This bug was fixed in the package linux - 5.15.0-57.63 --------------- linux (5.15.0-57.63) jammy; urgency=medium * jammy/linux: 5.15.0-57.63 -proposed tracker (LP: #1997737) * Packaging resync (LP: #1786013) - [Packaging] update variants - debian/dkms-versions -- update from kernel-versions (main/2022.11.14) * Expose built-in trusted and revoked certificates (LP: #1996892) - [Packaging] Expose built-in trusted and revoked certificates * TEE Support for CCP driver (LP: #1991608) - crypto: ccp: Add support for TEE for PCI ID 0x14CA * alsa: soc: the kernel print UBSAN calltrace on the machine with cs35l41 codec (LP: #1996121) - ASoC: cs35l41: Add one more variable in the debug log - ASoC: cs35l41: Fix an out-of-bounds access in otp_packed_element_t * Fix ath11k deadlock on WCN6855 (LP: #1995041) - wifi: ath11k: avoid deadlock during regulatory update in ath11k_regd_update() * [UBUNTU 20.04] boot: Add s390x secure boot trailer (LP: #1996071) - s390/boot: add secure boot trailer * Fix rfkill causing soft blocked wifi (LP: #1996198) - platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi * Fix Thunderbolt device hotplug fail when connect via thunderbolt dock (LP: #1991366) - PCI: Fix used_buses calculation in pci_scan_child_bus_extend() - PCI: Pass available buses even if the bridge is already configured - PCI: Move pci_assign_unassigned_root_bus_resources() - PCI: Distribute available resources for root buses, too - PCI: Fix whitespace and indentation - PCI: Fix typo in pci_scan_child_bus_extend() * md: Replace snprintf with scnprintf (LP: #1993315) - md: Replace snprintf with scnprintf * input/keyboard: the keyboard on some Asus laptops can't work (LP: #1992266) - ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA - ACPI: resource: Add ASUS model S5402ZA to quirks * Fix Turbostat is not working for fam: 6 model: 191: stepping: 2 CPU (LP: #1991365) - tools/power turbostat: Add support for RPL-S * pcieport 0000:00:1b.0: PCIe Bus Error: severity=Uncorrected (Non-Fatal), type=Transaction Layer, (Requester ID) (LP: #1988797) - PCI/PTM: Cache PTM Capability offset - PCI/PTM: Add pci_upstream_ptm() helper - PCI/PTM: Separate configuration and enable - PCI/PTM: Add pci_suspend_ptm() and pci_resume_ptm() - PCI/PTM: Move pci_ptm_info() body into its only caller - PCI/PTM: Preserve RsvdP bits in PTM Control register - PCI/PTM: Reorder functions in logical order - PCI/PTM: Consolidate PTM interface declarations - PCI/PM: Always disable PTM for all devices during suspend - PCI/PM: Simplify pci_pm_suspend_noirq() * Fix RPL-S support on powercap/intel_rapl (LP: #1990161) - x86/cpu: Drop spurious underscore from RAPTOR_LAKE #define - x86/cpu: Add new Alderlake and Raptorlake CPU model numbers - x86/cpu: Add new Raptor Lake CPU model number - powercap: intel_rapl: add support for RaptorLake - powercap: intel_rapl: Add support for RAPTORLAKE_P - powercap: intel_rapl: Add support for RAPTORLAKE_S * AMD Yellow Carp system hang on HDMI plug in/out over HP hook2 docking (LP: #1991974) - drm/amd/display: Fix for link encoder access for MST. - drm/amd/display: Fix MST link encoder availability check. - drm/amd/display: FEC configuration for dpia links - drm/amd/display: FEC configuration for dpia links in MST mode - drm/amd/display: Add work around for tunneled MST. * Jammy update: v5.15.74 upstream stable release (LP: #1995638) - nilfs2: fix use-after-free bug of struct nilfs_root - nilfs2: fix leak of nilfs_root in case of writer thread creation failure - nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure - ceph: don't truncate file in atomic_open - random: restore O_NONBLOCK support - random: clamp credited irq bits to maximum mixed - ALSA: hda: Fix position reporting on Poulsbo - efi: Correct Macmini DMI match in uefi cert quirk - USB: serial: qcserial: add new usb-id for Dell branded EM7455 - Revert "powerpc/rtas: Implement reentrant rtas call" - Revert "crypto: qat - reduce size of mapped region" - random: avoid reading two cache lines on irq randomness - random: use expired timer rather than wq for mixing fast pool - Input: xpad - add supported devices as contributed on github - Input: xpad - fix wireless 360 controller breaking after suspend - misc: pci_endpoint_test: Aggregate params checking for xfer - misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic - Linux 5.15.74 * Jammy update: v5.15.73 upstream stable release (LP: #1995637) - Makefile.extrawarn: Move -Wcast-function-type-strict to W=1 - docs: update mediator information in CoC docs - xsk: Inherit need_wakeup flag for shared sockets - mm: gup: fix the fast GUP race against THP collapse - powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush - firmware: arm_scmi: Improve checks in the info_get operations - firmware: arm_scmi: Harden accesses to the sensor domains - firmware: arm_scmi: Add SCMI PM driver remove routine - dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling - dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property - dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure - ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer - scsi: qedf: Fix a UAF bug in __qedf_probe() - net/ieee802154: fix uninit value bug in dgram_sendmsg - net: marvell: prestera: add support for for Aldrin2 - ALSA: hda/hdmi: Fix the converter reuse for the silent stream - um: Cleanup syscall_handler_t cast in syscalls_32.h - um: Cleanup compiler warning in arch/x86/um/tls_32.c - arch: um: Mark the stack non-executable to fix a binutils warning - net: atlantic: fix potential memory leak in aq_ndev_close() - drm/amd/display: Fix double cursor on non-video RGB MPO - drm/amd/display: Assume an LTTPR is always present on fixed_vs links - drm/amd/display: update gamut remap if plane has changed - drm/amd/display: skip audio setup when audio stream is enabled - mmc: core: Replace with already defined values for readability - mmc: core: Terminate infinite loop in SD-UHS voltage switch - perf parse-events: Identify broken modifiers - mm/huge_memory: minor cleanup for split_huge_pages_all - mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all() - wifi: cfg80211: fix MCS divisor value - net/mlx5: Disable irq when locking lag_lock - usb: mon: make mmapped memory read only - USB: serial: ftdi_sio: fix 300 bps rate for SIO - rpmsg: qcom: glink: replace strncpy() with strscpy_pad() - Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5" - Linux 5.15.73 * Jammy update: v5.15.72 upstream stable release (LP: #1995517) - ALSA: hda: Do disconnect jacks at codec unbind - ALSA: hda: Fix hang at HD-audio codec unbinding due to refcount saturation - ALSA: hda: Fix Nvidia dp infoframe - cgroup: reduce dependency on cgroup_mutex - cgroup: cgroup_get_from_id() must check the looked-up kn is a directory - uas: add no-uas quirk for Hiksemi usb_disk - usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS - uas: ignore UAS for Thinkplus chips - usb: typec: ucsi: Remove incorrect warning - thunderbolt: Explicitly reset plug events delay back to USB4 spec value - net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455 - Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address - can: c_can: don't cache TX messages for C_CAN cores - clk: ingenic-tcu: Properly enable registers before accessing timers - x86/sgx: Do not fail on incomplete sanitization on premature stop of ksgxd - ARM: dts: integrator: Tag PCI host with device_type - ntfs: fix BUG_ON in ntfs_lookup_inode_by_name() - mm/damon/dbgfs: fix memory leak when using debugfs_lookup() - net: mt7531: only do PLL once after the reset - Revert "firmware: arm_scmi: Add clock management to the SCMI power domain" - drm/i915/gt: Restrict forced preemption to the active context - drm/amdgpu: Add amdgpu suspend-resume code path under SRIOV - vduse: prevent uninitialized memory accesses - libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205 - mmc: moxart: fix 4-bit bus width and remove 8-bit bus width - mmc: hsq: Fix data stomping during mmc recovery - mm/page_alloc: fix race condition between build_all_zonelists and page allocation - mm: prevent page_frag_alloc() from corrupting the memory - mm: fix dereferencing possible ERR_PTR - mm/migrate_device.c: flush TLB while holding PTL - mm: fix madivse_pageout mishandling on non-LRU page - mm,hwpoison: check mm when killing accessing process - media: dvb_vb2: fix possible out of bound access - media: rkvdec: Disable H.264 error detection - media: v4l2-compat-ioctl32.c: zero buffer passed to v4l2_compat_get_array_args() - swiotlb: max mapping size takes min align mask into account - ARM: dts: am33xx: Fix MMCHS0 dma properties - reset: imx7: Fix the iMX8MP PCIe PHY PERST support - ARM: dts: am5748: keep usb4_tm disabled - soc: sunxi: sram: Actually claim SRAM regions - soc: sunxi: sram: Prevent the driver from being unbound - soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource() - soc: sunxi: sram: Fix probe function ordering issues - soc: sunxi: sram: Fix debugfs info for A64 SRAM C - ASoC: imx-card: Fix refcount issue with of_node_put - arm64: dts: qcom: sm8350: fix UFS PHY serdes size - ASoC: tas2770: Reinit regcache on reset - drm/bridge: lt8912b: add vsync hsync - drm/bridge: lt8912b: set hdmi or dvi mode - drm/bridge: lt8912b: fix corrupted image output - Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time" - Input: melfas_mip4 - fix return value check in mip4_probe() - gpio: mvebu: Fix check for pwm support on non-A8K platforms - usbnet: Fix memory leak in usbnet_disconnect() - net: sched: act_ct: fix possible refcount leak in tcf_ct_init() - cxgb4: fix missing unlock on ETHOFLD desc collect fail path - net/mlxbf_gige: Fix an IS_ERR() vs NULL bug in mlxbf_gige_mdio_probe - nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices - wifi: mac80211: fix regression with non-QoS drivers - net: stmmac: power up/down serdes in stmmac_open/release - net: phy: Don't WARN for PHY_UP state in mdio_bus_phy_resume() - selftests: Fix the if conditions of in test_extra_filter() - vdpa/ifcvf: fix the calculation of queuepair - fs: split off setxattr_copy and do_setxattr function from setxattr - clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks - clk: iproc: Do not rely on node name for correct PLL setup - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest - x86/alternative: Fix race in try_get_desc() - drm/i915/gem: Really move i915_gem_context.link under ref protection - Linux 5.15.72 * Jammy update: v5.15.71 upstream stable release (LP: #1995420) - drm/amdgpu: Separate vf2pf work item init from virt data exchange - drm/amdgpu: make sure to init common IP before gmc - staging: r8188eu: Remove support for devices with 8188FU chipset (0bda:f179) - staging: r8188eu: Add Rosewill USB-N150 Nano to device tables - usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind - usb: dwc3: Issue core soft reset before enabling run/stop - usb: dwc3: gadget: Prevent repeat pullup() - usb: dwc3: gadget: Refactor pullup() - usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup() - usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop - usb: add quirks for Lenovo OneLink+ Dock - usb: gadget: udc-xilinx: replace memcpy with memcpy_toio - Revert "usb: add quirks for Lenovo OneLink+ Dock" - Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio" - drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES - USB: core: Fix RST error in hub.c - USB: serial: option: add Quectel BG95 0x0203 composition - USB: serial: option: add Quectel RM520N - ALSA: core: Fix double-free at snd_card_new() - ALSA: hda/tegra: set depop delay for tegra - ALSA: hda: add Intel 5 Series / 3400 PCI DID - ALSA: hda/realtek: Add quirk for Huawei WRT-WX9 - ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop - ALSA: hda/realtek: Re-arrange quirk table entries - ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack - ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack - ALSA: hda/realtek: Add quirk for ASUS GA503R laptop - ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop - iommu/vt-d: Check correct capability for sagaw determination - btrfs: fix hang during unmount when stopping block group reclaim worker - btrfs: fix hang during unmount when stopping a space reclaim worker - media: flexcop-usb: fix endpoint type check - usb: dwc3: core: leave default DMA if the controller does not support 64-bit DMA - efi: x86: Wipe setup_data on pure EFI boot - efi: libstub: check Shim mode using MokSBStateRT - wifi: mt76: fix reading current per-tid starting sequence number for aggregation - gpio: mockup: fix NULL pointer dereference when removing debugfs - gpio: mockup: Fix potential resource leakage when register a chip - gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully - riscv: fix a nasty sigreturn bug... - kasan: call kasan_malloc() from __kmalloc_*track_caller() - can: flexcan: flexcan_mailbox_read() fix return value for drop = true - net: mana: Add rmb after checking owner bits - mm/slub: fix to return errno if kmalloc() fails - mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context. - KVM: x86: Inject #UD on emulated XSETBV if XSAVES isn't enabled - arm64: topology: fix possible overflow in amu_fie_setup() - vmlinux.lds.h: CFI: Reduce alignment of jump-table to function alignment - xfs: reorder iunlink remove operation in xfs_ifree - xfs: fix xfs_ifree() error handling to not leak perag ref - xfs: validate inode fork size against fork format - firmware: arm_scmi: Harden accesses to the reset domains - firmware: arm_scmi: Fix the asynchronous reset requests - arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob - arm64: dts: rockchip: Fix typo in lisense text for PX30.Core - drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks - arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz - dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get() - arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma - netfilter: nf_conntrack_sip: fix ct_sip_walk_headers - netfilter: nf_conntrack_irc: Tighten matching on DCC message - netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() - ice: Don't double unplug aux on peer initiated reset - iavf: Fix cached head and tail value for iavf_get_tx_pending - ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header - net: core: fix flow symmetric hash - net: phy: aquantia: wait for the suspend/resume operations to finish - scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts() - scsi: mpt3sas: Fix return value check of dma_get_required_mask() - net: bonding: Share lacpdu_mcast_addr definition - net: bonding: Unsync device addresses on ndo_stop - net: team: Unsync device addresses on ndo_stop - drm/panel: simple: Fix innolux_g121i1_l01 bus_format - MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko - MIPS: Loongson32: Fix PHY-mode being left unspecified - um: fix default console kernel parameter - iavf: Fix bad page state - mlxbf_gige: clear MDIO gateway lock after read - i40e: Fix set max_tx_rate when it is lower than 1 Mbps - sfc: fix TX channel offset when using legacy interrupts - sfc: fix null pointer dereference in efx_hard_start_xmit - drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled - drm/hisilicon: Add depends on MMU - of: mdio: Add of_node_put() when breaking out of for_each_xx - net: ipa: properly limit modem routing table use - wireguard: ratelimiter: disable timings test by default - wireguard: netlink: avoid variable-sized memcpy on sockaddr - net: enetc: move enetc_set_psfp() out of the common enetc_set_features() - net: enetc: deny offload of tc-based TSN features on VF interfaces - net/sched: taprio: avoid disabling offload when it was never enabled - net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs - netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain() - netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain() - netfilter: ebtables: fix memory leak when blob is malformed - net: ravb: Fix PHY state warning splat during system resume - net: sh_eth: Fix PHY state warning splat during system resume - can: gs_usb: gs_can_open(): fix race dev->can.state condition - perf stat: Fix BPF program section name - perf jit: Include program header in ELF files - perf kcore_copy: Do not check /proc/modules is unchanged - perf tools: Honor namespace when synthesizing build-ids - drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff() - net/smc: Stop the CLC flow if no link to map buffers on - bonding: fix NULL deref in bond_rr_gen_slave_id - net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD - net: sched: fix possible refcount leak in tc_new_tfilter() - bnxt: prevent skb UAF after handing over to PTP worker - selftests: forwarding: add shebang for sch_red.sh - KVM: x86/mmu: Fold rmap_recycle into rmap_add - serial: fsl_lpuart: Reset prior to registration - serial: Create uart_xmit_advance() - serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting - serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting - s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup - drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV - Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region - drm/gma500: Fix BUG: sleeping function called from invalid context errors - drm/amd/pm: disable BACO entry/exit completely on several sienna cichlid cards - drm/amdgpu: use dirty framebuffer helper - drm/amd/display: Limit user regamma to a valid value - drm/amd/display: Reduce number of arguments of dml31's CalculateWatermarksAndDRAMSpeedChangeSupport() - drm/amd/display: Reduce number of arguments of dml31's CalculateFlipSchedule() - drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage - drm/rockchip: Fix return type of cdn_dp_connector_mode_valid - fsdax: Fix infinite loop in dax_iomap_rw() - workqueue: don't skip lockdep work dependency in cancel_work_sync() - i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible - i2c: mlxbf: incorrect base address passed during io write - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() - i2c: mlxbf: Fix frequency calculation - drm/amdgpu: don't register a dirty callback for non-atomic - NFSv4: Fixes for nfs4_inode_return_delegation() - devdax: Fix soft-reservation memory description - ext4: make directory inode spreading reflect flexbg size - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 - ext4: limit the number of retries after discarding preallocations blocks - ext4: make mballoc try target group first even with mb_optimize_scan - ext4: avoid unnecessary spreading of allocations among groups - ext4: use locality group preallocation for small closed files - Linux 5.15.71 - Revert "drm/amdgpu: use dirty framebuffer helper" * Jammy update: v5.15.70 upstream stable release (LP: #1995415) - drm/tegra: vic: Fix build warning when CONFIG_PM=n - serial: atmel: remove redundant assignment in rs485_config - tty: serial: atmel: Preserve previous USART mode if RS485 disabled - of: fdt: fix off-by-one error in unflatten_dt_nodes() - pinctrl: qcom: sc8180x: Fix gpio_wakeirq_map - pinctrl: qcom: sc8180x: Fix wrong pin numbers - pinctrl: rockchip: Enhance support for IRQ_TYPE_EDGE_BOTH - pinctrl: sunxi: Fix name for A100 R_PIO - NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0 - gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx - drm/meson: Correct OSD1 global alpha value - drm/meson: Fix OSD1 RGB to YCbCr coefficient - block: blk_queue_enter() / __bio_queue_enter() must return -EAGAIN for nowait - parisc: ccio-dma: Add missing iounmap in error path in ccio_probe() - of/device: Fix up of_dma_configure_id() stub - cifs: revalidate mapping when doing direct writes - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM - cifs: always initialize struct msghdr smb_msg completely - parisc: Allow CONFIG_64BIT with ARCH=parisc - tools/include/uapi: Fix for parisc and xtensa - drm/amdgpu: Don't enable LTR if not supported - drm/amdgpu: move nbio ih_doorbell_range() into ih code for vega - drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega - binder: remove inaccurate mmap_assert_locked() - arm64: dts: juno: Add missing MHU secure-irq - ASoC: nau8824: Fix semaphore unbalance at error paths - regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe() - scsi: lpfc: Return DID_TRANSPORT_DISRUPTED instead of DID_REQUEUE - rxrpc: Fix local destruction being repeated - rxrpc: Fix calc of resend age - wifi: mac80211_hwsim: check length for virtio packets - ALSA: hda/sigmatel: Keep power up while beep is enabled - ALSA: hda/tegra: Align BDL entry to 4KB boundary - net: usb: qmi_wwan: add Quectel RM520N - afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked - MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping() - drm/panfrost: devfreq: set opp to the recommended one to configure regulator - mksysmap: Fix the mismatch of 'L0' symbols in System.map - video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write - net: Find dst with sk's xfrm policy not ctl_sk - KVM: SEV: add cache flush to solve SEV cache incoherency issues - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() - ALSA: hda/sigmatel: Fix unused variable warning for beep power change - Linux 5.15.70 * Jammy update: v5.15.69 upstream stable release (LP: #1993010) - NFS: Fix WARN_ON due to unionization of nfs_inode.nrequests - ACPI: resource: skip IRQ override on AMD Zen platforms - ARM: dts: imx: align SPI NOR node name with dtschema - ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible - ARM: dts: at91: fix low limit for CPU regulator - ARM: dts: at91: sama7g5ek: specify proper regulator output ranges - lockdep: Fix -Wunused-parameter for _THIS_IP_ - x86/mm: Force-inline __phys_addr_nodebug() - task_stack, x86/cea: Force-inline stack helpers - tracing: hold caller_addr to hardirq_{enable,disable}_ip - tracefs: Only clobber mode/uid/gid on remount if asked - iommu/vt-d: Fix kdump kernels boot failure with scalable mode - Input: goodix - add support for GT1158 - platform/surface: aggregator_registry: Add support for Surface Laptop Go 2 - drm/msm/rd: Fix FIFO-full deadlock - dt-bindings: iio: gyroscope: bosch,bmg160: correct number of pins - HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo - hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message - tg3: Disable tg3 device on system reboot to avoid triggering AER - gpio: mockup: remove gpio debugfs when remove device - ieee802154: cc2520: add rc code in cc2520_tx() - Input: iforce - add support for Boeder Force Feedback Wheel - nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() - drm/amd/amdgpu: skip ucode loading if ucode_size == 0 - net: dsa: hellcreek: Print warning only once - perf/arm_pmu_platform: fix tests for platform_get_irq() failure - platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes - usb: storage: Add ASUS <0x0b05:0x1932> to IGNORE_UAS - mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region() - soc: fsl: select FSL_GUTS driver for DPIO - usb: gadget: f_uac2: clean up some inconsistent indenting - usb: gadget: f_uac2: fix superspeed transfer - RDMA/irdma: Use s/g array in post send only when its valid - Input: goodix - add compatible string for GT1158 - Linux 5.15.69 * Jammy update: v5.15.68 upstream stable release (LP: #1993003) - net: wwan: iosm: remove pointless null check - efi: libstub: Disable struct randomization - efi: capsule-loader: Fix use-after-free in efi_capsule_write - wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() - fs: only do a memory barrier for the first set_buffer_uptodate() - Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()" - scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX - scsi: megaraid_sas: Fix double kfree() - drm/gem: Fix GEM handle release errors - drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini - drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. - drm/radeon: add a force flush to delay work when radeon - scsi: ufs: core: Reduce the power mode change timeout - Revert "parisc: Show error if wrong 32/64-bit compiler is being used" - parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() - parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines - arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level - netfilter: conntrack: work around exceeded receive window - cpufreq: check only freq_table in __resolve_freq() - net/core/skbuff: Check the return value of skb_copy_bits() - md: Flush workqueue md_rdev_misc_wq in md_alloc() - fbdev: fbcon: Destroy mutex on freeing struct fb_info - fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() - drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC - ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() - ALSA: aloop: Fix random zeros in capture data when using jiffies timer - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() - tracing: Fix to check event_mutex is held while accessing trigger list - btrfs: zoned: set pseudo max append zone limit in zone emulation mode - vfio/type1: Unpin zero pages - kprobes: Prohibit probes in gate area - debugfs: add debugfs_lookup_and_remove() - sched/debug: fix dentry leak in update_sched_domain_debugfs - drm/amd/display: fix memory leak when using debugfs_lookup() - nvmet: fix a use-after-free - scsi: mpt3sas: Fix use-after-free warning - scsi: lpfc: Add missing destroy_workqueue() in error path - NFS: Further optimisations for 'ls -l' - NFS: Save some space in the inode - NFS: Fix another fsync() issue after a server reboot - cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree - cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock - ASoC: qcom: sm8250: add missing module owner - RDMA/rtrs-clt: Use the right sg_cnt after ib_dma_map_sg - RDMA/rtrs-srv: Pass the correct number of entries for dma mapped SGL - ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node - soc: imx: gpcv2: Assert reset before ungating clock - regulator: core: Clean up on enable failure - tee: fix compiler warning in tee_shm_register() - RDMA/cma: Fix arguments order in net device validation - soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs - RDMA/hns: Fix supported page size - RDMA/hns: Fix wrong fixed value of qp->rq.wqe_shift - wifi: wilc1000: fix DMA on stack objects - ARM: at91: pm: fix self-refresh for sama7g5 - ARM: at91: pm: fix DDR recalibration when resuming from backup and self- refresh - ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges - ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges - ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time - ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time - netfilter: br_netfilter: Drop dst references before setting. - netfilter: nf_tables: clean up hook list when offload flags check fails - RDMA/srp: Set scmnd->result only when scmnd is not NULL - ALSA: usb-audio: Inform the delayed registration more properly - ALSA: usb-audio: Register card again for iface over delayed_register option - rxrpc: Fix ICMP/ICMP6 error handling - rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() - afs: Use the operation issue time instead of the reply time for callbacks - Revert "net: phy: meson-gxl: improve link-up behavior" - sch_sfb: Don't assume the skb is still around after enqueueing to child - tipc: fix shift wrapping bug in map_get() - net: introduce __skb_fill_page_desc_noacc - tcp: TX zerocopy should not sense pfmemalloc status - ice: use bitmap_free instead of devm_kfree - i40e: Fix kernel crash during module removal - iavf: Detach device during reset task - xen-netback: only remove 'hotplug-status' when the vif is actually destroyed - RDMA/siw: Pass a pointer to virt_to_page() - ipv6: sr: fix out-of-bounds read when setting HMAC data. - IB/core: Fix a nested dead lock as part of ODP flow - RDMA/mlx5: Set local port to one when accessing counters - erofs: fix pcluster use-after-free on UP platforms - nvme-tcp: fix UAF when detecting digest errors - nvme-tcp: fix regression that causes sporadic requests to time out - tcp: fix early ETIMEDOUT after spurious non-SACK RTO - nvmet: fix mar and mor off-by-one errors - RDMA/irdma: Report the correct max cqes from query device - RDMA/irdma: Return correct WC error for bind operation failure - RDMA/irdma: Report RNR NAK generation in device caps - sch_sfb: Also store skb len before calling child enqueue - perf script: Fix Cannot print 'iregs' field for hybrid systems - hwmon: (tps23861) fix byte order in resistance register - ASoC: mchp-spdiftx: remove references to mchp_i2s_caps - ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion - MIPS: loongson32: ls1c: Fix hang during startup - kbuild: disable header exports for UML in a straightforward way - i40e: Refactor tc mqprio checks - i40e: Fix ADQ rate limiting for PF - swiotlb: avoid potential left shift overflow - iommu/amd: use full 64-bit value in build_completion_wait() - s390/boot: fix absolute zero lowcore corruption on boot - hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined - hwmon: (mr75203) update pvt->v_num and vm_num to the actual number of used sensors - hwmon: (mr75203) fix voltage equation for negative source input - hwmon: (mr75203) fix multi-channel voltage reading - hwmon: (mr75203) enable polling for all VM channels - arm64/bti: Disable in kernel BTI when cross section thunks are broken - [Config] updateconfigs for ARM64_BTI_KERNEL - iommu/vt-d: Correctly calculate sagaw value of IOMMU - [Config] updateconfigs for ARM64_ERRATUM_2457168 - arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly - drm/bridge: display-connector: implement bus fmts callbacks - perf machine: Use path__join() to compose a path instead of snprintf(dir, '/', filename) - ARM: at91: ddr: remove CONFIG_SOC_SAMA7 dependency - Linux 5.15.68 * Jammy update: v5.15.67 upstream stable release (LP: #1991841) - Linux 5.15.67 * Jammy update: v5.15.66 upstream stable release (LP: #1991840) - drm/msm/dsi: fix the inconsistent indenting - drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4 - drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg - drm/msm/dsi: Fix number of regulators for SDM660 - platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask - iio: adc: mcp3911: make use of the sign bit - skmsg: Fix wrong last sg check in sk_msg_recvmsg() - bpf: Restrict bpf_sys_bpf to CAP_PERFMON - bpf, cgroup: Fix kernel BUG in purge_effective_progs - ieee802154/adf7242: defer destroy_workqueue call - drm/i915/backlight: extract backlight code to a separate file - drm/i915/display: avoid warnings when registering dual panel backlight - ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg - ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array - wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() - Revert "xhci: turn off port power in shutdown" - net: sparx5: fix handling uneven length packets in manual extraction - net: smsc911x: Stop and start PHY during suspend and resume - openvswitch: fix memory leak at failed datapath creation - net: dsa: xrs700x: Use irqsave variant for u64 stats update - net: sched: tbf: don't call qdisc_put() while holding tree lock - net/sched: fix netdevice reference leaks in attach_default_qdiscs() - ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler - mlxbf_gige: compute MDIO period based on i1clk - kcm: fix strp_init() order and cleanup - sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb - tcp: annotate data-race around challenge_timestamp - Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb" - net/smc: Remove redundant refcount increase - soundwire: qcom: fix device status array range - serial: fsl_lpuart: RS485 RTS polariy is inverse - staging: rtl8712: fix use after free bugs - staging: r8188eu: add firmware dependency - powerpc: align syscall table for ppc32 - vt: Clear selection before changing the font - musb: fix USB_MUSB_TUSB6010 dependency - tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete - Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag - iio: ad7292: Prevent regulator double disable - iio: adc: mcp3911: use correct formula for AD conversion - misc: fastrpc: fix memory corruption on probe - misc: fastrpc: fix memory corruption on open - USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id - mmc: core: Fix UHS-I SD 1.8V workaround branch - mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure - binder: fix UAF of ref->proc caused by race condition - binder: fix alloc->vma_vm_mm null-ptr dereference - cifs: fix small mempool leak in SMB2_negotiate() - KVM: VMX: Heed the 'msr' argument in msr_write_intercepted() - drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported" - clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops - Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops" - clk: core: Fix runtime PM sequence in clk_core_unprepare() - Input: rk805-pwrkey - fix module autoloading - clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate - clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc() - clk: bcm: rpi: Prevent out-of-bounds access - clk: bcm: rpi: Add missing newline - hwmon: (gpio-fan) Fix array out of bounds access - gpio: pca953x: Add mutex_lock for regcache sync in PM - KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES - xen/grants: prevent integer overflow in gnttab_dma_alloc_pages() - mm: pagewalk: Fix race between unmap and page walker - xen-blkback: Advertise feature-persistent as user requested - xen-blkfront: Advertise feature-persistent as user requested - xen-blkfront: Cache feature_persistent value before advertisement - thunderbolt: Use the actual buffer in tb_async_error() - usb: dwc3: pci: Add support for Intel Raptor Lake - media: mceusb: Use new usb_control_msg_*() routines - xhci: Add grace period after xHC start to prevent premature runtime suspend. - USB: serial: cp210x: add Decagon UCA device id - USB: serial: option: add support for OPPO R11 diag port - USB: serial: option: add Quectel EM060K modem - USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode - usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles - usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device - usb: typec: tcpm: Return ENOTSUPP for power supply prop writes - usb: dwc2: fix wrong order of phy_power_on and phy_init - usb: cdns3: fix issue with rearming ISO OUT endpoint - usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer - USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) - usb-storage: Add