Lunar update: v6.2.11 upstream stable release

[Paolo Pisati]

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v6.2.11 upstream stable release
       from git://git.kernel.org/

Linux 6.2.11
mm: enable maple tree RCU mode by default.
maple_tree: add RCU lock checking to rcu callback functions
maple_tree: add smp_rmb() to dead node detection
maple_tree: remove extra smp_wmb() from mas_dead_leaves()
maple_tree: fix freeing of nodes in rcu mode
maple_tree: detect dead nodes in mas_start()
maple_tree: refine ma_state init from mas_start()
maple_tree: be more cautious about dead nodes
maple_tree: fix mas_prev() and mas_find() state handling
maple_tree: fix handle of invalidated state in mas_wr_store_setup()
maple_tree: reduce user error potential
maple_tree: fix potential rcu issue
maple_tree: remove GFP_ZERO from kmem_cache_alloc() and kmem_cache_alloc_bulk()
mm: take a page reference when removing device exclusive entries
drm/bridge: lt9611: Fix PLL being unable to lock
drm/amdgpu: skip psp suspend for IMU enabled ASICs mode2 reset
drm/amdgpu: for S0ix, skip SDMA 5.x+ suspend/resume
drm/amd/display: Clear MST topology if it fails to resume
maple_tree: fix a potential concurrency bug in RCU mode
maple_tree: fix get wrong data_end in mtree_lookup_walk()
mm/hugetlb: fix uffd wr-protection for CoW optimization path
mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()
ring-buffer: Fix race while reader and writer are on the same page
drm/i915: fix race condition UAF in i915_perf_add_config_ioctl
drm/i915: Fix context runtime accounting
drm/nouveau/disp: Support more modes by checking with lower bpc
drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
ublk: read any SQE values upfront
wifi: mt76: ignore key disable commands
wifi: mt76: mt7921: fix fw used for offload check for mt7922
mm: vmalloc: avoid warn_alloc noise caused by fatal signal
zsmalloc: document freeable stats
tracing/synthetic: Make lastcmd_mutex static
perf/core: Fix the same task check in perf_event_set_output
perf: Optimize perf_pmu_migrate_context()
block: don't set GD_NEED_PART_SCAN if scan partition failed
block: ublk: make sure that block size is set correctly
cifs: sanitize paths in cifs_update_super_prepath.
nvme: fix discard support without oncs
scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
scsi: qla2xxx: Fix memory leak in qla2x00_probe_one()
io_uring: fix memory leak when removing provided buffers
io_uring: fix return value when removing provided buffers
iio: adc: ad7791: fix IRQ flags
ASoC: SOF: avoid a NULL dereference with unsupported widgets
ASoC: hdac_hdmi: use set_stream() instead of set_tdm_slots()
iommufd: Do not corrupt the pfn list when doing batch carry
iommufd: Fix unpinning of pages when an access is present
iommufd: Check for uptr overflow
tracing: Free error logs of tracing instances
tracing/osnoise: Fix notify new tracing_max_latency
tracing/timerlat: Notify new max thread latency
tracing/synthetic: Fix races on freeing last_cmd
net: stmmac: Add queue reset into stmmac_xdp_open() function
ACPI: video: Add acpi_backlight=video quirk for Lenovo ThinkPad W530
ACPI: video: Add acpi_backlight=video quirk for Apple iMac14,1 and iMac14,2
ACPI: video: Make acpi_backlight=video work independent from GPU driver
ACPI: video: Add auto_detect arg to __acpi_video_get_backlight_type()
can: isotp: isotp_recvmsg(): use sock_recv_cmsgs() to get SOCK_RXQ_OVFL infos
can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events
can: isotp: fix race between isotp_sendsmg() and isotp_release()
can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access
fs: drop peer group ids under namespace lock
ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct()
ftrace: Mark get_lock_parent_ip() __always_inline
blk-mq: directly poll requests
counter: 104-quad-8: Fix Synapse action reported for Index signals
counter: 104-quad-8: Fix race condition between FLAG and CNTR reads
coresight-etm4: Fix for() loop drvdata->nr_addr_cmp range bug
coresight: etm4x: Do not access TRCIDR1 for identification
mm: kfence: fix handling discontiguous page
mm: kfence: fix PG_slab and memcg_data clearing
KVM: SVM: Flush Hyper-V TLB when required
KVM: nVMX: Do not report error code when synthesizing VM-Exit from Real Mode
KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
x86/ACPI/boot: Use FADT version to check support for online capable
x86/acpi/boot: Correct acpi_is_processor_usable() check
ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
ALSA: hda/realtek: Add quirk for Clevo X370SNW
ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
serial: 8250: Prevent starting up DMA Rx on THRI interrupt
dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs
fsdax: force clear dirty mark if CoW
fsdax: unshare: zero destination if srcmap is HOLE or UNWRITTEN
