[El-errata] ELSA-2022-9689 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Wed Aug 10 00:57:10 UTC 2022


Oracle Linux Security Advisory ELSA-2022-9689

http://linux.oracle.com/errata/ELSA-2022-9689.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:


aarch64:
bpftool-5.15.0-1.43.4.1.el9uek.aarch64.rpm
kernel-uek-5.15.0-1.43.4.1.el9uek.aarch64.rpm
kernel-uek-core-5.15.0-1.43.4.1.el9uek.aarch64.rpm
kernel-uek-debug-5.15.0-1.43.4.1.el9uek.aarch64.rpm
kernel-uek-debug-core-5.15.0-1.43.4.1.el9uek.aarch64.rpm
kernel-uek-debug-devel-5.15.0-1.43.4.1.el9uek.aarch64.rpm
kernel-uek-debug-modules-5.15.0-1.43.4.1.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-5.15.0-1.43.4.1.el9uek.aarch64.rpm
kernel-uek-devel-5.15.0-1.43.4.1.el9uek.aarch64.rpm
kernel-uek-doc-5.15.0-1.43.4.1.el9uek.noarch.rpm
kernel-uek-modules-5.15.0-1.43.4.1.el9uek.aarch64.rpm
kernel-uek-modules-extra-5.15.0-1.43.4.1.el9uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-uek-5.15.0-1.43.4.1.el9uek.src.rpm

Related CVEs:

CVE-2022-2588




Description of changes:

[5.15.0-1.43.4.1.el9uek]
- net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo)  [Orabug: 34460936]  {CVE-2022-2588}

[5.15.0-1.43.4.el9uek]
- Revert "selftests/bpf: add tests verifying unprivileged bpf behaviour" (Alan Maguire)  [Orabug: 34399286]
- Revert "selftests/bpf: Add test for reg2btf_ids out of bounds access" (Alan Maguire)  [Orabug: 34399286]

[5.15.0-1.43.3.el9uek]
- x86/alternative: The retpoline alternative is not applied (Alexandre Chartre)  [Orabug: 34395937]
- x86/ftrace: Do not copy ftrace_stub() in ftrace trampoline (Alexandre Chartre)  [Orabug: 34395937]

[5.15.0-100.43.0.el9uek]
- ocfs2: kill EBUSY from dlmfs_evict_inode (Junxiao Bi)  [Orabug: 34364336]
- ocfs2: dlmfs: don't clear USER_LOCK_ATTACHED when destroying lock (Junxiao Bi)  [Orabug: 34364336]
- ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock (Junxiao Bi via Ocfs2-devel)  [Orabug: 34364336]
- net/rds: Fix a NULL dereference in rds_tcp_accept_one() (Harshit Mogalapalli)  [Orabug: 34366723]
- lockdown: Fix kexec lockdown bypass with ima policy (Eric Snowberg)  [Orabug: 34393053]  {CVE-2022-21505}

[5.15.0-1.43.1.el9uek]
- LTS version: v5.15.43 (Jack Vogel) 
- mptcp: Do TCP fallback on early DSS checksum failure (Mat Martineau) 
- LTS version: v5.15.42 (Jack Vogel) 
- afs: Fix afs_getattr() to refetch file status if callback break occurred (David Howells) 
- i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe() (Yang Yingliang) 
- mt76: mt7921e: fix possible probe failure after reboot (Sean Wang) 
- dt-bindings: pinctrl: aspeed-g6: remove FWQSPID group (Jae Hyun Yoo) 
- Input: ili210x - fix reset timing (Marek Vasut) 
- arm64: Enable repeat tlbi workaround on KRYO4XX gold CPUs (Shreyas K K) 
- net: atlantic: verify hw_head_ lies within TX buffer ring (Grant Grundler) 
- net: atlantic: add check for MAX_SKB_FRAGS (Grant Grundler) 
- net: atlantic: reduce scope of is_rsc_complete (Grant Grundler) 
- net: atlantic: fix "frag[0] not initialized" (Grant Grundler) 
- net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe() (Yang Yingliang) 
- ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one() (Yang Yingliang) 
- nl80211: fix locking in nl80211_set_tx_bitrate_mask() (Johannes Berg) 
- net: fix wrong network header length (Lina Wang) 
- fbdev: Prevent possible use-after-free in fb_release() (Daniel Vetter) 
- Revert "fbdev: Make fb_release() return -ENODEV if fbdev was unregistered" (Javier Martinez Canillas) 
- selftests: add ping test with ping_group_range tuned (Nicolas Dichtel) 
- nl80211: validate S1G channel width (Kieran Frewen) 
- mac80211: fix rx reordering with non explicit / psmp ack policy (Felix Fietkau) 
- scsi: qla2xxx: Fix missed DMA unmap for aborted commands (Gleb Chesnokov) 
- scsi: scsi_dh_alua: Properly handle the ALUA transitioning state (Brian Bunker) 
- perf bench numa: Address compiler error on s390 (Thomas Richter) 
- perf regs x86: Fix arch__intr_reg_mask() for the hybrid platform (Kan Liang) 
- gpio: mvebu/pwm: Refuse requests with inverted polarity (Uwe Kleine-König) 
- gpio: gpio-vf610: do not touch other bits when set the target bit (Haibo Chen) 
- perf build: Fix check for btf__load_from_kernel_by_id() in libbpf (Arnaldo Carvalho de Melo) 
- scsi: ufs: core: Fix referencing invalid rsp field (Daejun Park) 
- riscv: dts: sifive: fu540-c000: align dma node name with dtschema (Krzysztof Kozlowski) 
- net: bridge: Clear offload_fwd_mark when passing frame up bridge interface. (Andrew Lunn) 
- netfilter: flowtable: move dst_check to packet path (Ritaro Takenaka) 
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Pablo Neira Ayuso) 
- netfilter: flowtable: fix TCP flow teardown (Pablo Neira Ayuso) 
- igb: skip phy status check where unavailable (Kevin Mitchell) 
- mptcp: fix checksum byte order (Paolo Abeni) 
- mptcp: reuse __mptcp_make_csum in validate_data_csum (Geliang Tang) 
- mptcp: change the parameter of __mptcp_make_csum (Geliang Tang) 
- ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2 (Ard Biesheuvel) 
- ARM: 9196/1: spectre-bhb: enable for Cortex-A15 (Ard Biesheuvel) 
- net: af_key: add check for pfkey_broadcast in function pfkey_process (Jiasheng Jiang) 
- net/mlx5e: Properly block LRO when XDP is enabled (Maxim Mikityanskiy) 
- net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table (Maor Dickman) 
- NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc (Duoming Zhou) 
- net/qla3xxx: Fix a test in ql_reset_work() (Christophe JAILLET) 
- clk: at91: generated: consider range when calculating best rate (Codrin Ciubotariu) 
- ice: Fix interrupt moderation settings getting cleared (Michal Wilczynski) 
- ice: move ice_container_type onto ice_ring_container (Maciej Fijalkowski) 
- ice: fix possible under reporting of ethtool Tx and Rx statistics (Paul Greenwalt) 
- ice: fix crash when writing timestamp on RX rings (Arkadiusz Kubalewski) 
- net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() (Zixuan Fu) 
- net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() (Zixuan Fu) 
- net: systemport: Fix an error handling path in bcm_sysport_probe() (Christophe JAILLET) 
- Revert "PCI: aardvark: Rewrite IRQ code to chained IRQ handler" (Pali Rohár) 
- netfilter: nft_flow_offload: fix offload with pppoe + vlan (Felix Fietkau) 
- net: fix dev_fill_forward_path with pppoe + bridge (Felix Fietkau) 
- netfilter: nft_flow_offload: skip dst neigh lookup for ppp devices (Felix Fietkau) 
- netfilter: flowtable: fix excessive hw offload attempts after failure (Felix Fietkau) 
- net/sched: act_pedit: sanitize shift argument before usage (Paolo Abeni) 
- xfrm: fix "disable_policy" flag use when arriving from different devices (Eyal Birger) 
- xfrm: rework default policy structure (Nicolas Dichtel) 
- net: macb: Increment rx bd head after allocating skb and buffer (Harini Katakam) 
- net: ipa: record proper RX transaction count (Alex Elder) 
- ALSA: hda - fix unused Realtek function when PM is not enabled (Randy Dunlap) 
- pinctrl: mediatek: mt8365: fix IES control pins (Mattijs Korpershoek) 
- ARM: dts: aspeed: Add video engine to g6 (Howard Chiu) 
- ARM: dts: aspeed: Add secure boot controller node (Joel Stanley) 
- ARM: dts: aspeed: Add ADC for AST2600 and enable for Rainier and Everest (Eddie James) 
- ARM: dts: aspeed-g6: fix SPI1/SPI2 quad pin group (Jae Hyun Yoo) 
- pinctrl: pinctrl-aspeed-g6: remove FWQSPID group in pinctrl (Jae Hyun Yoo) 
- ARM: dts: aspeed-g6: remove FWQSPID group in pinctrl dtsi (Jae Hyun Yoo) 
- dma-buf: ensure unique directory name for dmabuf stats (Charan Teja Kalla) 
- dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace (Jérôme Pouiller) 
- drm/dp/mst: fix a possible memory leak in fetch_monitor_name() (Hangyu Hua) 
- drm/i915/dmc: Add MMIO range restrictions (Anusha Srivatsa) 
- drm/amd: Don't reset dGPUs if the system is going to s2idle (Mario Limonciello) 
- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) 
- crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ (Ondrej Mosnacek) 
- arm64: mte: Ensure the cleared tags are visible before setting the PTE (Catalin Marinas) 
- arm64: paravirt: Use RCU read locks to guard stolen_time (Prakruthi Deepak Heragu) 
- KVM: x86/mmu: Update number of zapped pages even if page list is stable (Sean Christopherson) 
- Revert "can: m_can: pci: use custom bit timings for Elkhart Lake" (Jarkko Nikula) 
- PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold (Rafael J. Wysocki) 
- Fix double fget() in vhost_net_set_backend() (Al Viro) 
- selinux: fix bad cleanup on error in hashtab_duplicate() (Ondrej Mosnacek) 
- ALSA: hda/realtek: Add quirk for TongFang devices with pop noise (Werner Sembach) 
- ALSA: wavefront: Proper check of get_user() error (Takashi Iwai) 
- ALSA: usb-audio: Restore Rane SL-1 quirk (Takashi Iwai) 
- nilfs2: fix lockdep warnings during disk space reclamation (Ryusuke Konishi) 
- nilfs2: fix lockdep warnings in page operations for btree nodes (Ryusuke Konishi) 
- ARM: 9191/1: arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame() (linyujun) 
- platform/chrome: cros_ec_debugfs: detach log reader wq from devm (Tzung-Bi Shih) 
- drbd: remove usage of list iterator variable after loop (Jakob Koschel) 
- MIPS: lantiq: check the return value of kzalloc() (Xiaoke Wang) 
- fs: fix an infinite loop in iomap_fiemap (Guo Xuenan) 
- rtc: mc146818-lib: Fix the AltCentury for AMD platforms (Mario Limonciello) 
- nvme-multipath: fix hang when disk goes live over reconnect (Anton Eidelman) 
- nvmet: use a private workqueue instead of the system workqueue (Sagi Grimberg) 
- tools/virtio: compile with -pthread (Michael S. Tsirkin) 
- vhost_vdpa: don't setup irq offloading when irq_num < 0 (Zhu Lingshan) 
- s390/pci: improve zpci_dev reference counting (Niklas Schnelle) 
- s390/traps: improve panic message for translation-specification exception (Heiko Carstens) 
- ALSA: hda/realtek: Enable headset mic on Lenovo P360 (Kai-Heng Feng) 
- crypto: x86/chacha20 - Avoid spurious jumps to other functions (Peter Zijlstra) 
- crypto: stm32 - fix reference leak in stm32_crc_remove (Zheng Yongjun) 
- rtc: sun6i: Fix time overflow handling (Andre Przywara) 
- gfs2: Disable page faults during lockless buffered reads (Andreas Gruenbacher) 
- nvme-pci: add quirks for Samsung X5 SSDs (Monish Kumar R) 
- Input: stmfts - fix reference leak in stmfts_input_open (Zheng Yongjun) 
- Input: add bounds checking to input_set_capability() (Jeff LaBundy) 
- um: Cleanup syscall_handler_t definition/cast, fix warning (David Gow) 
- rtc: pcf2127: fix bug when reading alarm registers (Hugo Villeneuve) 
- rtc: fix use-after-free on device removal (Vincent Whitchurch) 
- Revert "drm/i915/opregion: check port number bounds for SWSCI display power state" (Greg Thelen) 
- mm/kfence: reset PG_slab and memcg_data before freeing __kfence_pool (Hyeonggon Yoo) 
- Watchdog: sp5100_tco: Enable Family 17h+ CPUs (Terry Bowman) 
- Watchdog: sp5100_tco: Add initialization using EFCH MMIO (Terry Bowman) 
- Watchdog: sp5100_tco: Refactor MMIO base address initialization (Terry Bowman) 
- Watchdog: sp5100_tco: Move timer initialization into function (Terry Bowman) 
- i2c: piix4: Enable EFCH MMIO for Family 17h+ (Terry Bowman) 
- i2c: piix4: Add EFCH MMIO support for SMBus port select (Terry Bowman) 
- i2c: piix4: Add EFCH MMIO support to SMBus base address detect (Terry Bowman) 
- i2c: piix4: Add EFCH MMIO support to region request and release (Terry Bowman) 
- i2c: piix4: Move SMBus port selection into function (Terry Bowman) 
- i2c: piix4: Move SMBus controller base address detect into function (Terry Bowman) 
- i2c: piix4: Move port I/O region request/release code into functions (Terry Bowman) 
- i2c: piix4: Replace hardcoded memory map size with a #define (Terry Bowman) 
- kernel/resource: Introduce request_mem_region_muxed() (Terry Bowman) 
- io_uring: arm poll for non-nowait files (Pavel Begunkov) 
- usb: gadget: fix race when gadget driver register via ioctl (Schspa Shi) 
- LTS version: v5.15.41 (Jack Vogel) 
- usb: gadget: uvc: allow for application to cleanly shutdown (Dan Vacura) 
- usb: gadget: uvc: rename function to be more consistent (Michael Tretter) 
- ping: fix address binding wrt vrf (Nicolas Dichtel) 
- mm/hwpoison: use pr_err() instead of dump_page() in get_any_page() (Naoya Horiguchi) 
- dma-buf: call dma_buf_stats_setup after dmabuf is in valid list (Charan Teja Reddy) 
- Revert "drm/amd/pm: keep the BACO feature enabled for suspend" (Alex Deucher) 
- drm/vmwgfx: Initialize drm_mode_fb_cmd2 (Zack Rusin) 
- SUNRPC: Ensure that the gssproxy client can start in a connected state (Trond Myklebust) 
- net: phy: micrel: Pass .probe for KS8737 (Fabio Estevam) 
- net: phy: micrel: Do not use kszphy_suspend/resume for KSZ8061 (Fabio Estevam) 
- arm[64]/memremap: don't abuse pfn_valid() to ensure presence of linear map (Mike Rapoport) 
- cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() (Waiman Long) 
- writeback: Avoid skipping inode writeback (Jing Xia) 
- net: phy: Fix race condition on link status change (Francesco Dolcini) 
- net: atlantic: always deep reset on pm op, fixing up my null deref regression (Manuel Ullmann) 
- i40e: i40e_main: fix a missing check on list iterator (Xiaomeng Tong) 
- drm/nouveau/tegra: Stop using iommu_present() (Robin Murphy) 
- drm/vmwgfx: Disable command buffers on svga3 without gbobjects (Zack Rusin) 
- mm/huge_memory: do not overkill when splitting huge_zero_page (Xu Yu) 
- Revert "mm/memory-failure.c: skip huge_zero_page in memory_failure()" (Xu Yu) 
- ceph: fix setting of xattrs on async created inodes (Jeff Layton) 
- serial: 8250_mtk: Fix register address for XON/XOFF character (AngeloGioacchino Del Regno) 
- serial: 8250_mtk: Fix UART_EFR register address (AngeloGioacchino Del Regno) 
- fsl_lpuart: Don't enable interrupts too early (Indan Zupancic) 
- slimbus: qcom: Fix IRQ check in qcom_slim_probe (Miaoqian Lin) 
- USB: serial: option: add Fibocom MA510 modem (Sven Schwermer) 
- USB: serial: option: add Fibocom L610 modem (Sven Schwermer) 
- USB: serial: qcserial: add support for Sierra Wireless EM7590 (Ethan Yang) 
- USB: serial: pl2303: add device id for HP LM930 Display (Scott Chen) 
- usb: typec: tcpci_mt6360: Update for BMC PHY setting (ChiYuan Huang) 
- usb: typec: tcpci: Don't skip cleanup in .remove() on error (Uwe Kleine-König) 
- usb: cdc-wdm: fix reading stuck on device close (Sergey Ryazanov) 
- tty: n_gsm: fix mux activation issues in gsm_config() (Daniel Starke) 
- tty: n_gsm: fix buffer over-read in gsm_dlci_data() (Daniel Starke) 
- tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() (Yang Yingliang) 
- x86/mm: Fix marking of unused sub-pmd ranges (Adrian-Ken Rueegsegger) 
- usb: xhci-mtk: fix fs isoc's transfer error (Chunfeng Yun) 
- KVM: PPC: Book3S PR: Enable MSR_DR for switch_mmu_context() (Alexander Graf) 
- firmware_loader: use kernel credentials when reading firmware (Thiébaud Weksteen) 
- interconnect: Restore sync state by ignoring ipa-virt in provider count (Stephen Boyd) 
- tcp: drop the hash_32() part from the index calculation (Willy Tarreau) 
- tcp: increase source port perturb table to 2^16 (Willy Tarreau) 
- tcp: dynamically allocate the perturb table used by source ports (Willy Tarreau) 
- tcp: add small random increments to the source port (Willy Tarreau) 
- tcp: resalt the secret every 10 seconds (Eric Dumazet) 
- tcp: use different parts of the port_offset for index and offset (Willy Tarreau) 
- secure_seq: use the 64 bits of the siphash for port offset calculation (Willy Tarreau) 
- net: sfp: Add tx-fault workaround for Huawei MA5671A SFP ONT (Matthew Hagan) 
- net: emaclite: Don't advertise 1000BASE-T and do auto negotiation (Shravya Kumbham) 
- ASoC: SOF: Fix NULL pointer exception in sof_pci_probe callback (Ajit Kumar Pandey) 
- s390: disable -Warray-bounds (Sven Schnelle) 
- ASoC: ops: Validate input values in snd_soc_put_volsw_range() (Mark Brown) 
- ASoC: max98090: Generate notifications on changes for custom control (Mark Brown) 
- ASoC: max98090: Reject invalid values in custom control put() (Mark Brown) 
- iommu: arm-smmu: disable large page mappings for Nvidia arm-smmu (Ashish Mhetre) 
- RDMA/irdma: Fix deadlock in irdma_cleanup_cm_core() (Duoming Zhou) 
- hwmon: (f71882fg) Fix negative temperature (Ji-Ze Hong (Peter Hong)) 
- gfs2: Fix filesystem block deallocation for short writes (Andreas Gruenbacher) 
- drm/vmwgfx: Fix fencing on SVGAv3 (Zack Rusin) 
- tls: Fix context leak on tls_device_down (Maxim Mikityanskiy) 
- net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() (Taehee Yoo) 
- net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending (Guangguan Wang) 
- net: dsa: bcm_sf2: Fix Wake-on-LAN with mac_link_down() (Florian Fainelli) 
- drm/vc4: hdmi: Fix build error for implicit function declaration (Hui Tang) 
- net: bcmgenet: Check for Wake-on-LAN interrupt probe deferral (Florian Fainelli) 
- net: ethernet: mediatek: ppe: fix wrong size passed to memset() (Yang Yingliang) 
- net/sched: act_pedit: really ensure the skb is writable (Paolo Abeni) 
- s390/lcs: fix variable dereferenced before check (Alexandra Winter) 
- s390/ctcm: fix potential memory leak (Alexandra Winter) 
- s390/ctcm: fix variable dereferenced before check (Alexandra Winter) 
- virtio: fix virtio transitional ids (Shunsuke Mie) 
- arm64: vdso: fix makefile dependency on vdso.so (Joey Gouly) 
- selftests: vm: Makefile: rename TARGETS to VMTARGETS (Joel Savitz) 
- procfs: prevent unprivileged processes accessing fdinfo dir (Kalesh Singh) 
- hwmon: (ltq-cputemp) restrict it to SOC_XWAY (Randy Dunlap) 
- dim: initialize all struct fields (Jesse Brandeburg) 
- ionic: fix missing pci_release_regions() on error in ionic_probe() (Yang Yingliang) 
- nfs: fix broken handling of the softreval mount option (Dan Aloni) 
- mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection (Johannes Berg) 
- net: sfc: fix memory leak due to ptp channel (Taehee Yoo) 
- sfc: Use swap() instead of open coding it (Jiapeng Chong) 
- fbdev: efifb: Fix a use-after-free due early fb_info cleanup (Javier Martinez Canillas) 
- net: chelsio: cxgb4: Avoid potential negative array offset (Kees Cook) 
- netlink: do not reset transport header in netlink_recvmsg() (Eric Dumazet) 
- drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name() (Christophe JAILLET) 
- ipv4: drop dst in multicast routing path (Lokesh Dhoundiyal) 
- ice: fix PTP stale Tx timestamps cleanup (Michal Michalik) 
- ice: Fix race during aux device (un)plugging (Ivan Vecera) 
- platform/surface: aggregator: Fix initialization order when compiling as builtin module (Maximilian Luz) 
- fbdev: vesafb: Cleanup fb_info in .fb_destroy rather than .remove (Javier Martinez Canillas) 
- fbdev: efifb: Cleanup fb_info in .fb_destroy rather than .remove (Javier Martinez Canillas) 
- fbdev: simplefb: Cleanup fb_info in .fb_destroy rather than .remove (Javier Martinez Canillas) 
- net: mscc: ocelot: avoid corrupting hardware counters when moving VCAP filters (Vladimir Oltean) 
- net: mscc: ocelot: restrict tc-trap actions to VCAP IS2 lookup 0 (Vladimir Oltean) 
- net: mscc: ocelot: fix VCAP IS2 filters matching on both lookups (Vladimir Oltean) 
- net: mscc: ocelot: fix last VCAP IS1/IS2 filter persisting in hardware when deleted (Vladimir Oltean) 
- net: Fix features skip in for_each_netdev_feature() (Tariq Toukan) 
- mac80211: Reset MBSSID parameters upon connection (Manikanta Pubbisetty) 
- hwmon: (tmp401) Add OF device ID table (Camel Guo) 
- iwlwifi: iwl-dbg: Use del_timer_sync() before freeing (Guenter Roeck) 
- batman-adv: Don't skb_split skbuffs with frag_list (Sven Eckelmann) 
- LTS version: v5.15.40 (Jack Vogel) 
- mm: fix invalid page pointer returned with FOLL_PIN gups (Peter Xu) 
- mm/mlock: fix potential imbalanced rlimit ucounts adjustment (Miaohe Lin) 
- mm/hwpoison: fix error page recovered but reported "not recovered" (Naoya Horiguchi) 
- mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic() (Muchun Song) 
- mm: shmem: fix missing cache flush in shmem_mfill_atomic_pte() (Muchun Song) 
- mm: hugetlb: fix missing cache flush in copy_huge_page_from_user() (Muchun Song) 
- mm: fix missing cache flush for all tail pages of compound page (Muchun Song) 
- udf: Avoid using stale lengthOfImpUse (Jan Kara) 
- rfkill: uapi: fix RFKILL_IOCTL_MAX_SIZE ioctl request definition (Gleb Fotengauer-Malinovskiy) 
- Bluetooth: Fix the creation of hdev->name (Itay Iellin) 
- tools arch: Update arch/x86/lib/mem{cpy,set}_64.S copies used in 'perf bench mem memcpy' (Arnaldo Carvalho de Melo) 
