This bug was fixed in the package linux-raspi - 5.15.0-1058.61

---------------
linux-raspi (5.15.0-1058.61) jammy; urgency=medium

  * jammy/linux-raspi: 5.15.0-1058.61 -proposed tracker (LP: #2068388)

  * Packaging resync (LP: #1786013)
    - [Packaging] debian.raspi/dkms-versions -- update from kernel-versions
      (main/2024.06.10)

  [ Ubuntu: 5.15.0-115.125 ]

  * jammy/linux: 5.15.0-115.125 -proposed tracker (LP: #2068396)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/2024.06.10)
  * Jammy update: v5.15.158 upstream stable release (LP: #2067974)
    - smb: client: fix rename(2) regression against samba
    - cifs: reinstate original behavior again for forceuid/forcegid
    - HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev->devc
    - HID: logitech-dj: allow mice to use all types of reports
    - arm64: dts: rockchip: enable internal pull-up on Q7_USB_ID for RK3399 Puma
    - arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
    - arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
    - arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
    - arm64: dts: mediatek: mt8183: Add power-domains properity to mfgcfg
    - arm64: dts: mediatek: mt7622: add support for coherent DMA
    - arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
    - arm64: dts: mediatek: mt7622: fix clock controllers
    - arm64: dts: mediatek: mt7622: fix IR nodename
    - arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
    - arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
    - arm64: dts: mediatek: mt2712: fix validation errors
    - ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
    - wifi: iwlwifi: mvm: remove old PASN station when adding a new one
    - wifi: iwlwifi: mvm: return uid from iwl_mvm_build_scan_cmd
    - vxlan: drop packets from invalid src-address
    - mlxsw: core: Unregister EMAD trap using FORWARD action
    - icmp: prevent possible NULL dereferences from icmp_build_probe()
    - bridge/br_netlink.c: no need to return void function
    - NFC: trf7970a: disable all regulators on removal
    - ipv4: check for NULL idev in ip_route_use_hint()
    - net: usb: ax88179_178a: stop lying about skb->truesize
    - net: gtp: Fix Use-After-Free in gtp_dellink
    - ipvs: Fix checksumming on GSO of SCTP packets
    - net: openvswitch: Fix Use-After-Free in ovs_ct_exit
    - mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
    - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
    - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
    - mlxsw: spectrum_acl_tcam: Rate limit error message
    - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
    - mlxsw: spectrum_acl_tcam: Fix warning during rehash
    - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
    - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
    - netfilter: nf_tables: honor table dormant flag from netdev release event
      path
    - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
    - i40e: Report MFS in decimal base instead of hex
    - iavf: Fix TC config comparison with existing adapter TC config
    - net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
    - af_unix: Suppress false-positive lockdep splat for spin_lock() in
      __unix_gc().
    - serial: core: Provide port lock wrappers
    - serial: mxs-auart: add spinlock around changing cts state
    - drm-print: add drm_dbg_driver to improve namespace symmetry
    - drm/vmwgfx: Fix crtc's atomic check conditional
    - Revert "crypto: api - Disallow identical driver names"
    - net/mlx5e: Fix a race in command alloc flow
    - tracing: Show size of requested perf buffer
    - tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker
      together
    - x86/cpu: Fix check for RDPKRU in __show_regs()
    - Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
    - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
    - Bluetooth: qca: fix NULL-deref on non-serdev suspend
    - mmc: sdhci-msm: pervent access to suspended controller
    - btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
    - cpu: Re-enable CPU mitigations by default for !X86 architectures
    - [Configs] Update CPU mitigation configs
    - arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
    - drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
    - drm/amdgpu: Fix leak when GPU memory allocation fails
    - irqchip/gic-v3-its: Prevent double free on error
    - ethernet: Add helper for assigning packet type when dest address does not
      match device address
    - net: b44: set pause params only when interface is up
    - stackdepot: respect __GFP_NOLOCKDEP allocation flag
    - mtd: diskonchip: work around ubsan link failure
    - tcp: Clean up kernel listener's reqsk in inet_twsk_purge()
    - tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge()
    - dmaengine: owl: fix register access functions
    - idma64: Don't try to serve interrupts when device is powered off
    - dma: xilinx_dpdma: Fix locking
    - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
    - riscv: fix VMALLOC_START definition
    - riscv: Fix TASK_SIZE on 64-bit NOMMU
    - i2c: smbus: fix NULL function pointer dereference
    - fbdev: fix incorrect address computation in deferred IO
    - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
    - bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS
    - udp: preserve the connected status if only UDP cmsg
    - serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
    - Linux 5.15.158
  * Jammy update: v5.15.157 upstream stable release (LP: #2067959)
    - ksmbd: don't send oplock break if rename fails
    - ksmbd: validate payload size in ipc response
    - ksmbd: do not set SMB2_GLOBAL_CAP_ENCRYPTION for SMB 3.1.1
    - btrfs: record delayed inode root in transaction
    - SUNRPC: Fix rpcgss_context trace event acceptor field
    - selftests/ftrace: Limit length in subsystem-enable tests
    - bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support
    - bpf: Generalize check_ctx_reg for reuse with other types
    - bpf: Generally fix helper register offset check
    - bpf: Fix out of bounds access for ringbuf helpers
    - bpf: Fix ringbuf memory type confusion when passing to helpers
    - kprobes: Fix possible use-after-free issue on kprobe registration
    - Revert "tracing/trigger: Fix to return error if failed to alloc snapshot"
    - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
    - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
    - netfilter: br_netfilter: skip conntrack input hook for promisc packets
    - netfilter: nf_flow_table: count pending offload workqueue tasks
    - [Config] update configs to enable new NF_FLOW_TABLE_PROCFS
    - netfilter: flowtable: validate pppoe header
    - netfilter: flowtable: incorrect pppoe tuple
    - af_unix: Call manage_oob() for every skb in unix_stream_read_generic().
    - af_unix: Don't peek OOB data without MSG_OOB.
    - tun: limit printing rate when illegal packet received by tun dev
    - net: dsa: mt7530: fix mirroring frames received on local port
    - net: ethernet: ti: am65-cpsw-nuss: cleanup DMA Channels before using them
    - RDMA/rxe: Fix the problem "mutex_destroy missing"
    - RDMA/cm: Print the old state when cm_destroy_id gets timeout
    - RDMA/mlx5: Fix port number for counter query in multi-port configuration
    - s390/qdio: handle deferred cc1
    - s390/cio: fix race condition during online processing
    - drm: nv04: Fix out of bounds access
    - drm/panel: visionox-rm69299: don't unregister DSI device
    - clk: Remove prepare_lock hold assertion in __clk_release()
    - clk: Mark 'all_lists' as const
    - clk: remove extra empty line
    - clk: Print an info line before disabling unused clocks
    - clk: Initialize struct clk_core kref earlier
    - clk: Get runtime PM before walking tree during disable_unused
    - x86/bugs: Fix BHI retpoline check
    - x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ
    - thunderbolt: Avoid notify PM core about runtime PM resume
    - thunderbolt: Fix wake configurations after device unplug
    - comedi: vmk80xx: fix incomplete endpoint checking
    - serial/pmac_zilog: Remove flawed mitigation for rx irq flood
    - USB: serial: option: add Fibocom FM135-GL variants
    - USB: serial: option: add support for Fibocom FM650/FG650
    - USB: serial: option: add Lonsung U8300/U9300 product
    - USB: serial: option: support Quectel EM060K sub-models
    - USB: serial: option: add Rolling RW101-GL and RW135-GL support
    - USB: serial: option: add Telit FN920C04 rmnet compositions
    - usb: dwc2: host: Fix dereference issue in DDMA completion flow.
    - usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport
      error
    - mei: me: disable RPL-S on SPS and IGN firmwares
    - speakup: Avoid crash on very long word
    - fs: sysfs: Fix reference leak in sysfs_break_active_protection()
    - KVM: x86: Snapshot if a vCPU's vendor model is AMD vs. Intel compatible
    - KVM: x86/pmu: Do not mask LVTPC when handling a PMI on AMD platforms
    - arm64: hibernate: Fix level3 translation fault in swsusp_save()
    - init/main.c: Fix potential static_command_line memory overflow
    - drm/vmwgfx: Sort primary plane formats by order of preference
    - nouveau: fix instmem race condition around ptr stores
    - nilfs2: fix OOB in nilfs_set_de_type
    - net: dsa: mt7530: set all CPU ports in MT7531_CPU_PMAP
    - net: dsa: introduce preferred_default_local_cpu_port and use on MT7530
    - net: dsa: mt7530: fix improper frames on all 25MHz and 40MHz XTAL MT7530
    - net: dsa: mt7530: fix enabling EEE on MT7531 switch on all boards
    - Linux 5.15.157
  * [SRU][22.04.4]: megaraid_sas: Critical Bug Fixes (LP: #2046722)
    - scsi: megaraid_sas: Log message when controller reset is requested but not
      issued
    - scsi: megaraid_sas: Driver version update to 07.727.03.00-rc1
  * Jammy update: v5.15.156 upstream stable release (LP: #2065857)
    - batman-adv: Avoid infinite loop trying to resize local TT
    - ring-buffer: Only update pages_touched when a new page is touched
    - Bluetooth: Fix memory leak in hci_req_sync_complete()
    - media: cec: core: remove length check of Timer Status
    - arm64: dts: imx8-ss-conn: fix usdhc wrong lpcg clock order
    - Revert "drm/qxl: simplify qxl_fence_wait"
    - nouveau: fix function cast warning
    - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats()
    - net: openvswitch: fix unwanted error log on timeout policy probing
    - u64_stats: Disable preemption on 32bit UP+SMP PREEMPT_RT during updates.
    - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
    - geneve: fix header validation in geneve[6]_xmit_skb
    - af_unix: Clear stale u->oob_skb.
    - octeontx2-af: Fix NIX SQ mode and BP config
    - ipv6: fib: hide unused 'pn' variable
    - ipv4/route: avoid unused-but-set-variable warning
    - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
    - netfilter: complete validation of user input
    - net/mlx5: Properly link new fs rules into the tree
    - net: sparx5: fix wrong config being used when reconfiguring PCS
    - net: dsa: mt7530: trap link-local frames regardless of ST Port State
    - af_unix: Do not use atomic ops for unix_sk(sk)->inflight.
    - af_unix: Fix garbage collector racing against connect()
    - net: ena: Fix potential sign extension issue
    - net: ena: Wrong missing IO completions check order
    - net: ena: Fix incorrect descriptor free behavior
    - tracing: hide unused ftrace_event_id_fops
    - iommu/vt-d: Allocate local memory for page request queue
    - btrfs: qgroup: correctly model root qgroup rsv in convert
    - drm/client: Fully protect modes[] with dev->mode_config.mutex
    - vhost: Add smp_rmb() in vhost_vq_avail_empty()
    - perf/x86: Fix out of range data
    - x86/cpu: Actually turn off mitigations by default for
      SPECULATION_MITIGATIONS=n
    - selftests: timers: Fix abs() warning in posix_timers test
    - x86/apic: Force native_apic_mem_read() to use the MOV instruction
    - irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
    - x86/bugs: Fix return type of spectre_bhi_state()
    - x86/bugs: Fix BHI documentation
    - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES
    - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr'
    - x86/bugs: Fix BHI handling of RRSBA
    - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation
    - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto
    - [Config] updateconfigs to remove obsolete SPECTRE_BHI_AUTO
    - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with
      CONFIG_MITIGATION_SPECTRE_BHI
    - [Config] updateconfigs to enable new MITIGATION_SPECTRE_BHI
    - drm/i915/cdclk: Fix CDCLK programming order when pipes are active
    - Linux 5.15.156
  * Jammy update: v5.15.155 upstream stable release (LP: #2065805)
    - amdkfd: use calloc instead of kzalloc to avoid integer overflow
    - net: dsa: fix panic when DSA master device unbinds on shutdown
    - wifi: ath9k: fix LNA selection in ath_ant_try_scan()
    - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
    - panic: Flush kernel log buffer at the end
    - cpuidle: Avoid potential overflow in integer multiplication
    - arm64: dts: rockchip: fix rk3328 hdmi ports node
    - arm64: dts: rockchip: fix rk3399 hdmi ports node
    - ionic: set adminq irq affinity
    - pstore/zone: Add a null pointer check to the psz_kmsg_read
    - tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
    - net: pcs: xpcs: Return EINVAL in the internal methods
    - wifi: ath11k: decrease MHI channel buffer length to 8KB
    - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
    - btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
    - btrfs: send: handle path ref underflow in header iterate_inode_ref()
    - net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
