[El-errata] ELBA-2022-9584 Oracle Linux 7 Unbreakable Enterprise kernel bug fix update

[Errata Announcements for Oracle Linux]

Oracle Linux Bug Fix Advisory ELBA-2022-9584

http://linux.oracle.com/errata/ELBA-2022-9584.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-5.4.17-2136.309.4.el7uek.x86_64.rpm
kernel-uek-debug-5.4.17-2136.309.4.el7uek.x86_64.rpm
kernel-uek-debug-devel-5.4.17-2136.309.4.el7uek.x86_64.rpm
kernel-uek-devel-5.4.17-2136.309.4.el7uek.x86_64.rpm
kernel-uek-doc-5.4.17-2136.309.4.el7uek.noarch.rpm
kernel-uek-tools-5.4.17-2136.309.4.el7uek.x86_64.rpm

aarch64:
kernel-uek-5.4.17-2136.309.4.el7uek.aarch64.rpm
kernel-uek-debug-5.4.17-2136.309.4.el7uek.aarch64.rpm
kernel-uek-debug-devel-5.4.17-2136.309.4.el7uek.aarch64.rpm
kernel-uek-devel-5.4.17-2136.309.4.el7uek.aarch64.rpm
kernel-uek-doc-5.4.17-2136.309.4.el7uek.noarch.rpm
kernel-uek-tools-5.4.17-2136.309.4.el7uek.aarch64.rpm
kernel-uek-tools-libs-5.4.17-2136.309.4.el7uek.aarch64.rpm
perf-5.4.17-2136.309.4.el7uek.aarch64.rpm
python-perf-5.4.17-2136.309.4.el7uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-5.4.17-2136.309.4.el7uek.src.rpm



Description of changes:

[5.4.17-2136.309.4.el7uek]
- topology/sysfs: Hide PPIN on systems that do not support it. (Tony Luck)  [Orabug: 34018387]
- topology/sysfs: Add PPIN in sysfs under cpu topology (Tony Luck)  [Orabug: 34018387]
- topology/sysfs: Add format parameter to macro defining "show" functions for proc (Tony Luck)  [Orabug: 34018387]
- topology/sysfs: rework book and drawer topology ifdefery (Heiko Carstens)  [Orabug: 34018387]
- x86/cpu: Read/save PPIN MSR during initialization (Tony Luck)  [Orabug: 34018387]
- x86/cpu: X86_FEATURE_INTEL_PPIN finally has a CPUID bit (Tony Luck)  [Orabug: 34018387]
- x86/cpu: Merge Intel and AMD ppin_init() functions (Tony Luck)  [Orabug: 34018387]
- x86/cpu: Add Xeon Icelake-D to list of CPUs that support PPIN (Tony Luck)  [Orabug: 34018387]
- x86/mce: Enable additional error logging on certain Intel CPUs (Tony Luck)  [Orabug: 34018387]
- bpf: refine kernel.unprivileged_bpf_disabled behaviour (Alan Maguire)  [Orabug: 34088279]
- assoc_array: Fix BUG_ON during garbage collect (Stephen Brennan)  [Orabug: 34162063]
- sched/rt: Disable RT_RUNTIME_SHARE by default (Daniel Bristot de Oliveira)  [Orabug: 34201289]
- mm/memcontrol: export memcg->watermark via sysfs for v2 memcg (Kamalesh Babulal)  [Orabug: 34250845]
- rds: Include congested flag in rds_sock struct. (Rohit Nair)  [Orabug: 34261490]
- net/rds: No shortcut out of RDS_CONN_ERROR (Gerd Rausch)  [Orabug: 34276064]
- net/rds: Don't force state RDS_CONN_RESETTING (Gerd Rausch)  [Orabug: 34276064]
- net/rds: Preserve essential connection state flags (Gerd Rausch)  [Orabug: 34276064]
- A/A Bonding: Add support for NETDEV_CHANGEADDR notifiers (Gerd Rausch)  [Orabug: 34285240]
- rdmaip: Flush ARP cache after address has been cleared (Gerd Rausch)  [Orabug: 34285240]
- mstflint_access: Update driver code to v4.20.1-1 from Github (Qing Huang)  [Orabug: 34286147]

[5.4.17-2136.309.3.el7uek]
- io_uring: always grab file table for deferred statx (Jens Axboe)  [Orabug: 34232977]
- io_uring: fix race between timeout flush and removal (Jens Axboe)  [Orabug: 34232977]
- io_uring: don't touch scm_fp_list after queueing skb (Pavel Begunkov)  [Orabug: 34232977]
- io_uring: fix memory leak of uid in files registration (Pavel Begunkov)  [Orabug: 34232977]
- io_uring: terminate manual loop iterator loop correctly for non-vecs (Jens Axboe)  [Orabug: 34232977]
- io_uring: return back safer resurrect (Pavel Begunkov)  [Orabug: 34232977]
- io_uring: add a schedule point in io_add_buffers() (Eric Dumazet)  [Orabug: 34232977]
- io_uring: don't take uring_lock during iowq cancel (Pavel Begunkov)  [Orabug: 34232977]
- io_uring: fix splice_fd_in checks backport typo (Kamal Mostafa)  [Orabug: 34232977]
- io_uring: put provided buffer meta data under memcg accounting (Jens Axboe)  [Orabug: 34232977]
- io_uring: ensure symmetry in handling iter types in loop_rw_iter() (Jens Axboe)  [Orabug: 34232977]
- io_uring: remove duplicated io_size from rw (Pavel Begunkov)  [Orabug: 34232977]
- fs/io_uring Don't use the return value from import_iovec(). (David Laight)  [Orabug: 34232977]
- io_uring: fail links of cancelled timeouts (Pavel Begunkov)  [Orabug: 34232977]
- io_uring: add ->splice_fd_in checks (Pavel Begunkov)  [Orabug: 34232977]
- io_uring: place fixed tables under memcg limits (Pavel Begunkov)  [Orabug: 34232977]
- io_uring: limit fixed table size by RLIMIT_NOFILE (Pavel Begunkov)  [Orabug: 34232977]
- io_uring: IORING_OP_WRITE needs hash_reg_file set (Jens Axboe)  [Orabug: 34232977]
- io_uring: only assign io_uring_enter() SQPOLL error in actual error case (Jens Axboe)  [Orabug: 34232977]
- io_uring: fix xa_alloc_cycle() error return value check (Jens Axboe)  [Orabug: 34232977]
- io_uring: fix null-ptr-deref in io_sq_offload_start() (Yang Yingliang)  [Orabug: 34232977]
- io_uring: fix link timeout refs (Pavel Begunkov)  [Orabug: 34232977]
- io_uring: remove double poll entry on arm failure (Pavel Begunkov)  [Orabug: 34232977]
- io_uring: explicitly count entries for poll reqs (Pavel Begunkov)  [Orabug: 34232977]
- io_uring: fix clear IORING_SETUP_R_DISABLED in wrong function (Yang Yingliang)  [Orabug: 34232977]
- io_uring: convert io_buffer_idr to XArray (Jens Axboe)  [Orabug: 34232977]
- io_uring: Convert personality_idr to XArray (Matthew Wilcox (Oracle))  [Orabug: 34232977]
- io_uring: simplify io_remove_personalities() (Yejune Deng)  [Orabug: 34232977]
- io_uring: fix blocking inline submission (Pavel Begunkov)  [Orabug: 34232977]
- integrity: Load certs from the EFI MOK config table (Lenny Szubowicz)  [Orabug: 33565913]
- integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz)  [Orabug: 33565913]
- cifs: Avoid doing network I/O while holding cache lock (Paulo Alcantara (SUSE))  [Orabug: 34081086]
- cifs: Fix potential deadlock when updating vol in cifs_reconnect() (Paulo Alcantara (SUSE))  [Orabug: 34081086]
- cifs: Merge is_path_valid() into get_normalized_path() (Paulo Alcantara (SUSE))  [Orabug: 34081086]
- cifs: Introduce helpers for finding TCP connection (Paulo Alcantara (SUSE))  [Orabug: 34081086]
- cifs: Get rid of kstrdup_const()'d paths (Paulo Alcantara (SUSE))  [Orabug: 34081086]
- cifs: Clean up DFS referral cache (Paulo Alcantara (SUSE))  [Orabug: 34081086]
- kvm/x86: Inherit userspace's core scheduling cookie (Boris Ostrovsky)  [Orabug: 34195868]
- vhost: Inherit userspace's core scheduling cookie (Boris Ostrovsky)  [Orabug: 34195868]
- sched: Add interface for copying core scheduling cookie between two tasks (Boris Ostrovsky)  [Orabug: 34195868]
- net/mlx4: Increase num_srq in low_mem_profile (Dave Kleikamp)  [Orabug: 34227996]
- uek-rpm: update kabi OL7 with USM syms (John Donnelly)  [Orabug: 34233940]
- uek-rpm: update kabi OL8 with USM syms (John Donnelly)  [Orabug: 34233940]
- net/rds: Fix "use-after-free" warning (Gerd Rausch)  [Orabug: 34237787]
- cpu/hotplug: Allow the CPU in CPU_UP_PREPARE state to be brought up again. (Longpeng(Mike))  [Orabug: 34271923]
- x86/xen: Allow to retry if cpu_initialize_context() failed. (Boris Ostrovsky)  [Orabug: 34271923]

[5.4.17-2136.309.2.el7uek]
- LTS tag: v5.4.196 (Sherry Yang) 
- afs: Fix afs_getattr() to refetch file status if callback break occurred (David Howells) 
- i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe() (Yang Yingliang) 
- x86/xen: Mark cpu_bringup_and_idle() as dead_end_function (Peter Zijlstra) 
- x86/xen: fix booting 32-bit pv guest (Juergen Gross) 
- Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" (Linus Torvalds) 
- ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk (Abel Vesa) 
- firmware_loader: use kernel credentials when reading firmware (Thiébaud Weksteen) 
- net: stmmac: disable Split Header (SPH) for Intel platforms (Tan Tee Min) 
- block: return ELEVATOR_DISCARD_MERGE if possible (Ming Lei) 
- Input: ili210x - fix reset timing (Marek Vasut) 
- net: atlantic: verify hw_head_ lies within TX buffer ring (Grant Grundler) 
- net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe() (Yang Yingliang) 
- ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one() (Yang Yingliang) 
- selftests: add ping test with ping_group_range tuned (Nicolas Dichtel) 
- mac80211: fix rx reordering with non explicit / psmp ack policy (Felix Fietkau) 
- scsi: qla2xxx: Fix missed DMA unmap for aborted commands (Gleb Chesnokov) 
- perf bench numa: Address compiler error on s390 (Thomas Richter) 
- gpio: mvebu/pwm: Refuse requests with inverted polarity (Uwe Kleine-König) 
