Change log for linux-gcp-5.13 package in Ubuntu
| 1 → 15 of 15 results | First • Previous • Next • Last |
linux-gcp-5.13 (5.13.0-1033.40~20.04.1) focal; urgency=medium
[ Ubuntu: 5.13.0-1033.40 ]
* CVE-2022-21123 // CVE-2022-21125 // CVE-2022-21166
- Documentation: Add documentation for Processor MMIO Stale Data
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug
- x86/speculation: Add a common function for MD_CLEAR mitigation update
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data
- x86/speculation/srbds: Update SRBDS mitigation selection
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS
- KVM: x86/speculation: Disable Fill buffer clear within guests
- x86/speculation/mmio: Print SMT warning
-- Thadeu Lima de Souza Cascardo <email address hidden> Mon, 13 Jun 2022 21:19:09 -0300
Available diffs
| Superseded in focal-security |
| Superseded in focal-updates |
| Deleted in focal-proposed (Reason: moved to -updates) |
linux-gcp-5.13 (5.13.0-1031.37~20.04.1) focal; urgency=medium
* focal/linux-gcp-5.13: 5.13.0-1031.37~20.04.1 -proposed tracker
(LP: #1978002)
* prevent kernel panic with overlayfs + shiftfs (LP: #1973620)
- SAUCE: overlayfs: prevent dereferencing struct file in ovl_vm_prfile_set()
-- Tim Gardner <email address hidden> Thu, 09 Jun 2022 07:09:39 -0600
linux-gcp-5.13 (5.13.0-1030.36~20.04.1) focal; urgency=medium
[ Ubuntu: 5.13.0-1030.36 ]
* CVE-2022-1972
- netfilter: nf_tables: sanitize nft_set_desc_concat_parse()
* CVE-2022-1966
- netfilter: nf_tables: disallow non-stateful expression in sets earlier
-- Thadeu Lima de Souza Cascardo <email address hidden> Fri, 03 Jun 2022 11:59:11 -0300
Available diffs
| Deleted in focal-proposed (Reason: moved to -updates) |
linux-gcp-5.13 (5.13.0-1028.33~20.04.1) focal; urgency=medium
* focal/linux-gcp-5.13: 5.13.0-1028.33~20.04.1 -proposed tracker
(LP: #1974335)
[ Ubuntu: 5.13.0-1028.33 ]
* impish/linux-gcp: 5.13.0-1028.33 -proposed tracker (LP: #1974336)
* CVE-2022-21499
- SAUCE: debug: Lock down kgdb
* impish/linux: 5.13.0-45.50 -proposed tracker (LP: #1974347)
* CVE-2022-1158
- KVM: x86/mmu: do compare-and-exchange of gPTE via the user address
* config CONFIG_HISI_PMU for kunpeng920 (LP: #1956086)
- [Config] CONFIG_HISI_PMU=m
* re-apply missing overlayfs SAUCE patch (LP: #1967924)
- SAUCE: overlayfs: fix incorrect mnt_id of files opened from map_files
* Impish update: upstream stable patchset 2022-04-20 (LP: #1969666)
- mac80211_hwsim: report NOACK frames in tx_status
- mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work
- i2c: bcm2835: Avoid clock stretching timeouts
- ASoC: rt5668: do not block workqueue if card is unbound
- ASoC: rt5682: do not block workqueue if card is unbound
- regulator: core: fix false positive in regulator_late_cleanup()
- KVM: arm64: vgic: Read HW interrupt pending state from the HW
- tipc: fix a bit overflow in tipc_crypto_key_rcv()
- cifs: fix double free race when mount fails in cifs_get_root()
- selftests/seccomp: Fix seccomp failure by adding missing headers
- i2c: cadence: allow COMPILE_TEST
- i2c: qup: allow COMPILE_TEST
- net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990
- usb: gadget: don't release an existing dev->buf
- usb: gadget: clear related members when goto fail
- exfat: reuse exfat_inode_info variable instead of calling EXFAT_I()
- exfat: fix i_blocks for files truncated over 4 GiB
- tracing: Add test for user space strings when filtering on string pointers
- serial: stm32: prevent TDR register overwrite when sending x_char
- ata: pata_hpt37x: fix PCI clock detection
- drm/amdgpu: check vm ready by amdgpu_vm->evicting flag
- tracing: Add ustring operation to filtering string pointers
- ALSA: intel_hdmi: Fix reference to PCM buffer address
- riscv/efi_stub: Fix get_boot_hartid_from_fdt() return value
- riscv: Fix config KASAN && SPARSEMEM && !SPARSE_VMEMMAP
- riscv: Fix config KASAN && DEBUG_VIRTUAL
- ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
- iommu/amd: Recover from event log overflow
- drm/i915: s/JSP2/ICP2/ PCH
- xen/netfront: destroy queues before real_num_tx_queues is zeroed
- thermal: core: Fix TZ_GET_TRIP NULL pointer dereference
- ntb: intel: fix port config status offset for SPR
- mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls
- xfrm: fix MTU regression
- netfilter: fix use-after-free in __nf_register_net_hook()
- bpf, sockmap: Do not ignore orig_len parameter
- xfrm: enforce validity of offload input flags
- e1000e: Correct NVM checksum verification flow
- net: fix up skbs delta_truesize in UDP GRO frag_list
- netfilter: nf_queue: don't assume sk is full socket
- netfilter: nf_queue: fix possible use-after-free
- netfilter: nf_queue: handle socket prefetch
- batman-adv: Request iflink once in batadv-on-batadv check
- batman-adv: Request iflink once in batadv_get_real_netdevice
- batman-adv: Don't expect inter-netns unique iflink indices
- net: ipv6: ensure we call ipv6_mc_down() at most once
- net: dcb: flush lingering app table entries for unregistered devices
- net/smc: fix connection leak
- net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client
- net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server
- mac80211: fix forwarded mesh frames AC & queue selection
- net: stmmac: fix return value of __setup handler
- mac80211: treat some SAE auth steps as final
- iavf: Fix missing check for running netdev
- net: sxgbe: fix return value of __setup handler
- ibmvnic: register netdev after init of adapter
- net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()
- ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc()
- efivars: Respect "block" flag in efivar_entry_set_safe()
- firmware: arm_scmi: Remove space in MODULE_ALIAS name
- ASoC: cs4265: Fix the duplicated control name
- can: gs_usb: change active_channels's type from atomic_t to u8
- arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output
- igc: igc_read_phy_reg_gpy: drop premature return
- ARM: Fix kgdb breakpoint for Thumb2
- ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions
- selftests: mlxsw: tc_police_scale: Make test more robust
- pinctrl: sunxi: Use unique lockdep classes for IRQs
- igc: igc_write_phy_reg_gpy: drop premature return
- ibmvnic: free reset-work-item when flushing
- memfd: fix F_SEAL_WRITE after shmem huge page allocated
- s390/extable: fix exception table sorting
- ARM: dts: switch timer config to common devkit8000 devicetree
- ARM: dts: Use 32KiHz oscillator on devkit8000
- soc: fsl: guts: Revert commit 3c0d64e867ed
- soc: fsl: guts: Add a missing memory allocation failure check
- soc: fsl: qe: Check of ioremap return value
- ARM: tegra: Move panels to AUX bus
- ibmvnic: complete init_done on transport events
- net: chelsio: cxgb3: check the return value of pci_find_capability()
- iavf: Refactor iavf state machine tracking
- nl80211: Handle nla_memdup failures in handle_nan_filter
- drm/amdgpu: fix suspend/resume hang regression
- net: dcb: disable softirqs in dcbnl_flush_dev()
- Input: elan_i2c - move regulator_[en|dis]able() out of
elan_[en|dis]able_power()
- Input: elan_i2c - fix regulator enable count imbalance after suspend/resume
- Input: samsung-keypad - properly state IOMEM dependency
- HID: add mapping for KEY_DICTATE
- HID: add mapping for KEY_ALL_APPLICATIONS
- tracing/histogram: Fix sorting on old "cpu" value
- tracing: Fix return value of __setup handlers
- btrfs: fix lost prealloc extents beyond eof after full fsync
- btrfs: qgroup: fix deadlock between rescan worker and remove qgroup
- btrfs: add missing run of delayed items after unlink during log replay
- Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6"
- hamradio: fix macro redefine warning
- arm64: Mark start_backtrace() notrace and NOKPROBE_SYMBOL
- sched/fair: Fix fault in reweight_entity
- tools/resolve_btf_ids: Close ELF file on error
- mtd: spi-nor: Fix mtd size for s3an flashes
- MIPS: fix local_{add,sub}_return on MIPS64
- signal: In get_signal test for signal_group_exit every time through the loop
- PCI: mediatek-gen3: Disable DVFSRC voltage request
- PCI: dwc: Do not remap invalid res
- PCI: aardvark: Fix checking for MEM resource type
- KVM: VMX: Don't unblock vCPU w/ Posted IRQ if IRQs are disabled in guest
- KVM: s390: Ensure kvm_arch_no_poll() is read once when blocking vCPU
- KVM: VMX: Read Posted Interrupt "control" exactly once per loop iteration
- KVM: x86: Handle 32-bit wrap of EIP for EMULTYPE_SKIP with flat code seg
- KVM: x86: Exit to userspace if emulation prepared a completion callback
- i3c: fix incorrect address slot lookup on 64-bit
- i3c/master/mipi-i3c-hci: Fix a potentially infinite loop in
'hci_dat_v1_get_index()'
- tracing: Do not let synth_events block other dyn_event systems during create
- Input: ti_am335x_tsc - set ADCREFM for X configuration
- Input: ti_am335x_tsc - fix STEPCONFIG setup for Z2
- NFSD: Fix verifier returned in stable WRITEs
- Revert "nfsd: skip some unnecessary stats in the v4 case"
- nfsd: fix crash on COPY_NOTIFY with special stateid
- x86/hyperv: Properly deal with empty cpumasks in hyperv_flush_tlb_multi()
- SUNRPC: Fix sockaddr handling in the svc_xprt_create_error trace point
- SUNRPC: Fix sockaddr handling in svcsock_accept_class trace points
- drm/sun4i: dw-hdmi: Fix missing put_device() call in sun8i_hdmi_phy_get
- drm/atomic: Check new_crtc_state->active to determine if CRTC needs disable
in self refresh mode
