diff -u linux-5.15.0/debian.master/changelog linux-5.15.0/debian.master/changelog
--- linux-5.15.0/debian.master/changelog
+++ linux-5.15.0/debian.master/changelog
@@ -1,3 +1,18 @@
+linux (5.15.0-107.117) jammy; urgency=medium
+
+  * jammy/linux: 5.15.0-107.117 -proposed tracker (LP: #2063635)
+
+  * CVE-2023-52530
+    - wifi: mac80211: fix potential key use-after-free
+
+  * CVE-2024-26622
+    - tomoyo: fix UAF write bug in tomoyo_write_control()
+
+  * CVE-2023-47233
+    - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
+
+ -- Stefan Bader <stefan.bader@canonical.com>  Fri, 26 Apr 2024 13:35:57 +0200
+
 linux (5.15.0-106.116) jammy; urgency=medium
 
   * jammy/linux: 5.15.0-106.116 -proposed tracker (LP: #2061812)
diff -u linux-5.15.0/debian.master/tracking-bug linux-5.15.0/debian.master/tracking-bug
--- linux-5.15.0/debian.master/tracking-bug
+++ linux-5.15.0/debian.master/tracking-bug
@@ -1 +1 @@
-2061812 2024.04.01-3
+2063635 s2024.04.01-1
diff -u linux-5.15.0/debian/changelog linux-5.15.0/debian/changelog
--- linux-5.15.0/debian/changelog
+++ linux-5.15.0/debian/changelog
@@ -1,3 +1,18 @@
+linux (5.15.0-107.117) jammy; urgency=medium
+
+  * jammy/linux: 5.15.0-107.117 -proposed tracker (LP: #2063635)
+
+  * CVE-2023-52530
+    - wifi: mac80211: fix potential key use-after-free
+
+  * CVE-2024-26622
+    - tomoyo: fix UAF write bug in tomoyo_write_control()
+
+  * CVE-2023-47233
+    - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
+
+ -- Stefan Bader <stefan.bader@canonical.com>  Fri, 26 Apr 2024 13:35:57 +0200
+
 linux (5.15.0-106.116) jammy; urgency=medium
 
   * jammy/linux: 5.15.0-106.116 -proposed tracker (LP: #2061812)
diff -u linux-5.15.0/debian/control linux-5.15.0/debian/control
--- linux-5.15.0/debian/control
+++ linux-5.15.0/debian/control
@@ -85,7 +85,7 @@
  you do not want this package. Install the appropriate linux-headers
  package instead.
 
-Package: linux-headers-5.15.0-106
+Package: linux-headers-5.15.0-107
 Build-Profiles: <!stage1>
 Architecture: all
 Multi-Arch: foreign
@@ -95,7 +95,7 @@
 Description: Header files related to Linux kernel version 5.15.0
  This package provides kernel header files for version 5.15.0, for sites
  that want the latest kernel headers. Please read
- /usr/share/doc/linux-headers-5.15.0-106/debian.README.gz for details
+ /usr/share/doc/linux-headers-5.15.0-107/debian.README.gz for details
 
 Package: linux-tools-common
 Build-Profiles: <!stage1>
@@ -109,18 +109,18 @@
  version locked tools (such as perf and x86_energy_perf_policy) for
  version 5.15.0.
 
-Package: linux-tools-5.15.0-106
+Package: linux-tools-5.15.0-107
 Build-Profiles: <!stage1>
 Architecture: amd64 armhf arm64 ppc64el s390x
 Section: devel
 Priority: optional
 Depends: ${misc:Depends}, ${shlibs:Depends}, linux-tools-common
-Description: Linux kernel version specific tools for version 5.15.0-106
+Description: Linux kernel version specific tools for version 5.15.0-107
  This package provides the architecture dependant parts for kernel
  version locked tools (such as perf and x86_energy_perf_policy) for
- version 5.15.0-106 on
+ version 5.15.0-107 on
  64 bit x86.
- You probably want to install linux-tools-5.15.0-106-<flavour>.
+ You probably want to install linux-tools-5.15.0-107-<flavour>.
 
