Jammy update: v6.1.70 upstream stable release

[Timo Aaltonen]

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v6.1.70 upstream stable release
       from git://git.kernel.org/

Linux 6.1.70
loop: deprecate autoloading callback loop_probe()
wifi: nl80211: fix deadlock in nl80211_set_cqm_rssi (6.6.x)
wifi: cfg80211: fix CQM for non-range use
fuse: share lookup state between submount and its parent
mm/damon/core: make damon_start() waits until kdamond_fn() starts
x86/alternatives: Sync core before enabling interrupts
KVM: arm64: vgic: Force vcpu vgic teardown on vcpu destroy
KVM: arm64: vgic: Add a non-locking primitive for kvm_vgic_vcpu_destroy()
KVM: arm64: vgic: Simplify kvm_vgic_destroy()
thunderbolt: Fix memory leak in margining_port_remove()
lib/vsprintf: Fix %pfwf when current node refcount == 0
gpio: dwapb: mask/unmask IRQ when disable/enale it
bus: ti-sysc: Flush posted write only after srst_udelay
pinctrl: starfive: jh7100: ignore disabled device tree nodes
dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata()
tracing / synthetic: Disable events after testing in synth_event_gen_test_init()
scsi: core: Always send batch on reset or error handling command
Revert "scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity"
selftests: mptcp: join: fix subflow_send_ack lookup
ublk: move ublk_cancel_dev() out of ub->mutex
ubifs: fix possible dereference after free
btrfs: zoned: no longer count fresh BG region as zone unusable
Revert "drm/amd/display: Do not set DRR on pipe commit"
dm thin metadata: Fix ABBA deadlock by resetting dm_bufio_client
loop: do not enforce max_loop hard limit by (new) default
RISC-V: Fix do_notify_resume / do_work_pending prototype
9p: prevent read overrun in protocol dump tracepoint
drm/i915: Reject async flips with bigjoiner
smb: client: fix OOB in smbCalcSize()
smb: client: fix OOB in SMB2_query_info_init()
smb: client: fix potential OOB in cifs_dump_detail()
smb: client: fix OOB in cifsd when receiving compounded resps
dt-bindings: nvmem: mxs-ocotp: Document fsl,ocotp
net: ks8851: Fix TX stall caused by TX buffer overrun
net: rfkill: gpio: set GPIO direction
net: 9p: avoid freeing uninit memory in p9pdu_vreadf
Input: soc_button_array - add mapping for airplane mode button
net: usb: ax88179_178a: avoid failed operations when device is disconnected
Bluetooth: Add more enc key size check
Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE
Bluetooth: L2CAP: Send reject on command corrupted request
Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent
ALSA: hda/realtek: Add quirk for ASUS ROG GV302XA
USB: serial: option: add Quectel RM500Q R13 firmware support
USB: serial: option: add Foxconn T99W265 with new baseline
USB: serial: option: add Quectel EG912Y module support
USB: serial: ftdi_sio: update Actisense PIDs constant names
wifi: cfg80211: fix certs build to not depend on file order
wifi: cfg80211: Add my certificate
usb-storage: Add quirk for incorrect WP on Kingston DT Ultimate 3.0 G3
ALSA: usb-audio: Increase delay in MOTU M quirk
iio: triggered-buffer: prevent possible freeing of wrong buffer
iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma()
iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table
scsi: bnx2fc: Fix skb double free in bnx2fc_rcv()
Input: ipaq-micro-keys - add error handling for devm_kmemdup
interconnect: qcom: sm8250: Enable sync_state
iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw
interconnect: Treat xlate() returning NULL node as an error
drm/i915: Fix ADL+ tiled plane stride when the POT stride is smaller than the original
drm/i915/mtl: Add MTL for remapping CCS FBs
drm/i915/dpt: Only do the POT stride remap when using DPT
drm/i915: Fix intel_atomic_setup_scalers() plane_state handling
drm/i915: Relocate intel_atomic_setup_scalers()
drm/i915/mtl: limit second scaler vertical scaling in ver >= 14
nvme-pci: fix sleeping function called from interrupt context
gpiolib: cdev: add gpio_device locking wrapper around gpio_ioctl()
pinctrl: at91-pio4: use dedicated lock class for IRQ
x86/xen: add CPU dependencies for 32-bit build
i2c: aspeed: Handle the coalesced stop conditions with the start conditions.
ASoC: fsl_sai: Fix channel swap issue on i.MX8MP
ASoC: hdmi-codec: fix missing report for jack initial status
afs: Fix use-after-free due to get/remove race in volume tree
afs: Fix overwriting of result of DNS query
keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
net: check dev->gso_max_size in gso_features_check()
afs: Fix dynamic root lookup DNS check
afs: Fix the dynamic root's d_delete to always delete unused dentries
net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev()
net: mana: select PAGE_POOL
Bluetooth: hci_event: shut up a false-positive warning
Bluetooth: Fix deadlock in vhci_send_frame
net/rose: fix races in rose_kill_by_device()
ethernet: atheros: fix a memleak in atl1e_setup_ring_resources
net: sched: ife: fix potential use-after-free
net: Return error from sk_stream_wait_connect() if sk_wait_event() fails
octeontx2-pf: Fix graceful exit during PFC configuration failure
net: mscc: ocelot: fix eMAC TX RMON stats for bucket 256-511 and above
net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors
net/mlx5e: Correct snprintf truncation handling for fw_version buffer
net/mlx5: Fix fw tracer first block check
net/mlx5e: fix a potential double-free in fs_udp_create_groups
net/mlx5e: Fix a race in command alloc flow
net/mlx5: Re-organize mlx5_cmd struct
net/mlx5: Prevent high-rate FW commands from populating all slots
net/mlx5: Introduce and use opcode getter in command interface
net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list()
Revert "net/mlx5e: fix double free of encap_header"
Revert "net/mlx5e: fix double free of encap_header in update funcs"
wifi: mac80211: mesh_plink: fix matches_local logic
wifi: mac80211: mesh: check element parsing succeeded
wifi: mac80211: check if the existing link config remains unchanged
wifi: iwlwifi: pcie: add another missing bh-disable for rxq->lock
s390/vx: fix save/restore of fpu kernel context
reset: Fix crash when freeing non-existent optional resets
ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init
ARM: dts: dra7: Fix DRA7 L3 NoC node register size
drm/amd/display: fix hw rotated modes when PSR-SU is enabled
HID: i2c-hid: Add IDEA5002 to i2c_hid_acpi_blacklist[]
HID: i2c-hid: acpi: Unify ACPI ID tables format
bpf: Fix prog_array_map_poke_run map poke update
kasan: disable kasan_non_canonical_hook() for HW tags

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-oem-6.1 - 6.1.0-1033.33

---------------
linux-oem-6.1 (6.1.0-1033.33) jammy; urgency=medium

  * jammy/linux-oem-6.1: 6.1.0-1033.33 -proposed tracker (LP: #2051966)

  * Jammy update: v6.1.63 upstream stable release (LP: #2046577)
    - Restore "UBUNTU: SAUCE: apparmor: patch to provide compatibility with v2.x
      net rules"

 -- Timo Aaltonen <email address hidden> Thu, 01 Feb 2024 20:16:28 +0200