- ntb_hw_switchtec: Fix pff ioread to read into mmio_part_cfg_all
- ntb_hw_switchtec: Fix bug with more than 32 partitions
- drm/amdkfd: Check for null pointer after calling kmemdup
- i3c: master: dw: check return of dw_i3c_master_get_free_pos()
- dma-buf: cma_heap: Fix mutex locking section
- tracing/uprobes: Check the return value of kstrdup() for tu->filename
- tracing/probes: check the return value of kstrndup() for pbuf
- mm: defer kmemleak object creation of module_alloc()
- kasan: fix quarantine conflicting with init_on_free
- selftests/vm: make charge_reserved_hugetlb.sh work with existing cgroup
setting
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- ethtool: Fix link extended state for big endian
- bpf: Fix possible race in inc_misses_counter
- gve: Recording rx queue before sending to napi
- ibmvnic: don't release napi in __ibmvnic_open()
- bnxt_en: Fix occasional ethtool -t loopback test failures
- iwlwifi: mvm: check debugfs_dir ptr before use
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- mac80211: fix EAPoL rekey fail in 802.3 rx path
- blktrace: fix use after free for struct blk_trace
- net: ipa: add an interconnect dependency
- iavf: Fix deadlock in iavf_reset_task
- auxdisplay: lcd2s: Fix lcd2s_redefine_char() feature
- auxdisplay: lcd2s: Fix memory leak in ->remove()
- auxdisplay: lcd2s: Use proper API to free the instance of charlcd object
- iommu/tegra-smmu: Fix missing put_device() call in tegra_smmu_find
- mips: setup: fix setnocoherentio() boolean setting
- mptcp: Correctly set DATA_FIN timeout when number of retransmits is large
- sched: Fix yet more sched_fork() races
- arm64: dts: juno: Remove GICv2m dma-range
- iommu/amd: Fix I/O page table memory leak
- netfilter: nf_tables: prefer kfree_rcu(ptr, rcu) variant
- can: etas_es58x: change opened_channel_cnt's type from atomic_t to u8
- e1000e: Fix possible HW unit hang after an s0ix exit
- selftests: mlxsw: resource_scale: Fix return value
- iavf: do not override the adapter state in the watchdog task (again)
- btrfs: fix relocation crash due to premature return from
btrfs_commit_transaction()
- KVM: x86/mmu: Passing up the error state of mmu_alloc_shadow_roots()
* CVE-2022-28390
- can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path
-- Joseph Salisbury <email address hidden> Wed, 01 Jun 2022 11:20:53 -0400
Available diffs
| Superseded in focal-security |
| Superseded in focal-updates |
| Deleted in focal-proposed (Reason: moved to -updates) |
linux-gcp-5.13 (5.13.0-1027.32~20.04.1) focal; urgency=medium
* focal/linux-gcp-5.13: 5.13.0-1027.32~20.04.1 -proposed tracker
(LP: #1973932)
* Packaging resync (LP: #1786013)
- [Packaging] update variants
[ Ubuntu: 5.13.0-1027.32 ]
* impish/linux-gcp: 5.13.0-1027.32 -proposed tracker (LP: #1973933)
* impish/linux: 5.13.0-44.49 -proposed tracker (LP: #1973941)
* CVE-2022-29581
- net/sched: cls_u32: fix netns refcount changes in u32_change()
* Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP
option (LP: #1972740)
- ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE
* ext4: limit length to bitmap_maxbytes (LP: #1972281)
- ext4: limit length to bitmap_maxbytes - blocksize in punch_hole
-- Joseph Salisbury <email address hidden> Wed, 25 May 2022 19:11:47 -0400
Available diffs
linux-gcp-5.13 (5.13.0-1025.30~20.04.1) focal; urgency=medium
* focal/linux-gcp-5.13: 5.13.0-1025.30~20.04.1 -proposed tracker
(LP: #1969005)
[ Ubuntu: 5.13.0-1025.30 ]
* impish/linux-gcp: 5.13.0-1025.30 -proposed tracker (LP: #1969006)
* Impish update: upstream stable patchset 2022-03-22 (LP: #1966021)
- updateconfigs for FRAMEBUFFER_CONSOLE_LEGACY_ACCELERATION
* impish/linux: 5.13.0-41.46 -proposed tracker (LP: #1969014)
* NVMe devices fail to probe due to ACPI power state change (LP: #1942624)
- ACPI: power: Rework turning off unused power resources
- ACPI: PM: Do not turn off power resources in unknown state
* Recent 5.13 kernel has broken KVM support (LP: #1966499)
- KVM: Add infrastructure and macro to mark VM as bugged
- KVM: x86: Use KVM_BUG/KVM_BUG_ON to handle bugs that are fatal to the VM
- KVM: VMX: prepare sync_pir_to_irr for running with APICv disabled
* LRMv6: add multi-architecture support (LP: #1968774)
- [Packaging] resync dkms-build{,--nvidia-N}
* io_uring regression - lost write request (LP: #1952222)
- io-wq: split bounded and unbounded work into separate lists
* xfrm interface cannot be changed anymore (LP: #1968591)
- xfrm: fix the if_id check in changelink
* Use kernel-testing repo from launchpad for ADT tests (LP: #1968016)
- [Debian] Use kernel-testing repo from launchpad
* vmx_ldtr_test in ubuntu_kvm_unit_tests failed (FAIL: Expected 0 for L1 LDTR
selector (got 50)) (LP: #1956315)
- KVM: nVMX: Set LDTR to its architecturally defined value on nested VM-Exit
* audio from external sound card is distorted (LP: #1966066)
- ALSA: usb-audio: Fix packet size calculation regression
* Impish update: upstream stable patchset 2022-04-12 (LP: #1968771)
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug
- btrfs: tree-checker: check item_size for inode_item
- btrfs: tree-checker: check item_size for dev_item
- clk: jz4725b: fix mmc0 clock gating
- vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
- parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel
- parisc/unaligned: Fix ldw() and stw() unalignment handlers
- KVM: x86/mmu: make apf token non-zero to fix bug
- drm/amdgpu: disable MMHUB PG for Picasso
- drm/i915: Correctly populate use_sagv_wm for all pipes
- sr9700: sanity check for packet length
- USB: zaurus: support another broken Zaurus
- CDC-NCM: avoid overflow in sanity checking
- x86/fpu: Correct pkru/xstate inconsistency
- tee: export teedev_open() and teedev_close_context()
- optee: use driver internal tee_context for some rpc
- ping: remove pr_err from ping_lookup
- perf data: Fix double free in perf_session__delete()
- bnx2x: fix driver load from initrd
- bnxt_en: Fix active FEC reporting to ethtool
- hwmon: Handle failure to register sensor with thermal zone correctly
- bpf: Do not try bpf_msg_push_data with len 0
- selftests: bpf: Check bpf_msg_push_data return value
- bpf: Add schedule points in batch ops
- io_uring: add a schedule point in io_add_buffers()
- net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends
- tipc: Fix end of loop tests for list_for_each_entry()
- gso: do not skip outer ip header in case of ipip and net_failover
- openvswitch: Fix setting ipv6 fields causing hw csum failure
- drm/edid: Always set RGB444
- net/mlx5e: Fix wrong return value on ioctl EEPROM query failure
- net/sched: act_ct: Fix flow table lookup after ct clear or switching zones
- net: ll_temac: check the return value of devm_kmalloc()
- net: Force inlining of checksum functions in net/checksum.h
- nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()
- netfilter: nf_tables: fix memory leak during stateful obj update
- net/smc: Use a mutex for locking "struct smc_pnettable"
- surface: surface3_power: Fix battery readings on batteries without a serial
number
- udp_tunnel: Fix end of loop test in udp_tunnel_nic_unregister()
- net/mlx5: Fix possible deadlock on rule deletion
- net/mlx5: Fix wrong limitation of metadata match on ecpf
- net/mlx5e: kTLS, Use CHECKSUM_UNNECESSARY for device-offloaded packets
- spi: spi-zynq-qspi: Fix a NULL pointer dereference in
zynq_qspi_exec_mem_op()
- regmap-irq: Update interrupt clear register for proper reset
- RDMA/rtrs-clt: Fix possible double free in error case
- RDMA/rtrs-clt: Move free_permit from free_clt to rtrs_clt_close
- configfs: fix a race in configfs_{,un}register_subsystem()
- RDMA/ib_srp: Fix a deadlock
- tracing: Have traceon and traceoff trigger honor the instance
- iio: adc: men_z188_adc: Fix a resource leak in an error handling path
- iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits
- iio: imu: st_lsm6dsx: wait for settling time in st_lsm6dsx_read_oneshot
- iio: Fix error handling for PM
- sc16is7xx: Fix for incorrect data being transmitted
- ata: pata_hpt37x: disable primary channel on HPT371
- Revert "USB: serial: ch341: add new Product ID for CH341A"
- usb: gadget: rndis: add spinlock for rndis response list
- tracefs: Set the group ownership in apply_options() not parse_options()
- USB: serial: option: add support for DW5829e
- USB: serial: option: add Telit LE910R1 compositions
- usb: dwc3: pci: Fix Bay Trail phy GPIO mappings
- usb: dwc3: gadget: Let the interrupt handler disable bottom halves.
- xhci: re-initialize the HC during resume if HCE was set
- xhci: Prevent futile URB re-submissions due to incorrect return value.
- driver core: Free DMA range map when device is released
- RDMA/cma: Do not change route.addr.src_addr outside state checks
- thermal: int340x: fix memory leak in int3400_notify()
- riscv: fix oops caused by irqsoff latency tracer
- tty: n_gsm: fix encoding of control signal octet bit DV
- tty: n_gsm: fix proper link termination after failed open
- tty: n_gsm: fix NULL pointer access due to DLCI release
- tty: n_gsm: fix wrong tty control line for flow control
- tty: n_gsm: fix deadlock in gsmtty_open()
- gpio: tegra186: Fix chip_data type confusion
- memblock: use kfree() to release kmalloced memblock regions
- mm/filemap: Fix handling of THPs in generic_file_buffered_read()
- cgroup-v1: Correct privileges check in release_agent writes
- selinux: fix misuse of mutex_is_locked()
- drm/amd/display: Protect update_bw_bounding_box FPU code.
