[El-errata] ELBA-2023-12794 Oracle Linux 9 Unbreakable Enterprise kernel bug fix update

[Errata Announcements for Oracle Linux]

Oracle Linux Bug Fix Advisory ELBA-2023-12794

http://linux.oracle.com/errata/ELBA-2023-12794.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:


aarch64:
bpftool-5.15.0-105.125.6.2.el9uek.aarch64.rpm
kernel-uek-5.15.0-105.125.6.2.el9uek.aarch64.rpm
kernel-uek-core-5.15.0-105.125.6.2.el9uek.aarch64.rpm
kernel-uek-debug-5.15.0-105.125.6.2.el9uek.aarch64.rpm
kernel-uek-debug-core-5.15.0-105.125.6.2.el9uek.aarch64.rpm
kernel-uek-debug-devel-5.15.0-105.125.6.2.el9uek.aarch64.rpm
kernel-uek-debug-modules-5.15.0-105.125.6.2.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-5.15.0-105.125.6.2.el9uek.aarch64.rpm
kernel-uek-devel-5.15.0-105.125.6.2.el9uek.aarch64.rpm
kernel-uek-doc-5.15.0-105.125.6.2.el9uek.noarch.rpm
kernel-uek-modules-5.15.0-105.125.6.2.el9uek.aarch64.rpm
kernel-uek-modules-extra-5.15.0-105.125.6.2.el9uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//kernel-uek-5.15.0-105.125.6.2.el9uek.src.rpm



Description of changes:

[5.15.0-105.125.6.2.el9uek]
- vhost-scsi: Fix alignment handling with windows (Mike Christie)  [Orabug: 35807914]

[5.15.0-105.125.6.1.el9uek]
- selftests/bpf: fix static assert compilation issue for test_cls_*.c (Alan Maguire)  [Orabug: 35653761]

[5.15.0-105.125.6.el9uek]
- uek-rpm: Enable Hyper-V for OL8 and OL9 ARM (Harshvardhan Jha)  [Orabug: 35069663]
- PCI: hv: Avoid the retarget interrupt hypercall in irq_unmask() on ARM64 (Boqun Feng)  [Orabug: 35069663]
- PCI: hv: Add arm64 Hyper-V vPCI support (Sunil Muthuswamy)  [Orabug: 35069663]
- PCI: hv: Make the code arch neutral by adding arch specific interfaces (Sunil Muthuswamy)  [Orabug: 35069663]
- crypto: tcrypt - disable ffdhe tests for key sizes (Saeed Mirzamohammadi)  [Orabug: 35734478]
- io_uring: add support for registering ring file descriptors (Jens Axboe)  [Orabug: 35742743]

[5.15.0-105.125.5.el9uek]
- sysctl: fix proc_dobool() usability (Ondrej Mosnacek)  [Orabug: 35146200]
- x86/fpu/xstate: Prevent false-positive warning in __copy_xstate_uabi_buf() (Chang S. Bae)  [Orabug: 35490456]
- x86/fpu: Emulate XRSTOR's behavior if the xfeatures PKRU bit is not set (Kyle Huey)  [Orabug: 35490456]
- x86/fpu: Allow PKRU to be (once again) written by ptrace. (Kyle Huey)  [Orabug: 35490456]
- x86/fpu/xstate: Fix XSTATE_WARN_ON() to emit relevant diagnostics (Andrew Cooper)  [Orabug: 35490456]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Chang S. Bae)  [Orabug: 35490456]
- x86/fpu: Exclude dynamic states from init_fpstate (Chang S. Bae)  [Orabug: 35490456]
- x86/fpu: Fix the init_fpstate size check with the actual size (Chang S. Bae)  [Orabug: 35490456]
- x86/fpu: Configure init_fpstate attributes orderly (Chang S. Bae)  [Orabug: 35490456]
- x86/prctl: Remove pointless task argument (Thomas Gleixner)  [Orabug: 35490456]
- x86/fpu: Cleanup variable shadowing (Thomas Gleixner)  [Orabug: 35490456]
- x86/fpu/xsave: Support XSAVEC in the kernel (Thomas Gleixner)  [Orabug: 35490456]
- x86/fpu/xstate: Consolidate size calculations (Thomas Gleixner)  [Orabug: 35490456]
- x86/fpu/xstate: Handle supervisor states in XSTATE permissions (Thomas Gleixner)  [Orabug: 35490456]
- x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (Thomas Gleixner)  [Orabug: 35490456]
- x86/fpu: Cache xfeature flags from CPUID (Thomas Gleixner)  [Orabug: 35490456]
- x86/fpu/xsave: Initialize offset/size cache early (Thomas Gleixner)  [Orabug: 35490456]
- x86/fpu: Remove unused supervisor only offsets (Thomas Gleixner)  [Orabug: 35490456]
- nvme: handle effects after freeing the request (Alan Adamson)  [Orabug: 35673772]
- nbd: make sure request completion won't concurrent (Yu Kuai)  [Orabug: 35709416]
- nbd: don't handle response without a corresponding request message (Yu Kuai)  [Orabug: 35709416]
- uek-rpm: Enforce linux firmware version 26 (Jack Vogel)  [Orabug: 35722340]
- LTS update - v5.15.125 Inception support added (Jack Vogel) 
- x86: fix backwards merge of GDS/SRSO bit (Greg Kroah-Hartman) 
- xen/netback: Fix buffer overrun triggered by unusual packet (Ross Lagerwall) 
- x86/srso: Tie SBPB bit setting to microcode patch detection (Borislav Petkov (AMD)) 
- x86/srso: Fix return thunks in generated code (Josh Poimboeuf) 
- x86/srso: Add IBPB on VMEXIT (Borislav Petkov (AMD)) 
- x86/srso: Add IBPB (Borislav Petkov (AMD)) 
- x86/srso: Add SRSO_NO support (Borislav Petkov (AMD)) 
- x86/srso: Add IBPB_BRTYPE support (Borislav Petkov (AMD)) 
- x86/srso: Add a Speculative RAS Overflow mitigation (Borislav Petkov (AMD)) 
- x86/cpu, kvm: Add support for CPUID_80000021_EAX (Kim Phillips)

[5.15.0-105.125.4.el9uek]
- LTS version: v5.15.125 (Jack Vogel) 
- Documentation/x86: Fix backwards on/off logic about YMM support (Dave Hansen) 
- x86/mm: Initialize text poking earlier (Peter Zijlstra) 
- mm: Move mm_cachep initialization to mm_init() (Peter Zijlstra) 
- x86/mm: Use mm_alloc() in poking_init() (Peter Zijlstra) 
- x86/mm: fix poking_init() for Xen PV guests (Juergen Gross) 
- x86/xen: Fix secondary processors' FPU initialization (Juergen Gross) 
- KVM: Add GDS_NO support to KVM (Daniel Sneddon) 
- x86/speculation: Add Kconfig option for GDS (Daniel Sneddon) 
- x86/speculation: Add force option to GDS mitigation (Daniel Sneddon) 
- x86/speculation: Add Gather Data Sampling mitigation (Daniel Sneddon) 
- x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (Thomas Gleixner) 
- x86/fpu: Mark init functions __init (Thomas Gleixner) 
- x86/fpu: Remove cpuinfo argument from init functions (Thomas Gleixner) 
- x86/init: Initialize signal frame size late (Thomas Gleixner) 
- init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (Thomas Gleixner) 
- init: Invoke arch_cpu_finalize_init() earlier (Thomas Gleixner) 
- init: Remove check_bugs() leftovers (Thomas Gleixner) 
- um/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) 
- sparc/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) 
- sh/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) 
- mips/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) 
- m68k/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) 
- ia64/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) 
- ARM: cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) 
- x86/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) 
- init: Provide arch_cpu_finalize_init() (Thomas Gleixner) 
- LTS version: v5.15.124 (Jack Vogel) 
- selftests: mptcp: join: only check for ip6tables if needed (Matthieu Baerts) 
- ASoC: cs42l51: fix driver to properly autoload with automatic module loading (Thomas Petazzoni) 
- io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq (Jens Axboe) 
- selftests: mptcp: sockopt: use 'iptables-legacy' if available (Matthieu Baerts) 
- cpufreq: intel_pstate: Drop ACPI _PSS states table patching (Rafael J. Wysocki) 
- ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (Rafael J. Wysocki) 
- ACPI: processor: perflib: Use the "no limit" frequency QoS (Rafael J. Wysocki) 
- tracing: Fix trace_event_raw_event_synth() if else statement (Steven Rostedt (Google)) 
- rbd: retrieve and check lock owner twice before blocklisting (Ilya Dryomov) 
- rbd: harden get_lock_owner_info() a bit (Ilya Dryomov) 
- rbd: make get_lock_owner_info() return a single locker or NULL (Ilya Dryomov) 
- dm cache policy smq: ensure IO doesn't prevent cleaner policy progress (Joe Thornber) 
- ceph: never send metrics if disable_send_metrics is set (Xiubo Li) 
- ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register (Mark Brown) 
- s390/dasd: fix hanging device after quiesce/resume (Stefan Haberland) 
- virtio-net: fix race between set queues and probe (Jason Wang) 
- KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid (Sean Christopherson) 
- locking/rtmutex: Fix task->pi_waiters integrity (Peter Zijlstra) 
- irqchip/gic-v4.1: Properly lock VPEs when doing a directLPI invalidation (Marc Zyngier) 
- irq-bcm6345-l1: Do not assume a fixed block to cpu mapping (Jonas Gorski) 
- tpm_tis: Explicitly check for error code (Alexander Steffen) 
- nfsd: Remove incorrect check in nfsd4_validate_stateid (Trond Myklebust) 
- file: always lock position for FMODE_ATOMIC_POS (Christian Brauner) 
