Ubuntu
linux-oem-6.1 package

Jammy update: v6.1.12 upstream stable release

Bug #2007585 reported by Timo Aaltonen on 2023-02-16

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	linux-oem-6.1 (Ubuntu)	Invalid	Undecided	Unassigned
	Jammy	Fix Released	Undecided	Unassigned

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

v6.1.12 upstream stable release
from git://git.kernel.org/

Linux 6.1.12
Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
KVM: x86: Mitigate the cross-thread return address predictions bug
x86/speculation: Identify processors vulnerable to SMT RSB predictions
drm/i915: Fix VBT DSI DVO port handling
drm/i915: Initialize the obj flags for shmem objects
drm/i915: Move fd_install after last use of fence
drm/amd/display: fix cursor offset on rotation 180
drm/amd/display: properly handling AGP aperture in vm setup
drm/amdgpu/smu: skip pptable init under sriov
drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini
drm/amd/pm: bump SMU 13.0.7 driver_if header version
drm/amdgpu: Add unique_id support for GC 11.0.1/2
drm/amd/pm: bump SMU 13.0.0 driver_if header version
arm64: efi: Force the use of SetVirtualAddressMap() on eMAG and Altra Max machines
Fix page corruption caused by racy check in __free_pages
arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive
arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive
arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive
rtmutex: Ensure that the top waiter is always woken up
tracing: Fix TASK_COMM_LEN in trace event format file
drm/amdgpu: Use the TGID for trace_amdgpu_vm_update_ptes
powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch
riscv: kprobe: Fixup misaligned load text
riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte
nvdimm: Support sizeof(struct page) > MAX_STRUCT_PAGE_SIZE
ceph: flush cap releases when the session is flushed
drm/amd/pm: add SMU 13.0.7 missing GetPptLimit message mapping
pinctrl: qcom: sm8450-lpass-lpi: correct swr_rx_data group
clk: ingenic: jz4760: Update M/N/OD calculation algorithm
cxl/region: Fix passthrough-decoder detection
cxl/region: Fix null pointer dereference for resetting decoder
usb: typec: altmodes/displayport: Fix probe pin assign check
usb: core: add quirk for Alcor Link AK9563 smartcard reader
btrfs: free device in btrfs_close_devices for a single device filesystem
btrfs: simplify update of last_dir_index_offset when logging a directory
selftests: mptcp: stop tests earlier
selftests: mptcp: allow more slack for slow test-case
mptcp: be careful on subflow status propagation on errors
mptcp: do not wait for bare sockets' timeout
net: USB: Fix wrong-direction WARNING in plusb.c
cifs: Fix use-after-free in rdata->read_into_pages()
pinctrl: intel: Restore the pins that used to be in Direct IRQ mode
pinctrl: aspeed: Revert "Force to disable the function's signal"
spi: dw: Fix wrong FIFO level setting for long xfers
pinctrl: single: fix potential NULL dereference
pinctrl: aspeed: Fix confusing types in return value
pinctrl: mediatek: Fix the drive register definition of some Pins
clk: microchip: mpfs-ccc: Use devm_kasprintf() for allocating formatted strings
ASoC: topology: Return -ENOMEM on memory allocation failure
ASoC: fsl_sai: fix getting version from VERID
ASoC: tas5805m: add missing page switch.
ASoC: tas5805m: rework to avoid scheduling while atomic.
arm64: dts: mediatek: mt8195: Fix vdosys* compatible strings
riscv: stacktrace: Fix missing the first frame
ALSA: pci: lx6464es: fix a debug loop
arm64: dts: rockchip: set sdmmc0 speed to sd-uhs-sdr50 on rock-3a
arm64: dts: rockchip: fix input enable pinconf on rk3399
selftests: forwarding: lib: quote the sysctl values
net: mscc: ocelot: fix all IPv6 getting trapped to CPU when PTP timestamping is used
rds: rds_rm_zerocopy_callback() use list_first_entry()
selftests: Fix failing VXLAN VNI filtering test
txhash: fix sk->sk_txrehash default
net: ethernet: mtk_eth_soc: fix wrong parameters order in __xdp_rxq_info_reg()
igc: Add ndo_tx_timeout support
net/mlx5: Serialize module cleanup with reload and remove
net/mlx5: fw_tracer, Zero consumer index when reloading the tracer
net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers
net/mlx5: Expose SF firmware pages counter
net/mlx5: Store page counters in a single array
net/mlx5e: IPoIB, Show unknown speed instead of error
net/mlx5e: Fix crash unsetting rx-vlan-filter in switchdev mode
net/mlx5: Bridge, fix ageing of peer FDB entries
net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change
net: mscc: ocelot: fix VCAP filters not matching on MAC with "protocol 802.1Q"
net: dsa: mt7530: don't change PVC_EG_TAG when CPU port becomes VLAN-aware
ice: switch: fix potential memleak in ice_add_adv_recipe()
ice: Fix disabling Rx VLAN filtering with port VLAN enabled
ice: Do not use WQ_MEM_RECLAIM flag for workqueue
nvidiafb: detect the hardware support before removing console.
cpuset: Call set_cpus_allowed_ptr() with appropriate mask for task
drm/virtio: exbuf->fence_fd unmodified on interrupted wait
drm/i915: Don't do the WM0->WM1 copy w/a if WM1 is already enabled
HID: amd_sfh: if no sensors are enabled, clean up
net: microchip: sparx5: fix PTP init/deinit not checking all ports
uapi: add missing ip/ipv6 header dependencies for linux/stddef.h
cpufreq: qcom-hw: Fix cpufreq_driver->get() for non-LMH systems
ionic: missed doorbell workaround
ionic: refactor use of ionic_rx_fill()
ionic: clean interrupt before enabling queue to avoid credit race
net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY
net: macb: Perform zynqmp dynamic configuration only for SGMII interface
bonding: fix error checking in bond_debug_reregister()
net: phylink: move phy_device_free() to correctly release phy device
of: Make OF framebuffer device names unique
xfrm: fix bug with DSCP copy to v6 from v4 tunnel
RDMA/usnic: use iommu_map_atomic() under spin_lock()
RDMA/irdma: Fix potential NULL-ptr-dereference
xfrm: annotate data-race around use_time
IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
IB/hfi1: Restore allocated resources on failed copyout
xfrm: compat: change expression for switch in xfrm_xlate64
HID: logitech: Disable hi-res scrolling on USB
can: j1939: do not wait 250 ms if the same addr was already claimed
of/address: Return an error when no valid dma-ranges are found
tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw
Revert "PCI/ASPM: Refactor L1 PM Substates Control Register programming"
Revert "PCI/ASPM: Save L1 PM Substates Capability for suspend/resume"
ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP platform.
ALSA: hda/realtek: Add quirk for ASUS UM3402 using CS35L41
ALSA: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9
ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360
ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control()
ALSA: hda/realtek: Add Positivo N14KP6-TG
btrfs: zlib: zero-initialize zlib workspace
btrfs: limit device extents to the device size
hv_netvsc: Allocate memory in netvsc_dma_map() with GFP_ATOMIC

Tags:

Timo Aaltonen (tjaalton) on 2023-02-16

Changed in linux-oem-6.1 (Ubuntu):
status:	New → Confirmed
tags:	added: kernel-stable-tracking-bug

Timo Aaltonen (tjaalton) on 2023-02-16

Changed in linux-oem-6.1 (Ubuntu):
status:	Confirmed → Invalid
Changed in linux-oem-6.1 (Ubuntu Jammy):
status:	New → Confirmed

Timo Aaltonen (tjaalton) on 2023-03-09

Changed in linux-oem-6.1 (Ubuntu Jammy):
status:	Confirmed → Fix Committed

Revision history for this message

Launchpad Janitor (janitor) wrote on 2023-03-27:

Download full text (77.0 KiB)

This bug was fixed in the package linux-oem-6.1 - 6.1.0-1008.8

---------------
linux-oem-6.1 (6.1.0-1008.8) jammy; urgency=medium

* jammy/linux-oem-6.1: 6.1.0-1008.8 -proposed tracker (LP: #2008352)

* overlayfs mounts as R/O over idmapped mount (LP: #2009065)
- SAUCE: overlayfs: handle idmapped mounts in ovl_do_(set|remove)xattr

* Some QHD panels fail to refresh when PSR2 enabled (LP: #2009014)
- SAUCE: drm/i915/psr: Use calculated io and fast wake lines

* Fix mediatek wifi driver crash when loading wrong SAR table (LP: #2009118)
- wifi: mt76: mt7921: fix error code of return in mt7921_acpi_read

* Packaging resync (LP: #1786013)
- [Packaging] update update.conf

* Update dg2_dmc to 2.08 (LP: #1999375)
- drm/i915/dmc: Update DG2 DMC version to v2.08

  * New DG2 workarounds (LP: #2006945)
    - drm/i915/dg2: Introduce Wa_18017747507
    - drm/i915/dg2: Introduce Wa_18018764978
    - drm/i915/dg2: Introduce Wa_18019271663

  * Screen backlight keeps in minimized and can't change it with amdgpu
    (LP: #2008871)
    - SAUCE: ACPI: video: Add backlight=native DMI quirk for Dell Vostro 15 3535

  * Remove all other acpi_video backlight interface on Dell AIO platforms
    (LP: #2008882)
    - SAUCE: ACPI: video: Dell AIO UART backlight detection

* screen flicker after PSR2 enabled (LP: #2007516)
- SAUCE: drm/i915/display/psr: Disable PSR2 sel fetch on panel SHP 5457

  * rtcpie in timers from ubuntu_kernel_selftests randomly failing
    (LP: #1814234)
    - SAUCE: selftest: rtcpie: Force passing unreliable subtest

  * Fix HFP mSBC support on Realtek Bluetooth USB controller (LP: #2007331)
    - Bluetooth: btrtl: Add btrealtek data struct
    - Bluetooth: btusb: Ignore zero length of USB packets on ALT 6 for specific
      chip

This bug was fixed in the package linux-oem-6.1 - 6.1.0-1008.8

---------------
linux-oem-6.1 (6.1.0-1008.8) jammy; urgency=medium

* jammy/linux-oem-6.1: 6.1.0-1008.8 -proposed tracker (LP: #2008352)

* overlayfs mounts as R/O over idmapped mount (LP: #2009065)
    - SAUCE: overlayfs: handle idmapped mounts in ovl_do_(set|remove)xattr

* Some QHD panels fail to refresh when PSR2 enabled (LP: #2009014)
    - SAUCE: drm/i915/psr: Use calculated io and fast wake lines

* Fix mediatek wifi driver crash when loading wrong SAR table (LP: #2009118)
    - wifi: mt76: mt7921: fix error code of return in mt7921_acpi_read

* Packaging resync (LP: #1786013)
    - [Packaging] update update.conf

* Update dg2_dmc to 2.08 (LP: #1999375)
    - drm/i915/dmc: Update DG2 DMC version to v2.08

* New DG2 workarounds (LP: #2006945)
    - drm/i915/dg2: Introduce Wa_18017747507
    - drm/i915/dg2: Introduce Wa_18018764978
    - drm/i915/dg2: Introduce Wa_18019271663