fsdax: dedupe should compare the min of two iters' length
nilfs2: fix sysfs interface lifetime
nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread()
tty: serial: fsl_lpuart: fix crash in lpuart_uport_is_active
tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty
tty: serial: sh-sci: Fix Rx on RZ/G2L SCI
tty: serial: sh-sci: Fix transmit end interrupt handler
iio: light: vcnl4000: Fix WARN_ON on uninitialized lock
iio: light: cm32181: Unregister second I2C client if present
iio: buffer: make sure O_NONBLOCK is respected
iio: buffer: correctly return bytes written in output buffers
iio: accel: kionix-kx022a: Get the timestamp from the driver's private data in the trigger_handler
iio: adc: max11410: fix read_poll_timeout() usage
iio: dac: cio-dac: Fix max DAC write value check for 12-bit
iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip
iio: adc: qcom-spmi-adc5: Fix the channel name
iio: adis16480: select CONFIG_CRC32
drivers: iio: adc: ltc2497: fix LSB shift
USB: serial: option: add Quectel RM500U-CN modem
USB: serial: option: add Telit FE990 compositions
usb: typec: altmodes/displayport: Fix configure initial pin assignment
USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs
usb: dwc3: pci: add support for the Intel Meteor Lake-S
usb: cdnsp: Fixes error: uninitialized symbol 'len'
xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu
xhci: Free the command allocated for setting LPM if we return early
usb: xhci: tegra: fix sleep in atomic call
Revert "usb: xhci-pci: Set PROBE_PREFER_ASYNCHRONOUS"
PCI/DOE: Fix memory leak with CONFIG_DEBUG_OBJECTS=y
PCI/DOE: Silence WARN splat with CONFIG_DEBUG_OBJECTS=y
cxl/pci: Handle excessive CDAT length
cxl/pci: Handle truncated CDAT entries
cxl/pci: Handle truncated CDAT header
cxl/pci: Fix CDAT retrieval on big endian
net: stmmac: check fwnode for phy device before scanning for phy
arm64: compat: Work around uninitialized variable warning
gve: Secure enough bytes in the first TX desc for all TCP pkts
netlink: annotate lockless accesses to nlk->max_recvmsg_len
ethtool: reset #lanes when lanes is omitted
ping: Fix potentail NULL deref for /proc/net/icmp.
raw: Fix NULL deref in raw_get_next().
raw: use net_hash_mix() in hash function
ice: Reset FDIR counter in FDIR init stage
ice: fix wrong fallback logic for FDIR
NFSD: callback request does not use correct credential for AUTH_SYS
sunrpc: only free unix grouplist after RCU settles
net: stmmac: fix up RX flow hash indirection table when setting channels
net: ethernet: ti: am65-cpsw: Fix mdio cleanup in probe
gpio: davinci: Add irq chip flag to skip set wake
gpio: davinci: Do not clear the bank intr enable bit in save_context
platform/x86: think-lmi: Clean up display of current_value on Thinkstation
platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings
platform/x86: think-lmi: Fix memory leak when showing current settings
ipv6: Fix an uninit variable access bug in __ip6_make_skb()
net: qrtr: Do not do DEL_SERVER broadcast after DEL_CLIENT
drm/i915/huc: Cancel HuC delayed load timer on reset.
sctp: check send stream number after wait_for_sndbuf
net: ethernet: mtk_eth_soc: fix remaining throughput regression
net: dsa: mv88e6xxx: Reset mv88e6393x force WD event bit
net: don't let netpoll invoke NAPI if in xmit context
ALSA: hda/hdmi: Preserve the previous PCM device upon re-enablement
icmp: guard against too small mtu
nfsd: call op_release, even when op_func returns an error
NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL
wifi: brcmfmac: Fix SDIO suspend/resume regression
l2tp: generate correct module alias strings
net: stmmac: remove redundant fixup to support fixed-link mode
net: stmmac: check if MAC needs to attach to a PHY
net: phylink: add phylink_expects_phy() method
net: qrtr: Fix a refcount bug in qrtr_recvmsg()
wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta
wifi: mac80211: fix the size calculation of ieee80211_ie_len_eht_cap()
KVM: s390: pv: fix external interruption loop not always detected
ASoC: codecs: lpass: fix the order or clks turn off during suspend
pwm: meson: Explicitly set .polarity in .get_state()
pwm: sprd: Explicitly set .polarity in .get_state()
pwm: iqs620a: Explicitly set .polarity in .get_state()
pwm: cros-ec: Explicitly set .polarity in .get_state()
pwm: hibvt: Explicitly set .polarity in .get_state()
ASoC: SOF: ipc4: Ensure DSP is in D0I0 during sof_ipc4_set_get_data()
Drivers: vmbus: Check for channel allocation before looking up relids
gpio: GPIO_REGMAP: select REGMAP instead of depending on it
drm/i915: Add a .color_post_update() hook
drm/i915: Move the DSB setup/cleaup into the color code
dm: fix improper splitting for abnormal bios
dm: change "unsigned" to "unsigned int"
dm integrity: Remove bi_sector that's only used by commented debug code
dm cache: Add some documentation to dm-cache-background-tracker.h

