SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.19.17 upstream stable release
from git://git.kernel.org/
Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
ALSA: oss: Fix potential deadlock at unregistration
ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
ALSA: usb-audio: Fix potential memory leaks
ALSA: usb-audio: Fix NULL dererence at error path
ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
ALSA: hda/realtek: Correct pin configs for ASUS G533Z
ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
mtd: rawnand: atmel: Unmap streaming DMA mappings
io_uring/rw: fix unexpected link breakage
io_uring/net: fix fast_iov assignment in io_setup_async_msg()
io_uring/net: don't update msg_name if not provided
io_uring: correct pinned_vm accounting
hv_netvsc: Fix race between VF offering and VF association message from host
cifs: destage dirty pages before re-reading them for cache=none
cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
iio: dac: ad5593r: Fix i2c read protocol requirements
iio: ltc2497: Fix reading conversion results
iio: adc: ad7923: fix channel readings for some variants
iio: pressure: dps310: Refactor startup procedure
iio: pressure: dps310: Reset chip after timeout
xhci: dbc: Fix memory leak in xhci_alloc_dbc()
usb: gadget: uvc: Fix argument to sizeof() in uvc_register_video()
usb: add quirks for Lenovo OneLink+ Dock
mmc: core: Add SD card quirk for broken discard
can: kvaser_usb: Fix use of uninitialized completion
can: kvaser_usb_leaf: Fix overread with an invalid command
can: kvaser_usb_leaf: Fix TX queue out of sync after restart
can: kvaser_usb_leaf: Fix CAN state after restart
mmc: renesas_sdhi: Fix rounding errors
mmc: sdhci-tegra: Use actual clock rate for SW tuning correction
mmc: sdhci-sprd: Fix minimum clock limit
i2c: designware: Fix handling of real but unexpected device interrupts
fs: dlm: fix race between test_bit() and queue_work()
fs: dlm: handle -EBUSY first in lock arg validation
fs: dlm: fix invalid derefence of sb_lvbptr
btf: Export bpf_dynptr definition
HID: multitouch: Add memory barriers
quota: Check next/prev free block number after reading from quota file
platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
arm64: dts: qcom: sdm845-mtp: correct ADC settle time
ASoC: wcd9335: fix order of Slimbus unprepare/disable
ASoC: wcd934x: fix order of Slimbus unprepare/disable
hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
net: thunderbolt: Enable DMA paths only after rings are enabled
regulator: qcom_rpm: Fix circular deferral regression
arm64: topology: move store_cpu_topology() to shared code
riscv: topology: fix default topology reporting
RISC-V: Re-enable counter access from userspace
RISC-V: Make port I/O string accessors actually work
parisc: fbdev/stifb: Align graphics memory size to 4MB
parisc: Fix userspace graphics card breakage due to pgtable special bit
riscv: vdso: fix NULL deference in vdso_join_timens() when vfork
riscv: Make VM_WRITE imply VM_READ
riscv: always honor the CONFIG_CMDLINE_FORCE when parsing dtb
riscv: Pass -mno-relax only on lld < 15.0.0
UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
nvmem: core: Fix memleak in nvmem_register()
nvme-multipath: fix possible hang in live ns resize with ANA access
dmaengine: mxs: use platform_driver_register
dmaengine: qcom-adm: fix wrong sizeof config in slave_config
dmaengine: qcom-adm: fix wrong calling convention for prep_slave_sg
drm/virtio: Check whether transferred 2D BO is shmem
drm/virtio: Unlock reservations on virtio_gpu_object_shmem_init() error
drm/virtio: Unlock reservations on dma_resv_reserve_fences() error
drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb()
drm/udl: Restore display mode on resume
arm64: mte: move register initialization to C
UBUNTU: [Config] updateconfigs for ARM64_ERRATUM_2441007
arm64: errata: Add Cortex-A55 to the repeat tlbi list
clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page
mm/damon: validate if the pmd entry is present before accessing
mm/uffd: fix warning without PTE_MARKER_UFFD_WP compiled in
mm/mmap: undo ->mmap() when arch_validate_flags() fails
xen/gntdev: Prevent leaking grants
xen/gntdev: Accommodate VMA splitting
PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
serial: cpm_uart: Don't request IRQ too early for console port
serial: stm32: Deassert Transmit Enable on ->rs485_config()
serial: 8250: Let drivers request full 16550A feature probing
serial: 8250: Request full 16550A feature probing for OxSemi PCIe devices
NFSD: Protect against send buffer overflow in NFSv3 READDIR
NFSD: Protect against send buffer overflow in NFSv2 READ
NFSD: Protect against send buffer overflow in NFSv3 READ
cpufreq: qcom-cpufreq-hw: Fix uninitialized throttled_freq warning
powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
powerpc/Kconfig: Fix non existing CONFIG_PPC_FSL_BOOKE
powerpc/boot: Explicitly disable usage of SPE instructions
slimbus: qcom-ngd: use correct error in message of pdr_add_lookup() failure
slimbus: qcom-ngd: cleanup in probe error path