 Package: linux-cloud-tools-common
 Build-Profiles: <!stage1>
@@ -133,17 +133,17 @@
  This package provides the architecture independent parts for kernel
  version locked tools for cloud tools for version 5.15.0.
 
-Package: linux-cloud-tools-5.15.0-106
+Package: linux-cloud-tools-5.15.0-107
 Build-Profiles: <!stage1>
 Architecture: amd64 armhf
 Section: devel
 Priority: optional
 Depends: ${misc:Depends}, ${shlibs:Depends}, linux-cloud-tools-common
-Description: Linux kernel version specific cloud tools for version 5.15.0-106
+Description: Linux kernel version specific cloud tools for version 5.15.0-107
  This package provides the architecture dependant parts for kernel
- version locked tools for cloud tools for version 5.15.0-106 on
+ version locked tools for cloud tools for version 5.15.0-107 on
  64 bit x86.
- You probably want to install linux-cloud-tools-5.15.0-106-<flavour>.
+ You probably want to install linux-cloud-tools-5.15.0-107-<flavour>.
 
 Package: linux-tools-host
 Build-Profiles: <!stage1>
@@ -183,17 +183,17 @@
  contained in each file.
 
 
-Package: linux-image-unsigned-5.15.0-106-generic
+Package: linux-image-unsigned-5.15.0-107-generic
 Build-Profiles: <!stage1>
 Architecture: amd64 armhf arm64 ppc64el s390x
 Section: kernel
 Priority: optional
 Provides: linux-image, fuse-module, kvm-api-4, redhat-cluster-modules, ivtv-modules, virtualbox-guest-modules [amd64], ${linux:rprovides}
-Depends: ${misc:Depends}, ${shlibs:Depends}, kmod, linux-base (>= 4.5ubuntu1~16.04.1), linux-modules-5.15.0-106-generic
+Depends: ${misc:Depends}, ${shlibs:Depends}, kmod, linux-base (>= 4.5ubuntu1~16.04.1), linux-modules-5.15.0-107-generic
 Recommends: grub-pc [amd64] | grub-efi-amd64 [amd64] | grub-efi-ia32 [amd64] | grub [amd64] | lilo [amd64] | flash-kernel [armhf arm64] | grub-efi-arm64 [arm64] | grub-efi-arm [armhf] | grub-ieee1275 [ppc64el], initramfs-tools | linux-initramfs-tool
 Breaks: flash-kernel (<< 3.90ubuntu2) [arm64 armhf], s390-tools (<< 2.3.0-0ubuntu3) [s390x]
-Conflicts: linux-image-5.15.0-106-generic
-Suggests: fdutils, linux-doc | linux-source-5.15.0, linux-tools, linux-headers-5.15.0-106-generic, linux-modules-extra-5.15.0-106-generic
+Conflicts: linux-image-5.15.0-107-generic
+Suggests: fdutils, linux-doc | linux-source-5.15.0, linux-tools, linux-headers-5.15.0-107-generic, linux-modules-extra-5.15.0-107-generic
 Description: Linux kernel image for version 5.15.0 on 64 bit x86 SMP
  This package contains the unsigned Linux kernel image for version 5.15.0 on
  64 bit x86 SMP.
@@ -206,12 +206,12 @@
  the linux-generic meta-package, which will ensure that upgrades work
  correctly, and that supporting packages are also installed.
 
-Package: linux-modules-5.15.0-106-generic
+Package: linux-modules-5.15.0-107-generic
 Build-Profiles: <!stage1>
 Architecture: amd64 armhf arm64 ppc64el s390x
 Section: kernel
 Priority: optional
-Depends: ${misc:Depends}, ${shlibs:Depends}, linux-image-5.15.0-106-generic | linux-image-unsigned-5.15.0-106-generic
+Depends: ${misc:Depends}, ${shlibs:Depends}, linux-image-5.15.0-107-generic | linux-image-unsigned-5.15.0-107-generic
 Built-Using: ${linux:BuiltUsing}
 Description: Linux kernel extra modules for version 5.15.0 on 64 bit x86 SMP
  Contains the corresponding System.map file, the modules built by the
@@ -226,12 +226,12 @@
  the linux-generic meta-package, which will ensure that upgrades work
  correctly, and that supporting packages are also installed.
 