ignore-residue quirk for NXP PN7462AU - s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages - s390: fix nospec table alignments - USB: core: Prevent nested device-reset calls - usb: xhci-mtk: relax TT periodic bandwidth allocation - usb: xhci-mtk: fix bandwidth release issue - usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS - driver core: Don't probe devices after bus_type.match() probe deferral - wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected - wifi: mac80211: Fix UAF in ieee80211_scan_rx() - net: Use u64_stats_fetch_begin_irq() for stats fetch. - net: mac802154: Fix a condition in the receive path - ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298 - ALSA: seq: oss: Fix data-race for max_midi_devs access - ALSA: seq: Fix data-race at module auto-loading - drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk - drm/i915: Skip wm/ddb readout for disabled pipes - tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf() - kbuild: Add skip_encoding_btf_enum64 option to pahole - usb: dwc3: fix PHY disable sequence - usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup - usb: dwc3: disable USB core PHY management - USB: serial: ch341: fix lost character on LCR updates - USB: serial: ch341: fix disabled rx timer on older devices - Linux 5.15.66 * Jammy update: v5.15.65 upstream stable release (LP: #1991831) - mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() - drm/bridge: Add stubs for devm_drm_of_get_bridge when OF is disabled - ACPI: thermal: drop an always true check - drm/vc4: hdmi: Rework power up - drm/vc4: hdmi: Depends on CONFIG_PM - firmware: tegra: bpmp: Do only aligned access to IPC memory area - crypto: lib - remove unneeded selection of XOR_BLOCKS - Drivers: hv: balloon: Support status report for larger page sizes - mm/hugetlb: avoid corrupting page->mapping in hugetlb_mcopy_atomic_pte - [Config] updateconfigs for ARM64_ERRATUM_2441009 - arm64: errata: Add Cortex-A510 to the repeat tlbi list - io_uring: Remove unused function req_ref_put - kbuild: Fix include path in scripts/Makefile.modpost - Bluetooth: L2CAP: Fix build errors in some archs - HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report - udmabuf: Set the DMA mask for the udmabuf device (v2) - media: pvrusb2: fix memory leak in pvr_probe - HID: hidraw: fix memory leak in hidraw_release() - net: fix refcount bug in sk_psock_get (2) - fbdev: fb_pm2fb: Avoid potential divide by zero error - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead - bpf: Don't redirect packets with invalid pkt_len - ALSA: usb-audio: Add quirk for LH Labs Geek Out HD Audio 1V5 - HID: add Lenovo Yoga C630 battery quirk - HID: AMD_SFH: Add a DMI quirk entry for Chromebooks - HID: asus: ROG NKey: Ignore portion of 0x5a report - HID: thrustmaster: Add sparco wheel and fix array length - drm/i915/gt: Skip TLB invalidations once wedged - mmc: mtk-sd: Clear interrupts when cqe off/disable - mmc: sdhci-of-dwcmshc: add reset call back for rockchip Socs - mmc: sdhci-of-dwcmshc: rename rk3568 to rk35xx - mmc: sdhci-of-dwcmshc: Re-enable support for the BlueField-3 SoC - btrfs: remove root argument from btrfs_unlink_inode() - btrfs: remove no longer needed logic for replaying directory deletes - btrfs: add and use helper for unlinking inode during log replay - btrfs: fix warning during log replay when bumping inode link count - fs/ntfs3: Fix work with fragmented xattr - ASoC: sh: rz-ssi: Improve error handling in rz_ssi_probe() error path - drm/amd/display: Avoid MPC infinite loop - drm/amd/display: Fix HDMI VSIF V3 incorrect issue - drm/amd/display: For stereo keep "FLIP_ANY_FRAME" - drm/amd/display: clear optc underflow before turn off odm clock - ksmbd: return STATUS_BAD_NETWORK_NAME error status if share is not configured - neigh: fix possible DoS due to net iface start/stop loop - s390/hypfs: avoid error message under KVM - ksmbd: don't remove dos attribute xattr on O_TRUNC open - drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid - drm/amd/display: Fix pixel clock programming - drm/amdgpu: Increase tlb flush timeout for sriov - drm/amd/display: avoid doing vm_init multiple time - netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y - testing: selftests: nft_flowtable.sh: use random netns names - btrfs: move lockdep class helpers to locking.c - btrfs: fix lockdep splat with reloc root extent buffers - btrfs: tree-checker: check for overlapping extent items - kprobes: don't call disarm_kprobe() for disabled kprobes - btrfs: fix space cache corruption and potential double allocations - android: binder: fix lockdep check on clearing vma - net/af_packet: check len when min_header_len equals to 0 - net: neigh: don't call kfree_skb() under spin_lock_irqsave() - Linux 5.15.65 * CVE-2022-2663 - netfilter: nf_conntrack_irc: Fix forged IP logic * CVE-2022-3061 - video: fbdev: i740fb: Error out if 'pixclock' equals zero -- Stefan Bader