This bug was fixed in the package linux-oem-5.14 - 5.14.0-1033.36 --------------- linux-oem-5.14 (5.14.0-1033.36) focal; urgency=medium * focal/linux-oem-5.14: 5.14.0-1033.36 -proposed tracker (LP: #1967397) * Bolt doesn't work with native USB4 hosts (LP: #1962349) - thunderbolt: Retry DROM reads for more failure scenarios - thunderbolt: Do not resume routers if UID is not set - thunderbolt: Do not make DROM read success compulsory - PCI/ACPI: Allow D3 only if Root Port can signal and wake from D3 * Fix non-working MT7921 BT after reboot (LP: #1966497) - Bluetooth: btusb: Enable MSFT extension for Mediatek Chip (MT7921) * alsa/sdw: Fix the audio issue on a Dell machine without internal mic (LP: #1966841) - ASoC: Intel: soc-acpi: add entries in ADL match table * Enable headset mic on Lenovo P360 (LP: #1967069) - ALSA: hda/realtek: Enable headset mic on Lenovo P360 * WCN6856 BT keep in OFF state after coldboot system (LP: #1967067) - Bluetooth: btusb: Improve stability for QCA devices * Focal update: upstream stable patchset 2022-03-21 (LP: #1965737) - mm/filemap: Fix handling of THPs in generic_file_buffered_read() - cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug - cgroup-v1: Correct privileges check in release_agent writes - x86/ptrace: Fix xfpregs_set()'s incorrect xmm clearing - btrfs: tree-checker: check item_size for inode_item - btrfs: tree-checker: check item_size for dev_item - clk: jz4725b: fix mmc0 clock gating - io_uring: don't convert to jiffies for waiting on timeouts - io_uring: disallow modification of rsrc_data during quiesce - selinux: fix misuse of mutex_is_locked() - vhost/vsock: don't check owner in vhost_vsock_stop() while releasing - parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel - parisc/unaligned: Fix ldw() and stw() unalignment handlers - KVM: x86/mmu: make apf token non-zero to fix bug - drm/amd/display: Protect update_bw_bounding_box FPU code. - drm/amd/pm: fix some OEM SKU specific stability issues - drm/amdgpu: disable MMHUB PG for Picasso - drm/amdgpu: do not enable asic reset for raven2 - drm/i915: Widen the QGV point mask - drm/i915: Correctly populate use_sagv_wm for all pipes - drm/i915: Fix bw atomic check when switching between SAGV vs. no SAGV - sr9700: sanity check for packet length - USB: zaurus: support another broken Zaurus - CDC-NCM: avoid overflow in sanity checking - netfilter: xt_socket: fix a typo in socket_mt_destroy() - netfilter: xt_socket: missing ifdef CONFIG_IP6_NF_IPTABLES dependency - tee: export teedev_open() and teedev_close_context() - optee: use driver internal tee_context for some rpc - ping: remove pr_err from ping_lookup - Revert "i40e: Fix reset bw limit when DCB enabled with 1 TC" - gpu: host1x: Always return syncpoint value when waiting - perf data: Fix double free in perf_session__delete() - mptcp: fix race in incoming ADD_ADDR option processing - mptcp: add mibs counter for ignored incoming options - selftests: mptcp: fix diag instability - selftests: mptcp: be more conservative with cookie MPJ limits - bnx2x: fix driver load from initrd - bnxt_en: Fix active FEC reporting to ethtool - bnxt_en: Fix offline ethtool selftest with RDMA enabled - bnxt_en: Fix incorrect multicast rx mask setting when not requested - hwmon: Handle failure to register sensor with thermal zone correctly - net/mlx5: Fix tc max supported prio for nic mode - ice: check the return of ice_ptp_gettimex64 - ice: initialize local variable 'tlv' - net/mlx5: Update the list of the PCI supported devices - bpf: Do not try bpf_msg_push_data with len 0 - selftests: bpf: Check bpf_msg_push_data return value - bpf: Add schedule points in batch ops - io_uring: add a schedule point in io_add_buffers() - net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends - tipc: Fix end of loop tests for list_for_each_entry() - gso: do not skip outer ip header in case of ipip and net_failover - net: mv643xx_eth: process retval from of_get_mac_address - openvswitch: Fix setting ipv6 fields causing hw csum failure - drm/edid: Always set RGB444 - net/mlx5e: Fix wrong return value on ioctl EEPROM query failure - drm/vc4: crtc: Fix runtime_pm reference counting - net/sched: act_ct: Fix flow table lookup after ct clear or switching zones - net: ll_temac: check the return value of devm_kmalloc() - net: Force inlining of checksum functions in net/checksum.h - netfilter: nf_tables: unregister flowtable hooks on netns exit - nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac() - netfilter: nf_tables: fix memory leak during stateful obj update - net/smc: Use a mutex for locking "struct smc_pnettable" - surface: surface3_power: Fix battery readings on batteries without a serial number - udp_tunnel: Fix end of loop test in udp_tunnel_nic_unregister() - net/mlx5: DR, Cache STE shadow memory - ibmvnic: schedule failover only if vioctl fails - net/mlx5: DR, Don't allow match on IP w/o matching on full ethertype/ip_version - net/mlx5: Fix possible deadlock on rule deletion - net/mlx5: Fix wrong limitation of metadata match on ecpf - net/mlx5: DR, Fix the threshold that defines when pool sync is initiated - net/mlx5e: MPLSoUDP decap, fix check for unsupported matches - net/mlx5e: kTLS, Use CHECKSUM_UNNECESSARY for device-offloaded packets - net/mlx5: Update log_max_qp value to be 17 at most - spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op() - regmap-irq: Update interrupt clear register for proper reset - net-timestamp: convert sk->sk_tskey to atomic_t - RDMA/rtrs-clt: Fix possible double free in error case - RDMA/rtrs-clt: Move free_permit from free_clt to rtrs_clt_close - configfs: fix a race in configfs_{,un}register_subsystem() - RDMA/ib_srp: Fix a deadlock - tracing: Dump stacktrace trigger to the corresponding instance - tracing: Have traceon and traceoff trigger honor the instance - iio:imu:adis16480: fix buffering for devices with no burst mode - iio: adc: men_z188_adc: Fix a resource leak in an error handling path - iio: adc: tsc2046: fix memory corruption by preventing array overflow - iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits - iio: accel: fxls8962af: add padding to regmap for SPI - iio: imu: st_lsm6dsx: wait for settling time in st_lsm6dsx_read_oneshot - iio: Fix error handling for PM - sc16is7xx: Fix for incorrect data being transmitted - ata: pata_hpt37x: disable primary channel on HPT371 - Revert "USB: serial: ch341: add new Product ID for CH341A" - usb: gadget: rndis: add spinlock for rndis response list - USB: gadget: validate endpoint index for xilinx udc - tracefs: Set the group ownership in apply_options() not parse_options() - USB: serial: option: add support for DW5829e - USB: serial: option: add Telit LE910R1 compositions - usb: dwc2: drd: fix soft connect when gadget is unconfigured - usb: dwc3: pci: Add "snps,dis_u2_susphy_quirk" for Intel Bay Trail - usb: dwc3: pci: Fix Bay Trail phy GPIO mappings - usb: dwc3: gadget: Let the interrupt handler disable bottom halves. - xhci: re-initialize the HC during resume if HCE was set - xhci: Prevent futile URB re-submissions due to incorrect return value. - nvmem: core: Fix a conflict between MTD and NVMEM on wp-gpios property - mtd: core: Fix a conflict between MTD and NVMEM on wp-gpios property - driver core: Free DMA range map when device is released - RDMA/cma: Do not change route.addr.src_addr outside state checks - thermal: int340x: fix memory leak in int3400_notify() - staging: fbtft: fb_st7789v: reset display before initialization - tps6598x: clear int mask on probe failure - IB/qib: Fix duplicate sysfs directory name - riscv: fix nommu_k210_sdcard_defconfig - riscv: fix oops caused by irqsoff latency tracer - tty: n_gsm: fix encoding of control signal octet bit DV - tty: n_gsm: fix proper link termination after failed open - tty: n_gsm: fix NULL pointer access due to DLCI release - tty: n_gsm: fix wrong tty control line for flow control - tty: n_gsm: fix wrong modem processing in convergence layer type 2 - tty: n_gsm: fix deadlock in gsmtty_open() - pinctrl: fix loop in k210_pinconf_get_drive() - pinctrl: k210: Fix bias-pull-up - gpio: tegra186: Fix chip_data type confusion - memblock: use kfree() to release kmalloced memblock regions - ice: Fix race conditions between virtchnl handling and VF ndo ops - ice: fix concurrent reset and removal of VFs - upstream stable to v5.15.26 - mac80211_hwsim: report NOACK frames in tx_status - mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work - i2c: bcm2835: Avoid clock stretching timeouts - ASoC: rt5668: do not block workqueue if card is unbound - ASoC: rt5682: do not block workqueue if card is unbound - regulator: core: fix false positive in regulator_late_cleanup() - Input: clear BTN_RIGHT/MIDDLE on buttonpads - btrfs: get rid of warning on transaction