Jammy update: v6.1.75 upstream stable release

[Timo Aaltonen]

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v6.1.75 upstream stable release
       from git://git.kernel.org/

Linux 6.1.75
Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
arm64: dts: armada-3720-turris-mox: set irq type for RTC
Revert "KEYS: encrypted: Add check for strsep"
riscv: Fix wrong usage of lm_alias() when splitting a huge linear mapping
block: Remove special-casing of compound pages
i2c: s3c24xx: fix transferring more than one message in polling mode
i2c: s3c24xx: fix read transfers in polling mode
ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work
selftests: mlxsw: qos_pfc: Adjust the test to support 8 lanes
mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
loop: fix the the direct I/O support check when used on top of block devices
ethtool: netlink: Add missing ethnl_ops_begin/complete
kdb: Fix a potential buffer overflow in kdb_local()
ipvs: avoid stat macros calls from preemptible context
netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description
netfilter: nf_tables: skip dead set elements in netlink dump
netfilter: nf_tables: do not allow mismatch field size and set key length
netfilter: bridge: replace physindev with physinif in nf_bridge_info
netfilter: propagate net to nf_bridge_get_physindev
netfilter: nf_queue: remove excess nf_bridge variable
netfilter: nfnetlink_log: use proper helper for fetching physinif
netfilter: nft_limit: do not ignore unsupported flags
netfilter: nf_tables: reject invalid set policy
mptcp: relax check on MPC passive fallback
LoongArch: BPF: Prevent out-of-bounds memory access
net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe
bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
net: stmmac: ethtool: Fixed calltrace caused by unbalanced disable_irq_wake calls
drm/amdkfd: fixes for HMM mem allocation
drm/amdkfd: Use resource_size() helper function
dt-bindings: gpio: xilinx: Fix node address in gpio
net: ravb: Fix dma_addr_t truncation in error case
udp: annotate data-races around up->pending
block: ensure we hold a queue reference when using queue limits
mptcp: refine opt_mp_capable determination
mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req()
mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
mptcp: strict validation before using mp_opt->hmac
mptcp: mptcp_parse_option() fix for MPTCPOPT_MP_JOIN
net: phy: micrel: populate .soft_reset for KSZ9131
amt: do not use overwrapped cb area
net: ethernet: ti: am65-cpsw: Fix max mtu to fit ethernet frames
net: qualcomm: rmnet: fix global oob in rmnet_policy
s390/pci: fix max size calculation in zpci_memcpy_toio()
ASoC: mediatek: sof-common: Add NULL check for normal_link string
PCI: mediatek-gen3: Fix translation window size calculation
PCI: keystone: Fix race condition when initializing PHYs
nvmet-tcp: Fix the H2C expected PDU len calculation
nvme: trace: avoid memcpy overflow warning
nvmet: re-fix tracing strncpy() warning
serial: imx: Correct clock error message in function probe()
usb: xhci-mtk: fix a short packet issue of gen1 isoc-in transfer
apparmor: avoid crash when parsed profile name is empty
cxl/region: fix x9 interleave typo
perf env: Avoid recursively taking env->bpf_progs.lock
nvmet-tcp: fix a crash in nvmet_req_complete()
nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
vdpa: Fix an error handling path in eni_vdpa_probe()
spmi: mtk-pmif: Serialize PMIF status check and command submission
usb: cdc-acm: return correct error code on unsupported break
tty: use 'if' in send_break() instead of 'goto'
tty: don't check for signal_pending() in send_break()
tty: early return from send_break() on TTY_DRIVER_HARDWARE_BREAK
tty: change tty_write_lock()'s ndelay parameter to bool
perf genelf: Set ELF program header addresses properly
perf hisi-ptt: Fix one memory leakage in hisi_ptt_process_auxtrace_event()
