Ubuntu
linux-azure package

linux-azure: Update HV support to 5.17

Bug #1961329 reported by Tim Gardner on 2022-02-17

This bug affects 1 person

	Status	Importance	Assigned to
linux-azure (Ubuntu)	Fix Released	Medium	Tim Gardner
Focal	Won't Fix	Undecided	Unassigned
Impish	Fix Released	Medium	Tim Gardner
Jammy	Fix Released	Medium	Tim Gardner

Bug Description

SRU Justification

[Impact]

Microsoft has requested these commits be present in all Azure tuned kernels:

ac0f7d42584125dab8039e60ab4ade48cc2db61c Drivers: hv: copy from message page only what's needed
a276463b7aeb6186e7e4315cccb032773fb31b5d Drivers: hv: allocate the exact needed memory for messages
5cc415001bca8fe0e3f0ee6d58a953a314dd9751 Drivers: hv: avoid passing opaque pointer to vmbus_onmessage()
b0a284dc65b401a508dc2c5ed7d465884220f607 Drivers: hv: make sure that 'struct vmbus_channel_message_header' compiles correctly
52c7803f9bd4b1f0ac6e2e3e6051415198cc06bd Drivers: hv: check VMBus messages lengths
06caa778d8b2fbcb4ac3878751e39d116424ba9b hv_utils: Add validation for untrusted Hyper-V values
e99c4afbee07e9323e9191a20b24d74dbf815bdf Drivers: hv: vmbus: Initialize memory to be sent to the host
fe8c1b18a27de4d6ca5d99b3ffb3125dc69a5b76 Drivers: hv: vmbus: Copy the hv_message in vmbus_on_msg_dpc()
e3fa4b747f085d2cda09bba0533b86fa76038635 Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind()
e4d221b42354b2e2ddb9187a806afb651eee2cda Drivers: hv: vmbus: Resolve race condition in vmbus_onoffer_rescind()
adae1e931acd8b430d31141a283ea06d4b705417 Drivers: hv: vmbus: Copy packets sent by Hyper-V out of the ring buffer
9d68cd9120e4e3af38f843e165631c323b86b4e4 hv_utils: Set the maximum packet size for VSS driver to the length of the receive buffer
f1940d4e9cbe6208e7e77e433c587af108152a17 Drivers: hv: vmbus: Fix kernel crash upon unbinding a device from uio_hv_generic driver
007faec014cb5d26983c1f86fd08c6539b41392e x86/sev: Expose sev_es_ghcb_hv_call() for use by HyperV
0cc4f6d9f0b9f20f3f1e1149bdb6737c0b4e134a x86/hyperv: Initialize GHCB page in Isolation VM
af788f355e343373490b7d2e361016e7c24a0ffa x86/hyperv: Initialize shared memory boundary in the Isolation VM.
810a521265023a1d5c6c081ea2d216bc63d422f5 x86/hyperv: Add new hvcall guest address host visibility support
d4dccf353db80e209f262e3973c834e6e48ba9a9 Drivers: hv: vmbus: Mark vmbus ring buffer visible to host in Isolation VM
faff44069ff538ccdfef187c4d7ec83d22dfb3a4 x86/hyperv: Add Write/Read MSR registers via ghcb page
20c89a559e00dfe352b73e867211a669113ae881 x86/hyperv: Add ghcb hvcall support for SNP VM
f2f136c05fb6093818a3b3fefcba46231ac66a62 Drivers: hv: vmbus: Add SNP support for VMbus channel initiate message
9a8797722e4239242d0cb4cc4baa805df6ac979e Drivers: hv: vmbus: Initialize VMbus ring buffer for Isolation VM
1a5e91d8375fc8369207cc0b9894a324f2bbf1d9 swiotlb: Add swiotlb bounce buffer remap function for HV IVM
c789b90a69045d1924bc0802ae0dce2bba05a04e x86/hyper-v: Add hyperv Isolation VM check in the cc_platform_has()
062a5c4260cdb734a4727230c58e38accf413315 hyper-v: Enable swiotlb bounce buffer for Isolation VM
743b237c3a7b0f5b44aa704aae8a1058877b6322 scsi: storvsc: Add Isolation VM support for storvsc driver
846da38de0e8224f2f94b885125cf1fd2d7b0d39 net: netvsc: Add Isolation VM support for netvsc driver
2deb55d9f57bb7a877c0d77115cc4077e1e974ff swiotlb: Add CONFIG_HAS_IOMEM check around swiotlb_mem_remap()
6a27e396ebb149fc47baccc1957a7a9dd70049a7 Drivers: hv: vmbus: Initialize request offers message for Isolation VM
4eea5332d67d8ae6ba5717ec0f4e671fdbd222e7 scsi: storvsc: Fix storvsc_queuecommand() memory leak
96d9d1fa5cd505078534113308ced0aa56d8da58 Drivers: hv: balloon: account for vmbus packet header in max_pkt_size

[Test Plan]

Microsoft tested

[Where things could go wrong]

Hyper-V guests may not work correctly.

[Other Info]

SF: #00323683

See original description

Tags:

CVE References

Tim Gardner (timg-tpi) on 2022-02-17

description:	updated
description:	updated

Revision history for this message

Tim Gardner (timg-tpi) wrote on 2022-03-19:

Impish pull request: https://lists.ubuntu.com/archives/kernel-team/2022-March/128789.html

Changed in linux-azure (Ubuntu Impish):
status:	New → In Progress
importance:	Undecided → Medium
assignee:	nobody → Tim Gardner (timg-tpi)
Changed in linux-azure (Ubuntu Jammy):
assignee:	nobody → Tim Gardner (timg-tpi)
importance:	Undecided → Medium
status:	New → Fix Committed

Revision history for this message

Launchpad Janitor (janitor) wrote on 2022-04-01:

Download full text (74.0 KiB)

This bug was fixed in the package linux-azure - 5.15.0-1002.3

---------------
linux-azure (5.15.0-1002.3) jammy; urgency=medium

* jammy/linux-azure: 5.15.0-1002.3 -proposed tracker (LP: #1965771)

* Packaging resync (LP: #1786013)
- [Packaging] switch dependency from crda to wireless-regdb

  * linux-azure: Update HV support to 5.17 (LP: #1961329)
    - x86/sev: Expose sev_es_ghcb_hv_call() for use by HyperV
    - x86/hyperv: Initialize GHCB page in Isolation VM
    - x86/hyperv: Initialize shared memory boundary in the Isolation VM.
    - x86/hyperv: Add new hvcall guest address host visibility support
    - Drivers: hv: vmbus: Mark vmbus ring buffer visible to host in Isolation VM
    - x86/hyperv: Add Write/Read MSR registers via ghcb page
    - x86/hyperv: Add ghcb hvcall support for SNP VM
    - Drivers: hv: vmbus: Add SNP support for VMbus channel initiate message
    - Drivers: hv: vmbus: Initialize VMbus ring buffer for Isolation VM
    - swiotlb: Add swiotlb bounce buffer remap function for HV IVM
    - x86/hyper-v: Add hyperv Isolation VM check in the cc_platform_has()
    - hyper-v: Enable swiotlb bounce buffer for Isolation VM
    - scsi: storvsc: Add Isolation VM support for storvsc driver
    - net: netvsc: Add Isolation VM support for netvsc driver
    - swiotlb: Add CONFIG_HAS_IOMEM check around swiotlb_mem_remap()
    - Drivers: hv: vmbus: Initialize request offers message for Isolation VM
    - scsi: storvsc: Fix storvsc_queuecommand() memory leak
    - Netvsc: Call hv_unmap_memory() in the netvsc_device_remove()
    - x86/sev: Replace occurrences of sev_active() with cc_platform_has()
    - x86/kvm: Don't waste memory if kvmclock is disabled
    - x86/kvmclock: Fix Hyper-V Isolated VM's boot issue when vCPUs > 64

  * linux-azure: Case VM fails to initialize CX4 VF due to mem fragmentation
    (LP: #1961632)
    - net/mlx5: Reduce flow counters bulk query buffer size for SFs
    - net/mlx5: Fix flow counters SF bulk query len
    - net/mlx5: Dynamically resize flow counters query buffer

  * linux-azure: net: mana: Add handling of CQE_RX_TRUNCATED (LP: #1960322)
    - net: mana: Add handling of CQE_RX_TRUNCATED
    - net: mana: Remove unnecessary check of cqe_type in mana_process_rx_cqe()

This bug was fixed in the package linux-azure - 5.15.0-1002.3

---------------
linux-azure (5.15.0-1002.3) jammy; urgency=medium

* jammy/linux-azure: 5.15.0-1002.3 -proposed tracker (LP: #1965771)

* Packaging resync (LP: #1786013)
    - [Packaging] switch dependency from crda to wireless-regdb

* jammy/linux-azure: CIFS 5.15 backport (LP: #1960671)
    - cifs: add mount parameter tcpnodelay
    - cifs: Create a new shared file holding smb2 pdu definitions
    - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area
    - cifs: Move more definitions into the shared area
    - cifs: Move SMB2_Create definitions to the shared area
    - smb3: add dynamic trace points for socket connection
    - cifs: send workstation name during ntlmssp session setup
    - cifs: fix print of hdr_flags in dfscache_proc_show()
    - cifs: introduce new helper for cifs_reconnect()
    - cifs: convert list_for_each to entry variant
    - cifs: split out dfs code from cifs_reconnect()
    - cifs: for compound requests, use open handle if possible
    - cifs: support nested dfs links over reconnect
    - smb3: remove trivial dfs compile warning
    - smb3: add additional null check in SMB2_ioctl
    - smb3: add additional null check in SMB2_open
    - smb3: add additional null check in SMB2_tcon
    - cifs: release lock earlier in dequeue_mid error case
    - smb3: add additional null check in SMB311_posix_mkdir
    - cifs: fix potential use-after-free bugs
    - smb3: do not setup the fscache_super_cookie until fsinfo initialized
    - cifs: do not negotiate session if session already exists
    - cifs: connect individual channel servers to primary channel server
    - cifs: do not duplicate fscache cookie for secondary channels
    - cifs: move debug print out of spinlock
    - cifs: protect srv_count with cifs_tcp_ses_lock
    - cifs: introduce cifs_ses_mark_for_reconnect() helper
    - cifs: populate server_hostname for extra channels
    - smb2: clarify rc initialization in smb2_reconnect
    - cifs: update internal version number
    - cifs: fix missed refcounting of ipc tcon
    - cifs: wait for tcon resource_id before getting fscache super
    - cifs: add server conn_id to fscache client cookie
    - cifs: avoid use of dstaddr as key for fscache client cookie
    - cifs: fix ntlmssp auth when there is no key exchange
    - cifs: ignore resource_id while getting fscache super cookie
    - cifs: remove redundant assignment to pointer p
    - cifs: track individual channel status using chans_need_reconnect
    - cifs: use the chans_need_reconnect bitmap for reconnect status
    - cifs: adjust DebugData to use chans_need_reconnect for conn status
    - cifs: add WARN_ON for when chan_count goes below minimum
    - cifs: reconnect only the connection and not smb session where possible
    - cifs: take cifs_tcp_ses_lock for status checks
    - cifs: fix hang on cifs_get_next_mid()
    - cifs: maintain a state machine for tcp/smb/tcon sessions
    - cifs: avoid race during socket reconnect between send and recv
    - cifs: Fix smb311_update_preauth_hash() kernel-doc comment
    - cifs: move superblock magic defitions to magic.h
    - cifs: fix FILE_BOTH_DIRECTORY_INFO definition
    - cifs: free ntlmsspblob allocated in negotiate
    - cifs: clean up an inconsistent indenting
    - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty
    - cifs: quirk for STATUS_OBJECT_NAME_INVALID returned for non-ASCII dfs refs
    - cifs: serialize all mount attempts
    - smb3: add new defines from protocol specification
    - cifs: check reconnects for channels of active tcons too
    - cifs: fix the connection state transitions with multichannel
    - cifs: protect all accesses to chan_* with chan_lock
    - cifs: remove unused variable ses_selected
    - cifs: fix the cifs_reconnect path for DFS
    - cifs: remove repeated state change in dfs tree connect
    - cifs: make status checks in version independent callers
    - cifs: update tcpStatus during negotiate and sess setup
    - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits
    - smb3: send NTLMSSP version information
    - cifs: update internal module number
    - Fix a warning about a malformed kernel doc comment in cifs
    - cifs: unlock chan_lock before calling cifs_put_tcp_session
    - cifs: fix workstation_name for multiuser mounts

* linux-azure: Add Azure Blob driver to Ubuntu 18.04 image (LP: #1960539)
    - [Config] azure: CONFIG_HYPERV_AZURE_BLOB=m
    - SAUCE: azure: Drivers: hv: add Azure Blob driver

* Miscellaneous Ubuntu changes
    - [Config] azure: Sync config with master

[ Ubuntu: 5.15.0-23.23 ]

