounds of read/write syscalls (Alex Williamson)   
  - net: sched: fix ets qdisc OOB Indexing (Jamal Hadi Salim)   
  - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher)   
  - mptcp: don't always assume copied data in mptcp_cleanup_rbuf() (Paolo Abeni)   
  - regmap: detach regmap from dev on regmap_exit (Cosmin Tanislav)   
  - ASoC: samsung: Add missing depends on I2C (Charles Keepax)   
  - irqchip/sunxi-nmi: Add missing SKIP_WAKE flag (Philippe Simons)   
  - scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request (Xiang Zhang)   
  - seccomp: Stub for !CONFIG_SECCOMP (Linus Walleij)   
  - ASoC: samsung: Add missing selects for MFD_WM8994 (Charles Keepax)   
  - ASoC: wm8994: Add depends on MFD core (Charles Keepax)


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-307.178.4.el9uek]
changelog:
  - LTS version: v5.15.178 (Vijayendra Suman)
  - Input: xpad - add support for wooting two he (arm) (Jack Greiner)
  - Input: xpad - add unofficial Xbox 360 wireless receiver clone (Nilton Perim Neto)
  - Input: atkbd - map F23 key to support default copilot shortcut (Mark Pearson)
  - ALSA: usb-audio: Add delay quirk for USB Audio Device (Lianqin Hu)
  - USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (Qasim Ijaz)
  - wifi: iwlwifi: add a few rate index validity checks (Anjaneyulu)
  - scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (Easwar Hariharan)
  - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (Ido Schimmel)
  - platform/chrome: cros_ec_typec: Check for EC driver (Akihiko Odaki)
  - fs/ntfs3: Additional check in ntfs_file_release (Konstantin Komarov)
  - Bluetooth: RFCOMM: Fix not validating setsockopt user input (Luiz Augusto von Dentz)
  - Bluetooth: SCO: Fix not validating setsockopt user input (Luiz Augusto von Dentz)
  - vfio/platform: check the bounds of read/write syscalls (Alex Williamson)
  - net: sched: fix ets qdisc OOB Indexing (Jamal Hadi Salim)
  - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher)
  - mptcp: don't always assume copied data in mptcp_cleanup_rbuf() (Paolo Abeni)
  - regmap: detach regmap from dev on regmap_exit (Cosmin Tanislav)
  - ASoC: samsung: Add missing depends on I2C (Charles Keepax)
  - irqchip/sunxi-nmi: Add missing SKIP_WAKE flag (Philippe Simons)
  - scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request (Xiang Zhang)
  - seccomp: Stub for !CONFIG_SECCOMP (Linus Walleij)
  - ASoC: samsung: Add missing selects for MFD_WM8994 (Charles Keepax)
  - ASoC: wm8994: Add depends on MFD core (Charles Keepax)


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-307.178.5.el9uek]
changelog:
  - net/mlx5: DR, prevent potential error pointer dereference (Dan Carpenter)  [Orabug: 37434242]  {CVE-2024-56660} 
  - uek-rpm: Set CONFIG_IP6_NF_IPTABLES for ol9/ol8 container kernels (Jonah Palmer)  [Orabug: 37703179]  
  - net: hsr: fix fill_frame_info() regression vs VLAN packets (Eric Dumazet)   
  - f2fs: Introduce linear search for dentries (Daniel Lee)   
  - tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind (Marco Leogrande)   
  - net: loopback: Avoid sending IP packets without an Ethernet header (Ido Schimmel)   
  - x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (Andrew Cooper)   
  - sched: sch_cake: add bounds checks to host bulk flow fairness counts (Toke Høiland-Jørgensen)   
  - usb: atm: cxacru: fix a flaw in existing endpoint checks (Nikita Zhandarovich)   
  - x86/xen: fix xen_hypercall_hvm() to not clobber %rbx (Juergen Gross)   
  - x86/xen: add FRAME_END to xen_hypercall_hvm() (Juergen Gross)   
  - ocfs2: fix incorrect CPU endianness conversion causing mount failure (Heming Zhao)   
  - usb: dwc3: Set SUSPENDENABLE soon after phy init (Thinh Nguyen)   
  - Revert "btrfs: avoid monopolizing a core when activating a swap file" (Koichiro Den)   
  - Revert "media: uvcvideo: Require entities to have a non-zero unique ID" (Thadeu Lima de Souza Cascardo)   
  - netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (Cong Wang)


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-307.178.5.el9uek]
changelog:
  - net/mlx5: DR, prevent potential error pointer dereference (Dan Carpenter)  [Orabug: 37434242]  {CVE-2024-56660}
  - uek-rpm: Set CONFIG_IP6_NF_IPTABLES for ol9/ol8 container kernels (Jonah Palmer)  [Orabug: 37703179]
  - net: hsr: fix fill_frame_info() regression vs VLAN packets (Eric Dumazet)
  - f2fs: Introduce linear search for dentries (Daniel Lee)
  - tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind (Marco Leogrande)
  - net: loopback: Avoid sending IP packets without an Ethernet header (Ido Schimmel)
  - x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (Andrew Cooper)
  - sched: sch_cake: add bounds checks to host bulk flow fairness counts (Toke Høiland-Jørgensen)
  - usb: atm: cxacru: fix a flaw in existing endpoint checks (Nikita Zhandarovich)
  - x86/xen: fix xen_hypercall_hvm() to not clobber %rbx (Juergen Gross)
  - x86/xen: add FRAME_END to xen_hypercall_hvm() (Juergen Gross)
  - ocfs2: fix incorrect CPU endianness conversion causing mount failure (Heming Zhao)
  - usb: dwc3: Set SUSPENDENABLE soon after phy init (Thinh Nguyen)
  - Revert "btrfs: avoid monopolizing a core when activating a swap file" (Koichiro Den)
  - Revert "media: uvcvideo: Require entities to have a non-zero unique ID" (Thadeu Lima de Souza Cascardo)
  - netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (Cong Wang)


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-308.178.1.el9uek]
changelog:
  - perf dso: fix dso__is_kallsyms() check (Stephen Brennan)  [Orabug: 37709864]  
  - scsi: storvsc: Set correct data length for sending SCSI command without payload (Long Li)  [Orabug: 37681137]  
  - dyndbg: export ddebug_add_module/ddebug_remove_module (Julian Pidancet)  [Orabug: 37629344]  
  - kallsyms: add module_kallsyms_on_each_symbol_locked (Julian Pidancet)  [Orabug: 37629344]  
  - kallsyms: export module_kallsyms_on_each_symbol (Julian Pidancet)  [Orabug: 37629344]  
  - rds: ib: Make traffic_class visible to user-space (Håkon Bugge)  [Orabug: 37350892]  
  - rds: ib: Remove incorrect update of the path record sl and qos_class fields (Håkon Bugge)  [Orabug: 37350892]  
  - selftest/vm: Add -O2 in CFLAGS to Makefile to avoid possible failure (Yifei Liu)  [Orabug: 37197150]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-308.179.3.el9uek]
changelog:
  - uek-rpm: Build Bluefield 3 kernel for OL9 (Dave Kleikamp)  [Orabug: 37763488]  
  - uek-rpm: Add emb3 config and core list for OL9 (Dave Kleikamp)  [Orabug: 37763488]  
  - udf: Fix directory iteration for longer tail extents (Jan Kara)  [Orabug: 37761829]  
  - uek-rpm: install the perf exec dir (Stephen Brennan)  [Orabug: 37757734]  
  - perf probe: Improve log for long event name failure (Leo Yan)  [Orabug: 37752593]  
  - perf probe: Check group string length (Leo Yan)  [Orabug: 37752593]  
  - perf probe: Use the MAX_EVENT_NAME_LEN macro (Leo Yan)  [Orabug: 37752593]  
  - perf probe-event: Better error message for a too-long probe name (Dima Kogan)  [Orabug: 37752593]  
  - rds: ib: Do not attempt to insert RDMA exthdr twice (Håkon Bugge)  [Orabug: 37721762]  
  - x86/sev: Harden #VC instruction emulation somewhat (Borislav Petkov (AMD))  [Orabug: 37687865]  {CVE-2024-25743} {CVE-2024-25742} 
  - x86/entry: Do not allow external 0x80 interrupts (Thomas Gleixner)  [Orabug: 37687865]  {CVE-2024-25743} {CVE-2024-25742} 
  - x86/entry: Convert INT 0x80 emulation to IDTENTRY (Thomas Gleixner)  [Orabug: 37687865]  {CVE-2024-25743} {CVE-2024-25742} 
  - x86/entry: Fixup objtool/ibt validation (Peter Zijlstra)  [Orabug: 37687865]  {CVE-2024-25743} {CVE-2024-25742} 
  - x86/sev: Mark the code returning to user space as syscall gap (Lai Jiangshan)  [Orabug: 37687865]  {CVE-2024-25743} {CVE-2024-25742} 
  - rds: ib: Fix racy send affinity work cancellation (Håkon Bugge)  [Orabug: 37607469]  
  - sched/deadline: Fix warning in migrate_enable for boosted tasks (Wander Lairson Costa)  [Orabug: 37433838]  {CVE-2024-56583} 
  - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Kirill A. Shutemov)  [Orabug: 36298741]  {CVE-2024-25744} 
  - x86/ia32: State that IA32 emulation is disabled (Borislav Petkov (AMD))  [Orabug: 36298741]  {CVE-2024-25744} 
  - x86: Make IA32_EMULATION boot time configurable (Nikolay Borisov)  [Orabug: 36298741]  {CVE-2024-25744} 
  - x86: Remove toolchain check for X32 ABI capability (Masahiro Yamada)  [Orabug: 36298741]  {CVE-2024-25744} 
  - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Nikolay Borisov)  [Orabug: 36298741]  {CVE-2024-25744} 
  - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Nikolay Borisov)  [Orabug: 36298741]  {CVE-2024-25744} 
  - x86/entry: Compile entry_SYSCALL32_ignore() unconditionally (Nikolay Borisov)  [Orabug: 36298741]  {CVE-2024-25744} 
  - x86/entry: Rename ignore_sysret() (Nikolay Borisov)  [Orabug: 36298741]  {CVE-2024-25744} 
  - x86: Introduce ia32_enabled() (Nikolay Borisov)  [Orabug: 36298741]  {CVE-2024-25744} 
  - x86: Fix misspelled Kconfig symbols (Lukas Bulwahn)  [Orabug: 36298741]  {CVE-2024-25744}


author: Brian Maly <brian.maly@oracle.com> [5.15.0-308.179.4.el9uek]
changelog:
  - Check concurrency before THP creation for file mappings in fault path (Prakash Sangappa)  [Orabug: 37608058]  
  - rds: ib: Fix NULL ptr deref in rds_ib_cq_follow_affinity (Håkon Bugge)  [Orabug: 37747825]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-308.179.5.el9uek]
changelog:
  - net: usb: usbnet: restore usb%d name exception for local mac addresses (Dominique Martinet)   
  - usbnet:fix NPE during rx_complete (Ying Lu)   
  - bpf: Use preempt_count() directly in bpf_send_signal_common() (Hou Tao)   
  - jfs: fix slab-out-of-bounds read in ea_get() (Qasim Ijaz)   
  - serial: 8250_dma: terminate correct DMA in tx_dma_flush() (John Keeping)   
  - ksmbd: fix multichannel connection failure (Namjae Jeon)   
  - rds: Tear down the copy-from-user cache before destroying rds_wq (Håkon Bugge)  [Orabug: 37716901]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-308.179.6.2.el9uek]
changelog:
  - x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Pawan Gupta)  [Orabug: 37920681]  
  - x86/bpf: Add IBHF call at end of classic BPF (Daniel Sneddon)  [Orabug: 37920681]  
  - x86/bpf: Call branch history clearing sequence on exit (Daniel Sneddon)  [Orabug: 37920681]  
  - selftest/x86/bugs: Add selftests for ITS (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956} 
  - x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956} 
  - x86/its: Add "vmexit" option to skip mitigation on some CPUs (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956} 
  - x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956} 
  - x86/its: Add support for ITS-safe return thunk (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956} 
  - x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956} 
  - x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956} 
  - Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956} 
  - x86/alternatives: Remove faulty optimization (Josh Poimboeuf)  [Orabug: 37863726]  {CVE-2024-28956} 
  - x86/alternative: Optimize returns patching (Borislav Petkov (AMD))  [Orabug: 37863726]  {CVE-2024-28956}


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-308.179.6.2.el9uek]
changelog:
  - x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Pawan Gupta)  [Orabug: 37920681]
  - x86/bpf: Add IBHF call at end of classic BPF (Daniel Sneddon)  [Orabug: 37920681]
  - x86/bpf: Call branch history clearing sequence on exit (Daniel Sneddon)  [Orabug: 37920681]
  - selftest/x86/bugs: Add selftests for ITS (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956}
  - x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956}
  - x86/its: Add "vmexit" option to skip mitigation on some CPUs (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956}
  - x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956}
  - x86/its: Add support for ITS-safe return thunk (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956}
  - x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956}
  - x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956}
  - Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956}
  - x86/alternatives: Remove faulty optimization (Josh Poimboeuf)  [Orabug: 37863726]  {CVE-2024-28956}
  - x86/alternative: Optimize returns patching (Borislav Petkov (AMD))  [Orabug: 37863726]  {CVE-2024-28956}


author: Brian Maly <brian.maly@oracle.com> [5.15.0-308.179.6.3.el9uek]
changelog:
  - x86/bugs: Enabling Retbleed and SRSO mitigation can taint the kernel (Alexandre Chartre)  [Orabug: 37937056]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-308.179.6.el9uek]
changelog:
  - net: bridge: IP defragmentation failing for jumboframes (Venkat Venkatsubra)  [Orabug: 37847171]  
  - uek-rpm: remove .el9 from shim version (Samasth Norway Ananda)  [Orabug: 37834731]  
  - RDS: avoid using offlined CPU during reconnect (Arumugam Kolappan)  [Orabug: 37783021]  
  - net/mlx5e: Rely on reqid in IPsec tunnel mode (Leon Romanovsky)  [Orabug: 37710815]  
  - net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (Leon Romanovsky)  [Orabug: 37710815]  
  - net/mlx5: Clear port select structure when fail to create (Mark Zhang)  [Orabug: 37710815]  
  - net/mlx5: SF, Fix add port error handling (Chris Mi)  [Orabug: 37710815]  
  - net/mlx5: Fix variable not being completed when function returns (Chenguang Zhao)  [Orabug: 37710815]  
  - net/mlx5e: Keep netdev when leave switchdev for devlink set legacy only (Jianbo Liu)  [Orabug: 37710815]  
  - net/mlx5e: Skip restore TC rules for vport rep without loaded flag (Jianbo Liu)  [Orabug: 37710815]  
  - net/mlx5e: macsec: Maintain TX SA from encoding_sa (Dragos Tatulea)  [Orabug: 37710815]  
  - net/mlx5e: Remove workaround to avoid syndrome for internal port (Jianbo Liu)  [Orabug: 37710815]  
  - net/mlx5e: SD, Use correct mdev to build channel param (Tariq Toukan)  [Orabug: 37710815]  
  - mlxsw: spectrum_acl_flex_keys: Use correct key block on Spectrum-4 (Ido Schimmel)  [Orabug: 37710815]  
  - net/mlx5e: clear xdp features on non-uplink representors (William Tu)  [Orabug: 37710815]  
  - net/mlx5: Fix msix vectors to respect platform limit (Parav Pandit)  [Orabug: 37710815]  
  - mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (Ido Schimmel)  [Orabug: 37710815]  
  - mlxsw: spectrum_ptp: Add missing verification before pushing Tx header (Amit Cohen)  [Orabug: 37710815]  
  - net/mlx5e: Don't call cleanup on profile rollback failure (Cosmin Ratiu)  [Orabug: 37710815]  
  - net/mlx5: Fix command bitmask initialization (Shay Drory)  [Orabug: 37710815]  
  - net/mlx5: Check for invalid vector index on EQ creation (Maher Sanalla)  [Orabug: 37710815]  
  - mlxsw: spectrum_acl_flex_keys: Constify struct mlxsw_afk_element_inst (Christophe JAILLET)  [Orabug: 37710815]  
  - net: Fix netns for ip_tunnel_init_flow() (Xiao Liang)  [Orabug: 37710815]  
  - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_xmit() (Ido Schimmel)  [Orabug: 37710815]  
  - ip_tunnel: annotate data-races around t->parms.link (Eric Dumazet)  [Orabug: 37710815]  
  - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_md_tunnel_xmit() (Ido Schimmel)  [Orabug: 37710815]  
  - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_bind_dev() (Ido Schimmel)  [Orabug: 37710815]  
  - net/mlx5e: SHAMPO, Fix overflow of hd_per_wq (Dragos Tatulea)  [Orabug: 37710815]  
  - net/mlx5e: SHAMPO, Increase timeout to improve latency (Dragos Tatulea)  [Orabug: 37710815]  
  - net/mlx5: Verify support for scheduling element and TSAR type (Carolina Jubran)  [Orabug: 37710815]  
  - net/mlx5e: Enable remove flow for hard packet limit (Jianbo Liu)  [Orabug: 37710815]  
  - net/mlx5: Use set number of max EQs (Daniel Jurgens)  [Orabug: 37710815]  
  - net/mlx5: IFC updates for SF max IO EQs (Daniel Jurgens)  [Orabug: 37710815]  
  - net/mlx5e: Approximate IPsec per-SA payload data bytes count (Leon Romanovsky)  [Orabug: 37710815]  
  - net/mlx5e: Present succeeded IPsec SA bytes and packet (Leon Romanovsky)  [Orabug: 37710815]  
  - net/mlx5: Use max_num_eqs_24b capability if set (Daniel Jurgens)  [Orabug: 37710815]  
  - net/mlx5: IFC updates for changing max EQs (Daniel Jurgens)  [Orabug: 37710815]  
  - net/mlx5: Correct TASR typo into TSAR (Cosmin Ratiu)  [Orabug: 37710815]  
  - net/mlx5e: SHAMPO, Re-enable HW-GRO (Yoray Zack)  [Orabug: 37710815]  
  - net/mlx5e: SHAMPO, Use KSMs instead of KLMs (Yoray Zack)  [Orabug: 37710815]  
  - net/mlx5e: Fix netif state handling (Shay Drory)  [Orabug: 37710815]  
  - net/mlx5e: RSS, Block XOR hash with over 128 channels (Carolina Jubran)  [Orabug: 37710815]  
  - net/mlx5: Support matching on l4_type for ttc_table (Jianbo Liu)  [Orabug: 37710815]  
  - net/mlx5: Enable SD feature (Tariq Toukan)  [Orabug: 37710815]  
  - net/mlx5e: Block TLS device offload on combined SD netdev (Tariq Toukan)  [Orabug: 37710815]  
  - net/mlx5e: Support per-mdev queue counter (Tariq Toukan)  [Orabug: 37710815]  
  - net/mlx5e: Support cross-vhca RSS (Tariq Toukan)  [Orabug: 37710815]  
  - net/mlx5e: Let channels be SD-aware (Tariq Toukan)  [Orabug: 37710815]  
  - net/mlx5e: Connect mlx5 IPsec statistics with XFRM core (Leon Romanovsky)  [Orabug: 37710815]  
  - xfrm: get global statistics from the offloaded device (Leon Romanovsky)  [Orabug: 37710815]  
  - RDS: avoid queueing delayed work on an offlined cpu (Praveen Kumar Kannoju)  [Orabug: 37260584] [Orabug: 37551309]  
  - uek-rpm/kernel-uek.spec: Set DEFAULTKERNEL correctly during %postun (Vijay Kumar)  [Orabug: 37376706]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-309.179.1.el9uek]
changelog:
  - x86/microcode/AMD: Clean the cache if update did not load microcode (Boris Ostrovsky)  [Orabug: 37800728]  
  - x86/microcode/AMD: Add finalize_late_load() microcode_op (Boris Ostrovsky)  [Orabug: 37800728]  
  - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Borislav Petkov (AMD))  [Orabug: 37800728]  
  - x86/microcode/AMD: Add some forgotten models to the SHA check (Borislav Petkov (AMD))  [Orabug: 37800728]  
  - x86/microcode/AMD: Load only SHA256-checksummed patches (Borislav Petkov (AMD))  [Orabug: 37800728]  
  - x86/microcode/AMD: Flush patch buffer mapping after application (Borislav Petkov (AMD))  [Orabug: 37800728]  
  - x86/microcode/AMD: Stash BSP's CPUID(1).EAX (Boris Ostrovsky)  [Orabug: 37800728]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-309.180.3.el9uek]
changelog:
  - net/mlx5: Reclaim max 50K pages at once (Anand Khoje)  [Orabug: 36933755]  
  - x86/sev: Fix position dependent variable references in startup code (Ard Biesheuvel)  [Orabug: 37356711]  
  - x86/PCI: Export find_cap() to be used in early PCI code (Rayan Dasoriya)  [Orabug: 37356711]  
  - x86/quirks: Scan all busses for early PCI quirks (Rayan Dasoriya)  [Orabug: 37356711]  
  - x86/quirks: Add parameter to clear MSIs early on boot (Rayan Dasoriya)  [Orabug: 37356711]  
  - iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (Vasant Hegde)  [Orabug: 37356711]  
  - iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (Vasant Hegde)  [Orabug: 37356711]  
  - iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (Vasant Hegde)  [Orabug: 37356711]  
  - iommu/amd: Use put_pages_list (Matthew Wilcox (Oracle))  [Orabug: 37356711]  
  - x86/sev: Make enc_dec_hypercall() accept a size instead of npages (Steve Rutherford)  [Orabug: 37356711]  
  - iommu/amd: Simplify pagetable freeing (Robin Murphy)  [Orabug: 37356711]  
  - x86/kvm: Add kexec support for SEV Live Migration. (Ashish Kalra)  [Orabug: 37356711]  
  - nfsd: allow layout state to be admin-revoked. (NeilBrown)  [Orabug: 37644985]  
  - nfsd: allow delegation state ids to be revoked and then freed (NeilBrown)  [Orabug: 37644985]  
  - nfsd: allow open state ids to be revoked and then freed (NeilBrown)  [Orabug: 37644985]  
  - nfsd: allow lock state ids to be revoked and then freed (NeilBrown)  [Orabug: 37644985]  
  - nfsd: allow admin-revoked NFSv4.0 state to be freed. (NeilBrown)  [Orabug: 37644985]  
  - nfsd: report in /proc/fs/nfsd/clients/*/states when state is admin-revoke (NeilBrown)  [Orabug: 37644985]  
  - nfsd: allow state with no file to appear in /proc/fs/nfsd/clients/*/states (NeilBrown)  [Orabug: 37644985]  
  - nfsd: prepare for supporting admin-revocation of state (NeilBrown)  [Orabug: 37644985]  
  - nfsd: split sc_status out of sc_type (NeilBrown)  [Orabug: 37644985]  
  - nfsd: remove stale comment in nfs4_show_deleg() (NeilBrown)  [Orabug: 37644985]  
  - nfsd: avoid race after unhash_delegation_locked() (NeilBrown)  [Orabug: 37644985]  
  - nfsd: don't call functions with side-effecting inside WARN_ON() (NeilBrown)  [Orabug: 37644985]  
  - NFSD: Add nfsd_seq4_status trace event (Chuck Lever)  [Orabug: 37644985]  
  - NFSD: Clean up nfsd4_encode_layoutreturn() (Chuck Lever)  [Orabug: 37644985]  
  - NFSD: Make @lgp parameter of ->encode_layoutget a const pointer (Chuck Lever)  [Orabug: 37644985]  
  - NFSD: Clean up nfsd4_encode_stateid() (Chuck Lever)  [Orabug: 37644985]  
  - NFSD: Add simple u32, u64, and bool encoders (Chuck Lever)  [Orabug: 37644985]  
  - NFSD: Add encoders for NFSv4 clientids and verifiers (Chuck Lever)  [Orabug: 37644985]  
  - nfsd: add some kerneldoc comments for stateid preprocessing functions (Jeff Layton)  [Orabug: 37644985]  
  - nfsd: eliminate find_deleg_file_locked (Jeff Layton)  [Orabug: 37644985]  
  - nfsd: fix potential race in nfs4_find_file (Jeff Layton)  [Orabug: 37644985]  
  - vhost-scsi: Fix vhost_scsi_send_status() (Dongli Zhang)  [Orabug: 37840544]  
  - vhost-scsi: Fix vhost_scsi_send_bad_target() (Dongli Zhang)  [Orabug: 37840544]  
  - vhost-scsi: protect vq->log_used with vq->mutex (Dongli Zhang)  [Orabug: 37840544]  
  - vhost-scsi: Reduce response iov mem use (Mike Christie)  [Orabug: 37840544]  
  - vhost-scsi: Allocate iov_iter used for unaligned copies when needed (Mike Christie)  [Orabug: 37840544]  
  - vhost-scsi: Stop duplicating se_cmd fields (Mike Christie)  [Orabug: 37840544]  
  - vhost-scsi: Dynamically allocate scatterlists (Mike Christie)  [Orabug: 37840544]  
  - vhost-scsi: Return queue full for page alloc failures during copy (Mike Christie)  [Orabug: 37840544]  
  - vhost-scsi: Add better resource allocation failure handling (Mike Christie)  [Orabug: 37840544]  
  - vhost-scsi: Allocate T10 PI structs only when enabled (Mike Christie)  [Orabug: 37840544]  
  - vhost-scsi: Reduce mem use by moving upages to per queue (Mike Christie)  [Orabug: 37840544]  
  - scsi: target: core: Use RCU helpers for INQUIRY t10_alua_tg_pt_gp (Mike Christie)  [Orabug: 37840544]  
  - scsi: target: Perform ALUA group changes in one step (Mike Christie)  [Orabug: 37840544]  
  - scsi: target: Replace lun_tg_pt_gp_lock with rcu in I/O path (Mike Christie)  [Orabug: 37840544]  
  - scsi: target: Fix write perf due to unneeded throttling (Mike Christie)  [Orabug: 37840544]  
  - vhost scsi: Allow user to control num virtqueues (Mike Christie)  [Orabug: 37840544]  
  - vhost-scsi: Rename vhost_scsi_iov_to_sgl (Mike Christie)  [Orabug: 37840544]  
  - vhost-scsi: unbreak any layout for response (Jason Wang)  [Orabug: 37840544]  
  - Revert "vhost-scsi: protect vq->log_base with vq->mutex" (Mike Christie)  [Orabug: 37840544]  
  - Revert "vhost_scsi: log write descriptors" (Mike Christie)  [Orabug: 37840544]  
  - x86/bugs: Enabling Retbleed and SRSO mitigation can taint the kernel (Alexandre Chartre)  [Orabug: 37945824]  
  - x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Pawan Gupta)  [Orabug: 37945831]  
  - x86/bpf: Add IBHF call at end of classic BPF (Daniel Sneddon)  [Orabug: 37945831]  
  - x86/bpf: Call branch history clearing sequence on exit (Daniel Sneddon)  [Orabug: 37945831]  
  - selftest/x86/bugs: Add selftests for ITS (Pawan Gupta)  [Orabug: 37945842]  {CVE-2024-28956} 
  - x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta)  [Orabug: 37945842]  {CVE-2024-28956} 
  - x86/its: Add "vmexit" option to skip mitigation on some CPUs (Pawan Gupta)  [Orabug: 37945842]  {CVE-2024-28956} 
  - x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta)  [Orabug: 37945842]  {CVE-2024-28956} 
  - x86/its: Add support for ITS-safe return thunk (Pawan Gupta)  [Orabug: 37945842]  {CVE-2024-28956} 
  - x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta)  [Orabug: 37945842]  {CVE-2024-28956} 
  - x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta)  [Orabug: 37945842]  {CVE-2024-28956} 
  - Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta)  [Orabug: 37945842]  {CVE-2024-28956} 
  - x86/alternatives: Remove faulty optimization (Josh Poimboeuf)  [Orabug: 37945842]  {CVE-2024-28956} 
  - x86/alternative: Optimize returns patching (Borislav Petkov (AMD))  [Orabug: 37945842]  {CVE-2024-28956}


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-4.60.1.el9uek]
changelog:
  - net: mana: Add the Linux MANA PF driver (Dexuan Cui)  [Orabug: 34405108]  
  - rds: cong: Make rds_cong_wait an array to reduce lock contention (Håkon Bugge)  [Orabug: 34488341]  
  - rds: cong: Make rs_cong_notify and rs_cong_mask atomic64_t (Håkon Bugge)  [Orabug: 34488341]  
  - Revert "cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()" (Imran Khan)  [Orabug: 34620700]  
  - Revert "cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock" (Imran Khan)  [Orabug: 34620700]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-4.70.5.2.el9uek]
changelog:
  - Revert "sched: Remove the limitation of WF_ON_CPU on wakelist if wakee cpu is idle" (Samasth Norway Ananda)  [Orabug: 34783367]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-5.76.2.el9uek]
changelog:
  - LTS version: v5.15.76 (Jack Vogel)   
  - mm: /proc/pid/smaps_rollup: fix no vma's null-deref (Seth Jenkins)   
  - mmc: core: Add SD card quirk for broken discard (Avri Altman)   
  - Makefile.debug: re-enable debug info for .S files (Nick Desaulniers)   
  - x86/Kconfig: Drop check for -mabi=ms for CONFIG_EFI_STUB (Nathan Chancellor)   
  - ACPI: video: Force backlight native for more TongFang devices (Werner Sembach)   
  - perf: Skip and warn on unknown format 'configN' attrs (Rob Herring)   
  - mmc: sdhci-tegra: Use actual clock rate for SW tuning correction (Prathamesh Shete)   
  - tracing: Do not free snapshot if tracer is on cmdline (Steven Rostedt (Google))   
  - tracing: Simplify conditional compilation code in tracing_set_tracer() (sunliming)   
  - ksmbd: fix incorrect handling of iterate_dir (Namjae Jeon)   
  - ksmbd: handle smb2 query dir request for OutputBufferLength that is too small (Namjae Jeon)   
  - arm64: mte: move register initialization to C (Peter Collingbourne)   
  - fs: dlm: fix invalid derefence of sb_lvbptr (Alexander Aring)   
  - iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar)   
  - iommu/vt-d: Allow NVS regions in arch_rmrr_sanity_check() (Charlotte Tan)   
  - net: phy: dp83822: disable MDI crossover status change interrupt (Felix Riemann)   
  - net: sched: fix race condition in qdisc_graft() (Eric Dumazet)   
  - net: hns: fix possible memory leak in hnae_ae_register() (Yang Yingliang)   
  - wwan_hwsim: fix possible memory leak in wwan_hwsim_dev_new() (Yang Yingliang)   
  - sfc: include vport_id in filter spec hash and equal() (Pieter Jansen van Vuuren)   
  - net: sched: sfb: fix null pointer access issue when sfb_init() fails (Zhengchao Shao)   
  - net: sched: delete duplicate cleanup of backlog and qlen (Zhengchao Shao)   
  - net: sched: cake: fix null pointer access issue when cake_init() fails (Zhengchao Shao)   
  - nvmet: fix workqueue MEM_RECLAIM flushing dependency (Sagi Grimberg)   
  - nvme-hwmon: kmalloc the NVME SMART log buffer (Serge Semin)   
  - nvme-hwmon: consistently ignore errors from nvme_hwmon_init (Christoph Hellwig)   
  - netfilter: nf_tables: relax NFTA_SET_ELEM_KEY_END set flags requirements (Pablo Neira Ayuso)   
  - ionic: catch NULL pointer issue on reconfig (Brett Creeley)   
  - net: hsr: avoid possible NULL deref in skb_clone() (Eric Dumazet)   
  - dm: remove unnecessary assignment statement in alloc_dev() (Genjian Zhang)   
  - cifs: Fix xid leak in cifs_ses_add_channel() (Zhang Xiaoxu)   
  - cifs: Fix xid leak in cifs_flock() (Zhang Xiaoxu)   
  - cifs: Fix xid leak in cifs_copy_file_range() (Zhang Xiaoxu)   
  - cifs: Fix xid leak in cifs_create() (Zhang Xiaoxu)   
  - udp: Update reuse->has_conns under reuseport_lock. (Kuniyuki Iwashima)   
  - scsi: lpfc: Fix memory leak in lpfc_create_port() (Rafael Mendonca)   
  - net: phylink: add mac_managed_pm in phylink_config structure (Shenwei Wang)   
  - net: phy: dp83867: Extend RX strap quirk for SGMII mode (Harini Katakam)   
  - net/atm: fix proc_mpc_write incorrect return value (Xiaobo Liu)   
  - sfc: Change VF mac via PF as first preference if available. (Jonathan Cooper)   
  - HID: magicmouse: Do not set BTN_MOUSE on double report (José Expósito)   
  - i40e: Fix DMA mappings leak (Jan Sokolowski)   
  - tipc: fix an information leak in tipc_topsrv_kern_subscr (Alexander Potapenko)   
  - tipc: Fix recognition of trial period (Mark Tomlinson)   
  - ACPI: extlog: Handle multiple records (Tony Luck)   
  - drm/vc4: Add module dependency on hdmi-codec (Maxime Ripard)   
  - btrfs: fix processing of delayed tree block refs during backref walking (Filipe Manana)   
  - btrfs: fix processing of delayed data refs during backref walking (Filipe Manana)   
  - x86/topology: Fix duplicated core ID within a package (Zhang Rui)   
  - x86/topology: Fix multiple packages shown on a single-package system (Zhang Rui)   
  - media: venus: dec: Handle the case where find_format fails (Bryan O'Donoghue)   
  - media: mceusb: set timeout to at least timeout provided (Sean Young)   
  - media: ipu3-imgu: Fix NULL pointer dereference in active selection access (Sakari Ailus)   
  - KVM: arm64: vgic: Fix exit condition in scan_its_table() (Eric Ren)   
  - kvm: Add support for arch compat vm ioctls (Alexander Graf)   
  - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages (Rik van Riel)   
  - drm/amdgpu: fix sdma doorbell init ordering on APUs (Alex Deucher)   
  - cpufreq: qcom: fix memory leak in error path (Fabien Parent)   
  - x86/resctrl: Fix min_cbm_bits for AMD (Babu Moger)   
  - ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS (Kai-Heng Feng)   
  - ata: ahci-imx: Fix MODULE_ALIAS (Alexander Stein)   
  - hwmon/coretemp: Handle large core ID value (Zhang Rui)   
  - x86/microcode/AMD: Apply the patch early on every logical thread (Borislav Petkov)   
  - i2c: qcom-cci: Fix ordering of pm_runtime_xx and i2c_add_adapter (Bryan O'Donoghue)   
  - cpufreq: qcom: fix writes in read-only memory region (Fabien Parent)   
  - selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context() (GONG, Ruiqi)   
  - ocfs2: fix BUG when iput after ocfs2_mknod fails (Joseph Qi)   
  - ocfs2: clear dinode links count in case of error (Joseph Qi)   
  - btrfs: enhance unsupported compat RO flags handling (Qu Wenruo)   
