This bug was fixed in the package linux-oem-5.14 - 5.14.0-1045.51 --------------- linux-oem-5.14 (5.14.0-1045.51) focal; urgency=medium * focal/linux-oem-5.14: 5.14.0-1045.51 -proposed tracker (LP: #1979490) * Packaging resync (LP: #1786013) - debian/dkms-versions -- update from kernel-versions (main/2022.05.30) * Suppress harmless warning from hp-wmi (LP: #1980307) - platform/x86: hp-wmi: Ignore Sanitization Mode event * Enable WiFi hotspot feature for MediaTek MT7921 (LP: #1979173) - mt76: mt7921: Add AP mode support - SAUCE: mt76: mt7921: not support beacon offload disable command - SAUCE: mt76: mt7921: fix command timeout in AP stop period * Fix PSR flickers on Intel TGL laptops + AUO panel (LP: #1980087) - SAUCE: drm/i915/display/psr: Fix flicker on TGL + AUO panel * CVE-2022-1679 - SAUCE: ath9k: fix use-after-free in ath9k_hif_usb_rx_cb * Fix AMDGPU blank screen when Type-C DP alt is in use (LP: #1980060) - drm/amd/display: Query DMCUB for dp alt status - drm/amd/display: Add version check before using DP alt query interface * Fix WD22TB4 suspend and resume, two external monitor can not output (LP: #1979267) - drm/dp/mst: Read the extended DPCD capabilities during system resume * Focal update: upstream stable patchset 2022-06-30 (LP: #1980340) - binfmt_flat: do not stop relocating GOT entries prematurely on riscv - parisc/stifb: Implement fb_is_primary_device() - parisc/stifb: Keep track of hardware path of graphics card - RISC-V: Mark IORESOURCE_EXCLUSIVE for reserved mem instead of IORESOURCE_BUSY - riscv: Initialize thread pointer before calling C functions - riscv: Fix irq_work when SMP is disabled - riscv: Wire up memfd_secret in UAPI header - riscv: Move alternative length validation into subsection - ALSA: hda/realtek - Add new type for ALC245 - ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9520 laptop - ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS - ALSA: usb-audio: Cancel pending work at closing a MIDI substream - USB: serial: option: add Quectel BG95 modem - USB: new quirk for Dell Gen 2 devices - usb: isp1760: Fix out-of-bounds array access - usb: dwc3: gadget: Move null pinter check to proper place - usb: core: hcd: Add support for deferring roothub registration - cifs: fix potential double free during failed mount - cifs: when extending a file with falloc we should make files not-sparse - xhci: Allow host runtime PM as default for Intel Alder Lake N xHCI - x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails - perf/x86/intel: Fix event constraints for ICL - x86/kexec: fix memory leak of elf header buffer - x86/sgx: Set active memcg prior to shmem allocation - ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP - ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP - ptrace: Reimplement PTRACE_KILL by always sending SIGKILL - btrfs: add "0x" prefix for unsupported optional features - btrfs: repair super block num_devices automatically - btrfs: fix the error handling for submit_extent_page() for btrfs_do_readpage() - iommu/vt-d: Add RPLS to quirk list to skip TE disabling - drm/vmwgfx: validate the screen formats - drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes - selftests/bpf: Fix vfs_link kprobe definition - mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue - b43legacy: Fix assigning negative value to unsigned variable - b43: Fix assigning negative value to unsigned variable - ipw2x00: Fix potential NULL dereference in libipw_xmit() - ipv6: fix locking issues with loops over idev->addr_list - fbcon: Consistently protect deferred_takeover with console_lock() - x86/platform/uv: Update TSC sync state for UV5 - ACPICA: Avoid cache flush inside virtual machines - mac80211: minstrel_ht: fix where rate stats are stored (fixes debugfs output) - drm/komeda: return early if drm_universal_plane_init() fails. - drm/amd/display: Disabling Z10 on DCN31 - rcu-tasks: Fix race in schedule and flush work - rcu: Make TASKS_RUDE_RCU select IRQ_WORK - sfc: ef10: Fix assigning negative value to unsigned variable - ALSA: jack: Access input_dev under mutex - spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction - tools/power turbostat: fix ICX DRAM power numbers - scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock - cpuidle: PSCI: Improve support for suspend-to-RAM for PSCI OSI mode - drm/amd/pm: fix double free in si_parse_power_table() - ASoC: rsnd: care default case on rsnd_ssiu_busif_err_status_clear() - ASoC: rsnd: care return value from rsnd_node_fixed_index() - ath9k: fix QCA9561 PA bias level - media: venus: hfi: avoid null dereference in deinit - media: pci: cx23885: Fix the error handling in cx23885_initdev() - media: cx25821: Fix the warning when removing the module - md/bitmap: don't set sb values if can't pass sanity check - mmc: jz4740: Apply DMA engine limits to maximum segment size - drivers: mmc: sdhci_am654: Add the quirk to set TESTCD bit - scsi: megaraid: Fix error check return value of register_chrdev() - drm/amdgpu/sdma: Fix incorrect calculations of the wptr of the doorbells - scsi: ufs: Use pm_runtime_resume_and_get() instead of pm_runtime_get_sync() - scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp() - ath11k: disable spectral scan during spectral deinit - ASoC: Intel: bytcr_rt5640: Add quirk for the HP Pro Tablet 408 - drm/plane: Move range check for format_count earlier - drm/amd/pm: fix the compile warning - ath10k: skip ath10k_halt during suspend for driver state RESTARTING - arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall - drm: msm: fix error check return value of irq_of_parse_and_map() - scsi: target: tcmu: Fix possible data corruption - ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL - net/mlx5: fs, delete the FTE when there are no rules attached to it - ASoC: dapm: Don't fold register value changes into notifications - mlxsw: spectrum_dcb: Do not warn about priority changes - mlxsw: Treat LLDP packets as control - drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo - regulator: mt6315: Enforce regulator-compatible, not name - HID: bigben: fix slab-out-of-bounds Write in bigben_probe - of: Support more than one crash kernel regions for kexec -s - ASoC: tscs454: Add endianness flag in snd_soc_component_driver - net: remove two BUG() from skb_checksum_help() - s390/preempt: disable __preempt_count_add() optimization for PROFILE_ALL_BRANCHES - perf/amd/ibs: Cascade pmu init functions' return value - sched/core: Avoid obvious double update_rq_clock warning - spi: stm32-qspi: Fix wait_cmd timeout in APM mode - dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC - ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default - ipmi:ssif: Check for NULL msg when handling events and messages - ipmi: Fix pr_fmt to avoid compilation issues - rtlwifi: Use pr_warn instead of WARN_ONCE - mt76: mt7921: accept rx frames with non-standard VHT MCS10-11 - mt76: fix encap offload ethernet type check - media: rga: fix possible memory leak in rga_probe - media: coda: limit frame interval enumeration to supported encoder frame sizes - media: hantro: HEVC: unconditionnaly set pps_{cb/cr}_qp_offset values - media: ccs-core.c: fix failure to call clk_disable_unprepare - media: imon: reorganize serialization - media: cec-adap.c: fix is_configuring state - usbnet: Run unregister_netdev() before unbind() again - openrisc: start CPU timer early in boot - nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags - ASoC: rt5645: Fix errorenous cleanup order - nbd: Fix hung on disconnect request if socket is closed before - drm/amd/pm: update smartshift powerboost calc for smu12 - drm/amd/pm: update smartshift powerboost calc for smu13 - net: phy: micrel: Allow probing without .driver_data - media: exynos4-is: Fix compile warning - ASoC: max98357a: remove dependency on GPIOLIB - ASoC: rt1015p: remove dependency on GPIOLIB - ACPI: CPPC: Assume no transition latency if no PCCT - nvme: set non-mdts limits in nvme_scan_work - can: mcp251xfd: silence clang's -Wunaligned-access warning - x86/microcode: Add explicit CPU vendor dependency - net: ipa: ignore endianness if there is no header - m68k: atari: Make Atari ROM port I/O write macros return void - rxrpc: Return an error to sendmsg if call failed - rxrpc, afs: Fix selection of abort codes - afs: Adjust ACK interpretation to try and cope with NAT - eth: tg3: silence the GCC 12 array-bounds warning - char: tpm: cr50_i2c: Suppress duplicated error message in .remove() - selftests/bpf: fix btf_dump/btf_dump due to recent clang change - gfs2: use i_lock spin_lock for inode qadata - scsi: target: tcmu: Avoid holding XArray lock when calling lock_page - IB/rdmavt: add missing locks in rvt_ruc_loopback - ARM: dts: ox820: align interrupt controller node name with dtschema - ARM: dts: socfpga: align interrupt controller node name with dtschema - ARM: dts: s5pv210: align DMA channels with dtschema - arm64: dts: qcom: msm8994: Fix the cont_splash_mem address - arm64: dts: qcom: msm8994: Fix BLSP[12]_DMA channels count - PM / devfreq: rk3399_dmc: Disable edev on remove() - crypto: ccree - use fine grained DMA mapping dir - soc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc - fs: jfs: fix possible NULL pointer dereference in dbFree() - arm64: dts: qcom: sdm845-xiaomi-beryllium: fix typo in panel's vddio-supply property - ARM: OMAP1: clock: Fix UART rate reporting algorithm - powerpc/fadump: Fix fadump to work with a different endian capture kernel - fat: add ratelimit to fat*_ent_bread() - pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources() - ARM: versatile: Add missing of_node_put in dcscb_init - ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM - ARM: hisi: Add missing of_node_put after of_find_compatible_node - powerpc/rtas: Keep MSR[RI] set when calling RTAS - PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() - KVM: PPC: Book3S HV Nested: L2 LPCR should inherit L1 LPES setting - alpha: fix alloc_zeroed_user_highpage_movable() - tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate - powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr - powerpc/xics: fix refcount leak in icp_opal_init() - powerpc/powernv: fix missing of_node_put in uv_init() - macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled - powerpc/iommu: Add missing of_node_put in iommu_init_early_dart - smb3: check for null tcon - RDMA/hfi1: Prevent panic when SDMA is disabled - Input: gpio-keys - cancel delayed work only in case of GPIO - drm: fix EDID struct for old ARM OABI format - drm/bridge_connector: enable HPD by default if supported - dt-bindings: display: sitronix, st7735r: Fix backlight in example - drm/vmwgfx: Fix an invalid read - ath11k: acquire ab->base_lock in unassign when finding the peer by addr - drm: bridge: it66121: Fix the register page length - ath9k: fix ar9003_get_eepmisc - drm/edid: fix invalid EDID extension block filtering - drm/bridge: adv7511: clean up CEC adapter when probe fails - drm: bridge: icn6211: Fix register layout - drm: bridge: icn6211: Fix HFP_HSW_HBP_HI and HFP_MIN handling - mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG - spi: qcom-qspi: Add minItems to interconnect-names - ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe - ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe - x86/delay: Fix the wrong asm constraint in delay_loop() - drm/vc4: hvs: Fix frame count register readout - drm/mediatek: Fix mtk_cec_mask() - drm/vc4: hvs: Reset muxes at probe time - drm/vc4: txp: Don't set TXP_VSTART_AT_EOF - drm/vc4: txp: Force alpha to be 0xff if it's disabled - libbpf: Don't error out on CO-RE relos for overriden weak subprogs - mptcp: reset the packet scheduler on PRIO change - nl80211: show SSID for P2P_GO interfaces - drm/komeda: Fix an undefined behavior bug in komeda_plane_add() - drm: mali-dp: potential dereference of null pointer - spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout - scftorture: Fix distribution of short handler delays - net: dsa: mt7530: 1G can also support 1000BASE-X link mode - NFC: NULL out the dev->rfkill to prevent UAF - efi: Add missing prototype for efi_capsule_setup_info - device property: Check fwnode->secondary when finding properties - target: remove an incorrect unmap zeroes data deduction - drbd: fix duplicate array initializer - EDAC/dmc520: Don't print an error for each unconfigured interrupt line - mtd: rawnand: denali: Use managed device resources - HID: hid-led: fix maximum brightness for Dream Cheeky - HID: elan: Fix potential double free in elan_input_configured - drm/bridge: Fix error handling in analogix_dp_probe - regulator: da9121: Fix uninit-value in da9121_assign_chip_model() - drm/mediatek: dpi: Use mt8183 output formats for mt8192 - sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq - sched/psi: report zeroes for CPU full at the system level - spi: img-spfi: Fix pm_runtime_get_sync() error checking - cpufreq: Fix possible race in cpufreq online error path - printk: use atomic updates for klogd work - ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix - media: i2c: max9286: Use dev_err_probe() helper - media: i2c: max9286: Use "maxim,gpio-poc" property - media: i2c: max9286: fix kernel oops when removing module - media: hantro: Empty encoder capture buffers by default - drm/panel: simple: Add missing bus flags for Innolux G070Y2-L01 - ALSA: pcm: Check for null pointer of pointer substream before dereferencing it - inotify: show inotify mask flags in proc fdinfo - fsnotify: fix wrong lockdep annotations - spi: rockchip: Stop spi slave dma receiver when cs inactive - spi: rockchip: Preset cs-high and clk polarity in setup progress - spi: rockchip: fix missing error on unsupported SPI_CS_HIGH - of: overlay: do not break notify on NOTIFY_{OK|STOP} - selftests/damon: add damon to selftests root Makefile - drm/msm/dp: Modify prototype of encoder based API - drm/msm/hdmi: switch to drm_bridge_connector - drm/msm/dpu: adjust display_v_end for eDP and DP - scsi: iscsi: Fix harmless double shift bug - scsi: ufs: qcom: Fix ufs_qcom_resume() - scsi: ufs: core: Exclude UECxx from SFR dump list - selftests/resctrl: Fix null pointer dereference on open failed - libbpf: Fix logic for finding matching program for CO-RE relocation - mtd: spi-nor: core: Check written SR value in spi_nor_write_16bit_sr_and_check() - x86/pm: Fix false positive kmemleak report in msr_build_context() - mtd: rawnand: cadence: fix possible null-ptr-deref in cadence_nand_dt_probe() - mtd: rawnand: intel: fix possible null-ptr-deref in ebu_nand_probe() - x86/speculation: Add missing prototype for unpriv_ebpf_notify() - ASoC: rk3328: fix disabling mclk on pclk probe failure - perf tools: Add missing headers needed by util/data.h - drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume - drm/msm/dp: stop event kernel thread when DP unbind - drm/msm/dp: fix error check return value of irq_of_parse_and_map() - drm/msm/dp: reset DP controller before transmit phy test pattern - drm/msm/dp: do not stop transmitting phy test pattern during DP phy compliance test - drm/msm/dsi: fix error checks and return values for DSI xmit functions - drm/msm/hdmi: check return value after calling platform_get_resource_byname() - drm/msm/hdmi: fix error check return value of irq_of_parse_and_map() - drm/msm: add missing include to msm_drv.c - drm/panel: panel-simple: Fix proper bpc for AM-1280800N3TZQW-T00H - kunit: fix debugfs code to use enum kunit_status, not bool - drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() - virtio_blk: fix the discard_granularity and discard_alignment queue limits - x86: Fix return value of __setup handlers - irqchip/exiu: Fix acknowledgment of edge triggered interrupts - irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value - irqchip/aspeed-scu-ic: Fix irq_of_parse_and_map() return value - x86/mm: Cleanup the control_va_addr_alignment() __setup handler - arm64: fix types in copy_highpage() - regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET - drm/msm/dsi: fix address for second DSI PHY on SDM660 - drm/msm/dp: fix event thread stuck in wait_event after kthread_stop() - drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected - drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected - drm/msm: return an error pointer in msm_gem_prime_get_sg_table() - media: uvcvideo: Fix missing check to determine if element is found in list - arm64: stackleak: fix current_top_of_stack() - iomap: iomap_write_failed fix - spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname() - Revert "cpufreq: Fix possible race in cpufreq online error path" - regulator: qcom_smd: Fix up PM8950 regulator configuration - perf/amd/ibs: Use interrupt regs ip for stack unwinding - ath11k: Don't check arvif->is_started before sending management frames - wilc1000: fix crash observed in AP mode with cfg80211_register_netdevice() - HID: amd_sfh: Modify the bus name - HID: amd_sfh: Modify the hid name - ASoC: fsl: Use dev_err_probe() helper - ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe - ASoC: imx-hdmi: Fix refcount leak in imx_hdmi_probe - ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe - regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt - ASoC: samsung: Use dev_err_probe() helper - ASoC: samsung: Fix refcount leak in aries_audio_probe - block: Fix the bio.bi_opf comment - kselftest/cgroup: fix test_stress.sh to use OUTPUT dir - scripts/faddr2line: Fix overlapping text section failures - media: aspeed: Fix an error handling path in aspeed_video_probe() - media: exynos4-is: Fix PM disable depth imbalance in fimc_is_probe - mt76: do not attempt to reorder received 802.3 packets without agg session - media: st-delta: Fix PM disable depth imbalance in delta_probe - media: atmel: atmel-isc: Fix PM disable depth imbalance in atmel_isc_probe - media: i2c: rdacm2x: properly set subdev entity function - media: exynos4-is: Change clk_disable to clk_disable_unprepare - media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init - media: vsp1: Fix offset calculation for plane cropping - media: atmel: atmel-sama5d2-isc: fix wrong mask in YUYV format check - media: hantro: HEVC: Fix tile info buffer value computation - Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout - Bluetooth: use hdev lock in activate_scan for hci_is_adv_monitoring - Bluetooth: use hdev lock for accept_list and reject_list in conn req - nvme: set dma alignment to dword - m68k: math-emu: Fix dependencies of math emulation support - sctp: read sk->sk_bound_dev_if once in sctp_rcv() - net: hinic: add missing destroy_workqueue in hinic_pf_to_mgmt_init - ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_* - kselftest/arm64: bti: force static linking - media: ov7670: remove ov7670_power_off from ov7670_remove - media: i2c: ov5648: fix wrong pointer passed to IS_ERR() and PTR_ERR() - media: staging: media: rkvdec: Make use of the helper function devm_platform_ioremap_resource() - media: rkvdec: h264: Fix dpb_valid implementation - media: rkvdec: h264: Fix bit depth wrap in pps packet - regulator: scmi: Fix refcount leak in scmi_regulator_probe - ext4: reject the 'commit' option on ext2 filesystems - drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init - drm: msm: fix possible memory leak in mdp5_crtc_cursor_set() - x86/sev: Annotate stack change in the #VC handler - drm/msm/dpu: handle pm_runtime_get_sync() errors in bind path - drm/i915: Fix CFI violation with show_dynamic_id() - thermal/drivers/bcm2711: Don't clamp temperature at zero - thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe - thermal/core: Fix memory leak in __thermal_cooling_device_register() - thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe - bfq: Relax waker detection for shared queues - bfq: Allow current waker to defend against a tentative one - ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition() - PM: domains: Fix initialization of genpd's next_wakeup - net: macb: Fix PTP one step sync support - NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx - ASoC: max98090: Move check for invalid values before casting in max98090_put_enab_tlv() - net: stmmac: selftests: Use kcalloc() instead of kzalloc() - net: stmmac: fix out-of-bounds access in a selftest - hv_netvsc: Fix potential dereference of NULL pointer - hwmon: (pmbus) Check PEC support before reading other registers - rxrpc: Fix listen() setting the bar too high for the prealloc rings - rxrpc: Don't try to resend the request if we're receiving the reply - rxrpc: Fix overlapping ACK accounting - rxrpc: Don't let ack.previousPacket regress - rxrpc: Fix decision on when to generate an IDLE ACK - net: huawei: hinic: Use devm_kcalloc() instead of devm_kzalloc() - hinic: Avoid some over memory allocation - net: dsa: restrict SMSC_LAN9303_I2C kconfig - net/smc: postpone sk_refcnt increment in connect() - arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399 - arm64: dts: mt8192: Fix nor_flash status disable typo - memory: samsung: exynos5422-dmc: Avoid some over memory allocation - ARM: dts: BCM5301X: update CRU block description - ARM: dts: BCM5301X: Update pin controller node name - ARM: dts: suniv: F1C100: fix watchdog compatible - soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc - soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc - PCI: cadence: Fix find_first_zero_bit() limit - PCI: rockchip: Fix find_first_zero_bit() limit - PCI: dwc: Fix setting error return on MSI DMA mapping failure - ARM: dts: ci4x10: Adapt to changes in imx6qdl.dtsi regarding fec clocks - soc: qcom: llcc: Add MODULE_DEVICE_TABLE() - KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry - KVM: nVMX: Clear IDT vectoring on nested VM-Exit for double/triple fault - crypto: qat - set CIPHER capability for QAT GEN2 - crypto: qat - set COMPRESSION capability for QAT GEN2 - crypto: qat - set CIPHER capability for DH895XCC - crypto: qat - set COMPRESSION capability for DH895XCC - platform/chrome: cros_ec: fix error handling in cros_ec_register() - ARM: dts: imx6dl-colibri: Fix I2C pinmuxing - platform/chrome: Re-introduce cros_ec_cmd_xfer and use it for ioctls - can: xilinx_can: mark bit timing constants as const - ARM: dts: stm32: Fix PHY post-reset delay on Avenger96 - ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT - ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C - ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED - ARM: dts: bcm2835-rpi-b: Fix GPIO line names - misc: ocxl: fix possible double free in ocxl_file_register_afu - crypto: marvell/cesa - ECB does not IV - gpiolib: of: Introduce hook for missing gpio-ranges - pinctrl: bcm2835: implement hook for missing gpio-ranges - arm: mediatek: select arch timer for mt7629 - pinctrl: mediatek: mt8195: enable driver on mtk platforms - arm64: dts: qcom: qrb5165-rb5: Fix can-clock node name - Drivers: hv: vmbus: Fix handling of messages with transaction ID of zero - powerpc/fadump: fix PT_LOAD segment for boot memory area - mfd: ipaq-micro: Fix error check return value of platform_get_irq() - scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac() - soc: bcm: Check for NULL return of devm_kzalloc() - arm64: dts: ti: k3-am64-mcu: remove incorrect UART base clock rates - firmware: arm_scmi: Fix list protocols enumeration in the base protocol - nvdimm: Fix firmware activation deadlock scenarios - nvdimm: Allow overwrite in the presence of disabled dimms - pinctrl: mvebu: Fix irq_of_parse_and_map() return value - drivers/base/node.c: fix compaction sysfs file leak - dax: fix cache flush on PMD-mapped pages - drivers/base/memory: fix an unlikely reference counting issue in __add_memory_block() - firmware: arm_ffa: Fix uuid parameter to ffa_partition_probe - firmware: arm_ffa: Remove incorrect assignment of driver_data - list: introduce list_is_head() helper and re-use it in list.h - list: fix a data-race around ep->rdllist - drm/msm/dpu: fix error check return value of irq_of_parse_and_map() - powerpc/8xx: export 'cpm_setbrg' for modules - pinctrl: renesas: r8a779a0: Fix GPIO function on I2C-capable pins - pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources() - powerpc/idle: Fix return value of __setup() handler - powerpc/4xx/cpm: Fix return value of __setup() handler - RDMA/hns: Add the detection for CMDQ status in the device initialization process - arm64: dts: marvell: espressobin-ultra: fix SPI-NOR config - arm64: dts: marvell: espressobin-ultra: enable front USB3 port - ASoC: atmel-pdmic: Remove endianness flag on pdmic component - ASoC: atmel-classd: Remove endianness flag on class d component - proc: fix dentry/inode overinstantiating under /proc/${pid}/net - ipc/mqueue: use get_tree_nodev() in mqueue_get_tree() - PCI: imx6: Fix PERST# start-up sequence - tty: fix deadlock caused by calling printk() under tty_port->lock - crypto: sun8i-ss - rework handling of IV - crypto: sun8i-ss - handle zero sized sg - crypto: cryptd - Protect per-CPU resource by disabling BH. - hugetlbfs: fix hugetlbfs_statfs() locking - Input: sparcspkr - fix refcount leak in bbc_beep_probe - PCI/AER: Clear MULTI_ERR_COR/UNCOR_RCV bits - hwrng: omap3-rom - fix using wrong clk_disable() in omap_rom_rng_runtime_resume() - powerpc/64: Only WARN if __pa()/__va() called with bad addresses - powerpc/perf: Fix the threshold compare group constraint for power10 - powerpc/perf: Fix the threshold compare group constraint for power9 - macintosh: via-pmu and via-cuda need RTC_LIB - powerpc/xive: Add some error handling code to 'xive_spapr_init()' - powerpc/xive: Fix refcount leak in xive_spapr_init - powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup - mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe() - nfsd: destroy percpu stats counters after reply cache shutdown - mailbox: forward the hrtimer if not queued and under a lock - RDMA/hfi1: Prevent use of lock before it is initialized - KVM: LAPIC: Drop pending LAPIC timer injection when canceling the timer - Input: stmfts - do not leave device disabled in stmfts_input_open - OPP: call of_node_put() on error path in _bandwidth_supported() - f2fs: fix dereference of stale list iterator after loop body - iommu/mediatek: Fix 2 HW sharing pgtable issue - iommu/mediatek: Add list_del in mtk_iommu_remove - iommu/mediatek: Remove clk_disable in mtk_iommu_remove - iommu/mediatek: Add mutex for m4u_group and m4u_dom in data - i2c: at91: use dma safe buffers - cpufreq: mediatek: Use module_init and add module_exit - cpufreq: mediatek: Unregister platform device on exit - iommu/arm-smmu-v3-sva: Fix mm use-after-free - MIPS: Loongson: Use hwmon_device_register_with_groups() to register hwmon - iommu/mediatek: Fix NULL pointer dereference when printing dev_name - i2c: at91: Initialize dma_buf in at91_twi_xfer() - dmaengine: idxd: Fix the error handling path in idxd_cdev_register() - NFS: Do not report EINTR/ERESTARTSYS as mapping errors - NFS: fsync() should report filesystem errors over EINTR/ERESTARTSYS - NFS: Don't report ENOSPC write errors twice - NFS: Do not report flush errors in nfs_write_end() - NFS: Don't report errors from nfs_pageio_complete() more than once - NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout - NFS: Further fixes to the writeback error handling - video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup - dmaengine: stm32-mdma: remove GISR1 register - dmaengine: stm32-mdma: fix chan initialization in stm32_mdma_irq_handler() - iommu/amd: Increase timeout waiting for GA log enablement - i2c: npcm: Fix timeout calculation - i2c: npcm: Correct register access width - i2c: npcm: Handle spurious interrupts - i2c: rcar: fix PM ref counts in probe error paths - perf c2c: Use stdio interface if slang is not supported - perf jevents: Fix event syntax error caused by ExtSel - video: fbdev: vesafb: Fix a use-after-free due early fb_info cleanup - NFS: Always initialise fattr->label in nfs_fattr_alloc() - NFS: Create a new nfs_alloc_fattr_with_label() function - NFS: Convert GFP_NOFS to GFP_KERNEL - NFSv4.1 mark qualified async operations as MOVEABLE tasks - f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count() - f2fs: fix to do sanity check on block address in f2fs_do_zero_range() - f2fs: fix to clear dirty inode in f2fs_evict_inode() - f2fs: fix deadloop in foreground GC - f2fs: don't need inode lock for system hidden quota - f2fs: fix fallocate to use file_modified to update permissions consistently - f2fs: fix to do sanity check for inline inode - objtool: Fix symbol creation - wifi: mac80211: fix use-after-free in chanctx code - iwlwifi: mvm: fix assert 1F04 upon reconfig - fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages - bfq: Avoid false marking of bic as stably merged - bfq: Avoid merging queues with different parents - bfq: Split shared queues on move between cgroups - bfq: Update cgroup information before merging bio - bfq: Drop pointless unlock-lock pair - bfq: Remove pointless bfq_init_rq() calls - bfq: Track whether bfq_group is still online - bfq: Get rid of __bio_blkcg() usage - bfq: Make sure bfqg for which we are queueing requests is online - ext4: mark group as trimmed only if it was fully scanned - ext4: fix use-after-free in ext4_rename_dir_prepare - ext4: fix warning in ext4_handle_inode_extension - ext4: fix bug_on in ext4_writepages - ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state - ext4: fix bug_on in __es_tree_search - ext4: verify dir block before splitting it - ext4: avoid cycles in directory h-tree - ACPI: property: Release subnode properties with data nodes - tty: goldfish: Introduce gf_ioread32()/gf_iowrite32() - tracing: Fix potential double free in create_var_ref() - drm/amdgpu: add beige goby PCI ID - PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299 - PCI: qcom: Fix runtime PM imbalance on probe errors - PCI: qcom: Fix unbalanced PHY init on probe errors - mm, compaction: fast_find_migrateblock() should return pfn in the target zone - s390/perf: obtain sie_block from the right address - s390/stp: clock_delta should be signed - dlm: fix plock invalid read - dlm: fix missing lkb refcount handling - ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock - scsi: dc395x: Fix a missing check on list iterator - scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled - landlock: Add clang-format exceptions - selftests/landlock: Add clang-format exceptions - selftests/landlock: Normalize array assignment - selftests/landlock: Format with clang-format - samples/landlock: Add clang-format exceptions - samples/landlock: Format with clang-format - landlock: Fix landlock_add_rule(2) documentation - selftests/landlock: Make tests build with old libc - selftests/landlock: Extend tests for minimal valid attribute size - selftests/landlock: Add tests for unknown access rights - selftests/landlock: Extend access right tests to directories - selftests/landlock: Fully test file rename with "remove" access - selftests/landlock: Add tests for O_PATH - drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. - drm/nouveau/subdev/bus: Ratelimit logging for fault errors - drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem - drm/nouveau/clk: Fix an incorrect NULL check on list iterator - drm/nouveau/kms/nv50-: atom: fix an incorrect NULL check on list iterator - drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX - drm/i915/dsi: fix VBT send packet port selection for ICL+ - md: fix an incorrect NULL check in does_sb_need_changing - md: fix an incorrect NULL check in md_reload_sb - mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write - mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N - media: coda: Fix reported H264 profile - media: coda: Add more H264 levels for CODA960 - ima: remove the IMA_TEMPLATE Kconfig option - Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug - RDMA/hfi1: Fix potential integer multiplication overflow errors - mmc: core: Allows to override the timeout value for ioctl() path - csky: patch_text: Fixup last cpu should be master - irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x - irqchip: irq-xtensa-mx: fix initial IRQ affinity - thermal: devfreq_cooling: use local ops instead of global ops - cfg80211: declare MODULE_FIRMWARE for regulatory.db - mac80211: upgrade passive scan to active scan on DFS channels after beacon rx - um: Use asm-generic/dma-mapping.h - um: chan_user: Fix winch_tramp() return value - um: Fix out-of-bounds read in LDT setup - kexec_file: drop weak attribute from arch_kexec_apply_relocations[_add] - ftrace: Clean up hash direct_functions on register failures - iommu/msm: Fix an incorrect NULL check on list iterator - Revert "mm/cma.c: remove redundant cma_mutex lock" - mm/page_alloc: always attempt to allocate at least one page during bulk allocation - nodemask.h: fix compilation error with GCC12 - hugetlb: fix huge_pmd_unshare address update - mm/memremap: fix missing call to untrack_pfn() in pagemap_range() - xtensa/simdisk: fix proc_read_simdisk() - rtl818x: Prevent using not initialized queues - ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control - carl9170: tx: fix an incorrect use of list iterator - stm: ltdc: fix two incorrect NULL checks on list iterator - bcache: improve multithreaded bch_btree_check() - bcache: improve multithreaded bch_sectors_dirty_init() - bcache: remove incremental dirty sector counting for bch_sectors_dirty_init() - bcache: avoid journal no-space deadlock by reserving 1 journal bucket - serial: pch: don't overwrite xmit->buf[0] by x_char - tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator - gma500: fix an incorrect NULL check on list iterator - arm64: dts: qcom: ipq8074: fix the sleep clock frequency - arm64: tegra: Add missing DFLL reset on Tegra210 - clk: tegra: Add missing reset deassertion - phy: qcom-qmp: fix struct clk leak on probe errors - ARM: dts: s5pv210: Remove spi-cs-high on panel in Aries - ARM: pxa: maybe fix gpio lookup tables - SMB3: EBADF/EIO errors in rename/open caused by race condition in smb2_compound_op - docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0 - dt-bindings: gpio: altera: correct interrupt-cells - vdpasim: allow to enable a vq repeatedly - blk-iolatency: Fix inflight count imbalances and IO hangs on offline - coresight: core: Fix coresight device probe failure issue - phy: qcom-qmp: fix reset-controller leak on probe errors - net: ipa: fix page free in ipa_endpoint_trans_release() - net: ipa: fix page free in ipa_endpoint_replenish_one() - kseltest/cgroup: Make test_stress.sh work if run interactively - list: test: Add a test for list_is_head() - Revert "random: use static branch for crng_ready()" - RDMA/hns: Remove the num_cqc_timer variable - RDMA/rxe: Generate a completion for unsupported/invalid opcode - MIPS: IP27: Remove incorrect `cpu_has_fpu' override - MIPS: IP30: Remove incorrect `cpu_has_fpu' override - ext4: only allow test_dummy_encryption when supported - interconnect: qcom: sc7180: Drop IP0 interconnects - interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate - md: Don't set mddev private to NULL in raid0 pers->free - md: fix double free of io_acct_set bioset - md: bcache: check the return value of kzalloc() in detached_dev_do_request() - block: fix bio_clone_blkg_association() to associate with proper blkcg_gq - upstream stable to v5.15.46 - [Config] Update config to match upstream stable release - pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards - staging: greybus: codecs: fix type confusion of list iterator variable - iio: adc: ad7124: Remove shift from scan_type - lkdtm/bugs: Check for the NULL pointer after calling kmalloc - tty: goldfish: Use tty_port_destroy() to destroy port - tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe - tty: n_tty: Restore EOF push handling behavior - serial: 8250_aspeed_vuart: Fix potential NULL dereference in aspeed_vuart_probe - remoteproc: imx_rproc: Ignore create mem entry for resource table - usb: usbip: fix a refcount leak in stub_probe() - usb: usbip: add missing device lock on tweak configuration cmd - USB: storage: karma: fix rio_karma_init return - usb: musb: Fix missing of_node_put() in omap2430_probe - staging: fieldbus: Fix the error handling path in anybuss_host_common_probe() - pwm: lp3943: Fix duty calculation in case period was clamped - pwm: raspberrypi-poe: Fix endianness in firmware struct - rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value - usb: dwc3: gadget: Replace list_for_each_entry_safe() if using giveback - usb: dwc3: pci: Fix pm_runtime_get_sync() error checking - misc: fastrpc: fix an incorrect NULL check on list iterator - firmware: stratix10-svc: fix a missing check on list iterator - usb: typec: mux: Check dev_set_name() return value - rpmsg: virtio: Fix possible double free in rpmsg_probe() - rpmsg: virtio: Fix possible double free in rpmsg_virtio_add_ctrl_dev() - rpmsg: virtio: Fix the unregistration of the device rpmsg_ctrl - iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check - iio: proximity: vl53l0x: Fix return value check of wait_for_completion_timeout - iio: adc: sc27xx: fix read big scale voltage not right - iio: adc: sc27xx: Fine tune the scale calibration values - rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails - pvpanic: Fix typos in the comments - misc/pvpanic: Convert regular spinlock into trylock on panic path - phy: qcom-qmp: fix pipe-clock imbalance on power-on failure - power: supply: axp288_fuel_gauge: Drop BIOS version check from "T3 MRD" DMI quirk - serial: sifive: Report actual baud base rather than fixed 115200 - export: fix string handling of namespace in EXPORT_SYMBOL_NS - soundwire: intel: prevent pm_runtime resume prior to system suspend - coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier - extcon: ptn5150: Add queue work sync before driver release - soc: rockchip: Fix refcount leak in rockchip_grf_init - clocksource/drivers/riscv: Events are stopped during CPU suspend - ARM: dts: aspeed: ast2600-evb: Enable RX delay for MAC0/MAC1 - rtc: mt6397: check return value after calling platform_get_resource() - rtc: ftrtc010: Use platform_get_irq() to get the interrupt - rtc: ftrtc010: Fix error handling in ftrtc010_rtc_probe - tty: n_gsm: Don't ignore write return value in gsmld_output() - tty: n_gsm: Fix packet data hex dump output - serial: meson: acquire port->lock in startup() - serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485 - serial: cpm_uart: Fix build error without CONFIG_SERIAL_CPM_CONSOLE - serial: digicolor-usart: Don't allow CS5-6 - serial: rda-uart: Don't allow CS5-6 - serial: txx9: Don't allow CS5-6 - serial: sh-sci: Don't allow CS5-6 - serial: sifive: Sanitize CSIZE and c_iflag - serial: st-asc: Sanitize