* jammy/linux: 5.15.0-23.23 -proposed tracker (LP: #1964573)
  * Packaging resync (LP: #1786013)
    - [Packaging] resync dkms-build{,--nvidia-N} from LRMv5
    - debian/dkms-versions -- update from kernel-versions (main/master)
  * [22.04 FEAT] KVM: Enable GISA support for Secure Execution guests
    (LP: #1959977)
    - KVM: s390: pv: make use of ultravisor AIV support
  * intel_iommu breaks Intel IPU6 camera: isys port open ready failed -16
    (LP: #1958004)
    - SAUCE: iommu: intel-ipu: use IOMMU passthrough mode for Intel IPUs
  * CVE-2022-23960
    - ARM: report Spectre v2 status through sysfs
    - ARM: early traps initialisation
    - ARM: use LOADADDR() to get load address of sections
    - ARM: Spectre-BHB workaround
    - ARM: include unprivileged BPF status in Spectre V2 reporting
    - arm64: Add Neoverse-N2, Cortex-A710 CPU part definition
    - arm64: Add HWCAP for self-synchronising virtual counter
    - arm64: Add Cortex-X2 CPU part definition
    - arm64: add ID_AA64ISAR2_EL1 sys register
    - arm64: cpufeature: add HWCAP for FEAT_AFP
    - arm64: cpufeature: add HWCAP for FEAT_RPRES
    - arm64: entry.S: Add ventry overflow sanity checks
    - arm64: spectre: Rename spectre_v4_patch_fw_mitigation_conduit
    - KVM: arm64: Allow indirect vectors to be used without SPECTRE_V3A
    - arm64: entry: Make the trampoline cleanup optional
    - arm64: entry: Free up another register on kpti's tramp_exit path
    - arm64: entry: Move the trampoline data page before the text page
    - arm64: entry: Allow tramp_alias to access symbols after the 4K boundary
    - arm64: entry: Don't assume tramp_vectors is the start of the vectors
    - arm64: entry: Move trampoline macros out of ifdef'd section
    - arm64: entry: Make the kpti trampoline's kpti sequence optional
    - arm64: entry: Allow the trampoline text to occupy multiple pages
    - arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations
    - arm64: entry: Add vectors that have the bhb mitigation sequences
    - arm64: entry: Add macro for reading symbol addresses from the trampoline
    - arm64: Add percpu vectors for EL1
    - arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2
    - arm64: Mitigate spectre style branch history side channels
    - KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated
    - arm64: Use the clearbhb instruction in mitigations
    - arm64: proton-pack: Include unprivileged eBPF status in Spectre v2
      mitigation reporting
    - ARM: fix build error when BPF_SYSCALL is disabled
  * CVE-2021-26401
    - x86/speculation: Use generic retpoline by default on AMD
    - x86/speculation: Update link to AMD speculation whitepaper
    - x86/speculation: Warn about Spectre v2 LFENCE mitigation
    - x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT
  * CVE-2022-0001
    - x86,bugs: Unconditionally allow spectre_v2=retpoline,amd
    - x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE
    - x86/speculation: Add eIBRS + Retpoline options
    - Documentation/hw-vuln: Update spectre doc
    - x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation
      reporting
  * Jammy update: v5.15.27 upstream stable release (LP: #1964361)
    - mac80211_hwsim: report NOACK frames in tx_status
    - mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work
    - i2c: bcm2835: Avoid clock stretching timeouts
    - ASoC: rt5668: do not block workqueue if card is unbound
    - ASoC: rt5682: do not block workqueue if card is unbound
    - regulator: core: fix false positive in regulator_late_cleanup()
    - Input: clear BTN_RIGHT/MIDDLE on buttonpads
    - btrfs: get rid of warning on transaction commit when using flushoncommit
    - KVM: arm64: vgic: Read HW interrupt pending state from the HW
    - block: loop:use kstatfs.f_bsize of backing file to set discard granularity
    - tipc: fix a bit overflow in tipc_crypto_key_rcv()
    - cifs: do not use uninitialized data in the owner/group sid
    - cifs: fix double free race when mount fails in cifs_get_root()
    - cifs: modefromsids must add an ACE for authenticated users
    - selftests/seccomp: Fix seccomp failure by adding missing headers
    - drm/amd/pm: correct UMD pstate clocks for Dimgrey Cavefish and Beige Goby
    - dmaengine: shdma: Fix runtime PM imbalance on error
    - i2c: cadence: allow COMPILE_TEST
    - i2c: imx: allow COMPILE_TEST
    - i2c: qup: allow COMPILE_TEST
    - net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990
    - block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern
    - usb: gadget: don't release an existing dev->buf
    - usb: gadget: clear related members when goto fail
    - exfat: reuse exfat_inode_info variable instead of calling EXFAT_I()
    - exfat: fix i_blocks for files truncated over 4 GiB
    - tracing: Add test for user space strings when filtering on string pointers
    - arm64: Mark start_backtrace() notrace and NOKPROBE_SYMBOL
    - serial: stm32: prevent TDR register overwrite when sending x_char
    - ext4: drop ineligible txn start stop APIs
    - ext4: simplify updating of fast commit stats
    - ext4: fast commit may not fallback for ineligible commit
    - ext4: fast commit may miss file actions
    - sched/fair: Fix fault in reweight_entity
    - ata: pata_hpt37x: fix PCI clock detection
    - drm/amdgpu: check vm ready by amdgpu_vm->evicting flag
    - tracing: Add ustring operation to filtering string pointers
    - ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report()
    - NFSD: Have legacy NFSD WRITE decoders use xdr_stream_subsegment()
    - NFSD: Fix zero-length NFSv3 WRITEs
    - io_uring: fix no lock protection for ctx->cq_extra
    - tools/resolve_btf_ids: Close ELF file on error
    - mtd: spi-nor: Fix mtd size for s3an flashes
    - MIPS: fix local_{add,sub}_return on MIPS64
    - signal: In get_signal test for signal_group_exit every time through the loop
    - PCI: mediatek-gen3: Disable DVFSRC voltage request
    - PCI: rcar: Check if device is runtime suspended instead of
      __clk_is_enabled()
    - PCI: dwc: Do not remap invalid res
    - PCI: aardvark: Fix checking for MEM resource type
    - KVM: VMX: Don't unblock vCPU w/ Posted IRQ if IRQs are disabled in guest
    - KVM: s390: Ensure kvm_arch_no_poll() is read once when blocking vCPU
    - KVM: VMX: Read Posted Interrupt "control" exactly once per loop iteration
    - KVM: X86: Ensure that dirty PDPTRs are loaded
    - KVM: x86: Handle 32-bit wrap of EIP for EMULTYPE_SKIP with flat code seg
    - KVM: x86: Exit to userspace if emulation prepared a completion callback
    - i3c: fix incorrect address slot lookup on 64-bit
    - i3c/master/mipi-i3c-hci: Fix a potentially infinite loop in
      'hci_dat_v1_get_index()'
    - tracing: Do not let synth_events block other dyn_event systems during create
    - Input: ti_am335x_tsc - set ADCREFM for X configuration
    - Input: ti_am335x_tsc - fix STEPCONFIG setup for Z2
    - PCI: mvebu: Check for errors from pci_bridge_emul_init() call
    - PCI: mvebu: Do not modify PCI IO type bits in conf_write
    - PCI: mvebu: Fix support for bus mastering and PCI_COMMAND on emulated bridge
    - PCI: mvebu: Fix configuring secondary bus of PCIe Root Port via emulated
      bridge
    - PCI: mvebu: Setup PCIe controller to Root Complex mode
    - PCI: mvebu: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
    - PCI: mvebu: Fix support for PCI_EXP_DEVCTL on emulated bridge
    - PCI: mvebu: Fix support for PCI_EXP_RTSTA on emulated bridge
    - PCI: mvebu: Fix support for DEVCAP2, DEVCTL2 and LNKCTL2 registers on
      emulated bridge
    - NFSD: Fix verifier returned in stable WRITEs
    - Revert "nfsd: skip some unnecessary stats in the v4 case"
    - nfsd: fix crash on COPY_NOTIFY with special stateid
    - x86/hyperv: Properly deal with empty cpumasks in hyperv_flush_tlb_multi()
    - drm/i915: don't call free_mmap_offset when purging
    - SUNRPC: Fix sockaddr handling in the svc_xprt_create_error trace point
    - SUNRPC: Fix sockaddr handling in svcsock_accept_class trace points
    - drm/sun4i: dw-hdmi: Fix missing put_device() call in sun8i_hdmi_phy_get
    - drm/atomic: Check new_crtc_state->active to determine if CRTC needs disable
      in self refresh mode
    - ntb_hw_switchtec: Fix pff ioread to read into mmio_part_cfg_all
    - ntb_hw_switchtec: Fix bug with more than 32 partitions
    - drm/amdkfd: Check for null pointer after calling kmemdup
    - drm/amdgpu: use spin_lock_irqsave to avoid deadlock by local interrupt
    - i3c: master: dw: check return of dw_i3c_master_get_free_pos()
    - dma-buf: cma_heap: Fix mutex locking section
    - tracing/uprobes: Check the return value of kstrdup() for tu->filename
    - tracing/probes: check the return value of kstrndup() for pbuf
    - mm: defer kmemleak object creation of module_alloc()
    - kasan: fix quarantine conflicting with init_on_free
    - selftests/vm: make charge_reserved_hugetlb.sh work with existing cgroup
      setting
    - hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
    - drm/amdgpu/display: Only set vblank_disable_immediate when PSR is not
      enabled
    - drm/amdgpu: filter out radeon PCI device IDs
    - drm/amdgpu: filter out radeon secondary ids as well
    - drm/amd/display: Use adjusted DCN301 watermarks
    - drm/amd/display: move FPU associated DSC code to DML folder
    - ethtool: Fix link extended state for big endian
    - octeontx2-af: Optimize KPU1 processing for variable-length headers
    - octeontx2-af: Reset PTP config in FLR handler
    - octeontx2-af: cn10k: RPM hardware timestamp configuration
    - octeontx2-af: cn10k: Use appropriate register for LMAC enable
    - octeontx2-af: Adjust LA pointer for cpt parse header
    - octeontx2-af: Add KPU changes to parse NGIO as separate layer
    - net/mlx5e: IPsec: Refactor checksum code in tx data path
    - net/mlx5e: IPsec: Fix crypto offload for non TCP/UDP encapsulated traffic
    - bpf: Use u64_stats_t in struct bpf_prog_stats
    - bpf: Fix possible race in inc_misses_counter
    - drm/amd/display: Update watermark values for DCN301
    - drm: mxsfb: Set fallback bus format when the bridge doesn't provide one
    - drm: mxsfb: Fix NULL pointer dereference
    - riscv/mm: Add XIP_FIXUP for phys_ram_base
    - drm/i915/display: split out dpt out of intel_display.c
    - drm/i915/display: Move DRRS code its own file
    - drm/i915: Disable DRRS on IVB/HSW port != A
    - gve: Recording rx queue before sending to napi
    - net: dsa: ocelot: seville: utilize of_mdiobus_register
    - net: dsa: seville: register the mdiobus under devres
    - ibmvnic: don't release napi in __ibmvnic_open()
    - of: net: move of_net under net/
    - net: ethernet: litex: Add the dependency on HAS_IOMEM
    - drm/mediatek: mtk_dsi: Reset the dsi0 hardware
    - cifs: protect session channel fields with chan_lock
    - cifs: fix confusing unneeded warning message on smb2.1 and earlier
    - drm/amd/display: Fix stream->link_enc unassigned during stream removal
    - bnxt_en: Fix occasional ethtool -t loopback test failures
    - drm/amd/display: For vblank_disable_immediate, check PSR is really used
    - PCI: mvebu: Fix device enumeration regression
    - net: of: fix stub of_net helpers for CONFIG_NET=n
    - ALSA: intel_hdmi: Fix reference to PCM buffer address
    - ucounts: Fix systemd LimitNPROC with private users regression
    - riscv/efi_stub: Fix get_boot_hartid_from_fdt() return value
    - riscv: Fix config KASAN && SPARSEMEM && !SPARSE_VMEMMAP
    - riscv: Fix config KASAN && DEBUG_VIRTUAL
    - iwlwifi: mvm: check debugfs_dir ptr before use
    - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
    - iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
    - iommu/amd: Recover from event log overflow
    - drm/i915: s/JSP2/ICP2/ PCH
    - drm/amd/display: Reduce dmesg error to a debug print
    - xen/netfront: destroy queues before real_num_tx_queues is zeroed
    - thermal: core: Fix TZ_GET_TRIP NULL pointer dereference
    - mac80211: fix EAPoL rekey fail in 802.3 rx path
    - blktrace: fix use after free for struct blk_trace
    - ntb: intel: fix port config status offset for SPR
    - mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls
    - xfrm: fix MTU regression
    - netfilter: fix use-after-free in __nf_register_net_hook()
    - bpf, sockmap: Do not ignore orig_len parameter
    - xfrm: fix the if_id check in changelink
    - xfrm: enforce validity of offload input flags
    - e1000e: Correct NVM checksum verification flow
    - net: fix up skbs delta_truesize in UDP GRO frag_list
    - netfilter: nf_queue: don't assume sk is full socket
    - netfilter: nf_queue: fix possible use-after-free
    - netfilter: nf_queue: handle socket prefetch
    - batman-adv: Request iflink once in batadv-on-batadv check
    - batman-adv: Request iflink once in batadv_get_real_netdevice
    - batman-adv: Don't expect inter-netns unique iflink indices
    - net: ipv6: ensure we call ipv6_mc_down() at most once
    - net: dcb: flush lingering app table entries for unregistered devices
    - net: ipa: add an interconnect dependency
    - net/smc: fix connection leak
    - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client
    - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server
    - btrfs: fix ENOSPC failure when attempting direct IO write into NOCOW range
    - mac80211: fix forwarded mesh frames AC & queue selection
    - net: stmmac: fix return value of __setup handler
    - mac80211: treat some SAE auth steps as final
    - iavf: Fix missing check for running netdev
    - net: sxgbe: fix return value of __setup handler
    - ibmvnic: register netdev after init of adapter
    - net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()
    - ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc()
    - iavf: Fix deadlock in iavf_reset_task
    - efivars: Respect "block" flag in efivar_entry_set_safe()
    - auxdisplay: lcd2s: Fix lcd2s_redefine_char() feature
    - firmware: arm_scmi: Remove space in MODULE_ALIAS name
    - ASoC: cs4265: Fix the duplicated control name
    - auxdisplay: lcd2s: Fix memory leak in ->remove()
    - auxdisplay: lcd2s: Use proper API to free the instance of charlcd object
    - can: gs_usb: change active_channels's type from atomic_t to u8
    - iommu/tegra-smmu: Fix missing put_device() call in tegra_smmu_find
    - arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output
    - igc: igc_read_phy_reg_gpy: drop premature return
    - ARM: Fix kgdb breakpoint for Thumb2
    - mips: setup: fix setnocoherentio() boolean setting
    - ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions
    - mptcp: Correctly set DATA_FIN timeout when number of retransmits is large
    - selftests: mlxsw: tc_police_scale: Make test more robust
    - pinctrl: sunxi: Use unique lockdep classes for IRQs
    - igc: igc_write_phy_reg_gpy: drop premature return
    - ibmvnic: free reset-work-item when flushing
    - memfd: fix F_SEAL_WRITE after shmem huge page allocated
    - s390/extable: fix exception table sorting
    - sched: Fix yet more sched_fork() races
    - arm64: dts: juno: Remove GICv2m dma-range
    - iommu/amd: Fix I/O page table memory leak
    - MIPS: ralink: mt7621: do memory detection on KSEG1
    - ARM: dts: switch timer config to common devkit8000 devicetree
    - ARM: dts: Use 32KiHz oscillator on devkit8000
    - soc: fsl: guts: Revert commit 3c0d64e867ed
    - soc: fsl: guts: Add a missing memory allocation failure check
    - soc: fsl: qe: Check of ioremap return value
    - netfilter: nf_tables: prefer kfree_rcu(ptr, rcu) variant
    - ARM: tegra: Move panels to AUX bus
    - can: etas_es58x: change opened_channel_cnt's type from atomic_t to u8
    - net: stmmac: enhance XDP ZC driver level switching performance
    - net: stmmac: only enable DMA interrupts when ready
    - ibmvnic: initialize rc before completing wait
    - ibmvnic: define flush_reset_queue helper
    - ibmvnic: complete init_done on transport events
    - net: chelsio: cxgb3: check the return value of pci_find_capability()
    - net: sparx5: Fix add vlan when invalid operation
    - iavf: Refactor iavf state machine tracking
    - iavf: Add __IAVF_INIT_FAILED state
    - iavf: Combine init and watchdog state machines
    - iavf: Add trace while removing device
    - iavf: Rework mutexes for better synchronisation
    - iavf: Add helper function to go from pci_dev to adapter
    - iavf: Fix kernel BUG in free_msi_irqs
    - iavf: Add waiting so the port is initialized in remove
    - iavf: Fix init state closure on remove
    - iavf: Fix locking for VIRTCHNL_OP_GET_OFFLOAD_VLAN_V2_CAPS
    - iavf: Fix race in init state
    - iavf: Fix __IAVF_RESETTING state usage
    - drm/i915/guc/slpc: Correct the param count for unset param
    - drm/bridge: ti-sn65dsi86: Properly undo autosuspend
    - e1000e: Fix possible HW unit hang after an s0ix exit
    - MIPS: ralink: mt7621: use bitwise NOT instead of logical
    - nl80211: Handle nla_memdup failures in handle_nan_filter
    - drm/amdgpu: fix suspend/resume hang regression
    - net: dcb: disable softirqs in dcbnl_flush_dev()
    - selftests: mlxsw: resource_scale: Fix return value
    - net: stmmac: perserve TX and RX coalesce value during XDP setup
    - iavf: do not override the adapter state in the watchdog task (again)
    - iavf: missing unlocks in iavf_watchdog_task()
    - MAINTAINERS: adjust file entry for of_net.c after movement
    - Input: elan_i2c - move regulator_[en|dis]able() out of
      elan_[en|dis]able_power()
    - Input: elan_i2c - fix regulator enable count imbalance after suspend/resume
    - Input: samsung-keypad - properly state IOMEM dependency
    - HID: add mapping for KEY_DICTATE
    - HID: add mapping for KEY_ALL_APPLICATIONS
    - tracing/histogram: Fix sorting on old "cpu" value
    - tracing: Fix return value of __setup handlers
    - btrfs: fix lost prealloc extents beyond eof after full fsync
    - btrfs: fix relocation crash due to premature return from
      btrfs_commit_transaction()
    - btrfs: do not WARN_ON() if we have PageError set
    - btrfs: qgroup: fix deadlock between rescan worker and remove qgroup
    - btrfs: add missing run of delayed items after unlink during log replay
    - btrfs: do not start relocation until in progress drops are done
    - Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6"
    - proc: fix documentation and description of pagemap
    - KVM: x86/mmu: Passing up the error state of mmu_alloc_shadow_roots()
    - hamradio: fix macro redefine warning
    - Linux 5.15.27
    - [Config] updateconfigs
  * devices on thunderbolt dock are not recognized on adl-p platform
    (LP: #1955016)
    - thunderbolt: Tear down existing tunnels when resuming from hibernate
    - thunderbolt: Runtime resume USB4 port when retimers are scanned
    - thunderbolt: Do not allow subtracting more NFC credits than configured
    - thunderbolt: Do not program path HopIDs for USB4 routers
    - thunderbolt: Add debug logging of DisplayPort resource allocation
  * MT7921[14c3:7961] ASPM is disabled and it affects power consumption
    (LP: #1955882)
    - mt76: mt7921: enable aspm by default
  * Add proper runtime PM support to Realtek PCIe cardreader (LP: #1963615)
    - mmc: rtsx: Use pm_runtime_{get, put}() to handle runtime PM
    - misc: rtsx: Rework runtime power management flow
    - misc: rtsx: Cleanup power management ops
    - misc: rtsx: Quiesce rts5249 on system suspend
    - mmc: rtsx: Let MMC core handle runtime PM
    - misc: rtsx: conditionally build rtsx_pm_power_saving()
    - misc: rtsx: rts522a rts5228 rts5261 support Runtime PM
    - mmc: rtsx: Fix build errors/warnings for unused variable
    - mmc: rtsx: add 74 Clocks in power on flow
  * [22.04 FEAT] In-kernel crypto: SIMD implementation of chacha20
    (LP: #1853152)
    - s390/crypto: add SIMD implementation for ChaCha20
    - s390/crypto: fix compile error for ChaCha20 module
  * Add ConnectX7 support and bug fixes  to Jammy (LP: #1962185)
    - IB/mlx5: Expose NDR speed through MAD
  * INVALID or PRIVATE BUG (LP: #1959890)
    - [Config] Deactivate CONFIG_QETH_OSX kernel config option
  * Move virtual graphics drivers from linux-modules-extra to linux-modules
    (LP: #1960633)
    - [Packaging] Move VM DRM drivers into modules
  * Not able to enter s2idle state on AMD platforms (LP: #1961121)
    - HID: amd_sfh: Handle amd_sfh work buffer in PM ops
    - HID: amd_sfh: Disable the interrupt for all command
    - HID: amd_sfh: Add functionality to clear interrupts
    - HID: amd_sfh: Add interrupt handler to process interrupts
  * INVALID or PRIVATE BUG (LP: #1960580)
    - s390/kexec_file: move kernel image size check
    - s390: support command lines longer than 896 bytes
  * [UBUNTU 20.04] kernel: Add support for CPU-MF counter second version 7
    (LP: #1960182)
    - s390/cpumf: Support for CPU Measurement Facility CSVN 7
    - s390/cpumf: Support for CPU Measurement Sampling Facility LS bit
  * [SRU]PCI: vmd: Do not disable MSI-X remapping if interrupt remapping is
    enabled by IOMMU (LP: #1937295)
    - PCI: vmd: Do not disable MSI-X remapping if interrupt remapping is enabled
      by IOMMU
  * Jammy update: v5.15.26 upstream stable release (LP: #1963891)
    - mm/filemap: Fix handling of THPs in generic_file_buffered_read()
    - cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug
    - cgroup-v1: Correct privileges check in release_agent writes
    - x86/ptrace: Fix xfpregs_set()'s incorrect xmm clearing
    - btrfs: tree-checker: check item_size for inode_item
    - btrfs: tree-checker: check item_size for dev_item
    - clk: jz4725b: fix mmc0 clock gating
    - io_uring: don't convert to jiffies for waiting on timeouts
    - io_uring: disallow modification of rsrc_data during quiesce
    - selinux: fix misuse of mutex_is_locked()
    - vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
    - parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel
    - parisc/unaligned: Fix ldw() and stw() unalignment handlers
    - KVM: x86/mmu: make apf token non-zero to fix bug
    - drm/amd/display: Protect update_bw_bounding_box FPU code.
    - drm/amd/pm: fix some OEM SKU specific stability issues
    - drm/amd: Check if ASPM is enabled from PCIe subsystem
    - drm/amdgpu: disable MMHUB PG for Picasso
    - drm/amdgpu: do not enable asic reset for raven2
    - drm/i915: Widen the QGV point mask
    - drm/i915: Correctly populate use_sagv_wm for all pipes
    - drm/i915: Fix bw atomic check when switching between SAGV vs. no SAGV
    - sr9700: sanity check for packet length
    - USB: zaurus: support another broken Zaurus
    - CDC-NCM: avoid overflow in sanity checking
