Ubuntu
linux-oem-6.1 package

Fix for S0i3 resume on GFX11

Bug #2003369 reported by Timo Aaltonen on 2023-01-19

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	linux-oem-6.1 (Ubuntu)	Invalid	Undecided	Unassigned
	Jammy	Fix Released	Undecided	Unassigned

Bug Description

Impact

Need a patch from 6.1.4 to fix resume from S0i3 on AMD GFX11 architecture.

33a3b7fad827 ("drm/amdgpu: skip MES for S0ix as well since it's part of GFX")

Test case

Test S0i3 that it works with the patch applied.

Where things could go wrong

Tags:

CVE References

2023-0179

Timo Aaltonen (tjaalton) on 2023-01-19

Changed in linux-oem-6.1 (Ubuntu):
status:	New → Invalid
Changed in linux-oem-6.1 (Ubuntu Jammy):
status:	New → Fix Committed

Revision history for this message

Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote on 2023-01-27:

This bug is awaiting verification that the linux-oem-6.1/6.1.0-1006.6 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-jammy' to 'verification-done-jammy'. If the problem still exists, change the tag 'verification-needed-jammy' to 'verification-failed-jammy'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags:

added: kernel-spammed-jammy-linux-oem-6.1 verification-needed-jammy

Revision history for this message

Launchpad Janitor (janitor) wrote on 2023-02-06:

Download full text (77.0 KiB)

This bug was fixed in the package linux-oem-6.1 - 6.1.0-1006.6

---------------
linux-oem-6.1 (6.1.0-1006.6) jammy; urgency=medium

* jammy/linux-oem-6.1: 6.1.0-1006.6 -proposed tracker (LP: #2003454)

* Fix for S0i3 resume on GFX11 (LP: #2003369)
- drm/amdgpu: skip MES for S0ix as well since it's part of GFX

* Revoke & rotate to new signing key (LP: #2002812)
- [Packaging] Revoke and rotate to new signing key

  * Mediatek FM350-GL wwan module failed to init: Invalid device status 0x1
    (LP: #2002089)
    - SAUCE: Revert "net: wwan: t7xx: Add AP CLDMA"
    - SAUCE: net: wwan: t7xx: Add AP CLDMA
    - SAUCE: net: wwan: t7xx: Infrastructure for early port configuration
    - SAUCE: net: wwan: t7xx: PCIe reset rescan
    - SAUCE: net: wwan: t7xx: Enable devlink based fw flashing and coredump
      collection
    - SAUCE: net: wwan: t7xx: Devlink documentation

* Fix flicker display problem on some panels which support PSR2 (LP: #2002968)
- drm/i915/psr: Add continuous full frame bit together with single

  * Fix speaker mute hotkey doesn't work on Dell G16 series (LP: #2003161)
    - SAUCE: platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010
      table

* CVE-2023-0179
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits

  * Wireless: Enable RTL8852BE wifi driver (LP: #2002601)
    - wifi: rtw89: 8852b: add BB and RF tables (1 of 2)
    - wifi: rtw89: 8852b: add BB and RF tables (2 of 2)
    - wifi: rtw89: 8852b: add tables for RFK
    - wifi: rtw89: phy: make generic txpwr setting functions
    - wifi: rtw89: debug: txpwr_table considers sign
    - wifi: rtw89: 8852b: add chip_ops::set_txpwr
    - wifi: rtw89: 8852b: add chip_ops to read efuse
    - wifi: rtw89: 8852b: add chip_ops to read phy cap
    - wifi: rtw89: 8852be: add 8852BE PCI entry
    - wifi: rtw89: phy: ignore warning of bb gain cfg_type 4
    - wifi: rtw89: coex: move chip_ops::btc_bt_aci_imp to a generic code
    - wifi: rtw89: parse PHY status only when PPDU is to_self
    - wifi: rtw89: 8852b: set proper configuration before loading NCTL
    - wifi: rtw89: 8852b: add HFC quota arrays
    - wifi: rtw89: make generic functions to convert subband gain index
    - wifi: rtw89: 8852b: add chip_ops::set_channel
    - wifi: rtw89: correct 6 GHz scan behavior
    - wifi: mac80211: add internal handler for wake_tx_queue
    - wifi: rtw89: 8852b: add chip_ops::set_channel_help
    - wifi: rtw89: 8852b: add power on/off functions
    - wifi: rtw89: 8852b: add basic baseband chip_ops
    - wifi: rtw89: 8852b: add chip_ops to get thermal
    - wifi: rtw89: 8852b: add chip_ops related to BT coexistence
    - wifi: rtw89: 8852b: add chip_ops to query PPDU
    - wifi: rtw89: 8852b: add chip_ops to configure TX/RX path
    - wifi: rtw89: 8852b: add functions to control BB to assist RF calibrations
    - wifi: rtw89: 8852b: add basic attributes of chip_info
    - wifi: rtw89: 8852b: rfk: add DACK
    - wifi: rtw89: 8852b: rfk: add RCK
    - wifi: rtw89: 8852b: rfk: add RX DCK
    - wifi: rtw89: 8852b: rfk: add IQK
    - wifi: rtw89: 8852b: rfk: add TSSI
    - wifi: rtw89: 8852b: rfk: add DPK
    - wifi: rtw89: 8852b: add ch...

This bug was fixed in the package linux-oem-6.1 - 6.1.0-1006.6

---------------
linux-oem-6.1 (6.1.0-1006.6) jammy; urgency=medium

* jammy/linux-oem-6.1: 6.1.0-1006.6 -proposed tracker (LP: #2003454)

* Fix for S0i3 resume on GFX11 (LP: #2003369)
    - drm/amdgpu: skip MES for S0ix as well since it's part of GFX

* Revoke & rotate to new signing key (LP: #2002812)
    - [Packaging] Revoke and rotate to new signing key

* Fix flicker display problem on some panels which support PSR2 (LP: #2002968)
    - drm/i915/psr: Add continuous full frame bit together with single

* Fix speaker mute hotkey doesn't work on Dell G16 series (LP: #2003161)
    - SAUCE: platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010
      table

* CVE-2023-0179
    - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits

* Lost display on built-in monitor after suspend (LP: #2001599)
    - drm/i915: Introduce intel_panel_init_alloc()
    - drm/i915: Do panel VBT init early if the VBT declares an explicit panel type
    - drm/i915: Generalize the PPS vlv_pipe_check() stuff
    - drm/i915: Try to use the correct power sequencer intiially on bxt/glk
    - drm/i915: Extend dual PPS handlind for ICP+
    - drm/i915: Reject unusable power sequencers
    - drm/i915: Print the PPS registers using consistent format
    - drm/i915: Fix whitespace
    - drm/i915: Improve PPS debugs

* Enable kernel config for P2PDMA (LP: #1987394)
    - [Config] Enable CONFIG_HSA_AMD_P2P

* Can only reach PC3 when ethernet is plugged r8169 (LP: #1946433)
    - SAUCE: r8169: Enable chip-specific ASPM regardless of PCIe ASPM status
    - SAUCE: r8169: Use mutex to guard config register locking
    - SAUCE: r8169: Implement dynamic ASPM mechanism

* RaptorLake: Fix the Screen is shaking by onboard HDMI port in mirror mode
    (LP: #1993561)
    - SAUCE: drm/i915/display: Drop check for doublescan mode in modevalid
    - SAUCE: drm/i915/display: Prune Interlace modes for Display >=12

* Miscellaneous Ubuntu changes
    - [Config] update annotations after applying v6.1.2 stable updates

[ Ubuntu: 6.1.0-12.12 ]

