[El-errata] ELSA-2023-12017 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Thu Jan 12 18:37:16 UTC 2023


Oracle Linux Security Advisory ELSA-2023-12017

http://linux.oracle.com/errata/ELSA-2023-12017.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-5.15.0-6.80.3.1.el9uek.x86_64.rpm
kernel-uek-5.15.0-6.80.3.1.el9uek.x86_64.rpm
kernel-uek-core-5.15.0-6.80.3.1.el9uek.x86_64.rpm
kernel-uek-debug-5.15.0-6.80.3.1.el9uek.x86_64.rpm
kernel-uek-debug-core-5.15.0-6.80.3.1.el9uek.x86_64.rpm
kernel-uek-debug-devel-5.15.0-6.80.3.1.el9uek.x86_64.rpm
kernel-uek-debug-modules-5.15.0-6.80.3.1.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-5.15.0-6.80.3.1.el9uek.x86_64.rpm
kernel-uek-devel-5.15.0-6.80.3.1.el9uek.x86_64.rpm
kernel-uek-doc-5.15.0-6.80.3.1.el9uek.noarch.rpm
kernel-uek-modules-5.15.0-6.80.3.1.el9uek.x86_64.rpm
kernel-uek-modules-extra-5.15.0-6.80.3.1.el9uek.x86_64.rpm



SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-uek-5.15.0-6.80.3.1.el9uek.src.rpm

Related CVEs:

CVE-2022-42895
CVE-2022-42896
CVE-2022-4378




Description of changes:

[5.15.0-6.80.3.1.el9uek]
- Revert "rds: ib: Enable FC by default" (Håkon Bugge)  [Orabug: 34964359]

[5.15.0-6.80.3.el9uek]
- net/mlx5: Suppress error logging on UCTX creation (Marina)  [Orabug: 34888471]
- rds: ib: Fix leaked MRs during kexec (Håkon Bugge)  [Orabug: 34892082]
- uek-rpm: Add ptp_kvm.ko to core rpm (Somasundaram Krishnasamy)  [Orabug: 34901414]
- Revert "tracing/ring-buffer: Have polling block on watermark" (Harshit Mogalapalli)  [Orabug: 34890999]

[5.15.0-6.80.2.el9uek]
- scsi: mpi3mr: Remove unnecessary cast (Jules Irenge)  [Orabug: 34640445]
- scsi: mpi3mr: Update driver version to 8.2.0.3.0 (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Fix scheduling while atomic type bug (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Scan the devices during resume time (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Free enclosure objects during driver unload (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Handle 0xF003 Fault Code (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Graceful handling of surprise removal of PCIe HBA (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Support new power management framework (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Update mpi3 header files (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Fix error code in mpi3mr_transport_smp_handler() (Dan Carpenter)  [Orabug: 34640445]
- scsi: mpi3mr: Fix error codes in mpi3mr_report_manufacture() (Dan Carpenter)  [Orabug: 34640445]
- scsi: mpi3mr: Block I/Os while refreshing target dev objects (Chandrakanth patil)  [Orabug: 34640445]
- scsi: mpi3mr: Refresh SAS ports during soft reset (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Support SAS transport class callbacks (Chandrakanth patil)  [Orabug: 34640445]
- scsi: mpi3mr: Add framework to issue MPT transport cmds (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Add SAS SATA end devices to STL (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Get target object based on rphy (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Add expander devices to STL (Chandrakanth patil)  [Orabug: 34640445]
- scsi: mpi3mr: Enable STL on HBAs where multipath is disabled (Chandrakanth patil)  [Orabug: 34640445]
- scsi: mpi3mr: Add helper functions to manage device's port (Chandrakanth patil)  [Orabug: 34640445]
- scsi: mpi3mr: Add helper functions to retrieve device objects (Chandrakanth patil)  [Orabug: 34640445]
- scsi: mpi3mr: Add framework to add phys to STL (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Enable Enclosure device add event (Chandrakanth patil)  [Orabug: 34640445]
- scsi: mpi3mr: Add helper functions to retrieve config pages (Chandrakanth patil)  [Orabug: 34640445]
- scsi: mpi3mr: Add framework to issue config requests (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Add config and transport related debug flags (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Delete a stray tab (Dan Carpenter)  [Orabug: 34640445]
- scsi: mpi3mr: Unlock on error path (Dan Carpenter)  [Orabug: 34640445]
- scsi: mpi3mr: Reduce VD queue depth on detecting throttling (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Resource Based Metering (Chandrakanth patil)  [Orabug: 34640445]
- scsi: mpi3mr: Increase cmd_per_lun to 128 (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Enable shared host tagset (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Fix kernel-doc (Chandrakanth patil)  [Orabug: 34640445]
- scsi: mpi3mr: Rework mrioc->bsg_device model to fix warnings (Sumit Saxena)  [Orabug: 34640445]
- scsi: mpi3mr: Add target device related sysfs (Chandrakanth patil)  [Orabug: 34640445]
- scsi: mpi3mr: Add shost related sysfs attributes (Chandrakanth patil)  [Orabug: 34640445]
- scsi: mpi3mr: Return error if dma_alloc_coherent() fails (Dan Carpenter)  [Orabug: 34640445]
- scsi: mpi3mr: Fix a NULL vs IS_ERR() bug in mpi3mr_bsg_init() (Dan Carpenter)  [Orabug: 34640445]
- scsi: mpi3mr: Return I/Os to an unrecoverable HBA with DID_ERROR (Chandrakanth patil)  [Orabug: 34640445]
- scsi: mpi3mr: Hidden drives not removed during soft reset (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Increase I/O timeout value to 60s (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Update driver version to 8.0.0.69.0 (Sumit Saxena)  [Orabug: 34640445]
- scsi: mpi3mr: Add support for NVMe passthrough (Sumit Saxena)  [Orabug: 34640445]
- scsi: mpi3mr: Expose adapter state to sysfs (Chandrakanth patil)  [Orabug: 34640445]
- scsi: mpi3mr: Add support for PEL commands (Sumit Saxena)  [Orabug: 34640445]
- scsi: mpi3mr: Add support for MPT commands (Sumit Saxena)  [Orabug: 34640445]
- scsi: mpi3mr: Move data structures/definitions from MPI headers to uapi header (Sumit Saxena)  [Orabug: 34640445]
- scsi: mpi3mr: Add support for driver commands (Sumit Saxena)  [Orabug: 34640445]
- scsi: mpi3mr: Add bsg device support (Sumit Saxena)  [Orabug: 34640445]
- scsi: mpi3mr: Fix flushing !WQ_MEM_RECLAIM events warning (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Bump driver version to 8.0.0.68.0 (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Update the copyright year (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Fix cmnd getting marked as in use forever (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Fix hibernation issue (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Update MPI3 headers (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Fix printing of pending I/O count (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Fix deadlock while canceling the fw event (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Fix formatting problems in some kernel-doc comments (Yang Li)  [Orabug: 34640445]
- scsi: mpi3mr: Fix some spelling mistakes (Colin Ian King)  [Orabug: 34640445]