commit when using flushoncommit - KVM: arm64: vgic: Read HW interrupt pending state from the HW - block: loop:use kstatfs.f_bsize of backing file to set discard granularity - tipc: fix a bit overflow in tipc_crypto_key_rcv() - cifs: do not use uninitialized data in the owner/group sid - cifs: fix double free race when mount fails in cifs_get_root() - cifs: modefromsids must add an ACE for authenticated users - selftests/seccomp: Fix seccomp failure by adding missing headers - drm/amd/pm: correct UMD pstate clocks for Dimgrey Cavefish and Beige Goby - selftests/ftrace: Do not trace do_softirq because of PREEMPT_RT - dmaengine: shdma: Fix runtime PM imbalance on error - i2c: cadence: allow COMPILE_TEST - i2c: imx: allow COMPILE_TEST - i2c: qup: allow COMPILE_TEST - net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990 - block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern - usb: gadget: don't release an existing dev->buf - usb: gadget: clear related members when goto fail - exfat: reuse exfat_inode_info variable instead of calling EXFAT_I() - exfat: fix i_blocks for files truncated over 4 GiB - tracing: Add test for user space strings when filtering on string pointers - arm64: Mark start_backtrace() notrace and NOKPROBE_SYMBOL - serial: stm32: prevent TDR register overwrite when sending x_char - ext4: drop ineligible txn start stop APIs - ext4: simplify updating of fast commit stats - ext4: fast commit may not fallback for ineligible commit - ext4: fast commit may miss file actions - sched/fair: Fix fault in reweight_entity - ata: pata_hpt37x: fix PCI clock detection - drm/amdgpu: check vm ready by amdgpu_vm->evicting flag - tracing: Add ustring operation to filtering string pointers - NFSD: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() - NFSD: Fix zero-length NFSv3 WRITEs - io_uring: fix no lock protection for ctx->cq_extra - tools/resolve_btf_ids: Close ELF file on error - mtd: spi-nor: Fix mtd size for s3an flashes - MIPS: fix local_{add,sub}_return on MIPS64 - signal: In get_signal test for signal_group_exit every time through the loop - PCI: mediatek-gen3: Disable DVFSRC voltage request - PCI: dwc: Do not remap invalid res - PCI: aardvark: Fix checking for MEM resource type - KVM: VMX: Don't unblock vCPU w/ Posted IRQ if IRQs are disabled in guest - KVM: s390: Ensure kvm_arch_no_poll() is read once when blocking vCPU - KVM: VMX: Read Posted Interrupt "control" exactly once per loop iteration - KVM: X86: Ensure that dirty PDPTRs are loaded - KVM: x86: Handle 32-bit wrap of EIP for EMULTYPE_SKIP with flat code seg - KVM: x86: Exit to userspace if emulation prepared a completion callback - i3c: fix incorrect address slot lookup on 64-bit - i3c/master/mipi-i3c-hci: Fix a potentially infinite loop in 'hci_dat_v1_get_index()' - tracing: Do not let synth_events block other dyn_event systems during create - Input: ti_am335x_tsc - set ADCREFM for X configuration - Input: ti_am335x_tsc - fix STEPCONFIG setup for Z2 - PCI: mvebu: Check for errors from pci_bridge_emul_init() call - PCI: mvebu: Do not modify PCI IO type bits in conf_write - PCI: mvebu: Fix support for bus mastering and PCI_COMMAND on emulated bridge - PCI: mvebu: Fix configuring secondary bus of PCIe Root Port via emulated bridge - PCI: mvebu: Setup PCIe controller to Root Complex mode - PCI: mvebu: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge - PCI: mvebu: Fix support for PCI_EXP_DEVCTL on emulated bridge - PCI: mvebu: Fix support for PCI_EXP_RTSTA on emulated bridge - PCI: mvebu: Fix support for DEVCAP2, DEVCTL2 and LNKCTL2 registers on emulated bridge - NFSD: Fix verifier returned in stable WRITEs - Revert "nfsd: skip some unnecessary stats in the v4 case" - nfsd: fix crash on COPY_NOTIFY with special stateid - x86/hyperv: Properly deal with empty cpumasks in hyperv_flush_tlb_multi() - drm/i915: don't call free_mmap_offset when purging - SUNRPC: Fix sockaddr handling in the svc_xprt_create_error trace point - SUNRPC: Fix sockaddr handling in svcsock_accept_class trace points - drm/sun4i: dw-hdmi: Fix missing put_device() call in sun8i_hdmi_phy_get - drm/atomic: Check new_crtc_state->active to determine if CRTC needs disable in self refresh mode - ntb_hw_switchtec: Fix pff ioread to read into mmio_part_cfg_all - ntb_hw_switchtec: Fix bug with more than 32 partitions - drm/amdkfd: Check for null pointer after calling