scsi: lpfc: Rework MIB Rx Monitor debug info logic
scsi: qedf: Populate sysfs attributes for vport
gpio: rockchip: request GPIO mux to pinctrl when setting direction
pinctrl: rockchip: add pinmux_ops.gpio_set_direction callback
fbdev: smscufx: Fix use-after-free in ufx_ops_open()
hwrng: core - let sleep be interrupted when unregistering hwrng
smb3: do not log confusing message when server returns no network interfaces
ksmbd: fix incorrect handling of iterate_dir
ksmbd: fix endless loop when encryption for response fails
ksmbd: Fix wrong return value and message length check in smb2_ioctl()
ksmbd: Fix user namespace mapping
fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE
btrfs: fix alignment of VMA for memory mapped files on THP
btrfs: enhance unsupported compat RO flags handling
btrfs: fix race between quota enable and quota rescan ioctl
btrfs: fix missed extent on fsync after dropping extent maps
btrfs: set generation before calling btrfs_clean_tree_block in btrfs_init_new_buffer
f2fs: fix wrong continue condition in GC
f2fs: complete checkpoints during remount
f2fs: flush pending checkpoints when freezing super
f2fs: increase the limit for reserve_root
f2fs: fix to do sanity check on destination blkaddr during recovery
f2fs: fix to do sanity check on summary info
jbd2: wake up journal waiters in FIFO order, not LIFO
jbd2: fix potential buffer head reference count leak
jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
jbd2: add miss release buffer head in fc_do_one_pass()
ext2: Add sanity checks for group and filesystem size
ext4: avoid crash when inline data creation follows DIO write
ext4: fix null-ptr-deref in ext4_write_info
ext4: make ext4_lazyinit_thread freezable
ext4: fix check for block being out of directory size
ext4: don't increase iversion counter for ea_inodes
ext4: unconditionally enable the i_version counter
ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate
ext4: place buffer head allocation before handle start
ext4: fix i_version handling in ext4
ext4: fix dir corruption when ext4_dx_add_entry() fails
ext4: fix miss release buffer head in ext4_fc_write_inode
ext4: fix potential memory leak in ext4_fc_record_modified_inode()
ext4: fix potential memory leak in ext4_fc_record_regions()
ext4: update 'state->fc_regions_size' after successful memory allocation
livepatch: fix race between fork and KLP transition
ftrace: Properly unset FTRACE_HASH_FL_MOD
ftrace: Still disable enabled records marked as disabled
ring-buffer: Allow splice to read previous partially read pages
ring-buffer: Have the shortest_full queue be the shortest not longest
ring-buffer: Check pending waiters when doing wake ups as well
ring-buffer: Add ring_buffer_wake_waiters()
ring-buffer: Fix race between reset page and reading page
tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
tracing: Wake up ring buffer waiters on closing of the file
tracing: Wake up waiters when tracing is disabled
tracing: Add ioctl() to force ring buffer waiters to wake up
tracing: Do not free snapshot if tracer is on cmdline
tracing: Move duplicate code of trace_kprobe/eprobe.c into header
tracing: Add "(fault)" name injection to kernel probes
tracing: Fix reading strings from synthetic events
rpmsg: char: Avoid double destroy of default endpoint
thunderbolt: Explicitly enable lane adapter hotplug events at startup
efi: libstub: drop pointless get_memory_map() call
media: cedrus: Set the platform driver data earlier
media: cedrus: Fix endless loop in cedrus_h265_skip_bits()
blk-throttle: fix that io throttle can only work for single bio
blk-wbt: call rq_qos_add() after wb_normal is initialized
KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
KVM: nVMX: Don't propagate vmcs12's PERF_GLOBAL_CTRL settings to vmcs02
KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
staging: greybus: audio_helper: remove unused and wrong debugfs usage
drm/nouveau/kms/nv140-: Disable interlacing
drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
drm/i915/gt: Use i915_vm_put on ppgtt_create error paths
drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
drm/i915: Fix watermark calculations for gen12+ CCS+CC modifier
drm/i915: Fix watermark calculations for DG2 CCS modifiers
drm/i915: Fix watermark calculations for DG2 CCS+CC modifier
drm/amd/display: Fix vblank refcount in vrr transition
drm/amd/display: explicitly disable psr_feature_enable appropriately
smb3: must initialize two ACL struct fields to zero
selinux: use "grep -E" instead of "egrep"
ima: fix blocking of security.ima xattrs of unsupported algorithms
userfaultfd: open userfaultfds with O_RDONLY
ntfs3: rework xattr handlers and switch to POSIX ACL VFS helpers
thermal: cpufreq_cooling: Check the policy first in cpufreq_cooling_register()
cpufreq: amd-pstate: Fix initial highest_perf value
sh: machvec: Use char[] for section boundaries
MIPS: SGI-IP30: Fix platform-device leak in bridge_platform_create()
MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
erofs: fix order >= MAX_ORDER warning due to crafted negative i_size