    - Bluetooth: btintel: Fix null ptr deref in btintel_read_version
    - Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
    - pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
    - sysv: don't call sb_bread() with pointers_lock held
    - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
    - isofs: handle CDs with bad root inode but good Joliet root directory
    - media: sta2x11: fix irq handler cast
    - ALSA: firewire-lib: handle quirk to calculate payload quadlets as data block
      counter
    - ext4: add a hint for block bitmap corrupt state in mb_groups
    - ext4: forbid commit inconsistent quota data when errors=remount-ro
    - drm/amd/display: Fix nanosec stat overflow
    - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned
      int
    - Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
    - libperf evlist: Avoid out-of-bounds access
    - block: prevent division by zero in blk_rq_stat_sum()
    - RDMA/cm: add timeout to cm_destroy_id wait
    - Input: allocate keycode for Display refresh rate toggle
    - platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi
      Vi8 tablet
    - ktest: force $buildonly = 1 for 'make_warnings_file' test type
    - ring-buffer: use READ_ONCE() to read cpu_buffer->commit_page in concurrent
      environment
    - tools: iio: replace seekdir() in iio_generic_buffer
    - usb: typec: tcpci: add generic tcpci fallback compatible
    - usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
    - ASoC: soc-core.c: Skip dummy codec when adding platforms
    - fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
    - drivers/nvme: Add quirks for device 126f:2262
    - fbmon: prevent division by zero in fb_videomode_from_videomode()
    - netfilter: nf_tables: release batch on table validation from abort path
    - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
    - netfilter: nf_tables: discard table flag update with pending basechain
      deletion
    - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
    - gcc-plugins/stackleak: Ignore .noinstr.text and .entry.text
    - gcc-plugins/stackleak: Avoid .head.text section
    - virtio: reenable config if freezing device failed
    - x86/mm/pat: fix VM_PAT handling in COW mappings
    - randomize_kstack: Improve entropy diffusion
    - platform/x86: intel-vbtn: Update tablet mode switch at end of probe
    - Bluetooth: btintel: Fixe build regression
    - VMCI: Fix possible memcpy() run-time warning in
      vmci_datagram_invoke_guest_handler()
    - Linux 5.15.155
  * Jammy update: v5.15.154 upstream stable release (LP: #2065435)
    - Documentation/hw-vuln: Update spectre doc
    - x86/cpu: Support AMD Automatic IBRS
    - media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
    - clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
    - smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
    - smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
    - arm: dts: marvell: Fix maxium->maxim typo in brownstone dts
    - drm/vmwgfx: Fix possible null pointer derefence with invalid contexts
    - pci_iounmap(): Fix MMIO mapping leak
    - KVM: Always flush async #PF workqueue when vCPU is being destroyed
    - sparc64: NMI watchdog: fix return value of __setup handler
    - sparc: vDSO: fix return value of __setup handler
    - crypto: qat - fix double free during reset
    - crypto: qat - resolve race condition during AER recovery
    - selftests/mqueue: Set timeout to 180 seconds
    - ext4: correct best extent lstart adjustment logic
    - block: Clear zone limits for a non-zoned stacked queue
    - kasan: test: add memcpy test that avoids out-of-bounds write
    - kasan/test: avoid gcc warning for intentional overflow
    - bounds: support non-power-of-two CONFIG_NR_CPUS
    - fat: fix uninitialized field in nostale filehandles
    - ubifs: Set page uptodate in the correct place
    - ubi: Check for too small LEB size in VTBL code
    - ubi: correct the calculation of fastmap size
    - mtd: rawnand: meson: fix scrambling mode value in command macro
    - parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt
      macros
    - parisc: Fix ip_fast_csum
    - parisc: Fix csum_ipv6_magic on 32-bit systems
    - parisc: Fix csum_ipv6_magic on 64-bit systems
    - parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
    - PM: suspend: Set mem_sleep_current during kernel command line setup
    - clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
    - clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
    - clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
    - clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
    - usb: xhci: Add error handling in xhci_map_urb_for_dma
    - powerpc/fsl: Fix mfpmr build errors with newer binutils
    - USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
    - USB: serial: add device ID for VeriFone adapter
    - USB: serial: cp210x: add ID for MGP Instruments PDS100
    - USB: serial: option: add MeiG Smart SLM320 product
    - USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
    - PM: sleep: wakeirq: fix wake irq warning in system suspend
    - mmc: tmio: avoid concurrent runs of mmc_request_done()
    - fuse: fix root lookup with nonzero generation
    - fuse: don't unhash root
    - usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
    - printk/console: Split out code that enables default console
    - serial: Lock console when calling into driver before registration
    - btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
    - PCI: Drop pci_device_remove() test of pci_dev->driver
    - PCI/PM: Drain runtime-idle callbacks before driver removal
    - PCI: Work around Intel I210 ROM BAR overlap defect
    - PCI/ASPM: Make Intel DG2 L1 acceptable latency unlimited
    - PCI/DPC: Quirk PIO log size for certain Intel Root Ports
    - PCI/DPC: Quirk PIO log size for Intel Raptor Lake Root Ports
    - dm-raid: fix lockdep waring in "pers->hot_add_disk"
    - mac802154: fix llsec key resources release in mac802154_llsec_key_del
    - swap: comments get_swap_device() with usage rule
    - mm: swap: fix race between free_swap_and_cache() and swapoff()
    - mmc: core: Fix switch on gp3 partition
    - drm/etnaviv: Restore some id values
    - landlock: Warn once if a Landlock action is requested while disabled
    - hwmon: (amc6821) add of_match table
    - ext4: fix corruption during on-line resize
    - nvmem: meson-efuse: fix function pointer type mismatch
    - slimbus: core: Remove usage of the deprecated ida_simple_xx() API
    - phy: tegra: xusb: Add API to retrieve the port number of phy
    - usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
    - speakup: Fix 8bit characters from direct synth
    - PCI/AER: Block runtime suspend when handling errors
    - nfs: fix UAF in direct writes
    - kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
    - PCI: dwc: endpoint: Fix advertised resizable BAR size
    - vfio/platform: Disable virqfds on cleanup
    - ksmbd: retrieve number of blocks using vfs_getattr in
      set_file_allocation_info
    - ring-buffer: Fix waking up ring buffer readers
    - ring-buffer: Do not set shortest_full when full target is hit
    - ring-buffer: Fix resetting of shortest_full
    - ring-buffer: Fix full_waiters_pending in poll
    - ring-buffer: Use wait_event_interruptible() in ring_buffer_wait()
    - soc: fsl: qbman: Always disable interrupts when taking cgr_lock
    - soc: fsl: qbman: Add helper for sanity checking cgr ops
    - soc: fsl: qbman: Add CGR update function
    - soc: fsl: qbman: Use raw spinlock for cgr_lock
    - s390/zcrypt: fix reference counting on zcrypt card objects
    - drm/panel: do not return negative error codes from drm_panel_get_modes()
    - drm/exynos: do not return negative values from .get_modes()
    - drm/imx/ipuv3: do not return negative values from .get_modes()
    - drm/vc4: hdmi: do not return negative values from .get_modes()
    - memtest: use {READ,WRITE}_ONCE in memory scanning
    - nilfs2: fix failure to detect DAT corruption in btree and direct mappings
    - nilfs2: prevent kernel bug at submit_bh_wbc()
    - cpufreq: dt: always allocate zeroed cpumask
    - x86/CPU/AMD: Update the Zenbleed microcode revisions
    - NFSD: Fix nfsd_clid_class use of __string_len() macro
    - net: hns3: tracing: fix hclgevf trace event strings
    - wireguard: netlink: check for dangling peer via is_dead instead of empty
      list
    - wireguard: netlink: access device through ctx instead of peer
    - ahci: asm1064: correct count of reported ports
    - ahci: asm1064: asm1166: don't limit reported ports
    - drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
    - drm/amd/display: Return the correct HDCP error code
    - drm/amd/display: Fix noise issue on HDMI AV mute
    - dm snapshot: fix lockup in dm_exception_table_exit
    - x86/pm: Work around false positive kmemleak report in msr_build_context()
    - net: ravb: Add R-Car Gen4 support
    - cpufreq: brcmstb-avs-cpufreq: fix up "add check for cpufreq_cpu_get's return
      value"
    - netfilter: nf_tables: reject constant set with timeout
    - Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of
      memory
    - xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
    - KVM: SVM: Flush pages under kvm->lock to fix UAF in
      svm_register_enc_region()
    - tracing: Use .flush() call to wake up readers
    - drm/i915: Check before removing mm notifier
    - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
    - usb: gadget: ncm: Fix handling of zero block length packets
    - usb: port: Don't try to peer unused USB ports based on location
    - tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
    - mei: me: add arrow lake point S DID
    - mei: me: add arrow lake point H DID
    - vt: fix unicode buffer corruption when deleting characters
    - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
    - tee: optee: Fix kernel panic caused by incorrect error handling
    - i2c: i801: Avoid potential double call to gpiod_remove_lookup_table
    - xen/events: close evtchn after mapping cleanup
    - clocksource/drivers/arm_global_timer: Fix maximum prescaler value
    - entry: Respect changes to system call number by trace_sys_enter()
    - minmax: add umin(a, b) and umax(a, b)
    - swiotlb: Fix alignment checks when both allocation and DMA masks are present
    - dma-mapping: add dma_opt_mapping_size()
    - dma-iommu: add iommu_dma_opt_mapping_size()
    - iommu/dma: Force swiotlb_max_mapping_size on an untrusted device
    - printk: Update @console_may_schedule in console_trylock_spinning()
    - tty: serial: imx: Fix broken RS485
    - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
    - x86/bugs: Add asm helpers for executing VERW
    - x86/entry_64: Add VERW just before userspace transition
    - x86/entry_32: Add VERW just before userspace transition
    - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key
    - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH
    - KVM/VMX: Move VERW closer to VMentry for MDS mitigation
    - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set
    - Documentation/hw-vuln: Add documentation for RFDS
    - x86/rfds: Mitigate Register File Data Sampling (RFDS)
    - [Config] updateconfigs for MITIGATION_RFDS
    - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests
    - arch: Introduce CONFIG_FUNCTION_ALIGNMENT
    - [Config] updateconfigs for FUNCTION_ALIGNMENT
    - x86/asm: Differentiate between code and function alignment
    - x86/alternatives: Introduce int3_emulate_jcc()
    - x86/alternatives: Teach text_poke_bp() to patch Jcc.d32 instructions
    - x86/static_call: Add support for Jcc tail-calls
    - fsnotify: pass data_type to fsnotify_name()
    - fsnotify: pass dentry instead of inode data
    - fsnotify: clarify contract for create event hooks
    - fsnotify: Don't insert unmergeable events in hashtable
    - fanotify: Fold event size calculation to its own function
    - fanotify: Split fsid check from other fid mode checks
    - inotify: Don't force FS_IN_IGNORED
    - fsnotify: Add helper to detect overflow_event
    - fsnotify: Add wrapper around fsnotify_add_event
    - fsnotify: Retrieve super block from the data field
    - fsnotify: Protect fsnotify_handle_inode_event from no-inode events
    - fsnotify: Pass group argument to free_event
    - fanotify: Support null inode event in fanotify_dfid_inode
    - fanotify: Allow file handle encoding for unhashed events
    - fanotify: Encode empty file handle when no inode is provided
    - fanotify: Require fid_mode for any non-fd event
    - fsnotify: Support FS_ERROR event type
    - fanotify: Reserve UAPI bits for FAN_FS_ERROR
    - fanotify: Pre-allocate pool of error events
    - fanotify: Support enqueueing of error events
    - fanotify: Support merging of error events
    - fanotify: Wrap object_fh inline space in a creator macro
    - fanotify: Add helpers to decide whether to report FID/DFID
    - fanotify: WARN_ON against too large file handles
    - fanotify: Report fid info for file related file system errors
    - fanotify: Emit generic error info for error event
    - fanotify: Allow users to request FAN_FS_ERROR events
    - ext4: Send notifications on error
    - docs: Document the FAN_FS_ERROR event
    - NFS: Remove unnecessary TRACE_DEFINE_ENUM()s
    - SUNRPC: Tracepoints should display tk_pid and cl_clid as a fixed-size field
    - NFS: Move generic FS show macros to global header
    - NFS: Move NFS protocol display macros to global header
    - NFSD: Optimize DRC bucket pruning
    - NFSD: move filehandle format declarations out of "uapi".
    - NFSD: drop support for ancient filehandles
    - NFSD: simplify struct nfsfh
    - NFSD: Initialize pointer ni with NULL and not plain integer 0