kmemdup - i3c: master: dw: check return of dw_i3c_master_get_free_pos() - dma-buf: cma_heap: Fix mutex locking section - tracing/probes: check the return value of kstrndup() for pbuf - mm: defer kmemleak object creation of module_alloc() - kasan: fix quarantine conflicting with init_on_free - selftests/vm: make charge_reserved_hugetlb.sh work with existing cgroup setting - hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list() - drm/amdgpu: filter out radeon PCI device IDs - drm/amdgpu: filter out radeon secondary ids as well - drm/amd/display: Use adjusted DCN301 watermarks - tracing/uprobes: Check the return value of kstrdup() for tu->filename - ethtool: Fix link extended state for big endian - net/mlx5e: IPsec: Refactor checksum code in tx data path - net/mlx5e: IPsec: Fix crypto offload for non TCP/UDP encapsulated traffic - drm/amd/display: Update watermark values for DCN301 - riscv/mm: Add XIP_FIXUP for phys_ram_base - gve: Recording rx queue before sending to napi - net: dsa: ocelot: seville: utilize of_mdiobus_register - net: dsa: seville: register the mdiobus under devres - ibmvnic: don't release napi in __ibmvnic_open() - drm/mediatek: mtk_dsi: Reset the dsi0 hardware - cifs: protect session channel fields with chan_lock - cifs: fix confusing unneeded warning message on smb2.1 and earlier - drm/amd/display: Fix stream->link_enc unassigned during stream removal - bnxt_en: Fix occasional ethtool -t loopback test failures - PCI: mvebu: Fix device enumeration regression - ALSA: intel_hdmi: Fix reference to PCM buffer address - ucounts: Fix systemd LimitNPROC with private users regression - riscv/efi_stub: Fix get_boot_hartid_from_fdt() return value - riscv: Fix config KASAN && SPARSEMEM && !SPARSE_VMEMMAP - riscv: Fix config KASAN && DEBUG_VIRTUAL - iwlwifi: mvm: check debugfs_dir ptr before use - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min - iommu/vt-d: Fix double list_add when enabling VMD in scalable mode - iommu/amd: Recover from event log overflow - drm/i915: s/JSP2/ICP2/ PCH - drm/amd/display: Reduce dmesg error to a debug print - xen/netfront: destroy queues before real_num_tx_queues is zeroed - thermal: core: Fix TZ_GET_TRIP NULL pointer dereference - mac80211: fix EAPoL rekey fail in 802.3 rx path - blktrace: fix use after free for struct blk_trace - ntb: intel: fix port config status offset for SPR - mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls - xfrm: fix MTU regression - netfilter: fix use-after-free in __nf_register_net_hook() - bpf, sockmap: Do not ignore orig_len parameter - xfrm: fix the if_id check in changelink - xfrm: enforce validity of offload input flags - e1000e: Correct NVM checksum verification flow - net: fix up skbs delta_truesize in UDP GRO frag_list - netfilter: nf_queue: don't assume sk is full socket - netfilter: nf_queue: fix possible use-after-free - netfilter: nf_queue: handle socket prefetch - batman-adv: Request iflink once in batadv-on-batadv check - batman-adv: Request iflink once in batadv_get_real_netdevice - batman-adv: Don't expect inter-netns unique iflink indices - net: ipv6: ensure we call ipv6_mc_down() at most once - net: dcb: flush lingering app table entries for unregistered devices - net: ipa: add an interconnect dependency - net/smc: fix connection leak - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server - btrfs: fix ENOSPC failure when attempting direct IO write into NOCOW range - mac80211: fix forwarded mesh frames AC & queue selection - net: stmmac: fix return value of __setup handler - mac80211: treat some SAE auth steps as final - iavf: Fix missing check for running netdev - net: sxgbe: fix return value of __setup handler - ibmvnic: register netdev after init of adapter - net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() - ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc() - iavf: Fix deadlock in iavf_reset_task - efivars: Respect "block" flag in efivar_entry_set_safe() - auxdisplay: lcd2s: Fix lcd2s_redefine_char() feature - firmware: arm_scmi: Remove space in MODULE_ALIAS name - ASoC: cs4265: Fix the duplicated control name - auxdisplay: lcd2s: Fix memory leak in ->remove() - auxdisplay: lcd2s: Use proper API to free the instance of charlcd object - can: gs_usb: change active_channels's type from atomic_t to u8 - iommu/tegra-smmu: Fix missing put_device() call in tegra_smmu_find - arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output - igc: igc_read_phy_reg_gpy: drop premature return - ARM: Fix kgdb breakpoint for Thumb2 - mips: setup: fix setnocoherentio() boolean setting - ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions - mptcp: Correctly set DATA_FIN timeout when number of retransmits is large - selftests: mlxsw: tc_police_scale: Make test more robust - pinctrl: sunxi: Use unique lockdep classes for IRQs - igc: igc_write_phy_reg_gpy: drop premature return - ibmvnic: free reset-work-item when flushing - memfd: fix F_SEAL_WRITE after shmem huge page allocated - s390/extable: fix exception table sorting - sched: Fix yet more sched_fork() races - arm64: dts: juno: Remove GICv2m dma-range - iommu/amd: Fix I/O page table memory leak - MIPS: ralink: mt7621: do memory detection on KSEG1 - ARM: dts: switch timer config to common devkit8000 devicetree - ARM: dts: Use 32KiHz oscillator on devkit8000 - soc: fsl: guts: Revert commit 3c0d64e867ed - soc: fsl: guts: Add a missing memory allocation failure check - soc: fsl: qe: Check of ioremap return value - netfilter: nf_tables: prefer kfree_rcu(ptr, rcu) variant - ARM: tegra: Move panels to AUX bus - can: etas_es58x: change opened_channel_cnt's type from atomic_t to u8 - net: stmmac: enhance XDP ZC driver level switching performance - net: stmmac: only enable DMA interrupts when ready - ibmvnic: initialize rc before completing wait - ibmvnic: define flush_reset_queue helper - ibmvnic: complete init_done on transport events - net: chelsio: cxgb3: check the return value of pci_find_capability() - net: sparx5: Fix add vlan when invalid operation - iavf: Refactor iavf state machine tracking - iavf: Add __IAVF_INIT_FAILED state - iavf: Combine init and watchdog state machines - iavf: Add trace while removing device - iavf: Rework mutexes for better synchronisation - iavf: Add helper function to go from pci_dev to adapter - iavf: Fix kernel BUG in free_msi_irqs - iavf: Add waiting so the port is initialized in remove - iavf: Fix init state closure on remove - iavf: Fix locking for VIRTCHNL_OP_GET_OFFLOAD_VLAN_V2_CAPS - iavf: Fix race in init state - iavf: Fix __IAVF_RESETTING state usage - drm/bridge: ti-sn65dsi86: Properly undo autosuspend - MIPS: ralink: mt7621: use bitwise NOT instead of logical - nl80211: Handle nla_memdup failures in handle_nan_filter - drm/amdgpu: fix suspend/resume hang regression - net: dcb: disable softirqs in dcbnl_flush_dev() - selftests: mlxsw: resource_scale: Fix return value - net: stmmac: perserve TX and RX coalesce value during XDP setup - iavf: do not override the adapter state in the watchdog task (again) - iavf: missing unlocks in iavf_watchdog_task() - MAINTAINERS: adjust file entry for of_net.c after movement - Input: elan_i2c - move regulator_[en|dis]able() out of elan_[en|dis]able_power() - Input: elan_i2c - fix regulator enable count imbalance after suspend/resume - Input: samsung-keypad - properly state IOMEM dependency - HID: add mapping for KEY_DICTATE - HID: add mapping for KEY_ALL_APPLICATIONS - tracing/histogram: Fix sorting on old "cpu" value - tracing: Fix return value of __setup handlers - btrfs: fix lost prealloc extents beyond eof after full fsync - btrfs: fix relocation crash due to premature return from btrfs_commit_transaction() - btrfs: do not WARN_ON() if we have PageError set - btrfs: qgroup: fix deadlock between rescan worker and remove qgroup - btrfs: add missing run of delayed items after unlink during log replay - btrfs: do not start relocation until in progress drops are done - Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6" - proc: fix documentation and description of pagemap - KVM: x86/mmu: Passing up the error state of mmu_alloc_shadow_roots() - hamradio: fix macro redefine warning - upstream stable to v5.15.27 - slip: fix macro redefine warning - x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting - x86/speculation: Use generic retpoline by default on AMD - x86/speculation: Update link to AMD speculation whitepaper - x86/speculation: Warn about Spectre v2 LFENCE mitigation - x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT - ARM: report Spectre v2 status through sysfs - ARM: early traps initialisation - ARM: use LOADADDR() to get load address of sections - ARM: Spectre-BHB workaround - ARM: include unprivileged BPF status in Spectre V2 reporting - arm64: Add