* lunar/linux: 6.1.0-12.12 -proposed tracker (LP: #2002096)
  * Lunar update: v6.1.2 upstream stable release (LP: #2002079)
    - MIPS: DTS: CI20: fix reset line polarity of the ethernet controller
    - usb: musb: remove extra check in musb_gadget_vbus_draw
    - arm64: dts: renesas: r8a779g0: Fix HSCIF0 "brg_int" clock
    - arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins
    - arm64: dts: qcom: sm8250-sony-xperia-edo: fix touchscreen bias-disable
    - arm64: dts: qcom: sdm845-xiaomi-polaris: fix codec pin conf name
    - arm64: dts: qcom: msm8996: Add MSM8996 Pro support
    - arm64: dts: qcom: msm8996: fix supported-hw in cpufreq OPP tables
    - arm64: dts: qcom: msm8996: fix GPU OPP table
    - ARM: dts: qcom: apq8064: fix coresight compatible
    - arm64: dts: qcom: sdm630: fix UART1 pin bias
    - arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias
    - arm64: dts: qcom: msm8916: Drop MSS fallback compatible
    - arm64: dts: fsd: fix drive strength macros as per FSD HW UM
    - arm64: dts: fsd: fix drive strength values as per FSD HW UM
    - memory: renesas-rpc-if: Clear HS bit during hardware initialization
    - objtool, kcsan: Add volatile read/write instrumentation to whitelist
    - ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96
    - ARM: dts: stm32: Fix AV96 WLAN regulator gpio property
    - drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static
    - firmware: ti_sci: Fix polled mode during system suspend
    - riscv: dts: microchip: fix memory node unit address for icicle
    - arm64: dts: qcom: pm660: Use unique ADC5_VCOIN address in node name
    - arm64: dts: qcom: sm8250: correct LPASS pin pull down
    - arm64: dts: qcom: sc7180-trogdor-homestar: fully configure secondary I2S
      pins
    - soc: qcom: llcc: make irq truly optional
    - arm64: dts: qcom: sm8150: fix UFS PHY registers
    - arm64: dts: qcom: sm8250: fix UFS PHY registers
    - arm64: dts: qcom: sm8350: fix UFS PHY registers
    - arm64: dts: qcom: sm8450: fix UFS PHY registers
    - arm64: dts: qcom: msm8996: fix sound card reset line polarity
    - arm64: dts: qcom: sm8250-mtp: fix reset line polarity
    - arm64: dts: qcom: sc7280: fix codec reset line polarity for CRD 3.0/3.1
    - arm64: dts: qcom: sc7280: fix codec reset line polarity for CRD 1.0/2.0
    - arm64: dts: qcom: sm8250: drop bogus DP PHY clock
    - arm64: dts: qcom: sm6350: drop bogus DP PHY clock
    - soc: qcom: apr: Add check for idr_alloc and of_property_read_string_index
    - arm64: dts: qcom: pm6350: Include header for KEY_POWER
    - arm64: dts: qcom: sm6125: fix SDHCI CQE reg names
    - arm64: dts: renesas: r8a779f0: Fix HSCIF "brg_int" clock
    - arm64: dts: renesas: r8a779f0: Fix SCIF "brg_int" clock
    - arm64: dts: renesas: r9a09g011: Fix unit address format error
    - arm64: dts: renesas: r9a09g011: Fix I2C SoC specific strings
    - dt-bindings: pwm: fix microchip corePWM's pwm-cells
    - soc: sifive: ccache: fix missing iounmap() in error path in
      sifive_ccache_init()
    - soc: sifive: ccache: fix missing free_irq() in error path in
      sifive_ccache_init()
    - soc: sifive: ccache: fix missing of_node_put() in sifive_ccache_init()
    - arm64: dts: mt7986: fix trng node name
    - soc/tegra: cbb: Use correct master_id mask for CBB NOC in Tegra194
    - soc/tegra: cbb: Update slave maps for Tegra234
    - soc/tegra: cbb: Add checks for potential out of bound errors
    - soc/tegra: cbb: Check firewall before enabling error reporting
    - arm64: dts: qcom: sc7280: Mark all Qualcomm reference boards as LTE
    - arm: dts: spear600: Fix clcd interrupt
    - riscv: dts: microchip: fix the icicle's #pwm-cells
    - soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe
    - soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe
    - arm64: mm: kfence: only handle translation faults
    - perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init()
    - drivers: perf: marvell_cn10k: Fix hotplug callback leak in tad_pmu_init()
    - perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init()
    - perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init()
    - arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node
    - arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node
    - arm64: dts: ti: k3-j7200-mcu-wakeup: Drop dma-coherent in crypto node
    - arm64: dts: ti: k3-j721s2: Fix the interrupt ranges property for main & wkup
      gpio intr
    - riscv: dts: microchip: remove pcie node from the sev kit
    - ARM: dts: nuvoton: Remove bogus unit addresses from fixed-partition nodes
    - arm64: dts: mediatek: mt8195: Fix CPUs capacity-dmips-mhz
    - arm64: dts: mt7896a: Fix unit_address_vs_reg warning for oscillator
    - arm64: dts: mt6779: Fix devicetree build warnings
    - arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators
    - arm64: dts: mt2712e: Fix unit address for pinctrl node
    - arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names
    - arm64: dts: mt2712-evb: Fix usb vbus regulators unit names
    - arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings
    - arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name
    - arm64: tegra: Fix Prefetchable aperture ranges of Tegra234 PCIe controllers
    - arm64: tegra: Fix non-prefetchable aperture of PCIe C3 controller
    - arm64: dts: mt7986: move wed_pcie node
    - ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port
    - ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port
    - ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port
    - ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port
    - ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port
    - ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port
    - ARM: dts: turris-omnia: Add ethernet aliases
    - ARM: dts: turris-omnia: Add switch port 6 node
    - arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC
    - soc: apple: sart: Stop casting function pointer signatures
    - soc: apple: rtkit: Stop casting function pointer signatures
    - drivers/perf: hisi: Fix some event id for hisi-pcie-pmu
    - seccomp: Move copy_seccomp() to no failure path.
    - pstore/ram: Fix error return code in ramoops_probe()
    - ARM: mmp: fix timer_read delay
    - pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP
    - arch: arm64: apple: t8103: Use standard "iommu" node name
    - tpm: tis_i2c: Fix sanity check interrupt enable mask
    - tpm: Add flag to use default cancellation policy
    - tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init()
    - tpm/tpm_crb: Fix error message in __crb_relinquish_locality()
    - ovl: remove privs in ovl_copyfile()
    - ovl: remove privs in ovl_fallocate()
    - sched/uclamp: Fix relationship between uclamp and migration margin
    - sched/uclamp: Make task_fits_capacity() use util_fits_cpu()
    - sched/uclamp: Fix fits_capacity() check in feec()
    - sched/uclamp: Make select_idle_capacity() use util_fits_cpu()
    - sched/uclamp: Make asym_fits_capacity() use util_fits_cpu()
    - sched/uclamp: Make cpu_overutilized() use util_fits_cpu()
    - sched/uclamp: Cater for uclamp in find_energy_efficient_cpu()'s early exit
      condition
    - cpuidle: dt: Return the correct numbers of parsed idle states
    - alpha: fix TIF_NOTIFY_SIGNAL handling
    - alpha: fix syscall entry in !AUDUT_SYSCALL case
    - sched/psi: Fix possible missing or delayed pending event
    - x86/sgx: Reduce delay and interference of enclave release
    - PM: hibernate: Fix mistake in kerneldoc comment
    - fs: don't audit the capability check in simple_xattr_list()
    - cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut()
    - x86/split_lock: Add sysctl to control the misery mode
    - ACPI: irq: Fix some kernel-doc issues
    - selftests/ftrace: event_triggers: wait longer for test_event_enable
    - perf: Fix possible memleak in pmu_dev_alloc()
    - lib/debugobjects: fix stat count and optimize debug_objects_mem_init
    - platform/x86: huawei-wmi: fix return value calculation
    - timerqueue: Use rb_entry_safe() in timerqueue_getnext()
    - proc: fixup uptime selftest
    - lib/fonts: fix undefined behavior in bit shift for get_default_font
    - ocfs2: fix memory leak in ocfs2_stack_glue_init()
    - selftests: cgroup: fix unsigned comparison with less than zero
    - cpufreq: qcom-hw: Fix the frequency returned by cpufreq_driver->get()
    - MIPS: vpe-mt: fix possible memory leak while module exiting
    - MIPS: vpe-cmp: fix possible memory leak while module exiting
    - selftests/efivarfs: Add checking of the test return value
    - PNP: fix name memory leak in pnp_alloc_dev()
    - mailbox: pcc: Reset pcc_chan_count to zero in case of PCC probe failure
    - ACPI: pfr_telemetry: use ACPI_FREE() to free acpi_object
    - ACPI: pfr_update: use ACPI_FREE() to free acpi_object
    - perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology()
    - perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox()
    - perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map()
    - perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box()
    - platform/chrome: cros_usbpd_notify: Fix error handling in
      cros_usbpd_notify_init()
    - thermal: core: fix some possible name leaks in error paths
    - irqchip/loongson-pch-pic: Fix translate callback for DT path
    - irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe()
    - irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init()
    - irqchip/loongson-liointc: Fix improper error handling in liointc_init()
    - EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper()
    - NFSD: Finish converting the NFSv2 GETACL result encoder
    - NFSD: Finish converting the NFSv3 GETACL result encoder
    - nfsd: don't call nfsd_file_put from client states seqfile display
    - genirq/irqdesc: Don't try to remove non-existing sysfs files
    - cpufreq: amd_freq_sensitivity: Add missing pci_dev_put()
    - libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value
    - lib/notifier-error-inject: fix error when writing -errno to debugfs file
    - debugfs: fix error when writing negative value to atomic_t debugfs file
    - ocfs2: fix memory leak in ocfs2_mount_volume()
    - rapidio: fix possible name leaks when rio_add_device() fails
    - rapidio: rio: fix possible name leak in rio_register_mport()