- btrfs: check for commit error at btrfs_attach_transaction_barrier() (Filipe Manana) 
- btrfs: check if the transaction was aborted at btrfs_wait_for_commit() (Filipe Manana) 
- hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled (Gilles Buloz) 
- hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature (Baskaran Kannan) 
- ALSA: hda/relatek: Enable Mute LED on HP 250 G8 (Luka Guzenko) 
- Revert "xhci: add quirk for host controllers that don't update endpoint DCS" (Oliver Neukum) 
- tty: n_gsm: fix UAF in gsm_cleanup_mux (Chaoyuan Peng) 
- staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() (Zhang Shurong) 
- staging: r8712: Fix memory leak in _r8712_init_xmit_priv() (Larry Finger) 
- Documentation: security-bugs.rst: clarify CVE handling (Greg Kroah-Hartman) 
- Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group (Greg Kroah-Hartman) 
- Revert "usb: xhci: tegra: Fix error check" (Dan Carpenter) 
- usb: xhci-mtk: set the dma max_seg_size (Ricardo Ribalda) 
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config (Frank Li) 
- USB: quirks: add quirk for Focusrite Scarlett (Łukasz Bartosik) 
- usb: ohci-at91: Fix the unhandle interrupt when resume (Guiting Shen) 
- usb: dwc3: don't reset device side if dwc3 was configured as host-only (Jisheng Zhang) 
- usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy (Gratian Crisan) 
- Revert "usb: dwc3: core: Enable AutoRetry feature in the controller" (Jakub Vanek) 
- can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (Marc Kleine-Budde) 
- USB: serial: simple: sort driver entries (Johan Hovold) 
- USB: serial: simple: add Kaufmann RKS+CAN VCP (Oliver Neukum) 
- USB: serial: option: add Quectel EC200A module support (Mohsen Tahmasebi) 
- USB: serial: option: support Quectel EM060K_128 (Jerry Meng) 
- serial: sifive: Fix sifive_serial_console_setup() section (Samuel Holland) 
- serial: 8250_dw: Preserve original value of DLF register (Ruihong Luo) 
- serial: qcom-geni: drop bogus runtime pm state update (Johan Hovold) 
- KVM: VMX: Don't fudge CR0 and CR4 for restricted L2 guest (Sean Christopherson) 
- KVM: Grab a reference to KVM for VM and vCPU stats file descriptors (Sean Christopherson) 
- USB: gadget: Fix the memory leak in raw_gadget driver (Zqiang) 
- usb: gadget: call usb_gadget_check_config() to verify UDC capability (Frank Li) 
- Revert "usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init()" (Dan Carpenter) 
- tracing: Fix warning in trace_buffered_event_disable() (Zheng Yejian) 
- ring-buffer: Fix wrong stat of cpu_buffer->read (Zheng Yejian) 
- ata: pata_ns87415: mark ns87560_tf_read static (Arnd Bergmann) 
- RDMA/irdma: Report correct WC error (Sindhu Devale) 
- drm/amd: Fix an error handling mistake in psp_sw_init() (Mario Limonciello) 
- dm raid: protect md_stop() with 'reconfig_mutex' (Yu Kuai) 
- dm raid: clean up four equivalent goto tags in raid_ctr() (Yu Kuai) 
- dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths (Yu Kuai) 
- block: Fix a source code comment in include/uapi/linux/blkzoned.h (Bart Van Assche) 
- ASoC: fsl_spdif: Silence output on stop (Matus Gajdos) 
- drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() (Gaosheng Cui) 
- RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kashyap Desai) 
- RDMA/mthca: Fix crash when polling CQ for shared QPs (Thomas Bogendoerfer) 
- RDMA/irdma: Fix data race on CQP request done (Shiraz Saleem) 
- RDMA/irdma: Fix data race on CQP completion stats (Shiraz Saleem) 
- RDMA/irdma: Add missing read barriers (Shiraz Saleem) 
- drm/msm/adreno: Fix snapshot BINDLESS_DATA size (Rob Clark) 
- drm/msm/dpu: drop enum dpu_core_perf_data_bus_id (Dmitry Baryshkov) 
- RDMA/mlx4: Make check for invalid flags stricter (Dan Carpenter) 
- tipc: stop tipc crypto on failure in tipc_node_create (Fedor Pchelkin) 
- tipc: check return value of pskb_trim() (Yuanjun Gong) 
- benet: fix return value check in be_lancer_xmit_workarounds() (Yuanjun Gong) 
- net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64 (Lin Ma) 
- net/sched: mqprio: add extack to mqprio_parse_nlattr() (Vladimir Oltean) 
- net/sched: mqprio: refactor nlattr parsing to a separate function (Vladimir Oltean) 
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID (Pablo Neira Ayuso) 
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR (Pablo Neira Ayuso) 
- netfilter: nft_set_rbtree: fix overlap expiration walk (Florian Westphal) 
- igc: Fix Kernel Panic during ndo_tx_timeout callback (Muhammad Husaini Zulkifli) 
- platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 (Maxim Mikityanskiy) 
- net: stmmac: Apply redundant write work around on 4.xx too (Vincent Whitchurch) 
- team: reset team's flags when down link is P2P device (Hangbin Liu) 
- bonding: reset bond's flags when down link is P2P device (Hangbin Liu) 
- ice: Fix memory management in ice_ethtool_fdir.c (Jedrzej Jagielski) 
- tcp: Reduce chance of collisions in inet6_hashfn(). (Stewart Smith) 
- ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address (Maciej Żenczykowski) 
- ethernet: atheros: fix return value check in atl1e_tso_csum() (Yuanjun Gong) 
- phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() (Harshit Mogalapalli) 
- vxlan: calculate correct header length for GPE (Jiri Benc) 
- vxlan: move to its own directory (Roopa Prabhu) 
- net: hns3: fix wrong bw weight of disabled tc issue (Jijie Shao) 
- net: hns3: fix wrong tc bandwidth weight data issue (Jijie Shao) 
- net: phy: marvell10g: fix 88x3310 power up (Jiawen Wu) 
- iavf: check for removal state before IAVF_FLAG_PF_COMMS_FAILED (Jacob Keller) 
- iavf: fix potential deadlock on allocation failure (Jacob Keller) 
- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (Wang Ming) 
- media: staging: atomisp: select V4L2_FWNODE (Sakari Ailus) 
- soundwire: qcom: update status correctly with mask (Srinivas Kandagatla) 
- phy: qcom-snps-femto-v2: properly enable ref clock (Adrien Thierry) 
- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (Adrien Thierry) 
- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (Krzysztof Kozlowski) 
- phy: qcom-snps: Use dev_err_probe() to simplify code (Yuan Can) 
- drm/amdgpu/vkms: relax timer deactivation by hrtimer_try_to_cancel (Guchun Chen) 
- drm/amdgpu: fix vkms crtc settings (Flora Cui) 
- scsi: qla2xxx: Fix hang in task management (Quinn Tran) 
- scsi: qla2xxx: Fix task management cmd fail due to unavailable resource (Quinn Tran) 
- scsi: qla2xxx: Fix task management cmd failure (Quinn Tran) 
- scsi: qla2xxx: Multi-que support for TMF (Quinn Tran) 
- tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails (Masami Hiramatsu (Google)) 
- Revert "tracing: Add "(fault)" name injection to kernel probes" (Masami Hiramatsu (Google)) 
- tracing: Allow synthetic events to pass around stacktraces (Steven Rostedt (Google)) 
- tracing/probes: Fix to avoid double count of the string length on the array (Masami Hiramatsu (Google)) 
- tracing/probes: Add symstr type for dynamic events (Masami Hiramatsu (Google)) 
- pwm: meson: fix handling of period/duty if greater than UINT_MAX (Heiner Kallweit) 
- pwm: meson: Simplify duplicated per-channel tracking (Uwe Kleine-König) 
- cifs: if deferred close is disabled then close files immediately (Bharath SM) 
- ksmbd: remove internal.h include (Namjae Jeon) 
- cifs: use fs_context for automounts (Paulo Alcantara) 
- cifs: missing directory in MAINTAINERS file (Steve French) 
- drm/ttm: never consider pinned BOs for eviction&swap (Christian König) 
- tty: fix hang on tty device with no_room set (Hui Li) 
- n_tty: Rename tail to old_tail in n_tty_read() (Ilpo Järvinen) 
- drm/ttm: Don't leak a resource on eviction error (Thomas Hellström) 
- drm/ttm: Don't print error message if eviction was interrupted (Thomas Hellström) 
- fs: dlm: interrupt posix locks only when process is killed (Alexander Aring) 
- dlm: rearrange async condition return (Alexander Aring) 
- dlm: cleanup plock_op vs plock_xop (Alexander Aring) 
- PCI: rockchip: Don't advertise MSI-X in PCIe capabilities (Rick Wertenbroek) 
- PCI: rockchip: Fix window mapping and address translation for endpoint (Rick Wertenbroek) 
- PCI: rockchip: Remove writes to unused registers (Rick Wertenbroek) 