CSIZE and correct PARENB for CS7 - serial: stm32-usart: Correct CSIZE, bits, and parity - firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle - bus: ti-sysc: Fix warnings for unbind for serial - driver: base: fix UAF when driver_attach failed - driver core: fix deadlock in __device_attach - watchdog: rti-wdt: Fix pm_runtime_get_sync() error checking - watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe - blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx - ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition - clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value - s390/crypto: fix scatterwalk_unmap() callers in AES-GCM - net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog - net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() - net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks - net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register - modpost: fix removing numeric suffixes - jffs2: fix memory leak in jffs2_do_fill_super - ubi: fastmap: Fix high cpu usage of ubi_bgt by making sure wl_pool not empty - ubi: ubi_create_volume: Fix use-after-free when volume creation failed - selftests/bpf: fix selftest after random: Urandom_read tracepoint removal - selftests/bpf: fix stacktrace_build_id with missing kprobe/urandom_read - bpf: Fix probe read error in ___bpf_prog_run() - riscv: read-only pages should not be writable - net/smc: fixes for converting from "struct smc_cdc_tx_pend **" to "struct smc_wr_tx_pend_priv *" - tcp: add accessors to read/set tp->snd_cwnd - nfp: only report pause frame configuration for physical device - sfc: fix considering that all channels have TX queues - vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit - virtio: pci: Fix an error handling path in vp_modern_probe() - net/mlx5: Don't use already freed action pointer - net/mlx5: CT: Fix header-rewrite re-use for tupels - net/mlx5: correct ECE offset in query qp output - net/mlx5e: Update netdev features after changing XDP state - net: sched: add barrier to fix packet stuck problem for lockless qdisc - tcp: tcp_rtx_synack() can be called from process context - octeontx2-af: fix error code in is_valid_offset() - s390/mcck: isolate SIE instruction when setting CIF_MCCK_GUEST flag - regulator: mt6315-regulator: fix invalid allowed mode - gpio: pca953x: use the correct register address to do regcache sync - afs: Fix infinite loop found by xfstest generic/676 - scsi: sd: Fix potential NULL pointer dereference - tipc: check attribute length for bearer name - driver core: Fix wait_for_device_probe() & deferred_probe_timeout interaction - perf c2c: Fix sorting in percent_rmt_hitm_cmp() - dmaengine: idxd: set DMA_INTERRUPT cap bit - mips: cpc: Fix refcount leak in mips_cpc_default_phys_base - bootconfig: Make the bootconfig.o as a normal object file - tracing: Make tp_printk work on syscall tracepoints - tracing: Fix sleeping function called from invalid context on RT kernel - tracing: Avoid adding tracer option before update_tracer_options - iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() - iommu/arm-smmu-v3: check return value after calling platform_get_resource() - f2fs: remove WARN_ON in f2fs_is_valid_blkaddr - i2c: cadence: Increase timeout per message if necessary - m68knommu: set ZERO_PAGE() to the allocated zeroed page - m68knommu: fix undefined reference to `_init_sp' - dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type - NFSv4: Don't hold the layoutget locks across multiple RPC calls - video: fbdev: hyperv_fb: Allow resolutions with size > 64 MB for Gen1 - video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove() - RISC-V: use memcpy for kexec_file mode - m68knommu: fix undefined reference to `mach_get_rtc_pll' - f2fs: fix to tag gcing flag on page during file defragment - xprtrdma: treat all calls not a bcall when bc_serv is NULL - drm/bridge: sn65dsi83: Fix an error handling path in sn65dsi83_probe() - drm/bridge: ti-sn65dsi83: Handle dsi_lanes == 0 as invalid - netfilter: nat: really support inet nat without l3 address - netfilter: nf_tables: use kfree_rcu(ptr, rcu) to release hooks in clean_net path - netfilter: nf_tables: delete flowtable hooks via transaction list - powerpc/kasan: Force thread size increase with KASAN - SUNRPC: Trap RDMA segment overflows - netfilter: nf_tables: always initialize flowtable hook list in transaction - ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe - netfilter: nf_tables: release new hooks on unsupported flowtable flags - netfilter: nf_tables: memleak flow rule from commit path - netfilter: nf_tables: bail out early if hardware offload is not supported - xen: unexport __init-annotated xen_xlate_map_ballooned_pages() - stmmac: intel: Fix an error handling path in intel_eth_pci_probe() - af_unix: Fix a data-race in unix_dgram_peer_wake_me(). - bpf, arm64: Clear prog->jited_len along prog->jited - net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list - net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure - i40e: xsk: Move tmp desc array from driver to pool - xsk: Fix handling of invalid descriptors in XSK TX batching API - SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer() - net: mdio: unexport __init-annotated mdio_bus_init() - net: xfrm: unexport __init-annotated xfrm4_protocol_init() - net: ipv6: unexport __init-annotated seg6_hmac_init() - net/mlx5: Rearm the FW tracer after each tracer event - net/mlx5: fs, fail conflicting actions - ip_gre: test csum_start instead of transport header - net: altera: Fix refcount leak in altera_tse_mdio_create - net: dsa: mv88e6xxx: use BMSR_ANEGCOMPLETE bit for filling an_complete - tcp: use alloc_large_system_hash() to allocate table_perturb - drm: imx: fix compiler warning with gcc-12 - iov_iter: Fix iter_xarray_get_pages{,_alloc}() - iio: dummy: iio_simple_dummy: check the return value of kstrdup() - staging: rtl8712: fix a potential memory leak in r871xu_drv_init() - iio: st_sensors: Add a local lock for protecting odr - lkdtm/usercopy: Expand size of "out of frame" object - drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() - drivers: staging: rtl8192bs: Fix deadlock in rtw_joinbss_event_prehandle() - tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() - tty: Fix a possible resource leak in icom_probe - drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop() - drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() - USB: host: isp116x: check return value after calling platform_get_resource() - drivers: tty: serial: Fix deadlock in sa1100_set_termios() - drivers: usb: host: Fix deadlock in oxu_bus_suspend() - USB: hcd-pci: Fully suspend across freeze/thaw cycle - char: xillybus: fix a refcount leak in cleanup_dev() - usb: dwc2: gadget: don't reset gadget's driver->bus - soundwire: qcom: adjust autoenumeration timeout - misc: rtsx: set NULL intfdata when probe fails - extcon: Modify extcon device to be created after driver data is set - clocksource/drivers/sp804: Avoid error on multiple instances - staging: rtl8712: fix uninit-value in usb_read8() and friends - staging: rtl8712: fix uninit-value in r871xu_drv_init() - serial: msm_serial: disable interrupts in __msm_console_write() - watchdog: wdat_wdt: Stop watchdog when rebooting the system - md: protect md_unregister_thread from reentrancy - scsi: myrb: Fix up null pointer access on myrb_cleanup() - Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process" - ceph: allow ceph.dir.rctime xattr to be updatable - drm/amd/display: Check if modulo is 0 before dividing. - drm/radeon: fix a possible null pointer dereference - drm/amd/pm: Fix missing thermal throttler status - um: line: Use separate IRQs per line - modpost: fix undefined behavior of is_arm_mapping_symbol() - x86/cpu: Elide KCSAN for cpu_has() and friends - jump_label,noinstr: Avoid instrumentation for JUMP_LABEL=n builds - nbd: call genl_unregister_family() first in nbd_cleanup() - nbd: fix race between nbd_alloc_config() and module removal - nbd: fix io hung while disconnecting device - s390/gmap: voluntarily schedule during key setting - cifs: version operations for smb20 unneeded when legacy support disabled - drm/amd/pm: use bitmap_{from,to}_arr32 where appropriate - nodemask: Fix return values to be unsigned - vringh: Fix loop descriptors check in the indirect cases - scripts/gdb: change kernel config dumping method - ALSA: usb-audio: Skip generic sync EP parse for secondary EP - ALSA: usb-audio: Set up (implicit) sync for Saffire 6 - ALSA: hda/conexant - Fix loopback issue with CX20632 - ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo Yoga DuetITL 2021 - ALSA: hda/realtek: Add quirk for HP Dev One - cifs: return errors during session setup during reconnects - cifs: fix reconnect on smb3 mount types - KEYS: trusted: tpm2: Fix migratable logic - ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files - mmc: block: Fix CQE recovery reset success - net: phy: dp83867: retrigger SGMII AN when link change - net: openvswitch: fix misuse of the cached connection on tuple changes - writeback: Fix inode->i_io_list not be protected by inode->i_lock error - nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION - nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling - nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION - ixgbe: fix bcast packets Rx on VF after promisc removal - ixgbe: fix unexpected VLAN Rx in promisc mode on VF - Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag - powerpc: Don't select HAVE_IRQ_EXIT_ON_IRQ_STACK - drm/bridge: analogix_dp: Support PSR-exit to disable transition - drm/atomic: Force bridge self-refresh-exit on CRTC switch - drm/amdgpu: update VCN codec support for Yellow Carp - powerpc/32: Fix overread/overwrite of thread_struct via ptrace - drm/ast: Create threshold values for AST2600 - random: avoid checking crng_ready() twice in random_init() - random: mark bootloader randomness code as __init - random: account for arch randomness in bits - net/sched: act_police: more accurate MTU policing - PCI: qcom: Fix pipe clock imbalance - zonefs: fix handling of explicit_open option on mount - iov_iter: fix build issue due to possible type mis-match - dmaengine: idxd: add missing callback function to support DMA_INTERRUPT - tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd - xsk: Fix possible crash when multiple sockets are created - upstream stable to v5.15.47, v5.15.48 - Revert "drm/amd/display: Fix DCN3 B0 DP Alt Mapping" - nfsd: Replace use of rwsem with errseq_t - arm64: dts: imx8mm-beacon: Enable RTS-CTS on UART3 - arm64: dts: imx8mn-beacon: Enable RTS-CTS on UART3 - powerpc/kasan: Silence KASAN warnings in __get_wchan() - ASoC: nau8822: Add operation for internal PLL off and on - drm/amd/display: Read Golden Settings Table from VBIOS - drm/amdkfd: Use mmget_not_zero in MMU notifier - dma-debug: make things less spammy under memory pressure - ASoC: cs42l52: Fix TLV scales for mixer controls - ASoC: cs35l36: Update digital volume TLV - ASoC: cs53l30: Correct number of volume levels on SX controls - ASoC: cs42l52: Correct TLV for Bypass Volume - ASoC: cs42l56: Correct typo in minimum level for SX volume controls - ASoC: cs42l51: Correct minimum value for SX volume control - drm/amdkfd: add pinned BOs to kfd_bo_list - ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() - quota: Prevent memory allocation recursion while holding dq_lock - ASoC: wm8962: Fix suspend while playing music - ASoC: es8328: Fix event generation for deemphasis control - ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put() - Input: soc_button_array - also add Lenovo Yoga Tablet2 1051F to dmi_use_low_level_irq - scsi: vmw_pvscsi: Expand vcpuHint to 16 bits - scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted - scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology - scsi: lpfc: Allow reduced polling rate for nvme_admin_async_event cmd completion - scsi: ipr: Fix missing/incorrect resource cleanup in error case - scsi: pmcraid: Fix missing resource cleanup in error case - ALSA: hda/realtek - Add HW8326 support - virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed - nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred - ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg - net: ethernet: mtk_eth_soc: fix misuse of mem alloc interface netdev[napi]_alloc_frag - mellanox: mlx5: avoid uninitialized variable warning with gcc-12 - MIPS: Loongson-3: fix compile mips cpu_hwmon as module build error. - gpio: dwapb: Don't print error on -EPROBE_DEFER - platform/x86: gigabyte-wmi: Add Z690M AORUS ELITE AX DDR4 support - platform/x86: gigabyte-wmi: Add support for B450M DS3H-CF - pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE - pNFS: Avoid a live lock condition in pnfs_update_layout() - clocksource: hyper-v: unexport __init-annotated hv_init_clocksource() - i40e: Fix adding ADQ filter to TC0 - i40e: Fix calculating the number of queue pairs - i40e: Fix call trace in setup_tx_descriptors - Drivers: hv: vmbus: Release cpu lock in error case - tty: goldfish: Fix free_irq() on remove - misc: atmel-ssc: Fix IRQ check in ssc_probe - io_uring: fix races with file table unregister - io_uring: fix races with buffer table unregister - drm/i915/reset: Fix error_state_read ptr + offset use - net: hns3: split function hclge_update_port_base_vlan_cfg() - net: hns3: set port base vlan tbl_sta to false before removing old vlan - net: hns3: don't push link state to VF if unalive - net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization - nvme: add device name to warning in uuid_show() - mlxsw: spectrum_cnt: Reorder counter pools - net: bgmac: Fix an erroneous kfree() in bgmac_remove() - net: ax25: Fix deadlock caused by skb_recv_datagram in ax25_recvmsg - arm64: ftrace: fix branch range checks - arm64: ftrace: consistently handle PLTs. - certs/blacklist_hashes.c: fix const confusion in certs blacklist - init: Initialize noop_backing_dev_info early - block: Fix handling of offline queues in blk_mq_alloc_request_hctx() - faddr2line: Fix overlapping text section failures, the sequel - i2c: npcm7xx: Add check for platform_driver_register - irqchip/gic/realview: Fix refcount leak in realview_gic_of_init - irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions - irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions - irqchip/realtek-rtl: Fix refcount leak in map_interrupts - sched: Fix balance_push() vs __sched_setscheduler() - i2c: designware: Use standard optional ref clock implementation - mei: hbm: drop capability response on early shutdown - mei: me: add raptor lake point S DID - comedi: vmk80xx: fix expression for tx buffer size - crypto: memneq - move into lib/ - USB: serial: option: add support for Cinterion MV31 with new baseline - USB: serial: io_ti: add Agilent E5805A support - usb: dwc2: Fix memory leak in dwc2_hcd_init - usb: cdnsp: Fixed setting last_trb incorrectly - usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe - usb: gadget: f_fs: change ep->status safe in ffs_epfile_io() - usb: gadget: f_fs: change ep->ep safe in ffs_epfile_io() - tty: n_gsm: Debug output allocation must use GFP_ATOMIC - serial: 8250: Store to lsr_save_flags after lsr read - dm mirror log: round up region bitmap size to BITS_PER_LONG - cfi: Fix __cfi_slowpath_diag RCU usage with cpuidle - ext4: fix super block checksum incorrect after mount - ext4: make variable "count" signed - ext4: fix bug_on ext4_mb_use_inode_pa - ext4: add reserved GDT blocks