- scsi: mpi3mr: Bump driver version to 8.0.0.61.0 (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Enhanced Task Management Support Reply handling (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Use TM response codes from MPI3 headers (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Add io_uring interface support in I/O-polled mode (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Print cable mngnt and temp threshold events (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Support Prepare for Reset event (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Add Event acknowledgment logic (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Gracefully handle online FW update operation (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Detect async reset that occurred in firmware (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Add IOC reinit function (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Handle offline FW activation in graceful manner (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Code refactor of IOC init - part2 (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Code refactor of IOC init - part1 (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Fault IOC when internal command gets timeout (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Display IOC firmware package version (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Handle unaligned PLL in unmap cmnds (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Increase internal cmnds timeout to 60s (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Do access status validation before adding devices (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Add support for PCIe Managed Switch SES device (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Update MPI3 headers - part2 (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Update MPI3 headers - part1 (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Don't reset IOC if cmnds flush with reset status (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Replace spin_lock() with spin_lock_irqsave() (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Add debug APIs based on logging_level bits (Sreekanth Reddy)  [Orabug: 34640445]
- scsi: mpi3mr: Use scnprintf() instead of snprintf() (Dan Carpenter)  [Orabug: 34640445]
- scsi: mpi3mr: Clean up mpi3mr_print_ioc_info() (Dan Carpenter)  [Orabug: 34640445]
- rds: ib: Remove unnecessary call to rds_ib_ring_unalloc (Håkon Bugge)  [Orabug: 34768825]
- rds: ib: Remove unnecessary i_flowctl term from conditions (Håkon Bugge)  [Orabug: 34768825]
- rds: ib: Remove unnesesarry variable initialization (Håkon Bugge)  [Orabug: 34768825]
- rds: ib: Make sure receives are posted before connection is up (Håkon Bugge)  [Orabug: 34768825]
- rds: ib: Fix the Retry counter dependency on RNR NAK Retry counter (Håkon Bugge)  [Orabug: 34768825]
- rds: Deduct one credit on the passive side (Håkon Bugge)  [Orabug: 34768825]
- rds: Use all eight bits for credit updates (Håkon Bugge)  [Orabug: 34768825]
- RDS/IB: Fix the misplaced counter update rdma dto path (Devesh Sharma)  [Orabug: 34865847]
- uek-rpm: Enable CONFIG_HP_ILO for aarch64 (Saeed Mirzamohammadi)  [Orabug: 34869880]
- uek-rpm: ol8: Choose right annobin plugin for UEK build (Somasundaram Krishnasamy)  [Orabug: 34873882]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds)  [Orabug: 34882775]  {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Linus Torvalds)  [Orabug: 34882775]  {CVE-2022-4378}

[5.15.0-6.80.1.el9uek]
- LTS version: v5.15.80 (Jack Vogel) 
- ntfs: check overflow when iterating ATTR_RECORDs (Hawkins Jiawei) 
- ntfs: fix out-of-bounds read in ntfs_attr_find() (Hawkins Jiawei) 
- ntfs: fix use-after-free in ntfs_attr_find() (Hawkins Jiawei) 
- net/9p: use a dedicated spinlock for trans_fd (Dominique Martinet) 
- mm: fs: initialize fsdata passed to write_begin/write_end interface (Alexander Potapenko) 
- wifi: wext: use flex array destination for memcpy() (Hawkins Jiawei) 
- 9p/trans_fd: always use O_NONBLOCK read/write (Tetsuo Handa) 
- gfs2: Switch from strlcpy to strscpy (Andreas Gruenbacher) 
- gfs2: Check sb_bsize_shift after reading superblock (Andrew Price) 
- 9p: trans_fd/p9_conn_cancel: drop client lock earlier (Dominique Martinet) 
- kcm: close race conditions on sk_receive_queue (Cong Wang) 
- kcm: avoid potential race in kcm_tx_work (Eric Dumazet) 
- tcp: cdg: allow tcp_cdg_release() to be called multiple times (Eric Dumazet) 
- macvlan: enforce a consistent minimal mtu (Eric Dumazet) 
- Input: i8042 - fix leaking of platform device on module removal (Chen Jun) 
- kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case (Li Huafei) 
- scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper() (Yuan Can) 
- scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() (Yang Yingliang) 
- net: use struct_group to copy ip/ipv6 header addresses (Hangbin Liu) 
- tracing: Fix warning on variable 'struct trace_array' (Aashish Sharma) 
- ring-buffer: Include dropped pages in counting dirty patches (Steven Rostedt (Google)) 
- perf: Improve missing SIGTRAP checking (Marco Elver) 
- serial: 8250_lpss: Use 16B DMA burst with Elkhart Lake (Ilpo Järvinen) 
- nvme: ensure subsystem reset is single threaded (Keith Busch) 
- nvme: restrict management ioctls to admin (Keith Busch) 
- perf/x86/intel/pt: Fix sampling using single range output (Adrian Hunter) 
- misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (Alexander Potapenko) 
- docs: update mediator contact information in CoC doc (Shuah Khan) 
- mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() (Xiongfeng Wang) 
- mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout (Chevron Li) 
- mmc: core: properly select voltage range without power cycle (Yann Gautier) 
- firmware: coreboot: Register bus in module init (Brian Norris) 
- iommu/vt-d: Set SRE bit only when hardware has SRS cap (Tina Zhang) 
- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (Tina Zhang) 
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Benjamin Block) 
- net: phy: marvell: add sleep time after enabling the loopback bit (Aminuddin Jamaluddin) 
- maccess: Fix writing offset in case of fault in strncpy_from_kernel_nofault() (Alban Crequy) 
- Input: iforce - invert valid length check when fetching device IDs (Tetsuo Handa) 
- serial: 8250_lpss: Configure DMA also w/o DMA filter (Ilpo Järvinen) 
- serial: 8250: Flush DMA Rx on RLSI (Ilpo Järvinen) 
- serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs (Ilpo Järvinen) 
- dm ioctl: fix misbehavior if list_versions races with module loading (Mikulas Patocka) 
- iio: pressure: ms5611: changed hardcoded SPI speed to value limited (Mitja Spes) 
- iio: adc: mp2629: fix potential array out of bound access (Saravanan Sekar) 
- iio: adc: mp2629: fix wrong comparison of channel (Saravanan Sekar) 
- iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() (Yang Yingliang) 
- iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() (Yang Yingliang) 