- PCI/ASPM: Avoid link retraining race (Ilpo Järvinen) 
- PCI/ASPM: Factor out pcie_wait_for_retrain() (Ilpo Järvinen) 
- PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (Bjorn Helgaas) 
- i2c: nomadik: Remove a useless call in the remove function (Christophe JAILLET) 
- i2c: nomadik: Use devm_clk_get_enabled() (Andi Shyti) 
- i2c: nomadik: Remove unnecessary goto label (Andi Shyti) 
- i2c: Improve size determinations (Markus Elfring) 
- i2c: Delete error messages for failed memory allocations (Markus Elfring) 
- btrfs: fix race between quota disable and relocation (Filipe Manana) 
- gpio: mvebu: fix irq domain leak (Bartosz Golaszewski) 
- gpio: mvebu: Make use of devm_pwmchip_add (Uwe Kleine-König) 
- pwm: Add a stub for devm_pwmchip_add() (Andy Shevchenko) 
- gpio: tps68470: Make tps68470_gpio_output() always set the initial value (Hans de Goede) 
- io_uring: don't audit the capability check in io_uring_create() (Ondrej Mosnacek) 
- KVM: s390: pv: fix index value of replaced ASCE (Claudio Imbrenda) 
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (Zhihao Cheng) 
- uek-rpm: move sch_fq_codel module to be built-in (Samasth Norway Ananda)  [Orabug: 35659936]
- uek-rpm: Update kernel's linux-firmware dependency. (Somasundaram Krishnasamy)  [Orabug: 35678651]
- uek-rpm: Disable cls_tcindex in file tcindex-disable.conf (Sherry Yang)  [Orabug: 35678686]

[5.15.0-105.123.3.el9uek]
- ovl: Always reevaluate the file signature for IMA (Eric Snowberg)  [Orabug: 35646438]
- ocfs2: always read both high and low parts of dinode link count (Alexey Asemov)  [Orabug: 35643002]
- uek-rpm: aarch64: Enable direct booting with nvdimm (Liam Merwick)  [Orabug: 35630385]
- LTS version: v5.15.123 (Jack Vogel) 
- Revert "drm/amd/display: edp do not add non-edid timings" (Hersen Wu) 
- nixge: fix mac address error handling again (Arnd Bergmann) 
- tracing/histograms: Return an error if we fail to add histogram to hist_vars list (Mohamed Khalfella) 
- jbd2: recheck chechpointing non-dirty buffer (Zhang Yi) 
- net: phy: prevent stale pointer dereference in phy_init() (Vladimir Oltean) 
- tcp: annotate data-races around fastopenq.max_qlen (Eric Dumazet) 
- tcp: annotate data-races around icsk->icsk_user_timeout (Eric Dumazet) 
- tcp: annotate data-races around tp->notsent_lowat (Eric Dumazet) 
- tcp: annotate data-races around rskq_defer_accept (Eric Dumazet) 
- tcp: annotate data-races around tp->linger2 (Eric Dumazet) 
- tcp: annotate data-races around icsk->icsk_syn_retries (Eric Dumazet) 
- tcp: annotate data-races around tp->keepalive_probes (Eric Dumazet) 
- tcp: annotate data-races around tp->keepalive_intvl (Eric Dumazet) 
- tcp: annotate data-races around tp->keepalive_time (Eric Dumazet) 
- tcp: annotate data-races around tp->tcp_tx_delay (Eric Dumazet) 
- netfilter: nf_tables: skip bound chain on rule flush (Pablo Neira Ayuso) 
- netfilter: nf_tables: skip bound chain in netns release path (Pablo Neira Ayuso) 
- netfilter: nft_set_pipapo: fix improper element removal (Florian Westphal) 
- netfilter: nf_tables: fix spurious set element insertion failure (Florian Westphal) 
- llc: Don't drop packet from non-root netns. (Kuniyuki Iwashima) 
- fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe (Zhang Shurong) 
- Revert "tcp: avoid the lookup process failing to get sk in ehash table" (Kuniyuki Iwashima) 
- net:ipv6: check return value of pskb_trim() (Yuanjun Gong) 
- net: ipv4: Use kfree_sensitive instead of kfree (Wang Ming) 
- tcp: annotate data-races around tcp_rsk(req)->ts_recent (Eric Dumazet) 
- igc: Prevent garbled TX queue with XDP ZEROCOPY (Florian Kauer) 
- bpf: Fix subprog idx logic in check_max_stack_depth (Kumar Kartikeya Dwivedi) 
- octeontx2-pf: Dont allocate BPIDs for LBK interfaces (Geetha sowjanya) 
- security: keys: Modify mismatched function name (Jiapeng Chong) 
- iavf: Fix out-of-bounds when setting channels on remove (Ding Hui) 
- iavf: Fix use-after-free in free_netdev (Ding Hui) 
- net: sched: cls_bpf: Undo tcf_bind_filter in case of an error (Victor Nogueira) 
- net: ethernet: mtk_eth_soc: handle probe deferral (Daniel Golle) 
- ethernet: use of_get_ethdev_address() (Jakub Kicinski) 
- of: net: add a helper for loading netdev->dev_addr (Jakub Kicinski) 
- bridge: Add extack warning when enabling STP in netns. (Kuniyuki Iwashima) 
- net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field() (Tanmay Patil) 
- pinctrl: amd: Use amd_pinconf_set() for all config options (Mario Limonciello) 
- perf build: Fix library not found error when using CSLIBS (James Clark) 
- fbdev: imxfb: warn about invalid left/right margin (Martin Kaiser) 
- spi: bcm63xx: fix max prepend length (Jonas Gorski) 
- FS: JFS: Check for read-only mounted filesystem in txBegin (Immad Mir) 
- FS: JFS: Fix null-ptr-deref Read in txBegin (Immad Mir) 
- MIPS: dec: prom: Address -Warray-bounds warning (Gustavo A. R. Silva) 
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev (Yogesh) 
- udf: Fix uninitialized array access for some pathnames (Jan Kara) 
- quota: fix warning in dqgrab() (Ye Bin) 
- quota: Properly disable quotas when add_dquot_ref() fails (Jan Kara) 
- ALSA: emu10k1: roll up loops in DSP setup code for Audigy (Oswald Buddenhagen) 
- drm/radeon: Fix integer overflow in radeon_cs_parser_init (hackyzh002) 
- ext4: correct inline offset when handling xattrs in inode body (Eric Whitney) 
- ASoC: codecs: wcd938x: fix soundwire initialisation race (Johan Hovold) 
- ASoC: codecs: wcd938x: fix codec initialisation race (Johan Hovold) 
- ASoC: codecs: wcd934x: fix resource leaks on component remove (Johan Hovold) 
- ASoC: codecs: wcd938x: fix missing mbhc init error handling (Johan Hovold) 
- ASoC: codecs: wcd938x: fix resource leaks on component remove (Johan Hovold) 
- ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove (Johan Hovold) 
- ASoC: codecs: wcd938x: fix missing clsh ctrl error handling (Johan Hovold) 
- ASoC: fsl_sai: Disable bit clock with transmitter (Matus Gajdos) 
- drm/amd/display: Keep PHY active for DP displays on DCN31 (Nicholas Kazlauskas) 
- drm/amd/display: Disable MPC split by default on special asic (Zhikai Zhai) 
- drm/client: Fix memory leak in drm_client_modeset_probe (Jocelyn Falempe) 
- drm/client: Fix memory leak in drm_client_target_cloned (Jocelyn Falempe) 
- selftests: tc: add ConnTrack procfs kconfig (Matthieu Baerts) 
- can: bcm: Fix UAF in bcm_proc_show() (YueHaibing) 
- regmap: Account for register length in SMBus I/O limits (Mark Brown) 
- regmap: Drop initial version of maximum transfer length fixes (Mark Brown) 
- selftests: tc: add 'ct' action kconfig dep (Matthieu Baerts) 
- selftests: tc: set timeout to 15 minutes (Matthieu Baerts) 
- fuse: ioctl: translate ENOSYS in outarg (Miklos Szeredi) 
- btrfs: zoned: fix memory leak after finding block group with super blocks (Filipe Manana) 
- fuse: revalidate: don't invalidate if interrupted (Miklos Szeredi) 
- btrfs: fix warning when putting transaction with qgroups enabled after abort (Filipe Manana) 
- perf probe: Add test for regression introduced by switch to die_get_decl_file() (Georg Müller) 
- keys: Fix linking a duplicate key to a keyring's assoc_array (Petr Pavlu) 
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx (Luka Guzenko) 
- ALSA: hda/realtek: Add quirk for Clevo NS70AU (Christoffer Sandberg) 
- ALSA: hda/realtek - remove 3k pull low procedure (Kailang Yang) 
- LTS version: v5.15.122 (Jack Vogel) 
- x86/cpu/amd: Add a Zenbleed fix (Borislav Petkov (AMD))  [Orabug: 35641577]
- x86/cpu/amd: Move the errata checking functionality up (Borislav Petkov (AMD))  [Orabug: 35641577]

[5.15.0-105.121.2.el9uek]
- LTS version: v5.15.121 (Jack Vogel) 
- drm/atomic: Fix potential use-after-free in nonblocking commits (Daniel Vetter) 
- net/sched: sch_qfq: reintroduce lmax bound check for MTU (Pedro Tammela) 
- MIPS: kvm: Fix build error with KVM_MIPS_DEBUG_COP0_COUNTERS enabled (Thomas Bogendoerfer) 
- scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue (Manish Rangankar) 
- scsi: qla2xxx: Pointer may be dereferenced (Shreyas Deodhar) 
- scsi: qla2xxx: Correct the index of array (Bikash Hazarika) 
- scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (Nilesh Javali) 
