SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.15.150 upstream stable release from git://git.kernel.org/ Linux 5.15.150 r8169: use new PM macros netfilter: nf_tables: can't schedule in nft_chain_validate ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks() ext4: regenerate buddy after block freeing failed if under fc replay netfilter: nf_tables: fix scheduling-while-atomic splat arp: Prevent overflow in arp_req_get(). fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio cifs: fix mid leak during reconnection after timeout threshold i2c: imx: when being a target, mark the last read as processed i2c: imx: Add timer for handling the stop condition drm/amd/display: Fix memory leak in dm_sw_fini() drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set netfilter: nft_flow_offload: release dst in case direct xmit path is used netfilter: nft_flow_offload: reset dst in route object after setting up flow netfilter: flowtable: simplify route logic netfilter: nf_tables: set dormant flag on hook register failure tls: stop recv() if initial process_rx_list gave us non-DATA tls: rx: drop pointless else after goto tls: rx: jump to a more appropriate label s390: use the correct count for __iowrite64_copy() octeontx2-af: Consider the action set by PF drm/nouveau/instmem: fix uninitialized_var.cocci warning net: dev: Convert sa_data to flexible array in struct sockaddr packet: move from strlcpy with unused retval to strscpy ipv6: sr: fix possible use-after-free and null-ptr-deref afs: Increase buffer size in afs_update_volume_status() bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel ata: ahci_ceva: fix error handling for Xilinx GT PHY support ata: libahci_platform: Introduce reset assertion/deassertion methods ata: libahci_platform: Convert to using devm bulk clocks API ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid net: stmmac: Fix incorrect dereference in interrupt handlers nouveau: fix function cast warnings scsi: jazz_esp: Only build if SCSI core is builtin bpf, scripts: Correct GPL license name RDMA/srpt: fix function pointer cast warnings arm64: dts: rockchip: set num-cs property for spi on px30 RDMA/qedr: Fix qedr_create_user_qp error flow RDMA/srpt: Support specifying the srpt_service_guid parameter RDMA/irdma: Add AE for too many RNRS RDMA/irdma: Set the CQ read threshold for GEN 1 RDMA/irdma: Validate max_send_wr and max_recv_wr RDMA/irdma: Fix KASAN issue with tasklet RDMA/bnxt_re: Return error for SRQ resize IB/hfi1: Fix a memleak in init_credit_return cifs: add a warning when the in-flight count goes negative xhci: track port suspend state correctly in unsuccessful resume cases xhci: decouple usb2 port resume and get_port_status request handling xhci: clear usb2 resume related variables in one place. xhci: rename resume_done to resume_timestamp xhci: move port specific items such as state completions to port structure xhci: cleanup xhci_hub_control port references ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA ACPI: resource: Add ASUS model S5402ZA to quirks ACPI: video: Add backlight=native DMI quirk for Apple iMac12,1 and iMac12,2 ARM: dts: BCM53573: Describe on-SoC BCM53125 rev 4 switch arm64: dts: rockchip: add SPDIF node for ROCK Pi 4 arm64: dts: rockchip: add ES8316 codec for ROCK Pi 4 arm64: dts: rockchip: fix regulator name on rk3399-rock-4 exfat: support dynamic allocate bh for exfat_entry_set_cache wifi: iwlwifi: mvm: avoid baid size integer overflow igb: Fix igb_down hung on surprise removal wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point() devlink: report devlink_port_type_warn source device bpf: Address KCSAN report on bpf_lru_list wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range sched/fair: Don't balance task to its current running CPU arm64: mm: fix VA-range sanity check arm64: set __exception_irq_entry with __irq_entry as a default ACPI: video: Add backlight=native DMI quirk for Lenovo ThinkPad X131e (3371 AMD version) ACPI: video: Add backlight=native DMI quirk for Apple iMac11,3 ACPI: button: Add lid disable DMI quirk for Nextbook Ares 8A btrfs: add xxhash to fast checksum implementations posix-timers: Ensure timer ID search-loop limit is valid md/raid10: prevent soft lockup while flush writes md: fix data corruption for raid456 when reshape restart while grow up nbd: Add the maximum limit of allocated