Neoverse-N2, Cortex-A710 CPU part definition - arm64: Add HWCAP for self-synchronising virtual counter - arm64: Add Cortex-X2 CPU part definition - arm64: add ID_AA64ISAR2_EL1 sys register - arm64: cpufeature: add HWCAP for FEAT_AFP - arm64: cpufeature: add HWCAP for FEAT_RPRES - arm64: entry.S: Add ventry overflow sanity checks - arm64: spectre: Rename spectre_v4_patch_fw_mitigation_conduit - KVM: arm64: Allow indirect vectors to be used without SPECTRE_V3A - arm64: entry: Make the trampoline cleanup optional - arm64: entry: Free up another register on kpti's tramp_exit path - arm64: entry: Move the trampoline data page before the text page - arm64: entry: Allow tramp_alias to access symbols after the 4K boundary - arm64: entry: Don't assume tramp_vectors is the start of the vectors - arm64: entry: Move trampoline macros out of ifdef'd section - arm64: entry: Make the kpti trampoline's kpti sequence optional - arm64: entry: Allow the trampoline text to occupy multiple pages - arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations - arm64: entry: Add vectors that have the bhb mitigation sequences - arm64: entry: Add macro for reading symbol addresses from the trampoline - arm64: Add percpu vectors for EL1 - arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 - arm64: Mitigate spectre style branch history side channels - KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated - arm64: Use the clearbhb instruction in mitigations - arm64: proton-pack: Include unprivileged eBPF status in Spectre v2 mitigation reporting - ARM: fix build error when BPF_SYSCALL is disabled - ARM: fix co-processor register typo - ARM: Do not use NOCROSSREFS directive with ld.lld - arm64: Do not include __READ_ONCE() block in assembly files - ARM: fix build warning in proc-v7-bugs.c - Revert "ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE" - upstream stable to v5.15.28 - arm64: dts: qcom: sm8350: Describe GCC dependency clocks - arm64: dts: qcom: sm8350: Correct UFS symbol clocks - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts - ARM: boot: dts: bcm2711: Fix HVS register range - clk: qcom: gdsc: Add support to update GDSC transition delay - HID: vivaldi: fix sysfs attributes leak - arm64: dts: armada-3720-turris-mox: Add missing ethernet0 alias - tipc: fix kernel panic when enabling bearer - net: phy: meson-gxl: fix interrupt handling in forced mode - mISDN: Fix memory leak in dsp_pipeline_build() - vhost-iotlb: Add an opaque pointer for vhost IOTLB - vhost: fix hung thread due to erroneous iotlb entries - virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero - vdpa: fix use-after-free on vp_vdpa_remove - isdn: hfcpci: check the return value of dma_set_mask() in setup_hw() - net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare() - esp: Fix BEET mode inter address family tunneling on GSO - qed: return status of qed_iov_get_link - smsc95xx: Ignore -ENODEV errors when device is unplugged - drm/sun4i: mixer: Fix P010 and P210 format numbers - net: dsa: mt7530: fix incorrect test in mt753x_phylink_validate() - ARM: dts: aspeed: Fix AST2600 quad spi group - iavf: Fix handling of vlan strip virtual channel messages - i40e: stop disabling VFs due to PF error responses - ice: stop disabling VFs due to PF error responses - ice: Fix error with handling of bonding MTU - ice: Don't use GFP_KERNEL in atomic context - ice: Fix curr_link_speed advertised speed - ethernet: Fix error handling in xemaclite_of_probe - tipc: fix incorrect order of state message data sanity check - net: ethernet: ti: cpts: Handle error for clk_enable - net: ethernet: lpc_eth: Handle error for clk_enable - net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr - ax25: Fix NULL pointer dereference in ax25_kill_by_device - net/mlx5: Fix size field in bufferx_reg struct - net/mlx5: Fix a race on command flush flow - net/mlx5e: Lag, Only handle events from highest priority multipath entry - NFC: port100: fix use-after-free in port100_send_complete - selftests: pmtu.sh: Kill tcpdump processes launched by subshell. - selftests: pmtu.sh: Kill nettest processes launched in subshell. - gpio: ts4900: Do not set DAT and OE together - gianfar: ethtool: Fix refcount leak in gfar_get_ts_info - net: phy: DP83822: clear MISR2 register to disable interrupts - sctp: fix kernel-infoleak for SCTP sockets - net: bcmgenet: Don't claim WOL when its not