This bug was fixed in the package linux-oem-6.1 - 6.1.0-1027.27 --------------- linux-oem-6.1 (6.1.0-1027.27) jammy; urgency=medium * jammy/linux-oem-6.1: 6.1.0-1027.27 -proposed tracker (LP: #2041604) * Packaging resync (LP: #1786013) - [Packaging] resync git-ubuntu-log - [Packaging] resync update-dkms-versions helper - [Packaging] update variants * RTL8111EPP: Fix the network lost after resume with DASH (LP: #2043786) - r8169: add handling DASH when DASH is disabled - r8169: fix network lost after resume on DASH systems * System hang after unplug/plug DP monitor with AMD W7500 card (LP: #2042912) - SAUCE: drm/amd/pm: Fix error of MACO flag setting code * Fix after-suspend-mediacard/sdhc-insert test failed (LP: #2042500) - Revert "PCI/ASPM: Save L1 PM Substates Capability for suspend/resume" - SAUCE: PCI/ASPM: Add back L1 PM Substate save and restore * Jammy update: v6.1.61 upstream stable release (LP: #2042580) - Revert "Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"" - KVM: x86/pmu: Truncate counter value to allowed width on write - mmc: core: Align to common busy polling behaviour for mmc ioctls - mmc: block: ioctl: do write error check for spi - mmc: core: Fix error propagation for some ioctl commands - ASoC: codecs: wcd938x: Convert to platform remove callback returning void - ASoC: codecs: wcd938x: Simplify with dev_err_probe - ASoC: codecs: wcd938x: fix regulator leaks on probe errors - ASoC: codecs: wcd938x: fix runtime PM imbalance on remove - pinctrl: qcom: lpass-lpi: fix concurrent register updates - mcb: Return actual parsed size when reading chameleon table - mcb-lpc: Reallocate memory region to avoid memory overlapping - virtio_balloon: Fix endless deflation and inflation on arm64 - virtio-mmio: fix memory leak of vm_dev - virtio-crypto: handle config changed by work queue - virtio_pci: fix the common cfg map size - vsock/virtio: initialize the_virtio_vsock before using VQs - vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE - arm64: dts: rockchip: Add i2s0-2ch-bus-bclk-off pins to RK3399 - arm64: dts: rockchip: Fix i2s0 pin conflict on ROCK Pi 4 boards - mm: fix vm_brk_flags() to not bail out while holding lock - hugetlbfs: clear resv_map pointer if mmap fails - mm/page_alloc: correct start page when guard page debug is enabled - mm/migrate: fix do_pages_move for compat pointers - hugetlbfs: extend hugetlb_vma_lock to private VMAs - maple_tree: add GFP_KERNEL to allocations in mas_expected_entries() - nfsd: lock_rename() needs both directories to live on the same fs - drm/i915/pmu: Check if pmu is closed before stopping event - drm/amd: Disable ASPM for VI w/ all Intel systems - drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() - ARM: OMAP: timer32K: fix all kernel-doc warnings - firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels() - clk: ti: Fix missing omap4 mcbsp functional clock and aliases - clk: ti: Fix missing omap5 mcbsp functional clock and aliases - r8169: fix the KCSAN reported data-race in rtl_tx() while reading tp->cur_tx - r8169: fix the KCSAN reported data-race in rtl_tx while reading TxDescArray[entry].opts1 - r8169: fix the KCSAN reported data race in rtl_rx while reading desc->opts1 - iavf: initialize waitqueues before starting watchdog_task - i40e: Fix I40E_FLAG_VF_VLAN_PRUNING value - treewide: Spelling fix in comment - igb: Fix potential memory leak in igb_add_ethtool_nfc_entry - neighbour: fix various data-races - igc: Fix ambiguity in the ethtool advertising - net: ethernet: adi: adin1110: Fix uninitialized variable - net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show() - net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg - r8152: Increase USB control msg timeout to 5000ms as per spec - r8152: Run the unload routine if we have errors during probe - r8152: Cancel hw_phy_work if we have an error in probe - r8152: Release firmware if we have an error in probe - tcp: fix wrong RTO timeout when received SACK reneging - gtp: uapi: fix GTPA_MAX - gtp: fix fragmentation needed check with gso - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR - drm/logicvc: Kconfig: select REGMAP and REGMAP_MMIO - iavf: in iavf_down, disable queues when removing the driver - scsi: sd: Introduce manage_shutdown