- gpio: gpio-vf610: do not touch other bits when set the target bit (Haibo Chen) 
- net: bridge: Clear offload_fwd_mark when passing frame up bridge interface. (Andrew Lunn) 
- igb: skip phy status check where unavailable (Kevin Mitchell) 
- ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2 (Ard Biesheuvel) 
- ARM: 9196/1: spectre-bhb: enable for Cortex-A15 (Ard Biesheuvel) 
- net: af_key: add check for pfkey_broadcast in function pfkey_process (Jiasheng Jiang) 
- net/mlx5e: Properly block LRO when XDP is enabled (Maxim Mikityanskiy) 
- NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc (Duoming Zhou) 
- net/qla3xxx: Fix a test in ql_reset_work() (Christophe JAILLET) 
- clk: at91: generated: consider range when calculating best rate (Codrin Ciubotariu) 
- ice: fix possible under reporting of ethtool Tx and Rx statistics (Paul Greenwalt) 
- net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() (Zixuan Fu) 
- net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() (Zixuan Fu) 
- net/sched: act_pedit: sanitize shift argument before usage (Paolo Abeni) 
- net: macb: Increment rx bd head after allocating skb and buffer (Harini Katakam) 
- ARM: dts: aspeed-g6: fix SPI1/SPI2 quad pin group (Jae Hyun Yoo) 
- ARM: dts: aspeed-g6: remove FWQSPID group in pinctrl dtsi (Jae Hyun Yoo) 
- dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace (Jérôme Pouiller) 
- drm/dp/mst: fix a possible memory leak in fetch_monitor_name() (Hangyu Hua) 
- crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ (Ondrej Mosnacek) 
- KVM: x86/mmu: Update number of zapped pages even if page list is stable (Sean Christopherson) 
- PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold (Rafael J. Wysocki) 
- Fix double fget() in vhost_net_set_backend() (Al Viro) 
- ALSA: wavefront: Proper check of get_user() error (Takashi Iwai) 
- SUNRPC: Ensure we flush any closed sockets before xs_xprt_free() (Meena Shanmugam) 
- SUNRPC: Don't call connect() more than once on a TCP socket (Meena Shanmugam) 
- SUNRPC: Prevent immediate close+reconnect (Meena Shanmugam) 
- SUNRPC: Clean up scheduling of autoclose (Meena Shanmugam) 
- mmc: core: Default to generic_cmd6_time as timeout in __mmc_switch() (Ulf Hansson) 
- mmc: block: Use generic_cmd6_time when modifying INAND_CMD38_ARG_EXT_CSD (Ulf Hansson) 
- mmc: core: Specify timeouts for BKOPS and CACHE_FLUSH for eMMC (Ulf Hansson) 
- nilfs2: fix lockdep warnings during disk space reclamation (Ryusuke Konishi) 
- nilfs2: fix lockdep warnings in page operations for btree nodes (Ryusuke Konishi) 
- ARM: 9191/1: arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame() (linyujun) 
- platform/chrome: cros_ec_debugfs: detach log reader wq from devm (Tzung-Bi Shih) 
- drbd: remove usage of list iterator variable after loop (Jakob Koschel) 
- MIPS: lantiq: check the return value of kzalloc() (Xiaoke Wang) 
- rtc: mc146818-lib: Fix the AltCentury for AMD platforms (Mario Limonciello) 
- nvme-multipath: fix hang when disk goes live over reconnect (Anton Eidelman) 
- ALSA: hda/realtek: Enable headset mic on Lenovo P360 (Kai-Heng Feng) 
- crypto: x86/chacha20 - Avoid spurious jumps to other functions (Peter Zijlstra) 
- crypto: stm32 - fix reference leak in stm32_crc_remove (Zheng Yongjun) 
- Input: stmfts - fix reference leak in stmfts_input_open (Zheng Yongjun) 
- Input: add bounds checking to input_set_capability() (Jeff LaBundy) 
- um: Cleanup syscall_handler_t definition/cast, fix warning (David Gow) 
- rtc: fix use-after-free on device removal (Vincent Whitchurch) 
- x86/xen: Make the secondary CPU idle tasks reliable (Miroslav Benes) 
- x86/xen: Make the boot CPU idle task reliable (Miroslav Benes) 
- floppy: use a statically allocated error counter (Willy Tarreau) 
- LTS tag: v5.4.195 (Sherry Yang) 
- tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() (Yang Yingliang) 
- ping: fix address binding wrt vrf (Nicolas Dichtel) 
- arm[64]/memremap: don't abuse pfn_valid() to ensure presence of linear map (Mike Rapoport) 
- net: phy: Fix race condition on link status change (Francesco Dolcini) 
- MIPS: fix build with gcc-12 (Sudip Mukherjee) 
- drm/vmwgfx: Initialize drm_mode_fb_cmd2 (Zack Rusin) 
- cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() (Waiman Long) 
- i40e: i40e_main: fix a missing check on list iterator (Xiaomeng Tong) 
- drm/nouveau/tegra: Stop using iommu_present() (Robin Murphy) 
- serial: 8250_mtk: Fix register address for XON/XOFF character (AngeloGioacchino Del Regno) 
- serial: 8250_mtk: Fix UART_EFR register address (AngeloGioacchino Del Regno) 
- slimbus: qcom: Fix IRQ check in qcom_slim_probe (Miaoqian Lin) 
- USB: serial: option: add Fibocom MA510 modem (Sven Schwermer) 
- USB: serial: option: add Fibocom L610 modem (Sven Schwermer) 
- USB: serial: qcserial: add support for Sierra Wireless EM7590 (Ethan Yang) 
- USB: serial: pl2303: add device id for HP LM930 Display (Scott Chen) 
- usb: typec: tcpci: Don't skip cleanup in .remove() on error (Uwe Kleine-König) 
- usb: cdc-wdm: fix reading stuck on device close (Sergey Ryazanov) 
- tty: n_gsm: fix mux activation issues in gsm_config() (Daniel Starke) 
- tcp: resalt the secret every 10 seconds (Eric Dumazet) 
- net: emaclite: Don't advertise 1000BASE-T and do auto negotiation (Shravya Kumbham) 
- s390: disable -Warray-bounds (Sven Schnelle) 
- ASoC: ops: Validate input values in snd_soc_put_volsw_range() (Mark Brown) 
- ASoC: max98090: Generate notifications on changes for custom control (Mark Brown) 
- ASoC: max98090: Reject invalid values in custom control put() (Mark Brown) 
- hwmon: (f71882fg) Fix negative temperature (Ji-Ze Hong (Peter Hong)) 
- gfs2: Fix filesystem block deallocation for short writes (Andreas Gruenbacher) 
- net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() (Taehee Yoo) 
- net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending (Guangguan Wang) 
- net/sched: act_pedit: really ensure the skb is writable (Paolo Abeni) 
- s390/lcs: fix variable dereferenced before check (Alexandra Winter) 
- s390/ctcm: fix potential memory leak (Alexandra Winter) 
- s390/ctcm: fix variable dereferenced before check (Alexandra Winter) 
- hwmon: (ltq-cputemp) restrict it to SOC_XWAY (Randy Dunlap) 
- dim: initialize all struct fields (Jesse Brandeburg) 
- netlink: do not reset transport header in netlink_recvmsg() (Eric Dumazet) 
- drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name() (Christophe JAILLET) 
- ipv4: drop dst in multicast routing path (Lokesh Dhoundiyal) 
- net: Fix features skip in for_each_netdev_feature() (Tariq Toukan) 
- mac80211: Reset MBSSID parameters upon connection (Manikanta Pubbisetty) 
- hwmon: (tmp401) Add OF device ID table (Camel Guo) 
- batman-adv: Don't skb_split skbuffs with frag_list (Sven Eckelmann) 
- LTS tag: v5.4.194 (Sherry Yang) 
- mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic() (Muchun Song) 
- mm: hugetlb: fix missing cache flush in copy_huge_page_from_user() (Muchun Song) 
- mm: fix missing cache flush for all tail pages of compound page (Muchun Song) 
- Bluetooth: Fix the creation of hdev->name (Itay Iellin) 
- KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id (Kyle Huey) 
- x86: kprobes: Prohibit probing on instruction which has emulate prefix (Masami Hiramatsu) 
- x86: xen: insn: Decode Xen and KVM emulate-prefix signature (Masami Hiramatsu) 
- x86: xen: kvm: Gather the definition of emulate prefixes (Masami Hiramatsu) 
- x86/asm: Allow to pass macros to __ASM_FORM() (Masami Hiramatsu) 
- KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id() (Like Xu) 
- can: grcan: only use the NAPI poll budget for RX (Andreas Larsson) 
- can: grcan: grcan_probe(): fix broken system id check for errata workaround needs (Andreas Larsson) 
- nfp: bpf: silence bitwise vs. logical OR warning (Nathan Chancellor) 
- drm/i915: Cast remain to unsigned long in eb_relocate_vma (Nathan Chancellor) 
- drm/amd/display/dc/gpio/gpio_service: Pass around correct dce_{version, environment} types (Lee Jones) 
- block: drbd: drbd_nl: Make conversion to 'enum drbd_ret_code' explicit (Lee Jones) 
- MIPS: Use address-of operator on section symbols (Nathan Chancellor) 
- LTS tag: v5.4.193 (Sherry Yang) 
- mmc: rtsx: add 74 Clocks in power on flow (Ricky WU) 
- PCI: aardvark: Fix reading MSI interrupt number (Pali Rohár) 
- PCI: aardvark: Clear all MSIs at setup (Pali Rohár) 
- dm: interlock pending dm_io and dm_wait_for_bios_completion (Mike Snitzer) 
- dm: fix mempool NULL pointer race when completing IO (Jiazi Li) 
- tcp: make sure treq->af_specific is initialized (Eric Dumazet) 
- ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock (Takashi Iwai) 
- mm: fix unexpected zeroed page mapping with zram swap (Minchan Kim) 
- block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern (Haimin Zhang) 
- net: ipv6: ensure we call ipv6_mc_down() at most once (j.nixdorf at avm.de) 
- KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised (Wanpeng Li) 
- x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume (Wanpeng Li) 
- kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU (Sandipan Das) 
- NFSv4: Don't invalidate inode attributes on delegation return (Trond Myklebust) 
- drm/amdkfd: Use drm_priv to pass VM from KFD to amdgpu (Felix Kuehling) 
- net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter() (Eric Dumazet) 
- btrfs: always log symlinks in full mode (Filipe Manana) 
- smsc911x: allow using IRQ0 (Sergey Shtylyov) 
- bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag (Somnath Kotur) 
- selftests: mirror_gre_bridge_1q: Avoid changing PVID while interface is operational (Ido Schimmel) 
- net: emaclite: Add error handling for of_address_to_resource() (Shravya Kumbham) 
- net: stmmac: dwmac-sun8i: add missing of_node_put() in sun8i_dwmac_register_mdio_mux() (Yang Yingliang) 
- net: ethernet: mediatek: add missing of_node_put() in mtk_sgmii_init() (Yang Yingliang) 
- RDMA/siw: Fix a condition race issue in MPA request processing (Cheng Xu) 
- ASoC: dmaengine: Restore NULL prepare_slave_config() callback (Codrin Ciubotariu) 
- hwmon: (adt7470) Fix warning on module removal (Armin Wolf) 
- NFC: netlink: fix sleep in atomic bug when firmware download timeout (Duoming Zhou) 
- nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs (Duoming Zhou) 
- nfc: replace improper check device_is_registered() in netlink related functions (Duoming Zhou) 
- can: grcan: use ofdev->dev when allocating DMA memory (Daniel Hellstrom) 
- can: grcan: grcan_close(): fix deadlock (Duoming Zhou) 
- s390/dasd: Fix read inconsistency for ESE DASD devices (Jan Höppner) 
- s390/dasd: Fix read for ESE with blksize < 4k (Jan Höppner) 
- s390/dasd: prevent double format of tracks for ESE devices (Stefan Haberland) 
- s390/dasd: fix data corruption for ESE devices (Stefan Haberland) 
- ASoC: meson: Fix event generation for G12A tohdmi mux (Mark Brown) 
- ASoC: wm8958: Fix change notifications for DSP controls (Mark Brown) 
- ASoC: da7219: Fix change notifications for tone generator frequency (Mark Brown) 
- genirq: Synchronize interrupt thread startup (Thomas Pfaff) 
- ACPICA: Always create namespace nodes using acpi_ns_create_node() (Vegard Nossum) 
- firewire: core: extend card->lock in fw_core_handle_bus_reset (Niels Dossche) 
- firewire: remove check of list iterator against head past the loop body (Jakob Koschel) 
- firewire: fix potential uaf in outbound_phy_packet_callback() (Chengfeng Ye) 
- Revert "SUNRPC: attempt AF_LOCAL connect on setup" (Trond Myklebust) 
- gpiolib: of: fix bounds check for 'gpio-reserved-ranges' (Andrei Lalaev) 
- ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes (Takashi Sakamoto) 
- parisc: Merge model and model name into one line in /proc/cpuinfo (Helge Deller) 
- MIPS: Fix CP0 counter erratum detection for R4k CPUs (Maciej W. Rozycki) 
- LTS tag: v5.4.192 (Sherry Yang) 
- mm, hugetlb: allow for "high" userspace addresses (Christophe Leroy) 
- hugetlbfs: get unmapped area below TASK_UNMAPPED_BASE for hugetlbfs (Shijie Hu) 
- tty: n_gsm: fix incorrect UA handling (Daniel Starke) 
- tty: n_gsm: fix wrong command frame length field encoding (Daniel Starke) 
- tty: n_gsm: fix wrong command retry handling (Daniel Starke) 
- tty: n_gsm: fix missing explicit ldisc flush (Daniel Starke) 
- tty: n_gsm: fix insufficient txframe size (Daniel Starke) 
- netfilter: nft_socket: only do sk lookups when indev is available (Florian Westphal) 
- tty: n_gsm: fix malformed counter for out of frame data (Daniel Starke) 
- tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2 (Daniel Starke) 
- net: ethernet: stmmac: fix write to sgmii_adapter_base (Dinh Nguyen) 
- drivers: net: hippi: Fix deadlock in rr_close() (Duoming Zhou) 
- cifs: destage any unwritten data to the server before calling copychunk_write (Ronnie Sahlberg) 
- x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 (Mikulas Patocka) 
- ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit() (Peilin Ye) 
- ASoC: wm8731: Disable the regulator when probing fails (Zheyu Ma) 
- tcp: fix F-RTO may not work correctly when receiving DSACK (Pengcheng Yang) 
- ixgbe: ensure IPsec VF<->PF compatibility (Leon Romanovsky) 
- bnx2x: fix napi API usage sequence (Manish Chopra) 
- tls: Skip tls_append_frag on zero copy size (Maxim Mikityanskiy) 
- drm/amd/display: Fix memory leak in dcn21_clock_source_create (Miaoqian Lin) 
- net: dsa: lantiq_gswip: Don't set GSWIP_MII_CFG_RMII_CLK (Martin Blumenstingl) 
- net: bcmgenet: hide status block before TX timestamping (Jonathan Lemon) 
- clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource() (Yang Yingliang) 
- bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create() (Christophe JAILLET) 
- tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT (Eric Dumazet) 
- ip_gre: Make o_seqno start from 0 in native mode (Peilin Ye) 
- net/smc: sync err code when tcp connection was refused (liuyacan) 
- net: hns3: add validity check for message data length (Jian Shen) 
- cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe (Xiaobing Luo) 
- pinctrl: pistachio: fix use of irq_of_parse_and_map() (Lv Ruyi) 
- arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock (Fabio Estevam) 
- ARM: dts: imx6ull-colibri: fix vqmmc regulator (Max Krummenacher) 
- sctp: check asoc strreset_chunk in sctp_generate_reconf_event (Xin Long) 
- tcp: md5: incorrect tcp_header_len for incoming connections (Francesco Ruggeri) 
- bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt hook (Eyal Birger) 
- mtd: rawnand: Fix return value check of wait_for_completion_timeout (Miaoqian Lin) 
- ipvs: correctly print the memory size of ip_vs_conn_tab (Pengcheng Yang) 
- ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35 (Adam Ford) 
- ARM: dts: am3517-evm: Fix misc pinmuxing (Adam Ford) 
- ARM: dts: Fix mmc order for omap3-gta04 (H. Nikolaus Schaller) 
- phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe (Miaoqian Lin) 
- phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe (Miaoqian Lin) 
- ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek (Mark Brown) 
- phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks (Miaoqian Lin) 
- ARM: OMAP2+: Fix refcount leak in omap_gic_of_init (Miaoqian Lin) 
- phy: samsung: exynos5250-sata: fix missing device put in probe error paths (Krzysztof Kozlowski) 
- phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe (Miaoqian Lin) 
- ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue (Fabio Estevam) 
- USB: Fix xhci event ring dequeue pointer ERDP update issue (Weitao Wang) 
- mtd: rawnand: fix ecc parameters for mt7622 (Chuanhong Guo) 
- arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards (Christian Hewitt) 
- arm64: dts: meson: remove CPU opps below 1GHz for G12B boards (Christian Hewitt) 
- video: fbdev: udlfb: properly check endpoint type (Pavel Skripkin) 
- hex2bin: fix access beyond string end (Mikulas Patocka) 
- hex2bin: make the function hex_to_bin constant-time (Mikulas Patocka) 
- arch_topology: Do not set llc_sibling if llc_id is invalid (Wang Qing) 
- serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device (Maciej W. Rozycki) 
- serial: 8250: Also set sticky MCR bits in console restoration (Maciej W. Rozycki) 
- serial: imx: fix overrun interrupts in DMA mode (Johan Hovold) 
- usb: dwc3: gadget: Return proper request status (Thinh Nguyen) 
- usb: dwc3: core: Fix tx/rx threshold settings (Thinh Nguyen) 
- usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind() (Vijayavardhan Vennapusa) 
- usb: gadget: uvc: Fix crash when encoding data for usb request (Dan Vacura) 
- usb: typec: ucsi: Fix role swapping (Heikki Krogerus) 
- usb: misc: fix improper handling of refcount in uss720_probe() (Hangyu Hua) 
- iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on() (Zheyu Ma) 
- iio: dac: ad5446: Fix read_raw not returning set value (Michael Hennerich) 
- iio: dac: ad5592r: Fix the missing return value. (Zizhuang Deng) 
- xhci: increase usb U3 -> U0 link resume timeout from 100ms to 500ms (Mathias Nyman) 
- xhci: stop polling roothubs after shutdown (Henry Lin) 
- USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions (Daniele Palmas) 
