Ubuntu
linux-raspi package

hirsute/linux-raspi: Upstream raspberrypi patchset 2021-08-26

Bug #1942170 reported by Juerg Haefliger on 2021-08-31

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	linux-raspi (Ubuntu)	Confirmed	Undecided	Unassigned
	Hirsute	Fix Released	Undecided	Juerg Haefliger

Bug Description

Upstream raspberrypi patchset 2021-08-26

  Ported from the following raspberrypi branch:
    rpi-5.10.y
  from https://github.com/raspberrypi/linux.git

usb: gadget: f_hid: fixed NULL pointer dereference
ARM: dts: bcm283x: Fix up GPIO LED node names
Revert "ARM: dts: bcm283x: increase dwc2's RX FIFO size"
drm/vc4: Set a default HSM rate
drm/vc4: hdmi: Remove the DDC probing for status detection
drm/vc4: hdmi: Actually check for the connector status in hotplug
drm/probe-helper: Create a HPD IRQ event helper for a single connector
overlays: qca7000: Fix URL & README
Makefiles: dt: Always set '-@' on ARCH_BCM2835
overlays: rpi-poe-plus: Improve the cooling levels
ARM: dts: Adapt to upstream changes
Revert "USB: gadget: f_hid: avoid crashes and log spam"
overlays: Add TI BQ32000 RTC support
Revert "swap: fix do_swap_page() race with swapoff"
overlays: Add midi-uart{2345}-overlay.dts
Revert "overlays: Update display GPIO declarations" for Goodix
overlays: Reduce Pi 4 vc4 CMA size to 320MB
media: i2c: ov7251: Add fwnode properties controls
media: i2c: ov9281: Add fwnode properties controls
media: i2c: imx290: Add fwnode properties controls
dtoverlays: Add orientation (and rotation) parameter to sensor overlays
overlays: Add Ablic S35390A to i2c-rtc and -gpio
configs: Add RANDOM_TRUST_BOOTLOADER=y
char: vc_mem: Delete dead code
configs: Add SND_BCM2708_SOC_CHIPDIP_DAC
ASoC: bcm: Add chipdip-dac driver
overlays: Update and rename chipdip-i2s-master-dac
ARM: dts: Correct CM4 PHY MDIO address
overlays: Set CMA to 512MB on Pi 4 for vc4
brcmfmac: Try product-specific clm_blob names first
configs: Add CONFIG_DRM_GUD=m
drm/gud: Add async_flush module parameter
drm/gud: Add Raspberry Pi Pico ID
drm/gud: Use scatter-gather USB bulk transfer
drm/gud: Free buffers on device removal
drm/gud: cleanup coding style a bit
drm/gud: Remove unneeded semicolon
drm/gud: fix sizeof use
drm: Add GUD USB Display driver
drm/uapi: Add USB connector type
media: i2c: imx477: Fix framerates for 1332x990 mode
ARM: dts: bcm2711: Tidy the HDMI I2C aliases
configs: Add SND_SOC_WM8960=m
drm/vc4: Fix typo when getting firmware node
drm/vc4: Refactor mode checking logic
drm/vc4: Allow setting the TV norm via module parameter
drm/vc4: Add support for more analog TV standards
drm/vc4: Fix definition of PAL-M mode
drm/vc4: Refactor VEC TV mode setting
drm/vc4: Fix timings for VEC modes
overlays: Add overlay for Si446x Transceiver SPI
ARM: dts: bcm2711: fold in the correct interrupt
ydrm/vc4: fkms: Fix margin calculations for the right/bottom edges
drm/vc4: Fix margin calculations for the right/bottom edges
configs: Add KEYBOARD_CAP11XX=m
overlays: Add overlay for cap1106 capacitive touch sensor
drm/vc4: remove unneeded variable: "ret"
drm: automatic legacy gamma support
drm/vc4: plane: Remove redundant assignment
drm: vc4: Remove unnecessary drm_plane_cleanup() wrapper
drm/vc4: hdmi: Don't poll for the infoframes status on setup
drm/vc4: Simplify a bit the global atomic_check
drm: Document use-after-free gotcha with private objects
drm: Introduce an atomic_commit_setup function
overlays: Add overlay for Chipdip I2S master DAC
media: bcm2835-unicam: Forward input status from subdevice
bcm2711_thermal: Don't clamp temperature at zero
drm/vc4: hdmi: Only call into DRM framework if registered
drm/vc4: hdmi: Drop devm interrupt handler for hotplug interrupts
drm/vc4: hdmi: Drop devm interrupt handler for CEC interrupts
dwc_otg: Update NetBSD usb.h header licence
vc4/drv: Only notify firmware of display done with kms
drm/vc4: hdmi: Move initial register read after pm_runtime_get
drm/vc4: hdmi: Warn if we access the controller while disabled
drm/vc4: hdmi: Add missing clk_disable_unprepare on error path
drm/vc4: hdmi: Make sure the device is powered with CEC
drm/vc4: hdmi: Split the CEC disable / enable functions in two
drm/vc4: hdmi: Put the device on error in pre_crtc_configure
ARM: dts: rpi: Add the firmware node to vc4
drm/vc4: Notify the firmware when DRM is in charge
drm/vc4: Remove conflicting framebuffers before callind bind_all
firmware: raspberrypi: Add RPI_FIRMWARE_NOTIFY_DISPLAY_DONE
dt-bindings: display: vc4: Add phandle to the firmware
dt-bindings: clk: raspberrypi: Remove unused property
overlays: Make i2c-rtc and i2c-rtc-gpio share RTCs
media: i2c: imx477: Extend driver to support imx378 sensor
overlays: Add overlay for imx378 sensor
Documentation: devicetree: Add documentation for imx378 sensor
staging: vc04_services: isp: Set the YUV420/YVU420 format stride to 64 bytes
configs: Add CONFIG_MACVTAP=m (arm64 only)
drm/vc4: hdmi: Enable the scrambler on reconnection
drm/vc4: hdmi: Use a fixed rate for the HSM clock on BCM2835
media: i2c: ov9281: Remove override of subdev name
drm/vc4: Increase the core clock to a minimum of 500MHz
drm: vc4: Fix pixel-wrap issue with DVP teardown
overlays: Add dpi18cpadhi, vc4-kms-dpi-at056tn53v1
Support RPi DPI interface in mode6 for 18-bit color
media: rpivid: Fix H265 aux ent reuse of the same slot
drm/vc4: Don't create hvs_load_tracker on fkms
drm/vc4: Fix timings for interlaced modes
drm/vc4: Leverage the load tracker on the BCM2711
drm/vc4: crtc: Add some logging
drm/vc4: crtc: Rework the encoder retrieval code (again)
drm/vc4: crtc: Add encoder to vc4_crtc_config_pv prototype
media: i2c: imx290: Fix clock setup register assignments
media: i2c: imx290: Fix the pixel rate at 148.5Mpix/s
media: i2c: imx290: Support 60fps in 2 lane operation
configs: add CONFIG_IR_TOY=m
configs: Enable Anbox support on arm64 builds
ARM: dts: bcm2711: Tune DMA parameters for HDMI audio
drm/vc4: hdmi: Remove redundant variables
drm/vc4: Register HDMI codec
ASoC: hdmi-codec: Add a prepare hook
ASoC: hdmi-codec: Add iec958 controls
snd: iec958: split status creation and fill
ASoC: hdmi-codec: Rework to support more controls
ASoC: codec: hdmi-codec: Support IEC958 encoded PCM format
drm/vc4: Increase the core clock based on HVS load
drm/vc4: Make vc4_crtc_get_encoder public
overlays: ghost-amp: Change early-disable sequence
media: i2c: imx477: Fix for long exposure limit calculations
bcm2835: Allow compressed frames to set sizeimage (#4386)
Fixes an onboard clock detection problem of the PRO versions
overlays: Add ssd1331-spi support for OLED screen
drm/vc4: FKMS: Change of Broadcast RGB mode needs a mode change
overlays: Add rpi-poe-plus overlay
configs: Enable Raspberry Pi PoE+ HAT support
Add Raspberry Pi PoE+ HAT support
configs: Add GPIO_PCA953X_IRQ=y
overlays: Remove deleted merus-amp parameter
configs: Add CONFIG_SENSIRION_SGP30=m
overlays: add sensirion sgp30 to i2c-sensor overlay
Add CAN_J1939 as module to default build configs (#4346)
media: rpivid: Improve SPS/PPS error handling/validation
media: rpivid: Improve stream_on/off conformance & clock setup
media: rpivid: Improve values returned when setting output format
media: rpivid: Map cmd buffer directly
Revert "media: v4l2-mem2mem: allow request job buffer processing after job finish"
media: rpivid: Add a Pass0 to accumulate slices and rework job finish
RFC: media: Add media_request_{pin,unpin} API
media: rpivid: Add an enable count to irq claim Qs
media: rpivid: Convert to MPLANE
media: rpivid: Remove the need to have num_entry_points set
dtoverlays: Update /__symbols__/i2c0 from i2c0 overlay
dtoverlays: Add pinctrl-names to i2c0 overlay.
media: i2c: ov5647: Fix v4l2-compliance failure subscribing to events
media: i2c: ov5647: Correct minimum VBLANK value
media: i2c: ov5647: Correct pixel array offset
configs: Add NF_LOG_ARP=m and NF_LOG_NETDEV=m
overlays: merus-amp: remove spi override
drm/vc4: hdmi: Add a workqueue to set scrambling
drm/vc4: hdmi: Rely on interrupts to handle hotplug
drm/vc4: hdmi: Simplify the connector state retrieval
drm/vc4: hdmi: Fix PM reference leak in vc4_hdmi_encoder_pre_crtc_co()
drm/vc4: crtc: Lookup the encoder from the register at boot
drm/vc4: crtc: Fix vc4_get_crtc_encoder logic
drm/vc4: crtc: Pass the drm_atomic_state to config_pv
clk: Always clamp the rounded rate
configs: add CONFIG_QCA7000_UART=m (#4322)
configs: Regenerate defconfigs
spi: bcm2835: Increase the CS limit to 24
ARM: dts: bcm2711-rpi-400: Limit MDIO clock speed
overlays: Add ugreen-dabboard overlay
drm/vc4: Allow DBLCLK modes even if horz timing is odd.
gpio-poweroff: Remember the old poweroff handler
SQUASH: overlays: Fix typo in README
overlays: README - improve the gpio-poweroff guide
overlays: Allow multiple gpio-shutdown instances
staging/bcm2835-isp: Fix compiler warning
staging/bcm2835-codec: Do not update crop from S_FMT after res change
staging/bcm2835-camera: Add support for H264 levels 4.1 and 4.2
staging/bcm2835-codec: Pass corrupt frame flag.
staging/bcm2835-codec: Set the colourspace appropriately for RGB formats
staging/bcm2835-codec: Fix support for levels 4.1 and 4.2
clk: requests: Dereference the request pointer after the check
configs: Enable ATA and AHCI for SATA drive support.
drm/vc4: Separate VEC compatible variants
drm/vc4: Fix clock source for VEC PixelValve on BCM2711
drm/vc4: Fix VEC address for BCM2711 in the devicetrees
overlays: spi-rtc: Add ds3232 and ds3234
vc4/drm: hdmi: Handle case when bvb clock is null
drm/vc4: hdmi: Raise the maximum clock rate
drm/vc4: hdmi: Enable the scrambler
drm/vc4: hdmi: Check and warn if we can't reach 4kp60 frequencies
drm/vc4: hdmi: Properly compute the BVB clock rate
drm/vc4: hvs: Make the HVS bind first
drm/vc4: hdmi: Prevent clock unbalance
drm/vc4: crtc: Skip the TXP
drm/vc4: txp: Properly set the possible_crtcs mask
clk: requests: Ignore if the pointer is null
dtoverlays: Add overlays for JDI LT070ME05000 1200x1920 DSI panel
defconfigs: Add PANEL_JDI_LT070ME05000 DSI panel
drm/panel: jdi-lt070me05000: Use gpiod_set_value_cansleep
drm/atomic: Don't fixup modes that haven't been reset
drm/vc4: Add correct stop condition to vc4_dsi_encoder_disable iteration
drm/vc4: Fix dsi0 interrupt support.
drm/vc4: Register dsi0 as the correct vc4 encoder type
drm/vc4: Correct pixel order for DSI0
drm/vc4: dsi: Add configuration for BCM2711 DSI1
drm/vc4: dsi: Add support for DSI0
drm/vc4: dsi: Introduce a variant structure
drm/vc4: dsi: Use snprintf for the PHY clocks instead of an array
drm/vc4: drv: Remove the DSI pointer in vc4_drv
Revert "drm/vc4: Add support for DSI0"
Revert "drm/vc4: Add configuration for BCM2711 DSI1."
dwc_otg: fix an undeclared variable
rpivid: Only clk_request_done once
r8152: search the configuration of vendor mode
r8152: support PHY firmware for RTL8156 series
r8152: support new chips
r8152: add help function to change mtu
r8152: adjust rtl8152_check_firmware function
r8152: set inter fram gap time depending on speed
r8152: spilt rtl_set_eee_plus and r8153b_green_en
r8152: replace netif_err with dev_err
r8152: check if the pointer of the function exists
r8152: enable U1/U2 for USB_SPEED_SUPER
r8152: adjust the flow of power cut for RTL8153B
r8152: replace several functions about phy patch request
net: usb: r8152: use new tasklet API
rpivid: Switch to new clock api
bcm2835-unicam: Switch to new clock api
drm/vc4: hdmi: Convert to the new clock request API
drm/vc4: hdmi: Convert to the new clock request API
clk: Introduce a clock request API
overlays: ghost-amp: Add DAC mute control
sound/usb: call usb_autopm_get_interface() for devices that should not
sound/usb: add device quirks for A4Tech FHD 1080p webcams

See original description

Tags:

CVE References

2021-41073

Juerg Haefliger (juergh) on 2021-08-31

Changed in linux-raspi (Ubuntu):
status:	New → Confirmed
Changed in linux-raspi (Ubuntu Hirsute):
assignee:	nobody → Juerg Haefliger (juergh)

Juerg Haefliger (juergh) on 2021-08-31

description:

updated

Juerg Haefliger (juergh) on 2021-09-02

description:

updated

Juerg Haefliger (juergh) on 2021-09-04

description:

updated

Revision history for this message

Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote on 2021-09-15:

This bug is awaiting verification that the linux-raspi/5.11.0-1018.19 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-hirsute' to 'verification-done-hirsute'. If the problem still exists, change the tag 'verification-needed-hirsute' to 'verification-failed-hirsute'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags:

added: verification-needed-hirsute

Revision history for this message

Juerg Haefliger (juergh) wrote on 2021-09-22:

Boot tested arm64 kernel 5.11.0-1-18.19 from proposed on Pi 4B, 400, CM4, CM3+, 3B+, 3B, 3A+.

