Jammy update: v6.1.50 upstream stable release

[Timo Aaltonen]

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v6.1.50 upstream stable release
       from git://git.kernel.org/

Linux 6.1.50
ASoC: amd: vangogh: select CONFIG_SND_AMD_ACP_CONFIG
maple_tree: disable mas_wr_append() when other readers are possible
ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ
gpio: sim: pass the GPIO device's software node to irq domain
gpio: sim: dispose of irq mappings before destroying the irq_sim domain
dma-buf/sw_sync: Avoid recursive lock during fence signal
pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function}
pinctrl: renesas: rzv2m: Fix NULL pointer dereference in rzv2m_dt_subnode_to_map()
pinctrl: renesas: rzg2l: Fix NULL pointer dereference in rzg2l_dt_subnode_to_map()
clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
scsi: core: raid_class: Remove raid_component_add()
scsi: snic: Fix double free in snic_tgt_create()
madvise:madvise_free_pte_range(): don't use mapcount() against large folio for sharing check
can: raw: add missing refcount for memory leak fix
ublk: remove check IO_URING_F_SQE128 in ublk_ch_uring_cmd
thunderbolt: Fix Thunderbolt 3 display flickering issue on 2nd hot plug onwards
cgroup/cpuset: Free DL BW in case can_attach() fails
sched/deadline: Create DL BW alloc, free & check overflow interface
cgroup/cpuset: Iterate only if DEADLINE tasks are present
sched/cpuset: Keep track of SCHED_DEADLINE task in cpusets
sched/cpuset: Bring back cpuset_mutex
cgroup/cpuset: Rename functions dealing with DEADLINE accounting
nfsd: use vfs setgid helper
nfs: use vfs setgid helper
selftests/net: mv bpf/nat6to4.c to net folder
hwmon: (aquacomputer_d5next) Add selective 200ms delay after sending ctrl report
x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4
x86/fpu: Invalidate FPU state correctly on exec()
drm/display/dp: Fix the DP DSC Receiver cap size
drm/i915/dgfx: Enable d3cold at s2idle
drm/vmwgfx: Fix shader stage validation
PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus
media: vcodec: Fix potential array out-of-bounds in encoder queue_setup
pinctrl: amd: Mask wake bits on probe again
of: dynamic: Refactor action prints to not use "%pOF" inside devtree_lock
of: unittest: Fix EXPECT for parse_phandle_with_args_map() test
radix tree: remove unused variable
riscv: Fix build errors using binutils2.37 toolchains
riscv: Handle zicsr/zifencei issue between gcc and binutils
lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels
batman-adv: Hold rtnl lock during MTU update via netlink
batman-adv: Fix batadv_v_ogm_aggr_send memory leak
batman-adv: Fix TT global entry leak when client roamed back
batman-adv: Do not get eth header before batadv_check_management_packet
batman-adv: Don't increase MTU when set by user
batman-adv: Trigger events for auto adjusted MTU
selinux: set next pointer before attaching to list
nfsd: Fix race to FREE_STATEID and cl_revoked
NFS: Fix a use after free in nfs_direct_join_group()
mm: memory-failure: fix unexpected return value in soft_offline_page()
mm: add a call to flush_cache_vmap() in vmap_pfn()
mm/gup: handle cont-PTE hugetlb pages correctly in gup_must_unshare() via GUP-fast
ALSA: ymfpci: Fix the missing snd_card_free() call at probe error
shmem: fix smaps BUG sleeping while atomic
mm,ima,kexec,of: use memblock_free_late from ima_free_kexec_buffer
clk: Fix slab-out-of-bounds error in devm_clk_release()
NFSv4: Fix dropped lock for racing OPEN and delegation return
platform/x86: ideapad-laptop: Add support for new hotkeys found on ThinkBook 14s Yoga ITL
wifi: mac80211: limit reorder_buf_filtered to avoid UBSAN warning
ibmveth: Use dcbf rather than dcbfl
ASoC: cs35l41: Correct amp_gain_tlv values
ASoC: amd: yc: Add VivoBook Pro 15 to quirks list for acp6x
io_uring/msg_ring: fix missing lock on overflow for IOPOLL
io_uring/msg_ring: move double lock/unlock helpers higher up
io_uring: extract a io_msg_install_complete helper
io_uring: get rid of double locking
KVM: x86/mmu: Fix an sign-extension bug with mmu_seq that hangs vCPUs
KVM: x86: Preserve TDP MMU roots until they are explicitly invalidated
bonding: fix macvlan over alb bond support
rtnetlink: Reject negative ifindexes in RTM_NEWLINK
netfilter: nf_tables: fix out of memory error handling
netfilter: nf_tables: flush pending destroy work before netlink notifier
i40e: fix potential NULL pointer dereferencing of pf->vf i40e_sync_vsi_filters()
net/sched: fix a qdisc modification with ambiguous command request
igc: Fix the typo in the PTM Control macro
igb: Avoid starting unnecessary workqueues
can: isotp: fix support for transmission of SF without flow control
selftests: bonding: do not set port down before adding to bond
ice: Fix NULL pointer deref during VF reset
Revert "ice: Fix ice VF reset during iavf initialization"
ice: fix receive buffer size miscalculation
ipv4: fix data-races around inet->inet_id
net: validate veth and vxcan peer ifindexes
net: bcmgenet: Fix return value check for fixed_phy_register()
net: bgmac: Fix return value check for fixed_phy_register()
net: dsa: mt7530: fix handling of 802.1X PAE frames
selftests: mlxsw: Fix test failure on Spectrum-4
mlxsw: Fix the size of 'VIRT_ROUTER_MSB'
mlxsw: reg: Fix SSPR register layout
mlxsw: pci: Set time stamp fields also when its type is MIRROR_UTC
ipvlan: Fix a reference count leak warning in ipvlan_ns_exit()
dccp: annotate data-races in dccp_poll()
sock: annotate data-races around prot->memory_pressure
net: dsa: felix: fix oversize frame dropping for always closed tc-taprio gates
devlink: add missing unregister linecard notification
devlink: move code to a dedicated directory
octeontx2-af: SDP: fix receive link config
tracing: Fix memleak due to race between current_tracer and trace
tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
drm/i915/gt: Support aux invalidation on all engines
drm/i915/gt: Poll aux invalidation register bit on invalidation
drm/i915/gt: Ensure memory quiesced before invalidation
drm/i915: Add the gen12_needs_ccs_aux_inv helper
s390/zcrypt: fix reply buffer calculations for CCA replies
s390/zcrypt: remove unnecessary (void *) conversions
can: raw: fix lockdep issue in raw_release()
can: raw: fix receiver memory leak
jbd2: fix a race when checking checkpoint buffer busy
jbd2: remove journal_clean_one_cp_list()
jbd2: remove t_checkpoint_io_list
MIPS: cpu-features: Use boot_cpu_type for CPU type based features
MIPS: cpu-features: Enable octeon_cache by cpu_type
PCI: acpiphp: Reassign resources on bridge if necessary
video/aperture: Move vga handling to pci function
video/aperture: Only kick vgacon when the pdev is decoding vga
drm/aperture: Remove primary argument
drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers
fbdev/radeon: use pci aperture helpers
drm/ast: Use drm_aperture_remove_conflicting_pci_framebuffers
xprtrdma: Remap Receive buffers after a reconnect
NFSv4: fix out path in __nfs4_get_acl_uncached
NFSv4.2: fix error handling in nfs42_proc_getxattr