    - netfilter: xt_socket: fix a typo in socket_mt_destroy()
    - netfilter: xt_socket: missing ifdef CONFIG_IP6_NF_IPTABLES dependency
    - tee: export teedev_open() and teedev_close_context()
    - optee: use driver internal tee_context for some rpc
    - ping: remove pr_err from ping_lookup
    - Revert "i40e: Fix reset bw limit when DCB enabled with 1 TC"
    - gpu: host1x: Always return syncpoint value when waiting
    - perf evlist: Fix failed to use cpu list for uncore events
    - perf data: Fix double free in perf_session__delete()
    - mptcp: fix race in incoming ADD_ADDR option processing
    - mptcp: add mibs counter for ignored incoming options
    - selftests: mptcp: fix diag instability
    - selftests: mptcp: be more conservative with cookie MPJ limits
    - bnx2x: fix driver load from initrd
    - bnxt_en: Fix active FEC reporting to ethtool
    - bnxt_en: Fix offline ethtool selftest with RDMA enabled
    - bnxt_en: Fix incorrect multicast rx mask setting when not requested
    - hwmon: Handle failure to register sensor with thermal zone correctly
    - net/mlx5: Fix tc max supported prio for nic mode
    - ice: check the return of ice_ptp_gettimex64
    - ice: initialize local variable 'tlv'
    - net/mlx5: Update the list of the PCI supported devices
    - bpf: Fix crash due to incorrect copy_map_value
    - bpf: Do not try bpf_msg_push_data with len 0
    - selftests: bpf: Check bpf_msg_push_data return value
    - bpf: Fix a bpf_timer initialization issue
    - bpf: Add schedule points in batch ops
    - io_uring: add a schedule point in io_add_buffers()
    - net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends
    - nvme: also mark passthrough-only namespaces ready in nvme_update_ns_info
    - tipc: Fix end of loop tests for list_for_each_entry()
    - gso: do not skip outer ip header in case of ipip and net_failover
    - net: mv643xx_eth: process retval from of_get_mac_address
    - openvswitch: Fix setting ipv6 fields causing hw csum failure
    - drm/edid: Always set RGB444
    - net/mlx5e: Fix wrong return value on ioctl EEPROM query failure
    - drm/vc4: crtc: Fix runtime_pm reference counting
    - drm/i915/dg2: Print PHY name properly on calibration error
    - net/sched: act_ct: Fix flow table lookup after ct clear or switching zones
    - net: ll_temac: check the return value of devm_kmalloc()
    - net: Force inlining of checksum functions in net/checksum.h
    - netfilter: nf_tables: unregister flowtable hooks on netns exit
    - nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()
    - net: mdio-ipq4019: add delay after clock enable
    - netfilter: nf_tables: fix memory leak during stateful obj update
    - net/smc: Use a mutex for locking "struct smc_pnettable"
    - surface: surface3_power: Fix battery readings on batteries without a serial
      number
    - udp_tunnel: Fix end of loop test in udp_tunnel_nic_unregister()
    - net/mlx5: DR, Cache STE shadow memory
    - ibmvnic: schedule failover only if vioctl fails
    - net/mlx5: DR, Don't allow match on IP w/o matching on full
      ethertype/ip_version
    - net/mlx5: Fix possible deadlock on rule deletion
    - net/mlx5: Fix wrong limitation of metadata match on ecpf
    - net/mlx5: DR, Fix the threshold that defines when pool sync is initiated
    - net/mlx5e: MPLSoUDP decap, fix check for unsupported matches
    - net/mlx5e: kTLS, Use CHECKSUM_UNNECESSARY for device-offloaded packets
    - net/mlx5: Update log_max_qp value to be 17 at most
    - spi: spi-zynq-qspi: Fix a NULL pointer dereference in
      zynq_qspi_exec_mem_op()
    - gpio: rockchip: Reset int_bothedge when changing trigger
    - regmap-irq: Update interrupt clear register for proper reset
    - net-timestamp: convert sk->sk_tskey to atomic_t
    - RDMA/rtrs-clt: Fix possible double free in error case
    - RDMA/rtrs-clt: Move free_permit from free_clt to rtrs_clt_close
    - bnxt_en: Increase firmware message response DMA wait time
    - configfs: fix a race in configfs_{,un}register_subsystem()
    - RDMA/ib_srp: Fix a deadlock
    - tracing: Dump stacktrace trigger to the corresponding instance
    - tracing: Have traceon and traceoff trigger honor the instance
    - iio:imu:adis16480: fix buffering for devices with no burst mode
    - iio: adc: men_z188_adc: Fix a resource leak in an error handling path
    - iio: adc: tsc2046: fix memory corruption by preventing array overflow
    - iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits
    - iio: accel: fxls8962af: add padding to regmap for SPI
    - iio: imu: st_lsm6dsx: wait for settling time in st_lsm6dsx_read_oneshot
    - iio: Fix error handling for PM
    - sc16is7xx: Fix for incorrect data being transmitted
    - ata: pata_hpt37x: disable primary channel on HPT371
    - Revert "USB: serial: ch341: add new Product ID for CH341A"
    - usb: gadget: rndis: add spinlock for rndis response list
    - USB: gadget: validate endpoint index for xilinx udc
    - tracefs: Set the group ownership in apply_options() not parse_options()
    - USB: serial: option: add support for DW5829e
    - USB: serial: option: add Telit LE910R1 compositions
    - usb: dwc2: drd: fix soft connect when gadget is unconfigured
    - usb: dwc3: pci: Add "snps,dis_u2_susphy_quirk" for Intel Bay Trail
    - usb: dwc3: pci: Fix Bay Trail phy GPIO mappings
    - usb: dwc3: gadget: Let the interrupt handler disable bottom halves.
    - xhci: re-initialize the HC during resume if HCE was set
    - xhci: Prevent futile URB re-submissions due to incorrect return value.
    - nvmem: core: Fix a conflict between MTD and NVMEM on wp-gpios property
    - mtd: core: Fix a conflict between MTD and NVMEM on wp-gpios property
    - driver core: Free DMA range map when device is released
    - btrfs: prevent copying too big compressed lzo segment
    - RDMA/cma: Do not change route.addr.src_addr outside state checks
    - thermal: int340x: fix memory leak in int3400_notify()
    - staging: fbtft: fb_st7789v: reset display before initialization
    - tps6598x: clear int mask on probe failure
    - IB/qib: Fix duplicate sysfs directory name
    - riscv: fix nommu_k210_sdcard_defconfig
    - riscv: fix oops caused by irqsoff latency tracer
    - tty: n_gsm: fix encoding of control signal octet bit DV
    - tty: n_gsm: fix proper link termination after failed open
    - tty: n_gsm: fix NULL pointer access due to DLCI release
    - tty: n_gsm: fix wrong tty control line for flow control
    - tty: n_gsm: fix wrong modem processing in convergence layer type 2
    - tty: n_gsm: fix deadlock in gsmtty_open()
    - pinctrl: fix loop in k210_pinconf_get_drive()
    - pinctrl: k210: Fix bias-pull-up
    - gpio: tegra186: Fix chip_data type confusion
    - memblock: use kfree() to release kmalloced memblock regions
    - ice: Fix race conditions between virtchnl handling and VF ndo ops
    - ice: fix concurrent reset and removal of VFs
    - Linux 5.15.26
  * Jammy update: v5.15.25 upstream stable release (LP: #1963890)
    - drm/nouveau/pmu/gm200-: use alternate falcon reset sequence
    - fs/proc: task_mmu.c: don't read mapcount for migration entry
    - btrfs: zoned: cache reported zone during mount
    - HID:Add support for UGTABLET WP5540
    - Revert "svm: Add warning message for AVIC IPI invalid target"
    - parisc: Show error if wrong 32/64-bit compiler is being used
    - serial: parisc: GSC: fix build when IOSAPIC is not set
    - parisc: Drop __init from map_pages declaration
    - parisc: Fix data TLB miss in sba_unmap_sg
    - parisc: Fix sglist access in ccio-dma.c
    - mmc: block: fix read single on recovery logic
    - mm: don't try to NUMA-migrate COW pages that have other uses
    - HID: amd_sfh: Add illuminance mask to limit ALS max value
    - HID: i2c-hid: goodix: Fix a lockdep splat
    - HID: amd_sfh: Increase sensor command timeout
    - HID: amd_sfh: Correct the structure field name
    - PCI: hv: Fix NUMA node assignment when kernel boots with custom NUMA
      topology
    - parisc: Add ioread64_lo_hi() and iowrite64_lo_hi()
    - btrfs: send: in case of IO error log it
    - platform/x86: touchscreen_dmi: Add info for the RWC NANOTE P8 AY07J 2-in-1
    - platform/x86: ISST: Fix possible circular locking dependency detected
    - kunit: tool: Import missing importlib.abc
    - selftests: rtc: Increase test timeout so that all tests run
    - kselftest: signal all child processes
    - net: ieee802154: at86rf230: Stop leaking skb's
    - selftests/zram: Skip max_comp_streams interface on newer kernel
    - selftests/zram01.sh: Fix compression ratio calculation
    - selftests/zram: Adapt the situation that /dev/zram0 is being used
    - selftests: openat2: Print also errno in failure messages
    - selftests: openat2: Add missing dependency in Makefile
    - selftests: openat2: Skip testcases that fail with EOPNOTSUPP
    - selftests: skip mincore.check_file_mmap when fs lacks needed support
    - ax25: improve the incomplete fix to avoid UAF and NPD bugs
    - pinctrl: bcm63xx: fix unmet dependency on REGMAP for GPIO_REGMAP
    - vfs: make freeze_super abort when sync_filesystem returns error
    - quota: make dquot_quota_sync return errors from ->sync_fs
    - scsi: pm80xx: Fix double completion for SATA devices
    - kselftest: Fix vdso_test_abi return status
    - scsi: core: Reallocate device's budget map on queue depth change
    - scsi: pm8001: Fix use-after-free for aborted TMF sas_task
    - scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task
    - drm/amd: Warn users about potential s0ix problems
    - nvme: fix a possible use-after-free in controller reset during load
    - nvme-tcp: fix possible use-after-free in transport error_recovery work
    - nvme-rdma: fix possible use-after-free in transport error_recovery work
    - net: sparx5: do not refer to skb after passing it on
    - drm/amd: add support to check whether the system is set to s3
    - drm/amd: Only run s3 or s0ix if system is configured properly
    - drm/amdgpu: fix logic inversion in check
    - x86/Xen: streamline (and fix) PV CPU enumeration
    - Revert "module, async: async_synchronize_full() on module init iff async is
      used"
    - gcc-plugins/stackleak: Use noinstr in favor of notrace
    - random: wake up /dev/random writers after zap
    - KVM: x86/xen: Fix runstate updates to be atomic when preempting vCPU
    - KVM: x86: nSVM/nVMX: set nested_run_pending on VM entry which is a result of
      RSM
    - KVM: x86: SVM: don't passthrough SMAP/SMEP/PKE bits in !NPT && !gCR0.PG case
    - KVM: x86: nSVM: fix potential NULL derefernce on nested migration
    - KVM: x86: nSVM: mark vmcb01 as dirty when restoring SMM saved state
    - iwlwifi: fix use-after-free
    - drm/radeon: Fix backlight control on iMac 12,1
    - drm/atomic: Don't pollute crtc_state->mode_blob with error pointers
    - drm/amd/pm: correct the sequence of sending gpu reset msg
    - drm/amdgpu: skipping SDMA hw_init and hw_fini for S0ix.
    - drm/i915/opregion: check port number bounds for SWSCI display power state
    - drm/i915: Fix dbuf slice config lookup
    - drm/i915: Fix mbus join config lookup
    - vsock: remove vsock from connected table when connect is interrupted by a
      signal
    - drm/cma-helper: Set VM_DONTEXPAND for mmap
    - drm/i915/gvt: Make DRM_I915_GVT depend on X86
    - drm/i915/ttm: tweak priority hint selection
    - iwlwifi: pcie: fix locking when "HW not ready"
    - iwlwifi: pcie: gen2: fix locking when "HW not ready"
    - iwlwifi: mvm: don't send SAR GEO command for 3160 devices
    - selftests: netfilter: fix exit value for nft_concat_range
    - netfilter: nft_synproxy: unregister hooks on init error path
    - selftests: netfilter: disable rp_filter on router
    - ipv4: fix data races in fib_alias_hw_flags_set
    - ipv6: fix data-race in fib6_info_hw_flags_set / fib6_purge_rt
    - ipv6: mcast: use rcu-safe version of ipv6_get_lladdr()
    - ipv6: per-netns exclusive flowlabel checks
    - Revert "net: ethernet: bgmac: Use devm_platform_ioremap_resource_byname"
    - mac80211: mlme: check for null after calling kmemdup
    - brcmfmac: firmware: Fix crash in brcm_alt_fw_path
    - cfg80211: fix race in netlink owner interface destruction
    - net: dsa: lan9303: fix reset on probe
    - net: dsa: mv88e6xxx: flush switchdev FDB workqueue before removing VLAN
    - net: dsa: lantiq_gswip: fix use after free in gswip_remove()
    - net: dsa: lan9303: handle hwaccel VLAN tags
    - net: dsa: lan9303: add VLAN IDs to master device
    - net: ieee802154: ca8210: Fix lifs/sifs periods
    - ping: fix the dif and sdif check in ping_lookup
    - bonding: force carrier update when releasing slave
    - drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit
    - net_sched: add __rcu annotation to netdev->qdisc
    - bonding: fix data-races around agg_select_timer
    - libsubcmd: Fix use-after-free for realloc(..., 0)
    - net/smc: Avoid overwriting the copies of clcsock callback functions
    - net: phy: mediatek: remove PHY mode check on MT7531
    - atl1c: fix tx timeout after link flap on Mikrotik 10/25G NIC
    - tipc: fix wrong publisher node address in link publications
    - dpaa2-switch: fix default return of dpaa2_switch_flower_parse_mirror_key
    - dpaa2-eth: Initialize mutex used in one step timestamping path
    - net: bridge: multicast: notify switchdev driver whenever MC processing gets
      disabled
    - perf bpf: Defer freeing string after possible strlen() on it
    - selftests/exec: Add non-regular to TEST_GEN_PROGS
    - arm64: Correct wrong label in macro __init_el2_gicv3
    - ALSA: usb-audio: revert to IMPLICIT_FB_FIXED_DEV for M-Audio FastTrack Ultra
    - ALSA: hda/realtek: Add quirk for Legion Y9000X 2019
    - ALSA: hda/realtek: Fix deadlock by COEF mutex
    - ALSA: hda: Fix regression on forced probe mask option
    - ALSA: hda: Fix missing codec probe on Shenker Dock 15
    - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw()
    - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range()
    - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_sx()
    - ASoC: ops: Fix stereo change notifications in snd_soc_put_xr_sx()
    - cifs: fix set of group SID via NTSD xattrs
    - powerpc/603: Fix boot failure with DEBUG_PAGEALLOC and KFENCE
    - powerpc/lib/sstep: fix 'ptesync' build error
    - mtd: rawnand: gpmi: don't leak PM reference in error path
    - smb3: fix snapshot mount option
    - tipc: fix wrong notification node addresses
    - scsi: ufs: Remove dead code
    - scsi: ufs: Fix a deadlock in the error handler
    - ASoC: tas2770: Insert post reset delay
    - ASoC: qcom: Actually clear DMA interrupt register for HDMI
    - block/wbt: fix negative inflight counter when remove scsi device
    - NFS: Remove an incorrect revalidation in nfs4_update_changeattr_locked()
    - NFS: LOOKUP_DIRECTORY is also ok with symlinks
    - NFS: Do not report writeback errors in nfs_getattr()
    - tty: n_tty: do not look ahead for EOL character past the end of the buffer
    - block: fix surprise removal for drivers calling blk_set_queue_dying
    - mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe()
    - mtd: parsers: qcom: Fix kernel panic on skipped partition
    - mtd: parsers: qcom: Fix missing free for pparts in cleanup
    - mtd: phram: Prevent divide by zero bug in phram_setup()
    - mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status
    - HID: elo: fix memory leak in elo_probe
    - mtd: rawnand: ingenic: Fix missing put_device in ingenic_ecc_get
    - Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
    - KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id()
    - KVM: x86/pmu: Don't truncate the PerfEvtSeln MSR when creating a perf event
    - KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW
    - ARM: OMAP2+: hwmod: Add of_node_put() before break
    - ARM: OMAP2+: adjust the location of put_device() call in omapdss_init_of
    - phy: usb: Leave some clocks running during suspend
    - staging: vc04_services: Fix RCU dereference check
    - phy: phy-mtk-tphy: Fix duplicated argument in phy-mtk-tphy
    - irqchip/sifive-plic: Add missing thead,c900-plic match string
    - x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm
    - netfilter: conntrack: don't refresh sctp entries in closed state
    - ksmbd: fix same UniqueId for dot and dotdot entries
    - ksmbd: don't align last entry offset in smb2 query directory
    - arm64: dts: meson-gx: add ATF BL32 reserved-memory region
    - arm64: dts: meson-g12: add ATF BL32 reserved-memory region
    - arm64: dts: meson-g12: drop BL32 region from SEI510/SEI610
    - pidfd: fix test failure due to stack overflow on some arches
    - selftests: fixup build warnings in pidfd / clone3 tests
    - mm: io_uring: allow oom-killer from io_uring_setup
    - kconfig: let 'shell' return enough output for deep path names
    - ata: libata-core: Disable TRIM on M88V29
    - soc: aspeed: lpc-ctrl: Block error printing on probe defer cases
    - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create
    - drm/rockchip: dw_hdmi: Do not leave clock enabled in error case
    - tracing: Fix tp_printk option related with tp_printk_stop_on_boot
    - display/amd: decrease message verbosity about watermarks table failure
    - drm/amd/display: Cap pflip irqs per max otg number
    - drm/amd/display: fix yellow carp wm clamping
    - net: usb: qmi_wwan: Add support for Dell DW5829e
    - net: macb: Align the dma and coherent dma masks
    - kconfig: fix failing to generate auto.conf
    - scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop
    - EDAC: Fix calculation of returned address and next offset in
      edac_align_ptr()
    - ucounts: Handle wrapping in is_ucounts_overlimit
    - ucounts: In set_cred_ucounts assume new->ucounts is non-NULL
    - ucounts: Base set_cred_ucounts changes on the real user
    - ucounts: Enforce RLIMIT_NPROC not RLIMIT_NPROC+1
    - lib/iov_iter: initialize "flags" in new pipe_buffer
    - rlimit: Fix RLIMIT_NPROC enforcement failure caused by capability calls in
      set_user
    - ucounts: Move RLIMIT_NPROC handling after set_user
    - net: sched: limit TC_ACT_REPEAT loops
    - dmaengine: sh: rcar-dmac: Check for error num after setting mask
    - dmaengine: stm32-dmamux: Fix PM disable depth imbalance in
      stm32_dmamux_probe
    - dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size
    - tests: fix idmapped mount_setattr test
    - i2c: qcom-cci: don't delete an unregistered adapter
    - i2c: qcom-cci: don't put a device tree node before i2c_add_adapter()
    - dmaengine: ptdma: Fix the error handling path in pt_core_init()
    - copy_process(): Move fd_install() out of sighand->siglock critical section
    - scsi: qedi: Fix ABBA deadlock in qedi_process_tmf_resp() and
      qedi_process_cmd_cleanup_resp()
    - ice: enable parsing IPSEC SPI headers for RSS
    - i2c: brcmstb: fix support for DSL and CM variants
    - lockdep: Correct lock_classes index mapping
    - Linux 5.15.25
  * Jammy update: v5.15.24 upstream stable release (LP: #1963889)
    - integrity: check the return value of audit_log_start()
    - ima: fix reference leak in asymmetric_verify()
    - ima: Remove ima_policy file before directory
    - ima: Allow template selection with ima_template[_fmt]= after ima_hash=
    - ima: Do not print policy rule with inactive LSM labels
    - mmc: sdhci-of-esdhc: Check for error num after setting mask
    - mmc: core: Wait for command setting 'Power Off Notification' bit to complete
    - can: isotp: fix potential CAN frame reception race in isotp_rcv()
    - can: isotp: fix error path in isotp_sendmsg() to unlock wait queue
    - net: phy: marvell: Fix RGMII Tx/Rx delays setting in 88e1121-compatible PHYs
    - net: phy: marvell: Fix MDI-x polarity setting in 88e1118-compatible PHYs
    - NFS: Fix initialisation of nfs_client cl_flags field
    - NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes
    - NFSD: Fix ia_size underflow
    - NFSD: Clamp WRITE offsets
    - NFSD: Fix offset type in I/O trace points
    - NFSD: Fix the behavior of READ near OFFSET_MAX
    - thermal/drivers/int340x: Improve the tcc offset saving for suspend/resume
    - thermal/drivers/int340x: processor_thermal: Suppot 64 bit RFIM responses
    - thermal: int340x: Limit Kconfig to 64-bit
    - thermal/drivers/int340x: Fix RFIM mailbox write commands
    - tracing: Propagate is_signed to expression
    - NFS: change nfs_access_get_cached to only report the mask
    - NFSv4 only print the label when its queried
    - nfs: nfs4clinet: check the return value of kstrdup()
    - NFSv4.1: Fix uninitialised variable in devicenotify
    - NFSv4 remove zero number of fs_locations entries error check
    - NFSv4 store server support for fs_location attribute
    - NFSv4.1 query for fs_location attr on a new file system
    - NFSv4 expose nfs_parse_server_name function
    - NFSv4 handle port presence in fs_location server string
    - SUNRPC allow for unspecified transport time in rpc_clnt_add_xprt
    - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change
    - sunrpc: Fix potential race conditions in rpc_sysfs_xprt_state_change()
    - irqchip/realtek-rtl: Service all pending interrupts
    - perf/x86/rapl: fix AMD event handling
    - x86/perf: Avoid warning for Arch LBR without XSAVE
    - sched: Avoid double preemption in __cond_resched_*lock*()
    - drm/vc4: Fix deadlock on DSI device attach error
    - drm: panel-orientation-quirks: Add quirk for the 1Netbook OneXPlayer
    - net: sched: Clarify error message when qdisc kind is unknown
    - powerpc/fixmap: Fix VM debug warning on unmap
    - scsi: target: iscsi: Make sure the np under each tpg is unique
    - scsi: ufs: ufshcd-pltfrm: Check the return value of devm_kstrdup()
    - scsi: qedf: Add stag_work to all the vports
    - scsi: qedf: Fix refcount issue when LOGO is received during TMF
    - scsi: qedf: Change context reset messages to ratelimited
    - scsi: pm8001: Fix bogus FW crash for maxcpus=1
    - scsi: ufs: Use generic error code in ufshcd_set_dev_pwr_mode()
    - scsi: ufs: Treat link loss as fatal error
    - scsi: myrs: Fix crash in error case
    - net: stmmac: reduce unnecessary wakeups from eee sw timer
    - PM: hibernate: Remove register_nosave_region_late()
    - drm/amd/display: Correct MPC split policy for DCN301
    - usb: dwc2: gadget: don't try to disable ep0 in dwc2_hsotg_suspend
    - perf: Always wake the parent event
    - nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs
    - MIPS: Fix build error due to PTR used in more places
    - net: stmmac: dwmac-sun8i: use return val of readl_poll_timeout()
    - KVM: eventfd: Fix false positive RCU usage warning