perf header: Fix one memory leakage in perf_event__fprintf_event_update()
iio: adc: ad9467: fix scale setting
iio: adc: ad9467: don't ignore error codes
iio: adc: ad9467: fix reset gpio handling
selftests/sgx: Skip non X86_64 platform
selftests/sgx: Include memory clobber for inline asm in test enclave
selftests/sgx: Fix uninitialized pointer dereferences in encl_get_entry
selftests/sgx: Fix uninitialized pointer dereference in error path
serial: imx: fix tx statemachine deadlock
software node: Let args be NULL in software_node_get_reference_args
acpi: property: Let args be NULL in __acpi_node_get_property_reference
base/node.c: initialize the accessor list before registering
libapi: Add missing linux/types.h header to get the __u64 type on io.h
serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed
power: supply: bq256xx: fix some problem in bq256xx_hw_init
power: supply: cw2015: correct time_to_empty units in sysfs
MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup()
MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup()
riscv: Fixed wrong register in XIP_FIXUP_FLASH_OFFSET macro
riscv: Fix set_direct_map_default_noflush() to reset _PAGE_EXEC
riscv: Fix set_memory_XX() and set_direct_map_XX() by splitting huge linear mappings
riscv: Fix module_alloc() that did not reset the linear mapping permissions
riscv: Check if the code to patch lies in the exit section
mips: Fix incorrect max_low_pfn adjustment
mips: dmi: Fix early remap on MIPS32
mfd: intel-lpss: Fix the fractional clock divider flags
leds: aw2013: Select missing dependency REGMAP_I2C
mfd: syscon: Fix null pointer dereference in of_syscon_register()
ARM: 9330/1: davinci: also select PINCTRL
serial: sc16is7xx: set safe default SPI clock frequency
serial: sc16is7xx: add check for unsupported SPI modes during probe
HID: wacom: Correct behavior when processing some confidence == false touches
iio: adc: ad7091r: Pass iio_dev to event handler
KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
KVM: arm64: vgic-v4: Restore pending state on host userspace write
x86/kvm: Do not try to disable kvmclock if it was not enabled
PCI: mediatek: Clear interrupt status before dispatching handler
PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
PCI/P2PDMA: Remove reference to pci_p2pdma_map_sg()
cxl/port: Fix decoder initialization when nr_targets > interleave_ways
Revert "net: rtnetlink: Enslave device before bringing it up"
wifi: mwifiex: configure BSSID consistently when starting AP
wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors
wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code
wifi: mt76: fix broken precal loading from MTD for mt7915
iommu/dma: Trace bounce buffer usage when mapping buffers
iommu/arm-smmu-qcom: Add missing GMU entry to match table
LoongArch: Fix and simplify fcsr initialization on execve()
bpf: Fix re-attachment branch in bpf_tracing_prog_attach
Bluetooth: Fix atomicity violation in {min,max}_key_size_set
rootfs: Fix support for rootfstype= when root= is given
md/raid1: Use blk_opf_t for read and write operations
pwm: Fix out-of-bounds access in of_pwm_single_xlate()
pwm: jz4740: Don't use dev_err_probe() in .request()
netfilter: nf_tables: check if catch-all set element is active in next generation
block: Fix iterating over an empty bio with bio_for_each_folio_all
block: add check that partition length needs to be aligned with block size
drm/amd: Enable PCIe PME from D3
scsi: mpi3mr: Block PEL Enable Command on Controller Reset and Unrecoverable State
scsi: mpi3mr: Refresh sdev queue depth after controller reset
scsi: target: core: add missing file_{start,end}_write()
scsi: ufs: core: Simplify power management during async scan
fbdev: flush deferred IO before closing
fbdev: flush deferred work in fb_deferred_io_fsync()
io_uring/rw: ensure io->bytes_done is always initialized
