This bug was fixed in the package linux - 5.4.0-169.187 --------------- linux (5.4.0-169.187) focal; urgency=medium * focal/linux: 5.4.0-169.187 -proposed tracker (LP: #2044375) * USB bus error after upgrading to proposed kernel on lunar, jammy and focal (LP: #2043197) - USB: core: Fix oversight in SuperSpeed initialization * Packaging resync (LP: #1786013) - [Packaging] resync git-ubuntu-log - [Packaging] resync update-dkms-versions helper - [Packaging] update annotations scripts linux (5.4.0-168.186) focal; urgency=medium * focal/linux: 5.4.0-168.186 -proposed tracker (LP: #2041652) * Focal update: v5.4.257 upstream stable release (LP: #2040284) - erofs: ensure that the post-EOF tails are all zeroed - ARM: pxa: remove use of symbol_get() - mmc: au1xmmc: force non-modular build and remove symbol_get usage - net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index - rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff - modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules - USB: serial: option: add Quectel EM05G variant (0x030e) - USB: serial: option: add FOXCONN T99W368/T99W373 product - HID: wacom: remove the battery when the EKR is off - staging: rtl8712: fix race condition - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition - serial: sc16is7xx: fix bug when first setting GPIO direction - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe - fsi: master-ast-cf: Add MODULE_FIRMWARE macro - nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers() - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse - pinctrl: amd: Don't show `Invalid config param` errors - 9p: virtio: make sure 'offs' is initialized in zc_request - ASoC: da7219: Flush pending AAD IRQ when suspending - ASoC: da7219: Check for failure reading AAD IRQ events - ethernet: atheros: fix return value check in atl1c_tso_csum() - vxlan: generalize vxlan_parse_gpe_hdr and remove unused args - m68k: Fix invalid .section syntax - s390/dasd: use correct number of retries for ERP requests - s390/dasd: fix hanging device after request requeue - fs/nls: make load_nls() take a const parameter - ASoc: codecs: ES8316: Fix DMIC config - ASoC: atmel: Fix the 8K sample parameter in I2SC master - platform/x86: intel: hid: Always call BTNL ACPI method - platform/x86: huawei-wmi: Silence ambient light sensor - security: keys: perform capable check only on privileged operations - clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM - net: usb: qmi_wwan: add Quectel EM05GV2 - idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM - scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock - netlabel: fix shift wrapping bug in netlbl_catmap_setlong() - bnx2x: fix page fault following EEH recovery - sctp: handle invalid error codes without calling BUG() - cifs: add a warning when the in-flight count goes negative - scsi: storvsc: Always set no_report_opcodes - ALSA: seq: oss: Fix racy open/close of MIDI devices - platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE notifications - powerpc/32s: Fix assembler warning about r0 - udf: Check consistency of Space Bitmap Descriptor - udf: Handle error when adding extent to a file - Revert "net: macsec: preserve ingress frame ordering" - reiserfs: Check the return value from __getblk() - eventfd: Export eventfd_ctx_do_read() - eventfd: prevent underflow for eventfd semaphores - new helper: lookup_positive_unlocked() - fs: Fix error checking for d_hash_and_lookup() - tmpfs: verify {g,u}id mount options correctly - OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd() - x86/asm: Make more symbols local - x86/boot: Annotate local functions - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved - perf/imx_ddr: don't enable counter0 if none of 4 counters are used - cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit() - bpf: Clear the probe_addr for uprobe - tcp: tcp_enter_quickack_mode() should be static - regmap: rbtree: Use alloc_flags for memory allocations - spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM - wifi: mwifiex: Fix OOB and integer underflow when rx packets - mwifiex: switch from 'pci_' to 'dma_' API - wifi: mwifiex: fix error recovery in PCIE buffer descriptor management - crypto: stm32 - Properly handle pm_runtime_get failing - Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() - crypto: caam - fix unchecked return value error - hwrng: iproc-rng200 - use semicolons rather than commas to separate statements - hwrng: iproc-rng200 - Implement suspend and resume calls - lwt: Fix return values of BPF xmit ops - lwt: Check LWTUNNEL_XMIT_CONTINUE strictly - fs: ocfs2: namei: check return value of ocfs2_add_entry() - wifi: mwifiex: fix memory leak in mwifiex_histogram_read() - wifi: mwifiex: Fix missed return in oob checks failed path - wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx - wifi: ath9k: protect WMI command response buffer replacement with a lock - wifi: mwifiex: avoid possible NULL skb pointer dereference - wifi: ath9k: use IS_ERR() with debugfs_create_dir() - net: arcnet: Do not call kfree_skb() under local_irq_disable() - mlxsw: i2c: Fix