* Screen backlight keeps in minimized and can't change it with amdgpu
    (LP: #2008871)
    - SAUCE: ACPI: video: Add backlight=native DMI quirk for Dell Vostro 15 3535

* Remove all other acpi_video backlight interface on Dell AIO platforms
    (LP: #2008882)
    - SAUCE: ACPI: video: Dell AIO UART backlight detection

* screen flicker after PSR2 enabled (LP: #2007516)
    - SAUCE: drm/i915/display/psr: Disable PSR2 sel fetch on panel SHP 5457

* rtcpie in timers from ubuntu_kernel_selftests randomly failing
    (LP: #1814234)
    - SAUCE: selftest: rtcpie: Force passing unreliable subtest

* Jammy update: v6.1.14 upstream stable release (LP: #2008708)
    - drm/etnaviv: don't truncate physical page address
    - wifi: ath11k: fix warning in dma_free_coherent() of memory chunks while
      recovery
    - wifi: rtl8xxxu: gen2: Turn on the rate control
    - drm/edid: Fix minimum bpc supported with DSC1.2 for HDMI sink
    - clk: mxl: Switch from direct readl/writel based IO to regmap based IO
    - clk: mxl: Remove redundant spinlocks
    - clk: mxl: Add option to override gate clks
    - clk: mxl: Fix a clk entry by adding relevant flags
    - powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G
    - clk: mxl: syscon_node_to_regmap() returns error pointers
    - sched/psi: Stop relying on timer_pending() for poll_work rescheduling
    - random: always mix cycle counter in add_latent_entropy()
    - scsi: libsas: Add smp_ata_check_ready_type()
    - scsi: hisi_sas: Fix SATA devices missing issue during I_T nexus reset
    - spi: mediatek: Enable irq when pdata is ready
    - docs: perf: Fix PMU instance name of hisi-pcie-pmu
    - KVM: x86: Fail emulation during EMULTYPE_SKIP on any exception
    - KVM: SVM: Skip WRMSR fastpath on VM-Exit if next RIP isn't valid
    - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
    - can: kvaser_usb: hydra: help gcc-13 to figure out cmd_len
    - powerpc: dts: t208x: Disable 10G on MAC1 and MAC2
    - spi: mediatek: Enable irq before the spi registration
    - drm/i915: Remove __maybe_unused from mtl_info
    - KVM: x86: fix deadlock for KVM_XEN_EVTCHN_RESET
    - selftests: kvm: move declaration at the beginning of main()
    - powerpc/64s/radix: Fix RWX mapping with relocated kernel
    - nfp: ethtool: support reporting link modes
    - nfp: ethtool: fix the bug of setting unsupported port speed
    - uaccess: Add speculation barrier to copy_from_user()
    - x86/alternatives: Introduce int3_emulate_jcc()
    - x86/alternatives: Teach text_poke_bp() to patch Jcc.d32 instructions
    - x86/static_call: Add support for Jcc tail-calls
    - Bluetooth: btusb: Add more device IDs for WCN6855
    - riscv: remove special treatment for the link order of head.o
    - arm64: remove special treatment for the link order of head.o
    - arch: fix broken BuildID for arm64 and riscv
    - powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT
    - powerpc/vmlinux.lds: Don't discard .rela* for relocatable builds
    - s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld < 2.36
    - sh: define RUNTIME_DISCARD_EXIT
    - wifi: mwifiex: Add missing compatible string for SD8787
    - audit: update the mailing list in MAINTAINERS
    - platform/x86/amd/pmf: Add depends on CONFIG_POWER_SUPPLY
    - platform/x86: nvidia-wmi-ec-backlight: Add force module parameter
    - ext4: Fix function prototype mismatch for ext4_feat_ktype
    - randstruct: disable Clang 15 support
    - bpf: add missing header file include
    - Linux 6.1.14
    - upstream stable to v6.1.14

* Jammy update: v6.1.13 upstream stable release (LP: #2008707)
    - mptcp: sockopt: make 'tcp_fastopen_connect' generic
    - mptcp: fix locking for setsockopt corner-case
    - mptcp: deduplicate error paths on endpoint creation
    - mptcp: fix locking for in-kernel listener creation
    - btrfs: move the auto defrag code to defrag.c
    - btrfs: lock the inode in shared mode before starting fiemap
    - ASoC: amd: yc: Add DMI support for new acer/emdoor platforms
    - ASoC: SOF: sof-audio: start with the right widget type
    - ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum610 Wireless
    - ASoC: Intel: sof_rt5682: always set dpcm_capture for amplifiers
    - ASoC: Intel: sof_cs42l42: always set dpcm_capture for amplifiers
    - ASoC: Intel: sof_nau8825: always set dpcm_capture for amplifiers
    - ASoC: Intel: sof_ssp_amp: always set dpcm_capture for amplifiers
    - selftests/bpf: Verify copy_register_state() preserves parent/live fields
    - ALSA: hda: Do not unset preset when cleaning up codec
    - ASoC: amd: yc: Add Xiaomi Redmi Book Pro 15 2022 into DMI table
    - bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
    - ASoC: cs42l56: fix DT probe
    - tools/virtio: fix the vringh test for virtio ring changes
    - vdpa: ifcvf: Do proper cleanup if IFCVF init fails
    - net/rose: Fix to not accept on connected socket
    - selftest: net: Improve IPV6_TCLASS/IPV6_HOPLIMIT tests apparmor
      compatibility
    - net: stmmac: do not stop RX_CLK in Rx LPI state for qcs404 SoC
    - powerpc/64: Fix perf profiling asynchronous interrupt handlers
    - fscache: Use clear_and_wake_up_bit() in fscache_create_volume_work()
    - drm/nouveau/devinit/tu102-: wait for GFW_BOOT_PROGRESS == COMPLETED
    - net: ethernet: mtk_eth_soc: Avoid truncating allocation
    - net: sched: sch: Bounds check priority
    - s390/decompressor: specify __decompress() buf len to avoid overflow
    - nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association
    - nvme: clear the request_queue pointers on failure in
      nvme_alloc_admin_tag_set
    - nvme: clear the request_queue pointers on failure in nvme_alloc_io_tag_set
    - drm/amd/display: Add missing brackets in calculation
    - drm/amd/display: Adjust downscaling limits for dcn314
    - drm/amd/display: Unassign does_plane_fit_in_mall function from dcn3.2
    - drm/amd/display: Reset DMUB mailbox SW state after HW reset
    - drm/amdgpu: enable HDP SD for gfx 11.0.3
    - drm/amdgpu: Enable vclk dclk node for gc11.0.3
    - drm/amd/display: Properly handle additional cases where DCN is not supported
    - platform/x86: touchscreen_dmi: Add Chuwi Vi8 (CWI501) DMI match
    - ceph: move mount state enum to super.h
    - ceph: blocklist the kclient when receiving corrupted snap trace
    - selftests: mptcp: userspace: fix v4-v6 test in v6.1
    - of: reserved_mem: Have kmemleak ignore dynamically allocated reserved mem
    - kasan: fix Oops due to missing calls to kasan_arch_is_ready()
    - mm: shrinkers: fix deadlock in shrinker debugfs
    - aio: fix mremap after fork null-deref
    - vmxnet3: move rss code block under eop descriptor
    - fbdev: Fix invalid page access after closing deferred I/O devices
    - drm: Disable dynamic debug as broken
    - drm/amd/amdgpu: fix warning during suspend
    - drm/amd/display: Fail atomic_check early on normalize_zpos error
    - drm/vmwgfx: Stop accessing buffer objects which failed init
    - drm/vmwgfx: Do not drop the reference to the handle too soon
    - mmc: jz4740: Work around bug on JZ4760(B)
    - mmc: meson-gx: fix SDIO mode if cap_sdio_irq isn't set
    - mmc: sdio: fix possible resource leaks in some error paths
    - mmc: mmc_spi: fix error handling in mmc_spi_probe()
    - ALSA: hda: Fix codec device field initializan
    - ALSA: hda/conexant: add a new hda codec SN6180
    - ALSA: hda/realtek - fixed wrong gpio assigned
    - ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP platform.
    - ALSA: hda/realtek: Enable mute/micmute LEDs and speaker support for HP
      Laptops
    - ata: ahci: Add Tiger Lake UP{3,4} AHCI controller
    - ata: libata-core: Disable READ LOG DMA EXT for Samsung MZ7LH
    - sched/psi: Fix use-after-free in ep_remove_wait_queue()
    - hugetlb: check for undefined shift on 32 bit architectures
    - nilfs2: fix underflow in second superblock position calculations
    - mm/MADV_COLLAPSE: set EAGAIN on unexpected page refcount
    - mm/filemap: fix page end in filemap_get_read_batch
    - mm/migrate: fix wrongly apply write bit after mkdirty on sparc64
    - gpio: sim: fix a memory leak
    - freezer,umh: Fix call_usermode_helper_exec() vs SIGKILL
    - coredump: Move dump_emit_page() to kill unused warning
    - Revert "mm: Always release pages to the buddy allocator in
      memblock_free_late()."
    - net: Fix unwanted sign extension in netdev_stats_to_stats64()
    - revert "squashfs: harden sanity check in squashfs_read_xattr_id_table"
    - drm/vc4: crtc: Increase setup cost in core clock calculation to handle
      extreme reduced blanking
    - drm/vc4: Fix YUV plane handling when planes are in different buffers
    - drm/i915/gen11: Wa_1408615072/Wa_1407596294 should be on GT list
    - ice: fix lost multicast packets in promisc mode
    - ixgbe: allow to increase MTU to 3K with XDP enabled
    - i40e: add double of VLAN header when computing the max MTU
    - net: bgmac: fix BCM5358 support by setting correct flags
    - net: ethernet: ti: am65-cpsw: Add RX DMA Channel Teardown Quirk
    - sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list
    - net/sched: tcindex: update imperfect hash filters respecting rcu
    - ice: xsk: Fix cleaning of XDP_TX frames
    - dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions.
    - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
    - net/sched: act_ctinfo: use percpu stats
    - net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
    - net: stmmac: fix order of dwmac5 FlexPPS parametrization sequence
    - bnxt_en: Fix mqprio and XDP ring checking logic
    - tracing: Make trace_define_field_ext() static
    - net: stmmac: Restrict warning on disabling DMA store and fwd mode
    - net: use a bounce buffer for copying skb->mark
    - tipc: fix kernel warning when sending SYN message
    - net: mpls: fix stale pointer if allocation fails during device rename
    - igb: conditionalize I2C bit banging on external thermal sensor support
    - igb: Fix PPS input and output using 3rd and 4th SDP
    - ixgbe: add double of VLAN header when computing the max MTU
    - ipv6: Fix datagram socket connection with DSCP.
    - ipv6: Fix tcp socket connection with DSCP.
    - mm/gup: add folio to list when folio_isolate_lru() succeed
    - mm: extend max struct page size for kmsan
    - i40e: Add checking for null for nlmsg_find_attr()
    - net/sched: tcindex: search key must be 16 bits
    - nvme-tcp: stop auth work after tearing down queues in error recovery
    - nvme-rdma: stop auth work after tearing down queues in error recovery
    - KVM: x86/pmu: Disable vPMU support on hybrid CPUs (host PMUs)
    - kvm: initialize all of the kvm_debugregs structure before sending it to
      userspace
    - perf/x86: Refuse to export capabilities for hybrid PMUs
    - alarmtimer: Prevent starvation by small intervals and SIG_IGN
    - nvme-pci: refresh visible attrs for cmb attributes
    - ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak
    - net: sched: sch: Fix off by one in htb_activate_prios()
    - Linux 6.1.13
    - upstream stable to v6.1.13