ksmbd: only v2 leases handle the directory
ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
ksmbd: validate mech token in session setup
ALSA: hda/realtek: Enable headset mic on Lenovo M70 Gen5
ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on HP ZBook
ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx
ALSA: oxygen: Fix right channel of capture volume mixer
drm/vmwgfx: Keep a gem reference to user bos in surfaces
drm/vmwgfx: Fix possible invalid drm gem put calls
serial: omap: do not override settings for RS485 support
serial: 8250_exar: Set missing rs485_supported flag
serial: imx: Ensure that imx_uart_rs485_config() is called with enabled clock
serial: core, imx: do not set RS485 enabled if it is not supported
serial: 8250_bcm2835aux: Restore clock error handling
serial: core: make sure RS485 cannot be enabled when it is not supported
serial: core: fix sanitizing check for RTS settings
usb: mon: Fix atomicity violation in mon_bin_vma_fault
usb: typec: class: fix typec_altmode_put_partner to put plugs
Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs"
usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
usb: cdns3: fix iso transfer error when mult is not zero
usb: cdns3: fix uvc failure work since sg support enabled
usb: chipidea: wait controller resume finished for wakeup irq
Revert "usb: dwc3: don't reset device side if dwc3 was configured as host-only"
Revert "usb: dwc3: Soft reset phy on probe for host"
usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart
usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host()
tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug
powerpc/64s: Increase default stack size to 32KB
clocksource/drivers/timer-ti-dm: Fix make W=n kerneldoc warnings
binder: fix race between mmput() and do_exit()
xen-netback: don't produce zero-size SKB frags
Input: atkbd - use ab83 as id when skipping the getid command
mips/smp: Call rcutree_report_cpu_starting() earlier
binder: fix unused alloc->free_async_space
binder: fix async space check for 0-sized buffers
keys, dns: Fix size check of V1 server-list header
selftests/bpf: Add assert for user stacks in test_task_stack
of: unittest: Fix of_count_phandle_with_args() expected value message
fbdev: imxfb: fix left margin setting
of: Fix double free in of_parse_phandle_with_args_map
ksmbd: validate the zero field of packet header
kselftest/alsa - mixer-test: Fix the print format specifier warning
kselftest/alsa - mixer-test: fix the number of parameters to ksft_exit_fail_msg()
drm/amd/pm/smu7: fix a memleak in smu7_hwmgr_backend_init
drm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in kfd_topology.c
IB/iser: Prevent invalidating wrong MR
mmc: sdhci_omap: Fix TI SoC dependencies
mmc: sdhci_am654: Fix TI SoC dependencies
ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
ALSA: scarlett2: Add missing error checks to *_ctl_get()
ALSA: scarlett2: Allow passing any output to line_out_remap()
ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config()
ALSA: scarlett2: Add missing error check to scarlett2_config_save()
ASoC: rt5645: Drop double EF20 entry from dmi_platform_data[]
pwm: stm32: Fix enable count for clk in .probe()
pwm: stm32: Use hweight32 in stm32_pwm_detect_channels
pwm: stm32: Use regmap_clear_bits and regmap_set_bits where applicable
clk: fixed-rate: fix clk_hw_register_fixed_rate_with_accuracy_parent_hw
accel/habanalabs: fix information leak in sec_attest_info()
drm/mediatek: dp: Add phy_mtk_dp module as pre-dependency
clk: si5341: fix an error code problem in si5341_output_clk_set_rate
watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused
watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling
watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO
watchdog: set cdev owner before adding
drivers: clk: zynqmp: update divider round rate logic