  - perf/x86/intel/pt: Relax address filter validation (Adrian Hunter)   
  - arm64: errata: Remove AES hwcap for COMPAT tasks (James Morse)   
  - usb: gadget: uvc: improve sg exit condition (Michael Grzeschik)   
  - usb: gadget: uvc: giveback vb2 buffer on req complete (Michael Grzeschik)   
  - usb: gadget: uvc: rework uvcg_queue_next_buffer to uvcg_complete_buffer (Michael Grzeschik)   
  - usb: gadget: uvc: use on returned header len in video_encode_isoc_sg (Michael Grzeschik)   
  - usb: gadget: uvc: consistently use define for headerlen (Michael Grzeschik)   
  - arm64/mm: Consolidate TCR_EL1 fields (Anshuman Khandual)   
  - r8152: add PID for the Lenovo OneLink+ Dock (Jean-Francois Le Fillatre)   
  - LTS version: v5.15.75 (Jack Vogel)   
  - io-wq: Fix memory leak in worker creation (Rafael Mendonca)   
  - gcov: support GCC 12.1 and newer compilers (Martin Liska)   
  - thermal: intel_powerclamp: Use first online CPU as control_cpu (Rafael J. Wysocki)   
  - ext4: continue to expand file system when the target size doesn't reach (Jerry Lee 李修賢)   
  - lib/Kconfig.debug: Add check for non-constant .{s,u}leb128 support to DWARF5 (Nathan Chancellor)   
  - Kconfig.debug: add toolchain checks for DEBUG_INFO_DWARF_TOOLCHAIN_DEFAULT (Masahiro Yamada)   
  - Kconfig.debug: simplify the dependency of DEBUG_INFO_DWARF4/5 (Masahiro Yamada)   
  - drm/amd/display: Fix build breakage with CONFIG_DEBUG_FS=n (Nathan Chancellor)   
  - net/ieee802154: don't warn zero-sized raw_sendmsg() (Tetsuo Handa)   
  - Revert "net/ieee802154: reject zero-sized raw_sendmsg()" (Alexander Aring)   
  - net: ethernet: ti: davinci_mdio: fix build for mdio bitbang uses (Randy Dunlap)   
  - blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() (Yu Kuai)   
  - ALSA: usb-audio: Fix last interface check for registration (Takashi Iwai)   
  - net: ieee802154: return -EINVAL for unknown addr type (Alexander Aring)   
  - mm: hugetlb: fix UAF in hugetlb_handle_userfault (Liu Shixin)   
  - io_uring/rw: fix unexpected link breakage (Pavel Begunkov)   
  - io_uring/rw: fix error'ed retry return values (Pavel Begunkov)   
  - io_uring/rw: fix short rw error handling (Pavel Begunkov)   
  - io_uring: correct pinned_vm accounting (Pavel Begunkov)   
  - io_uring/af_unix: defer registered files gc to io_uring release (Pavel Begunkov)   
  - perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc (Adrian Hunter)   
  - clk: bcm2835: Round UART input clock up (Ivan T. Ivanov)   
  - clk: bcm2835: Make peripheral PLLC critical (Maxime Ripard)   
  - usb: idmouse: fix an uninit-value in idmouse_open (Dongliang Mu)   
  - nvmet-tcp: add bounds check on Transfer Tag (Varun Prakash)   
  - nvme: copy firmware_rev on each init (Keith Busch)   
  - ext2: Use kvmalloc() for group descriptor array (Jan Kara)   
  - scsi: tracing: Fix compile error in trace_array calls when TRACING is disabled (Arun Easi)   
  - staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() (Xiaoke Wang)   
  - staging: rtl8723bs: fix potential memory leak in rtw_init_drv_sw() (Xiaoke Wang)   
  - Revert "usb: storage: Add quirk for Samsung Fit flash" (sunghwan jung)   
  - usb: dwc3: core: Enable GUCTL1 bit 10 for fixing termination error after resume bug (Piyush Mehta)   
  - arm64: dts: imx8mp: Add snps,gfladj-refclk-lpm-sel quirk to USB nodes (Alexander Stein)   
  - usb: musb: Fix musb_gadget.c rxstate overflow bug (Robin Guo)   
  - usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() (Jianglei Nie)   
  - md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d (Logan Gunthorpe)   
  - eventfd: guard wake_up in eventfd fs calls as well (Dylan Yudaken)   
  - HID: roccat: Fix use-after-free in roccat_read() (Hyunwoo Kim)   
  - soundwire: intel: fix error handling on dai registration issues (Pierre-Louis Bossart)   
  - soundwire: cadence: Don't overwrite msg->buf during write commands (Richard Fitzgerald)   
  - bcache: fix set_at_max_writeback_rate() for multiple attached devices (Coly Li)   
  - ata: libahci_platform: Sanity check the DT child nodes number (Serge Semin)   
  - blk-throttle: prevent overflow while calculating wait time (Yu Kuai)   
  - staging: vt6655: fix potential memory leak (Nam Cao)   
  - power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() (Wei Yongjun)   
  - iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (Yicong Yang)   
  - nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (Shigeru Yoshida)   
  - scsi: 3w-9xxx: Avoid disabling device if failing to enable it (Letu Ren)   
  - dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent overflow (Vaishnav Achath)   
  - usb: host: xhci-plat: suspend/resume clks for brcm (Justin Chen)   
  - usb: host: xhci-plat: suspend and resume clocks (Justin Chen)   
  - clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate (Quanyang Wang)   
  - media: platform: fix some double free in meson-ge2d and mtk-jpeg and s5p-mfc (Hangyu Hua)   
  - media: cx88: Fix a null-ptr-deref bug in buffer_prepare() (Zheyu Ma)   
  - clk: zynqmp: Fix stack-out-of-bounds in strncpy` (Ian Nam)   
  - ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n (Alex Sverdlin)   
  - btrfs: don't print information about space cache or tree every remount (Maciej S. Szmigiero)   
  - btrfs: scrub: try to fix super block errors (Qu Wenruo)   
  - btrfs: dump extra info if one free space cache has more bitmaps than it should (Qu Wenruo)   
  - arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply (Sebastian Krzyszkowiak)   
  - kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT (Mark Brown)   
  - ARM: dts: imx6sx: add missing properties for sram (Alexander Stein)   
  - ARM: dts: imx6sll: add missing properties for sram (Alexander Stein)   
  - ARM: dts: imx6sl: add missing properties for sram (Alexander Stein)   
  - ARM: dts: imx6qp: add missing properties for sram (Alexander Stein)   
  - ARM: dts: imx6dl: add missing properties for sram (Alexander Stein)   
  - ARM: dts: imx6q: add missing properties for sram (Alexander Stein)   
  - ARM: dts: imx7d-sdb: config the max pressure for tsc2046 (Haibo Chen)   
  - drm/amd/display: Remove interface for periodic interrupt 1 (Aric Cyr)   
  - drm/dp: Don't rewrite link config when setting phy test pattern (Khaled Almahallawy)   
  - mmc: sdhci-msm: add compatible string check for sdm670 (Richard Acayan)   
  - drm/meson: explicitly remove aggregate driver at module unload time (Adrián Larumbe)   
  - drm/meson: reorder driver deinit sequence to fix use-after-free bug (Adrián Larumbe)   
  - drm/amdgpu: fix initial connector audio value (hongao)   
  - ASoC: SOF: pci: Change DMI match info to support all Chrome platforms (Jairaj Arava)   
  - platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading (Hans de Goede)   
  - platform/chrome: cros_ec: Notify the PM of wake events during resume (Jameson Thies)   
  - drm: panel-orientation-quirks: Add quirk for Anbernic Win600 (Maya Matuszczyk)   
  - drm/vc4: vec: Fix timings for VEC modes (Mateusz Kwiatkowski)   
  - ALSA: usb-audio: Register card at the last interface (Takashi Iwai)   
  - drm: bridge: dw_hdmi: only trigger hotplug event on link change (Lucas Stach)   
  - udmabuf: Set ubuf->sg = NULL if the creation of sg table fails (Vivek Kasireddy)   
  - drm/amd/display: fix overflow on MIN_I64 definition (David Gow)   
  - gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init() (Zeng Jingxiang)   
  - drm/komeda: Fix handling of atomic commits in the atomic_commit_tail hook (Liviu Dudau)   
  - drm: Prevent drm_copy_field() to attempt copying a NULL pointer (Javier Martinez Canillas)   
  - drm: Use size_t type for len variable in drm_copy_field() (Javier Martinez Canillas)   
  - drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() (Jianglei Nie)   
  - r8152: Rate limit overflow messages (Andrew Gaul)   
  - Bluetooth: L2CAP: Fix user-after-free (Luiz Augusto von Dentz)   
  - net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory (Liu Jian)   
  - hwmon: (sht4x) do not overflow clamping operation on 32-bit platforms (Jason A. Donenfeld)   
  - wifi: rt2x00: correctly set BBP register 86 for MT7620 (Daniel Golle)   
  - wifi: rt2x00: set SoC wmac clock register (Daniel Golle)   
  - wifi: rt2x00: set VGC gain for both chains of MT7620 (Daniel Golle)   
  - wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 (Daniel Golle)   
  - wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 (Daniel Golle)   
  - can: bcm: check the result of can_send() in bcm_can_tx() (Ziyang Xuan)   
  - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times (Luiz Augusto von Dentz)   
  - Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() (Tetsuo Handa)   
  - wifi: mt76: mt7921: reset msta->airtime_ac while clearing up hw value (Sean Wang)   
  - regulator: core: Prevent integer underflow (Patrick Rudolph)   
  - Bluetooth: btintel: Mark Intel controller to support LE_STATES quirk (Kiran K)   
  - wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() (Alexander Coffin)   
  - iavf: Fix race between iavf_close and iavf_reset_task (Michal Jaron)   
  - xfrm: Update ipcomp_scratches with NULL when freed (Khalid Masum)   
  - thunderbolt: Add back Intel Falcon Ridge end-to-end flow control workaround (Mika Westerberg)   
  - wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() (Tetsuo Handa)   
  - x86/mce: Retrieve poison range from hardware (Jane Chu)   
  - tcp: annotate data-race around tcp_md5sig_pool_populated (Eric Dumazet)   
  - openvswitch: Fix overreporting of drops in dropwatch (Mike Pattrick)   
  - openvswitch: Fix double reporting of drops in dropwatch (Mike Pattrick)   
  - net: ethernet: ti: davinci_mdio: Add workaround for errata i2329 (Ravi Gunasekaran)   
  - ice: set tx_tstamps when creating new Tx rings via ethtool (Jacob Keller)   
  - bpftool: Clear errno after libcap's checks (Quentin Monnet)   
  - wifi: brcmfmac: fix invalid address access when enabling SCAN log level (Wright Feng)   
  - NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data (Anna Schumaker)   
  - x86/entry: Work around Clang __bdos() bug (Kees Cook)   
  - ACPI: x86: Add a quirk for Dell Inspiron 14 2-in-1 for StorageD3Enable (Mario Limonciello)   
  - ARM: decompressor: Include .data.rel.ro.local (Kees Cook)   
  - thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash (Srinivas Pandruvada)   
  - powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue (Chao Qin)   
  - MIPS: BCM47XX: Cast memcmp() of function to (void *) (Kees Cook)   
  - cpufreq: intel_pstate: Add Tigerlake support in no-HWP mode (Doug Smythies)   
  - ACPI: tables: FPDT: Don't call acpi_os_map_memory() on invalid phys address (Hans de Goede)   
  - ACPI: video: Add Toshiba Satellite/Portege Z830 quirk (Arvid Norlander)   
  - rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE() (Zqiang)   
  - rcu: Back off upon fill_page_cache_func() allocation failure (Michal Hocko)   
  - rcu: Avoid triggering strict-GP irq-work when RCU is idle (Zqiang)   
  - fs: dlm: fix race in lowcomms (Alexander Aring)   
  - selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle (Stefan Berger)   
  - f2fs: fix to account FS_CP_DATA_IO correctly (Chao Yu)   
  - f2fs: fix race condition on setting FI_NO_EXTENT flag (Zhang Qilong)   
  - ACPI: APEI: do not add task_work to kernel thread to avoid memory leak (Shuai Xue)   
  - thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id (Vincent Knecht)   
  - crypto: cavium - prevent integer overflow loading firmware (Dan Carpenter)   
  - crypto: marvell/octeontx - prevent integer overflows (Dan Carpenter)   
  - kbuild: rpm-pkg: fix breakage when V=1 is used (Janis Schoetterl-Glausch)   
  - kbuild: remove the target in signal traps when interrupted (Masahiro Yamada)   
  - tracing/osnoise: Fix possible recursive locking in stop_per_cpu_kthreads (Nico Pache)   
  - tracing: kprobe: Make gen test module work in arm and riscv (Yipeng Zou)   
  - tracing: kprobe: Fix kprobe event gen test module on exit (Yipeng Zou)   
  - iommu/iova: Fix module config properly (Robin Murphy)   
  - cifs: return correct error in ->calc_signature() (Enzo Matsumiya)   
  - crypto: qat - fix DMA transfer direction (Damian Muszynski)   
  - crypto: inside-secure - Change swab to swab32 (Peter Harliman Liem)   
  - crypto: ccp - Release dma channels before dmaengine unrgister (Koba Ko)   
  - crypto: akcipher - default implementation for setting a private key (Ignat Korchagin)   
  - iommu/omap: Fix buffer overflow in debugfs (Dan Carpenter)   
  - cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset (Waiman Long)   
  - crypto: hisilicon/qm - fix missing put dfx access (Weili Qian)   
  - crypto: qat - fix default value of WDT timer (Lucas Segarra Fernandez)   
  - hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear() (Kshitiz Varshney)   
  - cgroup: Honor caller's cgroup NS when resolving path (Michal Koutný)   
  - hwrng: arm-smccc-trng - fix NO_ENTROPY handling (James Cowgill)   
  - crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr (Ye Weihua)   
  - crypto: sahara - don't sleep when in softirq (Zhengchao Shao)   
  - powerpc/pseries/vas: Pass hw_cpu_id to node associativity HCALL (Haren Myneni)   
  - powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe() (Li Huafei)   
  - powerpc: Fix SPE Power ISA properties for e500v1 platforms (Pali Rohár)   
  - powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5 (Nicholas Piggin)   
  - x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition (Vitaly Kuznetsov)   
  - powerpc: Fix fallocate and fadvise64_64 compat parameter combination (Rohan McLure)   
  - powerpc/powernv: add missing of_node_put() in opal_export_attrs() (Zheng Yongjun)   
  - powerpc/pci_dn: Add missing of_node_put() (Liang He)   
  - powerpc/sysdev/fsl_msi: Add missing of_node_put() (Liang He)   
  - powerpc/math_emu/efp: Include module.h (Nathan Chancellor)   
  - powerpc/configs: Properly enable PAPR_SCM in pseries_defconfig (Michael Ellerman)   
  - mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg (Jack Wang)   
  - mailbox: mpfs: account for mbox offsets while sending (Conor Dooley)   
  - mailbox: mpfs: fix handling of the reg property (Conor Dooley)   
  - clk: ast2600: BCLK comes from EPLL (Joel Stanley)   
  - clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe (Miaoqian Lin)   
  - clk: imx: scu: fix memleak on platform_device_add() fails (Lin Yujun)   
  - clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration (Stefan Wahren)   
  - clk: baikal-t1: Add SATA internal ref clock buffer (Serge Semin)   
  - clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent (Serge Semin)   
  - clk: baikal-t1: Fix invalid xGMAC PTP clock divider (Serge Semin)   
  - clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD (Serge Semin)   
  - spmi: pmic-arb: correct duplicate APID to PPID mapping logic (David Collins)   
  - usb: mtu3: fix failed runtime suspend in host only mode (Chunfeng Yun)   
  - dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() (Dave Jiang)   
  - clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent (Chen-Yu Tsai)   
  - mfd: sm501: Add check for platform_driver_register() (Jiasheng Jiang)   
  - mfd: fsl-imx25: Fix check for platform_get_irq() errors (Dan Carpenter)   
  - mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() (Christophe JAILLET)   
  - mfd: lp8788: Fix an error handling path in lp8788_probe() (Christophe JAILLET)   
  - mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() (Christophe JAILLET)   
  - mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() (Christophe JAILLET)   
  - fsi: core: Check error number after calling ida_simple_get (Jiasheng Jiang)   
  - RDMA/rxe: Fix resize_finish() in rxe_queue.c (Bob Pearson)   
  - clk: qcom: gcc-sm6115: Override default Alpha PLL regs (Adam Skladowski)   
  - clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical (Robert Marko)   
  - scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() (Mike Christie)   
  - scsi: iscsi: Run recv path from workqueue (Mike Christie)   
  - scsi: iscsi: Add recv workqueue helpers (Mike Christie)   
  - scsi: iscsi: Rename iscsi_conn_queue_work() (Mike Christie)   
  - scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() (Duoming Zhou)   
  - serial: 8250: Fix restoring termios speed after suspend (Pali Rohár)   
  - firmware: google: Test spinlock on panic path to avoid lockups (Guilherme G. Piccoli)   
  - slimbus: qcom-ngd-ctrl: allow compile testing without QCOM_RPROC_COMMON (Krzysztof Kozlowski)   
  - staging: vt6655: fix some erroneous memory clean-up loops (Nam Cao)   
  - phy: qualcomm: call clk_disable_unprepare in the error handling (Dongliang Mu)   
  - tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown (Sherry Sun)   
  - serial: 8250: Toggle IER bits on only after irq has been set up (Ilpo Järvinen)   
  - drivers: serial: jsm: fix some leaks in probe (Dan Carpenter)   
  - usb: gadget: function: fix dangling pnp_string in f_printer.c (Albert Briscoe)   
  - xhci: Don't show warning for reinit on known broken suspend (Mario Limonciello)   
  - IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers (Daisuke Matsuda)   
  - RDMA/cm: Use SLID in the work completion as the DLID in responder side (Mark Zhang)   
  - md/raid5: Remove unnecessary bio_put() in raid5_read_one_chunk() (David Sloan)   
  - md/raid5: Ensure stripe_fill happens on non-read IO with journal (Logan Gunthorpe)   
  - md: Replace snprintf with scnprintf (Saurabh Sengar)   
  - mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() (Dan Carpenter)   
  - ata: fix ata_id_has_dipm() (Niklas Cassel)   
  - ata: fix ata_id_has_ncq_autosense() (Niklas Cassel)   
  - ata: fix ata_id_has_devslp() (Niklas Cassel)   
  - ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() (Niklas Cassel)   
  - RDMA/siw: Fix QP destroy to wait for all references dropped. (Bernard Metzler)   
  - RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. (Bernard Metzler)   
  - RDMA/srp: Fix srp_abort() (Bart Van Assche)   
  - RDMA/irdma: Align AE id codes to correct flush code and event (Sindhu-Devale)   
  - mtd: rawnand: fsl_elbc: Fix none ECC mode (Pali Rohár)   
  - mtd: rawnand: intel: Remove undocumented compatible string (Martin Blumenstingl)   
  - mtd: rawnand: intel: Read the chip-select line from the correct OF node (Martin Blumenstingl)   
  - phy: phy-mtk-tphy: fix the phy type setting issue (Chunfeng Yun)   
  - phy: amlogic: phy-meson-axg-mipi-pcie-analog: Hold reference returned by of_get_parent() (Liang He)   
  - mtd: devices: docg3: check the return value of devm_ioremap() in the probe (William Dean)   
  - clk: qcom: sm6115: Select QCOM_GDSC (Dang Huynh)   
  - dyndbg: drop EXPORTed dynamic_debug_exec_queries (Jim Cromie)   
  - dyndbg: let query-modname override actual module name (Jim Cromie)   
  - dyndbg: fix module.dyndbg handling (Jim Cromie)   
  - dyndbg: fix static_branch manipulation (Jim Cromie)   
  - dmaengine: hisilicon: Add multi-thread support for a DMA channel (Jie Hai)   
  - dmaengine: hisilicon: Fix CQ head update (Jie Hai)   
  - dmaengine: hisilicon: Disable channels when unregister hisi_dma (Jie Hai)   
  - fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() (Dan Carpenter)   
  - misc: ocxl: fix possible refcount leak in afu_ioctl() (Hangyu Hua)   
  - RDMA/rxe: Fix the error caused by qp->sk (Zhu Yanjun)   
  - RDMA/rxe: Fix "kernel NULL pointer dereference" error (Zhu Yanjun)   
  - media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init (Miaoqian Lin)   
  - media: uvcvideo: Use entity get_cur in uvc_ctrl_set (Yunke Cao)   
  - media: uvcvideo: Fix memory leak in uvc_gpio_parse (José Expósito)   
  - media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start() (Xu Qiang)   
  - tty: xilinx_uartps: Fix the ignore_status (Shubhrajyoti Datta)   
  - media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop (Liang He)   
  - HSI: omap_ssi_port: Fix dma_map_sg error check (Jack Wang)   
  - HSI: omap_ssi: Fix refcount leak in ssi_probe (Miaoqian Lin)   
  - clk: tegra20: Fix refcount leak in tegra20_clock_init (Miaoqian Lin)   
  - clk: tegra: Fix refcount leak in tegra114_clock_init (Miaoqian Lin)   
  - clk: tegra: Fix refcount leak in tegra210_clock_init (Miaoqian Lin)   
  - clk: sprd: Hold reference returned by of_get_parent() (Liang He)   
  - clk: berlin: Add of_node_put() for of_get_parent() (Liang He)   
  - clk: qoriq: Hold reference returned by of_get_parent() (Liang He)   
  - clk: oxnas: Hold reference returned by of_get_parent() (Liang He)   
  - clk: meson: Hold reference returned by of_get_parent() (Liang He)   
  - usb: common: debug: Check non-standard control requests (Thinh Nguyen)   
  - RDMA/mlx5: Don't compare mkey tags in DEVX indirect mkey (Aharon Landau)   
  - iio: magnetometer: yas530: Change data type of hard_offsets to signed (Jakob Hauser)   
  - iio: ABI: Fix wrong format of differential capacitance channel ABI. (Jonathan Cameron)   
  - iio: inkern: fix return value in devm_of_iio_channel_get_by_name() (Nuno Sá)   
  - iio: inkern: only release the device node when done with it (Nuno Sá)   
  - iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume (Claudiu Beznea)   
  - iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq (Claudiu Beznea)   
  - iio: adc: at91-sama5d2_adc: check return status for pressure and touch (Claudiu Beznea)   
  - iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX (Claudiu Beznea)   
  - ARM: dts: exynos: fix polarity of VBUS GPIO of Origen (Dmitry Torokhov)   
  - arm64: ftrace: fix module PLTs with mcount (Mark Rutland)   
  - ext4: don't run ext4lazyinit for read-only filesystems (Josh Triplett)   
  - ARM: Drop CMDLINE_* dependency on ATAGS (Geert Uytterhoeven)   
  - ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family (Dmitry Torokhov)   
  - arm64: dts: ti: k3-j7200: fix main pinmux range (Matt Ranostay)   
  - soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA (Dmitry Osipenko)   
  - ia64: export memory_add_physaddr_to_nid to fix cxl build error (Randy Dunlap)   
  - ARM: dts: kirkwood: lsxl: remove first ethernet port (Michael Walle)   
  - ARM: dts: kirkwood: lsxl: fix serial line (Michael Walle)   
  - ARM: dts: turris-omnia: Fix mpp26 pin name and comment (Marek Behún)   
  - ARM: dts: imx6qdl-kontron-samx6i: hook up DDC i2c bus (Lucas Stach)   
  - soc: qcom: smem_state: Add refcounting for the 'state->of_node' (Liang He)   
  - soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() (Liang He)   
  - locks: fix TOCTOU race when granting write lease (Amir Goldstein)   
  - memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() (Liang He)   
  - memory: of: Fix refcount leak bug in of_get_ddr_timings() (Liang He)   
  - memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() (Liang He)   
  - ALSA: hda/hdmi: Don't skip notification handling during PM operation (Takashi Iwai)   
  - ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe (Zhang Qilong)   
  - ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe (Zhang Qilong)   
  - ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe (Zhang Qilong)   
  - ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe (Zhang Qilong)   
  - mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() (Christophe JAILLET)   
  - ALSA: dmaengine: increment buffer pointer atomically (Andreas Pape)   
  - ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() (Christophe JAILLET)   
  - ASoC: codecs: tx-macro: fix kcontrol put (Srinivas Kandagatla)   
  - drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() (Rafael Mendonca)   
  - drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa() (Kuogee Hsieh)   
  - drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx (Dmitry Baryshkov)   
  - ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API (Liang He)   
  - mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() (Christophe JAILLET)   
  - drm/amdgpu: Fix memory leak in hpd_rx_irq_create_workqueue() (Rafael Mendonca)   
  - drm/omap: dss: Fix refcount leak bugs (Liang He)   
  - drm/bochs: fix blanking (Gerd Hoffmann)   
  - ALSA: hda: beep: Simplify keep-power-at-enable behavior (Takashi Iwai)   
  - ASoC: rsnd: Add check for rsnd_mod_power_on (Jiasheng Jiang)   
  - drm/bridge: megachips: Fix a null pointer dereference bug (Zheyu Ma)   
  - drm/amdgpu: add missing pci_disable_device() in amdgpu_pmops_runtime_resume() (Yang Yingliang)   
  - platform/chrome: cros_ec_typec: Correct alt mode index (Prashant Malani)   
  - platform/x86: msi-laptop: Fix resource cleanup (Hans de Goede)   
  - platform/x86: msi-laptop: Fix old-ec check for backlight registering (Hans de Goede)   
  - ASoC: tas2764: Fix mute/unmute (Martin Povišer)   
  - ASoC: tas2764: Drop conflicting set_bias_level power setting (Martin Povišer)   
  - ASoC: tas2764: Allow mono streams (Martin Povišer)   
  - platform/chrome: fix memory corruption in ioctl (Dan Carpenter)   
  - platform/chrome: fix double-free in chromeos_laptop_prepare() (Rustam Subkhankulov)   
  - ASoC: mt6359: fix tests for platform_get_irq() failure (Dan Carpenter)   
  - drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node() (Liang He)   
  - drm/dp_mst: fix drm_dp_dpcd_read return value checks (Simon Ser)   
  - drm/bridge: parade-ps8640: Fix regulator supply order (Chen-Yu Tsai)   
  - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling (Dmitry Osipenko)   
  - drm/mipi-dsi: Detach devices when removing the host (Maxime Ripard)   
  - drm/bridge: Avoid uninitialized variable warning (Dan Carpenter)   
  - drm: bridge: adv7511: unregister cec i2c device after cec adapter (Alvin Šipraga)   
  - drm: bridge: adv7511: fix CEC power down control register offset (Alvin Šipraga)   
  - net: mvpp2: fix mvpp2 debugfs leak (Russell King (Oracle))   
  - once: add DO_ONCE_SLOW() for sleepable contexts (Eric Dumazet)   
  - net/ieee802154: reject zero-sized raw_sendmsg() (Tetsuo Handa)   
  - net: wwan: iosm: Call mutex_init before locking it (Maxim Mikityanskiy)   
  - bnx2x: fix potential memory leak in bnx2x_tpa_stop() (Jianglei Nie)   
  - hwmon: (pmbus/mp2888) Fix sensors readouts for MPS Multi-phase mp2888 controller (Oleksandr Shamray)   
  - spi: Ensure that sg_table won't be used after being freed (Marek Szyprowski)   
  - tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited (Neal Cardwell)   
  - sctp: handle the error returned from sctp_auth_asoc_init_active_key (Xin Long)   
  - mISDN: fix use-after-free bugs in l1oip timer handlers (Duoming Zhou)   
  - eth: alx: take rtnl_lock on resume (Jakub Kicinski)   
  - vhost/vsock: Use kvmalloc/kvfree for larger packets. (Junichi Uekawa)   
  - wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM (Bitterblue Smith)   
  - spi: s3c64xx: Fix large transfers with DMA (Vincent Whitchurch)   
  - netfilter: nft_fib: Fix for rpath check with VRF devices (Phil Sutter)   
  - xfrm: Reinject transport-mode packets through workqueue (Liu Jian)   
  - Bluetooth: hci_core: Fix not handling link timeouts propertly (Luiz Augusto von Dentz)   
  - i2c: mlxbf: support lock mechanism (Asmaa Mnebhi)   
  - skmsg: Schedule psock work if the cached skb exists on the psock (Liu Jian)   
  - spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe (Zhang Qilong)   
  - spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe (Zhang Qilong)   
  - x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype (Luciano Leão)   
  - x86/microcode/AMD: Track patch allocation size explicitly (Kees Cook)   
  - wifi: ath11k: fix number of VHT beamformee spatial streams (Jesus Fernandez Manzano)   
  - netfilter: conntrack: revisit the gc initial rescheduling bias (Antoine Tenart)   
  - netfilter: conntrack: fix the gc rescheduling delay (Antoine Tenart)   
  - Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure (Tetsuo Handa)   
  - bpf: Ensure correct locking around vulnerable function find_vpid() (Lee Jones)   
  - net: fs_enet: Fix wrong check in do_pd_setup (Zheng Yongjun)   
  - Bluetooth: RFCOMM: Fix possible deadlock on socket shutdown/release (Luiz Augusto von Dentz)   
  - wifi: mt76: mt7915: do not check state before configuring implicit beamform (Howard Hsu)   
  - wifi: mt76: mt7615: add mt7615_mutex_acquire/release in mt7615_sta_set_decap_offload (Lorenzo Bianconi)   
  - wifi: mt76: sdio: fix transmitting packet hangs (YN Chen)   
  - wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask (Bitterblue Smith)   
  - wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration (Bitterblue Smith)   
  - bpf: btf: fix truncated last_member_type_id in btf_struct_resolve (Lorenz Bauer)   
  - spi: meson-spicc: do not rely on busy flag in pow2 clk ops (Neil Armstrong)   
  - wifi: rtl8xxxu: Fix skb misuse in TX queue selection (Bitterblue Smith)   
  - spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() (Xu Qiang)   
  - spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() (Xu Qiang)   
  - selftests/xsk: Avoid use-after-free on ctx (Ian Rogers)   
  - wifi: rtw88: add missing destroy_workqueue() on error path in rtw_core_init() (Yang Yingliang)   
  - wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() (Dan Carpenter)   
  - Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend (Sean Wang)   
  - bpf: Use this_cpu_{inc|dec|inc_return} for bpf_task_storage_busy (Hou Tao)   
  - bpf: Propagate error from htab_lock_bucket() to userspace (Hou Tao)   
  - bpf: Disable preemption when increasing per-cpu map_locked (Hou Tao)   
  - xsk: Fix backpressure mechanism on Tx (Maciej Fijalkowski)   
  - x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register (Kohei Tarumizu)   
  - spi: mt7621: Fix an error message in mt7621_spi_probe() (Christophe JAILLET)   
  - bpftool: Fix a wrong type cast in btf_dumper_int (Lam Thai)   
  - wifi: mac80211: allow bw change during channel switch in mesh (Hari Chandrakanthan)   
  - bpf: Fix reference state management for synchronous callbacks (Kumar Kartikeya Dwivedi)   
  - leds: lm3601x: Don't use mutex after it was destroyed (Uwe Kleine-König)   
  - wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() (Wen Gong)   
  - wifi: rtlwifi: 8192de: correct checking of IQK reload (Ping-Ke Shih)   
  - NFSD: Fix handling of oversized NFSv4 COMPOUND requests (Chuck Lever)   
  - NFSD: Protect against send buffer overflow in NFSv2 READDIR (Chuck Lever)   
  - SUNRPC: Fix svcxdr_init_encode's buflen calculation (Chuck Lever)   
  - SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Chuck Lever)   
  - nfsd: Fix a memory leak in an error handling path (Christophe JAILLET)   
  - objtool: Preserve special st_shndx indexes in elf_update_symbol (Sami Tolvanen)   
  - ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE (Wang Kefeng)   
  - ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd() (Wang Kefeng)   
  - MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create() (Lin Yujun)   
  - MIPS: SGI-IP27: Free some unused memory (Christophe JAILLET)   
  - sh: machvec: Use char[] for section boundaries (Kees Cook)   
  - thermal: cpufreq_cooling: Check the policy first in cpufreq_cooling_register() (Xuewen Yan)   
  - ntfs3: rework xattr handlers and switch to POSIX ACL VFS helpers (Christian Brauner)   
  - userfaultfd: open userfaultfds with O_RDONLY (Ondrej Mosnacek)   
  - ima: fix blocking of security.ima xattrs of unsupported algorithms (Mimi Zohar)   
  - selinux: use "grep -E" instead of "egrep" (Greg Kroah-Hartman)   
  - smb3: must initialize two ACL struct fields to zero (Steve French)   
  - drm/amd/display: Fix vblank refcount in vrr transition (Yunxiang Li)   
  - drm/i915: Fix watermark calculations for gen12+ CCS+CC modifier (Ville Syrjälä)   
  - drm/i915: Fix watermark calculations for gen12+ MC CCS modifier (Ville Syrjälä)   
  - drm/i915: Fix watermark calculations for gen12+ RC CCS modifier (Ville Syrjälä)   
  - drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() (Jianglei Nie)   
  - drm/nouveau/kms/nv140-: Disable interlacing (Lyude Paul)   
  - staging: greybus: audio_helper: remove unused and wrong debugfs usage (Greg Kroah-Hartman)   
  - KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS (Sean Christopherson)   
  - KVM: nVMX: Don't propagate vmcs12's PERF_GLOBAL_CTRL settings to vmcs02 (Sean Christopherson)   
  - KVM: nVMX: Unconditionally purge queued/injected events on nested "exit" (Sean Christopherson)   
  - KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility (Michal Luczaj)   
  - blk-wbt: call rq_qos_add() after wb_normal is initialized (Yu Kuai)   
  - media: cedrus: Fix endless loop in cedrus_h265_skip_bits() (Dmitry Osipenko)   
  - media: cedrus: Set the platform driver data earlier (Dmitry Osipenko)   
  - efi: libstub: drop pointless get_memory_map() call (Ard Biesheuvel)   
  - thunderbolt: Explicitly enable lane adapter hotplug events at startup (Mario Limonciello)   
  - tracing: Fix reading strings from synthetic events (Steven Rostedt (Google))   
  - tracing: Add "(fault)" name injection to kernel probes (Steven Rostedt (Google))   
  - tracing: Move duplicate code of trace_kprobe/eprobe.c into header (Steven Rostedt (Google))   
  - tracing: Add ioctl() to force ring buffer waiters to wake up (Steven Rostedt (Google))   
  - tracing: Wake up waiters when tracing is disabled (Steven Rostedt (Google))   
  - tracing: Wake up ring buffer waiters on closing of the file (Steven Rostedt (Google))   
  - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (Waiman Long)   
  - ring-buffer: Fix race between reset page and reading page (Steven Rostedt (Google))   
  - ring-buffer: Add ring_buffer_wake_waiters() (Steven Rostedt (Google))   
  - ring-buffer: Check pending waiters when doing wake ups as well (Steven Rostedt (Google))   
  - ring-buffer: Have the shortest_full queue be the shortest not longest (Steven Rostedt (Google))   
  - ring-buffer: Allow splice to read previous partially read pages (Steven Rostedt (Google))   
  - ftrace: Properly unset FTRACE_HASH_FL_MOD (Zheng Yejian)   
  - livepatch: fix race between fork and KLP transition (Rik van Riel)   
  - ext4: update 'state->fc_regions_size' after successful memory allocation (Ye Bin)   
  - ext4: fix potential memory leak in ext4_fc_record_regions() (Ye Bin)   
  - ext4: fix potential memory leak in ext4_fc_record_modified_inode() (Ye Bin)   
  - ext4: fix miss release buffer head in ext4_fc_write_inode (Ye Bin)   
  - ext4: fix dir corruption when ext4_dx_add_entry() fails (Zhihao Cheng)   
  - ext4: place buffer head allocation before handle start (Jinke Han)   
  - ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate (Zhang Yi)   
  - ext4: don't increase iversion counter for ea_inodes (Lukas Czerner)   
  - ext4: fix check for block being out of directory size (Jan Kara)   {CVE-2022-1184} 
  - ext4: make ext4_lazyinit_thread freezable (Lalith Rajendran)   
  - ext4: fix null-ptr-deref in ext4_write_info (Baokun Li)   
  - ext4: avoid crash when inline data creation follows DIO write (Jan Kara)   
  - jbd2: add miss release buffer head in fc_do_one_pass() (Ye Bin)   
  - jbd2: fix potential use-after-free in jbd2_fc_wait_bufs (Ye Bin)   
  - jbd2: fix potential buffer head reference count leak (Ye Bin)   
  - jbd2: wake up journal waiters in FIFO order, not LIFO (Andrew Perepechko)   
  - hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero (Kees Cook)   
  - hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO (Kees Cook)   
  - f2fs: fix to do sanity check on summary info (Chao Yu)   
  - f2fs: fix to do sanity check on destination blkaddr during recovery (Chao Yu)   
  - f2fs: increase the limit for reserve_root (Jaegeuk Kim)   
  - f2fs: flush pending checkpoints when freezing super (Jaegeuk Kim)   
  - f2fs: complete checkpoints during remount (Jaegeuk Kim)   
  - btrfs: set generation before calling btrfs_clean_tree_block in btrfs_init_new_buffer (Tetsuo Handa)   
  - btrfs: fix race between quota enable and quota rescan ioctl (Filipe Manana)   
  - fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE (Lukas Czerner)   
  - ksmbd: Fix user namespace mapping (Mickaël Salaün)   
  - ksmbd: Fix wrong return value and message length check in smb2_ioctl() (Zhang Xiaoxu)   
  - ksmbd: fix endless loop when encryption for response fails (Namjae Jeon)   
  - fbdev: smscufx: Fix use-after-free in ufx_ops_open() (Hyunwoo Kim)   
  - pinctrl: rockchip: add pinmux_ops.gpio_set_direction callback (Quentin Schulz)   
  - gpio: rockchip: request GPIO mux to pinctrl when setting direction (Quentin Schulz)   
  - scsi: qedf: Populate sysfs attributes for vport (Saurav Kashyap)   
  - slimbus: qcom-ngd: cleanup in probe error path (Krzysztof Kozlowski)   
  - slimbus: qcom-ngd: use correct error in message of pdr_add_lookup() failure (Krzysztof Kozlowski)   
  - powerpc/boot: Explicitly disable usage of SPE instructions (Pali Rohár)   
  - powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain (Zhang Rui)   
  - NFSD: Protect against send buffer overflow in NFSv3 READ (Chuck Lever)   
  - NFSD: Protect against send buffer overflow in NFSv2 READ (Chuck Lever)   
  - NFSD: Protect against send buffer overflow in NFSv3 READDIR (Chuck Lever)   
  - serial: 8250: Request full 16550A feature probing for OxSemi PCIe devices (Maciej W. Rozycki)   
  - serial: 8250: Let drivers request full 16550A feature probing (Maciej W. Rozycki)   
  - PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge (Maciej W. Rozycki)   
  - xen/gntdev: Accommodate VMA splitting (M. Vefa Bicakci)   
  - xen/gntdev: Prevent leaking grants (M. Vefa Bicakci)   
  - mm/mmap: undo ->mmap() when arch_validate_flags() fails (Carlos Llamas)   
  - mm/damon: validate if the pmd entry is present before accessing (Baolin Wang)   
  - arm64: errata: Add Cortex-A55 to the repeat tlbi list (James Morse)   
  - drm/udl: Restore display mode on resume (Takashi Iwai)   
  - drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() (Dmitry Osipenko)   
  - drm/virtio: Unlock reservations on virtio_gpu_object_shmem_init() error (Dmitry Osipenko)   
  - drm/virtio: Check whether transferred 2D BO is shmem (Dmitry Osipenko)   
  - dmaengine: mxs: use platform_driver_register (Dario Binacchi)   
  - Revert "drm/amdgpu: use dirty framebuffer helper" (Hamza Mahfooz)   
  - nvme-pci: set min_align_mask before calculating max_hw_sectors (Rishabh Bhatnagar)   
  - nvme-multipath: fix possible hang in live ns resize with ANA access (Sagi Grimberg)   
  - nvmem: core: Fix memleak in nvmem_register() (Gaosheng Cui)   
  - UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen)   
  - riscv: Pass -mno-relax only on lld < 15.0.0 (Fangrui Song)   
  - riscv: always honor the CONFIG_CMDLINE_FORCE when parsing dtb (Wenting Zhang)   
  - riscv: Make VM_WRITE imply VM_READ (Andrew Bresticker)   
  - riscv: Allow PROT_WRITE-only mmap() (Andrew Bresticker)   
  - parisc: fbdev/stifb: Align graphics memory size to 4MB (Helge Deller)   
  - RISC-V: Make port I/O string accessors actually work (Maciej W. Rozycki)   
  - riscv: topology: fix default topology reporting (Conor Dooley)   
  - arm64: topology: move store_cpu_topology() to shared code (Conor Dooley)   
  - regulator: qcom_rpm: Fix circular deferral regression (Linus Walleij)   
  - net: thunderbolt: Enable DMA paths only after rings are enabled (Mika Westerberg)   
  - hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API (Liang He)   
  - ASoC: wcd934x: fix order of Slimbus unprepare/disable (Krzysztof Kozlowski)   
  - ASoC: wcd9335: fix order of Slimbus unprepare/disable (Krzysztof Kozlowski)   
  - platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure (Patryk Duda)   
  - quota: Check next/prev free block number after reading from quota file (Zhihao Cheng)   
  - HID: multitouch: Add memory barriers (Andri Yngvason)   
  - fs: dlm: handle -EBUSY first in lock arg validation (Alexander Aring)   
  - fs: dlm: fix race between test_bit() and queue_work() (Alexander Aring)   
  - i2c: designware: Fix handling of real but unexpected device interrupts (Jarkko Nikula)   
  - mmc: sdhci-sprd: Fix minimum clock limit (Wenchao Chen)   
  - can: kvaser_usb_leaf: Fix CAN state after restart (Anssi Hannula)   
  - can: kvaser_usb_leaf: Fix TX queue out of sync after restart (Anssi Hannula)   
  - can: kvaser_usb_leaf: Fix overread with an invalid command (Anssi Hannula)   
  - can: kvaser_usb: Fix use of uninitialized completion (Anssi Hannula)   
  - usb: add quirks for Lenovo OneLink+ Dock (Jean-Francois Le Fillatre)   
  - xhci: dbc: Fix memory leak in xhci_alloc_dbc() (Rafael Mendonca)   
  - iio: pressure: dps310: Reset chip after timeout (Eddie James)   
  - iio: pressure: dps310: Refactor startup procedure (Eddie James)   
  - iio: adc: ad7923: fix channel readings for some variants (Nuno Sá)   
  - iio: ltc2497: Fix reading conversion results (Uwe Kleine-König)   
  - iio: dac: ad5593r: Fix i2c read protocol requirements (Michael Hennerich)   
  - cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message (Zhang Xiaoxu)   
  - cifs: destage dirty pages before re-reading them for cache=none (Ronnie Sahlberg)   
  - hv_netvsc: Fix race between VF offering and VF association message from host (Gaurav Kohli)   
  - io_uring/net: don't update msg_name if not provided (Pavel Begunkov)   
  - mtd: rawnand: atmel: Unmap streaming DMA mappings (Tudor Ambarus)   
  - ALSA: hda/realtek: Add Intel Reference SSID to support headset keys (Saranya Gopal)   
  - ALSA: hda/realtek: Add quirk for ASUS GV601R laptop (Luke D. Jones)   
  - ALSA: hda/realtek: Correct pin configs for ASUS G533Z (Luke D. Jones)   
  - ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530 (Callum Osmotherly)   
  - ALSA: usb-audio: Fix NULL dererence at error path (Takashi Iwai)   
  - ALSA: usb-audio: Fix potential memory leaks (Takashi Iwai)   
  - ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() (Takashi Iwai)   
  - ALSA: oss: Fix potential deadlock at unregistration (Takashi Iwai)   
  - Revert "fs: check FMODE_LSEEK to control internal pipe splicing" (Sasha Levin)   
  - LTS version: v5.15.74 (Jack Vogel)   
  - wifi: mac80211: fix MBSSID parsing use-after-free (Johannes Berg)   {CVE-2022-42719} 
  - mac80211: fix memory leaks with element parsing (Johannes Berg)   
  - mac80211: always allocate struct ieee802_11_elems (Johannes Berg)   
  - mac80211: mlme: find auth challenge directly (Johannes Berg)   
  - mac80211: move CRC into struct ieee802_11_elems (Johannes Berg)   
  - mac80211: mesh: clean up rx_bcn_presp API (Johannes Berg)   
  - misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic (Shunsuke Mie)   
  - misc: pci_endpoint_test: Aggregate params checking for xfer (Shunsuke Mie)   
  - Input: xpad - fix wireless 360 controller breaking after suspend (Cameron Gutman)   
  - Input: xpad - add supported devices as contributed on github (Pavel Rojtberg)   
  - wifi: cfg80211: update hidden BSSes to avoid WARN_ON (Johannes Berg)   
  - wifi: mac80211: fix crash in beacon protection for P2P-device (Johannes Berg)   {CVE-2022-42722} 
  - wifi: mac80211_hwsim: avoid mac80211 warning on bad rate (Johannes Berg)   
  - wifi: cfg80211: avoid nontransmitted BSS list corruption (Johannes Berg)   {CVE-2022-42721} 
  - wifi: cfg80211: fix BSS refcounting bugs (Johannes Berg)   {CVE-2022-42720} 
  - wifi: cfg80211: ensure length byte is present before access (Johannes Berg)   
  - wifi: cfg80211/mac80211: reject bad MBSSID elements (Johannes Berg)   {CVE-2022-41674} 
  - wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() (Johannes Berg)   {CVE-2022-41674} 
  - Revert "crypto: qat - reduce size of mapped region" (Giovanni Cabiddu)   
  - Revert "powerpc/rtas: Implement reentrant rtas call" (Nathan Lynch)   
  - USB: serial: qcserial: add new usb-id for Dell branded EM7455 (Frank Wunderlich)   
  - scsi: stex: Properly zero out the passthrough command structure (Linus Torvalds)   
  - efi: Correct Macmini DMI match in uefi cert quirk (Orlando Chamberlain)   
  - ALSA: hda: Fix position reporting on Poulsbo (Takashi Iwai)   
  - random: clamp credited irq bits to maximum mixed (Jason A. Donenfeld)   
  - random: restore O_NONBLOCK support (Jason A. Donenfeld)   
  - ceph: don't truncate file in atomic_open (Hu Weiwen)   
  - nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure (Ryusuke Konishi)   
  - nilfs2: fix leak of nilfs_root in case of writer thread creation failure (Ryusuke Konishi)   
  - nilfs2: fix use-after-free bug of struct nilfs_root (Ryusuke Konishi)   
  - nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() (Ryusuke Konishi)   
  - LTS version: v5.15.73 (Jack Vogel)   
  - Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5" (Sasha Levin)   
  - rpmsg: qcom: glink: replace strncpy() with strscpy_pad() (Krzysztof Kozlowski)   
  - USB: serial: ftdi_sio: fix 300 bps rate for SIO (Johan Hovold)   
  - usb: mon: make mmapped memory read only (Tadeusz Struk)   
  - net/mlx5: Disable irq when locking lag_lock (Vlad Buslov)   
  - wifi: cfg80211: fix MCS divisor value (Tamizh Chelvam Raja)   
  - mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all() (Naoya Horiguchi)   
  - mm/huge_memory: minor cleanup for split_huge_pages_all (Miaohe Lin)   
  - perf parse-events: Identify broken modifiers (Ian Rogers)   
  - mmc: core: Terminate infinite loop in SD-UHS voltage switch (Brian Norris)   
  - mmc: core: Replace with already defined values for readability (ChanWoo Lee)   
  - drm/amd/display: skip audio setup when audio stream is enabled (zhikzhai)   
  - drm/amd/display: update gamut remap if plane has changed (Hugo Hu)   
  - drm/amd/display: Assume an LTTPR is always present on fixed_vs links (Michael Strauss)   
  - drm/amd/display: Fix double cursor on non-video RGB MPO (Leo Li)   
  - net: atlantic: fix potential memory leak in aq_ndev_close() (Jianglei Nie)   
  - arch: um: Mark the stack non-executable to fix a binutils warning (David Gow)   
  - um: Cleanup compiler warning in arch/x86/um/tls_32.c (Lukas Straub)   
  - um: Cleanup syscall_handler_t cast in syscalls_32.h (Lukas Straub)   
  - ALSA: hda/hdmi: Fix the converter reuse for the silent stream (Jaroslav Kysela)   
  - net: marvell: prestera: add support for for Aldrin2 (Oleksandr Mazur)   
  - net/ieee802154: fix uninit value bug in dgram_sendmsg (Haimin Zhang)   
  - scsi: qedf: Fix a UAF bug in __qedf_probe() (Letu Ren)   
  - ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer (Sergei Antonov)   
  - dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure (Swati Agarwal)   
  - dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property (Swati Agarwal)   
  - dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling (Swati Agarwal)   
  - firmware: arm_scmi: Add SCMI PM driver remove routine (Cristian Marussi)   
  - firmware: arm_scmi: Harden accesses to the sensor domains (Cristian Marussi)   
  - firmware: arm_scmi: Improve checks in the info_get operations (Cristian Marussi)   
  - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Dongliang Mu)   
  - powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush (Yang Shi)   
  - mm: gup: fix the fast GUP race against THP collapse (Yang Shi)   
  - xsk: Inherit need_wakeup flag for shared sockets (Jalal Mostafa)   
  - docs: update mediator information in CoC docs (Shuah Khan)   
  - Makefile.extrawarn: Move -Wcast-function-type-strict to W=1 (Sami Tolvanen)   
  - LTS version: v5.15.72 (Jack Vogel)   
  - drm/i915/gem: Really move i915_gem_context.link under ref protection (Chris Wilson)   
  - x86/alternative: Fix race in try_get_desc() (Nadav Amit)   
  - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Jim Mattson)   
  - clk: iproc: Do not rely on node name for correct PLL setup (Florian Fainelli)   
  - clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks (Han Xu)   
  - fs: split off setxattr_copy and do_setxattr function from setxattr (Stefan Roesch)   
  - vdpa/ifcvf: fix the calculation of queuepair (Angus Chen)   
  - selftests: Fix the if conditions of in test_extra_filter() (Wang Yufen)   
  - net: phy: Don't WARN for PHY_UP state in mdio_bus_phy_resume() (Lukas Wunner)   
  - net: stmmac: power up/down serdes in stmmac_open/release (Junxiao Chang)   
  - wifi: mac80211: fix regression with non-QoS drivers (Hans de Goede)   
  - nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices (Michael Kelley)   
  - net/mlxbf_gige: Fix an IS_ERR() vs NULL bug in mlxbf_gige_mdio_probe (Peng Wu)   
  - cxgb4: fix missing unlock on ETHOFLD desc collect fail path (Rafael Mendonca)   
  - net: sched: act_ct: fix possible refcount leak in tcf_ct_init() (Hangyu Hua)   
  - usbnet: Fix memory leak in usbnet_disconnect() (Peilin Ye)   
  - gpio: mvebu: Fix check for pwm support on non-A8K platforms (Pali Rohár)   
  - Input: melfas_mip4 - fix return value check in mip4_probe() (Yang Yingliang)   
  - Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time" (Brian Norris)   
  - drm/bridge: lt8912b: fix corrupted image output (Francesco Dolcini)   
  - drm/bridge: lt8912b: set hdmi or dvi mode (Philippe Schenker)   
  - drm/bridge: lt8912b: add vsync hsync (Philippe Schenker)   
  - ASoC: tas2770: Reinit regcache on reset (Martin Povišer)   
  - arm64: dts: qcom: sm8350: fix UFS PHY serdes size (Johan Hovold)   
  - ASoC: imx-card: Fix refcount issue with of_node_put (Shengjiu Wang)   
  - soc: sunxi: sram: Fix debugfs info for A64 SRAM C (Samuel Holland)   
  - soc: sunxi: sram: Fix probe function ordering issues (Samuel Holland)   
  - soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource() (Cai Huoqing)   
  - soc: sunxi: sram: Prevent the driver from being unbound (Samuel Holland)   
  - soc: sunxi: sram: Actually claim SRAM regions (Samuel Holland)   
  - ARM: dts: am5748: keep usb4_tm disabled (Romain Naour)   
  - reset: imx7: Fix the iMX8MP PCIe PHY PERST support (Richard Zhu)   
  - ARM: dts: am33xx: Fix MMCHS0 dma properties (YuTong Chang)   
  - swiotlb: max mapping size takes min align mask into account (Tianyu Lan)   
  - media: v4l2-compat-ioctl32.c: zero buffer passed to v4l2_compat_get_array_args() (Hans Verkuil)   
  - media: rkvdec: Disable H.264 error detection (Nicolas Dufresne)   
  - media: dvb_vb2: fix possible out of bound access (Hangyu Hua)   
  - mm,hwpoison: check mm when killing accessing process (Shuai Xue)   
  - mm: fix madivse_pageout mishandling on non-LRU page (Minchan Kim)   
  - mm/migrate_device.c: flush TLB while holding PTL (Alistair Popple)   
  - mm: fix dereferencing possible ERR_PTR (Binyi Han)   
  - mm: prevent page_frag_alloc() from corrupting the memory (Maurizio Lombardi)   
  - mm/page_alloc: fix race condition between build_all_zonelists and page allocation (Mel Gorman)   
  - mmc: hsq: Fix data stomping during mmc recovery (Wenchao Chen)   
  - mmc: moxart: fix 4-bit bus width and remove 8-bit bus width (Sergei Antonov)   
  - libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205 (Niklas Cassel)   
  - vduse: prevent uninitialized memory accesses (Maxime Coquelin)   {CVE-2022-2308} 
  - drm/amdgpu: Add amdgpu suspend-resume code path under SRIOV (Bokun Zhang)   
  - drm/i915/gt: Restrict forced preemption to the active context (Chris Wilson)   
  - Revert "firmware: arm_scmi: Add clock management to the SCMI power domain" (Ulf Hansson)   
  - net: mt7531: only do PLL once after the reset (Alexander Couzens)   
  - mm/damon/dbgfs: fix memory leak when using debugfs_lookup() (Greg Kroah-Hartman)   
  - ntfs: fix BUG_ON in ntfs_lookup_inode_by_name() (ChenXiaoSong)   
  - ARM: dts: integrator: Tag PCI host with device_type (Linus Walleij)   
  - x86/sgx: Do not fail on incomplete sanitization on premature stop of ksgxd (Jarkko Sakkinen)   
  - clk: ingenic-tcu: Properly enable registers before accessing timers (Aidan MacDonald)   
  - can: c_can: don't cache TX messages for C_CAN cores (Marc Kleine-Budde)   
  - Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address (Sebastian Krzyszkowiak)   
  - net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455 (Frank Wunderlich)   
  - thunderbolt: Explicitly reset plug events delay back to USB4 spec value (Mario Limonciello)   
  - usb: typec: ucsi: Remove incorrect warning (Heikki Krogerus)   
  - uas: ignore UAS for Thinkplus chips (Hongling Zeng)   
  - usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS (Hongling Zeng)   
  - uas: add no-uas quirk for Hiksemi usb_disk (Hongling Zeng)   
  - cgroup: cgroup_get_from_id() must check the looked-up kn is a directory (Ming Lei)   
  - cgroup: reduce dependency on cgroup_mutex (Shakeel Butt)   
  - ALSA: hda/realtek: fix speakers and micmute on HP 855 G8 (Alexander Sergeyev)   
  - ALSA: hda: Fix Nvidia dp infoframe (Mohan Kumar)   
  - ALSA: hda: Fix hang at HD-audio codec unbinding due to refcount saturation (Takashi Iwai)   
  - ALSA: hda: Do disconnect jacks at codec unbind (Takashi Iwai)   
  - LTS version: v5.15.71 (Jack Vogel)   
  - ext4: use locality group preallocation for small closed files (Jan Kara)   
  - ext4: avoid unnecessary spreading of allocations among groups (Jan Kara)   
  - ext4: make mballoc try target group first even with mb_optimize_scan (Jan Kara)   
  - ext4: limit the number of retries after discarding preallocations blocks (Theodore Ts'o)   
  - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 (Luís Henriques)   
  - ext4: make directory inode spreading reflect flexbg size (Jan Kara)   
  - devdax: Fix soft-reservation memory description (Dan Williams)   
  - NFSv4: Fixes for nfs4_inode_return_delegation() (Trond Myklebust)   
  - drm/amdgpu: don't register a dirty callback for non-atomic (Alex Deucher)   
  - i2c: mlxbf: Fix frequency calculation (Asmaa Mnebhi)   
  - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Asmaa Mnebhi)   
  - i2c: mlxbf: incorrect base address passed during io write (Asmaa Mnebhi)   
  - i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible (Uwe Kleine-König)   
  - workqueue: don't skip lockdep work dependency in cancel_work_sync() (Tetsuo Handa)   
  - fsdax: Fix infinite loop in dax_iomap_rw() (Li Jinlin)   
  - drm/rockchip: Fix return type of cdn_dp_connector_mode_valid (Nathan Huckleberry)   
  - drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage (Nathan Chancellor)   
  - drm/amd/display: Reduce number of arguments of dml31's CalculateFlipSchedule() (Nathan Chancellor)   
  - drm/amd/display: Reduce number of arguments of dml31's CalculateWatermarksAndDRAMSpeedChangeSupport() (Nathan Chancellor)   
  - drm/amd/display: Limit user regamma to a valid value (Yao Wang1)   
  - drm/amdgpu: use dirty framebuffer helper (Hamza Mahfooz)   
  - drm/amd/pm: disable BACO entry/exit completely on several sienna cichlid cards (Guchun Chen)   
  - drm/gma500: Fix BUG: sleeping function called from invalid context errors (Hans de Goede)   
  - Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region (Vitaly Kuznetsov)   
  - drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV (Jingwen Chen)   
  - s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup (Stefan Haberland)   
  - serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting (Ilpo Järvinen)   
  - serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting (Ilpo Järvinen)   
  - serial: Create uart_xmit_advance() (Ilpo Järvinen)   
  - serial: fsl_lpuart: Reset prior to registration (Lukas Wunner)   
  - KVM: x86/mmu: Fold rmap_recycle into rmap_add (David Matlack)   
  - selftests: forwarding: add shebang for sch_red.sh (Hangbin Liu)   
  - bnxt: prevent skb UAF after handing over to PTP worker (Jakub Kicinski)   
  - net: sched: fix possible refcount leak in tc_new_tfilter() (Hangyu Hua)   
  - net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD (Sean Anderson)   
  - bonding: fix NULL deref in bond_rr_gen_slave_id (Jonathan Toppins)   
  - net/smc: Stop the CLC flow if no link to map buffers on (Wen Gu)   
  - drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff() (Nícolas F. R. A. Prado)   
  - perf tools: Honor namespace when synthesizing build-ids (Namhyung Kim)   
  - perf kcore_copy: Do not check /proc/modules is unchanged (Adrian Hunter)   
  - perf jit: Include program header in ELF files (Lieven Hey)   
  - perf stat: Fix BPF program section name (Namhyung Kim)   
  - can: gs_usb: gs_can_open(): fix race dev->can.state condition (Marc Kleine-Budde)   
  - net: sh_eth: Fix PHY state warning splat during system resume (Geert Uytterhoeven)   
  - net: ravb: Fix PHY state warning splat during system resume (Geert Uytterhoeven)   
  - netfilter: ebtables: fix memory leak when blob is malformed (Florian Westphal)   
  - netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain() (Tetsuo Handa)   
  - netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain() (Tetsuo Handa)   
  - net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs (Vladimir Oltean)   
  - net/sched: taprio: avoid disabling offload when it was never enabled (Vladimir Oltean)   
  - net: enetc: deny offload of tc-based TSN features on VF interfaces (Vladimir Oltean)   
  - net: enetc: move enetc_set_psfp() out of the common enetc_set_features() (Vladimir Oltean)   
  - wireguard: netlink: avoid variable-sized memcpy on sockaddr (Jason A. Donenfeld)   
  - wireguard: ratelimiter: disable timings test by default (Jason A. Donenfeld)   
  - net: ipa: properly limit modem routing table use (Alex Elder)   
  - of: mdio: Add of_node_put() when breaking out of for_each_xx (Liang He)   
  - drm/hisilicon: Add depends on MMU (Randy Dunlap)   
  - drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled (Javier Martinez Canillas)   
  - sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet)   
  - sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet)   
  - i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Michal Jaron)   
  - i40e: Fix VF set max MTU size (Michal Jaron)   
  - iavf: Fix set max MTU size with port VLAN and jumbo frames (Michal Jaron)   
  - mlxbf_gige: clear MDIO gateway lock after read (David Thompson)   
  - iavf: Fix bad page state (Norbert Zulinski)   
  - um: fix default console kernel parameter (Christian Lamparter)   
  - MIPS: Loongson32: Fix PHY-mode being left unspecified (Serge Semin)   
  - MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko (Randy Dunlap)   
  - drm/panel: simple: Fix innolux_g121i1_l01 bus_format (Heiko Schocher)   
  - net: team: Unsync device addresses on ndo_stop (Benjamin Poirier)   
  - net: bonding: Unsync device addresses on ndo_stop (Benjamin Poirier)   
  - net: bonding: Share lacpdu_mcast_addr definition (Benjamin Poirier)   
  - scsi: mpt3sas: Fix return value check of dma_get_required_mask() (Sreekanth Reddy)   
  - scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts() (Rafael Mendonca)   
  - net: phy: aquantia: wait for the suspend/resume operations to finish (Ioana Ciornei)   
  - net: core: fix flow symmetric hash (Ludovic Cintrat)   
  - ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header (Lu Wei)   
  - iavf: Fix cached head and tail value for iavf_get_tx_pending (Brett Creeley)   
  - ice: Don't double unplug aux on peer initiated reset (Dave Ertman)   
  - netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() (Pablo Neira Ayuso)   
  - netfilter: nf_conntrack_irc: Tighten matching on DCC message (David Leadbeater)   
  - netfilter: nf_conntrack_sip: fix ct_sip_walk_headers (Igor Ryzhov)   
  - arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma (Fabio Estevam)   
  - dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get() (Liang He)   
  - arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz (zain wang)   
  - drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks (AngeloGioacchino Del Regno)   
  - arm64: dts: rockchip: Fix typo in lisense text for PX30.Core (Jagan Teki)   
  - arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob (Brian Norris)   
  - firmware: arm_scmi: Fix the asynchronous reset requests (Cristian Marussi)   
  - firmware: arm_scmi: Harden accesses to the reset domains (Cristian Marussi)   
  - xfs: validate inode fork size against fork format (Dave Chinner)   
  - xfs: fix xfs_ifree() error handling to not leak perag ref (Brian Foster)   
  - xfs: reorder iunlink remove operation in xfs_ifree (Dave Chinner)   
  - vmlinux.lds.h: CFI: Reduce alignment of jump-table to function alignment (Will Deacon)   
  - arm64: topology: fix possible overflow in amu_fie_setup() (Sergey Shtylyov)   
  - KVM: x86: Inject #UD on emulated XSETBV if XSAVES isn't enabled (Sean Christopherson)   
  - mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context. (Maurizio Lombardi)   
  - mm/slub: fix to return errno if kmalloc() fails (Chao Yu)   
  - net: mana: Add rmb after checking owner bits (Haiyang Zhang)   
  - can: flexcan: flexcan_mailbox_read() fix return value for drop = true (Marc Kleine-Budde)   
  - kasan: call kasan_malloc() from __kmalloc_*track_caller() (Peter Collingbourne)   
  - riscv: fix a nasty sigreturn bug... (Al Viro)   
  - gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully (Meng Li)   
  - gpio: mockup: Fix potential resource leakage when register a chip (Andy Shevchenko)   
  - gpio: mockup: fix NULL pointer dereference when removing debugfs (Bartosz Golaszewski)   
  - wifi: mt76: fix reading current per-tid starting sequence number for aggregation (Felix Fietkau)   
  - efi: libstub: check Shim mode using MokSBStateRT (Ard Biesheuvel)   
  - efi: x86: Wipe setup_data on pure EFI boot (Ard Biesheuvel)   
  - thunderbolt: Add support for Intel Maple Ridge single port controller (Gil Fine)   
  - usb: dwc3: core: leave default DMA if the controller does not support 64-bit DMA (William Wu)   
  - media: flexcop-usb: fix endpoint type check (Johan Hovold)   
  - btrfs: fix hang during unmount when stopping a space reclaim worker (Filipe Manana)   