- usb: typec: mux: Enter safe mode only when pins need to be reconfigured (Rajat Khandelwal) 
- usb: cdns3: host: fix endless superspeed hub port reset (Li Jun) 
- usb: chipidea: fix deadlock in ci_otg_del_timer (Duoming Zhou) 
- usb: add NO_LPM quirk for Realforce 87U Keyboard (Nicolas Dumazet) 
- USB: serial: option: add Fibocom FM160 0x0111 composition (Reinhard Speyerer) 
- USB: serial: option: add u-blox LARA-L6 modem (Davide Tronchin) 
- USB: serial: option: add u-blox LARA-R6 00B modem (Davide Tronchin) 
- USB: serial: option: remove old LARA-R6 PID (Davide Tronchin) 
- USB: serial: option: add Sierra Wireless EM9191 (Benoît Monin) 
- USB: bcma: Make GPIO explicitly optional (Linus Walleij) 
- speakup: fix a segfault caused by switching consoles (Mushahid Hussain) 
- slimbus: stream: correct presence rate frequencies (Krzysztof Kozlowski) 
- slimbus: qcom-ngd: Fix build error when CONFIG_SLIM_QCOM_NGD_CTRL=y && CONFIG_QCOM_RPROC_COMMON=m (Zheng Bin) 
- Revert "usb: dwc3: disable USB core PHY management" (Johan Hovold) 
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 (Takashi Iwai) 
- ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro (Emil Flink) 
- ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() (Takashi Iwai) 
- drm/amd/display: Add HUBP surface flip interrupt handler (Rodrigo Siqueira) 
- tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit() (Shang XiaoJing) 
- tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit() (Shang XiaoJing) 
- tracing: Fix race where eprobes can be called before the event (Steven Rostedt (Google)) 
- tracing: Fix wild-memory-access in register_synth_event() (Shang XiaoJing) 
- tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() (Shang XiaoJing) 
- tracing/ring-buffer: Have polling block on watermark (Steven Rostedt (Google)) 
- tracing: Fix memory leak in tracing_read_pipe() (Wang Yufen) 
- ring_buffer: Do not deactivate non-existant pages (Daniil Tatianin) 
- ftrace: Fix null pointer dereference in ftrace_add_mod() (Xiu Jianfeng) 
- ftrace: Optimize the allocation for mcount entries (Wang Wensheng) 
- ftrace: Fix the possible incorrect kernel message (Wang Wensheng) 
- cifs: add check for returning value of SMB2_set_info_init (Anastasia Belova) 
- net: thunderbolt: Fix error handling in tbnet_init() (Yuan Can) 
- net: microchip: sparx5: Fix potential null-ptr-deref in sparx_stats_init() and sparx5_start() (Shang XiaoJing) 
- cifs: Fix wrong return value checking when GETFLAGS (Zhang Xiaoxu) 
- net/x25: Fix skb leak in x25_lapb_receive_frame() (Wei Yongjun) 
- net: ag71xx: call phylink_disconnect_phy if ag71xx_hw_enable() fail in ag71xx_open() (Liu Jian) 
- cifs: add check for returning value of SMB2_close_init (Anastasia Belova) 
- platform/surface: aggregator: Do not check for repeated unsequenced packets (Maximilian Luz) 
- platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized (Roger Pau Monné) 
- drbd: use after free in drbd_create_device() (Dan Carpenter) 
- bridge: switchdev: Fix memory leaks when changing VLAN protocol (Ido Schimmel) 
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process (Guangbin Huang) 
- net: ena: Fix error handling in ena_init() (Yuan Can) 
- net: ionic: Fix error handling in ionic_init_module() (Yuan Can) 
- xen/pcpu: fix possible memory leak in register_pcpu() (Yang Yingliang) 
- net: dsa: make dsa_master_ioctl() see through port_hwtstamp_get() shims (Vladimir Oltean) 
- net: mhi: Fix memory leak in mhi_net_dellink() (Wei Yongjun) 
- bnxt_en: Remove debugfs when pci_register_driver failed (Gaosheng Cui) 
- net: caif: fix double disconnect client in chnl_net_open() (Zhengchao Shao) 
- net: macvlan: Use built-in RCU list checking (Chuang Wang) 
- mISDN: fix misuse of put_device() in mISDN_register_device() (Wang ShaoBo) 
- net: liquidio: release resources when liquidio driver open failed (Zhengchao Shao) 
- soc: imx8m: Enable OCOTP clock before reading the register (Xiaolei Wang) 
- net: stmmac: ensure tx function is not running in stmmac_xdp_release() (Mohd Faizal Abdul Rahim) 
- net: hinic: Fix error handling in hinic_module_init() (Yuan Can) 
- mISDN: fix possible memory leak in mISDN_dsp_element_register() (Yang Yingliang) 
- net: bgmac: Drop free_netdev() from bgmac_enet_remove() (Wei Yongjun) 
- bpf: Initialize same number of free nodes for each pcpu_freelist (Xu Kuohai) 
- MIPS: Loongson64: Add WARN_ON on kexec related kmalloc failed (Liao Chang) 
- MIPS: fix duplicate definitions for exported symbols (Rongwei Zhang) 
- nfp: change eeprom length to max length enumerators (Jaco Coetzee) 
- ata: libata-transport: fix error handling in ata_tdev_add() (Yang Yingliang) 
- ata: libata-transport: fix error handling in ata_tlink_add() (Yang Yingliang) 
- ata: libata-transport: fix error handling in ata_tport_add() (Yang Yingliang) 
- ata: libata-transport: fix double ata_host_put() in ata_tport_add() (Yang Yingliang) 
- arm64: dts: imx8mn: Fix NAND controller size-cells (Marek Vasut) 
- arm64: dts: imx8mm: Fix NAND controller size-cells (Marek Vasut) 
- ARM: dts: imx7: Fix NAND controller size-cells (Marek Vasut) 
- drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker() (Shang XiaoJing) 
- drm/drv: Fix potential memory leak in drm_dev_init() (Shang XiaoJing) 
- drm/panel: simple: set bpc field for logic technologies displays (Aishwarya Kothari) 
- drm/vc4: kms: Fix IS_ERR() vs NULL check for vc4_kms (Gaosheng Cui) 
- pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map (Zeng Heng) 
- parport_pc: Avoid FIFO port location truncation (Maciej W. Rozycki) 
- siox: fix possible memory leak in siox_device_add() (Yang Yingliang) 
- arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro (D Scott Phillips) 
- bpf: Fix memory leaks in __check_func_call (Wang Yufen) 
- block: sed-opal: kmalloc the cmd/resp buffers (Serge Semin) 
- scsi: scsi_transport_sas: Fix error handling in sas_phy_add() (Yang Yingliang) 
- pinctrl: rockchip: list all pins in a possible mux route for PX30 (Quentin Schulz) 
- ASoC: soc-utils: Remove __exit for snd_soc_util_exit() (Chen Zhongjin) 
- bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() (Baisong Zhong) 
- tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send (Duoming Zhou) 
- serial: imx: Add missing .thaw_noirq hook (Shawn Guo) 
- serial: 8250: omap: Flush PM QOS work on remove (Tony Lindgren) 
- serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove() (Tony Lindgren) 
- serial: 8250_omap: remove wait loop from Errata i202 workaround (Matthias Schiffer) 
- serial: 8250: omap: Fix missing PM runtime calls for omap8250_set_mctrl() (Tony Lindgren) 
- ARM: at91: pm: avoid soft resetting AC DLL (Claudiu Beznea) 
- ASoC: tas2764: Fix set_tdm_slot in case of single slot (Martin Povišer) 
- ASoC: tas2770: Fix set_tdm_slot in case of single slot (Martin Povišer) 
- ASoC: core: Fix use-after-free in snd_soc_exit() (Chen Zhongjin) 
- ARM: dts: at91: sama7g5: fix signal name of pin PB2 (Mihai Sain) 