device flag - blk-throttle: check for overflow in calculate_bytes_allowed - kasan: print the original fault addr when access invalid shadow - io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid - iio: afe: rescale: Accept only offset channels - iio: exynos-adc: request second interupt only when touchscreen mode is used - iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature thresholds - iio: adc: xilinx-xadc: Correct temperature offset/scale for UltraScale - i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() - i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() - i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() - i2c: stm32f7: Fix PEC handling in case of SMBUS transfers - i2c: aspeed: Fix i2c bus hang in slave read - tracing/kprobes: Fix the description of variable length arguments - misc: fastrpc: Reset metadata buffer to avoid incorrect free - misc: fastrpc: Free DMA handles for RPC calls with no arguments - misc: fastrpc: Clean buffers on remote invocation failures - misc: fastrpc: Unmap only if buffer is unmapped from DSP - nvmem: imx: correct nregs for i.MX6ULL - nvmem: imx: correct nregs for i.MX6SLL - nvmem: imx: correct nregs for i.MX6UL - x86/cpu: Add model number for Intel Arrow Lake mobile processor - perf/core: Fix potential NULL deref - sparc32: fix a braino in fault handling in csum_and_copy_..._user() - clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name - ext4: add two helper functions extent_logical_end() and pa_logical_end() - ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow - ext4: avoid overlapping preallocations due to overflow - objtool/x86: add missing embedded_insn check - Linux 6.1.61 - upstream stable to v6.1.61 * Jammy update: v6.1.60 upstream stable release (LP: #2042577) - lib/Kconfig.debug: do not enable DEBUG_PREEMPT by default - igc: remove I226 Qbv BaseTime restriction - igc: enable Qbv configuration for 2nd GCL - igc: Remove reset adapter task for i226 during disable tsn config - igc: Add qbv_config_change_errors counter - igc: Add condition for qbv_config_change_errors counter - igc: Fix race condition in PTP tx code - Bluetooth: hci_event: Ignore NULL link key - Bluetooth: Reject connection with the device which has same BD_ADDR - Bluetooth: Fix a refcnt underflow problem for hci_conn - Bluetooth: vhci: Fix race when opening vhci device - Bluetooth: hci_event: Fix coding style - Bluetooth: avoid memcmp() out of bounds warning - ice: fix over-shifted variable - ice: reset first in crash dump kernels - net/smc: return the right falback reason when prefix checks fail - btrfs: fix stripe length calculation for non-zoned data chunk allocation - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() - regmap: fix NULL deref on lookup - KVM: x86: Mask LVTPC when handling a PMI - x86/sev: Disable MMIO emulation from user mode - x86/sev: Check IOBM for IOIO exceptions from user-space - x86/sev: Check for user-space IOIO pointing to kernel space - x86/fpu: Allow caller to constrain xfeatures when copying to uabi buffer - KVM: x86: Constrain guest-supported xfeatures only at KVM_GET_XSAVE{2} - x86: KVM: SVM: add support for Invalid IPI Vector interception - x86: KVM: SVM: refresh AVIC inhibition in svm_leave_nested() - audit,io_uring: io_uring openat triggers audit reference count underflow - tcp: check mptcp-level constraints for backlog coalescing - mptcp: more conservative check for zero probes - fs/ntfs3: Fix possible null-pointer dereference in hdr_find_e() - fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea() - fs/ntfs3: fix deadlock in mark_as_free_ex - netfilter: nft_payload: fix wrong mac header matching - drm/i915: Retry gtt fault when out of fence registers - drm/mediatek: Correctly free sg_table in gem prime vmap - ALSA: hda/realtek - Fixed ASUS platform headset Mic issue - ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx - ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind - ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe errors - ASoC: codecs: wcd938x: drop bogus bind error handling - ASoC: codecs: wcd938x: fix unbind tear down order - ASoC: codecs: wcd938x: fix resource leaks on bind errors - qed: fix LL2 RX buffer allocation - xfrm: fix a data-race in