index in nbd_dev_add debugobjects: Recheck debug_objects_enabled before reporting netfilter: nf_tables: add rescheduling points during loop detection walks net/sched: Refactor qdisc_graft() for ingress and clsact Qdiscs Input: iqs269a - do not poll during ATI Input: iqs269a - do not poll during suspend or resume Input: iqs269a - switch to DEFINE_SIMPLE_DEV_PM_OPS() and pm_sleep_ptr() PM: core: Remove static qualifier in DEFINE_SIMPLE_DEV_PM_OPS macro mmc: mxc: Use the new PM macros mmc: jz4740: Use the new PM macros PM: core: Add new *_PM_OPS macros, deprecate old ones PM: core: Redefine pm_ptr() macro powerpc/eeh: Set channel state after notifying the drivers powerpc/eeh: Small refactor of eeh_handle_normal_event() powerpc/rtas: ensure 4KB alignment for rtas_data_buf powerpc/rtas: make all exports GPL net: ethernet: ti: add missing of_node_put before return dt-bindings: clocks: imx8mp: Add ID for usb suspend clock clk: imx8mp: add clkout1/2 support clk: imx8mp: Add DISP2 pixel clock serial: 8250: Remove serial_rs485 sanitization from em485 cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() kernel/sched: Remove dl_boosted flag comment drm/i915/dg1: Update DMC_DEBUG3 register f2fs: write checkpoint during FG_GC f2fs: don't set GC_FAILURE_PIN for background GC drm/amdgpu: init iommu after amdkfd device init tools/virtio: fix build perf beauty: Update copy of linux/socket.h with the kernel sources tools headers UAPI: Sync linux/fscrypt.h with the kernel sources ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger acpi: property: Let args be NULL in __acpi_node_get_property_reference platform/x86: asus-wmi: Document the dgpu_disable sysfs attribute clk: linux/clk-provider.h: fix kernel-doc warnings and typos RDMA/siw: Correct wrong debug message RDMA/siw: Balance the reference of cep->kref in the error path ARM: dts: BCM53573: Drop nonexistent #usb-cells selftests: net: vrf-xfrm-tests: change authentication and encryption algos vdpa/mlx5: Don't clear mr struct on destroy MR MIPS: vpe-mt: drop physical_memsize MIPS: SMP-CPS: fix build error when HOTPLUG_CPU not set powerpc/pseries/lpar: add missing RTAS retry status handling powerpc/perf/hv-24x7: add missing RTAS retry status handling powerpc/pseries/lparcfg: add missing RTAS retry status handling clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled() clk: qcom: gpucc-sdm845: fix clk_dis_wait being programmed for CX GDSC clk: qcom: gpucc-sc7180: fix clk_dis_wait being programmed for CX GDSC powerpc/powernv/ioda: Skip unallocated resources when mapping to PE Input: ads7846 - don't check penirq immediately for 7845 Input: ads7846 - always set last command to PWRDOWN clk: imx: avoid memory leak clk: renesas: cpg-mssr: Remove superfluous check in resume code Input: ads7846 - don't report pressure for ads7845 clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed Input: iqs269a - increase interrupt handler return delay Input: iqs269a - configure device with a single block write Input: iqs269a - drop unused device node references RISC-V: fix funct4 definition for c.jalr in parse_asm.h mtd: rawnand: sunxi: Fix the size of the last OOB region clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents clk: imx: imx8mp: add shared clk gate for usb suspend clk mptcp: fix lockless access in subflow ULP diag usb: roles: don't get/set_role() when usb_role_switch is unregistered usb: roles: fix NULL pointer issue when put module's reference usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs usb: cdns3: fix memory double free when handle zero packet usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable() usb: cdnsp: fixed issue with incorrect detecting CDNSP family controllers usb: cdnsp: blocked some cdns3 specific code usb: dwc3: gadget: Don't disconnect if not started serial: amba-pl011: Fix DMA transmission in RS485 mode x86/alternative: Make custom return thunk unconditional Revert "x86/alternative: Make custom return thunk unconditional" x86/returnthunk: Allow different return thunks x86/ftrace: Use alternative RET encoding x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch() x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR Revert "x86/ftrace: Use alternative RET encoding" ARM: ep93xx: Add terminator to gpiod_lookup_table l2tp: pass correct message length to ip6_append_data PCI/MSI: Prevent MSI hardware