Comment 0 for bug 2053212

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.15.146 upstream stable release
       from git://git.kernel.org/

Linux 5.15.146
bpf: Fix prog_array_map_poke_run map poke update
device property: Allow const parameter to dev_fwnode()
dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata()
ring-buffer: Fix slowpath of interrupted event
netfilter: nf_tables: skip set commit for deleted/destroyed sets
ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
ring-buffer: Remove useless update to write_stamp in rb_try_to_discard()
tracing: Fix blocked reader of snapshot buffer
ring-buffer: Fix wake ups when buffer_percent is set to 100
mm/filemap: avoid buffered read/write race to read inconsistent data
Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
smb: client: fix OOB in smbCalcSize()
smb: client: fix OOB in SMB2_query_info_init()
iio: imu: adis16475: add spi_device_id table
spi: Introduce spi_get_device_match_data() helper
device property: Add const qualifier to device_get_match_data() parameter
net: usb: ax88179_178a: avoid failed operations when device is disconnected
net: usb: ax88179_178a: wol optimizations
net: usb: ax88179_178a: clean up pm calls
ethernet: constify references to netdev->dev_addr in drivers
usb: fotg210-hcd: delete an incorrect bounds test
ARM: dts: Fix occasional boot hang for am3 usb
ksmbd: fix wrong allocation size update in smb2_open()
ksmbd: avoid duplicate opinfo_put() call on error of smb21_lease_break_ack()
ksmbd: lazy v2 lease break on smb2_write()
ksmbd: send v2 lease break notification for directory
ksmbd: downgrade RWH lease caching state to RH for directory
ksmbd: set v2 lease capability
ksmbd: set epoch in create context v2 lease
ksmbd: have a dependency on cifs ARC4
fuse: share lookup state between submount and its parent
x86/alternatives: Sync core before enabling interrupts
KVM: arm64: vgic: Force vcpu vgic teardown on vcpu destroy
lib/vsprintf: Fix %pfwf when current node refcount == 0
gpio: dwapb: mask/unmask IRQ when disable/enale it
bus: ti-sysc: Flush posted write only after srst_udelay
tracing / synthetic: Disable events after testing in synth_event_gen_test_init()
scsi: core: Always send batch on reset or error handling command
dt-bindings: nvmem: mxs-ocotp: Document fsl,ocotp
net: ks8851: Fix TX stall caused by TX buffer overrun
net: rfkill: gpio: set GPIO direction
net: 9p: avoid freeing uninit memory in p9pdu_vreadf
Input: soc_button_array - add mapping for airplane mode button
Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE
Bluetooth: L2CAP: Send reject on command corrupted request
Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent
USB: serial: option: add Quectel RM500Q R13 firmware support
USB: serial: option: add Foxconn T99W265 with new baseline
USB: serial: option: add Quectel EG912Y module support
USB: serial: ftdi_sio: update Actisense PIDs constant names
wifi: cfg80211: fix certs build to not depend on file order
wifi: cfg80211: Add my certificate
ALSA: usb-audio: Increase delay in MOTU M quirk
iio: triggered-buffer: prevent possible freeing of wrong buffer
iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma()
iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table
scsi: bnx2fc: Fix skb double free in bnx2fc_rcv()
Input: ipaq-micro-keys - add error handling for devm_kmemdup
iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw
interconnect: Treat xlate() returning NULL node as an error
smb: client: fix OOB in smb2_query_reparse_point()
smb: client: fix NULL deref in asn1_ber_decoder()
drm/i915: Fix intel_atomic_setup_scalers() plane_state handling
drm/i915: Relocate intel_atomic_setup_scalers()
drm/i915/mtl: limit second scaler vertical scaling in ver >= 14
ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE
gpiolib: cdev: add gpio_device locking wrapper around gpio_ioctl()
pinctrl: at91-pio4: use dedicated lock class for IRQ
i2c: aspeed: Handle the coalesced stop conditions with the start conditions.
ASoC: hdmi-codec: fix missing report for jack initial status
afs: Fix use-after-free due to get/remove race in volume tree
afs: Use refcount_t rather than atomic_t
afs: Fix overwriting of result of DNS query
keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
net: check dev->gso_max_size in gso_features_check()
afs: Fix dynamic root lookup DNS check
afs: Fix the dynamic root's d_delete to always delete unused dentries
net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev()
net: mana: select PAGE_POOL
net/rose: fix races in rose_kill_by_device()
ethernet: atheros: fix a memleak in atl1e_setup_ring_resources
net: sched: ife: fix potential use-after-free
net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors
net/mlx5: Fix fw tracer first block check
net/mlx5e: fix a potential double-free in fs_udp_create_groups
net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list()
Revert "net/mlx5e: fix double free of encap_header"
Revert "net/mlx5e: fix double free of encap_header in update funcs"
wifi: mac80211: mesh_plink: fix matches_local logic
wifi: iwlwifi: pcie: add another missing bh-disable for rxq->lock
s390/vx: fix save/restore of fpu kernel context
reset: Fix crash when freeing non-existent optional resets
ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init
ARM: dts: dra7: Fix DRA7 L3 NoC node register size