Changed in linux-raspi (Ubuntu Hirsute):
status:	New → Fix Committed
tags:	added: verification-done-hirsute removed: verification-needed-hirsute

Revision history for this message

Launchpad Janitor (janitor) wrote on 2021-09-27:

Download full text (81.1 KiB)

This bug was fixed in the package linux-raspi - 5.11.0-1019.20

---------------
linux-raspi (5.11.0-1019.20) hirsute; urgency=medium

* hirsute/linux-raspi: 5.11.0-1019.20 -proposed tracker (LP: #1944172)

This bug was fixed in the package linux-raspi - 5.11.0-1019.20

---------------
linux-raspi (5.11.0-1019.20) hirsute; urgency=medium

* hirsute/linux-raspi: 5.11.0-1019.20 -proposed tracker (LP: #1944172)

* hirsute/linux-raspi: Upstream raspberrypi patchset 2021-08-26 (LP: #1942170)
    - sound/usb: add device quirks for A4Tech FHD 1080p webcams
    - sound/usb: call usb_autopm_get_interface() for devices that should not
    - overlays: ghost-amp: Add DAC mute control
    - clk: Introduce a clock request API
    - drm/vc4: hdmi: Convert to the new clock request API
    - drm/vc4: hdmi: Convert to the new clock request API
    - bcm2835-unicam: Switch to new clock api
    - rpivid: Switch to new clock api
    - net: usb: r8152: use new tasklet API
    - r8152: replace several functions about phy patch request
    - r8152: adjust the flow of power cut for RTL8153B
    - r8152: enable U1/U2 for USB_SPEED_SUPER
    - r8152: check if the pointer of the function exists
    - r8152: replace netif_err with dev_err
    - r8152: spilt rtl_set_eee_plus and r8153b_green_en
    - r8152: set inter fram gap time depending on speed
    - r8152: adjust rtl8152_check_firmware function
    - r8152: add help function to change mtu
    - r8152: support new chips
    - r8152: support PHY firmware for RTL8156 series
    - r8152: search the configuration of vendor mode
    - rpivid: Only clk_request_done once
    - dwc_otg: fix an undeclared variable
    - Revert "drm/vc4: Add configuration for BCM2711 DSI1."
    - Revert "drm/vc4: Add support for DSI0"
    - drm/vc4: drv: Remove the DSI pointer in vc4_drv
    - drm/vc4: dsi: Use snprintf for the PHY clocks instead of an array
    - drm/vc4: dsi: Introduce a variant structure
    - drm/vc4: dsi: Add support for DSI0
    - drm/vc4: dsi: Add configuration for BCM2711 DSI1
    - drm/vc4: Correct pixel order for DSI0
    - drm/vc4: Register dsi0 as the correct vc4 encoder type
    - drm/vc4: Fix dsi0 interrupt support.
    - drm/vc4: Add correct stop condition to vc4_dsi_encoder_disable iteration
    - drm/atomic: Don't fixup modes that haven't been reset
    - drm/panel: jdi-lt070me05000: Use gpiod_set_value_cansleep
    - defconfigs: Add PANEL_JDI_LT070ME05000 DSI panel
    - dtoverlays: Add overlays for JDI LT070ME05000 1200x1920 DSI panel
    - clk: requests: Ignore if the pointer is null
    - drm/vc4: hvs: Make the HVS bind first
    - drm/vc4: hdmi: Properly compute the BVB clock rate
    - drm/vc4: hdmi: Check and warn if we can't reach 4kp60 frequencies
    - drm/vc4: hdmi: Enable the scrambler
    - drm/vc4: hdmi: Raise the maximum clock rate
    - vc4/drm: hdmi: Handle case when bvb clock is null
    - overlays: spi-rtc: Add ds3232 and ds3234
    - drm/vc4: Fix VEC address for BCM2711 in the devicetrees
    - drm/vc4: Separate VEC compatible variants
    - configs: Enable ATA and AHCI for SATA drive support.
    - clk: requests: Dereference the request pointer after the check
    - staging/bcm2835-codec: Fix support for levels 4.1 and 4.2
    - staging/bcm2835-codec: Set the colourspace appropriately for RGB formats
    - staging/bcm2835-codec: Pass corrupt frame flag.
    - staging/bcm2835-camera: Add support for H264 levels 4.1 and 4.2
    - staging/bcm2835-codec: Do not update crop from S_FMT after res change
    - staging/bcm2835-isp: Fix compiler warning
    - overlays: Allow multiple gpio-shutdown instances
    - overlays: README - improve the gpio-poweroff guide
    - SQUASH: overlays: Fix typo in README
    - gpio-poweroff: Remember the old poweroff handler
    - drm/vc4: Allow DBLCLK modes even if horz timing is odd.
    - overlays: Add ugreen-dabboard overlay
    - ARM: dts: bcm2711-rpi-400: Limit MDIO clock speed
    - spi: bcm2835: Increase the CS limit to 24
    - configs: Regenerate defconfigs
    - configs: add CONFIG_QCA7000_UART=m (#4322)
    - clk: Always clamp the rounded rate
    - drm/vc4: crtc: Pass the drm_atomic_state to config_pv
    - drm/vc4: crtc: Fix vc4_get_crtc_encoder logic
    - drm/vc4: crtc: Lookup the encoder from the register at boot
    - drm/vc4: hdmi: Simplify the connector state retrieval
    - drm/vc4: hdmi: Rely on interrupts to handle hotplug
    - drm/vc4: hdmi: Add a workqueue to set scrambling
    - overlays: merus-amp: remove spi override
    - configs: Add NF_LOG_ARP=m and NF_LOG_NETDEV=m
    - media: i2c: ov5647: Correct pixel array offset
    - media: i2c: ov5647: Correct minimum VBLANK value
    - media: i2c: ov5647: Fix v4l2-compliance failure subscribing to events
    - dtoverlays: Add pinctrl-names to i2c0 overlay.
    - dtoverlays: Update /__symbols__/i2c0 from i2c0 overlay
    - media: rpivid: Remove the need to have num_entry_points set
    - media: rpivid: Convert to MPLANE
    - media: rpivid: Add an enable count to irq claim Qs
    - RFC: media: Add media_request_{pin,unpin} API
    - media: rpivid: Add a Pass0 to accumulate slices and rework job finish
    - Revert "media: v4l2-mem2mem: allow request job buffer processing after job
      finish"
    - media: rpivid: Map cmd buffer directly
    - media: rpivid: Improve values returned when setting output format
    - media: rpivid: Improve stream_on/off conformance & clock setup
    - media: rpivid: Improve SPS/PPS error handling/validation
    - Add CAN_J1939 as module to default build configs (#4346)
    - overlays: add sensirion sgp30 to i2c-sensor overlay
    - configs: Add CONFIG_SENSIRION_SGP30=m
    - overlays: Remove deleted merus-amp parameter
    - configs: Add GPIO_PCA953X_IRQ=y
    - Add Raspberry Pi PoE+ HAT support
    - configs: Enable Raspberry Pi PoE+ HAT support
    - overlays: Add rpi-poe-plus overlay
    - drm/vc4: FKMS: Change of Broadcast RGB mode needs a mode change
    - overlays: Add ssd1331-spi support for OLED screen
    - Fixes an onboard clock detection problem of the PRO versions
    - bcm2835: Allow compressed frames to set sizeimage (#4386)
    - media: i2c: imx477: Fix for long exposure limit calculations
    - overlays: ghost-amp: Change early-disable sequence
    - drm/vc4: Make vc4_crtc_get_encoder public
    - drm/vc4: Increase the core clock based on HVS load
    - ASoC: codec: hdmi-codec: Support IEC958 encoded PCM format
    - ASoC: hdmi-codec: Rework to support more controls
    - snd: iec958: split status creation and fill
    - ASoC: hdmi-codec: Add iec958 controls
    - ASoC: hdmi-codec: Add a prepare hook
    - drm/vc4: Register HDMI codec
    - drm/vc4: hdmi: Remove redundant variables
    - ARM: dts: bcm2711: Tune DMA parameters for HDMI audio
    - configs: Enable Anbox support on arm64 builds
    - configs: add CONFIG_IR_TOY=m
    - media: i2c: imx290: Support 60fps in 2 lane operation
    - media: i2c: imx290: Fix the pixel rate at 148.5Mpix/s
    - media: i2c: imx290: Fix clock setup register assignments
    - drm/vc4: crtc: Add encoder to vc4_crtc_config_pv prototype
    - drm/vc4: crtc: Rework the encoder retrieval code (again)
    - drm/vc4: crtc: Add some logging
    - drm/vc4: Leverage the load tracker on the BCM2711
    - drm/vc4: Fix timings for interlaced modes
    - drm/vc4: Don't create hvs_load_tracker on fkms
    - media: rpivid: Fix H265 aux ent reuse of the same slot
    - Support RPi DPI interface in mode6 for 18-bit color
    - overlays: Add dpi18cpadhi, vc4-kms-dpi-at056tn53v1
    - drm: vc4: Fix pixel-wrap issue with DVP teardown
    - drm/vc4: Increase the core clock to a minimum of 500MHz
    - media: i2c: ov9281: Remove override of subdev name
    - drm/vc4: hdmi: Use a fixed rate for the HSM clock on BCM2835
    - drm/vc4: hdmi: Enable the scrambler on reconnection
    - configs: Add CONFIG_MACVTAP=m (arm64 only)
    - staging: vc04_services: isp: Set the YUV420/YVU420 format stride to 64 bytes
    - Documentation: devicetree: Add documentation for imx378 sensor
    - overlays: Add overlay for imx378 sensor
    - media: i2c: imx477: Extend driver to support imx378 sensor
    - overlays: Make i2c-rtc and i2c-rtc-gpio share RTCs
    - dt-bindings: clk: raspberrypi: Remove unused property
    - dt-bindings: display: vc4: Add phandle to the firmware
    - firmware: raspberrypi: Add RPI_FIRMWARE_NOTIFY_DISPLAY_DONE
    - drm/vc4: Remove conflicting framebuffers before callind bind_all
    - drm/vc4: Notify the firmware when DRM is in charge
    - ARM: dts: rpi: Add the firmware node to vc4
    - drm/vc4: hdmi: Put the device on error in pre_crtc_configure
    - drm/vc4: hdmi: Split the CEC disable / enable functions in two
    - drm/vc4: hdmi: Make sure the device is powered with CEC
    - drm/vc4: hdmi: Add missing clk_disable_unprepare on error path
    - drm/vc4: hdmi: Warn if we access the controller while disabled
    - drm/vc4: hdmi: Move initial register read after pm_runtime_get
    - vc4/drv: Only notify firmware of display done with kms
    - dwc_otg: Update NetBSD usb.h header licence
    - drm/vc4: hdmi: Drop devm interrupt handler for CEC interrupts
    - drm/vc4: hdmi: Drop devm interrupt handler for hotplug interrupts
    - drm/vc4: hdmi: Only call into DRM framework if registered
    - bcm2711_thermal: Don't clamp temperature at zero
    - media: bcm2835-unicam: Forward input status from subdevice
    - overlays: Add overlay for Chipdip I2S master DAC
    - drm: Introduce an atomic_commit_setup function
    - drm: Document use-after-free gotcha with private objects
    - drm/vc4: Simplify a bit the global atomic_check
    - drm/vc4: hdmi: Don't poll for the infoframes status on setup
    - drm: vc4: Remove unnecessary drm_plane_cleanup() wrapper
    - drm/vc4: plane: Remove redundant assignment
    - drm: automatic legacy gamma support
    - drm/vc4: remove unneeded variable: "ret"
    - overlays: Add overlay for cap1106 capacitive touch sensor
    - configs: Add KEYBOARD_CAP11XX=m
    - drm/vc4: Fix margin calculations for the right/bottom edges
    - ydrm/vc4: fkms: Fix margin calculations for the right/bottom edges
    - ARM: dts: bcm2711: fold in the correct interrupt
    - overlays: Add overlay for Si446x Transceiver SPI
    - drm/vc4: Fix timings for VEC modes
    - drm/vc4: Refactor VEC TV mode setting
    - drm/vc4: Fix definition of PAL-M mode
    - drm/vc4: Add support for more analog TV standards
    - drm/vc4: Allow setting the TV norm via module parameter
    - drm/vc4: Refactor mode checking logic
    - drm/vc4: Fix typo when getting firmware node
    - configs: Add SND_SOC_WM8960=m
    - ARM: dts: bcm2711: Tidy the HDMI I2C aliases
    - media: i2c: imx477: Fix framerates for 1332x990 mode
    - drm/uapi: Add USB connector type
    - drm: Add GUD USB Display driver
    - drm/gud: fix sizeof use
    - drm/gud: Remove unneeded semicolon
    - drm/gud: cleanup coding style a bit
    - drm/gud: Free buffers on device removal
    - drm/gud: Use scatter-gather USB bulk transfer
    - drm/gud: Add Raspberry Pi Pico ID
    - drm/gud: Add async_flush module parameter
    - configs: Add CONFIG_DRM_GUD=m
    - brcmfmac: Try product-specific clm_blob names first
    - overlays: Set CMA to 512MB on Pi 4 for vc4
    - ARM: dts: Correct CM4 PHY MDIO address
    - overlays: Update and rename chipdip-i2s-master-dac
    - ASoC: bcm: Add chipdip-dac driver
    - configs: Add SND_BCM2708_SOC_CHIPDIP_DAC
    - char: vc_mem: Delete dead code
    - configs: Add RANDOM_TRUST_BOOTLOADER=y
    - overlays: Add Ablic S35390A to i2c-rtc and -gpio
    - dtoverlays: Add orientation (and rotation) parameter to sensor overlays
    - media: i2c: imx290: Add fwnode properties controls
    - media: i2c: ov9281: Add fwnode properties controls
    - media: i2c: ov7251: Add fwnode properties controls
    - overlays: Reduce Pi 4 vc4 CMA size to 320MB
    - Revert "overlays: Update display GPIO declarations" for Goodix
    - overlays: Add midi-uart{2345}-overlay.dts
    - overlays: Add TI BQ32000 RTC support
    - ARM: dts: Adapt to upstream changes
    - overlays: rpi-poe-plus: Improve the cooling levels
    - Makefiles: dt: Always set '-@' on ARCH_BCM2835
    - overlays: qca7000: Fix URL & README
    - drm/probe-helper: Create a HPD IRQ event helper for a single connector
    - drm/vc4: hdmi: Actually check for the connector status in hotplug
    - drm/vc4: hdmi: Remove the DDC probing for status detection
    - drm/vc4: Set a default HSM rate
    - [Config] raspi: updateconfigs after update to rpi-5.10.y (2021-08-26)