- kbuild: move objtool_args back to scripts/Makefile.build (Masahiro Yamada) 
- LTS version: v5.15.39 (Jack Vogel) 
- PCI: aardvark: Update comment about link going down after link-up (Marek Behún) 
- PCI: aardvark: Drop __maybe_unused from advk_pcie_disable_phy() (Marek Behún) 
- PCI: aardvark: Don't mask irq when mapping (Pali Rohár) 
- PCI: aardvark: Remove irq_mask_ack() callback for INTx interrupts (Pali Rohár) 
- PCI: aardvark: Use separate INTA interrupt for emulated root bridge (Pali Rohár) 
- PCI: aardvark: Fix support for PME requester on emulated bridge (Pali Rohár) 
- PCI: aardvark: Add support for PME interrupts (Pali Rohár) 
- PCI: aardvark: Optimize writing PCI_EXP_RTCTL_PMEIE and PCI_EXP_RTSTA_PME on emulated bridge (Pali Rohár) 
- PCI: aardvark: Add support for ERR interrupt on emulated bridge (Pali Rohár) 
- PCI: aardvark: Enable MSI-X support (Pali Rohár) 
- PCI: aardvark: Fix setting MSI address (Pali Rohár) 
- PCI: aardvark: Add support for masking MSI interrupts (Pali Rohár) 
- PCI: aardvark: Refactor unmasking summary MSI interrupt (Pali Rohár) 
- PCI: aardvark: Use dev_fwnode() instead of of_node_to_fwnode(dev->of_node) (Marek Behún) 
- PCI: aardvark: Make msi_domain_info structure a static driver structure (Marek Behún) 
- PCI: aardvark: Make MSI irq_chip structures static driver structures (Marek Behún) 
- PCI: aardvark: Check return value of generic_handle_domain_irq() when processing INTx IRQ (Pali Rohár) 
- PCI: aardvark: Rewrite IRQ code to chained IRQ handler (Pali Rohár) 
- PCI: aardvark: Replace custom PCIE_CORE_INT_* macros with PCI_INTERRUPT_* (Pali Rohár) 
- PCI: aardvark: Disable common PHY when unbinding driver (Pali Rohár) 
- PCI: aardvark: Disable link training when unbinding driver (Pali Rohár) 
- PCI: aardvark: Assert PERST# when unbinding driver (Pali Rohár) 
- PCI: aardvark: Fix memory leak in driver unbind (Pali Rohár) 
- PCI: aardvark: Mask all interrupts when unbinding driver (Pali Rohár) 
- PCI: aardvark: Disable bus mastering when unbinding driver (Pali Rohár) 
- PCI: aardvark: Comment actions in driver remove method (Pali Rohár) 
- PCI: aardvark: Clear all MSIs at setup (Pali Rohár) 
- PCI: aardvark: Add support for DEVCAP2, DEVCTL2, LNKCAP2 and LNKCTL2 registers on emulated bridge (Pali Rohár) 
- PCI: pci-bridge-emul: Add definitions for missing capabilities registers (Pali Rohár) 
- PCI: pci-bridge-emul: Add description for class_revision field (Pali Rohár) 
- rcu: Apply callbacks processing time limit only on softirq (Frederic Weisbecker) 
- rcu: Fix callbacks processing time limit retaining cond_resched() (Frederic Weisbecker) 
- Revert "parisc: Mark sched_clock unstable only if clocks are not syncronized" (Helge Deller) 
- mmc: rtsx: add 74 Clocks in power on flow (Ricky WU) 
- selftest/vm: verify remap destination address in mremap_test (Sidhartha Kumar) 
- selftest/vm: verify mmap addr in mremap_test (Sidhartha Kumar) 
- KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised (Wanpeng Li) 
- KVM: x86/mmu: avoid NULL-pointer dereference on page freeing bugs (Paolo Bonzini) 
- KVM: x86: Do not change ICR on write to APIC_SELF_IPI (Paolo Bonzini) 
- x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume (Wanpeng Li) 
- KVM: selftests: Silence compiler warning in the kvm_page_table_test (Thomas Huth) 
- kvm: selftests: do not use bitfields larger than 32-bits for PTEs (Paolo Bonzini) 
- iommu/dart: Add missing module owner to ops structure (Hector Martin) 
- net/mlx5e: Lag, Don't skip fib events on current dst (Vlad Buslov) 
- net/mlx5e: Lag, Fix fib_info pointer assignment (Vlad Buslov) 
- net/mlx5e: Lag, Fix use-after-free in fib event handler (Vlad Buslov) 
- net/mlx5: Fix slab-out-of-bounds while reading resource dump menu (Aya Levin) 
- fbdev: Make fb_release() return -ENODEV if fbdev was unregistered (Javier Martinez Canillas) 
- kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU (Sandipan Das) 
- gpio: mvebu: drop pwm base assignment (Baruch Siach) 
- drm/amdgpu: Ensure HDA function is suspended before ASIC reset (Kai-Heng Feng) 
- drm/amdgpu: don't set s3 and s0ix at the same time (Mario Limonciello) 
- drm/amdgpu: explicitly check for s0ix when evicting resources (Mario Limonciello) 
- drm/amdgpu: unify BO evicting method in amdgpu_ttm (Nirmoy Das) 
- btrfs: always log symlinks in full mode (Filipe Manana) 
- btrfs: force v2 space cache usage for subpage mount (Qu Wenruo) 
- smsc911x: allow using IRQ0 (Sergey Shtylyov) 
- selftests: ocelot: tc_flower_chains: specify conform-exceed action for policer (Vladimir Oltean) 
- bnxt_en: Fix unnecessary dropping of RX packets (Michael Chan) 
- bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag (Somnath Kotur) 
- selftests: mirror_gre_bridge_1q: Avoid changing PVID while interface is operational (Ido Schimmel) 
- rxrpc: Enable IPv6 checksums on transport socket (David Howells) 
- mld: respect RCU rules in ip6_mc_source() and ip6_mc_msfilter() (Eric Dumazet) 
- hinic: fix bug of wq out of bound access (Qiao Ma) 
- btrfs: do not BUG_ON() on failure to update inode when setting xattr (Filipe Manana) 
- drm/msm/dp: remove fail safe mode related code (Kuogee Hsieh) 
- selftests/net: so_txtime: usage(): fix documentation of default clock (Marc Kleine-Budde) 
- selftests/net: so_txtime: fix parsing of start time stamp on 32 bit systems (Marc Kleine-Budde) 
- net: emaclite: Add error handling for of_address_to_resource() (Shravya Kumbham) 
- net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter() (Eric Dumazet) 
- net: cpsw: add missing of_node_put() in cpsw_probe_dt() (Yang Yingliang) 
- net: mdio: Fix ENOMEM return value in BCM6368 mux bus controller (Niels Dossche) 
- net: stmmac: dwmac-sun8i: add missing of_node_put() in sun8i_dwmac_register_mdio_mux() (Yang Yingliang) 
- net: dsa: mt7530: add missing of_node_put() in mt7530_setup() (Yang Yingliang) 
- net: ethernet: mediatek: add missing of_node_put() in mtk_sgmii_init() (Yang Yingliang) 
- NFSv4: Don't invalidate inode attributes on delegation return (Trond Myklebust) 
- RDMA/irdma: Fix possible crash due to NULL netdev in notifier (Mustafa Ismail) 
- RDMA/irdma: Reduce iWARP QP destroy time (Shiraz Saleem) 
- RDMA/irdma: Flush iWARP QP if modified to ERR from RTR state (Tatyana Nikolova) 
- RDMA/siw: Fix a condition race issue in MPA request processing (Cheng Xu) 
- SUNRPC release the transport of a relocated task with an assigned transport (Olga Kornievskaia) 
- selftests/seccomp: Don't call read() on TTY from background pgrp (Jann Horn) 
- net/mlx5: Fix deadlock in sync reset flow (Moshe Shemesh) 
- net/mlx5: Avoid double clear or set of sync reset requested (Moshe Shemesh) 
- net/mlx5e: Fix the calling of update_buffer_lossy() API (Mark Zhang) 
- net/mlx5e: CT: Fix queued up restore put() executing after relevant ft release (Paul Blakey) 
- net/mlx5e: Don't match double-vlan packets if cvlan is not set (Vlad Buslov) 
- net/mlx5e: Fix trust state reset in reload (Moshe Tal) 
- iommu/dart: check return value after calling platform_get_resource() (Yang Yingliang) 
- iommu/vt-d: Drop stop marker messages (Lu Baolu) 
- ASoC: soc-ops: fix error handling (Pierre-Louis Bossart) 
- ASoC: dmaengine: Restore NULL prepare_slave_config() callback (Codrin Ciubotariu) 
- hwmon: (pmbus) disable PEC if not enabled (Adam Wujek) 
- hwmon: (adt7470) Fix warning on module removal (Armin Wolf) 
- gpio: pca953x: fix irq_stat not updated when irq is disabled (irq_mask not set) (Puyou Lu) 
- gpio: visconti: Fix fwnode of GPIO IRQ (Nobuhiro Iwamatsu) 
- NFC: netlink: fix sleep in atomic bug when firmware download timeout (Duoming Zhou) 
- nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs (Duoming Zhou) 
- nfc: replace improper check device_is_registered() in netlink related functions (Duoming Zhou) 
- can: grcan: only use the NAPI poll budget for RX (Andreas Larsson) 
- can: grcan: grcan_probe(): fix broken system id check for errata workaround needs (Andreas Larsson) 
- can: grcan: use ofdev->dev when allocating DMA memory (Daniel Hellstrom) 
- can: isotp: remove re-binding of bound socket (Oliver Hartkopp) 
- can: grcan: grcan_close(): fix deadlock (Duoming Zhou) 
- s390/dasd: Fix read inconsistency for ESE DASD devices (Jan Höppner) 
- s390/dasd: Fix read for ESE with blksize < 4k (Jan Höppner) 
- s390/dasd: prevent double format of tracks for ESE devices (Stefan Haberland) 
- s390/dasd: fix data corruption for ESE devices (Stefan Haberland) 
- ASoC: meson: Fix event generation for AUI CODEC mux (Mark Brown) 
- ASoC: meson: Fix event generation for G12A tohdmi mux (Mark Brown) 
- ASoC: meson: Fix event generation for AUI ACODEC mux (Mark Brown) 
- ASoC: wm8958: Fix change notifications for DSP controls (Mark Brown) 
- ASoC: da7219: Fix change notifications for tone generator frequency (Mark Brown) 
- genirq: Synchronize interrupt thread startup (Thomas Pfaff) 
- net: stmmac: disable Split Header (SPH) for Intel platforms (Tan Tee Min) 
- firewire: core: extend card->lock in fw_core_handle_bus_reset (Niels Dossche) 
- firewire: remove check of list iterator against head past the loop body (Jakob Koschel) 
- firewire: fix potential uaf in outbound_phy_packet_callback() (Chengfeng Ye) 
- timekeeping: Mark NMI safe time accessors as notrace (Kurt Kanzenbach) 
- Revert "SUNRPC: attempt AF_LOCAL connect on setup" (Trond Myklebust) 
- RISC-V: relocate DTB if it's outside memory region (Nick Kossifidis) 
- drm/amdgpu: do not use passthrough mode in Xen dom0 (Marek Marczykowski-Górecki) 
- drm/amd/display: Avoid reading audio pattern past AUDIO_CHANNELS_COUNT (Harry Wentland) 
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range() (Nicolin Chen) 
- iommu/vt-d: Calculate mask for non-aligned flushes (David Stevens) 
- KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id (Kyle Huey) 
- x86/fpu: Prevent FPU state corruption (Thomas Gleixner) 
- gpiolib: of: fix bounds check for 'gpio-reserved-ranges' (Andrei Lalaev) 
- mmc: core: Set HS clock speed before sending HS CMD13 (Brian Norris) 
- mmc: sunxi-mmc: Fix DMA descriptors allocated above 32 bits (Samuel Holland) 
- mmc: sdhci-msm: Reset GCC_SDCC_BCR register for SDHC (Shaik Sajida Bhanu) 
- ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes (Takashi Sakamoto) 
- ALSA: hda/realtek: Add quirk for Yoga Duet 7 13ITL6 speakers (Zihao Wang) 
- parisc: Merge model and model name into one line in /proc/cpuinfo (Helge Deller) 
- MIPS: Fix CP0 counter erratum detection for R4k CPUs (Maciej W. Rozycki) 
- LTS version: v5.15.38 (Jack Vogel) 
- powerpc/64: Add UADDR64 relocation support (Alexey Kardashevskiy) 
- objtool: Fix type of reloc::addend (Peter Zijlstra) 
- objtool: Fix code relocs vs weak symbols (Peter Zijlstra) 
- eeprom: at25: Use DMA safe buffers (Christophe Leroy) 
- perf symbol: Remove arch__symbols__fixup_end() (Namhyung Kim) 
- tty: n_gsm: fix software flow control handling (Daniel Starke) 
- tty: n_gsm: fix incorrect UA handling (Daniel Starke) 
- tty: n_gsm: fix reset fifo race condition (Daniel Starke) 
- tty: n_gsm: fix missing tty wakeup in convergence layer type 2 (Daniel Starke) 
- tty: n_gsm: fix wrong signal octets encoding in MSC (Daniel Starke) 
- tty: n_gsm: fix wrong command frame length field encoding (Daniel Starke) 
- tty: n_gsm: fix wrong command retry handling (Daniel Starke) 
- tty: n_gsm: fix missing explicit ldisc flush (Daniel Starke) 
- tty: n_gsm: fix wrong DLCI release order (Daniel Starke) 
- tty: n_gsm: fix insufficient txframe size (Daniel Starke) 
- netfilter: nft_socket: only do sk lookups when indev is available (Florian Westphal) 
- tty: n_gsm: fix malformed counter for out of frame data (Daniel Starke) 
- tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2 (Daniel Starke) 
- tty: n_gsm: fix mux cleanup after unregister tty device (Daniel Starke) 
- tty: n_gsm: fix decoupled mux resource (Daniel Starke) 
- tty: n_gsm: fix restart handling via CLD command (Daniel Starke) 
- perf symbol: Update symbols__fixup_end() (Namhyung Kim) 
- perf symbol: Pass is_kallsyms to symbols__fixup_end() (Namhyung Kim) 
- x86/cpu: Load microcode during restore_processor_state() (Borislav Petkov) 
- ARM: dts: imx8mm-venice-gw{71xx,72xx,73xx}: fix OTG controller OC mode (Tim Harvey) 
- ARM: dts: at91: sama7g5ek: enable pull-up on flexcom3 console lines (Eugen Hristev) 
- btrfs: fix leaked plug after failure syncing log on zoned filesystems (Filipe Manana) 
- thermal: int340x: Fix attr.show callback prototype (Kees Cook) 
- ACPI: processor: idle: Avoid falling back to C3 type C-states (Ville Syrjälä) 
- net: ethernet: stmmac: fix write to sgmii_adapter_base (Dinh Nguyen) 
- drm/i915: Fix SEL_FETCH_PLANE_*(PIPE_B+) register addresses (Imre Deak) 
- drm/i915: Check EDID for HDR static metadata when choosing blc (Jouni Högander) 
- netfilter: Update ip6_route_me_harder to consider L3 domain (Martin Willi) 
- mtd: rawnand: qcom: fix memory corruption that causes panic (Md Sadre Alam) 
- kasan: prevent cpu_quarantine corruption when CPU offline and cache shrink occur at same time (Zqiang) 
- zonefs: Clear inode information flags on inode creation (Damien Le Moal) 
- zonefs: Fix management of open zones (Damien Le Moal) 
- Revert "ACPI: processor: idle: fix lockup regression on 32-bit ThinkPad T40" (Ville Syrjälä) 
- selftest/vm: verify remap destination address in mremap_test (Sidhartha Kumar) 
- selftest/vm: verify mmap addr in mremap_test (Sidhartha Kumar) 
- powerpc/perf: Fix 32bit compile (Alexey Kardashevskiy) 
- drivers: net: hippi: Fix deadlock in rr_close() (Duoming Zhou) 
- cifs: destage any unwritten data to the server before calling copychunk_write (Ronnie Sahlberg) 
- x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 (Mikulas Patocka) 
- bonding: do not discard lowest hash bit for non layer3+4 hashing (suresh kumar) 
- ksmbd: set fixed sector size to FS_SECTOR_SIZE_INFORMATION (Namjae Jeon) 
- ksmbd: increment reference count of parent fp (Namjae Jeon) 
- arch: xtensa: platforms: Fix deadlock in rs_close() (Duoming Zhou) 
- ext4: fix bug_on in start_this_handle during umount filesystem (Ye Bin) 
- ASoC: wm8731: Disable the regulator when probing fails (Zheyu Ma) 
- ASoC: Intel: soc-acpi: correct device endpoints for max98373 (Chao Song) 
- tcp: fix F-RTO may not work correctly when receiving DSACK (Pengcheng Yang) 
- Revert "ibmvnic: Add ethtool private flag for driver-defined queue limits" (Dany Madden) 
- ixgbe: ensure IPsec VF<->PF compatibility (Leon Romanovsky) 
- perf arm-spe: Fix addresses of synthesized SPE events (Timothy Hayes) 
- gfs2: No short reads or writes upon glock contention (Andreas Gruenbacher) 
- gfs2: Make sure not to return short direct writes (Andreas Gruenbacher) 
- gfs2: Minor retry logic cleanup (Andreas Gruenbacher) 
- gfs2: Prevent endless loops in gfs2_file_buffered_write (Andreas Gruenbacher) 
- net: fec: add missing of_node_put() in fec_enet_init_stop_mode() (Yang Yingliang) 
- bnx2x: fix napi API usage sequence (Manish Chopra) 
- tls: Skip tls_append_frag on zero copy size (Maxim Mikityanskiy) 
- drm/amd/display: Fix memory leak in dcn21_clock_source_create (Miaoqian Lin) 
- drm/amdkfd: Fix GWS queue count (David Yat Sin) 
- netfilter: conntrack: fix udp offload timeout sysctl (Volodymyr Mytnyk) 
- io_uring: check reserved fields for recv/recvmsg (Jens Axboe) 
- io_uring: check reserved fields for send/sendmsg (Jens Axboe) 
- net: dsa: lantiq_gswip: Don't set GSWIP_MII_CFG_RMII_CLK (Martin Blumenstingl) 
- drm/sun4i: Remove obsolete references to PHYS_OFFSET (Samuel Holland) 
- net: dsa: mv88e6xxx: Fix port_hidden_wait to account for port_base_addr (Nathan Rossi) 
- net: phy: marvell10g: fix return value on error (Baruch Siach) 
- net: bcmgenet: hide status block before TX timestamping (Jonathan Lemon) 
- cpufreq: qcom-cpufreq-hw: Clear dcvs interrupts (Vladimir Zapolskiy) 
- clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource() (Yang Yingliang) 
- bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create() (Christophe JAILLET) 
- tcp: make sure treq->af_specific is initialized (Eric Dumazet) 
- tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT (Eric Dumazet) 
- ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode (Peilin Ye) 
- ip6_gre: Make o_seqno start from 0 in native mode (Peilin Ye) 
- ip_gre: Make o_seqno start from 0 in native mode (Peilin Ye) 
- net/smc: sync err code when tcp connection was refused (liuyacan) 
- net: hns3: add return value for mailbox handling in PF (Jian Shen) 
- net: hns3: add validity check for message data length (Jian Shen) 
- net: hns3: modify the return code of hclge_get_ring_chain_from_mbx (Jie Wang) 
- net: hns3: clear inited state and stop client after failed to register netdev (Jian Shen) 
- cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe (Xiaobing Luo) 
- pinctrl: pistachio: fix use of irq_of_parse_and_map() (Lv Ruyi) 
- arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock (Fabio Estevam) 
- ARM: dts: imx6ull-colibri: fix vqmmc regulator (Max Krummenacher) 
- sctp: check asoc strreset_chunk in sctp_generate_reconf_event (Xin Long) 
- wireguard: device: check for metadata_dst with skb_valid_dst() (Nikolay Aleksandrov) 
- tcp: ensure to use the most recently sent skb when filling the rate sample (Pengcheng Yang) 
- pinctrl: stm32: Keep pinctrl block clock enabled when LEVEL IRQ requested (Marek Vasut) 
- tcp: md5: incorrect tcp_header_len for incoming connections (Francesco Ruggeri) 
- pinctrl: rockchip: fix RK3308 pinmux bits (Luca Ceresoli) 
- bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt hook (Eyal Birger) 
- netfilter: nft_set_rbtree: overlap detection with element re-addition after deletion (Pablo Neira Ayuso) 
- net: dsa: Add missing of_node_put() in dsa_port_link_register_of (Miaoqian Lin) 
- memory: renesas-rpc-if: Fix HF/OSPI data transfer in Manual Mode (Geert Uytterhoeven) 
- pinctrl: stm32: Do not call stm32_gpio_get() for edge triggered IRQs in EOI (Marek Vasut) 
- mtd: fix 'part' field data corruption in mtd_info (Oleksandr Ocheretnyi) 
- mtd: rawnand: Fix return value check of wait_for_completion_timeout (Miaoqian Lin) 
- pinctrl: mediatek: moore: Fix build error (YueHaibing) 
- phy: amlogic: fix error path in phy_g12a_usb3_pcie_probe() (Heiner Kallweit) 
- ipvs: correctly print the memory size of ip_vs_conn_tab (Pengcheng Yang) 
- ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35 (Adam Ford) 
- ARM: dts: am3517-evm: Fix misc pinmuxing (Adam Ford) 
- ARM: dts: Fix mmc order for omap3-gta04 (H. Nikolaus Schaller) 
- interconnect: qcom: sdx55: Drop IP0 interconnects (Stephen Boyd) 
- phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe (Miaoqian Lin) 
- phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe (Miaoqian Lin) 
- ARM: dts: at91: fix pinctrl phandles (Claudiu Beznea) 
- ARM: dts: at91: sama5d4_xplained: fix pinctrl phandle name (Claudiu Beznea) 
- ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek (Mark Brown) 
- phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks (Miaoqian Lin) 
- ARM: dts: dra7: Fix suspend warning for vpe powerdomain (Tony Lindgren) 
- bus: ti-sysc: Make omap3 gpt12 quirk handling SoC specific (Tony Lindgren) 
- ARM: OMAP2+: Fix refcount leak in omap_gic_of_init (Miaoqian Lin) 
- phy: samsung: exynos5250-sata: fix missing device put in probe error paths (Krzysztof Kozlowski) 
- phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe (Miaoqian Lin) 
- arm64: dts: meson-sm1-bananapi-m5: fix wrong GPIO pin labeling for CON1 (Guillaume Giraudon) 
- arm64: dts: imx8mn: Fix SAI nodes (Marek Vasut) 
- ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue (Fabio Estevam) 
- USB: Fix xhci event ring dequeue pointer ERDP update issue (Weitao Wang) 
- arm64: dts: imx8qm: Correct SCU clock controller's compatible property (Liu Ying) 
- xsk: Fix l2fwd for copy mode + busy poll combo (Maciej Fijalkowski) 
- mtd: rawnand: fix ecc parameters for mt7622 (Chuanhong Guo) 
- iio:imu:bmi160: disable regulator in error path (Tong Zhang) 
- arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards (Christian Hewitt) 
- arm64: dts: meson: remove CPU opps below 1GHz for G12B boards (Christian Hewitt) 
- video: fbdev: udlfb: properly check endpoint type (Pavel Skripkin) 
- cpufreq: qcom-cpufreq-hw: Fix throttle frequency value on EPSS platforms (Vladimir Zapolskiy) 
- cpufreq: qcom-hw: fix the race between LMH worker and cpuhp (Dmitry Baryshkov) 
- virtio_net: fix wrong buf address calculation when using xdp (Nikolay Aleksandrov) 
- iocost: don't reset the inuse weight of under-weighted debtors (Tejun Heo) 
- x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests (Thomas Gleixner) 