    - SUNRPC: Replace the "__be32 *p" parameter to .pc_decode
    - SUNRPC: Change return value type of .pc_decode
    - NFSD: Save location of NFSv4 COMPOUND status
    - SUNRPC: Replace the "__be32 *p" parameter to .pc_encode
    - SUNRPC: Change return value type of .pc_encode
    - nfsd: update create verifier comment
    - NFSD:fix boolreturn.cocci warning
    - nfsd4: remove obselete comment
    - ext4: fix error code saved on super block during file system abort
    - fsnotify: clarify object type argument
    - fsnotify: separate mark iterator type from object type enum
    - fanotify: introduce group flag FAN_REPORT_TARGET_FID
    - fsnotify: generate FS_RENAME event with rich information
    - fanotify: use macros to get the offset to fanotify_info buffer
    - fanotify: use helpers to parcel fanotify_info buffer
    - fanotify: support secondary dir fh and name in fanotify_info
    - fanotify: record old and new parent and name in FAN_RENAME event
    - fanotify: record either old name new name or both for FAN_RENAME
    - fanotify: report old and/or new parent+name in FAN_RENAME event
    - fanotify: wire up FAN_RENAME event
    - exit: Implement kthread_exit
    - exit: Rename module_put_and_exit to module_put_and_kthread_exit
    - NFSD: handle errors better in write_ports_addfd()
    - SUNRPC: change svc_get() to return the svc.
    - SUNRPC/NFSD: clean up get/put functions.
    - SUNRPC: stop using ->sv_nrthreads as a refcount
    - nfsd: make nfsd_stats.th_cnt atomic_t
    - SUNRPC: use sv_lock to protect updates to sv_nrthreads.
    - NFSD: narrow nfsd_mutex protection in nfsd thread
    - NFSD: Make it possible to use svc_set_num_threads_sync
    - SUNRPC: discard svo_setup and rename svc_set_num_threads_sync()
    - NFSD: simplify locking for network notifier.
    - lockd: introduce nlmsvc_serv
    - lockd: simplify management of network status notifiers
    - lockd: move lockd_start_svc() call into lockd_create_svc()
    - lockd: move svc_exit_thread() into the thread
    - lockd: introduce lockd_put()
    - lockd: rename lockd_create_svc() to lockd_get()
    - SUNRPC: move the pool_map definitions (back) into svc.c
    - SUNRPC: always treat sv_nrpools==1 as "not pooled"
    - lockd: use svc_set_num_threads() for thread start and stop
    - NFS: switch the callback service back to non-pooled.
    - NFSD: Remove be32_to_cpu() from DRC hash function
    - NFSD: Fix inconsistent indenting
    - NFSD: simplify per-net file cache management
    - NFSD: Combine XDR error tracepoints
    - nfsd: improve stateid access bitmask documentation
    - NFSD: De-duplicate nfsd4_decode_bitmap4()
    - nfs: block notification on fs with its own ->lock
    - nfsd4: add refcount for nfsd4_blocked_lock
    - nfsd: map EBADF
    - nfsd: Add errno mapping for EREMOTEIO
    - nfsd: Retry once in nfsd_open on an -EOPENSTALE return
    - NFSD: Clean up nfsd_vfs_write()
    - NFSD: De-duplicate net_generic(SVC_NET(rqstp), nfsd_net_id)
    - nfsd: Add a tracepoint for errors in nfsd4_clone_file_range()
    - NFSD: Write verifier might go backwards
    - NFSD: Clean up the nfsd_net::nfssvc_boot field
    - NFSD: Rename boot verifier functions
    - NFSD: Trace boot verifier resets
    - NFSD: Move fill_pre_wcc() and fill_post_wcc()
    - fsnotify: invalidate dcache before IN_DELETE event
    - NFSD: Deprecate NFS_OFFSET_MAX
    - nfsd: Add support for the birth time attribute
    - orDate: Thu Sep 30 19:19:57 2021 -0400
    - NFSD: Skip extra computation for RC_NOCACHE case
    - NFSD: Streamline the rare "found" case
    - NFSD: Remove NFSD_PROC_ARGS_* macros
    - SUNRPC: Remove the .svo_enqueue_xprt method
    - SUNRPC: Merge svc_do_enqueue_xprt() into svc_enqueue_xprt()
    - SUNRPC: Remove svo_shutdown method
    - SUNRPC: Rename svc_create_xprt()
    - SUNRPC: Rename svc_close_xprt()
    - SUNRPC: Remove svc_shutdown_net()
    - NFSD: Remove svc_serv_ops::svo_module
    - NFSD: Move svc_serv_ops::svo_function into struct svc_serv
    - NFSD: Remove CONFIG_NFSD_V3
    - [Config] updateconfigs for NFSD_V3
    - NFSD: Clean up _lm_ operation names
    - nfsd: fix using the correct variable for sizeof()
    - fsnotify: fix merge with parent's ignored mask
    - fsnotify: optimize FS_MODIFY events with no ignored masks
    - fsnotify: remove redundant parameter judgment
    - nfsd: Fix a write performance regression
    - nfsd: Clean up nfsd_file_put()
    - fanotify: do not allow setting dirent events in mask of non-dir
    - fs/lock: documentation cleanup. Replace inode->i_lock with flc_lock.
    - inotify: move control flags from mask to mark flags
    - fsnotify: pass flags argument to fsnotify_alloc_group()
    - fsnotify: make allow_dups a property of the group
    - fsnotify: create helpers for group mark_mutex lock
    - inotify: use fsnotify group lock helpers
    - nfsd: use fsnotify group lock helpers
    - dnotify: use fsnotify group lock helpers
    - fsnotify: allow adding an inode mark without pinning inode
    - fanotify: create helper fanotify_mark_user_flags()
    - fanotify: factor out helper fanotify_mark_update_flags()
    - fanotify: implement "evictable" inode marks
    - fanotify: use fsnotify group lock helpers
    - fanotify: enable "evictable" inode marks
    - fsnotify: introduce mark type iterator
    - fsnotify: consistent behavior for parent not watching children
    - fanotify: fix incorrect fmode_t casts
    - NFSD: Clean up nfsd_splice_actor()
    - NFSD: add courteous server support for thread with only delegation
    - NFSD: add support for share reservation conflict to courteous server
    - NFSD: move create/destroy of laundry_wq to init_nfsd and exit_nfsd
    - fs/lock: add helper locks_owner_has_blockers to check for blockers
    - fs/lock: add 2 callbacks to lock_manager_operations to resolve conflict
    - NFSD: add support for lock conflict to courteous server
    - NFSD: Show state of courtesy client in client info
    - NFSD: Clean up nfsd3_proc_create()
    - NFSD: Avoid calling fh_drop_write() twice in do_nfsd_create()
    - NFSD: Refactor nfsd_create_setattr()
    - NFSD: Refactor NFSv3 CREATE
    - NFSD: Refactor NFSv4 OPEN(CREATE)
    - NFSD: Remove do_nfsd_create()
    - NFSD: Clean up nfsd_open_verified()
    - NFSD: Instantiate a struct file when creating a regular NFSv4 file
    - NFSD: Remove dprintk call sites from tail of nfsd4_open()
    - NFSD: Fix whitespace
    - NFSD: Move documenting comment for nfsd4_process_open2()
    - NFSD: Trace filecache opens
    - SUNRPC: Use RMW bitops in single-threaded hot paths
    - nfsd: Unregister the cld notifier when laundry_wq create failed
    - nfsd: Fix null-ptr-deref in nfsd_fill_super()
    - NFSD: Modernize nfsd4_release_lockowner()
    - NFSD: Add documenting comment for nfsd4_release_lockowner()
    - NFSD: nfsd_file_put() can sleep
    - NFSD: Fix potential use-after-free in nfsd_file_put()
    - NFS: restore module put when manager exits.
    - fanotify: refine the validation checks on non-dir inode mask
    - NFSD: Decode NFSv4 birth time attribute
    - fs: inotify: Fix typo in inotify comment
    - fanotify: prepare for setting event flags in ignore mask
    - fanotify: cleanups for fanotify_mark() input validations
    - fanotify: introduce FAN_MARK_IGNORE
    - fsnotify: Fix comment typo
    - NLM: Defend against file_lock changes after vfs_test_lock()
    - NFSD: Instrument fh_verify()
    - NFSD: Fix space and spelling mistake
    - nfsd: remove redundant assignment to variable len
    - NFSD: Demote a WARN to a pr_warn()
    - NFSD: Report filecache LRU size
    - NFSD: Report count of calls to nfsd_file_acquire()
    - NFSD: Report count of freed filecache items
    - NFSD: Report average age of filecache items
    - NFSD: Add nfsd_file_lru_dispose_list() helper
    - NFSD: Refactor nfsd_file_gc()
    - NFSD: Refactor nfsd_file_lru_scan()
    - NFSD: Report the number of items evicted by the LRU walk
    - NFSD: Record number of flush calls
    - NFSD: Zero counters when the filecache is re-initialized
    - NFSD: Hook up the filecache stat file
    - NFSD: WARN when freeing an item still linked via nf_lru
    - NFSD: Trace filecache LRU activity
    - NFSD: Leave open files out of the filecache LRU
    - NFSD: Fix the filecache LRU shrinker
    - NFSD: Never call nfsd_file_gc() in foreground paths
    - NFSD: No longer record nf_hashval in the trace log
    - NFSD: Remove lockdep assertion from unhash_and_release_locked()
    - NFSD: nfsd_file_unhash can compute hashval from nf->nf_inode
    - NFSD: Refactor __nfsd_file_close_inode()
    - NFSD: nfsd_file_hash_remove can compute hashval
    - NFSD: Remove nfsd_file::nf_hashval
    - NFSD: Replace the "init once" mechanism
    - NFSD: Set up an rhashtable for the filecache
    - NFSD: Convert the filecache to use rhashtable
    - NFSD: Clean up unused code after rhashtable conversion
    - NFSD: Separate tracepoints for acquire and create
    - NFSD: Move nfsd_file_trace_alloc() tracepoint
    - NFSD: NFSv4 CLOSE should release an nfsd_file immediately
    - NFSD: Ensure nf_inode is never dereferenced
    - NFSD: refactoring v4 specific code to a helper in nfs4state.c
    - NFSD: keep track of the number of v4 clients in the system
    - NFSD: limit the number of v4 clients to 1024 per 1GB of system memory
    - nfsd: silence extraneous printk on nfsd.ko insertion
    - NFSD: Optimize nfsd4_encode_operation()
    - NFSD: Optimize nfsd4_encode_fattr()
    - NFSD: Clean up SPLICE_OK in nfsd4_encode_read()
    - NFSD: Add an nfsd4_read::rd_eof field
    - NFSD: Optimize nfsd4_encode_readv()
    - NFSD: Simplify starting_len
    - NFSD: Use xdr_pad_size()
    - NFSD: Clean up nfsd4_encode_readlink()
    - NFSD: Fix strncpy() fortify warning
    - NFSD: nfserrno(-ENOMEM) is nfserr_jukebox
    - NFSD: Shrink size of struct nfsd4_copy_notify
    - NFSD: Shrink size of struct nfsd4_copy
    - NFSD: Reorder the fields in struct nfsd4_op
    - NFSD: Make nfs4_put_copy() static
    - NFSD: Replace boolean fields in struct nfsd4_copy
    - NFSD: Refactor nfsd4_cleanup_inter_ssc() (1/2)
    - NFSD: Refactor nfsd4_cleanup_inter_ssc() (2/2)
    - NFSD: Refactor nfsd4_do_copy()
    - NFSD: Remove kmalloc from nfsd4_do_async_copy()
    - NFSD: Add nfsd4_send_cb_offload()
    - NFSD: Move copy offload callback arguments into a separate structure
    - NFSD: drop fh argument from alloc_init_deleg
    - NFSD: verify the opened dentry after setting a delegation
    - NFSD: introduce struct nfsd_attrs
    - NFSD: set attributes when creating symlinks
    - NFSD: add security label to struct nfsd_attrs
    - NFSD: add posix ACLs to struct nfsd_attrs
    - NFSD: change nfsd_create()/nfsd_symlink() to unlock directory before
      returning.
    - NFSD: always drop directory lock in nfsd_unlink()
    - NFSD: only call fh_unlock() once in nfsd_link()
    - NFSD: reduce locking in nfsd_lookup()
    - NFSD: use explicit lock/unlock for directory ops
    - NFSD: use (un)lock_inode instead of fh_(un)lock for file operations
    - NFSD: discard fh_locked flag and fh_lock/fh_unlock
    - NFSD: fix regression with setting ACLs.
    - nfsd_splice_actor(): handle compound pages
    - NFSD: move from strlcpy with unused retval to strscpy
    - lockd: move from strlcpy with unused retval to strscpy
    - NFSD enforce filehandle check for source file in COPY
    - NFSD: remove redundant variable status
    - nfsd: Avoid some useless tests
    - nfsd: Propagate some error code returned by memdup_user()
    - NFSD: Increase NFSD_MAX_OPS_PER_COMPOUND
    - NFSD: drop fname and flen args from nfsd_create_locked()
    - nfsd: clean up mounted_on_fileid handling
    - nfsd: remove nfsd4_prepare_cb_recall() declaration
    - NFSD: Replace dprintk() call site in fh_verify()
    - NFSD: Trace NFSv4 COMPOUND tags
    - NFSD: Add tracepoints to report NFSv4 callback completions
    - NFSD: Add a mechanism to wait for a DELEGRETURN
    - NFSD: Refactor nfsd_setattr()
    - NFSD: Make nfsd4_setattr() wait before returning NFS4ERR_DELAY
    - NFSD: Make nfsd4_rename() wait before returning NFS4ERR_DELAY
    - NFSD: Make nfsd4_remove() wait before returning NFS4ERR_DELAY
    - NFSD: keep track of the number of courtesy clients in the system
    - NFSD: add shrinker to reap courtesy clients on low memory condition
    - SUNRPC: Parametrize how much of argsize should be zeroed
    - NFSD: Reduce amount of struct nfsd4_compoundargs that needs clearing
    - NFSD: Refactor common code out of dirlist helpers
    - NFSD: Use xdr_inline_decode() to decode NFSv3 symlinks
    - NFSD: Clean up WRITE arg decoders
    - NFSD: Clean up nfs4svc_encode_compoundres()
    - NFSD: Remove unused nfsd4_compoundargs::cachetype field
    - NFSD: Pack struct nfsd4_compoundres
    - nfsd: use DEFINE_PROC_SHOW_ATTRIBUTE to define nfsd_proc_ops
    - nfsd: use DEFINE_SHOW_ATTRIBUTE to define export_features_fops and
      supported_enctypes_fops
    - nfsd: use DEFINE_SHOW_ATTRIBUTE to define client_info_fops
    - nfsd: use DEFINE_SHOW_ATTRIBUTE to define nfsd_reply_cache_stats_fops
    - nfsd: use DEFINE_SHOW_ATTRIBUTE to define nfsd_file_cache_stats_fops
    - NFSD: Rename the fields in copy_stateid_t
    - nfsd: only fill out return pointer on success in nfsd4_lookup_stateid
    - nfsd: fix comments about spinlock handling with delegations
    - nfsd: make nfsd4_run_cb a bool return function
    - nfsd: extra checks when freeing delegation stateids
    - fs/notify: constify path
    - fsnotify: remove unused declaration
    - fanotify: Remove obsoleted fanotify_event_has_path()
    - nfsd: fix nfsd_file_unhash_and_dispose
    - nfsd: rework hashtable handling in nfsd_do_file_acquire
    - NFSD: unregister shrinker when nfsd_init_net() fails
    - nfsd: ensure we always call fh_verify_error tracepoint
    - nfsd: fix net-namespace logic in __nfsd_file_cache_purge
    - nfsd: fix use-after-free in nfsd_file_do_acquire tracepoint