    - clocksource/drivers/sh_cmt: Access registers according to spec
    - futex: Resend potentially swallowed owner death notification
    - cpu/hotplug: Make target_store() a nop when target == state
    - cpu/hotplug: Do not bail-out in DYING/STARTING sections
    - clocksource/drivers/timer-ti-dm: Fix warning for omap_timer_match
    - clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in
      dmtimer_systimer_init_clock()
    - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage()
    - uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix
    - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}()
    - x86/xen: Fix memory leak in xen_init_lock_cpu()
    - xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource()
    - PM: runtime: Do not call __rpm_callback() from rpm_idle()
    - erofs: check the uniqueness of fsid in shared domain in advance
    - erofs: Fix pcluster memleak when its block address is zero
    - erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails
    - erofs: validate the extent length for uncompressed pclusters
    - platform/chrome: cros_ec_typec: zero out stale pointers
    - platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]()
    - platform/x86: intel_scu_ipc: fix possible name leak in
      __intel_scu_ipc_register()
    - MIPS: BCM63xx: Add check for NULL for clk in clk_enable
    - MIPS: OCTEON: warn only once if deprecated link status is being used
    - lockd: set other missing fields when unlocking files
    - nfsd: return error if nfs4_setacl fails
    - NFSD: pass range end to vfs_fsync_range() instead of count
    - fs: sysv: Fix sysv_nblocks() returns wrong value
    - rapidio: fix possible UAF when kfifo_alloc() fails
    - eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD
    - relay: fix type mismatch when allocating memory in relay_create_buf()
    - hfs: Fix OOB Write in hfs_asc2mac
    - rapidio: devices: fix missing put_device in mport_cdev_open
    - ipc: fix memory leak in init_mqueue_fs()
    - platform/mellanox: mlxbf-pmc: Fix event typo
    - selftests/bpf: Add missing bpf_iter_vma_offset__destroy call
    - wifi: fix multi-link element subelement iteration
    - wifi: mac80211: mlme: fix null-ptr deref on failed assoc
    - wifi: mac80211: check link ID in auth/assoc continuation
    - wifi: mac80211: fix ifdef symbol name
    - drm/atomic-helper: Don't allocate new plane state in CRTC check
    - wifi: ath9k: hif_usb: fix memory leak of urbs in
      ath9k_hif_usb_dealloc_tx_urbs()
    - wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb()
    - wifi: rtl8xxxu: Fix reading the vendor of combo chips
    - wifi: ath11k: fix firmware assert during bandwidth change for peer sta
    - drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge
    - libbpf: Fix use-after-free in btf_dump_name_dups
    - libbpf: Fix memory leak in parse_usdt_arg()
    - selftests/bpf: Fix memory leak caused by not destroying skeleton
    - selftest/bpf: Fix memory leak in kprobe_multi_test
    - selftests/bpf: Fix error failure of case test_xdp_adjust_tail_grow
    - selftest/bpf: Fix error usage of ASSERT_OK in xdp_adjust_tail.c
    - libbpf: Use elf_getshdrnum() instead of e_shnum
    - libbpf: Deal with section with no data gracefully
    - libbpf: Fix null-pointer dereference in find_prog_by_sec_insn()
    - drm: lcdif: Switch to limited range for RGB to YUV conversion
    - ata: libata: fix NCQ autosense logic
    - pinctrl: ocelot: add missing destroy_workqueue() in error path in
      ocelot_pinctrl_probe()
    - ASoC: Intel: avs: Fix DMA mask assignment
    - ASoC: Intel: avs: Fix potential RX buffer overflow
    - ipmi: kcs: Poll OBF briefly to reduce OBE latency
    - drm/amdgpu: Revert "drm/amdgpu: getting fan speed pwm for vega10 properly"
    - drm/amdgpu/powerplay/psm: Fix memory leak in power state init
    - net: ethernet: adi: adin1110: Fix SPI transfers
    - samples/bpf: Fix map iteration in xdp1_user
    - samples/bpf: Fix MAC address swapping in xdp2_kern
    - selftests/bpf: fix missing BPF object files
    - drm/bridge: it6505: Initialize AUX channel in it6505_i2c_probe
    - Input: iqs7222 - protect against undefined slider size
    - media: v4l2-ctrls: Fix off-by-one error in integer menu control check
    - media: coda: jpeg: Add check for kmalloc
    - media: amphion: reset instance if it's aborted before codec header parsed
    - media: adv748x: afe: Select input port when initializing AFE
    - media: v4l2-ioctl.c: Unify YCbCr/YUV terms in format descriptions
    - media: cedrus: hevc: Fix offset adjustments
    - media: mediatek: vcodec: fix h264 cavlc bitstream fail
    - drm/i915/guc: Limit scheduling properties to avoid overflow
    - drm/i915: Fix compute pre-emption w/a to apply to compute engines
    - media: i2c: hi846: Fix memory leak in hi846_parse_dt()
    - media: i2c: ad5820: Fix error path
    - venus: pm_helpers: Fix error check in vcodec_domains_get()
    - soreuseport: Fix socket selection for SO_INCOMING_CPU.
    - media: i2c: ov5648: Free V4L2 fwnode data on unbind
    - media: exynos4-is: don't rely on the v4l2_async_subdev internals
    - libbpf: Btf dedup identical struct test needs check for nested
      structs/arrays
    - can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device
    - can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to
      {leaf,usbcan}_cmd_can_error_event
    - can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT
    - can: kvaser_usb_leaf: Set Warning state even without bus errors
    - can: kvaser_usb_leaf: Fix improved state not being reported
    - can: kvaser_usb_leaf: Fix wrong CAN state after stopping
    - can: kvaser_usb_leaf: Fix bogus restart events
    - can: kvaser_usb: Add struct kvaser_usb_busparams
    - can: kvaser_usb: Compare requested bittiming parameters with actual
      parameters in do_set_{,data}_bittiming
    - clk: renesas: r8a779f0: Fix SD0H clock name
    - clk: renesas: r8a779a0: Fix SD0H clock name
    - ASoC: dt-bindings: rt5682: Set sound-dai-cells to 1
    - drm/i915/guc: Add error-capture init warnings when needed
    - drm/i915/guc: Fix GuC error capture sizing estimation and reporting
    - dw9768: Enable low-power probe on ACPI
    - drm/amd/display: wait for vblank during pipe programming
    - drm/rockchip: lvds: fix PM usage counter unbalance in poweron
    - drm/i915: Handle all GTs on driver (un)load paths
    - drm/i915: Refactor ttm ghost obj detection
    - drm/i915: Encapsulate lmem rpm stuff in intel_runtime_pm
    - drm/i915/dgfx: Grab wakeref at i915_ttm_unmap_virtual
    - clk: renesas: r9a06g032: Repair grave increment error
    - drm: lcdif: change burst size to 256B
    - drm/panel/panel-sitronix-st7701: Fix RTNI calculation
    - spi: Update reference to struct spi_controller
    - drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure
    - drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED
    - drm/msm/mdp5: stop overriding drvdata
    - ima: Handle -ESTALE returned by ima_filter_rule_match()
    - drm/msm/hdmi: use devres helper for runtime PM management
    - bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
    - bpf: Fix slot type check in check_stack_write_var_off
    - drm/msm/dpu1: Account for DSC's bits_per_pixel having 4 fractional bits
    - drm/msm/dsi: Remove useless math in DSC calculations
    - drm/msm/dsi: Remove repeated calculation of slice_per_intf
    - drm/msm/dsi: Use DIV_ROUND_UP instead of conditional increment on modulo
    - drm/msm/dsi: Reuse earlier computed dsc->slice_chunk_size
    - drm/msm/dsi: Appropriately set dsc->mux_word_size based on bpc
    - drm/msm/dsi: Migrate to drm_dsc_compute_rc_parameters()
    - drm/msm/dsi: Account for DSC's bits_per_pixel having 4 fractional bits
    - drm/msm/dsi: Disallow 8 BPC DSC configuration for alternative BPC values
    - drm/msm/dsi: Prevent signed BPG offsets from bleeding into adjacent bits
    - media: platform: mtk-mdp3: fix error handling in mdp_cmdq_send()
    - media: platform: mtk-mdp3: fix error handling about components clock_on
    - media: platform: mtk-mdp3: fix error handling in mdp_probe()
    - media: rkvdec: Add required padding
    - media: vivid: fix compose size exceed boundary
    - media: platform: exynos4-is: fix return value check in fimc_md_probe()
    - bpf: propagate precision in ALU/ALU64 operations
    - bpf: propagate precision across all frames, not just the last one
    - clk: qcom: gcc-ipq806x: use parent_data for the last remaining entry
    - clk: qcom: dispcc-sm6350: Add CLK_OPS_PARENT_ENABLE to pixel&byte src
    - clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs
    - mtd: Fix device name leak when register device failed in add_mtd_device()
    - mtd: core: fix possible resource leak in init_mtd()
    - Input: joystick - fix Kconfig warning for JOYSTICK_ADC
    - wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port
    - media: camss: Clean up received buffers on failed start of streaming
    - media: camss: Do not attach an already attached power domain on MSM8916
      platform
    - clk: renesas: r8a779f0: Fix HSCIF parent clocks
    - clk: renesas: r8a779f0: Fix SCIF parent clocks
    - virt/sev-guest: Add a MODULE_ALIAS
    - net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write()
    - rxrpc: Fix ack.bufferSize to be 0 when generating an ack
    - drm: lcdif: Set and enable FIFO Panic threshold
    - wifi: rtw89: use u32_encode_bits() to fill MAC quota value
    - drm: rcar-du: Drop leftovers dependencies from Kconfig
    - regmap-irq: Use the new num_config_regs property in
      regmap_add_irq_chip_fwnode
    - drbd: use blk_queue_max_discard_sectors helper
    - bfq: fix waker_bfqq inconsistency crash
    - drm/radeon: Add the missed acpi_put_table() to fix memory leak
    - dt-bindings: pinctrl: update uart/mmc bindings for MT7986 SoC
    - pinctrl: mediatek: fix the pinconf register offset of some pins
    - wifi: iwlwifi: mei: make sure ownership confirmed message is sent
    - wifi: iwlwifi: mei: don't send SAP commands if AMT is disabled
    - wifi: iwlwifi: mei: fix tx DHCP packet for devices with new Tx API
    - wifi: iwlwifi: mei: avoid blocking sap messages handling due to rtnl lock
    - wifi: iwlwifi: mei: fix potential NULL-ptr deref after clone
    - module: Fix NULL vs IS_ERR checking for module_get_next_page
    - ASoC: codecs: wsa883x: Use proper shutdown GPIO polarity