* Jammy update: v6.1.12 upstream stable release (LP: #2007585)
    - hv_netvsc: Allocate memory in netvsc_dma_map() with GFP_ATOMIC
    - btrfs: limit device extents to the device size
    - btrfs: zlib: zero-initialize zlib workspace
    - ALSA: hda/realtek: Add Positivo N14KP6-TG
    - ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control()
    - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360
    - ALSA: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9
    - ALSA: hda/realtek: Add quirk for ASUS UM3402 using CS35L41
    - ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP platform.
    - Revert "PCI/ASPM: Save L1 PM Substates Capability for suspend/resume"
    - Revert "PCI/ASPM: Refactor L1 PM Substates Control Register programming"
    - tracing: Fix poll() and select() do not work on per_cpu trace_pipe and
      trace_pipe_raw
    - of/address: Return an error when no valid dma-ranges are found
    - can: j1939: do not wait 250 ms if the same addr was already claimed
    - HID: logitech: Disable hi-res scrolling on USB
    - xfrm: compat: change expression for switch in xfrm_xlate64
    - IB/hfi1: Restore allocated resources on failed copyout
    - xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
    - IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
    - xfrm: annotate data-race around use_time
    - RDMA/irdma: Fix potential NULL-ptr-dereference
    - RDMA/usnic: use iommu_map_atomic() under spin_lock()
    - xfrm: fix bug with DSCP copy to v6 from v4 tunnel
    - of: Make OF framebuffer device names unique
    - net: phylink: move phy_device_free() to correctly release phy device
    - bonding: fix error checking in bond_debug_reregister()
    - net: macb: Perform zynqmp dynamic configuration only for SGMII interface
    - net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY
    - ionic: clean interrupt before enabling queue to avoid credit race
    - ionic: refactor use of ionic_rx_fill()
    - ionic: missed doorbell workaround
    - cpufreq: qcom-hw: Fix cpufreq_driver->get() for non-LMH systems
    - uapi: add missing ip/ipv6 header dependencies for linux/stddef.h
    - net: microchip: sparx5: fix PTP init/deinit not checking all ports
    - HID: amd_sfh: if no sensors are enabled, clean up
    - drm/i915: Don't do the WM0->WM1 copy w/a if WM1 is already enabled
    - drm/virtio: exbuf->fence_fd unmodified on interrupted wait
    - cpuset: Call set_cpus_allowed_ptr() with appropriate mask for task
    - nvidiafb: detect the hardware support before removing console.
    - ice: Do not use WQ_MEM_RECLAIM flag for workqueue
    - ice: Fix disabling Rx VLAN filtering with port VLAN enabled
    - ice: switch: fix potential memleak in ice_add_adv_recipe()
    - net: dsa: mt7530: don't change PVC_EG_TAG when CPU port becomes VLAN-aware
    - net: mscc: ocelot: fix VCAP filters not matching on MAC with "protocol
      802.1Q"
    - net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change
    - net/mlx5: Bridge, fix ageing of peer FDB entries
    - net/mlx5e: Fix crash unsetting rx-vlan-filter in switchdev mode
    - net/mlx5e: IPoIB, Show unknown speed instead of error
    - net/mlx5: Store page counters in a single array
    - net/mlx5: Expose SF firmware pages counter
    - net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers
    - net/mlx5: fw_tracer, Zero consumer index when reloading the tracer
    - net/mlx5: Serialize module cleanup with reload and remove
    - igc: Add ndo_tx_timeout support
    - net: ethernet: mtk_eth_soc: fix wrong parameters order in
      __xdp_rxq_info_reg()
    - txhash: fix sk->sk_txrehash default
    - selftests: Fix failing VXLAN VNI filtering test
    - rds: rds_rm_zerocopy_callback() use list_first_entry()
    - net: mscc: ocelot: fix all IPv6 getting trapped to CPU when PTP timestamping
      is used
    - selftests: forwarding: lib: quote the sysctl values
    - arm64: dts: rockchip: fix input enable pinconf on rk3399
    - arm64: dts: rockchip: set sdmmc0 speed to sd-uhs-sdr50 on rock-3a
    - ALSA: pci: lx6464es: fix a debug loop
    - riscv: stacktrace: Fix missing the first frame
    - arm64: dts: mediatek: mt8195: Fix vdosys* compatible strings
    - ASoC: tas5805m: rework to avoid scheduling while atomic.
    - ASoC: tas5805m: add missing page switch.
    - ASoC: fsl_sai: fix getting version from VERID
    - ASoC: topology: Return -ENOMEM on memory allocation failure
    - clk: microchip: mpfs-ccc: Use devm_kasprintf() for allocating formatted
      strings
    - pinctrl: mediatek: Fix the drive register definition of some Pins
    - pinctrl: aspeed: Fix confusing types in return value
    - pinctrl: single: fix potential NULL dereference
    - spi: dw: Fix wrong FIFO level setting for long xfers
    - pinctrl: aspeed: Revert "Force to disable the function's signal"
    - pinctrl: intel: Restore the pins that used to be in Direct IRQ mode
    - cifs: Fix use-after-free in rdata->read_into_pages()
    - net: USB: Fix wrong-direction WARNING in plusb.c
    - mptcp: do not wait for bare sockets' timeout
    - mptcp: be careful on subflow status propagation on errors
    - selftests: mptcp: allow more slack for slow test-case
    - selftests: mptcp: stop tests earlier
    - btrfs: simplify update of last_dir_index_offset when logging a directory
    - btrfs: free device in btrfs_close_devices for a single device filesystem
    - usb: core: add quirk for Alcor Link AK9563 smartcard reader
    - usb: typec: altmodes/displayport: Fix probe pin assign check
    - cxl/region: Fix null pointer dereference for resetting decoder
    - cxl/region: Fix passthrough-decoder detection
    - clk: ingenic: jz4760: Update M/N/OD calculation algorithm
    - pinctrl: qcom: sm8450-lpass-lpi: correct swr_rx_data group
    - drm/amd/pm: add SMU 13.0.7 missing GetPptLimit message mapping
    - ceph: flush cap releases when the session is flushed
    - nvdimm: Support sizeof(struct page) > MAX_STRUCT_PAGE_SIZE
    - riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte
    - riscv: kprobe: Fixup misaligned load text
    - powerpc/64s/interrupt: Fix interrupt exit race with security mitigation
      switch
    - drm/amdgpu: Use the TGID for trace_amdgpu_vm_update_ptes
    - tracing: Fix TASK_COMM_LEN in trace event format file
    - rtmutex: Ensure that the top waiter is always woken up
    - arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive
    - arm64: dts: meson-g12-common: Make mmc host controller interrupts level-
      sensitive
    - arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive
    - Fix page corruption caused by racy check in __free_pages
    - arm64: efi: Force the use of SetVirtualAddressMap() on eMAG and Altra Max
      machines
    - drm/amd/pm: bump SMU 13.0.0 driver_if header version
    - drm/amdgpu: Add unique_id support for GC 11.0.1/2
    - drm/amd/pm: bump SMU 13.0.7 driver_if header version
    - drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini
    - drm/amdgpu/smu: skip pptable init under sriov
    - drm/amd/display: properly handling AGP aperture in vm setup
    - drm/amd/display: fix cursor offset on rotation 180
    - drm/i915: Move fd_install after last use of fence
    - drm/i915: Initialize the obj flags for shmem objects
    - drm/i915: Fix VBT DSI DVO port handling
    - x86/speculation: Identify processors vulnerable to SMT RSB predictions
    - KVM: x86: Mitigate the cross-thread return address predictions bug
    - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
    - Linux 6.1.12
    - upstream stable to v6.1.12

