Jammy update: v5.15.163 upstream stable release

[Manuel Diewald]

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.15.163 upstream stable release
       from git://git.kernel.org/

Compiler Attributes: Add __uninitialized macro
locking/mutex: Introduce devm_mutex_init()
drm/lima: fix shared irq handling on driver remove
media: dvb: as102-fe: Fix as10x_register_addr packing
media: dvb-usb: dib0700_devices: Add missing release_firmware()
IB/core: Implement a limit on UMAD receive List
scsi: qedf: Make qedf_execute_tmf() non-preemptible
crypto: aead,cipher - zeroize key buffer after use
drm/amdgpu: Initialize timestamp for some legacy SOCs
drm/amd/display: Check index msg_id before read or write
drm/amd/display: Check pipe offset before setting vblank
drm/amd/display: Skip finding free audio for unknown engine_id
media: dw2102: Don't translate i2c read into write
sctp: prefer struct_size over open coded arithmetic
firmware: dmi: Stop decoding on broken entry
Input: ff-core - prefer struct_size over open coded arithmetic
wifi: mt76: replace skb_put with skb_put_zero
net: dsa: mv88e6xxx: Correct check for empty list
media: dvb-frontends: tda18271c2dd: Remove casting during div
media: s2255: Use refcount_t instead of atomic_t for num_channels
media: dvb-frontends: tda10048: Fix integer overflow
i2c: i801: Annotate apanel_addr as __ro_after_init
powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n
orangefs: fix out-of-bounds fsid access
kunit: Fix timeout message
powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#"
igc: fix a log entry using uninitialized netdev
bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
jffs2: Fix potential illegal address access in jffs2_free_inode
s390/pkey: Wipe sensitive data on failure
tools/power turbostat: Remember global max_die_id
UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open()
tcp_metrics: validate source addr length
KVM: s390: fix LPSWEY handling
e1000e: Fix S0ix residency on corporate systems
net: allow skb_datagram_iter to be called from any context
wifi: wilc1000: fix ies_len type in connect path
riscv: kexec: Avoid deadlock in kexec crash path
netfilter: nf_tables: unconditionally flush pending work before notifier
bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
selftests: fix OOM in msg_zerocopy selftest
selftests: make order checking verbose in msg_zerocopy selftest
inet_diag: Initialize pad field in struct inet_diag_req_v2
gpiolib: of: factor out code overriding gpio line polarity
gpiolib: of: add a quirk for reset line polarity for Himax LCDs
gpiolib: of: add polarity quirk for TSC2005
Revert "igc: fix a log entry using uninitialized netdev"
nilfs2: fix inode number range checks
nilfs2: add missing check for inode numbers on directory entries
mm: optimize the redundant loop of mm_update_owner_next()
mm: avoid overflows in dirty throttling logic
btrfs: fix adding block group to a reclaim list and the unused list during reclaim
Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct
fsnotify: Do not generate events for O_PATH file descriptors
Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
drm/amdgpu/atomfirmware: silence UBSAN warning
mtd: rawnand: Ensure ECC configuration is propagated to upper layers
mtd: rawnand: Bypass a couple of sanity checks during NAND identification
mtd: rawnand: rockchip: ensure NVDDR timings are rejected
bnx2x: Fix multiple UBSAN array-index-out-of-bounds
ima: Avoid blocking in RCU read-side critical section
media: dw2102: fix a potential buffer overflow
clk: qcom: gcc-sm6350: Fix gpll6* & gpll7 parents
i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
fs/ntfs3: Mark volume as dirty if xattr is broken
ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897
nvme-multipath: find NUMA path only for online numa-node
dma-mapping: benchmark: avoid needless copy_to_user if benchmark fails
nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset
regmap-i2c: Subtract reg size from max_write
platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6" tablet
platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro
nvmet: fix a possible leak when destroy a ctrl during qp establishment
kbuild: fix short log for AS in link-vmlinux.sh
nfc/nci: Add the inconsistency check between the input data length and count
null_blk: Do not allow runt zone with zone capacity smaller then zone size
nilfs2: fix incorrect inode allocation from reserved inodes
mm: prevent derefencing NULL ptr in pfn_section_valid()
filelock: fix potential use-after-free in posix_lock_inode
fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading
vfs: don't mod negative dentry count when on shrinker list
tcp: fix incorrect undo caused by DSACK of TLP retransmit
skmsg: Skip zero length skb in sk_msg_recvmsg
octeontx2-af: Fix incorrect value output on error path in rvu_check_rsrc_availability()
net: fix rc7's __skb_datagram_iter()
i40e: Fix XDP program unloading while removing the driver
net: lantiq_etop: add blank line after declaration
net: ethernet: lantiq_etop: fix double free in detach
net: ethernet: mtk-star-emac: set mac_managed_pm when probing
ppp: reject claimed-as-LCP but actually malformed packets
ethtool: netlink: do not return SQI value if link is down
udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
s390: Mark psw in __load_psw_mask() as __unitialized
ARM: davinci: Convert comma to semicolon
octeontx2-af: replace cpt slot with lf id on reg write
octeontx2-af: update cpt lf alloc mailbox
octeontx2-af: fix a issue with cpt_lf_alloc mailbox
octeontx2-af: fix detection of IP layer
octeontx2-af: extend RSS supported offload types
octeontx2-af: fix issue with IPv6 ext match for RSS
octeontx2-af: fix issue with IPv4 match for RSS
tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
tcp: avoid too many retransmit packets
net: ks8851: Fix potential TX stall after interface reopen
USB: serial: option: add Telit generic core-dump composition
USB: serial: option: add Telit FN912 rmnet compositions
USB: serial: option: add Fibocom FM350-GL
USB: serial: option: add support for Foxconn T99W651
USB: serial: option: add Netprisma LCUK54 series modules
USB: serial: option: add Rolling RW350-GL variants
USB: serial: mos7840: fix crash on resume
USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k
usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
hpet: Support 32-bit userspace
nvmem: rmem: Fix return value of rmem_read()
nvmem: meson-efuse: Fix return value of nvmem callbacks
nvmem: core: only change name to fram for current attribute
ALSA: hda/realtek: add quirk for Clevo V5[46]0TU
ALSA: hda/realtek: Enable Mute LED on HP 250 G7
ALSA: hda/realtek: Limit mic boost on VAIO PRO PX
Fix userfaultfd_api to return EINVAL as expected
libceph: fix race between delayed_work() and ceph_monc_stop()
wireguard: allowedips: avoid unaligned 64-bit memory accesses
wireguard: queueing: annotate intentional data race in cpu round robin
wireguard: send: annotate intentional data race in checking empty queue
ipv6: annotate data-races around cnf.disable_ipv6
bpf: Allow reads from uninit stack
nilfs2: fix kernel bug on rename operation of broken directory
i2c: rcar: bring hardware to known state when probing
i2c: mark HostNotify target address as used
i2c: rcar: Add R-Car Gen4 support
i2c: rcar: reset controller is mandatory for Gen3+
i2c: rcar: introduce Gen4 devices
i2c: rcar: ensure Gen3+ reset does not disturb local targets
i2c: testunit: avoid re-issued work after read message
i2c: rcar: clear NO_RXDMA flag after resetting
x86/entry/64: Remove obsolete comment on tracing vs. SYSRET
x86/bhi: Avoid warning in #DB handler due to BHI mitigation
kbuild: Make ld-version.sh more robust against version string changes
i2c: rcar: fix error code in probe()
Linux 5.15.163
UBUNTU: Upstream stable to v5.15.163