    - ASoC: codecs: wsa883x: use correct header file
    - selftests/bpf: Fix xdp_synproxy compilation failure in 32-bit arch
    - selftests/bpf: Fix incorrect ASSERT in the tcp_hdr_options test
    - drm/mediatek: Modify dpi power on/off sequence.
    - ASoC: pxa: fix null-pointer dereference in filter()
    - nvmet: only allocate a single slab for bvecs
    - regulator: core: fix unbalanced of node refcount in regulator_dev_lookup()
    - amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table()
    - nvme: return err on nvme_init_non_mdts_limits fail
    - wifi: rtw89: Fix some error handling path in rtw89_core_sta_assoc()
    - regulator: qcom-rpmh: Fix PMR735a S3 regulator spec
    - drm/fourcc: Fix vsub/hsub for Q410 and Q401
    - ALSA: memalloc: Allocate more contiguous pages for fallback case
    - integrity: Fix memory leakage in keyring allocation error path
    - ima: Fix misuse of dereference of pointer in template_desc_init_fields()
    - block: clear ->slave_dir when dropping the main slave_dir reference
    - dm: cleanup open_table_device
    - dm: cleanup close_table_device
    - dm: make sure create and remove dm device won't race with open and close
      table
    - dm: track per-add_disk holder relations in DM
    - selftests/bpf: fix memory leak of lsm_cgroup
    - wifi: ath10k: Fix return value in ath10k_pci_init()
    - drm/msm/a6xx: Fix speed-bin detection vs probe-defer
    - mtd: lpddr2_nvm: Fix possible null-ptr-deref
    - Input: elants_i2c - properly handle the reset GPIO when power is off
    - ASoC: amd: acp: Fix possible UAF in acp_dma_open
    - net: ethernet: mtk_eth_soc: do not overwrite mtu configuration running reset
      routine
    - media: amphion: add lock around vdec_g_fmt
    - media: amphion: apply vb2_queue_error instead of setting manually
    - media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init()
    - media: solo6x10: fix possible memory leak in solo_sysfs_init()
    - media: platform: exynos4-is: Fix error handling in fimc_md_init()
    - media: amphion: Fix error handling in vpu_driver_init()
    - media: videobuf-dma-contig: use dma_mmap_coherent
    - net: ethernet: mtk_eth_soc: fix RSTCTRL_PPE{0,1} definitions
    - udp: Clean up some functions.
    - net: Return errno in sk->sk_prot->get_port().
    - mtd: spi-nor: hide jedec_id sysfs attribute if not present
    - mtd: spi-nor: Fix the number of bytes for the dummy cycles
    - clk: imx93: correct the flexspi1 clock setting
    - bpf: Pin the start cgroup in cgroup_iter_seq_init()
    - HID: i2c: let RMI devices decide what constitutes wakeup event
    - clk: imx93: unmap anatop base in error handling path
    - clk: imx93: correct enet clock
    - bpf: Move skb->len == 0 checks into __bpf_redirect
    - HID: hid-sensor-custom: set fixed size for custom attributes
    - clk: imx: imxrt1050: fix IMXRT1050_CLK_LCDIF_APB offsets
    - pinctrl: k210: call of_node_put()
    - wifi: rtw89: fix physts IE page check
    - ASoC: Intel: Skylake: Fix Kconfig dependency
    - ASoC: Intel: avs: Lock substream before snd_pcm_stop()
    - ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT
    - ALSA: seq: fix undefined behavior in bit shift for
      SNDRV_SEQ_FILTER_USE_EVENT
    - regulator: core: use kfree_const() to free space conditionally
    - clk: rockchip: Fix memory leak in rockchip_clk_register_pll()
    - drm/amdgpu: fix pci device refcount leak
    - drm/i915/guc: make default_lists const data
    - selftests/bpf: Make sure zero-len skbs aren't redirectable
    - selftests/bpf: Mount debugfs in setns_by_fd
    - bonding: fix link recovery in mode 2 when updelay is nonzero
    - clk: microchip: check for null return of devm_kzalloc()
    - mtd: core: Fix refcount error in del_mtd_device()
    - mtd: maps: pxa2xx-flash: fix memory leak in probe
    - drbd: remove call to memset before free device/resource/connection
    - drbd: destroy workqueue when drbd device was freed
    - ASoC: qcom: Add checks for devm_kcalloc
    - ASoC: qcom: cleanup and fix dependency of QCOM_COMMON
    - ASoC: mediatek: mt8186: Correct I2S shared clocks
    - media: vimc: Fix wrong function called when vimc_init() fails
    - media: imon: fix a race condition in send_packet()
    - media: imx: imx7-media-csi: Clear BIT_MIPI_DOUBLE_CMPNT for <16b formats
    - media: mt9p031: Drop bogus v4l2_subdev_get_try_crop() call from
      mt9p031_init_cfg()
    - clk: imx8mn: rename vpu_pll to m7_alt_pll
    - clk: imx: replace osc_hdmi with dummy
    - clk: imx: rename video_pll1 to video_pll
    - clk: imx8mn: fix imx8mn_sai2_sels clocks list
    - clk: imx8mn: fix imx8mn_enet_phy_sels clocks list
    - pinctrl: pinconf-generic: add missing of_node_put()
    - media: dvb-core: Fix ignored return value in dvb_register_frontend()
    - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
    - x86/boot: Skip realmode init code when running as Xen PV guest
    - media: sun6i-mipi-csi2: Require both pads to be connected for streaming
    - media: sun8i-a83t-mipi-csi2: Require both pads to be connected for streaming
    - media: sun6i-mipi-csi2: Register async subdev with no sensor attached
    - media: sun8i-a83t-mipi-csi2: Register async subdev with no sensor attached
    - media: amphion: try to wakeup vpu core to avoid failure
    - media: amphion: cancel vpu before release instance
    - media: amphion: lock and check m2m_ctx in event handler
    - media: mediatek: vcodec: Fix getting NULL pointer for dst buffer
    - media: mediatek: vcodec: Fix h264 set lat buffer error
    - media: mediatek: vcodec: Setting lat buf to lat_list when lat decode error
    - media: mediatek: vcodec: Core thread depends on core_list
    - media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC
    - drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe()
    - ASoC: dt-bindings: wcd9335: fix reset line polarity in example
    - ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd
    - drm/msm/mdp5: fix reading hw revision on db410c platform
    - NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding
    - NFSv4.2: Always decode the security label
    - NFSv4.2: Fix a memory stomp in decode_attr_security_label
    - NFSv4.2: Fix initialisation of struct nfs4_label
    - NFSv4: Fix a credential leak in _nfs4_discover_trunking()
    - NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn
    - NFS: Fix an Oops in nfs_d_automount()
    - ALSA: asihpi: fix missing pci_disable_device()
    - wifi: plfxlc: fix potential memory leak in __lf_x_usb_enable_rx()
    - wifi: rtl8xxxu: Fix use after rcu_read_unlock in rtl8xxxu_bss_info_changed
    - wifi: iwlwifi: mvm: fix double free on tx path.
    - ASoC: mediatek: mt8173: Enable IRQ when pdata is ready
    - clk: mediatek: fix dependency of MT7986 ADC clocks
    - drm/amd/pm/smu11: BACO is supported when it's in BACO state
    - amdgpu/nv.c: Corrected typo in the video capabilities resolution
    - drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()
    - drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios()
    - drm/amdkfd: Fix memory leakage
    - drm/i915/bios: fix a memory leak in generate_lfp_data_ptrs
    - ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe
    - clk: visconti: Fix memory leak in visconti_register_pll()
    - netfilter: conntrack: set icmpv6 redirects as RELATED
    - Input: wistron_btns - disable on UML
    - bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data
    - bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes
    - bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect
    - bonding: uninitialized variable in bond_miimon_inspect()
    - spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE
    - wifi: nl80211: Add checks for nla_nest_start() in nl80211_send_iface()
    - wifi: mac80211: fix memory leak in ieee80211_if_add()
    - wifi: mac80211: fix maybe-unused warning
    - wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys()
      fails
    - wifi: mt76: mt7921: fix antenna signal are way off in monitor mode
    - wifi: mt76: mt7915: fix mt7915_mac_set_timing()
    - wifi: mt76: mt7915: fix reporting of TX AGGR histogram
    - wifi: mt76: mt7921: fix reporting of TX AGGR histogram
    - wifi: mt76: mt7915: rework eeprom tx paths and streams init
    - wifi: mt76: mt7915: Fix chainmask calculation on mt7915 DBDC
    - wifi: mt76: mt7921: fix wrong power after multiple SAR set
    - wifi: mt76: fix coverity overrun-call in mt76_get_txpower()
    - wifi: mt76: mt7921: Add missing __packed annotation of struct mt7921_clc
    - wifi: mt76: do not send firmware FW_FEATURE_NON_DL region
    - mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2()
    - regulator: core: fix module refcount leak in set_supply()
    - clk: qcom: lpass-sc7280: Fix pm_runtime usage
    - clk: qcom: lpass-sc7180: Fix pm_runtime usage
    - clk: qcom: clk-krait: fix wrong div2 functions
    - Revert "net: hsr: use hlist_head instead of list_head for mac addresses"
    - hsr: Add a rcu-read lock to hsr_forward_skb().
    - hsr: Avoid double remove of a node.
    - hsr: Disable netpoll.
    - hsr: Synchronize sending frames to have always incremented outgoing seq nr.
    - hsr: Synchronize sequence number updates.
    - configfs: fix possible memory leak in configfs_create_dir()
    - regulator: core: fix resource leak in regulator_register()
    - hwmon: (jc42) Convert register access and caching to regmap/regcache
    - hwmon: (jc42) Restore the min/max/critical temperatures on resume
    - bpf: Add dummy type reference to nf_conn___init to fix type deduplication
    - bpf, sockmap: fix race in sock_map_free()
    - ALSA: pcm: Set missing stop_operating flag at undoing trigger start
    - media: saa7164: fix missing pci_disable_device()
    - media: ov5640: set correct default link frequency
    - ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt
    - pinctrl: thunderbay: fix possible memory leak in
      thunderbay_build_functions()
    - xprtrdma: Fix regbuf data not freed in rpcrdma_req_create()
    - SUNRPC: Fix missing release socket in rpc_sockname()
    - NFSv4.2: Set the correct size scratch buffer for decoding READ_PLUS
    - NFS: Allow very small rsize & wsize again
    - NFSv4.x: Fail client initialisation if state manager thread can't run
    - riscv, bpf: Emit fixed-length instructions for BPF_PSEUDO_FUNC
    - bpftool: Fix memory leak in do_build_table_cb