xfrm_lookup_with_ifid() - xfrm: fix a data-race in xfrm_gen_index() - xfrm: interface: use DEV_STATS_INC() - wifi: cfg80211: use system_unbound_wq for wiphy work - net: ipv4: fix return value check in esp_remove_trailer - net: ipv6: fix return value check in esp_remove_trailer - net: rfkill: gpio: prevent value glitch during probe - tcp: fix excessive TLP and RACK timeouts from HZ rounding - tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb - tcp: Fix listen() warning with v4-mapped-v6 address. - tun: prevent negative ifindex - ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr - net: usb: smsc95xx: Fix an error code in smsc95xx_reset() - octeon_ep: update BQL sent bytes before ringing doorbell - i40e: prevent crash on probe if hw registers have invalid values - net: dsa: bcm_sf2: Fix possible memory leak in bcm_sf2_mdio_register() - bonding: Return pointer to data after pull on skb - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve - neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section - selftests: openvswitch: Catch cases where the tests are killed - selftests: netfilter: Run nft_audit.sh in its own netns - netfilter: nft_set_rbtree: .deactivate fails if element has expired - netlink: Correct offload_xstats size - netfilter: nf_tables: do not remove elements if set backend implements .abort - netfilter: nf_tables: revert do not remove elements if set backend implements .abort - net: phy: bcm7xxx: Add missing 16nm EPHY statistics - net: pktgen: Fix interface flags printing - net: avoid UAF on deleted altname - net: fix ifname in netlink ntf during netns move - net: check for altname conflicts when changing netdev's netns - selftests/mm: fix awk usage in charge_reserved_hugetlb.sh and hugetlb_reparenting_test.sh that may cause error - usb: misc: onboard_usb_hub: add Genesys Logic GL850G hub support - usb: misc: onboard_usb_hub: add Genesys Logic GL852G hub support - usb: misc: onboard_usb_hub: add Genesys Logic GL3523 hub support - usb: misc: onboard_hub: add support for Microchip USB2412 USB 2.0 hub - serial: Move uart_change_speed() earlier - serial: Rename uart_change_speed() to uart_change_line_settings() - serial: Reduce spinlocked portion of uart_rs485_config() - serial: 8250: omap: Fix imprecise external abort for omap_8250_pm() - serial: 8250_omap: Fix errors with no_console_suspend - iio: core: introduce iio_device_{claim|release}_buffer_mode() APIs - iio: cros_ec: fix an use-after-free in cros_ec_sensors_push_data() - iio: adc: ad7192: Simplify using devm_regulator_get_enable() - iio: adc: ad7192: Correct reference voltage - pwr-mlxbf: extend Kconfig to include gpio-mlxbf3 dependency - ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone - fs-writeback: do not requeue a clean inode having skipped pages - btrfs: prevent transaction block reserve underflow when starting transaction - btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1 - btrfs: initialize start_slot in btrfs_log_prealloc_extents - i2c: mux: Avoid potential false error message in i2c_mux_add_adapter - overlayfs: set ctime when setting mtime and atime - gpio: timberdale: Fix potential deadlock on &tgpio->lock - ata: libata-core: Fix compilation warning in ata_dev_config_ncq() - ata: libata-eh: Fix compilation warning in ata_eh_link_report() - tracing: relax trace_event_eval_update() execution with cond_resched() - wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len - wifi: iwlwifi: Ensure ack flag is properly cleared. - HID: logitech-hidpp: Add Bluetooth ID for the Logitech M720 Triathlon mouse - HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event - Bluetooth: btusb: add shutdown function for QCA6174 - Bluetooth: Avoid redundant authentication - Bluetooth: hci_core: Fix build warnings - wifi: cfg80211: Fix 6GHz scan configuration - wifi: mac80211: work around Cisco AP 9115 VHT MPDU length - wifi: mac80211: allow transmitting EAPOL frames with tainted key - wifi: cfg80211: avoid leaking stack data into trace - regulator/core: Revert "fix kobject release warning and memory leak in regulator_register()" - sky2: Make sure there is at least one frag_addr available - ipv4/fib: send notify when delete source address routes - drm: panel-orientation-quirks: Add quirk for