- spi: stm32: Print summary 'callbacks suppressed' message (Marek Vasut) 
- arm64: dts: qcom: sm8350-hdk: Specify which LDO modes are allowed (Douglas Anderson) 
- arm64: dts: qcom: sm8250-xperia-edo: Specify which LDO modes are allowed (Douglas Anderson) 
- arm64: dts: qcom: sm8150-xperia-kumano: Specify which LDO modes are allowed (Douglas Anderson) 
- arm64: dts: qcom: sa8155p-adp: Specify which LDO modes are allowed (Douglas Anderson) 
- KVM: x86/pmu: Do not speculatively query Intel GP PMCs that don't exist yet (Like Xu) 
- spi: intel: Use correct mask for flash and protected regions (Mika Westerberg) 
- mtd: spi-nor: intel-spi: Disable write protection only if asked (Mika Westerberg) 
- ASoC: codecs: jz4725b: Fix spelling mistake "Sourc" -> "Source", "Routee" -> "Route" (Colin Ian King) 
- x86/cpu: Add several Intel server CPU model numbers (Tony Luck) 
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (Luiz Augusto von Dentz) 
- btrfs: remove pointless and double ulist frees in error paths of qgroup tests (Filipe Manana) 
- drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid (Nathan Huckleberry) 
- i2c: i801: add lis3lv02d's I2C address for Vostro 5568 (Nam Cao) 
- i2c: tegra: Allocate DMA memory for DMA engine (Thierry Reding) 
- firmware: arm_scmi: Cleanup the core driver removal callback (Cristian Marussi) 
- ACPI: x86: Add another system to quirk list for forcing StorageD3Enable (Mario Limonciello) 
- NFSv4: Retry LOCK on OLD_STATEID during delegation return (Benjamin Coddington) 
- btrfs: raid56: properly handle the error when unable to find the missing stripe (Qu Wenruo) 
- RDMA/efa: Add EFA 0xefa2 PCI ID (Michael Margolin) 
- ACPI: scan: Add LATT2021 to acpi_ignore_dep_ids[] (Hans de Goede) 
- drm/amd/display: Remove wrong pipe control lock (Rodrigo Siqueira) 
- ASoC: rt1308-sdw: add the default value of some registers (Shuming Fan) 
- selftests/intel_pstate: fix build for ARCH=x86_64 (Ricardo Cañuelo) 
- selftests/futex: fix build for clang (Ricardo Cañuelo) 
- ASoC: Intel: sof_sdw: add quirk variant for LAPBC710 NUC15 (Pierre-Louis Bossart) 
- ASoC: codecs: jz4725b: fix capture selector naming (Siarhei Volkau) 
- ASoC: codecs: jz4725b: use right control for Capture Volume (Siarhei Volkau) 
- ASoC: codecs: jz4725b: fix reported volume for Master ctl (Siarhei Volkau) 
- ASoC: codecs: jz4725b: add missed Line In power control bit (Siarhei Volkau) 
- spi: intel: Fix the offset to get the 64K erase opcode (Mauro Lima) 
- ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK (Xiaolei Wang) 
- ASoC: rt1019: Fix the TDM settings (Derek Fang) 
- ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe (Zhang Qilong) 
- ASoC: wm8997: Revert "ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe" (Zhang Qilong) 
- ASoC: wm5110: Revert "ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe" (Zhang Qilong) 
- ASoC: wm5102: Revert "ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe" (Zhang Qilong) 
- LTS version: v5.15.79 (Jack Vogel) 
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Borislav Petkov) 
- net: tun: call napi_schedule_prep() to ensure we own a napi (Eric Dumazet) 
- drm/amdkfd: Migrate in CPU page fault use current mm (Philip Yang) 
- marvell: octeontx2: build error: unknown type name 'u64' (Anders Roxell) 
- dmaengine: at_hdmac: Check return code of dma_async_device_register (Tudor Ambarus) 
- dmaengine: at_hdmac: Fix impossible condition (Tudor Ambarus) 
- dmaengine: at_hdmac: Don't allow CPU to reorder channel enable (Tudor Ambarus) 
- dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors (Tudor Ambarus) 
- dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware (Tudor Ambarus) 
- dmaengine: at_hdmac: Fix concurrency over the active list (Tudor Ambarus) 
- dmaengine: at_hdmac: Free the memset buf without holding the chan lock (Tudor Ambarus) 
- dmaengine: at_hdmac: Fix concurrency over descriptor (Tudor Ambarus) 
- dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all() (Tudor Ambarus) 
- dmaengine: at_hdmac: Protect atchan->status with the channel lock (Tudor Ambarus) 
- dmaengine: at_hdmac: Do not call the complete callback on device_terminate_all (Tudor Ambarus) 
- dmaengine: at_hdmac: Fix premature completion of desc in issue_pending (Tudor Ambarus) 
- dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending (Tudor Ambarus) 
- dmaengine: at_hdmac: Don't start transactions at tx_submit level (Tudor Ambarus) 
- dmaengine: at_hdmac: Fix at_lli struct definition (Tudor Ambarus) 
- cert host tools: Stop complaining about deprecated OpenSSL functions (Linus Torvalds) 
- can: j1939: j1939_send_one(): fix missing CAN header initialization (Oliver Hartkopp) 
- mm/shmem: use page_mapping() to detect page cache for uffd continue (Peter Xu) 
- mm/memremap.c: map FS_DAX device memory as decrypted (Pankaj Gupta) 
- mm/damon/dbgfs: check if rm_contexts input is for a real context (SeongJae Park) 
- udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (ZhangPeng) 
- mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris) 
- btrfs: zoned: initialize device's zone info for seeding (Johannes Thumshirn) 
- btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() (Zhang Xiaoxu) 
- btrfs: fix match incorrectly in dev_args_match_device (Liu Shixin) 
- wifi: ath11k: avoid deadlock during regulatory update in ath11k_regd_update() (Wen Gong) 
- platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi (Jorge Lopez) 
- drm/amdgpu: disable BACO on special BEIGE_GOBY card (Guchun Chen) 
- drm/i915/dmabuf: fix sg_table handling in map_dma_buf (Matthew Auld) 
- nilfs2: fix use-after-free bug of ns_writer on remount (Ryusuke Konishi) 
- nilfs2: fix deadlock in nilfs_count_free_blocks() (Ryusuke Konishi) 
- ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure (Shin'ichiro Kawasaki) 
- vmlinux.lds.h: Fix placement of '.data..decrypted' section (Nathan Chancellor) 
- ALSA: usb-audio: Add DSD support for Accuphase DAC-60 (Jussi Laako) 
- ALSA: usb-audio: Add quirk entry for M-Audio Micro (Takashi Iwai) 
- ALSA: usb-audio: Yet more regression for for the delayed card registration (Takashi Iwai) 
- ALSA: hda/realtek: Add Positivo C6300 model quirk (Edson Juliano Drosdeck) 
- ALSA: hda: fix potential memleak in 'add_widget_node' (Ye Bin) 
- ALSA: hda/ca0132: add quirk for EVGA Z390 DARK (Xian Wang) 
- ALSA: hda/hdmi - enable runtime pm for more AMD display audio (Evan Quan) 
- mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA (Haibo Chen) 
- mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris) 
- mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris) 
- mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris) 
- mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI (Brian Norris) 
- MIPS: jump_label: Fix compat branch range check (Jiaxun Yang) 
- arm64: efi: Fix handling of misaligned runtime regions and drop warning (Ard Biesheuvel) 
- riscv: fix reserved memory setup (Conor Dooley) 
- riscv: vdso: fix build with llvm (Jisheng Zhang) 