    - hwmon: (emc2305) fix unable to probe emc2301/2/3
    - hwmon: (emc2305) fix pwm never being able to set lower
    - mmc: alcor: fix return value check of mmc_add_host()
    - mmc: moxart: fix return value check of mmc_add_host()
    - mmc: mxcmmc: fix return value check of mmc_add_host()
    - mmc: pxamci: fix return value check of mmc_add_host()
    - mmc: rtsx_pci: fix return value check of mmc_add_host()
    - mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host()
    - mmc: toshsd: fix return value check of mmc_add_host()
    - mmc: vub300: fix return value check of mmc_add_host()
    - mmc: wmt-sdmmc: fix return value check of mmc_add_host()
    - mmc: litex_mmc: ensure `host->irq == 0` if polling
    - mmc: atmel-mci: fix return value check of mmc_add_host()
    - mmc: omap_hsmmc: fix return value check of mmc_add_host()
    - mmc: meson-gx: fix return value check of mmc_add_host()
    - mmc: via-sdmmc: fix return value check of mmc_add_host()
    - mmc: wbsd: fix return value check of mmc_add_host()
    - mmc: mmci: fix return value check of mmc_add_host()
    - mmc: renesas_sdhi: alway populate SCC pointer
    - memstick/ms_block: Add check for alloc_ordered_workqueue
    - mmc: core: Normalize the error handling branch in sd_read_ext_regs()
    - nvme: pass nr_maps explicitly to nvme_alloc_io_tag_set
    - regulator: qcom-labibb: Fix missing of_node_put() in
      qcom_labibb_regulator_probe()
    - media: c8sectpfe: Add of_node_put() when breaking out of loop
    - media: coda: Add check for dcoda_iram_alloc
    - media: coda: Add check for kmalloc
    - media: staging: stkwebcam: Restore MEDIA_{USB,CAMERA}_SUPPORT dependencies
    - clk: samsung: Fix memory leak in _samsung_clk_register_pll()
    - spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode
    - wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h
    - wifi: rtl8xxxu: Fix the channel width reporting
    - wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware()
    - blktrace: Fix output non-blktrace event when blk_classic option enabled
    - bpf: Do not zero-extend kfunc return values
    - clk: socfpga: Fix memory leak in socfpga_gate_init()
    - net: vmw_vsock: vmci: Check memcpy_from_msg()
    - net: defxx: Fix missing err handling in dfx_init()
    - net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload()
    - net: stmmac: fix possible memory leak in stmmac_dvr_probe()
    - drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init()
    - ipvs: use u64_stats_t for the per-cpu counters
    - of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry()
      and find_dup_cset_prop()
    - ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave()
    - net: farsync: Fix kmemleak when rmmods farsync
    - net/tunnel: wait until all sk_user_data reader finish before releasing the
      sock
    - net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave()
    - net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave()
    - net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave()
    - net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave()
    - hamradio: don't call dev_kfree_skb() under spin_lock_irqsave()
    - net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave()
    - net: setsockopt: fix IPV6_UNICAST_IF option for connected sockets
    - af_unix: call proto_unregister() in the error path in af_unix_init()
    - net: amd-xgbe: Fix logic around active and passive cables
    - net: amd-xgbe: Check only the minimum speed for active/passive cables
    - can: tcan4x5x: Remove invalid write in clear_interrupts
    - can: m_can: Call the RAM init directly from m_can_chip_config
    - can: tcan4x5x: Fix use of register error status mask
    - net: ethernet: ti: am65-cpsw: Fix PM runtime leakage in
      am65_cpsw_nuss_ndo_slave_open()
    - net: lan9303: Fix read error execution path
    - ntb_netdev: Use dev_kfree_skb_any() in interrupt context
    - sctp: sysctl: make extra pointers netns aware
    - Bluetooth: hci_core: fix error handling in hci_register_dev()
    - Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS
    - Bluetooth: Fix EALREADY and ELOOP cases in bt_status()
    - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync
    - Bluetooth: btintel: Fix missing free skb in btintel_setup_combined()
    - Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave()
    - Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave()
    - Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave()
    - Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave()
    - Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave()
    - Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave()
    - Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave()
    - octeontx2-af: cn10k: mcs: Fix a resource leak in the probe and remove
      functions
    - stmmac: fix potential division by 0
    - i40e: Fix the inability to attach XDP program on downed interface
    - net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error
      path
    - apparmor: fix a memleak in multi_transaction_new()
    - apparmor: fix lockdep warning when removing a namespace
    - apparmor: Fix abi check to include v8 abi
    - apparmor: Fix regression in stacking due to label flags
    - crypto: hisilicon/qm - fix incorrect parameters usage
    - crypto: hisilicon/qm - re-enable communicate interrupt before notifying PF
    - crypto: sun8i-ss - use dma_addr instead u32
    - crypto: nitrox - avoid double free on error path in nitrox_sriov_init()
    - crypto: tcrypt - fix return value for multiple subtests
    - scsi: core: Fix a race between scsi_done() and scsi_timeout()
    - apparmor: Use pointer to struct aa_label for lbs_cred
    - PCI: dwc: Fix n_fts[] array overrun
    - RDMA/core: Fix order of nldev_exit call
    - PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled
    - f2fs: Fix the race condition of resize flag between resizefs
    - crypto: rockchip - do not do custom power management
    - crypto: rockchip - do not store mode globally
    - crypto: rockchip - add fallback for cipher
    - crypto: rockchip - add fallback for ahash
    - crypto: rockchip - better handle cipher key
    - crypto: rockchip - remove non-aligned handling
    - crypto: rockchip - rework by using crypto_engine
    - apparmor: Fix memleak in alloc_ns()
    - fortify: Do not cast to "unsigned char"
    - f2fs: fix to invalidate dcc->f2fs_issue_discard in error path
    - f2fs: fix gc mode when gc_urgent_high_remaining is 1
    - f2fs: fix normal discard process
    - f2fs: allow to set compression for inlined file
    - f2fs: fix the assign logic of iocb
    - f2fs: fix to destroy sbi->post_read_wq in error path of f2fs_fill_super()
    - RDMA/irdma: Report the correct link speed
    - scsi: qla2xxx: Fix set-but-not-used variable warnings
    - RDMA/siw: Fix immediate work request flush to completion queue
    - IB/mad: Don't call to function that might sleep while in atomic context
    - PCI: vmd: Disable MSI remapping after suspend
    - PCI: imx6: Initialize PHY before deasserting core reset
    - f2fs: fix to avoid accessing uninitialized spinlock
    - RDMA/restrack: Release MR restrack when delete
    - RDMA/core: Make sure "ib_port" is valid when access sysfs node
    - RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port
    - RDMA/siw: Set defined status for work completion with undefined status
    - RDMA/irdma: Fix inline for multiple SGE's
    - RDMA/irdma: Fix RQ completion opcode
    - RDMA/irdma: Do not request 2-level PBLEs for CQ alloc
    - scsi: scsi_debug: Fix a warning in resp_write_scat()
    - crypto: ccree - Remove debugfs when platform_driver_register failed
    - crypto: cryptd - Use request context instead of stack for sub-request
    - crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set()
    - RDMA/rxe: Fix mr->map double free
    - RDMA/hns: Fix ext_sge num error when post send
    - RDMA/hns: Fix incorrect sge nums calculation
    - PCI: Check for alloc failure in pci_request_irq()
    - RDMA/hfi: Decrease PCI device reference count in error path
    - crypto: ccree - Make cc_debugfs_global_fini() available for module init
      function
    - RDMA/irdma: Initialize net_type before checking it
    - RDMA/hns: fix memory leak in hns_roce_alloc_mr()
    - RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create
      failed
    - dt-bindings: imx6q-pcie: Fix clock names for imx6sx and imx8mq
    - dt-bindings: visconti-pcie: Fix interrupts array max constraints
    - PCI: endpoint: pci-epf-vntb: Fix call pci_epc_mem_free_addr() in error path
    - scsi: hpsa: Fix possible memory leak in hpsa_init_one()
    - crypto: tcrypt - Fix multibuffer skcipher speed test mem leak
    - padata: Always leave BHs disabled when running ->parallel()
    - padata: Fix list iterator in padata_do_serial()
    - crypto: x86/aegis128 - fix possible crash with CFI enabled
    - crypto: x86/aria - fix crash with CFI enabled
    - crypto: x86/sha1 - fix possible crash with CFI enabled
    - crypto: x86/sha256 - fix possible crash with CFI enabled
    - crypto: x86/sha512 - fix possible crash with CFI enabled
    - crypto: x86/sm3 - fix possible crash with CFI enabled
    - crypto: x86/sm4 - fix crash with CFI enabled
    - crypto: arm64/sm3 - add NEON assembly implementation
    - crypto: arm64/sm3 - fix possible crash with CFI enabled
    - crypto: hisilicon/qm - fix 'QM_XEQ_DEPTH_CAP' mask value
    - scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()
    - scsi: hpsa: Fix error handling in hpsa_add_sas_host()
    - scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device()
    - scsi: efct: Fix possible memleak in efct_device_init()
    - scsi: scsi_debug: Fix a warning in resp_verify()
    - scsi: scsi_debug: Fix a warning in resp_report_zones()
    - scsi: fcoe: Fix possible name leak when device_register() fails
    - scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper()
    - scsi: ipr: Fix WARNING in ipr_init()
    - scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails
    - scsi: snic: Fix possible UAF in snic_tgt_create()
    - scsi: ufs: core: Fix the polling implementation
    - RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps()
    - f2fs: set zstd compress level correctly
    - f2fs: fix to enable compress for newly created file if extension matches