* Raspberry pi 4 USB controller randomly crashes (LP: #1930629)
    - usb: xhci: workaround for bogus SET_DEQ_PENDING endpoint state
    - xhci: guard accesses to ep_state in xhci_endpoint_reset()

[ Ubuntu: 5.11.0-37.41 ]

* hirsute/linux: 5.11.0-37.41 -proposed tracker (LP: #1944180)
  * CVE-2021-41073
    - io_uring: ensure symmetry in handling iter types in loop_rw_iter()
  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/2021.09.06)
  *  LRMv5: switch primary version handling to kernel-versions data set
    (LP: #1928921)
    - [Packaging] switch to kernel-versions
  * disable “CONFIG_HISI_DMA” config for ubuntu version (LP: #1936771)
    - Disable CONFIG_HISI_DMA
    - [Config] Record hisi_dma no longer built for arm64
  * ubunut_kernel_selftests: memory-hotplug: avoid spamming logs with
    dump_page() (LP: #1941829)
    - selftests: memory-hotplug: avoid spamming logs with dump_page(), ratio limit
      hot-remove error test
  * alsa: the soundwire audio doesn't work on the Dell TGL-H machines
    (LP: #1941669)
    - ASoC: SOF: allow soundwire use desc->default_fw_filename
    - ASoC: Intel: tgl: remove sof_fw_filename set for tgl_3_in_1_default
  * e1000e blocks the boot process when it tried to write checksum to its NVM
    (LP: #1936998)
    - e1000e: Do not take care about recovery NVM checksum
  * Dell XPS 17 (9710) PCI/internal sound card not detected  (LP: #1935850)
    - ASoC: Intel: sof_sdw: include rt711.h for RT711 JD mode
    - ASoC: Intel: sof_sdw: add quirk for Dell XPS 9710
  * mute/micmute LEDs no function on HP ProBook 650 G8 (LP: #1939473)
    - ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 650 G8 Notebook PC
  *  Fix mic noise on HP ProBook 445 G8 (LP: #1940610)
    - ALSA: hda/realtek: Limit mic boost on HP ProBook 445 G8
  * GPIO error logs in start and dmesg after update of kernel (LP: #1937897)
    - ODM: mfd: Check AAEON BFPI version before adding device
  * External displays not working on Thinkpad T490 with ThinkPad Thunderbolt 3
    Dock (LP: #1938999)
    - drm/i915/ilk-glk: Fix link training on links with LTTPRs
  * Fix kernel panic caused by legacy devices on AMD platforms (LP: #1936682)
    - SAUCE: iommu/amd: Keep swiotlb enabled to ensure devices with 32bit DMA
      still work
  * Hirsute update: upstream stable patchset 2021-08-30 (LP: #1942123)
    - drm/i915: Revert "drm/i915/gem: Asynchronous cmdparser"
    - Revert "drm/i915: Propagate errors on awaiting already signaled fences"
    - regulator: rtmv20: Fix wrong mask for strobe-polarity-high
    - regulator: rt5033: Fix n_voltages settings for BUCK and LDO
    - spi: stm32h7: fix full duplex irq handler handling
    - ASoC: tlv320aic31xx: fix reversed bclk/wclk master bits
    - r8152: Fix potential PM refcount imbalance
    - qed: fix possible unpaired spin_{un}lock_bh in _qed_mcp_cmd_and_union()
    - ASoC: rt5682: Fix the issue of garbled recording after powerd_dbus_suspend
    - net: Fix zero-copy head len calculation.
    - ASoC: ti: j721e-evm: Fix unbalanced domain activity tracking during startup
    - ASoC: ti: j721e-evm: Check for not initialized parent_clk_id
    - efi/mokvar: Reserve the table only if it is in boot services data
    - nvme: fix nvme_setup_command metadata trace event
    - drm/amd/display: Fix comparison error in dcn21 DML
    - drm/amd/display: Fix max vstartup calculation for modes with borders
    - Revert "Bluetooth: Shutdown controller after workqueues are flushed or
      cancelled"
    - firmware: arm_scmi: Add delayed response status check
    - Revert "watchdog: iTCO_wdt: Account for rebooting on second timeout"
    - selftest/bpf: Adjust expected verifier errors
    - bpf, selftests: Adjust few selftest result_unpriv outcomes
    - bpf: Update selftests to reflect new error states
    - bpf, selftests: Adjust few selftest outcomes wrt unreachable code
    - selftest/bpf: Verifier tests for var-off access
    - spi: mediatek: Fix fifo transfer
    - cifs: use helpers when parsing uid/gid mount options and validate them
    - cifs: add missing parsing of backupuid
    - net: dsa: sja1105: parameterize the number of ports
    - ASoC: Intel: boards: handle hda-dsp-common as a module
    - [Config] updateconfigs for SND_SOC_INTEL_HDA_DSP_COMMON
    - ASoC: Intel: boards: create sof-maxim-common module
    - [Config] updateconfigs for SND_SOC_INTEL_SOF_MAXIM_COMMON
    - ASoC: Intel: boards: fix xrun issue on platform with max98373
    - r8152: Fix a deadlock by doubly PM resume
    - Revert "ACPICA: Fix memory leak caused by _CID repair function"
    - ALSA: seq: Fix racy deletion of subscriber
    - bus: ti-sysc: Fix gpt12 system timer issue with reserved status
    - net: xfrm: fix memory leak in xfrm_user_rcv_msg
    - arm64: dts: ls1028a: fix node name for the sysclk
    - ARM: imx: add missing iounmap()
    - ARM: imx: add missing clk_disable_unprepare()
    - ARM: dts: imx6qdl-sr-som: Increase the PHY reset duration to 10ms
    - arm64: dts: ls1028: sl28: fix networking for variant 2
    - ARM: dts: colibri-imx6ull: limit SDIO clock to 25MHz
    - ARM: imx: fix missing 3rd argument in macro imx_mmdc_perf_init
    - ARM: dts: imx: Swap M53Menlo pinctrl_power_button/pinctrl_power_out pins
    - arm64: dts: armada-3720-turris-mox: fixed indices for the SDHC controllers
    - arm64: dts: armada-3720-turris-mox: remove mrvl,i2c-fast-mode
    - ALSA: usb-audio: fix incorrect clock source setting
    - clk: stm32f4: fix post divisor setup for I2S/SAI PLLs
    - ARM: dts: am437x-l4: fix typo in can@0 node
    - omap5-board-common: remove not physically existing vdds_1v8_main fixed-
      regulator
    - dmaengine: uniphier-xdmac: Use readl_poll_timeout_atomic() in atomic state
    - clk: tegra: Implement disable_unused() of tegra_clk_sdmmc_mux_ops
    - dmaengine: stm32-dma: Fix PM usage counter imbalance in stm32 dma ops
    - dmaengine: stm32-dmamux: Fix PM usage counter unbalance in stm32 dmamux ops
    - spi: imx: mx51-ecspi: Reinstate low-speed CONFIGREG delay
    - spi: imx: mx51-ecspi: Fix low-speed CONFIGREG delay calculation
    - scsi: sr: Return correct event when media event code is 3
    - media: videobuf2-core: dequeue if start_streaming fails
    - ARM: dts: stm32: Disable LAN8710 EDPD on DHCOM
    - ARM: dts: stm32: Fix touchscreen IRQ line assignment on DHCOM
    - dmaengine: imx-dma: configure the generic DMA type to make it work
    - net, gro: Set inner transport header offset in tcp/udp GRO hook
    - net: dsa: sja1105: overwrite dynamic FDB entries with static ones in
      .port_fdb_add
    - net: dsa: sja1105: invalidate dynamic FDB entries learned concurrently with
      statically added ones
    - net: dsa: sja1105: be stateless with FDB entries on SJA1105P/Q/R/S/SJA1110
      too
    - net: dsa: sja1105: match FDB entries regardless of inner/outer VLAN tag
    - net: phy: micrel: Fix detection of ksz87xx switch
    - net: natsemi: Fix missing pci_disable_device() in probe and remove
    - gpio: tqmx86: really make IRQ optional
    - RDMA/mlx5: Delay emptying a cache entry when a new MR is added to it
      recently
    - sctp: move the active_key update after sh_keys is added
    - nfp: update ethtool reporting of pauseframe control
    - net: ipv6: fix returned variable type in ip6_skb_dst_mtu
    - net: dsa: qca: ar9331: reorder MDIO write sequence
    - net: sched: fix lockdep_set_class() typo error for sch->seqlock
    - MIPS: check return value of pgtable_pmd_page_ctor
    - mips: Fix non-POSIX regexp
    - bnx2x: fix an error code in bnx2x_nic_load()
    - net: pegasus: fix uninit-value in get_interrupt_interval
    - net: fec: fix use-after-free in fec_drv_remove
    - net: vxge: fix use-after-free in vxge_device_unregister
    - blk-iolatency: error out if blk_get_queue() failed in iolatency_set_limit()
    - Bluetooth: defer cleanup of resources in hci_unregister_dev()
    - USB: usbtmc: Fix RCU stall warning
    - USB: serial: option: add Telit FD980 composition 0x1056
    - USB: serial: ch341: fix character loss at high transfer rates
    - USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2
    - firmware_loader: use -ETIMEDOUT instead of -EAGAIN in fw_load_sysfs_fallback
    - firmware_loader: fix use-after-free in firmware_fallback_sysfs
    - drm/amdgpu/display: fix DMUB firmware version info
    - ALSA: pcm - fix mmap capability check for the snd-dummy driver
    - ALSA: hda/realtek: add mic quirk for Acer SF314-42
    - ALSA: hda/realtek: Fix headset mic for Acer SWIFT SF314-56 (ALC256)
    - ALSA: usb-audio: Fix superfluous autosuspend recovery
    - ALSA: usb-audio: Add registration quirk for JBL Quantum 600
    - usb: dwc3: gadget: Avoid runtime resume if disabling pullup
    - usb: gadget: remove leaked entry from udc driver list
    - usb: cdns3: Fixed incorrect gadget state
    - usb: gadget: f_hid: added GET_IDLE and SET_IDLE handlers
    - usb: gadget: f_hid: fixed NULL pointer dereference
    - usb: gadget: f_hid: idle uses the highest byte for duration
    - usb: host: ohci-at91: suspend/resume ports after/before OHCI accesses
    - usb: typec: tcpm: Keep other events when receiving FRS and Sourcing_vbus
      events
    - usb: otg-fsm: Fix hrtimer list corruption
    - clk: fix leak on devm_clk_bulk_get_all() unwind
    - scripts/tracing: fix the bug that can't parse raw_trace_func
    - tracing / histogram: Give calculation hist_fields a size
    - tracing: Reject string operand in the histogram expression
    - tracing: Fix NULL pointer dereference in start_creating
    - tracepoint: static call: Compare data on transition from 2->1 callees
    - tracepoint: Fix static call function vs data state mismatch
    - arm64: stacktrace: avoid tracing arch_stack_walk()
    - optee: Clear stale cache entries during initialization
    - tee: add tee_shm_alloc_kernel_buf()
    - optee: Fix memory leak when failing to register shm pages
    - optee: Refuse to load the driver under the kdump kernel
    - optee: fix tee out of memory failure seen during kexec reboot
    - tpm_ftpm_tee: Free and unregister TEE shared memory during kexec
    - staging: rtl8723bs: Fix a resource leak in sd_int_dpc
    - staging: rtl8712: get rid of flush_scheduled_work
    - staging: rtl8712: error handling refactoring
    - drivers core: Fix oops when driver probe fails
    - media: rtl28xxu: fix zero-length control request
    - pipe: increase minimum default pipe size to 2 pages
    - ext4: fix potential htree corruption when growing large_dir directories
    - serial: tegra: Only print FIFO error message when an error occurs
    - serial: 8250_mtk: fix uart corruption issue when rx power off
    - serial: 8250: Mask out floating 16/32-bit bus bits
    - MIPS: Malta: Do not byte-swap accesses to the CBUS UART
    - serial: 8250_pci: Enumerate Elkhart Lake UARTs via dedicated driver
    - serial: 8250_pci: Avoid irq sharing for MSI(-X) interrupts.
    - fpga: dfl: fme: Fix cpu hotplug issue in performance reporting
    - timers: Move clearing of base::timer_running under base:: Lock
    - xfrm: Fix RCU vs hash_resize_mutex lock inversion
    - net/xfrm/compat: Copy xfrm_spdattr_type_t atributes
    - pcmcia: i82092: fix a null pointer dereference bug
    - selinux: correct the return value when loads initial sids
    - bus: ti-sysc: AM3: RNG is GP only
    - Revert "gpio: mpc8xxx: change the gpio interrupt flags."
    - ARM: omap2+: hwmod: fix potential NULL pointer access
    - md/raid10: properly indicate failure when ending a failed write request
    - KVM: x86: accept userspace interrupt only if no event is injected
    - KVM: Do not leak memory for duplicate debugfs directories
    - KVM: x86/mmu: Fix per-cpu counter corruption on 32-bit builds
    - arm64: vdso: Avoid ISB after reading from cntvct_el0