  - btrfs: fix hang during unmount when stopping block group reclaim worker (Filipe Manana)   
  - iommu/vt-d: Check correct capability for sagaw determination (Yi Liu)   
  - ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop (Callum Osmotherly)   
  - ALSA: hda/realtek: Add quirk for ASUS GA503R laptop (Luke D. Jones)   
  - ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack (Luke D. Jones)   
  - ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack (Luke D. Jones)   
  - ALSA: hda/realtek: Re-arrange quirk table entries (Takashi Iwai)   
  - ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop (Callum Osmotherly)   
  - ALSA: hda/realtek: Add quirk for Huawei WRT-WX9 (huangwenhui)   
  - ALSA: hda: add Intel 5 Series / 3400 PCI DID (Kai Vehmanen)   
  - ALSA: hda/tegra: set depop delay for tegra (Mohan Kumar)   
  - ALSA: core: Fix double-free at snd_card_new() (Takashi Iwai)   
  - Revert "ALSA: usb-audio: Split endpoint setups for hw_params and prepare" (Takashi Iwai)   
  - USB: serial: option: add Quectel RM520N (jerry meng)   
  - USB: serial: option: add Quectel BG95 0x0203 composition (Carl Yin(殷张成))   
  - USB: core: Fix RST error in hub.c (Alan Stern)   
  - drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES (Phil Auld)   
  - Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio" (Greg Kroah-Hartman)   
  - Revert "usb: add quirks for Lenovo OneLink+ Dock" (Greg Kroah-Hartman)   
  - usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (Piyush Mehta)   
  - usb: add quirks for Lenovo OneLink+ Dock (Jean-Francois Le Fillatre)   
  - usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop (Wesley Cheng)   
  - usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup() (Thinh Nguyen)   
  - usb: dwc3: gadget: Refactor pullup() (Thinh Nguyen)   
  - usb: dwc3: gadget: Prevent repeat pullup() (Thinh Nguyen)   
  - usb: dwc3: Issue core soft reset before enabling run/stop (Wesley Cheng)   
  - usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind (Wesley Cheng)   
  - staging: r8188eu: Add Rosewill USB-N150 Nano to device tables (Larry Finger)   
  - staging: r8188eu: Remove support for devices with 8188FU chipset (0bda:f179) (Candy Febriyanto)   
  - drm/amdgpu: make sure to init common IP before gmc (Alex Deucher)   
  - drm/amdgpu: Separate vf2pf work item init from virt data exchange (Victor Skvortsov)   
  - bnxt_en: reclaim max resources if sriov enable fails (Kashyap Desai)  [Orabug: 34083583]  
  - eth: bnxt: make ulp_id unsigned to make GCC 12 happy (Jakub Kicinski)  [Orabug: 34083583]  
  - bnxt_en: Enable packet timestamping for all RX packets (Pavan Chebbi)  [Orabug: 34083583]  
  - bnxt_en: Configure ptp filters during bnxt open (Pavan Chebbi)  [Orabug: 34083583]  
  - bnxt_en: Update firmware interface to 1.10.2.95 (Michael Chan)  [Orabug: 34083583]  
  - bnxt_en: Initiallize bp->ptp_lock first before using it (Michael Chan)  [Orabug: 34083583]  
  - bnxt_en: Properly report no pause support on some cards (Michael Chan)  [Orabug: 34083583]  
  - bnxt_en: add more error checks to HWRM_NVM_INSTALL_UPDATE (Kalesh AP)  [Orabug: 34083583]  
  - bnxt_en: refactor error handling of HWRM_NVM_INSTALL_UPDATE (Kalesh AP)  [Orabug: 34083583]  
  - bnxt_en: Handle async event when the PHC is updated in RTC mode (Pavan Chebbi)  [Orabug: 34083583]  
  - bnxt_en: Implement .adjtime() for PTP RTC mode (Pavan Chebbi)  [Orabug: 34083583]  
  - bnxt_en: Add driver support to use Real Time Counter for PTP (Pavan Chebbi)  [Orabug: 34083583]  
  - bnxt_en: PTP: Refactor PTP initialization functions (Pavan Chebbi)  [Orabug: 34083583]  
  - bnxt_en: Update firmware interface to 1.10.2.73 (Michael Chan)  [Orabug: 34083583]  
  - bnxt_en: Use page frag RX buffers for better software GRO performance (Jakub Kicinski)  [Orabug: 34083583]  
  - bnxt_en: convert to xdp_do_flush (Edwin Peer)  [Orabug: 34083583]  
  - bnxt_en: enable interrupt sampling on 5750X for DIM (Andy Gospodarek)  [Orabug: 34083583]  
  - bnxt_en: Log error report for dropped doorbell (Michael Chan)  [Orabug: 34083583]  
  - bnxt_en: Add event handler for PAUSE Storm event (Somnath Kotur)  [Orabug: 34083583]  
  - bnxt_en: Update firmware interface to 1.10.2.63 (Michael Chan)  [Orabug: 34083583]  
  - bnxt: use netif_is_rxfh_configured instead of open code (Juhee Kang)  [Orabug: 34083583]  
  - uek-rpm: add aarch64 to list of vdso arches (Tom Saeger)  [Orabug: 34716172]  
  - uapi: Fix [rs]cq_vector data types in rds[6]_info_rdma_connection (Mark Haywood)  [Orabug: 34734247]  
  - uapi: Fix congested flag type in rds[6]_info_socket (Mark Haywood)  [Orabug: 34734247]  
  - uek-rpm: ol9: disable CONFIG_MISDN and dependent drivers on OL9/UEK7 (Harshit Mogalapalli)  [Orabug: 34734324]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-5.76.5.1.el9uek]
changelog:
  - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds)  [Orabug: 34883037]  {CVE-2022-4378} 
  - proc: avoid integer type confusion in get_proc_long (Linus Torvalds)  [Orabug: 34883037]  {CVE-2022-4378}


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-6.80.1.el9uek]
changelog:
  - LTS version: v5.15.80 (Jack Vogel)   
  - ntfs: check overflow when iterating ATTR_RECORDs (Hawkins Jiawei)   
  - ntfs: fix out-of-bounds read in ntfs_attr_find() (Hawkins Jiawei)   
  - ntfs: fix use-after-free in ntfs_attr_find() (Hawkins Jiawei)   
  - net/9p: use a dedicated spinlock for trans_fd (Dominique Martinet)   
  - mm: fs: initialize fsdata passed to write_begin/write_end interface (Alexander Potapenko)   
  - wifi: wext: use flex array destination for memcpy() (Hawkins Jiawei)   
  - 9p/trans_fd: always use O_NONBLOCK read/write (Tetsuo Handa)   
  - gfs2: Switch from strlcpy to strscpy (Andreas Gruenbacher)   
  - gfs2: Check sb_bsize_shift after reading superblock (Andrew Price)   
  - 9p: trans_fd/p9_conn_cancel: drop client lock earlier (Dominique Martinet)   
  - kcm: close race conditions on sk_receive_queue (Cong Wang)   
  - kcm: avoid potential race in kcm_tx_work (Eric Dumazet)   
  - tcp: cdg: allow tcp_cdg_release() to be called multiple times (Eric Dumazet)   
  - macvlan: enforce a consistent minimal mtu (Eric Dumazet)   
  - Input: i8042 - fix leaking of platform device on module removal (Chen Jun)   
  - kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case (Li Huafei)   
  - scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper() (Yuan Can)   
  - scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() (Yang Yingliang)   
  - net: use struct_group to copy ip/ipv6 header addresses (Hangbin Liu)   
  - tracing: Fix warning on variable 'struct trace_array' (Aashish Sharma)   
  - ring-buffer: Include dropped pages in counting dirty patches (Steven Rostedt (Google))   
  - perf: Improve missing SIGTRAP checking (Marco Elver)   
  - serial: 8250_lpss: Use 16B DMA burst with Elkhart Lake (Ilpo Järvinen)   
  - nvme: ensure subsystem reset is single threaded (Keith Busch)   
  - nvme: restrict management ioctls to admin (Keith Busch)   
  - perf/x86/intel/pt: Fix sampling using single range output (Adrian Hunter)   
  - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (Alexander Potapenko)   
  - docs: update mediator contact information in CoC doc (Shuah Khan)   
  - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() (Xiongfeng Wang)   
  - mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout (Chevron Li)   
  - mmc: core: properly select voltage range without power cycle (Yann Gautier)   
  - firmware: coreboot: Register bus in module init (Brian Norris)   
  - iommu/vt-d: Set SRE bit only when hardware has SRS cap (Tina Zhang)   
  - iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (Tina Zhang)   
  - scsi: zfcp: Fix double free of FSF request when qdio send fails (Benjamin Block)   
  - net: phy: marvell: add sleep time after enabling the loopback bit (Aminuddin Jamaluddin)   
  - maccess: Fix writing offset in case of fault in strncpy_from_kernel_nofault() (Alban Crequy)   
  - Input: iforce - invert valid length check when fetching device IDs (Tetsuo Handa)   
  - serial: 8250_lpss: Configure DMA also w/o DMA filter (Ilpo Järvinen)   
  - serial: 8250: Flush DMA Rx on RLSI (Ilpo Järvinen)   
  - serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs (Ilpo Järvinen)   
  - dm ioctl: fix misbehavior if list_versions races with module loading (Mikulas Patocka)   
  - iio: pressure: ms5611: changed hardcoded SPI speed to value limited (Mitja Spes)   
  - iio: adc: mp2629: fix potential array out of bound access (Saravanan Sekar)   
  - iio: adc: mp2629: fix wrong comparison of channel (Saravanan Sekar)   
  - iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() (Yang Yingliang)   
  - iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() (Yang Yingliang)   
  - usb: typec: mux: Enter safe mode only when pins need to be reconfigured (Rajat Khandelwal)   
  - usb: cdns3: host: fix endless superspeed hub port reset (Li Jun)   
  - usb: chipidea: fix deadlock in ci_otg_del_timer (Duoming Zhou)   
  - usb: add NO_LPM quirk for Realforce 87U Keyboard (Nicolas Dumazet)   
  - USB: serial: option: add Fibocom FM160 0x0111 composition (Reinhard Speyerer)   
  - USB: serial: option: add u-blox LARA-L6 modem (Davide Tronchin)   
  - USB: serial: option: add u-blox LARA-R6 00B modem (Davide Tronchin)   
  - USB: serial: option: remove old LARA-R6 PID (Davide Tronchin)   
  - USB: serial: option: add Sierra Wireless EM9191 (Benoît Monin)   
  - USB: bcma: Make GPIO explicitly optional (Linus Walleij)   
  - speakup: fix a segfault caused by switching consoles (Mushahid Hussain)   
  - slimbus: stream: correct presence rate frequencies (Krzysztof Kozlowski)   
  - slimbus: qcom-ngd: Fix build error when CONFIG_SLIM_QCOM_NGD_CTRL=y && CONFIG_QCOM_RPROC_COMMON=m (Zheng Bin)   
  - Revert "usb: dwc3: disable USB core PHY management" (Johan Hovold)   
  - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 (Takashi Iwai)   
  - ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro (Emil Flink)   
  - ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() (Takashi Iwai)   
  - drm/amd/display: Add HUBP surface flip interrupt handler (Rodrigo Siqueira)   
  - tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit() (Shang XiaoJing)   
  - tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit() (Shang XiaoJing)   
  - tracing: Fix race where eprobes can be called before the event (Steven Rostedt (Google))   
  - tracing: Fix wild-memory-access in register_synth_event() (Shang XiaoJing)   
  - tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() (Shang XiaoJing)   
  - tracing/ring-buffer: Have polling block on watermark (Steven Rostedt (Google))   
  - tracing: Fix memory leak in tracing_read_pipe() (Wang Yufen)   
  - ring_buffer: Do not deactivate non-existant pages (Daniil Tatianin)   
  - ftrace: Fix null pointer dereference in ftrace_add_mod() (Xiu Jianfeng)   
  - ftrace: Optimize the allocation for mcount entries (Wang Wensheng)   
  - ftrace: Fix the possible incorrect kernel message (Wang Wensheng)   
  - cifs: add check for returning value of SMB2_set_info_init (Anastasia Belova)   
  - net: thunderbolt: Fix error handling in tbnet_init() (Yuan Can)   
  - net: microchip: sparx5: Fix potential null-ptr-deref in sparx_stats_init() and sparx5_start() (Shang XiaoJing)   
  - cifs: Fix wrong return value checking when GETFLAGS (Zhang Xiaoxu)   
  - net/x25: Fix skb leak in x25_lapb_receive_frame() (Wei Yongjun)   
  - net: ag71xx: call phylink_disconnect_phy if ag71xx_hw_enable() fail in ag71xx_open() (Liu Jian)   
  - cifs: add check for returning value of SMB2_close_init (Anastasia Belova)   
  - platform/surface: aggregator: Do not check for repeated unsequenced packets (Maximilian Luz)   
  - platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized (Roger Pau Monné)   
  - drbd: use after free in drbd_create_device() (Dan Carpenter)   
  - bridge: switchdev: Fix memory leaks when changing VLAN protocol (Ido Schimmel)   
  - net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process (Guangbin Huang)   
  - net: ena: Fix error handling in ena_init() (Yuan Can)   
  - net: ionic: Fix error handling in ionic_init_module() (Yuan Can)   
  - xen/pcpu: fix possible memory leak in register_pcpu() (Yang Yingliang)   
  - net: dsa: make dsa_master_ioctl() see through port_hwtstamp_get() shims (Vladimir Oltean)   
  - net: mhi: Fix memory leak in mhi_net_dellink() (Wei Yongjun)   
  - bnxt_en: Remove debugfs when pci_register_driver failed (Gaosheng Cui)   
  - net: caif: fix double disconnect client in chnl_net_open() (Zhengchao Shao)   
  - net: macvlan: Use built-in RCU list checking (Chuang Wang)   
  - mISDN: fix misuse of put_device() in mISDN_register_device() (Wang ShaoBo)   
  - net: liquidio: release resources when liquidio driver open failed (Zhengchao Shao)   
  - soc: imx8m: Enable OCOTP clock before reading the register (Xiaolei Wang)   
  - net: stmmac: ensure tx function is not running in stmmac_xdp_release() (Mohd Faizal Abdul Rahim)   
  - net: hinic: Fix error handling in hinic_module_init() (Yuan Can)   
  - mISDN: fix possible memory leak in mISDN_dsp_element_register() (Yang Yingliang)   
  - net: bgmac: Drop free_netdev() from bgmac_enet_remove() (Wei Yongjun)   
  - bpf: Initialize same number of free nodes for each pcpu_freelist (Xu Kuohai)   
  - MIPS: Loongson64: Add WARN_ON on kexec related kmalloc failed (Liao Chang)   
  - MIPS: fix duplicate definitions for exported symbols (Rongwei Zhang)   
  - nfp: change eeprom length to max length enumerators (Jaco Coetzee)   
  - ata: libata-transport: fix error handling in ata_tdev_add() (Yang Yingliang)   
  - ata: libata-transport: fix error handling in ata_tlink_add() (Yang Yingliang)   
  - ata: libata-transport: fix error handling in ata_tport_add() (Yang Yingliang)   
  - ata: libata-transport: fix double ata_host_put() in ata_tport_add() (Yang Yingliang)   
  - arm64: dts: imx8mn: Fix NAND controller size-cells (Marek Vasut)   
  - arm64: dts: imx8mm: Fix NAND controller size-cells (Marek Vasut)   
  - ARM: dts: imx7: Fix NAND controller size-cells (Marek Vasut)   
  - drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker() (Shang XiaoJing)   
  - drm/drv: Fix potential memory leak in drm_dev_init() (Shang XiaoJing)   
  - drm/panel: simple: set bpc field for logic technologies displays (Aishwarya Kothari)   
  - drm/vc4: kms: Fix IS_ERR() vs NULL check for vc4_kms (Gaosheng Cui)   
  - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map (Zeng Heng)   
  - parport_pc: Avoid FIFO port location truncation (Maciej W. Rozycki)   
  - siox: fix possible memory leak in siox_device_add() (Yang Yingliang)   
  - arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro (D Scott Phillips)   
  - bpf: Fix memory leaks in __check_func_call (Wang Yufen)   
  - block: sed-opal: kmalloc the cmd/resp buffers (Serge Semin)   
  - scsi: scsi_transport_sas: Fix error handling in sas_phy_add() (Yang Yingliang)   
  - pinctrl: rockchip: list all pins in a possible mux route for PX30 (Quentin Schulz)   
  - ASoC: soc-utils: Remove __exit for snd_soc_util_exit() (Chen Zhongjin)   
  - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() (Baisong Zhong)   
  - tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send (Duoming Zhou)   
  - serial: imx: Add missing .thaw_noirq hook (Shawn Guo)   
  - serial: 8250: omap: Flush PM QOS work on remove (Tony Lindgren)   
  - serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove() (Tony Lindgren)   
  - serial: 8250_omap: remove wait loop from Errata i202 workaround (Matthias Schiffer)   
  - serial: 8250: omap: Fix missing PM runtime calls for omap8250_set_mctrl() (Tony Lindgren)   
  - ARM: at91: pm: avoid soft resetting AC DLL (Claudiu Beznea)   
  - ASoC: tas2764: Fix set_tdm_slot in case of single slot (Martin Povišer)   
  - ASoC: tas2770: Fix set_tdm_slot in case of single slot (Martin Povišer)   
  - ASoC: core: Fix use-after-free in snd_soc_exit() (Chen Zhongjin)   
  - ARM: dts: at91: sama7g5: fix signal name of pin PB2 (Mihai Sain)   
  - spi: stm32: Print summary 'callbacks suppressed' message (Marek Vasut)   
  - arm64: dts: qcom: sm8350-hdk: Specify which LDO modes are allowed (Douglas Anderson)   
  - arm64: dts: qcom: sm8250-xperia-edo: Specify which LDO modes are allowed (Douglas Anderson)   
  - arm64: dts: qcom: sm8150-xperia-kumano: Specify which LDO modes are allowed (Douglas Anderson)   
  - arm64: dts: qcom: sa8155p-adp: Specify which LDO modes are allowed (Douglas Anderson)   
  - KVM: x86/pmu: Do not speculatively query Intel GP PMCs that don't exist yet (Like Xu)   
  - spi: intel: Use correct mask for flash and protected regions (Mika Westerberg)   
  - mtd: spi-nor: intel-spi: Disable write protection only if asked (Mika Westerberg)   
  - ASoC: codecs: jz4725b: Fix spelling mistake "Sourc" -> "Source", "Routee" -> "Route" (Colin Ian King)   
  - x86/cpu: Add several Intel server CPU model numbers (Tony Luck)   
  - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (Luiz Augusto von Dentz)   
  - btrfs: remove pointless and double ulist frees in error paths of qgroup tests (Filipe Manana)   
  - drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid (Nathan Huckleberry)   
  - i2c: i801: add lis3lv02d's I2C address for Vostro 5568 (Nam Cao)   
  - i2c: tegra: Allocate DMA memory for DMA engine (Thierry Reding)   
  - firmware: arm_scmi: Cleanup the core driver removal callback (Cristian Marussi)   
  - ACPI: x86: Add another system to quirk list for forcing StorageD3Enable (Mario Limonciello)   
  - NFSv4: Retry LOCK on OLD_STATEID during delegation return (Benjamin Coddington)   
  - btrfs: raid56: properly handle the error when unable to find the missing stripe (Qu Wenruo)   
  - RDMA/efa: Add EFA 0xefa2 PCI ID (Michael Margolin)   
  - ACPI: scan: Add LATT2021 to acpi_ignore_dep_ids[] (Hans de Goede)   
  - drm/amd/display: Remove wrong pipe control lock (Rodrigo Siqueira)   
  - ASoC: rt1308-sdw: add the default value of some registers (Shuming Fan)   
  - selftests/intel_pstate: fix build for ARCH=x86_64 (Ricardo Cañuelo)   
  - selftests/futex: fix build for clang (Ricardo Cañuelo)   
  - ASoC: Intel: sof_sdw: add quirk variant for LAPBC710 NUC15 (Pierre-Louis Bossart)   
  - ASoC: codecs: jz4725b: fix capture selector naming (Siarhei Volkau)   
  - ASoC: codecs: jz4725b: use right control for Capture Volume (Siarhei Volkau)   
  - ASoC: codecs: jz4725b: fix reported volume for Master ctl (Siarhei Volkau)   
  - ASoC: codecs: jz4725b: add missed Line In power control bit (Siarhei Volkau)   
  - spi: intel: Fix the offset to get the 64K erase opcode (Mauro Lima)   
  - ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK (Xiaolei Wang)   
  - ASoC: rt1019: Fix the TDM settings (Derek Fang)   
  - ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe (Zhang Qilong)   
  - ASoC: wm8997: Revert "ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe" (Zhang Qilong)   
  - ASoC: wm5110: Revert "ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe" (Zhang Qilong)   
  - ASoC: wm5102: Revert "ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe" (Zhang Qilong)   
  - LTS version: v5.15.79 (Jack Vogel)   
  - x86/cpu: Restore AMD's DE_CFG MSR after resume (Borislav Petkov)   
  - net: tun: call napi_schedule_prep() to ensure we own a napi (Eric Dumazet)   
  - drm/amdkfd: Migrate in CPU page fault use current mm (Philip Yang)   
  - marvell: octeontx2: build error: unknown type name 'u64' (Anders Roxell)   
  - dmaengine: at_hdmac: Check return code of dma_async_device_register (Tudor Ambarus)   
  - dmaengine: at_hdmac: Fix impossible condition (Tudor Ambarus)   
  - dmaengine: at_hdmac: Don't allow CPU to reorder channel enable (Tudor Ambarus)   
  - dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors (Tudor Ambarus)   
  - dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware (Tudor Ambarus)   
  - dmaengine: at_hdmac: Fix concurrency over the active list (Tudor Ambarus)   
  - dmaengine: at_hdmac: Free the memset buf without holding the chan lock (Tudor Ambarus)   
  - dmaengine: at_hdmac: Fix concurrency over descriptor (Tudor Ambarus)   
  - dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all() (Tudor Ambarus)   
  - dmaengine: at_hdmac: Protect atchan->status with the channel lock (Tudor Ambarus)   
  - dmaengine: at_hdmac: Do not call the complete callback on device_terminate_all (Tudor Ambarus)   
  - dmaengine: at_hdmac: Fix premature completion of desc in issue_pending (Tudor Ambarus)   
  - dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending (Tudor Ambarus)   
  - dmaengine: at_hdmac: Don't start transactions at tx_submit level (Tudor Ambarus)   
  - dmaengine: at_hdmac: Fix at_lli struct definition (Tudor Ambarus)   
  - cert host tools: Stop complaining about deprecated OpenSSL functions (Linus Torvalds)   
  - can: j1939: j1939_send_one(): fix missing CAN header initialization (Oliver Hartkopp)   
  - mm/shmem: use page_mapping() to detect page cache for uffd continue (Peter Xu)   
  - mm/memremap.c: map FS_DAX device memory as decrypted (Pankaj Gupta)   
  - mm/damon/dbgfs: check if rm_contexts input is for a real context (SeongJae Park)   
  - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (ZhangPeng)   
  - mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)   
  - btrfs: zoned: initialize device's zone info for seeding (Johannes Thumshirn)   
  - btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() (Zhang Xiaoxu)   
  - btrfs: fix match incorrectly in dev_args_match_device (Liu Shixin)   
  - wifi: ath11k: avoid deadlock during regulatory update in ath11k_regd_update() (Wen Gong)   
  - platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi (Jorge Lopez)   
  - drm/amdgpu: disable BACO on special BEIGE_GOBY card (Guchun Chen)   
  - drm/i915/dmabuf: fix sg_table handling in map_dma_buf (Matthew Auld)   
  - nilfs2: fix use-after-free bug of ns_writer on remount (Ryusuke Konishi)   
  - nilfs2: fix deadlock in nilfs_count_free_blocks() (Ryusuke Konishi)   
  - ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure (Shin'ichiro Kawasaki)   
  - vmlinux.lds.h: Fix placement of '.data..decrypted' section (Nathan Chancellor)   
  - ALSA: usb-audio: Add DSD support for Accuphase DAC-60 (Jussi Laako)   
  - ALSA: usb-audio: Add quirk entry for M-Audio Micro (Takashi Iwai)   
  - ALSA: usb-audio: Yet more regression for for the delayed card registration (Takashi Iwai)   
  - ALSA: hda/realtek: Add Positivo C6300 model quirk (Edson Juliano Drosdeck)   
  - ALSA: hda: fix potential memleak in 'add_widget_node' (Ye Bin)   
  - ALSA: hda/ca0132: add quirk for EVGA Z390 DARK (Xian Wang)   
  - ALSA: hda/hdmi - enable runtime pm for more AMD display audio (Evan Quan)   
  - mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA (Haibo Chen)   
  - mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)   
  - mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)   
  - mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)   
  - mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI (Brian Norris)   
  - MIPS: jump_label: Fix compat branch range check (Jiaxun Yang)   
  - arm64: efi: Fix handling of misaligned runtime regions and drop warning (Ard Biesheuvel)   
  - riscv: fix reserved memory setup (Conor Dooley)   
  - riscv: vdso: fix build with llvm (Jisheng Zhang)   
  - riscv: process: fix kernel info leakage (Jisheng Zhang)   
  - net: macvlan: fix memory leaks of macvlan_common_newlink (Chuang Wang)   
  - ethernet: tundra: free irq when alloc ring failed in tsi108_open() (Zhengchao Shao)   
  - net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open() (Zhengchao Shao)   
  - ethernet: s2io: disable napi when start nic failed in s2io_card_up() (Zhengchao Shao)   
  - net: atlantic: macsec: clear encryption keys from the stack (Antoine Tenart)   
  - net: phy: mscc: macsec: clear encryption keys when freeing a flow (Antoine Tenart)   
  - stmmac: dwmac-loongson: fix missing of_node_put() while module exiting (Yang Yingliang)   
  - stmmac: dwmac-loongson: fix missing pci_disable_device() in loongson_dwmac_probe() (Yang Yingliang)   
  - stmmac: dwmac-loongson: fix missing pci_disable_msi() while module exiting (Yang Yingliang)   
  - cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open() (Zhengchao Shao)   
  - mctp: Fix an error handling path in mctp_init() (Wei Yongjun)   
  - stmmac: intel: Update PCH PTP clock rate from 200MHz to 204.8MHz (Tan, Tee Min)   
  - stmmac: intel: Enable 2.5Gbps for Intel AlderLake-S (Wong Vee Khee)   
  - net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() (Zhengchao Shao)   
  - net: cpsw: disable napi in cpsw_ndo_open() (Zhengchao Shao)   
  - net/mlx5e: E-Switch, Fix comparing termination table instance (Roi Dayan)   
  - net/mlx5: Allow async trigger completion execution on single CPU systems (Roy Novich)   
  - net/mlx5: Bridge, verify LAG state when adding bond to bridge (Vlad Buslov)   
  - net: wwan: iosm: fix memory leak in ipc_pcie_read_bios_cfg (M Chetan Kumar)   
  - net: nixge: disable napi when enable interrupts failed in nixge_open() (Zhengchao Shao)   
  - net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init() (Zhengchao Shao)   
  - netfilter: Cleanup nft_net->module_list from nf_tables_exit_net() (Shigeru Yoshida)   
  - netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg() (Ziyang Xuan)   
  - perf tools: Add the include/perf/ directory to .gitignore (Donglin Peng)   
  - perf stat: Fix printing os->prefix in CSV metrics output (Athira Rajeev)   
  - drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() (Zhengchao Shao)   
  - net: lapbether: fix issue of invalid opcode in lapbeth_open() (Zhengchao Shao)   
  - dmaengine: ti: k3-udma-glue: fix memory leak when register device fail (Yang Yingliang)   
  - dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() (Christophe JAILLET)   
  - dmaengine: pxa_dma: use platform_get_irq_optional (Doug Brown)   
  - tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header (Xin Long)   
  - net: broadcom: Fix BCMGENET Kconfig (YueHaibing)   
  - net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable() (Rasmus Villemoes)   
  - can: af_can: fix NULL pointer dereference in can_rx_register() (Zhengchao Shao)   
  - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network (Alexander Potapenko)   
  - tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent (Lu Wei)   
  - drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() (Yuan Can)   
  - net: wwan: mhi: fix memory leak in mhi_mbim_dellink (HW He)   
  - net: wwan: iosm: fix memory leak in ipc_wwan_dellink (HW He)   
  - hamradio: fix issue of dev reference count leakage in bpq_device_event() (Zhengchao Shao)   
  - net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event() (Zhengchao Shao)   
  - KVM: s390: pv: don't allow userspace to set the clock under PV (Nico Boehr)   
  - phy: ralink: mt7621-pci: add sentinel to quirks table (John Thomson)   
  - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK (Gaosheng Cui)   
  - net: fman: Unregister ethernet device on removal (Sean Anderson)   
  - bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer (Alex Barba)   
  - bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() (Michael Chan)   
  - net: tun: Fix memory leaks of napi_get_frags (Wang Yufen)   
  - octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT] (Ratheesh Kannoth)   
  - octeontx2-pf: Use hardware register for CQE count (Geetha sowjanya)   
  - macsec: clear encryption keys from the stack after setting up offload (Sabrina Dubroca)   
  - macsec: fix detection of RXSCs when toggling offloading (Sabrina Dubroca)   
  - macsec: fix secy->n_rx_sc accounting (Sabrina Dubroca)   
  - macsec: delete new rxsc when offload fails (Sabrina Dubroca)   
  - net: gso: fix panic on frag_list with mixed head alloc types (Jiri Benc)   
  - bpf: Fix wrong reg type conversion in release_reference() (Youlin Li)   
  - bpf: Add helper macro bpf_for_each_reg_in_vstate (Kumar Kartikeya Dwivedi)   
  - bpf, sock_map: Move cancel_work_sync() out of sock lock (Cong Wang)   
  - bpf: Fix sockmap calling sleepable function in teardown path (John Fastabend)   
  - bpf, sockmap: Fix sk->sk_forward_alloc warn_on in sk_stream_kill_queues (Wang Yufen)   
  - HID: hyperv: fix possible memory leak in mousevsc_probe() (Yang Yingliang)   
  - bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE (Pu Lehui)   
  - wifi: mac80211: Set TWT Information Frame Disabled bit as 1 (Howard Hsu)   
  - bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues (Wang Yufen)   
  - bpf, verifier: Fix memory leak in array reallocation for stack state (Kees Cook)   
  - soundwire: qcom: check for outanding writes before doing a read (Srinivas Kandagatla)   
  - soundwire: qcom: reinit broadcast completion (Srinivas Kandagatla)   
  - wifi: cfg80211: fix memory leak in query_regdb_file() (Arend van Spriel)   
  - wifi: cfg80211: silence a sparse RCU warning (Johannes Berg)   
  - phy: stm32: fix an error code in probe (Dan Carpenter)   
  - hwspinlock: qcom: correct MMIO max register for newer SoCs (Krzysztof Kozlowski)   
  - drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram() (Yang Li)   
  - drm/amdkfd: handle CPU fault on COW mapping (Philip Yang)   
  - drm/amdkfd: avoid recursive lock in migrations back to RAM (Alex Sierra)   
  - fuse: fix readdir cache race (Miklos Szeredi)   
  - thunderbolt: Add DP OUT resource when DP tunnel is discovered (Sanjay R Mehta)   
  - thunderbolt: Tear down existing tunnels when resuming from hibernate (Mika Westerberg)   
  - LTS version: v5.15.78 (Jack Vogel)   
  - wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() (Dokyung Song)   
  - drm/i915/sdvo: Setup DDC fully before output init (Ville Syrjälä)   
  - drm/i915/sdvo: Filter out invalid outputs more sensibly (Ville Syrjälä)   
  - drm/rockchip: dsi: Force synchronous probe (Brian Norris)   
  - drm/rockchip: dsi: Clean up 'usage_mode' when failing to attach (Brian Norris)   
  - cifs: fix regression in very old smb1 mounts (Ronnie Sahlberg)   
  - ext4,f2fs: fix readahead of verity data (Matthew Wilcox (Oracle))   
  - tee: Fix tee_shm_register() for kernel TEE drivers (Sumit Garg)   
  - KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky)   
  - KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky)   
  - KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky)   
  - KVM: x86: emulator: em_sysexit should update ctxt->mode (Maxim Levitsky)   
  - KVM: arm64: Fix bad dereference on MTE-enabled systems (Ryan Roberts)   
  - KVM: VMX: fully disable SGX if SECONDARY_EXEC_ENCLS_EXITING unavailable (Emanuele Giuseppe Esposito)   
  - KVM: x86: Mask off reserved bits in CPUID.8000001FH (Jim Mattson)   
  - KVM: x86: Mask off reserved bits in CPUID.80000001H (Jim Mattson)   
  - KVM: x86: Mask off reserved bits in CPUID.80000008H (Jim Mattson)   