erofs: use kill_anon_super() to kill super in fscache mode
ARM: 9243/1: riscpc: Unbreak the build
ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
ACPI: PCC: Release resources on address space setup failure path
ACPI: PCC: replace wait_for_completion()
ACPI: PCC: Fix Tx acknowledge in the PCC address space handler
objtool: Preserve special st_shndx indexes in elf_update_symbol
nfsd: Fix a memory leak in an error handling path
SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation
SUNRPC: Fix svcxdr_init_encode's buflen calculation
NFSD: Protect against send buffer overflow in NFSv2 READDIR
NFSD: Fix handling of oversized NFSv4 COMPOUND requests
x86/paravirt: add extra clobbers with ZERO_CALL_USED_REGS enabled
wifi: rtlwifi: 8192de: correct checking of IQK reload
wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
bpf: Fix non-static bpf_func_proto struct definitions
bpf: convert cgroup_bpf.progs to hlist
bpf: Cleanup check_refcount_ok
leds: lm3601x: Don't use mutex after it was destroyed
tsnep: Fix TSNEP_INFO_TX_TIME register define
bpf: Fix reference state management for synchronous callbacks
wifi: cfg80211: get correct AP link chandef
wifi: mac80211: allow bw change during channel switch in mesh
bpftool: Fix a wrong type cast in btf_dumper_int
audit: explicitly check audit_context->context enum value
audit: free audit_proctitle only on task exit
esp: choose the correct inner protocol for GSO on inter address family tunnels
spi: mt7621: Fix an error message in mt7621_spi_probe()
x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
xsk: Fix backpressure mechanism on Tx
selftests/xsk: Add missing close() on netns fd
bpf: Disable preemption when increasing per-cpu map_locked
bpf: Propagate error from htab_lock_bucket() to userspace
wifi: ath11k: Fix incorrect QMI message ID mappings
bpf: Use this_cpu_{inc|dec|inc_return} for bpf_task_storage_busy
bpf: Use this_cpu_{inc_return|dec} for prog->active
Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
wifi: rtw89: pci: fix interrupt stuck after leaving low power mode
wifi: rtw89: pci: correct TX resource checking in low power mode
wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
wifi: wfx: prevent underflow in wfx_send_pds()
wifi: rtw88: add missing destroy_workqueue() on error path in rtw_core_init()
selftests/xsk: Avoid use-after-free on ctx
spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
wifi: rtl8xxxu: Fix skb misuse in TX queue selection
spi: meson-spicc: do not rely on busy flag in pow2 clk ops
bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
wifi: mt76: mt7921e: fix race issue between reset and suspend/resume
wifi: mt76: mt7921s: fix race issue between reset and suspend/resume
wifi: mt76: mt7921u: fix race issue between reset and suspend/resume
wifi: mt76: sdio: fix the deadlock caused by sdio->stat_work
wifi: mt76: sdio: poll sta stat when device transmits data
wifi: mt76: sdio: fix transmitting packet hangs
wifi: mt76: mt7615: add mt7615_mutex_acquire/release in mt7615_sta_set_decap_offload
wifi: mt76: mt7915: fix possible unaligned access in mt7915_mac_add_twt_setup
wifi: mt76: connac: fix possible unaligned access in mt76_connac_mcu_add_nested_tlv
wifi: mt76: mt7921: add mt7921_mutex_acquire at mt7921_[start, stop]_ap
wifi: mt76: mt7921: add mt7921_mutex_acquire at mt7921_sta_set_decap_offload
wifi: mt76: mt7915: fix mcs value in ht mode
wifi: mt76: mt7915: do not check state before configuring implicit beamform
wifi: mt76: mt7921e: fix rmmod crash in driver reload test
Bluetooth: RFCOMM: Fix possible deadlock on socket shutdown/release
net: fs_enet: Fix wrong check in do_pd_setup
bpf: Ensure correct locking around vulnerable function find_vpid()
wifi: ath11k: Include STA_KEEPALIVE_ARP_RESPONSE TLV header by default
Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
netfilter: conntrack: fix the gc rescheduling delay
netfilter: conntrack: revisit the gc initial rescheduling bias
flow_dissector: Do not count vlan tags inside tunnel payload
wifi: ath11k: fix failed to find the peer with peer_id 0 when disconnected
wifi: ath11k: fix number of VHT beamformee spatial streams
mips: dts: ralink: mt7621: fix external phy on GB-PC2
x86/microcode/AMD: Track patch allocation size explicitly
wifi: ath11k: fix peer addition/deletion error on sta band migration
x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
spi: cadence-quadspi: Fix PM disable depth imbalance in cqspi_probe
spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
skmsg: Schedule psock work if the cached skb exists on the psock
cw1200: fix incorrect check to determine if no element is found in list
i2c: mlxbf: support lock mechanism
Bluetooth: hci_core: Fix not handling link timeouts propertly
xfrm: Reinject transport-mode packets through workqueue
netfilter: nft_fib: Fix for rpath check with VRF devices
spi: s3c64xx: Fix large transfers with DMA
wifi: rtl8xxxu: gen2: Enable 40 MHz channel width
wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
vhost/vsock: Use kvmalloc/kvfree for larger packets.