drivers: clk: zynqmp: calculate closest mux rate
clk: qcom: videocc-sm8150: Add missing PLL config property
clk: qcom: videocc-sm8150: Update the videocc resets
dt-bindings: clock: Update the videocc resets for sm8150
f2fs: fix to check return value of f2fs_recover_xattr_data
drm/amd/pm: fix a double-free in amdgpu_parse_extended_power_table
gpu/drm/radeon: fix two memleaks in radeon_vm_init
drivers/amd/pm: fix a use-after-free in kv_parse_power_table
drm/amd/pm: fix a double-free in si_dpm_init
drm/amdgpu/debugfs: fix error code when smc register accessors are NULL
drm/mediatek: Fix underrun in VDO1 when switches off the layer
drm/mediatek: Return error if MDP RDMA failed to enable the clock
drm/msm/dpu: Drop enable and frame_count parameters from dpu_hw_setup_misr()
drm/msm/dpu: Set input_sel bit for INTF
clk: renesas: rzg2l: Check reset monitor registers
clk: renesas: rzg2l-cpg: Reuse code in rzg2l_cpg_reset()
media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path of m88ds3103_probe()
media: dvbdev: drop refcount on error path in dvb_device_open()
f2fs: fix to update iostat correctly in f2fs_filemap_fault()
f2fs: fix to check compress file in f2fs_move_file_range()
f2fs: fix to wait on block writeback for post_read case
drm/panel: st7701: Fix AVCL calculation
media: rkisp1: Fix media device memory leak
media: dt-bindings: media: rkisp1: Fix the port description for the parallel interface
media: imx-mipi-csis: Fix clock handling in remove()
clk: qcom: gpucc-sm8150: Update the gpu_cc_pll1 config
RDMA/hns: Fix memory leak in free_mr_init()
media: cx231xx: fix a memleak in cx231xx_init_isoc
drm/bridge: tc358767: Fix return value on error case
drm/bridge: cdns-mhdp8546: Fix use of uninitialized variable
drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table
drm/radeon/dpm: fix a memleak in sumo_parse_power_table
drm/radeon: check the alloc_workqueue return value in radeon_crtc_init()
drm/panfrost: Ignore core_mask for poweroff and disable PWRTRANS irq
ASoC: Intel: glk_rt5682_max98357a: fix board id mismatch
drm/drv: propagate errors from drm_modeset_register_all()
drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks
drm/msm/mdp4: flush vblank event on disable
ASoC: cs35l34: Fix GPIO name and drop legacy include
ASoC: cs35l33: Fix GPIO name and drop legacy include
drm/tidss: Fix dss reset
drm/tidss: Check for K2G in in dispc_softreset()
drm/tidss: Return error value from from softreset
drm/tidss: Move reset to the end of dispc_init()
drm/radeon: check return value of radeon_ring_lock()
drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check()
drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg()
f2fs: fix to avoid dirent corruption
drm/bridge: Fix typo in post_disable() description
media: rkvdec: Hook the (TRY_)DECODER_CMD stateless ioctls
media: verisilicon: Hook the (TRY_)DECODER_CMD stateless ioctls
media: mtk-jpeg: Remove cancel worker in mtk_jpeg_remove to avoid the crash of multi-core JPEG devices
media: mtk-jpegdec: export jpeg decoder functions
media: pvrusb2: fix use after free on context disconnection
drm/tilcdc: Fix irq free on unload
drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer
drm/panel-elida-kd35t133: hold panel in reset for unprepare
RDMA/hns: Fix inappropriate err code for unsupported operations
RDMA/usnic: Silence uninitialized symbol smatch warnings
drm/panfrost: Really power off GPU cores in panfrost_gpu_power_off()
Revert "drm/omapdrm: Annotate dma-fence critical section in commit path"
Revert "drm/tidss: Annotate dma-fence critical section in commit path"
ARM: davinci: always select CONFIG_CPU_ARM926T
ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
mlxbf_gige: Enable the GigE port in mlxbf_gige_open
mlxbf_gige: Fix intermittent no ip issue
net/sched: act_ct: fix skb leak and crash on ooo frags
sctp: fix busy polling