available - net: phy: meson-gxl: improve link-up behavior - selftests/bpf: Add test for bpf_timer overwriting crash - swiotlb: fix info leak with DMA_FROM_DEVICE - usb: dwc3: pci: add support for the Intel Raptor Lake-S - pinctrl: tigerlake: Revert "Add Alder Lake-M ACPI ID" - KVM: Fix lockdep false negative during host resume - kvm: x86: Disable KVM_HC_CLOCK_PAIRING if tsc is in always catchup mode - spi: rockchip: Fix error in getting num-cs property - spi: rockchip: terminate dma transmission when slave abort - x86/kvm: Don't use pv tlb/ipi/sched_yield if on 1 vCPU - net-sysfs: add check for netdevice being present to speed_show - hwmon: (pmbus) Clear pmbus fault/warning bits after read - PCI: Mark all AMD Navi10 and Navi14 GPU ATS as broken - gpio: Return EPROBE_DEFER if gc->to_irq is NULL - drm/amdgpu: bypass tiling flag check in virtual display case (v2) - Revert "xen-netback: remove 'hotplug-status' once it has served its purpose" - Revert "xen-netback: Check for hotplug-status existence before watching" - ipv6: prevent a possible race condition with lifetimes - tracing: Ensure trace buffer is at least 4096 bytes large - tracing/osnoise: Make osnoise_main to sleep for microseconds - selftest/vm: fix map_fixed_noreplace test failure - selftests/memfd: clean up mapping in mfd_fail_write - ARM: Spectre-BHB: provide empty stub for non-config - fuse: fix fileattr op failure - fuse: fix pipe buffer lifetime for direct_io - staging: rtl8723bs: Fix access-point mode deadlock - staging: gdm724x: fix use after free in gdm_lte_rx() - net: macb: Fix lost RX packet wakeup race in NAPI receive - riscv: alternative only works on !XIP_KERNEL - mmc: meson: Fix usage of meson_mmc_post_req() - riscv: Fix auipc+jalr relocation range checks - tracing/osnoise: Force quiescent states while tracing - arm64: dts: marvell: armada-37xx: Remap IO space to bus address 0x0 - arm64: Ensure execute-only permissions are not allowed without EPAN - arm64: kasan: fix include error in MTE functions - swiotlb: rework "fix info leak with DMA_FROM_DEVICE" - virtio: unexport virtio_finalize_features - virtio: acknowledge all features before access - net/mlx5: Fix offloading with ESWITCH_IPV4_TTL_MODIFY_ENABLE - ARM: fix Thumb2 regression with Spectre BHB - watch_queue: Fix filter limit check - watch_queue, pipe: Free watchqueue state after clearing pipe ring - watch_queue: Fix to release page in ->release() - watch_queue: Fix to always request a pow-of-2 pipe ring size - watch_queue: Fix the alloc bitmap size to reflect notes allocated - watch_queue: Free the alloc bitmap when the watch_queue is torn down - watch_queue: Fix lack of barrier/sync/lock between post and read - watch_queue: Make comment about setting ->defunct more accurate - x86/boot: Fix memremap of setup_indirect structures - x86/boot: Add setup_indirect support in early_memremap_is_setup_data() - x86/sgx: Free backing memory after faulting the enclave page - x86/traps: Mark do_int3() NOKPROBE_SYMBOL - drm/i915: Workaround broken BIOS DBUF configuration on TGL/RKL - riscv: dts: k210: fix broken IRQs on hart1 - vhost: allow batching hint without size - upstream stable to v5.15.29 - Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0" - arm64: dts: rockchip: fix rk3399-puma-haikou USB OTG mode - xfrm: Check if_id in xfrm_migrate - xfrm: Fix xfrm migrate issues when address family changes - arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity - arm64: dts: rockchip: align pl330 node name with dtschema - arm64: dts: rockchip: reorder rk3399 hdmi clocks - arm64: dts: agilex: use the compatible "intel,socfpga-agilex-hsotg" - ARM: dts: rockchip: reorder rk322x hmdi clocks - ARM: dts: rockchip: fix a typo on rk3288 crypto-controller - mac80211: refuse aggregations sessions before authorized - MIPS: smp: fill in sibling and core maps earlier - ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE - can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when fully ready - atm: firestream: check the return value of ioremap() in fs_init() - iwlwifi: don't advertise TWT support - drm/vrr: Set VRR capable prop only if it is attached to connector - nl80211: Update bss channel on channel switch for P2P_CLIENT - tcp: make tcp_read_sock() more robust - sfc: extend the locking on mcdi->seqno - bnx2: Fix an error message - kselftest/vm: fix tests build with old libc - x86/module: Fix the