One Mix 2S - btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c - btrfs: error out when COWing block using a stale transaction - btrfs: error when COWing block from a root that is being deleted - btrfs: error out when reallocating block for defrag using a stale transaction - drm/amd/pm: add unique_id for gc 11.0.3 - HID: multitouch: Add required quirk for Synaptics 0xcd7e device - HID: nintendo: reinitialize USB Pro Controller after resuming from suspend - platform/x86: touchscreen_dmi: Add info for the Positivo C4128B - cpufreq: schedutil: Update next_freq when cpufreq_limits change - fprobe: Pass entry_data to handlers - fprobe: Add nr_maxactive to specify rethook_node pool size - fprobe: Fix to ensure the number of active retprobes is not zero - net: xfrm: skip policies marked as dead while reinserting policies - xfrm6: fix inet6_dev refcount underflow problem - net/mlx5: E-switch, register event handler before arming the event - net/mlx5: Handle fw tracer change ownership event based on MTRC - net/mlx5e: Don't offload internal port if filter device is out device - net/tls: split tls_rx_reader_lock - tcp: allow again tcp_disconnect() when threads are waiting - ice: Remove redundant pci_enable_pcie_error_reporting() - Bluetooth: hci_event: Fix using memcmp when comparing keys - selftests: openvswitch: Add version check for pyroute2 - tcp_bpf: properly release resources on error paths - net/smc: fix smc clc failed issue when netdevice not in init_net - mtd: rawnand: qcom: Unmap the right resource upon probe failure - mtd: rawnand: pl353: Ensure program page operations are successful - mtd: rawnand: marvell: Ensure program page operations are successful - mtd: rawnand: arasan: Ensure program page operations are successful - mtd: spinand: micron: correct bitmask for ecc status - mtd: physmap-core: Restore map_rom fallback - dt-bindings: mmc: sdhci-msm: correct minimum number of clocks - mmc: sdhci-pci-gli: fix LPM negotiation so x86/S0ix SoCs can suspend - mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw - mmc: core: sdio: hold retuning if sdio in 1-bit mode - mmc: core: Capture correct oemid-bits for eMMC cards - Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()" - pNFS: Fix a hang in nfs4_evict_inode() - pNFS/flexfiles: Check the layout validity in ff_layout_mirror_prepare_stats - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server - ACPI: irq: Fix incorrect return value in acpi_register_gsi() - nfs42: client needs to strip file mode's suid/sgid bit after ALLOCATE op - nvme: sanitize metadata bounce buffer for reads - nvme-pci: add BOGUS_NID for Intel 0a54 device - nvmet-auth: complete a request only after freeing the dhchap pointers - nvme-rdma: do not try to stop unallocated queues - KVM: x86/mmu: Stop zapping invalidated TDP MMU roots asynchronously - HID: input: map battery system charging - USB: serial: option: add Telit LE910C4-WWX 0x1035 composition - USB: serial: option: add entry for Sierra EM9191 with new firmware - USB: serial: option: add Fibocom to DELL custom modem FM101R-GL - s390/pci: fix iommu bitmap allocation - selftests/ftrace: Add new test case which checks non unique symbol - s390/cio: fix a memleak in css_alloc_subchannel - platform/surface: platform_profile: Propagate error if profile registration fails - platform/x86: intel-uncore-freq: Conditionally create attribute for read frequency - platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e - platform/x86: asus-wmi: Only map brightness codes when using asus-wmi backlight control - platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c events - gpio: vf610: set value before the direction to avoid a glitch - ASoC: pxa: fix a memory leak in probe() - drm/bridge: ti-sn65dsi86: Associate DSI device lifetime with auxiliary device - serial: 8250: omap: Move uart_write() inside PM section - serial: 8250: omap: convert to modern PM ops - kallsyms: Reduce the memory occupied by kallsyms_seqs_of_names[] - kallsyms: Add helper kallsyms_on_each_match_symbol() - tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols - gpio: vf610: make irq_chip immutable - gpio: vf610: mask the gpio irq in system suspend and support wakeup - phy: mapphone-mdm6600: Fix runtime disable on