sctp: support MSG_ERRQUEUE flag in recvmsg()
bpf: sockmap, fix proto update hook to avoid dup calls
null_blk: don't cap max_hw_sectors to BLK_DEF_MAX_SECTORS
block: make BLK_DEF_MAX_SECTORS unsigned
Bluetooth: btmtkuart: fix recv_buf() return value
Bluetooth: Fix bogus check for re-auth no supported with non-ssp
netfilter: nf_tables: mark newset as dead on transaction abort
wifi: iwlwifi: mvm: send TX path flush in rfkill
wifi: iwlwifi: mvm: set siso/mimo chains to 1 in FW SMPS request
wifi: rtlwifi: rtl8192se: using calculate_bit_shift()
wifi: rtlwifi: rtl8192ee: using calculate_bit_shift()
wifi: rtlwifi: rtl8192de: using calculate_bit_shift()
wifi: rtlwifi: rtl8192ce: using calculate_bit_shift()
wifi: rtlwifi: rtl8192cu: using calculate_bit_shift()
wifi: rtlwifi: rtl8192c: using calculate_bit_shift()
wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift()
wifi: rtlwifi: add calculate_bit_shift()
arm64: dts: qcom: ipq6018: Fix up indentation
arm64: dts: qcom: ipq6018: Pad addresses to 8 hex digits
arm64: dts: qcom: ipq6018: Use lowercase hex
arm64: dts: qcom: ipq6018: improve pcie phy pcs reg table
arm64: dts: qcom: ipq6018: fix clock rates for GCC_USB0_MOCK_UTMI_CLK
arm64: dts: qcom: sc7280: Mark SDHCI hosts as cache-coherent
block: add check of 'minors' and 'first_minor' in device_add_disk()
arm64: dts: qcom: sm8150-hdk: fix SS USB regulators
soc: qcom: llcc: Fix dis_cap_alloc and retain_on_pc configuration
dma-mapping: clear dev->dma_mem to NULL after freeing it
virtio/vsock: fix logic which reduces credit update messages
ipmr: support IP_PKTINFO on cache report IGMP msg
selftests/net: fix grep checking for fib_nexthop_multiprefix
ARM: dts: stm32: don't mix SCMI and non-SCMI board compatibles
scsi: hisi_sas: Correct the number of global debugfs registers
scsi: hisi_sas: Rollback some operations if FLR failed
scsi: hisi_sas: Replace with standard error code return value
arm64: dts: imx8mm: Reduce GPU to nominal speed
arm64: dts: renesas: white-hawk-cpu: Fix missing serial console pin control
block: Set memalloc_noio to false on device_add_disk() error path
selftests/bpf: Relax time_tai test for equal timestamps in tai_forward
wifi: mt76: mt7921: fix country count limitation for CLC
arm64: dts: mediatek: mt8183: correct MDP3 DMA-related nodes
dt-bindings: media: mediatek: mdp3: correct RDMA and WROT node with generic names
arm64: dts: hisilicon: hikey970-pmic: fix regulator cells properties
bpf: Fix verification of indirect var-off stack access
wifi: mt76: mt7921s: fix workqueue problem causes STA association fail
arm64: dts: qcom: sc7280: fix usb_2 wakeup interrupt types
arm64: dts: qcom: sc7280: Mark Adreno SMMU as DMA coherent
arm64: dts: qcom: sc7280: Fix up GPU SIDs
arm64: dts: qcom: sm8350: Fix DMA0 address
arm64: dts: qcom: sdm845-db845c: correct LED panic indicator
arm64: dts: qcom: qrb5165-rb5: correct LED panic indicator
scsi: fnic: Return error if vmalloc() failed
bpf: fix check for attempt to corrupt spilled pointer
selftests/net: specify the interface when do arping
bpf: Defer the free of inner map when necessary
bpf: Add map and need_defer parameters to .map_fd_put_ptr()
bpf: add percpu stats for bpf_map elements insertions/deletions
rcu-tasks: Provide rcu_trace_implies_rcu_gp()
arm64: dts: qcom: sm6350: Make watchdog bark interrupt edge triggered
arm64: dts: qcom: sc8280xp: Make watchdog bark interrupt edge triggered
arm64: dts: qcom: sm8250: Make watchdog bark interrupt edge triggered
arm64: dts: qcom: sm8150: Make watchdog bark interrupt edge triggered
arm64: dts: qcom: sdm845: Make watchdog bark interrupt edge triggered
arm64: dts: qcom: sc7280: Make watchdog bark interrupt edge triggered
arm64: dts: qcom: sc7280: Mark some nodes as 'reserved'
arm64: dts: qcom: sc7180: Make watchdog bark interrupt edge triggered
ARM: dts: qcom: sdx65: correct SPMI node name