  - KVM: x86: Mask off reserved bits in CPUID.8000001AH (Jim Mattson)   
  - KVM: x86: Mask off reserved bits in CPUID.80000006H (Jim Mattson)   
  - x86/syscall: Include asm/ptrace.h in syscall_wrapper header (Jiri Olsa)   
  - ext4: fix BUG_ON() when directory entry has invalid rec_len (Luís Henriques)   
  - ext4: fix warning in 'ext4_da_release_space' (Ye Bin)   
  - parisc: Avoid printing the hardware path twice (Helge Deller)   
  - parisc: Export iosapic_serial_irq() symbol for serial port driver (Helge Deller)   
  - parisc: Make 8250_gsc driver dependend on CONFIG_PARISC (Helge Deller)   
  - perf/x86/intel: Fix pebs event constraints for SPR (Kan Liang)   
  - perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[] (Kan Liang)   
  - perf/x86/intel: Fix pebs event constraints for ICL (Kan Liang)   
  - arm64: entry: avoid kprobe recursion (Mark Rutland)   
  - efi: random: Use 'ACPI reclaim' memory for random seed (Ard Biesheuvel)   
  - efi: random: reduce seed size to 32 bytes (Ard Biesheuvel)   
  - fuse: add file_modified() to fallocate (Miklos Szeredi)   
  - capabilities: fix potential memleak on error path from vfs_getxattr_alloc() (Gaosheng Cui)   
  - tracing/histogram: Update document for KEYS_MAX size (Zheng Yejian)   
  - tools/nolibc/string: Fix memcmp() implementation (Rasmus Villemoes)   
  - ring-buffer: Check for NULL cpu_buffer in ring_buffer_wake_waiters() (Steven Rostedt (Google))   
  - kprobe: reverse kp->flags when arm_kprobe failed (Li Qiang)   
  - tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() (Shang XiaoJing)   
  - tcp/udp: Make early_demux back namespacified. (Kuniyuki Iwashima)   
  - ftrace: Fix use-after-free for dynamic ftrace_ops (Li Huafei)   
  - btrfs: fix type of parameter generation in btrfs_get_dentry (David Sterba)   
  - btrfs: fix tree mod log mishandling of reallocated nodes (Josef Bacik)   
  - btrfs: fix lost file sync on direct IO write with nowait and dsync iocb (Filipe Manana)   
  - fscrypt: fix keyring memory leak on mount failure (Eric Biggers)   
  - fscrypt: stop using keyrings subsystem for fscrypt_master_key (Eric Biggers)   
  - af_unix: Fix memory leaks of the whole sk due to OOB skb. (Kuniyuki Iwashima)   
  - block, bfq: protect 'bfqd->queued' by 'bfqd->lock' (Yu Kuai)   
  - Bluetooth: L2CAP: Fix attempting to access uninitialized memory (Luiz Augusto von Dentz)   {CVE-2022-42895} 
  - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (Luiz Augusto von Dentz)   {CVE-2022-42896} 
  - i2c: piix4: Fix adapter not be removed in piix4_remove() (Chen Zhongjin)   
  - arm64: dts: juno: Add thermal critical trip points (Cristian Marussi)   
  - firmware: arm_scmi: Fix devres allocation device in virtio transport (Cristian Marussi)   
  - firmware: arm_scmi: Make Rx chan_setup fail on memory errors (Cristian Marussi)   
  - firmware: arm_scmi: Suppress the driver's bind attributes (Cristian Marussi)   
  - block: Fix possible memory leak for rq_wb on add_disk failure (Chen Zhongjin)   
  - arm64: dts: ls208xa: specify clock frequencies for the MDIO controllers (Ioana Ciornei)   
  - arm64: dts: ls1088a: specify clock frequencies for the MDIO controllers (Ioana Ciornei)   
  - arm64: dts: lx2160a: specify clock frequencies for the MDIO controllers (Ioana Ciornei)   
  - arm64: dts: imx8: correct clock order (Peng Fan)   
  - ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset (Tim Harvey)   
  - clk: qcom: Update the force mem core bit for GPU clocks (Taniya Das)   
  - efi/tpm: Pass correct address to memblock_reserve (Jerry Snitselaar)   
  - i2c: xiic: Add platform module alias (Martin Tůma)   
  - drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case (Danijel Slivka)   
  - HID: saitek: add madcatz variant of MMO7 mouse device ID (Samuel Bailey)   
  - scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar)   
  - ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() (Ashish Kalra)   
  - media: v4l: subdev: Fail graciously when getting try data for NULL state (Sakari Ailus)   
  - media: meson: vdec: fix possible refcount leak in vdec_probe() (Hangyu Hua)   
  - media: dvb-frontends/drxk: initialize err to 0 (Hans Verkuil)   
  - media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE (Hans Verkuil)   
  - media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE (Hans Verkuil)   
  - media: rkisp1: Zero v4l2_subdev_format fields in when validating links (Laurent Pinchart)   
  - media: rkisp1: Use correct macro for gradient registers (Laurent Pinchart)   
  - media: rkisp1: Initialize color space on resizer sink and source pads (Laurent Pinchart)   
  - media: rkisp1: Don't pass the quantization to rkisp1_csm_config() (Laurent Pinchart)   
  - s390/cio: fix out-of-bounds access on cio_ignore free (Peter Oberparleiter)   
  - s390/cio: derive cdev information only for IO-subchannels (Vineeth Vijayan)   
  - s390/boot: add secure boot trailer (Peter Oberparleiter)   
  - s390/uaccess: add missing EX_TABLE entries to __clear_user() (Heiko Carstens)   
  - mtd: parsers: bcm47xxpart: Fix halfblock reads (Linus Walleij)   
  - mtd: parsers: bcm47xxpart: print correct offset on read error (Rafał Miłecki)   
  - fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards (Helge Deller)   
  - video/fbdev/stifb: Implement the stifb_fillrect() function (Helge Deller)   
  - drm/msm/hdmi: fix IRQ lifetime (Johan Hovold)   
  - drm/msm/hdmi: Remove spurious IRQF_ONESHOT flag (Daniel Thompson)   
  - vsock: fix possible infinite sleep in vsock_connectible_wait_data() (Dexuan Cui)   
  - ipv6: fix WARNING in ip6_route_net_exit_late() (Zhengchao Shao)   
  - net, neigh: Fix null-ptr-deref in neigh_table_clear() (Chen Zhongjin)   
  - net/smc: Fix possible leaked pernet namespace in smc_init() (Chen Zhongjin)   
  - stmmac: dwmac-loongson: fix invalid mdio_node (Liu Peibao)   
  - ibmvnic: Free rwi on reset success (Nick Child)   
  - net: mdio: fix undefined behavior in bit shift for __mdiobus_register (Gaosheng Cui)   
  - Bluetooth: L2CAP: Fix memory leak in vhci_write (Hawkins Jiawei)   
  - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() (Zhengchao Shao)   
  - Bluetooth: virtio_bt: Use skb_put to set length (Soenke Huster)   
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Maxim Mikityanskiy)   
  - netfilter: ipset: enforce documented limit to prevent allocating huge memory (Jozsef Kadlecsik)   
  - btrfs: fix ulist leaks in error paths of qgroup self tests (Filipe Manana)   
  - btrfs: fix inode list leak during backref walking at find_parent_nodes() (Filipe Manana)   
  - btrfs: fix inode list leak during backref walking at resolve_indirect_refs() (Filipe Manana)   
  - isdn: mISDN: netjet: fix wrong check of device registration (Yang Yingliang)   
  - mISDN: fix possible memory leak in mISDN_register_device() (Yang Yingliang)   
  - rose: Fix NULL pointer dereference in rose_send_frame() (Zhang Qilong)   
  - ipvs: fix WARNING in ip_vs_app_net_cleanup() (Zhengchao Shao)   
  - ipvs: fix WARNING in __ip_vs_cleanup_batch() (Zhengchao Shao)   
  - ipvs: use explicitly signed chars (Jason A. Donenfeld)   
  - netfilter: nf_tables: release flow rule object from commit path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: netlink notifier might race to release objects (Pablo Neira Ayuso)   
  - net: tun: fix bugs for oversize packet when napi frags enabled (Ziyang Xuan)   
  - net: sched: Fix use after free in red_enqueue() (Dan Carpenter)   
  - ata: pata_legacy: fix pdc20230_set_piomode() (Sergey Shtylyov)   
  - net: fec: fix improper use of NETDEV_TX_BUSY (Zhang Changzhong)   
  - nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() (Shang XiaoJing)   
  - nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() (Shang XiaoJing)   
  - nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() (Shang XiaoJing)   
  - nfc: fdp: Fix potential memory leak in fdp_nci_send() (Shang XiaoJing)   
  - net: dsa: fall back to default tagger if we can't load the one from DT (Vladimir Oltean)   
  - RDMA/qedr: clean up work queue on failure in qedr_alloc_resources() (Dan Carpenter)   
  - RDMA/core: Fix null-ptr-deref in ib_core_cleanup() (Chen Zhongjin)   
  - net: dsa: Fix possible memory leaks in dsa_loop_init() (Chen Zhongjin)   
  - nfs4: Fix kmemleak when allocate slot failed (Zhang Xiaoxu)   
  - NFSv4.2: Fixup CLONE dest file size for zero-length count (Benjamin Coddington)   
  - SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed (Zhang Xiaoxu)   
  - NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot (Trond Myklebust)   
  - NFSv4.1: Handle RECLAIM_COMPLETE trunking errors (Trond Myklebust)   
  - NFSv4: Fix a potential state reclaim deadlock (Trond Myklebust)   
  - RDMA/hns: Disable local invalidate operation (Yangyang Li)   
  - RDMA/hns: Use hr_reg_xxx() instead of remaining roce_set_xxx() (Wenpeng Liang)   
  - RDMA/hns: Remove magic number (Xinhao Liu)   
  - IB/hfi1: Correctly move list in sc_disable() (Dean Luick)   
  - KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER (Alexander Graf)   
  - KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() (Alexander Graf)   
  - KVM: x86: Protect the unused bits in MSR exiting flags (Aaron Lewis)   
  - HID: playstation: add initial DualSense Edge controller support (Roderick Colenbrander)   
  - mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page (Baolin Wang)   
  - drm/amd/display: explicitly disable psr_feature_enable appropriately (Shirish S)   
  - KVM: x86: Treat #DBs from the emulator as fault-like (code and DR7.GD=1) (Sean Christopherson)   
  - serial: ar933x: Deassert Transmit Enable on ->rs485_config() (Lukas Wunner)   
  - scsi: lpfc: Rework MIB Rx Monitor debug info logic (James Smart)   
  - scsi: lpfc: Adjust CMF total bytes and rxmonitor (James Smart)   
  - scsi: lpfc: Adjust bytes received vales during cmf timer interval (James Smart)   
  - LTS version: v5.15.77 (Jack Vogel)   
  - tcp/udp: Fix memory leak in ipv6_renew_options(). (Kuniyuki Iwashima)   
  - serial: Deassert Transmit Enable on probe in driver-specific way (Lukas Wunner)   
  - serial: core: move RS485 configuration tasks from drivers into core (Lino Sanfilippo)   
  - can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive (Biju Das)   
  - can: rcar_canfd: fix channel specific IRQ handling for RZ/G2L (Biju Das)   
  - scsi: sd: Revert "scsi: sd: Remove a local variable" (Yu Kuai)   
  - arm64: Add AMPERE1 to the Spectre-BHB affected list (D Scott Phillips)   
  - net: enetc: survive memory pressure without crashing (Vladimir Oltean)   
  - kcm: do not sense pfmemalloc status in kcm_sendpage() (Eric Dumazet)   
  - net: do not sense pfmemalloc status in skb_append_pagefrags() (Eric Dumazet)   
  - net/mlx5: Fix crash during sync firmware reset (Suresh Devarakonda)   
  - net/mlx5: Update fw fatal reporter state on PCI handlers successful recover (Roy Novich)   
  - net/mlx5: Print more info on pci error handlers (Saeed Mahameed)   
  - net/mlx5: Fix possible use-after-free in async command interface (Tariq Toukan)   
  - net/mlx5e: Extend SKB room check to include PTP-SQ (Aya Levin)   
  - net/mlx5e: Do not increment ESN when updating IPsec ESN state (Hyong Youb Kim)   
  - netdevsim: remove dir in nsim_dev_debugfs_init() when creating ports dir failed (Zhengchao Shao)   
  - net: broadcom: bcm4908_enet: update TX stats after actual transmission (Rafał Miłecki)   
  - net: broadcom: bcm4908enet: remove redundant variable bytes (Colin Ian King)   
  - nh: fix scope used to find saddr when adding non gw nh (Nicolas Dichtel)   
  - net: bcmsysport: Indicate MAC is in charge of PHY PM (Florian Fainelli)   
  - net: ehea: fix possible memory leak in ehea_register_port() (Yang Yingliang)   
  - openvswitch: switch from WARN to pr_warn (Aaron Conole)   
  - ALSA: aoa: Fix I2S device accounting (Takashi Iwai)   
  - ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() (Yang Yingliang)   
  - net: ethernet: ave: Fix MAC to be in charge of PHY PM (Kunihiko Hayashi)   
  - net: fec: limit register access on i.MX6UL (Juergen Borleis)   
  - perf vendor events arm64: Fix incorrect Hisi hip08 L3 metrics (Shang XiaoJing)   
  - PM: domains: Fix handling of unavailable/disabled idle states (Sudeep Holla)   
  - net: ksz884x: fix missing pci_disable_device() on error in pcidev_init() (Yang Yingliang)   
  - i40e: Fix flow-type by setting GL_HASH_INSET registers (Slawomir Laba)   
  - i40e: Fix VF hang when reset is triggered on another VF (Sylwester Dziedziuch)   
  - i40e: Fix ethtool rx-flow-hash setting for X722 (Slawomir Laba)   
  - ipv6: ensure sane device mtu in tunnels (Eric Dumazet)   
  - perf vendor events power10: Fix hv-24x7 metric events (Kajol Jain)   
  - media: vivid: set num_in/outputs to 0 if not supported (Hans Verkuil)   
  - media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced' (Hans Verkuil)   
  - media: v4l2-dv-timings: add sanity checks for blanking values (Hans Verkuil)   
  - media: vivid: dev->bitmap_cap wasn't freed in all cases (Hans Verkuil)   
  - media: vivid: s_fbuf: add more sanity checks (Hans Verkuil)   
  - PM: hibernate: Allow hybrid sleep to work with s2idle (Mario Limonciello)   
  - can: mcp251x: mcp251x_can_probe(): add missing unregister_candev() in error path (Dongliang Mu)   
  - can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path (Dongliang Mu)   
  - drm/amdkfd: Fix memory leak in kfd_mem_dmamap_userptr() (Rafael Mendonca)   
  - net-memcg: avoid stalls when under memory pressure (Jakub Kicinski)   
  - tcp: fix indefinite deferral of RTO with SACK reneging (Neal Cardwell)   
  - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Lu Wei)   
  - tcp: minor optimization in tcp_add_backlog() (Eric Dumazet)   
  - net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY (Zhang Changzhong)   
  - net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed (Zhengchao Shao)   
  - kcm: annotate data-races around kcm->rx_wait (Eric Dumazet)   
  - kcm: annotate data-races around kcm->rx_psock (Eric Dumazet)   
  - atlantic: fix deadlock at aq_nic_stop (Íñigo Huguet)   
  - drm/i915/dp: Reset frl trained flag before restarting FRL training (Ankit Nautiyal)   
  - amd-xgbe: add the bit rate quirk for Molex cables (Raju Rangoju)   
  - amd-xgbe: fix the SFP compliance codes check for DAC cables (Raju Rangoju)   
  - x86/unwind/orc: Fix unreliable stack dump with gcov (Chen Zhongjin)   
  - nfc: virtual_ncidev: Fix memory leak in virtual_nci_send() (Shang XiaoJing)   
  - net: macb: Specify PHY PM management done by MAC (Sergiu Moga)   
  - net: hinic: fix the issue of double release MBOX callback of VF (Zhengchao Shao)   
  - net: hinic: fix the issue of CMDQ memory leaks (Zhengchao Shao)   
  - net: hinic: fix memory leak when reading function table (Zhengchao Shao)   
  - net: hinic: fix incorrect assignment issue in hinic_set_interrupt_cfg() (Zhengchao Shao)   
  - net: netsec: fix error handling in netsec_register_mdio() (Yang Yingliang)   
  - tipc: fix a null-ptr-deref in tipc_topsrv_accept (Xin Long)   
  - perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap() (Maxim Levitsky)   
  - ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() (Yang Yingliang)   
  - ASoC: qcom: lpass-cpu: Mark HDMI TX parity register as volatile (Srinivasa Rao Mandadapu)   
  - mtd: rawnand: intel: Add missing of_node_put() in ebu_nand_probe() (Yang Yingliang)   
  - arc: iounmap() arg is volatile (Randy Dunlap)   
  - sched/core: Fix comparison in sched_group_cookie_match() (Lin Shengwang)   
  - perf: Fix missing SIGTRAPs (Peter Zijlstra)   
  - ASoC: qcom: lpass-cpu: mark HDMI TX registers as volatile (Srinivasa Rao Mandadapu)   
  - KVM: selftests: Fix number of pages for memory slot in memslot_modification_stress_test (Gavin Shan)   
  - drm/msm: Fix return type of mdp4_lvds_connector_mode_valid (Nathan Huckleberry)   
  - media: atomisp: prevent integer overflow in sh_css_set_black_frame() (Dan Carpenter)   
  - media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation (Alexander Stein)   
  - net: ieee802154: fix error return code in dgram_bind() (Wei Yongjun)   
  - ethtool: eeprom: fix null-deref on genl_info in dump (Xin Long)   
  - mmc: block: Remove error check of hw_reset on reset (Christian Löhle)   
  - s390/pci: add missing EX_TABLE entries to __pcistg_mio_inuser()/__pcilg_mio_inuser() (Heiko Carstens)   
  - s390/futex: add missing EX_TABLE entry to __futex_atomic_op() (Heiko Carstens)   
  - perf auxtrace: Fix address filter symbol name match for modules (Adrian Hunter)   
  - ARC: mm: fix leakage of memory allocated for PTE (Pavel Kozlov)   
  - pinctrl: Ingenic: JZ4755 bug fixes (Siarhei Volkau)   
  - kernfs: fix use-after-free in __kernfs_remove (Christian A. Ehrhardt)   
  - counter: microchip-tcb-capture: Handle Signal1 read and Synapse (William Breathitt Gray)   
  - mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on 8bit bus (Sascha Hauer)   
  - mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake (Patrick Thompson)   
  - mmc: core: Fix kernel panic when remove non-standard SDIO card (Matthew Ma)   
  - mmc: sdhci_am654: 'select', not 'depends' REGMAP_MMIO (Brian Norris)   
  - coresight: cti: Fix hang in cti_disable_hw() (James Clark)   
  - drm/msm/dp: fix IRQ lifetime (Johan Hovold)   
  - drm/msm/hdmi: fix memory corruption with too many bridges (Johan Hovold)   
  - drm/msm/dsi: fix memory corruption with too many bridges (Johan Hovold)   
  - drm/amdgpu: disallow gfxoff until GC IP blocks complete s2idle resume (Prike Liang)   
  - scsi: qla2xxx: Use transport-defined speed mask for supported_speeds (Manish Rangankar)   
  - mac802154: Fix LQI recording (Miquel Raynal)   
  - exec: Copy oldsighand->action under spin-lock (Bernd Edlinger)   
  - fs/binfmt_elf: Fix memory leak in load_elf_binary() (Li Zetao)   
  - cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (Rafael J. Wysocki)   
  - cpufreq: intel_pstate: Read all MSRs on the target CPU (Rafael J. Wysocki)   
  - fbdev: smscufx: Fix several use-after-free bugs (Hyunwoo Kim)   
  - iio: adxl372: Fix unsafe buffer attributes (Matti Vaittinen)   
  - iio: temperature: ltc2983: allocate iio channels once (Cosmin Tanislav)   
  - iio: light: tsl2583: Fix module unloading (Shreeya Patel)   
  - tools: iio: iio_utils: fix digit calculation (Matti Vaittinen)   
  - xhci: Remove device endpoints from bandwidth list when freeing the device (Mathias Nyman)   
  - xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices (Mario Limonciello)   
  - xhci: Add quirk to reset host back to default state at shutdown (Mathias Nyman)   
  - mtd: rawnand: marvell: Use correct logic for nand-keep-config (Tony O'Brien)   
  - usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller (Jens Glathe)   
  - usb: bdc: change state when port disconnected (Justin Chen)   
  - usb: dwc3: gadget: Don't set IMI for no_interrupt (Thinh Nguyen)   
  - usb: dwc3: gadget: Stop processing more requests on IMI (Thinh Nguyen)   
  - usb: gadget: uvc: fix sg handling during video encode (Jeff Vanhoof)   
  - usb: gadget: uvc: fix sg handling in error case (Dan Vacura)   
  - USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM (Hannu Hartikainen)   
  - ALSA: rme9652: use explicitly signed char (Jason A. Donenfeld)   
  - ALSA: au88x0: use explicitly signed char (Jason A. Donenfeld)   
  - ALSA: usb-audio: Add quirks for M-Audio Fast Track C400/600 (Takashi Iwai)   
  - ALSA: Use del_timer_sync() before freeing timer (Steven Rostedt (Google))   
  - can: kvaser_usb: Fix possible completions during init_completion (Anssi Hannula)   
  - can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb() (Yang Yingliang)   
  - NFSv4: Add an fattr allocation to _nfs4_discover_trunking() (Scott Mayhew)   
  - NFSv4: Fix free of uninitialized nfs4_label on referral lookup. (Benjamin Coddington)   
  - rds: ib: Enable FC by default (Håkon Bugge)  [Orabug: 33930793]  
  - Adding a new sysfs entry point -- forcepower -- to /sys/bus/pci/slots/X. (James Puthukattukaran)  [Orabug: 34719459]  
  - nvme: paring quiesce/unquiesce (Ming Lei)  [Orabug: 34719459]  
  - nvme: prepare for pairing quiescing and unquiescing (Ming Lei)  [Orabug: 34719459]  
  - nvme: apply nvme API to quiesce/unquiesce admin queue (Ming Lei)  [Orabug: 34719459]  
  - nvme: add APIs for stopping/starting admin queue (Ming Lei)  [Orabug: 34719459]  
  - hugetlbfs: don't delete error page from pagecache (James Houghton)  [Orabug: 34772616]  
  - mm: shmem: don't truncate page if memory failure happens (Yang Shi)  [Orabug: 34772616]  
  - mm: hwpoison: handle non-anonymous THP correctly (Yang Shi)  [Orabug: 34772616]  
  - mm: hwpoison: refactor refcount check handling (Yang Shi)  [Orabug: 34772616]  
  - net/rds: Quiesce heartbeat worker in rds_conn_path_destroy() (Sharath Srinivasan)  [Orabug: 34815818]  
  - net/rds: Add support for tracing RDS heartbeats (Sharath Srinivasan)  [Orabug: 34815818]  
  - net/rds: Enable RDS heartbeat by default (Sharath Srinivasan)  [Orabug: 34815818]  
  - uek-rpm: core.list: add VirtualBox guest drivers to core package (Todd Vierling)  [Orabug: 34820755]  
  - tools/power turbostat: fix SPR PC6 limits (Artem Bityutskiy)  [Orabug: 34838996]  
  - tools/power turbostat: separate SPR from ICX (Artem Bityutskiy)  [Orabug: 34838996]  
  - rds: ib: Fix incorrect error handling during QP creation (Håkon Bugge)  [Orabug: 34857202]  
  - Revert "random: clear fast pool, crng, and batches in cpuhp bring up" (Somasundaram Krishnasamy)  [Orabug: 34850847]  
  - uek: kabi: update kABI files for new symbols (Saeed Mirzamohammadi)  [Orabug: 34850847]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-6.80.2.el9uek]
changelog:
  - scsi: mpi3mr: Remove unnecessary cast (Jules Irenge)  [Orabug: 34640445]  
  - scsi: mpi3mr: Update driver version to 8.2.0.3.0 (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Fix scheduling while atomic type bug (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Scan the devices during resume time (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Free enclosure objects during driver unload (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Handle 0xF003 Fault Code (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Graceful handling of surprise removal of PCIe HBA (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Support new power management framework (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Update mpi3 header files (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Fix error code in mpi3mr_transport_smp_handler() (Dan Carpenter)  [Orabug: 34640445]  
  - scsi: mpi3mr: Fix error codes in mpi3mr_report_manufacture() (Dan Carpenter)  [Orabug: 34640445]  
  - scsi: mpi3mr: Block I/Os while refreshing target dev objects (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Refresh SAS ports during soft reset (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Support SAS transport class callbacks (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add framework to issue MPT transport cmds (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add SAS SATA end devices to STL (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Get target object based on rphy (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add expander devices to STL (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Enable STL on HBAs where multipath is disabled (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add helper functions to manage device's port (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add helper functions to retrieve device objects (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add framework to add phys to STL (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Enable Enclosure device add event (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add helper functions to retrieve config pages (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add framework to issue config requests (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add config and transport related debug flags (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Delete a stray tab (Dan Carpenter)  [Orabug: 34640445]  
  - scsi: mpi3mr: Unlock on error path (Dan Carpenter)  [Orabug: 34640445]  
  - scsi: mpi3mr: Reduce VD queue depth on detecting throttling (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Resource Based Metering (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Increase cmd_per_lun to 128 (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Enable shared host tagset (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Fix kernel-doc (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Rework mrioc->bsg_device model to fix warnings (Sumit Saxena)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add target device related sysfs (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add shost related sysfs attributes (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Return error if dma_alloc_coherent() fails (Dan Carpenter)  [Orabug: 34640445]  
  - scsi: mpi3mr: Fix a NULL vs IS_ERR() bug in mpi3mr_bsg_init() (Dan Carpenter)  [Orabug: 34640445]  
  - scsi: mpi3mr: Return I/Os to an unrecoverable HBA with DID_ERROR (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Hidden drives not removed during soft reset (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Increase I/O timeout value to 60s (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Update driver version to 8.0.0.69.0 (Sumit Saxena)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add support for NVMe passthrough (Sumit Saxena)  [Orabug: 34640445]  
  - scsi: mpi3mr: Expose adapter state to sysfs (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add support for PEL commands (Sumit Saxena)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add support for MPT commands (Sumit Saxena)  [Orabug: 34640445]  
  - scsi: mpi3mr: Move data structures/definitions from MPI headers to uapi header (Sumit Saxena)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add support for driver commands (Sumit Saxena)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add bsg device support (Sumit Saxena)  [Orabug: 34640445]  
  - scsi: mpi3mr: Fix flushing !WQ_MEM_RECLAIM events warning (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Bump driver version to 8.0.0.68.0 (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Update the copyright year (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Fix cmnd getting marked as in use forever (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Fix hibernation issue (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Update MPI3 headers (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Fix printing of pending I/O count (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Fix deadlock while canceling the fw event (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Fix formatting problems in some kernel-doc comments (Yang Li)  [Orabug: 34640445]  
  - scsi: mpi3mr: Fix some spelling mistakes (Colin Ian King)  [Orabug: 34640445]  
  - scsi: mpi3mr: Bump driver version to 8.0.0.61.0 (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Enhanced Task Management Support Reply handling (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Use TM response codes from MPI3 headers (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add io_uring interface support in I/O-polled mode (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Print cable mngnt and temp threshold events (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Support Prepare for Reset event (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add Event acknowledgment logic (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Gracefully handle online FW update operation (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Detect async reset that occurred in firmware (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add IOC reinit function (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Handle offline FW activation in graceful manner (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Code refactor of IOC init - part2 (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Code refactor of IOC init - part1 (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Fault IOC when internal command gets timeout (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Display IOC firmware package version (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Handle unaligned PLL in unmap cmnds (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Increase internal cmnds timeout to 60s (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Do access status validation before adding devices (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add support for PCIe Managed Switch SES device (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Update MPI3 headers - part2 (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Update MPI3 headers - part1 (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Don't reset IOC if cmnds flush with reset status (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Replace spin_lock() with spin_lock_irqsave() (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add debug APIs based on logging_level bits (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Use scnprintf() instead of snprintf() (Dan Carpenter)  [Orabug: 34640445]  
  - scsi: mpi3mr: Clean up mpi3mr_print_ioc_info() (Dan Carpenter)  [Orabug: 34640445]  
  - rds: ib: Remove unnecessary call to rds_ib_ring_unalloc (Håkon Bugge)  [Orabug: 34768825]  
  - rds: ib: Remove unnecessary i_flowctl term from conditions (Håkon Bugge)  [Orabug: 34768825]  
  - rds: ib: Remove unnesesarry variable initialization (Håkon Bugge)  [Orabug: 34768825]  
  - rds: ib: Make sure receives are posted before connection is up (Håkon Bugge)  [Orabug: 34768825]  
  - rds: ib: Fix the Retry counter dependency on RNR NAK Retry counter (Håkon Bugge)  [Orabug: 34768825]  
  - rds: Deduct one credit on the passive side (Håkon Bugge)  [Orabug: 34768825]  
  - rds: Use all eight bits for credit updates (Håkon Bugge)  [Orabug: 34768825]  
  - RDS/IB: Fix the misplaced counter update rdma dto path (Devesh Sharma)  [Orabug: 34865847]  
  - uek-rpm: Enable CONFIG_HP_ILO for aarch64 (Saeed Mirzamohammadi)  [Orabug: 34869880]  
  - uek-rpm: ol8: Choose right annobin plugin for UEK build (Somasundaram Krishnasamy)  [Orabug: 34873882]  
  - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds)  [Orabug: 34882775]  {CVE-2022-4378} 
  - proc: avoid integer type confusion in get_proc_long (Linus Torvalds)  [Orabug: 34882775]  {CVE-2022-4378}


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-7.86.1.el9uek]
changelog:
  - LTS version: v5.15.86 (Jack Vogel)   
  - pwm: tegra: Fix 32 bit build (Steven Price)   
  - mfd: qcom_rpm: Use devm_of_platform_populate() to simplify code (Christophe JAILLET)   
  - extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered (Yassine Oudjana)   
  - media: dvbdev: fix refcnt bug (Lin Ma)   
  - media: dvbdev: fix build warning due to comments (Lin Ma)   
  - net: stmmac: fix errno when create_singlethread_workqueue() fails (Gaosheng Cui)   
  - scsi: qla2xxx: Fix crash when I/O abort times out (Arun Easi)   
  - btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range (Filipe Manana)   
  - ovl: fix use inode directly in rcu-walk mode (Chen Zhongjin)   
  - fbdev: fbcon: release buffer when fbcon_do_set_font() failed (Tetsuo Handa)   
  - gcov: add support for checksum field (Rickard x Andersson)   
  - floppy: Fix memory leak in do_floppy_init() (Yuan Can)   
  - regulator: core: fix deadlock on regulator enable (Johan Hovold)   
  - iio: adc128s052: add proper .data members in adc128_of_match table (Rasmus Villemoes)   
  - iio: adc: ad_sigma_delta: do not use internal iio_dev lock (Nuno Sá)   
  - iio: fix memory leak in iio_device_register_eventset() (Zeng Heng)   
  - reiserfs: Add missing calls to reiserfs_security_free() (Roberto Sassu)   
  - security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 (Nathan Chancellor)   
  - 9p: set req refcount to zero to avoid uninitialized usage (Schspa Shi)   
  - loop: Fix the max_loop commandline argument treatment when it is set to 0 (Isaac J. Manjarres)   
  - HID: mcp2221: don't connect hidraw (Enrik Berkhan)   
  - HID: wacom: Ensure bootloader PID is usable in hidraw mode (Jason Gerecke)   
  - xhci: Prevent infinite loop in transaction errors recovery for streams (Mathias Nyman)   
  - usb: dwc3: core: defer probe on ulpi_read_id timeout (Ferry Toth)   
  - usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode (Sven Peter)   
  - arm64: dts: qcom: sm8250: fix USB-DP PHY registers (Johan Hovold)   
  - usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq (Chunfeng Yun)   
  - usb: cdnsp: fix lack of ZLP for ep0 (Pawel Laszczak)   
  - ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list (Jiao Zhou)   
  - ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB (Edward Pacman)   
  - ALSA: usb-audio: add the quirk for KT0206 device (wangdicheng)   
  - ima: Simplify ima_lsm_copy_rule (GUO Zihua)   
  - pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES (John Stultz)   
  - afs: Fix lost servers_outstanding count (David Howells)   
  - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Yang Jihong)   
  - pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion (John Stultz)   
  - LoadPin: Ignore the "contents" argument of the LSM hooks (Kees Cook)   
  - drm/i915/display: Don't disable DDI/Transcoder when setting phy test pattern (Khaled Almahallawy)   
  - ASoC: rt5670: Remove unbalanced pm_runtime_put() (Hans de Goede)   
  - ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() (Wang Jingjin)   
  - ASoC: wm8994: Fix potential deadlock (Marek Szyprowski)   
  - ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe() (Wang Yufen)   
  - ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() (Wang Jingjin)   
  - ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() (Wang Yufen)   
  - ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() (Wang Yufen)   
  - ASoC: Intel: Skylake: Fix driver hang during shutdown (Cezary Rojewski)   
  - ALSA: hda: add snd_hdac_stop_streams() helper (Pierre-Louis Bossart)   
  - ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c (Pierre-Louis Bossart)   
  - hwmon: (jc42) Fix missing unlock on error in jc42_write() (Yang Yingliang)   
  - KVM: selftests: Fix build regression by using accessor function (Tyler Hicks)   
  - tools/include: Add _RET_IP_ and math definitions to kernel.h (Karolina Drobnik)   
  - orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() (Zhang Xiaoxu)   
  - orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() (Zhang Xiaoxu)   
  - drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() (Nathan Chancellor)   
  - drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() (Nathan Chancellor)   
  - hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (Hawkins Jiawei)   
  - scsi: elx: libefc: Fix second parameter type in state callbacks (Nathan Chancellor)   
  - scsi: ufs: Reduce the START STOP UNIT timeout (Bart Van Assche)   
  - scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs (Justin Tee)   
  - crypto: hisilicon/hpre - fix resource leak in remove process (Zhiqi Song)   
  - clk: st: Fix memory leak in st_of_quadfs_setup() (Xiu Jianfeng)   
  - media: si470x: Fix use-after-free in si470x_int_in_callback() (Shigeru Yoshida)   
  - mmc: renesas_sdhi: better reset from HS400 mode (Wolfram Sang)   
  - mmc: f-sdh30: Add quirks for broken timeout clock capability (Kunihiko Hayashi)   
  - wifi: mt76: do not run mt76u_status_worker if the device is not running (Lorenzo Bianconi)   
  - regulator: core: fix use_count leakage when handling boot-on (Rui Zhang)   
  - libbpf: Avoid enum forward-declarations in public API in C++ mode (Andrii Nakryiko)   
  - drm/amd/display: Use the largest vready_offset in pipe group (Wesley Chalmers)   
  - blk-mq: fix possible memleak when register 'hctx' failed (Ye Bin)   
  - media: dvb-usb: fix memory leak in dvb_usb_adapter_init() (Mazin Al Haddad)   
  - media: dvbdev: adopts refcnt to avoid UAF (Lin Ma)   
  - media: dvb-frontends: fix leak of memory fw (Yan Lei)   
  - ethtool: avoiding integer overflow in ethtool_phys_id() (Maxim Korotkov)   
  - bpf: Prevent decl_tag from being referenced in func_proto arg (Stanislav Fomichev)   
  - ppp: associate skb with a device at tx (Stanislav Fomichev)   
  - mrp: introduce active flags to prevent UAF when applicant uninit (Schspa Shi)   
  - ipv6/sit: use DEV_STATS_INC() to avoid data-races (Eric Dumazet)   
  - net: add atomic_long_t to net_device_stats fields (Eric Dumazet)   
  - drm/amd/display: fix array index out of bound error in bios parser (Aurabindo Pillai)   
  - md/raid1: stop mdx_raid1 thread when raid1 array run failed (Jiang Li)   
  - drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (Li Zhong)   
  - drm/mediatek: Fix return type of mtk_hdmi_bridge_mode_valid() (Nathan Chancellor)   
  - drm/sti: Use drm_mode_copy() (Ville Syrjälä)   
  - drm/rockchip: Use drm_mode_copy() (Ville Syrjälä)   
  - drm/msm: Use drm_mode_copy() (Ville Syrjälä)   
  - s390/lcs: Fix return type of lcs_start_xmit() (Nathan Chancellor)   
  - s390/netiucv: Fix return type of netiucv_tx() (Nathan Chancellor)   
  - s390/ctcm: Fix return type of ctc{mp,}m_tx() (Nathan Chancellor)   
  - drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback (Nathan Chancellor)   
  - drm/amdgpu: Fix type of second parameter in trans_msg() callback (Nathan Chancellor)   
  - igb: Do not free q_vector unless new one was allocated (Kees Cook)   
  - wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() (Minsuk Kang)   
  - hamradio: baycom_epp: Fix return type of baycom_send_packet() (Nathan Chancellor)   
  - net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() (Nathan Chancellor)   
  - bpf: make sure skb->len != 0 when redirecting to a tunneling device (Stanislav Fomichev)   
  - qed (gcc13): use u16 for fid to be big enough (Jiri Slaby (SUSE))   
  - Revert "drm/amd/display: Limit max DSC target bpp for specific monitors" (Hamza Mahfooz)   
  - drm/amd/display: prevent memory leak (gehao)   
  - ipmi: fix memleak when unload ipmi driver (Zhang Yuchen)   
  - ASoC: codecs: rt298: Add quirk for KBL-R RVP platform (Amadeusz Sławiński)   
  - wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out (Shigeru Yoshida)   
  - wifi: ath9k: verify the expected usb_endpoints are present (Fedor Pchelkin)   
  - brcmfmac: return error when getting invalid max_flowrings from dongle (Wright Feng)   
  - media: imx-jpeg: Disable useless interrupt to avoid kernel panic (Ming Qian)   
  - drm/etnaviv: add missing quirks for GC300 (Doug Brown)   
  - hfs: fix OOB Read in __hfs_brec_find (ZhangPeng)   
  - acct: fix potential integer overflow in encode_comp_t() (Zheng Yejian)   
  - nilfs2: fix shift-out-of-bounds due to too large exponent of block size (Ryusuke Konishi)   
  - nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() (Ryusuke Konishi)   
  - ACPICA: Fix error code path in acpi_ds_call_control_method() (Rafael J. Wysocki)   
  - fs: jfs: fix shift-out-of-bounds in dbDiscardAG (Hoi Pok Wu)   
  - jfs: Fix fortify moan in symlink (Dr. David Alan Gilbert)   
  - udf: Avoid double brelse() in udf_rename() (Shigeru Yoshida)   
  - fs: jfs: fix shift-out-of-bounds in dbAllocAG (Dongliang Mu)   
  - binfmt_misc: fix shift-out-of-bounds in check_special_flags (Liu Shixin)   
  - x86/hyperv: Remove unregister syscore call from Hyper-V cleanup (Gaurav Kohli)   
  - video: hyperv_fb: Avoid taking busy spinlock on panic path (Guilherme G. Piccoli)   
  - arm64: make is_ttbrX_addr() noinstr-safe (Mark Rutland)   
  - rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() (Zqiang)   
  - HID: amd_sfh: Add missing check for dma_alloc_coherent (Jiasheng Jiang)   
  - net: stream: purge sk_error_queue in sk_stream_kill_queues() (Eric Dumazet)   
  - myri10ge: Fix an error handling path in myri10ge_probe() (Christophe JAILLET)   
  - rxrpc: Fix missing unlock in rxrpc_do_sendmsg() (David Howells)   
  - net_sched: reject TCF_EM_SIMPLE case for complex ematch module (Cong Wang)   
  - mailbox: zynq-ipi: fix error handling while device_register() fails (Yang Yingliang)   
  - mailbox: arm_mhuv2: Fix return value check in mhuv2_probe() (Yang Yingliang)   
  - mailbox: mpfs: read the system controller's status (Conor Dooley)   
  - skbuff: Account for tail adjustment during pull operations (Subash Abhinov Kasiviswanathan)   
  - arm64: dts: mt8183: Fix Mali GPU clock (Chen-Yu Tsai)   
  - soc: mediatek: pm-domains: Fix the power glitch issue (Chun-Jie Chen)   
  - openvswitch: Fix flow lookup to use unmasked key (Eelco Chaudron)   
  - selftests: devlink: fix the fd redirect in dummy_reporter_test (Jakub Kicinski)   
  - rtc: mxc_v2: Add missing clk_disable_unprepare() (GUO Zihua)   
  - igc: Set Qbv start_time and end_time to end_time if not being configured in GCL (Tan Tee Min)   
  - igc: Lift TAPRIO schedule restriction (Kurt Kanzenbach)   
  - igc: recalculate Qbv end_time by considering cycle time (Tan Tee Min)   
  - igc: allow BaseTime 0 enrollment for Qbv (Tan Tee Min)   
  - igc: Add checking for basetime less than zero (Muhammad Husaini Zulkifli)   
  - igc: Use strict cycles for Qbv scheduling (Vinicius Costa Gomes)   
  - igc: Enhance Qbv scheduling by using first flag bit (Vinicius Costa Gomes)   
  - r6040: Fix kmemleak in probe and remove (Li Zetao)   
  - unix: Fix race in SOCK_SEQPACKET's unix_dgram_sendmsg() (Kirill Tkhai)   
  - nfc: pn533: Clear nfc_target before being used (Minsuk Kang)   
  - net: enetc: avoid buffer leaks on xdp_do_redirect() failure (Vladimir Oltean)   
  - selftests/bpf: Add test for unstable CT lookup API (Kumar Kartikeya Dwivedi)   
  - block, bfq: fix possible uaf for 'bfqq->bic' (Yu Kuai)   
  - mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net: macsec: fix net device access prior to holding a lock (Emeel Hakim)   
  - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (Dan Aloni)   
  - rtc: pcf85063: fix pcf85063_clkout_control (Alexandre Belloni)   
  - rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() (Gaosheng Cui)   
  - rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() (Gaosheng Cui)   
  - netfilter: flowtable: really fix NAT IPv6 offload (Qingfang DENG)   
  - mfd: pm8008: Fix return value check in pm8008_probe() (Yang Yingliang)   
  - mfd: pm8008: Remove driver data structure pm8008_data (Lee Jones)   
  - mfd: qcom_rpm: Fix an error handling path in qcom_rpm_probe() (Christophe JAILLET)   
  - mfd: bd957x: Fix Kconfig dependency on REGMAP_IRQ (Matti Vaittinen)   
  - powerpc/pseries/eeh: use correct API for error log size (Nathan Lynch)   
  - powerpc/eeh: Drop redundant spinlock initialization (Haowen Bai)   
  - remoteproc: qcom: q6v5: Fix missing clk_disable_unprepare() in q6v5_wcss_qcs404_power_on() (Shang XiaoJing)   
  - remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() (Yuan Can)   
  - remoteproc: qcom_q6v5_pas: detach power domains on remove (Luca Weiss)   
  - remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove (Luca Weiss)   
  - remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() (Shang XiaoJing)   
  - remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() (Gaosheng Cui)   
  - pwm: mediatek: always use bus clock for PWM on MT7622 (Daniel Golle)   
  - pwm: mtk-disp: Fix the parameters calculated by the enabled flag of disp_pwm (xinlei lee)   
  - pwm: sifive: Call pwm_sifive_update_clock() while mutex is held (Uwe Kleine-König)   
  - iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (Jason Gunthorpe)   
  - selftests/powerpc: Fix resource leaks (Miaoqian Lin)   
  - powerpc/hv-gpci: Fix hv_gpci event list (Kajol Jain)   
  - powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() (Yang Yingliang)   
  - powerpc/perf: callchain validate kernel stack pointer bounds (Nicholas Piggin)   
  - powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() (Yang Yingliang)   
  - powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds (Gustavo A. R. Silva)   
  - cxl: Fix refcount leak in cxl_calc_capp_routing (Miaoqian Lin)   
  - powerpc/52xx: Fix a resource leak in an error handling path (Christophe JAILLET)   
  - macintosh/macio-adb: check the return value of ioremap() (Xie Shaowen)   
  - macintosh: fix possible memory leak in macio_add_one_device() (Yang Yingliang)   
  - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (Yuan Can)   
  - iommu/amd: Fix pci device refcount leak in ppr_notifier() (Yang Yingliang)   
  - rtc: pcf85063: Fix reading alarm (Alexander Stein)   
  - rtc: snvs: Allow a time difference on clock register read (Stefan Eichenberger)   
  - rtc: cmos: Disable ACPI RTC event on removal (Rafael J. Wysocki)   
  - rtc: cmos: Rename ACPI-related functions (Rafael J. Wysocki)   
  - rtc: cmos: Eliminate forward declarations of some functions (Rafael J. Wysocki)   
  - rtc: cmos: Call rtc_wake_setup() from cmos_do_probe() (Rafael J. Wysocki)   
  - rtc: cmos: Call cmos_wake_setup() from cmos_do_probe() (Rafael J. Wysocki)   
  - rtc: cmos: fix build on non-ACPI platforms (Alexandre Belloni)   
  - rtc: cmos: Fix wake alarm breakage (Rafael J. Wysocki)   
  - rtc: cmos: Fix event handler registration ordering issue (Rafael J. Wysocki)   
  - rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0 (Rafael J. Wysocki)   
  - dmaengine: idxd: Fix crc_val field for completion record (Fenghua Yu)   
  - fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs (Abdun Nihaal)   
  - pwm: tegra: Improve required rate calculation (Jon Hunter)   
  - include/uapi/linux/swab: Fix potentially missing __always_inline (Matt Redfearn)   
  - phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices (Al Cooper)   
  - iommu/rockchip: fix permission bits in page table entries v2 (Michael Riesch)   
  - iommu/sun50i: Fix flush size (Jernej Skrabec)   
  - iommu/sun50i: Fix R/W permission check (Jernej Skrabec)   
  - iommu/sun50i: Consider all fault sources for reset (Jernej Skrabec)   
  - iommu/sun50i: Fix reset release (Jernej Skrabec)   
  - fs/ntfs3: Harden against integer overflows (Dan Carpenter)   
  - overflow: Implement size_t saturating arithmetic helpers (Kees Cook)   
  - fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst() (Shigeru Yoshida)   
  - RDMA/siw: Fix pointer cast warning (Arnd Bergmann)   
  - perf stat: Do not delay the workload with --delay (Namhyung Kim)   
  - perf stat: Refactor __run_perf_stat() common code (Adrián Herrera Arcila)   
  - power: supply: fix null pointer dereferencing in power_supply_get_battery_info (ruanjinjie)   
  - power: supply: ab8500: Fix error handling in ab8500_charger_init() (Yuan Can)   
  - HSI: omap_ssi_core: Fix error handling in ssi_init() (Yuan Can)   
  - power: supply: z2_battery: Fix possible memleak in z2_batt_probe() (Zhang Qilong)   
  - perf symbol: correction while adjusting symbol (Ajay Kaher)   
  - perf trace: Handle failure when trace point folder is missed (Leo Yan)   
  - perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number (Leo Yan)   
  - perf trace: Return error if a system call doesn't exist (Leo Yan)   
  - power: supply: fix residue sysfs file in error handle route of __power_supply_register() (Zeng Heng)   
  - HSI: omap_ssi_core: fix possible memory leak in ssi_probe() (Yang Yingliang)   
  - HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() (Yang Yingliang)   
  - fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() (Christophe JAILLET)   
  - fbdev: uvesafb: don't build on UML (Randy Dunlap)   
  - fbdev: geode: don't build on UML (Randy Dunlap)   
  - fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() (Gaosheng Cui)   
  - fbdev: vermilion: decrease reference count in error path (Xiongfeng Wang)   
  - fbdev: via: Fix error in via_core_init() (Shang XiaoJing)   
  - fbdev: pm2fb: fix missing pci_disable_device() (Yang Yingliang)   
  - fbdev: ssd1307fb: Drop optional dependency (Andy Shevchenko)   
  - thermal/drivers/qcom/lmh: Fix irq handler return value (Bjorn Andersson)   
  - thermal/drivers/qcom/temp-alarm: Fix inaccurate warning for gen2 (Luca Weiss)   
  - thermal/drivers/imx8mm_thermal: Validate temperature range (Marcus Folkesson)   
  - samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() (Shang XiaoJing)   
  - ksmbd: Fix resource leak in ksmbd_session_rpc_open() (Xiu Jianfeng)   
  - tracing/hist: Fix issue of losting command info in error_log (Zheng Yejian)   
  - usb: storage: Add check for kcalloc (Jiasheng Jiang)   
  - i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Zheyu Ma)   
  - i2c: mux: reg: check return value after calling platform_get_resource() (Yang Yingliang)   
  - gpiolib: protect the GPIO device against being dropped while in use by user-space (Bartosz Golaszewski)   
  - gpiolib: make struct comments into real kernel docs (Bartosz Golaszewski)   
  - gpiolib: cdev: fix NULL-pointer dereferences (Bartosz Golaszewski)   
  - gpiolib: Get rid of redundant 'else' (Andy Shevchenko)   
  - vme: Fix error not catched in fake_init() (Chen Zhongjin)   
  - staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() (YueHaibing)   
  - staging: rtl8192u: Fix use after free in ieee80211_rx() (Dan Carpenter)   
  - i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe (Hui Tang)   
  - chardev: fix error handling in cdev_device_add() (Yang Yingliang)   
  - mcb: mcb-parse: fix error handing in chameleon_parse_gdd() (Yang Yingliang)   
  - drivers: mcb: fix resource leak in mcb_probe() (Zhengchao Shao)   
  - usb: gadget: f_hid: fix refcount leak on error path (John Keeping)   
  - usb: gadget: f_hid: fix f_hidg lifetime vs cdev (John Keeping)   
  - usb: roles: fix of node refcount leak in usb_role_switch_is_parent() (Yang Yingliang)   
  - coresight: trbe: remove cpuhp instance node before remove cpuhp state (Yang Shen)   
  - counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update (Fabrice Gasnier)   
  - iio: adis: add '__adis_enable_irq()' implementation (Ramona Bolboaca)   
  - iio:imu:adis: Move exports into IIO_ADISLIB namespace (Jonathan Cameron)   
  - iio: adis: stylistic changes (Nuno Sá)   
  - iio: adis: handle devices that cannot unmask the drdy pin (Nuno Sá)   
  - iio: temperature: ltc2983: make bulk write buffer DMA-safe (Cosmin Tanislav)   
  - cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() (Yang Yingliang)   
  - cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() (Yang Yingliang)   
  - firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() (Yang Yingliang)   
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (Zheng Wang)   
  - misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() (ruanjinjie)   
  - ocxl: fix pci device refcount leak when calling get_function_0() (Yang Yingliang)   
  - misc: ocxl: fix possible name leak in ocxl_file_register_afu() (Yang Yingliang)   
  - test_firmware: fix memory leak in test_firmware_init() (Zhengchao Shao)   
  - serial: sunsab: Fix error handling in sunsab_init() (Yuan Can)   
  - serial: altera_uart: fix locking in polling mode (Gabriel Somlo)   
  - tty: serial: altera_uart_{r,t}x_chars() need only uart_port (Jiri Slaby)   
  - tty: serial: clean up stop-tx part in altera_uart_tx_chars() (Jiri Slaby)   
  - serial: pch: Fix PCI device refcount leak in pch_request_dma() (Xiongfeng Wang)   
  - serial: stm32: move dma_request_chan() before clk_prepare_enable() (Valentin Caron)   
  - serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. (delisun)   
  - serial: amba-pl011: avoid SBSA UART accessing DMACR register (Jiamei Xie)   
  - extcon: usbc-tusb320: Update state on probe even if no IRQ pending (Marek Vasut)   
  - extcon: usbc-tusb320: Add USB TYPE-C support (Marek Vasut)   
  - extcon: usbc-tusb320: Factor out extcon into dedicated functions (Marek Vasut)   
  - usb: typec: Factor out non-PD fwnode properties (Samuel Holland)   
  - extcon: usbc-tusb320: Add support for TUSB320L (Yassine Oudjana)   
  - extcon: usbc-tusb320: Add support for mode setting and reset (Yassine Oudjana)   
  - usb: typec: tipd: Fix spurious fwnode_handle_put in error path (Sven Peter)   
  - usb: typec: tipd: Cleanup resources if devm_tps6598_psy_register fails (Sven Peter)   
  - usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() (Yang Yingliang)   
  - usb: typec: Check for ops->exit instead of ops->enter in altmode_exit (Sven Peter)   
  - staging: vme_user: Fix possible UAF in tsi148_dma_list_add (Gaosheng Cui)   
  - usb: fotg210-udc: Fix ages old endianness issues (Linus Walleij)   
  - uio: uio_dmem_genirq: Fix deadlock between irq config and handling (Rafael Mendonca)   
  - uio: uio_dmem_genirq: Fix missing unlock in irq configuration (Rafael Mendonca)   
  - vfio: platform: Do not pass return buffer to ACPI _RST method (Rafael Mendonca)   
  - class: fix possible memory leak in __class_register() (Yang Yingliang)   
  - serial: 8250_bcm7271: Fix error handling in brcmuart_init() (Yuan Can)   
  - serial: tegra: Read DMA status before terminating (Kartik)   
  - drivers: dio: fix possible memory leak in dio_init() (Yang Yingliang)   
  - RISC-V: Align the shadow stack (Palmer Dabbelt)   
  - IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces (Dragos Tatulea)   
  - hwrng: geode - Fix PCI device refcount leak (Xiongfeng Wang)   
  - hwrng: amd - Fix PCI device refcount leak (Xiongfeng Wang)   
  - crypto: img-hash - Fix variable dereferenced before check 'hdev->req' (Gaosheng Cui)   
  - RDMA/hns: Fix error code of CMD (Chengchang Tang)   
  - RDMA/hns: Fix page size cap from firmware (Chengchang Tang)   
  - RDMA/hns: Fix PBL page MTR find (Chengchang Tang)   
  - RDMA/hns: Fix AH attr queried by query_qp (Chengchang Tang)   
  - orangefs: Fix sysfs not cleanup when dev init failed (Zhang Xiaoxu)   
  - PCI: mt7621: Add sentinel to quirks table (John Thomson)   
  - PCI: mt7621: Rename mt7621_pci_ to mt7621_pcie_ (Bjorn Helgaas)   
  - RDMA/srp: Fix error return code in srp_parse_options() (Wang Yufen)   
  - RDMA/hfi1: Fix error return code in parse_platform_config() (Wang Yufen)   
  - riscv/mm: add arch hook arch_clear_hugepage_flags (Tong Tiangen)   
  - crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() (Shang XiaoJing)   
  - crypto: amlogic - Remove kcalloc without check (Christophe JAILLET)   
  - RDMA/nldev: Fix failure to send large messages (Mark Zhang)   
  - f2fs: avoid victim selection from previous victim section (Yonggil Song)   
  - RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() (Yuan Can)   
  - scsi: snic: Fix possible UAF in snic_tgt_create() (Gaosheng Cui)   
  - scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails (Chen Zhongjin)   
  - scsi: ipr: Fix WARNING in ipr_init() (Shang XiaoJing)   
  - scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper() (Yang Yingliang)   
  - scsi: fcoe: Fix possible name leak when device_register() fails (Yang Yingliang)   
  - scsi: scsi_debug: Fix a warning in resp_report_zones() (Harshit Mogalapalli)   
  - scsi: scsi_debug: Fix a warning in resp_verify() (Harshit Mogalapalli)   
  - scsi: efct: Fix possible memleak in efct_device_init() (Chen Zhongjin)   
  - scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() (Yang Yingliang)   
  - scsi: hpsa: Fix error handling in hpsa_add_sas_host() (Yang Yingliang)   
  - scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() (Yang Yingliang)   
  - padata: Fix list iterator in padata_do_serial() (Daniel Jordan)   
  - padata: Always leave BHs disabled when running ->parallel() (Daniel Jordan)   
  - crypto: tcrypt - Fix multibuffer skcipher speed test mem leak (Zhang Yiqun)   
  - scsi: hpsa: Fix possible memory leak in hpsa_init_one() (Yuan Can)   
  - dt-bindings: visconti-pcie: Fix interrupts array max constraints (Serge Semin)   
  - dt-bindings: imx6q-pcie: Fix clock names for imx6sx and imx8mq (Serge Semin)   
  - RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed (Zhang Xiaoxu)   
  - RDMA/hns: fix memory leak in hns_roce_alloc_mr() (Zhengchao Shao)   
  - crypto: ccree - Make cc_debugfs_global_fini() available for module init function (Uwe Kleine-König)   
  - RDMA/hfi: Decrease PCI device reference count in error path (Xiongfeng Wang)   
  - PCI: Check for alloc failure in pci_request_irq() (Zeng Heng)   
  - RDMA/hns: Fix ext_sge num error when post send (Luoyouming)   
  - RDMA/hns: Repacing 'dseg_len' by macros in fill_ext_sge_inl_data() (Luoyouming)   
  - crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() (Xiongfeng Wang)   
  - crypto: cryptd - Use request context instead of stack for sub-request (Herbert Xu)   
  - crypto: ccree - Remove debugfs when platform_driver_register failed (Gaosheng Cui)   
  - scsi: scsi_debug: Fix a warning in resp_write_scat() (Harshit Mogalapalli)   
  - RDMA/siw: Set defined status for work completion with undefined status (Bernard Metzler)   
  - RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port (Mark Zhang)   
  - RDMA/core: Make sure "ib_port" is valid when access sysfs node (Mark Zhang)   
  - RDMA/restrack: Release MR restrack when delete (Mark Zhang)   
  - PCI: vmd: Disable MSI remapping after suspend (Nirmal Patel)   
  - IB/mad: Don't call to function that might sleep while in atomic context (Leonid Ravich)   
  - RDMA/siw: Fix immediate work request flush to completion queue (Bernard Metzler)   
  - scsi: qla2xxx: Fix set-but-not-used variable warnings (Bart Van Assche)   
  - RDMA/irdma: Report the correct link speed (Shiraz Saleem)   
  - f2fs: fix to destroy sbi->post_read_wq in error path of f2fs_fill_super() (Chao Yu)   
  - f2fs: fix normal discard process (Dongdong Zhang)   
  - f2fs: fix to invalidate dcc->f2fs_issue_discard in error path (Chao Yu)   
  - apparmor: Fix memleak in alloc_ns() (Xiu Jianfeng)   
  - crypto: rockchip - rework by using crypto_engine (Corentin Labbe)   
  - crypto: rockchip - remove non-aligned handling (Corentin Labbe)   
  - crypto: rockchip - better handle cipher key (Corentin Labbe)   
  - crypto: rockchip - add fallback for ahash (Corentin Labbe)   
  - crypto: rockchip - add fallback for cipher (Corentin Labbe)   
  - crypto: rockchip - do not store mode globally (Corentin Labbe)   
  - crypto: rockchip - do not do custom power management (Corentin Labbe)   
  - f2fs: Fix the race condition of resize flag between resizefs (Zhang Qilong)   
  - PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled (Kunihiko Hayashi)   
  - RDMA/core: Fix order of nldev_exit call (Leon Romanovsky)   
  - PCI: dwc: Fix n_fts[] array overrun (Vidya Sagar)   
  - apparmor: Use pointer to struct aa_label for lbs_cred (Xiu Jianfeng)   
  - scsi: core: Fix a race between scsi_done() and scsi_timeout() (Bart Van Assche)   
  - crypto: nitrox - avoid double free on error path in nitrox_sriov_init() (Natalia Petrova)   
  - crypto: sun8i-ss - use dma_addr instead u32 (Corentin Labbe)   
  - crypto: hisilicon/qm - fix missing destroy qp_idr (Weili Qian)   
  - apparmor: Fix abi check to include v8 abi (John Johansen)   
  - apparmor: fix lockdep warning when removing a namespace (John Johansen)   
  - apparmor: fix a memleak in multi_transaction_new() (Gaosheng Cui)   
  - net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path (Vladimir Oltean)   
  - i40e: Fix the inability to attach XDP program on downed interface (Bartosz Staszewski)   
  - stmmac: fix potential division by 0 (Piergiorgio Beruto)   
  - Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: btintel: Fix missing free skb in btintel_setup_combined() (Wang ShaoBo)   
  - Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS (Inga Stotland)   
  - sctp: sysctl: make extra pointers netns aware (Firo Yang)   
  - ntb_netdev: Use dev_kfree_skb_any() in interrupt context (Eric Pilmore)   
  - net: lan9303: Fix read error execution path (Jerry Ray)   
  - can: tcan4x5x: Fix use of register error status mask (Markus Schneider-Pargmann)   
  - can: m_can: Call the RAM init directly from m_can_chip_config (Vivek Yadav)   
  - can: tcan4x5x: Remove invalid write in clear_interrupts (Markus Schneider-Pargmann)   
  - net: amd-xgbe: Check only the minimum speed for active/passive cables (Tom Lendacky)   
  - net: amd-xgbe: Fix logic around active and passive cables (Tom Lendacky)   
  - af_unix: call proto_unregister() in the error path in af_unix_init() (Yang Yingliang)   
  - net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net/tunnel: wait until all sk_user_data reader finish before releasing the sock (Hangbin Liu)   
  - net: farsync: Fix kmemleak when rmmods farsync (Li Zetao)   
  - ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() (ruanjinjie)   
  - drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() (Yuan Can)   
  - net: stmmac: fix possible memory leak in stmmac_dvr_probe() (Gaosheng Cui)   
  - net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() (Zhang Changzhong)   
  - net: defxx: Fix missing err handling in dfx_init() (Yongqiang Liu)   
  - net: vmw_vsock: vmci: Check memcpy_from_msg() (Artem Chernyshev)   
  - clk: socfpga: Fix memory leak in socfpga_gate_init() (Xiu Jianfeng)   
  - bpf: Do not zero-extend kfunc return values (Björn Töpel)   
  - blktrace: Fix output non-blktrace event when blk_classic option enabled (Yang Jihong)   
  - wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() (Wang Yufen)   
  - wifi: rtl8xxxu: Fix the channel width reporting (Bitterblue Smith)   
  - wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h (Bitterblue Smith)   
  - spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode (Kris Bahnsen)   
  - clk: samsung: Fix memory leak in _samsung_clk_register_pll() (Xiu Jianfeng)   
  - media: coda: Add check for kmalloc (Jiasheng Jiang)   