- USB: serial: option: add support for Cinterion MV32-WA/MV32-WB (Slark Xiao) 
- USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader (Bruno Thomsen) 
- USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS (Kees Cook) 
- USB: quirks: add STRING quirk for VCOM device (Oliver Neukum) 
- USB: quirks: add a Realtek card reader (Oliver Neukum) 
- usb: mtu3: fix USB 3.0 dual-role-switch from device to host (Macpaul Lin) 
- lightnvm: disable the subsystem (Greg Kroah-Hartman) 
- hamradio: remove needs_free_netdev to avoid UAF (Lin Ma) 
- hamradio: defer 6pack kfree after unregister_netdev (Lin Ma) 
- floppy: disable FDRAWCMD by default (Willy Tarreau) 
- LTS tag: v5.4.191 (Sherry Yang) 
- Revert "net: micrel: fix KS8851_MLL Kconfig" (Marek Vasut) 
- block/compat_ioctl: fix range check in BLKGETSIZE (Khazhismel Kumykov) 
- staging: ion: Prevent incorrect reference counting behavour (Lee Jones) 
- spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller (Tudor Ambarus) 
- jbd2: fix a potential race while discarding reserved buffers after an abort (Ye Bin) 
- ext4: force overhead calculation if the s_overhead_cluster makes no sense (Theodore Ts'o) 
- ext4: fix overhead calculation to account for the reserved gdt blocks (Theodore Ts'o) 
- ext4, doc: fix incorrect h_reserved size (wangjianjian (C)) 
- ext4: limit length to bitmap_maxbytes - blocksize in punch_hole (Tadeusz Struk) 
- ext4: fix use-after-free in ext4_search_dir (Ye Bin) 
- ext4: fix symlink file size not match to file content (Ye Bin) 
- arm_pmu: Validate single/group leader events (Rob Herring) 
- ARC: entry: fix syscall_trace_exit argument (Sergey Matyukevich) 
- e1000e: Fix possible overflow in LTR decoding (Sasha Neftin) 
- ASoC: soc-dapm: fix two incorrect uses of list iterator (Xiaomeng Tong) 
- openvswitch: fix OOB access in reserve_sfa_size() (Paolo Valerio) 
- xtensa: fix a7 clobbering in coprocessor context load/store (Max Filippov) 
- xtensa: patch_text: Fixup last cpu should be master (Guo Ren) 
- powerpc/perf: Fix power9 event alternatives (Athira Rajeev) 
- drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage (Miaoqian Lin) 
- KVM: PPC: Fix TCE handling for VFIO (Alexey Kardashevskiy) 
- drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare (Dave Stevenson) 
- drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised (Dave Stevenson) 
- dma: at_xdmac: fix a missing check on list iterator (Xiaomeng Tong) 
- ata: pata_marvell: Check the 'bmdma_addr' beforing reading (Zheyu Ma) 
- EDAC/synopsys: Read the error count from the correct register (Shubhrajyoti Datta) 
- stat: fix inconsistency between struct stat and struct compat_stat (Mikulas Patocka) 
- scsi: qedi: Fix failed disconnect handling (Mike Christie) 
- net: macb: Restart tx only if queue pointer is lagging (Tomas Melin) 
- drm/msm/mdp5: check the return of kzalloc() (Xiaoke Wang) 
- dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info() (Lv Ruyi) 
- brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov) 
- mt76: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov) 
- cifs: Check the IOCB_DIRECT flag, not O_DIRECT (David Howells) 
- vxlan: fix error return code in vxlan_fdb_append (Hongbin Wang) 
- ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov) 
- platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative (Jiapeng Chong) 
- reset: tegra-bpmp: Restore Handle errors in BPMP response (Sameer Pujar) 
- ARM: vexpress/spc: Avoid negative array index when !SMP (Kees Cook) 
- selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets (Ido Schimmel) 
- netlink: reset network and mac headers in netlink_dump() (Eric Dumazet) 
- l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu (David Ahern) 
- net/sched: cls_u32: fix possible leak in u32_init_knode() (Eric Dumazet) 
- net/packet: fix packet_sock xmit return value checking (Hangbin Liu) 
- rxrpc: Restore removed timer deletion (David Howells) 
- igc: Fix BUG: scheduling while atomic (Sasha Neftin) 
- igc: Fix infinite loop in release_swfw_sync (Sasha Neftin) 
- dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources (zhangqilong) 
- dmaengine: imx-sdma: Fix error checking in sdma_event_remap (Miaoqian Lin) 
- ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component (Miaoqian Lin) 
- ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek (Mark Brown) 
- ALSA: usb-audio: Clear MIDI port active flag after draining (Takashi Iwai) 
- tcp: Fix potential use-after-free due to double kfree() (Kuniyuki Iwashima) 
- net/sched: cls_u32: fix netns refcount changes in u32_change() (Eric Dumazet) 
- tcp: fix race condition when creating child sockets from syncookies (Ricardo Dias) 
- gfs2: assign rgrp glock before compute_bitstructs (Bob Peterson) 
- can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path (Hangyu Hua) 
- tracing: Dump stacktrace trigger to the corresponding instance (Daniel Bristot de Oliveira) 
- mm: page_alloc: fix building error on -Werror=array-compare (Xiongwei Song) 
- etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead (Kees Cook) 
- LTS tag: v5.4.190 (Sherry Yang) 
- ax25: Fix UAF bugs in ax25 timers (Duoming Zhou) 
- ax25: Fix NULL pointer dereferences in ax25 timers (Duoming Zhou) 
- ax25: fix NPD bug in ax25_disconnect (Duoming Zhou) 
- ax25: fix UAF bug in ax25_send_control() (Duoming Zhou) 
- ax25: Fix refcount leaks caused by ax25_cb_del() (Duoming Zhou) 
- ax25: fix UAF bugs of net_device caused by rebinding operation (Duoming Zhou) 
- ax25: fix reference count leaks of ax25_dev (Duoming Zhou) 
- ax25: add refcount in ax25_dev to avoid UAF bugs (Duoming Zhou) 
- dma-direct: avoid redundant memory sync for swiotlb (Chao Gao) 
- i2c: pasemi: Wait for write xfers to finish (Martin Povišer) 
- smp: Fix offline cpu check in flush_smp_call_function_queue() (Nadav Amit) 
- dm integrity: fix memory corruption when tag_size is less than digest size (Mikulas Patocka) 
- ARM: davinci: da850-evm: Avoid NULL pointer dereference (Nathan Chancellor) 
- tick/nohz: Use WARN_ON_ONCE() to prevent console saturation (Paul Gortmaker) 
- genirq/affinity: Consider that CPUs on nodes can be unbalanced (Rei Yamamoto) 
- drm/amd/display: don't ignore alpha property on pre-multiplied mode (Melissa Wen) 
- ipv6: fix panic when forwarding a pkt with no in6 dev (Nicolas Dichtel) 
- ALSA: pcm: Test for "silence" field in struct "pcm_format_data" (Fabio M. De Francesco) 
- ALSA: hda/realtek: Add quirk for Clevo PD50PNT (Tim Crawford) 
- btrfs: mark resumed async balance as writing (Naohiro Aota) 
- btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups() (Nathan Chancellor) 
- ath9k: Fix usage of driver-private space in tx_info (Toke Høiland-Jørgensen) 
- ath9k: Properly clear TX status area before reporting to mac80211 (Toke Høiland-Jørgensen) 
- gcc-plugins: latent_entropy: use /dev/urandom (Jason A. Donenfeld) 
- mm: kmemleak: take a full lowmem check in kmemleak_*_phys() (Patrick Wang) 
- mm, page_alloc: fix build_zonerefs_node() (Juergen Gross) 
- perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov) 
- drivers: net: slip: fix NPD bug in sl_tx_timeout() (Duoming Zhou) 
- scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan (Chandrakanth patil) 
- scsi: mvsas: Add PCI ID of RocketRaid 2640 (Alexey Galakhov) 
- powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit (Kefeng Wang) 
- drm/amd/display: Fix allocate_mst_payload assert on resume (Roman Li) 
- net: usb: aqc111: Fix out-of-bounds accesses in RX fixup (Marcin Kozlowski) 
- tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry (Steve Capper) 
- arm64: alternatives: mark patch_alternative() as `noinstr` (Joey Gouly) 
- regulator: wm8994: Add an off-on delay for WM8994 variant (Jonathan Bakker) 
- gpu: ipu-v3: Fix dev_dbg frequency output (Leo Ruan) 
- ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs (Christian Lamparter) 
- net: micrel: fix KS8851_MLL Kconfig (Randy Dunlap) 
- scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 (Tyrel Datwyler) 
- scsi: target: tcmu: Fix possible page UAF (Xiaoguang Wang) 
- Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer (Michael Kelley) 
- drm/amdkfd: Check for potential null return of kmalloc_array() (QintaoShen) 
- drm/amdkfd: Fix Incorrect VMIDs passed to HWS (Tushar Patel) 
- drm/amd/display: Update VTEM Infopacket definition (Leo (Hanghong) Ma) 
- drm/amd/display: fix audio format not updated after edid updated (Charlene Liu) 
- drm/amd: Add USBC connector ID (Aurabindo Pillai) 
- cifs: potential buffer overflow in handling symlinks (Harshit Mogalapalli) 