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 5.15.0-121.131

---------------
linux (5.15.0-121.131) jammy; urgency=medium

  * jammy/linux: 5.15.0-121.131 -proposed tracker (LP: #2076347)

  * jammy:linux bpf selftest do not build (LP: #2076334)
    - SAUCE: Revert "bpf: Allow reads from uninit stack"

linux (5.15.0-120.130) jammy; urgency=medium

  * jammy/linux: 5.15.0-120.130 -proposed tracker (LP: #2075903)

  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/2024.08.05)

  * Jammy update: v5.15.163 upstream stable release (LP: #2075170)
    - Compiler Attributes: Add __uninitialized macro
    - locking/mutex: Introduce devm_mutex_init()
    - drm/lima: fix shared irq handling on driver remove
    - media: dvb: as102-fe: Fix as10x_register_addr packing
    - media: dvb-usb: dib0700_devices: Add missing release_firmware()
    - IB/core: Implement a limit on UMAD receive List
    - scsi: qedf: Make qedf_execute_tmf() non-preemptible
    - crypto: aead,cipher - zeroize key buffer after use
    - drm/amdgpu: Initialize timestamp for some legacy SOCs
    - drm/amd/display: Check index msg_id before read or write
    - drm/amd/display: Check pipe offset before setting vblank
    - drm/amd/display: Skip finding free audio for unknown engine_id
    - media: dw2102: Don't translate i2c read into write
    - sctp: prefer struct_size over open coded arithmetic
    - firmware: dmi: Stop decoding on broken entry
    - Input: ff-core - prefer struct_size over open coded arithmetic
    - wifi: mt76: replace skb_put with skb_put_zero
    - net: dsa: mv88e6xxx: Correct check for empty list
    - media: dvb-frontends: tda18271c2dd: Remove casting during div
    - media: s2255: Use refcount_t instead of atomic_t for num_channels
    - media: dvb-frontends: tda10048: Fix integer overflow
    - i2c: i801: Annotate apanel_addr as __ro_after_init
    - powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n
    - orangefs: fix out-of-bounds fsid access
    - kunit: Fix timeout message
    - powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#"
    - igc: fix a log entry using uninitialized netdev
    - bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
    - jffs2: Fix potential illegal address access in jffs2_free_inode
    - s390/pkey: Wipe sensitive data on failure
    - tools/power turbostat: Remember global max_die_id
    - UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open()
    - tcp_metrics: validate source addr length
    - KVM: s390: fix LPSWEY handling
    - e1000e: Fix S0ix residency on corporate systems
    - net: allow skb_datagram_iter to be called from any context
    - wifi: wilc1000: fix ies_len type in connect path
    - riscv: kexec: Avoid deadlock in kexec crash path
    - netfilter: nf_tables: unconditionally flush pending work before notifier
    - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
    - selftests: fix OOM in msg_zerocopy selftest
    - selftests: make order checking verbose in msg_zerocopy selftest
    - inet_diag: Initialize pad field in struct inet_diag_req_v2
    - gpiolib: of: factor...