  - media: coda: Add check for dcoda_iram_alloc (Jiasheng Jiang)   
  - media: c8sectpfe: Add of_node_put() when breaking out of loop (Liang He)   
  - regulator: qcom-labibb: Fix missing of_node_put() in qcom_labibb_regulator_probe() (Yuan Can)   
  - mmc: core: Normalize the error handling branch in sd_read_ext_regs() (Zhen Lei)   
  - memstick/ms_block: Add check for alloc_ordered_workqueue (Jiasheng Jiang)   
  - memstick: ms_block: Add error handling support for add_disk() (Luis Chamberlain)   
  - mmc: renesas_sdhi: alway populate SCC pointer (Wolfram Sang)   
  - mmc: mmci: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: wbsd: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: via-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: meson-gx: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: omap_hsmmc: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: atmel-mci: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: wmt-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: vub300: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: toshsd: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: rtsx_pci: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: pxamci: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: mxcmmc: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: moxart: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: alcor: fix return value check of mmc_add_host() (Yang Yingliang)   
  - riscv, bpf: Emit fixed-length instructions for BPF_PSEUDO_FUNC (Pu Lehui)   
  - NFSv4.x: Fail client initialisation if state manager thread can't run (Trond Myklebust)   
  - SUNRPC: Fix missing release socket in rpc_sockname() (Wang ShaoBo)   
  - xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (Zhang Xiaoxu)   
  - ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt (Gaosheng Cui)   
  - media: saa7164: fix missing pci_disable_device() (Liu Shixin)   
  - ALSA: pcm: Set missing stop_operating flag at undoing trigger start (Takashi Iwai)   
  - bpf, sockmap: fix race in sock_map_free() (Eric Dumazet)   
  - hwmon: (jc42) Restore the min/max/critical temperatures on resume (Martin Blumenstingl)   
  - hwmon: (jc42) Convert register access and caching to regmap/regcache (Martin Blumenstingl)   
  - regulator: core: fix resource leak in regulator_register() (Yang Yingliang)   
  - configfs: fix possible memory leak in configfs_create_dir() (Chen Zhongjin)   
  - hsr: Synchronize sequence number updates. (Sebastian Andrzej Siewior)   
  - hsr: Synchronize sending frames to have always incremented outgoing seq nr. (Sebastian Andrzej Siewior)   
  - hsr: Disable netpoll. (Sebastian Andrzej Siewior)   
  - hsr: Avoid double remove of a node. (Sebastian Andrzej Siewior)   
  - hsr: Add a rcu-read lock to hsr_forward_skb(). (Sebastian Andrzej Siewior)   
  - clk: qcom: clk-krait: fix wrong div2 functions (Christian Marangi)   
  - clk: qcom: lpass-sc7180: Fix pm_runtime usage (Douglas Anderson)   
  - regulator: core: fix module refcount leak in set_supply() (Yang Yingliang)   
  - wifi: mt76: fix coverity overrun-call in mt76_get_txpower() (Deren Wu)   
  - wifi: mt76: mt7921: fix reporting of TX AGGR histogram (Lorenzo Bianconi)   
  - mt76: stop the radar detector after leaving dfs channel (Xing Song)   
  - wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails (Chen Zhongjin)   
  - wifi: mac80211: fix memory leak in ieee80211_if_add() (Zhengchao Shao)   
  - spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE (Alexander Sverdlin)   
  - bonding: uninitialized variable in bond_miimon_inspect() (Dan Carpenter)   
  - bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect (Pengcheng Yang)   
  - bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes (Pengcheng Yang)   
  - bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data (Pengcheng Yang)   
  - Input: wistron_btns - disable on UML (Randy Dunlap)   
  - netfilter: conntrack: set icmpv6 redirects as RELATED (Florian Westphal)   
  - ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe (Zhang Qilong)   
  - drm/amdkfd: Fix memory leakage (Konstantin Meskhidze)   
  - drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() (Xiongfeng Wang)   
  - drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() (Xiongfeng Wang)   
  - drm/amd/pm/smu11: BACO is supported when it's in BACO state (Guchun Chen)   
  - ASoC: mediatek: mt8173: Enable IRQ when pdata is ready (Ricardo Ribalda)   
  - ASoC: mediatek: mt8173: Fix debugfs registration for components (AngeloGioacchino Del Regno)   
  - wifi: iwlwifi: mvm: fix double free on tx path. (Ben Greear)   
  - ALSA: asihpi: fix missing pci_disable_device() (Liu Shixin)   
  - NFS: Fix an Oops in nfs_d_automount() (Trond Myklebust)   
  - NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (Trond Myklebust)   
  - NFSv4: Fix a credential leak in _nfs4_discover_trunking() (Trond Myklebust)   
  - NFSv4.2: Fix initialisation of struct nfs4_label (Trond Myklebust)   
  - NFSv4.2: Fix a memory stomp in decode_attr_security_label (Trond Myklebust)   
  - NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding (Trond Myklebust)   
  - ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd (Jiasheng Jiang)   
  - ASoC: dt-bindings: wcd9335: fix reset line polarity in example (Dmitry Torokhov)   
  - drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() (Zhang Zekun)   
  - media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC (Aakarsh Jain)   
  - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() (Baisong Zhong)   
  - media: dvb-core: Fix ignored return value in dvb_register_frontend() (Chen Zhongjin)   
  - pinctrl: pinconf-generic: add missing of_node_put() (ZhangPeng)   
  - clk: imx8mn: fix imx8mn_enet_phy_sels clocks list (Dario Binacchi)   
  - clk: imx8mn: fix imx8mn_sai2_sels clocks list (Dario Binacchi)   
  - clk: imx: replace osc_hdmi with dummy (Dario Binacchi)   
  - clk: imx8mn: rename vpu_pll to m7_alt_pll (Dario Binacchi)   
  - media: imon: fix a race condition in send_packet() (Gautam Menghani)   
  - media: vimc: Fix wrong function called when vimc_init() fails (Chen Zhongjin)   
  - ASoC: qcom: Add checks for devm_kcalloc (Yuan Can)   
  - drbd: destroy workqueue when drbd device was freed (Wang ShaoBo)   
  - drbd: remove call to memset before free device/resource/connection (Wang ShaoBo)   
  - mtd: maps: pxa2xx-flash: fix memory leak in probe (Zheng Yongjun)   
  - bonding: fix link recovery in mode 2 when updelay is nonzero (Jonathan Toppins)   
  - drm/amdgpu: fix pci device refcount leak (Yang Yingliang)   
  - clk: rockchip: Fix memory leak in rockchip_clk_register_pll() (Xiu Jianfeng)   
  - regulator: core: use kfree_const() to free space conditionally (Wang ShaoBo)   
  - ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT (Baisong Zhong)   
  - ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT (Baisong Zhong)   
  - pinctrl: k210: call of_node_put() (ZhangPeng)   
  - HID: hid-sensor-custom: set fixed size for custom attributes (Marcus Folkesson)   
  - bpf: Move skb->len == 0 checks into __bpf_redirect (Stanislav Fomichev)   
  - mtd: spi-nor: Fix the number of bytes for the dummy cycles (Allen-KH Cheng)   
  - mtd: spi-nor: hide jedec_id sysfs attribute if not present (Michael Walle)   
  - inet: add READ_ONCE(sk->sk_bound_dev_if) in inet_csk_bind_conflict() (Eric Dumazet)   
  - media: videobuf-dma-contig: use dma_mmap_coherent (Christoph Hellwig)   
  - media: platform: exynos4-is: Fix error handling in fimc_md_init() (Yuan Can)   
  - media: solo6x10: fix possible memory leak in solo_sysfs_init() (Yang Yingliang)   
  - media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init() (Chen Zhongjin)   
  - Input: elants_i2c - properly handle the reset GPIO when power is off (Douglas Anderson)   
  - mtd: lpddr2_nvm: Fix possible null-ptr-deref (Hui Tang)   
  - drm/msm/a6xx: Fix speed-bin detection vs probe-defer (Rob Clark)   
  - wifi: ath10k: Fix return value in ath10k_pci_init() (Xiu Jianfeng)   
  - block: clear ->slave_dir when dropping the main slave_dir reference (Christoph Hellwig)   
  - ima: Fix misuse of dereference of pointer in template_desc_init_fields() (Xiu Jianfeng)   
  - integrity: Fix memory leakage in keyring allocation error path (GUO Zihua)   
  - drm/fourcc: Fix vsub/hsub for Q410 and Q401 (Brian Starkey)   
  - drm/fourcc: Add packed 10bit YUV 4:2:0 format (Dave Stevenson)   
  - regulator: qcom-rpmh: Fix PMR735a S3 regulator spec (Konrad Dybcio)   
  - nvme: return err on nvme_init_non_mdts_limits fail (Joel Granados)   
  - amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() (Dan Carpenter)   
  - regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() (Yang Yingliang)   
  - nvmet: only allocate a single slab for bvecs (Christoph Hellwig)   
  - libbpf: Fix uninitialized warning in btf_dump_dump_type_data (David Michael)   
  - ASoC: pxa: fix null-pointer dereference in filter() (Zeng Heng)   
  - drm/mediatek: Modify dpi power on/off sequence. (Xinlei Lee)   
  - drm/radeon: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo)   
  - bfq: fix waker_bfqq inconsistency crash (Khazhismel Kumykov)   
  - rxrpc: Fix ack.bufferSize to be 0 when generating an ack (David Howells)   
  - net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write() (David Howells)   
  - media: camss: Clean up received buffers on failed start of streaming (Vladimir Zapolskiy)   
  - wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port (Marek Vasut)   
  - Input: joystick - fix Kconfig warning for JOYSTICK_ADC (Randy Dunlap)   
  - mtd: Fix device name leak when register device failed in add_mtd_device() (Zhang Xiaoxu)   
  - clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs (Manivannan Sadhasivam)   
  - bpf: propagate precision across all frames, not just the last one (Andrii Nakryiko)   
  - bpf: Check the other end of slot_type for STACK_SPILL (Martin KaFai Lau)   
  - bpf: propagate precision in ALU/ALU64 operations (Andrii Nakryiko)   
  - media: platform: exynos4-is: fix return value check in fimc_md_probe() (Yang Yingliang)   
  - media: vivid: fix compose size exceed boundary (Liu Shixin)   
  - bpf: Fix slot type check in check_stack_write_var_off (Kumar Kartikeya Dwivedi)   
  - drm/msm/hdmi: use devres helper for runtime PM management (Dmitry Baryshkov)   
  - drm/msm/hdmi: drop unused GPIO support (Dmitry Baryshkov)   
  - ima: Handle -ESTALE returned by ima_filter_rule_match() (GUO Zihua)   
  - drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure (Marek Vasut)   
  - spi: Update reference to struct spi_controller (Jonathan Neuschäfer)   
  - clk: renesas: r9a06g032: Repair grave increment error (Marek Vasut)   
  - drm/rockchip: lvds: fix PM usage counter unbalance in poweron (Zhang Qilong)   
  - can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming (Jimmy Assarsson)   
  - can: kvaser_usb: Add struct kvaser_usb_busparams (Jimmy Assarsson)   
  - can: kvaser_usb_leaf: Fix bogus restart events (Anssi Hannula)   
  - can: kvaser_usb_leaf: Fix wrong CAN state after stopping (Anssi Hannula)   
  - can: kvaser_usb_leaf: Fix improved state not being reported (Anssi Hannula)   
  - can: kvaser_usb: make use of units.h in assignment of frequency (Jimmy Assarsson)   
  - can: kvaser_usb_leaf: Set Warning state even without bus errors (Anssi Hannula)   
  - can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT (Jimmy Assarsson)   
  - can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event (Jimmy Assarsson)   
  - can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device (Jimmy Assarsson)   
  - can: kvaser_usb: do not increase tx statistics when sending error message frames (Vincent Mailhol)   
  - libbpf: Btf dedup identical struct test needs check for nested structs/arrays (Alan Maguire)   
  - media: exynos4-is: don't rely on the v4l2_async_subdev internals (Marek Szyprowski)   
  - soreuseport: Fix socket selection for SO_INCOMING_CPU. (Kuniyuki Iwashima)   
  - venus: pm_helpers: Fix error check in vcodec_domains_get() (Tang Bin)   
  - media: i2c: ad5820: Fix error path (Ricardo Ribalda)   
  - media: adv748x: afe: Select input port when initializing AFE (Niklas Söderlund)   
  - media: coda: jpeg: Add check for kmalloc (Jiasheng Jiang)   
  - media: v4l2-ctrls: Fix off-by-one error in integer menu control check (Laurent Pinchart)   
  - drm/amdgpu/powerplay/psm: Fix memory leak in power state init (Rafael Mendonca)   
  - ipmi: kcs: Poll OBF briefly to reduce OBE latency (Andrew Jeffery)   
  - ata: libata: fix NCQ autosense logic (Niklas Cassel)   
  - ata: add/use ata_taskfile::{error|status} fields (Sergey Shtylyov)   
  - ata: libata: move ata_{port,link,dev}_dbg to standard pr_XXX() macros (Hannes Reinecke)   
  - libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() (Shung-Hsi Yu)   
  - libbpf: Fix use-after-free in btf_dump_name_dups (Xu Kuohai)   
  - drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge (Abhinav Kumar)   
  - wifi: rtl8xxxu: Fix reading the vendor of combo chips (Bitterblue Smith)   
  - wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() (Fedor Pchelkin)   
  - wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() (Fedor Pchelkin)   
  - platform/mellanox: mlxbf-pmc: Fix event typo (James Hurley)   
  - rapidio: devices: fix missing put_device in mport_cdev_open (Cai Xinchen)   
  - hfs: Fix OOB Write in hfs_asc2mac (ZhangPeng)   
  - relay: fix type mismatch when allocating memory in relay_create_buf() (Gavrilov Ilia)   
  - eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD (Zhang Qilong)   
  - rapidio: fix possible UAF when kfifo_alloc() fails (Wang Weiyang)   
  - fs: sysv: Fix sysv_nblocks() returns wrong value (Chen Zhongjin)   
  - lockd: set other missing fields when unlocking files (Trond Myklebust)   
  - MIPS: OCTEON: warn only once if deprecated link status is being used (Ladislav Michl)   
  - MIPS: BCM63xx: Add check for NULL for clk in clk_enable (Anastasia Belova)   
  - platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register() (Yang Yingliang)   
  - platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() (Yu Liao)   
  - platform/chrome: cros_ec_typec: zero out stale pointers (Victor Ding)   
  - platform/chrome: cros_ec_typec: Cleanup switch handle return paths (Prashant Malani)   
  - PM: runtime: Do not call __rpm_callback() from rpm_idle() (Rafael J. Wysocki)   
  - xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() (Harshit Mogalapalli)   
  - x86/xen: Fix memory leak in xen_init_lock_cpu() (Xiu Jianfeng)   
  - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Xiu Jianfeng)   
  - uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix (Oleg Nesterov)   
  - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (Li Zetao)   
  - clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock() (Yang Yingliang)   
  - cpu/hotplug: Do not bail-out in DYING/STARTING sections (Vincent Donnefort)   
  - cpu/hotplug: Make target_store() a nop when target == state (Phil Auld)   
  - futex: Resend potentially swallowed owner death notification (Alexey Izbyshev)   
  - futex: Move to kernel/futex/ (Peter Zijlstra)   
  - mips: ralink: mt7621: do not use kzalloc too early (John Thomson)   
  - mips: ralink: mt7621: soc queries and tests as functions (John Thomson)   
  - mips: ralink: mt7621: define MT7621_SYSC_BASE with __iomem (John Thomson)   
  - clocksource/drivers/sh_cmt: Access registers according to spec (Wolfram Sang)   
  - rapidio: rio: fix possible name leak in rio_register_mport() (Yang Yingliang)   
  - rapidio: fix possible name leaks when rio_add_device() fails (Yang Yingliang)   
  - debugfs: fix error when writing negative value to atomic_t debugfs file (Akinobu Mita)   
  - lib/notifier-error-inject: fix error when writing -errno to debugfs file (Akinobu Mita)   
  - libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value (Akinobu Mita)   
  - cpufreq: amd_freq_sensitivity: Add missing pci_dev_put() (Xiongfeng Wang)   
  - genirq/irqdesc: Don't try to remove non-existing sysfs files (Yang Yingliang)   
  - nfsd: don't call nfsd_file_put from client states seqfile display (Jeff Layton)   
  - NFSD: Finish converting the NFSv2 GETACL result encoder (Chuck Lever)   
  - SUNRPC: Return true/false (not 1/0) from bool functions (Haowen Bai)   
  - EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (Yang Yingliang)   
  - irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init() (Wei Yongjun)   
  - irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() (Shang XiaoJing)   
  - thermal: core: fix some possible name leaks in error paths (Yang Yingliang)   
  - platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() (Yuan Can)   
  - perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() (Xiongfeng Wang)   
  - perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() (Xiongfeng Wang)   
  - perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() (Xiongfeng Wang)   
  - perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() (Xiongfeng Wang)   
  - PNP: fix name memory leak in pnp_alloc_dev() (Yang Yingliang)   
  - selftests/efivarfs: Add checking of the test return value (Zhao Gongyi)   
  - MIPS: vpe-cmp: fix possible memory leak while module exiting (Yang Yingliang)   
  - MIPS: vpe-mt: fix possible memory leak while module exiting (Yang Yingliang)   
  - ocfs2: fix memory leak in ocfs2_stack_glue_init() (Shang XiaoJing)   
  - lib/fonts: fix undefined behavior in bit shift for get_default_font (Gaosheng Cui)   
  - proc: fixup uptime selftest (Alexey Dobriyan)   
  - timerqueue: Use rb_entry_safe() in timerqueue_getnext() (Barnabás Pőcze)   
  - platform/x86: huawei-wmi: fix return value calculation (Barnabás Pőcze)   
  - lib/debugobjects: fix stat count and optimize debug_objects_mem_init (wuchi)   
  - perf: Fix possible memleak in pmu_dev_alloc() (Chen Zhongjin)   
  - selftests/ftrace: event_triggers: wait longer for test_event_enable (Yipeng Zou)   
  - cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut() (Chen Hui)   
  - fs: don't audit the capability check in simple_xattr_list() (Ondrej Mosnacek)   
  - PM: hibernate: Fix mistake in kerneldoc comment (xiongxin)   
  - x86/sgx: Reduce delay and interference of enclave release (Reinette Chatre)   
  - alpha: fix syscall entry in !AUDUT_SYSCALL case (Al Viro)   
  - alpha: fix TIF_NOTIFY_SIGNAL handling (Al Viro)   
  - cpuidle: dt: Return the correct numbers of parsed idle states (Ulf Hansson)   
  - sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() (Qais Yousef)   
  - sched/core: Introduce sched_asym_cpucap_active() (Dietmar Eggemann)   
  - sched/fair: Removed useless update of p->recent_used_cpu (Vincent Guittot)   
  - sched/uclamp: Make select_idle_capacity() use util_fits_cpu() (Qais Yousef)   
  - sched/uclamp: Make task_fits_capacity() use util_fits_cpu() (Qais Yousef)   
  - sched/uclamp: Fix relationship between uclamp and migration margin (Qais Yousef)   
  - sched/fair: Cleanup task_util and capacity type (Vincent Donnefort)   
  - ovl: remove privs in ovl_fallocate() (Amir Goldstein)   
  - ovl: remove privs in ovl_copyfile() (Amir Goldstein)   
  - ovl: use ovl_copy_{real,upper}attr() wrappers (Christian Brauner)   
  - ovl: store lower path in ovl_inode (Amir Goldstein)   
  - tpm/tpm_crb: Fix error message in __crb_relinquish_locality() (Michael Kelley)   
  - tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init() (Yuan Can)   
  - pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP (Stephen Boyd)   
  - ARM: mmp: fix timer_read delay (Doug Brown)   
  - pstore/ram: Fix error return code in ramoops_probe() (Wang Yufen)   
  - seccomp: Move copy_seccomp() to no failure path. (Kuniyuki Iwashima)   
  - arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC (Pali Rohár)   
  - ARM: dts: turris-omnia: Add switch port 6 node (Pali Rohár)   
  - ARM: dts: turris-omnia: Add ethernet aliases (Pali Rohár)   
  - ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name (AngeloGioacchino Del Regno)   
  - arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings (AngeloGioacchino Del Regno)   
  - arm64: dts: mt2712-evb: Fix usb vbus regulators unit names (AngeloGioacchino Del Regno)   
  - arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names (AngeloGioacchino Del Regno)   
  - arm64: dts: mt2712e: Fix unit address for pinctrl node (AngeloGioacchino Del Regno)   
  - arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators (AngeloGioacchino Del Regno)   
  - arm64: dts: mt6779: Fix devicetree build warnings (AngeloGioacchino Del Regno)   
  - ARM: dts: nuvoton: Remove bogus unit addresses from fixed-partition nodes (Jonathan Neuschäfer)   
  - arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node (Jayesh Choudhary)   
  - arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node (Jayesh Choudhary)   
  - perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() (Shang XiaoJing)   
  - perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() (Shang XiaoJing)   
  - perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() (Yuan Can)   
  - arm64: mm: kfence: only handle translation faults (Mark Rutland)   
  - arm64: Treat ESR_ELx as a 64-bit register (Alexandru Elisei)   
  - soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe (Zhang Qilong)   
  - soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe (Zhang Qilong)   
  - soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync (Minghao Chi)   
  - arm: dts: spear600: Fix clcd interrupt (Kory Maincent)   
  - arm64: dts: qcom: sm6125: fix SDHCI CQE reg names (Krzysztof Kozlowski)   
  - soc: qcom: apr: Add check for idr_alloc and of_property_read_string_index (Jiasheng Jiang)   
  - soc: qcom: apr: make code more reuseable (Srinivas Kandagatla)   
  - arm64: dts: qcom: sm8250: drop bogus DP PHY clock (Johan Hovold)   
  - arm64: dts: qcom: sm8350: fix UFS PHY registers (Johan Hovold)   
  - arm64: dts: qcom: sm8250: fix UFS PHY registers (Johan Hovold)   
  - arm64: dts: qcom: sm8150: fix UFS PHY registers (Johan Hovold)   
  - arm64: dts: qcom: Correct QMP PHY child node name (Shawn Guo)   
  - soc: qcom: llcc: make irq truly optional (Luca Weiss)   
  - arm64: dts: qcom: sm8250: correct LPASS pin pull down (Krzysztof Kozlowski)   
  - arm64: dts: qcom: pm660: Use unique ADC5_VCOIN address in node name (Marijn Suijten)   
  - drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static (Chen Jiahao)   
  - ARM: dts: stm32: Fix AV96 WLAN regulator gpio property (Marek Vasut)   
  - ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96 (Marek Vasut)   
  - objtool, kcsan: Add volatile read/write instrumentation to whitelist (Marco Elver)   
  - arm64: dts: qcom: msm8916: Drop MSS fallback compatible (Stephan Gerhold)   
  - arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias (Krzysztof Kozlowski)   
  - arm64: dts: qcom: sdm630: fix UART1 pin bias (Krzysztof Kozlowski)   
  - ARM: dts: qcom: apq8064: fix coresight compatible (Luca Weiss)   
  - arm64: dts: qcom: msm8996: fix GPU OPP table (Dmitry Baryshkov)   
  - arm64: dts: qcom: msm8996: fix supported-hw in cpufreq OPP tables (Dmitry Baryshkov)   
  - arm64: dts: qcom: msm8996: Add MSM8996 Pro support (Yassine Oudjana)   
  - arm64: dts: qcom: sm8250-sony-xperia-edo: fix touchscreen bias-disable (Krzysztof Kozlowski)   
  - arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins (Krzysztof Kozlowski)   
  - usb: musb: remove extra check in musb_gadget_vbus_draw (Ivaylo Dimitrov)   
  - drm/amd/display: Manually adjust strobe for DCN303 (Martin Leung)   
  - LTS version: v5.15.85 (Jack Vogel)   
  - net: loopback: use NET_NAME_PREDICTABLE for name_assign_type (Rasmus Villemoes)   
  - selftests: net: Use "grep -E" instead of "egrep" (Tiezhu Yang)   
  - Bluetooth: L2CAP: Fix u8 overflow (Sungwoo Kim)   
  - HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk (José Expósito)   
  - usb: dwc3: pci: Update PCIe device ID for USB3 controller on CPU sub-system for Raptor Lake (Shruthi Sanil)   
  - igb: Initialize mailbox message for VF reset (Tony Nguyen)   
  - xhci: Apply XHCI_RESET_TO_DEFAULT quirk to ADL-N (Reka Norman)   
  - USB: serial: f81534: fix division by zero on line-speed change (Johan Hovold)   
  - USB: serial: f81232: fix division by zero on line-speed change (Johan Hovold)   
  - USB: serial: cp210x: add Kamstrup RF sniffer PIDs (Bruno Thomsen)   
  - USB: serial: option: add Quectel EM05-G modem (Duke Xin)   
  - usb: gadget: uvc: Prevent buffer overflow in setup handler (Szymon Heidrich)   
  - udf: Fix extending file within last block (Jan Kara)   
  - udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size (Jan Kara)   
  - udf: Fix preallocation discarding at indirect extent boundary (Jan Kara)   
  - udf: Discard preallocation before extending file with a hole (Jan Kara)   
  - LTS version: v5.15.84 (Jack Vogel)   
  - net: fec: properly guard irq coalesce setup (Rasmus Villemoes)   
  - ASoC: ops: Correct bounds check for second channel on SX controls (Charles Keepax)   
  - nvme-pci: clear the prp2 field when not used (Lei Rao)   
  - perf: Fix perf_pending_task() UaF (Peter Zijlstra)   
  - ASoC: cs42l51: Correct PGA Volume minimum value (Charles Keepax)   
  - net: fec: don't reset irq coalesce settings to defaults on "ip link up" (Rasmus Villemoes)   
  - can: mcba_usb: Fix termination command argument (Yasushi SHOJI)   
  - can: sja1000: fix size of OCR_MODE_MASK define (Heiko Schocher)   
  - pinctrl: meditatek: Startup with the IRQs disabled (Ricardo Ribalda)   
  - libbpf: Use page size as max_entries when probing ring buffer map (Hou Tao)   
  - ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() (Mark Brown)   
  - ASoC: fsl_micfil: explicitly clear CHnF flags (Shengjiu Wang)   
  - ASoC: fsl_micfil: explicitly clear software reset bit (Shengjiu Wang)   
  - nfp: fix use-after-free in area_cache_get() (Jialiang Wang)   
  - vfs: fix copy_file_range() averts filesystem freeze protection (Amir Goldstein)   
  - x86/vdso: Conditionally export __vdso_sgx_enter_enclave() (Nathan Chancellor)   
  - LTS version: v5.15.83 (Jack Vogel)   
  - io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() (Harshit Mogalapalli)   
  - io_uring: move to separate directory (Jens Axboe)   
  - block: move CONFIG_BLOCK guard to top Makefile (Masahiro Yamada)   
  - can: esd_usb: Allow REC and TEC to return to zero (Frank Jungclaus)   
  - s390/qeth: fix use-after-free in hsci (Alexandra Winter)   
  - s390/qeth: fix various format strings (Heiko Carstens)   
  - macsec: add missing attribute validation for offload (Emeel Hakim)   
  - net: mvneta: Fix an out of bounds check (Dan Carpenter)   
  - net: thunderbolt: fix memory leak in tbnet_open() (Zhengchao Shao)   
  - ipv6: avoid use-after-free in ip6_fragment() (Eric Dumazet)   
  - net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq() (Yang Yingliang)   
  - net: phy: mxl-gpy: fix version reporting (Michael Walle)   
  - xen/netback: fix build warning (Juergen Gross)   
  - dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove() (Yuan Can)   
  - ethernet: aeroflex: fix potential skb leak in greth_init_rings() (Zhang Changzhong)   
  - tipc: call tipc_lxc_xmit without holding node_read_lock (Xin Long)   
  - net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() (Zhengchao Shao)   
  - ipv4: Fix incorrect route flushing when table ID 0 is used (Ido Schimmel)   
  - ipv4: Fix incorrect route flushing when source address is deleted (Ido Schimmel)   
  - tipc: Fix potential OOB in tipc_link_proto_rcv() (YueHaibing)   
  - net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (Liu Jian)   
  - net: mdio: fix unbalanced fwnode reference count in mdio_device_release() (Zeng Heng)   
  - net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (Liu Jian)   
  - net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq (Yongqiang Liu)   
  - net: microchip: sparx5: Fix missing destroy_workqueue of mact_queue (Qiheng Lin)   
  - ip_gre: do not report erspan version on GRE interface (Hangbin Liu)   
  - net: stmmac: fix "snps,axi-config" node property parsing (Jisheng Zhang)   
  - gpio/rockchip: fix refcount leak in rockchip_gpiolib_register() (Wang Yufen)   
  - nvme initialize core quirks before calling nvme_init_subsystem (Pankaj Raghav)   
  - NFC: nci: Bounds check struct nfc_target arrays (Kees Cook)   
  - i40e: Disallow ip4 and ip6 l4_4_bytes (Przemyslaw Patynowski)   
  - i40e: Fix for VF MAC address 0 (Sylwester Dziedziuch)   
  - i40e: Fix not setting default xps_cpus after reset (Michal Jaron)   
  - net: mvneta: Prevent out of bounds read in mvneta_config_rss() (Dan Carpenter)   
  - xen-netfront: Fix NULL sring after live migration (Lin Liu)   
  - octeontx2-pf: Fix potential memory leak in otx2_init_tc() (Ziyang Xuan)   
  - net: mdiobus: fix double put fwnode in the error path (Yang Yingliang)   
  - net: mdiobus: fwnode_mdiobus_register_phy() rework error handling (Oleksij Rempel)   
  - net: encx24j600: Fix invalid logic in reading of MISTAT register (Valentina Goncharenko)   
  - net: encx24j600: Add parentheses to fix precedence (Valentina Goncharenko)   
  - mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (Wei Yongjun)   
  - selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload (Zhengchao Shao)   
  - net: dsa: sja1105: Check return value (Artem Chernyshev)   
  - net: dsa: hellcreek: Check return value (Artem Chernyshev)   
  - net: dsa: ksz: Check return value (Artem Chernyshev)   
  - Bluetooth: Fix not cleanup led when bt_init fails (Chen Zhongjin)   
  - Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() (Wang ShaoBo)   
  - vmxnet3: use correct intrConf reference when using extended queues (Ronak Doshi)   
  - vmxnet3: correctly report encapsulated LRO packet (Ronak Doshi)   
  - af_unix: Get user_ns from in_skb in unix_diag_get_exact(). (Kuniyuki Iwashima)   
  - drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420 (Guillaume BRUN)   
  - net: broadcom: Add PTP_1588_CLOCK_OPTIONAL dependency for BCMGENET under ARCH_BCM2835 (YueHaibing)   
  - igb: Allocate MSI-X vector when testing (Akihiko Odaki)   
  - e1000e: Fix TX dispatch condition (Akihiko Odaki)   
  - gpio: amd8111: Fix PCI device reference count leak (Xiongfeng Wang)   
  - drm/bridge: ti-sn65dsi86: Fix output polarity setting bug (Qiqi Zhang)   
  - netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark (Pablo Neira Ayuso)   
  - ca8210: Fix crash by zero initializing data (Hauke Mehrtens)   
  - ieee802154: cc2520: Fix error return code in cc2520_hw_init() (Ziyang Xuan)   
  - drm/vmwgfx: Fix race issue calling pin_user_pages (Dawei Li)   
  - netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one (Stefano Brivio)   
  - gpiolib: fix memory leak in gpiochip_setup_dev() (Zeng Heng)   
  - gpiolib: check the 'ngpios' property in core gpiolib code (Bartosz Golaszewski)   