- nfc: nci: add flush_workqueue to prevent uaf (Lin Ma) 
- testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set (Athira Rajeev) 
- sctp: Initialize daddr on peeled off socket (Petr Malat) 
- net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() (Karsten Graul) 
- drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init() (Stephen Boyd) 
- cfg80211: hold bss_lock while updating nontrans_list (Rameshkumar Sundaram) 
- net/sched: taprio: Check if socket flags are valid (Benedikt Spranger) 
- net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link (Dinh Nguyen) 
- net/sched: fix initialization order when updating chain 0 head (Marcelo Ricardo Leitner) 
- mlxsw: i2c: Fix initialization error flow (Vadim Pasternak) 
- gpiolib: acpi: use correct format characters (Linus Torvalds) 
- veth: Ensure eth header is in skb's linear part (Guillaume Nault) 
- memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe (Miaoqian Lin) 
- LTS tag: v5.4.189 (Sherry Yang) 
- ACPI: processor idle: Check for architectural support for LPI (Mario Limonciello) 
- cpuidle: PSCI: Move the `has_lpi` check to the beginning of the function (Mario Limonciello) 
- selftests: cgroup: Test open-time cgroup namespace usage for migration checks (Tejun Heo) 
- selftests: cgroup: Test open-time credential usage for migration checks (Tejun Heo) 
- selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644 (Tejun Heo) 
- cgroup: Use open-time cgroup namespace for process migration perm checks (Tejun Heo) 
- cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv (Tejun Heo) 
- drm/amdkfd: Fix -Wstrict-prototypes from amdgpu_amdkfd_gfx_10_0_get_functions() (Nathan Chancellor) 
- drm/amdkfd: add missing void argument to function kgd2kfd_init (Nathan Chancellor) 
- mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning (Waiman Long) 
- arm64: module: remove (NOLOAD) from linker script (Fangrui Song) 
- mm: don't skip swap entry even if zap_details specified (Peter Xu) 
- mmc: mmci: stm32: correctly check all elements of sg list (Yann Gautier) 
- mmc: mmci_sdmmc: Replace sg_dma_xxx macros (Ludovic Barre) 
- tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts (Arnaldo Carvalho de Melo) 
- tools build: Filter out options and warnings not supported by clang (Arnaldo Carvalho de Melo) 
- irqchip/gic-v3: Fix GICR_CTLR.RWP polling (Marc Zyngier) 
- perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator (Xiaomeng Tong) 
- ata: sata_dwc_460ex: Fix crash due to OOB write (Christian Lamparter) 
- arm64: patch_text: Fixup last cpu should be master (Guo Ren) 
- btrfs: fix qgroup reserve overflow the qgroup limit (Ethan Lien) 
- x86/pm: Save the MSR validity status at context setup (Pawan Gupta) 
- mm/mempolicy: fix mpol_new leak in shared_policy_replace (Miaohe Lin) 
- mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) (Paolo Bonzini) 
- lz4: fix LZ4_decompress_safe_partial read out of bound (Guo Xuenan) 
- mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is complete (Wolfram Sang) 
- Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning" (Pali Rohár) 
- perf session: Remap buf if there is no space for event (Denis Nikitin) 
- perf tools: Fix perf's libperf_print callback (Adrian Hunter) 
- SUNRPC: Handle low memory situations in call_status() (Trond Myklebust) 
- SUNRPC: Handle ENOMEM in call_transmit_status() (Trond Myklebust) 
- drbd: Fix five use after free bugs in get_initial_state (Lv Yunlong) 
- bpf: Support dual-stack sockets in bpf_tcp_check_syncookie (Maxim Mikityanskiy) 
- spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op() (Kamal Dasu) 
- qede: confirm skb is allocated before using (Jamie Bainbridge) 
- rxrpc: fix a race in rxrpc_exit_net() (Eric Dumazet) 
- net: openvswitch: don't send internal clone attribute to the userspace. (Ilya Maximets) 
- ipv6: Fix stats accounting in ip6_pkt_drop (David Ahern) 
- dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe (Miaoqian Lin) 
- IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition (Niels Dossche) 
- bnxt_en: reserve space inside receive page for skb_shared_info (Andy Gospodarek) 
- drm/imx: Fix memory leak in imx_pd_connector_get_modes (José Expósito) 
- net: stmmac: Fix unset max_speed difference between DT and non-DT platforms (Chen-Yu Tsai) 
- net: ipv4: fix route with nexthop object delete warning (Nikolay Aleksandrov) 
- net/tls: fix slab-out-of-bounds bug in decrypt_internal (Ziyang Xuan) 
- scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() (Christophe JAILLET) 
- Drivers: hv: vmbus: Fix potential crash on module unload (Guilherme G. Piccoli) 
- drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() (Dan Carpenter) 
- mm: fix race between MADV_FREE reclaim and blkdev direct IO read (Mauricio Faria de Oliveira) 
- parisc: Fix patch code locking and flushing (John David Anglin) 
- parisc: Fix CPU affinity for Lasi, WAX and Dino chips (Helge Deller) 
- SUNRPC: Fix socket waits for write buffer space (Trond Myklebust) 
- jfs: prevent NULL deref in diFree (Haimin Zhang) 
- virtio_console: eliminate anonymous module_init & module_exit (Randy Dunlap) 
- serial: samsung_tty: do not unlock port->lock for uart_write_wakeup() (Jiri Slaby) 
- NFS: swap-out must always use STABLE writes. (NeilBrown) 
- NFS: swap IO handling is slightly different for O_DIRECT IO (NeilBrown) 
- SUNRPC/call_alloc: async tasks mustn't block waiting for memory (NeilBrown) 
- clk: Enforce that disjoints limits are invalid (Maxime Ripard) 
- xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (Dongli Zhang) 
- NFSv4: Protect the state recovery thread against direct reclaim (Trond Myklebust) 
- w1: w1_therm: fixes w1_seq for ds28ea00 sensors (Lucas Denefle) 
- clk: si5341: fix reported clk_rate when output divider is 2 (Adam Wujek) 
- minix: fix bug when opening a file with O_DIRECT (Qinghua Jin) 
- init/main.c: return 1 from handled __setup() functions (Randy Dunlap) 
- netlabel: fix out-of-bounds memory accesses (Wang Yufen) 
- Bluetooth: Fix use after free in hci_send_acl (Luiz Augusto von Dentz) 
- xtensa: fix DTC warning unit_address_format (Max Filippov) 
- usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm (H. Nikolaus Schaller) 
- scsi: libfc: Fix use after free in fc_exch_abts_resp() (Jianglei Nie) 
- MIPS: fix fortify panic when copying asm exception handlers (Alexander Lobakin) 
- bnxt_en: Eliminate unintended link toggle during FW reset (Michael Chan) 
- tuntap: add sanity checks about msg_controllen in sendmsg (Harold Huang) 
- macvtap: advertise link netns via netlink (Sven Eckelmann) 
- mips: ralink: fix a refcount leak in ill_acc_of_setup() (Hangyu Hua) 
- net/smc: correct settings of RMB window update limit (Dust Li) 
- scsi: aha152x: Fix aha152x_setup() __setup handler return value (Randy Dunlap) 
- scsi: pm8001: Fix pm8001_mpi_task_abort_resp() (Damien Le Moal) 
- drm/amdkfd: make CRAT table missing message informational only (Alex Deucher) 
- dm ioctl: prevent potential spectre v1 gadget (Jordy Zomer) 
- ipv4: Invalidate neighbour for broadcast address upon address addition (Ido Schimmel) 
- power: supply: axp288-charger: Set Vhold to 4.4V (Hans de Goede) 
- PCI: pciehp: Add Qualcomm quirk for Command Completed erratum (Manivannan Sadhasivam) 
- usb: ehci: add pci device support for Aspeed platforms (Neal Liu) 
- iommu/arm-smmu-v3: fix event handling soft lockup (Zhou Guanghui) 
- PCI: aardvark: Fix support for MSI interrupts (Pali Rohár) 
- drm/amdgpu: Fix recursive locking warning (Rajneesh Bhardwaj) 
- powerpc: Set crashkernel offset to mid of RMA region (Sourabh Jain) 
- ipv6: make mc_forwarding atomic (Sherry Yang) 
- power: supply: axp20x_battery: properly report current when discharging (Evgeny Boger) 
- scsi: bfa: Replace snprintf() with sysfs_emit() (Yang Guang) 
- scsi: mvsas: Replace snprintf() with sysfs_emit() (Yang Guang) 
- bpf: Make dst_port field in struct bpf_sock 16-bit wide (Jakub Sitnicki) 
- powerpc: dts: t104xrdb: fix phy type for FMAN 4/5 (Maxim Kiselev) 
- ptp: replace snprintf with sysfs_emit (Yang Guang) 
- drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj (Xin Xiong) 
- ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 (Zekun Shen) 
- drm: Add orientation quirk for GPD Win Max (Anisse Astier) 
- KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs (Jim Mattson) 
- ARM: 9187/1: JIVE: fix return value of __setup handler (Randy Dunlap) 
- riscv module: remove (NOLOAD) (Fangrui Song) 
- rtc: wm8350: Handle error for wm8350_register_irq (Jiasheng Jiang) 
- ubifs: Rectify space amount budget for mkdir/tmpfile operations (Zhihao Cheng) 
- KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated (Vitaly Kuznetsov) 
- openvswitch: Fixed nd target mask field in the flow dump. (Martin Varghese) 
- um: Fix uml_mconsole stop/go (Anton Ivanov) 
- ARM: dts: spear13xx: Update SPI dma properties (Kuldeep Singh) 
- ARM: dts: spear1340: Update serial node properties (Kuldeep Singh) 
- ASoC: topology: Allow TLV control to be either read or write (Amadeusz Sławiński) 
- ubi: fastmap: Return error code if memory allocation fails in add_aeb() (Zhihao Cheng) 
- dt-bindings: spi: mxic: The interrupt property is not mandatory (Miquel Raynal) 
- dt-bindings: mtd: nand-controller: Fix a comment in the examples (Miquel Raynal) 
- dt-bindings: mtd: nand-controller: Fix the reg property description (Miquel Raynal) 
- bpf: Fix comment for helper bpf_current_task_under_cgroup() (Hengqi Chen) 
- mm/usercopy: return 1 from hardened_usercopy __setup() handler (Randy Dunlap) 
- mm/memcontrol: return 1 from cgroup.memory __setup() handler (Randy Dunlap) 
- mm/mmap: return 1 from stack_guard_gap __setup() handler (Randy Dunlap) 
- ASoC: soc-compress: Change the check for codec_dai (Jiasheng Jiang) 
- powerpc/kasan: Fix early region not updated correctly (Chen Jingwen) 
- ACPI: CPPC: Avoid out of bounds access when parsing _CPC data (Rafael J. Wysocki) 
- ARM: iop32x: offset IRQ numbers by 1 (Arnd Bergmann) 
- ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl (Baokun Li) 
- ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs (Jiaxin Yu) 
- pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE() (Jonathan Neuschäfer) 
- pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR() (Jonathan Neuschäfer) 
- pinctrl: pinconf-generic: Print arguments for bias-pull-* (Chen-Yu Tsai) 
- net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware (Guangbin Huang) 
- gfs2: Make sure FITRIM minlen is rounded up to fs block size (Andrew Price) 
- rtc: check if __rtc_read_time was successful (Tom Rix) 
- XArray: Update the LRU list in xas_split() (Matthew Wilcox (Oracle)) 
- can: mcba_usb: properly check endpoint type (Pavel Skripkin) 
- can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path (Hangyu Hua) 
- XArray: Fix xas_create_range() when multi-order entry present (Matthew Wilcox (Oracle)) 
- ubifs: rename_whiteout: correct old_dir size computing (Baokun Li) 
- ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() (Zhihao Cheng) 
- ubifs: setflags: Make dirtied_ino_d 8 bytes aligned (Zhihao Cheng) 
- ubifs: Add missing iput if do_tmpfile() failed in rename whiteout (Zhihao Cheng) 
- ubifs: Fix deadlock in concurrent rename whiteout and inode writeback (Zhihao Cheng) 
- ubifs: rename_whiteout: Fix double free for whiteout_ui->data (Zhihao Cheng) 
- ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM (Ammar Faizi) 
- KVM: x86: fix sending PV IPI (Li RongQing) 
- KVM: Prevent module exit until all VMs are freed (David Matlack) 
- scsi: qla2xxx: Use correct feature type field during RFF_ID processing (Manish Rangankar) 
- scsi: qla2xxx: Reduce false trigger to login (Quinn Tran) 
- scsi: qla2xxx: Fix N2N inconsistent PLOGI (Quinn Tran) 
- scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests (Arun Easi) 
- scsi: qla2xxx: Fix hang due to session stuck (Quinn Tran) 
- scsi: qla2xxx: Fix incorrect reporting of task management failure (Quinn Tran) 
- scsi: qla2xxx: Fix disk failure to rediscover (Quinn Tran) 
- scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() (Saurav Kashyap) 
- scsi: qla2xxx: Check for firmware dump already collected (Joe Carnuccio) 
- scsi: qla2xxx: Add devids and conditionals for 28xx (Joe Carnuccio) 
- scsi: qla2xxx: Fix device reconnect in loop topology (Arun Easi) 
- scsi: qla2xxx: Fix wrong FDMI data for 64G adapter (Bikash Hazarika) 
- scsi: qla2xxx: Fix stuck session in gpdb (Quinn Tran) 
- powerpc: Fix build errors with newer binutils (Anders Roxell) 
- powerpc/lib/sstep: Fix build errors with newer binutils (Anders Roxell) 
- powerpc/lib/sstep: Fix 'sthcx' instruction (Anders Roxell) 
- ALSA: hda/realtek: Add alc256-samsung-headphone fixup (Matt Kramer) 
- mmc: host: Return an error when ->enable_sdio_irq() ops is missing (Ulf Hansson) 
- media: hdpvr: initialize dev->worker at hdpvr_register_videodev (Dongliang Mu) 
- video: fbdev: sm712fb: Fix crash in smtcfb_write() (Zheyu Ma) 
- ARM: mmp: Fix failure to remove sram device (Uwe Kleine-König) 
- ARM: tegra: tamonten: Fix I2C3 pad setting (Richard Leitner) 
- media: cx88-mpeg: clear interrupt status register before streaming video (Daniel González Cabanelas) 
- ASoC: soc-core: skip zero num_dai component in searching dai name (Shengjiu Wang) 
- video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit (Jing Yao) 
- video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() (Jing Yao) 
- video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() (Jing Yao) 
- ASoC: madera: Add dependencies on MFD (Charles Keepax) 
- ARM: dts: bcm2837: Add the missing L1/L2 cache information (Richard Schleich) 
- ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 (David Heidelberg) 
- video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit (Yang Guang) 
- video: fbdev: cirrusfb: check pixclock to avoid divide by zero (George Kennedy) 
- video: fbdev: w100fb: Reset global state (Evgeny Novikov) 
- video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow (Tim Gardner) 
- ntfs: add sanity check on allocation size (Dongliang Mu) 
- ext4: don't BUG if someone dirty pages without asking ext4 first (Theodore Ts'o) 
- spi: tegra20: Use of_device_get_match_data() (Minghao Chi) 
- PM: core: keep irq flags in device_pm_check_callbacks() (Dmitry Baryshkov) 
- ACPI/APEI: Limit printable size of BERT table data (Darren Hart) 
- Revert "Revert "block, bfq: honor already-setup queue merges"" (Paolo Valente) 
- lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3 (Paul Menzel) 
- ACPICA: Avoid walking the ACPI Namespace if it is not there (Rafael J. Wysocki) 
- bfq: fix use-after-free in bfq_dispatch_request (Zhang Wensheng) 
- irqchip/nvic: Release nvic_base upon failure (Souptick Joarder (HPE)) 
- irqchip/qcom-pdc: Fix broken locking (Marc Zyngier) 
- Fix incorrect type in assignment of ipv6 port for audit (Casey Schaufler) 
- loop: use sysfs_emit() in the sysfs xxx show() (Chaitanya Kulkarni) 
- selinux: use correct type for context length (Christian Göttsche) 
- block, bfq: don't move oom_bfqq (Yu Kuai) 
- pinctrl: npcm: Fix broken references to chip->parent_device (Marc Zyngier) 
- gcc-plugins/stackleak: Exactly match strings instead of prefixes (Kees Cook) 
- LSM: general protection fault in legacy_parse_param (Casey Schaufler) 
- lib/test: use after free in register_test_dev_kmod() (Dan Carpenter) 
- net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator (Xiaomeng Tong) 
- NFSv4/pNFS: Fix another issue with a list iterator pointing to the head (Trond Myklebust) 
- net/x25: Fix null-ptr-deref caused by x25_disconnect (Duoming Zhou) 
- qlcnic: dcb: default to returning -EOPNOTSUPP (Tom Rix) 
- selftests: test_vxlan_under_vrf: Fix broken test case (Ido Schimmel) 
- net: phy: broadcom: Fix brcm_fet_config_init() (Florian Fainelli) 
- xen: fix is_xen_pmu() (Juergen Gross) 
- clk: Initialize orphan req_rate (Maxime Ripard) 
- clk: qcom: gcc-msm8994: Fix gpll4 width (Konrad Dybcio) 
- NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error (Olga Kornievskaia) 
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Pablo Neira Ayuso) 
- jfs: fix divide error in dbNextAG (Pavel Skripkin) 
- driver core: dd: fix return value of __setup handler (Randy Dunlap) 
- firmware: google: Properly state IOMEM dependency (David Gow) 
- kgdbts: fix return value of __setup handler (Randy Dunlap) 
- kgdboc: fix return value of __setup handler (Randy Dunlap) 
- tty: hvc: fix return value of __setup handler (Randy Dunlap) 
- pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe (Miaoqian Lin) 
- pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe (Miaoqian Lin) 
- pinctrl: mediatek: paris: Fix pingroup pin config state readback (Chen-Yu Tsai) 
- pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get() (Chen-Yu Tsai) 
- pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init (Miaoqian Lin) 
- staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree (Arınç ÜNAL) 
- NFS: remove unneeded check in decode_devicenotify_args() (Alexey Khoroshilov) 
- clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver (Miaoqian Lin) 
- clk: clps711x: Terminate clk_div_table with sentinel element (Jonathan Neuschäfer) 