- riscv: patch_text: Fixup last cpu should be master (Guo Ren) 
- hex2bin: fix access beyond string end (Mikulas Patocka) 
- hex2bin: make the function hex_to_bin constant-time (Mikulas Patocka) 
- pinctrl: samsung: fix missing GPIOLIB on ARM64 Exynos config (Krzysztof Kozlowski) 
- arm64: dts: imx8mm-venice: fix spi2 pin configuration (Johan Hovold) 
- bus: mhi: host: pci_generic: Flush recovery worker during freeze (Manivannan Sadhasivam) 
- bus: mhi: host: pci_generic: Add missing poweroff() PM callback (Manivannan Sadhasivam) 
- ceph: fix possible NULL pointer dereference for req->r_session (Xiubo Li) 
- arch_topology: Do not set llc_sibling if llc_id is invalid (Wang Qing) 
- serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device (Maciej W. Rozycki) 
- serial: 8250: Also set sticky MCR bits in console restoration (Maciej W. Rozycki) 
- serial: amba-pl011: do not time out prematurely when draining tx fifo (Lino Sanfilippo) 
- serial: imx: fix overrun interrupts in DMA mode (Johan Hovold) 
- usb: phy: generic: Get the vbus supply (Sean Anderson) 
- usb: cdns3: Fix issue for clear halt endpoint (Pawel Laszczak) 
- usb: dwc3: pci: add support for the Intel Meteor Lake-P (Heikki Krogerus) 
- usb: dwc3: gadget: Return proper request status (Thinh Nguyen) 
- usb: dwc3: core: Only handle soft-reset in DCTL (Thinh Nguyen) 
- usb: dwc3: core: Fix tx/rx threshold settings (Thinh Nguyen) 
- usb: dwc3: Try usb-role-switch first in dwc3_drd_init (Sven Peter) 
- usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind() (Vijayavardhan Vennapusa) 
- usb: gadget: uvc: Fix crash when encoding data for usb request (Dan Vacura) 
- usb: typec: ucsi: Fix role swapping (Heikki Krogerus) 
- usb: typec: ucsi: Fix reuse of completion structure (Heikki Krogerus) 
- usb: core: Don't hold the device lock while sleeping in do_proc_control() (Tasos Sahanidis) 
- usb: misc: fix improper handling of refcount in uss720_probe() (Hangyu Hua) 
- iio: imu: inv_icm42600: Fix I2C init possible nack (Fawzi Khaber) 
- iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on() (Zheyu Ma) 
- iio: dac: ad5446: Fix read_raw not returning set value (Michael Hennerich) 
- iio: dac: ad5592r: Fix the missing return value. (Zizhuang Deng) 
- xhci: increase usb U3 -> U0 link resume timeout from 100ms to 500ms (Mathias Nyman) 
- xhci: stop polling roothubs after shutdown (Henry Lin) 
- xhci: Enable runtime PM on second Alderlake controller (Evan Green) 
- usb: xhci: tegra:Fix PM usage reference leak of tegra_xusb_unpowergate_partitions (zhangqilong) 
- USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions (Daniele Palmas) 
- USB: serial: option: add support for Cinterion MV32-WA/MV32-WB (Slark Xiao) 
- USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader (Bruno Thomsen) 
- USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS (Kees Cook) 
- USB: quirks: add STRING quirk for VCOM device (Oliver Neukum) 
- USB: quirks: add a Realtek card reader (Oliver Neukum) 
- usb: mtu3: fix USB 3.0 dual-role-switch from device to host (Macpaul Lin) 
- LTS version: v4.15.37 (Jack Vogel) 
- selftests/bpf: Add test for reg2btf_ids out of bounds access (Kumar Kartikeya Dwivedi) 
- mm: gup: make fault_in_safe_writeable() use fixup_user_fault() (Linus Torvalds) 
- btrfs: fallback to blocking mode when doing async dio over multiple extents (Filipe Manana) 
- btrfs: fix deadlock due to page faults during direct IO reads and writes (Filipe Manana) 
- gfs2: Fix mmap + page fault deadlocks for direct I/O (Andreas Gruenbacher) 
- iomap: Add done_before argument to iomap_dio_rw (Andreas Gruenbacher) 
- iomap: Support partial direct I/O on user copy failures (Andreas Gruenbacher) 
- iomap: Fix iomap_dio_rw return value for user copies (Andreas Gruenbacher) 
- gfs2: Fix mmap + page fault deadlocks for buffered I/O (Andreas Gruenbacher) 
- gfs2: Eliminate ip->i_gh (Andreas Gruenbacher) 
- gfs2: Move the inode glock locking to gfs2_file_buffered_write (Andreas Gruenbacher) 
- gfs2: Introduce flag for glock holder auto-demotion (Bob Peterson) 
- gfs2: Clean up function may_grant (Andreas Gruenbacher) 
- gfs2: Add wrapper for iomap_file_buffered_write (Andreas Gruenbacher) 
- iov_iter: Introduce fault_in_iov_iter_writeable (Andreas Gruenbacher) 
- iov_iter: Turn iov_iter_fault_in_readable into fault_in_iov_iter_readable (Andreas Gruenbacher) 
- gup: Turn fault_in_pages_{readable,writeable} into fault_in_{readable,writeable} (Andreas Gruenbacher) 
- mm: kfence: fix objcgs vector allocation (Muchun Song) 
- ARM: dts: socfpga: change qspi to "intel,socfpga-qspi" (Dinh Nguyen) 
- spi: cadence-quadspi: fix write completion support (Dinh Nguyen) 
- floppy: disable FDRAWCMD by default (Willy Tarreau) 
- LTS version: v5.15.36 (Jack Vogel) 
- arm64: dts: qcom: add IPA qcom,qmp property (Alex Elder) 
- block/compat_ioctl: fix range check in BLKGETSIZE (Khazhismel Kumykov) 
- spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller (Tudor Ambarus) 
- jbd2: fix a potential race while discarding reserved buffers after an abort (Ye Bin) 
- netfilter: nft_ct: fix use after free when attaching zone template (Florian Westphal) 
- ext4: force overhead calculation if the s_overhead_cluster makes no sense (Theodore Ts'o) 
- ext4: fix overhead calculation to account for the reserved gdt blocks (Theodore Ts'o) 
- ext4, doc: fix incorrect h_reserved size (wangjianjian (C)) 
- ext4: limit length to bitmap_maxbytes - blocksize in punch_hole (Tadeusz Struk) 
- ext4: fix use-after-free in ext4_search_dir (Ye Bin) 
- ext4: fix symlink file size not match to file content (Ye Bin) 
- ext4: fix fallocate to use file_modified to update permissions consistently (Darrick J. Wong) 
- netfilter: conntrack: avoid useless indirection during conntrack destruction (Florian Westphal) 
- netfilter: conntrack: convert to refcount_t api (Florian Westphal) 
- KVM: SVM: Flush when freeing encrypted pages even on SME_COHERENT CPUs (Mingwei Zhang) 
- KVM: nVMX: Defer APICv updates while L2 is active until L1 is active (Sean Christopherson) 
- KVM: x86: Pend KVM_REQ_APICV_UPDATE during vCPU creation to fix a race (Sean Christopherson) 
- KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog (Like Xu) 
- arm_pmu: Validate single/group leader events (Rob Herring) 
- ARC: entry: fix syscall_trace_exit argument (Sergey Matyukevich) 
- e1000e: Fix possible overflow in LTR decoding (Sasha Neftin) 
- ASoC: soc-dapm: fix two incorrect uses of list iterator (Xiaomeng Tong) 
- gpio: Request interrupts after IRQ is initialized (Mario Limonciello) 
- openvswitch: fix OOB access in reserve_sfa_size() (Paolo Valerio) 
- xtensa: fix a7 clobbering in coprocessor context load/store (Max Filippov) 
- xtensa: patch_text: Fixup last cpu should be master (Guo Ren) 
- perf report: Set PERF_SAMPLE_DATA_SRC bit for Arm SPE event (Leo Yan) 
- perf script: Always allow field 'data_src' for auxtrace (Leo Yan) 
- powerpc/perf: Fix power10 event alternatives (Athira Rajeev) 
- powerpc/perf: Fix power9 event alternatives (Athira Rajeev) 
- drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage (Miaoqian Lin) 
- KVM: PPC: Fix TCE handling for VFIO (Alexey Kardashevskiy) 
- drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare (Dave Stevenson) 
- drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised (Dave Stevenson) 
- perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled (Zhipeng Xie) 
- sched/pelt: Fix attach_entity_load_avg() corner case (kuyo chang) 
- scsi: sr: Do not leak information in ioctl (Tom Rix) 
- Input: omap4-keypad - fix pm_runtime_get_sync() error checking (Miaoqian Lin) 
- net: atlantic: invert deep par in pm functions, preventing null derefs (Manuel Ullmann) 
- dmaengine: imx-sdma: fix init of uart scripts (Kevin Groeneveld) 
- dma: at_xdmac: fix a missing check on list iterator (Xiaomeng Tong) 
- ata: pata_marvell: Check the 'bmdma_addr' beforing reading (Zheyu Ma) 
- mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() (Alistair Popple) 
- oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup (Nico Pache) 
- mm, hugetlb: allow for "high" userspace addresses (Christophe Leroy) 
- memcg: sync flush only if periodic flush is delayed (Shakeel Butt) 
- mm/memory-failure.c: skip huge_zero_page in memory_failure() (Xu Yu) 
- EDAC/synopsys: Read the error count from the correct register (Shubhrajyoti Datta) 
- nvme-pci: disable namespace identifiers for Qemu controllers (Christoph Hellwig) 
- nvme-pci: disable namespace identifiers for the MAXIO MAP1002/1202 (Christoph Hellwig) 
- nvme: add a quirk to disable namespace identifiers (Christoph Hellwig) 
- VFS: filename_create(): fix incorrect intent. (NeilBrown) 
- stat: fix inconsistency between struct stat and struct compat_stat (Mikulas Patocka) 
- scsi: qedi: Fix failed disconnect handling (Mike Christie) 
- scsi: iscsi: Fix NOP handling during conn recovery (Mike Christie) 
- scsi: iscsi: Merge suspend fields (Mike Christie) 
- scsi: iscsi: Release endpoint ID when its freed (Mike Christie) 
- net: macb: Restart tx only if queue pointer is lagging (Tomas Melin) 
- drm/msm/mdp5: check the return of kzalloc() (Xiaoke Wang) 
- dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info() (Lv Ruyi) 
- brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov) 
- mt76: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov) 
- net: atlantic: Avoid out-of-bounds indexing (Kai-Heng Feng) 
- cifs: Check the IOCB_DIRECT flag, not O_DIRECT (David Howells) 
- vxlan: fix error return code in vxlan_fdb_append (Hongbin Wang) 
- arm64: dts: imx: Fix imx8*-var-som touchscreen property sizes (Rob Herring) 
- drm/msm/disp: check the return value of kzalloc() (Xiaoke Wang) 
- ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov) 
- platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative (Jiapeng Chong) 
- reset: tegra-bpmp: Restore Handle errors in BPMP response (Sameer Pujar) 
- reset: renesas: Check return value of reset_control_deassert() (Heiner Kallweit) 
- ARM: vexpress/spc: Avoid negative array index when !SMP (Kees Cook) 
- arm64: mm: fix p?d_leaf() (Muchun Song) 
- selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets (Ido Schimmel) 
- dmaengine: idxd: skip clearing device context when device is read-only (Dave Jiang) 
- dmaengine: idxd: add RO check for wq max_transfer_size write (Dave Jiang) 
- dmaengine: idxd: add RO check for wq max_batch_size write (Dave Jiang) 
- net: stmmac: Use readl_poll_timeout_atomic() in atomic state (Kevin Hao) 
- drm/i915/display/psr: Unset enable_psr2_sel_fetch if other checks in intel_psr2_config_valid() fails (José Roberto de Souza) 
- netlink: reset network and mac headers in netlink_dump() (Eric Dumazet) 
- net: mscc: ocelot: fix broken IP multicast flooding (Vladimir Oltean) 
- net: dsa: hellcreek: Calculate checksums in tagger (Kurt Kanzenbach) 
- can: isotp: stop timeout monitoring when no first frame was sent (Oliver Hartkopp) 
- ipv6: make ip6_rt_gc_expire an atomic_t (Eric Dumazet) 
- l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu (David Ahern) 
- net/sched: cls_u32: fix possible leak in u32_init_knode() (Eric Dumazet) 
- net: restore alpha order to Ethernet devices in config (Stephen Hemminger) 
- ip6_gre: Fix skb_under_panic in __gre6_xmit() (Peilin Ye) 
- ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit() (Peilin Ye) 
- net/packet: fix packet_sock xmit return value checking (Hangbin Liu) 
- net/smc: Fix sock leak when release after smc_shutdown() (Tony Lu) 
- rxrpc: Restore removed timer deletion (David Howells) 
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF (Kai Vehmanen) 
- igc: Fix suspending when PTM is active (Vinicius Costa Gomes) 
- igc: Fix BUG: scheduling while atomic (Sasha Neftin) 
- igc: Fix infinite loop in release_swfw_sync (Sasha Neftin) 
- spi: cadence-quadspi: fix incorrect supports_op() return value (Matthias Schiffer) 
- esp: limit skb_page_frag_refill use to a single page (Sabrina Dubroca) 
- spi: spi-mtk-nor: initialize spi controller after resume (Allen-KH Cheng) 
- dmaengine: dw-edma: Fix unaligned 64bit access (Herve Codina) 
- dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources (zhangqilong) 
- dmaengine: imx-sdma: Fix error checking in sdma_event_remap (Miaoqian Lin) 
- dmaengine: idxd: fix device cleanup on disable (Dave Jiang) 
- ASoC: codecs: wcd934x: do not switch off SIDO Buck when codec is in use (Srinivas Kandagatla) 
- ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component (Miaoqian Lin) 
- ASoC: rk817: Use devm_clk_get() in rk817_platform_probe (Miaoqian Lin) 
- ASoC: topology: Correct error handling in soc_tplg_dapm_widget_create() (Peter Ujfalusi) 
- ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek (Mark Brown) 
- ALSA: hda/realtek: Add quirk for Clevo NP70PNP (Tim Crawford) 
- ALSA: usb-audio: Clear MIDI port active flag after draining (Takashi Iwai) 
- net/sched: cls_u32: fix netns refcount changes in u32_change() (Eric Dumazet) 
- scsi: ufs: core: scsi_get_lba() error fix (Peter Wang) 
- gfs2: assign rgrp glock before compute_bitstructs (Bob Peterson) 
- mm, kfence: support kmem_dump_obj() for KFENCE objects (Marco Elver) 
- perf tools: Fix segfault accessing sample_id xyarray (Adrian Hunter) 
- mm: page_alloc: fix building error on -Werror=array-compare (Xiongwei Song) 
- etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead (Kees Cook) 
- arm64/mm: drop HAVE_ARCH_PFN_VALID (Anshuman Khandual) 
- dma-mapping: remove bogus test for pfn_valid from dma_map_resource (Mike Rapoport) 
- xfs: return errors in xfs_fs_sync_fs (Darrick J. Wong) 
- vfs: make sync_filesystem return errors from ->sync_fs (Darrick J. Wong) 
- block: simplify the block device syncing code (Christoph Hellwig) 
- block: remove __sync_blockdev (Christoph Hellwig) 
- fs: remove __sync_filesystem (Christoph Hellwig) 
- LTS version: v5.15.35 (Jack Vogel) 
- ax25: Fix UAF bugs in ax25 timers (Duoming Zhou) 
- ax25: Fix NULL pointer dereferences in ax25 timers (Duoming Zhou) 
- ax25: fix NPD bug in ax25_disconnect (Duoming Zhou) 
- ax25: fix UAF bug in ax25_send_control() (Duoming Zhou) 
- ax25: Fix refcount leaks caused by ax25_cb_del() (Duoming Zhou) 
- ax25: fix UAF bugs of net_device caused by rebinding operation (Duoming Zhou) 
- ax25: fix reference count leaks of ax25_dev (Duoming Zhou) 
- ax25: add refcount in ax25_dev to avoid UAF bugs (Duoming Zhou) 
- cpufreq: intel_pstate: ITMT support for overclocked system (Srinivas Pandruvada) 
- net: ipa: fix a build dependency (Alex Elder) 
- soc: qcom: aoss: Fix missing put_device call in qmp_get (Miaoqian Lin) 
- cpu/hotplug: Remove the 'cpu' member of cpuhp_cpu_state (Steven Price) 
- drm/i915: Sunset igpu legacy mmap support based on GRAPHICS_VER_FULL (Matt Roper) 
- dma-direct: avoid redundant memory sync for swiotlb (Chao Gao) 
- timers: Fix warning condition in __run_timers() (Anna-Maria Behnsen) 
- dt-bindings: net: snps: remove duplicate name (Dongjin Yang) 
- i2c: pasemi: Wait for write xfers to finish (Martin Povišer) 
- smp: Fix offline cpu check in flush_smp_call_function_queue() (Nadav Amit) 
- i2c: dev: check return value when calling dev_set_name() (Andy Shevchenko) 
- dm integrity: fix memory corruption when tag_size is less than digest size (Mikulas Patocka) 
- ARM: davinci: da850-evm: Avoid NULL pointer dereference (Nathan Chancellor) 
- tick/nohz: Use WARN_ON_ONCE() to prevent console saturation (Paul Gortmaker) 
- genirq/affinity: Consider that CPUs on nodes can be unbalanced (Rei Yamamoto) 
- x86/tsx: Disable TSX development mode at boot (Pawan Gupta) 
- x86/tsx: Use MSR_TSX_CTRL to clear CPUID bits (Pawan Gupta) 
- drm/amdgpu: Enable gfxoff quirk on MacBook Pro (Tomasz Moń) 
- drm/amd/display: don't ignore alpha property on pre-multiplied mode (Melissa Wen) 
- ipv6: fix panic when forwarding a pkt with no in6 dev (Nicolas Dichtel) 
- nl80211: correctly check NL80211_ATTR_REG_ALPHA2 size (Johannes Berg) 
- ALSA: pcm: Test for "silence" field in struct "pcm_format_data" (Fabio M. De Francesco) 
- ALSA: hda/realtek: add quirk for Lenovo Thinkpad X12 speakers (Tao Jin) 
- ALSA: hda/realtek: Add quirk for Clevo PD50PNT (Tim Crawford) 
- btrfs: mark resumed async balance as writing (Naohiro Aota) 
- btrfs: fix root ref counts in error handling in btrfs_get_root_ref (Jia-Ju Bai) 
- ath9k: Fix usage of driver-private space in tx_info (Toke Høiland-Jørgensen) 
- ath9k: Properly clear TX status area before reporting to mac80211 (Toke Høiland-Jørgensen) 
- cifs: verify that tcon is valid before dereference in cifs_kill_sb (Ronnie Sahlberg) 
- gcc-plugins: latent_entropy: use /dev/urandom (Jason A. Donenfeld) 
- memory: renesas-rpc-if: fix platform-device leak in error path (Johan Hovold) 
- SUNRPC: Fix NFSD's request deferral on RDMA transports (Chuck Lever) 
- KVM: x86/mmu: Resolve nx_huge_pages when kvm.ko is loaded (Sean Christopherson) 
- mm: kmemleak: take a full lowmem check in kmemleak_*_phys() (Patrick Wang) 
- mm: fix unexpected zeroed page mapping with zram swap (Minchan Kim) 
- mm, page_alloc: fix build_zonerefs_node() (Juergen Gross) 
- mm/secretmem: fix panic when growing a memfd_secret (Axel Rasmussen) 
- perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov) 
- io_uring: use nospec annotation for more indexes (Pavel Begunkov) 
- io_uring: zero tag on rsrc removal (Pavel Begunkov) 
- drivers: net: slip: fix NPD bug in sl_tx_timeout() (Duoming Zhou) 
- scsi: mvsas: Add PCI ID of RocketRaid 2640 (Alexey Galakhov) 
- scsi: mpt3sas: Fail reset operation if config request timed out (Sreekanth Reddy) 
- drbd: set QUEUE_FLAG_STABLE_WRITES (Christoph Böhmwalder) 
- drm/amd/display: Fix allocate_mst_payload assert on resume (Roman Li) 
- drm/amd/display: Revert FEC check in validation (Martin Leung) 
- drm/amd/display: Enable power gating before init_pipes (Roman Li) 
- spi: cadence-quadspi: fix protocol setup for non-1-1-X operations (Matthias Schiffer) 
- myri10ge: fix an incorrect free for skb in myri10ge_sw_tso (Xiaomeng Tong) 
- net: usb: aqc111: Fix out-of-bounds accesses in RX fixup (Marcin Kozlowski) 
- Drivers: hv: balloon: Disable balloon and hot-add accordingly (Boqun Feng) 
- net: axienet: setup mdio unconditionally (Andy Chiu) 
- tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry (Steve Capper) 
- arm64: alternatives: mark patch_alternative() as noinstr (Joey Gouly) 
- regulator: wm8994: Add an off-on delay for WM8994 variant (Jonathan Bakker) 
- gpu: ipu-v3: Fix dev_dbg frequency output (Leo Ruan) 
- ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs (Christian Lamparter) 
- net: micrel: fix KS8851_MLL Kconfig (Randy Dunlap) 
- scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 (Tyrel Datwyler) 
- scsi: lpfc: Fix queue failures when recovering from PCI parity error (James Smart) 
- scsi: target: tcmu: Fix possible page UAF (Xiaoguang Wang) 
- Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer (Michael Kelley) 
- PCI: hv: Propagate coherence from VMbus device to PCI device (Michael Kelley) 
- Drivers: hv: vmbus: Deactivate sysctl_record_panic_msg by default in isolated guests (Andrea Parri (Microsoft)) 
- drm/amdkfd: Check for potential null return of kmalloc_array() (QintaoShen) 
- drm/amdgpu/vcn: improve vcn dpg stop procedure (Tianci Yin) 
- drm/amdkfd: Fix Incorrect VMIDs passed to HWS (Tushar Patel) 
- drm/amd/display: Update VTEM Infopacket definition (Leo (Hanghong) Ma) 
- drm/amd/display: FEC check in timing validation (Chiawen Huang) 
- drm/amd/display: fix audio format not updated after edid updated (Charlene Liu) 
- drm/amdgpu/gmc: use PCI BARs for APUs in passthrough (Alex Deucher) 
- drm/amdgpu: conduct a proper cleanup of PDB bo (Guchun Chen) 
- btrfs: do not warn for free space inode in cow_file_range (Josef Bacik) 
- btrfs: fix fallocate to use file_modified to update permissions consistently (Darrick J. Wong) 
- drm/amd: Add USBC connector ID (Aurabindo Pillai) 
- block: fix offset/size check in bio_trim() (Ming Lei) 
- net: bcmgenet: Revert "Use stronger register read/writes to assure ordering" (Jeremy Linton) 
- vfio/pci: Fix vf_token mechanism when device-specific VF drivers are used (Jason Gunthorpe) 
- dm mpath: only use ktime_get_ns() in historical selector (Khazhismel Kumykov) 
- cifs: potential buffer overflow in handling symlinks (Harshit Mogalapalli) 
- nfc: nci: add flush_workqueue to prevent uaf (Lin Ma) 
- net: ftgmac100: access hardware register after clock ready (Dylan Hung) 
- macvlan: Fix leaking skb in source mode with nodst option (Martin Willi) 
- perf tools: Fix misleading add event PMU debug message (Adrian Hunter) 