-Package: linux-modules-extra-5.15.0-106-generic
+Package: linux-modules-extra-5.15.0-107-generic
 Build-Profiles: <!stage1>
 Architecture: amd64 armhf arm64 ppc64el s390x
 Section: kernel
 Priority: optional
-Depends: ${misc:Depends}, ${shlibs:Depends}, linux-image-5.15.0-106-generic | linux-image-unsigned-5.15.0-106-generic, wireless-regdb
+Depends: ${misc:Depends}, ${shlibs:Depends}, linux-image-5.15.0-107-generic | linux-image-unsigned-5.15.0-107-generic, wireless-regdb
 Description: Linux kernel extra modules for version 5.15.0 on 64 bit x86 SMP
  This package contains the Linux kernel extra modules for version 5.15.0 on
  64 bit x86 SMP.
@@ -248,21 +248,21 @@
  the linux-generic meta-package, which will ensure that upgrades work
  correctly, and that supporting packages are also installed.
 
-Package: linux-headers-5.15.0-106-generic
+Package: linux-headers-5.15.0-107-generic
 Build-Profiles: <!stage1>
 Architecture: amd64 armhf arm64 ppc64el s390x
 Section: devel
 Priority: optional
-Depends: ${misc:Depends}, linux-headers-5.15.0-106, ${shlibs:Depends}
+Depends: ${misc:Depends}, linux-headers-5.15.0-107, ${shlibs:Depends}
 Provides: linux-headers, linux-headers-3.0
 Description: Linux kernel headers for version 5.15.0 on 64 bit x86 SMP
  This package provides kernel header files for version 5.15.0 on
  64 bit x86 SMP.
  .
  This is for sites that want the latest kernel headers.  Please read
- /usr/share/doc/linux-headers-5.15.0-106/debian.README.gz for details.
+ /usr/share/doc/linux-headers-5.15.0-107/debian.README.gz for details.
 
-Package: linux-image-unsigned-5.15.0-106-generic-dbgsym
+Package: linux-image-unsigned-5.15.0-107-generic-dbgsym
 Build-Profiles: <!stage1>
 Architecture: amd64 armhf arm64 ppc64el s390x
 Section: devel
@@ -279,31 +279,31 @@
  is uncompressed, and unstripped. This package also includes the
  unstripped modules.
 
-Package: linux-tools-5.15.0-106-generic
+Package: linux-tools-5.15.0-107-generic
 Build-Profiles: <!stage1>
 Architecture: amd64 armhf arm64 ppc64el s390x
 Section: devel
 Priority: optional
-Depends: ${misc:Depends}, linux-tools-5.15.0-106
-Description: Linux kernel version specific tools for version 5.15.0-106
+Depends: ${misc:Depends}, linux-tools-5.15.0-107
+Description: Linux kernel version specific tools for version 5.15.0-107
  This package provides the architecture dependant parts for kernel
  version locked tools (such as perf and x86_energy_perf_policy) for
- version 5.15.0-106 on
+ version 5.15.0-107 on
  64 bit x86.
 
-Package: linux-cloud-tools-5.15.0-106-generic
+Package: linux-cloud-tools-5.15.0-107-generic
 Build-Profiles: <!stage1>
 Architecture: amd64 armhf arm64 ppc64el s390x
 Section: devel
 Priority: optional
-Depends: ${misc:Depends}, linux-cloud-tools-5.15.0-106
-Description: Linux kernel version specific cloud tools for version 5.15.0-106
+Depends: ${misc:Depends}, linux-cloud-tools-5.15.0-107
+Description: Linux kernel version specific cloud tools for version 5.15.0-107
  This package provides the architecture dependant parts for kernel
- version locked tools for cloud for version 5.15.0-106 on
+ version locked tools for cloud for version 5.15.0-107 on
  64 bit x86.
 