- riscv: process: fix kernel info leakage (Jisheng Zhang) 
- net: macvlan: fix memory leaks of macvlan_common_newlink (Chuang Wang) 
- ethernet: tundra: free irq when alloc ring failed in tsi108_open() (Zhengchao Shao) 
- net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open() (Zhengchao Shao) 
- ethernet: s2io: disable napi when start nic failed in s2io_card_up() (Zhengchao Shao) 
- net: atlantic: macsec: clear encryption keys from the stack (Antoine Tenart) 
- net: phy: mscc: macsec: clear encryption keys when freeing a flow (Antoine Tenart) 
- stmmac: dwmac-loongson: fix missing of_node_put() while module exiting (Yang Yingliang) 
- stmmac: dwmac-loongson: fix missing pci_disable_device() in loongson_dwmac_probe() (Yang Yingliang) 
- stmmac: dwmac-loongson: fix missing pci_disable_msi() while module exiting (Yang Yingliang) 
- cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open() (Zhengchao Shao) 
- mctp: Fix an error handling path in mctp_init() (Wei Yongjun) 
- stmmac: intel: Update PCH PTP clock rate from 200MHz to 204.8MHz (Tan, Tee Min) 
- stmmac: intel: Enable 2.5Gbps for Intel AlderLake-S (Wong Vee Khee) 
- net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() (Zhengchao Shao) 
- net: cpsw: disable napi in cpsw_ndo_open() (Zhengchao Shao) 
- net/mlx5e: E-Switch, Fix comparing termination table instance (Roi Dayan) 
- net/mlx5: Allow async trigger completion execution on single CPU systems (Roy Novich) 
- net/mlx5: Bridge, verify LAG state when adding bond to bridge (Vlad Buslov) 
- net: wwan: iosm: fix memory leak in ipc_pcie_read_bios_cfg (M Chetan Kumar) 
- net: nixge: disable napi when enable interrupts failed in nixge_open() (Zhengchao Shao) 
- net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init() (Zhengchao Shao) 
- netfilter: Cleanup nft_net->module_list from nf_tables_exit_net() (Shigeru Yoshida) 
- netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg() (Ziyang Xuan) 
- perf tools: Add the include/perf/ directory to .gitignore (Donglin Peng) 
- perf stat: Fix printing os->prefix in CSV metrics output (Athira Rajeev) 
- drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() (Zhengchao Shao) 
- net: lapbether: fix issue of invalid opcode in lapbeth_open() (Zhengchao Shao) 
- dmaengine: ti: k3-udma-glue: fix memory leak when register device fail (Yang Yingliang) 
- dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() (Christophe JAILLET) 
- dmaengine: pxa_dma: use platform_get_irq_optional (Doug Brown) 
- tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header (Xin Long) 
- net: broadcom: Fix BCMGENET Kconfig (YueHaibing) 
- net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable() (Rasmus Villemoes) 
- can: af_can: fix NULL pointer dereference in can_rx_register() (Zhengchao Shao) 
- ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network (Alexander Potapenko) 
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent (Lu Wei) 
- drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() (Yuan Can) 
- net: wwan: mhi: fix memory leak in mhi_mbim_dellink (HW He) 
- net: wwan: iosm: fix memory leak in ipc_wwan_dellink (HW He) 
- hamradio: fix issue of dev reference count leakage in bpq_device_event() (Zhengchao Shao) 
- net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event() (Zhengchao Shao) 
- KVM: s390: pv: don't allow userspace to set the clock under PV (Nico Boehr) 
- phy: ralink: mt7621-pci: add sentinel to quirks table (John Thomson) 
- capabilities: fix undefined behavior in bit shift for CAP_TO_MASK (Gaosheng Cui) 
- net: fman: Unregister ethernet device on removal (Sean Anderson) 
- bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer (Alex Barba) 
- bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() (Michael Chan) 
- net: tun: Fix memory leaks of napi_get_frags (Wang Yufen) 
- octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT] (Ratheesh Kannoth) 
- octeontx2-pf: Use hardware register for CQE count (Geetha sowjanya) 
- macsec: clear encryption keys from the stack after setting up offload (Sabrina Dubroca) 
- macsec: fix detection of RXSCs when toggling offloading (Sabrina Dubroca) 
- macsec: fix secy->n_rx_sc accounting (Sabrina Dubroca) 
- macsec: delete new rxsc when offload fails (Sabrina Dubroca) 
- net: gso: fix panic on frag_list with mixed head alloc types (Jiri Benc) 
- bpf: Fix wrong reg type conversion in release_reference() (Youlin Li) 
- bpf: Add helper macro bpf_for_each_reg_in_vstate (Kumar Kartikeya Dwivedi) 
- bpf, sock_map: Move cancel_work_sync() out of sock lock (Cong Wang) 
- bpf: Fix sockmap calling sleepable function in teardown path (John Fastabend) 
- bpf, sockmap: Fix sk->sk_forward_alloc warn_on in sk_stream_kill_queues (Wang Yufen) 
- HID: hyperv: fix possible memory leak in mousevsc_probe() (Yang Yingliang) 
- bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE (Pu Lehui) 
- wifi: mac80211: Set TWT Information Frame Disabled bit as 1 (Howard Hsu) 
- bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues (Wang Yufen) 
- bpf, verifier: Fix memory leak in array reallocation for stack state (Kees Cook) 
- soundwire: qcom: check for outanding writes before doing a read (Srinivas Kandagatla) 
- soundwire: qcom: reinit broadcast completion (Srinivas Kandagatla) 
- wifi: cfg80211: fix memory leak in query_regdb_file() (Arend van Spriel) 
- wifi: cfg80211: silence a sparse RCU warning (Johannes Berg) 
- phy: stm32: fix an error code in probe (Dan Carpenter) 
- hwspinlock: qcom: correct MMIO max register for newer SoCs (Krzysztof Kozlowski) 
- drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram() (Yang Li) 
- drm/amdkfd: handle CPU fault on COW mapping (Philip Yang) 
- drm/amdkfd: avoid recursive lock in migrations back to RAM (Alex Sierra) 
- fuse: fix readdir cache race (Miklos Szeredi) 
- thunderbolt: Add DP OUT resource when DP tunnel is discovered (Sanjay R Mehta) 
- thunderbolt: Tear down existing tunnels when resuming from hibernate (Mika Westerberg) 
- LTS version: v5.15.78 (Jack Vogel) 
- wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() (Dokyung Song) 
- drm/i915/sdvo: Setup DDC fully before output init (Ville Syrjälä) 
- drm/i915/sdvo: Filter out invalid outputs more sensibly (Ville Syrjälä) 
- drm/rockchip: dsi: Force synchronous probe (Brian Norris) 
- drm/rockchip: dsi: Clean up 'usage_mode' when failing to attach (Brian Norris) 
- cifs: fix regression in very old smb1 mounts (Ronnie Sahlberg) 
- ext4,f2fs: fix readahead of verity data (Matthew Wilcox (Oracle)) 
- tee: Fix tee_shm_register() for kernel TEE drivers (Sumit Garg) 
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) 
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) 
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) 
- KVM: x86: emulator: em_sysexit should update ctxt->mode (Maxim Levitsky) 
- KVM: arm64: Fix bad dereference on MTE-enabled systems (Ryan Roberts) 
- KVM: VMX: fully disable SGX if SECONDARY_EXEC_ENCLS_EXITING unavailable (Emanuele Giuseppe Esposito) 