- drm/amdgpu: do not enable asic reset for raven2
- drm/i915: Fix bw atomic check when switching between SAGV vs. no SAGV
- netfilter: xt_socket: fix a typo in socket_mt_destroy()
- selftests: mptcp: fix diag instability
- bnxt_en: Fix offline ethtool selftest with RDMA enabled
- bnxt_en: Fix incorrect multicast rx mask setting when not requested
- net/mlx5: Fix tc max supported prio for nic mode
- ice: initialize local variable 'tlv'
- net/mlx5: Update the list of the PCI supported devices
- net: mv643xx_eth: process retval from of_get_mac_address
- drm/vc4: crtc: Fix runtime_pm reference counting
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- net/mlx5: DR, Cache STE shadow memory
- ibmvnic: schedule failover only if vioctl fails
- net/mlx5: DR, Don't allow match on IP w/o matching on full
ethertype/ip_version
- net/mlx5: DR, Fix the threshold that defines when pool sync is initiated
- net/mlx5e: MPLSoUDP decap, fix check for unsupported matches
- net/mlx5: Update log_max_qp value to be 17 at most
- tracing: Dump stacktrace trigger to the corresponding instance
- usb: dwc3: pci: Add "snps,dis_u2_susphy_quirk" for Intel Bay Trail
- nvmem: core: Fix a conflict between MTD and NVMEM on wp-gpios property
- mtd: core: Fix a conflict between MTD and NVMEM on wp-gpios property
- staging: fbtft: fb_st7789v: reset display before initialization
- tps6598x: clear int mask on probe failure
- riscv: fix nommu_k210_sdcard_defconfig
- tty: n_gsm: fix wrong modem processing in convergence layer type 2
- pinctrl: fix loop in k210_pinconf_get_drive()
- pinctrl: k210: Fix bias-pull-up
- ice: Fix race conditions between virtchnl handling and VF ndo ops
- ice: fix concurrent reset and removal of VFs
* Impish update: upstream stable patchset 2022-04-07 (LP: #1968223)
- drm/nouveau/pmu/gm200-: use alternate falcon reset sequence
- mm: memcg: synchronize objcg lists with a dedicated spinlock
- fs/proc: task_mmu.c: don't read mapcount for migration entry
- scsi: lpfc: Fix mailbox command failure during driver initialization
- HID:Add support for UGTABLET WP5540
- Revert "svm: Add warning message for AVIC IPI invalid target"
- serial: parisc: GSC: fix build when IOSAPIC is not set
- parisc: Drop __init from map_pages declaration
- parisc: Fix data TLB miss in sba_unmap_sg
- parisc: Fix sglist access in ccio-dma.c
- mmc: block: fix read single on recovery logic
- mm: don't try to NUMA-migrate COW pages that have other uses
- PCI: hv: Fix NUMA node assignment when kernel boots with custom NUMA
topology
- parisc: Add ioread64_lo_hi() and iowrite64_lo_hi()
- btrfs: send: in case of IO error log it
- platform/x86: touchscreen_dmi: Add info for the RWC NANOTE P8 AY07J 2-in-1
- platform/x86: ISST: Fix possible circular locking dependency detected
- selftests: rtc: Increase test timeout so that all tests run
- kselftest: signal all child processes
- net: ieee802154: at86rf230: Stop leaking skb's
- selftests/zram: Skip max_comp_streams interface on newer kernel
- selftests/zram01.sh: Fix compression ratio calculation
- selftests/zram: Adapt the situation that /dev/zram0 is being used
- selftests: openat2: Print also errno in failure messages
- selftests: openat2: Add missing dependency in Makefile
- selftests: openat2: Skip testcases that fail with EOPNOTSUPP
- selftests: skip mincore.check_file_mmap when fs lacks needed support
- ax25: improve the incomplete fix to avoid UAF and NPD bugs
- vfs: make freeze_super abort when sync_filesystem returns error
- quota: make dquot_quota_sync return errors from ->sync_fs
- scsi: pm8001: Fix use-after-free for aborted TMF sas_task
- scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task
- nvme: fix a possible use-after-free in controller reset during load
- nvme-tcp: fix possible use-after-free in transport error_recovery work
- nvme-rdma: fix possible use-after-free in transport error_recovery work
- drm/amdgpu: fix logic inversion in check
- x86/Xen: streamline (and fix) PV CPU enumeration
- Revert "module, async: async_synchronize_full() on module init iff async is
used"
- gcc-plugins/stackleak: Use noinstr in favor of notrace
- random: wake up /dev/random writers after zap
- iwlwifi: fix use-after-free
- drm/radeon: Fix backlight control on iMac 12,1
- drm/i915/opregion: check port number bounds for SWSCI display power state
- vsock: remove vsock from connected table when connect is interrupted by a
signal
- drm/i915/gvt: Make DRM_I915_GVT depend on X86
- iwlwifi: pcie: fix locking when "HW not ready"
- iwlwifi: pcie: gen2: fix locking when "HW not ready"
- selftests: netfilter: fix exit value for nft_concat_range
- netfilter: nft_synproxy: unregister hooks on init error path
- ipv6: per-netns exclusive flowlabel checks
- net: dsa: lan9303: fix reset on probe
- net: dsa: lantiq_gswip: fix use after free in gswip_remove()
- net: ieee802154: ca8210: Fix lifs/sifs periods
- ping: fix the dif and sdif check in ping_lookup
- bonding: force carrier update when releasing slave
- drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit
- net_sched: add __rcu annotation to netdev->qdisc
- bonding: fix data-races around agg_select_timer
- libsubcmd: Fix use-after-free for realloc(..., 0)
- dpaa2-eth: Initialize mutex used in one step timestamping path
- perf bpf: Defer freeing string after possible strlen() on it
- selftests/exec: Add non-regular to TEST_GEN_PROGS
- ALSA: hda/realtek: Add quirk for Legion Y9000X 2019
- ALSA: hda/realtek: Fix deadlock by COEF mutex
- ALSA: hda: Fix regression on forced probe mask option
- ALSA: hda: Fix missing codec probe on Shenker Dock 15
- ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw()
- ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range()
- powerpc/lib/sstep: fix 'ptesync' build error
- mtd: rawnand: gpmi: don't leak PM reference in error path
- ASoC: tas2770: Insert post reset delay
- block/wbt: fix negative inflight counter when remove scsi device
- NFS: LOOKUP_DIRECTORY is also ok with symlinks
- NFS: Do not report writeback errors in nfs_getattr()
- tty: n_tty: do not look ahead for EOL character past the end of the buffer
- mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe()
- mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status
- Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
- KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id()
- KVM: x86/pmu: Don't truncate the PerfEvtSeln MSR when creating a perf event
- KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW
- ARM: OMAP2+: hwmod: Add of_node_put() before break
- ARM: OMAP2+: adjust the location of put_device() call in omapdss_init_of
- phy: usb: Leave some clocks running during suspend
- irqchip/sifive-plic: Add missing thead,c900-plic match string
- netfilter: conntrack: don't refresh sctp entries in closed state
- arm64: dts: meson-gx: add ATF BL32 reserved-memory region
- arm64: dts: meson-g12: add ATF BL32 reserved-memory region
- arm64: dts: meson-g12: drop BL32 region from SEI510/SEI610
- pidfd: fix test failure due to stack overflow on some arches
- selftests: fixup build warnings in pidfd / clone3 tests
- kconfig: let 'shell' return enough output for deep path names
- ata: libata-core: Disable TRIM on M88V29
- soc: aspeed: lpc-ctrl: Block error printing on probe defer cases
- xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create
- drm/rockchip: dw_hdmi: Do not leave clock enabled in error case
- tracing: Fix tp_printk option related with tp_printk_stop_on_boot
- net: usb: qmi_wwan: Add support for Dell DW5829e
- net: macb: Align the dma and coherent dma masks
- kconfig: fix failing to generate auto.conf
- scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop
- EDAC: Fix calculation of returned address and next offset in
edac_align_ptr()
- net: sched: limit TC_ACT_REPEAT loops
- dmaengine: sh: rcar-dmac: Check for error num after setting mask
- dmaengine: stm32-dmamux: Fix PM disable depth imbalance in
stm32_dmamux_probe
- dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size
- i2c: qcom-cci: don't delete an unregistered adapter
- i2c: qcom-cci: don't put a device tree node before i2c_add_adapter()
- copy_process(): Move fd_install() out of sighand->siglock critical section
- i2c: brcmstb: fix support for DSL and CM variants
- lockdep: Correct lock_classes index mapping
- btrfs: zoned: cache reported zone during mount
- HID: amd_sfh: Add illuminance mask to limit ALS max value
- HID: amd_sfh: Correct the structure field name
- KVM: x86/xen: Fix runstate updates to be atomic when preempting vCPU
- drm/i915: Fix dbuf slice config lookup
- drm/cma-helper: Set VM_DONTEXPAND for mmap
- selftests: netfilter: disable rp_filter on router
- ipv4: fix data races in fib_alias_hw_flags_set
- ipv6: fix data-race in fib6_info_hw_flags_set / fib6_purge_rt
- ipv6: mcast: use rcu-safe version of ipv6_get_lladdr()
- mac80211: mlme: check for null after calling kmemdup
- cfg80211: fix race in netlink owner interface destruction
- net/smc: Avoid overwriting the copies of clcsock callback functions
- tipc: fix wrong publisher node address in link publications
- net: bridge: multicast: notify switchdev driver whenever MC processing gets
disabled
- arm64: Correct wrong label in macro __init_el2_gicv3
- ALSA: usb-audio: revert to IMPLICIT_FB_FIXED_DEV for M-Audio FastTrack Ultra
- cifs: fix set of group SID via NTSD xattrs
- powerpc/603: Fix boot failure with DEBUG_PAGEALLOC and KFENCE
- smb3: fix snapshot mount option
- NFS: Remove an incorrect revalidation in nfs4_update_changeattr_locked()
- mtd: parsers: qcom: Fix kernel panic on skipped partition
- mtd: parsers: qcom: Fix missing free for pparts in cleanup
- mtd: phram: Prevent divide by zero bug in phram_setup()
- mtd: rawnand: ingenic: Fix missing put_device in ingenic_ecc_get
- tests: fix idmapped mount_setattr test
- ice: enable parsing IPSEC SPI headers for RSS
* Impish update: upstream stable patchset 2022-03-31 (LP: #1967439)
- integrity: check the return value of audit_log_start()
- ima: Remove ima_policy file before directory
- ima: Allow template selection with ima_template[_fmt]= after ima_hash=
- mmc: sdhci-of-esdhc: Check for error num after setting mask
- can: isotp: fix potential CAN frame reception race in isotp_rcv()
- net: phy: marvell: Fix RGMII Tx/Rx delays setting in 88e1121-compatible PHYs
- net: phy: marvell: Fix MDI-x polarity setting in 88e1118-compatible PHYs
- NFS: Fix initialisation of nfs_client cl_flags field
- NFSD: Clamp WRITE offsets
- NFSD: Fix offset type in I/O trace points
- tracing: Propagate is_signed to expression
- NFS: change nfs_access_get_cached to only report the mask
- NFSv4 only print the label when its queried
- nfs: nfs4clinet: check the return value of kstrdup()
- NFSv4.1: Fix uninitialised variable in devicenotify
- NFSv4 remove zero number of fs_locations entries error check
- NFSv4 expose nfs_parse_server_name function
- NFSv4 handle port presence in fs_location server string
- x86/perf: Avoid warning for Arch LBR without XSAVE
- drm: panel-orientation-quirks: Add quirk for the 1Netbook OneXPlayer
- net: sched: Clarify error message when qdisc kind is unknown
- powerpc/fixmap: Fix VM debug warning on unmap
- scsi: target: iscsi: Make sure the np under each tpg is unique
- scsi: ufs: ufshcd-pltfrm: Check the return value of devm_kstrdup()
- scsi: qedf: Add stag_work to all the vports
- scsi: qedf: Fix refcount issue when LOGO is received during TMF
- scsi: pm8001: Fix bogus FW crash for maxcpus=1
- scsi: ufs: Treat link loss as fatal error
- scsi: myrs: Fix crash in error case
- PM: hibernate: Remove register_nosave_region_late()
- usb: dwc2: gadget: don't try to disable ep0 in dwc2_hsotg_suspend
- perf: Always wake the parent event
- nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs
- net: stmmac: dwmac-sun8i: use return val of readl_poll_timeout()
- KVM: eventfd: Fix false positive RCU usage warning
- KVM: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER
- KVM: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS
- KVM: SVM: Don't kill SEV guest if SMAP erratum triggers in usermode
- KVM: VMX: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking shadow
- riscv: fix build with binutils 2.38
- ARM: dts: imx23-evk: Remove MX23_PAD_SSP1_DETECT from hog group
- ARM: dts: Fix boot regression on Skomer
- ARM: socfpga: fix missing RESET_CONTROLLER
- nvme-tcp: fix bogus request completion when failing to send AER
- ACPI/IORT: Check node revision for PMCG resources
- drm/rockchip: vop: Correct RK3399 VOP register fields
- ARM: dts: Fix timer regression for beagleboard revision c
- ARM: dts: meson: Fix the UART compatible strings
- ARM: dts: meson8: Fix the UART device-tree schema validation
- ARM: dts: meson8b: Fix the UART device-tree schema validation
- staging: fbtft: Fix error path in fbtft_driver_module_init()
- ARM: dts: imx6qdl-udoo: Properly describe the SD card detect
- phy: xilinx: zynqmp: Fix bus width setting for SGMII
- ARM: dts: imx7ulp: Fix 'assigned-clocks-parents' typo
- usb: f_fs: Fix use-after-free for epfile
- gpio: aggregator: Fix calling into sleeping GPIO controllers
- drm/vc4: hdmi: Allow DBLCLK modes even if horz timing is odd.