- scsi: qla2xxx: Fix potential NULL pointer dereference (Bikash Hazarika) 
- scsi: qla2xxx: Fix buffer overrun (Quinn Tran) 
- scsi: qla2xxx: Avoid fcport pointer dereference (Nilesh Javali) 
- scsi: qla2xxx: Array index may go out of bound (Nilesh Javali) 
- scsi: qla2xxx: Wait for io return on terminate rport (Quinn Tran) 
- tracing/probes: Fix to update dynamic data counter if fetcharg uses it (Masami Hiramatsu (Google)) 
- tracing/probes: Fix not to count error code to total length (Masami Hiramatsu (Google)) 
- selftests: mptcp: depend on SYN_COOKIES (Matthieu Baerts) 
- selftests: mptcp: sockopt: return error if wrong mark (Matthieu Baerts) 
- tracing: Fix null pointer dereference in tracing_err_log_open() (Mateusz Stachyra) 
- xtensa: ISS: fix call to split_if_spec (Max Filippov) 
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (Zheng Yejian) 
- ring-buffer: Fix deadloop issue on reading trace_pipe (Zheng Yejian) 
- net: ena: fix shift-out-of-bounds in exponential backoff (Krister Johansen) 
- samples: ftrace: Save required argument registers in sample trampolines (Florent Revest) 
- tracing: Fix memory leak of iter->temp when reading trace_pipe (Zheng Yejian) 
- tracing/histograms: Add histograms to hist_vars if they have referenced variables (Mohamed Khalfella) 
- s390/decompressor: fix misaligned symbol build error (Heiko Carstens) 
- bus: ixp4xx: fix IXP4XX_EXP_T1_MASK (Jonas Gorski) 
- Revert "8250: add support for ASIX devices with a FIFO bug" (Jiaqing Zhao) 
- soundwire: qcom: fix storing port config out-of-bounds (Krzysztof Kozlowski) 
- opp: Fix use-after-free in lazy_opp_tables after probe deferral (Stephan Gerhold) 
- meson saradc: fix clock divider mask length (George Stark) 
- xhci: Show ZHAOXIN xHCI root hub speed correctly (Weitao Wang) 
- xhci: Fix TRB prefetch issue of ZHAOXIN hosts (Weitao Wang) 
- xhci: Fix resume issue of some ZHAOXIN hosts (Weitao Wang) 
- ceph: don't let check_caps skip sending responses for revoke msgs (Xiubo Li) 
- libceph: harden msgr2.1 frame segment length checks (Ilya Dryomov) 
- firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() (Christophe JAILLET) 
- tty: serial: imx: fix rs485 rx after tx (Martin Fuzzey) 
- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk (Christophe JAILLET) 
- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error (Christophe JAILLET) 
- serial: atmel: don't enable IRQs prematurely (Dan Carpenter) 
- drm/ttm: Don't leak a resource on swapout move error (Thomas Hellström) 
- drm/amdgpu: avoid restore process run into dead loop. (gaba) 
- drm/amd/display: Correct DMUB_FW_VERSION macro (Mario Limonciello) 
- drm/amdgpu: fix clearing mappings for BOs that are always valid in VM (Samuel Pitoiset) 
- drm/rockchip: vop: Leave vblank enabled in self-refresh (Brian Norris) 
- drm/atomic: Allow vblank-enabled + self-refresh "disable" (Brian Norris) 
- fs: dlm: return positive pid value for F_GETLK (Alexander Aring) 
- dm init: add dm-mod.waitfor to wait for asynchronously probed block devices (Peter Korsgaard) 
- md/raid0: add discard support for the 'original' layout (Jason Baron) 
- mfd: pm8008: Fix module autoloading (Johan Hovold) 
- misc: pci_endpoint_test: Re-init completion for every test (Damien Le Moal) 
- misc: pci_endpoint_test: Free IRQs before removing the device (Damien Le Moal) 
- PCI: rockchip: Set address alignment for endpoint mode (Damien Le Moal) 
- PCI: rockchip: Use u32 variable to access 32-bit registers (Rick Wertenbroek) 
- PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core (Rick Wertenbroek) 
- PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked (Rick Wertenbroek) 
- PCI: rockchip: Write PCI Device ID to correct register (Rick Wertenbroek) 
- PCI: rockchip: Assert PCI Configuration Enable bit after probe (Rick Wertenbroek) 
- PCI: qcom: Disable write access to read only registers for IP v2.3.3 (Manivannan Sadhasivam) 
- PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 (Robin Murphy) 
- PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold (Ondrej Zary) 
- dm integrity: reduce vmalloc space footprint on 32-bit architectures (Mikulas Patocka) 
- hwrng: imx-rngc - fix the timeout for init and self check (Martin Kaiser) 
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting (Siddh Raman Pant) 
- ext4: only update i_reserved_data_blocks on successful block allocation (Baokun Li) 
- ext4: turn quotas off if mount failed after enabling quotas (Baokun Li) 
- ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (Chao Yu) 
- ext4: fix wrong unit use in ext4_mb_new_blocks (Kemeng Shi) 
- ext4: get block from bh in ext4_free_blocks for fast commit replay (Kemeng Shi) 
- ext4: fix wrong unit use in ext4_mb_clear_bb (Kemeng Shi) 
- ext4: Fix reusing stale buffer heads from last failed mounting (Zhihao Cheng) 
- MIPS: KVM: Fix NULL pointer dereference (Huacai Chen) 
- MIPS: Loongson: Fix cpu_probe_loongson() again (Huacai Chen) 
- erofs: fix compact 4B support for 16k block size (Gao Xiang) 
- powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 (Michael Ellerman) 
- misc: fastrpc: Create fastrpc scalar with correct buffer count (Ekansh Gupta) 
- powerpc: Fail build if using recordmcount with binutils v2.37 (Naveen N Rao) 
- mm/damon/ops-common: atomically test and clear young on ptes and pmds (Ryan Roberts) 
- net: bcmgenet: Ensure MDIO unregistration has clocks enabled (Florian Fainelli) 
- mtd: rawnand: meson: fix unaligned DMA buffers handling (Arseniy Krasnov) 
- tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (Jarkko Sakkinen) 
- pinctrl: amd: Only use special debounce behavior for GPIO 0 (Mario Limonciello) 
- pinctrl: amd: Detect and mask spurious interrupts (Kornel Dulęba) 
- pinctrl: amd: Detect internal GPIO0 debounce handling (Mario Limonciello) 
- pinctrl: amd: Fix mistake in handling clearing pins at startup (Mario Limonciello) 
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() (Chao Yu) 
- fs/ntfs3: Check fields while reading (Konstantin Komarov) 
- nvme-pci: fix DMA direction of unmapping integrity data (Ming Lei) 
- nvme-pci: remove nvme_queue from nvme_iod (Keith Busch) 
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Pedro Tammela) 
- net/sched: sch_qfq: refactor parsing of netlink parameters (Pedro Tammela) 
- net/sched: make psched_mtu() RTNL-less safe (Pedro Tammela) 
- netdevsim: fix uninitialized data in nsim_dev_trap_fa_cookie_write() (Dan Carpenter) 
- riscv: mm: fix truncation warning on RV32 (Jisheng Zhang) 
- net/sched: flower: Ensure both minimum and maximum ports are specified (Ido Schimmel) 
- bpf: cpumap: Fix memory leak in cpu_map_update_elem (Pu Lehui) 
- wifi: airo: avoid uninitialized warning in airo_get_rate() (Randy Dunlap) 
- erofs: fix fsdax unavailability for chunk-based regular files (Xin Yin) 
- erofs: decouple basic mount options from fs_context (Gao Xiang) 
- erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF (Chunhai Guo) 
- octeontx2-pf: Add additional check for MCAM rules (Suman Ghosh) 
- drm/i915: Fix one wrong caching mode enum usage (Tvrtko Ursulin) 
- riscv, bpf: Fix inconsistent JIT image generation (Björn Töpel) 
- bpf, riscv: Support riscv jit to provide bpf_line_info (Pu Lehui) 
- igc: Fix inserting of empty frame for launchtime (Florian Kauer) 
- igc: Fix launchtime before start of cycle (Florian Kauer) 
- kernel/trace: Fix cleanup logic of enable_trace_eprobe (Tzvetomir Stoyanov (VMware)) 
- platform/x86: wmi: Break possible infinite loop when parsing GUID (Andy Shevchenko) 
- platform/x86: wmi: move variables (Barnabás Pőcze) 
- platform/x86: wmi: use guid_t and guid_equal() (Barnabás Pőcze) 
- platform/x86: wmi: remove unnecessary argument (Barnabás Pőcze) 
- ipv6/addrconf: fix a potential refcount underflow for idev (Ziyang Xuan) 
- NTB: ntb_tool: Add check for devm_kcalloc (Jiasheng Jiang) 
- NTB: ntb_transport: fix possible memory leak while device_register() fails (Yang Yingliang) 
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init() (Yuan Can) 
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init() (Yuan Can) 
- ntb: idt: Fix error handling in idt_pci_driver_init() (Yuan Can) 
- udp6: fix udp6_ehashfn() typo (Eric Dumazet) 
- icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). (Kuniyuki Iwashima) 