eth: alx: take rtnl_lock on resume
mISDN: fix use-after-free bugs in l1oip timer handlers
sctp: handle the error returned from sctp_auth_asoc_init_active_key
tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
spi: Ensure that sg_table won't be used after being freed
Bluetooth: hci_sync: Fix not indicating power state
hwmon: (pmbus/mp2888) Fix sensors readouts for MPS Multi-phase mp2888 controller
net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
af_unix: Fix memory leaks of the whole sk due to OOB skb.
net: prestera: acl: Add check for kmemdup
eth: lan743x: reject extts for non-pci11x1x devices
bnx2x: fix potential memory leak in bnx2x_tpa_stop()
eth: sp7021: fix use after free bug in spl2sw_nvmem_get_mac_address
net: wwan: iosm: Call mutex_init before locking it
net/ieee802154: reject zero-sized raw_sendmsg()
once: add DO_ONCE_SLOW() for sleepable contexts
net: mvpp2: fix mvpp2 debugfs leak
drm: bridge: adv7511: fix CEC power down control register offset
drm: bridge: adv7511: unregister cec i2c device after cec adapter
drm/bridge: Avoid uninitialized variable warning
drm/mipi-dsi: Detach devices when removing the host
drm/bridge: it6505: Power on downstream device in .atomic_enable
drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
drm/bridge: tc358767: Add of_node_put() when breaking out of loop
drm/bridge: parade-ps8640: Fix regulator supply order
drm/dp_mst: fix drm_dp_dpcd_read return value checks
drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
ASoC: mt6359: fix tests for platform_get_irq() failure
drm/msm: Make .remove and .shutdown HW shutdown consistent
platform/chrome: fix double-free in chromeos_laptop_prepare()
platform/chrome: fix memory corruption in ioctl
drm/virtio: Fix same-context optimization
ASoC: soc-pcm.c: call __soc_pcm_close() in soc_pcm_close()
ASoC: tas2764: Allow mono streams
ASoC: tas2764: Drop conflicting set_bias_level power setting
ASoC: tas2764: Fix mute/unmute
platform/x86: msi-laptop: Fix old-ec check for backlight registering
platform/x86: msi-laptop: Fix resource cleanup
platform/chrome: cros_ec_typec: Correct alt mode index
drm/amdgpu: add missing pci_disable_device() in amdgpu_pmops_runtime_resume()
drm/bridge: megachips: Fix a null pointer dereference bug
drm/bridge: it6505: Fix the order of DP_SET_POWER commands
ASoC: rsnd: Add check for rsnd_mod_power_on
ASoC: wm_adsp: Handle optional legacy support
ALSA: hda: beep: Simplify keep-power-at-enable behavior
drm/virtio: set fb_modifiers_not_supported
drm/bochs: fix blanking
ASoC: SOF: mediatek: mt8195: Import namespace SND_SOC_SOF_MTK_COMMON
drm/omap: dss: Fix refcount leak bugs
drm/amdgpu: Fix memory leak in hpd_rx_irq_create_workqueue()
mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
drm/msm: lookup the ICC paths in both mdp5/dpu and mdss devices
drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx
drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
ALSA: usb-audio: Properly refcounting clock rate
drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl()
virtio-gpu: fix shift wrapping bug in virtio_gpu_fence_event_create()
ASoC: codecs: tx-macro: fix kcontrol put
ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
ALSA: dmaengine: increment buffer pointer atomically
mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
ASoC: stm32: dfsdm: Fix PM disable depth imbalance in stm32_adfsdm_probe
ASoC: stm32: spdifrx: Fix PM disable depth imbalance in stm32_spdifrx_probe
ASoC: stm: Fix PM disable depth imbalance in stm32_i2s_probe
ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
ALSA: hda/hdmi: Don't skip notification handling during PM operation
memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
memory: of: Fix refcount leak bug in of_get_ddr_timings()
memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
locks: fix TOCTOU race when granting write lease
soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
soc: qcom: smem_state: Add refcounting for the 'state->of_node'
ARM: dts: imx6qdl-kontron-samx6i: hook up DDC i2c bus
arm64: dts: renesas: r9a07g044: Fix SCI{Rx,Tx} interrupt types
arm64: dts: renesas: r9a07g054: Fix SCI{Rx,Tx} interrupt types
arm64: dts: renesas: r9a07g043: Fix SCI{Rx,Tx} interrupt types
dt-bindings: clock: exynosautov9: correct clock numbering of peric0/c1
ARM: dts: turris-omnia: Fix mpp26 pin name and comment
ARM: dts: kirkwood: lsxl: fix serial line
ARM: dts: kirkwood: lsxl: remove first ethernet port
ia64: export memory_add_physaddr_to_nid to fix cxl build error
soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
arm64: dts: ti: k3-j7200: fix main pinmux range
ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
ARM: Drop CMDLINE_* dependency on ATAGS
ext4: don't run ext4lazyinit for read-only filesystems
arm64: ftrace: fix module PLTs with mcount
ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
iomap: iomap: fix memory corruption when recording errors during writeback
iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
iio: adc: at91-sama5d2_adc: check return status for pressure and touch
iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
iio: inkern: only release the device node when done with it
iio: inkern: fix return value in devm_of_iio_channel_get_by_name()
iio: ABI: Fix wrong format of differential capacitance channel ABI.