 
-Package: linux-buildinfo-5.15.0-106-generic
+Package: linux-buildinfo-5.15.0-107-generic
 Build-Profiles: <!stage1>
 Architecture: amd64 armhf arm64 ppc64el s390x
 Section: kernel
@@ -317,18 +317,18 @@
  You likely do not want to install this package.
 
 
-Package: linux-modules-iwlwifi-5.15.0-106-generic
+Package: linux-modules-iwlwifi-5.15.0-107-generic
 Build-Profiles: <!stage1>
 Architecture: amd64 armhf arm64 ppc64el s390x
 Section: kernel
 Priority: optional
 Depends:
  ${misc:Depends},
- linux-image-5.15.0-106-generic | linux-image-unsigned-5.15.0-106-generic,
+ linux-image-5.15.0-107-generic | linux-image-unsigned-5.15.0-107-generic,
 Built-Using: ${linux:BuiltUsing}
-Description: Linux kernel iwlwifi modules for version 5.15.0-106
+Description: Linux kernel iwlwifi modules for version 5.15.0-107
  This package provides the Linux kernel iwlwifi modules for version
- 5.15.0-106.
+ 5.15.0-107.
  .
  You likely do not want to install this package directly. Instead, install the
  one of the linux-modules-iwlwifi-generic* meta-packages,
@@ -336,17 +336,17 @@
  also installed.
 
 
-Package: linux-image-unsigned-5.15.0-106-generic-64k
+Package: linux-image-unsigned-5.15.0-107-generic-64k
 Build-Profiles: <!stage1>
 Architecture: arm64
 Section: kernel
 Priority: optional
 Provides: linux-image, fuse-module, kvm-api-4, redhat-cluster-modules, ivtv-modules, ${linux:rprovides}
-Depends: ${misc:Depends}, ${shlibs:Depends}, kmod, linux-base (>= 4.5ubuntu1~16.04.1), linux-modules-5.15.0-106-generic-64k
+Depends: ${misc:Depends}, ${shlibs:Depends}, kmod, linux-base (>= 4.5ubuntu1~16.04.1), linux-modules-5.15.0-107-generic-64k
 Recommends: grub-efi-arm64 [arm64] | flash-kernel [arm64], initramfs-tools | linux-initramfs-tool
 Breaks: flash-kernel (<< 3.90ubuntu2) [arm64 armhf], s390-tools (<< 2.3.0-0ubuntu3) [s390x]
-Conflicts: linux-image-5.15.0-106-generic-64k
-Suggests: fdutils, linux-doc | linux-source-5.15.0, linux-tools, linux-headers-5.15.0-106-generic-64k, linux-modules-extra-5.15.0-106-generic-64k
+Conflicts: linux-image-5.15.0-107-generic-64k
+Suggests: fdutils, linux-doc | linux-source-5.15.0, linux-tools, linux-headers-5.15.0-107-generic-64k, linux-modules-extra-5.15.0-107-generic-64k
 Description: Linux kernel image for version 5.15.0 on 64 bit x86 SMP
  This package contains the unsigned Linux kernel image for version 5.15.0 on
  64 bit x86 SMP.
@@ -359,12 +359,12 @@
  the linux-generic-64k meta-package, which will ensure that upgrades work
  correctly, and that supporting packages are also installed.
 
-Package: linux-modules-5.15.0-106-generic-64k
+Package: linux-modules-5.15.0-107-generic-64k
 Build-Profiles: <!stage1>
 Architecture: arm64
 Section: kernel
 Priority: optional
-Depends: ${misc:Depends}, ${shlibs:Depends}, linux-image-5.15.0-106-generic-64k | linux-image-unsigned-5.15.0-106-generic-64k
+Depends: ${misc:Depends}, ${shlibs:Depends}, linux-image-5.15.0-107-generic-64k | linux-image-unsigned-5.15.0-107-generic-64k
 Built-Using: ${linux:BuiltUsing}
 Description: Linux kernel extra modules for version 5.15.0 on 64 bit x86 SMP
  Contains the corresponding System.map file, the modules built by the
@@ -379,12 +379,12 @@
  the linux-generic-64k meta-package, which will ensure that upgrades work
  correctly, and that supporting packages are also installed.
 