- net: prevent skb corruption on frag list segmentation (Paolo Abeni) 
- net: bgmac: postpone turning IRQs off to avoid SoC hangs (Rafał Miłecki) 
- ionic: remove WARN_ON to prevent panic_on_warn (Nitya Sunkad) 
- gve: Set default duplex configuration to full (Junfeng Guo) 
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (M A Ramdhan) 
- net: mvneta: fix txq_map in case of txq_number==1 (Klaus Kudielka) 
- bpf: Fix max stack depth check for async callbacks (Kumar Kartikeya Dwivedi) 
- scsi: qla2xxx: Fix error code in qla2x00_start_sp() (Dan Carpenter) 
- igc: Handle PPS start time programming for past time values (Aravindhan Gunasekaran) 
- igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings (Prasad Koya) 
- net/mlx5e: Check for NOT_READY flag state after locking (Vlad Buslov) 
- net/mlx5e: fix memory leak in mlx5e_ptp_open (Zhengchao Shao) 
- net/mlx5e: fix double free in mlx5e_destroy_flow_table (Zhengchao Shao) 
- igc: Remove delay during TX ring configuration (Muhammad Husaini Zulkifli) 
- drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags (Marek Vasut) 
- drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime (Douglas Anderson) 
- drm/panel: simple: Add connector_type for innolux_at043tn24 (Fabio Estevam) 
- ksmbd: validate session id and tree id in the compound request (Namjae Jeon) 
- ksmbd: fix out-of-bound read in smb2_write (Namjae Jeon) 
- ksmbd: validate command payload size (Namjae Jeon) 
- ksmbd: use ksmbd_req_buf_next() in ksmbd_smb2_check_message() (Ralph Boehme) 
- workqueue: clean up WORK_* constant types, clarify masking (Linus Torvalds) 
- net: lan743x: Don't sleep in atomic context (Moritz Fischer) 
- io_uring: add reschedule point to handle_tw_list() (Jens Axboe) 
- io_uring: Use io_schedule* in cqring wait (Andres Freund) 
- block/partition: fix signedness issue for Amiga partitions (Michael Schmitz) 
- tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (Sherry Sun) 
- wireguard: netlink: send staged packets when setting initial private key (Jason A. Donenfeld) 
- wireguard: queueing: use saner cpu selection wrapping (Jason A. Donenfeld) 
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Thadeu Lima de Souza Cascardo) 
- netfilter: nf_tables: do not ignore genmask when looking up chain by id (Thadeu Lima de Souza Cascardo) 
- netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (Florent Revest) 
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails (Pablo Neira Ayuso) 
- fanotify: disallow mount/sb marks on kernel internal pseudo fs (Amir Goldstein) 
- ovl: fix null pointer dereference in ovl_get_acl_rcu() (Zhihao Cheng) 
- fs: no need to check source (Jan Kara) 
- leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename (Christian Marangi) 
- ARM: orion5x: fix d2net gpio initialization (Arnd Bergmann) 
- ARM: dts: qcom: ipq4019: fix broken NAND controller properties override (Krzysztof Kozlowski) 
- ASoC: mediatek: mt8173: Fix snd_soc_component_initialize error path (Ricardo Ribalda Delgado) 
- ASoC: mediatek: mt8173: Fix irq error path (Ricardo Ribalda Delgado) 
- btrfs: do not BUG_ON() on tree mod log failure at __btrfs_cow_block() (Filipe Manana) 
- btrfs: fix extent buffer leak after tree mod log failure at split_node() (Filipe Manana) 
- btrfs: fix race when deleting quota root from the dirty cow roots list (Filipe Manana) 
- btrfs: reinsert BGs failed to reclaim (Naohiro Aota) 
- btrfs: bail out reclaim process if filesystem is read-only (Naohiro Aota) 
- btrfs: delete unused BGs while reclaiming BGs (Naohiro Aota) 
- btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profile (Matt Corallo) 
- fs: avoid empty option when generating legacy mount string (Thomas Weißschuh) 
- jffs2: reduce stack usage in jffs2_build_xattr_subsystem() (Fabian Frederick) 
- ipvs: increase ip_vs_conn_tab_bits range for 64BIT (Abhijeet Rastogi) 
- fs: Lock moved directories (Jan Kara) 
- fs: Establish locking order for unrelated directories (Jan Kara) 
- Revert "f2fs: fix potential corruption when moving a directory" (Jan Kara) 
- ext4: Remove ext4 locking of moved directory (Jan Kara) 
- shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs (Roberto Sassu) 
- autofs: use flexible array in ioctl structure (Arnd Bergmann) 
- integrity: Fix possible multiple allocation in integrity_inode_get() (Tianjia Zhang) 
- um: Use HOST_DIR for mrproper (Kees Cook) 
- bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent (Zheng Wang) 
- bcache: Remove unnecessary NULL point check in node allocations (Zheng Wang) 
- bcache: fixup btree_cache_wait list damage (Mingzhe Zou) 
- mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used. (Chevron Li) 
- mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS (Ulf Hansson) 
- mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M (Robert Marko) 
- mmc: core: disable TRIM on Kingston EMMC04G-M627 (Robert Marko) 
- io_uring: wait interruptibly for request completions on exit (Jens Axboe) 
- NFSD: add encoding of op_recall flag for write delegation (Dai Ngo) 
- i2c: qup: Add missing unwind goto in qup_i2c_probe() (Shuai Jiang) 
- btrfs: do not BUG_ON() on tree mod log failure at balance_level() (Filipe Manana) 
- extcon: usbc-tusb320: Convert to i2c's .probe_new() (Uwe Kleine-König) 
- i2c: xiic: Don't try to handle more interrupt events after error (Robert Hancock) 
- i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (Marek Vasut) 
- apparmor: fix missing error check for rhashtable_insert_fast (Danila Chernetsov) 
- sh: dma: Fix DMA channel offset calculation (Artur Rojek) 
- s390/qeth: Fix vipa deletion (Thorsten Winkler) 
- octeontx-af: fix hardware timestamp configuration (Hariprasad Kelam) 
- net: dsa: tag_sja1105: fix MAC DA patching from meta frames (Vladimir Oltean) 
- pptp: Fix fib lookup calls. (Guillaume Nault) 
- riscv: move memblock_allow_resize() after linear mapping is ready (Woody Zhang) 
- net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX (Lin Ma) 
- xsk: Honor SO_BINDTODEVICE on bind (Ilya Maximets) 
- tcp: annotate data races in __tcp_oow_rate_limited() (Eric Dumazet) 
- net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode (Vladimir Oltean) 
- powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y (Randy Dunlap) 
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr() (Zeng Heng) 
- octeontx2-af: Add validation before accessing cgx and lmac (Hariprasad Kelam) 
- octeontx2-af: Fix mapping for NIX block from CGX connection (Hariprasad Kelam) 
- f2fs: fix error path handling in truncate_dnode() (Chao Yu) 
- mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 (Nishanth Menon) 
- spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (Jonas Gorski) 
- net: dsa: vsc73xx: fix MTU configuration (Pawel Dembicki) 
- ibmvnic: Do not reset dql stats on NON_FATAL err (Nick Child) 
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766. (Tobias Heider) 
- net/sched: act_ipt: add sanity checks on table name and hook locations (Florian Westphal) 
- sctp: fix potential deadlock on &net->sctp.addr_wq_lock (Chengfeng Ye) 
- media: cec: i2c: ch7322: also select REGMAP (Randy Dunlap) 
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times (Jouni Högander) 
- rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (Christophe JAILLET) 
- md/raid10: fix the condition to call bio_end_io_acct() (Li Nan) 
- pwm: mtk_disp: Fix the disable flow of disp_pwm (Shuijing Li) 
- pwm: ab8500: Fix error code in probe() (Dan Carpenter) 
- pwm: sysfs: Do not apply state to already disabled PWMs (Marek Vasut) 
- pwm: imx-tpm: force 'real_period' to be zero in suspend (Fancy Fang) 
- phy: tegra: xusb: check return value of devm_kzalloc() (Claudiu Beznea) 
- mfd: stmpe: Only disable the regulators if they are enabled (Christophe JAILLET) 
- KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler (Christian Borntraeger) 
- KVM: s390: vsie: fix the length of APCB bitmap (Pierre Morel) 
- mfd: stmfx: Nullify stmfx->vdd in case of error (Amelie Delaunay) 
- mfd: stmfx: Fix error path in stmfx_chip_init (Amelie Delaunay) 
- nvmem: rmem: Use NVMEM_DEVID_AUTO (Phil Elwell) 
- test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation (Mirsad Goran Todorovac) 