interrupt number truncation gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table() KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names platform/x86: intel-vbtn: Stop calling "VBDL" from notify_handler dm-crypt: don't modify the data when using authenticated encryption drm/ttm: Fix an invalid freeing on already freed page in error path IB/hfi1: Fix sdma.h tx->num_descs off-by-one error erofs: fix lz4 inplace decompression pmdomain: renesas: r8a77980-sysc: CR7 must be always on ksmbd: free aux buffer if ksmbd_iov_pin_rsp_read fails pmdomain: mediatek: fix race conditions with genpd virtio-blk: Ensure no requests in virtqueues before deleting vqs. drm/amdgpu: reset gpu for s3 suspend abort case drm/amdgpu: skip to program GFXDEC registers for suspend abort firewire: core: send bus reset promptly on gap count error scsi: lpfc: Use unsigned type for num_sge hwmon: (coretemp) Enlarge per package core count limit efi: Don't add memblocks for soft-reserved memory efi: runtime: Fix potential overflow of soft-reserved region size wifi: mac80211: adding missing drv_mgd_complete_tx() call fs/ntfs3: Fix oob in ntfs_listxattr fs/ntfs3: Update inode->i_size after success write into compressed file fs/ntfs3: Correct function is_rst_area_valid fs/ntfs3: Prevent generic message "attempt to access beyond end of device" fs/ntfs3: use non-movable memory for ntfs3 MFT buffer cache fs/ntfs3: Disable ATTR_LIST_ENTRY size check fs/ntfs3: Add NULL ptr dereference checking at the end of attr_allocate_frame() fs/ntfs3: Fix detected field-spanning write (size 8) of single field "le->name" fs/ntfs3: Print warning while fixing hard links count fs/ntfs3: Correct hard links updating when dealing with DOS names fs/ntfs3: Improve ntfs_dir_count fs/ntfs3: Modified fix directory element type detection Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table ext4: correct the hole length returned by ext4_map_blocks() nvmet-fc: take ref count on tgtport before delete assoc nvmet-fc: avoid deadlock on delete association path nvmet-fc: abort command when there is no binding nvmet-fc: hold reference on hostport match nvmet-fc: defer cleanup using RCU properly nvmet-fc: release reference on target port nvmet-fcloop: swap the list_add_tail arguments nvme-fc: do not wait in vain when unloading module ALSA: usb-audio: Ignore clock selector errors for single connection netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new Input: xpad - add Lenovo Legion Go controllers spi: sh-msiof: avoid integer overflow in constants ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616 ALSA: usb-audio: Check presence of valid altsetting control nvmet-tcp: fix nvme tcp ida memory leak regulator: pwm-regulator: Add validity checks in continuous .get_voltage dmaengine: ti: edma: Add some null pointer checks to the edma_probe ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt platform/x86: touchscreen_dmi: Add info for the TECLAST X16 Plus tablet MIPS: reserve exception vector space ONLY ONCE ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers ahci: asm1166: correct count of reported ports spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected fbdev: sis: Error out if pixclock equals zero fbdev: savage: Error out if pixclock equals zero wifi: mac80211: fix race condition on enabling fast-xmit wifi: cfg80211: fix missing interfaces when dumping dmaengine: fsl-qdma: increase size of 'irq_name' dmaengine: shdma: increase size of 'dev_id' scsi: target: core: Add TMF to tmr_list handling sched/rt: Disallow writing invalid values to sched_rt_period_us sched/rt: Fix sysctl_sched_rr_timeslice intial value x86/fpu: Stop relying on userspace for info to fault in xsave buffer zonefs: Improve error handling userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb bpf: Remove trace_printk_lock bpf: Do cleanup in bpf_bprintf_cleanup only when needed bpf: Add struct for bin_args arg in bpf_bprintf_prepare bpf: Merge printk and seq_printf VARARG max macros PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq() sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset smb: client: fix parsing of SMB3.1.1 POSIX create context smb: client: fix potential OOBs in smb2_parse_contexts() smb: client: fix OOB in receive_encrypted_standard() net/sched: Retire dsmark qdisc net/sched: Retire ATM qdisc net/sched: Retire CBQ qdisc