iio: magnetometer: yas530: Change data type of hard_offsets to signed
RDMA/mlx5: Don't compare mkey tags in DEVX indirect mkey
usb: common: debug: Check non-standard control requests
clk: meson: Hold reference returned by of_get_parent()
clk: st: Hold reference returned by of_get_parent()
clk: oxnas: Hold reference returned by of_get_parent()
clk: qoriq: Hold reference returned by of_get_parent()
clk: berlin: Add of_node_put() for of_get_parent()
clk: sprd: Hold reference returned by of_get_parent()
clk: tegra: Fix refcount leak in tegra210_clock_init
clk: tegra: Fix refcount leak in tegra114_clock_init
clk: tegra20: Fix refcount leak in tegra20_clock_init
clk: samsung: exynosautov9: correct register offsets of peric0/c1
HSI: omap_ssi: Fix refcount leak in ssi_probe
HSI: omap_ssi_port: Fix dma_map_sg error check
clk: qcom: gcc-sdm660: Use floor ops for SDCC1 clock
media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
tty: xilinx_uartps: Fix the ignore_status
media: amphion: insert picture startcode after seek for vc1g format
media: amphion: adjust the encoder's value range of gop size
media: amphion: don't change the colorspace reported by decoder.
media: amphion: fix a bug that vpu core may not resume after suspend
media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
media: uvcvideo: Fix memory leak in uvc_gpio_parse
media: uvcvideo: Use entity get_cur in uvc_ctrl_set
media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
RDMA/rxe: Fix "kernel NULL pointer dereference" error
RDMA/rxe: Fix the error caused by qp->sk
clk: mediatek: clk-mt8195-vdo0: Set rate on vdo0_dp_intf0_dp_intf's parent
clk: mediatek: clk-mt8195-vdo1: Reparent and set rate on vdo1_dpintf's parent
clk: mediatek: mt8195-infra_ao: Set pwrmcu clocks as critical
misc: ocxl: fix possible refcount leak in afu_ioctl()
fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
phy: rockchip-inno-usb2: Return zero after otg sync
dmaengine: idxd: avoid deadlock in process_misc_interrupts()
dmaengine: hisilicon: Disable channels when unregister hisi_dma
dmaengine: hisilicon: Fix CQ head update
dmaengine: hisilicon: Add multi-thread support for a DMA channel
usb: gadget: f_fs: stricter integer overflow checks
dyndbg: fix static_branch manipulation
dyndbg: fix module.dyndbg handling
dyndbg: let query-modname override actual module name
dyndbg: drop EXPORTed dynamic_debug_exec_queries
clk: qcom: sm6115: Select QCOM_GDSC
mtd: devices: docg3: check the return value of devm_ioremap() in the probe
remoteproc: Harden rproc_handle_vdev() against integer overflow
phy: amlogic: phy-meson-axg-mipi-pcie-analog: Hold reference returned by of_get_parent()
phy: phy-mtk-tphy: fix the phy type setting issue
mtd: rawnand: intel: Read the chip-select line from the correct OF node
mtd: rawnand: intel: Remove undocumented compatible string
mtd: rawnand: fsl_elbc: Fix none ECC mode
RDMA/irdma: Align AE id codes to correct flush code and event
RDMA/irdma: Validate udata inlen and outlen
RDMA/srp: Fix srp_abort()
RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
RDMA/siw: Fix QP destroy to wait for all references dropped.
ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
ata: fix ata_id_has_devslp()
ata: fix ata_id_has_ncq_autosense()
ata: fix ata_id_has_dipm()
mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
md/raid5: Ensure stripe_fill happens on non-read IO with journal
md/raid5: Remove unnecessary bio_put() in raid5_read_one_chunk()
RDMA/cm: Use SLID in the work completion as the DLID in responder side
IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
xhci: Don't show warning for reinit on known broken suspend
usb: gadget: function: fix dangling pnp_string in f_printer.c
usb: dwc3: core: fix some leaks in probe
drivers: serial: jsm: fix some leaks in probe
serial: 8250: Toggle IER bits on only after irq has been set up
tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
phy: qualcomm: call clk_disable_unprepare in the error handling
staging: vt6655: fix some erroneous memory clean-up loops
slimbus: qcom-ngd-ctrl: allow compile testing without QCOM_RPROC_COMMON
slimbus: qcom-ngd: Add error handling in of_qcom_slim_ngd_register
firmware: google: Test spinlock on panic path to avoid lockups
serial: 8250: Fix restoring termios speed after suspend
scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
scsi: pm8001: Fix running_req for internal abort commands
scsi: iscsi: Rename iscsi_conn_queue_work()
scsi: iscsi: Add recv workqueue helpers
scsi: iscsi: Run recv path from workqueue
scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
clk: qcom: gcc-sm6115: Override default Alpha PLL regs
RDMA/rxe: Fix resize_finish() in rxe_queue.c
fsi: core: Check error number after calling ida_simple_get
mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
mfd: lp8788: Fix an error handling path in lp8788_probe()
mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
mfd: fsl-imx25: Fix check for platform_get_irq() errors
mfd: sm501: Add check for platform_driver_register()
mfd: da9061: Fix Failed to set Two-Wire Bus Mode.
clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
clk: mediatek: clk-mt8195-mfg: Reparent mfg_bg3d and propagate rate changes
clk: mediatek: fix unregister function in mtk_clk_register_dividers cleanup
clk: mediatek: Migrate remaining clk_unregister_*() to clk_hw_unregister_*()
dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
usb: mtu3: fix failed runtime suspend in host only mode
spmi: pmic-arb: correct duplicate APID to PPID mapping logic
clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
clk: baikal-t1: Fix invalid xGMAC PTP clock divider
clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
clk: baikal-t1: Add SATA internal ref clock buffer
clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
clk: imx: scu: fix memleak on platform_device_add() fails
clk: ti: Balance of_node_get() calls for of_find_node_by_name()
clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
clk: ast2600: BCLK comes from EPLL
mailbox: mpfs: fix handling of the reg property
mailbox: mpfs: account for mbox offsets while sending
mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
ipc: mqueue: fix possible memory leak in init_mqueue_fs()
powerpc/configs: Properly enable PAPR_SCM in pseries_defconfig
powerpc/math_emu/efp: Include module.h
powerpc/sysdev/fsl_msi: Add missing of_node_put()
powerpc/pci_dn: Add missing of_node_put()
powerpc/powernv: add missing of_node_put() in opal_export_attrs()
cpuidle: riscv-sbi: Fix CPU_PM_CPU_IDLE_ENTER_xyz() macro usage
powerpc: Fix fallocate and fadvise64_64 compat parameter combination
x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
powerpc/64: mark irqs hard disabled in boot paca
powerpc/64/interrupt: Fix return to masked context after hard-mask irq becomes pending
powerpc: Fix SPE Power ISA properties for e500v1 platforms
powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe()
powerpc/pseries/vas: Pass hw_cpu_id to node associativity HCALL
crypto: sahara - don't sleep when in softirq
crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr
hwrng: arm-smccc-trng - fix NO_ENTROPY handling
crypto: ccp - Fail the PSP initialization when writing psp data file failed
cgroup: Honor caller's cgroup NS when resolving path
hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
crypto: qat - fix default value of WDT timer
crypto: hisilicon/qm - fix missing put dfx access
cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
iommu/omap: Fix buffer overflow in debugfs
crypto: akcipher - default implementation for setting a private key
crypto: ccp - Release dma channels before dmaengine unrgister
crypto: inside-secure - Change swab to swab32
crypto: qat - fix DMA transfer direction
clocksource/drivers/arm_arch_timer: Fix handling of ARM erratum 858921
clocksource/drivers/timer-gxp: Add missing error handling in gxp_timer_probe
cifs: return correct error in ->calc_signature()
iommu/iova: Fix module config properly
tracing: kprobe: Fix kprobe event gen test module on exit
tracing: kprobe: Make gen test module work in arm and riscv
tracing/osnoise: Fix possible recursive locking in stop_per_cpu_kthreads
kbuild: remove the target in signal traps when interrupted
linux/export: use inline assembler to populate symbol CRCs
kbuild: rpm-pkg: fix breakage when V=1 is used
crypto: marvell/octeontx - prevent integer overflows