- ALSA: usb-audio: Limit max buffer and period sizes per time (Takashi Iwai) 
- ALSA: usb-audio: Increase max buffer size (Takashi Iwai) 
- testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set (Athira Rajeev) 
- io_uring: verify pad field is 0 in io_get_ext_arg (Dylan Yudaken) 
- io_uring: verify that resv2 is 0 in io_uring_rsrc_update2 (Dylan Yudaken) 
- io_uring: move io_uring_rsrc_update2 validation (Dylan Yudaken) 
- ALSA: mtpav: Don't call card private_free at probe error path (Takashi Iwai) 
- ALSA: ad1889: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- netfilter: nf_tables: nft_parse_register can return a negative value (Antoine Tenart) 
- sctp: Initialize daddr on peeled off socket (Petr Malat) 
- scsi: iscsi: Fix unbound endpoint error handling (Mike Christie) 
- scsi: iscsi: Fix conn cleanup and stop race during iscsid restart (Mike Christie) 
- scsi: iscsi: Fix endpoint reuse regression (Mike Christie) 
- scsi: iscsi: Fix offload conn cleanup when iscsid restarts (Mike Christie) 
- scsi: iscsi: Move iscsi_ep_disconnect() (Mike Christie) 
- scsi: pm80xx: Enable upper inbound, outbound queues (Ajish Koshy) 
- scsi: pm80xx: Mask and unmask upper interrupt vectors 32-63 (Ajish Koshy) 
- net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() (Karsten Graul) 
- drm/msm/dp: add fail safe mode outside of event_mutex context (Kuogee Hsieh) 
- drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init() (Stephen Boyd) 
- drm/msm: Fix range size vs end confusion (Rob Clark) 
- netfilter: nft_socket: make cgroup match work in input too (Florian Westphal) 
- cfg80211: hold bss_lock while updating nontrans_list (Rameshkumar Sundaram) 
- net/sched: taprio: Check if socket flags are valid (Benedikt Spranger) 
- net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link (Dinh Nguyen) 
- net: dsa: felix: suppress -EPROBE_DEFER errors (Michael Walle) 
- net/sched: fix initialization order when updating chain 0 head (Marcelo Ricardo Leitner) 
- mlxsw: i2c: Fix initialization error flow (Vadim Pasternak) 
- net: mdio: don't defer probe forever if PHY IRQ provider is missing (Vladimir Oltean) 
- cifs: release cached dentries only if mount is complete (Shyam Prasad N) 
- gpiolib: acpi: use correct format characters (Linus Torvalds) 
- veth: Ensure eth header is in skb's linear part (Guillaume Nault) 
- net/sched: flower: fix parsing of ethertype following VLAN header (Vlad Buslov) 
- SUNRPC: Fix the svc_deferred_event trace class (Chuck Lever) 
- media: rockchip/rga: do proper error checking in probe (Kyle Copperfield) 
- firmware: arm_scmi: Fix sorting of retrieved clock rates (Cristian Marussi) 
- Revert "ath11k: mesh: add support for 256 bitmap in blockack frames in 11ax" (Anilkumar Kolli) 
- memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe (Miaoqian Lin) 
- firmware: arm_scmi: Remove clear channel call on the TX channel (Cristian Marussi) 
- drm/msm: Add missing put_task_struct() in debugfs path (Rob Clark) 
- ALSA: nm256: Don't call card private_free at probe error path (Takashi Iwai) 
- ALSA: usb-audio: Cap upper limits of buffer/period bytes for implicit fb (Takashi Iwai) 
- ALSA: via82xx: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: sonicvibes: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: sc6000: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: rme96: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: rme9652: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: rme32: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: riptide: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: oxygen: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: maestro3: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: lx6464es: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: lola: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: korg1212: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: intel_hdmi: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: intel8x0: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: ice1724: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: hdspm: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: hdsp: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: galaxy: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: fm801: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: es1968: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: es1938: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: ens137x: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: emu10k1x: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: echoaudio: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: cs5535audio: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: cs4281: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: cmipci: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: ca0106: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: bt87x: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: azt3328: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: aw2: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: au88x0: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: atiixp: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: als4000: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: als300: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: ali5451: Fix the missing snd_card_free() call at probe error (Takashi Iwai) 
- ALSA: sis7019: Fix the missing error handling (Takashi Iwai) 
- ALSA: core: Add snd_card_free_on_error() helper (Takashi Iwai) 
- btrfs: release correct delalloc amount in direct IO write path (Naohiro Aota) 
- net: ipa: request IPA register values be retained (Alex Elder) 
- dt-bindings: net: qcom,ipa: add optional qcom,qmp property (Alex Elder) 
- soc: qcom: aoss: Expose send for generic usecase (Deepak Kumar Singh) 
- btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups() (Nathan Chancellor) 
- btrfs: remove no longer used counter when reading data page (Filipe Manana) 
- btrfs: remove unused parameter nr_pages in add_ra_bio_pages() (Qu Wenruo) 
- ACPI: processor: idle: fix lockup regression on 32-bit ThinkPad T40 (Woody Suwalski) 
- ACPI: processor idle: Allow playing dead in C3 state (Richard Gong) 
- ACPI: processor idle: Check for architectural support for LPI (Mario Limonciello) 
- cpuidle: PSCI: Move the has_lpi check to the beginning of the function (Mario Limonciello) 
- hamradio: remove needs_free_netdev to avoid UAF (Lin Ma) 
- hamradio: defer 6pack kfree after unregister_netdev (Lin Ma) 
- drm/amd/display: Fix p-state allow debug index on dcn31 (Nicholas Kazlauskas) 
- drm/amd/display: Add pstate verification and recovery for DCN31 (Nicholas Kazlauskas) 
- LTS version: v5.15.34 (Jack Vogel) 
- stacktrace: move filter_irq_stacks() to kernel/stacktrace.c (Marco Elver) 
- powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit (Kefeng Wang) 
- static_call: Don't make __static_call_return0 static (Christophe Leroy) 
- mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning (Waiman Long) 
- irqchip/gic, gic-v3: Prevent GSI to SGI translations (Andre Przywara) 
- powerpc/64: Fix build failure with allyesconfig in book3s_64_entry.S (Christophe Leroy) 
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling (Marc Zyngier) 
- sched: Teach the forced-newidle balancer about CPU affinity limitation. (Sebastian Andrzej Siewior) 
- x86/bug: Prevent shadowing in __WARN_FLAGS (Vincent Mailhol) 
- Drivers: hv: vmbus: Replace smp_store_mb() with virt_store_mb() (Andrea Parri (Microsoft)) 
- mm: don't skip swap entry even if zap_details specified (Peter Xu) 
- selftests: cgroup: Test open-time cgroup namespace usage for migration checks (Tejun Heo) 
- selftests: cgroup: Test open-time credential usage for migration checks (Tejun Heo) 
- selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644 (Tejun Heo) 
- ubsan: remove CONFIG_UBSAN_OBJECT_SIZE (Kees Cook) 
- Revert "net/mlx5: Accept devlink user input after driver initialization complete" (dann frazier) 
- dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error" (Vinod Koul) 
- tools build: Use $(shell ) instead of  to get embedded libperl's ccopts (Arnaldo Carvalho de Melo) 
- tools build: Filter out options and warnings not supported by clang (Arnaldo Carvalho de Melo) 
- perf python: Fix probing for some clang command line options (Arnaldo Carvalho de Melo) 
- perf build: Don't use -ffat-lto-objects in the python feature test when building with clang-13 (Arnaldo Carvalho de Melo) 
- Revert "nbd: fix possible overflow on 'first_minor' in nbd_dev_add()" (Jens Axboe) 
- SUNRPC: Don't call connect() more than once on a TCP socket (Trond Myklebust) 
- rtc: mc146818-lib: fix signedness bug in mc146818_get_time() (Dan Carpenter) 
- selftests/bpf: Fix u8 narrow load checks for bpf_sk_lookup remote_port (Jakub Sitnicki) 
- bpf: Make remote_port field in struct bpf_sk_lookup 16-bit wide (Jakub Sitnicki) 
- Revert "selftests: net: Add tls config dependency for tls selftests" (Jakub Kicinski) 
- net/smc: send directly on setting TCP_NODELAY (Dust Li) 
- KVM: SVM: Allow AVIC support on system w/ physical APIC ID > 255 (Suravee Suthikulpanit) 
- drm/amdgpu: don't use BACO for reset in S3 (Alex Deucher) 
- drm/amdkfd: Create file descriptor after client is added to smi_clients list (Lee Jones) 
- drm/nouveau/pmu: Add missing callbacks for Tegra devices (Karol Herbst) 
- drm/amdgpu/vcn: Fix the register setting for vcn1 (Emily Deng) 
- drm/amdgpu/smu10: fix SoC/fclk units in auto mode (Alex Deucher) 
- drm/amdgpu/display: change pipe policy for DCN 2.1 (Benjamin Marty) 
- drm/panel: ili9341: fix optional regulator handling (Daniel Mack) 
- SUNRPC: Prevent immediate close+reconnect (Trond Myklebust) 
- amd/display: set backlight only if required (Shirish S) 
- fbdev: Fix unregistering of framebuffers without device (Thomas Zimmermann) 
- irqchip/gic-v3: Fix GICR_CTLR.RWP polling (Marc Zyngier) 
- perf/core: Inherit event_caps (Namhyung Kim) 
- perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator (Xiaomeng Tong) 
- ata: sata_dwc_460ex: Fix crash due to OOB write (Christian Lamparter) 
- perf/x86/intel: Don't extend the pseudo-encoding to GP counters (Kan Liang) 
- x86/mm/tlb: Revert retpoline avoidance approach (Dave Hansen) 
- x86/msi: Fix msi message data shadow struct (Reto Buerki) 
- gpio: Restrict usage of GPIO chip irq members before initialization (Shreeya Patel) 
- RDMA/hfi1: Fix use-after-free bug for mm struct (Douglas Miller) 
- arm64: patch_text: Fixup last cpu should be master (Guo Ren) 
- spi: core: add dma_map_dev for __spi_unmap_msg() (Vinod Koul) 
- btrfs: prevent subvol with swapfile from being deleted (Kaiwen Hu) 
- btrfs: fix qgroup reserve overflow the qgroup limit (Ethan Lien) 
- perf/x86/intel: Update the FRONTEND MSR mask on Sapphire Rapids (Kan Liang) 
- x86/pm: Save the MSR validity status at context setup (Pawan Gupta) 
- io_uring: implement compat handling for IORING_REGISTER_IOWQ_AFF (Eugene Syromiatnikov) 
- io_uring: defer splice/tee file validity check until command issue (Jens Axboe) 
- io_uring: don't check req->file in io_fsync_prep() (Jens Axboe) 
- mm/mempolicy: fix mpol_new leak in shared_policy_replace (Miaohe Lin) 
- mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) (Paolo Bonzini) 
- highmem: fix checks in __kmap_local_sched_{in,out} (Max Filippov) 
- lz4: fix LZ4_decompress_safe_partial read out of bound (Guo Xuenan) 
- mmc: core: Fixup support for writeback-cache for eMMC and SD (Michael Wu) 
- mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is complete (Wolfram Sang) 
- mmc: mmci: stm32: correctly check all elements of sg list (Yann Gautier) 
- mmc: block: Check for errors after write on SPI (Christian Löhle) 
- Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning" (Pali Rohár) 
- scsi: ufs: ufs-pci: Add support for Intel MTL (Adrian Hunter) 
- scsi: mpt3sas: Fix use after free in _scsih_expander_node_remove() (Damien Le Moal) 
- arm64: Add part number for Arm Cortex-A78AE (Chanho Park) 
- perf session: Remap buf if there is no space for event (Denis Nikitin) 
- perf tools: Fix perf's libperf_print callback (Adrian Hunter) 
- perf: arm-spe: Fix perf report --mem-mode (James Clark) 
- iommu/omap: Fix regression in probe for NULL pointer dereference (Tony Lindgren) 
- SUNRPC: svc_tcp_sendmsg() should handle errors from xdr_alloc_bvec() (Trond Myklebust) 
- SUNRPC: Handle low memory situations in call_status() (Trond Myklebust) 
- SUNRPC: Handle ENOMEM in call_transmit_status() (Trond Myklebust) 
- io_uring: don't touch scm_fp_list after queueing skb (Pavel Begunkov) 
- io_uring: nospec index for tags on files update (Pavel Begunkov) 
- scsi: ufs: ufshpb: Fix a NULL check on list iterator (Xiaomeng Tong) 
- drbd: Fix five use after free bugs in get_initial_state (Lv Yunlong) 
- bpf: Support dual-stack sockets in bpf_tcp_check_syncookie (Maxim Mikityanskiy) 
- spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op() (Kamal Dasu) 
- qede: confirm skb is allocated before using (Jamie Bainbridge) 
- net: phy: mscc-miim: reject clause 45 register accesses (Michael Walle) 
- net: sfc: fix using uninitialized xdp tx_queue (Taehee Yoo) 
- rxrpc: fix a race in rxrpc_exit_net() (Eric Dumazet) 
- net: openvswitch: fix leak of nested actions (Ilya Maximets) 
- net: ethernet: mv643xx: Fix over zealous checking of_get_mac_address() (Andrew Lunn) 
- net: openvswitch: don't send internal clone attribute to the userspace. (Ilya Maximets) 
- ice: xsk: fix VSI state check in ice_xsk_wakeup() (Maciej Fijalkowski) 
- ice: synchronize_rcu() when terminating rings (Maciej Fijalkowski) 
- ipv6: Fix stats accounting in ip6_pkt_drop (David Ahern) 
- ice: Do not skip not enabled queues in ice_vc_dis_qs_msg (Anatolii Gerasymenko) 
- ice: Set txq_teid to ICE_INVAL_TEID on ring creation (Anatolii Gerasymenko) 
- dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe (Miaoqian Lin) 
- sctp: count singleton chunks in assoc user stats (Jamie Bainbridge) 
- IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition (Niels Dossche) 
- IB/cm: Cancel mad on the DREQ event when the state is MRA_REP_RCVD (Mark Zhang) 
- RDMA/mlx5: Add a missing update of cache->last_add (Aharon Landau) 
- RDMA/mlx5: Don't remove cache MRs when a delay is needed (Aharon Landau) 
- sfc: Do not free an empty page_ring (Martin Habets) 
- bnxt_en: Prevent XDP redirect from running when stopping TX queue (Ray Jui) 
- bnxt_en: reserve space inside receive page for skb_shared_info (Andy Gospodarek) 
- bnxt_en: Synchronize tx when xdp redirects happen on same ring (Pavan Chebbi) 
- arch/arm64: Fix topology initialization for core scheduling (Phil Auld) 
- regulator: atc260x: Fix missing active_discharge_on setting (Axel Lin) 
- regulator: rtq2134: Fix missing active_discharge_on setting (Axel Lin) 
- drm/imx: dw_hdmi-imx: Fix bailout in error cases of probe (Liu Ying) 
- drm/imx: Fix memory leak in imx_pd_connector_get_modes (José Expósito) 
- drm/imx: imx-ldb: Check for null pointer after calling kmemdup (Jiasheng Jiang) 
- net: stmmac: Fix unset max_speed difference between DT and non-DT platforms (Chen-Yu Tsai) 
- net: ipv4: fix route with nexthop object delete warning (Nikolay Aleksandrov) 
- mctp: Fix check for dev_hard_header() result (Matt Johnston) 
- ice: Clear default forwarding VSI during VSI release (Ivan Vecera) 
- skbuff: fix coalescing for page_pool fragment recycling (Jean-Philippe Brucker) 
- vrf: fix packet sniffing for traffic originating from ip tunnels (Eyal Birger) 
- net/tls: fix slab-out-of-bounds bug in decrypt_internal (Ziyang Xuan) 
- net: sfc: add missing xdp queue reinitialization (Taehee Yoo) 
- vdpa: mlx5: prevent cvq work from hogging CPU (Jason Wang) 
- vdpa/mlx5: Propagate link status from device to vdpa driver (Eli Cohen) 
- scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() (Christophe JAILLET) 
- scsi: core: Fix sbitmap depth in scsi_realloc_sdev_budget_map() (John Garry) 
- scsi: sr: Fix typo in CDROM(CLOSETRAY|EJECT) handling (Kevin Groeneveld) 
- NFSv4: fix open failure with O_ACCMODE flag (ChenXiaoSong) 
- Revert "NFSv4: Handle the special Linux file open access mode" (ChenXiaoSong) 
- Drivers: hv: vmbus: Fix potential crash on module unload (Guilherme G. Piccoli) 
- drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() (Dan Carpenter) 
- rtc: mc146818-lib: fix RTC presence check (Mateusz Jończyk) 
- rtc: Check return value from mc146818_get_time() (Mateusz Jończyk) 
- rtc: mc146818-lib: change return values of mc146818_get_time() (Mateusz Jończyk) 
- mm: fix race between MADV_FREE reclaim and blkdev direct IO read (Mauricio Faria de Oliveira) 
- parisc: Fix patch code locking and flushing (John David Anglin) 
- parisc: Fix CPU affinity for Lasi, WAX and Dino chips (Helge Deller) 
- selftests: net: Add tls config dependency for tls selftests (Naresh Kamboju) 
- NFS: Avoid writeback threads getting stuck in mempool_alloc() (Trond Myklebust) 
- NFS: nfsiod should not block forever in mempool_alloc() (Trond Myklebust) 
- SUNRPC: Fix socket waits for write buffer space (Trond Myklebust) 
- jfs: prevent NULL deref in diFree (Haimin Zhang) 
- virtio_console: eliminate anonymous module_init & module_exit (Randy Dunlap) 
- serial: samsung_tty: do not unlock port->lock for uart_write_wakeup() (Jiri Slaby) 
- x86/Kconfig: Do not allow CONFIG_X86_X32_ABI=y with llvm-objcopy (Nathan Chancellor) 
- x86: Annotate call_on_stack() (Peter Zijlstra) 
- NFS: swap-out must always use STABLE writes. (NeilBrown) 
- NFS: swap IO handling is slightly different for O_DIRECT IO (NeilBrown) 
- SUNRPC: remove scheduling boost for "SWAPPER" tasks. (NeilBrown) 
- SUNRPC/xprt: async tasks mustn't block waiting for memory (NeilBrown) 
- SUNRPC/call_alloc: async tasks mustn't block waiting for memory (NeilBrown) 
- clk: Enforce that disjoints limits are invalid (Maxime Ripard) 
- clk: ti: Preserve node in ti_dt_clocks_register() (Tony Lindgren) 
- habanalabs: fix possible memory leak in MMU DR fini (Ohad Sharabi) 
- NFSv4: Protect the state recovery thread against direct reclaim (Trond Myklebust) 
- NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify() (Xin Xiong) 
- w1: w1_therm: fixes w1_seq for ds28ea00 sensors (Lucas Denefle) 
- staging: wfx: fix an error handling in wfx_init_common() (Xiaoke Wang) 
- opp: Expose of-node's name in debugfs (Viresh Kumar) 
- cpufreq: CPPC: Fix performance/frequency conversion (Pierre Gondois) 
- clk: rockchip: drop CLK_SET_RATE_PARENT from dclk_vop* on rk3568 (Sascha Hauer) 
- phy: amlogic: meson8b-usb2: fix shared reset control use (Amjad Ouled-Ameur) 
- phy: amlogic: meson8b-usb2: Use dev_err_probe() (Amjad Ouled-Ameur) 
- phy: amlogic: phy-meson-gxl-usb2: fix shared reset controller use (Amjad Ouled-Ameur) 
- staging: vchiq_core: handle NULL result of find_service_by_handle (Stefan Wahren) 
- staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instances (Stefan Wahren) 
- clk: si5341: fix reported clk_rate when output divider is 2 (Adam Wujek) 
- minix: fix bug when opening a file with O_DIRECT (Qinghua Jin) 
- init/main.c: return 1 from handled __setup() functions (Randy Dunlap) 
- lib/Kconfig.debug: add ARCH dependency for FUNCTION_ALIGN option (Feng Tang) 
- ceph: fix memory leak in ceph_readdir when note_last_dentry returns error (Xiubo Li) 
- ceph: fix inode reference leakage in ceph_get_snapdir() (Xiubo Li) 
- netlabel: fix out-of-bounds memory accesses (Wang Yufen) 
- netfilter: conntrack: revisit gc autotuning (Florian Westphal) 
- Bluetooth: Fix use after free in hci_send_acl (Luiz Augusto von Dentz) 
- MIPS: ingenic: correct unit node address (Krzysztof Kozlowski) 
- xtensa: fix DTC warning unit_address_format (Max Filippov) 
- mt76: fix monitor mode crash with sdio driver (Deren Wu) 
- usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm (H. Nikolaus Schaller) 
- net: sfp: add 2500base-X quirk for Lantech SFP module (Michael Walle) 
- net/mlx5e: Remove overzealous validations in netlink EEPROM query (Gal Pressman) 
- net: limit altnames to 64k total (Jakub Kicinski) 
- net: account alternate interface name memory (Jakub Kicinski) 
- riscv: Fixed misaligned memory access. Fixed pointer comparison. (Michael T. Kloos) 
- can: etas_es58x: es58x_fd_rx_event_msg(): initialize rx_event_msg before calling es58x_check_msg_len() (Vincent Mailhol) 
- can: isotp: set default value for N_As to 50 micro seconds (Oliver Hartkopp) 
- scsi: libfc: Fix use after free in fc_exch_abts_resp() (Jianglei Nie) 
- powerpc/secvar: fix refcount leak in format_show() (Hangyu Hua) 