bpf: enforce precision of R0 on callback return
md: synchronize flush io with array reconfiguration
selftests/bpf: Fix erroneous bitmask operation
arm64: dts: ti: k3-am65-main: Fix DSS irq trigger type
arm64: dts: ti: k3-am62a-main: Fix GPIO pin count in DT nodes
wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior
firmware: meson_sm: populate platform devices from sm device tree data
firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create()
net/ncsi: Fix netlink major/minor version numbers
ARM: dts: qcom: apq8064: correct XOADC register address
wifi: libertas: stop selecting wext
wifi: ath11k: Defer on rproc_get failure
bpf: Add crosstask check to __bpf_get_stack
bpf, lpm: Fix check prefixlen before walking trie
wifi: rtw88: fix RX filter in FIF_ALLMULTI flag
wifi: plfxlc: check for allocation failure in plfxlc_usb_wreq_async()
pNFS: Fix the pnfs block driver's calculation of layoutget size
SUNRPC: fix _xprt_switch_find_current_entry logic
NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT
blocklayoutdriver: Fix reference leak of pnfs_device_node
csky: fix arch_jump_label_transform_static override
crypto: scomp - fix req->dst buffer overflow
crypto: sahara - do not resize req->src when doing hash operations
crypto: sahara - fix processing hash requests with req->nbytes < sg->length
crypto: sahara - improve error handling in sahara_sha_process()
crypto: sahara - fix wait_for_completion_timeout() error handling
crypto: sahara - fix ahash reqsize
crypto: sahara - handle zero-length aes requests
crypto: sahara - avoid skcipher fallback code duplication
crypto: virtio - Wait for tasklet to complete on device remove
gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
fs: indicate request originates from old mount API
erofs: fix memory leak on short-lived bounced pages
pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
crypto: hisilicon/zip - save capability registers in probe process
crypto: hisilicon/sec2 - save capability registers in probe process
crypto: hisilicon/hpre - save capability registers in probe process
crypto: hisilicon/qm - add a function to set qm algs
crypto: hisilicon/zip - add zip comp high perf mode configuration
crypto: hisilicon/qm - save capability registers in qm init process
crypto: sahara - fix error handling in sahara_hw_descriptor_create()
crypto: sahara - fix processing requests with cryptlen < sg->length
crypto: sahara - fix ahash selftest failure
crypto: sahara - fix cbc selftest failure
crypto: sahara - remove FLAGS_NEW_KEY logic
crypto: safexcel - Add error handling for dma_map_sg() calls
crypto: af_alg - Disallow multiple in-flight AIO requests
crypto: ccp - fix memleak in ccp_init_dm_workarea
crypto: sa2ul - Return crypto_aead_setkey to transfer the error
crypto: virtio - Handle dataq logic with tasklet
selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket
mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
kunit: debugfs: Fix unchecked dereference in debugfs_print_results()
ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the error
ACPI: LPSS: Fix the fractional clock divider flags
spi: sh-msiof: Enforce fixed DTDL for R-Car H3
efivarfs: Free s_fs_info on unmount
efivarfs: force RO when remounting if SetVariable is not supported
calipso: fix memory leak in netlbl_calipso_add_pass()
cpufreq: scmi: process the result of devm_of_clk_add_hw_provider()
cpufreq: Use of_property_present() for testing DT property presence
of: Add of_property_present() helper
platform/x86/intel/vsec: Fix xa_alloc memory leak
platform/x86/intel/vsec: Use mutex for ida_alloc() and ida_free()
platform/x86/intel/vsec: Support private data
platform/x86/intel/vsec: Enhance and Export intel_vsec_add_aux()
KEYS: encrypted: Add check for strsep
ACPI: LPIT: Avoid u32 multiplication overflow
ACPI: video: check for error while searching for backlight device parent
mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response
spi: spi-zynqmp-gqspi: fix driver kconfig dependencies
powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
powerpc/powernv: Add a null pointer check in opal_powercap_init()
powerpc/powernv: Add a null pointer check in opal_event_init()
powerpc/powernv: Add a null pointer check to scom_debug_init_one()
selftests/powerpc: Fix error handling in FPU/VMX preemption tests
powerpc/pseries/memhp: Fix access beyond end of drmem array
powerpc/44x: select I2C for CURRITUCK
powerpc: add crtsavres.o to always-y instead of extra-y
powerpc: remove checks for binutils older than 2.25
EDAC/thunderx: Fix possible out-of-bounds string access
x86/mce/inject: Clear test status value
x86/lib: Fix overflow when counting digits

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-oem-6.1 - 6.1.0-1035.35

---------------
linux-oem-6.1 (6.1.0-1035.35) jammy; urgency=medium

  * jammy/linux-oem-6.1: 6.1.0-1035.35 -proposed tracker (LP: #2052090)

  * Jammy update: v6.1.78 upstream stable release (LP: #2054541)
    - ext4: regenerate buddy after block freeing failed if under fc replay
    - dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
    - dmaengine: ti: k3-udma: Report short packet errors
    - dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
    - dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
    - phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
    - dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
    - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
    - cifs: failure to add channel on iface should bump up weight
    - drm/msms/dp: fixed link clock divider bits be over written in BPC unknown
      case
    - drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
    - drm/msm/dpu: check for valid hw_pp in dpu_encoder_helper_phys_cleanup
    - net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
    - wifi: mac80211: fix waiting for beacons logic
    - netdevsim: avoid potential loop in nsim_dev_trap_report_work()
    - net: atlantic: Fix DMA mapping for PTP hwts ring
    - selftests: net: cut more slack for gro fwd tests.
    - selftests: net: avoid just another constant wait
    - tunnels: fix out of bounds access when building IPv6 PMTU error
    - atm: idt77252: fix a memleak in open_card_ubr0
    - octeontx2-pf: Fix a memleak otx2_sq_init
    - hwmon: (aspeed-pwm-tacho) mutex for tach reading
    - hwmon: (coretemp) Fix out-of-bounds memory access
    - hwmon: (coretemp) Fix bogus core_id to attr name mapping
    - inet: read sk->sk_family once in inet_recv_error()
    - drm/i915/gvt: Fix uninitialized variable in handle_mmio()
    - rxrpc: Fix response to PING RESPONSE ACKs to a dead call
    - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
    - af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC.
    - ppp_async: limit MRU to 64K
    - selftests: cmsg_ipv6: repeat the exact packet
    - netfilter: nft_compat: narrow down revision to unsigned 8-bits
    - netfilter: nft_compat: reject unused compat flag
    - netfilter: nft_compat: restrict match/target protocol to u16
    - drm/amd/display: Implement bounds check for stream encoder creation in
      DCN301
    - netfilter: nft_ct: reject direction for ct id
    - netfilter: nft_set_pipapo: store index in scratch maps
    - netfilter: nft_set_pipapo: add helper to release pcpu scratch area
    - netfilter: nft_set_pipapo: remove scratch_aligned pointer
    - fs/ntfs3: Fix an NULL dereference bug
    - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
    - blk-iocost: Fix an UBSAN shift-out-of-bounds warning
    - fs: dlm: don't put dlm_local_addrs on heap
    - mtd: parsers: ofpart: add workaround for #size-cells 0
    - ALSA: usb-audio: Add delay quirk for MOTU M Series 2nd revision
    - ALSA: usb-audio: Add a quirk for Yamaha ...