-Package: linux-modules-extra-5.15.0-106-generic-64k
+Package: linux-modules-extra-5.15.0-107-generic-64k
 Build-Profiles: <!stage1>
 Architecture: arm64
 Section: kernel
 Priority: optional
-Depends: ${misc:Depends}, ${shlibs:Depends}, linux-image-5.15.0-106-generic-64k | linux-image-unsigned-5.15.0-106-generic-64k, wireless-regdb
+Depends: ${misc:Depends}, ${shlibs:Depends}, linux-image-5.15.0-107-generic-64k | linux-image-unsigned-5.15.0-107-generic-64k, wireless-regdb
 Description: Linux kernel extra modules for version 5.15.0 on 64 bit x86 SMP
  This package contains the Linux kernel extra modules for version 5.15.0 on
  64 bit x86 SMP.
@@ -401,21 +401,21 @@
  the linux-generic-64k meta-package, which will ensure that upgrades work
  correctly, and that supporting packages are also installed.
 
-Package: linux-headers-5.15.0-106-generic-64k
+Package: linux-headers-5.15.0-107-generic-64k
 Build-Profiles: <!stage1>
 Architecture: arm64
 Section: devel
 Priority: optional
-Depends: ${misc:Depends}, linux-headers-5.15.0-106, ${shlibs:Depends}
+Depends: ${misc:Depends}, linux-headers-5.15.0-107, ${shlibs:Depends}
 Provides: linux-headers, linux-headers-3.0
 Description: Linux kernel headers for version 5.15.0 on 64 bit x86 SMP
  This package provides kernel header files for version 5.15.0 on
  64 bit x86 SMP.
  .
  This is for sites that want the latest kernel headers.  Please read
- /usr/share/doc/linux-headers-5.15.0-106/debian.README.gz for details.
+ /usr/share/doc/linux-headers-5.15.0-107/debian.README.gz for details.
 
-Package: linux-image-unsigned-5.15.0-106-generic-64k-dbgsym
+Package: linux-image-unsigned-5.15.0-107-generic-64k-dbgsym
 Build-Profiles: <!stage1>
 Architecture: arm64
 Section: devel
@@ -432,31 +432,31 @@
  is uncompressed, and unstripped. This package also includes the
  unstripped modules.
 
-Package: linux-tools-5.15.0-106-generic-64k
+Package: linux-tools-5.15.0-107-generic-64k
 Build-Profiles: <!stage1>
 Architecture: arm64
 Section: devel
 Priority: optional
-Depends: ${misc:Depends}, linux-tools-5.15.0-106
-Description: Linux kernel version specific tools for version 5.15.0-106
+Depends: ${misc:Depends}, linux-tools-5.15.0-107
+Description: Linux kernel version specific tools for version 5.15.0-107
  This package provides the architecture dependant parts for kernel
  version locked tools (such as perf and x86_energy_perf_policy) for
- version 5.15.0-106 on
+ version 5.15.0-107 on
  64 bit x86.
 
-Package: linux-cloud-tools-5.15.0-106-generic-64k
+Package: linux-cloud-tools-5.15.0-107-generic-64k
 Build-Profiles: <!stage1>
 Architecture: arm64
 Section: devel
 Priority: optional
-Depends: ${misc:Depends}, linux-cloud-tools-5.15.0-106
-Description: Linux kernel version specific cloud tools for version 5.15.0-106
+Depends: ${misc:Depends}, linux-cloud-tools-5.15.0-107
+Description: Linux kernel version specific cloud tools for version 5.15.0-107
  This package provides the architecture dependant parts for kernel
- version locked tools for cloud for version 5.15.0-106 on
+ version locked tools for cloud for version 5.15.0-107 on
  64 bit x86.
 