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 6.2.0-23.23

---------------
linux (6.2.0-23.23) lunar; urgency=medium

  * lunar/linux: 6.2.0-23.23 -proposed tracker (LP: #2019845)

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts
    - debian/dkms-versions -- update from kernel-versions (main/2023.05.15)

  * Fix flicker display problem on some panels which support PSR2 (LP: #2002968)
    - drm/i915/psr: Add continuous full frame bit together with single

  * Kernel 6.1 bumped the disk consumption on default images by 15%
    (LP: #2015867)
    - [Packaging] introduce a separate linux-lib-rust package

  * Update I915 PSR calculation on Linux 6.2 (LP: #2018655)
    - drm/i915: Fix fast wake AUX sync len
    - drm/i915: Explain the magic numbers for AUX SYNC/precharge length

  * Computer with Intel Atom CPU will not boot with Kernel 6.2.0-20
    (LP: #2017444)
    - [Config]: Disable CONFIG_INTEL_ATOMISP

  * udev fails to make prctl() syscall with apparmor=0 (as used by maas by
    default) (LP: #2016908)
    - SAUCE: (no-up) Stacking v38: Fix prctl() syscall with apparmor=0

  * CVE-2023-32233
    - netfilter: nf_tables: deactivate anonymous set from preparation phase

  * CVE-2023-2612
    - SAUCE: shiftfs: prevent lock unbalance in shiftfs_create_object()

  * CVE-2023-31436
    - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg

  * CVE-2023-1380
    - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()

  * 5.19 not reporting cgroups v1 blkio.throttle.io_serviced (LP: #2016186)
    - SAUCE: blk-throttle: Fix io statistics for cgroup v1

  * LSM stacking and AppArmor for 6.2: additional fixes (LP: #2017903)
    - SAUCE: (no-up) apparmor: fix policy_compat perms remap for file dfa
    - SAUCE: (no-up) apparmor: fix profile verification and enable it
    - SAUCE: (no-up) apparmor: fix: add missing failure check in
      compute_xmatch_perms
    - SAUCE: (no-up) apparmor: fix: kzalloc perms tables for shared dfas

  * Lunar update: v6.2.12 upstream stable release (LP: #2017219)
    - Revert "pinctrl: amd: Disable and mask interrupts on resume"
    - drm/amd/display: Pass the right info to drm_dp_remove_payload
    - drm/i915: Workaround ICL CSC_MODE sticky arming
    - ALSA: emu10k1: fix capture interrupt handler unlinking
    - ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard
    - ALSA: i2c/cs8427: fix iec958 mixer control deactivation
    - ALSA: hda: patch_realtek: add quirk for Asus N7601ZM
    - ALSA: hda/realtek: Add quirks for Lenovo Z13/Z16 Gen2
    - ALSA: firewire-tascam: add missing unwind goto in
      snd_tscm_stream_start_duplex()
    - ALSA: emu10k1: don't create old pass-through playback device on Audigy
    - ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards
    - ALSA: hda/hdmi: disable KAE for Intel DG2
    - Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp}
    - Bluetooth: Fix race condition in hidp_session_thread
    - bluetooth: btbcm: Fix logic error in forming the board name.
    - Bluetooth: Free potentially unfreed SCO connection
    - Bluetooth: hci_conn: Fix possible UAF
    - btrfs: restore the thread_pool=...