- KVM: x86: Mask off reserved bits in CPUID.8000001FH (Jim Mattson) 
- KVM: x86: Mask off reserved bits in CPUID.80000001H (Jim Mattson) 
- KVM: x86: Mask off reserved bits in CPUID.80000008H (Jim Mattson) 
- KVM: x86: Mask off reserved bits in CPUID.8000001AH (Jim Mattson) 
- KVM: x86: Mask off reserved bits in CPUID.80000006H (Jim Mattson) 
- x86/syscall: Include asm/ptrace.h in syscall_wrapper header (Jiri Olsa) 
- ext4: fix BUG_ON() when directory entry has invalid rec_len (Luís Henriques) 
- ext4: fix warning in 'ext4_da_release_space' (Ye Bin) 
- parisc: Avoid printing the hardware path twice (Helge Deller) 
- parisc: Export iosapic_serial_irq() symbol for serial port driver (Helge Deller) 
- parisc: Make 8250_gsc driver dependend on CONFIG_PARISC (Helge Deller) 
- perf/x86/intel: Fix pebs event constraints for SPR (Kan Liang) 
- perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[] (Kan Liang) 
- perf/x86/intel: Fix pebs event constraints for ICL (Kan Liang) 
- arm64: entry: avoid kprobe recursion (Mark Rutland) 
- efi: random: Use 'ACPI reclaim' memory for random seed (Ard Biesheuvel) 
- efi: random: reduce seed size to 32 bytes (Ard Biesheuvel) 
- fuse: add file_modified() to fallocate (Miklos Szeredi) 
- capabilities: fix potential memleak on error path from vfs_getxattr_alloc() (Gaosheng Cui) 
- tracing/histogram: Update document for KEYS_MAX size (Zheng Yejian) 
- tools/nolibc/string: Fix memcmp() implementation (Rasmus Villemoes) 
- ring-buffer: Check for NULL cpu_buffer in ring_buffer_wake_waiters() (Steven Rostedt (Google)) 
- kprobe: reverse kp->flags when arm_kprobe failed (Li Qiang) 
- tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() (Shang XiaoJing) 
- tcp/udp: Make early_demux back namespacified. (Kuniyuki Iwashima) 
- ftrace: Fix use-after-free for dynamic ftrace_ops (Li Huafei) 
- btrfs: fix type of parameter generation in btrfs_get_dentry (David Sterba) 
- btrfs: fix tree mod log mishandling of reallocated nodes (Josef Bacik) 
- btrfs: fix lost file sync on direct IO write with nowait and dsync iocb (Filipe Manana) 
- fscrypt: fix keyring memory leak on mount failure (Eric Biggers) 
- fscrypt: stop using keyrings subsystem for fscrypt_master_key (Eric Biggers) 
- af_unix: Fix memory leaks of the whole sk due to OOB skb. (Kuniyuki Iwashima) 
- block, bfq: protect 'bfqd->queued' by 'bfqd->lock' (Yu Kuai) 
- Bluetooth: L2CAP: Fix attempting to access uninitialized memory (Luiz Augusto von Dentz)   {CVE-2022-42895}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (Luiz Augusto von Dentz)   {CVE-2022-42896}
- i2c: piix4: Fix adapter not be removed in piix4_remove() (Chen Zhongjin) 
- arm64: dts: juno: Add thermal critical trip points (Cristian Marussi) 
- firmware: arm_scmi: Fix devres allocation device in virtio transport (Cristian Marussi) 
- firmware: arm_scmi: Make Rx chan_setup fail on memory errors (Cristian Marussi) 
- firmware: arm_scmi: Suppress the driver's bind attributes (Cristian Marussi) 
- block: Fix possible memory leak for rq_wb on add_disk failure (Chen Zhongjin) 
- arm64: dts: ls208xa: specify clock frequencies for the MDIO controllers (Ioana Ciornei) 
- arm64: dts: ls1088a: specify clock frequencies for the MDIO controllers (Ioana Ciornei) 
- arm64: dts: lx2160a: specify clock frequencies for the MDIO controllers (Ioana Ciornei) 
- arm64: dts: imx8: correct clock order (Peng Fan) 
- ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset (Tim Harvey) 
- clk: qcom: Update the force mem core bit for GPU clocks (Taniya Das) 
- efi/tpm: Pass correct address to memblock_reserve (Jerry Snitselaar) 
- i2c: xiic: Add platform module alias (Martin Tůma) 
- drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case (Danijel Slivka) 
- HID: saitek: add madcatz variant of MMO7 mouse device ID (Samuel Bailey) 
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) 
- ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() (Ashish Kalra) 
- media: v4l: subdev: Fail graciously when getting try data for NULL state (Sakari Ailus) 
- media: meson: vdec: fix possible refcount leak in vdec_probe() (Hangyu Hua) 
- media: dvb-frontends/drxk: initialize err to 0 (Hans Verkuil) 
- media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE (Hans Verkuil) 
- media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE (Hans Verkuil) 
- media: rkisp1: Zero v4l2_subdev_format fields in when validating links (Laurent Pinchart) 
- media: rkisp1: Use correct macro for gradient registers (Laurent Pinchart) 
- media: rkisp1: Initialize color space on resizer sink and source pads (Laurent Pinchart) 
- media: rkisp1: Don't pass the quantization to rkisp1_csm_config() (Laurent Pinchart) 
- s390/cio: fix out-of-bounds access on cio_ignore free (Peter Oberparleiter) 
- s390/cio: derive cdev information only for IO-subchannels (Vineeth Vijayan) 
- s390/boot: add secure boot trailer (Peter Oberparleiter) 
- s390/uaccess: add missing EX_TABLE entries to __clear_user() (Heiko Carstens) 
- mtd: parsers: bcm47xxpart: Fix halfblock reads (Linus Walleij) 
- mtd: parsers: bcm47xxpart: print correct offset on read error (Rafał Miłecki) 
- fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards (Helge Deller) 
- video/fbdev/stifb: Implement the stifb_fillrect() function (Helge Deller) 
- drm/msm/hdmi: fix IRQ lifetime (Johan Hovold) 
- drm/msm/hdmi: Remove spurious IRQF_ONESHOT flag (Daniel Thompson) 
- vsock: fix possible infinite sleep in vsock_connectible_wait_data() (Dexuan Cui) 
- ipv6: fix WARNING in ip6_route_net_exit_late() (Zhengchao Shao) 
- net, neigh: Fix null-ptr-deref in neigh_table_clear() (Chen Zhongjin) 
- net/smc: Fix possible leaked pernet namespace in smc_init() (Chen Zhongjin) 
- stmmac: dwmac-loongson: fix invalid mdio_node (Liu Peibao) 
- ibmvnic: Free rwi on reset success (Nick Child) 
- net: mdio: fix undefined behavior in bit shift for __mdiobus_register (Gaosheng Cui) 
- Bluetooth: L2CAP: Fix memory leak in vhci_write (Hawkins Jiawei) 
- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() (Zhengchao Shao) 
- Bluetooth: virtio_bt: Use skb_put to set length (Soenke Huster) 
- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Maxim Mikityanskiy) 
- netfilter: ipset: enforce documented limit to prevent allocating huge memory (Jozsef Kadlecsik) 
- btrfs: fix ulist leaks in error paths of qgroup self tests (Filipe Manana) 
- btrfs: fix inode list leak during backref walking at find_parent_nodes() (Filipe Manana) 
- btrfs: fix inode list leak during backref walking at resolve_indirect_refs() (Filipe Manana) 
- isdn: mISDN: netjet: fix wrong check of device registration (Yang Yingliang) 
- mISDN: fix possible memory leak in mISDN_register_device() (Yang Yingliang) 
- rose: Fix NULL pointer dereference in rose_send_frame() (Zhang Qilong) 
- ipvs: fix WARNING in ip_vs_app_net_cleanup() (Zhengchao Shao) 
- ipvs: fix WARNING in __ip_vs_cleanup_batch() (Zhengchao Shao) 