    - f2fs: avoid victim selection from previous victim section
    - RDMA/nldev: Fix failure to send large messages
    - crypto: qat - fix error return code in adf_probe
    - crypto: amlogic - Remove kcalloc without check
    - crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe()
    - riscv/mm: add arch hook arch_clear_hugepage_flags
    - RDMA: Disable IB HW for UML
    - RDMA/hfi1: Fix error return code in parse_platform_config()
    - RDMA/srp: Fix error return code in srp_parse_options()
    - PCI: vmd: Fix secondary bus reset for Intel bridges
    - orangefs: Fix sysfs not cleanup when dev init failed
    - RDMA/hns: Fix the gid problem caused by free mr
    - RDMA/hns: Fix AH attr queried by query_qp
    - RDMA/hns: Fix PBL page MTR find
    - RDMA/hns: Fix page size cap from firmware
    - RDMA/hns: Fix error code of CMD
    - RDMA/hns: Fix XRC caps on HIP08
    - RISC-V: Fix unannoted hardirqs-on in return to userspace slow-path
    - RISC-V: Fix MEMREMAP_WB for systems with Svpbmt
    - riscv: Fix crash during early errata patching
    - crypto: img-hash - Fix variable dereferenced before check 'hdev->req'
    - hwrng: amd - Fix PCI device refcount leak
    - hwrng: geode - Fix PCI device refcount leak
    - IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces
    - RISC-V: Align the shadow stack
    - f2fs: fix iostat parameter for discard
    - riscv: Fix P4D_SHIFT definition for 3-level page table mode
    - drivers: dio: fix possible memory leak in dio_init()
    - serial: tegra: Read DMA status before terminating
    - serial: 8250_bcm7271: Fix error handling in brcmuart_init()
    - drivers: staging: r8188eu: Fix sleep-in-atomic-context bug in
      rtw_join_timeout_handler
    - class: fix possible memory leak in __class_register()
    - vfio: platform: Do not pass return buffer to ACPI _RST method
    - vfio/iova_bitmap: Fix PAGE_SIZE unaligned bitmaps
    - uio: uio_dmem_genirq: Fix missing unlock in irq configuration
    - uio: uio_dmem_genirq: Fix deadlock between irq config and handling
    - usb: fotg210-udc: Fix ages old endianness issues
    - interconnect: qcom: sc7180: fix dropped const of qcom_icc_bcm
    - staging: vme_user: Fix possible UAF in tsi148_dma_list_add
    - usb: typec: Check for ops->exit instead of ops->enter in altmode_exit
    - usb: typec: tcpci: fix of node refcount leak in tcpci_register_port()
    - usb: typec: tipd: Cleanup resources if devm_tps6598_psy_register fails
    - usb: typec: tipd: Fix spurious fwnode_handle_put in error path
    - usb: typec: tipd: Fix typec_unregister_port error paths
    - usb: musb: omap2430: Fix probe regression for missing resources
    - extcon: usbc-tusb320: Update state on probe even if no IRQ pending
    - USB: gadget: Fix use-after-free during usb config switch
    - serial: amba-pl011: avoid SBSA UART accessing DMACR register
    - serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle.
    - serial: stm32: move dma_request_chan() before clk_prepare_enable()
    - serial: pch: Fix PCI device refcount leak in pch_request_dma()
    - serial: altera_uart: fix locking in polling mode
    - serial: sunsab: Fix error handling in sunsab_init()
    - habanalabs: fix return value check in hl_fw_get_sec_attest_data()
    - test_firmware: fix memory leak in test_firmware_init()
    - misc: ocxl: fix possible name leak in ocxl_file_register_afu()
    - ocxl: fix pci device refcount leak when calling get_function_0()
    - misc: tifm: fix possible memory leak in tifm_7xx1_switch_media()
    - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault
      and gru_handle_user_call_os
    - firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe()
    - cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter()
    - cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()
    - iio: temperature: ltc2983: make bulk write buffer DMA-safe
    - iio: adis: add '__adis_enable_irq()' implementation
    - counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update
    - coresight: trbe: remove cpuhp instance node before remove cpuhp state
    - coresight: cti: Fix null pointer error on CTI init before ETM
    - tracing/user_events: Fix call print_fmt leak
    - usb: roles: fix of node refcount leak in usb_role_switch_is_parent()
    - usb: core: hcd: Fix return value check in usb_hcd_setup_local_mem()
    - usb: gadget: f_hid: fix f_hidg lifetime vs cdev
    - usb: gadget: f_hid: fix refcount leak on error path
    - drivers: mcb: fix resource leak in mcb_probe()
    - mcb: mcb-parse: fix error handing in chameleon_parse_gdd()
    - chardev: fix error handling in cdev_device_add()
    - vfio/iova_bitmap: refactor iova_bitmap_set() to better handle page
      boundaries
    - i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe
    - staging: rtl8192u: Fix use after free in ieee80211_rx()
    - staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor()
    - vme: Fix error not catched in fake_init()
    - gpiolib: cdev: fix NULL-pointer dereferences
    - gpiolib: protect the GPIO device against being dropped while in use by user-
      space
    - i2c: mux: reg: check return value after calling platform_get_resource()
    - i2c: ismt: Fix an out-of-bounds bug in ismt_access()
    - usb: storage: Add check for kcalloc
    - usb: typec: wusb3801: fix fwnode refcount leak in wusb3801_probe()
    - tracing/hist: Fix issue of losting command info in error_log
    - ksmbd: Fix resource leak in ksmbd_session_rpc_open()
    - samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe()
    - thermal/drivers/imx8mm_thermal: Validate temperature range
    - thermal/drivers/k3_j72xx_bandgap: Fix the debug print message
    - thermal/of: Fix memory leak on thermal_of_zone_register() failure
    - thermal/drivers/qcom/temp-alarm: Fix inaccurate warning for gen2
    - thermal/drivers/qcom/lmh: Fix irq handler return value
    - fbdev: ssd1307fb: Drop optional dependency
    - fbdev: pm2fb: fix missing pci_disable_device()
    - fbdev: via: Fix error in via_core_init()
    - fbdev: vermilion: decrease reference count in error path
    - fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe()
    - fbdev: geode: don't build on UML
    - fbdev: uvesafb: don't build on UML
    - fbdev: uvesafb: Fixes an error handling path in uvesafb_probe()
    - led: qcom-lpg: Fix sleeping in atomic
    - perf tools: Fix "kernel lock contention analysis" test by not printing
      warnings in quiet mode
    - perf stat: Use evsel__is_hybrid() more
    - perf stat: Move common code in print_metric_headers()
    - HSI: omap_ssi_core: fix unbalanced pm_runtime_disable()
    - HSI: omap_ssi_core: fix possible memory leak in ssi_probe()
    - power: supply: fix residue sysfs file in error handle route of
      __power_supply_register()
    - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running
    - perf trace: Return error if a system call doesn't exist
    - perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number
    - perf trace: Handle failure when trace point folder is missed
    - perf symbol: correction while adjusting symbol
    - power: supply: z2_battery: Fix possible memleak in z2_batt_probe()
    - power: supply: cw2015: Fix potential null-ptr-deref in cw_bat_probe()
    - HSI: omap_ssi_core: Fix error handling in ssi_init()
    - power: supply: ab8500: Fix error handling in ab8500_charger_init()
    - power: supply: Fix refcount leak in rk817_charger_probe
    - power: supply: bq25890: Factor out regulator registration code
    - power: supply: bq25890: Convert to i2c's .probe_new()
    - power: supply: bq25890: Ensure pump_express_work is cancelled on remove
    - perf branch: Fix interpretation of branch records
    - power: supply: fix null pointer dereferencing in
      power_supply_get_battery_info
    - gfs2: Partially revert gfs2_inode_lookup change
    - leds: is31fl319x: Fix setting current limit for is31fl319{0,1,3}
    - perf off_cpu: Fix a typo in BTF tracepoint name, it should be
      'btf_trace_sched_switch'
    - ftrace: Allow WITH_ARGS flavour of graph tracer with shadow call stack
    - perf stat: Do not delay the workload with --delay
    - RDMA/siw: Fix pointer cast warning
    - fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
    - fs/ntfs3: Harden against integer overflows
    - phy: marvell: phy-mvebu-a3700-comphy: Reset COMPHY registers before USB 3.0
      power on
    - phy: qcom-qmp-pcie: drop bogus register update
    - dmaengine: idxd: Make max batch size attributes in sysfs invisible for Intel
      IAA
    - dmaengine: apple-admac: Allocate cache SRAM to channels
    - remoteproc: core: Auto select rproc-virtio device id
    - phy: qcom-qmp-pcie: drop power-down delay config
    - phy: qcom-qmp-pcie: replace power-down delay
    - phy: qcom-qmp-pcie: fix sc8180x initialisation
    - phy: qcom-qmp-pcie: fix ipq8074-gen3 initialisation
    - phy: qcom-qmp-pcie: fix ipq6018 initialisation
    - phy: qcom-qmp-usb: clean up power-down handling
    - phy: qcom-qmp-usb: drop sc8280xp power-down delay
    - phy: qcom-qmp-usb: drop power-down delay config
    - phy: qcom-qmp-usb: clean up status polling
    - phy: qcom-qmp-usb: drop start and pwrdn-ctrl abstraction
    - phy: qcom-qmp-usb: correct registers layout for IPQ8074 USB3 PHY
    - iommu/s390: Fix duplicate domain attachments
    - iommu/sun50i: Fix reset release
    - iommu/sun50i: Consider all fault sources for reset
    - iommu/sun50i: Fix R/W permission check
    - iommu/sun50i: Fix flush size
    - iommu/sun50i: Implement .iotlb_sync_map
    - iommu/rockchip: fix permission bits in page table entries v2
    - dmaengine: idxd: Make read buffer sysfs attributes invisible for Intel IAA
    - phy: qcom-qmp-usb: fix sc8280xp PCS_USB offset
    - phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices
    - phy: usb: Use slow clock for wake enabled suspend
    - phy: usb: Fix clock imbalance for suspend/resume
    - include/uapi/linux/swab: Fix potentially missing __always_inline
    - pwm: tegra: Improve required rate calculation
    - pwm: tegra: Ensure the clock rate is not less than needed
    - phy: qcom-qmp-pcie: split register tables into common and extra parts
    - phy: qcom-qmp-pcie: split pcs_misc init cfg for ipq8074 pcs table
    - phy: qcom-qmp-pcie: support separate tables for EP mode
    - phy: qcom-qmp-pcie: Support SM8450 PCIe1 PHY in EP mode