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-oem-6.1 - 6.1.0-1023.23

---------------
linux-oem-6.1 (6.1.0-1023.23) jammy; urgency=medium

  * jammy/linux-oem-6.1: 6.1.0-1023.23 -proposed tracker (LP: #2033827)

  * Jammy update: v6.1.53 upstream stable release (LP: #2035359)
    - Revert "bridge: Add extack warning when enabling STP in netns."
    - Partially revert "drm/amd/display: Fix possible underflow for displays with
      large vblank"
    - scsi: ufs: Try harder to change the power mode
    - Revert "Revert drm/amd/display: Enable Freesync Video Mode by default"
    - ARM: dts: imx: Set default tuning step for imx7d usdhc
    - powerpc/boot: Disable power10 features after BOOTAFLAGS assignment
    - media: uapi: HEVC: Add num_delta_pocs_of_ref_rps_idx field
    - Revert "MIPS: unhide PATA_PLATFORM"
    - phy: qcom-snps-femto-v2: use qcom_snps_hsphy_suspend/resume error code
    - media: amphion: use dev_err_probe
    - media: pulse8-cec: handle possible ping error
    - media: pci: cx23885: fix error handling for cx23885 ATSC boards
    - 9p: virtio: fix unlikely null pointer deref in handle_rerror
    - 9p: virtio: make sure 'offs' is initialized in zc_request
    - ksmbd: fix out of bounds in smb3_decrypt_req()
    - ksmbd: validate session id and tree id in compound request
    - ksmbd: no response from compound read
    - ksmbd: fix out of bounds in init_smb2_rsp_hdr()
    - ASoC: da7219: Flush pending AAD IRQ when suspending
    - ASoC: da7219: Check for failure reading AAD IRQ events
    - ASoC: nau8821: Add DMI quirk mechanism for active-high jack-detect
    - ethernet: atheros: fix return value check in atl1c_tso_csum()
    - m68k: Fix invalid .section syntax
    - s390/dasd: use correct number of retries for ERP requests
    - s390/dasd: fix hanging device after request requeue
    - fs/nls: make load_nls() take a const parameter
    - ASoC: rt5682-sdw: fix for JD event handling in ClockStop Mode0
    - ASoc: codecs: ES8316: Fix DMIC config
    - ASoC: rt711: fix for JD event handling in ClockStop Mode0
    - ASoC: rt711-sdca: fix for JD event handling in ClockStop Mode0
    - ASoC: atmel: Fix the 8K sample parameter in I2SC master
    - ALSA: usb-audio: Add quirk for Microsoft Modern Wireless Headset
    - platform/x86: intel: hid: Always call BTNL ACPI method
    - platform/x86/intel/hid: Add HP Dragonfly G2 to VGBS DMI quirks
    - platform/x86: think-lmi: Use kfree_sensitive instead of kfree
    - platform/x86: asus-wmi: Fix setting RGB mode on some TUF laptops
    - platform/x86: huawei-wmi: Silence ambient light sensor
    - drm/amd/smu: use AverageGfxclkFrequency* to replace previous GFX Curr Clock
    - drm/amd/display: Guard DCN31 PHYD32CLK logic against chip family
    - drm/amd/display: Exit idle optimizations before attempt to access PHY
    - ovl: Always reevaluate the file signature for IMA
    - ata: pata_arasan_cf: Use dev_err_probe() instead dev_err() in data_xfer()
    - ALSA: usb-audio: Update for native DSD support quirks
    - staging: fbtft: ili9341: use macro FBTFT_REGISTER_SPI_DRIVER
    - security: keys: perform capable check only on privileged operations
    - kprobes: Prohibit probing on CFI preamble s...