- powerpc/64e: Tie PPC_BOOK3E_64 to PPC_FSL_BOOK3E (Michael Ellerman) 
- MIPS: fix fortify panic when copying asm exception handlers (Alexander Lobakin) 
- PCI: endpoint: Fix misused goto label (Li Chen) 
- bnxt_en: Eliminate unintended link toggle during FW reset (Michael Chan) 
- Bluetooth: use memset avoid memory leaks (Minghao Chi (CGEL ZTE)) 
- Bluetooth: Fix not checking for valid hdev on bt_dev_{info,warn,err,dbg} (Luiz Augusto von Dentz) 
- tuntap: add sanity checks about msg_controllen in sendmsg (Harold Huang) 
- macvtap: advertise link netns via netlink (Sven Eckelmann) 
- mips: ralink: fix a refcount leak in ill_acc_of_setup() (Hangyu Hua) 
- net/smc: correct settings of RMB window update limit (Dust Li) 
- scsi: hisi_sas: Limit users changing debugfs BIST count value (Xiang Chen) 
- scsi: hisi_sas: Free irq vectors in order for v3 HW (Qi Liu) 
- scsi: aha152x: Fix aha152x_setup() __setup handler return value (Randy Dunlap) 
- mt76: mt7615: Fix assigning negative values to unsigned variable (Yang Li) 
- powerpc/64s/hash: Make hash faults work in NMI context (Nicholas Piggin) 
- mt76: mt7915: fix injected MPDU transmission to not use HW A-MSDU (Johan Almbladh) 
- scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req() (Damien Le Moal) 
- scsi: pm8001: Fix tag leaks on error (Damien Le Moal) 
- scsi: pm8001: Fix task leak in pm8001_send_abort_all() (Damien Le Moal) 
- scsi: pm8001: Fix pm8001_mpi_task_abort_resp() (Damien Le Moal) 
- scsi: pm8001: Fix pm80xx_pci_mem_copy() interface (Damien Le Moal) 
- vfio/pci: Stub vfio_pci_vga_rw when !CONFIG_VFIO_PCI_VGA (Alex Williamson) 
- drm/amdkfd: make CRAT table missing message informational only (Alex Deucher) 
- dm: requeue IO if mapping table not yet available (Mike Snitzer) 
- dm ioctl: prevent potential spectre v1 gadget (Jordy Zomer) 
- ipv4: Invalidate neighbour for broadcast address upon address addition (Ido Schimmel) 
- drm/msm/dsi: Remove spurious IRQF_ONESHOT flag (Daniel Thompson) 
- iwlwifi: mvm: move only to an enabled channel (Miri Korenblit) 
- iwlwifi: mvm: Correctly set fragmented EBS (Ilan Peer) 
- usb: dwc3: pci: Set the swnode from inside dwc3_pci_quirks() (Hans de Goede) 
- net/mlx5e: Disable TX queues before registering the netdev (Maxim Mikityanskiy) 
- power: supply: axp288-charger: Set Vhold to 4.4V (Hans de Goede) 
- powerpc/set_memory: Avoid spinlock recursion in change_page_attr() (Christophe Leroy) 
- scsi: mpi3mr: Fix memory leaks (Sreekanth Reddy) 
- scsi: mpi3mr: Fix reporting of actual data transfer size (Sreekanth Reddy) 
- PCI: pciehp: Add Qualcomm quirk for Command Completed erratum (Manivannan Sadhasivam) 
- tcp: Don't acquire inet_listen_hashbucket::lock with disabled BH. (Sebastian Andrzej Siewior) 
- PCI: endpoint: Fix alignment fault error in copy tests (Hou Zhiqiang) 
- usb: ehci: add pci device support for Aspeed platforms (Neal Liu) 
- iommu/arm-smmu-v3: fix event handling soft lockup (Zhou Guanghui) 
- PCI: aardvark: Fix support for MSI interrupts (Pali Rohár) 
- scsi: smartpqi: Fix kdump issue when controller is locked up (Mahesh Rajashekhara) 
- drm/amdgpu: Fix recursive locking warning (Rajneesh Bhardwaj) 
- powerpc: Set crashkernel offset to mid of RMA region (Sourabh Jain) 
- net: initialize init_net earlier (Eric Dumazet) 
- ipv6: make mc_forwarding atomic (Eric Dumazet) 
- libbpf: Fix build issue with llvm-readelf (Yonghong Song) 
- cfg80211: don't add non transmitted BSS to 6GHz scanned channels (Avraham Stern) 
- mt76: dma: initialize skip_unmap in mt76_dma_rx_fill (Lorenzo Bianconi) 
- mt76: mt7921: fix crash when startup fails. (Ben Greear) 
- power: supply: axp20x_battery: properly report current when discharging (Evgeny Boger) 
- drm/v3d: fix missing unlock (Yongzhi Liu) 
- scsi: bfa: Replace snprintf() with sysfs_emit() (Yang Guang) 
- scsi: mvsas: Replace snprintf() with sysfs_emit() (Yang Guang) 
- bpf: Make dst_port field in struct bpf_sock 16-bit wide (Jakub Sitnicki) 
- drm/bridge: Add missing pm_runtime_put_sync (Yongzhi Liu) 
- net/smc: Send directly when TCP_CORK is cleared (Tony Lu) 
- ath11k: mhi: use mhi_sync_power_up() (Kalle Valo) 
- ath11k: pci: fix crash on suspend if board file is not found (Kalle Valo) 
- ath11k: fix kernel panic during unload/load ath11k modules (Venkateswara Naralasetty) 
- powerpc: dts: t104xrdb: fix phy type for FMAN 4/5 (Maxim Kiselev) 
- drm/amdkfd: Don't take process mutex for svm ioctls (Philip Yang) 
- ptp: replace snprintf with sysfs_emit (Yang Guang) 
- usb: cdnsp: fix cdnsp_decode_trb function to properly handle ret value (Pawel Laszczak) 
- usb: gadget: tegra-xudc: Fix control endpoint's definitions (Wayne Chang) 
- usb: gadget: tegra-xudc: Do not program SPARAM (Wayne Chang) 
- drm/amd/display: Use PSR version selected during set_psr_caps (Nicholas Kazlauskas) 
- drm/amd/display: Fix memory leak (Yongzhi Liu) 
- drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj (Xin Xiong) 
- drm/amd/display: Add signal type check when verify stream backends same (Dale Zhao) 
- ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 (Zekun Shen) 
- drm: Add orientation quirk for GPD Win Max (Anisse Astier) 
- KVM: x86/emulator: Emulate RDPID only if it is enabled in guest (Hou Wenlong) 
- KVM: x86/pmu: Fix and isolate TSX-specific performance event logic (Like Xu) 
- KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs (Jim Mattson) 
- KVM: SVM: Fix kvm_cache_regs.h inclusions for is_guest_mode() (Peter Gonda) 
- KVM: x86/pmu: Use different raw event masks for AMD and Intel (Jim Mattson) 
- kfence: limit currently covered allocations when pool nearly full (Marco Elver) 
- kfence: move saving stack trace of allocations into __kfence_alloc() (Marco Elver) 
- kfence: count unexpectedly skipped allocations (Marco Elver) 
- nbd: fix possible overflow on 'first_minor' in nbd_dev_add() (Zhang Wensheng) 
- nbd: Fix hungtask when nbd_config_put (Ye Bin) 
- nbd: Fix incorrect error handle when first_minor is illegal in nbd_dev_add (Ye Bin) 
- nbd: add error handling support for add_disk() (Luis Chamberlain) 
- rtc: wm8350: Handle error for wm8350_register_irq (Jiasheng Jiang) 
- um: fix and optimize xor select template for CONFIG64 and timetravel mode (Benjamin Beichler) 
- lib/logic_iomem: correct fallback config references (Johannes Berg) 
- LTS version: v5.15.33 (Jack Vogel) 
- PCI: xgene: Revert "PCI: xgene: Use inbound resources for setup" (Marc Zyngier) 
- coredump: Use the vma snapshot in fill_files_note (Eric W. Biederman) 
- coredump/elf: Pass coredump_params into fill_note_info (Eric W. Biederman) 
- coredump: Remove the WARN_ON in dump_vma_snapshot (Eric W. Biederman) 
- coredump: Snapshot the vmas in do_coredump (Eric W. Biederman) 
- iommu/dma: Account for min_align_mask w/swiotlb (David Stevens) 
- swiotlb: Support aligned swiotlb buffers (David Stevens) 
- iommu/dma: Check CONFIG_SWIOTLB more broadly (David Stevens) 
- iommu/dma: Fold _swiotlb helpers into callers (David Stevens) 
- iommu/dma: Skip extra sync during unmap w/swiotlb (David Stevens) 
- mmc: rtsx: Fix build errors/warnings for unused variable (Ulf Hansson) 
- mmc: rtsx: Let MMC core handle runtime PM (Kai-Heng Feng) 
- n64cart: convert bi_disk to bi_bdev->bd_disk fix build (Jackie Liu) 
- torture: Make torture.sh help message match reality (Paul E. McKenney) 
- openvswitch: Fixed nd target mask field in the flow dump. (Martin Varghese) 
- docs: sysctl/kernel: add missing bit to panic_print (Guilherme G. Piccoli) 
- um: Fix uml_mconsole stop/go (Anton Ivanov) 
- arm64: dts: ls1046a: Update i2c node dma properties (Kuldeep Singh) 
- arm64: dts: ls1043a: Update i2c dma properties (Kuldeep Singh) 
- ARM: dts: spear13xx: Update SPI dma properties (Kuldeep Singh) 
- ARM: dts: spear1340: Update serial node properties (Kuldeep Singh) 
- spi: mediatek: support tick_delay without enhance_timing (Leilk Liu) 
- media: ov6650: Fix crop rectangle affected by set format (Janusz Krzysztofik) 
- media: ov6650: Add try support to selection API operations (Janusz Krzysztofik) 
- perf vendor events: Update metrics for SkyLake Server (Ian Rogers) 
- ASoC: topology: Allow TLV control to be either read or write (Amadeusz Sławiński) 
- ASoC: SOF: Intel: Fix build error without SND_SOC_SOF_PCI_DEV (Zheng Bin) 
- ubi: fastmap: Return error code if memory allocation fails in add_aeb() (Zhihao Cheng) 
- dt-bindings: pinctrl: pinctrl-microchip-sgpio: Fix example (Horatiu Vultur) 
- dt-bindings: memory: mtk-smi: No need mediatek,larb-id for mt8167 (Yong Wu) 
- dt-bindings: spi: mxic: The interrupt property is not mandatory (Miquel Raynal) 
- dt-bindings: mtd: nand-controller: Fix a comment in the examples (Miquel Raynal) 
- dt-bindings: mtd: nand-controller: Fix the reg property description (Miquel Raynal) 
- mmc: rtsx: Use pm_runtime_{get,put}() to handle runtime PM (Kai-Heng Feng) 
- bpf: Fix comment for helper bpf_current_task_under_cgroup() (Hengqi Chen) 
- bpf: Adjust BPF stack helper functions to accommodate skip > 0 (Namhyung Kim) 
- af_unix: Support POLLPRI for OOB. (Kuniyuki Iwashima) 
- mm/usercopy: return 1 from hardened_usercopy __setup() handler (Randy Dunlap) 
- mm/memcontrol: return 1 from cgroup.memory __setup() handler (Randy Dunlap) 
- ARM: 9187/1: JIVE: fix return value of __setup handler (Randy Dunlap) 
- mm/mmap: return 1 from stack_guard_gap __setup() handler (Randy Dunlap) 
- net: preserve skb_end_offset() in skb_unclone_keeptruesize() (Eric Dumazet) 
- net: add skb_set_end_offset() helper (Eric Dumazet) 
- tracing: Have type enum modifications copy the strings (Steven Rostedt (Google)) 
- Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" (Linus Torvalds) 
- ASoC: soc-compress: Change the check for codec_dai (Jiasheng Jiang) 
- arm64: mm: Drop 'const' from conditional arm64_dma_phys_limit definition (Will Deacon) 
- staging: mt7621-dts: fix pinctrl-0 items to be size-1 items on ethernet (Arınç ÜNAL) 
- scsi: qla2xxx: Add qla2x00_async_done() for async routines (Saurav Kashyap) 
- drm/connector: Fix typo in documentation (Maxime Ripard) 
- proc: bootconfig: Add null pointer check (Lv Ruyi) 
- can: isotp: restore accidentally removed MSG_PEEK feature (Oliver Hartkopp) 
- platform/chrome: cros_ec_typec: Check for EC device (Prashant Malani) 
- spi: Fix Tegra QSPI example (Jon Hunter) 
- vhost: handle error while adding split ranges to iotlb (Anirudh Rayabharam) 
- ACPI: CPPC: Avoid out of bounds access when parsing _CPC data (Rafael J. Wysocki) 
- riscv module: remove (NOLOAD) (Fangrui Song) 
- io_uring: fix memory leak of uid in files registration (Pavel Begunkov) 
- block: Fix the maximum minor value is blk_alloc_ext_minor() (Christophe JAILLET) 
- ARM: iop32x: offset IRQ numbers by 1 (Arnd Bergmann) 
- ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl (Baokun Li) 
- ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs (Jiaxin Yu) 
- pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE() (Jonathan Neuschäfer) 
- pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR() (Jonathan Neuschäfer) 
- net: sparx5: uses, depends on BRIDGE or !BRIDGE (Randy Dunlap) 
- watchdog: rti-wdt: Add missing pm_runtime_disable() in probe function (Miaoqian Lin) 
- pinctrl: pinconf-generic: Print arguments for bias-pull-* (Chen-Yu Tsai) 
- watch_queue: Free the page array when watch_queue is dismantled (Eric Dumazet) 
- crypto: arm/aes-neonbs-cbc - Select generic cbc and aes (Herbert Xu) 
- mailbox: imx: fix wakeup failure from freeze mode (Robin Gong) 
- rxrpc: Fix call timer start racing with call destruction (David Howells) 
- rxrpc: fix some null-ptr-deref bugs in server_key.c (Xiaolong Huang) 
- net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware (Guangbin Huang) 
- net: hns3: fix the concurrency between functions reading debugfs (Yufeng Mo) 
- gfs2: Make sure FITRIM minlen is rounded up to fs block size (Andrew Price) 
- gfs2: gfs2_setattr_size error path fix (Andreas Gruenbacher) 
- rtc: check if __rtc_read_time was successful (Tom Rix) 
- modpost: restore the warning message for missing symbol versions (Masahiro Yamada) 
- XArray: Update the LRU list in xas_split() (Matthew Wilcox (Oracle)) 
- can: mcp251xfd: mcp251xfd_register_get_dev_id(): fix return of error value (Tom Rix) 
- can: mcba_usb: properly check endpoint type (Pavel Skripkin) 
- can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path (Hangyu Hua) 
- XArray: Fix xas_create_range() when multi-order entry present (Matthew Wilcox (Oracle)) 
- wireguard: socket: ignore v6 endpoints when ipv6 is disabled (Jason A. Donenfeld) 
- wireguard: socket: free skb in send6 when ipv6 is disabled (Wang Hai) 
- wireguard: queueing: use CFI-safe ptr_ring cleanup function (Jason A. Donenfeld) 
- nvme: fix the read-only state for zoned namespaces with unsupposed features (Pankaj Raghav) 
- nvme: allow duplicate NSIDs for private namespaces (Sungup Moon) 
- ubifs: rename_whiteout: correct old_dir size computing (Baokun Li) 
- ubifs: Fix to add refcount once page is set private (Zhihao Cheng) 
- ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() (Zhihao Cheng) 
- ubifs: setflags: Make dirtied_ino_d 8 bytes aligned (Zhihao Cheng) 
- ubifs: Rectify space amount budget for mkdir/tmpfile operations (Zhihao Cheng) 
- ubifs: Fix 'ui->dirty' race between do_tmpfile() and writeback work (Zhihao Cheng) 
- ubifs: Rename whiteout atomically (Zhihao Cheng) 
- ubifs: Add missing iput if do_tmpfile() failed in rename whiteout (Zhihao Cheng) 
- ubifs: Fix deadlock in concurrent rename whiteout and inode writeback (Zhihao Cheng) 
- ubifs: rename_whiteout: Fix double free for whiteout_ui->data (Zhihao Cheng) 
- KVM: SVM: fix panic on out-of-bounds guest IRQ (Yi Wang) 
- KVM: x86: fix sending PV IPI (Li RongQing) 
- KVM: Prevent module exit until all VMs are freed (David Matlack) 
- KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated (Vitaly Kuznetsov) 
- KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() (Vitaly Kuznetsov) 
- KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq (Vitaly Kuznetsov) 
- platform: chrome: Split trace include file (Gwendal Grignou) 
- scsi: qla2xxx: Use correct feature type field during RFF_ID processing (Manish Rangankar) 
- scsi: qla2xxx: Reduce false trigger to login (Quinn Tran) 
- scsi: qla2xxx: Fix stuck session of PRLI reject (Quinn Tran) 
- scsi: qla2xxx: Fix N2N inconsistent PLOGI (Quinn Tran) 
- scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests (Arun Easi) 
- scsi: qla2xxx: Fix hang due to session stuck (Quinn Tran) 
- scsi: qla2xxx: Fix incorrect reporting of task management failure (Quinn Tran) 
- scsi: qla2xxx: Fix disk failure to rediscover (Quinn Tran) 
- scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() (Saurav Kashyap) 
- scsi: qla2xxx: Check for firmware dump already collected (Joe Carnuccio) 
- scsi: qla2xxx: Add devids and conditionals for 28xx (Joe Carnuccio) 
- scsi: qla2xxx: Fix T10 PI tag escape and IP guard options for 28XX adapters (Joe Carnuccio) 
- scsi: qla2xxx: edif: Fix clang warning (Quinn Tran) 
- scsi: qla2xxx: Fix device reconnect in loop topology (Arun Easi) 
- scsi: qla2xxx: Fix warning for missing error code (Nilesh Javali) 
- scsi: qla2xxx: Fix wrong FDMI data for 64G adapter (Bikash Hazarika) 
- scsi: qla2xxx: Fix premature hw access after PCI error (Quinn Tran) 
- scsi: qla2xxx: Fix scheduling while atomic (Quinn Tran) 
- scsi: qla2xxx: Fix warning message due to adisc being flushed (Quinn Tran) 
- scsi: qla2xxx: Fix stuck session in gpdb (Quinn Tran) 
- scsi: qla2xxx: Implement ref count for SRB (Saurav Kashyap) 
- scsi: qla2xxx: Refactor asynchronous command initialization (Daniel Wagner) 
- drm/i915: Reject unsupported TMDS rates on ICL+ (Ville Syrjälä) 
- drm/i915: Fix PSF GV point mask when SAGV is not possible (Ville Syrjälä) 
- drm/i915: Treat SAGV block time 0 as SAGV disabled (Ville Syrjälä) 
- drm/dp: Fix off-by-one in register cache size (Kees Cook) 
- powerpc: Fix build errors with newer binutils (Anders Roxell) 
- powerpc: Add set_memory_{p/np}() and remove set_memory_attr() (Christophe Leroy) 
- powerpc/lib/sstep: Fix build errors with newer binutils (Anders Roxell) 
- powerpc/lib/sstep: Fix 'sthcx' instruction (Anders Roxell) 
- powerpc/kasan: Fix early region not updated correctly (Chen Jingwen) 
- KVM: x86: hyper-v: HVCALL_SEND_IPI_EX is an XMM fast hypercall (Vitaly Kuznetsov) 
- KVM: x86: hyper-v: Fix the maximum number of sparse banks for XMM fast TLB flush hypercalls (Vitaly Kuznetsov) 
- KVM: x86: hyper-v: Drop redundant 'ex' parameter from kvm_hv_flush_tlb() (Vitaly Kuznetsov) 
- KVM: x86: hyper-v: Drop redundant 'ex' parameter from kvm_hv_send_ipi() (Vitaly Kuznetsov) 
- KVM: x86/mmu: Check for present SPTE when clearing dirty bit in TDP MMU (Sean Christopherson) 
- KVM: x86/mmu: Zap _all_ roots when unmapping gfn range in TDP MMU (Sean Christopherson) 
- KVM: x86/mmu: Move "invalid" check out of kvm_tdp_mmu_get_root() (Sean Christopherson) 
- KVM: x86: Reinitialize context if host userspace toggles EFER.LME (Paolo Bonzini) 
- ALSA: hda/realtek: Add alc256-samsung-headphone fixup (Matt Kramer) 
- media: atomisp: fix bad usage at error handling logic (Mauro Carvalho Chehab) 
- mmc: host: Return an error when ->enable_sdio_irq() ops is missing (Ulf Hansson) 
- tracing: Have TRACE_DEFINE_ENUM affect trace event types as well (Steven Rostedt (Google)) 
- ASoC: Intel: sof_sdw: fix quirks for 2022 HP Spectre x360 13" (Anthony I Gilea) 
- media: hdpvr: initialize dev->worker at hdpvr_register_videodev (Dongliang Mu) 
- media: Revert "media: em28xx: add missing em28xx_close_extension" (Pavel Skripkin) 
- media: i2c: ov5648: Fix lockdep error (Hans de Goede) 
- video: fbdev: sm712fb: Fix crash in smtcfb_write() (Zheyu Ma) 
- ASoC: amd: vg: fix for pm resume callback sequence (Vijendar Mukunda) 
- ARM: mmp: Fix failure to remove sram device (Uwe Kleine-König) 
- ARM: tegra: tamonten: Fix I2C3 pad setting (Richard Leitner) 
- lib/test_lockup: fix kernel pointer check for separate address spaces (Arnd Bergmann) 
- uaccess: fix type mismatch warnings from access_ok() (Arnd Bergmann) 
- media: cx88-mpeg: clear interrupt status register before streaming video (Daniel González Cabanelas) 
- media: imx-jpeg: fix a bug of accessing array out of bounds (Ming Qian) 
- ASoC: soc-core: skip zero num_dai component in searching dai name (Shengjiu Wang) 
- ARM: dts: bcm2711: Add the missing L1/L2 cache information (Richard Schleich) 
- video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit (Jing Yao) 
- video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() (Jing Yao) 
- video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() (Jing Yao) 
- arm64: defconfig: build imx-sdma as a module (Marcel Ziswiler) 
- ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk (Abel Vesa) 
- ARM: ftrace: avoid redundant loads or clobbering IP (Ard Biesheuvel) 
- media: atomisp: fix dummy_ptr check to avoid duplicate active_bo (Tsuchiya Yuto) 
- media: atomisp_gmin_platform: Add DMI quirk to not turn AXP ELDO2 regulator off on some boards (Hans de Goede) 
- ASoC: madera: Add dependencies on MFD (Charles Keepax) 
- ARM: dts: bcm2837: Add the missing L1/L2 cache information (Richard Schleich) 
- ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 (David Heidelberg) 
- video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit (Yang Guang) 
- video: fbdev: cirrusfb: check pixclock to avoid divide by zero (George Kennedy) 
- video: fbdev: w100fb: Reset global state (Evgeny Novikov) 
- video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow (Tim Gardner) 
- media: iommu/mediatek: Add device_link between the consumer and the larb devices (Yong Wu) 
- media: iommu/mediatek: Return ENODEV if the device is NULL (Yong Wu) 
- media: iommu/mediatek-v1: Free the existed fwspec if the master dev already has (Yong Wu) 
- media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers (Mirela Rabulea) 
- ASoC: SOF: Intel: match sdw version on link_slaves_found (Bard Liao) 
- ASoC: sh: rz-ssi: Make the data structures available before registering the handlers (Lad Prabhakar) 
- media: ir_toy: free before error exiting (Peiwei Hu) 
- media: atmel: atmel-isc-base: report frame sizes as full supported range (Eugen Hristev) 
- media: staging: media: zoran: fix various V4L2 compliance errors (Hans Verkuil) 
- media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com (Corentin Labbe) 
- media: staging: media: zoran: move videodev alloc (Corentin Labbe) 
- ntfs: add sanity check on allocation size (Dongliang Mu) 
- Adjust cifssb maximum read size (Rohith Surabattula) 