    - nfsd: put the export reference in nfsd4_verify_deleg_dentry
    - NFSD: Fix trace_nfsd_fh_verify_err() crasher
    - NFSD: Fix reads with a non-zero offset that don't end on a page boundary
    - lockd: use locks_inode_context helper
    - nfsd: use locks_inode_context helper
    - NFSD: Simplify READ_PLUS
    - NFSD: Remove redundant assignment to variable host_err
    - NFSD: Finish converting the NFSv3 GETACL result encoder
    - nfsd: ignore requests to disable unsupported versions
    - nfsd: move nfserrno() to vfs.c
    - nfsd: allow disabling NFSv2 at compile time
    - [Config] updateconfigs for NFSD_V2
    - exportfs: use pr_debug for unreachable debug statements
    - NFSD: Pass the target nfsd_file to nfsd_commit()
    - NFSD: Revert "NFSD: NFSv4 CLOSE should release an nfsd_file immediately"
    - NFSD: Add an NFSD_FILE_GC flag to enable nfsd_file garbage collection
    - NFSD: Flesh out a documenting comment for filecache.c
    - NFSD: Clean up nfs4_preprocess_stateid_op() call sites
    - NFSD: Trace stateids returned via DELEGRETURN
    - NFSD: Trace delegation revocations
    - NFSD: Use const pointers as parameters to fh_ helpers
    - NFSD: Update file_hashtbl() helpers
    - NFSD: Clean up nfsd4_init_file()
    - NFSD: Add a nfsd4_file_hash_remove() helper
    - NFSD: Clean up find_or_add_file()
    - NFSD: Refactor find_file()
    - NFSD: Use rhashtable for managing nfs4_file objects
    - NFSD: Fix licensing header in filecache.c
    - nfsd: remove the pages_flushed statistic from filecache
    - nfsd: reorganize filecache.c
    - filelock: add a new locks_inode_context accessor function
    - nfsd: fix up the filecache laundrette scheduling
    - NFSD: Add an nfsd_file_fsync tracepoint
    - nfsd: return error if nfs4_setacl fails
    - NFSD: Use struct_size() helper in alloc_session()
    - lockd: set missing fl_flags field when retrieving args
    - lockd: ensure we use the correct file descriptor when unlocking
    - lockd: fix file selection in nlmsvc_cancel_blocked
    - trace: Relocate event helper files
    - NFSD: refactoring courtesy_client_reaper to a generic low memory shrinker
    - NFSD: add support for sending CB_RECALL_ANY
    - NFSD: add delegation reaper to react to low memory condition
    - NFSD: add CB_RECALL_ANY tracepoints
    - NFSD: Use only RQ_DROPME to signal the need to drop a reply
    - NFSD: Avoid clashing function prototypes
    - nfsd: rework refcounting in filecache
    - nfsd: fix handling of cached open files in nfsd4_open codepath
    - Revert "SUNRPC: Use RMW bitops in single-threaded hot paths"
    - NFSD: Use set_bit(RQ_DROPME)
    - NFSD: register/unregister of nfsd-client shrinker at nfsd startup/shutdown
      time
    - NFSD: replace delayed_work with work_struct for nfsd_client_shrinker
    - nfsd: don't free files unconditionally in __nfsd_file_cache_purge
    - nfsd: don't destroy global nfs4_file table in per-net shutdown
    - NFSD: enhance inter-server copy cleanup
    - nfsd: allow nfsd_file_get to sanely handle a NULL pointer
    - nfsd: clean up potential nfsd_file refcount leaks in COPY codepath
    - NFSD: fix leaked reference count of nfsd4_ssc_umount_item
    - nfsd: don't hand out delegation on setuid files being opened for write
    - NFSD: fix problems with cleanup on errors in nfsd4_copy
    - nfsd: fix courtesy client with deny mode handling in nfs4_upgrade_open
    - nfsd: don't fsync nfsd_files on last close
    - NFSD: copy the whole verifier in nfsd_copy_write_verifier
    - NFSD: Protect against filesystem freezing
    - nfsd: don't replace page in rq_pages if it's a continuation of last page
    - nfsd: call op_release, even when op_func returns an error
    - nfsd: don't open-code clear_and_wake_up_bit
    - nfsd: NFSD_FILE_KEY_INODE only needs to find GC'ed entries
    - nfsd: simplify test_bit return in NFSD_FILE_KEY_FULL comparator
    - nfsd: don't kill nfsd_files because of lease break error
    - nfsd: add some comments to nfsd_file_do_acquire
    - nfsd: don't take/put an extra reference when putting a file
    - nfsd: update comment over __nfsd_file_cache_purge
    - nfsd: allow reaping files still under writeback
    - NFSD: Convert filecache to rhltable
    - nfsd: simplify the delayed disposal list code
    - NFSD: Fix problem of COMMIT and NFS4ERR_DELAY in infinite loop
    - nfsd: make a copy of struct iattr before calling notify_change
    - nfsd: fix double fget() bug in __write_ports_addfd()
    - lockd: drop inappropriate svc_get() from locked_get()
    - NFSD: Add an nfsd4_encode_nfstime4() helper
    - nfsd: Fix creation time serialization order
    - nfsd: Simplify code around svc_exit_thread() call in nfsd()
    - nfsd: separate nfsd_last_thread() from nfsd_put()
    - Documentation: Add missing documentation for EXPORT_OP flags
    - NFSD: fix possible oops when nfsd/pool_stats is closed.
    - nfsd: call nfsd_last_thread() before final nfsd_put()
    - nfsd: drop the nfsd_put helper
    - nfsd: fix RELEASE_LOCKOWNER
    - nfsd: don't take fi_lock in nfsd_break_deleg_cb()
    - nfsd: don't call locks_release_private() twice concurrently
    - nfsd: Fix a regression in nfsd_setattr()
    - perf/core: Fix reentry problem in perf_output_read_group()
    - efivarfs: Request at most 512 bytes for variable names
    - powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
    - selftests: mptcp: diag: return KSFT_FAIL not test_cnt
    - vfio/pci: Disable auto-enable of exclusive INTx IRQ
    - vfio/pci: Lock external INTx masking ops
    - vfio: Introduce interface to flush virqfd inject workqueue
    - vfio/pci: Create persistent INTx handler
    - vfio/platform: Create persistent IRQ handlers
    - vfio/fsl-mc: Block calling interrupt handler without trigger
    - serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
    - mm/migrate: set swap entry values of THP tail pages properly.
    - init: open /initrd.image with O_LARGEFILE
    - btrfs: zoned: use zone aware sb location for scrub
    - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
    - exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
    - hexagon: vmlinux.lds.S: handle attributes section
    - mmc: core: Initialize mmc_blk_ioc_data
    - mmc: core: Avoid negative index with array access
    - net: ll_temac: platform_get_resource replaced by wrong function
    - drm/i915/gt: Reset queue_priority_hint on parking
    - drm/amdgpu: Use drm_mode_copy()
    - drm/amd/display: Preserve original aspect ratio in create stream
    - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
    - scsi: core: Fix unremoved procfs host directory regression
    - staging: vc04_services: changen strncpy() to strscpy_pad()
    - staging: vc04_services: fix information leak in create_component()
    - USB: core: Add hub_get() and hub_put() routines
    - usb: dwc2: host: Fix remote wakeup from hibernation
    - usb: dwc2: host: Fix hibernation flow
    - usb: dwc2: host: Fix ISOC flow in DDMA mode
    - usb: dwc2: gadget: Fix exiting from clock gating
    - usb: dwc2: gadget: LPM flow fix
    - usb: udc: remove warning when queue disabled ep
    - usb: typec: ucsi: Ack unsupported commands
    - usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
    - scsi: qla2xxx: Prevent command send on chip reset
    - scsi: qla2xxx: Fix N2N stuck connection
    - scsi: qla2xxx: Split FCE|EFT trace control
    - scsi: qla2xxx: NVME|FCP prefer flag not being honored
    - scsi: qla2xxx: Fix command flush on cable pull
    - scsi: qla2xxx: Fix double free of fcport
    - scsi: qla2xxx: Change debug message during driver unload
    - scsi: qla2xxx: Delay I/O Abort on PCI error
    - x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled
    - PCI/DPC: Quirk PIO log size for Intel Ice Lake Root Ports
    - scsi: lpfc: Correct size for wqe for memset()
    - USB: core: Fix deadlock in usb_deauthorize_interface()
    - scsi: usb: Call scsi_done() directly
    - scsi: usb: Stop using the SCSI pointer
    - USB: UAS: return ENODEV when submit urbs fail with device not attached
    - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
    - mlxbf_gige: stop PHY during open() error paths
    - iwlwifi: mvm: rfi: use kmemdup() to replace kzalloc + memcpy
    - wifi: iwlwifi: mvm: rfi: fix potential response leaks
    - ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa()
    - s390/qeth: handle deferred cc1
    - tcp: properly terminate timers for kernel sockets
    - ACPICA: debugger: check status of acpi_evaluate_object() in
      acpi_db_walk_for_fields()
    - mlxbf_gige: call request_irq() after NAPI initialized
    - bpf: Protect against int overflow for stack access size
    - Octeontx2-af: fix pause frame configuration in GMP mode
    - dm integrity: fix out-of-range warning
    - r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
    - x86/cpufeatures: Add new word for scattered features
    - x86/cpufeatures: Add CPUID_LNX_5 to track recently added Linux-defined word
    - arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
    - Bluetooth: hci_event: set the conn encrypted before conn establishes
    - Bluetooth: Fix TOCTOU in HCI debugfs implementation
    - xen-netfront: Add missing skb_mark_for_recycle
    - net/rds: fix possible cp null dereference
    - locking/rwsem: Disable preemption while trying for rwsem lock
    - io_uring: ensure '0' is returned on file registration success
    - Revert "x86/mm/ident_map: Use gbpages only where full GB page should be
      mapped."
    - mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL
      allocations
    - thermal: devfreq_cooling: Fix perf state when calculate dfc res_util
    - KVM: x86: Bail to userspace if emulation of atomic user access faults
    - KVM: x86: Mark target gfn of emulated atomic instruction as dirty
    - netfilter: nf_tables: reject new basechain after table flag update
    - netfilter: nf_tables: flush pending destroy work before exit_net release
    - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
    - netfilter: validate user input for expected length
    - vboxsf: Avoid an spurious warning if load_nls_xxx() fails
    - bpf, sockmap: Prevent lock inversion deadlock in map delete elem
    - net/sched: act_skbmod: prevent kernel-infoleak
    - net: stmmac: fix rx queue priority assignment
    - selftests: net: gro fwd: update vxlan GRO test expectations
    - erspan: make sure erspan_base_hdr is present in skb->head
    - selftests: reuseaddr_conflict: add missing new line at the end of the output
    - ipv6: Fix infinite recursion in fib6_dump_done().
    - mlxbf_gige: stop interface during shutdown
    - udp: do not accept non-tunnel GSO skbs landing in a tunnel
    - udp: do not transition UDP GRO fraglist partial checksums to unnecessary
    - udp: prevent local UDP tunnel packets from being GROed
    - octeontx2-af: Fix issue with loading coalesced KPU profiles
    - octeontx2-pf: check negative error code in otx2_open()
    - i40e: fix i40e_count_filters() to count only active/new filters
    - i40e: fix vf may be used uninitialized in this function warning
    - scsi: qla2xxx: Update manufacturer details
    - scsi: qla2xxx: Update manufacturer detail
    - Revert "usb: phy: generic: Get the vbus supply"
    - i40e: Store the irq number in i40e_q_vector
    - i40e: Remove _t suffix from enum type names
    - i40e: Enforce software interrupt during busy-poll exit
    - net: usb: asix: suspend embedded PHY if external is used
    - drivers: net: convert to boolean for the mac_managed_pm flag
    - net: fec: Set mac_managed_pm during probe
    - net: ravb: Always process TX descriptor ring
    - ASoC: rt5682-sdw: fix locking sequence
    - ASoC: rt711-sdca: fix locking sequence
    - ASoC: rt711-sdw: fix locking sequence
    - ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
    - ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
    - scsi: mylex: Fix sysfs buffer lengths
    - ata: sata_mv: Fix PCI device ID table declaration compilation warning
    - nfsd: hold a lighter-weight client reference over CB_RECALL_ANY
    - HID: uhid: Use READ_ONCE()/WRITE_ONCE() for ->running
    - openrisc: Fix pagewalk usage in arch_dma_{clear, set}_uncached
    - fs/pipe: Fix lockdep false-positive in watchqueue pipe_write()
    - ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with
      microphone
    - driver core: Introduce device_link_wait_removal()
    - of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
    - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
    - s390/entry: align system call table on 8 bytes
    - riscv: Fix spurious errors from __get/put_kernel_nofault
    - riscv: process: Fix kernel gp leakage
    - x86/bugs: Fix the SRSO mitigation on Zen3/4
    - x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for
      !SRSO
    - mptcp: don't account accept() of non-MPC client as fallback to TCP
    - mm/secretmem: fix GUP-fast succeeding on secretmem folios
    - gro: fix ownership transfer
    - nvme: fix miss command type check
    - x86: set SPECTRE_BHI_ON as default
    - Linux 5.15.154
  * CVE-2024-23307
    - md/raid5: fix atomicity violation in raid5_cache_count
  * CVE-2024-26828
    - cifs: fix underflow in parse_server_interfaces()
  * CVE-2024-24861
    - media: xc4000: Fix atomicity violation in xc4000_get_frequency
  * CVE-2024-26642
    - netfilter: nf_tables: disallow anonymous set with timeout flag
  * CVE-2024-26926
    - binder: check offset alignment in binder_get_object()
  * CVE-2024-26922
    - drm/amdgpu: validate the parameters of bo mapping operations more clearly
  * CVE-2023-6039
    - timers: Silently ignore timers with a NULL function
  * CVE-2024-26924
    - netfilter: nft_set_pipapo: do not free live element
  * CVE-2024-26643
    - netfilter: nf_tables: mark set as dead when unbinding anonymous set with
      timeout