    - KVM: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER
    - KVM: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS
    - KVM: SVM: Don't kill SEV guest if SMAP erratum triggers in usermode
    - KVM: VMX: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking shadow
    - KVM: x86: Report deprecated x87 features in supported CPUID
    - riscv: fix build with binutils 2.38
    - riscv: cpu-hotplug: clear cpu from numa map when teardown
    - riscv: eliminate unreliable __builtin_frame_address(1)
    - gfs2: Fix gfs2_release for non-writers regression
    - ARM: dts: imx23-evk: Remove MX23_PAD_SSP1_DETECT from hog group
    - ARM: dts: Fix boot regression on Skomer
    - ARM: socfpga: fix missing RESET_CONTROLLER
    - nvme-tcp: fix bogus request completion when failing to send AER
    - ACPI/IORT: Check node revision for PMCG resources
    - PM: s2idle: ACPI: Fix wakeup interrupts handling
    - drm/amdgpu/display: change pipe policy for DCN 2.0
    - drm/rockchip: vop: Correct RK3399 VOP register fields
    - drm/i915: Allow !join_mbus cases for adlp+ dbuf configuration
    - drm/i915: Populate pipe dbuf slices more accurately during readout
    - ARM: dts: Fix timer regression for beagleboard revision c
    - ARM: dts: meson: Fix the UART compatible strings
    - ARM: dts: meson8: Fix the UART device-tree schema validation
    - ARM: dts: meson8b: Fix the UART device-tree schema validation
    - phy: broadcom: Kconfig: Fix PHY_BRCM_USB config option
    - staging: fbtft: Fix error path in fbtft_driver_module_init()
    - ARM: dts: imx6qdl-udoo: Properly describe the SD card detect
    - phy: xilinx: zynqmp: Fix bus width setting for SGMII
    - phy: stm32: fix a refcount leak in stm32_usbphyc_pll_enable()
    - ARM: dts: imx7ulp: Fix 'assigned-clocks-parents' typo
    - arm64: dts: imx8mq: fix mipi_csi bidirectional port numbers
    - usb: f_fs: Fix use-after-free for epfile
    - phy: dphy: Correct clk_pre parameter
    - gpio: aggregator: Fix calling into sleeping GPIO controllers
    - NFS: Don't overfill uncached readdir pages
    - NFS: Don't skip directory entries when doing uncached readdir
    - drm/vc4: hdmi: Allow DBLCLK modes even if horz timing is odd.
    - misc: fastrpc: avoid double fput() on failed usercopy
    - net: sparx5: Fix get_stat64 crash in tcpdump
    - netfilter: ctnetlink: disable helper autoassign
    - arm64: dts: meson-g12b-odroid-n2: fix typo 'dio2133'
    - arm64: dts: meson-sm1-odroid: use correct enable-gpio pin for tf-io
      regulator
    - arm64: dts: meson-sm1-bananapi-m5: fix wrong GPIO domain for GPIOE_2
    - arm64: dts: meson-sm1-odroid: fix boot loop after reboot
    - ixgbevf: Require large buffers for build_skb on 82599VF
    - drm/panel: simple: Assign data from panel_dpi_probe() correctly
    - ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE
    - gpiolib: Never return internal error codes to user space
    - gpio: sifive: use the correct register to read output values
    - fbcon: Avoid 'cap' set but not used warning
    - bonding: pair enable_port with slave_arr_updates
    - net: dsa: mv88e6xxx: don't use devres for mdiobus
    - net: dsa: ar9331: register the mdiobus under devres
    - net: dsa: bcm_sf2: don't use devres for mdiobus
    - net: dsa: felix: don't use devres for mdiobus
    - net: dsa: mt7530: fix kernel bug in mdiobus_free() when unbinding
    - net: dsa: lantiq_gswip: don't use devres for mdiobus
    - ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
    - nfp: flower: fix ida_idx not being released
    - net: do not keep the dst cache when uncloning an skb dst and its metadata
    - net: fix a memleak when uncloning an skb dst and its metadata
    - veth: fix races around rq->rx_notify_masked
    - net: mdio: aspeed: Add missing MODULE_DEVICE_TABLE
    - tipc: rate limit warning for received illegal binding update
    - net: amd-xgbe: disable interrupts during pci removal
    - drm/amd/pm: fix hwmon node of power1_label create issue
    - mptcp: netlink: process IPv6 addrs in creating listening sockets
    - dpaa2-eth: unregister the netdev before disconnecting from the PHY
    - ice: fix an error code in ice_cfg_phy_fec()
    - ice: fix IPIP and SIT TSO offload
    - ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler
    - ice: Avoid RTNL lock when re-creating auxiliary device
    - net: mscc: ocelot: fix mutex lock error during ethtool stats read
    - net: dsa: mv88e6xxx: fix use-after-free in mv88e6xxx_mdios_unregister
    - vt_ioctl: fix array_index_nospec in vt_setactivate
    - vt_ioctl: add array_index_nospec to VT_ACTIVATE
    - n_tty: wake up poll(POLLRDNORM) on receiving data
    - eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX
    - usb: dwc2: drd: fix soft connect when gadget is unconfigured
    - Revert "usb: dwc2: drd: fix soft connect when gadget is unconfigured"
    - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup
    - usb: ulpi: Move of_node_put to ulpi_dev_release
    - usb: ulpi: Call of_node_put correctly
    - usb: dwc3: gadget: Prevent core from processing stale TRBs
    - usb: gadget: udc: renesas_usb3: Fix host to USB_ROLE_NONE transition
    - USB: gadget: validate interface OS descriptor requests
    - usb: gadget: rndis: check size of RNDIS_MSG_SET command
    - usb: gadget: f_uac2: Define specific wTerminalType
    - usb: raw-gadget: fix handling of dual-direction-capable endpoints
    - USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320
    - USB: serial: option: add ZTE MF286D modem
    - USB: serial: ch341: add support for GW Instek USB2.0-Serial devices
    - USB: serial: cp210x: add NCR Retail IO box id
    - USB: serial: cp210x: add CPI Bulk Coin Recycler id
    - speakup-dectlk: Restore pitch setting
    - phy: ti: Fix missing sentinel for clk_div_table
    - iio: buffer: Fix file related error handling in IIO_BUFFER_GET_FD_IOCTL
    - mm: memcg: synchronize objcg lists with a dedicated spinlock
    - seccomp: Invalidate seccomp mode to catch death failures
    - signal: HANDLER_EXIT should clear SIGNAL_UNKILLABLE
    - s390/cio: verify the driver availability for path_event call
    - bus: mhi: pci_generic: Add mru_default for Foxconn SDX55
    - bus: mhi: pci_generic: Add mru_default for Cinterion MV31-W
    - hwmon: (dell-smm) Speed up setting of fan speed
    - x86/sgx: Silence softlockup detection when releasing large enclaves
    - Makefile.extrawarn: Move -Wunaligned-access to W=1
    - scsi: lpfc: Remove NVMe support if kernel has NVME_FC disabled
    - scsi: lpfc: Reduce log messages seen after firmware download
    - MIPS: octeon: Fix missed PTR->PTR_WD conversion
    - arm64: dts: imx8mq: fix lcdif port node
    - perf: Fix list corruption in perf_cgroup_switch()
    - iommu: Fix potential use-after-free during probe
    - Linux 5.15.24
  * Jammy update: v5.15.23 upstream stable release (LP: #1963888)
    - moxart: fix potential use-after-free on remove path
    - arm64: Add Cortex-A510 CPU part definition
    - ksmbd: fix SMB 3.11 posix extension mount failure
    - crypto: api - Move cryptomgr soft dependency into algapi
    - Linux 5.15.23
  * [22.04 FEAT] KVM: Enable storage key checking for intercepted instruction
    handled by userspace (LP: #1933179)
    - KVM: s390: gaccess: Refactor gpa and length calculation
    - KVM: s390: gaccess: Refactor access address range check
    - KVM: s390: gaccess: Cleanup access to guest pages
    - s390/uaccess: introduce bit field for OAC specifier
    - s390/uaccess: fix compile error
    - s390/uaccess: Add copy_from/to_user_key functions
    - KVM: s390: Honor storage keys when accessing guest memory
    - KVM: s390: handle_tprot: Honor storage keys
    - KVM: s390: selftests: Test TEST PROTECTION emulation
    - KVM: s390: Add optional storage key checking to MEMOP IOCTL
    - KVM: s390: Add vm IOCTL for key checked guest absolute memory access
    - KVM: s390: Rename existing vcpu memop functions
    - KVM: s390: Add capability for storage key extension of MEM_OP IOCTL
    - KVM: s390: Update api documentation for memop ioctl
    - KVM: s390: Clarify key argument for MEM_OP in api docs
    - KVM: s390: Add missing vm MEM_OP size check
  * CVE-2022-25636
    - netfilter: nf_tables_offload: incorrect flow offload action array size
  * ubuntu_kernel_selftests / ftrace:ftracetest do_softirq failure on Jammy
    realtime (LP: #1959610)
    - selftests/ftrace: Do not trace do_softirq because of PREEMPT_RT
  * CVE-2022-0435
    - tipc: improve size validations for received domain records
  * CVE-2022-0516
    - KVM: s390: Return error on SIDA memop on normal guest
  * EDAC update for AMD Genoa support in 22.04 (LP: #1960362)
    - EDAC: Add RDDR5 and LRDDR5 memory types
    - EDAC/amd64: Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh
  * hwmon: k10temp updates for AMD Genoa in 22.04 (LP: #1960361)
    - x86/amd_nb: Add AMD Family 19h Models (10h-1Fh) and (A0h-AFh) PCI IDs
    - hwmon: (k10temp) Remove unused definitions
    - hwmon: (k10temp) Support up to 12 CCDs on AMD Family of processors
    - hwmon: (k10temp) Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh
  * [SRU][I/J/OEM-5.13/OEM-5.14] Add basic support of MT7922 (LP: #1958151)
    - mt76: mt7921: Add mt7922 support
    - mt76: mt7921: add support for PCIe ID 0x0608/0x0616
    - mt76: mt7921: introduce 160 MHz channel bandwidth support
  * Use EC GPE for s2idle wakeup on AMD platforms (LP: #1960771)
    - ACPI: PM: Revert "Only mark EC GPE for wakeup on Intel systems"
  * Update Broadcom Emulex FC HBA lpfc driver to 14.0.0.4 for Ubuntu 22.04
    (LP: #1956982)
    - scsi: lpfc: Change return code on I/Os received during link bounce
    - scsi: lpfc: Fix NPIV port deletion crash
    - scsi: lpfc: Adjust CMF total bytes and rxmonitor
    - scsi: lpfc: Cap CMF read bytes to MBPI
    - scsi: lpfc: Add additional debugfs support for CMF
    - scsi: lpfc: Update lpfc version to 14.0.0.4
  * Forward-port drm/i915 commits from oem-5.14 for Alder Lake S & P
    (LP: #1960298)
    - drm/i915/dmc: Update to DMC v2.12
    - drm/i915/adlp/tc: Fix PHY connected check for Thunderbolt mode
    - drm/i915/tc: Remove waiting for PHY complete during releasing ownership
    - drm/i915/tc: Check for DP-alt, legacy sinks before taking PHY ownership
    - drm/i915/tc: Add/use helpers to retrieve TypeC port properties
    - drm/i915/tc: Don't keep legacy TypeC ports in connected state w/o a sink
    - drm/i915/tc: Add a mode for the TypeC PHY's disconnected state
    - drm/i915/tc: Refactor TC-cold block/unblock helpers
    - drm/i915/tc: Avoid using legacy AUX PW in TBT mode
    - drm/i915/icl/tc: Remove the ICL special casing during TC-cold blocking
    - drm/i915/tc: Fix TypeC PHY connect/disconnect logic on ADL-P
    - drm/i915/tc: Drop extra TC cold blocking from intel_tc_port_connected()
    - drm/i915/tc: Fix system hang on ADL-P during TypeC PHY disconnect
    - drm/i915/display/adlp: Disable underrun recovery
    - drm/i915/adl_s: Remove require_force_probe protection
    - drm/i915/adlp: Remove require_force_probe protection
  * INVALID or PRIVATE BUG (LP: #1959735)
    - KVM: s390: Simplify SIGP Set Arch handling
    - KVM: s390: Add a routine for setting userspace CPU state
  * Include the QCA WCN 6856 v2.1 support (LP: #1954938)
    - SAUCE: ath11k: shrink TCSR read mask for WCN6855 hw2.1
  * Jammy update: v5.15.22 upstream stable release (LP: #1960516)
    - drm/i915: Disable DSB usage for now
    - selinux: fix double free of cond_list on error paths
    - audit: improve audit queue handling when "audit=1" on cmdline
    - ipc/sem: do not sleep with a spin lock held
    - spi: stm32-qspi: Update spi registering
    - ASoC: hdmi-codec: Fix OOB memory accesses
    - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
    - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()
    - ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()
    - ALSA: usb-audio: Correct quirk for VF0770
    - ALSA: hda: Fix UAF of leds class devs at unbinding
    - ALSA: hda: realtek: Fix race at concurrent COEF updates
    - ALSA: hda/realtek: Add quirk for ASUS GU603
    - ALSA: hda/realtek: Add missing fixup-model entry for Gigabyte X570 ALC1220
      quirks
    - ALSA: hda/realtek: Fix silent output on Gigabyte X570S Aorus Master (newer
      chipset)
    - ALSA: hda/realtek: Fix silent output on Gigabyte X570 Aorus Xtreme after
      reboot from Windows
    - btrfs: don't start transaction for scrub if the fs is mounted read-only
    - btrfs: fix deadlock between quota disable and qgroup rescan worker
    - btrfs: fix use-after-free after failure to create a snapshot
    - Revert "fs/9p: search open fids first"
    - drm/nouveau: fix off by one in BIOS boundary checking
    - drm/i915/adlp: Fix TypeC PHY-ready status readout
    - drm/amd/pm: correct the MGpuFanBoost support for Beige Goby
    - drm/amd/display: watermark latencies is not enough on DCN31
    - drm/amd/display: Force link_rate as LINK_RATE_RBR2 for 2018 15" Apple Retina
      panels
    - nvme-fabrics: fix state check in nvmf_ctlr_matches_baseopts()
    - mm/debug_vm_pgtable: remove pte entry from the page table
    - mm/pgtable: define pte_index so that preprocessor could recognize it
    - mm/kmemleak: avoid scanning potential huge holes
    - block: bio-integrity: Advance seed correctly for larger interval sizes
    - dma-buf: heaps: Fix potential spectre v1 gadget
    - IB/hfi1: Fix AIP early init panic
    - Revert "fbcon: Disable accelerated scrolling"
    - fbcon: Add option to enable legacy hardware acceleration
    - mptcp: fix msk traversal in mptcp_nl_cmd_set_flags()
    - Revert "ASoC: mediatek: Check for error clk pointer"
    - KVM: arm64: Avoid consuming a stale esr value when SError occur
    - KVM: arm64: Stop handle_exit() from handling HVC twice when an SError occurs
    - RDMA/cma: Use correct address when leaving multicast group
    - RDMA/ucma: Protect mc during concurrent multicast leaves
    - RDMA/siw: Fix refcounting leak in siw_create_qp()
    - IB/rdmavt: Validate remote_addr during loopback atomic tests
    - RDMA/siw: Fix broken RDMA Read Fence/Resume logic.
    - RDMA/mlx4: Don't continue event handler after memory allocation failure
    - ALSA: usb-audio: initialize variables that could ignore errors
    - ALSA: hda: Fix signedness of sscanf() arguments
    - ALSA: hda: Skip codec shutdown in case the codec is not registered
    - iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping()
    - iommu/amd: Fix loop timeout issue in iommu_ga_log_enable()
    - spi: bcm-qspi: check for valid cs before applying chip select
    - spi: mediatek: Avoid NULL pointer crash in interrupt
    - spi: meson-spicc: add IRQ check in meson_spicc_probe
    - spi: uniphier: fix reference count leak in uniphier_spi_probe()
    - IB/hfi1: Fix tstats alloc and dealloc
    - IB/cm: Release previously acquired reference counter in the cm_id_priv
    - net: ieee802154: hwsim: Ensure proper channel selection at probe time
    - net: ieee802154: mcr20a: Fix lifs/sifs periods
    - net: ieee802154: ca8210: Stop leaking skb's
    - netfilter: nft_reject_bridge: Fix for missing reply from prerouting
    - net: ieee802154: Return meaningful error codes from the netlink helpers
    - net/smc: Forward wakeup to smc socket waitqueue after fallback
    - net: stmmac: dwmac-visconti: No change to ETHER_CLOCK_SEL for unexpected
      speed request.
    - net: stmmac: properly handle with runtime pm in stmmac_dvr_remove()
    - net: macsec: Fix offload support for NETDEV_UNREGISTER event
    - net: macsec: Verify that send_sci is on when setting Tx sci explicitly
    - net: stmmac: dump gmac4 DMA registers correctly
    - net: stmmac: ensure PTP time register reads are consistent
    - drm/kmb: Fix for build errors with Warray-bounds
    - drm/i915/overlay: Prevent divide by zero bugs in scaling
    - drm/amd: avoid suspend on dGPUs w/ s2idle support when runtime PM enabled
    - ASoC: fsl: Add missing error handling in pcm030_fabric_probe
    - ASoC: xilinx: xlnx_formatter_pcm: Make buffer bytes multiple of period bytes
    - ASoC: simple-card: fix probe failure on platform component
    - ASoC: cpcap: Check for NULL pointer after calling of_get_child_by_name
    - ASoC: max9759: fix underflow in speaker_gain_control_put()
    - ASoC: codecs: wcd938x: fix incorrect used of portid
    - ASoC: codecs: lpass-rx-macro: fix sidetone register offsets
    - ASoC: codecs: wcd938x: fix return value of mixer put function
    - pinctrl: sunxi: Fix H616 I2S3 pin data
    - pinctrl: intel: Fix a glitch when updating IRQ flags on a preconfigured line
    - pinctrl: intel: fix unexpected interrupt
    - pinctrl: bcm2835: Fix a few error paths
    - scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe
    - nfsd: nfsd4_setclientid_confirm mistakenly expires confirmed client.
    - gve: fix the wrong AdminQ buffer queue index check
    - bpf: Use VM_MAP instead of VM_ALLOC for ringbuf
    - selftests/exec: Remove pipe from TEST_GEN_FILES
    - selftests: futex: Use variable MAKE instead of make
    - tools/resolve_btfids: Do not print any commands when building silently
    - e1000e: Separate ADP board type from TGP
    - rtc: cmos: Evaluate century appropriate
    - kvm: add guest_state_{enter,exit}_irqoff()
    - kvm/arm64: rework guest entry logic
    - perf: Copy perf_event_attr::sig_data on modification
    - perf stat: Fix display of grouped aliased events
    - perf/x86/intel/pt: Fix crash with stop filters in single-range mode
    - x86/perf: Default set FREEZE_ON_SMI for all
    - EDAC/altera: Fix deferred probing
    - EDAC/xgene: Fix deferred probing
    - ext4: prevent used blocks from being allocated during fast commit replay
    - ext4: modify the logic of ext4_mb_new_blocks_simple
    - ext4: fix error handling in ext4_restore_inline_data()
    - ext4: fix error handling in ext4_fc_record_modified_inode()
    - ext4: fix incorrect type issue during replay_del_range
    - net: dsa: mt7530: make NET_DSA_MT7530 select MEDIATEK_GE_PHY
    - cgroup/cpuset: Fix "suspicious RCU usage" lockdep warning
    - tools include UAPI: Sync sound/asound.h copy with the kernel sources
    - gpio: idt3243x: Fix an ignored error return from platform_get_irq()
    - gpio: mpc8xxx: Fix an ignored error return from platform_get_irq()
    - selftests: nft_concat_range: add test for reload with no element add/del
    - selftests: netfilter: check stateless nat udp checksum fixup
    - Linux 5.15.22
    - [Config] disable FRAMEBUFFER_CONSOLE_LEGACY_ACCELERATION
  * Jammy update: v5.15.21 upstream stable release (LP: #1960515)
    - Revert "drm/vc4: hdmi: Make sure the device is powered with CEC"
    - Revert "drm/vc4: hdmi: Make sure the device is powered with CEC" again
    - Linux 5.15.21
  * Jammy update: v5.15.20 upstream stable release (LP: #1960509)
    - Revert "UBUNTU: SAUCE: Revert "e1000e: Add handshake with the CSME to
      support S0ix""
    - Revert "UBUNTU: SAUCE: Revert "e1000e: Add polling mechanism to indicate
      CSME DPG exit""
    - Revert "UBUNTU: SAUCE: Revert "e1000e: Additional PHY power saving in S0ix""
    - PCI: pciehp: Fix infinite loop in IRQ handler upon power fault
    - selftests: mptcp: fix ipv6 routing setup
    - net: ipa: use a bitmap for endpoint replenish_enabled
    - net: ipa: prevent concurrent replenish
    - drm/vc4: hdmi: Make sure the device is powered with CEC
    - cgroup-v1: Require capabilities to set release_agent
    - Revert "mm/gup: small refactoring: simplify try_grab_page()"
    - ovl: don't fail copy up if no fileattr support on upper
    - lockd: fix server crash on reboot of client holding lock
    - lockd: fix failure to cleanup client locks
    - net/mlx5e: IPsec: Fix tunnel mode crypto offload for non TCP/UDP traffic
    - net/mlx5: Bridge, take rtnl lock in init error handler
    - net/mlx5: Bridge, ensure dev_name is null-terminated
    - net/mlx5e: Fix handling of wrong devices during bond netevent
    - net/mlx5: Use del_timer_sync in fw reset flow of halting poll
    - net/mlx5e: Fix module EEPROM query
    - net/mlx5: Fix offloading with ESWITCH_IPV4_TTL_MODIFY_ENABLE
    - net/mlx5e: Don't treat small ceil values as unlimited in HTB offload
    - net/mlx5: Bridge, Fix devlink deadlock on net namespace deletion
    - net/mlx5: E-Switch, Fix uninitialized variable modact
    - ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback
    - i40e: Fix reset bw limit when DCB enabled with 1 TC
    - i40e: Fix reset path while removing the driver
    - net: amd-xgbe: ensure to reset the tx_timer_active flag
    - net: amd-xgbe: Fix skb data length underflow
    - fanotify: Fix stale file descriptor in copy_event_to_user()
    - net: sched: fix use-after-free in tc_new_tfilter()
    - rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()
    - cpuset: Fix the bug that subpart_cpus updated wrongly in update_cpumask()
    - e1000e: Handshake with CSME starts from ADL platforms
    - af_packet: fix data-race in packet_setsockopt / packet_setsockopt
    - tcp: add missing tcp_skb_can_collapse() test in tcp_shift_skb_data()
    - ovl: fix NULL pointer dereference in copy up warning
    - Linux 5.15.20
  * Miscellaneous Ubuntu changes
    - [Packaging] use default zstd compression
    - [Packaging] do not use compression for image packages
    - [Packaging] use xz compression for ddebs
    - [Config] upgrade debug symbols from DWARF4 to DWARF5
    - SAUCE: Makefile: Remove inclusion of lbm header files
    - SAUCE: Makefile: Fix compiler warnings
    - SAUCE: AUFS
    - SAUCE: aufs: switch to 64-bit ino_t for s390x
    - [Config] set AUFS as disabled
    - SAUCE: mt76: mt7921e: fix possible probe failure after reboot
    - Remove ubuntu/hio driver
    - SAUCE: ima_policy: fix test for empty rule set
    - SAUCE: sfc: The size of the RX recycle ring should be more flexible
    - [Config] MITIGATE_SPECTRE_BRANCH_HISTORY=y && HARDEN_BRANCH_HISTORY=y
  * Miscellaneous upstream changes
    - kbuild: Unify options for BTF generation for vmlinux and modules
    - MAINTAINERS: Add scripts/pahole-flags.sh to BPF section
    - kbuild: Add CONFIG_PAHOLE_VERSION
    - scripts/pahole-flags.sh: Use pahole-version.sh
    - lib/Kconfig.debug: Use CONFIG_PAHOLE_VERSION
    - lib/Kconfig.debug: Allow BTF + DWARF5 with pahole 1.21+
    - x86/sched: Decrease further the priorities of SMT siblings
    - sched/topology: Introduce sched_group::flags
    - sched/fair: Optimize checking for group_asym_packing
    - sched/fair: Provide update_sg_lb_stats() with sched domain statistics
    - sched/fair: Carve out logic to mark a group for asymmetric packing
    - sched/fair: Consider SMT in ASYM_PACKING load balance
    - Revert "UBUNTU: [Config] x86-64: SYSFB_SIMPLEFB=y"