- serial: 8250_omap: Use force_suspend and resume for system suspend (Tony Lindgren) 
- Revert "usb: common: usb-conn-gpio: Set last role to unknown before initial detection" (Greg Kroah-Hartman) 
- mfd: intel-lpss: Add missing check for platform_get_resource (Jiasheng Jiang) 
- usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe() (Christophe JAILLET) 
- usb: common: usb-conn-gpio: Set last role to unknown before initial detection (Prashanth K) 
- usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe() (Christophe JAILLET) 
- usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() (Christophe JAILLET) 
- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes (Nico Boehr) 
- media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() (Dan Carpenter) 
- media: venus: helpers: Fix ALIGN() of non power of two (Rikard Falkeborn) 
- mfd: rt5033: Drop rt5033-battery sub-device (Stephan Gerhold) 
- coresight: Fix loss of connection info when a module is unloaded (James Clark) 
- kernfs: fix missing kernfs_idr_lock to remove an ID from the IDR (Muchun Song) 
- serial: 8250: lock port for UART_IER access in omap8250_irq() (John Ogness) 
- serial: 8250: lock port for stop_rx() in omap8250_irq() (John Ogness) 
- usb: hide unused usbfs_notify_suspend/resume functions (Arnd Bergmann) 
- usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (Li Yang) 
- extcon: Fix kernel doc of property capability fields to avoid warnings (Andy Shevchenko) 
- extcon: Fix kernel doc of property fields to avoid warnings (Andy Shevchenko) 
- usb: gadget: u_serial: Add null pointer check in gserial_suspend (Prashanth K) 
- usb: dwc3: qcom: Fix potential memory leak (Vladislav Efanov) 
- clk: qcom: ipq6018: fix networking resets (Robert Marko) 
- clk: qcom: reset: support resetting multiple bits (Robert Marko) 
- clk: qcom: reset: Allow specifying custom reset delay (Stephan Gerhold) 
- media: i2c: Correct format propagation for st-mipid02 (Daniel Scally) 
- media: usb: siano: Fix warning due to null work_func_t function pointer (Duoming Zhou) 
- media: videodev2.h: Fix struct v4l2_input tuner index comment (Marek Vasut) 
- media: usb: Check az6007_read() return value (Daniil Dulov) 
- clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks (Mantas Pucka) 
- clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs (Taniya Das) 
- serial: 8250: omap: Fix freeing of resources on failed register (Tony Lindgren) 
- usb: dwc2: Fix some error handling paths (Christophe JAILLET) 
- usb: dwc2: platform: Improve error reporting for problems during .remove() (Uwe Kleine-König) 
- sh: j2: Use ioremap() to translate device tree address into kernel memory (John Paul Adrian Glaubitz) 
- w1: fix loop in w1_fini() (Dan Carpenter) 
- w1: w1_therm: fix locking behavior in convert_t (Stefan Wahren) 
- SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (Ding Hui) 
- block: increment diskseq on all media change events (Demi Marie Obenour) 
- block: change all __u32 annotations to __be32 in affs_hardblocks.h (Michael Schmitz) 
- block: add overflow checks for Amiga partition support (Michael Schmitz) 
- block: fix signed int overflow in Amiga partition support (Michael Schmitz) 
- ALSA: jack: Fix mutex call in snd_jack_report() (Takashi Iwai) 
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (Werner Sembach) 
- iio: accel: fxls8962af: fixup buffer scan element type (Sean Nyekjaer) 
- iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF (Sean Nyekjaer) 
- iio: adc: ad7192: Fix internal/external clock selection (Fabrizio Lamarque) 
- iio: adc: ad7192: Fix null ad7192_state pointer access (Fabrizio Lamarque) 
- phy: tegra: xusb: Clear the driver reference in usb-phy dev (EJ Hsu) 
- usb: dwc3: gadget: Propagate core init errors to UDC during pullup (Krishna Kurapati) 
- USB: serial: option: add LARA-R6 01B PIDs (Davide Tronchin) 
- io_uring: ensure IOPOLL locks around deferred work (Jens Axboe) 
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page (Liu Shixin) 
- ACPI: utils: Fix acpi_evaluate_dsm_typed() redefinition error (Kiran K) 
- ksmbd: avoid field overflow warning (Arnd Bergmann) 
- efi/libstub: Disable PCI DMA before grabbing the EFI memory map (Ard Biesheuvel) 
- kbuild: Disable GCOV for *.mod.o (Sami Tolvanen) 
- hwrng: st - keep clock enabled while hwrng is registered (Martin Kaiser) 
- dax/kmem: Pass valid argument to memory_group_register_static (Tarun Sahu) 
- dax: Introduce alloc_dev_dax_id() (Dan Williams) 
- dax: Fix dax_mapping_release() use after free (Dan Williams) 
- SMB3: Do not send lease break acknowledgment if all file handles have been closed (Bharath SM) 
- NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION (Olga Kornievskaia) 
- crypto: qat - unmap buffers before free for RSA (Hareshx Sankar Raj) 
- crypto: qat - unmap buffer before free for DH (Hareshx Sankar Raj) 
- crypto: qat - Use helper to set reqsize (Herbert Xu) 
- crypto: kpp - Add helper to set reqsize (Herbert Xu) 
- crypto: qat - use reference to structure in dma_map_single() (Damian Muszynski) 
- crypto: qat - replace get_current_node() with numa_node_id() (Andre Przywara) 
- ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard (Masahiro Yamada) 
- modpost: fix off by one in is_executable_section() (Dan Carpenter) 
- crypto: marvell/cesa - Fix type mismatch warning (Arnd Bergmann) 
- modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} (Masahiro Yamada) 
- modpost: fix section mismatch message for R_ARM_ABS32 (Masahiro Yamada) 
- crypto: nx - fix build warnings when DEBUG_FS is not enabled (Randy Dunlap) 
- modpost: remove broken calculation of exception_table_entry size (Masahiro Yamada) 
- hwrng: virtio - Fix race on data_avail and actual data (Herbert Xu) 
- hwrng: virtio - always add a pending request (Laurent Vivier) 
- hwrng: virtio - don't waste entropy (Laurent Vivier) 
- hwrng: virtio - don't wait on cleanup (Laurent Vivier) 
- hwrng: virtio - add an internal buffer (Laurent Vivier) 
- powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Aneesh Kumar K.V) 
- powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo (Aneesh Kumar K.V) 
- riscv: uprobes: Restore thread.bad_cause (Tiezhu Yang) 
- powerpc: update ppc_save_regs to save current r1 in pt_regs (Aditya Gupta) 
- powerpc: simplify ppc_save_regs (Nicholas Piggin) 
- powerpc/powernv/sriov: perform null check on iov before dereferencing iov (Colin Ian King) 
- pinctrl: at91-pio4: check return value of devm_kasprintf() (Claudiu Beznea) 
- pinctrl: microchip-sgpio: check return value of devm_kasprintf() (Claudiu Beznea) 
- powerpc/64s: Fix VAS mm use after free (Nicholas Piggin) 
- perf dwarf-aux: Fix off-by-one in die_get_varname() (Namhyung Kim) 
- perf script: Fix allocation of evsel->priv related to per-event dump files (Arnaldo Carvalho de Melo) 
- powerpc/signal32: Force inlining of __unsafe_save_user_regs() and save_tm_user_regs_unsafe() (Christophe Leroy) 
- powerpc/interrupt: Don't read MSR from interrupt_exit_kernel_prepare() (Christophe Leroy) 
- kcsan: Don't expect 64 bits atomic builtins from 32 bits architectures (Christophe Leroy) 
- pinctrl: cherryview: Return correct value if pin in push-pull mode (Andy Shevchenko) 
- perf bench: Add missing setlocale() call to allow usage of %'d style formatting (Arnaldo Carvalho de Melo) 
- perf bench: Use unbuffered output when pipe/tee'ing to a file (Sohaib Mohamed) 
- PCI: Add pci_clear_master() stub for non-CONFIG_PCI (Sui Jingfeng) 
- PCI: ftpci100: Release the clock resources (Junyan Ye) 
- PCI: pciehp: Cancel bringup sequence if card is not present (Rongguang Wei) 
- scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (Yuchen Yang) 
- PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free (Ding Hui) 
- pinctrl: bcm2835: Handle gpiochip_add_pin_range() errors (Christophe JAILLET) 
- scsi: qedf: Fix NULL dereference in error handling (Jinhong Zhu) 
- PCI: vmd: Reset VMD config register between soft reboots (Nirmal Patel) 
- PCI: cadence: Fix Gen2 Link Retraining process (Siddharth Vadapalli) 
- clk: Fix memory leak in devm_clk_notifier_register() (Fei Shao) 
- ASoC: imx-audmix: check return value of devm_kasprintf() (Claudiu Beznea) 
- ovl: update of dentry revalidate flags after copy up (Amir Goldstein) 