- ipvs: use explicitly signed chars (Jason A. Donenfeld) 
- netfilter: nf_tables: release flow rule object from commit path (Pablo Neira Ayuso) 
- netfilter: nf_tables: netlink notifier might race to release objects (Pablo Neira Ayuso) 
- net: tun: fix bugs for oversize packet when napi frags enabled (Ziyang Xuan) 
- net: sched: Fix use after free in red_enqueue() (Dan Carpenter) 
- ata: pata_legacy: fix pdc20230_set_piomode() (Sergey Shtylyov) 
- net: fec: fix improper use of NETDEV_TX_BUSY (Zhang Changzhong) 
- nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() (Shang XiaoJing) 
- nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() (Shang XiaoJing) 
- nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() (Shang XiaoJing) 
- nfc: fdp: Fix potential memory leak in fdp_nci_send() (Shang XiaoJing) 
- net: dsa: fall back to default tagger if we can't load the one from DT (Vladimir Oltean) 
- RDMA/qedr: clean up work queue on failure in qedr_alloc_resources() (Dan Carpenter) 
- RDMA/core: Fix null-ptr-deref in ib_core_cleanup() (Chen Zhongjin) 
- net: dsa: Fix possible memory leaks in dsa_loop_init() (Chen Zhongjin) 
- nfs4: Fix kmemleak when allocate slot failed (Zhang Xiaoxu) 
- NFSv4.2: Fixup CLONE dest file size for zero-length count (Benjamin Coddington) 
- SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed (Zhang Xiaoxu) 
- NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot (Trond Myklebust) 
- NFSv4.1: Handle RECLAIM_COMPLETE trunking errors (Trond Myklebust) 
- NFSv4: Fix a potential state reclaim deadlock (Trond Myklebust) 
- RDMA/hns: Disable local invalidate operation (Yangyang Li) 
- RDMA/hns: Use hr_reg_xxx() instead of remaining roce_set_xxx() (Wenpeng Liang) 
- RDMA/hns: Remove magic number (Xinhao Liu) 
- IB/hfi1: Correctly move list in sc_disable() (Dean Luick) 
- KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER (Alexander Graf) 
- KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() (Alexander Graf) 
- KVM: x86: Protect the unused bits in MSR exiting flags (Aaron Lewis) 
- HID: playstation: add initial DualSense Edge controller support (Roderick Colenbrander) 
- mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page (Baolin Wang) 
- drm/amd/display: explicitly disable psr_feature_enable appropriately (Shirish S) 
- KVM: x86: Treat #DBs from the emulator as fault-like (code and DR7.GD=1) (Sean Christopherson) 
- serial: ar933x: Deassert Transmit Enable on ->rs485_config() (Lukas Wunner) 
- scsi: lpfc: Rework MIB Rx Monitor debug info logic (James Smart) 
- scsi: lpfc: Adjust CMF total bytes and rxmonitor (James Smart) 
- scsi: lpfc: Adjust bytes received vales during cmf timer interval (James Smart) 
- LTS version: v5.15.77 (Jack Vogel) 
- tcp/udp: Fix memory leak in ipv6_renew_options(). (Kuniyuki Iwashima) 
- serial: Deassert Transmit Enable on probe in driver-specific way (Lukas Wunner) 
- serial: core: move RS485 configuration tasks from drivers into core (Lino Sanfilippo) 
- can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive (Biju Das) 
- can: rcar_canfd: fix channel specific IRQ handling for RZ/G2L (Biju Das) 
- scsi: sd: Revert "scsi: sd: Remove a local variable" (Yu Kuai) 
- arm64: Add AMPERE1 to the Spectre-BHB affected list (D Scott Phillips) 
- net: enetc: survive memory pressure without crashing (Vladimir Oltean) 
- kcm: do not sense pfmemalloc status in kcm_sendpage() (Eric Dumazet) 
- net: do not sense pfmemalloc status in skb_append_pagefrags() (Eric Dumazet) 
- net/mlx5: Fix crash during sync firmware reset (Suresh Devarakonda) 
- net/mlx5: Update fw fatal reporter state on PCI handlers successful recover (Roy Novich) 
- net/mlx5: Print more info on pci error handlers (Saeed Mahameed) 
- net/mlx5: Fix possible use-after-free in async command interface (Tariq Toukan) 
- net/mlx5e: Extend SKB room check to include PTP-SQ (Aya Levin) 
- net/mlx5e: Do not increment ESN when updating IPsec ESN state (Hyong Youb Kim) 
- netdevsim: remove dir in nsim_dev_debugfs_init() when creating ports dir failed (Zhengchao Shao) 
- net: broadcom: bcm4908_enet: update TX stats after actual transmission (Rafał Miłecki) 
- net: broadcom: bcm4908enet: remove redundant variable bytes (Colin Ian King) 
- nh: fix scope used to find saddr when adding non gw nh (Nicolas Dichtel) 
- net: bcmsysport: Indicate MAC is in charge of PHY PM (Florian Fainelli) 
- net: ehea: fix possible memory leak in ehea_register_port() (Yang Yingliang) 
- openvswitch: switch from WARN to pr_warn (Aaron Conole) 
- ALSA: aoa: Fix I2S device accounting (Takashi Iwai) 
- ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() (Yang Yingliang) 
- net: ethernet: ave: Fix MAC to be in charge of PHY PM (Kunihiko Hayashi) 
- net: fec: limit register access on i.MX6UL (Juergen Borleis) 
- perf vendor events arm64: Fix incorrect Hisi hip08 L3 metrics (Shang XiaoJing) 
- PM: domains: Fix handling of unavailable/disabled idle states (Sudeep Holla) 
- net: ksz884x: fix missing pci_disable_device() on error in pcidev_init() (Yang Yingliang) 
- i40e: Fix flow-type by setting GL_HASH_INSET registers (Slawomir Laba) 
- i40e: Fix VF hang when reset is triggered on another VF (Sylwester Dziedziuch) 
- i40e: Fix ethtool rx-flow-hash setting for X722 (Slawomir Laba) 
- ipv6: ensure sane device mtu in tunnels (Eric Dumazet) 
- perf vendor events power10: Fix hv-24x7 metric events (Kajol Jain) 
- media: vivid: set num_in/outputs to 0 if not supported (Hans Verkuil) 
- media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced' (Hans Verkuil) 
- media: v4l2-dv-timings: add sanity checks for blanking values (Hans Verkuil) 
- media: vivid: dev->bitmap_cap wasn't freed in all cases (Hans Verkuil) 
- media: vivid: s_fbuf: add more sanity checks (Hans Verkuil) 
- PM: hibernate: Allow hybrid sleep to work with s2idle (Mario Limonciello) 
- can: mcp251x: mcp251x_can_probe(): add missing unregister_candev() in error path (Dongliang Mu) 
- can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path (Dongliang Mu) 
- drm/amdkfd: Fix memory leak in kfd_mem_dmamap_userptr() (Rafael Mendonca) 
- net-memcg: avoid stalls when under memory pressure (Jakub Kicinski) 
- tcp: fix indefinite deferral of RTO with SACK reneging (Neal Cardwell) 
- tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Lu Wei) 
- tcp: minor optimization in tcp_add_backlog() (Eric Dumazet) 
- net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY (Zhang Changzhong) 
- net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed (Zhengchao Shao) 
- kcm: annotate data-races around kcm->rx_wait (Eric Dumazet) 
- kcm: annotate data-races around kcm->rx_psock (Eric Dumazet) 
- atlantic: fix deadlock at aq_nic_stop (Íñigo Huguet) 
- drm/i915/dp: Reset frl trained flag before restarting FRL training (Ankit Nautiyal) 
- amd-xgbe: add the bit rate quirk for Molex cables (Raju Rangoju) 
- amd-xgbe: fix the SFP compliance codes check for DAC cables (Raju Rangoju) 
- x86/unwind/orc: Fix unreliable stack dump with gcov (Chen Zhongjin) 