 
-Package: linux-buildinfo-5.15.0-106-generic-64k
+Package: linux-buildinfo-5.15.0-107-generic-64k
 Build-Profiles: <!stage1>
 Architecture: arm64
 Section: kernel
@@ -470,18 +470,18 @@
  You likely do not want to install this package.
 
 
-Package: linux-modules-iwlwifi-5.15.0-106-generic-64k
+Package: linux-modules-iwlwifi-5.15.0-107-generic-64k
 Build-Profiles: <!stage1>
 Architecture: arm64
 Section: kernel
 Priority: optional
 Depends:
  ${misc:Depends},
- linux-image-5.15.0-106-generic-64k | linux-image-unsigned-5.15.0-106-generic-64k,
+ linux-image-5.15.0-107-generic-64k | linux-image-unsigned-5.15.0-107-generic-64k,
 Built-Using: ${linux:BuiltUsing}
-Description: Linux kernel iwlwifi modules for version 5.15.0-106
+Description: Linux kernel iwlwifi modules for version 5.15.0-107
  This package provides the Linux kernel iwlwifi modules for version
- 5.15.0-106.
+ 5.15.0-107.
  .
  You likely do not want to install this package directly. Instead, install the
  one of the linux-modules-iwlwifi-generic-64k* meta-packages,
@@ -489,17 +489,17 @@
  also installed.
 
 
-Package: linux-image-unsigned-5.15.0-106-generic-lpae
+Package: linux-image-unsigned-5.15.0-107-generic-lpae
 Build-Profiles: <!stage1>
 Architecture: armhf
 Section: kernel
 Priority: optional
 Provides: linux-image, fuse-module, kvm-api-4, redhat-cluster-modules, ivtv-modules, ${linux:rprovides}
-Depends: ${misc:Depends}, ${shlibs:Depends}, kmod, linux-base (>= 4.5ubuntu1~16.04.1), linux-modules-5.15.0-106-generic-lpae
+Depends: ${misc:Depends}, ${shlibs:Depends}, kmod, linux-base (>= 4.5ubuntu1~16.04.1), linux-modules-5.15.0-107-generic-lpae
 Recommends: flash-kernel [armhf] | grub-efi-arm [armhf], initramfs-tools | linux-initramfs-tool
 Breaks: flash-kernel (<< 3.90ubuntu2) [arm64 armhf], s390-tools (<< 2.3.0-0ubuntu3) [s390x]
-Conflicts: linux-image-5.15.0-106-generic-lpae
-Suggests: fdutils, linux-doc | linux-source-5.15.0, linux-tools, linux-headers-5.15.0-106-generic-lpae, linux-modules-extra-5.15.0-106-generic-lpae
+Conflicts: linux-image-5.15.0-107-generic-lpae
+Suggests: fdutils, linux-doc | linux-source-5.15.0, linux-tools, linux-headers-5.15.0-107-generic-lpae, linux-modules-extra-5.15.0-107-generic-lpae
 Description: Linux kernel image for version 5.15.0 on 64 bit x86 SMP
  This package contains the unsigned Linux kernel image for version 5.15.0 on
  64 bit x86 SMP.
@@ -512,12 +512,12 @@
  the linux-generic-lpae meta-package, which will ensure that upgrades work
  correctly, and that supporting packages are also installed.
 
-Package: linux-modules-5.15.0-106-generic-lpae
+Package: linux-modules-5.15.0-107-generic-lpae
 Build-Profiles: <!stage1>
 Architecture: armhf
 Section: kernel
 Priority: optional
-Depends: ${misc:Depends}, ${shlibs:Depends}, linux-image-5.15.0-106-generic-lpae | linux-image-unsigned-5.15.0-106-generic-lpae
+Depends: ${misc:Depends}, ${shlibs:Depends}, linux-image-5.15.0-107-generic-lpae | linux-image-unsigned-5.15.0-107-generic-lpae
 Built-Using: ${linux:BuiltUsing}
 Description: Linux kernel extra modules for version 5.15.0 on 64 bit x86 SMP
  Contains the corresponding System.map file, the modules built by the
@@ -532,12 +532,12 @@
  the linux-generic-lpae meta-package, which will ensure that upgrades work
  correctly, and that supporting packages are also installed.
 