check - KVM: arm64: Don't read a HW interrupt pending state in user context - virtio-pci: Remove wrong address verification in vp_del_vqs() - powerpc/book3e: get rid of #include - clk: imx8mp: fix usb_root_clk parent - upstream stable to v5.15.49 - s390/mm: use non-quiescing sske for KVM switch to keyed guest - net: mana: Add handling of CQE_RX_TRUNCATED - bpf: Fix calling global functions from BPF_PROG_TYPE_EXT programs - selftests/bpf: Add selftest for calling global functions from freplace - arm64: mm: Don't invalidate FROM_DEVICE buffers at start of DMA transfer - upstream stable to v5.15.50 - random: schedule mix_interrupt_randomness() less often - random: quiet urandom warning ratelimit suppression message - ALSA: hda/via: Fix missing beep setup - ALSA: hda/conexant: Fix missing beep setup - ALSA: hda/realtek: Add mute LED quirk for HP Omen laptop - ALSA: hda/realtek: Apply fixup for Lenovo Yoga Duet 7 properly - ALSA: hda/realtek: Add quirk for Clevo PD70PNT - ALSA: hda/realtek: Add quirk for Clevo NS50PU - net: openvswitch: fix parsing of nw_proto for IPv6 fragments - 9p: Fix refcounting during full path walks for fid lookups - 9p: fix fid refcount leak in v9fs_vfs_atomic_open_dotl - 9p: fix fid refcount leak in v9fs_vfs_get_link - btrfs: fix hang during unmount when block group reclaim task is running - btrfs: prevent remounting to v1 space cache for subpage mount - btrfs: add error messages to all unrecognized mount options - scsi: ibmvfc: Store vhost pointer during subcrq allocation - scsi: ibmvfc: Allocate/free queue resource only during probe/remove - mmc: sdhci-pci-o2micro: Fix card detect by dealing with debouncing - mmc: mediatek: wait dma stop bit reset to 0 - xen/gntdev: Avoid blocking in unmap_grant_pages() - mtd: rawnand: gpmi: Fix setting busy timeout setting - ata: libata: add qc->flags in ata_qc_complete_template tracepoint - dm era: commit metadata in postsuspend after worker stops - dm mirror log: clear log bits up to BITS_PER_LONG boundary - tracing/kprobes: Check whether get_kretprobe() returns NULL in kretprobe_dispatcher() - drm/i915: Implement w/a 22010492432 for adl-s - USB: serial: pl2303: add support for more HXN (G) types - USB: serial: option: add Telit LE910Cx 0x1250 composition - USB: serial: option: add Quectel EM05-G modem - USB: serial: option: add Quectel RM500K module support - drm/msm: Fix double pm_runtime_disable() call - netfilter: use get_random_u32 instead of prandom - scsi: scsi_debug: Fix zone transition to full condition - scsi: iscsi: Exclude zero from the endpoint ID range - xsk: Fix generic transmit when completion queue reservation fails - drm/msm: use for_each_sgtable_sg to iterate over scatterlist - bpf: Fix request_sock leak in sk lookup helpers - drm/sun4i: Fix crash during suspend after component bind failure - bpf, x86: Fix tail call count offset calculation on bpf2bpf call - phy: aquantia: Fix AN when higher speeds than 1G are not advertised - net: Write lock dev_base_lock without disabling bottom halves. - net: fix data-race in dev_isalive() - tipc: fix use-after-free Read in tipc_named_reinit - igb: fix a use-after-free issue in igb_clean_tx_ring - bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers - ethtool: Fix get module eeprom fallback - net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms - drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf - drm/msm/dp: check core_initialized before disable interrupts at dp_display_unbind() - drm/msm/dp: Drop now unused hpd_high member - perf arm-spe: Don't set data source if it's not a memory operation - erspan: do not assume transport header is always set - net/tls: fix tls_sk_proto_close executed repeatedly - udmabuf: add back sanity check - selftests: netfilter: correct PKTGEN_SCRIPT_PATHS in nft_concat_range.sh - xen-blkfront: Handle NULL gendisk - MIPS: Remove repetitive increase irq_err_count - afs: Fix dynamic root getattr - ice: ethtool: advertise 1000M speeds properly - regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips - regmap-irq: Fix offset/index mismatch in read_sub_irq_data() - virtio_net: fix xdp_rxq_info bug after suspend/resume - Revert "net/tls: fix tls_sk_proto_close executed repeatedly" - sock: redo the psock vs ULP protection check - nvme-pci: add NO APST quirk for Kioxia device - nvme: move the Samsung X5 quirk entry to the core quirks - gpio: winbond: Fix error code in winbond_gpio_get() - s390/cpumf: Handle events cycles and instructions identical - iio: mma8452: fix probe fail when device tree compatible is used. - iio: magnetometer: yas530: Fix memchr_inv() misuse - iio: adc: vf610: fix conversion mode sysfs node name - usb: typec: wcove: Drop wrong dependency to INTEL_SOC_PMIC - xhci-pci: Allow host runtime PM as default for Intel Raptor Lake xHCI - xhci-pci: Allow host runtime PM as default for Intel Meteor Lake xHCI - usb: gadget: Fix non-unique driver names in raw-gadget driver - USB: gadget: Fix double-free bug in raw_gadget driver - usb: chipidea: udc: check request status before setting device address - dt-bindings: usb: ohci: Increase the number of PHYs - dt-bindings: usb: ehci: Increase the number of PHYs - btrfs: don't set lock_owner when locking extent buffer for reading - btrfs: fix deadlock with fsync+fiemap+transaction commit - f2fs: attach inline_data after setting compression - iio:humidity:hts221: rearrange iio trigger get and register - iio:chemical:ccs811: rearrange iio trigger get and register - iio:accel:kxcjk-1013: rearrange iio trigger get and register - iio:accel:bma180: rearrange iio trigger get and register - iio:accel:mxc4005: rearrange iio trigger get and register - iio: accel: mma8452: ignore the return value of reset operation - iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up() - iio: trigger: sysfs: fix use-after-free on remove - iio: adc: stm32: fix maximum clock rate for stm32mp15x - iio: imu: inv_icm42600: Fix broken icm42600 (chip id 0 value) - iio: afe: rescale: Fix boolean logic bug - iio: adc: stm32: Fix ADCs iteration in irq handler - iio: adc: stm32: Fix IRQs on STM32F4 by removing custom spurious IRQs message - iio: adc: axp288: Override TS pin bias current for some models - iio: adc: adi-axi-adc: Fix refcount leak in adi_axi_adc_attach_client - iio: adc: ti-ads131e08: add missing fwnode_handle_put() in ads131e08_alloc_channels() - xtensa: xtfpga: Fix refcount leak bug in setup - xtensa: Fix refcount leak bug in time.c - parisc/stifb: Fix fb_is_primary_device() only available with CONFIG_FB_STI - parisc: Enable ARCH_HAS_STRICT_MODULE_RWX - powerpc/microwatt: wire up rng during setup_arch() - powerpc: Enable execve syscall exit tracepoint - powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address - powerpc/powernv: wire up rng during setup_arch - ARM: dts: imx7: Move hsic_phy power domain to HSIC PHY node - ARM: dts: imx6qdl: correct PU regulator ramp delay - arm64: dts: ti: k3-am64-main: Remove support for HS400 speed mode - ARM: exynos: Fix refcount leak in exynos_map_pmu - soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe - ARM: Fix refcount leak in axxia_boot_secondary - memory: samsung: exynos5422-dmc: Fix refcount leak in of_get_dram_timings - ARM: cns3xxx: Fix refcount leak in cns3xxx_init - modpost: fix section mismatch check for exported init/exit sections - ARM: dts: bcm2711-rpi-400: Fix GPIO line names - random: update comment from copy_to_user() -> copy_to_iter() - perf build-id: Fix caching files with a wrong build ID - kbuild: link vmlinux only once for CONFIG_TRIM_UNUSED_KSYMS (2nd attempt) - powerpc/pseries: wire up rng during setup_arch() - upstream stable to v5.15.51 * Miscellaneous Ubuntu changes - [Config] Update config after stable backports -- Timo Aaltonen