chunk size setting in output mailbox buffer - mlxsw: i2c: Limit single transaction buffer size - netrom: Deny concurrent connect(). - drm/bridge: tc358764: Fix debug print parameter order - quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list - quota: factor out dquot_write_dquot() - quota: rename dquot_active() to inode_quota_active() - quota: add new helper dquot_active() - quota: fix dqput() to follow the guarantees dquot_srcu should provide - drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() - ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger - ARM: dts: BCM53573: Add cells sizes to PCIe node - ARM: dts: BCM53573: Use updated "spi-gpio" binding properties - drm/etnaviv: fix dumping of active MMU context - ARM: dts: s3c6410: move fixed clocks under root node in Mini6410 - ARM: dts: s3c6410: align node SROM bus node name with dtschema in Mini6410 - ARM: dts: s3c64xx: align pinctrl with dtschema - ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split) - ARM: dts: s5pv210: add RTC 32 KHz clock in SMDKV210 - ARM: dts: s5pv210: use defines for IRQ flags in SMDKV210 - ARM: dts: s5pv210: correct ethernet unit address in SMDKV210 - ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210 - ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split) - drm: adv7511: Fix low refresh rate register for ADV7533/5 - ARM: dts: BCM53573: Fix Ethernet info for Luxul devices - arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC - drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl' - md/bitmap: don't set max_write_behind if there is no write mostly device - md/md-bitmap: hold 'reconfig_mutex' in backlog_store() - drm/tegra: Remove superfluous error messages around platform_get_irq() - drm/tegra: dpaux: Fix incorrect return value of platform_get_irq - of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() - drm/armada: Fix off-by-one error in armada_overlay_get_property() - drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 - ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig - [Config] Update annotations after CONFIG_IMA_TRUSTED_KEYRING removal - drm/msm/mdp5: Don't leak some plane state - smackfs: Prevent underflow in smk_set_cipso() - audit: fix possible soft lockup in __audit_inode_child() - drm/mediatek: Fix potential memory leak if vmap() fail - of: unittest: Fix overlay type in apply/revert check - ALSA: ac97: Fix possible error value of *rac97 - ipmi:ssif: Add check for kstrdup - ipmi:ssif: Fix a memory leak when scanning for an adapter - drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() - clk: sunxi-ng: Modify mismatched function name - PCI: Mark NVIDIA T4 GPUs to avoid bus reset - PCI: pciehp: Use RMW accessors for changing LNKCTL - PCI/ASPM: Use RMW accessors for changing LNKCTL - clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op - powerpc/fadump: reset dump area size if fadump memory reserve fails - PCI: Add #defines for Enter Compliance, Transmit Margin - drm/amdgpu: Correct Transmit Margin masks - drm/amdgpu: Replace numbers with PCI_EXP_LNKCTL2 definitions - drm/amdgpu: Prefer pcie_capability_read_word() - drm/amdgpu: Use RMW accessors for changing LNKCTL - drm/radeon: Correct Transmit Margin masks - drm/radeon: Replace numbers with PCI_EXP_LNKCTL2 definitions - drm/radeon: Prefer pcie_capability_read_word() - drm/radeon: Use RMW accessors for changing LNKCTL - wifi: ath10k: Use RMW accessors for changing LNKCTL - nfs/blocklayout: Use the passed in gfp flags - powerpc/iommu: Fix notifiers being shared by PCI and VIO buses - jfs: validate max amount of blocks before allocation. - fs: lockd: avoid possible wrong NULL parameter - NFSD: da_addr_body field missing in some GETDEVICEINFO replies - NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN - media: v4l2-fwnode: fix v4l2_fwnode_parse_link handling - media: v4l2-fwnode: simplify v4l2_fwnode_parse_link - media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() - drivers: usb: smsusb: fix error handling code in smsusb_init_device - media: dib7000p: Fix potential division by zero - media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() - media: cx24120: Add retval check for cx24120_message_send() - media: mediatek: vcodec: Return NULL if no vdec_fb is found - usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() - scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() - scsi: be2iscsi: Add length check when parsing nlattrs - scsi: qla4xxx: Add length check when parsing nlattrs - serial: sprd: getting port index via serial aliases only - serial: sprd: remove redundant sprd_port cleanup - serial: sprd: Assign sprd_port after initialized to avoid wrong access - serial: sprd: Fix DMA buffer leak issue - x86/APM: drop the duplicate APM_MINOR_DEV macro - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly - coresight: tmc: Explicit type conversions to prevent integer overflow - dma-buf/sync_file: Fix docs syntax - driver core: test_async: fix an error code - IB/uverbs: Fix an potential error pointer dereference - iommu/vt-d: Fix to flush cache of PASID directory table - media: go7007: Remove