linux-raspi (5.15.0-1057.60) jammy; urgency=medium

  * jammy/linux-raspi: 5.15.0-1057.60 -proposed tracker (LP: #2068234)

  [ Ubuntu: 5.15.0-113.123 ]

  * jammy/linux: 5.15.0-113.123 -proposed tracker (LP: #2068242)
  * CVE-2024-26924
    - netfilter: nft_set_pipapo: do not free live element
  * CVE-2024-26643
    - netfilter: nf_tables: mark set as dead when unbinding anonymous set with
      timeout

  [ Ubuntu: 5.15.0-112.122 ]

  * jammy/linux: 5.15.0-112.122 -proposed tracker (LP: #2065898)
  * CVE-2024-21823
    - dmanegine: idxd: reformat opcap output to match bitmap_parse() input
    - dmaengine: idxd: add WQ operation cap restriction support
    - dmaengine: idxd: add knob for enqcmds retries
    - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist
    - dmaengine: idxd: add a new security check to deal with a hardware erratum
    - dmaengine: idxd: add a write() method for applications to submit work

linux-raspi (5.15.0-1056.59) jammy; urgency=medium

  * jammy/linux-raspi: 5.15.0-1056.59 -proposed tracker (LP: #2063756)

  [ Ubuntu: 5.15.0-111.121 ]