- nfc: virtual_ncidev: Fix memory leak in virtual_nci_send() (Shang XiaoJing) 
- net: macb: Specify PHY PM management done by MAC (Sergiu Moga) 
- net: hinic: fix the issue of double release MBOX callback of VF (Zhengchao Shao) 
- net: hinic: fix the issue of CMDQ memory leaks (Zhengchao Shao) 
- net: hinic: fix memory leak when reading function table (Zhengchao Shao) 
- net: hinic: fix incorrect assignment issue in hinic_set_interrupt_cfg() (Zhengchao Shao) 
- net: netsec: fix error handling in netsec_register_mdio() (Yang Yingliang) 
- tipc: fix a null-ptr-deref in tipc_topsrv_accept (Xin Long) 
- perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap() (Maxim Levitsky) 
- ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() (Yang Yingliang) 
- ASoC: qcom: lpass-cpu: Mark HDMI TX parity register as volatile (Srinivasa Rao Mandadapu) 
- mtd: rawnand: intel: Add missing of_node_put() in ebu_nand_probe() (Yang Yingliang) 
- arc: iounmap() arg is volatile (Randy Dunlap) 
- sched/core: Fix comparison in sched_group_cookie_match() (Lin Shengwang) 
- perf: Fix missing SIGTRAPs (Peter Zijlstra) 
- ASoC: qcom: lpass-cpu: mark HDMI TX registers as volatile (Srinivasa Rao Mandadapu) 
- KVM: selftests: Fix number of pages for memory slot in memslot_modification_stress_test (Gavin Shan) 
- drm/msm: Fix return type of mdp4_lvds_connector_mode_valid (Nathan Huckleberry) 
- media: atomisp: prevent integer overflow in sh_css_set_black_frame() (Dan Carpenter) 
- media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation (Alexander Stein) 
- net: ieee802154: fix error return code in dgram_bind() (Wei Yongjun) 
- ethtool: eeprom: fix null-deref on genl_info in dump (Xin Long) 
- mmc: block: Remove error check of hw_reset on reset (Christian Löhle) 
- s390/pci: add missing EX_TABLE entries to __pcistg_mio_inuser()/__pcilg_mio_inuser() (Heiko Carstens) 
- s390/futex: add missing EX_TABLE entry to __futex_atomic_op() (Heiko Carstens) 
- perf auxtrace: Fix address filter symbol name match for modules (Adrian Hunter) 
- ARC: mm: fix leakage of memory allocated for PTE (Pavel Kozlov) 
- pinctrl: Ingenic: JZ4755 bug fixes (Siarhei Volkau) 
- kernfs: fix use-after-free in __kernfs_remove (Christian A. Ehrhardt) 
- counter: microchip-tcb-capture: Handle Signal1 read and Synapse (William Breathitt Gray) 
- mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on 8bit bus (Sascha Hauer) 
- mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake (Patrick Thompson) 
- mmc: core: Fix kernel panic when remove non-standard SDIO card (Matthew Ma) 
- mmc: sdhci_am654: 'select', not 'depends' REGMAP_MMIO (Brian Norris) 
- coresight: cti: Fix hang in cti_disable_hw() (James Clark) 
- drm/msm/dp: fix IRQ lifetime (Johan Hovold) 
- drm/msm/hdmi: fix memory corruption with too many bridges (Johan Hovold) 
- drm/msm/dsi: fix memory corruption with too many bridges (Johan Hovold) 
- drm/amdgpu: disallow gfxoff until GC IP blocks complete s2idle resume (Prike Liang) 
- scsi: qla2xxx: Use transport-defined speed mask for supported_speeds (Manish Rangankar) 
- mac802154: Fix LQI recording (Miquel Raynal) 
- exec: Copy oldsighand->action under spin-lock (Bernd Edlinger) 
- fs/binfmt_elf: Fix memory leak in load_elf_binary() (Li Zetao) 
- cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (Rafael J. Wysocki) 
- cpufreq: intel_pstate: Read all MSRs on the target CPU (Rafael J. Wysocki) 
- fbdev: smscufx: Fix several use-after-free bugs (Hyunwoo Kim) 
- iio: adxl372: Fix unsafe buffer attributes (Matti Vaittinen) 
- iio: temperature: ltc2983: allocate iio channels once (Cosmin Tanislav) 
- iio: light: tsl2583: Fix module unloading (Shreeya Patel) 
- tools: iio: iio_utils: fix digit calculation (Matti Vaittinen) 
- xhci: Remove device endpoints from bandwidth list when freeing the device (Mathias Nyman) 
- xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices (Mario Limonciello) 
- xhci: Add quirk to reset host back to default state at shutdown (Mathias Nyman) 
- mtd: rawnand: marvell: Use correct logic for nand-keep-config (Tony O'Brien) 
- usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller (Jens Glathe) 
- usb: bdc: change state when port disconnected (Justin Chen) 
- usb: dwc3: gadget: Don't set IMI for no_interrupt (Thinh Nguyen) 
- usb: dwc3: gadget: Stop processing more requests on IMI (Thinh Nguyen) 
- usb: gadget: uvc: fix sg handling during video encode (Jeff Vanhoof) 
- usb: gadget: uvc: fix sg handling in error case (Dan Vacura) 
- USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM (Hannu Hartikainen) 
- ALSA: rme9652: use explicitly signed char (Jason A. Donenfeld) 
- ALSA: au88x0: use explicitly signed char (Jason A. Donenfeld) 
- ALSA: usb-audio: Add quirks for M-Audio Fast Track C400/600 (Takashi Iwai) 
- ALSA: Use del_timer_sync() before freeing timer (Steven Rostedt (Google)) 
- can: kvaser_usb: Fix possible completions during init_completion (Anssi Hannula) 
- can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb() (Yang Yingliang) 
- NFSv4: Add an fattr allocation to _nfs4_discover_trunking() (Scott Mayhew) 
- NFSv4: Fix free of uninitialized nfs4_label on referral lookup. (Benjamin Coddington) 
- rds: ib: Enable FC by default (Håkon Bugge)  [Orabug: 33930793]
- Adding a new sysfs entry point -- forcepower -- to /sys/bus/pci/slots/X. (James Puthukattukaran)  [Orabug: 34719459]
- nvme: paring quiesce/unquiesce (Ming Lei)  [Orabug: 34719459]
- nvme: prepare for pairing quiescing and unquiescing (Ming Lei)  [Orabug: 34719459]
- nvme: apply nvme API to quiesce/unquiesce admin queue (Ming Lei)  [Orabug: 34719459]
- nvme: add APIs for stopping/starting admin queue (Ming Lei)  [Orabug: 34719459]
- hugetlbfs: don't delete error page from pagecache (James Houghton)  [Orabug: 34772616]
- mm: shmem: don't truncate page if memory failure happens (Yang Shi)  [Orabug: 34772616]
- mm: hwpoison: handle non-anonymous THP correctly (Yang Shi)  [Orabug: 34772616]
- mm: hwpoison: refactor refcount check handling (Yang Shi)  [Orabug: 34772616]
- net/rds: Quiesce heartbeat worker in rds_conn_path_destroy() (Sharath Srinivasan)  [Orabug: 34815818]
- net/rds: Add support for tracing RDS heartbeats (Sharath Srinivasan)  [Orabug: 34815818]
- net/rds: Enable RDS heartbeat by default (Sharath Srinivasan)  [Orabug: 34815818]
- uek-rpm: core.list: add VirtualBox guest drivers to core package (Todd Vierling)  [Orabug: 34820755]
- tools/power turbostat: fix SPR PC6 limits (Artem Bityutskiy)  [Orabug: 34838996]
- tools/power turbostat: separate SPR from ICX (Artem Bityutskiy)  [Orabug: 34838996]
- rds: ib: Fix incorrect error handling during QP creation (Håkon Bugge)  [Orabug: 34857202]
- Revert "random: clear fast pool, crng, and batches in cpuhp bring up" (Somasundaram Krishnasamy)  [Orabug: 34850847]
- uek: kabi: update kABI files for new symbols (Saeed Mirzamohammadi)  [Orabug: 34850847]




More information about the El-errata mailing list