redundant if statement - USB: gadget: f_mass_storage: Fix unused variable warning - media: i2c: ov5640: Configure HVP lines in s_power callback - media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() - media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips - media: ov2680: Remove auto-gain and auto-exposure controls - media: ov2680: Fix ov2680_bayer_order() - media: ov2680: Fix vflip / hflip set functions - media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors - scsi: core: Use 32-bit hostnum in scsi_host_lookup() - scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock - serial: tegra: handle clk prepare error in tegra_uart_hw_init() - amba: bus: fix refcount leak - Revert "IB/isert: Fix incorrect release of isert connection" - RDMA/siw: Balance the reference of cep->kref in the error path - RDMA/siw: Correct wrong debug message - HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() - HID: multitouch: Correct devm device reference for hidinput input_dev name - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS - tracing: Fix race issue between cpu buffer write and swap - phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 - phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate - phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write - rpmsg: glink: Add check for kstrdup - mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() - um: Fix hostaudio build errors - dmaengine: ste_dma40: Add missing IRQ check in d40_probe - cpufreq: Fix the race condition while updating the transition_task of policy - virtio_ring: fix avail_wrap_counter in virtqueue_add_packed - skbuff: skb_segment, Call zero copy functions before using skbuff frags - PM / devfreq: Fix leak in devfreq_dev_release() - ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl - ipmi_si: fix a memleak in try_smi_init() - ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch() - backlight/gpio_backlight: Compare against struct fb_info.device - backlight/bd6107: Compare against struct fb_info.device - backlight/lv5207lp: Compare against struct fb_info.device - xtensa: PMU: fix base address for the newer hardware - media: dvb: symbol fixup for dvb_attach() - ntb: Drop packets when qp link is down - ntb: Clean up tx tail index on link down - ntb: Fix calculation ntb_transport_tx_free_entry() - Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset" - procfs: block chmod on /proc/thread-self/comm - parisc: Fix /proc/cpuinfo output for lscpu - dlm: fix plock lookup when using multiple lockspaces - dccp: Fix out of bounds access in DCCP error handler - X.509: if signature is unsupported skip validation - net: handle ARPHRD_PPP in dev_is_mac_header_xmit() - fsverity: skip PKCS#7 parser when keyring is empty - pstore/ram: Check start of empty przs during init - s390/ipl: add missing secure/has_secure file to ipl type 'unknown' - crypto: stm32 - fix loop iterating through scatterlist for DMA - cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug - sc16is7xx: Set iobase to device index - serial: sc16is7xx: fix broken port 0 uart init - usb: typec: tcpci: clear the fault status bit - udf: initialize newblock to 0 - drm: fix double free for gbo in drm_gem_vram_init and drm_gem_vram_create - net/ipv6: SKB symmetric hash should incorporate transport ports - scsi: qla2xxx: fix inconsistent TMF timeout - scsi: qla2xxx: Fix erroneous link up failure - scsi: qla2xxx: Turn off noisy message log - scsi: qla2xxx: Remove unsupported ql2xenabledif option - fbdev/ep93xx-fb: Do not assign to struct fb_info.dev - drm/ast: Fix DRAM init on AST2200 - lib/test_meminit: allocate pages up to order MAX_ORDER - parisc: led: Fix LAN receive and transmit LEDs - parisc: led: Reduce CPU overhead for disk & lan LED computation - clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock - soc: qcom: qmi_encdec: Restrict string length in decode - NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info - kconfig: fix possible buffer overflow - perf annotate bpf: Don't enclose non-debug code with an assert() - x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm() - perf top: Don't pass an ERR_PTR() directly to perf_session__delete() - watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load - pwm: lpc32xx: Remove handling of PWM channels - sctp: annotate data-races around sk->sk_wmem_queued - ipv4: annotate data-races around fi->fib_dead - net: read sk->sk_family once in sk_mc_loop() - igb: disable virtualization features on 82580 - veth: Fixing transmit return status for dropped packets - net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr - af_unix: Fix data-races around user->unix_inflight. - af_unix: Fix data-race around unix_tot_inflight. - af_unix: Fix data-races around sk->sk_shutdown. - af_unix: Fix data race around sk->sk_err. - kcm: Destroy mutex in kcm_exit_net() - igc: Change IGC_MIN to allow set rx/tx value between 64 and 80 - igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80 - igb: Change IGB_MIN to allow set rx/tx value between 64 and 80 - s390/zcrypt: don't leak memory if dev_set_name() fails - idr: fix