    - phy: qcom-qmp-pcie: Fix high latency with 4x2 PHY when ASPM is enabled
    - phy: qcom-qmp-pcie: Fix sm8450_qmp_gen4x2_pcie_pcs_tbl[] register names
    - fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs
    - dmaengine: idxd: Fix crc_val field for completion record
    - rtc: rzn1: Check return value in rzn1_rtc_probe
    - rtc: class: Fix potential memleak in devm_rtc_allocate_device()
    - rtc: pcf2127: Convert to .probe_new()
    - rtc: cmos: Call cmos_wake_setup() from cmos_do_probe()
    - rtc: cmos: Call rtc_wake_setup() from cmos_do_probe()
    - rtc: cmos: Eliminate forward declarations of some functions
    - rtc: cmos: Rename ACPI-related functions
    - rtc: cmos: Disable ACPI RTC event on removal
    - rtc: snvs: Allow a time difference on clock register read
    - rtc: pcf85063: Fix reading alarm
    - iommu/mediatek: Check return value after calling platform_get_resource()
    - iommu: Avoid races around device probe
    - iommu/amd: Fix pci device refcount leak in ppr_notifier()
    - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
    - macintosh: fix possible memory leak in macio_add_one_device()
    - macintosh/macio-adb: check the return value of ioremap()
    - powerpc/52xx: Fix a resource leak in an error handling path
    - cxl: Fix refcount leak in cxl_calc_capp_routing
    - powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds
    - powerpc/xive: add missing iounmap() in error path in
      xive_spapr_populate_irq_data()
    - powerpc/pseries: fix the object owners enum value in plpks driver
    - powerpc/pseries: Fix the H_CALL error code in PLPKS driver
    - powerpc/pseries: Return -EIO instead of -EINTR for H_ABORTED error
    - powerpc/pseries: fix plpks_read_var() code for different consumers
    - kprobes: Fix check for probe enabled in kill_kprobe()
    - powerpc: dts: turris1x.dts: Add channel labels for temperature sensor
    - powerpc/perf: callchain validate kernel stack pointer bounds
    - powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in
      of_fsl_spi_probe()
    - powerpc/hv-gpci: Fix hv_gpci event list
    - selftests/powerpc: Fix resource leaks
    - iommu/mediatek: Add platform_device_put for recovering the device refcnt
    - iommu/mediatek: Use component_match_add
    - iommu/mediatek: Add error path for loop of mm_dts_parse
    - iommu/mediatek: Validate number of phandles associated with "mediatek,larbs"
    - iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY
    - pwm: sifive: Call pwm_sifive_update_clock() while mutex is held
    - pwm: mtk-disp: Fix the parameters calculated by the enabled flag of disp_pwm
    - pwm: mediatek: always use bus clock for PWM on MT7622
    - RISC-V: KVM: Fix reg_val check in kvm_riscv_vcpu_set_reg_config()
    - remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev()
    - remoteproc: qcom: q6v5: Fix potential null-ptr-deref in
      q6v5_wcss_init_mmio()
    - remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove
    - remoteproc: qcom_q6v5_pas: detach power domains on remove
    - remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in
      adsp_alloc_memory_region()
    - remoteproc: qcom: q6v5: Fix missing clk_disable_unprepare() in
      q6v5_wcss_qcs404_power_on()
    - powerpc/pseries/eeh: use correct API for error log size
    - dt-bindings: mfd: qcom,spmi-pmic: Drop PWM reg dependency
    - mfd: axp20x: Do not sleep in the power off handler
    - mfd: bd957x: Fix Kconfig dependency on REGMAP_IRQ
    - mfd: qcom_rpm: Fix an error handling path in qcom_rpm_probe()
    - mfd: pm8008: Fix return value check in pm8008_probe()
    - netfilter: flowtable: really fix NAT IPv6 offload
    - rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe()
    - rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe()
    - rtc: pcf85063: fix pcf85063_clkout_control
    - iommu/mediatek: Fix forever loop in error handling
    - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure
    - net: macsec: fix net device access prior to holding a lock
    - bonding: add missed __rcu annotation for curr_active_slave
    - bonding: do failover when high prio link up
    - mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under
      spin_lock_irqsave()
    - mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under
      spin_lock_irqsave()
    - mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under
      spin_lock_irqsave()
    - block, bfq: fix possible uaf for 'bfqq->bic'
    - selftests/bpf: Select CONFIG_FUNCTION_ERROR_INJECTION
    - bpf: prevent leak of lsm program after failed attach
    - media: v4l2-ctrls-api.c: add back dropped ctrl->is_new = 1
    - net: enetc: avoid buffer leaks on xdp_do_redirect() failure
    - nfc: pn533: Clear nfc_target before being used
    - unix: Fix race in SOCK_SEQPACKET's unix_dgram_sendmsg()
    - r6040: Fix kmemleak in probe and remove
    - net: dsa: mv88e6xxx: avoid reg_lock deadlock in mv88e6xxx_setup_port()
    - igc: Enhance Qbv scheduling by using first flag bit
    - igc: Use strict cycles for Qbv scheduling
    - igc: Add checking for basetime less than zero
    - igc: allow BaseTime 0 enrollment for Qbv
    - igc: recalculate Qbv end_time by considering cycle time
    - igc: Set Qbv start_time and end_time to end_time if not being configured in
      GCL
    - rtc: mxc_v2: Add missing clk_disable_unprepare()
    - devlink: hold region lock when flushing snapshots
    - selftests: devlink: fix the fd redirect in dummy_reporter_test
    - openvswitch: Fix flow lookup to use unmasked key
    - soc: mediatek: pm-domains: Fix the power glitch issue
    - arm64: dts: mt8183: Fix Mali GPU clock
    - devlink: protect devlink dump by the instance lock
    - skbuff: Account for tail adjustment during pull operations
    - mailbox: mpfs: read the system controller's status
    - mailbox: arm_mhuv2: Fix return value check in mhuv2_probe()
    - mailbox: zynq-ipi: fix error handling while device_register() fails
    - net_sched: reject TCF_EM_SIMPLE case for complex ematch module
    - rxrpc: Fix missing unlock in rxrpc_do_sendmsg()
    - myri10ge: Fix an error handling path in myri10ge_probe()
    - net: stream: purge sk_error_queue in sk_stream_kill_queues()
    - mctp: serial: Fix starting value for frame check sequence
    - cifs: don't leak -ENOMEM in smb2_open_file()
    - net: dsa: microchip: remove IRQF_TRIGGER_FALLING in request_threaded_irq
    - mctp: Remove device type check at unregister
    - HID: amd_sfh: Add missing check for dma_alloc_coherent
    - net: fec: check the return value of build_skb()
    - rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state()
    - arm64: make is_ttbrX_addr() noinstr-safe
    - ARM: dts: aspeed: rainier,everest: Move reserved memory regions
    - video: hyperv_fb: Avoid taking busy spinlock on panic path
    - x86/hyperv: Remove unregister syscore call from Hyper-V cleanup
    - binfmt_misc: fix shift-out-of-bounds in check_special_flags
    - arm64: dts: qcom: sm8450: disable SDHCI SDR104/SDR50 on all boards
    - arm64: dts: qcom: sm6350: Add apps_smmu with streamID to SDHCI 1/2 nodes
    - fs: jfs: fix shift-out-of-bounds in dbAllocAG
    - udf: Avoid double brelse() in udf_rename()
    - jfs: Fix fortify moan in symlink
    - fs: jfs: fix shift-out-of-bounds in dbDiscardAG
    - ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value
    - ACPI: EC: Add quirk for the HP Pavilion Gaming 15-cx0041ur
    - ACPICA: Fix error code path in acpi_ds_call_control_method()
    - thermal/core: Ensure that thermal device is registered in
      thermal_zone_get_temp
    - ACPI: video: Change GIGABYTE GB-BXBT-2807 quirk to force_none
    - ACPI: video: Change Sony Vaio VPCEH3U1E quirk to force_native
    - ACPI: video: Add force_vendor quirk for Sony Vaio PCG-FRV35
    - ACPI: video: Add force_native quirk for Sony Vaio VPCY11S1E
    - nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset()
    - nilfs2: fix shift-out-of-bounds due to too large exponent of block size
    - acct: fix potential integer overflow in encode_comp_t()
    - x86/apic: Handle no CONFIG_X86_X2APIC on systems with x2APIC enabled by BIOS
    - ACPI: x86: Add skip i2c clients quirk for Lenovo Yoga Tab 3 Pro (YT3-X90F)
    - btrfs: do not panic if we can't allocate a prealloc extent state
    - ACPI: x86: Add skip i2c clients quirk for Medion Lifetab S10346
    - hfs: fix OOB Read in __hfs_brec_find
    - drm/etnaviv: add missing quirks for GC300
    - media: imx-jpeg: Disable useless interrupt to avoid kernel panic
    - brcmfmac: return error when getting invalid max_flowrings from dongle
    - wifi: ath9k: verify the expected usb_endpoints are present
    - wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out
    - ASoC: codecs: rt298: Add quirk for KBL-R RVP platform
    - ASoC: Intel: avs: Add quirk for KBL-R RVP platform
    - ipmi: fix memleak when unload ipmi driver
    - wifi: ath10k: Delay the unmapping of the buffer
    - openvswitch: Use kmalloc_size_roundup() to match ksize() usage
    - bnx2: Use kmalloc_size_roundup() to match ksize() usage
    - drm/amd/display: skip commit minimal transition state
    - drm/amd/display: prevent memory leak
    - drm/edid: add a quirk for two LG monitors to get them to work on 10bpc
    - Revert "drm/amd/display: Limit max DSC target bpp for specific monitors"
    - drm/rockchip: use pm_runtime_resume_and_get() instead of
      pm_runtime_get_sync()
    - blk-mq: avoid double ->queue_rq() because of early timeout
    - HID: apple: fix key translations where multiple quirks attempt to translate
      the same key
    - HID: apple: enable APPLE_ISO_TILDE_QUIRK for the keyboards of Macs with the
      T2 chip
    - wifi: ath11k: Fix qmi_msg_handler data structure initialization
    - qed (gcc13): use u16 for fid to be big enough
    - drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
    - bpf: make sure skb->len != 0 when redirecting to a tunneling device
    - net: ethernet: ti: Fix return type of netcp_ndo_start_xmit()
    - hamradio: baycom_epp: Fix return type of baycom_send_packet()
    - wifi: brcmfmac: Fix potential shift-out-of-bounds in
      brcmf_fw_alloc_request()
    - wifi: brcmfmac: Fix potential NULL pointer dereference in
      'brcmf_c_preinit_dcmds()'
    - HID: input: do not query XP-PEN Deco LW battery
    - HID: uclogic: Add support for XP-PEN Deco LW
    - igb: Do not free q_vector unless new one was allocated