  - gpiolib: improve coding style for local variables (Bartosz Golaszewski)   
  - clk: Fix pointer casting to prevent oops in devm_clk_release() (Uwe Kleine-König)   
  - can: af_can: fix NULL pointer dereference in can_rcv_filter (Oliver Hartkopp)   
  - HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10 (Hans de Goede)   
  - HID: core: fix shift-out-of-bounds in hid_report_raw_event (ZhangPeng)   
  - HID: hid-lg4ff: Add check for empty lbuf (Anastasia Belova)   
  - HID: usbhid: Add ALWAYS_POLL quirk for some mice (Ankit Patel)   
  - net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() (Radu Nicolae Pirea (OSS))   
  - drm/shmem-helper: Avoid vm_open error paths (Rob Clark)   
  - drm/shmem-helper: Remove errant put in error path (Rob Clark)   
  - drm/amdgpu/sdma_v4_0: turn off SDMA ring buffer in the s2idle suspend (Prike Liang)   
  - drm/vmwgfx: Don't use screen objects when SEV is active (Zack Rusin)   
  - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth)   
  - Bluetooth: Fix crash when replugging CSR fake controllers (Luiz Augusto von Dentz)   
  - Bluetooth: btusb: Add debug message for CSR controllers (Ismael Ferreras Morezuelas)   
  - mm/gup: fix gup_pud_range() for dax (John Starks)   
  - memcg: fix possible use-after-free in memcg_write_event_control() (Tejun Heo)   
  - media: v4l2-dv-timings.c: fix too strict blanking sanity checks (Hans Verkuil)   
  - Revert "ARM: dts: imx7: Fix NAND controller size-cells" (Francesco Dolcini)   
  - soundwire: intel: Initialize clock stop timeout (Sjoerd Simons)   
  - media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area() (Hans Verkuil)   
  - xen/netback: don't call kfree_skb() with interrupts disabled (Juergen Gross)   {CVE-2022-42328} {CVE-2022-42329} 
  - xen/netback: do some code cleanup (Juergen Gross)   
  - xen/netback: Ensure protocol headers don't fall in the non-linear area (Ross Lagerwall)   {CVE-2022-3643} 
  - drm/bridge: anx7625: Fix edid_read break case in sp_tx_edid_read() (Hsin-Yi Wang)   
  - cifs: fix use-after-free caused by invalid pointer `hostname` (Zeng Heng)   
  - rtc: cmos: avoid UIP when reading alarm time (Mateusz Jończyk)   
  - rtc: cmos: avoid UIP when writing alarm time (Mateusz Jończyk)   
  - rtc: mc146818-lib: extract mc146818_avoid_UIP (Mateusz Jończyk)   
  - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths (Jann Horn)   
  - mm/khugepaged: fix GUP-fast interaction by sending IPI (Jann Horn)   
  - mm/khugepaged: take the right locks for page table retraction (Jann Horn)   
  - net: usb: qmi_wwan: add u-blox 0x1342 composition (Davide Tronchin)   
  - 9p/xen: check logical size for buffer size (Dominique Martinet)   
  - usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer (Thinh Nguyen)   
  - fbcon: Use kzalloc() in fbcon_prepare_logo() (Tetsuo Handa)   
  - regulator: twl6030: fix get status of twl6032 regulators (Andreas Kemnade)   
  - ASoC: soc-pcm: Add NULL check in BE reparenting (Srinivasa Rao Mandadapu)   
  - btrfs: send: avoid unaligned encoded writes when attempting to clone range (Filipe Manana)   
  - selftests/net: Find nettest in current directory (Daniel Díaz)   
  - ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event (Kees Cook)   
  - regulator: slg51000: Wait after asserting CS pin (Konrad Dybcio)   
  - 9p/fd: Use P9_HDRSZ for header size (GUO Zihua)   
  - ASoC: rt711-sdca: fix the latency time of clock stop prepare state machine transitions (Shuming Fan)   
  - ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188 (Johan Jonker)   
  - spi: mediatek: Fix DEVAPC Violation at KO Remove (Zhichao Liu)   
  - ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register (Chancel Liu)   
  - ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation (Giulio Benetti)   
  - ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels (Tomislav Novak)   
  - fs: use acquire ordering in __fget_light() (Jann Horn)   
  - ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name (Johan Jonker)   
  - arm64: dts: rockchip: fix ir-receiver node names (Johan Jonker)   
  - ARM: dts: rockchip: fix ir-receiver node names (Johan Jonker)   
  - arm: dts: rockchip: remove clock-frequency from rtc (Sebastian Reichel)   
  - arm: dts: rockchip: fix node name for hym8563 rtc (Sebastian Reichel)   
  - arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series (FUKAUMI Naoki)   
  - mmc: mtk-sd: Fix missing clk_disable_unprepare in msdc_of_clock_parse() (Gaosheng Cui)   
  - clk: Provide new devm_clk helpers for prepared and enabled clocks (Uwe Kleine-König)   
  - clk: generalize devm_clk_get() a bit (Uwe Kleine-König)   
  - LTS version: v5.15.82 (Jack Vogel)   
  - ipc/sem: Fix dangling sem_array access in semtimedop race (Jann Horn)   
  - Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send() (Zhang Xiaoxu)   
  - char: tpm: Protect tpm_pm_suspend with locks (Jan Dabros)   
  - Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend" (Conor Dooley)   
  - ACPI: HMAT: Fix initiator registration for single-initiator systems (Vishal Verma)   
  - ACPI: HMAT: remove unnecessary variable initialization (Vishal Verma)   
  - i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set (Andrew Lunn)   
  - i2c: npcm7xx: Fix error handling in npcm_i2c_init() (Yuan Can)   
  - serial: stm32: Deassert Transmit Enable on ->rs485_config() (Lukas Wunner)   
  - serial: stm32: Use TC interrupt to deassert GPIO RTS in RS485 mode (Marek Vasut)   
  - serial: stm32: Factor out GPIO RTS toggling into separate function (Marek Vasut)   
  - ipv4: Fix route deletion when nexthop info is not specified (Ido Schimmel)   
  - ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference (David Ahern)   
  - selftests: net: fix nexthop warning cleanup double ip typo (Nikolay Aleksandrov)   
  - selftests: net: add delete nexthop route warning test (Nikolay Aleksandrov)   
  - Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled (Lee Jones)   
  - parisc: Increase FRAME_WARN to 2048 bytes on parisc (Helge Deller)   
  - mm: migrate: fix THP's mapcount on isolation (Gavin Shan)   
  - mm: __isolate_lru_page_prepare() in isolate_migratepages_block() (Hugh Dickins)   
  - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (Xiongfeng Wang)   
  - iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (Xiongfeng Wang)   
  - nvme: fix SRCU protection of nvme_ns_head list (Caleb Sander)   
  - riscv: kexec: Fixup irq controller broken in kexec crash path (Guo Ren)   
  - riscv: fix race when vmap stack overflow (Jisheng Zhang)   
  - riscv: Sync efi page table's kernel mappings before switching (Alexandre Ghiti)   
  - pinctrl: single: Fix potential division by zero (Maxim Korotkov)   
  - ASoC: ops: Fix bounds check for _sx controls (Mark Brown)   
  - KVM: x86/mmu: Fix race condition in direct_page_fault (Kazuki Takiguchi)   {CVE-2022-45869} 
  - io_uring/poll: fix poll_refs race with cancelation (Lin Ma)   
  - io_uring: make poll refs more robust (Pavel Begunkov)   
  - io_uring: cmpxchg for poll arm refs release (Pavel Begunkov)   
  - io_uring: fix tw losing poll events (Pavel Begunkov)   
  - io_uring: update res mask in io_poll_check_events (Pavel Begunkov)   
  - tracing: Free buffers when a used dynamic event is removed (Steven Rostedt (Google))   
  - tracing: Fix race where histograms can be called before the event (Steven Rostedt (Google))   
  - tracing/osnoise: Fix duration type (Daniel Bristot de Oliveira)   
  - drm/i915: Never return 0 if not all requests retired (Janusz Krzysztofik)   
  - drm/i915: Fix negative value passed as remaining time (Janusz Krzysztofik)   
  - drm/amdgpu: enable Vangogh VCN indirect sram mode (Leo Liu)   
  - drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame (Lee Jones)   
  - mmc: sdhci: Fix voltage switch delay (Adrian Hunter)   
  - mmc: sdhci-sprd: Fix no reset data and command after voltage switch (Wenchao Chen)   
  - mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check (Sebastian Falbesoner)   
  - mmc: core: Fix ambiguous TRIM and DISCARD arg (Christian Löhle)   
  - mmc: mmc_test: Fix removal of debugfs file (Ye Bin)   
  - net: stmmac: Set MAC's flow control register to reflect current settings (Goh, Wei Sheng)   
  - v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails (Linus Torvalds)   
  - pinctrl: intel: Save and restore pins in "direct IRQ" mode (Andy Shevchenko)   
  - x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 (Pawan Gupta)   
  - nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() (ZhangPeng)   
  - tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep" (Tiezhu Yang)   
  - error-injection: Add prompt for function error injection (Steven Rostedt (Google))   
  - ALSA: dice: fix regression for Lexicon I-ONIX FW810S (Takashi Sakamoto)   
  - riscv: mm: Proper page permissions after initmem free (Björn Töpel)   
  - riscv: vdso: fix section overlapping under some conditions (Jisheng Zhang)   
  - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (Yang Yingliang)   
  - hwmon: (coretemp) Check for null before removing sysfs attrs (Phil Auld)   
  - net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed (Yoshihiro Shimoda)   
  - sctp: fix memory leak in sctp_stream_outq_migrate() (Zhengchao Shao)   
  - packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE (Willem de Bruijn)   
  - net: tun: Fix use-after-free in tun_detach() (Shigeru Yoshida)   
  - afs: Fix fileserver probe RTT handling (David Howells)   
  - net: mdiobus: fix unbalanced node reference count (Yang Yingliang)   
  - net: hsr: Fix potential use-after-free (YueHaibing)   
  - tipc: re-fetch skb cb after tipc_msg_validate (Xin Long)   
  - dsa: lan9303: Correct stat name (Jerry Ray)   
  - net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type (M Chetan Kumar)   
  - net: wwan: iosm: fix kernel test robot reported error (M Chetan Kumar)   
  - net: ethernet: nixge: fix NULL dereference (Yuri Karpov)   
  - net/9p: Fix a potential socket leak in p9_socket_open (Wang Hai)   
  - net: net_netdev: Fix error handling in ntb_netdev_init_module() (Yuan Can)   
  - net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe() (Zhang Changzhong)   
  - net: phy: fix null-ptr-deref while probe() failed (Yang Yingliang)   
  - wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration (Lorenzo Bianconi)   
  - wifi: cfg80211: don't allow multi-BSSID in S1G (Johannes Berg)   
  - wifi: cfg80211: fix buffer overflow in elem comparison (Johannes Berg)   
  - aquantia: Do not purge addresses when setting the number of rings (Izabela Bakollari)   
  - qlcnic: fix sleep-in-atomic-context bugs caused by msleep (Duoming Zhou)   
  - can: m_can: Add check for devm_clk_get (Jiasheng Jiang)   
  - can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (Zhang Changzhong)   
  - can: etas_es58x: es58x_init_netdev(): free netdev when register_candev() (Zhang Changzhong)   
  - can: cc770: cc770_isa_probe(): add missing free_cc770dev() (Zhang Changzhong)   
  - can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() (Zhang Changzhong)   
  - net/mlx5e: Fix use-after-free when reverting termination table (Roi Dayan)   
  - net/mlx5: Fix uninitialized variable bug in outlen_write() (YueHaibing)   
  - net/mlx5: DR, Fix uninitialized var warning (YueHaibing)   
  - net/mlx5: DR, Rename list field in matcher struct to list_node (Yevgeny Kliteynik)   
  - e100: Fix possible use after free in e100_xmit_prepare (Wang Hai)   
  - iavf: Fix error handling in iavf_init_module() (Yuan Can)   
  - iavf: remove redundant ret variable (Minghao Chi)   
  - fm10k: Fix error handling in fm10k_init_module() (Yuan Can)   
  - i40e: Fix error handling in i40e_init_module() (Shang XiaoJing)   
  - ixgbevf: Fix resource leak in ixgbevf_init_module() (Shang XiaoJing)   
  - of: property: decrement node refcount in of_fwnode_get_reference_args() (Yang Yingliang)   
  - nvmem: rmem: Fix return value check in rmem_read() (Wei Yongjun)   
  - bpf: Do not copy spin lock field from user in bpf_selem_alloc (Xu Kuohai)   
  - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (Gaosheng Cui)   
  - hwmon: (i5500_temp) fix missing pci_disable_device() (Yang Yingliang)   
  - hwmon: (ina3221) Fix shunt sum critical calculation (Ninad Malwade)   
  - hwmon: (ltc2947) fix temperature scaling (Derek Nguyen)   
  - libbpf: Handle size overflow for ringbuf mmap (Hou Tao)   
  - ARM: at91: rm9200: fix usb device clock id (Michael Grzeschik)   
  - scripts/faddr2line: Fix regression in name resolution on ppc64le (Srikar Dronamraju)   
  - bpf, perf: Use subprog name when reporting subprog ksymbol (Hou Tao)   
  - iio: light: rpr0521: add missing Kconfig dependencies (Paul Gazzillo)   
  - iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw (Wei Yongjun)   
  - iio: health: afe4403: Fix oob read in afe4403_read_raw (Wei Yongjun)   
  - drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly when the edid is read" (Alex Deucher)   
  - drm/amdgpu: update drm_display_info correctly when the edid is read (Claudio Suarez)   
  - drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code (Lyude Paul)   
  - btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() (ChenXiaoSong)   
  - btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker (Nikolay Borisov)   
  - spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock (Frieder Schrempf)   
  - btrfs: free btrfs_path before copying inodes to userspace (Anand Jain)   
  - btrfs: sink iterator parameter to btrfs_ioctl_logical_to_ino (David Sterba)   
  - erofs: fix order >= MAX_ORDER warning due to crafted negative i_size (Gao Xiang)   
  - drm/i915/gt: Use i915_vm_put on ppgtt_create error paths (Chris Wilson)   
  - drm/i915: Create a dummy object for gen6 ppgtt (Maarten Lankhorst)   
  - arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored (Catalin Marinas)   
  - LTS version: v5.15.81 (Jack Vogel)   
  - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara)   
  - drm/i915: fix TLB invalidation for Gen12 video and compute engines (Andrzej Hajda)   {CVE-2022-4139} 
  - drm/amdgpu: always register an MMU notifier for userptr (Christian König)   
  - drm/amdgpu: Enable Aldebaran devices to report CU Occupancy (Ramesh Errabolu)   
  - drm/amd/display: No display after resume from WB/CB (Tsung-hua Lin)   
  - drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN (Lyude Paul)   
  - btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs() (Zhen Lei)   
  - btrfs: use kvcalloc in btrfs_get_dev_zone_info (Christoph Hellwig)   
  - btrfs: zoned: fix missing endianness conversion in sb_write_pointer (Christoph Hellwig)   
  - btrfs: free btrfs_path before copying subvol info to userspace (Anand Jain)   
  - btrfs: free btrfs_path before copying fspath to userspace (Anand Jain)   
  - btrfs: free btrfs_path before copying root refs to userspace (Josef Bacik)   
  - genirq: Take the proposed affinity at face value if force==true (Luiz Capitulino)   
  - irqchip/gic-v3: Always trust the managed affinity provided by the core code (Luiz Capitulino)   
  - genirq: Always limit the affinity to online CPUs (Luiz Capitulino)   
  - genirq/msi: Shutdown managed interrupts with unsatifiable affinities (Luiz Capitulino)   
  - wifi: wilc1000: validate number of channels (Phil Turnbull)   
  - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute (Phil Turnbull)   
  - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute (Phil Turnbull)   
  - wifi: wilc1000: validate pairwise and authentication suite offsets (Phil Turnbull)   
  - fuse: lock inode unconditionally in fuse_fallocate() (Miklos Szeredi)   
  - dm integrity: clear the journal on suspend (Mikulas Patocka)   
  - dm integrity: flush the journal on suspend (Mikulas Patocka)   
  - gpu: host1x: Avoid trying to use GART on Tegra20 (Robin Murphy)   
  - scsi: iscsi: Fix possible memory leak when device_register() failed (Zhou Guanghui)   
  - net: usb: qmi_wwan: add Telit 0x103a composition (Enrico Sau)   
  - tcp: configurable source port perturb table size (Gleb Mazovetskiy)   
  - platform/x86: ideapad-laptop: Fix interrupt storm on fn-lock toggle on some Yoga laptops (Arnav Rawat)   
  - platform/x86: hp-wmi: Ignore Smart Experience App event (Kai-Heng Feng)   
  - zonefs: fix zone report size in __zonefs_io_error() (Damien Le Moal)   
  - drm/amdgpu: disable BACO support on more cards (Guchun Chen)   
  - platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) (Hans de Goede)   
  - platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() (Xiongfeng Wang)   
  - xen/platform-pci: add missing free_irq() in error path (ruanjinjie)   
  - xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too (Marek Marczykowski-Górecki)   
  - ASoC: stm32: dfsdm: manage cb buffers cleanup (Olivier Moysan)   
  - Input: i8042 - apply probe defer to more ASUS ZenBook models (Takashi Iwai)   
  - Input: soc_button_array - add Acer Switch V 10 to dmi_use_low_level_irq[] (Hans de Goede)   
  - Input: soc_button_array - add use_low_level_irq module parameter (Hans de Goede)   
  - Input: goodix - try resetting the controller when no config is set (Hans de Goede)   
  - serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios() (Lukas Wunner)   
  - tools: iio: iio_generic_buffer: Fix read size (Matti Vaittinen)   
  - ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 (Hans de Goede)   
  - Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode (Aman Dhoot)   
  - x86/ioremap: Fix page aligned size calculation in __ioremap_caller() (Michael Kelley)   
  - x86/pm: Add enumeration check before spec MSRs save/restore setup (Pawan Gupta)   
  - x86/tsx: Add a feature bit for TSX control MSR support (Pawan Gupta)   
  - KVM: x86: remove exit_int_info warning in svm_handle_exit (Maxim Levitsky)   
  - KVM: x86: add kvm_leave_nested (Maxim Levitsky)   
  - KVM: x86: nSVM: harden svm_free_nested against freeing vmcb02 while still in use (Maxim Levitsky)   {CVE-2022-3344} 
  - KVM: x86: forcibly leave nested mode on vCPU reset (Maxim Levitsky)   {CVE-2022-3344} 
  - KVM: x86: nSVM: leave nested mode on vCPU free (Maxim Levitsky)   
  - mm: vmscan: fix extreme overreclaim and swap floods (Johannes Weiner)   
  - gcov: clang: fix the buffer overflow issue (Mukesh Ojha)   
  - nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty (Chen Zhongjin)   
  - usb: dwc3: gadget: Clear ep descriptor last (Thinh Nguyen)   
  - usb: dwc3: gadget: Return -ESHUTDOWN on ep disable (Thinh Nguyen)   
  - usb: dwc3: gadget: conditionally remove requests (Michael Grzeschik)   
  - bus: ixp4xx: Don't touch bit 7 on IXP42x (Linus Walleij)   
  - iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails (Chen Zhongjin)   
  - iio: light: apds9960: fix wrong register for gesture gain (Alejandro Concepción Rodríguez)   
  - arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency (Jakob Unterwurzacher)   
  - ext4: fix use-after-free in ext4_ext_shift_extents (Baokun Li)   
  - usb: cdnsp: fix issue with ZLP - added TD_SIZE = 1 (Pawel Laszczak)   
  - usb: cdnsp: Fix issue with Clear Feature Halt Endpoint (Pawel Laszczak)   
  - usb: dwc3: exynos: Fix remove() function (Marek Szyprowski)   
  - KVM: arm64: pkvm: Fixup boot mode to reflect that the kernel resumes from EL1 (Marc Zyngier)   
  - mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)   
  - mmc: sdhci-brcmstb: Enable Clock Gating to save power (Al Cooper)   
  - mmc: sdhci-brcmstb: Re-organize flags (Al Cooper)   
  - nios2: add FORCE for vmlinuz.gz (Randy Dunlap)   
  - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Alexandre Belloni)   
  - lib/vdso: use "grep -E" instead of "egrep" (Greg Kroah-Hartman)   
  - s390/crashdump: fix TOD programmable field size (Heiko Carstens)   
  - net: thunderx: Fix the ACPI memory leak (Yu Liao)   
  - octeontx2-af: Fix reference count issue in rvu_sdp_init() (Xiongfeng Wang)   
  - octeontx2-pf: Add check for devm_kcalloc (Jiasheng Jiang)   
  - net: enetc: preserve TX ring priority across reconfiguration (Vladimir Oltean)   
  - net: enetc: cache accesses to &priv->si->hw (Vladimir Oltean)   
  - net: enetc: manage ENETC_F_QBV in priv->active_offloads only when enabled (Vladimir Oltean)   
  - nfc: st-nci: fix incorrect sizing calculations in EVT_TRANSACTION (Martin Faltesek)   
  - nfc: st-nci: fix memory leaks in EVT_TRANSACTION (Martin Faltesek)   
  - nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION (Martin Faltesek)   
  - s390/dasd: fix no record found for raw_track_access (Stefan Haberland)   
  - arcnet: fix potential memory leak in com20020_probe() (Wang Hai)   
  - ipv4: Fix error return code in fib_table_insert() (Ziyang Xuan)   
  - dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). (Kuniyuki Iwashima)   
  - fs: do not update freeing inode i_io_list (Svyatoslav Feldsherov)   
  - netfilter: flowtable_offload: add missing locking (Felix Fietkau)   
  - netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface (Jozsef Kadlecsik)   
  - dma-buf: fix racing conflict of dma_heap_add() (Dawei Li)   
  - bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() (Yang Yingliang)   
  - regulator: twl6030: re-add TWL6032_SUBCLASS (Andreas Kemnade)   
  - NFC: nci: fix memory leak in nci_rx_data_packet() (Liu Shixin)   
  - net: sched: allow act_ct to be built without NF_NAT (Xin Long)   
  - net: sparx5: fix error handling in sparx5_port_open() (Liu Jian)   
  - sfc: fix potential memleak in __ef100_hard_start_xmit() (Zhang Changzhong)   
  - net: wwan: iosm: use ACPI_FREE() but not kfree() in ipc_pcie_read_bios_cfg() (Wang ShaoBo)   
  - xfrm: Fix ignored return value in xfrm6_init() (Chen Zhongjin)   
  - xfrm: Fix oops in __xfrm_state_delete() (Thomas Jarosch)   
  - tipc: check skb_linearize() return value in tipc_disc_rcv() (YueHaibing)   
  - tipc: add an extra conn_get in tipc_conn_alloc (Xin Long)   
  - tipc: set con sock in tipc_conn_alloc (Xin Long)   
  - net/mlx5: Fix handling of entry refcount when command is not issued to FW (Moshe Shemesh)   
  - net/mlx5: Fix FW tracer timestamp calculation (Moshe Shemesh)   
  - net/mlx5: Do not query pci info while pci disabled (Roy Novich)   
  - netfilter: ipset: regression in ip_set_hash_ip.c (Vishwanath Pai)   
  - Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() (Yang Yingliang)   
  - Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() (Yang Yingliang)   
  - macsec: Fix invalid error code set (YueHaibing)   
  - nfp: add port from netdev validation for EEPROM access (Jaco Coetzee)   
  - nfp: fill splittable of devlink_port_attrs correctly (Diana Wang)   
  - net: pch_gbe: fix pci device refcount leak while module exiting (Yang Yingliang)   
  - octeontx2-af: debugsfs: fix pci device refcount leak (Yang Yingliang)   
  - net/qla3xxx: fix potential memleak in ql3xxx_send() (Zhang Changzhong)   
  - net: mvpp2: fix possible invalid pointer dereference (Hui Tang)   
  - net/mlx4: Check retval of mlx4_bitmap_init (Peter Kosyh)   
  - net: ethernet: mtk_eth_soc: fix error handling in mtk_open() (Liu Jian)   
  - ARM: dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties (Fabio Estevam)   
  - ARM: mxs: fix memory leak in mxs_machine_init() (Zheng Yongjun)   
  - iavf: Fix race condition between iavf_shutdown and iavf_remove (Slawomir Laba)   
  - iavf: Do not restart Tx queues after reset task failure (Ivan Vecera)   
  - iavf: Fix a crash during reset task (Ivan Vecera)   
  - netfilter: nf_tables: do not set up extensions for end interval (Pablo Neira Ayuso)   
  - netfilter: conntrack: Fix data-races around ct mark (Daniel Xu)   
  - 9p/fd: fix issue of list_del corruption in p9_fd_cancel() (Zhengchao Shao)   
  - net: pch_gbe: fix potential memleak in pch_gbe_tx_queue() (Wang Hai)   
  - nfc/nci: fix race with opening and closing (Lin Ma)   
  - net: dsa: sja1105: disallow C45 transactions on the BASE-TX MDIO bus (Vladimir Oltean)   
  - rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] (David Howells)   
  - rxrpc: Use refcount_t rather than atomic_t (David Howells)   
  - rxrpc: Allow list of in-use local UDP endpoints to be viewed in /proc (David Howells)   
  - net: liquidio: simplify if expression (Leon Romanovsky)   
  - selftests: mptcp: fix mibit vs mbit mix up (Matthieu Baerts)   
  - selftests: mptcp: more stable simult_flows tests (Paolo Abeni)   
  - ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl (Michael Grzeschik)   
  - tee: optee: fix possible memory leak in optee_register_device() (Yang Yingliang)   
  - bus: sunxi-rsb: Support atomic transfers (Samuel Holland)   
  - bus: sunxi-rsb: Remove the shutdown callback (Samuel Holland)   
  - regulator: core: fix UAF in destroy_regulator() (Yang Yingliang)   
  - spi: dw-dma: decrease reference count in dw_spi_dma_init_mfld() (Xiongfeng Wang)   
  - regulator: core: fix kobject release warning and memory leak in regulator_register() (Zeng Heng)   
  - ASoC: max98373: Add checks for devm_kcalloc (Jiasheng Jiang)   
  - scsi: storvsc: Fix handling of srb_status and capacity change events (Michael Kelley)   
  - x86/hyperv: Restore VP assist page after cpu offlining/onlining (Vitaly Kuznetsov)   
  - ASoC: soc-pcm: Don't zero TDM masks in __soc_pcm_open() (Richard Fitzgerald)   
  - ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove (Detlev Casanova)   
  - ASoC: hdac_hda: fix hda pcm buffer overflow issue (Junxiao Chang)   
  - ARM: dts: am335x-pcm-953: Define fixed regulators in root node (Dominik Haller)   
  - af_key: Fix send_acquire race with pfkey_register (Herbert Xu)   
  - xfrm: replay: Fix ESN wrap around for GSO (Christian Langrock)   
  - xfrm: fix "disable_policy" on ipv4 early demux (Eyal Birger)   
  - MIPS: pic32: treat port as signed integer (Jason A. Donenfeld)   
  - RISC-V: vdso: Do not add missing symbols to version section in linker script (Nathan Chancellor)   
  - ALSA: usb-audio: add quirk to fix Hamedal C20 disconnect issue (Ai Chao)   
  - Revert "drm/amdgpu: Revert "drm/amdgpu: getting fan speed pwm for vega10 properly"" (Asher Song)   
  - nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked (Aleksandr Miloserdov)   
  - arm64/syscall: Include asm/ptrace.h in syscall_wrapper header. (Kuniyuki Iwashima)   
  - block, bfq: fix null pointer dereference in bfq_bio_bfqg() (Yu Kuai)   
  - drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017) (Hans de Goede)   
  - scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC (Bart Van Assche)   
  - scsi: ibmvfc: Avoid path failures during live migration (Brian King)   
  - platform/x86/intel/hid: Add some ACPI device IDs (Ivan Hu)   
  - platform/x86/intel/pmt: Sapphire Rapids PMT errata fix (David E. Box)   
  - platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1 (Hans de Goede)   
  - platform/x86: ideapad-laptop: Disable touchpad_switch (Manyi Li)   
  - Revert "net: macsec: report real_dev features when HW offloading is enabled" (Sabrina Dubroca)   
  - selftests/bpf: Add verifier test for release_reference() (Youlin Li)   
  - spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run (Sean Nyekjaer)   
  - wifi: ath11k: Fix QCN9074 firmware boot on x86 (Tyler J. Stachecki)   
  - wifi: mac80211: Fix ack frame idr leak when mesh has no route (Nicolas Cavallari)   
  - wifi: airo: do not assign -1 to unsigned char (Jason A. Donenfeld)   
  - audit: fix undefined behavior in bit shift for AUDIT_BIT (Gaosheng Cui)   
  - riscv: dts: sifive unleashed: Add PWM controlled LEDs (Emil Renner Berthing)   
  - wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support (Jonas Jelonek)   
  - wifi: mac80211: fix memory free error when registering wiphy fail (taozhang)   
  - ceph: fix NULL pointer dereference for req->r_session (Xiubo Li)   
  - ceph: Use kcalloc for allocating multiple elements (Kenneth Lee)   
  - binder: validate alloc->mm in ->mmap() handler (Carlos Llamas)   
  - x86/sgx: Add overflow check in sgx_validate_offset_length() (Borys Popławski)   
  - x86/sgx: Create utility to validate user provided offset and length (Reinette Chatre)   
  - ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li)   
  - ceph: do not update snapshot context when there is no new snapshot (Xiubo Li)   
  - iio: pressure: ms5611: fixed value compensation bug (Mitja Spes)   
  - iio: ms5611: Simplify IO callback parameters (Lars-Peter Clausen)   
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Netac NV7000 (Tiago Dias Ferreira)   
  - nvme-pci: disable write zeroes on various Kingston SSD (Xander Li)   
  - nvme-pci: disable namespace identifiers for the MAXIO MAP1001 (Christoph Hellwig)   
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Micron Nitro (Bean Huo)   
  - nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH (Leo Savernik)   
  - drm/display: Don't assume dual mode adaptors support i2c sub-addressing (Simon Rettberg)   
  - ata: libata-core: do not issue non-internal commands once EH is pending (Niklas Cassel)   
  - ata: libata-scsi: simplify __ata_scsi_queuecmd() (Wenchao Hao)   
  - cifs: Fix connections leak when tlink setup failed (Zhang Xiaoxu)   
  - cifs: support nested dfs links over reconnect (Paulo Alcantara)   
  - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara)   
  - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara)   
  - sctp: clear out_curr if all frag chunks of current msg are pruned (Xin Long)   
  - sctp: remove the unnecessary sinfo_stream check in sctp_prsctp_prune_unsent (Xin Long)   
  - tty: serial: fsl_lpuart: don't break the on-going transfer when global reset (Sherry Sun)   
  - serial: fsl_lpuart: Fill in rs485_supported (Ilpo Järvinen)   
  - serial: Add rs485_supported to uart_port (Ilpo Järvinen)   
  - ASoC: fsl_asrc fsl_esai fsl_sai: allow CONFIG_PM=N (Maarten Zanders)   
  - ASoC: fsl_sai: use local device pointer (Marco Felsch)   
  - net: mana: Fix race on per-CQ variable napi work_done (Haiyang Zhang)  [Orabug: 34917684]  
  - vhost-scsi: Fix max number of virtqueues (Mike Christie)  [Orabug: 34915127]  
  - uek_kabi: unneeded include of uek_kabi.h in ip.h (Alan Maguire)  [Orabug: 34911234]  
  - uek-container: Enable CONFIG_IA32_EMULATION (Liam Merwick)  [Orabug: 34909790]  
  - uek-rpm: Disable CONFIG_SND_PCM_OSS for OL8 and OL9 (Harshit Mogalapalli)  [Orabug: 34885467]  
  - uek-container: ol9: Update config with that generated by 'make olddefconfig' (Liam Merwick)  [Orabug: 34850980]  
  - uek-container: ol8: Update config with that generated by 'make olddefconfig' (Liam Merwick)  [Orabug: 34850980]  
  - uek-container: Fix x86_64 PVH ELF note with binutils >= 2.36 (Liam Merwick)  [Orabug: 34850980]  
  - uek-rpm: ol9: Add spec file changes to build container kernel (Liam Merwick)  [Orabug: 34850980]  
  - uek-rpm: ol8: Add spec file changes to build container kernel (Liam Merwick)  [Orabug: 34850980]  
  - uek-rpm: ol9: x86_64: Add kernel-uek-container config file (Liam Merwick)  [Orabug: 34850980]  
  - uek-rpm: ol8: x86_64: Add kernel-uek-container config file (Liam Merwick)  [Orabug: 34850980]