* Jammy update: v6.1.11 upstream stable release (LP: #2007584)
    - firewire: fix memory leak for payload of request subaction to IEC 61883-1
      FCP region
    - bus: sunxi-rsb: Fix error handling in sunxi_rsb_init()
    - arm64: dts: imx8m-venice: Remove incorrect 'uart-has-rtscts'
    - arm64: dts: freescale: imx8dxl: fix sc_pwrkey's property name linux,keycode
    - ASoC: amd: acp-es8336: Drop reference count of ACPI device after use
    - ASoC: Intel: bytcht_es8316: Drop reference count of ACPI device after use
    - ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
    - ASoC: Intel: bytcr_rt5640: Drop reference count of ACPI device after use
    - ASoC: Intel: bytcr_wm5102: Drop reference count of ACPI device after use
    - ASoC: Intel: sof_es8336: Drop reference count of ACPI device after use
    - ASoC: Intel: avs: Implement PCI shutdown
    - bpf: Fix off-by-one error in bpf_mem_cache_idx()
    - bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers
    - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
    - bpf: Fix to preserve reg parent/live fields when copying range info
    - selftests/filesystems: grant executable permission to run_fat_tests.sh
    - ASoC: SOF: ipc4-mtrace: prevent underflow in
      sof_ipc4_priority_mask_dfs_write()
    - bpf: Add missing btf_put to register_btf_id_dtor_kfuncs
    - media: v4l2-ctrls-api.c: move ctrl->is_new = 1 to the correct line
    - bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
    - arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX
    - arm64: dts: imx8mm-verdin: Do not power down eth-phy
    - drm/vc4: hdmi: make CEC adapter name unique
    - drm/ssd130x: Init display before the SSD130X_DISPLAY_ON command
    - scsi: Revert "scsi: core: map PQ=1, PDT=other values to
      SCSI_SCAN_TARGET_PRESENT"
    - bpf: Fix the kernel crash caused by bpf_setsockopt().
    - ALSA: memalloc: Workaround for Xen PV
    - vhost/net: Clear the pending messages when the backend is removed
    - copy_oldmem_kernel() - WRITE is "data source", not destination
    - WRITE is "data source", not destination...
    - READ is "data destination", not source...
    - zcore: WRITE is "data source", not destination...
    - memcpy_real(): WRITE is "data source", not destination...
    - fix iov_iter_bvec() "direction" argument
    - fix 'direction' argument of iov_iter_{init,bvec}()
    - fix "direction" argument of iov_iter_kvec()
    - use less confusing names for iov_iter direction initializers
    - vhost-scsi: unbreak any layout for response
    - ice: Prevent set_channel from changing queues while RDMA active
    - qede: execute xdp_do_flush() before napi_complete_done()
    - virtio-net: execute xdp_do_flush() before napi_complete_done()
    - dpaa_eth: execute xdp_do_flush() before napi_complete_done()
    - dpaa2-eth: execute xdp_do_flush() before napi_complete_done()
    - skb: Do mix page pool and page referenced frags in GRO
    - sfc: correctly advertise tunneled IPv6 segmentation
    - net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices
    - net: wwan: t7xx: Fix Runtime PM initialization
    - block, bfq: replace 0/1 with false/true in bic apis
    - block, bfq: fix uaf for bfqq in bic_set_bfqq()
    - netrom: Fix use-after-free caused by accept on already connected socket
    - fscache: Use wait_on_bit() to wait for the freeing of relinquished volume
    - platform/x86/amd/pmf: update to auto-mode limits only after AMT event
    - platform/x86/amd/pmf: Add helper routine to update SPS thermals
    - platform/x86/amd/pmf: Fix to update SPS default pprof thermals
    - platform/x86/amd/pmf: Add helper routine to check pprof is balanced
    - platform/x86/amd/pmf: Fix to update SPS thermals when power supply change
    - platform/x86/amd/pmf: Ensure mutexes are initialized before use
    - platform/x86: thinkpad_acpi: Fix thinklight LED brightness returning 255
    - drm/i915/guc: Fix locking when searching for a hung request
    - drm/i915: Fix request ref counting during error capture & debugfs dump
    - drm/i915: Fix up locking around dumping requests lists
    - drm/i915/adlp: Fix typo for reference clock
    - net/tls: tls_is_tx_ready() checked list_entry
    - ALSA: firewire-motu: fix unreleased lock warning in hwdep device
    - netfilter: br_netfilter: disable sabotage_in hook after first suppression
    - block: ublk: extending queue_size to fix overflow
    - kunit: fix kunit_test_init_section_suites(...)
    - squashfs: harden sanity check in squashfs_read_xattr_id_table
    - maple_tree: should get pivots boundary by type
    - sctp: do not check hb_timer.expires when resetting hb_timer
    - net: phy: meson-gxl: Add generic dummy stubs for MMD register access
    - drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during disable
    - ip/ip6_gre: Fix changing addr gen mode not generating IPv6 link local
      address
    - ip/ip6_gre: Fix non-point-to-point tunnel not generating IPv6 link local
      address
    - riscv: kprobe: Fixup kernel panic when probing an illegal position
    - igc: return an error if the mac type is unknown in
      igc_ptp_systim_to_hwtstamp()
    - octeontx2-af: Fix devlink unregister
    - can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate
    - can: raw: fix CAN FD frame transmissions over CAN XL devices
    - can: mcp251xfd: mcp251xfd_ring_set_ringparam(): assign missing
      tx_obj_num_coalesce_irq
    - ata: libata: Fix sata_down_spd_limit() when no link speed is reported
    - selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning
    - selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided
    - selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs
    - selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy
      benchmarking
    - virtio-net: Keep stop() to follow mirror sequence of open()
    - net: openvswitch: fix flow memory leak in ovs_flow_cmd_new
    - efi: fix potential NULL deref in efi_mem_reserve_persistent
    - rtc: sunplus: fix format string for printing resource
    - certs: Fix build error when PKCS#11 URI contains semicolon
    - kbuild: modinst: Fix build error when CONFIG_MODULE_SIG_KEY is a PKCS#11 URI
    - i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU
    - i2c: mxs: suppress probe-deferral error message
    - scsi: target: core: Fix warning on RT kernels
    - x86/aperfmperf: Erase stale arch_freq_scale values when disabling frequency
      invariance readings
    - perf/x86/intel: Add Emerald Rapids
    - perf/x86/intel/cstate: Add Emerald Rapids
    - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
    - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
    - i2c: rk3x: fix a bunch of kernel-doc warnings
    - Revert "gfs2: stop using generic_writepages in gfs2_ail1_start_one"
    - x86/build: Move '-mindirect-branch-cs-prefix' out of GCC-only block
    - platform/x86: hp-wmi: Handle Omen Key event
    - platform/x86: gigabyte-wmi: add support for B450M DS3H WIFI-CF
    - platform/x86/amd: pmc: Disable IRQ1 wakeup for RN/CZN
    - net/x25: Fix to not accept on connected socket
    - drm/amd/display: Fix timing not changning when freesync video is enabled
    - bcache: Silence memcpy() run-time false positive warnings
    - iio: adc: stm32-dfsdm: fill module aliases
    - usb: dwc3: qcom: enable vbus override when in OTG dr-mode
    - usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait
    - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
    - fbcon: Check font dimension limits
    - cgroup/cpuset: Fix wrong check in update_parent_subparts_cpumask()
    - hv_netvsc: Fix missed pagebuf entries in netvsc_dma_map/unmap()
    - ARM: dts: imx7d-smegw01: Fix USB host over-current polarity
    - net: qrtr: free memory on error path in radix_tree_insert()
    - can: isotp: split tx timer into transmission and timeout
    - can: isotp: handle wait_event_interruptible() return values
    - watchdog: diag288_wdt: do not use stack buffers for hardware data
    - watchdog: diag288_wdt: fix __diag288() inline assembly
    - ALSA: hda/realtek: Add Acer Predator PH315-54
    - ALSA: hda/realtek: fix mute/micmute LEDs, speaker don't work for a HP
      platform
    - ASoC: codecs: wsa883x: correct playback min/max rates
    - ASoC: SOF: sof-audio: unprepare when swidget->use_count > 0
    - ASoC: SOF: sof-audio: skip prepare/unprepare if swidget is NULL
    - ASoC: SOF: keep prepare/unprepare widgets in sink path
    - efi: Accept version 2 of memory attributes table
    - rtc: efi: Enable SET/GET WAKEUP services as optional
    - iio: hid: fix the retval in accel_3d_capture_sample
    - iio: hid: fix the retval in gyro_3d_capture_sample
    - iio: adc: xilinx-ams: fix devm_krealloc() return value check
    - iio: adc: berlin2-adc: Add missing of_node_put() in error path
    - iio: imx8qxp-adc: fix irq flood when call imx8qxp_adc_read_raw()
    - iio:adc:twl6030: Enable measurements of VUSB, VBAT and others
    - iio: imu: fxos8700: fix ACCEL measurement range selection
    - iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback
    - iio: imu: fxos8700: fix IMU data bits returned to user space
    - iio: imu: fxos8700: fix map label of channel type to MAGN sensor
    - iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback
    - iio: imu: fxos8700: fix incorrect ODR mode readback
    - iio: imu: fxos8700: fix failed initialization ODR mode assignment
    - iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN
    - iio: imu: fxos8700: fix MAGN sensor scale and unit
    - nvmem: brcm_nvram: Add check for kzalloc
    - nvmem: sunxi_sid: Always use 32-bit MMIO reads
    - nvmem: qcom-spmi-sdam: fix module autoloading
    - parisc: Fix return code of pdc_iodc_print()
    - parisc: Replace hardcoded value with PRIV_USER constant in ptrace.c
    - parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case
    - riscv: disable generation of unwind tables
    - Revert "mm: kmemleak: alloc gray object for reserved region with direct map"
    - mm: multi-gen LRU: fix crash during cgroup migration
    - mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps
    - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
    - usb: gadget: f_uac2: Fix incorrect increment of bNumEndpoints
    - usb: typec: ucsi: Don't attempt to resume the ports before they exist
    - usb: gadget: udc: do not clear gadget driver.bus
    - kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup()
    - HV: hv_balloon: fix memory leak with using debugfs_lookup()
    - x86/debug: Fix stack recursion caused by wrongly ordered DR7 accesses
    - fpga: m10bmc-sec: Fix probe rollback
    - fpga: stratix10-soc: Fix return value check in s10_ops_write_init()
    - mm/uffd: fix pte marker when fork() without fork event
    - mm/swapfile: add cond_resched() in get_swap_pages()
    - mm/khugepaged: fix ->anon_vma race
    - mm, mremap: fix mremap() expanding for vma's with vm_ops->close()
    - mm/MADV_COLLAPSE: catch !none !huge !bad pmd lookups
    - highmem: round down the address passed to kunmap_flush_on_unmap()
    - ia64: fix build error due to switch case label appearing next to declaration
    - Squashfs: fix handling and sanity checking of xattr_ids count
    - maple_tree: fix mas_empty_area_rev() lower bound validation
    - migrate: hugetlb: check for hugetlb shared PMD in node migration
    - dma-buf: actually set signaling bit for private stub fences
    - serial: stm32: Merge hard IRQ and threaded IRQ handling into single IRQ
      handler
    - drm/i915: Avoid potential vm use-after-free
    - drm/i915: Fix potential bit_17 double-free
    - drm/amd: Fix initialization for nbio 4.3.0
    - drm/amd/pm: drop unneeded dpm features disablement for SMU 13.0.4/11
    - drm/amdgpu: update wave data type to 3 for gfx11
    - nvmem: core: initialise nvmem->id early
    - nvmem: core: remove nvmem_config wp_gpio
    - nvmem: core: fix cleanup after dev_set_name()
    - nvmem: core: fix registration vs use race
    - nvmem: core: fix device node refcounting
    - nvmem: core: fix cell removal on error
    - nvmem: core: fix return value
    - phy: qcom-qmp-combo: fix runtime suspend
    - serial: 8250_dma: Fix DMA Rx completion race
    - serial: 8250_dma: Fix DMA Rx rearm race
    - platform/x86/amd: pmc: add CONFIG_SERIO dependency
    - ASoC: SOF: sof-audio: prepare_widgets: Check swidget for NULL on sink
      failure
    - iio:adc:twl6030: Enable measurement of VAC
    - powerpc/64s/radix: Fix crash with unaligned relocated kernel
    - powerpc/64s: Fix local irq disable when PMIs are disabled
    - powerpc/imc-pmu: Revert nest_init_lock to being a mutex
    - fs/ntfs3: Validate attribute data and valid sizes
    - ovl: Use "buf" flexible array for memcpy() destination
    - f2fs: initialize locks earlier in f2fs_fill_super()
    - fbdev: smscufx: fix error handling code in ufx_usb_probe
    - f2fs: fix to do sanity check on i_extra_isize in is_alive()
    - wifi: brcmfmac: Check the count value of channel spec to prevent out-of-
      bounds reads
    - gfs2: Cosmetic gfs2_dinode_{in,out} cleanup
    - gfs2: Always check inode size of inline inodes
    - bpf: Skip invalid kfunc call in backtrack_insn
    - Linux 6.1.11
    - upstream stable to v6.1.11

* cm32181 module error blocking suspend (LP: #1988346) // Jammy update:
    v6.1.11 upstream stable release (LP: #2007584)
    - iio: light: cm32181: Fix PM support on system with 2 I2C resources

* Jammy update: v6.1.10 upstream stable release (LP: #2007583)
    - ARM: dts: imx: Fix pca9547 i2c-mux node name
    - ARM: dts: vf610: Fix pca9548 i2c-mux node names
    - arm64: dts: freescale: Fix pca954x i2c-mux node names
    - arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI
    - firmware: arm_scmi: Clear stale xfer->hdr.status
    - bpf: Skip task with pid=1 in send_signal_common()
    - erofs/zmap.c: Fix incorrect offset calculation
    - mac80211: Fix MLO address translation for multiple bss case
    - arm64: dts: msm8994-angler: fix the memory map
    - ARM: omap1: fix building gpio15xx
    - kselftest: Fix error message for unconfigured LLVM builds
    - erofs: clean up parsing of fscache related options
    - blk-cgroup: fix missing pd_online_fn() while activating policy
    - LoongArch: Get frame info in unwind_start() when regs is not available
    - ACPI: video: Add backlight=native DMI quirk for Acer Aspire 4810T
    - block: fix hctx checks for batch allocation
    - s390: workaround invalid gcc-11 out of bounds read warning
    - HID: uclogic: Add support for XP-PEN Deco 01 V2
    - HID: playstation: sanity check DualSense calibration data.
    - dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
    - gpiolib: acpi: Allow ignoring wake capability on pins that aren't in _AEI
    - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint()
    - nvme-apple: only reset the controller when RTKit is running
    - gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xRU
    - gpiolib-acpi: Don't set GPIOs for wakeup in S3 mode
    - net: fix NULL pointer in skb_segment_list
    - rust: print: avoid evaluating arguments in `pr_*` macros in `unsafe` blocks
    - net: mctp: purge receive queues on sk destruction
    - Linux 6.1.10
    - upstream stable to v6.1.10