[ Ubuntu: 5.15.0-22.22 ]

* jammy/linux: 5.15.0-22.22 -proposed tracker (LP: #1960290)

-- Tim Gardner <tim.gardner@canonical.com>  Mon, 21 Mar 2022 11:57:03 -0600

Changed in linux-azure (Ubuntu Jammy):
status:	Fix Committed → Fix Released

Tim Gardner (timg-tpi) on 2022-04-04

Changed in linux-azure (Ubuntu Impish):
status:	In Progress → Fix Committed

Revision history for this message

Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote on 2022-04-06:

This bug is awaiting verification that the linux-azure/5.13.0-1022.26 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-impish' to 'verification-done-impish'. If the problem still exists, change the tag 'verification-needed-impish' to 'verification-failed-impish'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags:

added: verification-needed-impish

Revision history for this message

Tim Gardner (timg-tpi) wrote on 2022-04-11:

Microsoft tested

tags:

added: verification-done-impish
removed: verification-needed-impish

Revision history for this message

Launchpad Janitor (janitor) wrote on 2022-04-19:

Download full text (55.5 KiB)

This bug was fixed in the package linux-azure - 5.13.0-1022.26

---------------
linux-azure (5.13.0-1022.26) impish; urgency=medium

* impish/linux-azure: 5.13.0-1022.26 -proposed tracker (LP: #1967347)

* linux-azure: CONFIG_HIBERNATION=y (LP: #1967336)
- [Config] Azure: arm64 CONFIG_HIBERNATION=y

  * Azure: not enough RAM under 4GB for CVM (LP: #1967166)
    - SAUCE: azure: Swiotlb: Add swiotlb_alloc_from_low_pages switch
    - SAUCE: x86/hyperv: Make swiotlb bounce buffer allocation not just from low
      pages

  * linux-azure: Update HV support to 5.17 (LP: #1961329)
    - Drivers: hv: vmbus: Copy packets sent by Hyper-V out of the ring buffer
    - hv_utils: Set the maximum packet size for VSS driver to the length of the
      receive buffer
    - Drivers: hv: vmbus: Fix kernel crash upon unbinding a device from
      uio_hv_generic driver
    - x86/sev: Expose sev_es_ghcb_hv_call() for use by HyperV
    - x86/hyperv: Initialize GHCB page in Isolation VM
    - x86/hyperv: Initialize shared memory boundary in the Isolation VM.
    - x86/hyperv: Add new hvcall guest address host visibility support
    - Drivers: hv: vmbus: Mark vmbus ring buffer visible to host in Isolation VM
    - x86/hyperv: Add Write/Read MSR registers via ghcb page
    - x86/hyperv: Add ghcb hvcall support for SNP VM
    - Drivers: hv: vmbus: Add SNP support for VMbus channel initiate message
    - Drivers: hv: vmbus: Initialize VMbus ring buffer for Isolation VM
    - swiotlb: Refactor swiotlb init functions
    - swiotlb: Add swiotlb bounce buffer remap function for HV IVM
    - x86/hyper-v: Add hyperv Isolation VM check in the cc_platform_has()
    - hyper-v: Enable swiotlb bounce buffer for Isolation VM
    - scsi: storvsc: Use blk_mq_unique_tag() to generate requestIDs
    - scsi: storvsc: Add Isolation VM support for storvsc driver
    - net: netvsc: Add Isolation VM support for netvsc driver
    - swiotlb: Add CONFIG_HAS_IOMEM check around swiotlb_mem_remap()
    - Drivers: hv: vmbus: Initialize request offers message for Isolation VM
    - scsi: storvsc: Fix storvsc_queuecommand() memory leak
    - Drivers: hv: balloon: account for vmbus packet header in max_pkt_size
    - Netvsc: Call hv_unmap_memory() in the netvsc_device_remove()
    - scsi: storvsc: Fix validation for unsolicited incoming packets
    - x86/sev: Replace occurrences of sev_active() with cc_platform_has()
    - x86/kvm: Don't waste memory if kvmclock is disabled
    - x86/kvmclock: Fix Hyper-V Isolated VM's boot issue when vCPUs > 64

[ Ubuntu: 5.13.0-40.45 ]

This bug was fixed in the package linux-azure - 5.13.0-1022.26

---------------
linux-azure (5.13.0-1022.26) impish; urgency=medium

* impish/linux-azure: 5.13.0-1022.26 -proposed tracker (LP: #1967347)

* linux-azure: CONFIG_HIBERNATION=y (LP: #1967336)
    - [Config] Azure: arm64 CONFIG_HIBERNATION=y

[ Ubuntu: 5.13.0-40.45 ]