    - drm/amdgpu: Fix type of second parameter in trans_msg() callback
    - drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback
    - s390/ctcm: Fix return type of ctc{mp,}m_tx()
    - s390/netiucv: Fix return type of netiucv_tx()
    - s390/lcs: Fix return type of lcs_start_xmit()
    - drm/amd/display: Use min transition for SubVP into MPO
    - drm/amd/display: Disable DRR actions during state commit
    - drm/msm: Use drm_mode_copy()
    - drm/rockchip: Use drm_mode_copy()
    - drm/sti: Use drm_mode_copy()
    - drm/mediatek: Fix return type of mtk_hdmi_bridge_mode_valid()
    - drivers/md/md-bitmap: check the return value of md_bitmap_get_counter()
    - md/raid0, raid10: Don't set discard sectors for request queue
    - md/raid1: stop mdx_raid1 thread when raid1 array run failed
    - drm/amd/display: Workaround to increase phantom pipe vactive in pipesplit
    - drm/amd/display: fix array index out of bound error in bios parser
    - nvme-auth: don't override ctrl keys before validation
    - net: add atomic_long_t to net_device_stats fields
    - ipv6/sit: use DEV_STATS_INC() to avoid data-races
    - mrp: introduce active flags to prevent UAF when applicant uninit
    - net: ethernet: mtk_eth_soc: drop packets to WDMA if the ring is full
    - bpf/verifier: Use kmalloc_size_roundup() to match ksize() usage
    - ppp: associate skb with a device at tx
    - drm/amd/display: Fix display corruption w/ VSR enable
    - bpf: Fix a BTF_ID_LIST bug with CONFIG_DEBUG_INFO_BTF not set
    - bpf: Prevent decl_tag from being referenced in func_proto arg
    - ethtool: avoiding integer overflow in ethtool_phys_id()
    - media: dvb-frontends: fix leak of memory fw
    - media: dvbdev: adopts refcnt to avoid UAF
    - media: dvb-usb: fix memory leak in dvb_usb_adapter_init()
    - media: mediatek: vcodec: Can't set dst buffer to done when lat decode error
    - blk-mq: fix possible memleak when register 'hctx' failed
    - ALSA: usb-audio: Add quirk for Tascam Model 12
    - drm/amdgpu: Fix potential double free and null pointer dereference
    - drm/amd/display: Use the largest vready_offset in pipe group
    - drm/amd/display: Fix DTBCLK disable requests and SRC_SEL programming
    - ASoC: amd: yc: Add Xiaomi Redmi Book Pro 14 2022 into DMI table
    - libbpf: Avoid enum forward-declarations in public API in C++ mode
    - regulator: core: fix use_count leakage when handling boot-on
    - wifi: mt76: do not run mt76u_status_worker if the device is not running
    - hwmon: (nct6775) add ASUS CROSSHAIR VIII/TUF/ProArt B550M
    - selftests/bpf: Fix conflicts with built-in functions in bpf_iter_ksym
    - nfs: fix possible null-ptr-deref when parsing param
    - mmc: f-sdh30: Add quirks for broken timeout clock capability
    - mmc: renesas_sdhi: add quirk for broken register layout
    - mmc: renesas_sdhi: better reset from HS400 mode
    - mmc: sdhci-tegra: Issue CMD and DAT resets together
    - media: si470x: Fix use-after-free in si470x_int_in_callback()
    - clk: st: Fix memory leak in st_of_quadfs_setup()
    - regulator: core: Use different devices for resource allocation and DT lookup
    - ice: synchronize the misc IRQ when tearing down Tx tracker
    - Bluetooth: hci_bcm: Add CYW4373A0 support
    - Bluetooth: Add quirk to disable extended scanning
    - Bluetooth: Add quirk to disable MWS Transport Configuration
    - regulator: core: Fix resolve supply lookup issue
    - crypto: hisilicon/hpre - fix resource leak in remove process
    - scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs
    - scsi: ufs: Reduce the START STOP UNIT timeout
    - crypto: hisilicon/qm - increase the memory of local variables
    - Revert "PCI: Clear PCI_STATUS when setting up device"
    - scsi: elx: libefc: Fix second parameter type in state callbacks
    - hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()
    - scsi: smartpqi: Add new controller PCI IDs
    - scsi: smartpqi: Correct device removal for multi-actuator devices
    - drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid()
    - drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid()
    - scsi: target: iscsi: Fix a race condition between login_work and the login
      thread
    - orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string()
    - orangefs: Fix kmemleak in orangefs_sysfs_init()
    - orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init()
    - hwmon: (jc42) Fix missing unlock on error in jc42_write()
    - ASoC: sof_es8336: fix possible use-after-free in sof_es8336_remove()
    - ASoC: Intel: Skylake: Fix driver hang during shutdown
    - ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in
      mt8173_rt5650_rt5514_dev_probe()
    - ASoC: audio-graph-card: fix refcount leak of cpu_ep in
      __graph_for_each_link()
    - ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in
      rockchip_pdm_runtime_resume()
    - ASoC: mediatek: mt8183: fix refcount leak in
      mt8183_mt6358_ts3a227_max98357_dev_probe()
    - ALSA: hda/hdmi: fix i915 silent stream programming flow
    - ALSA: hda/hdmi: set default audio parameters for KAE silent-stream
    - ALSA: hda/hdmi: fix stream-id config keep-alive for rt suspend
    - ASoC: wm8994: Fix potential deadlock
    - ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in
      rk_spdif_runtime_resume()
    - ASoC: rt5670: Remove unbalanced pm_runtime_put()
    - drm/i915/display: Don't disable DDI/Transcoder when setting phy test pattern
    - LoadPin: Ignore the "contents" argument of the LSM hooks
    - lkdtm: cfi: Make PAC test work with GCC 7 and 8
    - pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion
    - drm/amd/pm: avoid large variable on kernel stack
    - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct
      values in perf_quiet_option()
    - perf tools: Make quiet mode consistent between tools
    - perf probe: Check -v and -q options in the right place
    - MIPS: ralink: mt7621: avoid to init common ralink reset controller
    - perf test: Fix "all PMU test" to skip parametrized events
    - afs: Fix lost servers_outstanding count
    - cfi: Fix CFI failure with KASAN
    - pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES
    - ima: Simplify ima_lsm_copy_rule
    - Input: iqs7222 - drop unused device node references
    - Input: iqs7222 - report malformed properties
    - Input: iqs7222 - add support for IQS7222A v1.13+
    - dt-bindings: input: iqs7222: Reduce 'linux,code' to optional
    - dt-bindings: input: iqs7222: Correct minimum slider size
    - dt-bindings: input: iqs7222: Add support for IQS7222A v1.13+
    - ALSA: usb-audio: Workaround for XRUN at prepare
    - ALSA: usb-audio: add the quirk for KT0206 device
    - ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB
    - ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list
    - HID: logitech-hidpp: Guard FF init code against non-USB devices
    - usb: cdnsp: fix lack of ZLP for ep0
    - usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq
    - arm64: dts: qcom: sm6350: fix USB-DP PHY registers
    - arm64: dts: qcom: sm8250: fix USB-DP PHY registers
    - dt-bindings: clocks: imx8mp: Add ID for usb suspend clock
    - clk: imx: imx8mp: add shared clk gate for usb suspend clk
    - usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode
    - usb: dwc3: core: defer probe on ulpi_read_id timeout
    - usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init
    - xhci: Prevent infinite loop in transaction errors recovery for streams
    - HID: wacom: Ensure bootloader PID is usable in hidraw mode
    - HID: mcp2221: don't connect hidraw
    - loop: Fix the max_loop commandline argument treatment when it is set to 0
    - 9p: set req refcount to zero to avoid uninitialized usage
    - security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6
    - reiserfs: Add missing calls to reiserfs_security_free()
    - iio: fix memory leak in iio_device_register_eventset()
    - iio: adc: ad_sigma_delta: do not use internal iio_dev lock
    - iio: adc128s052: add proper .data members in adc128_of_match table
    - iio: addac: ad74413r: fix integer promotion bug in
      ad74413_get_input_current_offset()
    - regulator: core: fix deadlock on regulator enable
    - spi: fsl_spi: Don't change speed while chipselect is active
    - floppy: Fix memory leak in do_floppy_init()
    - gcov: add support for checksum field
    - test_maple_tree: add test for mas_spanning_rebalance() on insufficient data
    - maple_tree: fix mas_spanning_rebalance() on insufficient data
    - fbdev: fbcon: release buffer when fbcon_do_set_font() failed
    - ovl: fix use inode directly in rcu-walk mode
    - btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range
    - mm/gup: disallow FOLL_FORCE|FOLL_WRITE on hugetlb mappings
    - scsi: qla2xxx: Fix crash when I/O abort times out
    - blk-iolatency: Fix memory leak on add_disk() failures
    - io_uring/net: introduce IORING_SEND_ZC_REPORT_USAGE flag
    - io_uring: add completion locking for iopoll
    - io_uring: dont remove file from msg_ring reqs
    - io_uring: improve io_double_lock_ctx fail handling
    - io_uring/net: ensure compat import handlers clear free_iov
    - io_uring/net: fix cleanup after recycle
    - io_uring: protect cq_timeouts with timeout_lock
    - io_uring: remove iopoll spinlock
    - net: stmmac: fix errno when create_singlethread_workqueue() fails
    - media: dvbdev: fix build warning due to comments
    - media: dvbdev: fix refcnt bug
    - drm/amd/display: revert Disable DRR actions during state commit
    - mfd: qcom_rpm: Use devm_of_platform_populate() to simplify code
    - pwm: tegra: Fix 32 bit build
    - Linux 6.1.2
  * Miscellaneous Ubuntu changes
    - [Packaging] annotations: remove configs that are undefined across all
      arches/flavours
    - [Config] update annotations after applying v6.1.2 stable updates
    - [Packaging] abi-check: ignore failures when abi check is skipped
  * Miscellaneous upstream changes
    - Revert "UBUNTU: [Packaging] Support skipped dkms modules"

-- Timo Aaltonen <timo.aaltonen@canonical.com>  Tue, 24 Jan 2023 18:58:44 +0200

Changed in linux-oem-6.1 (Ubuntu Jammy):
status:	Fix Committed → Fix Released

Report a bug

This report contains Public information

Everyone can see this information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.

Ubuntulinux-oem-6.1 package