* Jammy update: v6.1.9 upstream stable release (LP: #2007578)
    - memory: tegra: Remove clients SID override programming
    - memory: atmel-sdramc: Fix missing clk_disable_unprepare in
      atmel_ramc_probe()
    - memory: mvebu-devbus: Fix missing clk_disable_unprepare in
      mvebu_devbus_probe()
    - arm64: dts: qcom: sc8280xp: fix primary USB-DP PHY reset
    - dmaengine: qcom: gpi: Set link_rx bit on GO TRE for rx operation
    - dmaengine: ti: k3-udma: Do conditional decrement of
      UDMA_CHAN_RT_PEER_BCNT_REG
    - soc: imx: imx8mp-blk-ctrl: enable global pixclk with HDMI_TX_PHY PD
    - arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property
    - ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency'
    - ARM: dts: imx7d-pico: Use 'clock-frequency'
    - ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts'
    - arm64: dts: verdin-imx8mm: fix dahlia audio playback
    - arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux
    - arm64: dts: verdin-imx8mm: fix dev board audio playback
    - arm64: dts: imx93-11x11-evk: correct clock and strobe pad setting
    - ARM: imx: add missing of_node_put()
    - soc: imx: imx8mp-blk-ctrl: don't set power device name
    - arm64: dts: imx8mp: Fix missing GPC Interrupt
    - arm64: dts: imx8mp: Fix power-domain typo
    - arm64: dts: imx8mp-evk: pcie0-refclk cosmetic cleanup
    - HID: intel_ish-hid: Add check for ishtp_dma_tx_map
    - arm64: dts: imx8mm-venice-gw7901: fix USB2 controller OC polarity
    - soc: imx8m: Fix incorrect check for of_clk_get_by_name()
    - reset: ti-sci: honor TI_SCI_PROTOCOL setting when not COMPILE_TEST
    - reset: uniphier-glue: Fix possible null-ptr-deref
    - EDAC/highbank: Fix memory leak in highbank_mc_probe()
    - firmware: arm_scmi: Harden shared memory access in fetch_response
    - firmware: arm_scmi: Harden shared memory access in fetch_notification
    - firmware: arm_scmi: Fix virtio channels cleanup on shutdown
    - interconnect: qcom: msm8996: Provide UFS clocks to A2NoC
    - interconnect: qcom: msm8996: Fix regmap max_register values
    - HID: amd_sfh: Fix warning unwind goto
    - tomoyo: fix broken dependency on *.conf.default
    - RDMA/rxe: Fix inaccurate constants in rxe_type_info
    - RDMA/rxe: Prevent faulty rkey generation
    - erofs: fix kvcalloc() misuse with __GFP_NOFAIL
    - arm64: dts: marvell: AC5/AC5X: Fix address for UART1
    - RDMA/core: Fix ib block iterator counter overflow
    - IB/hfi1: Reject a zero-length user expected buffer
    - IB/hfi1: Reserve user expected TIDs
    - IB/hfi1: Fix expected receive setup error exit issues
    - IB/hfi1: Immediately remove invalid memory from hardware
    - IB/hfi1: Remove user expected buffer invalidate race
    - affs: initialize fsdata in affs_truncate()
    - PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe()
    - arm64: dts: qcom: msm8992: Don't use sfpb mutex
    - arm64: dts: qcom: msm8992-libra: Fix the memory map
    - kbuild: export top-level LDFLAGS_vmlinux only to scripts/Makefile.vmlinux
    - kbuild: fix 'make modules' error when CONFIG_DEBUG_INFO_BTF_MODULES=y
    - phy: ti: fix Kconfig warning and operator precedence
    - drm/msm/gpu: Fix potential double-free
    - NFSD: fix use-after-free in nfsd4_ssc_setup_dul()
    - ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60
    - drm/vc4: bo: Fix drmm_mutex_init memory hog
    - phy: usb: sunplus: Fix potential null-ptr-deref in sp_usb_phy_probe()
    - bpf: hash map, avoid deadlock with suitable hash mask
    - amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent
    - amd-xgbe: Delay AN timeout during KR training
    - bpf: Fix pointer-leak due to insufficient speculative store bypass
      mitigation
    - drm/vc4: bo: Fix unused variable warning
    - phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in
      rockchip_usb2phy_power_on()
    - net: nfc: Fix use-after-free in local_cleanup()
    - net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs
    - net: enetc: avoid deadlock in enetc_tx_onestep_tstamp()
    - net: lan966x: add missing fwnode_handle_put() for ports node
    - sch_htb: Avoid grafting on htb_destroy_class_offload when destroying htb
    - gpio: mxc: Protect GPIO irqchip RMW with bgpio spinlock
    - gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode
    - wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid
    - pinctrl: rockchip: fix reading pull type on rk3568
    - net: stmmac: Fix queue statistics reading
    - net/sched: sch_taprio: fix possible use-after-free
    - l2tp: convert l2tp_tunnel_list to idr
    - l2tp: close all race conditions in l2tp_tunnel_register()
    - net: usb: sr9700: Handle negative len
    - net: mdio: validate parameter addr in mdiobus_get_phy()
    - HID: check empty report_list in hid_validate_values()
    - HID: check empty report_list in bigben_probe()
    - net: stmmac: fix invalid call to mdiobus_get_phy()
    - pinctrl: rockchip: fix mux route data for rk3568
    - ARM: dts: stm32: Fix qspi pinctrl phandle for stm32mp15xx-dhcor-som
    - ARM: dts: stm32: Fix qspi pinctrl phandle for stm32mp15xx-dhcom-som
    - ARM: dts: stm32: Fix qspi pinctrl phandle for stm32mp157c-emstamp-argon
    - ARM: dts: stm32: Fix qspi pinctrl phandle for stm32mp151a-prtt1l
    - HID: revert CHERRY_MOUSE_000C quirk
    - block/rnbd-clt: fix wrong max ID in ida_alloc_max
    - usb: ucsi: Ensure connector delayed work items are flushed
    - usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
    - usb: gadget: f_fs: Ensure ep0req is dequeued before free_request
    - netfilter: conntrack: handle tcp challenge acks during connection reuse
    - Bluetooth: Fix a buffer overflow in mgmt_mesh_add()
    - Bluetooth: hci_conn: Fix memory leaks
    - Bluetooth: hci_sync: fix memory leak in hci_update_adv_data()
    - Bluetooth: ISO: Avoid circular locking dependency
    - Bluetooth: ISO: Fix possible circular locking dependency
    - Bluetooth: hci_event: Fix Invalid wait context
    - Bluetooth: Fix possible deadlock in rfcomm_sk_state_change
    - net: ipa: disable ipa interrupt during suspend
    - net/mlx5e: Avoid false lock dependency warning on tc_ht even more
    - net/mlx5: E-switch, Fix setting of reserved fields on
      MODIFY_SCHEDULING_ELEMENT
    - net/mlx5e: QoS, Fix wrongfully setting parent_element_id on
      MODIFY_SCHEDULING_ELEMENT
    - net/mlx5e: Set decap action based on attr for sample
    - net/mlx5: E-switch, Fix switchdev mode after devlink reload
    - net: mlx5: eliminate anonymous module_init & module_exit
    - drm/panfrost: fix GENERIC_ATOMIC64 dependency
    - dmaengine: Fix double increment of client_count in dma_chan_get()
    - net: macb: fix PTP TX timestamp failure due to packet padding
    - virtio-net: correctly enable callback during start_xmit
    - l2tp: prevent lockdep issue in l2tp_tunnel_register()
    - HID: betop: check shape of output reports
    - drm/i915/selftests: Unwind hugepages to drop wakeref on error
    - cifs: fix potential deadlock in cache_refresh_path()
    - dmaengine: xilinx_dma: call of_node_put() when breaking out of
      for_each_child_of_node()
    - dmaengine: tegra: Fix memory leak in terminate_all()
    - phy: phy-can-transceiver: Skip warning if no "max-bitrate"
    - drm/amd/display: fix issues with driver unload
    - net: sched: gred: prevent races when adding offloads to stats
    - nvme-pci: fix timeout request state check
    - tcp: avoid the lookup process failing to get sk in ehash table
    - usb: dwc3: fix extcon dependency
    - ptdma: pt_core_execute_cmd() should use spinlock
    - device property: fix of node refcount leak in
      fwnode_graph_get_next_endpoint()
    - w1: fix deadloop in __w1_remove_master_device()
    - w1: fix WARNING after calling w1_process()
    - driver core: Fix test_async_probe_init saves device in wrong array
    - selftests/net: toeplitz: fix race on tpacket_v3 block close
    - net: dsa: microchip: ksz9477: port map correction in ALU table entry
      register
    - thermal: Validate new state in cur_state_store()
    - thermal/core: fix error code in __thermal_cooling_device_register()
    - thermal: core: call put_device() only after device_register() fails
    - net: stmmac: enable all safety features by default
    - bnxt: Do not read past the end of test names
    - tcp: fix rate_app_limited to default to 1
    - scsi: iscsi: Fix multiple iSCSI session unbind events sent to userspace
    - ASoC: SOF: pm: Set target state earlier
    - ASoC: SOF: pm: Always tear down pipelines before DSP suspend
    - ASoC: SOF: Add FW state to debugfs
    - ASoC: amd: yc: Add Razer Blade 14 2022 into DMI table
    - spi: cadence: Fix busy cycles calculation
    - cpufreq: CPPC: Add u64 casts to avoid overflowing
    - cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist
    - ASoC: mediatek: mt8186: support rt5682s_max98360
    - ASoC: mediatek: mt8186: Add machine support for max98357a
    - ASoC: amd: yc: Add ASUS M5402RA into DMI table
    - ASoC: support machine driver with max98360
    - kcsan: test: don't put the expect array on the stack
    - cpufreq: Add SM6375 to cpufreq-dt-platdev blocklist
    - ASoC: fsl_micfil: Correct the number of steps on SX controls
    - drm/msm/a6xx: Avoid gx gbit halt during rpm suspend
    - net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem
    - drm: Add orientation quirk for Lenovo ideapad D330-10IGL
    - s390/debug: add _ASM_S390_ prefix to header guard
    - s390: expicitly align _edata and _end symbols on page boundary