- drivers: meson: secure-pwrc: always enable DMA domain (Alexey Romanov) 
- clk: ti: clkctrl: check return value of kasprintf() (Claudiu Beznea) 
- clk: keystone: sci-clk: check return value of kasprintf() (Claudiu Beznea) 
- clk: si5341: free unused memory on probe failure (Claudiu Beznea) 
- clk: si5341: check return value of {devm_}kasprintf() (Claudiu Beznea) 
- clk: si5341: return error if one synth clock registration fails (Claudiu Beznea) 
- clk: cdce925: check return value of kasprintf() (Claudiu Beznea) 
- clk: vc5: check memory returned by kasprintf() (Claudiu Beznea) 
- drm/msm/dpu: correct MERGE_3D length (Dmitry Baryshkov) 
- arm64: dts: mediatek: mt8192: Fix CPUs capacity-dmips-mhz (Nícolas F. R. A. Prado) 
- arm64: dts: mediatek: Add cpufreq nodes for MT8192 (Allen-KH Cheng) 
- drm/msm/dp: Free resources after unregistering them (Bjorn Andersson) 
- drm/msm/dpu: do not enable color-management if DSPPs are not available (Dmitry Baryshkov) 
- ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer (Su Hui) 
- clk: tegra: tegra124-emc: Fix potential memory leak (Yuan Can) 
- clk: clocking-wizard: Fix Oops in clk_wzrd_register_divider() (Dan Carpenter) 
- arm64: dts: qcom: sm8250-edo: Panel framebuffer is 2.5k instead of 4k (Marijn Suijten) 
- clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() (Yuxing Liu) 
- clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe (Hao Luo) 
- RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context (Kashyap Desai) 
- RDMA/bnxt_re: wraparound mbox producer index (Kashyap Desai) 
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init (Dmitry Baryshkov) 
- amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (Chia-I Wu) 
- drm/radeon: fix possible division-by-zero errors (Nikita Zhandarovich) 
- drm/amd/display: Fix artifacting on eDP panels when engaging freesync video mode (Aurabindo Pillai) 
- drm/amdkfd: Fix potential deallocation of previously deallocated memory. (Daniil Dulov) 
- ARM: dts: BCM5301X: fix duplex-full => full-duplex (Christian Lamparter) 
- hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272 (Guenter Roeck) 
- hwmon: (adm1275) Allow setting sample averaging (Potin Lai) 
- hwmon: (gsc-hwmon) fix fan pwm temperature scaling (Tim Harvey) 
- ARM: dts: stm32: fix i2s endpoint format property for stm32mp15xx-dkx (Olivier Moysan) 
- ARM: dts: stm32: Fix audio routing on STM32MP15xx DHCOM PDK2 (Marek Vasut) 
- arm64: dts: ti: k3-j7200: Fix physical address of pin (Keerthy) 
- fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() (Christophe JAILLET) 
- arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1 (Wolfram Sang) 
- ARM: dts: iwg20d-q7-common: Fix backlight pwm specifier (Geert Uytterhoeven) 
- RDMA/hns: Fix hns_roce_table_get return value (Chengchang Tang) 
- IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate (Brendan Cunningham) 
- IB/hfi1: Use bitmap_zalloc() when applicable (Christophe JAILLET) 
- RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes (Arnd Bergmann) 
- soc/fsl/qe: fix usb.c build errors (Randy Dunlap) 
- ARM: dts: meson8: correct uart_B and uart_C clock references (Martin Blumenstingl) 
- ASoC: es8316: Do not set rate constraints for unsupported MCLKs (Cristian Ciocaltea) 
- ASoC: es8316: Increment max value for ALC Capture Target Volume control (Cristian Ciocaltea) 
- memory: brcmstb_dpfe: fix testing array offset after use (Krzysztof Kozlowski) 
- ARM: dts: stm32: Shorten the AV96 HDMI sound card name (Marek Vasut) 
- arm64: dts: mediatek: mt8183: Add mediatek,broken-save-restore-fw to kukui (Douglas Anderson) 
- arm64: dts: qcom: apq8096: fix fixed regulator name property (Krzysztof Kozlowski) 
- ARM: omap2: fix missing tick_broadcast() prototype (Arnd Bergmann) 
- ARM: ep93xx: fix missing-prototype warnings (Arnd Bergmann) 
- drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H (Dario Binacchi) 
- arm64: dts: qcom: apq8016-sbc: Fix 1.8V power rail on LS expansion (Stephan Gerhold) 
- arm64: dts: qcom: apq8016-sbc: Fix regulator constraints (Stephan Gerhold) 
- arm64: dts: qcom: Drop unneeded extra device-specific includes (Stephan Gerhold) 
- arm64: dts: qcom: apq8016-sbc: fix mpps state names (Dmitry Baryshkov) 
- arm64: dts: qcom: apq8016-sbc: Clarify firmware-names (Stephan Gerhold) 
- arm64: dts: qcom: apq8016-sbc: Update modem and WiFi firmware path (Bjorn Andersson) 
- arm64: dts: qcom: db820c: Move blsp1_uart2 pin states to msm8996.dtsi (Yassine Oudjana) 
- arm64: dts: qcom: sdm845: correct camss unit address (Krzysztof Kozlowski) 
- arm64: dts: qcom: sdm630: correct camss unit address (Krzysztof Kozlowski) 
- arm64: dts: qcom: msm8996: correct camss unit address (Krzysztof Kozlowski) 
- arm64: dts: qcom: msm8994: correct SPMI unit address (Krzysztof Kozlowski) 
- arm64: dts: qcom: msm8916: correct camss unit address (Krzysztof Kozlowski) 
- ARM: dts: gta04: Move model property out of pinctrl node (Tony Lindgren) 
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK (Konrad Dybcio) 
- drm/msm/disp/dpu: get timing engine status from intf status register (Vinod Polimera) 
- drm/msm/dsi: don't allow enabling 14nm VCO with unprogrammed rate (Dmitry Baryshkov) 
- RDMA/bnxt_re: Fix to remove an unnecessary log (Kalesh AP) 
- RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid (Kalesh AP) 
- RDMA/bnxt_re: Use unique names while registering interrupts (Kalesh AP) 
- RDMA/bnxt_re: Fix to remove unnecessary return labels (Kalesh AP) 
- RDMA/bnxt_re: Disable/kill tasklet only if it is enabled (Selvin Xavier) 
- clk: imx: scu: use _safe list iterator to avoid a use after free (Dan Carpenter) 
- arm64: dts: microchip: sparx5: do not use PSCI on reference boards (Robert Marko) 
- bus: ti-sysc: Fix dispc quirk masking bool variables (Tony Lindgren) 
- ARM: dts: stm32: Move ethernet MAC EEPROM from SoM to carrier boards (Marek Vasut) 
- drm/panel: sharp-ls043t1le01: adjust mode settings (Dmitry Baryshkov) 
- drm: sun4i_tcon: use devm_clk_get_enabled in sun4i_tcon_init_clocks (XuDong Liu) 
- Input: adxl34x - do not hardcode interrupt trigger type (Marek Vasut) 
- ARM: dts: meson8b: correct uart_B and uart_C clock references (hfdevel at gmx.net) 
- ARM: dts: BCM5301X: Drop "clock-names" from the SPI node (Rafał Miłecki) 
- drm/vram-helper: fix function names in vram helper doc (Luc Ma) 
- drm/bridge: tc358768: fix THS_TRAILCNT computation (Francesco Dolcini) 
- drm/bridge: tc358768: fix TXTAGOCNT computation (Francesco Dolcini) 
- drm/bridge: tc358768: fix THS_ZEROCNT computation (Francesco Dolcini) 
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (Francesco Dolcini) 
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation (Francesco Dolcini) 
- drm/bridge: tc358768: fix TCLK_ZEROCNT computation (Francesco Dolcini) 
- drm/bridge: tc358768: fix PLL target frequency (Francesco Dolcini) 
- drm/bridge: tc358768: fix PLL parameters computation (Francesco Dolcini) 
- drm/bridge: tc358768: always enable HS video mode (Francesco Dolcini) 
- Input: drv260x - sleep between polling GO bit (Luca Weiss) 
- drm/amd/display: Explicitly specify update type per plane info change (Nicholas Kazlauskas) 
- radeon: avoid double free in ci_dpm_init() (Nikita Zhandarovich) 
- drm/amd/display: Add logging for display MALL refresh setting (Wesley Chalmers) 
- netlink: Add __sock_i_ino() for __netlink_diag_dump(). (Kuniyuki Iwashima) 
- ipvlan: Fix return value of ipvlan_queue_xmit() (Cambda Zhu) 
- netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value. (Ilia.Gavrilov) 
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one (Florian Westphal) 
- lib/ts_bm: reset initial match offset for every block of text (Jeremy Sowden) 
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local (Lin Ma) 
- nfc: llcp: simplify llcp_sock_connect() error paths (Krzysztof Kozlowski) 
- sfc: fix crash when reading stats while NIC is resetting (Edward Cree) 
- net: axienet: Move reset before 64-bit DMA detection (Maxim Kochetkov) 
- gtp: Fix use-after-free in __gtp_encap_destroy(). (Kuniyuki Iwashima) 
- selftests: rtnetlink: remove netdevsim device after ipsec offload test (Sabrina Dubroca) 
- bonding: do not assume skb mac_header is set (Eric Dumazet) 