- clk: loongson1: Terminate clk_div_table with sentinel element (Jonathan Neuschäfer) 
- clk: actions: Terminate clk_div_table with sentinel element (Jonathan Neuschäfer) 
- remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region (Miaoqian Lin) 
- remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region (Miaoqian Lin) 
- clk: qcom: clk-rcg2: Update the frac table for pixel clock (Taniya Das) 
- clk: qcom: clk-rcg2: Update logic to calculate D value for RCG (Taniya Das) 
- clk: imx7d: Remove audio_mclk_root_clk (Abel Vesa) 
- dma-debug: fix return value of __setup handlers (Randy Dunlap) 
- NFS: Return valid errors from nfs2/3_decode_dirent() (Trond Myklebust) 
- iio: adc: Add check for devm_request_threaded_irq (Jiasheng Jiang) 
- serial: 8250: Fix race condition in RTS-after-send handling (Uwe Kleine-König) 
- serial: 8250_mid: Balance reference count for PCI DMA device (Andy Shevchenko) 
- phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure}) (Liu Ying) 
- clk: qcom: ipq8074: Use floor ops for SDCC1 clock (Dirk Buchwalder) 
- pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel (Geert Uytterhoeven) 
- staging:iio:adc:ad7280a: Fix handing of device address bit reversing. (Jonathan Cameron) 
- misc: alcor_pci: Fix an error handling path (Christophe JAILLET) 
- pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() (Uwe Kleine-König) 
- mxser: fix xmit_buf leak in activate when LSR == 0xff (Jiri Slaby) 
- mfd: asic3: Add missing iounmap() on error asic3_mfd_probe (Miaoqian Lin) 
- tipc: fix the timer expires after interval 100ms (Hoang Le) 
- openvswitch: always update flow key after nat (Aaron Conole) 
- tcp: ensure PMTU updates are processed during fastopen (Jakub Kicinski) 
- selftests/bpf/test_lirc_mode2.sh: Exit with proper code (Hangbin Liu) 
- i2c: mux: demux-pinctrl: do not deactivate a master that is not active (Peter Rosin) 
- af_netlink: Fix shift out of bounds in group mask calculation (Petr Machata) 
- Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt (Yake Yang) 
- USB: storage: ums-realtek: fix error code in rts51x_read_mem() (Dan Carpenter) 
- bpf, sockmap: Fix double uncharge the mem of sk_msg (Wang Yufen) 
- bpf, sockmap: Fix more uncharged while msg has more_data (Wang Yufen) 
- bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full (Wang Yufen) 
- RDMA/mlx5: Fix memory leak in error flow for subscribe event routine (Yongzhi Liu) 
- mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init (Xin Xiong) 
- MIPS: RB532: fix return value of __setup handler (Randy Dunlap) 
- vxcan: enable local echo for sent CAN frames (Oliver Hartkopp) 
- powerpc: 8xx: fix a return value error in mpc8xx_pic_init (Hangyu Hua) 
- selftests/bpf: Make test_lwt_ip_encap more stable and faster (Felix Maurer) 
- mfd: mc13xxx: Add check for mc13xxx_irq_request (Jiasheng Jiang) 
- powerpc/sysdev: fix incorrect use to determine if list is empty (Jakob Koschel) 
- mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n (Randy Dunlap) 
- PCI: Reduce warnings on possible RW1C corruption (Mark Tomlinson) 
- power: supply: wm8350-power: Add missing free in free_charger_irq (Jiasheng Jiang) 
- power: supply: wm8350-power: Handle error for wm8350_register_irq (Jiasheng Jiang) 
- i2c: xiic: Make bus names unique (Robert Hancock) 
- hv_balloon: rate-limit "Unhandled message" warning (Anssi Hannula) 
- KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() (Hou Wenlong) 
- KVM: x86: Fix emulation in writing cr8 (Zhenzhong Duan) 
- powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit (Michael Ellerman) 
- libbpf: Skip forward declaration when counting duplicated type names (Xu Kuohai) 
- bpf, arm64: Feed byte-offset into bpf line info (Hou Tao) 
- bpf, arm64: Call build_prologue() first in first JIT pass (Hou Tao) 
- drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt (Nishanth Menon) 
- scsi: hisi_sas: Change permission of parameter prot_mask (Xiang Chen) 
- power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return (Hans de Goede) 
- drm/tegra: Fix reference leak in tegra_dsi_ganged_probe (Miaoqian Lin) 
- ext2: correct max file size computing (Zhang Yi) 
- TOMOYO: fix __setup handlers return values (Randy Dunlap) 
- drm/amd/display: Remove vupdate_int_entry definition (Maíra Canal) 
- scsi: pm8001: Fix abort all task initialization (Damien Le Moal) 
- scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() (Damien Le Moal) 
- scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() (Damien Le Moal) 
- scsi: pm8001: Fix command initialization in pm80XX_send_read_log() (Damien Le Moal) 
- dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS (Aashish Sharma) 
- iwlwifi: mvm: Fix an error code in iwl_mvm_up() (Dan Carpenter) 
- iwlwifi: Fix -EIO error code that is never returned (Colin Ian King) 
- dax: make sure inodes are flushed before destroy cache (Tong Zhang) 
- drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug (Roman Li) 
- iommu/ipmmu-vmsa: Check for error num after setting mask (Jiasheng Jiang) 
- HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports (Dmitry Torokhov) 
- power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init (Miaoqian Lin) 
- PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge (Pali Rohár) 
- net: dsa: mv88e6xxx: Enable port policy support on 6097 (Tobias Waldekranz) 
- mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update (Lorenzo Bianconi) 
- mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update (Lorenzo Bianconi) 
- powerpc/perf: Don't use perf_hw_context for trace IMC PMU (Athira Rajeev) 
- ray_cs: Check ioremap return value (Jiasheng Jiang) 
- power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe (Miaoqian Lin) 
- i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Alexander Lobakin) 
- KVM: PPC: Fix vmx/vsx mixup in mmio emulation (Fabiano Rosas) 
- ath9k_htc: fix uninit value bugs (Pavel Skripkin) 
- drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() (Zhou Qingyang) 
- drm/edid: Don't clear formats if using deep color (Maxime Ripard) 
- mtd: rawnand: gpmi: fix controller timings setting (Dario Binacchi) 
- mtd: onenand: Check for error irq (Jiasheng Jiang) 
- Bluetooth: hci_serdev: call init_rwsem() before p->open() (Pavel Skripkin) 
- udmabuf: validate ubuf->pagecount (Pavel Skripkin) 
- ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern (Wen Gong) 
- drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe (Miaoqian Lin) 
- drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev (Miaoqian Lin) 
- ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe (Miaoqian Lin) 
- mmc: davinci_mmc: Handle error for clk_enable (Jiasheng Jiang) 
- ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe (Miaoqian Lin) 
- ASoC: imx-es8328: Fix error return code in imx_es8328_probe() (Wang Wensheng) 
- ASoC: mxs: Fix error handling in mxs_sgtl5000_probe (Miaoqian Lin) 
- ASoC: dmaengine: do not use a NULL prepare_slave_config() callback (Codrin Ciubotariu) 
- ivtv: fix incorrect device_caps for ivtvfb (Hans Verkuil) 
- video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of (Miaoqian Lin) 
- ASoC: fsi: Add check for clk_enable (Jiasheng Jiang) 
- ASoC: wm8350: Handle error for wm8350_register_irq (Jiasheng Jiang) 
- ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe (Miaoqian Lin) 
- media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED (Dafna Hirschfeld) 
- arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly (Rob Herring) 
- ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction (Takashi Sakamoto) 
- memory: emif: check the pointer temp in get_device_details() (Jia-Ju Bai) 
- memory: emif: Add check for setup_interrupts (Jiasheng Jiang) 
- ASoC: soc-compress: prevent the potentially use of null pointer (Jiasheng Jiang) 
- ASoC: atmel_ssc_dai: Handle errors for clk_enable (Jiasheng Jiang) 
- ASoC: mxs-saif: Handle errors for clk_enable (Jiasheng Jiang) 
- printk: fix return value of printk.devkmsg __setup handler (Randy Dunlap) 
- arm64: dts: broadcom: Fix sata nodename (Frank Wunderlich) 
- arm64: dts: ns2: Fix spi-cpol and spi-cpha property (Kuldeep Singh) 
- ALSA: spi: Add check for clk_enable() (Jiasheng Jiang) 
- ASoC: ti: davinci-i2s: Add check for clk_enable() (Jiasheng Jiang) 
- ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp() (Jia-Ju Bai) 
- uaccess: fix nios2 and microblaze get_user_8() (Arnd Bergmann) 
- media: usb: go7007: s2250-board: fix leak in probe() (Dan Carpenter) 
- media: em28xx: initialize refcount before kref_get (Dongliang Mu) 