    - xen/pvcalls: free active map buffer on pvcalls_front_free_map
    - perf/x86/cstate: Add Meteor Lake support
    - perf/x86/msr: Add Meteor Lake support
    - perf/x86/msr: Add Emerald Rapids
    - perf/x86/intel/uncore: Add Emerald Rapids
    - nolibc: fix fd_set type
    - tools/nolibc: Fix S_ISxxx macros
    - tools/nolibc: fix missing includes causing build issues at -O0
    - tools/nolibc: prevent gcc from making memset() loop over itself
    - cpufreq: armada-37xx: stop using 0 as NULL pointer
    - ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC
    - ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets
    - ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA
    - drm/amdkfd: Add sync after creating vram bo
    - drm/amdkfd: Fix NULL pointer error for GC 11.0.1 on mGPU
    - cifs: fix potential memory leaks in session setup
    - spi: spidev: remove debug messages that access spidev->spi without locking
    - KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
    - scsi: hisi_sas: Use abort task set to reset SAS disks when discovered
    - scsi: hisi_sas: Set a port invalid only if there are no devices attached
      when refreshing port id
    - r8152: add vendor/device ID pair for Microsoft Devkit
    - platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD
    - platform/x86: asus-nb-wmi: Add alternate mapping for KEY_CAMERA
    - platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK
    - platform/x86: asus-wmi: Add quirk wmi_ignore_fan
    - platform/x86: asus-wmi: Ignore fan on E410MA
    - platform/x86: simatic-ipc: correct name of a model
    - platform/x86: simatic-ipc: add another model
    - lockref: stop doing cpu_relax in the cmpxchg loop
    - ata: pata_cs5535: Don't build on UML
    - firmware: coreboot: Check size of table entry and use flex-array
    - btrfs: zoned: enable metadata over-commit for non-ZNS setup
    - Revert "selftests/bpf: check null propagation only neither reg is
      PTR_TO_BTF_ID"
    - arm64: efi: Recover from synchronous exceptions occurring in firmware
    - arm64: efi: Avoid workqueue to check whether EFI runtime is live
    - arm64: efi: Account for the EFI runtime stack in stack unwinder
    - Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
    - drm/i915: Allow panel fixed modes to have differing sync polarities
    - drm/i915: Allow alternate fixed modes always for eDP
    - drm/amdgpu: complete gfxoff allow signal during suspend without delay
    - io_uring/msg_ring: fix remote queue to disabled ring
    - wifi: mac80211: Proper mark iTXQs for resumption
    - wifi: mac80211: Fix iTXQ AMPDU fragmentation handling
    - sched/fair: Check if prev_cpu has highest spare cap in feec()
    - sched/uclamp: Fix a uninitialized variable warnings
    - vfio/type1: Respect IOMMU reserved regions in vfio_test_domain_fgsp()
    - scsi: hpsa: Fix allocation size for scsi_host_alloc()
    - kvm/vfio: Fix potential deadlock on vfio group_lock
    - nfsd: don't free files unconditionally in __nfsd_file_cache_purge
    - module: Don't wait for GOING modules
    - ftrace: Export ftrace_free_filter() to modules
    - tracing: Make sure trace_printk() can output as soon as it can be used
    - trace_events_hist: add check for return value of 'create_hist_field'
    - ftrace/scripts: Update the instructions for ftrace-bisect.sh
    - cifs: Fix oops due to uncleared server->smbd_conn in reconnect
    - ksmbd: add max connections parameter
    - ksmbd: do not sign response to session request for guest login
    - ksmbd: downgrade ndr version error message to debug
    - ksmbd: limit pdu length size according to connection status
    - ovl: fix tmpfile leak
    - ovl: fail on invalid uid/gid mapping at copy up
    - io_uring/net: cache provided buffer group value for multishot receives
    - KVM: x86/vmx: Do not skip segment attributes if unusable bit is set
    - KVM: arm64: GICv4.1: Fix race with doorbell on VPE activation/deactivation
    - scsi: ufs: core: Fix devfreq deadlocks
    - riscv: fix -Wundef warning for CONFIG_RISCV_BOOT_SPINWAIT
    - thermal: intel: int340x: Protect trip temperature from concurrent updates
    - regulator: dt-bindings: samsung,s2mps14: add lost samsung,ext-control-gpios
    - ipv6: fix reachability confirmation with proxy_ndp
    - ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment
    - EDAC/device: Respect any driver-supplied workqueue polling value
    - EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info
    - platform/x86: thinkpad_acpi: Fix profile modes on Intel platforms
    - drm/display/dp_mst: Correct the kref of port.
    - drm/amd/pm: add missing AllowIHInterrupt message mapping for SMU13.0.0
    - drm/amdgpu: remove unconditional trap enable on add gfx11 queues
    - drm/amdgpu/display/mst: Fix mst_state->pbn_div and slot count assignments
    - drm/amdgpu/display/mst: limit payload to be updated one by one
    - drm/amdgpu/display/mst: update mst_mgr relevant variable when long HPD
    - io_uring: inline io_req_task_work_add()
    - io_uring: inline __io_req_complete_post()
    - io_uring: hold locks for io_req_complete_failed
    - io_uring: use io_req_task_complete() in timeout
    - io_uring: remove io_req_tw_post_queue
    - io_uring: inline __io_req_complete_put()
    - net: mana: Fix IRQ name - add PCI and queue number
    - io_uring: always prep_async for drain requests
    - i2c: designware: use casting of u64 in clock multiplication to avoid
      overflow
    - i2c: designware: Fix unbalanced suspended flag
    - drm/drm_vma_manager: Add drm_vma_node_allow_once()
    - drm/i915: Fix a memory leak with reused mmap_offset
    - iavf: fix temporary deadlock and failure to set MAC address
    - iavf: schedule watchdog immediately when changing primary MAC
    - netlink: prevent potential spectre v1 gadgets
    - net: fix UaF in netns ops registration error path
    - net: fec: Use page_pool_put_full_page when freeing rx buffers
    - nvme: simplify transport specific device attribute handling
    - nvme: consolidate setting the tagset flags
    - nvme-fc: fix initialization order
    - drm/i915/selftest: fix intel_selftest_modify_policy argument types
    - ACPI: video: Add backlight=native DMI quirk for HP Pavilion g6-1d80nr
    - ACPI: video: Add backlight=native DMI quirk for HP EliteBook 8460p
    - ACPI: video: Add backlight=native DMI quirk for Asus U46E
    - netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
    - netfilter: nft_set_rbtree: skip elements in transaction from garbage
      collection
    - netlink: annotate data races around nlk->portid
    - netlink: annotate data races around dst_portid and dst_group
    - netlink: annotate data races around sk_state
    - ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
    - ipv4: prevent potential spectre v1 gadget in fib_metrics_match()
    - net: dsa: microchip: fix probe of I2C-connected KSZ8563
    - net: ethernet: adi: adin1110: Fix multicast offloading
    - netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE
    - netrom: Fix use-after-free of a listening socket.
    - platform/x86: asus-wmi: Fix kbd_dock_devid tablet-switch reporting
    - platform/x86: apple-gmux: Move port defines to apple-gmux.h
    - platform/x86: apple-gmux: Add apple_gmux_detect() helper
    - ACPI: video: Fix apple gmux detection
    - tracing/osnoise: Use built-in RCU list checking
    - net/sched: sch_taprio: do not schedule in taprio_reset()
    - sctp: fail if no bound addresses can be used for a given scope
    - riscv/kprobe: Fix instruction simulation of JALR
    - nvme: fix passthrough csi check
    - gpio: mxc: Unlock on error path in mxc_flip_edge()
    - gpio: ep93xx: Fix port F hwirq numbers in handler
    - net: ravb: Fix lack of register setting after system resumed for Gen3
    - net: ravb: Fix possible hang if RIS2_QFF1 happen
    - net: mctp: add an explicit reference from a mctp_sk_key to sock
    - net: mctp: move expiry timer delete to unhash
    - net: mctp: hold key reference when looking up a general key
    - net: mctp: mark socks as dead on unhash, prevent re-add
    - thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type()
    - riscv: Move call to init_cpu_topology() to later initialization stage
    - net/tg3: resolve deadlock in tg3_reset_task() during EEH
    - tsnep: Fix TX queue stop/wake for multiple queues
    - net: mdio-mux-meson-g12a: force internal PHY off on mux switch
    - Partially revert "perf/arm-cmn: Optimise DTC counter accesses"
    - block: ublk: move ublk_chr_class destroying after devices are removed
    - treewide: fix up files incorrectly marked executable
    - tools: gpio: fix -c option of gpio-event-mon
    - Fix up more non-executable files marked executable
    - Revert "mm/compaction: fix set skip in fast_find_migrateblock"
    - Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI
      mode"
    - Input: i8042 - add Clevo PCX0DX to i8042 quirk table
    - x86/sev: Add SEV-SNP guest feature negotiation support
    - acpi: Fix suspend with Xen PV
    - dt-bindings: riscv: fix underscore requirement for multi-letter extensions
    - dt-bindings: riscv: fix single letter canonical order
    - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
    - dt-bindings: i2c: renesas,rzv2m: Fix SoC specific string
    - netfilter: conntrack: unify established states for SCTP paths
    - perf/x86/amd: fix potential integer overflow on shift of a int
    - amdgpu: fix build on non-DCN platforms.
    - Linux 6.1.9
    - upstream stable to v6.1.9