crypto: cavium - prevent integer overflow loading firmware
random: schedule jitter credit for next jiffy, not in two jiffies
thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
f2fs: fix race condition on setting FI_NO_EXTENT flag
f2fs: fix to account FS_CP_DATA_IO correctly
selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
module: tracking: Keep a record of tainted unloaded modules only
fs: dlm: fix race in lowcomms
rcu: Avoid triggering strict-GP irq-work when RCU is idle
rcu: Back off upon fill_page_cache_func() allocation failure
cpufreq: amd_pstate: fix wrong lowest perf fetch
ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
fortify: Fix __compiletime_strlen() under UBSAN_BOUNDS_LOCAL
ACPI: tables: FPDT: Don't call acpi_os_map_memory() on invalid phys address
cpufreq: intel_pstate: Add Tigerlake support in no-HWP mode
MIPS: BCM47XX: Cast memcmp() of function to (void *)
powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
ARM: decompressor: Include .data.rel.ro.local
ACPI: x86: Add a quirk for Dell Inspiron 14 2-in-1 for StorageD3Enable
x86/entry: Work around Clang __bdos() bug
NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data
NFSD: fix use-after-free on source server when doing inter-server copy
wifi: ath10k: Set tx credit to one for WCN3990 snoc based devices
wifi: brcmfmac: fix invalid address access when enabling SCAN log level
bpftool: Clear errno after libcap's checks
ice: set tx_tstamps when creating new Tx rings via ethtool
net: ethernet: ti: davinci_mdio: Add workaround for errata i2329
openvswitch: Fix double reporting of drops in dropwatch
openvswitch: Fix overreporting of drops in dropwatch
tcp: annotate data-race around tcp_md5sig_pool_populated
x86/mce: Retrieve poison range from hardware
wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
thunderbolt: Add back Intel Falcon Ridge end-to-end flow control workaround
x86/apic: Don't disable x2APIC if locked
net: axienet: Switch to 64-bit RX/TX statistics
net-next: Fix IP_UNICAST_IF option behavior for connected sockets
xfrm: Update ipcomp_scratches with NULL when freed
wifi: ath11k: Register shutdown handler for WCN6750
rtw89: ser: leave lps with mutex
iavf: Fix race between iavf_close and iavf_reset_task
wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
Bluetooth: btintel: Mark Intel controller to support LE_STATES quirk
regulator: core: Prevent integer underflow
wifi: ath11k: mhi: fix potential memory leak in ath11k_mhi_register()
wifi: mt76: mt7921: reset msta->airtime_ac while clearing up hw value
wifi: rtw89: free unused skb to prevent memory leak
wifi: rtw89: fix rx filter after scan
Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
bnxt_en: replace reset with config timestamps
selftests/bpf: Free the allocated resources after test case succeeds
can: bcm: check the result of can_send() in bcm_can_tx()
wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
wifi: rt2x00: set VGC gain for both chains of MT7620
wifi: rt2x00: set SoC wmac clock register
wifi: rt2x00: correctly set BBP register 86 for MT7620
hwmon: (sht4x) do not overflow clamping operation on 32-bit platforms
net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
bpf: Adjust kprobe_multi entry_ip for CONFIG_X86_KERNEL_IBT
bpf: use bpf_prog_pack for bpf_dispatcher
Bluetooth: L2CAP: Fix user-after-free
i2c: designware-pci: Group AMD NAVI quirk parts together
r8152: Rate limit overflow messages
drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
drm: Use size_t type for len variable in drm_copy_field()
drm: Prevent drm_copy_field() to attempt copying a NULL pointer
drm/komeda: Fix handling of atomic commits in the atomic_commit_tail hook
gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
drm/amd/display: fix overflow on MIN_I64 definition
udmabuf: Set ubuf->sg = NULL if the creation of sg table fails
platform/x86: pmc_atom: Improve quirk message to be less cryptic
drm: bridge: dw_hdmi: only trigger hotplug event on link change
drm/amdgpu: Skip the program of MMMC_VM_AGP_* in SRIOV on MMHUB v3_0_0
drm/admgpu: Skip CG/PG on SOC21 under SRIOV VF
ALSA: usb-audio: Register card at the last interface
drm/vc4: vec: Fix timings for VEC modes
drm: panel-orientation-quirks: Add quirk for Anbernic Win600
drm: panel-orientation-quirks: Add quirk for Aya Neo Air
platform/chrome: cros_ec: Notify the PM of wake events during resume
platform/x86: hp-wmi: Setting thermal profile fails with 0x06
platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
ALSA: intel-dspconfig: add ES8336 support for AlderLake-PS
ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
ASoC: SOF: add quirk to override topology mclk_id
drm/amdgpu: SDMA update use unlocked iterator
drm/amd/display: correct hostvm flag
drm/amdgpu: fix initial connector audio value
drm/meson: reorder driver deinit sequence to fix use-after-free bug
drm/meson: explicitly remove aggregate driver at module unload time
drm/meson: remove drm bridges at aggregate driver unbind time
drm/dp: Don't rewrite link config when setting phy test pattern
drm/amd/display: Remove interface for periodic interrupt 1
drm/amd/display: polling vid stream status in hpo dp blank
drm/amdkfd: Fix UBSAN shift-out-of-bounds warning
ARM: dts: imx6: delete interrupts property if interrupts-extended is set