- f2fs: compress: fix to print raw data size in error path of lz4 decompression (Chao Yu) 
- f2fs: use spin_lock to avoid hang (Jaegeuk Kim) 
- btrfs: make search_csum_tree return 0 if we get -EFBIG (Josef Bacik) 
- btrfs: harden identification of a stale device (Anand Jain) 
- f2fs: don't get FREEZE lock in f2fs_evict_inode in frozen fs (Jaegeuk Kim) 
- NFSD: Fix nfsd_breaker_owns_lease() return values (Chuck Lever) 
- f2fs: fix to do sanity check on curseg->alloc_type (Chao Yu) 
- ext4: don't BUG if someone dirty pages without asking ext4 first (Theodore Ts'o) 
- sched/tracing: Report TASK_RTLOCK_WAIT tasks as TASK_UNINTERRUPTIBLE (Valentin Schneider) 
- ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit (Ritesh Harjani) 
- ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb (Ritesh Harjani) 
- locking/lockdep: Iterate lock_classes directly when reading lockdep files (Waiman Long) 
- atomics: Fix atomic64_{read_acquire,set_release} fallbacks (Mark Rutland) 
- spi: tegra20: Use of_device_get_match_data() (Minghao Chi) 
- nvme-tcp: lockdep: annotate in-kernel sockets (Chris Leech) 
- parisc: Fix handling off probe non-access faults (John David Anglin) 
- PM: core: keep irq flags in device_pm_check_callbacks() (Dmitry Baryshkov) 
- ACPI/APEI: Limit printable size of BERT table data (Darren Hart) 
- Revert "Revert "block, bfq: honor already-setup queue merges"" (Paolo Valente) 
- lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3 (Paul Menzel) 
- ACPICA: Avoid walking the ACPI Namespace if it is not there (Rafael J. Wysocki) 
- bfq: fix use-after-free in bfq_dispatch_request (Zhang Wensheng) 
- fs/binfmt_elf: Fix AT_PHDR for unusual ELF files (Akira Kawata) 
- irqchip/nvic: Release nvic_base upon failure (Souptick Joarder (HPE)) 
- irqchip/qcom-pdc: Fix broken locking (Marc Zyngier) 
- Fix incorrect type in assignment of ipv6 port for audit (Casey Schaufler) 
- loop: use sysfs_emit() in the sysfs xxx show() (Chaitanya Kulkarni) 
- selinux: allow FIOCLEX and FIONCLEX with policy capability (Richard Haines) 
- arm64: module: remove (NOLOAD) from linker script (Fangrui Song) 
- selinux: use correct type for context length (Christian Göttsche) 
- block, bfq: don't move oom_bfqq (Yu Kuai) 
- crypto: hisilicon/sec - not need to enable sm4 extra mode at HW V3 (Kai Ye) 
- crypto: xts - Add softdep on ecb (Herbert Xu) 
- block/bfq_wf2q: correct weight to ioprio (Yahu Gao) 
- rcu: Mark writes to the rcu_segcblist structure's ->flags field (Paul E. McKenney) 
- pinctrl: npcm: Fix broken references to chip->parent_device (Marc Zyngier) 
- gcc-plugins/stackleak: Exactly match strings instead of prefixes (Kees Cook) 
- crypto: hisilicon/qm - cleanup warning in qm_vf_read_qos (Kai Ye) 
- regulator: rpi-panel: Handle I2C errors/timing to the Atmel (Dave Stevenson) 
- LSM: general protection fault in legacy_parse_param (Casey Schaufler) 
- fs: fix fd table size alignment properly (Linus Torvalds) 
- lib/test: use after free in register_test_dev_kmod() (Dan Carpenter) 
- fs: fd tables have to be multiples of BITS_PER_LONG (Linus Torvalds) 
- net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator (Xiaomeng Tong) 
- NFSv4/pNFS: Fix another issue with a list iterator pointing to the head (Trond Myklebust) 
- net/sched: act_ct: fix ref leak when switching zones (Marcelo Ricardo Leitner) 
- net: prefer nf_ct_put instead of nf_conntrack_put (Florian Westphal) 
- octeontx2-af: initialize action variable (Tom Rix) 
- net: sparx5: switchdev: fix possible NULL pointer dereference (Zheng Yongjun) 
- net/x25: Fix null-ptr-deref caused by x25_disconnect (Duoming Zhou) 
- qlcnic: dcb: default to returning -EOPNOTSUPP (Tom Rix) 
- net: sparx5: depends on PTP_1588_CLOCK_OPTIONAL (Randy Dunlap) 
- net: hns3: clean residual vf config after disable sriov (Peng Li) 
- NFS: Don't loop forever in nfs_do_recoalesce() (Trond Myklebust) 
- selftests: test_vxlan_under_vrf: Fix broken test case (Ido Schimmel) 
- net: phy: broadcom: Fix brcm_fet_config_init() (Florian Fainelli) 
- net: hns3: refine the process when PF set VF VLAN (Jian Shen) 
- net: hns3: format the output of the MAC address (Yufeng Mo) 
- net: hns3: add vlan list lock to protect vlan list (Jian Shen) 
- net: hns3: fix port base vlan add fail when concurrent with reset (Jian Shen) 
- net: hns3: fix bug when PF set the duplicate MAC address for VFs (Jian Shen) 
- net: enetc: report software timestamping via SO_TIMESTAMPING (Vladimir Oltean) 
- xen: fix is_xen_pmu() (Juergen Gross) 
- clk: Initialize orphan req_rate (Maxime Ripard) 
- vsock/virtio: enable VQs early on probe (Stefano Garzarella) 
- vsock/virtio: read the negotiated features before using VQs (Stefano Garzarella) 
- vsock/virtio: initialize vdev->priv before using VQs (Stefano Garzarella) 
- clk: qcom: gcc-msm8994: Fix gpll4 width (Konrad Dybcio) 
- perf stat: Fix forked applications enablement of counters (Thomas Richter) 
- kdb: Fix the putarea helper function (Daniel Thompson) 
- NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error (Olga Kornievskaia) 
- SUNRPC don't resend a task on an offlined transport (Olga Kornievskaia) 
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Pablo Neira Ayuso) 
- jfs: fix divide error in dbNextAG (Pavel Skripkin) 
- driver core: dd: fix return value of __setup handler (Randy Dunlap) 
- firmware: google: Properly state IOMEM dependency (David Gow) 
- kgdbts: fix return value of __setup handler (Randy Dunlap) 
- virt: acrn: fix a memory leak in acrn_dev_ioctl() (Xiaolong Huang) 
- virt: acrn: obtain pa from VMA with PFNMAP flag (Yonghua Huang) 
- serial: 8250: fix XOFF/XON sending when DMA is used (Ilpo Järvinen) 
- kgdboc: fix return value of __setup handler (Randy Dunlap) 
- tty: hvc: fix return value of __setup handler (Randy Dunlap) 
- pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe (Miaoqian Lin) 
- pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe (Miaoqian Lin) 
- pinctrl: microchip-sgpio: lock RMW access (Michael Walle) 
- pinctrl: microchip sgpio: use reset driver (Horatiu Vultur) 
- pinctrl: mediatek: paris: Skip custom extra pin config dump for virtual GPIOs (Chen-Yu Tsai) 
- pinctrl: mediatek: paris: Fix pingroup pin config state readback (Chen-Yu Tsai) 
- pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get() (Chen-Yu Tsai) 
- pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback (Chen-Yu Tsai) 
- pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init (Miaoqian Lin) 
- staging: mt7621-dts: fix GB-PC2 devicetree (Arınç ÜNAL) 
- staging: mt7621-dts: fix pinctrl properties for ethernet (Arınç ÜNAL) 
- staging: mt7621-dts: fix formatting (Arınç ÜNAL) 
- staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree (Arınç ÜNAL) 
- NFS: remove unneeded check in decode_devicenotify_args() (Alexey Khoroshilov) 
- mailbox: imx: fix crash in resume on i.mx8ulp (Robin Gong) 
- clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver (Miaoqian Lin) 
- clk: Fix clk_hw_get_clk() when dev is NULL (Maxime Ripard) 
- clk: clps711x: Terminate clk_div_table with sentinel element (Jonathan Neuschäfer) 
- clk: hisilicon: Terminate clk_div_table with sentinel element (Jonathan Neuschäfer) 
- clk: loongson1: Terminate clk_div_table with sentinel element (Jonathan Neuschäfer) 
- clk: actions: Terminate clk_div_table with sentinel element (Jonathan Neuschäfer) 
- nvdimm/region: Fix default alignment for small regions (Dan Williams) 
- remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region (Miaoqian Lin) 
- remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region (Miaoqian Lin) 
- remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region (Miaoqian Lin) 
- dmaengine: hisi_dma: fix MSI allocate fail when reload hisi_dma (Jie Hai) 
- clk: qcom: clk-rcg2: Update the frac table for pixel clock (Taniya Das) 
- clk: qcom: clk-rcg2: Update logic to calculate D value for RCG (Taniya Das) 
- clk: at91: sama7g5: fix parents of PDMCs' GCLK (Codrin Ciubotariu) 
- clk: imx: off by one in imx_lpcg_parse_clks_from_dt() (Dan Carpenter) 
- clk: imx7d: Remove audio_mclk_root_clk (Abel Vesa) 
- dma-debug: fix return value of __setup handlers (Randy Dunlap) 
- staging: r8188eu: fix endless loop in recv_func (Martin Kaiser) 
- NFS: Return valid errors from nfs2/3_decode_dirent() (Trond Myklebust) 
- habanalabs: Add check for pci_enable_device (Jiasheng Jiang) 
- iio: adc: Add check for devm_request_threaded_irq (Jiasheng Jiang) 
- serial: 8250: Fix race condition in RTS-after-send handling (Uwe Kleine-König) 
- NFS: Use of mapping_set_error() results in spurious errors (Trond Myklebust) 
- serial: 8250_lpss: Balance reference count for PCI DMA device (Andy Shevchenko) 
- serial: 8250_mid: Balance reference count for PCI DMA device (Andy Shevchenko) 
- phy: phy-brcm-usb: fixup BCM4908 support (Rafał Miłecki) 
- phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure}) (Liu Ying) 
- clk: qcom: ipq8074: Use floor ops for SDCC1 clock (Dirk Buchwalder) 
- pinctrl: renesas: checker: Fix miscalculation of number of states (Geert Uytterhoeven) 
- pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel (Geert Uytterhoeven) 
- staging:iio:adc:ad7280a: Fix handing of device address bit reversing. (Jonathan Cameron) 
- serial: 8250_aspeed_vuart: add PORT_ASPEED_VUART port type (Zev Weiss) 
- iio: mma8452: Fix probe failing when an i2c_device_id is used (Hans de Goede) 
- dmaengine: idxd: restore traffic class defaults after wq reset (Dave Jiang) 
- dmaengine: idxd: change bandwidth token to read buffers (Dave Jiang) 
- dmaengine: idxd: check GENCAP config support for gencfg register (Dave Jiang) 
- clk: qcom: ipq8074: fix PCI-E clock oops (Robert Marko) 
- soundwire: intel: fix wrong register name in intel_shim_wake (Libin Yang) 
- cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse (Luca Weiss) 
- misc: alcor_pci: Fix an error handling path (Christophe JAILLET) 
- fsi: Aspeed: Fix a potential double free (Christophe JAILLET) 
- pps: clients: gpio: Propagate return value from pps_gpio_probe (Robert Hancock) 
- pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() (Uwe Kleine-König) 
- fsi: scom: Remove retries in indirect scoms (Joel Stanley) 
- fsi: scom: Fix error handling (Joel Stanley) 
- mxser: fix xmit_buf leak in activate when LSR == 0xff (Jiri Slaby) 
- staging: r8188eu: release_firmware is not called if allocation fails (Michael Straube) 
- staging: r8188eu: convert DBG_88E_LEVEL call in hal/rtl8188e_hal_init.c (Phillip Potter) 
- kernel/resource: fix kfree() of bootmem memory again (Miaohe Lin) 
- drivers: ethernet: cpsw: fix panic when interrupt coaleceing is set via ethtool (Sondhauß, Jan) 
- ice: don't allow to run ice_send_event_to_aux() in atomic ctx (Alexander Lobakin) 
- ice: fix 'scheduling while atomic' on aux critical err interrupt (Alexander Lobakin) 
- mfd: asic3: Add missing iounmap() on error asic3_mfd_probe (Miaoqian Lin) 
- tipc: fix the timer expires after interval 100ms (Hoang Le) 
- net: dsa: fix panic on shutdown if multi-chip tree failed to probe (Vladimir Oltean) 
- openvswitch: always update flow key after nat (Aaron Conole) 
- tcp: ensure PMTU updates are processed during fastopen (Jakub Kicinski) 
- net: bcmgenet: Use stronger register read/writes to assure ordering (Jeremy Linton) 
- PCI: Avoid broken MSI on SB600 USB devices (Bjorn Helgaas) 
- selftests/bpf/test_lirc_mode2.sh: Exit with proper code (Hangbin Liu) 
- powerpc/pseries: Fix use after free in remove_phb_dynamic() (Michael Ellerman) 
- i2c: mux: demux-pinctrl: do not deactivate a master that is not active (Peter Rosin) 
- netfilter: conntrack: Add and use nf_ct_set_auto_assign_helper_warned() (Phil Sutter) 
- i2c: meson: Fix wrong speed use from probe (Lucas Tanure) 
- af_netlink: Fix shift out of bounds in group mask calculation (Petr Machata) 
- ipv4: Fix route lookups when handling ICMP redirects and PMTU updates (Guillaume Nault) 
- Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt (Yake Yang) 
- Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (Niels Dossche) 
- Bluetooth: hci_uart: add missing NULL check in h5_enqueue (Pavel Skripkin) 
- selftests/bpf: Fix error reporting from sock_fields programs (Jakub Sitnicki) 
- af_unix: Fix some data-races around unix_sk(sk)->oob_skb. (Kuniyuki Iwashima) 
- ibmvnic: fix race between xmit and reset (Sukadev Bhattiprolu) 
- bareudp: use ipv6_mod_enabled to check if IPv6 enabled (Hangbin Liu) 
- can: isotp: support MSG_TRUNC flag when reading from socket (Oliver Hartkopp) 
- can: isotp: return -EADDRNOTAVAIL when reading from unbound socket (Oliver Hartkopp) 
- can: isotp: sanitize CAN ID checks in isotp_bind() (Oliver Hartkopp) 
- mt76: mt7921: fix mt7921_queues_acq implementation (Lorenzo Bianconi) 
- netfilter: flowtable: Fix QinQ and pppoe support for inet table (Pablo Neira Ayuso) 
- drm/i915/display: Fix HPD short pulse handling for eDP (José Roberto de Souza) 
- USB: storage: ums-realtek: fix error code in rts51x_read_mem() (Dan Carpenter) 
- samples/bpf, xdpsock: Fix race when running for fix duration of time (Niklas Söderlund) 
- bpf, sockmap: Fix double uncharge the mem of sk_msg (Wang Yufen) 
- bpf, sockmap: Fix more uncharged while msg has more_data (Wang Yufen) 
- bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full (Wang Yufen) 
- bpf, sockmap: Fix memleak in sk_psock_queue_msg (Wang Yufen) 
- RDMA/mlx5: Fix memory leak in error flow for subscribe event routine (Yongzhi Liu) 
- Revert "RDMA/core: Fix ib_qp_usecnt_dec() called when error" (Leon Romanovsky) 
- RDMA/irdma: Prevent some integer underflows (Dan Carpenter) 
- power: ab8500_chargalg: Use CLOCK_MONOTONIC (Linus Walleij) 
- mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init (Xin Xiong) 
- MIPS: pgalloc: fix memory leak caused by pgd_free() (Yaliang Wang) 
- MIPS: RB532: fix return value of __setup handler (Randy Dunlap) 
- mips: cdmm: Fix refcount leak in mips_cdmm_phys_base (Miaoqian Lin) 
- ath10k: Fix error handling in ath10k_setup_msa_resources (Miaoqian Lin) 
- vxcan: enable local echo for sent CAN frames (Oliver Hartkopp) 
- powerpc: 8xx: fix a return value error in mpc8xx_pic_init (Hangyu Hua) 
- scsi: mpt3sas: Fix incorrect 4GB boundary check (Sreekanth Reddy) 
- platform/x86: huawei-wmi: check the return value of device_create_file() (Jia-Ju Bai) 
- selftests/bpf: Make test_lwt_ip_encap more stable and faster (Felix Maurer) 
- libbpf: Unmap rings when umem deleted (lic121) 
- mfd: mc13xxx: Add check for mc13xxx_irq_request (Jiasheng Jiang) 
- powerpc/64s: Don't use DSISR for SLB faults (Michael Ellerman) 
- powerpc/sysdev: fix incorrect use to determine if list is empty (Jakob Koschel) 
- MIPS: Sanitise Cavium switch cases in TLB handler synthesizers (Maciej W. Rozycki) 
- mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n (Randy Dunlap) 
- drm/msm/a6xx: Fix missing ARRAY_SIZE() check (Rob Clark) 
- net: axienet: fix RX ring refill allocation failure handling (Robert Hancock) 
- PCI: Reduce warnings on possible RW1C corruption (Mark Tomlinson) 
- RDMA/core: Fix ib_qp_usecnt_dec() called when error (Yajun Deng) 
- IB/hfi1: Allow larger MTU without AIP (Mike Marciniszyn) 
- power: supply: wm8350-power: Add missing free in free_charger_irq (Jiasheng Jiang) 
- power: supply: wm8350-power: Handle error for wm8350_register_irq (Jiasheng Jiang) 
- i2c: xiic: Make bus names unique (Robert Hancock) 
- hv_balloon: rate-limit "Unhandled message" warning (Anssi Hannula) 
- KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() (Hou Wenlong) 
- KVM: x86: Fix emulation in writing cr8 (Zhenzhong Duan) 
- powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit (Michael Ellerman) 
- powerpc/mm/numa: skip NUMA_NO_NODE onlining in parse_numa_properties() (Daniel Henrique Barboza) 
- libbpf: Skip forward declaration when counting duplicated type names (Xu Kuohai) 
- gpu: host1x: Fix a memory leak in 'host1x_remove()' (Christophe JAILLET) 
- RDMA/irdma: Remove incorrect masking of PD (Mustafa Ismail) 
- RDMA/irdma: Fix Passthrough mode in VM (Mustafa Ismail) 
- RDMA/irdma: Fix netdev notifications for vlan's (Mustafa Ismail) 
- xsk: Fix race at socket teardown (Magnus Karlsson) 
- bpf, arm64: Feed byte-offset into bpf line info (Hou Tao) 
- bpf, arm64: Call build_prologue() first in first JIT pass (Hou Tao) 
- drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt (Nishanth Menon) 
- scsi: hisi_sas: Change permission of parameter prot_mask (Xiang Chen) 
- power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return (Hans de Goede) 
- drm/tegra: Fix reference leak in tegra_dsi_ganged_probe (Miaoqian Lin) 
- ext2: correct max file size computing (Zhang Yi) 
- power: supply: sbs-charger: Don't cancel work that is not initialized (Christophe JAILLET) 
- TOMOYO: fix __setup handlers return values (Randy Dunlap) 
- drm/amd/display: Remove vupdate_int_entry definition (Maíra Canal) 
- RDMA/mlx5: Fix the flow of a miss in the allocation of a cache ODP MR (Aharon Landau) 
- scsi: pm8001: Fix abort all task initialization (Damien Le Moal) 
- scsi: pm8001: Fix NCQ NON DATA command completion handling (Damien Le Moal) 
- scsi: pm8001: Fix NCQ NON DATA command task initialization (Damien Le Moal) 
- scsi: pm8001: Fix le32 values handling in pm80xx_chip_sata_req() (Damien Le Moal) 
- scsi: pm8001: Fix le32 values handling in pm80xx_chip_ssp_io_req() (Damien Le Moal) 
- scsi: pm8001: Fix payload initialization in pm80xx_encrypt_update() (Damien Le Moal) 
- scsi: pm8001: Fix le32 values handling in pm80xx_set_sas_protocol_timer_config() (Damien Le Moal) 
- scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() (Damien Le Moal) 
- scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() (Damien Le Moal) 
- scsi: pm8001: Fix command initialization in pm80XX_send_read_log() (Damien Le Moal) 
- scsi: fnic: Fix a tracing statement (Bart Van Assche) 
- vfio/pci: wake-up devices around reset functions (Abhishek Sahu) 
- vfio/pci: fix memory leak during D3hot to D0 transition (Abhishek Sahu) 
- dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS (Aashish Sharma) 
- drm/msm/dpu: fix dp audio condition (Dmitry Baryshkov) 
- drm/msm/dpu: add DSPP blocks teardown (Dmitry Baryshkov) 
- drm/msm/dsi/phy: fix 7nm v4.0 settings for C-PHY mode (Dmitry Baryshkov) 
- drm/msm/dsi: Use "ref" fw clock instead of global name for VCO parent (Marijn Suijten) 
- drm/msm/dp: always add fail-safe mode into connector mode list (Kuogee Hsieh) 
- drm/msm/dp: stop link training after link training 2 failed (Kuogee Hsieh) 
- drm/msm/dp: populate connector of struct dp_panel (Kuogee Hsieh) 
- mtd: rawnand: pl353: Set the nand chip node as the flash node (Amit Kumar Mahapatra) 
- iwlwifi: mvm: Fix an error code in iwl_mvm_up() (Dan Carpenter) 
- iwlwifi: Fix -EIO error code that is never returned (Colin Ian King) 
- iwlwifi: yoyo: remove DBGI_SRAM address reset writing (Rotem Saado) 
- iwlwifi: mvm: align locking in D3 test debugfs (Johannes Berg) 
- iwlwifi: mvm: don't iterate unadded vifs when handling FW SMPS req (Luca Coelho) 
- iwlwifi: mvm: Don't call iwl_mvm_sta_from_mac80211() with NULL sta (Takashi Iwai) 
- selftests: mptcp: add csum mib check for mptcp_connect (Geliang Tang) 
- dax: make sure inodes are flushed before destroy cache (Tong Zhang) 
- libbpf: Fix memleak in libbpf_netlink_recv() (Andrii Nakryiko) 
- drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug (Roman Li) 
- drm/amd/pm: enable pm sysfs write for one VF mode (Yiqing Yao) 
- bpftool: Fix the error when lookup in no-btf maps (Yinjun Zhang) 
- drm/bridge: anx7625: Fix overflow issue on reading EDID (Pin-Yen Lin) 
- iommu/ipmmu-vmsa: Check for error num after setting mask (Jiasheng Jiang) 
- HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports (Dmitry Torokhov) 
- power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init (Miaoqian Lin) 
- libbpf: Use dynamically allocated buffer when receiving netlink messages (Toke Høiland-Jørgensen) 
- drm/bridge: dw-hdmi: use safe format when first in bridge chain (Neil Armstrong) 
- libbpf: Fix compilation warning due to mismatched printf format (Andrii Nakryiko) 
- net:enetc: allocate CBD ring data memory using DMA coherent methods (Po Liu) 
- cxl/regs: Fix size of CXL Capability Header Register (Jonathan Cameron) 
- cxl/core: Fix cxl_probe_component_regs() error message (Dan Williams) 
- libbpf: Fix signedness bug in btf_dump_array_data() (Dan Carpenter) 
- RDMA/rxe: Check the last packet by RXE_END_MASK (Xiao Yang) 
- PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge (Pali Rohár) 
- PCI: aardvark: Fix reading MSI interrupt number (Pali Rohár) 
- igb: refactor XDP registration (Corinna Vinschen) 