    - soc: ixp4xx: fix printing resources
    - interconnect: Fix undersized devress_alloc allocation
    - spi: meson-spicc: fix memory leak in meson_spicc_remove
    - interconnect: Zero initial BW after sync-state
    - interconnect: Always call pre_aggregate before aggregate
    - interconnect: qcom: icc-rpmh: Ensure floor BW is enforced for all nodes
    - drm/i915: Correct SFC_DONE register offset
    - soc: ixp4xx/qmgr: fix invalid __iomem access
    - perf/x86/amd: Don't touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest
    - sched/rt: Fix double enqueue caused by rt_effective_prio
    - drm/i915: avoid uninitialised var in eb_parse()
    - libata: fix ata_pio_sector for CONFIG_HIGHMEM
    - reiserfs: add check for root_inode in reiserfs_fill_super
    - reiserfs: check directory items on read from disk
    - virt_wifi: fix error on connect
    - net: qede: Fix end of loop tests for list_for_each_entry
    - alpha: Send stop IPI to send to online CPUs
    - net/qla3xxx: fix schedule while atomic in ql_wait_for_drvr_lock and
      ql_adapter_reset
    - smb3: rc uninitialized in one fallocate path
    - arm64: fix compat syscall return truncation
    - dmaengine: idxd: fix setup sequence for MSIXPERM table
    - drm/kmb: Enable LCD DMA for low TVDDCV
    - ARM: dts: stm32: Prefer HW RTC on DHCOM SoM
    - drm/i915: Call i915_globals_exit() if pci_register_device() fails
    - drm/amdgpu: fix checking pmops when PM_SLEEP is not enabled
    - ALSA: usb-audio: Avoid unnecessary or invalid connector selection at resume
    - tee: Correct inappropriate usage of TEE_SHM_DMA_BUF flag
    - s390/dasd: fix use after free in dasd path handling
  * Hirsute update: upstream stable patchset 2021-08-20 (LP: #1940706)
    - tools: Allow proper CC/CXX/... override with LLVM=1 in Makefile.include
    - io_uring: fix link timeout refs
    - KVM: x86: determine if an exception has an error code only when injecting
      it.
    - af_unix: fix garbage collect vs MSG_PEEK
    - workqueue: fix UAF in pwq_unbound_release_workfn()
    - cgroup1: fix leaked context root causing sporadic NULL deref in LTP
    - net/802/mrp: fix memleak in mrp_request_join()
    - net/802/garp: fix memleak in garp_request_join()
    - net: annotate data race around sk_ll_usec
    - sctp: move 198 addresses from unusable to private scope
    - rcu-tasks: Don't delete holdouts within trc_inspect_reader()
    - rcu-tasks: Don't delete holdouts within trc_wait_for_one_reader()
    - ipv6: allocate enough headroom in ip6_finish_output2()
    - drm/ttm: add a check against null pointer dereference
    - hfs: add missing clean-up in hfs_fill_super
    - hfs: fix high memory mapping in hfs_bnode_read
    - hfs: add lock nesting notation to hfs_find_init
    - firmware: arm_scmi: Fix possible scmi_linux_errmap buffer overflow
    - firmware: arm_scmi: Fix range check for the maximum number of pending
      messages
    - cifs: fix the out of range assignment to bit fields in
      parse_server_interfaces
    - iomap: remove the length variable in iomap_seek_data
    - iomap: remove the length variable in iomap_seek_hole
    - ARM: dts: versatile: Fix up interrupt controller node names
    - ipv6: ip6_finish_output2: set sk into newly allocated nskb
    - nvme-pci: fix multiple races in nvme_setup_io_queues
    - selftest: fix build error in tools/testing/selftests/vm/userfaultfd.c
    - io_uring: fix null-ptr-deref in io_sq_offload_start()
    - x86/asm: Ensure asm/proto.h can be included stand-alone
    - pipe: make pipe writes always wake up readers
    - btrfs: fix rw device counting in __btrfs_free_extra_devids
    - btrfs: mark compressed range uptodate only if all bio succeed
    - ACPI: DPTF: Fix reading of attributes
    - x86/kvm: fix vcpu-id indexed array sizes
    - KVM: add missing compat KVM_CLEAR_DIRTY_LOG
    - ocfs2: fix zero out valid data
    - ocfs2: issue zeroout to EOF blocks
    - can: j1939: j1939_xtp_rx_dat_one(): fix rxtimer value between consecutive
      TP.DT to 750ms
    - can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF
    - can: peak_usb: pcan_usb_handle_bus_evt(): fix reading rxerr/txerr values
    - can: mcba_usb_start(): add missing urb->transfer_dma initialization
    - can: usb_8dev: fix memory leak
    - can: ems_usb: fix memory leak
    - can: esd_usb2: fix memory leak
    - alpha: register early reserved memory in memblock
    - HID: wacom: Re-enable touch by default for Cintiq 24HDT / 27QHDT
    - NIU: fix incorrect error return, missed in previous revert
    - drm/amd/display: ensure dentist display clock update finished in DCN20
    - drm/amdgpu: Avoid printing of stack contents on firmware load error
    - drm/amdgpu: Fix resource leak on probe error path
    - blk-iocost: fix operation ordering in iocg_wake_fn()
    - nfc: nfcsim: fix use after free during module unload
    - cfg80211: Fix possible memory leak in function cfg80211_bss_update
    - RDMA/bnxt_re: Fix stats counters
    - bpf: Fix OOB read when printing XDP link fdinfo
    - mac80211: fix enabling 4-address mode on a sta vif after assoc
    - netfilter: conntrack: adjust stop timestamp to real expiry value
    - netfilter: nft_nat: allow to specify layer 4 protocol NAT only
    - i40e: Fix logic of disabling queues
    - i40e: Fix firmware LLDP agent related warning
    - i40e: Fix queue-to-TC mapping on Tx
    - i40e: Fix log TC creation failure when max num of queues is exceeded
    - tipc: fix implicit-connect for SYN+
    - tipc: fix sleeping in tipc accept routine
    - net: Set true network header for ECN decapsulation
    - net: qrtr: fix memory leaks
    - ionic: remove intr coalesce update from napi
    - ionic: fix up dim accounting for tx and rx
    - ionic: count csum_none when offload enabled
    - tipc: do not write skb_shinfo frags when doing decrytion
    - octeontx2-pf: Fix interface down flag on error
    - mlx4: Fix missing error code in mlx4_load_one()
    - KVM: x86: Check the right feature bit for MSR_KVM_ASYNC_PF_ACK access
    - net: llc: fix skb_over_panic
    - drm/msm/dpu: Fix sm8250_mdp register length
    - drm/msm/dp: Initialize the INTF_CONFIG register
    - skmsg: Make sk_psock_destroy() static
    - net/mlx5: Fix flow table chaining
    - net/mlx5e: Fix nullptr in mlx5e_hairpin_get_mdev()
    - sctp: fix return value check in __sctp_rcv_asconf_lookup
    - tulip: windbond-840: Fix missing pci_disable_device() in probe and remove
    - sis900: Fix missing pci_disable_device() in probe and remove
    - can: hi311x: fix a signedness bug in hi3110_cmd()
    - bpf: Introduce BPF nospec instruction for mitigating Spectre v4
    - bpf: Fix leakage due to insufficient speculative store bypass mitigation
    - bpf: Remove superfluous aux sanitation on subprog rejection
    - bpf: verifier: Allocate idmap scratch in verifier env
    - bpf: Fix pointer arithmetic mask tightening under state pruning
    - SMB3: fix readpage for large swap cache
    - powerpc/pseries: Fix regression while building external modules
    - i40e: Add additional info to PHY type error
    - can: j1939: j1939_session_deactivate(): clarify lifetime of session object
    - btrfs: fix lost inode on log replay after mix of fsync, rename and inode
      eviction
    - mm/memcg: fix NULL pointer dereference in memcg_slab_free_hook()
    - drm/amdgpu: Check pmops for desired suspend state
    - io_uring: fix io_prep_async_link locking
    - platform/x86: amd-pmc: Fix command completion code
    - platform/x86: amd-pmc: Fix SMU firmware reporting mechanism
    - ionic: make all rx_mode work threadsafe
    - drm/panel: panel-simple: Fix proper bpc for ytc700tlag_05_201c
    - net/mlx5: E-Switch, handle devcom events only for ports on the same device
    - block: delay freeing the gendisk
    - powerpc/vdso: Don't use r30 to avoid breaking Go lang
    - octeontx2-af: Remove unnecessary devm_kfree
  * Hirsute update: upstream stable patchset 2021-08-18 (LP: #1940468)
    - igc: Fix use-after-free error during reset
    - igb: Fix use-after-free error during reset
    - igc: change default return of igc_read_phy_reg()
    - ixgbe: Fix an error handling path in 'ixgbe_probe()'
    - igc: Fix an error handling path in 'igc_probe()'
    - igb: Fix an error handling path in 'igb_probe()'
    - fm10k: Fix an error handling path in 'fm10k_probe()'
    - e1000e: Fix an error handling path in 'e1000_probe()'
    - iavf: Fix an error handling path in 'iavf_probe()'
    - igb: Check if num of q_vectors is smaller than max before array access
    - igb: Fix position of assignment to *ring
    - gve: Fix an error handling path in 'gve_probe()'
    - bonding: fix suspicious RCU usage in bond_ipsec_add_sa()
    - bonding: fix null dereference in bond_ipsec_add_sa()
    - ixgbevf: use xso.real_dev instead of xso.dev in callback functions of struct
      xfrmdev_ops
    - bonding: fix suspicious RCU usage in bond_ipsec_del_sa()
    - bonding: disallow setting nested bonding + ipsec offload
    - bonding: Add struct bond_ipesc to manage SA
    - bonding: fix suspicious RCU usage in bond_ipsec_offload_ok()
    - bonding: fix incorrect return value of bond_ipsec_offload_ok()
    - ipv6: fix 'disable_policy' for fwd packets
    - stmmac: platform: Fix signedness bug in stmmac_probe_config_dt()
    - selftests: icmp_redirect: remove from checking for IPv6 route get
    - selftests: icmp_redirect: IPv6 PMTU info should be cleared after redirect
    - pwm: sprd: Ensure configuring period and duty_cycle isn't wrongly skipped
    - cxgb4: fix IRQ free race during driver unload
    - mptcp: fix warning in __skb_flow_dissect() when do syn cookie for subflow
      join
    - nvme-pci: do not call nvme_dev_remove_admin from nvme_remove
    - KVM: x86/pmu: Clear anythread deprecated bit when 0xa leaf is unsupported on
      the SVM
    - perf inject: Fix dso->nsinfo refcounting
    - perf probe: Fix dso->nsinfo refcounting
    - perf env: Fix sibling_dies memory leak
    - perf test session_topology: Delete session->evlist
    - perf test event_update: Fix memory leak of evlist
    - perf dso: Fix memory leak in dso__new_map()
    - perf test maps__merge_in: Fix memory leak of maps
    - perf env: Fix memory leak of cpu_pmu_caps
    - perf report: Free generated help strings for sort option
    - perf script: Fix memory 'threads' and 'cpus' leaks on exit
    - perf lzma: Close lzma stream on exit
    - perf probe-file: Delete namelist in del_events() on the error path
    - perf data: Close all files in close_dir()
    - perf sched: Fix record failure when CONFIG_SCHEDSTATS is not set
    - ASoC: wm_adsp: Correct wm_coeff_tlv_get handling
    - spi: imx: add a check for speed_hz before calculating the clock
    - spi: stm32: fixes pm_runtime calls in probe/remove
    - regulator: hi6421: Use correct variable type for regmap api val argument
    - regulator: hi6421: Fix getting wrong drvdata
    - spi: mediatek: fix fifo rx mode
    - ASoC: rt5631: Fix regcache sync errors on resume
    - bpf, test: fix NULL pointer dereference on invalid expected_attach_type
    - bpf: Fix tail_call_reachable rejection for interpreter when jit failed
    - xdp, net: Fix use-after-free in bpf_xdp_link_release
    - timers: Fix get_next_timer_interrupt() with no timers pending
    - liquidio: Fix unintentional sign extension issue on left shift of u16
    - s390/bpf: Perform r1 range checking before accessing jit->seen_reg[r1]
    - bpf, sockmap: Fix potential memory leak on unlikely error case
    - bpf, sockmap, tcp: sk_prot needs inuse_idx set for proc stats
    - bpf, sockmap, udp: sk_prot needs inuse_idx set for proc stats
    - bpftool: Check malloc return value in mount_bpffs_for_pin
    - net: fix uninit-value in caif_seqpkt_sendmsg
