Comment 0 for bug 2075170

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.15.163 upstream stable release
       from git://git.kernel.org/

Linux 5.15.163
i2c: rcar: fix error code in probe()
kbuild: Make ld-version.sh more robust against version string changes
x86/bhi: Avoid warning in #DB handler due to BHI mitigation
x86/entry/64: Remove obsolete comment on tracing vs. SYSRET
i2c: rcar: clear NO_RXDMA flag after resetting
i2c: testunit: avoid re-issued work after read message
i2c: rcar: ensure Gen3+ reset does not disturb local targets
i2c: rcar: introduce Gen4 devices
i2c: rcar: reset controller is mandatory for Gen3+
i2c: rcar: Add R-Car Gen4 support
i2c: mark HostNotify target address as used
i2c: rcar: bring hardware to known state when probing
nilfs2: fix kernel bug on rename operation of broken directory
bpf: Allow reads from uninit stack
ipv6: prevent NULL dereference in ip6_output()
ipv6: annotate data-races around cnf.disable_ipv6
wireguard: send: annotate intentional data race in checking empty queue
wireguard: queueing: annotate intentional data race in cpu round robin
wireguard: allowedips: avoid unaligned 64-bit memory accesses
libceph: fix race between delayed_work() and ceph_monc_stop()
Fix userfaultfd_api to return EINVAL as expected
ALSA: hda/realtek: Limit mic boost on VAIO PRO PX
ALSA: hda/realtek: Enable Mute LED on HP 250 G7
ALSA: hda/realtek: add quirk for Clevo V5[46]0TU
nvmem: core: only change name to fram for current attribute
nvmem: meson-efuse: Fix return value of nvmem callbacks
nvmem: rmem: Fix return value of rmem_read()
hpet: Support 32-bit userspace
USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k
USB: serial: mos7840: fix crash on resume
USB: serial: option: add Rolling RW350-GL variants
USB: serial: option: add Netprisma LCUK54 series modules
USB: serial: option: add support for Foxconn T99W651
USB: serial: option: add Fibocom FM350-GL
USB: serial: option: add Telit FN912 rmnet compositions
USB: serial: option: add Telit generic core-dump composition
net: ks8851: Fix potential TX stall after interface reopen
tcp: avoid too many retransmit packets
tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
octeontx2-af: fix issue with IPv4 match for RSS
octeontx2-af: fix issue with IPv6 ext match for RSS
octeontx2-af: extend RSS supported offload types
octeontx2-af: fix detection of IP layer
octeontx2-af: fix a issue with cpt_lf_alloc mailbox
octeontx2-af: update cpt lf alloc mailbox
octeontx2-af: replace cpt slot with lf id on reg write
ARM: davinci: Convert comma to semicolon
s390: Mark psw in __load_psw_mask() as __unitialized
net/sched: Fix UAF when resolving a clash
udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
ethtool: netlink: do not return SQI value if link is down
ppp: reject claimed-as-LCP but actually malformed packets
net: ethernet: mtk-star-emac: set mac_managed_pm when probing
net: ethernet: lantiq_etop: fix double free in detach
net: lantiq_etop: add blank line after declaration
i40e: Fix XDP program unloading while removing the driver
net: fix rc7's __skb_datagram_iter()
octeontx2-af: Fix incorrect value output on error path in rvu_check_rsrc_availability()
skmsg: Skip zero length skb in sk_msg_recvmsg
tcp: fix incorrect undo caused by DSACK of TLP retransmit
vfs: don't mod negative dentry count when on shrinker list
fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading
filelock: fix potential use-after-free in posix_lock_inode
mm: prevent derefencing NULL ptr in pfn_section_valid()
nilfs2: fix incorrect inode allocation from reserved inodes
null_blk: Do not allow runt zone with zone capacity smaller then zone size
nfc/nci: Add the inconsistency check between the input data length and count
kbuild: fix short log for AS in link-vmlinux.sh
nvmet: fix a possible leak when destroy a ctrl during qp establishment
platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro
platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6" tablet
regmap-i2c: Subtract reg size from max_write
nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset
dma-mapping: benchmark: avoid needless copy_to_user if benchmark fails
nvme-multipath: find NUMA path only for online numa-node
ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897
fs/ntfs3: Mark volume as dirty if xattr is broken
i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
clk: qcom: gcc-sm6350: Fix gpll6* & gpll7 parents
media: dw2102: fix a potential buffer overflow
ima: Avoid blocking in RCU read-side critical section
bnx2x: Fix multiple UBSAN array-index-out-of-bounds
mtd: rawnand: rockchip: ensure NVDDR timings are rejected
mtd: rawnand: Bypass a couple of sanity checks during NAND identification
mtd: rawnand: Ensure ECC configuration is propagated to upper layers
drm/amdgpu/atomfirmware: silence UBSAN warning
drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
fsnotify: Do not generate events for O_PATH file descriptors
can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct
Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
btrfs: fix adding block group to a reclaim list and the unused list during reclaim
mm: avoid overflows in dirty throttling logic
mm: optimize the redundant loop of mm_update_owner_next()
nilfs2: add missing check for inode numbers on directory entries
nilfs2: fix inode number range checks
Revert "igc: fix a log entry using uninitialized netdev"
gpiolib: of: add polarity quirk for TSC2005
gpiolib: of: add a quirk for reset line polarity for Himax LCDs
gpiolib: of: factor out code overriding gpio line polarity
inet_diag: Initialize pad field in struct inet_diag_req_v2
selftests: make order checking verbose in msg_zerocopy selftest
selftests: fix OOM in msg_zerocopy selftest
bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
netfilter: nf_tables: unconditionally flush pending work before notifier
riscv: kexec: Avoid deadlock in kexec crash path
wifi: wilc1000: fix ies_len type in connect path
net: allow skb_datagram_iter to be called from any context
e1000e: Fix S0ix residency on corporate systems
KVM: s390: fix LPSWEY handling
tcp_metrics: validate source addr length
UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open()
tools/power turbostat: Remember global max_die_id
s390/pkey: Wipe sensitive data on failure
jffs2: Fix potential illegal address access in jffs2_free_inode
bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
igc: fix a log entry using uninitialized netdev
powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#"
kunit: Fix timeout message
orangefs: fix out-of-bounds fsid access
powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n
i2c: i801: Annotate apanel_addr as __ro_after_init
media: dvb-frontends: tda10048: Fix integer overflow
media: s2255: Use refcount_t instead of atomic_t for num_channels
media: dvb-frontends: tda18271c2dd: Remove casting during div
net: dsa: mv88e6xxx: Correct check for empty list
wifi: mt76: replace skb_put with skb_put_zero
Input: ff-core - prefer struct_size over open coded arithmetic
firmware: dmi: Stop decoding on broken entry
sctp: prefer struct_size over open coded arithmetic
media: dw2102: Don't translate i2c read into write
drm/amd/display: Skip finding free audio for unknown engine_id
drm/amd/display: Check pipe offset before setting vblank
drm/amd/display: Check index msg_id before read or write
drm/amdgpu: Initialize timestamp for some legacy SOCs
crypto: aead,cipher - zeroize key buffer after use
scsi: qedf: Make qedf_execute_tmf() non-preemptible
IB/core: Implement a limit on UMAD receive List
media: dvb-usb: dib0700_devices: Add missing release_firmware()
media: dvb: as102-fe: Fix as10x_register_addr packing
drm/lima: fix shared irq handling on driver remove
locking/mutex: Introduce devm_mutex_init()
Compiler Attributes: Add __uninitialized macro