-Package: linux-modules-extra-5.15.0-106-generic-lpae
+Package: linux-modules-extra-5.15.0-107-generic-lpae
 Build-Profiles: <!stage1>
 Architecture: armhf
 Section: kernel
 Priority: optional
-Depends: ${misc:Depends}, ${shlibs:Depends}, linux-image-5.15.0-106-generic-lpae | linux-image-unsigned-5.15.0-106-generic-lpae, wireless-regdb
+Depends: ${misc:Depends}, ${shlibs:Depends}, linux-image-5.15.0-107-generic-lpae | linux-image-unsigned-5.15.0-107-generic-lpae, wireless-regdb
 Description: Linux kernel extra modules for version 5.15.0 on 64 bit x86 SMP
  This package contains the Linux kernel extra modules for version 5.15.0 on
  64 bit x86 SMP.
@@ -554,21 +554,21 @@
  the linux-generic-lpae meta-package, which will ensure that upgrades work
  correctly, and that supporting packages are also installed.
 
-Package: linux-headers-5.15.0-106-generic-lpae
+Package: linux-headers-5.15.0-107-generic-lpae
 Build-Profiles: <!stage1>
 Architecture: armhf
 Section: devel
 Priority: optional
-Depends: ${misc:Depends}, linux-headers-5.15.0-106, ${shlibs:Depends}
+Depends: ${misc:Depends}, linux-headers-5.15.0-107, ${shlibs:Depends}
 Provides: linux-headers, linux-headers-3.0
 Description: Linux kernel headers for version 5.15.0 on 64 bit x86 SMP
  This package provides kernel header files for version 5.15.0 on
  64 bit x86 SMP.
  .
  This is for sites that want the latest kernel headers.  Please read
- /usr/share/doc/linux-headers-5.15.0-106/debian.README.gz for details.
+ /usr/share/doc/linux-headers-5.15.0-107/debian.README.gz for details.
 
-Package: linux-image-unsigned-5.15.0-106-generic-lpae-dbgsym
+Package: linux-image-unsigned-5.15.0-107-generic-lpae-dbgsym
 Build-Profiles: <!stage1>
 Architecture: armhf
 Section: devel
@@ -585,31 +585,31 @@
  is uncompressed, and unstripped. This package also includes the
  unstripped modules.
 
-Package: linux-tools-5.15.0-106-generic-lpae
+Package: linux-tools-5.15.0-107-generic-lpae
 Build-Profiles: <!stage1>
 Architecture: armhf
 Section: devel
 Priority: optional
-Depends: ${misc:Depends}, linux-tools-5.15.0-106
-Description: Linux kernel version specific tools for version 5.15.0-106
+Depends: ${misc:Depends}, linux-tools-5.15.0-107
+Description: Linux kernel version specific tools for version 5.15.0-107
  This package provides the architecture dependant parts for kernel
  version locked tools (such as perf and x86_energy_perf_policy) for
- version 5.15.0-106 on
+ version 5.15.0-107 on
  64 bit x86.
 
-Package: linux-cloud-tools-5.15.0-106-generic-lpae
+Package: linux-cloud-tools-5.15.0-107-generic-lpae
 Build-Profiles: <!stage1>
 Architecture: armhf
 Section: devel
 Priority: optional
-Depends: ${misc:Depends}, linux-cloud-tools-5.15.0-106
-Description: Linux kernel version specific cloud tools for version 5.15.0-106
+Depends: ${misc:Depends}, linux-cloud-tools-5.15.0-107
+Description: Linux kernel version specific cloud tools for version 5.15.0-107
  This package provides the architecture dependant parts for kernel
- version locked tools for cloud for version 5.15.0-106 on
+ version locked tools for cloud for version 5.15.0-107 on
  64 bit x86.
 