param name in idr_alloc_cyclic() doc - ip_tunnels: use DEV_STATS_INC() - net: hns3: fix the port information display when sfp is absent - sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory() - ata: sata_gemini: Add missing MODULE_DESCRIPTION - ata: pata_ftide010: Add missing MODULE_DESCRIPTION - fuse: nlookup missing decrement in fuse_direntplus_link - btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART - btrfs: use the correct superblock to compare fsid in btrfs_validate_super - mtd: rawnand: brcmnand: Fix crash during the panic_write - mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write - mtd: rawnand: brcmnand: Fix potential false time out warning - perf hists browser: Fix hierarchy mode header - perf tools: Handle old data in PERF_RECORD_ATTR - usb: typec: tcpm: Refactor tcpm_handle_vdm_request payload handling - usb: typec: tcpm: Refactor tcpm_handle_vdm_request - usb: typec: bus: verify partner exists in typec_altmode_attention - ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2 - clk: imx8mm: Move 1443X/1416X PLL clock structure to common place - net: ipv4: fix one memleak in __inet_del_ifa() - net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc() - net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() - r8152: check budget for r8152_poll() - kcm: Fix memory leak in error path of kcm_sendmsg() - platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors - mlxbf-tmfifo: sparse tags for config access - platform/mellanox: mlxbf-tmfifo: Drop jumbo frames - net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() - ixgbe: fix timestamp configuration code - kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg(). - drm/amd/display: Fix a bug when searching for insert_above_mpcc - parisc: Drop loops_per_jiffy from per_cpu struct - autofs: fix memory leak of waitqueues in autofs_catatonic_mode - btrfs: output extra debug info if we failed to find an inline backref - locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer - kernel/fork: beware of __put_task_struct() calling context - ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 - perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 - hw_breakpoint: fix single-stepping when using bpf_overflow_handler - devlink: remove reload failed checks in params get/set callbacks - wifi: ath9k: fix printk specifier - wifi: mwifiex: fix fortify warning - crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() - tpm_tis: Resend command to recover from data transfer errors - mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450 - alx: fix OOB-read compiler warning - wifi: mac80211_hwsim: drop short frames - drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() - bus: ti-sysc: Configure uart quirks for k3 SoC - md: raid1: fix potential OOB in raid1_remove_disk() - ext2: fix datatype of block number in ext2_xattr_set2() - fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() - jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount - powerpc/pseries: fix possible memory leak in ibmebus_bus_init() - media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer - media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() - media: af9005: Fix null-ptr-deref in af9005_i2c_xfer - media: anysee: fix null-ptr-deref in anysee_master_xfer - media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() - media: tuners: qt1010: replace BUG_ON with a regular error - media: pci: cx23885: replace BUG with error return - usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() - serial: cpm_uart: Avoid suspicious locking - media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning - kobject: Add sanity check for kset->kobj.ktype in kset_register() - tools features: Add feature test to check if libbfd has buildid support - perf jevents: Make build dependency on test JSONs - perf tools: Add an option to build without libbfd - btrfs: move btrfs_pinned_by_swapfile prototype into volumes.h - btrfs: add a helper to read the superblock metadata_uuid - btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super - selftests: tracing: Fix to unmount tracefs for recovering environment - md/raid1: fix error: ISO C90 forbids mixed declarations - attr: block mode changes of symlinks - btrfs: fix lockdep splat and potential deadlock after failure running delayed items - tracing: Have current_trace inc the trace array ref count - tracing: Have option files inc the trace array ref count - nfsd: fix change_info in NFSv4 RENAME replies - tracefs: Add missing lockdown check to tracefs_create_dir() - i2c: aspeed: Reset the i2c controller when timeout occurs - scsi: megaraid_sas: Fix deadlock on firmware crashdump - ext4: fix rec_len verify error - mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller - drm/amdgpu: fix amdgpu_cs_p1_user_fence - Linux 5.4.257 * Focal update: v5.4.257 upstream stable release (LP: #2040284) // CVE-2023-39189 - netfilter: nfnetlink_osf: avoid OOB read * CVE-2023-45871 - igb: set max size RX buffer when store bad packet is enabled * CVE-2023-39193 - netfilter: xt_sctp: validate the flag_info count * CVE-2023-39192 - netfilter: xt_u32: validate user space input * CVE-2023-31085 - ubi: Refuse attaching if mtd's erasesize is 0 * CVE-2023-5717 - perf: Disallow mis-matched inherited group reads * CVE-2023-5178 - nvmet-tcp: move send/recv error handling in the send/recv methods instead of call-sites - nvmet-tcp: Fix a possible UAF in queue intialization setup * CVE-2023-42754 - ipv4: fix null-deref in ipv4_link_failure * Focal update: v5.4.256 upstream stable release (LP: #2039446) - powerpc/pmac/smp: Avoid unused-variable warnings - powerpc/pmac/smp: Drop unnecessary volatile qualifier - Revert "MIPS: Alchemy: fix dbdma2" - Linux 5.4.256 * Focal update: v5.4.255 upstream stable release (LP: #2039440) - mmc: sdhci_f_sdh30: convert to devm_platform_ioremap_resource - mmc: sdhci-f-sdh30: Replace with sdhci_pltfm - selftests: forwarding: tc_flower: Relax success criterion - macsec: Fix traffic counters/statistics - macsec: use DEV_STATS_INC() - drm/radeon: Fix integer overflow in radeon_cs_parser_init - ALSA: emu10k1: roll up loops in DSP setup code for Audigy - quota: Properly disable quotas when add_dquot_ref() fails - quota: fix warning in dqgrab() - HID: add quirk for 03f0:464a HP Elite Presenter Mouse - ovl: check type and offset of struct vfsmount in ovl_entry - udf: Fix uninitialized array access for some pathnames - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev - MIPS: dec: prom: Address -Warray-bounds warning - FS: JFS: Fix null-ptr-deref Read in txBegin - FS: JFS: Check for read-only mounted filesystem in txBegin - media: v4l2-mem2mem: add lock to protect parameter num_rdy - media: platform: mediatek: vpu: fix NULL ptr dereference - usb: chipidea: imx: don't request QoS for imx8ulp - gfs2: Fix possible data races in gfs2_show_options() - pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() - Bluetooth: L2CAP: Fix use-after-free - drm/amdgpu: Fix potential fence use-after-free v2 - ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760 - ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() - powerpc/kasan: Disable KCOV in KASAN code - IMA: allow/fix UML builds - iio: add addac subdirectory - iio: adc: stx104: Utilize iomap interface - iio: adc: stx104: Implement and utilize register structures - iio: stx104: Move to addac subdirectory - iio: addac: stx104: Fix race condition for stx104_write_raw() - iio: addac: stx104: Fix race condition when converting analog-to-digital - iommu/amd: Fix "Guest Virtual APIC Table Root Pointer" configuration in IRTE - PM-runtime: add tracepoints for usage_count changes - PM: runtime: Add pm_runtime_get_if_active() - ALSA: hda: Fix unhandled register update during auto-suspend period - irqchip/mips-gic: Get rid of the reliance on irq_cpu_online() - irqchip/mips-gic: Use raw spinlock for gic_lock - interconnect: Move internal structs into a separate file - interconnect: Add helpers for enabling/disabling a path - usb: dwc3: qcom: Add helper functions to enable,disable wake irqs - USB: dwc3: qcom: fix NULL-deref on suspend - mmc: bcm2835: fix deferred probing - mmc: sunxi: fix deferred probing - leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename - tracing/probes: Have process_fetch_insn() take a void * instead of pt_regs - tracing/probes: Fix to update dynamic data counter if fetcharg uses it - net/ncsi: Fix gma flag setting after response - nfsd4: kill warnings on testing stateids with mismatched clientids - nfsd: Remove incorrect check in nfsd4_validate_stateid - virtio-mmio: convert to devm_platform_ioremap_resource - virtio-mmio: Use to_virtio_mmio_device() to simply code - virtio-mmio: don't break lifecycle of vm_dev - i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue - fbdev: mmp: fix value check in mmphw_probe() - powerpc/rtas_flash: allow user copy to flash block cache objects - tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms - btrfs: fix BUG_ON condition in btrfs_cancel_balance - net: xfrm: Fix xfrm_address_filter OOB read - net: af_key: fix sadb_x_filter validation - xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c - xfrm: fix slab-use-after-free in decode_session6 - ip6_vti: fix slab-use-after-free in decode_session6 - ip_vti: fix potential slab-use-after-free in decode_session6 - selftests: mirror_gre_changes: Tighten up the TTL test match - ipvs: fix racy memcpy in proc_do_sync_threshold - netfilter: nft_dynset: disallow object maps - team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves - i40e: fix misleading debug logs - net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset - sock: Fix misuse of sk_under_memory_pressure() - net: do not allow gso_size to be set to GSO_BY_FRAGS - bus: ti-sysc: Improve reset to work with modules with no sysconfig - bus: ti-sysc: Flush posted write on enable before reset - ARM: dts: imx7s: Drop dma-apb interrupt-names - ARM: dts: imx: Adjust dma-apbh node name - ARM: dts: imx: Set default tuning step for imx7d usdhc - ARM: dts: imx: Set default tuning step for imx6sx usdhc - ASoC: rt5665: add missed regulator_bulk_disable - ASoC: meson: axg-tdm-formatter: fix channel slot allocation - serial: 8250: Fix oops for port->pm on uart_change_pm() - ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. - cifs: Release folio lock on fscache read hit. - mmc: wbsd: fix double mmc_free_host() in wbsd_init() - mmc: block: Fix in_flight[issue_type] value error - netfilter: set default timeout to 3 secs for sctp shutdown send and recv state - virtio-net: set queues after driver_ok - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled - net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure - mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove - net: phy: broadcom: stub c45 read/write for 54810 - PCI: acpiphp: Reassign resources on bridge if necessary - dlm: improve plock logging if interrupted - dlm: replace usage of found with dedicated list iterator variable - fs: dlm: add pid to debug log - fs: dlm: change plock interrupted message to debug again - fs: dlm: use dlm_plock_info for do_unlock_close - fs: dlm: fix mismatch of plock results from userspace - MIPS: cpu-features: Enable octeon_cache by cpu_type - MIPS: cpu-features: Use boot_cpu_type for CPU type based features - fbdev: Improve performance of sys_imageblit() - fbdev: Fix sys_imageblit() for arbitrary image widths - fbdev: fix potential OOB read in fast_imageblit() - dm integrity: increase RECALC_SECTORS to improve recalculate speed - dm integrity: reduce vmalloc space footprint on 32-bit architectures - ALSA: pcm: Set per-card upper limit of PCM buffer allocations - ALSA: pcm: Use SG-buffer only when direct DMA is available - ALSA: pcm: Fix potential data race at PCM memory allocation helpers - regmap: Account for register length in SMBus I/O limits - ASoC: fsl_sai: Refine enable/disable TE/RE sequence in trigger() - ASoC: fsl_sai: Add new added registers and new bit definition - ASoC: fsl_sai: Disable bit clock with transmitter - drm/amd/display: do not wait for mpc idle if tg is disabled - drm/amd/display: check TG is non-null before checking if enabled - tracing: Fix memleak due to race between current_tracer and trace - octeontx2-af: SDP: fix receive link config - sock: annotate data-races around prot->memory_pressure - dccp: annotate data-races in dccp_poll() - ipvlan: Fix a reference count leak warning in ipvlan_ns_exit() - net: bgmac: Fix return value check for fixed_phy_register() - net: bcmgenet: Fix return value check for fixed_phy_register() - net: validate veth and vxcan peer ifindexes - igb: Avoid starting unnecessary workqueues - net/sched: fix a qdisc modification with ambiguous command request - net: remove bond_slave_has_mac_rcu() - bonding: fix macvlan over alb bond support - ibmveth: Use dcbf rather than dcbfl - NFSv4: Fix dropped lock for racing OPEN and delegation return - clk: Fix slab-out-of-bounds error in devm_clk_release() - nfsd: Fix race to FREE_STATEID and cl_revoked - batman-adv: Trigger events for auto adjusted MTU - batman-adv: Don't increase MTU when set by user - batman-adv: Do not get eth header before batadv_check_management_packet - batman-adv: Fix TT global entry leak when client roamed back - batman-adv: Fix batadv_v_ogm_aggr_send memory leak - batman-adv: Hold rtnl lock during MTU update via netlink - lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels - radix tree: remove unused variable - media: vcodec: Fix potential array out-of-bounds in encoder queue_setup - PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus - drm/display/dp: Fix the DP DSC Receiver cap size - mm: allow a controlled amount of unfairness in the page lock - rtnetlink: Reject negative ifindexes in RTM_NEWLINK - ALSA: pcm: Fix build error on m68k and others - Revert "ALSA: pcm: Use SG-buffer only when direct DMA is available" - interconnect: Do not skip aggregation for disabled paths - ALSA: pcm: Check for null pointer of pointer substream before dereferencing it - Documentation/sysctl: document page_lock_unfairness - irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable - scsi: snic: Fix double free in snic_tgt_create() - scsi: core: raid_class: Remove raid_component_add() - clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' - pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} - dma-buf/sw_sync: Avoid recursive lock during fence signal - Linux 5.4.255 * Focal update: v5.4.254 upstream stable release (LP: #2039291) - mmc: moxart: read scr register without changing byte order - ipv6: adjust ndisc_is_useropt() to also return true for PIO - dmaengine: pl330: Return DMA_PAUSED when transaction is paused - drm/nouveau/gr: enable memory loads on helper invocation on all channels - radix tree test suite: fix incorrect allocation size for pthreads - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput - iio: cros_ec: Fix the allocation size for cros_ec_command - binder: fix memory leak in binder_init() - usb-storage: alauda: Fix uninit-value in alauda_check_media() - usb: dwc3: Properly handle processing of pending events - usb: common: usb-conn-gpio: Prevent bailing out if initial role is none - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines - x86: Move gds_ucode_mitigated() declaration to header - drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes - selftests/rseq: Fix build with undefined __weak - mISDN: Update parameter type of dsp_cmx_send() - net/packet: annotate data-races around tp->status - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves - dccp: fix data-race around dp->dccps_mss_cache - drivers: net: prevent tun_build_skb() to exceed the packet size limit - IB/hfi1: Fix possible panic during hotplug remove - wifi: cfg80211: fix sband iftype data lookup for AP_VLAN - dmaengine: mcf-edma: Fix a potential un-allocated memory access - net/mlx5: Allow 0 for total host VFs - ibmvnic: Handle DMA unmapping of login buffs in release functions - btrfs: don't stop integrity writeback too early - btrfs: set cache_block_group_error if we find an error - nvme-tcp: fix potential unbalanced freeze & unfreeze - nvme-rdma: fix potential unbalanced freeze & unfreeze - netfilter: nf_tables: report use refcount overflow - scsi: core: Fix legacy /proc parsing buffer overflow - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts - scsi: 53c700: Check that command slot is not NULL - scsi: snic: Fix possible memory leak if device_add() fails - scsi: core: Fix possible memory leak if device_add() fails - alpha: remove __init annotation from exported page_is_ram() - sch_netem: fix issues in netem_change() vs get_dist_table() - Linux 5.4.254 * Focal update: v5.4.253 upstream stable release (LP: #2038652) - jbd2: fix incorrect code style - jbd2: fix kernel-doc markups - jbd2: remove redundant buffer io error checks - jbd2: recheck chechpointing non-dirty buffer - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint - gpio: tps68470: Make tps68470_gpio_output() always set the initial value - bcache: remove 'int n' from parameter list of bch_bucket_alloc_set() - bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent - btrfs: qgroup: catch reserved space leaks at unmount time - btrfs: fix race between quota disable and relocation - btrfs: fix extent buffer leak after tree mod log failure at split_node() - ext4: rename journal_dev to s_journal_dev inside ext4_sb_info - ext4: Fix reusing stale buffer heads from last failed mounting - PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() - PCI/ASPM: Factor out pcie_wait_for_retrain() - PCI/ASPM: Avoid link retraining race - dlm: cleanup plock_op vs plock_xop - dlm: rearrange async condition return - fs: dlm: interrupt posix locks only when process is killed - ftrace: Add information on number of page groups allocated - ftrace: Check if pages were allocated before calling free_pages() - ftrace: Store the order of pages allocated in ftrace_page - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() - pwm: meson: Remove redundant assignment to variable fin_freq - pwm: meson: Simplify duplicated per-channel tracking - pwm: meson: fix handling of period/duty if greater than UINT_MAX - scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c - scsi: qla2xxx: Array index may go out of bound - uapi: General notification queue definitions - keys: Fix linking a duplicate key to a keyring's assoc_array - ext4: fix to check return value of freeze_bdev() in ext4_shutdown() - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() - vxlan: calculate correct header length for GPE - phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() - ethernet: atheros: fix return value check in atl1e_tso_csum() - ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address - bonding: reset bond's flags when down link is P2P device - team: reset team's flags when down link is P2P device - platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 - net/sched: mqprio: refactor nlattr parsing to a separate function - net/sched: mqprio: add extack to mqprio_parse_nlattr() - net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64 - benet: fix return value check in be_lancer_xmit_workarounds() - RDMA/mlx4: Make check for invalid flags stricter - drm/msm/dpu: drop enum dpu_core_perf_data_bus_id - drm/msm/adreno: Fix snapshot BINDLESS_DATA size - drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() - ASoC: fsl_spdif: Silence output on stop - block: Fix a source code comment in include/uapi/linux/blkzoned.h - dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths - ata: pata_ns87415: mark ns87560_tf_read static - ring-buffer: Fix wrong stat of cpu_buffer->read - tracing: Fix warning in trace_buffered_event_disable() - serial: 8250_dw: Preserve original value of DLF register - serial: sifive: Fix sifive_serial_console_setup() section - USB: serial: option: support Quectel EM060K_128 - USB: serial: option: add Quectel EC200A module support - USB: serial: simple: add Kaufmann RKS+CAN VCP - USB: serial: simple: sort driver entries - can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED - Revert "usb: dwc3: core: Enable AutoRetry feature in the controller" - usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy - usb: dwc3: don't reset device side if dwc3 was configured as host-only - usb: ohci-at91: Fix the unhandle interrupt when resume - USB: quirks: add quirk for Focusrite