paravirt vs alternative order - ice: Fix race condition during interface enslave - upstream stable to v5.15.30 - crypto: qcom-rng - ensure buffer for generate is completely filled - ocfs2: fix crash when initialize filecheck kobj fails - mm: swap: get rid of livelock in swapin readahead - block: release rq qos structures for queue without disk - efi: fix return value of __setup handlers - alx: acquire mutex for alx_reinit in alx_change_mtu - vsock: each transport cycles only on its own sockets - esp6: fix check on ipv6_skip_exthdr's return value - net: phy: marvell: Fix invalid comparison in the resume and suspend functions - net/packet: fix slab-out-of-bounds access in packet_recvmsg() - atm: eni: Add check for dma_map_single - iavf: Fix double free in iavf_reset_task - hv_netvsc: Add check for kvmalloc_array - drm/imx: parallel-display: Remove bus flags check in imx_pd_bridge_atomic_check() - drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings - net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit() - drm: Don't make DRM_PANEL_BRIDGE dependent on DRM_KMS_HELPERS - net: dsa: Add missing of_node_put() in dsa_port_parse_of - net: phy: mscc: Add MODULE_FIRMWARE macros - bnx2x: fix built-in kernel driver load failure - net: bcmgenet: skip invalid partial checksums - net: mscc: ocelot: fix backwards compatibility with single-chain tc-flower offload - iavf: Fix hang during reboot/shutdown - arm64: fix clang warning about TRAMP_VALIAS - usb: gadget: rndis: prevent integer overflow in rndis_set_response() - usb: gadget: Fix use-after-free bug by not setting udc->dev.driver - usb: usbtmc: Fix bug in pipe direction for control transfers - scsi: mpt3sas: Page fault in reply q processing - Input: aiptek - properly check endpoint type - perf symbols: Fix symbol size calculation condition - btrfs: skip reserved bytes warning on unmount after log cleanup failure - upstream stable to v5.15.31 - nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION - net: ipv6: fix skb_over_panic in __ip6_append_data - tpm: Fix error handling in async work - Bluetooth: btusb: Add another Realtek 8761BU - llc: fix netdevice reference leaks in llc_ui_bind() - ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call - ALSA: oss: Fix PCM OSS buffer allocation overflow - ALSA: usb-audio: add mapping for new Corsair Virtuoso SE - ALSA: hda/realtek: Add quirk for Clevo NP70PNJ - ALSA: hda/realtek: Add quirk for Clevo NP50PNJ - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 - ALSA: hda/realtek: Add quirk for ASUS GA402 - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls - ALSA: pcm: Fix races among concurrent read/write and buffer changes - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls - ALSA: pcm: Fix races among concurrent prealloc proc writes - ALSA: pcm: Add stream lock during PCM reset ioctl operations - ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB - ALSA: cmipci: Restore aux vol on suspend/resume - ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec - drivers: net: xgene: Fix regression in CRC stripping - netfilter: nf_tables: initialize registers in nft_do_chain() - netfilter: nf_tables: validate registers coming from userspace. - ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board - ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3 - ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU - crypto: qat - disable registration of algorithms - Bluetooth: btusb: Add one more Bluetooth part for the Realtek RTL8852AE - Revert "ath: add support for special 0x0 regulatory domain" - drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free() - rcu: Don't deboost before reporting expedited quiescent state - uaccess: fix integer overflow on access_ok() - mac80211: fix potential double free on mesh join - tpm: use try_get_ops() in tpm-space.c - wcn36xx: Differentiate wcn3660 from wcn3620 - nds32: fix access_ok() checks in get/put_user - llc: only change llc->dev when bind() succeeds - upstream stable to v5.15.32 * Mute/mic LEDs no function on some HP platfroms (LP: #1965080) - ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machines * Choppy trackpad/USB mouse behavior with oem-1023 or above kernel version (LP: #1964850) - drm/amdgpu/display: Only set vblank_disable_immediate when PSR is not enabled - drm/amd/display: For vblank_disable_immediate, check PSR is really used -- Timo Aaltonen