 
-Package: linux-buildinfo-5.15.0-106-generic-lpae
+Package: linux-buildinfo-5.15.0-107-generic-lpae
 Build-Profiles: <!stage1>
 Architecture: armhf
 Section: kernel
@@ -623,18 +623,18 @@
  You likely do not want to install this package.
 
 
-Package: linux-modules-iwlwifi-5.15.0-106-generic-lpae
+Package: linux-modules-iwlwifi-5.15.0-107-generic-lpae
 Build-Profiles: <!stage1>
 Architecture: armhf
 Section: kernel
 Priority: optional
 Depends:
  ${misc:Depends},
- linux-image-5.15.0-106-generic-lpae | linux-image-unsigned-5.15.0-106-generic-lpae,
+ linux-image-5.15.0-107-generic-lpae | linux-image-unsigned-5.15.0-107-generic-lpae,
 Built-Using: ${linux:BuiltUsing}
-Description: Linux kernel iwlwifi modules for version 5.15.0-106
+Description: Linux kernel iwlwifi modules for version 5.15.0-107
  This package provides the Linux kernel iwlwifi modules for version
- 5.15.0-106.
+ 5.15.0-107.
  .
  You likely do not want to install this package directly. Instead, install the
  one of the linux-modules-iwlwifi-generic-lpae* meta-packages,
diff -u linux-5.15.0/drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c linux-5.15.0/drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c
--- linux-5.15.0/drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c
+++ linux-5.15.0/drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c
@@ -790,8 +790,7 @@
 	scan_request = cfg->scan_request;
 	cfg->scan_request = NULL;
 
-	if (timer_pending(&cfg->escan_timeout))
-		del_timer_sync(&cfg->escan_timeout);
+	timer_delete_sync(&cfg->escan_timeout);
 
 	if (fw_abort) {
 		/* Do a scan abort to stop the driver's scan engine */
@@ -7781,6 +7780,7 @@
 	brcmf_btcoex_detach(cfg);
 	wiphy_unregister(cfg->wiphy);
 	wl_deinit_priv(cfg);
+	cancel_work_sync(&cfg->escan_timeout_work);
 	brcmf_free_wiphy(cfg->wiphy);
 	kfree(cfg);
 }
diff -u linux-5.15.0/net/mac80211/cfg.c linux-5.15.0/net/mac80211/cfg.c
--- linux-5.15.0/net/mac80211/cfg.c
+++ linux-5.15.0/net/mac80211/cfg.c
@@ -511,6 +511,9 @@
 		sta->cipher_scheme = cs;
 
 	err = ieee80211_key_link(key, sdata, sta);
+	/* KRACK protection, shouldn't happen but just silently accept key */
+	if (err == -EALREADY)
+		err = 0;
 
  out_unlock:
 	mutex_unlock(&local->sta_mtx);
only in patch2:
unchanged:
--- linux-5.15.0.orig/net/mac80211/key.c
+++ linux-5.15.0/net/mac80211/key.c
@@ -843,7 +843,7 @@
 	 */
 	if (ieee80211_key_identical(sdata, old_key, key)) {
 		ieee80211_key_free_unused(key);
-		ret = 0;
+		ret = -EALREADY;
 		goto out;
 	}
 
only in patch2:
unchanged:
--- linux-5.15.0.orig/security/tomoyo/common.c
+++ linux-5.15.0/security/tomoyo/common.c
@@ -2657,13 +2657,14 @@
 {
 	int error = buffer_len;
 	size_t avail_len = buffer_len;
-	char *cp0 = head->write_buf;
+	char *cp0;
 	int idx;
 
 	if (!head->write)
 		return -EINVAL;
 	if (mutex_lock_interruptible(&head->io_sem))
 		return -EINTR;
+	cp0 = head->write_buf;
 	head->read_user_buf_avail = 0;
 	idx = tomoyo_read_lock();
 	/* Read a line and dispatch it to the policy handler. */