Scarlett - usb: xhci-mtk: set the dma max_seg_size - Revert "usb: xhci: tegra: Fix error check" - Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group - Documentation: security-bugs.rst: clarify CVE handling - staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() - hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled - btrfs: check for commit error at btrfs_attach_transaction_barrier() - tpm_tis: Explicitly check for error code - irq-bcm6345-l1: Do not assume a fixed block to cpu mapping - btrfs: check if the transaction was aborted at btrfs_wait_for_commit() - virtio-net: fix race between set queues and probe - s390/dasd: fix hanging device after quiesce/resume - ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register - dm cache policy smq: ensure IO doesn't prevent cleaner policy progress - ACPI: processor: perflib: Use the "no limit" frequency QoS - ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily - cpufreq: intel_pstate: Drop ACPI _PSS states table patching - btrfs: qgroup: remove one-time use variables for quota_root checks - btrfs: qgroup: return ENOTCONN instead of EINVAL when quotas are not enabled - ASoC: cs42l51: fix driver to properly autoload with automatic module loading - arm64: Add AMPERE1 to the Spectre-BHB affected list - arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro - perf: Fix function pointer case - loop: Select I/O scheduler 'none' from inside add_disk() - word-at-a-time: use the same return type for has_zero regardless of endianness - KVM: s390: fix sthyi error handling - net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx - net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() - rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length - perf test uprobe_from_different_cu: Skip if there is no gcc - net: sched: cls_u32: Fix match key mis-addressing - mISDN: hfcpci: Fix potential deadlock on &hc->lock - net: annotate data-races around sk->sk_max_pacing_rate - net: add missing READ_ONCE(sk->sk_rcvlowat) annotation - net: add missing READ_ONCE(sk->sk_sndbuf) annotation - net: add missing READ_ONCE(sk->sk_rcvbuf) annotation - net: add missing data-race annotations around sk->sk_peek_off - net: add missing data-race annotation for sk_ll_usec - bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire - driver core: add device probe log helper - net: ll_temac: Switch to use dev_err_probe() helper - net: ll_temac: fix error checking of irq_of_parse_and_map() - net: dcb: choose correct policy to parse DCB_ATTR_BCN - ip6mr: Fix skb_under_panic in ip6mr_cache_report() - tcp_metrics: fix addr_same() helper - tcp_metrics: annotate data-races around tm->tcpm_stamp - tcp_metrics: annotate data-races around tm->tcpm_lock - tcp_metrics: annotate data-races around tm->tcpm_vals[] - tcp_metrics: annotate data-races around tm->tcpm_net - tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen - scsi: zfcp: Defer fc_rport blocking until after ADISC response - libceph: fix potential hang in ceph_osdc_notify() - USB: zaurus: Add ID for A-300/B-500/C-700 - mtd: spinand: toshiba: Fix ecc_get_status - mtd: rawnand: meson: fix OOB available bytes for ECC - fs/sysv: Null check to prevent null-ptr-deref bug - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb - fs: Protect reconfiguration of sb read-write from racing writes - ext2: Drop fragment support - test_firmware: prevent race conditions by a correct implementation of locking - test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation - mtd: rawnand: omap_elm: Fix incorrect type in assignment - powerpc/mm/altmap: Fix altmap boundary check - selftests/rseq: check if libc rseq support is registered - selftests/rseq: Play nice with binaries statically linked against glibc 2.35+ - PM / wakeirq: support enabling wake-up irq after runtime_suspend called - PM: sleep: wakeirq: fix wake irq arming - ceph: show tasks waiting on caps in debugfs caps file - ceph: use kill_anon_super helper - ceph: defer stopping mdsc delayed_work - arm64: dts: stratix10: fix incorrect I2C property for SCL signal - ARM: dts: imx6sll: Make ssi node name same as other platforms - ARM: dts: imx: Align L2 cache-controller nodename with dtschema - ARM: dts: imx: add usb alias - ARM: dts: imx6sll: fixup of operating points - ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node - driver core: Annotate dev_err_probe() with __must_check - driver code: print symbolic error code - drivers: core: fix kernel-doc markup for dev_err_probe() - Revert "driver core: Annotate dev_err_probe() with __must_check" - Linux 5.4.253 - Upstream stable to v5.4.253 * CVE-2023-37453 - USB: hub: Clean up use of port initialization schemes and retries - USB: hub: Add Kconfig option to reduce number of port initialization retries - USB: core: Unite old scheme and new scheme descriptor reads - usb: hub: Check device descriptor before resusciation - USB: core: Change usb_get_device_descriptor() API - USB: core: Fix race by not overwriting udev->descriptor in hub_port_init() * Packaging resync (LP: #1786013) - [Packaging] update helper scripts -- Roxana Nicolescu