- netlink: do not hard code device address lenth in fdb dumps (Eric Dumazet) 
- netlink: fix potential deadlock in netlink_set_err() (Eric Dumazet) 
- net: stmmac: fix double serdes powerdown (Bartosz Golaszewski) 
- igc: Fix race condition in PTP tx code (Vinicius Costa Gomes) 
- can: length: fix bitstuffing count (Vincent Mailhol) 
- bpf: Fix bpf socket lookup from tc/xdp to respect socket VRF bindings (Gilad Sever) 
- bpf: Call __bpf_sk_lookup()/__bpf_skc_lookup() directly via TC hookpoint (Gilad Sever) 
- bpf: Factor out socket lookup functions for the TC hookpoint. (Gilad Sever) 
- bpf: Omit superfluous address family check in __bpf_skc_lookup (Tobias Klauser) 
- wifi: ath9k: convert msecs to jiffies where needed (Dmitry Antipov) 
- wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection (Johannes Berg) 
- wifi: cfg80211: rewrite merging of inherited elements (Benjamin Berg) 
- wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() (Anjaneyulu) 
- iwlwifi: don't dump_stack() when we get an unexpected interrupt (Emmanuel Grumbach) 
- wifi: iwlwifi: pull from TXQs with softirqs disabled (Johannes Berg) 
- rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO (Edwin Peer) 
- wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() (Remi Pommarel) 
- memstick r592: make memstick_debug_get_tpc_name() static (Arnd Bergmann) 
- kexec: fix a memory leak in crash_shrink_memory() (Zhen Lei) 
- watchdog/perf: more properly prevent false positives with turbo modes (Douglas Anderson) 
- watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config (Douglas Anderson) 
- wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown (Marek Vasut) 
- wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled (Marek Vasut) 
- selftests/bpf: Fix check_mtu using wrong variable type (Jesper Dangaard Brouer) 
- wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes (Fedor Pchelkin) 
- wifi: ray_cs: Fix an error handling path in ray_probe() (Christophe JAILLET) 
- wifi: ray_cs: Drop useless status variable in parse_addr() (Andy Shevchenko) 
- wifi: ray_cs: Utilize strnlen() in parse_addr() (Andy Shevchenko) 
- wifi: wl3501_cs: Fix an error handling path in wl3501_probe() (Christophe JAILLET) 
- wl3501_cs: use eth_hw_addr_set() (Jakub Kicinski) 
- wifi: atmel: Fix an error handling path in atmel_probe() (Christophe JAILLET) 
- wifi: orinoco: Fix an error handling path in orinoco_cs_probe() (Christophe JAILLET) 
- wifi: orinoco: Fix an error handling path in spectrum_cs_probe() (Christophe JAILLET) 
- regulator: core: Streamline debugfs operations (Geert Uytterhoeven) 
- regulator: core: Fix more error checking for debugfs_create_dir() (Geert Uytterhoeven) 
- bpftool: JIT limited misreported as negative value on aarch64 (Alan Maguire) 
- nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() (Krzysztof Kozlowski) 
- spi: dw: Round of n_bytes to power of 2 (Joy Chakraborty) 
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen (Stanislav Fomichev) 
- libbpf: fix offsetof() and container_of() to work with CO-RE (Andrii Nakryiko) 
- sctp: add bpf_bypass_getsockopt proto callback (Alexander Mikhalitsyn) 
- wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() (Christophe JAILLET) 
- wifi: wilc1000: fix for absent RSN capabilities WFA testcase (Amisha Patel) 
- spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG (Vijaya Krishna Nivarthi) 
- samples/bpf: Fix buffer overflow in tcp_basertt (Pengcheng Yang) 
- libbpf: btf_dump_type_data_check_overflow needs to consider BTF_MEMBER_BITFIELD_SIZE (Martin KaFai Lau) 
- wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (Fedor Pchelkin) 
- wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation (Peter Seiderer) 
- igc: Enable and fix RX hash usage by netstack (Jesper Dangaard Brouer) 
- pstore/ram: Add check for kstrdup (Jiasheng Jiang) 
- ima: Fix build warnings (Roberto Sassu) 
- evm: Fix build warnings (Roberto Sassu) 
- evm: Complete description of evm_inode_setattr() (Roberto Sassu) 
- locking/atomic: arm: fix sync ops (Mark Rutland) 
- x86/mm: Fix __swp_entry_to_pte() for Xen PV guests (Juergen Gross) 
- perf/ibs: Fix interface via core pmu events (Ravi Bangoria) 
- kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined (Colin Ian King) 
- rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale (Qiuxu Zhuo) 
- rcu/rcuscale: Move rcu_scale_*() after kfree_scale_cleanup() (Qiuxu Zhuo) 
- rcuscale: Move shutdown from wait_event() to wait_event_idle() (Paul E. McKenney) 
- rcuscale: Always log error message (Li Zhijian) 
- rcutorture: Correct name of use_softirq module parameter (Paul E. McKenney) 
- thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe() (Christophe JAILLET) 
- cpufreq: intel_pstate: Fix energy_performance_preference for passive (Tero Kristo) 
- ARM: 9303/1: kprobes: avoid missing-declaration warnings (Arnd Bergmann) 
- powercap: RAPL: Fix CONFIG_IOSF_MBI dependency (Zhang Rui) 
- perf/arm-cmn: Fix DTC reset (Robin Murphy) 
- PM: domains: fix integer overflow issues in genpd_parse_state() (Nikita Zhandarovich) 
- clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe (Feng Mingxi) 
- tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode(). (Sebastian Andrzej Siewior) 
- posix-timers: Prevent RT livelock in itimer_delete() (Thomas Gleixner) 
- svcrdma: Prevent page release when nothing was received (Chuck Lever) 
- irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (John Paul Adrian Glaubitz) 
- md/raid10: fix io loss while replacement replace rdev (Li Nan) 
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request (Li Nan) 
- md/raid10: fix wrong setting of max_corr_read_errors (Li Nan) 
- md/raid10: fix overflow of md/safe_mode_delay (Li Nan) 
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter (Li Nan) 
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost (Li Nan) 
- x86/resctrl: Only show tasks' pid in current pid namespace (Shawn Wang) 
- fs: pipe: reveal missing function protoypes (Arnd Bergmann) 
- netfilter: nf_tables: drop map element references from preparation phase (Pablo Neira Ayuso) 
- LTS version: v5.15.120 (Jack Vogel) 
- nubus: Partially revert proc_create_single_data() conversion (Finn Thain) 
(Ben Hutchings) 
- drm/amdgpu: Validate VM ioctl flags. (Bas Nieuwenhuizen) 
- scripts/tags.sh: Resolve gtags empty index generation (Ahmed S. Darwish) 
- perf symbols: Symbol lookup with kcore can fail if multiple segments match stext (Krister Johansen) 
- Revert "thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe" (Ricardo Cañuelo) 
- HID: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651. (Mike Hommey) 
- HID: wacom: Use ktime_t rather than int when dealing with timestamps (Jason Gerecke) 
- bpf: ensure main program has an extable (Krister Johansen) 
- can: isotp: isotp_sendmsg(): fix return error fix on TX path (Oliver Hartkopp) 
- x86/smp: Use dedicated cache-line for mwait_play_dead() (Thomas Gleixner) 
- mm, hwpoison: when copy-on-write hits poison, take page offline (Jane Chu) 
- mm, hwpoison: try to recover from copy-on write faults (Tony Luck) 
- mptcp: consolidate fallback and non fallback state machine (Paolo Abeni) 
- mptcp: fix possible divide by zero in recvmsg() (Paolo Abeni) 
- net/rds: Allow MSG_NOSIGNAL in sendmsg (Gerd Rausch)  [Orabug: 35640815]
- uek-rpm: Prevent cls_tcindex module to be loaded on demand (Sherry Yang)  [Orabug: 35590149]

[5.15.0-105.119.1.el9uek]
- scsi: target: iscsi: Fix hang in the iSCSI login code (Maurizio Lombardi)  [Orabug: 35612128]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi)  [Orabug: 35612128]
- uek-rpm: Change the build tool versions to the latest (Jack Vogel)  [Orabug: 35378773]
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable (Srinivas Pandruvada)  [Orabug: 35612621]
- VM: arm64: Prevent guests from enabling HA/HD on Ampere1 (Oliver Upton)  [Orabug: 35620537]
- KVM: arm64: Refactor HFGxTR configuration into separate helpers (Oliver Upton)  [Orabug: 35620537]
- arm64: errata: Mitigate Ampere1 erratum AC03_CPU_38 at stage-2 (Oliver Upton)  [Orabug: 35620537]
- arm64: disable CAVIUM_ERRATUM_23154 (Mihai Carabas)  [Orabug: 35620537]
- uek/kconfig/x86: Enable late microcode loading (Boris Ostrovsky)  [Orabug: 35623010]