* Lunar update: v6.1.8 upstream stable release (LP: #2004147)
    - dma-buf: fix dma_buf_export init order v2
    - btrfs: fix trace event name typo for FLUSH_DELAYED_REFS
    - wifi: iwlwifi: fw: skip PPAG for JF
    - pNFS/filelayout: Fix coalescing test for single DS
    - selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID
    - net: ethernet: marvell: octeontx2: Fix uninitialized variable warning
    - tools/virtio: initialize spinlocks in vring_test.c
    - vdpa/mlx5: Return error on vlan ctrl commands if not supported
    - vdpa/mlx5: Avoid using reslock in event_handler
    - vdpa/mlx5: Avoid overwriting CVQ iotlb
    - virtio_pci: modify ENOENT to EINVAL
    - vduse: Validate vq_num in vduse_validate_config()
    - vdpa_sim_net: should not drop the multicast/broadcast packet
    - net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats
    - r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down()
    - r8169: fix dmar pte write access is not set error
    - bpf: keep a reference to the mm, in case the task is dead.
    - RDMA/srp: Move large values to a new enum for gcc13
    - btrfs: always report error in run_one_delayed_ref()
    - x86/asm: Fix an assembler warning with current binutils
    - f2fs: let's avoid panic if extent_tree is not created
    - perf/x86/rapl: Treat Tigerlake like Icelake
    - cifs: fix race in assemble_neg_contexts()
    - memblock tests: Fix compilation error.
    - perf/x86/rapl: Add support for Intel Meteor Lake
    - perf/x86/rapl: Add support for Intel Emerald Rapids
    - of: fdt: Honor CONFIG_CMDLINE* even without /chosen node, take 2
    - fbdev: omapfb: avoid stack overflow warning
    - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2
    - Bluetooth: hci_qca: Fix driver shutdown on closed serdev
    - wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices
    - wifi: mac80211: fix MLO + AP_VLAN check
    - wifi: mac80211: reset multiple BSSID options in stop_ap()
    - wifi: mac80211: sdata can be NULL during AMPDU start
    - wifi: mac80211: fix initialization of rx->link and rx->link_sta
    - nommu: fix memory leak in do_mmap() error path
    - nommu: fix do_munmap() error path
    - nommu: fix split_vma() map_count error
    - proc: fix PIE proc-empty-vm, proc-pid-vm tests
    - Add exception protection processing for vd in axi_chan_handle_err function
    - LoongArch: Add HWCAP_LOONGARCH_CPUCFG to elf_hwcap
    - zonefs: Detect append writes at invalid locations
    - nilfs2: fix general protection fault in nilfs_btree_insert()
    - mm/shmem: restore SHMEM_HUGE_DENY precedence over MADV_COLLAPSE
    - hugetlb: unshare some PMDs when splitting VMAs
    - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma
    - serial: stm32: Merge hard IRQ and threaded IRQ handling into single IRQ
      handler
    - Revert "serial: stm32: Merge hard IRQ and threaded IRQ handling into single
      IRQ handler"
    - xhci-pci: set the dma max_seg_size
    - usb: xhci: Check endpoint is valid before dereferencing it
    - xhci: Fix null pointer dereference when host dies
    - xhci: Add update_hub_device override for PCI xHCI hosts
    - xhci: Add a flag to disable USB3 lpm on a xhci root port level.
    - usb: acpi: add helper to check port lpm capability using acpi _DSM
    - xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables
    - prlimit: do_prlimit needs to have a speculation check
    - USB: serial: option: add Quectel EM05-G (GR) modem
    - USB: serial: option: add Quectel EM05-G (CS) modem
    - USB: serial: option: add Quectel EM05-G (RS) modem
    - USB: serial: option: add Quectel EC200U modem
    - USB: serial: option: add Quectel EM05CN (SG) modem
    - USB: serial: option: add Quectel EM05CN modem
    - staging: vchiq_arm: fix enum vchiq_status return types
    - USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100
    - usb: misc: onboard_hub: Invert driver registration order
    - usb: misc: onboard_hub: Move 'attach' work to the driver
    - misc: fastrpc: Fix use-after-free and race in fastrpc_map_find
    - misc: fastrpc: Don't remove map on creater_process and device_release
    - misc: fastrpc: Fix use-after-free race condition for maps
    - usb: core: hub: disable autosuspend for TI TUSB8041
    - comedi: adv_pci1760: Fix PWM instruction handling
    - ACPI: PRM: Check whether EFI runtime is available
    - mmc: sunxi-mmc: Fix clock refcount imbalance during unbind
    - mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting
    - mm/hugetlb: fix PTE marker handling in hugetlb_change_protection()
    - mm/hugetlb: fix uffd-wp handling for migration entries in
      hugetlb_change_protection()
    - mm/hugetlb: pre-allocate pgtable pages for uffd wr-protects
    - mm/userfaultfd: enable writenotify while userfaultfd-wp is enabled for a VMA
    - mm/MADV_COLLAPSE: don't expand collapse when vm_end is past requested end
    - btrfs: add extra error messages to cover non-ENOMEM errors from
      device_add_list()
    - btrfs: fix missing error handling when logging directory items
    - btrfs: fix directory logging due to race with concurrent index key deletion
    - btrfs: add missing setup of log for full commit at add_conflicting_inode()
    - btrfs: do not abort transaction on failure to write log tree when syncing
      log
    - btrfs: do not abort transaction on failure to update log root
    - btrfs: qgroup: do not warn on record without old_roots populated
    - btrfs: fix invalid leaf access due to inline extent during lseek
    - btrfs: fix race between quota rescan and disable leading to NULL pointer
      deref
    - cifs: do not include page data when checking signature
    - thunderbolt: Disable XDomain lane 1 only in software connection manager
    - thunderbolt: Use correct function to calculate maximum USB3 link rate
    - thunderbolt: Do not report errors if on-board retimers are found
    - thunderbolt: Do not call PM runtime functions in tb_retimer_scan()
    - riscv: dts: sifive: fu740: fix size of pcie 32bit memory
    - bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and
      PERF_BPF_EVENT_PROG_UNLOAD
    - tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
    - tty: fix possible null-ptr-defer in spk_ttyio_release
    - pktcdvd: check for NULL returna fter calling bio_split_to_limits()
    - io_uring/poll: don't reissue in case of poll race on multishot request
    - mptcp: explicitly specify sock family at subflow creation time
    - mptcp: netlink: respect v4/v6-only sockets
    - selftests: mptcp: userspace: validate v4-v6 subflows mix
    - USB: gadgetfs: Fix race between mounting and unmounting
    - USB: serial: cp210x: add SCALANCE LPE-9000 device id
    - usb: cdns3: remove fetched trb from cache before dequeuing
    - usb: host: ehci-fsl: Fix module alias
    - usb: musb: fix error return code in omap2430_probe()
    - usb: typec: tcpm: Fix altmode re-registration causes sysfs create fail
    - usb: typec: altmodes/displayport: Add pin assignment helper
    - usb: typec: altmodes/displayport: Fix pin assignment calculation
    - usb: gadget: g_webcam: Send color matching descriptor per frame
    - USB: gadget: Add ID numbers to configfs-gadget driver names
    - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
    - usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210
    - arm64: dts: imx8mp: correct usb clocks
    - dt-bindings: phy: g12a-usb2-phy: fix compatible string documentation
    - dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation
    - serial: pch_uart: Pass correct sg to dma_unmap_sg()
    - dmaengine: lgm: Move DT parsing after initialization
    - dmaengine: tegra210-adma: fix global intr clear
    - dmaengine: idxd: Let probe fail when workqueue cannot be enabled
    - dmaengine: idxd: Prevent use after free on completion memory
    - dmaengine: idxd: Do not call DMX TX callbacks during workqueue disable
    - serial: amba-pl011: fix high priority character transmission in rs486 mode
    - serial: atmel: fix incorrect baudrate setup
    - serial: exar: Add support for Sealevel 7xxxC serial cards
    - gsmi: fix null-deref in gsmi_get_variable
    - mei: bus: fix unlink on bus in error path
    - mei: me: add meteor lake point M DID
    - VMCI: Use threaded irqs instead of tasklets
    - ARM: dts: qcom: apq8084-ifc6540: fix overriding SDHCI
    - ARM: omap1: fix !ARCH_OMAP1_ANY link failures
    - drm/amdgpu: fix amdgpu_job_free_resources v2
    - drm/amdgpu: allow multipipe policy on ASICs with one MEC
    - drm/amdgpu: Correct the power calcultion for Renior/Cezanne.
    - drm/i915: re-disable RC6p on Sandy Bridge
    - drm/i915/display: Check source height is > 0
    - drm/i915: Allow switching away via vga-switcheroo if uninitialized
    - drm/i915: Remove unused variable
    - drm/amd/display: Fix set scaling doesn's work
    - drm/amd/display: Calculate output_color_space after pixel encoding
      adjustment
    - drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix
    - drm/amd/display: disable S/G display on DCN 3.1.5
    - drm/amd/display: disable S/G display on DCN 3.1.4
    - cifs: reduce roundtrips on create/qinfo requests
    - fs/ntfs3: Fix attr_punch_hole() null pointer derenference
    - arm64: efi: Execute runtime services from a dedicated stack
    - efi: rt-wrapper: Add missing include
    - panic: Separate sysctl logic from CONFIG_SMP
    - exit: Put an upper limit on how often we can oops
    - exit: Expose "oops_count" to sysfs
    - exit: Allow oops_limit to be disabled
    - panic: Consolidate open-coded panic_on_warn checks
    - panic: Introduce warn_limit
    - panic: Expose "warn_count" to sysfs
    - docs: Fix path paste-o for /sys/kernel/warn_count
    - exit: Use READ_ONCE() for all oops/warn limit reads
    - x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN
    - drm/amdgpu/discovery: enable soc21 common for GC 11.0.4
    - drm/amdgpu/discovery: enable gmc v11 for GC 11.0.4
    - drm/amdgpu/discovery: enable gfx v11 for GC 11.0.4
    - drm/amdgpu/discovery: enable mes support for GC v11.0.4
    - drm/amdgpu: set GC 11.0.4 family
    - drm/amdgpu/discovery: set the APU flag for GC 11.0.4
    - drm/amdgpu: add gfx support for GC 11.0.4
    - drm/amdgpu: add gmc v11 support for GC 11.0.4
    - drm/amdgpu/discovery: add PSP IP v13.0.11 support
    - drm/amdgpu/pm: enable swsmu for SMU IP v13.0.11
    - drm/amdgpu: add smu 13 support for smu 13.0.11
    - drm/amdgpu/pm: add GFXOFF control IP version check for SMU IP v13.0.11
    - drm/amdgpu/soc21: add mode2 asic reset for SMU IP v13.0.11
    - drm/amdgpu/pm: use the specific mailbox registers only for SMU IP v13.0.4
    - drm/amdgpu/discovery: enable nbio support for NBIO v7.7.1
    - drm/amdgpu: enable PSP IP v13.0.11 support
    - drm/amdgpu: enable GFX IP v11.0.4 CG support
    - drm/amdgpu: enable GFX Power Gating for GC IP v11.0.4
    - drm/amdgpu: enable GFX Clock Gating control for GC IP v11.0.4
    - drm/amdgpu: add tmz support for GC 11.0.1
    - drm/amdgpu: add tmz support for GC IP v11.0.4
    - drm/amdgpu: correct MEC number for gfx11 APUs
    - octeontx2-pf: Avoid use of GFP_KERNEL in atomic context
    - net/ulp: use consistent error code when blocking ULP
    - octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt
    - net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work()
    - block: mq-deadline: Rename deadline_is_seq_writes()
    - Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()"
    - soc: qcom: apr: Make qcom,protection-domain optional again
    - Linux 6.1.8
    - upstream stable to v6.1.8