    - usb: hso: fix error handling code of hso_create_net_device
    - dma-mapping: handle vmalloc addresses in dma_common_{mmap,get_sgtable}
    - efi/tpm: Differentiate missing and invalid final event log table.
    - net: decnet: Fix sleeping inside in af_decnet
    - KVM: PPC: Book3S: Fix CONFIG_TRANSACTIONAL_MEM=n crash
    - KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak
    - net: sched: fix memory leak in tcindex_partial_destroy_work
    - sctp: trim optlen when it's a huge value in sctp_setsockopt
    - netrom: Decrease sock refcount when sock timers expire
    - scsi: iscsi: Fix iface sysfs attr detection
    - scsi: target: Fix protect handling in WRITE SAME(32)
    - spi: cadence: Correct initialisation of runtime PM again
    - ACPI: Kconfig: Fix table override from built-in initrd
    - bnxt_en: don't disable an already disabled PCI device
    - bnxt_en: Refresh RoCE capabilities in bnxt_ulp_probe()
    - bnxt_en: Add missing check for BNXT_STATE_ABORT_ERR in bnxt_fw_rset_task()
    - bnxt_en: Validate vlan protocol ID on RX packets
    - bnxt_en: Check abort error state in bnxt_half_open_nic()
    - net: hisilicon: rename CACHE_LINE_MASK to avoid redefinition
    - net/tcp_fastopen: fix data races around tfo_active_disable_stamp
    - ALSA: hda: intel-dsp-cfg: add missing ElkhartLake PCI ID
    - net: hns3: fix possible mismatches resp of mailbox
    - net: hns3: fix rx VLAN offload state inconsistent issue
    - spi: spi-bcm2835: Fix deadlock
    - net/sched: act_skbmod: Skip non-Ethernet packets
    - ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions
    - ceph: don't WARN if we're still opening a session to an MDS
    - nvme-pci: don't WARN_ON in nvme_reset_work if ctrl.state is not RESETTING
    - Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem"
    - afs: Fix tracepoint string placement with built-in AFS
    - r8169: Avoid duplicate sysfs entry creation error
    - nvme: set the PRACT bit when using Write Zeroes with T10 PI
    - sctp: update active_key for asoc when old key is being replaced
    - tcp: disable TFO blackhole logic by default
    - net: dsa: sja1105: make VID 4095 a bridge VLAN too
    - net: sched: cls_api: Fix the the wrong parameter
    - drm/panel: raspberrypi-touchscreen: Prevent double-free
    - cifs: only write 64kb at a time when fallocating a small region of a file
    - cifs: fix fallocate when trying to allocate a hole.
    - mmc: core: Don't allocate IDA for OF aliases
    - s390/ftrace: fix ftrace_update_ftrace_func implementation
    - s390/boot: fix use of expolines in the DMA code
    - ALSA: usb-audio: Add missing proc text entry for BESPOKEN type
    - ALSA: usb-audio: Add registration quirk for JBL Quantum headsets
    - ALSA: sb: Fix potential ABBA deadlock in CSP driver
    - ALSA: hda/realtek: Fix pop noise and 2 Front Mic issues on a machine
    - ALSA: hdmi: Expose all pins on MSI MS-7C94 board
    - ALSA: pcm: Call substream ack() method upon compat mmap commit
    - ALSA: pcm: Fix mmap capability check
    - usb: xhci: avoid renesas_usb_fw.mem when it's unusable
    - xhci: Fix lost USB 2 remote wake
    - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow
    - KVM: PPC: Book3S HV Nested: Sanitise H_ENTER_NESTED TM state
    - usb: hub: Disable USB 3 device initiated lpm if exit latency is too high
    - usb: hub: Fix link power management max exit latency (MEL) calculations
    - USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS
    - usb: max-3421: Prevent corruption of freed memory
    - usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop()
    - USB: serial: option: add support for u-blox LARA-R6 family
    - USB: serial: cp210x: fix comments for GE CS1000
    - USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick
    - usb: gadget: Fix Unbalanced pm_runtime_enable in tegra_xudc_probe
    - usb: dwc2: gadget: Fix GOUTNAK flow for Slave mode.
    - usb: dwc2: gadget: Fix sending zero length packet in DDMA mode.
    - usb: typec: stusb160x: register role switch before interrupt registration
    - firmware/efi: Tell memblock about EFI iomem reservations
    - tracepoints: Update static_call before tp_funcs when adding a tracepoint
    - tracing/histogram: Rename "cpu" to "common_cpu"
    - tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop.
    - tracing: Synthetic event field_pos is an index not a boolean
    - btrfs: check for missing device in btrfs_trim_fs
    - media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf()
    - ixgbe: Fix packet corruption due to missing DMA sync
    - bus: mhi: core: Validate channel ID when processing command completions
    - posix-cpu-timers: Fix rearm racing against process tick
    - selftest: use mmap instead of posix_memalign to allocate memory
    - io_uring: explicitly count entries for poll reqs
    - io_uring: remove double poll entry on arm failure
    - userfaultfd: do not untag user pointers
    - memblock: make for_each_mem_range() traverse MEMBLOCK_HOTPLUG regions
    - hugetlbfs: fix mount mode command line processing
    - rbd: don't hold lock_rwsem while running_list is being drained
    - rbd: always kick acquire on "acquired" and "released" notifications
    - misc: eeprom: at24: Always append device id even if label property is set.
    - nds32: fix up stack guard gap
    - driver core: Prevent warning when removing a device link from unregistered
      consumer
    - drm: Return -ENOTTY for non-drm ioctls
    - drm/amdgpu: update golden setting for sienna_cichlid
    - net: dsa: mv88e6xxx: enable SerDes RX stats for Topaz
    - net: dsa: mv88e6xxx: enable SerDes PCS register dump via ethtool -d on Topaz
    - bonding: fix build issue
    - skbuff: Release nfct refcount on napi stolen or re-used skbs
    - Documentation: Fix intiramfs script name
    - perf inject: Close inject.output on exit
    - usb: ehci: Prevent missed ehci interrupts with edge-triggered MSI
    - drm/i915/gvt: Clear d3_entered on elsp cmd submission.
    - sfc: ensure correct number of XDP queues
    - xhci: add xhci_get_virt_ep() helper
    - skbuff: Fix build with SKB extensions disabled
    - mptcp: fix syncookie process if mptcp can not_accept new subflow
    - mptcp: add sk parameter for mptcp_get_options
    - mptcp: avoid processing packet if a subflow reset
    - selftests: mptcp: fix case multiple subflows limited by server
    - arm64: mte: fix restoration of GCR_EL1 from suspend
    - firmware: arm_scmi: Ensure drivers provide a probe function
    - perf test event_update: Fix memory leak of unit
    - perf script: Release zstd data
    - ASoC: soc-pcm: add a flag to reverse the stop sequence
    - afs: Fix setting of writeback_index
    - udp: check encap socket in __udp_lib_err
    - RISC-V: load initrd wherever it fits into memory
    - ACPI: fix NULL pointer dereference
    - btrfs: fix unpersisted i_size on fsync after expanding truncate
    - btrfs: fix lock inversion problem when doing qgroup extent tracing
    - driver core: auxiliary bus: Fix memory leak when driver_register() fail
    - bus: mhi: pci_generic: Fix inbound IPCR channel
    - drm/amdgpu: update gc golden setting for dimgrey_cavefish
    - drm/amdgpu: update the golden setting for vangogh
  * AMDGPU: Fix System hang after resume from suspend (LP: #1940204)
    - SAUCE: drm/amdgpu: disable BACO support for 699F:C7 polaris12 SKU
      temporarily
  * Hirsute update: upstream stable patchset 2021-08-16 (LP: #1940139)
    - ARM: dts: gemini: rename mdio to the right name
    - ARM: dts: gemini: add device_type on pci
    - ARM: dts: rockchip: Fix thermal sensor cells o rk322x
    - ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288
    - arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi
    - ARM: dts: rockchip: Fix the timer clocks order
    - ARM: dts: rockchip: Fix IOMMU nodes properties on rk322x
    - ARM: dts: rockchip: Fix power-controller node names for rk3066a
    - ARM: dts: rockchip: Fix power-controller node names for rk3188
    - ARM: dts: rockchip: Fix power-controller node names for rk3288
    - arm64: dts: rockchip: Fix power-controller node names for px30
    - arm64: dts: rockchip: Fix power-controller node names for rk3328
    - arm64: dts: rockchip: Fix power-controller node names for rk3399
    - reset: ti-syscon: fix to_ti_syscon_reset_data macro
    - ARM: brcmstb: dts: fix NAND nodes names
    - ARM: Cygnus: dts: fix NAND nodes names
    - ARM: NSP: dts: fix NAND nodes names
    - ARM: dts: BCM63xx: Fix NAND nodes names
    - ARM: dts: Hurricane 2: Fix NAND nodes names
    - ARM: dts: imx6: phyFLEX: Fix UART hardware flow control
    - ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info
    - arm64: dts: rockchip: fix regulator-gpio states array
    - ARM: dts: ux500: Fix interrupt cells
    - ARM: dts: ux500: Rename gpio-controller node
    - ARM: dts: ux500: Fix orientation of accelerometer
    - ARM: dts: imx6dl-riotboard: configure PHY clock and set proper EEE value
    - rtc: mxc_v2: add missing MODULE_DEVICE_TABLE
    - kbuild: sink stdout from cmd for silent build
    - ARM: dts: am57xx-cl-som-am57x: fix ti,no-reset-on-init flag for gpios
    - ARM: dts: am437x-gp-evm: fix ti,no-reset-on-init flag for gpios
    - ARM: dts: am335x: fix ti,no-reset-on-init flag for gpios
    - ARM: dts: OMAP2+: Replace underscores in sub-mailbox node names
    - arm64: dts: ti: k3-am654x/j721e/j7200-common-proc-board: Fix MCU_RGMII1_TXC
      direction
    - ARM: tegra: wm8903: Fix polarity of headphones-detection GPIO in device-
      trees
    - ARM: tegra: nexus7: Correct 3v3 regulator GPIO of PM269 variant
    - arm64: dts: qcom: sc7180: Move rmtfs memory region
    - ARM: dts: stm32: Remove extra size-cells on dhcom-pdk2
    - ARM: dts: stm32: Fix touchscreen node on dhcom-pdk2
    - ARM: dts: stm32: fix stm32mp157c-odyssey card detect pin
    - ARM: dts: stm32: fix gpio-keys node on STM32 MCU boards
    - ARM: dts: stm32: fix RCC node name on stm32f429 MCU
    - ARM: dts: stm32: fix timer nodes on STM32 MCU to prevent warnings
    - memory: tegra: Fix compilation warnings on 64bit platforms
    - firmware: arm_scmi: Add SMCCC discovery dependency in Kconfig
    - firmware: arm_scmi: Fix the build when CONFIG_MAILBOX is not selected
    - ARM: dts: bcm283x: Fix up MMC node names
    - ARM: dts: bcm283x: Fix up GPIO LED node names
    - arm64: dts: juno: Update SCPI nodes as per the YAML schema
    - ARM: dts: rockchip: fix supply properties in io-domains nodes
    - ARM: dts: stm32: fix i2c node name on stm32f746 to prevent warnings
    - ARM: dts: stm32: move stmmac axi config in ethernet node on stm32mp15
    - ARM: dts: stm32: fix the Odyssey SoM eMMC VQMMC supply
    - ARM: dts: stm32: Drop unused linux,wakeup from touchscreen node on DHCOM SoM
    - ARM: dts: stm32: Rename spi-flash/mx66l51235l@N to flash@N on DHCOM SoM
    - ARM: dts: stm32: fix stpmic node for stm32mp1 boards
    - ARM: OMAP2+: Block suspend for am3 and am4 if PM is not configured
    - soc/tegra: fuse: Fix Tegra234-only builds
    - firmware: tegra: bpmp: Fix Tegra234-only builds
    - arm64: dts: ls208xa: remove bus-num from dspi node
    - arm64: dts: imx8mq: assign PCIe clocks
    - thermal/core: Correct function name thermal_zone_device_unregister()
    - thermal/drivers/rcar_gen3_thermal: Do not shadow rcar_gen3_ths_tj_1
    - thermal/drivers/imx_sc: Add missing of_node_put for loop iteration
    - thermal/drivers/sprd: Add missing of_node_put for loop iteration
    - kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set
    - arch/arm64/boot/dts/marvell: fix NAND partitioning scheme
    - rtc: max77686: Do not enforce (incorrect) interrupt trigger type
    - scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8