* impish/linux: 5.13.0-40.45 -proposed tracker (LP: #1966701)
  * CVE-2022-1016
    - netfilter: nf_tables: initialize registers in nft_do_chain()
  * CVE-2022-1015
    - netfilter: nf_tables: validate registers coming from userspace.
  * audit: improve audit queue handling when "audit=1" on cmdline
    (LP: #1965723) // Impish update: upstream stable patchset 2022-03-22
    (LP: #1966021)
    - audit: improve audit queue handling when "audit=1" on cmdline
  * PS/2 Keyboard wakeup from s2idle not functioning on AMD Yellow Carp platform
    (LP: #1961739)
    - PM: s2idle: ACPI: Fix wakeup interrupts handling
  * Low RX performance for 40G Solarflare NICs (LP: #1964512)
    - SAUCE: sfc: The size of the RX recycle ring should be more flexible
  * [UBUNTU 20.04] Fix SIGP processing on KVM/s390 (LP: #1962578)
    - KVM: s390: Simplify SIGP Set Arch handling
    - KVM: s390: Add a routine for setting userspace CPU state
  * Move virtual graphics drivers from linux-modules-extra to linux-modules
    (LP: #1960633)
    - [Packaging] Move VM DRM drivers into modules
  * Impish update: upstream stable patchset 2022-03-09 (LP: #1964422)
    - bnx2x: Utilize firmware 7.13.21.0
    - bnx2x: Invalidate fastpath HSI version for VFs
    - rcu: Tighten rcu_advance_cbs_nowake() checks
    - select: Fix indefinitely sleeping task in poll_schedule_timeout()
    - drm/amdgpu: Use correct VIEWPORT_DIMENSION for DCN2
    - arm64/bpf: Remove 128MB limit for BPF JIT programs
    - Bluetooth: refactor malicious adv data check
    - net: sfp: ignore disabled SFP node
    - net: stmmac: skip only stmmac_ptp_register when resume from suspend
    - s390/hypfs: include z/VM guests with access control group set
    - bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack()
    - scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP
      devices
    - udf: Restore i_lenAlloc when inode expansion fails
    - udf: Fix NULL ptr deref when converting from inline format
    - efi: runtime: avoid EFIv2 runtime services on Apple x86 machines
    - PM: wakeup: simplify the output logic of pm_show_wakelocks()
    - tracing/histogram: Fix a potential memory leak for kstrdup()
    - tracing: Don't inc err_log entry count if entry allocation fails
    - ceph: properly put ceph_string reference after async create attempt
    - ceph: set pool_ns in new inode layout for async creates
    - fsnotify: fix fsnotify hooks in pseudo filesystems
    - Revert "KVM: SVM: avoid infinite loop on NPF from bad address"
    - perf/x86/intel/uncore: Fix CAS_COUNT_WRITE issue for ICX
    - drm/etnaviv: relax submit size limits
    - KVM: x86: Update vCPU's runtime CPUID on write to MSR_IA32_XSS
    - netfilter: nft_payload: do not update layer 4 checksum when mangling
      fragments
    - serial: 8250: of: Fix mapped region size when using reg-offset property
    - serial: stm32: fix software flow control transfer
    - tty: n_gsm: fix SW flow control encoding/handling
    - tty: Add support for Brainboxes UC cards.
    - usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge
    - usb: xhci-plat: fix crash when suspend if remote wake enable
    - usb: common: ulpi: Fix crash in ulpi_match()
    - usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS
    - USB: core: Fix hang in usb_kill_urb by adding memory barriers
    - usb: typec: tcpm: Do not disconnect while receiving VBUS off
    - ucsi_ccg: Check DEV_INT bit only when starting CCG4
    - jbd2: export jbd2_journal_[grab|put]_journal_head
    - ocfs2: fix a deadlock when commit trans
    - sched/membarrier: Fix membarrier-rseq fence command missing from query
      bitmask
    - x86/MCE/AMD: Allow thresholding interface updates after init
    - powerpc/32s: Allocate one 256k IBAT instead of two consecutives 128k IBATs
    - powerpc/32s: Fix kasan_init_region() for KASAN
    - powerpc/32: Fix boot failure with GCC latent entropy plugin
    - i40e: Increase delay to 1 s after global EMP reset
    - i40e: Fix issue when maximum queues is exceeded
    - i40e: Fix queues reservation for XDP
    - i40e: Fix for failed to init adminq while VF reset
    - i40e: fix unsigned stat widths
    - usb: roles: fix include/linux/usb/role.h compile issue
    - rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev
    - rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev
    - scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put()
    - ipv6_tunnel: Rate limit warning messages
    - net: fix information leakage in /proc/net/ptype
    - hwmon: (lm90) Mark alert as broken for MAX6646/6647/6649
    - hwmon: (lm90) Mark alert as broken for MAX6680
    - ping: fix the sk_bound_dev_if match in ping_lookup
    - ipv4: avoid using shared IP generator for connected sockets
    - hwmon: (lm90) Reduce maximum conversion rate for G781
    - NFSv4: Handle case where the lookup of a directory fails
    - NFSv4: nfs_atomic_open() can race when looking up a non-regular file
    - net-procfs: show net devices bound packet types
    - drm/msm: Fix wrong size calculation
    - drm/msm/dsi: Fix missing put_device() call in dsi_get_phy
    - drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable
    - ipv6: annotate accesses to fn->fn_sernum
    - NFS: Ensure the server has an up to date ctime before hardlinking
    - NFS: Ensure the server has an up to date ctime before renaming
    - powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06
    - netfilter: conntrack: don't increment invalid counter on NF_REPEAT
    - perf: Fix perf_event_read_local() time
    - sched/pelt: Relax the sync of util_sum with util_avg
    - net: phy: broadcom: hook up soft_reset for BCM54616S
    - phylib: fix potential use-after-free
    - octeontx2-pf: Forward error codes to VF
    - rxrpc: Adjust retransmission backoff
    - efi/libstub: arm64: Fix image check alignment at entry
    - hwmon: (lm90) Mark alert as broken for MAX6654
    - powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if
      PMI is pending
    - net: ipv4: Move ip_options_fragment() out of loop
    - net: ipv4: Fix the warning for dereference
    - ipv4: fix ip option filtering for locally generated fragments
    - ibmvnic: init ->running_cap_crqs early
    - ibmvnic: don't spin in tasklet
    - video: hyperv_fb: Fix validation of screen resolution
    - drm/msm/hdmi: Fix missing put_device() call in msm_hdmi_get_phy
    - drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc
    - yam: fix a memory leak in yam_siocdevprivate()
    - net: cpsw: Properly initialise struct page_pool_params
    - net: hns3: handle empty unknown interrupt for VF
    - Revert "ipv6: Honor all IPv6 PIO Valid Lifetime values"
    - net: bridge: vlan: fix single net device option dumping
    - ipv4: raw: lock the socket in raw_bind()
    - ipv4: tcp: send zero IPID in SYNACK messages
    - ipv4: remove sparse error in ip_neigh_gw4()
    - net: bridge: vlan: fix memory leak in __allowed_ingress
    - dt-bindings: can: tcan4x5x: fix mram-cfg RX FIFO config
    - usr/include/Makefile: add linux/nfc.h to the compile-test coverage
    - fsnotify: invalidate dcache before IN_DELETE event
    - block: Fix wrong offset in bio_truncate()
    - mtd: rawnand: mpc5121: Remove unused variable in ads5121_select_chip()
    - net: stmmac: configure PTP clock source prior to PTP initialization
    - KVM: arm64: Use shadow SPSR_EL1 when injecting exceptions on !VHE
    - s390/nmi: handle guarded storage validity failures for KVM guests
    - powerpc32/bpf: Fix codegen for bpf-to-bpf calls
    - powerpc/bpf: Update ldimm64 instructions during extra pass
    - psi: Fix uaf issue when psi trigger is destroyed while being polled
    - perf/x86/intel: Add a quirk for the calculation of the number of counters on
      Alder Lake
    - drm/atomic: Add the crtc to affected crtc only if uapi.enable = true
    - KVM: SVM: Never reject emulation due to SMAP errata for !SEV guests
    - KVM: x86: Keep MSR_IA32_XSS unchanged for INIT
    - KVM: x86: Sync the states size with the XCR0/IA32_XSS at, any time
    - tty: Partially revert the removal of the Cyclades public API
    - usb: cdnsp: Fix segmentation fault in cdns_lost_power function
    - usb: dwc3: xilinx: Skip resets and USB3 register settings for USB2.0 mode
    - usb: dwc3: xilinx: Fix error handling when getting USB3 PHY
    - usb: typec: tcpci: don't touch CC line if it's Vconn source
    - usb: typec: tcpm: Do not disconnect when receiving VSAFE0V
    - mm, kasan: use compare-exchange operation to set KASAN page tag
    - PCI/sysfs: Find shadow ROM before static attribute initialization
    - x86/cpu: Add Xeon Icelake-D to list of CPUs that support PPIN
    - ARM: 9170/1: fix panic when kasan and kprobe are enabled
    - net: stmmac: dwmac-visconti: Fix bit definitions for ETHER_CLK_SEL
    - net: stmmac: dwmac-visconti: Fix clock configuration for RMII mode
    - octeontx2-af: cn10k: Do not enable RPM loopback for LPC interfaces
    - io_uring: fix bug in slow unregistering of nodes
    - ibmvnic: Allow extra failures before disabling
    - net/smc: Transitional solution for clcsock race issue
    - can: tcan4x5x: regmap: fix max register value
    - drm/msm/a6xx: Add missing suspend_count increment
    - sch_htb: Fail on unsupported parameters when offload is requested
    - Revert "drm/ast: Support 1600x900 with 108MHz PCLK"
    - irqchip/realtek-rtl: Map control data to virq
    - irqchip/realtek-rtl: Fix off-by-one in routing
    - perf/core: Fix cgroup event list management
    - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
    - psi: fix "defined but not used" warnings when CONFIG_PROC_FS=n
  * Impish update: upstream stable patchset 2022-02-24 (LP: #1962230)
    - KVM: VMX: switch blocked_vcpu_on_cpu_lock to raw spinlock
    - HID: uhid: Fix worker destroying device without any protection
    - HID: wacom: Avoid using stale array indicies to read contact count
    - f2fs: fix to do sanity check in is_alive()
    - nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed
      bind()
    - mtd: rawnand: gpmi: Add ERR007117 protection for nfc_apply_timings
    - mtd: rawnand: gpmi: Remove explicit default gpmi clock setting for i.MX6
    - mtd: Fixed breaking list in __mtd_del_partition.
    - mtd: rawnand: davinci: Don't calculate ECC when reading page
    - mtd: rawnand: davinci: Avoid duplicated page read
    - mtd: rawnand: davinci: Rewrite function description
    - x86/gpu: Reserve stolen memory for first integrated Intel GPU
    - tools/nolibc: x86-64: Fix startup code bug
    - tools/nolibc: i386: fix initial stack alignment
    - tools/nolibc: fix incorrect truncation of exit code
    - rtc: cmos: take rtc_lock while reading from CMOS
    - media: v4l2-ioctl.c: readbuffers depends on V4L2_CAP_READWRITE
    - media: flexcop-usb: fix control-message timeouts
    - media: mceusb: fix control-message timeouts
    - media: em28xx: fix control-message timeouts
    - media: cpia2: fix control-message timeouts
    - media: s2255: fix control-message timeouts
    - media: dib0700: fix undefined behavior in tuner shutdown
    - media: redrat3: fix control-message timeouts
    - media: pvrusb2: fix control-message timeouts
    - media: stk1160: fix control-message timeouts
    - media: cec-pin: fix interrupt en/disable handling
    - can: softing_cs: softingcs_probe(): fix memleak on registration failure
    - iio: adc: ti-adc081c: Partial revert of removal of ACPI IDs
    - lkdtm: Fix content of section containing lkdtm_rodata_do_nothing()
    - iommu/io-pgtable-arm-v7s: Add error handle for page table allocation failure
    - gpu: host1x: Add back arm_iommu_detach_device()
    - dma_fence_array: Fix PENDING_ERROR leak in dma_fence_array_signaled()
    - PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller
    - mm_zone: add function to check if managed dma zone exists
    - dma/pool: create dma atomic pool only if dma zone has managed pages
    - mm/page_alloc.c: do not warn allocation failure on zone DMA if no managed
      pages
    - shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode
    - drm/ttm: Put BO in its memory manager's lru list
    - Bluetooth: L2CAP: Fix not initializing sk_peer_pid
    - drm/bridge: display-connector: fix an uninitialized pointer in probe()
    - drm: fix null-ptr-deref in drm_dev_init_release()
    - drm/panel: kingdisplay-kd097d04: Delete panel on attach() failure
    - drm/panel: innolux-p079zca: Delete panel on attach() failure
    - drm/rockchip: dsi: Fix unbalanced clock on probe error
    - drm/rockchip: dsi: Hold pm-runtime across bind/unbind
    - drm/rockchip: dsi: Disable PLL clock on bind error
    - drm/rockchip: dsi: Reconfigure hardware on resume()
    - Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails
    - clk: bcm-2835: Pick the closest clock rate
    - clk: bcm-2835: Remove rounding up the dividers
    - drm/vc4: hdmi: Set a default HSM rate
    - wcn36xx: ensure pairing of init_scan/finish_scan and start_scan/end_scan
    - wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND
    - wcn36xx: Fix DMA channel enable/disable cycle
    - wcn36xx: Release DMA channel descriptor allocations
    - wcn36xx: Put DXE block into reset before freeing memory
    - wcn36xx: populate band before determining rate on RX
    - wcn36xx: fix RX BD rate mapping for 5GHz legacy rates
    - ath11k: Send PPDU_STATS_CFG with proper pdev mask to firmware
    - mtd: hyperbus: rpc-if: Check return value of rpcif_sw_init()
    - media: videobuf2: Fix the size printk format
    - media: atomisp: add missing media_device_cleanup() in
      atomisp_unregister_entities()
    - media: atomisp: fix punit_ddr_dvfs_enable() argument for mrfld_power up case
    - media: atomisp: fix inverted logic in buffers_needed()
    - media: atomisp: do not use err var when checking port validity for ISP2400
    - media: atomisp: fix inverted error check for
      ia_css_mipi_is_source_port_valid()
    - media: atomisp: fix ifdefs in sh_css.c
    - media: staging: media: atomisp: pci: Balance braces around conditional
      statements in file atomisp_cmd.c
    - media: atomisp: add NULL check for asd obtained from atomisp_video_pipe
    - media: atomisp: fix enum formats logic
    - media: atomisp: fix uninitialized bug in gmin_get_pmic_id_and_addr()
    - media: aspeed: fix mode-detect always time out at 2nd run
    - media: em28xx: fix memory leak in em28xx_init_dev
    - media: aspeed: Update signal status immediately to ensure sane hw state
    - arm64: dts: amlogic: meson-g12: Fix GPU operating point table node name
    - arm64: dts: amlogic: Fix SPI NOR flash node name for ODROID N2/N2+
    - arm64: dts: meson-gxbb-wetek: fix HDMI in early boot
    - arm64: dts: meson-gxbb-wetek: fix missing GPIO binding
    - fs: dlm: use sk->sk_socket instead of con->sock
    - fs: dlm: don't call kernel_getpeername() in error_report()
    - memory: renesas-rpc-if: Return error in case devm_ioremap_resource() fails
    - Bluetooth: stop proccessing malicious adv data
    - ath11k: Fix ETSI regd with weather radar overlap
    - ath11k: clear the keys properly via DISABLE_KEY
    - ath11k: reset RSN/WPA present state for open BSS
    - tee: fix put order in teedev_close_context()
    - fs: dlm: fix build with CONFIG_IPV6 disabled
    - drm/vboxvideo: fix a NULL vs IS_ERR() check
    - arm64: dts: renesas: cat875: Add rx/tx delays
    - media: dmxdev: fix UAF when dvb_register_device() fails
    - crypto: qce - fix uaf on qce_ahash_register_one
    - crypto: qce - fix uaf on qce_skcipher_register_one
    - mtd: hyperbus: rpc-if: fix bug in rpcif_hb_remove
    - ARM: dts: stm32: fix dtbs_check warning on ili9341 dts binding on stm32f429
      disco
    - crypto: qat - remove unnecessary collision prevention step in PFVF
    - crypto: qat - make pfvf send message direction agnostic
    - crypto: qat - fix undetected PFVF timeout in ACK loop
    - ath11k: Use host CE parameters for CE interrupts configuration
    - arm64: dts: ti: k3-j721e: correct cache-sets info
    - tty: serial: atmel: Check return code of dmaengine_submit()
    - tty: serial: atmel: Call dma_async_issue_pending()
    - mfd: atmel-flexcom: Remove #ifdef CONFIG_PM_SLEEP
    - mfd: atmel-flexcom: Use .resume_noirq
    - media: rcar-csi2: Correct the selection of hsfreqrange
    - media: imx-pxp: Initialize the spinlock prior to using it
    - media: si470x-i2c: fix possible memory leak in si470x_i2c_probe()
    - media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released
    - media: coda: fix CODA960 JPEG encoder buffer overflow
    - media: venus: core: Fix a potential NULL pointer dereference in an error
      handling path
    - media: venus: core: Fix a resource leak in the error handling path of
      'venus_probe()'
    - thermal/drivers/imx: Implement runtime PM support
    - netfilter: bridge: add support for pppoe filtering
    - arm64: dts: qcom: msm8916: fix MMC controller aliases
    - cgroup: Trace event cgroup id fields should be u64
    - ACPI: EC: Rework flushing of EC work while suspended to idle
    - thermal/drivers/imx8mm: Enable ADC when enabling monitor
    - drm/amdgpu: Fix a NULL pointer dereference in
      amdgpu_connector_lcd_native_mode()
    - drm/radeon/radeon_kms: Fix a NULL pointer dereference in
      radeon_driver_open_kms()
    - arm64: dts: ti: k3-j7200: Fix the L2 cache sets
    - arm64: dts: ti: k3-j721e: Fix the L2 cache sets
    - arm64: dts: ti: k3-j7200: Correct the d-cache-sets info
    - tty: serial: uartlite: allow 64 bit address
    - serial: amba-pl011: do not request memory region twice
    - floppy: Fix hang in watchdog when disk is ejected
    - staging: rtl8192e: return error code from rtllib_softmac_init()
    - staging: rtl8192e: rtllib_module: fix error handle case in alloc_rtllib()
    - Bluetooth: btmtksdio: fix resume failure
    - sched/fair: Fix detection of per-CPU kthreads waking a task
    - sched/fair: Fix per-CPU kthread and wakee stacking for asym CPU capacity
    - bpf: Adjust BTF log size limit.