  * jammy/linux: 5.15.0-111.121 -proposed tracker (LP: #2063763)
  * RTL8852BE fw security fail then lost WIFI function during suspend/resume
    cycle (LP: #2063096)
    - wifi: rtw89: download firmware with five times retry
  * Mount CIFS fails with Permission denied (LP: #2061986)
    - cifs: fix ntlmssp auth when there is no key exchange
  * USB stick can't be detected (LP: #2040948)
    - usb: Disable USB3 LPM at shutdown
  * Jammy update: v5.15.153 upstream stable release (LP: #2063290)
    - io_uring/unix: drop usage of io_uring socket
    - io_uring: drop any code related to SCM_RIGHTS
    - selftests: tls: use exact comparison in recv_partial
    - ASoC: rt5645: Make LattePanda board DMI match more precise
    - x86/xen: Add some null pointer checking to smp.c
    - MIPS: Clear Cause.BD in instruction_pointer_set
    - HID: multitouch: Add required quirk for Synaptics 0xcddc device
    - gen_compile_commands: fix invalid escape sequence warning
    - RDMA/mlx5: Fix fortify source warning while accessing Eth segment
    - RDMA/mlx5: Relax DEVX access upon modify commands
    - riscv: dts: sifive: add missing #interrupt-cells to pmic
    - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h
    - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
    - net/iucv: fix the allocation size of iucv_path_table array
    - parisc/ftrace: add missing CONFIG_DYNAMIC_FTRACE check
    - block: sed-opal: handle empty atoms when parsing response
    - dm-verity, dm-crypt: align "struct bvec_iter" correctly
    - scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
    - ALSA: hda/realtek - ALC285 reduce pop noise from Headphone port
    - drm/amdgpu: Enable gpu reset for S3 abort cases on Raven series
    - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
    - firewire: core: use long bus reset on gap count error
    - ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet
    - Input: gpio_keys_polled - suppress deferred probe error for gpio
    - ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC
    - ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode
    - ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll
    - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
    - s390/dasd: put block allocation in separate function
    - s390/dasd: add query PPRC function
    - s390/dasd: add copy pair setup
    - s390/dasd: add autoquiesce feature
    - s390/dasd: Use dev_*() for device log messages
    - s390/dasd: fix double module refcount decrement
    - fs/select: rework stack allocation hack for clang
    - md: Don't clear MD_CLOSING when the raid is about to stop
    - lib/cmdline: Fix an invalid format specifier in an assertion msg
    - time: test: Fix incorrect format specifier
    - rtc: test: Fix invalid format specifier.
    - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
    - timekeeping: Fix cross-timestamp interpolation on counter wrap
    - timekeeping: Fix cross-timestamp interpolation corner case decision
    - timekeeping: Fix cross-timestamp interpolation for non-x86
    - sched/fair: Take the scheduling domain into account in select_idle_core()
    - wifi: ath10k: fix NULL pointer dereference in
      ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
    - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
    - wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled
    - wifi: b43: Stop correct queue in DMA worker when QoS is disabled
    - wifi: b43: Disable QoS for bcm4331
    - wifi: wilc1000: fix declarations ordering
    - wifi: wilc1000: fix RCU usage in connect path
    - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
    - wifi: wilc1000: fix multi-vif management when deleting a vif
    - wifi: mwifiex: debugfs: Drop unnecessary error check for
      debugfs_create_dir()
    - cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value
    - cpufreq: Explicitly include correct DT includes
    - cpufreq: mediatek-hw: Wait for CPU supplies before probing
    - sock_diag: annotate data-races around sock_diag_handlers[family]
    - inet_diag: annotate data-races around inet_diag_table[]
    - bpftool: Silence build warning about calloc()
    - af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc().
    - cpufreq: mediatek-hw: Don't error out if supply is not found
    - arm64: dts: imx8mm-kontron: Disable pullups for I2C signals on SL/BL i.MX8MM
    - arm64: dts: imx8mm-kontron: Disable pullups for onboard UART signals on BL
      board
    - arm64: dts: imx8mm-kontron: Add support for ultra high speed modes on SD
      card
    - arm64: dts: imx8mm-kontron: Use the VSELECT signal to switch SD card IO
      voltage
    - arm64: dts: imx8mm-kontron: Disable pull resistors for SD card signals on BL
      board
    - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete
    - wifi: iwlwifi: mvm: report beacon protection failures
    - wifi: iwlwifi: dbg-tlv: ensure NUL termination
    - wifi: iwlwifi: fix EWRD table validity check
    - arm64: dts: imx8mm-venice-gw71xx: fix USB OTG VBUS
    - pwm: atmel-hlcdc: Convert to platform remove callback returning void
    - pwm: atmel-hlcdc: Use consistent variable naming
    - pwm: atmel-hlcdc: Fix clock imbalance related to suspend support
    - net: blackhole_dev: fix build warning for ethh set but not used
    - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
    - pwm: sti: Implement .apply() callback
    - pwm: sti: Fix capture for st,pwm-num-chan < st,capture-num-chan
    - wifi: iwlwifi: mvm: don't set replay counters to 0xff
    - s390/vdso: drop '-fPIC' from LDFLAGS
    - ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down()
    - arm64: dts: mt8183: kukui: Add Type C node
    - arm64: dts: mt8183: kukui: Split out keyboard node and describe detachables
    - arm64: dts: mt8183: Move CrosEC base detection node to kukui-based DTs
    - arm64: dts: mediatek: mt7622: add missing "device_type" to memory nodes
    - bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly
    - wireless: Remove redundant 'flush_workqueue()' calls
    - wifi: wilc1000: prevent use-after-free on vif when cleaning up all
      interfaces
    - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
    - bus: tegra-aconnect: Update dependency to ARCH_TEGRA
    - [Config]: update CONFIG_TEGRA_ACONNECT
    - iommu/amd: Mark interrupt as managed
    - wifi: brcmsmac: avoid function pointer casts
    - net: ena: Remove ena_select_queue
    - ARM: dts: arm: realview: Fix development chip ROM compatible value
    - arm64: dts: renesas: r8a779a0: Update to R-Car Gen4 compatible values
    - arm64: dts: renesas: r8a779a0: Correct avb[01] reg sizes
    - ARM: dts: imx6dl-yapp4: Move phy reset into switch node
    - ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address
    - ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node
    - arm64: dts: marvell: reorder crypto interrupts on Armada SoCs
    - ACPI: resource: Add Infinity laptops to irq1_edge_low_force_override
    - ACPI: resource: Do IRQ override on Lunnen Ground laptops
    - ACPI: resource: Add MAIBENBEN X577 to irq1_edge_low_force_override
    - ACPI: scan: Fix device check notification handling
    - x86, relocs: Ignore relocations in .notes section
    - SUNRPC: fix some memleaks in gssx_dec_option_array
    - mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove
      function
    - wifi: rtw88: 8821c: Fix false alarm count
    - PCI: Make pci_dev_is_disconnected() helper public for other drivers
    - iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected
    - igb: move PEROUT and EXTTS isr logic to separate functions
    - igb: Fix missing time sync events
    - Bluetooth: Remove superfluous call to hci_conn_check_pending()
    - Bluetooth: hci_qca: Add support for QTI Bluetooth chip wcn6855
    - Bluetooth: hci_qca: don't use IS_ERR_OR_NULL() with gpiod_get_optional()
    - Bluetooth: hci_core: Fix possible buffer overflow
    - sr9800: Add check for usbnet_get_endpoints
    - bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
    - bpf: Fix hashtab overflow check on 32-bit arches
    - bpf: Fix stackmap overflow check on 32-bit arches
    - ipv6: fib6_rules: flush route cache when rule is changed
    - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
    - net: phy: fix phy_get_internal_delay accessing an empty array
    - net: hns3: fix kernel crash when 1588 is received on HIP08 devices
    - net: hns3: fix port duplex configure error in IMP reset
    - net: phy: DP83822: enable rgmii mode if phy_interface_is_rgmii
    - net: phy: dp83822: Fix RGMII TX delay configuration
    - OPP: debugfs: Fix warning around icc_get_name()
    - tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function
    - net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
    - bpf: net: Change sk_getsockopt() to take the sockptr_t argument
    - bpf: net: Change do_ip_getsockopt() to take the sockptr_t argument
    - ipmr: fix incorrect parameter validation in the ip_mroute_getsockopt()
      function
    - l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt()
      function
    - udp: fix incorrect parameter validation in the udp_lib_getsockopt() function
    - net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function
    - net/x25: fix incorrect parameter validation in the x25_getsockopt() function
    - nfp: flower: handle acti_netdevs allocation failure
    - dm raid: fix false positive for requeue needed during reshape
    - dm: call the resume method on internal suspend
    - drm/tegra: dsi: Add missing check for of_find_device_by_node
    - drm/tegra: dpaux: Populate AUX bus
    - drm/tegra: dpaux: Fix PM disable depth imbalance in tegra_dpaux_probe
    - drm/tegra: dsi: Make use of the helper function dev_err_probe()
    - drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe()
    - drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path
      of tegra_dsi_probe()
    - drm/tegra: dc: rgb: Allow changing PLLD rate on Tegra30+
    - drm/tegra: rgb: Fix some error handling paths in tegra_dc_rgb_probe()
    - drm/tegra: rgb: Fix missing clk_put() in the error handling paths of
      tegra_dc_rgb_probe()
    - drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths
      of tegra_output_probe()
    - drm/rockchip: inno_hdmi: Fix video timing
    - drm: Don't treat 0 as -1 in drm_fixp2int_ceil
    - drm/ttm: add ttm_resource_fini v2
    - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node
    - drm/rockchip: lvds: do not overwrite error code
    - drm/rockchip: lvds: do not print scary message when probing defer
    - drm/lima: fix a memleak in lima_heap_alloc
    - dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA
    - [Config]: update CONFIG_TEGRA210_ADMA
    - media: tc358743: register v4l2 async device only after successful setup
    - PCI/DPC: Print all TLP Prefixes, not just the first
    - perf record: Fix possible incorrect free in record__switch_output()
    - HID: lenovo: Add middleclick_workaround sysfs knob for cptkbd
    - drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
    - drm/amd/display: Fix potential NULL pointer dereferences in
      'dcn10_set_output_transfer_func()'
    - perf evsel: Fix duplicate initialization of data->id in
      evsel__parse_sample()
    - clk: meson: Add missing clocks to axg_clk_regmaps
    - media: em28xx: annotate unchecked call to media_device_register()
    - media: v4l2-tpg: fix some memleaks in tpg_alloc
    - media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity
    - media: edia: dvbdev: fix a use-after-free
    - pinctrl: mediatek: Drop bogus slew rate register range for MT8192
    - clk: qcom: reset: Commonize the de/assert functions
    - clk: qcom: reset: Ensure write completion on reset de/assertion
    - quota: simplify drop_dquot_ref()
    - quota: Fix potential NULL pointer dereference
    - quota: Fix rcu annotations of inode dquot pointers
    - PCI/P2PDMA: Fix a sleeping issue in a RCU read section
    - PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
    - crypto: xilinx - call finalize with bh disabled
    - perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str()
    - drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode()
    - ALSA: seq: fix function cast warnings
    - perf stat: Avoid metric-only segv
    - ASoC: meson: Use dev_err_probe() helper
    - ASoC: meson: aiu: fix function pointer type mismatch
    - ASoC: meson: t9015: fix function pointer type mismatch
    - powerpc: Force inlining of arch_vmap_p{u/m}d_supported()
    - PCI: endpoint: Support NTB transfer between RC and EP
    - [Config]: update CONFIG_PCI_EPF_VNTB
    - NTB: EPF: fix possible memory leak in pci_vntb_probe()
    - NTB: fix possible name leak in ntb_register_device()
    - media: sun8i-di: Fix coefficient writes
    - media: sun8i-di: Fix power on/off sequences
    - media: sun8i-di: Fix chroma difference threshold
    - media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak
    - media: go7007: add check of return value of go7007_read_addr()
    - media: pvrusb2: remove redundant NULL check
    - media: pvrusb2: fix pvr2_stream_callback casts
    - clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times
    - drm/mediatek: dsi: Fix DSI RGB666 formats and definitions
    - PCI: Mark 3ware-9650SE Root Port Extended Tags as broken
    - clk: hisilicon: hi3519: Release the correct number of gates in
      hi3519_clk_unregister()
    - clk: hisilicon: hi3559a: Fix an erroneous devm_kfree()
    - drm/tegra: put drm_gem_object ref on error in tegra_fb_create
    - mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref
    - mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a
      ref
    - crypto: arm/sha - fix function cast warnings
    - drm/tidss: Fix initial plane zpos values
    - mtd: maps: physmap-core: fix flash size larger than 32-bit
    - mtd: rawnand: lpc32xx_mlc: fix irq handler prototype
    - ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs
    - ASoC: meson: axg-tdm-interface: add frame rate constraint
    - HID: amd_sfh: Update HPD sensor structure elements
    - drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int()
    - media: pvrusb2: fix uaf in pvr2_context_set_notify
    - media: dvb-frontends: avoid stack overflow warnings with clang
    - media: go7007: fix a memleak in go7007_load_encoder
    - media: ttpci: fix two memleaks in budget_av_attach
    - media: mediatek: vcodec: avoid -Wcast-function-type-strict warning
    - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
    - powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks
    - drm/msm/dpu: add division of drm_display_mode's hskew parameter
    - module: Add support for default value for module async_probe
    - modules: wait do_free_init correctly
    - powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc.
    - leds: aw2013: Unlock mutex before destroying it
    - leds: sgm3140: Add missing timer cleanup and flash gpio control
    - backlight: lm3630a: Initialize backlight_properties on init
    - backlight: lm3630a: Don't set bl->props.brightness in get_brightness
    - backlight: da9052: Fully initialize backlight_properties during probe
    - backlight: lm3639: Fully initialize backlight_properties during probe
    - backlight: lp8788: Fully initialize backlight_properties during probe
    - sparc32: Fix section mismatch in leon_pci_grpci
    - clk: Fix clk_core_get NULL dereference