probe - phy: mapphone-mdm6600: Fix runtime PM for remove - phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins - net: move altnames together with the netdevice - Bluetooth: hci_sock: fix slab oob read in create_monitor_event - Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name - mptcp: avoid sending RST when closing the initial subflow - selftests: mptcp: join: correctly check for no RST - selftests: mptcp: join: no RST when rm subflow/addr - Linux 6.1.60 - upstream stable to v6.1.60 * Jammy update: v6.1.59 upstream stable release (LP: #2042572) - net: mana: Fix TX CQE error handling - mptcp: fix delegated action races - drm/i915: Don't set PIPE_CONTROL_FLUSH_L3 for aux inval - RDMA/cxgb4: Check skb value for failure to allocate - perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7 - platform/x86: think-lmi: Fix reference leak - platform/x86: hp-wmi:: Mark driver struct with __refdata to prevent section mismatch warning - scsi: Do not rescan devices with a suspended queue - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect - quota: Fix slow quotaoff - ASoC: amd: yc: Fix non-functional mic on Lenovo 82YM - ata: libata-scsi: Disable scsi device manage_system_start_stop - net: prevent address rewrite in kernel_bind() - arm64: dts: qcom: sm8150: extend the size of the PDC resource - dt-bindings: interrupt-controller: renesas,rzg2l-irqc: Update description for '#interrupt-cells' property - irqchip: renesas-rzg2l: Fix logic to clear TINT interrupt source - KEYS: trusted: Remove redundant static calls usage - ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset - ALSA: usb-audio: Fix microphone sound on Nexigo webcam. - ALSA: hda/realtek: Change model for Intel RVP board - ASoC: SOF: amd: fix for firmware reload failure after playback - ASoC: simple-card-utils: fixup simple_util_startup() error handling - ASoC: Intel: soc-acpi: Add entry for HDMI_In capture support in MTL match table - ASoC: Intel: sof_sdw: add support for SKU 0B14 - ASoC: Intel: soc-acpi: Add entry for sof_es8336 in MTL match table. - ASoC: Use of_property_read_bool() for boolean properties - ASoC: fsl_sai: MCLK bind with TX/RX enable bit - ASoC: fsl_sai: Don't disable bitclock for i.MX8MP - ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED - ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx - ALSA: hda/realtek - ALC287 merge RTK codec with CS CS35L41 AMP - pinctrl: nuvoton: wpcm450: fix out of bounds write - drm/msm/dp: do not reinitialize phy unless retry during link training - drm/msm/dsi: skip the wait for video mode done if not applicable - drm/msm/dsi: fix irq_of_parse_and_map() error checking - drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow - drm/msm/dp: Add newlines to debug printks - phy: lynx-28g: cancel the CDR check work item on the remove path - phy: lynx-28g: lock PHY while performing CDR lock workaround - phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers - net: dsa: qca8k: fix potential MDIO bus conflict when accessing internal PHYs via management frames - can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior - can: sun4i_can: Only show Kconfig if ARCH_SUNXI is set - arm64: dts: mediatek: mt8195: Set DSU PMU status to fail - ravb: Fix up dma_free_coherent() call in ravb_remove() - ravb: Fix use-after-free issue in ravb_tx_timeout_work() - ieee802154: ca8210: Fix a potential UAF in ca8210_probe - mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type - xen-netback: use default TX queue size for vifs - riscv, bpf: Factor out emit_call for kernel and bpf context - riscv, bpf: Sign-extend return values - drm/vmwgfx: fix typo of sizeof argument - bpf: Fix verifier log for async callback return values - net: refine debug info in skb_checksum_help() - net: macsec: indicate next pn update when offloading - net: phy: mscc: macsec: reject PN update requests - net/mlx5e: macsec: use update_pn flag instead of PN comparation - ixgbe: fix crash with empty VF macvlan list - net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() - net/smc: Fix pos miscalculation in statistics - pinctrl: renesas: rzn1: Enable missing PINMUX - nfc: nci: assert requested protocol is valid - workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() - tcp: enforce