    - bpf: Disallow BPF_LOG_KERNEL log level for bpf(BPF_BTF_LOAD)
    - bpf: Remove config check to enable bpf support for branch records
    - arm64: clear_page() shouldn't use DC ZVA when DCZID_EL0.DZP == 1
    - media: dib8000: Fix a memleak in dib8000_init()
    - media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach()
    - media: si2157: Fix "warm" tuner state detection
    - wireless: iwlwifi: Fix a double free in iwl_txq_dyn_alloc_dma
    - sched/rt: Try to restart rt period timer when rt runtime exceeded
    - drm/msm/dp: displayPort driver need algorithm rational
    - rcu/exp: Mark current CPU as exp-QS in IPI loop second pass
    - mwifiex: Fix possible ABBA deadlock
    - xfrm: fix a small bug in xfrm_sa_len()
    - x86/uaccess: Move variable into switch case statement
    - selftests: clone3: clone3: add case CLONE3_ARGS_NO_TEST
    - selftests: harness: avoid false negatives if test has no ASSERTs
    - crypto: stm32/cryp - fix CTR counter carry
    - crypto: stm32/cryp - fix xts and race condition in crypto_engine requests
    - crypto: stm32/cryp - check early input data
    - crypto: stm32/cryp - fix double pm exit
    - crypto: stm32/cryp - fix lrw chaining mode
    - crypto: stm32/cryp - fix bugs and crash in tests
    - crypto: stm32 - Revert broken pm_runtime_resume_and_get changes
    - ath11k: Fix deleting uninitialized kernel timer during fragment cache flush
    - ARM: dts: gemini: NAS4220-B: fis-index-block with 128 KiB sectors
    - media: dw2102: Fix use after free
    - media: msi001: fix possible null-ptr-deref in msi001_probe()
    - media: coda/imx-vdoa: Handle dma_set_coherent_mask error codes
    - ath11k: Fix a NULL pointer dereference in ath11k_mac_op_hw_scan()
    - arm64: dts: qcom: c630: Fix soundcard setup
    - arm64: dts: qcom: ipq6018: Fix gpio-ranges property
    - drm/msm/dpu: fix safe status debugfs file
    - drm/bridge: ti-sn65dsi86: Set max register for regmap
    - drm/tegra: vic: Fix DMA API misuse
    - media: hantro: Fix probe func error path
    - xfrm: interface with if_id 0 should return error
    - xfrm: state and policy should fail if XFRMA_IF_ID 0
    - ARM: 9159/1: decompressor: Avoid UNPREDICTABLE NOP encoding
    - usb: ftdi-elan: fix memory leak on device disconnect
    - arm64: dts: marvell: cn9130: add GPIO and SPI aliases
    - arm64: dts: marvell: cn9130: enable CP0 GPIO controllers
    - ARM: dts: armada-38x: Add generic compatible to UART nodes
    - iwlwifi: mvm: fix 32-bit build in FTM
    - iwlwifi: mvm: test roc running status bits before removing the sta
    - mmc: meson-mx-sdhc: add IRQ check
    - mmc: meson-mx-sdio: add IRQ check
    - selinux: fix potential memleak in selinux_add_opt()
    - um: fix ndelay/udelay defines
    - um: virtio_uml: Fix time-travel external time propagation
    - Bluetooth: L2CAP: Fix using wrong mode
    - bpftool: Enable line buffering for stdout
    - backlight: qcom-wled: Validate enabled string indices in DT
    - backlight: qcom-wled: Pass number of elements to read to read_u32_array
    - backlight: qcom-wled: Fix off-by-one maximum with default num_strings
    - backlight: qcom-wled: Override default length with qcom,enabled-strings
    - backlight: qcom-wled: Use cpu_to_le16 macro to perform conversion
    - backlight: qcom-wled: Respect enabled-strings in set_brightness
    - software node: fix wrong node passed to find nargs_prop
    - Bluetooth: hci_qca: Stop IBS timer during BT OFF
    - x86/boot/compressed: Move CLANG_FLAGS to beginning of KBUILD_CFLAGS
    - hwmon: (mr75203) fix wrong power-up delay value
    - x86/mce/inject: Avoid out-of-bounds write when setting flags
    - ACPI: scan: Create platform device for BCM4752 and LNV4752 ACPI nodes
    - pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in
      __nonstatic_find_io_region()
    - pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in
      nonstatic_find_mem_region()
    - power: reset: mt6397: Check for null res pointer
    - netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check()
    - bpf: Fix SO_RCVBUF/SO_SNDBUF handling in _bpf_setsockopt().
    - netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone
    - ppp: ensure minimum packet size in ppp_write()
    - rocker: fix a sleeping in atomic bug
    - staging: greybus: audio: Check null pointer
    - fsl/fman: Check for null pointer after calling devm_ioremap
    - Bluetooth: hci_bcm: Check for error irq
    - Bluetooth: hci_qca: Fix NULL vs IS_ERR_OR_NULL check in qca_serdev_probe
    - usb: dwc3: qcom: Fix NULL vs IS_ERR checking in dwc3_qcom_probe
    - HID: hid-uclogic-params: Invalid parameter check in uclogic_params_init
    - HID: hid-uclogic-params: Invalid parameter check in
      uclogic_params_get_str_desc
    - HID: hid-uclogic-params: Invalid parameter check in
      uclogic_params_huion_init
    - HID: hid-uclogic-params: Invalid parameter check in
      uclogic_params_frame_init_v1_buttonpad
    - debugfs: lockdown: Allow reading debugfs files that are not world readable
    - net/mlx5e: Fix page DMA map/unmap attributes
    - net/mlx5e: Don't block routes with nexthop objects in SW
    - Revert "net/mlx5e: Block offload of outer header csum for UDP tunnels"
    - net/mlx5: Set command entry semaphore up once got index free
    - lib/mpi: Add the return value check of kcalloc()
    - Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt()
    - spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe
    - ax25: uninitialized variable in ax25_setsockopt()
    - netrom: fix api breakage in nr_setsockopt()
    - regmap: Call regmap_debugfs_exit() prior to _init()
    - can: mcp251xfd: add missing newline to printed strings
    - tpm: add request_locality before write TPM_INT_ENABLE
    - tpm_tis: Fix an error handling path in 'tpm_tis_core_init()'
    - can: softing: softing_startstop(): fix set but not used variable warning
    - can: xilinx_can: xcan_probe(): check for error irq
    - pcmcia: fix setting of kthread task states
    - iwlwifi: mvm: Use div_s64 instead of do_div in iwl_mvm_ftm_rtt_smoothing()
    - net: mcs7830: handle usb read errors properly
    - ext4: avoid trim error on fs with small groups
    - ALSA: jack: Add missing rwsem around snd_ctl_remove() calls
    - ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls
    - ALSA: hda: Add missing rwsem around snd_ctl_remove() calls
    - RDMA/bnxt_re: Scan the whole bitmap when checking if "disabling RCFW with
      pending cmd-bit"
    - RDMA/hns: Validate the pkey index
    - scsi: pm80xx: Update WARN_ON check in pm8001_mpi_build_cmd()
    - clk: imx8mn: Fix imx8mn_clko1_sels
    - powerpc/prom_init: Fix improper check of prom_getprop()
    - ASoC: uniphier: drop selecting non-existing SND_SOC_UNIPHIER_AIO_DMA
    - dt-bindings: thermal: Fix definition of cooling-maps contribution property
    - powerpc/perf: Fix PMU callbacks to clear pending PMI before resetting an
      overflown PMC
    - powerpc/32s: Fix shift-out-of-bounds in KASAN init
    - clocksource: Reduce clocksource-skew threshold
    - clocksource: Avoid accidental unstable marking of clocksources
    - ALSA: oss: fix compile error when OSS_DEBUG is enabled
    - ALSA: usb-audio: Drop superfluous '0' in Presonus Studio 1810c's ID
    - char/mwave: Adjust io port register size
    - binder: fix handling of error during copy
    - openrisc: Add clone3 ABI wrapper
    - iommu/io-pgtable-arm: Fix table descriptor paddr formatting
    - scsi: ufs: Fix race conditions related to driver data
    - RDMA/qedr: Fix reporting max_{send/recv}_wr attrs
    - PCI/MSI: Fix pci_irq_vector()/pci_irq_get_affinity()
    - powerpc/powermac: Add additional missing lockdep_register_key()
    - RDMA/core: Let ib_find_gid() continue search even after empty entry
    - RDMA/cma: Let cma_resolve_ib_dev() continue search even after empty entry
    - ASoC: rt5663: Handle device_property_read_u32_array error codes
    - of: unittest: fix warning on PowerPC frame size warning
    - of: unittest: 64 bit dma address test requires arch support
    - clk: stm32: Fix ltdc's clock turn off by clk_disable_unused() after system
      enter shell
    - mips: add SYS_HAS_CPU_MIPS64_R5 config for MIPS Release 5 support
    - mips: fix Kconfig reference to PHYS_ADDR_T_64BIT
    - dmaengine: pxa/mmp: stop referencing config->slave_id
    - iommu/amd: Remove iommu_init_ga()
    - iommu/amd: Restore GA log/tail pointer on host resume
    - ASoC: Intel: catpt: Test dmaengine_submit() result before moving on
    - iommu/iova: Fix race between FQ timeout and teardown
    - scsi: block: pm: Always set request queue runtime active in
      blk_post_runtime_resume()
    - phy: uniphier-usb3ss: fix unintended writing zeros to PHY register
    - ASoC: samsung: idma: Check of ioremap return value
    - misc: lattice-ecp3-config: Fix task hung when firmware load failed
    - arm64: tegra: Remove non existent Tegra194 reset
    - mips: lantiq: add support for clk_set_parent()
    - mips: bcm63xx: add support for clk_set_parent()
    - powerpc/xive: Add missing null check after calling kmalloc
    - ASoC: fsl_mqs: fix MODULE_ALIAS
    - RDMA/cxgb4: Set queue pair state when being queried
    - ASoC: fsl_asrc: refine the check of available clock divider
    - clk: bm1880: remove kfrees on static allocations
    - of: base: Fix phandle argument length mismatch error message
    - ARM: dts: omap3-n900: Fix lp5523 for multi color
    - Bluetooth: Fix debugfs entry leak in hci_register_dev()
    - fs: dlm: filter user dlm messages for kernel locks
    - drm/lima: fix warning when CONFIG_DEBUG_SG=y & CONFIG_DMA_API_DEBUG=y
    - selftests/bpf: Fix bpf_object leak in skb_ctx selftest
    - ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply
    - drm/bridge: dw-hdmi: handle ELD when DRM_BRIDGE_ATTACH_NO_CONNECTOR
    - drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR
    - media: atomisp: fix try_fmt logic
    - media: atomisp: set per-device's default mode
    - media: atomisp-ov2680: Fix ov2680_set_fmt() clobbering the exposure
    - ARM: shmobile: rcar-gen2: Add missing of_node_put()
    - batman-adv: allow netlink usage in unprivileged containers
    - media: atomisp: handle errors at sh_css_create_isp_params()
    - ath11k: Fix crash caused by uninitialized TX ring
    - usb: gadget: f_fs: Use stream_open() for endpoint files
    - drm: panel-orientation-quirks: Add quirk for the Lenovo Yoga Book X91F/L
    - HID: apple: Do not reset quirks when the Fn key is not found
    - media: b2c2: Add missing check in flexcop_pci_isr:
    - EDAC/synopsys: Use the quirk for version instead of ddr version
    - ARM: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART
    - drm/amd/display: check top_pipe_to_program pointer
    - drm/amdgpu/display: set vblank_disable_immediate for DC
    - soc: ti: pruss: fix referenced node in error message
    - mlxsw: pci: Add shutdown method in PCI driver
    - drm/bridge: megachips: Ensure both bridges are probed before registration
    - tty: serial: imx: disable UCR4_OREN in .stop_rx() instead of .shutdown()
    - gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use
    - HSI: core: Fix return freed object in hsi_new_client
    - crypto: jitter - consider 32 LSB for APT
    - mwifiex: Fix skb_over_panic in mwifiex_usb_recv()
    - rsi: Fix use-after-free in rsi_rx_done_handler()
    - rsi: Fix out-of-bounds read in rsi_read_pkt()
    - ath11k: Avoid NULL ptr access during mgmt tx cleanup
    - media: venus: avoid calling core_clk_setrate() concurrently during
      concurrent video sessions
    - ACPI / x86: Drop PWM2 device on Lenovo Yoga Book from always present table
    - ACPI: Change acpi_device_always_present() into acpi_device_override_status()
    - ACPI / x86: Allow specifying acpi_device_override_status() quirks by path
    - ACPI / x86: Add not-present quirk for the PCI0.SDHB.BRC1 device on the GPD
      win
    - arm64: dts: ti: j7200-main: Fix 'dtbs_check' serdes_ln_ctrl node
    - usb: uhci: add aspeed ast2600 uhci support
    - floppy: Add max size check for user space request
    - x86/mm: Flush global TLB when switching to trampoline page-table
    - drm: rcar-du: Fix CRTC timings when CMM is used
    - media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds.
    - media: rcar-vin: Update format alignment constraints
    - media: saa7146: hexium_orion: Fix a NULL pointer dereference in
      hexium_attach()
    - media: m920x: don't use stack on USB reads
    - thunderbolt: Runtime PM activate both ends of the device link
    - iwlwifi: mvm: synchronize with FW after multicast commands
    - iwlwifi: mvm: avoid clearing a just saved session protection id
    - ath11k: avoid deadlock by change ieee80211_queue_work for regd_update_work
    - ath10k: Fix tx hanging
    - net-sysfs: update the queue counts in the unregistration path
    - net: phy: prefer 1000baseT over 1000baseKX
    - gpio: aspeed: Convert aspeed_gpio.lock to raw_spinlock
    - selftests/ftrace: make kprobe profile testcase description unique
    - ath11k: Avoid false DEADLOCK warning reported by lockdep
    - x86/mce: Allow instrumentation during task work queueing
    - x86/mce: Mark mce_panic() noinstr
    - x86/mce: Mark mce_end() noinstr
    - x86/mce: Mark mce_read_aux() noinstr
    - net: bonding: debug: avoid printing debug logs when bond is not notifying
      peers
    - bpf: Do not WARN in bpf_warn_invalid_xdp_action()
    - HID: quirks: Allow inverting the absolute X/Y values
    - media: igorplugusb: receiver overflow should be reported
    - media: saa7146: hexium_gemini: Fix a NULL pointer dereference in
      hexium_attach()
    - mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO
    - audit: ensure userspace is penalized the same as the kernel when under
      pressure
    - arm64: dts: ls1028a-qds: move rtc node to the correct i2c bus
    - arm64: tegra: Adjust length of CCPLEX cluster MMIO region
    - PM: runtime: Add safety net to supplier device release
    - cpufreq: Fix initialization of min and max frequency QoS requests
    - usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0
    - ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
    - rtw88: 8822c: update rx settings to prevent potential hw deadlock
    - PM: AVS: qcom-cpr: Use div64_ul instead of do_div
    - iwlwifi: fix leaks/bad data after failed firmware load
    - iwlwifi: remove module loading failure message
    - iwlwifi: mvm: Fix calculation of frame length
    - iwlwifi: pcie: make sure prph_info is set when treating wakeup IRQ
    - um: registers: Rename function names to avoid conflicts and build problems
    - ath11k: Fix napi related hang
    - Bluetooth: vhci: Set HCI_QUIRK_VALID_LE_STATES
    - xfrm: rate limit SA mapping change message to user space
    - drm/etnaviv: consider completed fence seqno in hang check
    - jffs2: GC deadlock reading a page that is used in jffs2_write_begin()
    - ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions
    - ACPICA: Utilities: Avoid deleting the same object twice in a row
    - ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R()
    - ACPICA: Fix wrong interpretation of PCC address
    - ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5
    - drm/amdgpu: fixup bad vram size on gmc v8
    - amdgpu/pm: Make sysfs pm attributes as read-only for VFs
    - ACPI: battery: Add the ThinkPad "Not Charging" quirk
    - btrfs: remove BUG_ON() in find_parent_nodes()
    - btrfs: remove BUG_ON(!eie) in find_parent_nodes
    - net: mdio: Demote probed message to debug print
    - mac80211: allow non-standard VHT MCS-10/11
    - dm btree: add a defensive bounds check to insert_at()
    - dm space map common: add bounds check to sm_ll_lookup_bitmap()
    - mlxsw: pci: Avoid flow control for EMAD packets
    - net: phy: marvell: configure RGMII delays for 88E1118
    - net: gemini: allow any RGMII interface mode
    - regulator: qcom_smd: Align probe function with rpmh-regulator
    - serial: pl010: Drop CR register reset on set_termios
    - serial: core: Keep mctrl register state and cached copy in sync
    - random: do not throw away excess input to crng_fast_load
    - parisc: Avoid calling faulthandler_disabled() twice
    - x86/kbuild: Enable CONFIG_KALLSYMS_ALL=y in the defconfigs
    - powerpc/6xx: add missing of_node_put
    - powerpc/powernv: add missing of_node_put
    - powerpc/cell: add missing of_node_put
    - powerpc/btext: add missing of_node_put
    - powerpc/watchdog: Fix missed watchdog reset due to memory ordering race
    - i2c: i801: Don't silently correct invalid transfer size
    - powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING
    - i2c: mpc: Correct I2C reset procedure
    - clk: meson: gxbb: Fix the SDM_EN bit for MPLL0 on GXBB
    - powerpc/powermac: Add missing lockdep_register_key()
    - KVM: PPC: Book3S: Suppress warnings when allocating too big memory slots
    - KVM: PPC: Book3S: Suppress failed alloc warning in H_COPY_TOFROM_GUEST
    - w1: Misuse of get_user()/put_user() reported by sparse
    - nvmem: core: set size for sysfs bin file
    - dm: fix alloc_dax error handling in alloc_dev
    - scsi: lpfc: Trigger SLI4 firmware dump before doing driver cleanup
    - ALSA: seq: Set upper limit of processed events
    - MIPS: Loongson64: Use three arguments for slti
    - powerpc/40x: Map 32Mbytes of memory at startup
    - selftests/powerpc/spectre_v2: Return skip code when miss_percent is high
    - powerpc: handle kdump appropriately with crash_kexec_post_notifiers option
    - powerpc/fadump: Fix inaccurate CPU state info in vmcore generated with panic
    - udf: Fix error handling in udf_new_inode()
    - MIPS: OCTEON: add put_device() after of_find_device_by_node()
    - irqchip/gic-v4: Disable redistributors' view of the VPE table at boot time
    - i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters
    - MIPS: Octeon: Fix build errors using clang
    - scsi: sr: Don't use GFP_DMA
    - ASoC: mediatek: mt8173: fix device_node leak
    - ASoC: mediatek: mt8183: fix device_node leak