- media: video/hdmi: handle short reads of hdmi info frame. (Tom Rix) 
- ARM: dts: imx: Add missing LVDS decoder on M53Menlo (Marek Vasut) 
- soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe (Miaoqian Lin) 
- arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc (Maulik Shah) 
- soc: qcom: aoss: remove spurious IRQF_ONESHOT flags (Daniel Thompson) 
- soc: qcom: rpmpd: Check for null return of devm_kcalloc (Jiasheng Jiang) 
- ARM: dts: qcom: ipq4019: fix sleep clock (Pavel Kubelun) 
- video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() (Dan Carpenter) 
- video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe() (Dan Carpenter) 
- video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() (Wang Hai) 
- media: aspeed: Correct value for h-total-pixels (Jammy Huang) 
- media: hantro: Fix overfill bottom register field name (Chen-Yu Tsai) 
- media: coda: Fix missing put_device() call in coda_get_vdoa_data (Miaoqian Lin) 
- media: bttv: fix WARNING regression on tunerless devices (Ondrej Zary) 
- f2fs: fix to avoid potential deadlock (Chao Yu) 
- f2fs: fix missing free nid in f2fs_handle_failed_inode (Jaegeuk Kim) 
- perf/x86/intel/pt: Fix address filter config for 32-bit kernel (Adrian Hunter) 
- perf/core: Fix address filter parser for multiple filters (Adrian Hunter) 
- sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa (Bharata B Rao) 
- clocksource: acpi_pm: fix return value of __setup handler (Randy Dunlap) 
- hwmon: (pmbus) Add Vin unit off handling (Brandon Wyman) 
- crypto: ccp - ccp_dmaengine_unregister release dma channels (Dāvis Mosāns) 
- ACPI: APEI: fix return value of __setup handlers (Randy Dunlap) 
- clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_init() (Guillaume Ranquet) 
- crypto: vmx - add missing dependencies (Petr Vorel) 
- hwrng: atmel - disable trng on failure path (Claudiu Beznea) 
- PM: suspend: fix return value of __setup handler (Randy Dunlap) 
- PM: hibernate: fix __setup handler error handling (Randy Dunlap) 
- block: don't delete queue kobject before its children (Eric Biggers) 
- hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING (Armin Wolf) 
- hwmon: (pmbus) Add mutex to regulator ops (Patrick Rudolph) 
- spi: pxa2xx-pci: Balance reference count for PCI DMA device (Andy Shevchenko) 
- crypto: ccree - don't attempt 0 len DMA mappings (Gilad Ben-Yossef) 
- audit: log AUDIT_TIME_* records only from rules (Richard Guy Briggs) 
- selftests/x86: Add validity check and allow field splitting (Muhammad Usama Anjum) 
- spi: tegra114: Add missing IRQ check in tegra_spi_probe (Miaoqian Lin) 
- crypto: mxs-dcp - Fix scatterlist processing (Tomas Paukrt) 
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Herbert Xu) 
- PCI: pciehp: Clear cmd_busy bit in polling mode (Liguang Zhang) 
- brcmfmac: pcie: Fix crashes due to early IRQs (Hector Martin) 
- brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio (Hector Martin) 
- brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path (Hector Martin) 
- brcmfmac: firmware: Allocate space for default boardrev in nvram (Hector Martin) 
- xtensa: fix xtensa_wsr always writing 0 (Max Filippov) 
- xtensa: fix stop_machine_cpuslocked call in patch_text (Max Filippov) 
- media: davinci: vpif: fix unbalanced runtime PM get (Johan Hovold) 
- DEC: Limit PMAX memory probing to R3k systems (Maciej W. Rozycki) 
- crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete() (Eric Biggers) 
- crypto: rsa-pkcs1pad - restore signature length check (Eric Biggers) 
- crypto: rsa-pkcs1pad - correctly get hash from source scatterlist (Eric Biggers) 
- lib/raid6/test: fix multiple definition linking error (Dirk Müller) 
- thermal: int340x: Increase bitmap size (Srinivas Pandruvada) 
- carl9170: fix missing bit-wise or operator for tx_params (Colin Ian King) 
- ARM: dts: exynos: add missing HDMI supplies on SMDK5420 (Krzysztof Kozlowski) 
- ARM: dts: exynos: add missing HDMI supplies on SMDK5250 (Krzysztof Kozlowski) 
- ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 (Krzysztof Kozlowski) 
- ARM: dts: at91: sama5d2: Fix PMERRLOC resource size (Tudor Ambarus) 
- video: fbdev: atari: Atari 2 bpp (STe) palette bugfix (Michael Schmitz) 
- video: fbdev: sm712fb: Fix crash in smtcfb_read() (Helge Deller) 
- drm/edid: check basic audio support on CEA extension block (Cooper Chiou) 
- block: don't merge across cgroup boundaries if blkcg is enabled (Tejun Heo) 
- mailbox: tegra-hsp: Flush whole channel (Pekka Pessi) 
- drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() (Duoming Zhou) 
- ACPI: properties: Consistently return -ENOENT if there are no more references (Sakari Ailus) 
- udp: call udp_encap_enable for v6 sockets when enabling encap (Xin Long) 
- powerpc/kvm: Fix kvm_use_magic_page (Andreas Gruenbacher) 
- drbd: fix potential silent data corruption (Lars Ellenberg) 
- mm/kmemleak: reset tag when compare object pointer (Kuan-Ying Lee) 
- mm,hwpoison: unmap poisoned page before invalidation (Rik van Riel) 
- ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020 (Kai-Heng Feng) 
- ALSA: cs4236: fix an incorrect NULL check on list iterator (Xiaomeng Tong) 
- riscv: Fix fill_callchain return value (Nikita Shubin) 
- qed: validate and restrict untrusted VFs vlan promisc mode (Manish Chopra) 
- qed: display VF trust config (Manish Chopra) 
- scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands (Damien Le Moal) 
- mempolicy: mbind_range() set_policy() after vma_merge() (Hugh Dickins) 
- mm: invalidate hwpoison page cache page in fault path (Rik van Riel) 
- mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node (Alistair Popple) 
- jffs2: fix memory leak in jffs2_scan_medium (Baokun Li) 
- jffs2: fix memory leak in jffs2_do_mount_fs (Baokun Li) 
- jffs2: fix use-after-free in jffs2_clear_xattr_subsystem (Baokun Li) 
- can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path (Hangyu Hua) 
- spi: mxic: Fix the transmit path (Miquel Raynal) 
- pinctrl: samsung: drop pin banks references on error paths (Krzysztof Kozlowski) 
- f2fs: fix to do sanity check on .cp_pack_total_block_count (Chao Yu) 
- f2fs: quota: fix loop condition at f2fs_quota_sync() (Juhyung Park) 
- NFSD: prevent integer overflow on 32 bit systems (Dan Carpenter) 
- NFSD: prevent underflow in nfssvc_decode_writeargs() (Dan Carpenter) 
- SUNRPC: avoid race between mod_timer() and del_timer_sync() (NeilBrown) 
- HID: intel-ish-hid: Use dma_alloc_coherent for firmware update (Gwendal Grignou) 
- Documentation: update stable tree link (Bagas Sanjaya) 
- Documentation: add link to stable release candidate tree (Bagas Sanjaya) 
- KEYS: fix length validation in keyctl_pkey_params_get_2() (Eric Biggers) 
- ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE (Jann Horn) 
- clk: uniphier: Fix fixed-rate initialization (Kunihiko Hayashi) 
- greybus: svc: fix an error handling bug in gb_svc_hello() (Dan Carpenter) 
- iio: inkern: make a best effort on offset calculation (Liam Beguin) 
- iio: inkern: apply consumer scale when no channel scale is available (Liam Beguin) 
- iio: inkern: apply consumer scale on IIO_VAL_INT cases (Liam Beguin) 
- iio: afe: rescale: use s64 for temporary scale calculations (Liam Beguin) 
- coresight: Fix TRCCONFIGR.QE sysfs interface (James Clark) 
- xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx() (Anssi Hannula) 
- xhci: make xhci_handshake timeout for xhci_reset() adjustable (Mathias Nyman) 
- xhci: fix runtime PM imbalance in USB2 resume (Henry Lin) 
- USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c (Alan Stern) 
- virtio-blk: Use blk_validate_block_size() to validate block size (Xie Yongji) 
- block: Add a helper to validate the block size (Xie Yongji) 
- tpm: fix reference counting for struct tpm_chip (Lino Sanfilippo) 
- iommu/iova: Improve 32-bit free space estimate (Robin Murphy) 
- net: dsa: microchip: add spi_device_id tables (Claudiu Beznea) 
- spi: Fix erroneous sgs value with min_t() (Biju Das) 
- net:mcf8390: Use platform_get_irq() to get the interrupt (Minghao Chi (CGEL ZTE)) 
- spi: Fix invalid sgs value (Biju Das) 
- ethernet: sun: Free the coherent when failing in probing (Zheyu Ma) 
- virtio_console: break out of buf poll on remove (Michael S. Tsirkin) 
- xfrm: fix tunnel model fragmentation behavior (Lina Wang) 
- HID: logitech-dj: add new lightspeed receiver id (Lucas Zampieri) 
- netdevice: add the case if dev is NULL (Yajun Deng) 
- USB: serial: simple: add Nokia phone driver (Johan Hovold) 
- USB: serial: pl2303: add IBM device IDs (Eddie James) 
- swiotlb: fix info leak with DMA_FROM_DEVICE (Halil Pasic)