receive buffer memory limits by allowing the tcp window to shrink - dmaengine: stm32-mdma: abort resume if no ongoing transfer - dmaengine: stm32-dma: fix stm32_dma_prep_slave_sg in case of MDMA chaining - dmaengine: stm32-dma: fix residue in case of MDMA chaining - dmaengine: stm32-mdma: use Link Address Register to compute residue - dmaengine: stm32-mdma: set in_flight_bytes in case CRQA flag is set - usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer - net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read - usb: dwc3: Soft reset phy on probe for host - usb: cdns3: Modify the return value of cdns_set_active () to void when CONFIG_PM_SLEEP is disabled - usb: hub: Guard against accesses to uninitialized BOS descriptors - usb: musb: Get the musb_qh poniter after musb_giveback - usb: musb: Modify the "HWVers" register address - iio: pressure: bmp280: Fix NULL pointer exception - iio: imu: bno055: Fix missing Kconfig dependencies - iio: adc: imx8qxp: Fix address for command buffer registers - iio: dac: ad3552r: Correct device IDs - iio: admv1013: add mixer_vgate corner cases - iio: pressure: dps310: Adjust Timeout Settings - iio: pressure: ms5611: ms5611_prom_is_valid false negative bug - iio: addac: Kconfig: update ad74413r selections - arm64: dts: mediatek: mt8195-demo: fix the memory size to 8GB - arm64: dts: mediatek: mt8195-demo: update and reorder reserved memory regions - drm/atomic-helper: relax unregistered connector check - drm/amdgpu: add missing NULL check - drm/amd/display: Don't set dpms_off for seamless boot - ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA - ACPI: EC: Add quirk for the HP Pavilion Gaming 15-dk1xxx - ksmbd: not allow to open file if delelete on close bit is set - perf/x86/lbr: Filter vsyscall addresses - x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs - mcb: remove is_added flag from mcb_device struct - thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge - thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding - thunderbolt: Restart XDomain discovery handshake after failure - powerpc/47x: Fix 47x syscall return crash - libceph: use kernel_connect() - ceph: fix incorrect revoked caps assert in ceph_fill_file_size() - ceph: fix type promotion bug on 32bit systems - Input: powermate - fix use-after-free in powermate_config_complete - Input: psmouse - fix fast_reconnect function for PS/2 mode - Input: xpad - add PXN V900 support - Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table - Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx == 0 case - tee: amdtee: fix use-after-free vulnerability in amdtee_close_session - mctp: perform route lookups under a RCU read-side lock - nfp: flower: avoid rmmod nfp crash issues - cgroup: Remove duplicates in cgroup v1 tasks file - dma-buf: add dma_fence_timestamp helper - pinctrl: avoid unsafe code pattern in find_pinctrl() - scsi: ufs: core: Correct clear TM error log - counter: chrdev: fix getting array extensions - counter: microchip-tcb-capture: Fix the use of internal GCLK logic - usb: typec: altmodes/displayport: Signal hpd low when exiting mode - usb: typec: ucsi: Clear EVENT_PENDING bit if ucsi_send_command fails - usb: gadget: udc-xilinx: replace memcpy with memcpy_toio - usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call - usb: cdnsp: Fixes issue with dequeuing not queued requests - x86/alternatives: Disable KASAN in apply_alternatives() - dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq - dmaengine: mediatek: Fix deadlock caused by synchronize_irq() - powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE - powerpc/64e: Fix wrong test in __ptep_test_and_clear_young() - ALSA: hda/realtek - Fixed two speaker platform - Linux 6.1.59 - upstream stable to v6.1.59 * Jammy update: v6.1.58 upstream stable release (LP: #2042569) - Revert "NFS: More fixes for nfs_direct_write_reschedule_io()" - Revert "NFS: Use the correct commit info in nfs_join_page_group()" - Revert "NFS: More O_DIRECT accounting fixes for error paths" - Revert "NFS: Fix O_DIRECT locking issues" - Revert "NFS: Fix error handling for O_DIRECT write scheduling" - lib/test_meminit: fix off-by-one error in test_pages() - Linux 6.1.58 - upstream stable to v6.1.58 -- Timo Aaltonen