- misc: fastrpc: avoid double fput() on failed usercopy
- netfilter: ctnetlink: disable helper autoassign
- arm64: dts: meson-g12b-odroid-n2: fix typo 'dio2133'
- ixgbevf: Require large buffers for build_skb on 82599VF
- drm/panel: simple: Assign data from panel_dpi_probe() correctly
- gpio: sifive: use the correct register to read output values
- bonding: pair enable_port with slave_arr_updates
- net: dsa: mv88e6xxx: don't use devres for mdiobus
- net: dsa: ar9331: register the mdiobus under devres
- net: dsa: bcm_sf2: don't use devres for mdiobus
- net: dsa: felix: don't use devres for mdiobus
- net: dsa: lantiq_gswip: don't use devres for mdiobus
- ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
- nfp: flower: fix ida_idx not being released
- net: do not keep the dst cache when uncloning an skb dst and its metadata
- net: fix a memleak when uncloning an skb dst and its metadata
- veth: fix races around rq->rx_notify_masked
- net: mdio: aspeed: Add missing MODULE_DEVICE_TABLE
- tipc: rate limit warning for received illegal binding update
- net: amd-xgbe: disable interrupts during pci removal
- dpaa2-eth: unregister the netdev before disconnecting from the PHY
- ice: fix an error code in ice_cfg_phy_fec()
- ice: fix IPIP and SIT TSO offload
- net: mscc: ocelot: fix mutex lock error during ethtool stats read
- net: dsa: mv88e6xxx: fix use-after-free in mv88e6xxx_mdios_unregister
- vt_ioctl: fix array_index_nospec in vt_setactivate
- vt_ioctl: add array_index_nospec to VT_ACTIVATE
- n_tty: wake up poll(POLLRDNORM) on receiving data
- eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX
- usb: dwc2: drd: fix soft connect when gadget is unconfigured
- Revert "usb: dwc2: drd: fix soft connect when gadget is unconfigured"
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup
- usb: ulpi: Move of_node_put to ulpi_dev_release
- usb: ulpi: Call of_node_put correctly
- usb: dwc3: gadget: Prevent core from processing stale TRBs
- usb: gadget: udc: renesas_usb3: Fix host to USB_ROLE_NONE transition
- USB: gadget: validate interface OS descriptor requests
- usb: gadget: rndis: check size of RNDIS_MSG_SET command
- usb: gadget: f_uac2: Define specific wTerminalType
- usb: raw-gadget: fix handling of dual-direction-capable endpoints
- USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320
- USB: serial: option: add ZTE MF286D modem
- USB: serial: ch341: add support for GW Instek USB2.0-Serial devices
- USB: serial: cp210x: add NCR Retail IO box id
- USB: serial: cp210x: add CPI Bulk Coin Recycler id
- speakup-dectlk: Restore pitch setting
- phy: ti: Fix missing sentinel for clk_div_table
- hwmon: (dell-smm) Speed up setting of fan speed
- Makefile.extrawarn: Move -Wunaligned-access to W=1
- can: isotp: fix error path in isotp_sendmsg() to unlock wait queue
- scsi: lpfc: Remove NVMe support if kernel has NVME_FC disabled
- scsi: lpfc: Reduce log messages seen after firmware download
- arm64: dts: imx8mq: fix lcdif port node
- perf: Fix list corruption in perf_cgroup_switch()
- iommu: Fix potential use-after-free during probe
- ima: fix reference leak in asymmetric_verify()
- NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes
- NFSD: Fix ia_size underflow
- NFSD: Fix the behavior of READ near OFFSET_MAX
- NFSv4 store server support for fs_location attribute
- NFSv4.1 query for fs_location attr on a new file system
- perf/x86/rapl: fix AMD event handling
- sched: Avoid double preemption in __cond_resched_*lock*()
- drm/vc4: Fix deadlock on DSI device attach error
- scsi: qedf: Change context reset messages to ratelimited
- net: stmmac: reduce unnecessary wakeups from eee sw timer
- MIPS: Fix build error due to PTR used in more places
- KVM: x86: Report deprecated x87 features in supported CPUID
- riscv: cpu-hotplug: clear cpu from numa map when teardown
- riscv: eliminate unreliable __builtin_frame_address(1)
- gfs2: Fix gfs2_release for non-writers regression
- phy: broadcom: Kconfig: Fix PHY_BRCM_USB config option
- phy: stm32: fix a refcount leak in stm32_usbphyc_pll_enable()
- phy: dphy: Correct clk_pre parameter
- NFS: Don't overfill uncached readdir pages
- NFS: Don't skip directory entries when doing uncached readdir
- gpiolib: Never return internal error codes to user space
- fbcon: Avoid 'cap' set but not used warning
- drm/amd/pm: fix hwmon node of power1_label create issue
- mptcp: netlink: process IPv6 addrs in creating listening sockets
- iio: buffer: Fix file related error handling in IIO_BUFFER_GET_FD_IOCTL
- seccomp: Invalidate seccomp mode to catch death failures
- x86/sgx: Silence softlockup detection when releasing large enclaves
* Impish update: upstream stable patchset 2022-03-22 (LP: #1966021)
- selinux: fix double free of cond_list on error paths
- ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
- ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()
- ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()
- ALSA: usb-audio: Correct quirk for VF0770
- ALSA: hda: Fix UAF of leds class devs at unbinding
- ALSA: hda: realtek: Fix race at concurrent COEF updates
- ALSA: hda/realtek: Add quirk for ASUS GU603
- ALSA: hda/realtek: Add missing fixup-model entry for Gigabyte X570 ALC1220
quirks
- ALSA: hda/realtek: Fix silent output on Gigabyte X570S Aorus Master (newer
chipset)
- ALSA: hda/realtek: Fix silent output on Gigabyte X570 Aorus Xtreme after
reboot from Windows
- btrfs: fix deadlock between quota disable and qgroup rescan worker
- drm/nouveau: fix off by one in BIOS boundary checking
- drm/amd/display: Force link_rate as LINK_RATE_RBR2 for 2018 15" Apple Retina
panels
- nvme-fabrics: fix state check in nvmf_ctlr_matches_baseopts()
- mm/debug_vm_pgtable: remove pte entry from the page table
- mm/pgtable: define pte_index so that preprocessor could recognize it
- mm/kmemleak: avoid scanning potential huge holes
- block: bio-integrity: Advance seed correctly for larger interval sizes
- dma-buf: heaps: Fix potential spectre v1 gadget
- IB/hfi1: Fix AIP early init panic
- memcg: charge fs_context and legacy_fs_context
- RDMA/cma: Use correct address when leaving multicast group
- RDMA/ucma: Protect mc during concurrent multicast leaves
- IB/rdmavt: Validate remote_addr during loopback atomic tests
- RDMA/siw: Fix broken RDMA Read Fence/Resume logic.
- RDMA/mlx4: Don't continue event handler after memory allocation failure
- iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping()
- iommu/amd: Fix loop timeout issue in iommu_ga_log_enable()
- spi: bcm-qspi: check for valid cs before applying chip select
- spi: mediatek: Avoid NULL pointer crash in interrupt
- spi: meson-spicc: add IRQ check in meson_spicc_probe
- spi: uniphier: fix reference count leak in uniphier_spi_probe()
- net: ieee802154: hwsim: Ensure proper channel selection at probe time
- net: ieee802154: mcr20a: Fix lifs/sifs periods
- net: ieee802154: ca8210: Stop leaking skb's
- net: ieee802154: Return meaningful error codes from the netlink helpers
- net: macsec: Fix offload support for NETDEV_UNREGISTER event
- net: macsec: Verify that send_sci is on when setting Tx sci explicitly
- net: stmmac: dump gmac4 DMA registers correctly
- net: stmmac: ensure PTP time register reads are consistent
- drm/i915/overlay: Prevent divide by zero bugs in scaling
- ASoC: fsl: Add missing error handling in pcm030_fabric_probe
- ASoC: xilinx: xlnx_formatter_pcm: Make buffer bytes multiple of period bytes
- ASoC: cpcap: Check for NULL pointer after calling of_get_child_by_name
- ASoC: max9759: fix underflow in speaker_gain_control_put()
- pinctrl: intel: Fix a glitch when updating IRQ flags on a preconfigured line
- pinctrl: intel: fix unexpected interrupt
- pinctrl: bcm2835: Fix a few error paths
- scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe
- nfsd: nfsd4_setclientid_confirm mistakenly expires confirmed client.