- igc: avoid kernel warning when changing RX ring parameters (Corinna Vinschen) 
- mtd: mchp48l640: Add SPI ID table (Mark Brown) 
- mtd: mchp23k256: Add SPI ID table (Mark Brown) 
- i2c: bcm2835: Fix the error handling in 'bcm2835_i2c_probe()' (Christophe JAILLET) 
- i2c: bcm2835: Use platform_get_irq() to get the interrupt (Lad Prabhakar) 
- net: asix: add proper error handling of usb read errors (Pavel Skripkin) 
- livepatch: Fix build failure on 32 bits processors (Christophe Leroy) 
- scripts/dtc: Call pkg-config POSIXly correct (Thomas Bracht Laumann Jespersen) 
- mac80211: limit bandwidth in HE capabilities (Johannes Berg) 
- mac80211: Remove a couple of obsolete TODO (Ilan Peer) 
- net: dsa: mv88e6xxx: Enable port policy support on 6097 (Tobias Waldekranz) 
- ptp: unregister virtual clocks when unregistering physical clock. (Miroslav Lichvar) 
- mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update (Lorenzo Bianconi) 
- mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update (Lorenzo Bianconi) 
- mt76: mt7615: fix a leftover race in runtime-pm (Lorenzo Bianconi) 
- mt76: mt7921: fix a leftover race in runtime-pm (Lorenzo Bianconi) 
- mt76: mt7915: use proper aid value in mt7915_mcu_sta_basic_tlv (Lorenzo Bianconi) 
- mt76: mt7915: use proper aid value in mt7915_mcu_wtbl_generic_tlv in sta mode (Lorenzo Bianconi) 
- mt76: connac: fix sta_rec_wtbl tag len (Lorenzo Bianconi) 
- powerpc/perf: Don't use perf_hw_context for trace IMC PMU (Athira Rajeev) 
- KVM: PPC: Book3S HV: Check return value of kvmppc_radix_init (Fabiano Rosas) 
- powerpc: dts: t1040rdb: fix ports names for Seville Ethernet switch (Maxim Kiselev) 
- ray_cs: Check ioremap return value (Jiasheng Jiang) 
- power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe (Miaoqian Lin) 
- ixgbe: respect metadata on XSK Rx to skb (Alexander Lobakin) 
- ixgbe: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Alexander Lobakin) 
- ixgbe: pass bi->xdp to ixgbe_construct_skb_zc() directly (Alexander Lobakin) 
- igc: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Alexander Lobakin) 
- i40e: respect metadata on XSK Rx to skb (Alexander Lobakin) 
- i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Alexander Lobakin) 
- selftests/net: timestamping: Fix bind_phc check (Gerhard Engleder) 
- KVM: PPC: Fix vmx/vsx mixup in mmio emulation (Fabiano Rosas) 
- RDMA/core: Set MR type in ib_reg_user_mr (Maor Gottlieb) 
- ath9k_htc: fix uninit value bugs (Pavel Skripkin) 
- selftests/bpf/test_xdp_redirect_multi: use temp netns for testing (Hangbin Liu) 
- selftests/bpf: Normalize XDP section names in selftests (Andrii Nakryiko) 
- net: phy: at803x: move page selection fix to config_init (Robert Hancock) 
- drm/amd/pm: return -ENOTSUPP if there is no get_dpm_ultimate_freq function (Tom Rix) 
- drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() (Zhou Qingyang) 
- drm/nouveau/acr: Fix undefined behavior in nvkm_acr_hsfw_load_bl() (Zhou Qingyang) 
- ionic: Don't send reset commands if FW isn't running (Brett Creeley) 
- ionic: start watchdog after all is setup (Shannon Nelson) 
- ionic: fix type complaint in ionic_dev_cmd_clean() (Shannon Nelson) 
- drm/edid: Split deep color modes between RGB and YUV444 (Maxime Ripard) 
- drm/edid: Don't clear formats if using deep color (Maxime Ripard) 
- mtd: rawnand: gpmi: fix controller timings setting (Dario Binacchi) 
- mtd: onenand: Check for error irq (Jiasheng Jiang) 
- Bluetooth: hci_serdev: call init_rwsem() before p->open() (Pavel Skripkin) 
- Bluetooth: btintel: Fix WBS setting for Intel legacy ROM products (Tedd Ho-Jeong An) 
- selftests: bpf: Fix bind on used port (Felix Maurer) 
- drm/selftests/test-drm_dp_mst_helper: Fix memory leak in sideband_msg_req_encode_decode (José Expósito) 
- bpf: Fix UAF due to race between btf_try_get_module and load_module (Kumar Kartikeya Dwivedi) 
- udmabuf: validate ubuf->pagecount (Pavel Skripkin) 
- bpftool: Only set obj->skeleton on complete success (Wei Fu) 
- libbpf: Fix possible NULL pointer dereference when destroying skeleton (Yafang Shao) 
- drm/panfrost: Check for error num after setting mask (Jiasheng Jiang) 
- drm/v3d/v3d_drv: Check for error num after setting mask (Jiasheng Jiang) 
- ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern (Wen Gong) 
- drm: bridge: adv7511: Fix ADV7535 HPD enablement (Jagan Teki) 
- drm/bridge: nwl-dsi: Fix PM disable depth imbalance in nwl_dsi_probe (Miaoqian Lin) 
- drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe (Miaoqian Lin) 
- drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev (Miaoqian Lin) 
- drm/meson: Fix error handling when afbcd.ops->init fails (Martin Blumenstingl) 
- drm/meson: split out encoder from meson_dw_hdmi (Neil Armstrong) 
- drm/meson: Make use of the helper function devm_platform_ioremap_resourcexxx() (Cai Huoqing) 
- drm/meson: osd_afbcd: Add an exit callback to struct meson_afbcd_ops (Martin Blumenstingl) 
- ARM: configs: multi_v5_defconfig: re-enable DRM_PANEL and FB_xxx (Andre Przywara) 
- ARM: configs: multi_v5_defconfig: re-enable CONFIG_V4L_PLATFORM_DRIVERS (Andre Przywara) 
- ASoC: amd: Fix reference to PCM buffer address (Meng Tang) 
- ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data (Miaoqian Lin) 
- ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe (Miaoqian Lin) 
- ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe (Miaoqian Lin) 
- mmc: davinci_mmc: Handle error for clk_enable (Jiasheng Jiang) 
- ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe (Miaoqian Lin) 
- ASoC: SOF: Intel: enable DMI L1 for playback streams (Kai Vehmanen) 
- ASoC: imx-es8328: Fix error return code in imx_es8328_probe() (Wang Wensheng) 
- ASoC: fsl_spdif: Disable TX clock when stop (Shengjiu Wang) 
- ASoC: mxs: Fix error handling in mxs_sgtl5000_probe (Miaoqian Lin) 
- ASoC: dmaengine: do not use a NULL prepare_slave_config() callback (Codrin Ciubotariu) 
- ASoC: rk817: Fix missing clk_disable_unprepare() in rk817_platform_probe (Miaoqian Lin) 
- ASoC: mediatek: mt8192-mt6359: Fix error handling in mt8192_mt6359_dev_probe (Miaoqian Lin) 
- ASoC: mediatek: use of_device_get_match_data() (Tzung-Bi Shih) 
- ASoC: SOF: Add missing of_node_put() in imx8m_probe (Miaoqian Lin) 
- ASoC: rockchip: i2s: Fix missing clk_disable_unprepare() in rockchip_i2s_probe (Miaoqian Lin) 
- ASoC: atmel: Fix error handling in snd_proto_probe (Miaoqian Lin) 
- ivtv: fix incorrect device_caps for ivtvfb (Hans Verkuil) 
- media: saa7134: fix incorrect use to determine if list is empty (Jakob Koschel) 
- video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of (Miaoqian Lin) 
- ASoC: fsi: Add check for clk_enable (Jiasheng Jiang) 
- ASoC: wm8350: Handle error for wm8350_register_irq (Jiasheng Jiang) 
- ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe (Miaoqian Lin) 
- media: vidtv: Check for null return of vzalloc (Jiasheng Jiang) 
- media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED (Dafna Hirschfeld) 
- m68k: coldfire/device.c: only build for MCF_EDMA when h/w macros are defined (Randy Dunlap) 
- arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly (Rob Herring) 
- ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction (Takashi Sakamoto) 
- memory: emif: check the pointer temp in get_device_details() (Jia-Ju Bai) 
- memory: emif: Add check for setup_interrupts (Jiasheng Jiang) 
- ASoC: soc-compress: prevent the potentially use of null pointer (Jiasheng Jiang) 
- ASoC: dwc-i2s: Handle errors for clk_enable (Jiasheng Jiang) 
- ASoC: atmel_ssc_dai: Handle errors for clk_enable (Jiasheng Jiang) 
- ASoC: mxs-saif: Handle errors for clk_enable (Jiasheng Jiang) 
- printk: fix return value of printk.devkmsg __setup handler (Randy Dunlap) 
- arm64: dts: broadcom: Fix sata nodename (Frank Wunderlich) 
- arm64: dts: ns2: Fix spi-cpol and spi-cpha property (Kuldeep Singh) 
- ALSA: spi: Add check for clk_enable() (Jiasheng Jiang) 
- ASoC: ti: davinci-i2s: Add check for clk_enable() (Jiasheng Jiang) 
- mmc: sdhci_am654: Fix the driver data of AM64 SoC (Aswath Govindraju) 
- soc: mediatek: pm-domains: Add wakeup capacity support in power domain (Chun-Jie Chen) 
- ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp() (Jia-Ju Bai) 
- uaccess: fix nios2 and microblaze get_user_8() (Arnd Bergmann) 
- vsprintf: Fix %pK with kptr_restrict == 0 (Christophe Leroy) 
- lib: uninline simple_strntoull() as well (Alexey Dobriyan) 
- selftests/lkdtm: Add UBSAN config (Muhammad Usama Anjum) 
- media: ov5640: Fix set format, v4l2_mbus_pixelcode not updated (Mirela Rabulea) 
- media: v4l2-core: Initialize h264 scaling matrix (Nicolas Dufresne) 
- ASoC: codecs: wcd934x: fix return value of wcd934x_rx_hph_mode_put (Srinivas Kandagatla) 
- ASoC: codecs: wcd934x: fix kcontrol max values (Srinivas Kandagatla) 
- ASoC: codecs: wcd938x: fix kcontrol max values (Srinivas Kandagatla) 
- ASoC: codecs: wc938x: fix accessing array out of bounds for enum type (Srinivas Kandagatla) 
- ASoC: codecs: va-macro: fix accessing array out of bounds for enum type (Srinivas Kandagatla) 
- ASoC: codecs: rx-macro: fix accessing array out of bounds for enum type (Srinivas Kandagatla) 
- ASoC: codecs: rx-macro: fix accessing compander for aux (Srinivas Kandagatla) 
- media: cedrus: h264: Fix neighbour info buffer size (Jernej Skrabec) 
- media: cedrus: H265: Fix neighbour info buffer size (Jernej Skrabec) 
- media: usb: go7007: s2250-board: fix leak in probe() (Dan Carpenter) 
- media: em28xx: initialize refcount before kref_get (Dongliang Mu) 
- media: ti-vpe: cal: Fix a NULL pointer dereference in cal_ctx_v4l2_init_formats() (Zhou Qingyang) 
- media: video/hdmi: handle short reads of hdmi info frame. (Tom Rix) 
- media: mexon-ge2d: fixup frames size in registers (Neil Armstrong) 
- ARM: dts: imx: Add missing LVDS decoder on M53Menlo (Marek Vasut) 
- vsprintf: Fix potential unaligned access (Andy Shevchenko) 
- ARM: dts: sun8i: v3s: Move the csi1 block to follow address order (Paul Kocialkowski) 
- soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe (Miaoqian Lin) 
- firmware: ti_sci: Fix compilation failure when CONFIG_TI_SCI_PROTOCOL is not defined (Christophe JAILLET) 
- arm64: dts: qcom: sm8350: Correct TCS configuration for apps rsc (Maulik Shah) 
- arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc (Maulik Shah) 
- arm64: dts: broadcom: bcm4908: use proper TWD binding (Rafał Miłecki) 
- arm64: dts: qcom: sm8250: fix PCIe bindings to follow schema (Dmitry Baryshkov) 
- arm64: dts: qcom: sdm845: fix microphone bias properties and values (David Heidelberg) 
- soc: qcom: aoss: remove spurious IRQF_ONESHOT flags (Daniel Thompson) 
- soc: qcom: ocmem: Fix missing put_device() call in of_get_ocmem (Miaoqian Lin) 
- soc: qcom: rpmpd: Check for null return of devm_kcalloc (Jiasheng Jiang) 
- ARM: dts: qcom: ipq4019: fix sleep clock (Pavel Kubelun) 
- firmware: qcom: scm: Remove reassignment to desc following initializer (Marijn Suijten) 
- ARM: dts: Fix OpenBMC flash layout label addresses (Zev Weiss) 
- video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() (Dan Carpenter) 
- video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe() (Dan Carpenter) 
- video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() (Wang Hai) 
- video: fbdev: controlfb: Fix COMPILE_TEST build (YueHaibing) 
- video: fbdev: matroxfb: set maxvram of vbG200eW to the same as vbG200 to avoid black screen (Z. Liu) 
- media: aspeed: Correct value for h-total-pixels (Jammy Huang) 
- media: ov5648: Don't pack controls struct (Sakari Ailus) 
- media: v4l: Avoid unaligned access warnings when printing 4cc modifiers (Sakari Ailus) 
- media: ov6650: Fix set format try processing path (Janusz Krzysztofik) 
- media: hantro: Fix overfill bottom register field name (Chen-Yu Tsai) 
- media: meson: vdec: potential dereference of null pointer (Jiasheng Jiang) 
- media: coda: Fix missing put_device() call in coda_get_vdoa_data (Miaoqian Lin) 
- ASoC: simple-card-utils: Set sysclk on all components (Robert Hancock) 
- ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting (Robert Hancock) 
- ASoC: codecs: Check for error pointer after calling devm_regmap_init_mmio (Jiasheng Jiang) 
- ASoC: sh: rz-ssi: Drop calling rz_ssi_pio_recv() recursively (Lad Prabhakar) 
- media: atmel: atmel-sama7g5-isc: fix ispck leftover (Eugen Hristev) 
- media: bttv: fix WARNING regression on tunerless devices (Ondrej Zary) 
- media: imx: imx8mq-mipi_csi2: fix system resume (Martin Kepplinger) 
- media: imx: imx8mq-mipi-csi2: remove wrong irq config write operation (Martin Kepplinger) 
- media: mtk-vcodec: potential dereference of null pointer (Jiasheng Jiang) 
- media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls (Chen-Yu Tsai) 
- media: staging: media: imx: imx7-mipi-csis: Make subdev name unique (Laurent Pinchart) 
- media: camss: vfe-170: fix "VFE halt timeout" error (Jonathan Marek) 
- media: camss: csid-170: set the right HALT_CMD when disabled (Jonathan Marek) 
- media: camss: csid-170: don't enable unused irqs (Jonathan Marek) 
- media: camss: csid-170: fix non-10bit formats (Jonathan Marek) 
- media: staging: media: zoran: fix usage of vb2_dma_contig_set_max_seg_size (Corentin Labbe) 
- pinctrl: samsung: Remove EINT handler for Exynos850 ALIVE and CMGP gpios (Sam Protsenko) 
- kunit: make kunit_test_timeout compatible with comment (Peng Liu) 
- drivers/base/memory: add memory block to memory group after registration succeeded (David Hildenbrand) 
- selftests, x86: fix how check_cc.sh is being invoked (Guillaume Tucker) 
- f2fs: fix compressed file start atomic write may cause data corruption (Fengnan Chang) 
- btrfs: fix unexpected error path when reflinking an inline extent (Filipe Manana) 
- f2fs: fix to avoid potential deadlock (Chao Yu) 
- sched/rt: Plug rt_mutex_setprio() vs push_rt_task() race (Valentin Schneider) 
- sched/cpuacct: Fix charge percpu cpuusage (Chengming Zhou) 
- nfsd: more robust allocation failure handling in nfsd_file_cache_init (Amir Goldstein) 
- f2fs: fix missing free nid in f2fs_handle_failed_inode (Jaegeuk Kim) 
- sched/fair: Improve consistency of allowed NUMA balance calculations (Mel Gorman) 
- perf/x86/intel/pt: Fix address filter config for 32-bit kernel (Adrian Hunter) 
- perf/core: Fix address filter parser for multiple filters (Adrian Hunter) 
- rseq: Remove broken uapi field layout on 32-bit little endian (Mathieu Desnoyers) 
- sched/uclamp: Fix iowait boost escaping uclamp restriction (Qais Yousef) 
- sched/core: Export pelt_thermal_tp (Qais Yousef) 
- sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa (Bharata B Rao) 
- f2fs: fix to enable ATGC correctly via gc_idle sysfs interface (Chao Yu) 
- watch_queue: Actually free the watch (David Howells) 
- watch_queue: Fix NULL dereference in error cleanup (David Howells) 
- io_uring: terminate manual loop iterator loop correctly for non-vecs (Jens Axboe) 
- io_uring: don't check unrelated req->open.how in accept request (Jens Axboe) 
- clocksource: acpi_pm: fix return value of __setup handler (Randy Dunlap) 
- hwmon: (pmbus) Add Vin unit off handling (Brandon Wyman) 
- hwrng: nomadik - Change clk_disable to clk_disable_unprepare (Miaoqian Lin) 
- crypto: ccree - Fix use after free in cc_cipher_exit() (Jianglei Nie) 
- crypto: ccp - ccp_dmaengine_unregister release dma channels (Dāvis Mosāns) 
- ACPI: APEI: fix return value of __setup handlers (Randy Dunlap) 
- KEYS: trusted: Fix trusted key backends when building as module (Andreas Rammhold) 
- arm64: prevent instrumentation of bp hardening callbacks (Mark Rutland) 
- clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_init() (Guillaume Ranquet) 
- clocksource/drivers/timer-microchip-pit64b: Use notrace (Claudiu Beznea) 
- clocksource/drivers/exynos_mct: Handle DTS with higher number of interrupts (Krzysztof Kozlowski) 
- clocksource/drivers/exynos_mct: Refactor resources allocation (Marek Szyprowski) 
- clocksource/drivers/timer-ti-dm: Fix regression from errata i940 fix (Drew Fustini) 
- crypto: vmx - add missing dependencies (Petr Vorel) 
- crypto: gemini - call finalize with bh disabled (Corentin Labbe) 
- crypto: amlogic - call finalize with bh disabled (Corentin Labbe) 
- crypto: sun8i-ce - call finalize with bh disabled (Corentin Labbe) 
- crypto: sun8i-ss - call finalize with bh disabled (Corentin Labbe) 
- hwrng: atmel - disable trng on failure path (Claudiu Beznea) 
- spi: spi-zynqmp-gqspi: Handle error for dma_set_mask (Jiasheng Jiang) 
- PM: suspend: fix return value of __setup handler (Randy Dunlap) 
- PM: hibernate: fix __setup handler error handling (Randy Dunlap) 
- block: don't delete queue kobject before its children (Eric Biggers) 
- nvme: fix the check for duplicate unique identifiers (Christoph Hellwig) 
- nvme: cleanup __nvme_check_ids (Christoph Hellwig) 
- hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING (Armin Wolf) 
- hwmon: (pmbus) Add mutex to regulator ops (Patrick Rudolph) 
- spi: pxa2xx-pci: Balance reference count for PCI DMA device (Andy Shevchenko) 
- crypto: hisilicon/sec - fix the aead software fallback for engine (Kai Ye) 
- crypto: ccree - don't attempt 0 len DMA mappings (Gilad Ben-Yossef) 
- EVM: fix the evm= __setup handler return value (Randy Dunlap) 
- audit: log AUDIT_TIME_* records only from rules (Richard Guy Briggs) 
- crypto: rockchip - ECB does not need IV (Corentin Labbe) 
- selftests/sgx: Treat CC as one argument (Muhammad Usama Anjum) 
- selftests/x86: Add validity check and allow field splitting (Muhammad Usama Anjum) 
- blk-cgroup: set blkg iostat after percpu stat aggregation (Chengming Zhou) 
- arm64/mm: avoid fixmap race condition when create pud mapping (Jianyong Wu) 
- stack: Constrain and fix stack offset randomization with Clang builds (Marco Elver) 
- spi: tegra210-quad: Fix missin IRQ check in tegra_qspi_probe (Miaoqian Lin) 
- spi: tegra114: Add missing IRQ check in tegra_spi_probe (Miaoqian Lin) 
- crypto: octeontx2 - remove CONFIG_DM_CRYPT check (Shijith Thotton) 
- thermal: int340x: Check for NULL after calling kmemdup() (Jiasheng Jiang) 
- selinux: Fix selinux_sb_mnt_opts_compat() (Scott Mayhew) 
- crypto: mxs-dcp - Fix scatterlist processing (Tomas Paukrt) 
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Herbert Xu) 
- crypto: sun8i-ss - really disable hash on A80 (Corentin Labbe) 
- hwrng: cavium - HW_RANDOM_CAVIUM should depend on ARCH_THUNDER (Geert Uytterhoeven) 
- hwrng: cavium - Check health status while reading random data (Sunil Goutham) 
- crypto: ccp - Ensure psp_ret is always init'd in __sev_platform_init_locked() (Peter Gonda) 
- selinux: check return value of sel_make_avc_files (Christian Göttsche) 
- selinux: access superblock_security_struct in LSM blob way (GONG, Ruiqi) 
- regulator: qcom_smd: fix for_each_child.cocci warnings (kernel test robot) 
- PCI: xgene: Revert "PCI: xgene: Fix IB window setup" (Marc Zyngier) 
- PCI: pciehp: Clear cmd_busy bit in polling mode (Liguang Zhang) 
- PCI: imx6: Allow to probe when dw_pcie_wait_for_link() fails (Fabio Estevam) 
- drm/i915/gem: add missing boundary check in vm_access (Mastan Katragadda) 
- drm/i915/opregion: check port number bounds for SWSCI display power state (Jani Nikula) 
- brcmfmac: pcie: Fix crashes due to early IRQs (Hector Martin) 
- brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio (Hector Martin) 
- brcmfmac: pcie: Declare missing firmware files in pcie.c (Hector Martin) 
- brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path (Hector Martin) 
- brcmfmac: firmware: Allocate space for default boardrev in nvram (Hector Martin) 
- drm/fb-helper: Mark screen buffers in system memory with FBINFO_VIRTFB (Thomas Zimmermann) 
- drm/nouveau/backlight: Just set all backlight types as RAW (Lyude Paul) 
- drm/nouveau/backlight: Fix LVDS backlight detection on some laptops (Lyude Paul) 
- drm/syncobj: flatten dma_fence_chains on transfer (Christian König) 
- xtensa: fix xtensa_wsr always writing 0 (Max Filippov) 
- xtensa: fix stop_machine_cpuslocked call in patch_text (Max Filippov) 
- xtensa: define update_mmu_tlb function (Max Filippov) 
- btrfs: verify the tranisd of the to-be-written dirty extent buffer (Qu Wenruo) 
- btrfs: extend locking to all space_info members accesses (Niels Dossche) 
- btrfs: zoned: mark relocation as writing (Naohiro Aota) 
- media: davinci: vpif: fix unbalanced runtime PM enable (Johan Hovold) 
- media: davinci: vpif: fix unbalanced runtime PM get (Johan Hovold) 
- media: venus: venc: Fix h264 8x8 transform control (Stanimir Varbanov) 
- media: venus: hfi_cmds: List HDR10 property as unsupported for v1 and v3 (Stanimir Varbanov) 