    - scsi: libsas: Add LUN number check in .slave_alloc callback
    - scsi: libfc: Fix array index out of bound exception
    - scsi: qedf: Add check to synchronize abort and flush
    - sched/fair: Fix CFS bandwidth hrtimer expiry type
    - perf/x86/intel/uncore: Clean up error handling path of iio mapping
    - thermal/core/thermal_of: Stop zone device before unregistering it
    - s390/traps: do not test MONITOR CALL without CONFIG_BUG
    - s390: introduce proper type handling call_on_stack() macro
    - cifs: prevent NULL deref in cifs_compose_mount_options()
    - firmware: turris-mox-rwtm: add marvell,armada-3700-rwtm-firmware compatible
      string
    - arm64: dts: marvell: armada-37xx: move firmware node to generic dtsi file
    - Revert "swap: fix do_swap_page() race with swapoff"
    - f2fs: Show casefolding support only when supported
    - mm/thp: simplify copying of huge zero page pmd when fork
    - mm/userfaultfd: fix uffd-wp special cases for fork()
    - mm/page_alloc: fix memory map initialization for descending nodes
    - net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear
    - net: dsa: mv88e6xxx: enable .port_set_policy() on Topaz
    - net: dsa: mv88e6xxx: use correct .stats_set_histogram() on Topaz
    - net: dsa: mv88e6xxx: enable .rmu_disable() on Topaz
    - net: dsa: mv88e6xxx: enable devlink ATU hash param for Topaz
    - net: ipv6: fix return value of ip6_skb_dst_mtu
    - netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo
    - net/sched: act_ct: fix err check for nf_conntrack_confirm
    - vmxnet3: fix cksum offload issues for tunnels with non-default udp ports
    - net/sched: act_ct: remove and free nf_table callbacks
    - net: bridge: sync fdb to new unicast-filtering ports
    - net: netdevsim: use xso.real_dev instead of xso.dev in callback functions of
      struct xfrmdev_ops
    - net: bcmgenet: Ensure all TX/RX queues DMAs are disabled
    - net: ip_tunnel: fix mtu calculation for ETHER tunnel devices
    - net: moxa: fix UAF in moxart_mac_probe
    - net: qcom/emac: fix UAF in emac_remove
    - net: ti: fix UAF in tlan_remove_one
    - net: send SYNACK packet with accepted fwmark
    - net: validate lwtstate->data before returning from skb_tunnel_info()
    - net: dsa: properly check for the bridge_leave methods in
      dsa_switch_bridge_leave()
    - net: fddi: fix UAF in fza_probe
    - dma-buf/sync_file: Don't leak fences on merge failure
    - kbuild: do not suppress Kconfig prompts for silent build
    - ARM: dts: aspeed: Fix AST2600 machines line names
    - ARM: dts: tacoma: Add phase corrections for eMMC
    - tcp: consistently disable header prediction for mptcp
    - tcp: annotate data races around tp->mtu_info
    - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized
    - ipv6: tcp: drop silly ICMPv6 packet too big messages
    - tcp: call sk_wmem_schedule before sk_mem_charge in zerocopy path
    - tools: bpf: Fix error in 'make -C tools/ bpf_install'
    - bpftool: Properly close va_list 'ap' by va_end() on error
    - bpf: Track subprog poke descriptors correctly and fix use-after-free
    - perf test bpf: Free obj_buf
    - drm/panel: nt35510: Do not fail if DSI read fails
    - udp: annotate data races around unix_sk(sk)->gso_size
    - arm64: dts: rockchip: Use only supported PCIe link speed on rk3399
    - ARM: dts: BCM5301X: Fix NAND nodes names
    - ARM: dts: BCM5301X: Fix pinmux subnodes names
    - soc: mediatek: add missing MODULE_DEVICE_TABLE
    - ARM: dts: ux500: Fix some compatible strings
    - arm64: tegra: Add PMU node for Tegra194
    - ARM: dts: stm32: Rename eth@N to ethernet@N on DHCOM SoM
    - arm64: dts: qcom: sm8150: Disable Adreno and modem by default
    - net: marvell: always set skb_shared_info in mvneta_swbm_add_rx_fragment
    - vboxsf: Honor excl flag to the dir-inode create op
    - vboxsf: Make vboxsf_dir_create() return the handle for the created file
    - vboxsf: Add vboxsf_[create|release]_sf_handle() helpers
    - vboxsf: Add support for the atomic_open directory-inode op
    - firmware: arm_scmi: Avoid padding in sensor message structure
  * Hirsute update: upstream stable patchset 2021-08-12 (LP: #1939738)
    - certs: add 'x509_revocation_list' to gitignore
    - cifs: handle reconnect of tcon when there is no cached dfs referral
    - KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio
    - KVM: x86: Use guest MAXPHYADDR from CPUID.0x8000_0008 iff TDP is enabled
    - KVM: x86/mmu: Do not apply HPA (memory encryption) mask to GPAs
    - KVM: nSVM: Check the value written to MSR_VM_HSAVE_PA
    - KVM: X86: Disable hardware breakpoints unconditionally before kvm_x86->run()
    - scsi: core: Fix bad pointer dereference when ehandler kthread is invalid
    - scsi: zfcp: Report port fc_security as unknown early during remote cable
      pull
    - tracing: Do not reference char * as a string in histograms
    - drm/i915/gtt: drop the page table optimisation
    - drm/i915/gt: Fix -EDEADLK handling regression
    - cgroup: verify that source is a string
    - fbmem: Do not delete the mode that is still in use
    - drm/dp_mst: Do not set proposed vcpi directly
    - drm/dp_mst: Avoid to mess up payload table by ports in stale topology
    - drm/dp_mst: Add missing drm parameters to recently added call to
      drm_dbg_kms()
    - net: bridge: multicast: fix PIM hello router port marking race
    - net: bridge: multicast: fix MRD advertisement router port marking race
    - leds: tlc591xx: fix return value check in tlc591xx_probe()
    - ASoC: Intel: sof_sdw: add mutual exclusion between PCH DMIC and RT715
    - dmaengine: fsl-qdma: check dma_set_mask return value
    - scsi: arcmsr: Fix the wrong CDB payload report to IOP
    - srcu: Fix broken node geometry after early ssp init
    - rcu: Reject RCU_LOCKDEP_WARN() false positives
    - tty: serial: fsl_lpuart: fix the potential risk of division or modulo by
      zero
    - serial: fsl_lpuart: disable DMA for console and fix sysrq
    - misc/libmasm/module: Fix two use after free in ibmasm_init_one
    - misc: alcor_pci: fix null-ptr-deref when there is no PCI bridge
    - ASoC: intel/boards: add missing MODULE_DEVICE_TABLE
    - partitions: msdos: fix one-byte get_unaligned()
    - iio: gyro: fxa21002c: Balance runtime pm + use pm_runtime_resume_and_get().
    - iio: magn: bmc150: Balance runtime pm + use pm_runtime_resume_and_get()
    - ALSA: usx2y: Avoid camelCase
    - ALSA: usx2y: Don't call free_pages_exact() with NULL address
    - Revert "ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro"
    - usb: common: usb-conn-gpio: fix NULL pointer dereference of charger
    - w1: ds2438: fixing bug that would always get page0
    - scsi: arcmsr: Fix doorbell status being updated late on ARC-1886
    - scsi: hisi_sas: Propagate errors in interrupt_init_v1_hw()
    - scsi: lpfc: Fix "Unexpected timeout" error in direct attach topology
    - scsi: lpfc: Fix crash when lpfc_sli4_hba_setup() fails to initialize the
      SGLs
    - scsi: core: Cap scsi_host cmd_per_lun at can_queue
    - ALSA: ac97: fix PM reference leak in ac97_bus_remove()
    - tty: serial: 8250: serial_cs: Fix a memory leak in error handling path
    - scsi: mpt3sas: Fix deadlock while cancelling the running firmware event
    - scsi: core: Fixup calling convention for scsi_mode_sense()
    - scsi: scsi_dh_alua: Check for negative result value
    - fs/jfs: Fix missing error code in lmLogInit()
    - scsi: megaraid_sas: Fix resource leak in case of probe failure
    - scsi: megaraid_sas: Early detection of VD deletion through RaidMap update
    - scsi: megaraid_sas: Handle missing interrupts while re-enabling IRQs
    - scsi: iscsi: Add iscsi_cls_conn refcount helpers
    - scsi: iscsi: Fix conn use after free during resets
    - scsi: iscsi: Fix shost->max_id use
    - scsi: qedi: Fix null ref during abort handling
    - scsi: qedi: Fix race during abort timeouts
    - scsi: qedi: Fix TMF session block/unblock use
    - scsi: qedi: Fix cleanup session block/unblock use
    - mfd: da9052/stmpe: Add and modify MODULE_DEVICE_TABLE
    - mfd: cpcap: Fix cpcap dmamask not set warnings
    - ASoC: img: Fix PM reference leak in img_i2s_in_probe()
    - fsi: Add missing MODULE_DEVICE_TABLE
    - serial: tty: uartlite: fix console setup
    - s390/sclp_vt220: fix console name to match device
    - s390: disable SSP when needed
    - ALSA: sb: Fix potential double-free of CSP mixer elements
    - powerpc/ps3: Add dma_mask to ps3_dma_region
    - iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get
      fails
    - iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation
    - ASoC: soc-pcm: fix the return value in dpcm_apply_symmetry()
    - gpio: zynq: Check return value of pm_runtime_get_sync
    - gpio: zynq: Check return value of irq_get_irq_data
    - scsi: storvsc: Correctly handle multiple flags in srb_status
    - ALSA: ppc: fix error return code in snd_pmac_probe()
    - selftests/powerpc: Fix "no_handler" EBB selftest
    - gpio: pca953x: Add support for the On Semi pca9655
    - powerpc/mm/book3s64: Fix possible build error
    - ASoC: soc-core: Fix the error return code in
      snd_soc_of_parse_audio_routing()
    - habanalabs/gaudi: set the correct cpu_id on MME2_QM failure
    - habanalabs: remove node from list before freeing the node
    - s390/processor: always inline stap() and __load_psw_mask()
    - s390/ipl_parm: fix program check new psw handling
    - s390/mem_detect: fix diag260() program check new psw handling
    - s390/mem_detect: fix tprot() program check new psw handling
    - Input: hideep - fix the uninitialized use in hideep_nvm_unlock()
    - ALSA: bebob: add support for ToneWeal FW66
    - ALSA: usb-audio: scarlett2: Fix 18i8 Gen 2 PCM Input count
    - ALSA: usb-audio: scarlett2: Fix data_mutex lock
    - ALSA: usb-audio: scarlett2: Fix scarlett2_*_ctl_put() return values
    - usb: gadget: f_hid: fix endianness issue with descriptors
    - usb: gadget: hid: fix error return code in hid_bind()
    - powerpc/boot: Fixup device-tree on little endian
    - ASoC: Intel: kbl_da7219_max98357a: shrink platform_id below 20 characters
    - backlight: lm3630a: Fix return code of .update_status() callback
    - ALSA: hda: Add IRQ check for platform_get_irq()
    - ALSA: usb-audio: scarlett2: Fix 6i6 Gen 2 line out descriptions
    - ALSA: firewire-motu: fix detection for S/PDIF source on optical interface in
      v2 protocol
    - leds: turris-omnia: add missing MODULE_DEVICE_TABLE
    - staging: rtl8723bs: fix macro value for 2.4Ghz only device
    - intel_th: Wait until port is in reset before programming it
    - i2c: core: Disable client irq on reboot/shutdown
    - phy: intel: Fix for warnings due to EMMC clock 175Mhz change in FIP
    - kcov: add __no_sanitize_coverage to fix noinstr for all architectures
    - power: supply: sc27xx: Add missing MODULE_DEVICE_TABLE
    - power: supply: sc2731_charger: Add missing MODULE_DEVICE_TABLE
    - pwm: spear: Don't modify HW state in .remove callback
    - PCI: ftpci100: Rename macro name collision
    - power: supply: ab8500: Avoid NULL pointers
    - PCI: hv: Fix a race condition when removing the device
    - power: supply: max17042: Do not enforce (incorrect) interrupt trigger type
    - power: reset: gpio-poweroff: add missing MODULE_DEVICE_TABLE
    - ARM: 9087/1: kprobes: test-thumb: fix for LLVM_IAS=1
    - PCI/P2PDMA: Avoid pci_get_slot(), which may sleep
    - NFSv4: Fix delegation return in cases where we have to retry
    - PCI: pciehp: Ignore Link Down/Up caused by DPC
    - watchdog: Fix possible use-after-free in wdt_startup()
    - watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff()
    - watchdog: Fix possible use-after-free by calling del_timer_sync()