- gve: fix the wrong AdminQ buffer queue index check
- bpf: Use VM_MAP instead of VM_ALLOC for ringbuf
- selftests/exec: Remove pipe from TEST_GEN_FILES
- selftests: futex: Use variable MAKE instead of make
- tools/resolve_btfids: Do not print any commands when building silently
- rtc: cmos: Evaluate century appropriate
- Revert "fbcon: Disable accelerated scrolling"
- updateconfigs for FRAMEBUFFER_CONSOLE_LEGACY_ACCELERATION
- fbcon: Add option to enable legacy hardware acceleration
- perf stat: Fix display of grouped aliased events
- perf/x86/intel/pt: Fix crash with stop filters in single-range mode
- x86/perf: Default set FREEZE_ON_SMI for all
- EDAC/altera: Fix deferred probing
- EDAC/xgene: Fix deferred probing
- ext4: prevent used blocks from being allocated during fast commit replay
- ext4: modify the logic of ext4_mb_new_blocks_simple
- ext4: fix error handling in ext4_restore_inline_data()
- ext4: fix error handling in ext4_fc_record_modified_inode()
- ext4: fix incorrect type issue during replay_del_range
- net: dsa: mt7530: make NET_DSA_MT7530 select MEDIATEK_GE_PHY
- cgroup/cpuset: Fix "suspicious RCU usage" lockdep warning
- selftests: nft_concat_range: add test for reload with no element add/del
- drm/i915: Disable DSB usage for now
- btrfs: don't start transaction for scrub if the fs is mounted read-only
- btrfs: fix use-after-free after failure to create a snapshot
- Revert "fs/9p: search open fids first"
- mptcp: fix msk traversal in mptcp_nl_cmd_set_flags()
- KVM: arm64: Avoid consuming a stale esr value when SError occur
- KVM: arm64: Stop handle_exit() from handling HVC twice when an SError occurs
- ALSA: usb-audio: initialize variables that could ignore errors
- ALSA: hda: Skip codec shutdown in case the codec is not registered
- IB/hfi1: Fix tstats alloc and dealloc
- IB/cm: Release previously acquired reference counter in the cm_id_priv
- netfilter: nft_reject_bridge: Fix for missing reply from prerouting
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- net: stmmac: dwmac-visconti: No change to ETHER_CLOCK_SEL for unexpected
speed request.
- net: stmmac: properly handle with runtime pm in stmmac_dvr_remove()
- drm/kmb: Fix for build errors with Warray-bounds
- drm/amd: avoid suspend on dGPUs w/ s2idle support when runtime PM enabled
- ASoC: simple-card: fix probe failure on platform component
- ASoC: codecs: lpass-rx-macro: fix sidetone register offsets
- pinctrl: sunxi: Fix H616 I2S3 pin data
- kvm: add guest_state_{enter,exit}_irqoff()
- kvm/arm64: rework guest entry logic
- perf: Copy perf_event_attr::sig_data on modification
- tools include UAPI: Sync sound/asound.h copy with the kernel sources
- gpio: mpc8xxx: Fix an ignored error return from platform_get_irq()
- selftests: netfilter: check stateless nat udp checksum fixup
- moxart: fix potential use-after-free on remove path
- crypto: api - Move cryptomgr soft dependency into algapi
* Impish update: upstream stable patchset 2022-03-18 (LP: #1965589)
- PCI: pciehp: Fix infinite loop in IRQ handler upon power fault
- net: ipa: use a bitmap for endpoint replenish_enabled
- net: ipa: prevent concurrent replenish
- KVM: x86: Forcibly leave nested virt when SMM state is toggled
- net/mlx5e: Fix handling of wrong devices during bond netevent
- net/mlx5: Use del_timer_sync in fw reset flow of halting poll
- net/mlx5: E-Switch, Fix uninitialized variable modact
- ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback
- net: amd-xgbe: ensure to reset the tx_timer_active flag
- net: amd-xgbe: Fix skb data length underflow
- fanotify: Fix stale file descriptor in copy_event_to_user()
- rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()
- cpuset: Fix the bug that subpart_cpus updated wrongly in update_cpumask()
- af_packet: fix data-race in packet_setsockopt / packet_setsockopt
- tcp: add missing tcp_skb_can_collapse() test in tcp_shift_skb_data()
- selftests: mptcp: fix ipv6 routing setup
- net/mlx5e: Fix module EEPROM query
- net/mlx5: Fix offloading with ESWITCH_IPV4_TTL_MODIFY_ENABLE
- net/mlx5e: Don't treat small ceil values as unlimited in HTB offload
- i40e: Fix reset path while removing the driver
* CVE-2022-27223
- USB: gadget: validate endpoint index for xilinx udc
* CVE-2022-26490
- nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION
* CVE-2021-26401
- x86/speculation: Use generic retpoline by default on AMD
- x86/speculation: Update link to AMD speculation whitepaper
- x86/speculation: Warn about Spectre v2 LFENCE mitigation
- x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT
* CVE-2022-0001
- x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation
reporting
* USB devices not detected during boot on USB 3.0 hubs (LP: #1968210)
- SAUCE: Revert "Revert "xhci: Set HCD flag to defer primary roothub
registration""
- SAUCE: Revert "Revert "usb: core: hcd: Add support for deferring roothub
registration""
-- Joseph Salisbury <email address hidden> Mon, 25 Apr 2022 12:51:11 -0400
Available diffs
| Superseded in focal-security |
| Superseded in focal-updates |
| Deleted in focal-proposed (Reason: moved to -updates) |
linux-gcp-5.13 (5.13.0-1024.29~20.04.1) focal; urgency=medium
* focal/linux-gcp-5.13: 5.13.0-1024.29~20.04.1 -proposed tracker
(LP: #1967348)
[ Ubuntu: 5.13.0-1024.29 ]
* impish/linux-gcp: 5.13.0-1024.29 -proposed tracker (LP: #1967349)
* impish/linux: 5.13.0-40.45 -proposed tracker (LP: #1966701)
* CVE-2022-1016
- netfilter: nf_tables: initialize registers in nft_do_chain()
* CVE-2022-1015
- netfilter: nf_tables: validate registers coming from userspace.
* audit: improve audit queue handling when "audit=1" on cmdline
(LP: #1965723) // Impish update: upstream stable patchset 2022-03-22
(LP: #1966021)
- audit: improve audit queue handling when "audit=1" on cmdline
* PS/2 Keyboard wakeup from s2idle not functioning on AMD Yellow Carp platform
(LP: #1961739)
- PM: s2idle: ACPI: Fix wakeup interrupts handling
* Low RX performance for 40G Solarflare NICs (LP: #1964512)
- SAUCE: sfc: The size of the RX recycle ring should be more flexible
* [UBUNTU 20.04] Fix SIGP processing on KVM/s390 (LP: #1962578)
- KVM: s390: Simplify SIGP Set Arch handling
- KVM: s390: Add a routine for setting userspace CPU state
* Move virtual graphics drivers from linux-modules-extra to linux-modules
(LP: #1960633)
- [Packaging] Move VM DRM drivers into modules
* Impish update: upstream stable patchset 2022-03-09 (LP: #1964422)
- bnx2x: Utilize firmware 7.13.21.0
- bnx2x: Invalidate fastpath HSI version for VFs
- rcu: Tighten rcu_advance_cbs_nowake() checks
- select: Fix indefinitely sleeping task in poll_schedule_timeout()
- drm/amdgpu: Use correct VIEWPORT_DIMENSION for DCN2
- arm64/bpf: Remove 128MB limit for BPF JIT programs
- Bluetooth: refactor malicious adv data check
- net: sfp: ignore disabled SFP node
- net: stmmac: skip only stmmac_ptp_register when resume from suspend
- s390/hypfs: include z/VM guests with access control group set
- bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack()
- scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP
devices
- udf: Restore i_lenAlloc when inode expansion fails
- udf: Fix NULL ptr deref when converting from inline format
- efi: runtime: avoid EFIv2 runtime services on Apple x86 machines
- PM: wakeup: simplify the output logic of pm_show_wakelocks()
- tracing/histogram: Fix a potential memory leak for kstrdup()
- tracing: Don't inc err_log entry count if entry allocation fails
- ceph: properly put ceph_string reference after async create attempt
- ceph: set pool_ns in new inode layout for async creates
- fsnotify: fix fsnotify hooks in pseudo filesystems
- Revert "KVM: SVM: avoid infinite loop on NPF from bad address"
- perf/x86/intel/uncore: Fix CAS_COUNT_WRITE issue for ICX
- drm/etnaviv: relax submit size limits
- KVM: x86: Update vCPU's runtime CPUID on write to MSR_IA32_XSS
- netfilter: nft_payload: do not update layer 4 checksum when mangling
fragments
- serial: 8250: of: Fix mapped region size when using reg-offset property
- serial: stm32: fix software flow control transfer
- tty: n_gsm: fix SW flow control encoding/handling
- tty: Add support for Brainboxes UC cards.
- usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge
- usb: xhci-plat: fix crash when suspend if remote wake enable
- usb: common: ulpi: Fix crash in ulpi_match()
- usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS
- USB: core: Fix hang in usb_kill_urb by adding memory barriers
- usb: typec: tcpm: Do not disconnect while receiving VBUS off
- ucsi_ccg: Check DEV_INT bit only when starting CCG4
- jbd2: export jbd2_journal_[grab|put]_journal_head
- ocfs2: fix a deadlock when commit trans
- sched/membarrier: Fix membarrier-rseq fence command missing from query
bitmask
- x86/MCE/AMD: Allow thresholding interface updates after init
- powerpc/32s: Allocate one 256k IBAT instead of two consecutives 128k IBATs
- powerpc/32s: Fix kasan_init_region() for KASAN
- powerpc/32: Fix boot failure with GCC latent entropy plugin
- i40e: Increase delay to 1 s after global EMP reset
- i40e: Fix issue when maximum queues is exceeded
- i40e: Fix queues reservation for XDP
- i40e: Fix for failed to init adminq while VF reset
- i40e: fix unsigned stat widths
- usb: roles: fix include/linux/usb/role.h compile issue
- rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev
- rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev
- scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put()
- ipv6_tunnel: Rate limit warning messages
- net: fix information leakage in /proc/net/ptype
- hwmon: (lm90) Mark alert as broken for MAX6646/6647/6649
- hwmon: (lm90) Mark alert as broken for MAX6680
- ping: fix the sk_bound_dev_if match in ping_lookup
- ipv4: avoid using shared IP generator for connected sockets
- hwmon: (lm90) Reduce maximum conversion rate for G781
- NFSv4: Handle case where the lookup of a directory fails
- NFSv4: nfs_atomic_open() can race when looking up a non-regular file
- net-procfs: show net devices bound packet types
- drm/msm: Fix wrong size calculation
- drm/msm/dsi: Fix missing put_device() call in dsi_get_phy
- drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable
- ipv6: annotate accesses to fn->fn_sernum
- NFS: Ensure the server has an up to date ctime before hardlinking
- NFS: Ensure the server has an up to date ctime before renaming
- powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06
- netfilter: conntrack: don't increment invalid counter on NF_REPEAT
- perf: Fix perf_event_read_local() time
- sched/pelt: Relax the sync of util_sum with util_avg
- net: phy: broadcom: hook up soft_reset for BCM54616S
- phylib: fix potential use-after-free
- octeontx2-pf: Forward error codes to VF
- rxrpc: Adjust retransmission backoff
- efi/libstub: arm64: Fix image check alignment at entry
- hwmon: (lm90) Mark alert as broken for MAX6654
- powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if
PMI is pending
- net: ipv4: Move ip_options_fragment() out of loop
- net: ipv4: Fix the warning for dereference
- ipv4: fix ip option filtering for locally generated fragments
- ibmvnic: init ->running_cap_crqs early
- ibmvnic: don't spin in tasklet
- video: hyperv_fb: Fix validation of screen resolution
- drm/msm/hdmi: Fix missing put_device() call in msm_hdmi_get_phy
- drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc
- yam: fix a memory leak in yam_siocdevprivate()
- net: cpsw: Properly initialise struct page_pool_params
- net: hns3: handle empty unknown interrupt for VF
- Revert "ipv6: Honor all IPv6 PIO Valid Lifetime values"
- net: bridge: vlan: fix single net device option dumping
- ipv4: raw: lock the socket in raw_bind()
- ipv4: tcp: send zero IPID in SYNACK messages
- ipv4: remove sparse error in ip_neigh_gw4()
- net: bridge: vlan: fix memory leak in __allowed_ingress
- dt-bindings: can: tcan4x5x: fix mram-cfg RX FIFO config
- usr/include/Makefile: add linux/nfc.h to the compile-test coverage
- fsnotify: invalidate dcache before IN_DELETE event
- block: Fix wrong offset in bio_truncate()
- mtd: rawnand: mpc5121: Remove unused variable in ads5121_select_chip()
- net: stmmac: configure PTP clock source prior to PTP initialization
- KVM: arm64: Use shadow SPSR_EL1 when injecting exceptions on !VHE
- s390/nmi: handle guarded storage validity failures for KVM guests
- powerpc32/bpf: Fix codegen for bpf-to-bpf calls
- powerpc/bpf: Update ldimm64 instructions during extra pass
- psi: Fix uaf issue when psi trigger is destroyed while being polled
- perf/x86/intel: Add a quirk for the calculation of the number of counters on
Alder Lake
- drm/atomic: Add the crtc to affected crtc only if uapi.enable = true
- KVM: SVM: Never reject emulation due to SMAP errata for !SEV guests
- KVM: x86: Keep MSR_IA32_XSS unchanged for INIT
- KVM: x86: Sync the states size with the XCR0/IA32_XSS at, any time
- tty: Partially revert the removal of the Cyclades public API
- usb: cdnsp: Fix segmentation fault in cdns_lost_power function
- usb: dwc3: xilinx: Skip resets and USB3 register settings for USB2.0 mode
- usb: dwc3: xilinx: Fix error handling when getting USB3 PHY
- usb: typec: tcpci: don't touch CC line if it's Vconn source
- usb: typec: tcpm: Do not disconnect when receiving VSAFE0V
- mm, kasan: use compare-exchange operation to set KASAN page tag
- PCI/sysfs: Find shadow ROM before static attribute initialization
- x86/cpu: Add Xeon Icelake-D to list of CPUs that support PPIN
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- net: stmmac: dwmac-visconti: Fix bit definitions for ETHER_CLK_SEL
- net: stmmac: dwmac-visconti: Fix clock configuration for RMII mode
- octeontx2-af: cn10k: Do not enable RPM loopback for LPC interfaces
- io_uring: fix bug in slow unregistering of nodes
- ibmvnic: Allow extra failures before disabling
- net/smc: Transitional solution for clcsock race issue
- can: tcan4x5x: regmap: fix max register value
- drm/msm/a6xx: Add missing suspend_count increment
- sch_htb: Fail on unsupported parameters when offload is requested
- Revert "drm/ast: Support 1600x900 with 108MHz PCLK"
- irqchip/realtek-rtl: Map control data to virq
- irqchip/realtek-rtl: Fix off-by-one in routing
- perf/core: Fix cgroup event list management
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- psi: fix "defined but not used" warnings when CONFIG_PROC_FS=n
* Impish update: upstream stable patchset 2022-02-24 (LP: #1962230)
- KVM: VMX: switch blocked_vcpu_on_cpu_lock to raw spinlock
- HID: uhid: Fix worker destroying device without any protection
- HID: wacom: Avoid using stale array indicies to read contact count
- f2fs: fix to do sanity check in is_alive()
- nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed
bind()
- mtd: rawnand: gpmi: Add ERR007117 protection for nfc_apply_timings
- mtd: rawnand: gpmi: Remove explicit default gpmi clock setting for i.MX6
- mtd: Fixed breaking list in __mtd_del_partition.
- mtd: rawnand: davinci: Don't calculate ECC when reading page
- mtd: rawnand: davinci: Avoid duplicated page read
- mtd: rawnand: davinci: Rewrite function description
- x86/gpu: Reserve stolen memory for first integrated Intel GPU
- tools/nolibc: x86-64: Fix startup code bug
- tools/nolibc: i386: fix initial stack alignment
- tools/nolibc: fix incorrect truncation of exit code
- rtc: cmos: take rtc_lock while reading from CMOS
- media: v4l2-ioctl.c: readbuffers depends on V4L2_CAP_READWRITE
- media: flexcop-usb: fix control-message timeouts
- media: mceusb: fix control-message timeouts
- media: em28xx: fix control-message timeouts
- media: cpia2: fix control-message timeouts
- media: s2255: fix control-message timeouts
- media: dib0700: fix undefined behavior in tuner shutdown
- media: redrat3: fix control-message timeouts
- media: pvrusb2: fix control-message timeouts
- media: stk1160: fix control-message timeouts
- media: cec-pin: fix interrupt en/disable handling
- can: softing_cs: softingcs_probe(): fix memleak on registration failure
- iio: adc: ti-adc081c: Partial revert of removal of ACPI IDs
- lkdtm: Fix content of section containing lkdtm_rodata_do_nothing()
- iommu/io-pgtable-arm-v7s: Add error handle for page table allocation failure
- gpu: host1x: Add back arm_iommu_detach_device()
- dma_fence_array: Fix PENDING_ERROR leak in dma_fence_array_signaled()
- PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller
- mm_zone: add function to check if managed dma zone exists
- dma/pool: create dma atomic pool only if dma zone has managed pages
- mm/page_alloc.c: do not warn allocation failure on zone DMA if no managed
pages
- shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode
- drm/ttm: Put BO in its memory manager's lru list
- Bluetooth: L2CAP: Fix not initializing sk_peer_pid
- drm/bridge: display-connector: fix an uninitialized pointer in probe()
- drm: fix null-ptr-deref in drm_dev_init_release()
- drm/panel: kingdisplay-kd097d04: Delete panel on attach() failure
- drm/panel: innolux-p079zca: Delete panel on attach() failure
- drm/rockchip: dsi: Fix unbalanced clock on probe error
- drm/rockchip: dsi: Hold pm-runtime across bind/unbind
- drm/rockchip: dsi: Disable PLL clock on bind error
- drm/rockchip: dsi: Reconfigure hardware on resume()
- Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails
- clk: bcm-2835: Pick the closest clock rate
- clk: bcm-2835: Remove rounding up the dividers
- drm/vc4: hdmi: Set a default HSM rate
- wcn36xx: ensure pairing of init_scan/finish_scan and start_scan/end_scan
- wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND
- wcn36xx: Fix DMA channel enable/disable cycle
- wcn36xx: Release DMA channel descriptor allocations
- wcn36xx: Put DXE block into reset before freeing memory
- wcn36xx: populate band before determining rate on RX
- wcn36xx: fix RX BD rate mapping for 5GHz legacy rates
- ath11k: Send PPDU_STATS_CFG with proper pdev mask to firmware
- mtd: hyperbus: rpc-if: Check return value of rpcif_sw_init()
- media: videobuf2: Fix the size printk format
- media: atomisp: add missing media_device_cleanup() in
atomisp_unregister_entities()
- media: atomisp: fix punit_ddr_dvfs_enable() argument for mrfld_power up case
- media: atomisp: fix inverted logic in buffers_needed()
- media: atomisp: do not use err var when checking port validity for ISP2400
- media: atomisp: fix inverted error check for
ia_css_mipi_is_source_port_valid()
- media: atomisp: fix ifdefs in sh_css.c
- media: staging: media: atomisp: pci: Balance braces around conditional
statements in file atomisp_cmd.c
- media: atomisp: add NULL check for asd obtained from atomisp_video_pipe
- media: atomisp: fix enum formats logic
- media: atomisp: fix uninitialized bug in gmin_get_pmic_id_and_addr()
- media: aspeed: fix mode-detect always time out at 2nd run
- media: em28xx: fix memory leak in em28xx_init_dev
- media: aspeed: Update signal status immediately to ensure sane hw state
- arm64: dts: amlogic: meson-g12: Fix GPU operating point table node name
- arm64: dts: amlogic: Fix SPI NOR flash node name for ODROID N2/N2+
- arm64: dts: meson-gxbb-wetek: fix HDMI in early boot
- arm64: dts: meson-gxbb-wetek: fix missing GPIO binding
- fs: dlm: use sk->sk_socket instead of con->sock
- fs: dlm: don't call kernel_getpeername() in error_report()
- memory: renesas-rpc-if: Return error in case devm_ioremap_resource() fails
- Bluetooth: stop proccessing malicious adv data
- ath11k: Fix ETSI regd with weather radar overlap
- ath11k: clear the keys properly via DISABLE_KEY
- ath11k: reset RSN/WPA present state for open BSS
- tee: fix put order in teedev_close_context()
- fs: dlm: fix build with CONFIG_IPV6 disabled
- drm/vboxvideo: fix a NULL vs IS_ERR() check
- arm64: dts: renesas: cat875: Add rx/tx delays
- media: dmxdev: fix UAF when dvb_register_device() fails
- crypto: qce - fix uaf on qce_ahash_register_one
- crypto: qce - fix uaf on qce_skcipher_register_one
- mtd: hyperbus: rpc-if: fix bug in rpcif_hb_remove
- ARM: dts: stm32: fix dtbs_check warning on ili9341 dts binding on stm32f429
disco
- crypto: qat - remove unnecessary collision prevention step in PFVF
- crypto: qat - make pfvf send message direction agnostic
- crypto: qat - fix undetected PFVF timeout in ACK loop
- ath11k: Use host CE parameters for CE interrupts configuration
- arm64: dts: ti: k3-j721e: correct cache-sets info
- tty: serial: atmel: Check return code of dmaengine_submit()
- tty: serial: atmel: Call dma_async_issue_pending()
- mfd: atmel-flexcom: Remove #ifdef CONFIG_PM_SLEEP
- mfd: atmel-flexcom: Use .resume_noirq
- media: rcar-csi2: Correct the selection of hsfreqrange
- media: imx-pxp: Initialize the spinlock prior to using it
- media: si470x-i2c: fix possible memory leak in si470x_i2c_probe()
- media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released
- media: coda: fix CODA960 JPEG encoder buffer overflow
- media: venus: core: Fix a potential NULL pointer dereference in an error
handling path
- media: venus: core: Fix a resource leak in the error handling path of
'venus_probe()'
- thermal/drivers/imx: Implement runtime PM support
- netfilter: bridge: add support for pppoe filtering
- arm64: dts: qcom: msm8916: fix MMC controller aliases
- cgroup: Trace event cgroup id fields should be u64
- ACPI: EC: Rework flushing of EC work while suspended to idle
- thermal/drivers/imx8mm: Enable ADC when enabling monitor
- drm/amdgpu: Fix a NULL pointer dereference in
amdgpu_connector_lcd_native_mode()
- drm/radeon/radeon_kms: Fix a NULL pointer dereference in
radeon_driver_open_kms()
- arm64: dts: ti: k3-j7200: Fix the L2 cache sets
- arm64: dts: ti: k3-j721e: Fix the L2 cache sets
- arm64: dts: ti: k3-j7200: Correct the d-cache-sets info
- tty: serial: uartlite: allow 64 bit address
- serial: amba-pl011: do not request memory region twice
- floppy: Fix hang in watchdog when disk is ejected
- staging: rtl8192e: return error code from rtllib_softmac_init()
- staging: rtl8192e: rtllib_module: fix error handle case in alloc_rtllib()
- Bluetooth: btmtksdio: fix resume failure
- sched/fair: Fix detection of per-CPU kthreads waking a task
- sched/fair: Fix per-CPU kthread and wakee stacking for asym CPU capacity
- bpf: Adjust BTF log size limit.