ARM: dts: imx7d-sdb: config the max pressure for tsc2046
ARM: dts: imx6q: add missing properties for sram
ARM: dts: imx6dl: add missing properties for sram
ARM: dts: imx6qp: add missing properties for sram
ARM: dts: imx6sl: add missing properties for sram
ARM: dts: imx6sll: add missing properties for sram
ARM: dts: imx6sx: add missing properties for sram
ARM: dts: imx6sl: use tabs for code indent
ARM: dts: imx6sx-udoo-neo: don't use multiple blank lines
kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
arm64: dts: imx8mm-kontron: Use the VSELECT signal to switch SD card IO voltage
arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
btrfs: dump extra info if one free space cache has more bitmaps than it should
btrfs: scrub: properly report super block errors in system log
btrfs: scrub: try to fix super block errors
btrfs: don't print information about space cache or tree every remount
btrfs: call __btrfs_remove_free_space_cache_locked on cache load failure
ARM: 9233/1: stacktrace: Skip frame pointer boundary check for call_with_stack()
ARM: 9234/1: stacktrace: Avoid duplicate saving of exception PC value
ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
clk: zynqmp: Fix stack-out-of-bounds in strncpy`
media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
media: platform: fix some double free in meson-ge2d and mtk-jpeg and s5p-mfc
clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
RDMA/rxe: Delete error messages triggered by incoming Read requests
usb: host: xhci-plat: suspend and resume clocks
usb: host: xhci-plat: suspend/resume clks for brcm
scsi: lpfc: Fix null ndlp ptr dereference in abnormal exit path for GFT_ID
dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent overflow
scsi: 3w-9xxx: Avoid disabling device if failing to enable it
nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity
usb: gadget: uvc: increase worker prio to WQ_HIGHPRI
power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
staging: vt6655: fix potential memory leak
blk-throttle: prevent overflow while calculating wait time
ata: libahci_platform: Sanity check the DT child nodes number
bcache: fix set_at_max_writeback_rate() for multiple attached devices
soundwire: cadence: Don't overwrite msg->buf during write commands
soundwire: intel: fix error handling on dai registration issues
HID: roccat: Fix use-after-free in roccat_read()
HSI: ssi_protocol: fix potential resource leak in ssip_pn_open()
HID: nintendo: check analog user calibration for plausibility
eventfd: guard wake_up in eventfd fs calls as well
md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
usb: musb: Fix musb_gadget.c rxstate overflow bug
usb: dwc3: core: add gfladj_refclk_lpm_sel quirk
arm64: dts: imx8mp: Add snps,gfladj-refclk-lpm-sel quirk to USB nodes
usb: dwc3: core: Enable GUCTL1 bit 10 for fixing termination error after resume bug
Revert "usb: storage: Add quirk for Samsung Fit flash"
staging: rtl8723bs: fix potential memory leak in rtw_init_drv_sw()
staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
scsi: tracing: Fix compile error in trace_array calls when TRACING is disabled
ext2: Use kvmalloc() for group descriptor array
nvme: handle effects after freeing the request
nvme: copy firmware_rev on each init
nvmet-tcp: add bounds check on Transfer Tag
usb: idmouse: fix an uninit-value in idmouse_open
blk-mq: use quiesced elevator switch when reinitializing queues
hwmon (occ): Retry for checksum failure
fsi: occ: Prevent use after free
usb: typec: ucsi: Don't warn on probe deferral
clk: bcm2835: Make peripheral PLLC critical
clk: bcm2835: Round UART input clock up
perf: Skip and warn on unknown format 'configN' attrs
perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
perf intel-pt: Fix system_wide dummy event for hybrid
mm: hugetlb: fix UAF in hugetlb_handle_userfault
net: ieee802154: return -EINVAL for unknown addr type
ALSA: usb-audio: Fix last interface check for registration
blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init()
UBUNTU: [Config] updateconfigs for MDIO_BITBANG
net: ethernet: ti: davinci_mdio: fix build for mdio bitbang uses
Revert "drm/amd/display: correct hostvm flag"
Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
net/ieee802154: don't warn zero-sized raw_sendmsg()
powerpc/64s/interrupt: Fix lost interrupts when returning to soft-masked context
drm/amd/display: Fix build breakage with CONFIG_DEBUG_FS=n
kbuild: Add skip_encoding_btf_enum64 option to pahole
Kconfig.debug: simplify the dependency of DEBUG_INFO_DWARF4/5
Kconfig.debug: add toolchain checks for DEBUG_INFO_DWARF_TOOLCHAIN_DEFAULT
UBUNTU: [Config] updateconfigs for AS_HAS_NON_CONST_LEB128
lib/Kconfig.debug: Add check for non-constant .{s,u}leb128 support to DWARF5
HID: uclogic: Add missing suffix for digitalizers
ext4: continue to expand file system when the target size doesn't reach
drm/i915: Rename block_size()/block_offset()
drm/i915/bios: Validate fp_timing terminator presence
drm/i915/bios: Use hardcoded fp_timing size for generating LFP data pointers
Linux 5.19.17
UBUNTU: Upstream stable to v5.19.17
This bug is awaiting verification that the linux/5.19.0-24.25 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-
If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.
See https:/