    - watchdog: imx_sc_wdt: fix pretimeout
    - x86/fpu: Return proper error codes from user access functions
    - remoteproc: core: Fix cdev remove and rproc del
    - PCI: tegra: Add missing MODULE_DEVICE_TABLE
    - orangefs: fix orangefs df output.
    - ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty
    - drm/gma500: Add the missed drm_gem_object_put() in
      psb_user_framebuffer_create()
    - NFS: nfs_find_open_context() may only select open files
    - power: supply: charger-manager: add missing MODULE_DEVICE_TABLE
    - power: supply: ab8500: add missing MODULE_DEVICE_TABLE
    - drm/amdkfd: fix sysfs kobj leak
    - pwm: img: Fix PM reference leak in img_pwm_enable()
    - pwm: tegra: Don't modify HW state in .remove callback
    - ACPI: AMBA: Fix resource name in /proc/iomem
    - ACPI: video: Add quirk for the Dell Vostro 3350
    - PCI: rockchip: Register IRQ handlers after device and data are ready
    - virtio-blk: Fix memory leak among suspend/resume procedure
    - virtio_net: Fix error handling in virtnet_restore()
    - virtio_console: Assure used length from device is limited
    - f2fs: atgc: fix to set default age threshold
    - NFSD: Fix TP_printk() format specifier in nfsd_clid_class
    - x86/signal: Detect and prevent an alternate signal stack overflow
    - f2fs: add MODULE_SOFTDEP to ensure crc32 is included in the initramfs
    - f2fs: compress: fix to disallow temp extension
    - remoteproc: k3-r5: Fix an error message
    - PCI/sysfs: Fix dsm_label_utf16s_to_utf8s() buffer overrun
    - power: supply: rt5033_battery: Fix device tree enumeration
    - NFSv4: Initialise connection to the server in nfs4_alloc_client()
    - NFSv4: Fix an Oops in pnfs_mark_request_commit() when doing O_DIRECT
    - misc: alcor_pci: fix inverted branch condition
    - um: fix error return code in slip_open()
    - um: fix error return code in winch_tramp()
    - ubifs: Fix off-by-one error
    - ubifs: journal: Fix error return code in ubifs_jnl_write_inode()
    - watchdog: aspeed: fix hardware timeout calculation
    - watchdog: jz4740: Fix return value check in jz4740_wdt_probe()
    - SUNRPC: prevent port reuse on transports which don't request it.
    - nfs: fix acl memory leak of posix_acl_create()
    - ubifs: Set/Clear I_LINKABLE under i_lock for whiteout inode
    - PCI: iproc: Fix multi-MSI base vector number allocation
    - PCI: iproc: Support multi-MSI only on uniprocessor kernel
    - f2fs: fix to avoid adding tab before doc section
    - x86/fpu: Fix copy_xstate_to_kernel() gap handling
    - x86/fpu: Limit xstate copy size in xstateregs_set()
    - PCI: intel-gw: Fix INTx enable
    - pwm: imx1: Don't disable clocks at device remove time
    - PCI: tegra194: Fix tegra_pcie_ep_raise_msi_irq() ill-defined shift
    - vdpa/mlx5: Fix umem sizes assignments on VQ create
    - vdpa/mlx5: Fix possible failure in umem size calculation
    - virtio_net: move tx vq operation under tx queue lock
    - nvme-tcp: can't set sk_user_data without write_lock
    - nfsd: Reduce contention for the nfsd_file nf_rwsem
    - ALSA: isa: Fix error return code in snd_cmi8330_probe()
    - vdpa/mlx5: Clear vq ready indication upon device reset
    - NFSv4/pnfs: Fix the layout barrier update
    - NFSv4/pnfs: Fix layoutget behaviour after invalidation
    - NFSv4/pNFS: Don't call _nfs4_pnfs_v3_ds_connect multiple times
    - hexagon: handle {,SOFT}IRQENTRY_TEXT in linker script
    - hexagon: use common DISCARDS macro
    - ARM: dts: gemini-rut1xx: remove duplicate ethernet node
    - reset: RESET_BRCMSTB_RESCAL should depend on ARCH_BRCMSTB
    - reset: RESET_INTEL_GW should depend on X86
    - [Config] updateconfigs for RESET_INTEL_GW, RESET_BRCMSTB_RESCAL
    - reset: a10sr: add missing of_match_table reference
    - ARM: exynos: add missing of_node_put for loop iteration
    - ARM: dts: exynos: fix PWM LED max brightness on Odroid XU/XU3
    - ARM: dts: exynos: fix PWM LED max brightness on Odroid HC1
    - ARM: dts: exynos: fix PWM LED max brightness on Odroid XU4
    - memory: stm32-fmc2-ebi: add missing of_node_put for loop iteration
    - memory: atmel-ebi: add missing of_node_put for loop iteration
    - reset: brcmstb: Add missing MODULE_DEVICE_TABLE
    - memory: pl353: Fix error return code in pl353_smc_probe()
    - ARM: dts: sun8i: h3: orangepi-plus: Fix ethernet phy-mode
    - rtc: fix snprintf() checking in is_rtc_hctosys()
    - arm64: dts: renesas: v3msk: Fix memory size
    - ARM: dts: r8a7779, marzen: Fix DU clock names
    - arm64: dts: ti: j7200-main: Enable USB2 PHY RX sensitivity workaround
    - arm64: dts: renesas: Add missing opp-suspend properties
    - arm64: dts: renesas: r8a7796[01]: Fix OPP table entry voltages
    - ARM: dts: stm32: Rework LAN8710Ai PHY reset on DHCOM SoM
    - arm64: dts: qcom: trogdor: Add no-hpd to DSI bridge node
    - firmware: tegra: Fix error return code in tegra210_bpmp_init()
    - firmware: arm_scmi: Reset Rx buffer to max size during async commands
    - dt-bindings: i2c: at91: fix example for scl-gpios
    - ARM: dts: BCM5301X: Fixup SPI binding
    - reset: bail if try_module_get() fails
    - arm64: dts: renesas: r8a779a0: Drop power-domains property from GIC node
    - arm64: dts: ti: k3-j721e-main: Fix external refclk input to SERDES
    - memory: fsl_ifc: fix leak of IO mapping on probe failure
    - memory: fsl_ifc: fix leak of private memory on probe failure
    - arm64: dts: allwinner: a64-sopine-baseboard: change RGMII mode to TXID
    - ARM: dts: dra7: Fix duplicate USB4 target module node
    - ARM: dts: am335x: align ti,pindir-d0-out-d1-in property with dt-shema
    - ARM: dts: am437x: align ti,pindir-d0-out-d1-in property with dt-shema
    - thermal/drivers/sprd: Add missing MODULE_DEVICE_TABLE
    - ARM: dts: imx6q-dhcom: Fix ethernet reset time properties
    - ARM: dts: imx6q-dhcom: Fix ethernet plugin detection problems
    - ARM: dts: imx6q-dhcom: Add gpios pinctrl for i2c bus recovery
    - thermal/drivers/rcar_gen3_thermal: Fix coefficient calculations
    - firmware: turris-mox-rwtm: fix reply status decoding function
    - firmware: turris-mox-rwtm: report failures better
    - firmware: turris-mox-rwtm: fail probing when firmware does not support hwrng
    - firmware: turris-mox-rwtm: show message about HWRNG registration
    - arm64: dts: rockchip: Re-add regulator-boot-on, regulator-always-on for
      vdd_gpu on rk3399-roc-pc
    - arm64: dts: rockchip: Re-add regulator-always-on for vcc_sdio for
      rk3399-roc-pc
    - scsi: be2iscsi: Fix an error handling path in beiscsi_dev_probe()
    - sched/uclamp: Ignore max aggregation if rq is idle
    - jump_label: Fix jump_label_text_reserved() vs __init
    - static_call: Fix static_call_text_reserved() vs __init
    - mips: always link byteswap helpers into decompressor
    - mips: disable branch profiling in boot/decompress.o
    - MIPS: vdso: Invalid GIC access through VDSO
    - scsi: scsi_dh_alua: Fix signedness bug in alua_rtpg()
    - cifs: use the expiry output of dns_query to schedule next resolution
    - cifs: Do not use the original cruid when following DFS links for multiuser
      mounts
    - iommu/vt-d: Global devTLB flush when present context entry changed
    - iommu/vt-d: Fix clearing real DMA device's scalable-mode context entries
    - drm/amdgpu: add another Renoir DID
    - arm64: Avoid premature usercopy failure
    - iio: imu: st_lsm6dsx: correct ODR in header
    - iommu/arm-smmu-qcom: Skip the TTBR1 quirk for db820c.
    - xhci: handle failed buffer copy to URB sg list and fix a W=1 copiler warning
    - habanalabs: set rc as 'valid' in case of intentional func exit
    - habanalabs/gaudi: set the correct rc in case of err
    - m68knommu: fix missing LCD splash screen data initializer
    - ASoC: fsl_xcvr: check return value after calling
      platform_get_resource_byname()
    - PCI: Dynamically map ECAM regions
    - watchdog: iTCO_wdt: Account for rebooting on second timeout
    - power: reset: regulator-poweroff: add missing MODULE_DEVICE_TABLE
    - power: supply: axp288_fuel_gauge: Make "T3 MRD" no_battery_list DMI entry
      more generic
    - drm/amdgpu: fix Navi1x tcp power gating hang when issuing lightweight
      invalidaiton
    - ext4: fix WARN_ON_ONCE(!buffer_uptodate) after an error writing the
      superblock
    - block: fix the problem of io_ticks becoming smaller
    - sunrpc: Avoid a KASAN slab-out-of-bounds bug in xdr_set_page_base()
    - um: Fix stack pointer alignment
    - virtio-mem: don't read big block size in Sub Block Mode
    - arm64: dts: qcom: c630: Add no-hpd to DSI bridge node
    - soc: mtk-pm-domains: do not register smi node as syscon
    - soc: mtk-pm-domains: Fix the clock prepared issue
    - Revert "ARM: dts: bcm283x: increase dwc2's RX FIFO size"
    - kprobe/static_call: Restore missing static_call_text_reserved()
    - cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init
  * Hirsute update: upstream stable patchset 2021-08-10 (LP: #1939450)
    - drm/mxsfb: Don't select DRM_KMS_FB_HELPER
    - drm/zte: Don't select DRM_KMS_FB_HELPER
    - drm/ast: Fixed CVE for DP501
    - drm/amd/display: fix HDCP reset sequence on reinitialize
    - drm/amd/amdgpu/sriov disable all ip hw status by default
    - drm/vc4: fix argument ordering in vc4_crtc_get_margins()
    - drm/bridge: nwl-dsi: Force a full modeset when crtc_state->active is changed
      to be true
    - net: pch_gbe: Use proper accessors to BE data in pch_ptp_match()
    - drm/amd/display: fix use_max_lb flag for 420 pixel formats
    - clk: renesas: rcar-usb2-clock-sel: Fix error handling in .probe()
    - hugetlb: clear huge pte during flush function on mips platform
    - atm: iphase: fix possible use-after-free in ia_module_exit()
    - mISDN: fix possible use-after-free in HFC_cleanup()
    - atm: nicstar: Fix possible use-after-free in nicstar_cleanup()
    - net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT
    - drm/mediatek: Fix PM reference leak in mtk_crtc_ddp_hw_init()
    - net: mdio: ipq8064: add regmap config to disable REGCACHE
    - drm/bridge: lt9611: Add missing MODULE_DEVICE_TABLE
    - reiserfs: add check for invalid 1st journal block
    - drm/virtio: Fix double free on probe failure
    - net: mdio: provide shim implementation of devm_of_mdiobus_register
    - net/sched: cls_api: increase max_reclassify_loop
    - pinctrl: equilibrium: Add missing MODULE_DEVICE_TABLE
    - drm/scheduler: Fix hang when sched_entity released
    - drm/sched: Avoid data corruptions
    - udf: Fix NULL pointer dereference in udf_symlink function
    - drm/vc4: Fix clock source for VEC PixelValve on BCM2711
    - drm/vc4: hdmi: Fix PM reference leak in vc4_hdmi_encoder_pre_crtc_co()
    - e100: handle eeprom as little endian
    - igb: handle vlan types with checker enabled
    - igb: fix assignment on big endian machines
    - drm/bridge: cdns: Fix PM reference leak in cdns_dsi_transfer()
    - clk: renesas: r8a77995: Add ZA2 clock
    - net/mlx5e: IPsec/rep_tc: Fix rep_tc_update_skb drops IPsec packet
    - net/mlx5: Fix lag port remapping logic
    - drm: rockchip: add missing registers for RK3188
    - drm: rockchip: add missing registers for RK3066
    - net: stmmac: the XPCS obscures a potential "PHY not found" error
    - RDMA/rtrs: Change MAX_SESS_QUEUE_DEPTH
    - clk: tegra: Fix refcounting of gate clocks
    - clk: tegra: Ensure that PLLU configuration is applied properly
    - drm: bridge: cdns-mhdp8546: Fix PM reference leak in
    - virtio-net: Add validation for used length
    - ipv6: use prandom_u32() for ID generation
    - MIPS: cpu-probe: Fix FPU detection on Ingenic JZ4760(B)
    - MIPS: ingenic: Select CPU_SUPPORTS_CPUFREQ && MIPS_EXTERNAL_TIMER