    - phy: mediatek: Fix missing check in mtk_mipi_tx_probe
    - rpmsg: core: Clean up resources on announce_create failure.
    - crypto: omap-aes - Fix broken pm_runtime_and_get() usage
    - crypto: stm32/crc32 - Fix kernel BUG triggered in probe()
    - crypto: caam - replace this_cpu_ptr with raw_cpu_ptr
    - ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers
    - tpm: fix NPE on probe for missing device
    - spi: uniphier: Fix a bug that doesn't point to private data correctly
    - xen/gntdev: fix unmap notification order
    - fuse: Pass correct lend value to filemap_write_and_wait_range()
    - serial: Fix incorrect rs485 polarity on uart open
    - cputime, cpuacct: Include guest time in user time in cpuacct.stat
    - tracing/kprobes: 'nmissed' not showed correctly for kretprobe
    - iwlwifi: mvm: Increase the scan timeout guard to 30 seconds
    - s390/mm: fix 2KB pgtable release race
    - device property: Fix fwnode_graph_devcon_match() fwnode leak
    - drm/etnaviv: limit submit sizes
    - drm/nouveau/kms/nv04: use vzalloc for nv04_display
    - drm/bridge: analogix_dp: Make PSR-exit block less
    - parisc: Fix lpa and lpa_user defines
    - powerpc/64s/radix: Fix huge vmap false positive
    - PCI: xgene: Fix IB window setup
    - PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors
    - PCI: pci-bridge-emul: Make expansion ROM Base Address register read-only
    - PCI: pci-bridge-emul: Properly mark reserved PCIe bits in PCI config space
    - PCI: pci-bridge-emul: Fix definitions of reserved bits
    - PCI: pci-bridge-emul: Correctly set PCIe capabilities
    - PCI: pci-bridge-emul: Set PCI_STATUS_CAP_LIST for PCIe device
    - xfrm: fix policy lookup for ipv6 gre packets
    - btrfs: fix deadlock between quota enable and other quota operations
    - btrfs: check the root node for uptodate before returning it
    - btrfs: respect the max size in the header when activating swap file
    - ext4: make sure to reset inode lockdep class when quota enabling fails
    - ext4: make sure quota gets properly shutdown on error
    - ext4: fix a possible ABBA deadlock due to busy PA
    - ext4: initialize err_blk before calling __ext4_get_inode_loc
    - ext4: fix fast commit may miss tracking range for FALLOC_FL_ZERO_RANGE
    - ext4: set csum seed in tmp inode while migrating to extents
    - ext4: Fix BUG_ON in ext4_bread when write quota data
    - ext4: use ext4_ext_remove_space() for fast commit replay delete range
    - ext4: fast commit may miss tracking unwritten range during ftruncate
    - ext4: destroy ext4_fc_dentry_cachep kmemcache on module removal
    - ext4: fix null-ptr-deref in '__ext4_journal_ensure_credits'
    - ext4: don't use the orphan list when migrating an inode
    - drm/radeon: fix error handling in radeon_driver_open_kms
    - of: base: Improve argument length mismatch error
    - firmware: Update Kconfig help text for Google firmware
    - can: mcp251xfd: mcp251xfd_tef_obj_read(): fix typo in error message
    - media: rcar-csi2: Optimize the selection PHTW register
    - media: correct MEDIA_TEST_SUPPORT help text
    - Documentation: dmaengine: Correctly describe dmatest with channel unset
    - Documentation: ACPI: Fix data node reference documentation
    - Documentation: refer to config RANDOMIZE_BASE for kernel address-space
      randomization
    - Documentation: fix firewire.rst ABI file path error
    - Bluetooth: hci_sync: Fix not setting adv set duration
    - scsi: core: Show SCMD_LAST in text form
    - dmaengine: uniphier-xdmac: Fix type of address variables
    - RDMA/hns: Modify the mapping attribute of doorbell to device
    - RDMA/rxe: Fix a typo in opcode name
    - dmaengine: stm32-mdma: fix STM32_MDMA_CTBR_TSEL_MASK
    - Revert "net/mlx5: Add retry mechanism to the command entry index allocation"
    - powerpc/cell: Fix clang -Wimplicit-fallthrough warning
    - powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses
    - block: Fix fsync always failed if once failed
    - bpftool: Remove inclusion of utilities.mak from Makefiles
    - xdp: check prog type before updating BPF link
    - perf evsel: Override attr->sample_period for non-libpfm4 events
    - ipv4: update fib_info_cnt under spinlock protection
    - ipv4: avoid quadratic behavior in netns dismantle
    - net/fsl: xgmac_mdio: Add workaround for erratum A-009885
    - net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module
    - parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries
    - f2fs: compress: fix potential deadlock of compress file
    - f2fs: fix to reserve space for IO align feature
    - af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress
    - clk: Emit a stern warning with writable debugfs enabled
    - clk: si5341: Fix clock HW provider cleanup
    - net/smc: Fix hung_task when removing SMC-R devices
    - net: axienet: increase reset timeout
    - net: axienet: Wait for PhyRstCmplt after core reset
    - net: axienet: reset core on initialization prior to MDIO access
    - net: axienet: add missing memory barriers
    - net: axienet: limit minimum TX ring size
    - net: axienet: Fix TX ring slot available check
    - net: axienet: fix number of TX ring slots for available check
    - net: axienet: fix for TX busy handling
    - net: axienet: increase default TX ring size to 128
    - HID: vivaldi: fix handling devices not using numbered reports
    - rtc: pxa: fix null pointer dereference
    - vdpa/mlx5: Fix wrong configuration of virtio_version_1_0
    - virtio_ring: mark ring unused on error
    - taskstats: Cleanup the use of task->exit_code
    - inet: frags: annotate races around fqdir->dead and fqdir->high_thresh
    - netns: add schedule point in ops_exit_list()
    - xfrm: Don't accidentally set RTO_ONLINK in decode_session4()
    - gre: Don't accidentally set RTO_ONLINK in gre_fill_metadata_dst()
    - libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route()
    - perf script: Fix hex dump character output
    - dmaengine: at_xdmac: Don't start transactions at tx_submit level
    - dmaengine: at_xdmac: Start transfer for cyclic channels in issue_pending
    - dmaengine: at_xdmac: Print debug message after realeasing the lock
    - dmaengine: at_xdmac: Fix concurrency over xfers_list
    - dmaengine: at_xdmac: Fix lld view setting
    - dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
    - perf probe: Fix ppc64 'perf probe add events failed' case
    - devlink: Remove misleading internal_flags from health reporter dump
    - arm64: dts: qcom: msm8996: drop not documented adreno properties
    - net: bonding: fix bond_xmit_broadcast return value error bug
    - net_sched: restore "mpu xxx" handling
    - bcmgenet: add WOL IRQ check
    - net: ethernet: mtk_eth_soc: fix error checking in mtk_mac_config()
    - net: sfp: fix high power modules without diagnostic monitoring
    - net: mscc: ocelot: fix using match before it is set
    - dt-bindings: display: meson-dw-hdmi: add missing sound-name-prefix property
    - dt-bindings: display: meson-vpu: Add missing amlogic,canvas property
    - dt-bindings: watchdog: Require samsung,syscon-phandle for Exynos7
    - scripts/dtc: dtx_diff: remove broken example from help text
    - lib82596: Fix IRQ check in sni_82596_probe
    - mm/hmm.c: allow VM_MIXEDMAP to work with hmm_range_fault
    - lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test
    - mtd: nand: bbt: Fix corner case in bad block table handling
    - ath10k: Fix the MTU size on QCA9377 SDIO
    - scripts: sphinx-pre-install: add required ctex dependency
    - scripts: sphinx-pre-install: Fix ctex support on Debian
    - KVM: x86/mmu: Fix write-protection of PTs mapped by the TDP MMU
    - HID: Ignore battery for Elan touchscreen on HP Envy X360 15t-dr100
    - f2fs: fix to do sanity check on inode type during garbage collection
    - mtd: rawnand: Export nand_read_page_hwecc_oob_first()
    - mtd: rawnand: ingenic: JZ4740 needs 'oob_first' read page function
    - riscv: Get rid of MAXPHYSMEM configs
    - RISC-V: Use common riscv_cpuid_to_hartid_mask() for both SMP=y and SMP=n
    - riscv: try to allocate crashkern region from 32bit addressible memory
    - riscv: Don't use va_pa_offset on kdump
    - riscv: use hart id instead of cpu id on machine_kexec
    - crypto: x86/aesni - don't require alignment of data
    - net: phy: marvell: add Marvell specific PHY loopback
    - media: cec: fix a deadlock situation
    - media: ov8865: Disable only enabled regulators on error path
    - mei: hbm: fix client dma reply status
    - iio: trigger: Fix a scheduling whilst atomic issue seen on tsc2046
    - bus: mhi: pci_generic: Graceful shutdown on freeze
    - bus: mhi: core: Fix reading wake_capable channel configuration
    - arm64: errata: Fix exec handling in erratum 1418040 workaround
    - drm/tegra: Add back arm_iommu_detach_device()
    - virtio/virtio_mem: handle a possible NULL as a memcpy parameter
    - Bluetooth: virtio_bt: fix memory leak in virtbt_rx_handle()
    - drm/vc4: crtc: Make sure the HDMI controller is powered when disabling
    - libbpf: Free up resources used by inner map definition
    - bpftool: Fix memory leak in prog_dump()
    - arm64: dts: qcom: sc7280: Fix incorrect clock name
    - libbpf: Fix glob_syms memory leak in bpf_linker
    - libbpf: Fix using invalidated memory in bpf_linker
    - bfq: Do not let waker requests skip proper accounting
    - media: i2c: imx274: fix s_frame_interval runtime resume not requested
    - media: i2c: Re-order runtime pm initialisation
    - media: i2c: ov8865: Fix lockdep error
    - net: stmmac: Add platform level debug register dump feature
    - drm/vmwgfx: Remove the deprecated lower mem limit
    - crypto: caam - save caam memory to support crypto engine retry mechanism.
    - arm64: dts: ti: k3-am642: Fix the L2 cache sets
    - bpf: Fix the test_task_vma selftest to support output shorter than 1 kB
    - Bluetooth: refactor set_exp_feature with a feature table
    - Bluetooth: MGMT: Use hci_dev_test_and_{set,clear}_flag
    - drm/amd/display: Fix bug in debugfs crc_win_update entry
    - wcn36xx: Fix max channels retrieval
    - perf/arm-cmn: Fix CPU hotplug unregistration
    - net: dsa: hellcreek: Fix insertion of static FDB entries
    - net: dsa: hellcreek: Add STP forwarding rule
    - net: dsa: hellcreek: Allow PTP P2P measurements on blocked ports
    - net: dsa: hellcreek: Add missing PTP via UDP rules
    - mt76: mt7921: drop offload_flags overwritten
    - iwlwifi: mvm: perform 6GHz passive scan after suspend
    - iwlwifi: mvm: set protected flag only for NDP ranging
    - crypto: octeontx2 - prevent underflow in get_cores_bmap()
    - regulator: qcom-labibb: OCP interrupts are not a failure while disabled
    - io_uring: remove double poll on poll update
    - serial: 8250_bcm7271: Propagate error codes from brcmuart_probe()
    - net: ethernet: mtk_eth_soc: fix return values and refactor MDIO ops
    - net: dsa: fix incorrect function pointer check for MRP ring roles
    - net/smc: Reset conn->lgr when link group registration fails
    - usb: dwc2: do not gate off the hardware if it does not support clock gating
    - serial: liteuart: fix MODULE_ALIAS
    - serial: stm32: move tx dma terminate DMA to shutdown
    - x86, sched: Fix undefined reference to init_freq_invariance_cppc() build
      error
    - net/mlx5e: Fix wrong usage of fib_info_nh when routes with nexthop objects
      are used
    - Revert "net/mlx5e: Block offload of outer header csum for GRE tunnel"
    - net/mlx5e: Fix matching on modified inner ip_ecn bits
    - net/mlx5: Fix access to sf_dev_table on allocation failure
    - net/mlx5e: Sync VXLAN udp ports during uplink representor profile change
    - net: mscc: ocelot: fix incorrect balancing with down LAG ports
    - net/sched: flow_dissector: Fix matching on zone id for invalid conns
    - net: openvswitch: Fix matching zone id for invalid conns arriving from tc
    - net: openvswitch: Fix ct_state nat flags for conns arriving from tc
    - bnxt_en: Refactor coredump functions
    - RDMA/rtrs-clt: Fix the initial value of min_latency
    - ALSA: hda: Make proper use of timecounter
    - binder: avoid potential data leakage when copying txn
    - scsi: core: Fix scsi_device_max_queue_depth()
    - iommu/amd: X2apic mode: re-enable after resume
    - iommu/amd: X2apic mode: setup the INTX registers on mask/unmask
    - iommu/amd: X2apic mode: mask/unmask interrupts on suspend/resume
    - iommu/amd: Remove useless irq affinity notifier
    - phy: cadence: Sierra: Fix to get correct parent for mux clocks
    - ALSA: hda/cs8409: Increase delay during jack detection
    - ALSA: hda/cs8409: Fix Jack detection after resume
    - clk: qcom: gcc-sc7280: Mark gcc_cfg_noc_lpass_clk always enabled
    - of/fdt: Don't worry about non-memory region overlap for no-map
    - drm/panel: Delete panel on mipi_dsi_attach() failure
    - selftests/bpf: Fix memory leaks in btf_type_c_dump() helper
    - media: atomisp: check before deference asd variable
    - usb: dwc3: meson-g12a: fix shared reset control use
    - psi: Fix PSI_MEM_FULL state when tasks are in memstall and doing reclaim
    - HID: magicmouse: Report battery level over USB
    - libbpf: Accommodate DWARF/compiler bug with duplicated structs
    - ethernet: renesas: Use div64_ul instead of do_div
    - arm64: dts: qcom: sm8350: Shorten camera-thermal-bottom name
    - drm/amd/display: add else to avoid double destroy clk_mgr
    - regulator: da9121: Prevent current limit change when enabled
    - drm/vmwgfx: Release ttm memory if probe fails
    - arm64: dts: ti: j721e-main: Fix 'dtbs_check' in serdes_ln_ctrl node
    - media: atomisp: fix "variable dereferenced before check 'asd'"
    - arm64: dts: renesas: Fix thermal bindings
    - ARM: dts: qcom: sdx55: fix IPA interconnect definitions
    - media: rockchip: rkisp1: use device name for debugfs subdir name
    - mmc: tmio: reinit card irqs in reset routine
    - drm/amd/amdgpu: fix psp tmr bo pin count leak in SRIOV
    - drm/amd/amdgpu: fix gmc bo pin count leak in SRIOV
    - crypto: ccp - Move SEV_INIT retry for corrupted data
    - mt76: mt7615: fix possible deadlock while mt7615_register_ext_phy()
    - mt76: mt7615: improve wmm index allocation
    - ath9k_htc: fix NULL pointer dereference at ath9k_htc_rxep()
    - ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet()
    - iwlwifi: mvm: fix AUX ROC removal
    - mmc: sdhci-pci-gli: GL9755: Support for CD/WP inversion on OF platforms
    - mmc: mtk-sd: Use readl_poll_timeout instead of open-coded polling
    - ACPI: CPPC: Check present CPUs for determining _CPC is valid
    - bpf/selftests: Fix namespace mount setup in tc_redirect
    - serial: pl011: Drop CR register reset on set_termios
    - net/mlx5: Update log_max_qp value to FW max capability
    - ASoC: imx-hdmi: add put_device() after of_find_device_by_node()
    - interconnect: qcom: rpm: Prevent integer overflow in rate
    - scsi: ufs: Fix a kernel crash during shutdown
    - scsi: lpfc: Fix leaked lpfc_dmabuf mbox allocations with NPIV
    - selftests/powerpc: Add a test of sigreturning to the kernel
    - scsi: mpi3mr: Fixes around reply request queues
    - ASoC: mediatek: mt8192-mt6359: fix device_node leak
    - seg6: export get_srh() for ICMP handling
    - icmp: ICMPV6: Examine invoking packet for Segment Route Headers.
    - udp6: Use Segment Routing Header for dest address if present
    - ifcvf/vDPA: fix misuse virtio-net device config size for blk dev
    - tpm: fix potential NULL pointer access in tpm_del_char_device
    - mfd: tps65910: Set PWR_OFF bit during driver probe
    - sched/cpuacct: Fix user/system in shown cpuacct.usage*
    - tracing: Have syscall trace events use trace_event_buffer_lock_reserve()
    - remoteproc: imx_rproc: Fix a resource leak in the remove function
    - drm/amd/display: Fix the uninitialized variable in enable_stream_features()
    - scsi: lpfc: Fix lpfc_force_rscn ndlp kref imbalance
    - drm/amdgpu: don't do resets on APUs which don't support it
    - ath11k: qmi: avoid error messages when dma allocation fails
    - scsi: ufs: ufs-mediatek: Fix error checking in ufs_mtk_init_va09_pwr_ctrl()
    - RDMA/cma: Remove open coding of overflow checking for private_data_len
    - dmaengine: idxd: fix wq settings post wq disable
    - drm/vc4: crtc: Drop feed_txp from state
    - drm/vc4: Fix non-blocking commit getting stuck forever
    - drm/vc4: crtc: Copy assigned channel to the CRTC
    - bpf: Mark PTR_TO_FUNC register initially with zero offset
    - mlx5: Don't accidentally set RTO_ONLINK before mlx5e_route_lookup_ipv4_get()
    - riscv: dts: microchip: mpfs: Drop empty chosen node
    - drm/vmwgfx: Remove unused compile options
    - f2fs: fix remove page failed in invalidate compress pages
    - f2fs: fix to avoid panic in is_alive() if metadata is inconsistent
    - crypto: octeontx2 - uninitialized variable in kvf_limits_store()
    - gpio: mpc8xxx: Fix IRQ check in mpc8xxx_probe
    - bitops: protect find_first_{,zero}_bit properly
    - net: ipa: fix atomic update in ipa_endpoint_replenish()
    - net: cpsw: avoid alignment faults by taking NET_IP_ALIGN into account
    - net: phy: micrel: use kszphy_suspend()/kszphy_resume for irq aware devices
    - sch_api: Don't skip qdisc attach on ingress
  * Packaging resync (LP: #1786013)
    - [Packaging] resync dkms-build{,--nvidia-N} from LRMv5

-- Tim Gardner <tim.gardner@canonical.com>  Tue, 05 Apr 2022 10:09:28 -0600

Changed in linux-azure (Ubuntu Impish):
status:	Fix Committed → Fix Released

Tim Gardner (timg-tpi) on 2022-06-10

Changed in linux-azure (Ubuntu Focal):
status:	New → Won't Fix

Report a bug

This report contains Public information

Everyone can see this information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.

Ubuntulinux-azure package

linux-azure: Update HV support to 5.17

Bug Description

CVE References

Other bug subscribers

Remote bug watches

Ubuntu
linux-azure package