    - clk: zynq: Prevent null pointer dereference caused by kmalloc failure
    - ALSA: hda/realtek: fix ALC285 issues on HP Envy x360 laptops
    - ALSA: usb-audio: Stop parsing channels bits when all channels are found.
    - RDMA/srpt: Do not register event handler until srpt device is fully setup
    - f2fs: multidevice: support direct IO
    - f2fs: invalidate META_MAPPING before IPU/DIO write
    - f2fs: replace congestion_wait() calls with io_schedule_timeout()
    - f2fs: fix to invalidate META_MAPPING before DIO write
    - f2fs: invalidate meta pages only for post_read required inode
    - f2fs: reduce stack memory cost by using bitfield in struct f2fs_io_info
    - f2fs: compress: fix to cover normal cluster write with cp_rwsem
    - f2fs: compress: fix to check unreleased compressed cluster
    - scsi: csiostor: Avoid function pointer casts
    - RDMA/device: Fix a race between mad_client and cm_client init
    - RDMA/rtrs-clt: Check strnlen return len in sysfs mpath_policy_store()
    - scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn
    - net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr()
    - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
    - NFSv4.2: fix listxattr maximum XDR buffer size
    - watchdog: stm32_iwdg: initialize default timeout
    - NFS: Fix an off by one in root_nfs_cat()
    - f2fs: compress: fix reserve_cblocks counting error when out of space
    - afs: Revert "afs: Hide silly-rename files from userspace"
    - comedi: comedi_test: Prevent timers rescheduling during deletion
    - remoteproc: stm32: use correct format strings on 64-bit
    - remoteproc: stm32: Fix incorrect type in assignment for va
    - remoteproc: stm32: Fix incorrect type assignment returned by
      stm32_rproc_get_loaded_rsc_tablef
    - tty: vt: fix 20 vs 0x20 typo in EScsiignore
    - serial: max310x: fix syntax error in IRQ error message
    - tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT
    - arm64: dts: broadcom: bcmbca: bcm4908: drop invalid switch cells
    - kconfig: fix infinite loop when expanding a macro at the end of file
    - rtc: mt6397: select IRQ_DOMAIN instead of depending on it
    - serial: 8250_exar: Don't remove GPIO device on suspend
    - staging: greybus: fix get_channel_from_mode() failure path
    - usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin
    - io_uring: don't save/restore iowait state
    - nouveau: reset the bo resource bus info after an eviction
    - octeontx2-af: Use matching wake_up API variant in CGX command interface
    - s390/vtime: fix average steal time calculation
    - soc: fsl: dpio: fix kcalloc() argument order
    - hsr: Fix uninit-value access in hsr_get_node()
    - net: mtk_eth_soc: move MAC_MCR setting to mac_finish()
    - net: mediatek: mtk_eth_soc: clear MAC_MCR_FORCE_LINK only when MAC is up
    - net: ethernet: mtk_eth_soc: fix PPE hanging issue
    - packet: annotate data-races around ignore_outgoing
    - net: veth: do not manipulate GRO when using XDP
    - net: dsa: mt7530: prevent possible incorrect XTAL frequency selection
    - vdpa/mlx5: Allow CVQ size changes
    - wireguard: receive: annotate data-race around receiving_counter.counter
    - rds: introduce acquire/release ordering in acquire/release_in_xmit()
    - hsr: Handle failures in module init
    - net: phy: fix phy_read_poll_timeout argument type in genphy_loopback
    - net/bnx2x: Prevent access to a freed page in page_pool
    - octeontx2-af: Use separate handlers for interrupts
    - netfilter: nf_tables: do not compare internal table flags on updates
    - rcu: add a helper to report consolidated flavor QS
    - net: report RCU QS on threaded NAPI repolling
    - bpf: report RCU QS in cpumap kthread
    - net: dsa: mt7530: fix handling of LLDP frames
    - net: dsa: mt7530: fix handling of 802.1X PAE frames
    - net: dsa: mt7530: fix link-local frames that ingress vlan filtering ports
    - net: dsa: mt7530: fix handling of all link-local frames
    - spi: spi-mt65xx: Fix NULL pointer access in interrupt handler
    - regmap: Add missing map->bus check
    - remoteproc: stm32: fix incorrect optional pointers
  * Jammy update: v5.15.152 upstream stable release (LP: #2063276)
    - mmc: mmci: stm32: use a buffer for unaligned DMA requests
    - mmc: mmci: stm32: fix DMA API overlapping mappings warning
    - net: lan78xx: fix runtime PM count underflow on link stop
    - ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
    - i40e: disable NAPI right after disabling irqs when handling xsk_pool
    - tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
    - geneve: make sure to pull inner header in geneve_rx()
    - net: sparx5: Fix use after free inside sparx5_del_mact_entry
    - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
    - net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
    - cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
    - net/rds: fix WARNING in rds_conn_connect_if_down
    - netfilter: nft_ct: fix l3num expectations with inet pseudo family
    - netfilter: nf_conntrack_h323: Add protection for bmp length out of range
    - erofs: apply proper VMA alignment for memory mapped files on THP
    - netrom: Fix a data-race around sysctl_netrom_default_path_quality
    - netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
    - netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser
    - netrom: Fix a data-race around sysctl_netrom_transport_timeout
    - netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
    - netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
    - netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
    - netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
    - netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
    - netrom: Fix a data-race around sysctl_netrom_routing_control
    - netrom: Fix a data-race around sysctl_netrom_link_fails_count
    - netrom: Fix data-races around sysctl_net_busy_read
    - ALSA: usb-audio: Refcount multiple accesses on the single clock
    - ALSA: usb-audio: Clear fixed clock rate at closing EP
    - ALSA: usb-audio: Split endpoint setups for hw_params and prepare (take#2)
    - ALSA: usb-audio: Properly refcounting clock rate
    - ALSA: usb-audio: Apply mutex around snd_usb_endpoint_set_params()
    - ALSA: usb-audio: Correct the return code from snd_usb_endpoint_set_params()
    - ALSA: usb-audio: Avoid superfluous endpoint setup
    - ALSA: usb-audio: Add quirk for Tascam Model 12
    - ALSA: usb-audio: Add new quirk FIXED_RATE for JBL Quantum810 Wireless
    - ALSA: usb-audio: Fix microphone sound on Nexigo webcam.
    - ALSA: usb-audio: add quirk for RODE NT-USB+
    - drm/amd/display: Fix uninitialized variable usage in core_link_ 'read_dpcd()
      & write_dpcd()' functions
    - nfp: flower: add goto_chain_index for ct entry
    - nfp: flower: add hardware offload check for post ct entry
    - selftests/mm: switch to bash from sh
    - selftests: mm: fix map_hugetlb failure on 64K page size systems
    - xhci: process isoc TD properly when there was a transaction error mid TD.
    - xhci: handle isoc Babble and Buffer Overrun events properly
    - serial: max310x: use regmap methods for SPI batch operations
    - serial: max310x: use a separate regmap for each port
    - serial: max310x: prevent infinite while() loop in port startup
    - drm/amd/pm: do not expose the API used internally only in kv_dpm.c
    - drm/amdgpu: Reset IH OVERFLOW_CLEAR bit
    - selftests: mptcp: decrease BW in simult flows
    - hv_netvsc: use netif_is_bond_master() instead of open code
    - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
    - drm/amd/display: Re-arrange FPU code structure for dcn2x
    - drm/amd/display: move calcs folder into DML
    - drm/amd/display: remove DML Makefile duplicate lines
    - drm/amd/display: Increase frame-larger-than for all display_mode_vba files
    - getrusage: add the "signal_struct *sig" local variable
    - getrusage: move thread_group_cputime_adjusted() outside of
      lock_task_sighand()
    - getrusage: use __for_each_thread()
    - getrusage: use sig->stats_lock rather than lock_task_sighand()
    - proc: Use task_is_running() for wchan in /proc/$pid/stat
    - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of
      lock_task_sighand()
    - ALSA: usb-audio: Fix wrong kfree issue in snd_usb_endpoint_free_all
    - ALSA: usb-audio: Always initialize fixed_rate in
      snd_usb_find_implicit_fb_sync_format()
    - ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum610 Wireless
    - ALSA: usb-audio: Sort quirk table entries
    - regmap: allow to define reg_update_bits for no bus configuration
    - regmap: Add bulk read/write callbacks into regmap_config
    - serial: max310x: make accessing revision id interface-agnostic
    - serial: max310x: fix IO data corruption in batched operations
    - Linux 5.15.152
  * CVE-2024-26809
    - netfilter: nft_set_pipapo: release elements in clone only from destroy path
  * CVE-2024-26792
    - btrfs: fix double free of anonymous device after snapshot creation failure
  * CVE-2023-52530
    - wifi: mac80211: fix potential key use-after-free
  * CVE-2023-52447
    - bpf: Defer the free of inner map when necessary
    - rcu-tasks: Provide rcu_trace_implies_rcu_gp()
  * Avoid creating non-working backlight sysfs knob from ASUS board
    (LP: #2060422)
    - platform/x86: asus-wmi: Consider device is absent when the read is ~0
  * [Ubuntu 22.04.4/linux-image-6.5.0-26-generic] Kernel output "UBSAN: array-
    index-out-of-bounds in /build/linux-hwe-6.5-34pCLi/linux-
    hwe-6.5-6.5.0/drivers/net/hyperv/netvsc.c:1445:41" multiple times,
    especially during boot. (LP: #2058477)
    - hv: hyperv.h: Replace one-element array with flexible-array member
  * Jammy update: v5.15.151 upstream stable release (LP: #2060209)
    - netfilter: nf_tables: disallow timeout for anonymous sets
    - mtd: spinand: gigadevice: Fix the get ecc status issue
    - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
    - net: ip_tunnel: prevent perpetual headroom growth
    - tun: Fix xdp_rxq_info's queue_index when detaching
    - cpufreq: intel_pstate: fix pstate limits enforcement for adjust_perf call
      back
    - net: veth: clear GRO when clearing XDP even when down
    - ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
    - lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is
      detected
    - net: enable memcg accounting for veth queues
    - veth: try harder when allocating queue memory
    - net: usb: dm9601: fix wrong return value in dm9601_mdio_read
    - uapi: in6: replace temporary label with rfc9486
    - stmmac: Clear variable when destroying workqueue
    - Bluetooth: Avoid potential use-after-free in hci_error_reset
    - Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
    - netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
    - netfilter: nfnetlink_queue: silence bogus compiler warning
    - netfilter: core: move ip_ct_attach indirection to struct nf_ct_hook
    - netfilter: make function op structures const
    - netfilter: let reset rules clean out conntrack entries
    - netfilter: bridge: confirm multicast packets before passing them up the
      stack
    - rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back
    - igb: extend PTP timestamp adjustments to i211
    - efi/capsule-loader: fix incorrect allocation size
    - power: supply: bq27xxx-i2c: Do not free non existing IRQ
    - ALSA: Drop leftover snd-rtctimer stuff from Makefile
    - fbcon: always restore the old font data in fbcon_do_set_font()
    - afs: Fix endless loop in directory parsing
    - riscv: Sparse-Memory/vmemmap out-of-bounds fix
    - ALSA: firewire-lib: fix to check cycle continuity
    - gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
    - wifi: nl80211: reject iftype change with mesh ID change
    - btrfs: dev-replace: properly validate device names
    - dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
    - dmaengine: ptdma: use consistent DMA masks
    - dmaengine: fsl-qdma: init irq after reg initialization
    - mmc: core: Fix eMMC initialization with 1-bit bus connection
    - mmc: sdhci-xenon: add timeout for PHY init complete
    - mmc: sdhci-xenon: fix PHY init clock stability
    - pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
    - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers
    - mptcp: move __mptcp_error_report in protocol.c
    - mptcp: process pending subflow error on close
    - mptcp: rename timer related helper to less confusing names
    - selftests: mptcp: add missing kconfig for NF Filter
    - selftests: mptcp: add missing kconfig for NF Filter in v6
    - mptcp: clean up harmless false expressions
    - mptcp: add needs_id for netlink appending addr
    - mptcp: push at DSS boundaries
    - mptcp: fix possible deadlock in subflow diag
    - cachefiles: fix memory leak in cachefiles_add_cache()
    - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
    - Revert "drm/bridge: lt8912b: Register and attach our DSI device at probe"
    - af_unix: Drop oob_skb ref before purging queue in GC.
    - gpio: 74x164: Enable output pins after registers are reset
    - gpiolib: Fix the error path order in gpiochip_add_data_with_key()
    - gpio: fix resource unwinding order in error path
    - Revert "interconnect: Fix locking for runpm vs reclaim"
    - Revert "interconnect: Teach lockdep about icc_bw_lock order"
    - bpf: Add BPF_FIB_LOOKUP_SKIP_NEIGH for bpf_fib_lookup
    - bpf: Add table ID to bpf_fib_lookup BPF helper
    - bpf: Derive source IP addr via bpf_*_fib_lookup()
    - Linux 5.15.151
  * Jammy update: v5.15.151 upstream stable release (LP: #2060209) //
    CVE-2024-26782
    - mptcp: fix double-free on socket dismantle
  * Jammy update: v5.15.151 upstream stable release (LP: #2060209) // Fix
    bluetooth connections with 3.0 device (LP: #2063067)
    - Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST
  * Jammy update: v5.15.150 upstream stable release (LP: #2060142)
    - net/sched: Retire CBQ qdisc
    - [Config] updateconfigs for NET_SCH_CBQ
    - net/sched: Retire ATM qdisc
    - [Config] updateconfigs for NET_SCH_ATM
    - net/sched: Retire dsmark qdisc
    - [Config] updateconfigs for NET_SCH_DSMARK
    - smb: client: fix potential OOBs in smb2_parse_contexts()
    - smb: client: fix parsing of SMB3.1.1 POSIX create context
    - sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
    - PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
    - bpf: Merge printk and seq_printf VARARG max macros
    - bpf: Add struct for bin_args arg in bpf_bprintf_prepare
    - bpf: Do cleanup in bpf_bprintf_cleanup only when needed
    - bpf: Remove trace_printk_lock
    - userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
    - zonefs: Improve error handling
    - x86/fpu: Stop relying on userspace for info to fault in xsave buffer
    - sched/rt: Fix sysctl_sched_rr_timeslice intial value
    - sched/rt: Disallow writing invalid values to sched_rt_period_us
    - scsi: target: core: Add TMF to tmr_list handling
    - dmaengine: shdma: increase size of 'dev_id'
    - dmaengine: fsl-qdma: increase size of 'irq_name'
    - wifi: cfg80211: fix missing interfaces when dumping
    - wifi: mac80211: fix race condition on enabling fast-xmit
    - fbdev: savage: Error out if pixclock equals zero
    - fbdev: sis: Error out if pixclock equals zero
    - spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
    - ahci: asm1166: correct count of reported ports
    - ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
    - MIPS: reserve exception vector space ONLY ONCE
    - platform/x86: touchscreen_dmi: Add info for the TECLAST X16 Plus tablet
    - ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap
      corrupt
    - ext4: avoid allocating blocks from corrupted group in
      ext4_mb_try_best_found()
    - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
    - dmaengine: ti: edma: Add some null pointer checks to the edma_probe
    - regulator: pwm-regulator: Add validity checks in continuous .get_voltage
    - nvmet-tcp: fix nvme tcp ida memory leak
    - ALSA: usb-audio: Check presence of valid altsetting control
    - ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
    - spi: sh-msiof: avoid integer overflow in constants
    - Input: xpad - add Lenovo Legion Go controllers
    - netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in
      sctp_new
    - ALSA: usb-audio: Ignore clock selector errors for single connection
    - nvme-fc: do not wait in vain when unloading module
    - nvmet-fcloop: swap the list_add_tail arguments
    - nvmet-fc: release reference on target port
    - nvmet-fc: defer cleanup using RCU properly
    - nvmet-fc: hold reference on hostport match
    - nvmet-fc: abort command when there is no binding
    - nvmet-fc: avoid deadlock on delete association path
    - nvmet-fc: take ref count on tgtport before delete assoc
    - ext4: correct the hole length returned by ext4_map_blocks()
    - Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
    - fs/ntfs3: Modified fix directory element type detection
    - fs/ntfs3: Improve ntfs_dir_count
    - fs/ntfs3: Correct hard links updating when dealing with DOS names
    - fs/ntfs3: Print warning while fixing hard links count
    - fs/ntfs3: Fix detected field-spanning write (size 8) of single field
      "le->name"
    - fs/ntfs3: Add NULL ptr dereference checking at the end of
      attr_allocate_frame()
    - fs/ntfs3: Disable ATTR_LIST_ENTRY size check
    - fs/ntfs3: use non-movable memory for ntfs3 MFT buffer cache
    - fs/ntfs3: Prevent generic message "attempt to access beyond end of device"
    - fs/ntfs3: Correct function is_rst_area_valid
    - fs/ntfs3: Update inode->i_size after success write into compressed file
    - fs/ntfs3: Fix oob in ntfs_listxattr
    - wifi: mac80211: adding missing drv_mgd_complete_tx() call
    - efi: runtime: Fix potential overflow of soft-reserved region size
    - efi: Don't add memblocks for soft-reserved memory
    - hwmon: (coretemp) Enlarge per package core count limit
    - scsi: lpfc: Use unsigned type for num_sge
    - firewire: core: send bus reset promptly on gap count error
    - drm/amdgpu: skip to program GFXDEC registers for suspend abort
    - drm/amdgpu: reset gpu for s3 suspend abort case
    - virtio-blk: Ensure no requests in virtqueues before deleting vqs.
    - pmdomain: mediatek: fix race conditions with genpd
    - ksmbd: free aux buffer if ksmbd_iov_pin_rsp_read fails
    - pmdomain: renesas: r8a77980-sysc: CR7 must be always on
    - erofs: fix lz4 inplace decompression
    - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error
    - drm/ttm: Fix an invalid freeing on already freed page in error path
    - dm-crypt: don't modify the data when using authenticated encryption
    - platform/x86: intel-vbtn: Stop calling "VBDL" from notify_handler
    - platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
    - KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
    - KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
    - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
    - PCI/MSI: Prevent MSI hardware interrupt number truncation
    - l2tp: pass correct message length to ip6_append_data
    - ARM: ep93xx: Add terminator to gpiod_lookup_table
    - Revert "x86/ftrace: Use alternative RET encoding"
    - x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
    - x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
    - x86/ftrace: Use alternative RET encoding
    - x86/returnthunk: Allow different return thunks
    - Revert "x86/alternative: Make custom return thunk unconditional"
    - x86/alternative: Make custom return thunk unconditional
    - serial: amba-pl011: Fix DMA transmission in RS485 mode
    - usb: dwc3: gadget: Don't disconnect if not started
    - usb: cdnsp: blocked some cdns3 specific code
    - usb: cdnsp: fixed issue with incorrect detecting CDNSP family controllers
    - usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
    - usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
    - usb: roles: fix NULL pointer issue when put module's reference
    - usb: roles: don't get/set_role() when usb_role_switch is unregistered
    - mptcp: fix lockless access in subflow ULP diag
    - clk: imx: imx8mp: add shared clk gate for usb suspend clk
    - clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents
    - clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents
    - mtd: rawnand: sunxi: Fix the size of the last OOB region
    - RISC-V: fix funct4 definition for c.jalr in parse_asm.h
    - Input: iqs269a - drop unused device node references
    - Input: iqs269a - configure device with a single block write
    - Input: iqs269a - increase interrupt handler return delay
    - clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed
    - Input: ads7846 - don't report pressure for ads7845
    - clk: renesas: cpg-mssr: Remove superfluous check in resume code
    - clk: imx: avoid memory leak
    - Input: ads7846 - always set last command to PWRDOWN
    - Input: ads7846 - don't check penirq immediately for 7845
    - powerpc/powernv/ioda: Skip unallocated resources when mapping to PE
    - clk: qcom: gpucc-sc7180: fix clk_dis_wait being programmed for CX GDSC
    - clk: qcom: gpucc-sdm845: fix clk_dis_wait being programmed for CX GDSC
    - clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled()
    - powerpc/pseries/lparcfg: add missing RTAS retry status handling
    - powerpc/perf/hv-24x7: add missing RTAS retry status handling
    - powerpc/pseries/lpar: add missing RTAS retry status handling
    - MIPS: SMP-CPS: fix build error when HOTPLUG_CPU not set
    - MIPS: vpe-mt: drop physical_memsize
    - vdpa/mlx5: Don't clear mr struct on destroy MR
    - ARM: dts: BCM53573: Drop nonexistent #usb-cells
    - RDMA/siw: Balance the reference of cep->kref in the error path
    - RDMA/siw: Correct wrong debug message
    - clk: linux/clk-provider.h: fix kernel-doc warnings and typos
    - platform/x86: asus-wmi: Document the dgpu_disable sysfs attribute
    - acpi: property: Let args be NULL in __acpi_node_get_property_reference
    - ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
    - tools headers UAPI: Sync linux/fscrypt.h with the kernel sources
    - perf beauty: Update copy of linux/socket.h with the kernel sources
    - tools/virtio: fix build
    - drm/amdgpu: init iommu after amdkfd device init
    - f2fs: don't set GC_FAILURE_PIN for background GC
    - f2fs: write checkpoint during FG_GC
    - drm/i915/dg1: Update DMC_DEBUG3 register
    - kernel/sched: Remove dl_boosted flag comment
    - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
    - serial: 8250: Remove serial_rs485 sanitization from em485
    - clk: imx8mp: Add DISP2 pixel clock
    - clk: imx8mp: add clkout1/2 support
    - dt-bindings: clocks: imx8mp: Add ID for usb suspend clock
    - net: ethernet: ti: add missing of_node_put before return
    - powerpc/rtas: make all exports GPL
    - powerpc/rtas: ensure 4KB alignment for rtas_data_buf
    - powerpc/eeh: Small refactor of eeh_handle_normal_event()
    - powerpc/eeh: Set channel state after notifying the drivers
    - PM: core: Redefine pm_ptr() macro
    - PM: core: Add new *_PM_OPS macros, deprecate old ones
    - mmc: jz4740: Use the new PM macros
    - mmc: mxc: Use the new PM macros
    - PM: core: Remove static qualifier in DEFINE_SIMPLE_DEV_PM_OPS macro
    - Input: iqs269a - switch to DEFINE_SIMPLE_DEV_PM_OPS() and pm_sleep_ptr()
    - Input: iqs269a - do not poll during suspend or resume
    - Input: iqs269a - do not poll during ATI
    - net/sched: Refactor qdisc_graft() for ingress and clsact Qdiscs
    - netfilter: nf_tables: add rescheduling points during loop detection walks
    - debugobjects: Recheck debug_objects_enabled before reporting
    - nbd: Add the maximum limit of allocated index in nbd_dev_add
    - md: fix data corruption for raid456 when reshape restart while grow up
    - md/raid10: prevent soft lockup while flush writes
    - posix-timers: Ensure timer ID search-loop limit is valid
    - btrfs: add xxhash to fast checksum implementations
    - ACPI: button: Add lid disable DMI quirk for Nextbook Ares 8A
    - ACPI: video: Add backlight=native DMI quirk for Apple iMac11,3
    - ACPI: video: Add backlight=native DMI quirk for Lenovo ThinkPad X131e (3371
      AMD version)
    - arm64: set __exception_irq_entry with __irq_entry as a default
    - arm64: mm: fix VA-range sanity check
    - sched/fair: Don't balance task to its current running CPU
    - wifi: ath11k: fix registration of 6Ghz-only phy without the full channel
      range
    - bpf: Address KCSAN report on bpf_lru_list
    - devlink: report devlink_port_type_warn source device
    - wifi: wext-core: Fix -Wstringop-overflow warning in
      ioctl_standard_iw_point()
    - wifi: iwlwifi: mvm: avoid baid size integer overflow
    - exfat: support dynamic allocate bh for exfat_entry_set_cache
    - arm64: dts: rockchip: fix regulator name on rk3399-rock-4
    - arm64: dts: rockchip: add ES8316 codec for ROCK Pi 4
    - arm64: dts: rockchip: add SPDIF node for ROCK Pi 4
    - ARM: dts: BCM53573: Describe on-SoC BCM53125 rev 4 switch
    - ACPI: video: Add backlight=native DMI quirk for Apple iMac12,1 and iMac12,2
    - ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA
    - ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks
    - ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA
    - ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA
    - xhci: cleanup xhci_hub_control port references
    - xhci: move port specific items such as state completions to port structure
    - xhci: rename resume_done to resume_timestamp
    - xhci: clear usb2 resume related variables in one place.
    - xhci: decouple usb2 port resume and get_port_status request handling
    - xhci: track port suspend state correctly in unsuccessful resume cases
    - cifs: add a warning when the in-flight count goes negative
    - IB/hfi1: Fix a memleak in init_credit_return
    - RDMA/bnxt_re: Return error for SRQ resize
    - RDMA/irdma: Fix KASAN issue with tasklet
    - RDMA/irdma: Validate max_send_wr and max_recv_wr
    - RDMA/irdma: Set the CQ read threshold for GEN 1
    - RDMA/irdma: Add AE for too many RNRS
    - RDMA/srpt: Support specifying the srpt_service_guid parameter
    - RDMA/qedr: Fix qedr_create_user_qp error flow
    - arm64: dts: rockchip: set num-cs property for spi on px30
    - RDMA/srpt: fix function pointer cast warnings
    - bpf, scripts: Correct GPL license name
    - scsi: jazz_esp: Only build if SCSI core is builtin
    - nouveau: fix function cast warnings
    - net: stmmac: Fix incorrect dereference in interrupt handlers
    - ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
    - ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
    - ata: libahci_platform: Convert to using devm bulk clocks API
    - ata: libahci_platform: Introduce reset assertion/deassertion methods
    - ata: ahci_ceva: fix error handling for Xilinx GT PHY support
    - bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel
    - drm/nouveau/instmem: fix uninitialized_var.cocci warning
    - octeontx2-af: Consider the action set by PF
    - s390: use the correct count for __iowrite64_copy()
    - netfilter: nf_tables: set dormant flag on hook register failure
    - netfilter: flowtable: simplify route logic
    - netfilter: nft_flow_offload: reset dst in route object after setting up flow
    - netfilter: nft_flow_offload: release dst in case direct xmit path is used
    - drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
    - drm/amd/display: Fix memory leak in dm_sw_fini()
    - i2c: imx: Add timer for handling the stop condition
    - i2c: imx: when being a target, mark the last read as processed
    - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
    - netfilter: nf_tables: fix scheduling-while-atomic splat
    - ext4: regenerate buddy after block freeing failed if under fc replay
    - ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
    - netfilter: nf_tables: can't schedule in nft_chain_validate
    - r8169: use new PM macros
    - Linux 5.15.150
  * Jammy update: v5.15.150 upstream stable release (LP: #2060142) //
    CVE-2024-26733
    - packet: move from strlcpy with unused retval to strscpy
    - net: dev: Convert sa_data to flexible array in struct sockaddr
    - arp: Prevent overflow in arp_req_get().
  * Jammy update: v5.15.150 upstream stable release (LP: #2060142) //
    CVE-2024-26735
    - ipv6: sr: fix possible use-after-free and null-ptr-deref
  * Jammy update: v5.15.150 upstream stable release (LP: #2060142) //
    CVE-2024-26736
    - afs: Increase buffer size in afs_update_volume_status()
  * Jammy update: v5.15.150 upstream stable release (LP: #2060142) //
    CVE-2024-26748
    - usb: cdns3: fix memory double free when handle zero packet
  * CVE-2023-47233
    - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
  * CVE-2024-26584
    - net: tls: handle backlogging of crypto requests
  * CVE-2024-26585
    - tls: fix race between tx work scheduling and socket close
  * CVE-2024-26583
    - tls: rx: jump to a more appropriate label
    - tls: rx: drop pointless else after goto
    - tls: stop recv() if initial process_rx_list gave us non-DATA
    - tls: rx: don't store the record type in socket context
    - tls: rx: don't store the decryption status in socket context
    - tls: rx: don't issue wake ups when data is decrypted
    - tls: rx: refactor decrypt_skb_update()
    - tls: hw: rx: use return value of tls_device_decrypted() to carry status
    - tls: rx: drop unnecessary arguments from tls_setup_from_iter()
    - tls: rx: don't report text length from the bowels of decrypt
    - tls: rx: wrap decryption arguments in a structure
    - tls: rx: factor out writing ContentType to cmsg
    - tls: rx: don't track the async count
    - tls: rx: move counting TlsDecryptErrors for sync
    - tls: rx: assume crypto always calls our callback
    - tls: rx: use async as an in-out argument
    - tls: decrement decrypt_pending if no async completion will be called
    - net: tls: fix async vs NIC crypto offload
    - Revert "tls: rx: move counting TlsDecryptErrors for sync"
    - tls: rx: simplify async wait
    - tls: rx: return the already-copied data on crypto error
    - tls: rx: allow only one reader at a time
    - tls: rx: release the sock lock on locking timeout
    - tls: extract context alloc/initialization out of tls_set_sw_offload
    - net: tls: factor out tls_*crypt_async_wait()
    - tls: fix race between async notify and socket close
  * CVE-2024-26622
    - tomoyo: fix UAF write bug in tomoyo_write_control()

 -- Juerg Haefliger <email address hidden>  Mon, 01 Jul 2024 09:01:25 +0200