    - drm/amd/display: Avoid HDCP over-read and corruption
    - drm/amdgpu: remove unsafe optimization to drop preamble ib
    - net: tcp better handling of reordering then loss cases
    - RDMA/cxgb4: Fix missing error code in create_qp()
    - dm space maps: don't reset space map allocation cursor when committing
    - dm writecache: don't split bios when overwriting contiguous cache content
    - dm: Fix dm_accept_partial_bio() relative to zone management commands
    - net: bridge: mrp: Update ring transitions.
    - pinctrl: mcp23s08: fix race condition in irq handler
    - ice: set the value of global config lock timeout longer
    - ice: fix clang warning regarding deadcode.DeadStores
    - virtio_net: Remove BUG() to avoid machine dead
    - net: mscc: ocelot: check return value after calling platform_get_resource()
    - net: bcmgenet: check return value after calling platform_get_resource()
    - net: mvpp2: check return value after calling platform_get_resource()
    - net: micrel: check return value after calling platform_get_resource()
    - net: moxa: Use devm_platform_get_and_ioremap_resource()
    - drm/amd/display: Fix DCN 3.01 DSCCLK validation
    - drm/amd/display: Update scaling settings on modeset
    - drm/amd/display: Release MST resources on switch from MST to SST
    - drm/amd/display: Set DISPCLK_MAX_ERRDET_CYCLES to 7
    - drm/amd/display: Fix off-by-one error in DML
    - net: phy: realtek: add delay to fix RXC generation issue
    - selftests: Clean forgotten resources as part of cleanup()
    - net: sgi: ioc3-eth: check return value after calling platform_get_resource()
    - drm/amdkfd: use allowed domain for vmbo validation
    - fjes: check return value after calling platform_get_resource()
    - selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC
    - r8169: avoid link-up interrupt issue on RTL8106e if user enables ASPM
    - drm/amd/display: Verify Gamma & Degamma LUT sizes in amdgpu_dm_atomic_check
    - xfrm: Fix error reporting in xfrm_state_construct.
    - dm writecache: commit just one block, not a full page
    - wlcore/wl12xx: Fix wl12xx get_mac error if device is in ELP
    - wl1251: Fix possible buffer overflow in wl1251_cmd_scan
    - cw1200: add missing MODULE_DEVICE_TABLE
    - drm/amdkfd: fix circular locking on get_wave_state
    - drm/amdkfd: Fix circular lock in nocpsch path
    - bpf: Fix up register-based shifts in interpreter to silence KUBSAN
    - ice: fix incorrect payload indicator on PTYPE
    - ice: mark PTYPE 2 as reserved
    - mt76: mt7615: fix fixed-rate tx status reporting
    - net: fix mistake path for netdev_features_strings
    - net: ipa: Add missing of_node_put() in ipa_firmware_load()
    - net: sched: fix error return code in tcf_del_walker()
    - io_uring: fix false WARN_ONCE
    - drm/amdgpu: fix bad address translation for sienna_cichlid
    - drm/amdkfd: Walk through list with dqm lock hold
    - mt76: mt7915: fix IEEE80211_HE_PHY_CAP7_MAX_NC for station mode
    - rtl8xxxu: Fix device info for RTL8192EU devices
    - MIPS: add PMD table accounting into MIPS'pmd_alloc_one
    - net: fec: add ndo_select_queue to fix TX bandwidth fluctuations
    - atm: nicstar: use 'dma_free_coherent' instead of 'kfree'
    - atm: nicstar: register the interrupt handler in the right place
    - vsock: notify server to shutdown when client has pending signal
    - RDMA/rxe: Don't overwrite errno from ib_umem_get()
    - iwlwifi: mvm: don't change band on bound PHY contexts
    - iwlwifi: mvm: fix error print when session protection ends
    - iwlwifi: pcie: free IML DMA memory allocation
    - iwlwifi: pcie: fix context info freeing
    - sfc: avoid double pci_remove of VFs
    - sfc: error code if SRIOV cannot be disabled
    - wireless: wext-spy: Fix out-of-bounds warning
    - cfg80211: fix default HE tx bitrate mask in 2G band
    - mac80211: consider per-CPU statistics if present
    - mac80211_hwsim: add concurrent channels scanning support over virtio
    - IB/isert: Align target max I/O size to initiator size
    - media, bpf: Do not copy more entries than user space requested
    - net: ip: avoid OOM kills with large UDP sends over loopback
    - RDMA/cma: Fix rdma_resolve_route() memory leak
    - Bluetooth: btusb: Fixed too many in-token issue for Mediatek Chip.
    - Bluetooth: Fix the HCI to MGMT status conversion table
    - Bluetooth: Fix alt settings for incoming SCO with transparent coding format
    - Bluetooth: btusb: Add a new QCA_ROME device (0cf3:e500)
    - Bluetooth: L2CAP: Fix invalid access if ECRED Reconfigure fails
    - Bluetooth: L2CAP: Fix invalid access on ECRED Connection response
    - Bluetooth: btusb: Add support USB ALT 3 for WBS
    - Bluetooth: mgmt: Fix the command returns garbage parameter value
    - Bluetooth: btusb: fix bt fiwmare downloading failure issue for qca btsoc.
    - sched/fair: Ensure _sum and _avg values stay consistent
    - bpf: Fix false positive kmemleak report in bpf_ringbuf_area_alloc()
    - flow_offload: action should not be NULL when it is referenced
    - sctp: validate from_addr_param return
    - sctp: add size validation when walking chunks
    - MIPS: loongsoon64: Reserve memory below starting pfn to prevent Oops
    - MIPS: set mips32r5 for virt extensions
    - selftests/resctrl: Fix incorrect parsing of option "-t"
    - MIPS: MT extensions are not available on MIPS32r1
    - arm64: dts: rockchip: add rk3328 dwc3 usb controller node
    - arm64: dts: rockchip: Enable USB3 for rk3328 Rock64
    - loop: fix I/O error on fsync() in detached loop devices
    - io_uring: simplify io_remove_personalities()
    - io_uring: Convert personality_idr to XArray
    - io_uring: convert io_buffer_idr to XArray
    - scsi: iscsi: Fix race condition between login and sync thread
    - scsi: iscsi: Fix iSCSI cls conn state
    - powerpc/mm: Fix lockup on kernel exec fault
    - powerpc/barrier: Avoid collision with clang's __lwsync macro
    - powerpc/powernv/vas: Release reference to tgid during window close
    - drm/amdgpu: Update NV SIMD-per-CU to 2
    - drm/amdgpu: enable sdma0 tmz for Raven/Renoir(V2)
    - drm/radeon: Add the missed drm_gem_object_put() in
      radeon_user_framebuffer_create()
    - drm/radeon: Call radeon_suspend_kms() in radeon_pci_shutdown() for
      Loongson64
    - drm/vc4: txp: Properly set the possible_crtcs mask
    - drm/vc4: crtc: Skip the TXP
    - drm/vc4: hdmi: Prevent clock unbalance
    - drm/dp: Handle zeroed port counts in drm_dp_read_downstream_info()
    - drm/rockchip: dsi: remove extra component_del() call
    - drm/amd/display: fix incorrrect valid irq check
    - pinctrl/amd: Add device HID for new AMD GPIO controller
    - drm/tegra: Don't set allow_fb_modifiers explicitly
    - drm/msm/mdp4: Fix modifier support enabling
    - drm/arm/malidp: Always list modifiers
    - drm/nouveau: Don't set allow_fb_modifiers explicitly
    - drm/i915/display: Do not zero past infoframes.vsc
    - mmc: sdhci-acpi: Disable write protect detection on Toshiba Encore 2 WT8-B
    - mmc: sdhci: Fix warning message when accessing RPMB in HS400 mode
    - mmc: core: clear flags before allowing to retune
    - mmc: core: Allow UHS-I voltage switch for SDSC cards if supported
    - ata: ahci_sunxi: Disable DIPM
    - arm64: tlb: fix the TTL value of tlb_get_level
    - cpu/hotplug: Cure the cpusets trainwreck
    - clocksource/arm_arch_timer: Improve Allwinner A64 timer workaround
    - fpga: stratix10-soc: Add missing fpga_mgr_free() call
    - ASoC: tegra: Set driver_name=tegra for all machine drivers
    - i40e: fix PTP on 5Gb links
    - qemu_fw_cfg: Make fw_cfg_rev_attr a proper kobj_attribute
    - ipmi/watchdog: Stop watchdog timer when the current action is 'none'
    - thermal/drivers/int340x/processor_thermal: Fix tcc setting
    - ubifs: Fix races between xattr_{set|get} and listxattr operations
    - power: supply: ab8500: Fix an old bug
    - mfd: syscon: Free the allocated name field of struct regmap_config
    - nvmem: core: add a missing of_node_put
    - lkdtm/bugs: XFAIL UNALIGNED_LOAD_STORE_WRITE
    - selftests/lkdtm: Fix expected text for CR4 pinning
    - extcon: intel-mrfld: Sync hardware and software state on init
    - seq_buf: Fix overflow in seq_buf_putmem_hex()
    - rq-qos: fix missed wake-ups in rq_qos_throttle try two
    - tracing: Simplify & fix saved_tgids logic
    - tracing: Resize tgid_map to pid_max, not PID_MAX_DEFAULT
    - ipack/carriers/tpci200: Fix a double free in tpci200_pci_probe
    - coresight: Propagate symlink failure
    - coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer()
    - dm zoned: check zone capacity
    - dm writecache: flush origin device when writing and cache is full
    - dm btree remove: assign new_root only when removal succeeds
    - PCI: Leave Apple Thunderbolt controllers on for s2idle or standby
    - PCI: aardvark: Fix checking for PIO Non-posted Request
    - PCI: aardvark: Implement workaround for the readback value of VEND_ID
    - media: subdev: disallow ioctl for saa6588/davinci
    - media: dtv5100: fix control-request directions
    - media: zr364xx: fix memory leak in zr364xx_start_readpipe
    - media: gspca/sq905: fix control-request direction
    - media: gspca/sunplus: fix zero-length control requests
    - io_uring: fix clear IORING_SETUP_R_DISABLED in wrong function
    - dm writecache: write at least 4k when committing
    - pinctrl: mcp23s08: Fix missing unlock on error in mcp23s08_irq()
    - jfs: fix GPF in diFree
    - smackfs: restrict bytes count in smk_set_cipso()
    - ext4: fix memory leak in ext4_fill_super
    - f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances
    - net: xilinx_emaclite: Do not print real IOMEM pointer
    - drm/amdgpu: fix sdma firmware version error in sriov
    - clk: tegra: tegra124-emc: Fix clock imbalance in emc_set_timing()
    - block: introduce BIO_ZONE_WRITE_LOCKED bio flag
    - ibmvnic: fix kernel build warnings in build_hdr_descs_arr
    - mt76: dma: use ieee80211_tx_status_ext to free packets when tx fails
    - mt76: mt7915: fix tssi indication field of DBDC NICs
    - net: fec: add FEC_QUIRK_HAS_MULTI_QUEUES represents i.MX6SX ENET IP
    - drm/amd/display: Fix edp_bootup_bl_level initialization issue
    - iwlwifi: mvm: apply RX diversity per PHY context
    - rtw88: add quirks to disable pci capabilities
    - Bluetooth: btusb: use default nvm if boardID is 0 for wcn6855.
    - MIPS: CI20: Reduce clocksource to 750 kHz.
    - PCI: tegra194: Fix host initialization during resume
    - mm/mremap: hold the rmap lock in write mode when moving page table entries.
    - drm/amdgpu: add new dimgrey cavefish DID
    - drm/ingenic: Switch IPU plane to type OVERLAY
    - docs: Makefile: Use CONFIG_SHELL not SHELL
    - lkdtm: Enable DOUBLE_FAULT on all architectures
    - media: i2c: ccs-core: fix pm_runtime_get_sync() usage count
    - media: ccs: Fix the op_pll_multiplier address
    - media: v4l2-core: explicitly clear ioctl input data

[ Ubuntu: 5.11.0-36.40 ]

* s390x BPF JIT vulnerabilities (LP: #1943960)
    - SAUCE: s390/bpf: Fix branch shortening during codegen pass
    - SAUCE: s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant
    - SAUCE: s390/bpf: Fix optimizing out zero-extensions

-- Stefan Bader <stefan.bader@canonical.com>  Tue, 21 Sep 2021 16:56:33 +0200

Changed in linux-raspi (Ubuntu Hirsute):
status:	Fix Committed → Fix Released

Report a bug

This report contains Public information

Everyone can see this information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.

Ubuntulinux-raspi package

hirsute/linux-raspi: Upstream raspberrypi patchset 2021-08-26

Bug Description

CVE References

Other bug subscribers

Remote bug watches

Ubuntu
linux-raspi package