* Lunar update: v6.1.7 upstream stable release (LP: #2004146)
    - Revert "ALSA: usb-audio: Drop superfluous interface setup at parsing"
    - ALSA: control-led: use strscpy in set_led_id()
    - ALSA: usb-audio: Always initialize fixed_rate in
      snd_usb_find_implicit_fb_sync_format()
    - ALSA: hda/realtek - Turn on power early
    - ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360 13-aw0xxx
    - KVM: x86: Do not return host topology information from
      KVM_GET_SUPPORTED_CPUID
    - KVM: arm64: Fix S1PTW handling on RO memslots
    - efi: fix userspace infinite retry read efivars after EFI runtime services
      page fault
    - efi: tpm: Avoid READ_ONCE() for accessing the event log
    - docs: Fix the docs build with Sphinx 6.0
    - io_uring/poll: add hash if ready poll request can't complete inline
    - arm64: mte: Fix double-freeing of the temporary tag storage during coredump
    - arm64: mte: Avoid the racy walk of the vma list during core dump
    - arm64: cmpxchg_double*: hazard against entire exchange variable
    - ACPI: Fix selecting wrong ACPI fwnode for the iGPU on some Dell laptops
    - net: stmmac: add aux timestamps fifo clearance wait
    - perf auxtrace: Fix address filter duplicate symbol selection
    - s390/kexec: fix ipl report address for kdump
    - brcmfmac: Prefer DT board type over DMI board type
    - ASoC: qcom: lpass-cpu: Fix fallback SD line index handling
    - elfcore: Add a cprm parameter to elf_core_extra_{phdrs,data_size}
    - cpufreq: amd-pstate: fix kernel hang issue while amd-pstate unregistering
    - s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops
    - s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple()
    - drm/virtio: Fix GEM handle creation UAF
    - drm/amd/pm/smu13: BACO is supported when it's in BACO state
    - drm: Optimize drm buddy top-down allocation method
    - drm/i915/gt: Reset twice
    - drm/i915: Reserve enough fence slot for i915_vma_unbind_async
    - drm/i915: Fix potential context UAFs
    - drm/amdgpu: Fixed bug on error when unloading amdgpu
    - drm/amd/pm: correct the reference clock for fan speed(rpm) calculation
    - drm/amd/pm: add the missing mapping for PPT feature on SMU13.0.0 and 13.0.7
    - drm/amd/display: move remaining FPU code to dml folder
    - Revert "drm/amdgpu: Revert "drm/amdgpu: getting fan speed pwm for vega10
      properly""
    - cifs: Fix uninitialized memory read for smb311 posix symlink create
    - cifs: fix file info setting in cifs_query_path_info()
    - cifs: fix file info setting in cifs_open_file()
    - cifs: do not query ifaces on smb1 mounts
    - cifs: fix double free on failed kerberos auth
    - io_uring/fdinfo: include locked hash table in fdinfo output
    - ASoC: rt9120: Make dev PM runtime bind AsoC component PM
    - ACPI: video: Allow selecting NVidia-WMI-EC or Apple GMUX backlight from the
      cmdline
    - platform/x86: dell-privacy: Only register SW_CAMERA_LENS_COVER if present
    - platform/surface: aggregator: Ignore command messages not intended for us
    - platform/x86: int3472/discrete: Ensure the clk/power enable pins are in
      output mode
    - platform/x86: thinkpad_acpi: Fix profile mode display in AMT mode
    - platform/x86: asus-wmi: Don't load fan curves without fan
    - platform/x86: dell-privacy: Fix SW_CAMERA_LENS_COVER reporting
    - dt-bindings: msm: dsi-controller-main: Fix operating-points-v2 constraint
    - drm/msm: another fix for the headless Adreno GPU
    - firmware/psci: Fix MEM_PROTECT_RANGE function numbers
    - firmware/psci: Don't register with debugfs if PSCI isn't available
    - drm/msm/adreno: Make adreno quirks not overwrite each other
    - arm64/signal: Always allocate SVE signal frames on SME only systems
    - dt-bindings: msm: dsi-controller-main: Fix power-domain constraint
    - dt-bindings: msm: dsi-controller-main: Fix description of core clock
    - arm64/signal: Always accept SVE signal frames on SME only systems
    - arm64/mm: add pud_user_exec() check in pud_user_accessible_page()
    - dt-bindings: msm: dsi-phy-28nm: Add missing qcom, dsi-phy-regulator-ldo-mode
    - arm64: ptrace: Use ARM64_SME to guard the SME register enumerations
    - arm64/mm: fix incorrect file_map_count for invalid pmd
    - platform/x86: ideapad-laptop: Add Legion 5 15ARH05 DMI id to
      set_fn_lock_led_list[]
    - drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux
      transfer
    - dt-bindings: msm/dsi: Don't require vdds-supply on 10nm PHY
    - dt-bindings: msm/dsi: Don't require vcca-supply on 14nm PHY
    - platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during
      probe
    - ixgbe: fix pci device refcount leak
    - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
    - iavf/iavf_main: actually log ->src mask when talking about it
    - drm/i915/gt: Cleanup partial engine discovery failures
    - usb: ulpi: defer ulpi_register on ulpi_read_id timeout
    - drm/amd/pm: enable mode1 reset on smu_v13_0_10
    - drm/amd/pm: Enable bad memory page/channel recording support for smu v13_0_0
    - drm/amd/pm: enable GPO dynamic control support for SMU13.0.0
    - drm/amd/pm: enable GPO dynamic control support for SMU13.0.7
    - drm/amdgpu: add soc21 common ip block support for GC 11.0.4
    - drm/amdgpu: Enable pg/cg flags on GC11_0_4 for VCN
    - drm/amdgpu: enable VCN DPG for GC IP v11.0.4
    - mm: Always release pages to the buddy allocator in memblock_free_late().
    - iommu/iova: Fix alloc iova overflows issue
    - iommu/arm-smmu-v3: Don't unregister on shutdown
    - iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe()
    - iommu/arm-smmu: Don't unregister on shutdown
    - iommu/arm-smmu: Report IOMMU_CAP_CACHE_COHERENCY even betterer
    - sched/core: Fix use-after-free bug in dup_user_cpus_ptr()
    - netfilter: ipset: Fix overflow before widen in the bitmap_ip_create()
      function.
    - selftests: netfilter: fix transaction test script timeout handling
    - powerpc/imc-pmu: Fix use of mutex in IRQs disabled section
    - x86/boot: Avoid using Intel mnemonics in AT&T syntax asm
    - EDAC/device: Fix period calculation in edac_device_reset_delay_period()
    - x86/pat: Fix pat_x_mtrr_type() for MTRR disabled case
    - x86/resctrl: Fix task CLOSID/RMID update race
    - x86/resctrl: Fix event counts regression in reused RMIDs
    - regulator: da9211: Use irq handler when ready
    - scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM
    - scsi: mpi3mr: Refer CONFIG_SCSI_MPI3MR in Makefile
    - scsi: ufs: core: WLUN suspend SSU/enter hibern8 fail recovery
    - ASoC: Intel: fix sof-nau8825 link failure
    - ASoC: Intel: sof_nau8825: support rt1015p speaker amplifier
    - ASoC: Intel: sof-nau8825: fix module alias overflow
    - drm/msm/dpu: Fix some kernel-doc comments
    - drm/msm/dpu: Fix memory leak in msm_mdss_parse_data_bus_icc_path
    - ASoC: wm8904: fix wrong outputs volume after power reactivation
    - mtd: parsers: scpart: fix __udivdi3 undefined on mips
    - mtd: cfi: allow building spi-intel standalone
    - ALSA: usb-audio: Make sure to stop endpoints before closing EPs
    - ALSA: usb-audio: Relax hw constraints for implicit fb sync
    - stmmac: dwmac-mediatek: remove the dwmac_fix_mac_speed
    - tipc: fix unexpected link reset due to discovery messages
    - NFSD: Pass the target nfsd_file to nfsd_commit()
    - NFSD: Revert "NFSD: NFSv4 CLOSE should release an nfsd_file immediately"
    - NFSD: Add an NFSD_FILE_GC flag to enable nfsd_file garbage collection
    - nfsd: remove the pages_flushed statistic from filecache
    - nfsd: reorganize filecache.c
    - NFSD: Add an nfsd_file_fsync tracepoint
    - nfsd: rework refcounting in filecache
    - nfsd: fix handling of cached open files in nfsd4_open codepath
    - octeontx2-af: Fix LMAC config in cgx_lmac_rx_tx_enable
    - sched/core: Fix arch_scale_freq_tick() on tickless systems
    - hvc/xen: lock console list traversal
    - nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
    - gro: avoid checking for a failed search
    - gro: take care of DODGY packets
    - af_unix: selftest: Fix the size of the parameter to connect()
    - ASoC: qcom: Fix building APQ8016 machine driver without SOUNDWIRE
    - tools/nolibc: restore mips branch ordering in the _start block
    - tools/nolibc: fix the O_* fcntl/open macro definitions for riscv
    - drm/amdgpu: Fix potential NULL dereference
    - ice: Fix potential memory leak in ice_gnss_tty_write()
    - ice: Add check for kzalloc
    - drm/vmwgfx: Write the driver id registers
    - drm/vmwgfx: Refactor resource manager's hashtable to use linux/hashtable
      implementation.
    - drm/vmwgfx: Remove ttm object hashtable
    - drm/vmwgfx: Refactor resource validation hashtable to use linux/hashtable
      implementation.
    - drm/vmwgfx: Refactor ttm reference object hashtable to use linux/hashtable.
    - drm/vmwgfx: Remove vmwgfx_hashtab
    - drm/vmwgfx: Remove rcu locks from user resources
    - net/sched: act_mpls: Fix warning during failed attribute validation
    - Revert "r8169: disable detection of chip version 36"
    - net/mlx5: check attr pointer validity before dereferencing it
    - net/mlx5e: TC, Keep mod hdr actions after mod hdr alloc
    - net/mlx5: Fix command stats access after free
    - net/mlx5e: Verify dev is present for fix features ndo
    - net/mlx5e: IPoIB, Block queue count configuration when sub interfaces are
      present
    - net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent
    - net/mlx5e: IPoIB, Fix child PKEY interface stats on rx path
    - net/mlx5: Fix ptp max frequency adjustment range
    - net/mlx5e: Don't support encap rules with gbp option
    - net/mlx5e: Fix macsec ssci attribute handling in offload path
    - net/mlx5e: Fix macsec possible null dereference when updating MAC security
      entity (SecY)
    - selftests/net: l2_tos_ttl_inherit.sh: Set IPv6 addresses with "nodad".
    - selftests/net: l2_tos_ttl_inherit.sh: Run tests in their own netns.
    - selftests/net: l2_tos_ttl_inherit.sh: Ensure environment cleanup on failure.
    - octeontx2-pf: Fix resource leakage in VF driver unbind
    - perf build: Properly guard libbpf includes
    - perf kmem: Support legacy tracepoints
    - perf kmem: Support field "node" in evsel__process_alloc_event() coping with
      recent tracepoint restructuring
    - igc: Fix PPS delta between two synchronized end-points
    - net: lan966x: check for ptp to be enabled in lan966x_ptp_deinit()
    - net: hns3: fix wrong use of rss size during VF rss config
    - bnxt: make sure we return pages to the pool
    - platform/surface: aggregator: Add missing call to ssam_request_sync_free()
    - platform/x86/amd: Fix refcount leak in amd_pmc_probe
    - ALSA: usb-audio: Fix possible NULL pointer dereference in
      snd_usb_pcm_has_fixed_rate()
    - efi: fix NULL-deref in init error path
    - io_uring: lock overflowing for IOPOLL
    - io_uring/poll: attempt request issue after racy poll wakeup
    - drm/i915: Fix CFI violations in gt_sysfs
    - io_uring/io-wq: free worker if task_work creation is canceled
    - io_uring/io-wq: only free worker if it was allocated for creation
    - block: handle bio_split_to_limits() NULL return
    - Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout"
    - pinctrl: amd: Add dynamic debugging for active GPIOs
    - Linux 6.1.7
    - upstream stable to v6.1.7

* Move kernel ADT tests to python3 (LP: #2004429)
    - [Debian] Use a python3 compatable kernel-testing repo

* Miscellaneous Ubuntu changes
    - [Packaging]: Sync annotations scripts from git
    - [Config] Update annotations after syncing the scripts
    - [Config] Update annotations after merging 6.1.13

-- Timo Aaltonen <timo.aaltonen@canonical.com>  Fri, 03 Mar 2023 11:27:39 +0200

Changed in linux-oem-6.1 (Ubuntu Jammy):
status:	Fix Committed → Fix Released

Report a bug

This report contains Public information

Everyone can see this information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.

Ubuntulinux-oem-6.1 package

Jammy update: v6.1.12 upstream stable release

Bug Description

Other bug subscribers

Remote bug watches

Ubuntu
linux-oem-6.1 package