- media: gpio-ir-tx: fix transmit with long spaces on Orange Pi PC (Sean Young) 
- DEC: Limit PMAX memory probing to R3k systems (Maciej W. Rozycki) 
- PM: domains: Fix sleep-in-atomic bug caused by genpd_debug_remove() (Shawn Guo) 
- bcache: fixup multiple threads crash (Mingzhe Zou) 
- crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete() (Eric Biggers) 
- crypto: rsa-pkcs1pad - restore signature length check (Eric Biggers) 
- crypto: rsa-pkcs1pad - correctly get hash from source scatterlist (Eric Biggers) 
- crypto: rsa-pkcs1pad - only allow with rsa (Eric Biggers) 
- exec: Force single empty string when argv is empty (Kees Cook) 
- lib/raid6/test: fix multiple definition linking error (Dirk Müller) 
- thermal: int340x: Increase bitmap size (Srinivas Pandruvada) 
- pstore: Don't use semaphores in always-atomic-context code (Jann Horn) 
- carl9170: fix missing bit-wise or operator for tx_params (Colin Ian King) 
- mgag200 fix memmapsl configuration in GCTL6 register (Jocelyn Falempe) 
- ARM: dts: exynos: add missing HDMI supplies on SMDK5420 (Krzysztof Kozlowski) 
- ARM: dts: exynos: add missing HDMI supplies on SMDK5250 (Krzysztof Kozlowski) 
- ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 (Krzysztof Kozlowski) 
- ARM: dts: at91: sama5d2: Fix PMERRLOC resource size (Tudor Ambarus) 
- ARM: dts: at91: sama7g5: Remove unused properties in i2c nodes (Tudor Ambarus) 
- rfkill: make new event layout opt-in (Johannes Berg) 
- video: fbdev: atari: Atari 2 bpp (STe) palette bugfix (Michael Schmitz) 
- video: fbdev: sm712fb: Fix crash in smtcfb_read() (Helge Deller) 
- fbdev: Hot-unplug firmware fb devices on forced removal (Thomas Zimmermann) 
- drm/edid: check basic audio support on CEA extension block (Cooper Chiou) 
- block: don't merge across cgroup boundaries if blkcg is enabled (Tejun Heo) 
- block: limit request dispatch loop duration (Shin'ichiro Kawasaki) 
- mailbox: tegra-hsp: Flush whole channel (Pekka Pessi) 
- landlock: Use square brackets around "landlock-ruleset" (Christian Brauner) 
- samples/landlock: Fix path_list memory leak (Tom Rix) 
- drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() (Duoming Zhou) 
- ext4: make mb_optimize_scan performance mount option work with extents (Ojaswin Mujoo) 
- ext4: fix fs corruption when tring to remove a non-empty directory with IO error (Ye Bin) 
- ext4: fix ext4_fc_stats trace point (Ritesh Harjani) 
- coredump: Also dump first pages of non-executable ELF libraries (Jann Horn) 
- ACPI: properties: Consistently return -ENOENT if there are no more references (Sakari Ailus) 
- Revert "ACPI: Pass the same capabilities to the _OSC regardless of the query flag" (Rafael J. Wysocki) 
- ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM (Ammar Faizi) 
- arm64: dts: ti: k3-am64: Fix gic-v3 compatible regs (Nishanth Menon) 
- arm64: dts: ti: k3-j7200: Fix gic-v3 compatible regs (Nishanth Menon) 
- arm64: dts: ti: k3-j721e: Fix gic-v3 compatible regs (Nishanth Menon) 
- arm64: dts: ti: k3-am65: Fix gic-v3 compatible regs (Nishanth Menon) 
- arm64: dts: qcom: sm8250: Fix MSI IRQ for PCIe1 and PCIe2 (Manivannan Sadhasivam) 
- arm64: Do not defer reserve_crashkernel() for platforms with no DMA memory zones (Vijay Balakrishna) 
- arm64: signal: nofpsimd: Do not allocate fp/simd context when not available (David Engraf) 
- PCI: fu740: Force 2.5GT/s for initial device probe (Ben Dooks) 
- powerpc/kvm: Fix kvm_use_magic_page (Andreas Gruenbacher) 
- drbd: fix potential silent data corruption (Lars Ellenberg) 
- tracing: Have trace event string test handle zero length strings (Steven Rostedt (Google)) 
- dm integrity: set journal entry unused when shrinking device (Mikulas Patocka) 
- dm: fix double accounting of flush with data (Mike Snitzer) 
- dm: interlock pending dm_io and dm_wait_for_bios_completion (Mike Snitzer) 
- dm: fix use-after-free in dm_cleanup_zoned_dev() (Kirill Tkhai) 
- dm stats: fix too short end duration_ns when using precise_timestamps (Mike Snitzer) 
- mm/kmemleak: reset tag when compare object pointer (Kuan-Ying Lee) 
- mm,hwpoison: unmap poisoned page before invalidation (Rik van Riel) 
- Revert "mm: madvise: skip unmapped vma holes passed to process_madvise" (Charan Teja Kalla) 
- mm: madvise: return correct bytes advised with process_madvise (Charan Teja Kalla) 
- mm: madvise: skip unmapped vma holes passed to process_madvise (Charan Teja Kalla) 
- drm/simpledrm: Add "panel orientation" property on non-upright mounted LCD panels (Hans de Goede) 
- ocfs2: fix crash when mount with quota enabled (Joseph Qi) 
- rtc: pl031: fix rtc features null pointer dereference (Ali Pouladi) 
- rtc: mc146818-lib: fix locking in mc146818_set_time (Mateusz Jończyk) 
- ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020 (Kai-Heng Feng) 
- ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock (Takashi Iwai) 
- ALSA: hda: Avoid unsol event during RPM suspending (Mohan Kumar) 
- ALSA: cs4236: fix an incorrect NULL check on list iterator (Xiaomeng Tong) 
- cifs: fix NULL ptr dereference in smb2_ioctl_query_info() (Paulo Alcantara) 
- cifs: prevent bad output lengths in smb2_ioctl_query_info() (Paulo Alcantara) 
- Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" (José Expósito) 
- riscv: Increase stack size under KASAN (Dmitry Vyukov) 
- riscv: Fix fill_callchain return value (Nikita Shubin) 
- riscv: dts: canaan: Fix SPI3 bus width (Niklas Cassel) 
- qed: validate and restrict untrusted VFs vlan promisc mode (Manish Chopra) 
- qed: display VF trust config (Manish Chopra) 
- scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands (Damien Le Moal) 
- scsi: scsi_transport_fc: Fix FPIN Link Integrity statistics counters (James Smart) 
- scsi: ufs: Fix runtime PM messages never-ending cycle (Adrian Hunter) 
- scsi: core: sd: Add silence_suspend flag to suppress some PM messages (Adrian Hunter) 
- mempolicy: mbind_range() set_policy() after vma_merge() (Hugh Dickins) 
- mm: invalidate hwpoison page cache page in fault path (Rik van Riel) 
- mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node (Alistair Popple) 
- mm: fs: fix lru_cache_disabled race in bh_lru (Minchan Kim) 
- jffs2: fix memory leak in jffs2_scan_medium (Baokun Li) 
- jffs2: fix memory leak in jffs2_do_mount_fs (Baokun Li) 
- jffs2: fix use-after-free in jffs2_clear_xattr_subsystem (Baokun Li) 
- can: m_can: m_can_tx_handler(): fix use after free of skb (Marc Kleine-Budde) 
- mtd: rawnand: protect access to rawnand devices while in suspend (Sean Nyekjaer) 
- spi: mxic: Fix the transmit path (Miquel Raynal) 
- net: bnxt_ptp: fix compilation error (Damien Le Moal) 
- pinctrl: samsung: drop pin banks references on error paths (Krzysztof Kozlowski) 
- pinctrl: ingenic: Fix regmap on X series SoCs (Aidan MacDonald) 
- mm/mlock: fix two bugs in user_shm_lock() (Miaohe Lin) 
- remoteproc: Fix count check in rproc_coredump_write() (Alistair Delva) 
- f2fs: fix to do sanity check on .cp_pack_total_block_count (Chao Yu) 
- f2fs: quota: fix loop condition at f2fs_quota_sync() (Juhyung Park) 
- f2fs: fix to unlock page correctly in error path of is_alive() (Chao Yu) 
- NFSD: prevent integer overflow on 32 bit systems (Dan Carpenter) 
- NFSD: prevent underflow in nfssvc_decode_writeargs() (Dan Carpenter) 
- NFS: NFSv2/v3 clients should never be setting NFS_CAP_XATTR (Trond Myklebust) 
- SUNRPC: avoid race between mod_timer() and del_timer_sync() (NeilBrown) 
- HID: intel-ish-hid: Use dma_alloc_coherent for firmware update (Gwendal Grignou) 
- firmware: sysfb: fix platform-device leak in error path (Johan Hovold) 
- firmware: stratix10-svc: add missing callback parameter on RSU (Ang Tien Sung) 
- Documentation: update stable tree link (Bagas Sanjaya) 
- Documentation: add link to stable release candidate tree (Bagas Sanjaya) 
- KEYS: asymmetric: properly validate hash_algo and encoding (Eric Biggers) 
- KEYS: asymmetric: enforce that sig algo matches key algo (Eric Biggers) 
- KEYS: fix length validation in keyctl_pkey_params_get_2() (Eric Biggers) 
- cifs: we do not need a spinlock around the tree access during umount (Ronnie Sahlberg) 
- cifs: fix handlecache and multiuser (Ronnie Sahlberg) 
- clk: uniphier: Fix fixed-rate initialization (Kunihiko Hayashi) 
- clk: rockchip: re-add rational best approximation algorithm to the fractional divider (Quentin Schulz) 
- greybus: svc: fix an error handling bug in gb_svc_hello() (Dan Carpenter) 
- iio: inkern: make a best effort on offset calculation (Liam Beguin) 
- iio: inkern: apply consumer scale when no channel scale is available (Liam Beguin) 
- iio: inkern: apply consumer scale on IIO_VAL_INT cases (Liam Beguin) 
- iio: afe: rescale: use s64 for temporary scale calculations (Liam Beguin) 
- coresight: syscfg: Fix memleak on registration failure in cscfg_create_device (Miaoqian Lin) 
- coresight: Fix TRCCONFIGR.QE sysfs interface (James Clark) 
- docs: sphinx/requirements: Limit jinja2<3.1 (Akira Yokosawa) 
- bus: mhi: Fix MHI DMA structure endianness (Paul Davey) 
- bus: mhi: pci_generic: Add mru_default for Quectel EM1xx series (Yonglin Tan) 
- mei: avoid iterator usage outside of list_for_each_entry (Alexander Usyskin) 
- mei: me: add Alder Lake N device id. (Alexander Usyskin) 
- xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx() (Anssi Hannula) 
- xhci: make xhci_handshake timeout for xhci_reset() adjustable (Mathias Nyman) 
- xhci: fix runtime PM imbalance in USB2 resume (Henry Lin) 
- xhci: fix garbage USBSTS being logged in some cases (Anssi Hannula) 
- USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c (Alan Stern) 
- usb: typec: tipd: Forward plug orientation to typec subsystem (Sven Peter) 
- tpm: fix reference counting for struct tpm_chip (Lino Sanfilippo) 
- virtio-blk: Use blk_validate_block_size() to validate block size (Xie Yongji) 
- iommu/iova: Improve 32-bit free space estimate (Robin Murphy) 
- drm/amdgpu: only check for _PR3 on dGPUs (Alex Deucher) 
- drm/amdgpu: move PX checking into amdgpu_device_ip_early_init (Alex Deucher) 
- locking/lockdep: Avoid potential access of invalid memory in lock_class (Waiman Long) 
- selftests: vm: fix clang build error multiple output files (Yosry Ahmed) 
- net: dsa: microchip: add spi_device_id tables (Claudiu Beznea) 
- Input: zinitix - do not report shadow fingers (Linus Walleij) 
- spi: Fix erroneous sgs value with min_t() (Biju Das) 
- Revert "gpio: Revert regression in sysfs-gpio (gpiolib.c)" (Bartosz Golaszewski) 
- net:mcf8390: Use platform_get_irq() to get the interrupt (Minghao Chi (CGEL ZTE)) 
- spi: Fix invalid sgs value (Biju Das) 
- gpio: Revert regression in sysfs-gpio (gpiolib.c) (Marcelo Roberto Jimenez) 
- ethernet: sun: Free the coherent when failing in probing (Zheyu Ma) 
- tools/virtio: fix virtio_test execution (Stefano Garzarella) 
- vdpa/mlx5: should verify CTRL_VQ feature exists for MQ (Si-Wei Liu) 
- virtio_console: break out of buf poll on remove (Michael S. Tsirkin) 
- ARM: mstar: Select HAVE_ARM_ARCH_TIMER (Daniel Palmer) 
- xfrm: fix tunnel model fragmentation behavior (Lina Wang) 
- HID: Add support for open wheel and no attachment to T300 (Michael Hübner) 
- HID: logitech-dj: add new lightspeed receiver id (Lucas Zampieri) 
- hv: utils: add PTP_1588_CLOCK to Kconfig to fix build (Randy Dunlap) 
- mm: kfence: fix missing objcg housekeeping for SLAB (Muchun Song) 
- USB: serial: simple: add Nokia phone driver (Johan Hovold) 
- USB: serial: pl2303: fix GS type detection (Johan Hovold) 
- dt-bindings: usb: hcd: correct usb-device path (Krzysztof Kozlowski) 
- USB: serial: pl2303: add IBM device IDs (Eddie James) 
- Revert "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" (Linus Torvalds) 
- LTS version: v5.15.32 (Jack Vogel) 
- llc: only change llc->dev when bind() succeeds (Eric Dumazet) 
- nds32: fix access_ok() checks in get/put_user (Arnd Bergmann) 
- m68k: fix access_ok for coldfire (Arnd Bergmann) 
- wcn36xx: Differentiate wcn3660 from wcn3620 (Bryan O'Donoghue) 
- tpm: use try_get_ops() in tpm-space.c (James Bottomley) 
- mac80211: fix potential double free on mesh join (Linus Lüssing) 
- uaccess: fix integer overflow on access_ok() (Arnd Bergmann) 
- rcu: Don't deboost before reporting expedited quiescent state (Paul E. McKenney) 
- drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free() (Roberto Sassu) 
- Revert "ath: add support for special 0x0 regulatory domain" (Brian Norris) 
- Bluetooth: btusb: Add one more Bluetooth part for the Realtek RTL8852AE (Larry Finger) 
- crypto: qat - disable registration of algorithms (Giovanni Cabiddu) 
- ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU (Werner Sembach) 
- ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3 (Maximilian Luz) 
- ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board (Mark Cilissen) 
- drivers: net: xgene: Fix regression in CRC stripping (Stephane Graber) 
- ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec (Giacomo Guiduzzi) 
- ALSA: cmipci: Restore aux vol on suspend/resume (Jonathan Teh) 
- ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB (Lars-Peter Clausen) 
- ALSA: pcm: Add stream lock during PCM reset ioctl operations (Takashi Iwai) 
- ALSA: hda/realtek: Add quirk for ASUS GA402 (Jason Zheng) 
- ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 (huangwenhui) 
- ALSA: hda/realtek: Add quirk for Clevo NP50PNJ (Tim Crawford) 
- ALSA: hda/realtek: Add quirk for Clevo NP70PNJ (Tim Crawford) 
- ALSA: usb-audio: add mapping for new Corsair Virtuoso SE (Reza Jahanbakhshi) 
- ALSA: oss: Fix PCM OSS buffer allocation overflow (Takashi Iwai) 
- ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call (Takashi Iwai) 
- llc: fix netdevice reference leaks in llc_ui_bind() (Eric Dumazet) 
- Bluetooth: btusb: Add another Realtek 8761BU (Helmut Grohne) 
- tpm: Fix error handling in async work (Tadeusz Struk) 
- net: ipv6: fix skb_over_panic in __ip6_append_data (Tadeusz Struk) 
- nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION (Jordy Zomer) 
- LTS version: v5.15.31 (Jack Vogel) 
- perf symbols: Fix symbol size calculation condition (Michael Petlan) 
- Input: aiptek - properly check endpoint type (Pavel Skripkin) 
- scsi: mpt3sas: Page fault in reply q processing (Matt Lupfer) 
- usb: usbtmc: Fix bug in pipe direction for control transfers (Alan Stern) 
- usb: gadget: Fix use-after-free bug by not setting udc->dev.driver (Alan Stern) 
- usb: gadget: rndis: prevent integer overflow in rndis_set_response() (Dan Carpenter) 
- arm64: fix clang warning about TRAMP_VALIAS (Arnd Bergmann) 
- iavf: Fix hang during reboot/shutdown (Ivan Vecera) 
- net: mscc: ocelot: fix backwards compatibility with single-chain tc-flower offload (Vladimir Oltean) 
- net: bcmgenet: skip invalid partial checksums (Doug Berger) 
- bnx2x: fix built-in kernel driver load failure (Manish Chopra) 
- net: phy: mscc: Add MODULE_FIRMWARE macros (Juerg Haefliger) 
- net: dsa: Add missing of_node_put() in dsa_port_parse_of (Miaoqian Lin) 
- drm: Don't make DRM_PANEL_BRIDGE dependent on DRM_KMS_HELPERS (Thomas Zimmermann) 
- net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit() (Nicolas Dichtel) 
- drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings (Marek Vasut) 
- drm/imx: parallel-display: Remove bus flags check in imx_pd_bridge_atomic_check() (Christoph Niedermaier) 
- hv_netvsc: Add check for kvmalloc_array (Jiasheng Jiang) 
- iavf: Fix double free in iavf_reset_task (Przemyslaw Patynowski) 
- atm: eni: Add check for dma_map_single (Jiasheng Jiang) 
- net/packet: fix slab-out-of-bounds access in packet_recvmsg() (Eric Dumazet) 
- net: phy: marvell: Fix invalid comparison in the resume and suspend functions (Kurt Cancemi) 
- esp6: fix check on ipv6_skip_exthdr's return value (Sabrina Dubroca) 
- vsock: each transport cycles only on its own sockets (Jiyong Park) 
- alx: acquire mutex for alx_reinit in alx_change_mtu (Niels Dossche) 
- efi: fix return value of __setup handlers (Randy Dunlap) 
- drm/mgag200: Fix PLL setup for g200wb and g200ew (Jocelyn Falempe) 
- block: release rq qos structures for queue without disk (Ming Lei) 
- mm: swap: get rid of livelock in swapin readahead (Guo Ziliang) 
- ocfs2: fix crash when initialize filecheck kobj fails (Joseph Qi) 
- crypto: qcom-rng - ensure buffer for generate is completely filled (Brian Masney) 
- bpf/selftests: Test PTR_TO_RDONLY_MEM (Hao Luo)  [Orabug: 34358256]
- bpf: Add MEM_RDONLY for helper args that are pointers to rdonly mem. (Hao Luo)  [Orabug: 34358256]
- bpf: Make per_cpu_ptr return rdonly PTR_TO_MEM. (Hao Luo)  [Orabug: 34358256]
- bpf: Convert PTR_TO_MEM_OR_NULL to composable types. (Hao Luo)  [Orabug: 34358256]
- bpf: Introduce MEM_RDONLY flag (Hao Luo)  [Orabug: 34358256]
- bpf: Replace PTR_TO_XXX_OR_NULL with PTR_TO_XXX | PTR_MAYBE_NULL (Hao Luo)  [Orabug: 34358256]
- bpf: Replace RET_XXX_OR_NULL with RET_XXX | PTR_MAYBE_NULL (Hao Luo)  [Orabug: 34358256]
- bpf: Replace ARG_XXX_OR_NULL with ARG_XXX | PTR_MAYBE_NULL (Hao Luo)  [Orabug: 34358256]
- bpf: Introduce composable reg, ret and arg types. (Hao Luo)  [Orabug: 34358256]
- RDS/IB:  Fix RDS IB SRQ implementation and tune it (Hans Westgaard Ry)  [Orabug: 34351577]
- RDS/IB: Introduce bit_flag routines with memory-barrier for bit flags (Hans Westgaard Ry)  [Orabug: 34351577]
- rds: ib: Qualify RNR Retry Timer check with firmware version (Freddy Carrillo)  [Orabug: 34330921]
- mm/page_alloc: reuse tail struct pages for compound devmaps (Joao Martins)  [Orabug: 34319096]
- mm/sparse-vmemmap: improve memory savings for compound devmaps (Joao Martins)  [Orabug: 34319096]
- mm/sparse-vmemmap: refactor core of vmemmap_populate_basepages() to helper (Joao Martins)  [Orabug: 34319096]
- mm/sparse-vmemmap: add a pgmap argument to section activation (Joao Martins)  [Orabug: 34319096]
- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Pablo Neira Ayuso)  [Orabug: 34247340]  {CVE-2022-32250}
- uek-rpm/ol/config-aarch64: Enable CONFIG_ARM_RASPBERRYPI_CPUFREQ for RPi (Vijay Kumar)  [Orabug: 33832414]
- topology/sysfs: Hide PPIN on systems that do not support it. (Tony Luck)  [Orabug: 34018367]
- topology/sysfs: Add PPIN in sysfs under cpu topology (Tony Luck)  [Orabug: 34018367]
- topology/sysfs: Add format parameter to macro defining "show" functions for proc (Tony Luck)  [Orabug: 34018367]
- topology/sysfs: rework book and drawer topology ifdefery (Heiko Carstens)  [Orabug: 34018367]
- x86/cpu: Read/save PPIN MSR during initialization (Tony Luck)  [Orabug: 34018367]
- x86/cpu: X86_FEATURE_INTEL_PPIN finally has a CPUID bit (Tony Luck)  [Orabug: 34018367]
- x86/cpu: Merge Intel and AMD ppin_init() functions (Tony Luck)  [Orabug: 34018367]
- SUNRPC: Ensure we flush any closed sockets before xs_xprt_free() (Trond Myklebust)  [Orabug: 34064432]  {CVE-2022-28893}
- selftests/bpf: add tests verifying unprivileged bpf behaviour (Alan Maguire)  [Orabug: 34088278]
- bpf: refine kernel.unprivileged_bpf_disabled behaviour (Alan Maguire)  [Orabug: 34088278]
- uek-rpm: Add modules to core rpm to allow kselftest rtnetlink tests pass (Somasundaram Krishnasamy)  [Orabug: 34124398]
- net/rds: Fix "use-after-free" warning (Gerd Rausch)  [Orabug: 34137931]
- assoc_array: Fix BUG_ON during garbage collect (Stephen Brennan)  [Orabug: 34162062]
- uek-rpm: Enable prerequisites for Secure Boot support (Eric Snowberg)  [Orabug: 34206120]
- ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE (Jann Horn)  [Orabug: 34223453]  {CVE-2022-30594}
- scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan (Chandrakanth patil)  [Orabug: 34242799]
- mm/memcontrol: export memcg->watermark via sysfs for v2 memcg (Kamalesh Babulal)  [Orabug: 34250986]
- rds: Include congested flag in rds_sock struct. (Rohit Nair)  [Orabug: 34261489]
- cpu/hotplug: Allow the CPU in CPU_UP_PREPARE state to be brought up again. (Longpeng(Mike))  [Orabug: 34271922]
- x86/xen: Allow to retry if cpu_initialize_context() failed. (Boris Ostrovsky)  [Orabug: 34271922]
- mstflint_access: Update driver code to v4.20.1-1 from Github (Qing Huang)  [Orabug: 34286146]
- net/rds: No shortcut out of RDS_CONN_ERROR (Gerd Rausch)  [Orabug: 34276062]
- net/rds: Don't force state RDS_CONN_RESETTING (Gerd Rausch)  [Orabug: 34276062]
- net/rds: Preserve essential connection state flags (Gerd Rausch)  [Orabug: 34276062]
- Revert "uek-rpm: Add crashkernel.default file" (John Donnelly)  [Orabug: 34280005]
- A/A Bonding: Add support for NETDEV_CHANGEADDR notifiers (Gerd Rausch)  [Orabug: 34285239]
- rdmaip: Flush ARP cache after address has been cleared (Gerd Rausch)  [Orabug: 34285239]




More information about the El-errata mailing list