- bpf: Disallow BPF_LOG_KERNEL log level for bpf(BPF_BTF_LOAD)
- bpf: Remove config check to enable bpf support for branch records
- arm64: clear_page() shouldn't use DC ZVA when DCZID_EL0.DZP == 1
- media: dib8000: Fix a memleak in dib8000_init()
- media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach()
- media: si2157: Fix "warm" tuner state detection
- wireless: iwlwifi: Fix a double free in iwl_txq_dyn_alloc_dma
- sched/rt: Try to restart rt period timer when rt runtime exceeded
- drm/msm/dp: displayPort driver need algorithm rational
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass
- mwifiex: Fix possible ABBA deadlock
- xfrm: fix a small bug in xfrm_sa_len()
- x86/uaccess: Move variable into switch case statement
- selftests: clone3: clone3: add case CLONE3_ARGS_NO_TEST
- selftests: harness: avoid false negatives if test has no ASSERTs
- crypto: stm32/cryp - fix CTR counter carry
- crypto: stm32/cryp - fix xts and race condition in crypto_engine requests
- crypto: stm32/cryp - check early input data
- crypto: stm32/cryp - fix double pm exit
- crypto: stm32/cryp - fix lrw chaining mode
- crypto: stm32/cryp - fix bugs and crash in tests
- crypto: stm32 - Revert broken pm_runtime_resume_and_get changes
- ath11k: Fix deleting uninitialized kernel timer during fragment cache flush
- ARM: dts: gemini: NAS4220-B: fis-index-block with 128 KiB sectors
- media: dw2102: Fix use after free
- media: msi001: fix possible null-ptr-deref in msi001_probe()
- media: coda/imx-vdoa: Handle dma_set_coherent_mask error codes
- ath11k: Fix a NULL pointer dereference in ath11k_mac_op_hw_scan()
- arm64: dts: qcom: c630: Fix soundcard setup
- arm64: dts: qcom: ipq6018: Fix gpio-ranges property
- drm/msm/dpu: fix safe status debugfs file
- drm/bridge: ti-sn65dsi86: Set max register for regmap
- drm/tegra: vic: Fix DMA API misuse
- media: hantro: Fix probe func error path
- xfrm: interface with if_id 0 should return error
- xfrm: state and policy should fail if XFRMA_IF_ID 0
- ARM: 9159/1: decompressor: Avoid UNPREDICTABLE NOP encoding
- usb: ftdi-elan: fix memory leak on device disconnect
- arm64: dts: marvell: cn9130: add GPIO and SPI aliases
- arm64: dts: marvell: cn9130: enable CP0 GPIO controllers
- ARM: dts: armada-38x: Add generic compatible to UART nodes
- iwlwifi: mvm: fix 32-bit build in FTM
- iwlwifi: mvm: test roc running status bits before removing the sta
- mmc: meson-mx-sdhc: add IRQ check
- mmc: meson-mx-sdio: add IRQ check
- selinux: fix potential memleak in selinux_add_opt()
- um: fix ndelay/udelay defines
- um: virtio_uml: Fix time-travel external time propagation
- Bluetooth: L2CAP: Fix using wrong mode
- bpftool: Enable line buffering for stdout
- backlight: qcom-wled: Validate enabled string indices in DT
- backlight: qcom-wled: Pass number of elements to read to read_u32_array
- backlight: qcom-wled: Fix off-by-one maximum with default num_strings
- backlight: qcom-wled: Override default length with qcom,enabled-strings
- backlight: qcom-wled: Use cpu_to_le16 macro to perform conversion
- backlight: qcom-wled: Respect enabled-strings in set_brightness
- software node: fix wrong node passed to find nargs_prop
- Bluetooth: hci_qca: Stop IBS timer during BT OFF
- x86/boot/compressed: Move CLANG_FLAGS to beginning of KBUILD_CFLAGS
- hwmon: (mr75203) fix wrong power-up delay value
- x86/mce/inject: Avoid out-of-bounds write when setting flags
- ACPI: scan: Create platform device for BCM4752 and LNV4752 ACPI nodes
- pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in
__nonstatic_find_io_region()
- pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in
nonstatic_find_mem_region()
- power: reset: mt6397: Check for null res pointer
- netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check()
- bpf: Fix SO_RCVBUF/SO_SNDBUF handling in _bpf_setsockopt().
- netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone
- ppp: ensure minimum packet size in ppp_write()
- rocker: fix a sleeping in atomic bug
- staging: greybus: audio: Check null pointer
- fsl/fman: Check for null pointer after calling devm_ioremap
- Bluetooth: hci_bcm: Check for error irq
- Bluetooth: hci_qca: Fix NULL vs IS_ERR_OR_NULL check in qca_serdev_probe
- usb: dwc3: qcom: Fix NULL vs IS_ERR checking in dwc3_qcom_probe
- HID: hid-uclogic-params: Invalid parameter check in uclogic_params_init
- HID: hid-uclogic-params: Invalid parameter check in
uclogic_params_get_str_desc
- HID: hid-uclogic-params: Invalid parameter check in
uclogic_params_huion_init
- HID: hid-uclogic-params: Invalid parameter check in
uclogic_params_frame_init_v1_buttonpad
- debugfs: lockdown: Allow reading debugfs files that are not world readable
- net/mlx5e: Fix page DMA map/unmap attributes
- net/mlx5e: Don't block routes with nexthop objects in SW
- Revert "net/mlx5e: Block offload of outer header csum for UDP tunnels"
- net/mlx5: Set command entry semaphore up once got index free
- lib/mpi: Add the return value check of kcalloc()
- Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt()
- spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe
- ax25: uninitialized variable in ax25_setsockopt()
- netrom: fix api breakage in nr_setsockopt()
- regmap: Call regmap_debugfs_exit() prior to _init()
- can: mcp251xfd: add missing newline to printed strings
- tpm: add request_locality before write TPM_INT_ENABLE
- tpm_tis: Fix an error handling path in 'tpm_tis_core_init()'
- can: softing: softing_startstop(): fix set but not used variable warning
- can: xilinx_can: xcan_probe(): check for error irq
- pcmcia: fix setting of kthread task states
- iwlwifi: mvm: Use div_s64 instead of do_div in iwl_mvm_ftm_rtt_smoothing()
- net: mcs7830: handle usb read errors properly
- ext4: avoid trim error on fs with small groups
- ALSA: jack: Add missing rwsem around snd_ctl_remove() calls
- ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls
- ALSA: hda: Add missing rwsem around snd_ctl_remove() calls
- RDMA/bnxt_re: Scan the whole bitmap when checking if "disabling RCFW with
pending cmd-bit"
- RDMA/hns: Validate the pkey index
- scsi: pm80xx: Update WARN_ON check in pm8001_mpi_build_cmd()
- clk: imx8mn: Fix imx8mn_clko1_sels
- powerpc/prom_init: Fix improper check of prom_getprop()
- ASoC: uniphier: drop selecting non-existing SND_SOC_UNIPHIER_AIO_DMA
- dt-bindings: thermal: Fix definition of cooling-maps contribution property
- powerpc/perf: Fix PMU callbacks to clear pending PMI before resetting an
overflown PMC
- powerpc/32s: Fix shift-out-of-bounds in KASAN init
- clocksource: Reduce clocksource-skew threshold
- clocksource: Avoid accidental unstable marking of clocksources
- ALSA: oss: fix compile error when OSS_DEBUG is enabled
- ALSA: usb-audio: Drop superfluous '0' in Presonus Studio 1810c's ID
- char/mwave: Adjust io port register size
- binder: fix handling of error during copy
- openrisc: Add clone3 ABI wrapper
- iommu/io-pgtable-arm: Fix table descriptor paddr formatting
- scsi: ufs: Fix race conditions related to driver data
- RDMA/qedr: Fix reporting max_{send/recv}_wr attrs
- PCI/MSI: Fix pci_irq_vector()/pci_irq_get_affinity()
- powerpc/powermac: Add additional missing lockdep_register_key()
- RDMA/core: Let ib_find_gid() continue search even after empty entry
- RDMA/cma: Let cma_resolve_ib_dev() continue search even after empty entry
- ASoC: rt5663: Handle device_property_read_u32_array error codes
- of: unittest: fix warning on PowerPC frame size warning
- of: unittest: 64 bit dma address test requires arch support
- clk: stm32: Fix ltdc's clock turn off by clk_disable_unused() after system
enter shell
- mips: add SYS_HAS_CPU_MIPS64_R5 config for MIPS Release 5 support
- mips: fix Kconfig reference to PHYS_ADDR_T_64BIT
- dmaengine: pxa/mmp: stop referencing config->slave_id
- iommu/amd: Remove iommu_init_ga()
- iommu/amd: Restore GA log/tail pointer on host resume
- ASoC: Intel: catpt: Test dmaengine_submit() result before moving on
- iommu/iova: Fix race between FQ timeout and teardown
- scsi: block: pm: Always set request queue runtime active in
blk_post_runtime_resume()
- phy: uniphier-usb3ss: fix unintended writing zeros to PHY register
- ASoC: samsung: idma: Check of ioremap return value
- misc: lattice-ecp3-config: Fix task hung when firmware load failed
- arm64: tegra: Remove non existent Tegra194 reset
- mips: lantiq: add support for clk_set_parent()
- mips: bcm63xx: add support for clk_set_parent()
- powerpc/xive: Add missing null check after calling kmalloc
- ASoC: fsl_mqs: fix MODULE_ALIAS
- RDMA/cxgb4: Set queue pair state when being queried
- ASoC: fsl_asrc: refine the check of available clock divider
- clk: bm1880: remove kfrees on static allocations
- of: base: Fix phandle argument length mismatch error message
- ARM: dts: omap3-n900: Fix lp5523 for multi color
- Bluetooth: Fix debugfs entry leak in hci_register_dev()
- fs: dlm: filter user dlm messages for kernel locks
- drm/lima: fix warning when CONFIG_DEBUG_SG=y & CONFIG_DMA_API_DEBUG=y
- selftests/bpf: Fix bpf_object leak in skb_ctx selftest
- ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply
- drm/bridge: dw-hdmi: handle ELD when DRM_BRIDGE_ATTACH_NO_CONNECTOR
- drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR
- media: atomisp: fix try_fmt logic
- media: atomisp: set per-device's default mode
- media: atomisp-ov2680: Fix ov2680_set_fmt() clobbering the exposure
- ARM: shmobile: rcar-gen2: Add missing of_node_put()
- batman-adv: allow netlink usage in unprivileged containers
- media: atomisp: handle errors at sh_css_create_isp_params()
- ath11k: Fix crash caused by uninitialized TX ring
- usb: gadget: f_fs: Use stream_open() for endpoint files
- drm: panel-orientation-quirks: Add quirk for the Lenovo Yoga Book X91F/L
- HID: apple: Do not reset quirks when the Fn key is not found
- media: b2c2: Add missing check in flexcop_pci_isr:
- EDAC/synopsys: Use the quirk for version instead of ddr version
- ARM: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART
- drm/amd/display: check top_pipe_to_program pointer
- drm/amdgpu/display: set vblank_disable_immediate for DC
- soc: ti: pruss: fix referenced node in error message
- mlxsw: pci: Add shutdown method in PCI driver
- drm/bridge: megachips: Ensure both bridges are probed before registration
- tty: serial: imx: disable UCR4_OREN in .stop_rx() instead of .shutdown()
- gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use
- HSI: core: Fix return freed object in hsi_new_client
- crypto: jitter - consider 32 LSB for APT
- mwifiex: Fix skb_over_panic in mwifiex_usb_recv()
- rsi: Fix use-after-free in rsi_rx_done_handler()
- rsi: Fix out-of-bounds read in rsi_read_pkt()
- ath11k: Avoid NULL ptr access during mgmt tx cleanup
- media: venus: avoid calling core_clk_setrate() concurrently during
concurrent video sessions
- ACPI / x86: Drop PWM2 device on Lenovo Yoga Book from always present table
- ACPI: Change acpi_device_always_present() into acpi_device_override_status()
- ACPI / x86: Allow specifying acpi_device_override_status() quirks by path
- ACPI / x86: Add not-present quirk for the PCI0.SDHB.BRC1 device on the GPD
win
- arm64: dts: ti: j7200-main: Fix 'dtbs_check' serdes_ln_ctrl node
- usb: uhci: add aspeed ast2600 uhci support
- floppy: Add max size check for user space request
- x86/mm: Flush global TLB when switching to trampoline page-table
- drm: rcar-du: Fix CRTC timings when CMM is used
- media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds.
- media: rcar-vin: Update format alignment constraints
- media: saa7146: hexium_orion: Fix a NULL pointer dereference in
hexium_attach()
- media: m920x: don't use stack on USB reads
- thunderbolt: Runtime PM activate both ends of the device link
- iwlwifi: mvm: synchronize with FW after multicast commands
- iwlwifi: mvm: avoid clearing a just saved session protection id
- ath11k: avoid deadlock by change ieee80211_queue_work for regd_update_work
- ath10k: Fix tx hanging
- net-sysfs: update the queue counts in the unregistration path
- net: phy: prefer 1000baseT over 1000baseKX
- gpio: aspeed: Convert aspeed_gpio.lock to raw_spinlock
- selftests/ftrace: make kprobe profile testcase description unique
- ath11k: Avoid false DEADLOCK warning reported by lockdep
- x86/mce: Allow instrumentation during task work queueing
- x86/mce: Mark mce_panic() noinstr
- x86/mce: Mark mce_end() noinstr
- x86/mce: Mark mce_read_aux() noinstr
- net: bonding: debug: avoid printing debug logs when bond is not notifying
peers
- bpf: Do not WARN in bpf_warn_invalid_xdp_action()
- HID: quirks: Allow inverting the absolute X/Y values
- media: igorplugusb: receiver overflow should be reported
- media: saa7146: hexium_gemini: Fix a NULL pointer dereference in
hexium_attach()
- mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO
- audit: ensure userspace is penalized the same as the kernel when under
pressure
- arm64: dts: ls1028a-qds: move rtc node to the correct i2c bus
- arm64: tegra: Adjust length of CCPLEX cluster MMIO region
- PM: runtime: Add safety net to supplier device release
- cpufreq: Fix initialization of min and max frequency QoS requests
- usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0
- ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
- rtw88: 8822c: update rx settings to prevent potential hw deadlock
- PM: AVS: qcom-cpr: Use div64_ul instead of do_div
- iwlwifi: fix leaks/bad data after failed firmware load
- iwlwifi: remove module loading failure message
- iwlwifi: mvm: Fix calculation of frame length
- iwlwifi: pcie: make sure prph_info is set when treating wakeup IRQ
- um: registers: Rename function names to avoid conflicts and build problems
- ath11k: Fix napi related hang
- Bluetooth: vhci: Set HCI_QUIRK_VALID_LE_STATES
- xfrm: rate limit SA mapping change message to user space
- drm/etnaviv: consider completed fence seqno in hang check
- jffs2: GC deadlock reading a page that is used in jffs2_write_begin()
- ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions
- ACPICA: Utilities: Avoid deleting the same object twice in a row
- ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R()
- ACPICA: Fix wrong interpretation of PCC address
- ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5
- drm/amdgpu: fixup bad vram size on gmc v8
- amdgpu/pm: Make sysfs pm attributes as read-only for VFs
- ACPI: battery: Add the ThinkPad "Not Charging" quirk
- btrfs: remove BUG_ON() in find_parent_nodes()
- btrfs: remove BUG_ON(!eie) in find_parent_nodes
- net: mdio: Demote probed message to debug print
- mac80211: allow non-standard VHT MCS-10/11
- dm btree: add a defensive bounds check to insert_at()
- dm space map common: add bounds check to sm_ll_lookup_bitmap()
- mlxsw: pci: Avoid flow control for EMAD packets
- net: phy: marvell: configure RGMII delays for 88E1118
- net: gemini: allow any RGMII interface mode
- regulator: qcom_smd: Align probe function with rpmh-regulator
- serial: pl010: Drop CR register reset on set_termios
- serial: core: Keep mctrl register state and cached copy in sync
- random: do not throw away excess input to crng_fast_load
- parisc: Avoid calling faulthandler_disabled() twice
- x86/kbuild: Enable CONFIG_KALLSYMS_ALL=y in the defconfigs
- powerpc/6xx: add missing of_node_put
- powerpc/powernv: add missing of_node_put
- powerpc/cell: add missing of_node_put
- powerpc/btext: add missing of_node_put
- powerpc/watchdog: Fix missed watchdog reset due to memory ordering race
- i2c: i801: Don't silently correct invalid transfer size
- powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING
- i2c: mpc: Correct I2C reset procedure
- clk: meson: gxbb: Fix the SDM_EN bit for MPLL0 on GXBB
- powerpc/powermac: Add missing lockdep_register_key()
- KVM: PPC: Book3S: Suppress warnings when allocating too big memory slots
- KVM: PPC: Book3S: Suppress failed alloc warning in H_COPY_TOFROM_GUEST
- w1: Misuse of get_user()/put_user() reported by sparse
- nvmem: core: set size for sysfs bin file
- dm: fix alloc_dax error handling in alloc_dev
- scsi: lpfc: Trigger SLI4 firmware dump before doing driver cleanup
- ALSA: seq: Set upper limit of processed events
- MIPS: Loongson64: Use three arguments for slti
- powerpc/40x: Map 32Mbytes of memory at startup
- selftests/powerpc/spectre_v2: Return skip code when miss_percent is high
- powerpc: handle kdump appropriately with crash_kexec_post_notifiers option
- powerpc/fadump: Fix inaccurate CPU state info in vmcore generated with panic
- udf: Fix error handling in udf_new_inode()
- MIPS: OCTEON: add put_device() after of_find_device_by_node()
- irqchip/gic-v4: Disable redistributors' view of the VPE table at boot time
- i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters
- MIPS: Octeon: Fix build errors using clang
- scsi: sr: Don't use GFP_DMA
- ASoC: mediatek: mt8173: fix device_node leak
- ASoC: mediatek: mt8183: fix device_node leak
- phy: mediatek: Fix missing check in mtk_mipi_tx_probe
- rpmsg: core: Clean up resources on announce_create failure.
- crypto: omap-aes - Fix broken pm_runtime_and_get() usage
- crypto: stm32/crc32 - Fix kernel BUG triggered in probe()
- crypto: caam - replace this_cpu_ptr with raw_cpu_ptr
- ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers
- tpm: fix NPE on probe for missing device
- spi: uniphier: Fix a bug that doesn't point to private data correctly
- xen/gntdev: fix unmap notification order
- fuse: Pass correct lend value to filemap_write_and_wait_range()
- serial: Fix incorrect rs485 polarity on uart open
- cputime, cpuacct: Include guest time in user time in cpuacct.stat
- tracing/kprobes: 'nmissed' not showed correctly for kretprobe
- iwlwifi: mvm: Increase the scan timeout guard to 30 seconds
- s390/mm: fix 2KB pgtable release race
- device property: Fix fwnode_graph_devcon_match() fwnode leak
- drm/etnaviv: limit submit sizes
- drm/nouveau/kms/nv04: use vzalloc for nv04_display
- drm/bridge: analogix_dp: Make PSR-exit block less
- parisc: Fix lpa and lpa_user defines
- powerpc/64s/radix: Fix huge vmap false positive
- PCI: xgene: Fix IB window setup
- PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors
- PCI: pci-bridge-emul: Make expansion ROM Base Address register read-only
- PCI: pci-bridge-emul: Properly mark reserved PCIe bits in PCI config space
- PCI: pci-bridge-emul: Fix definitions of reserved bits
- PCI: pci-bridge-emul: Correctly set PCIe capabilities
- PCI: pci-bridge-emul: Set PCI_STATUS_CAP_LIST for PCIe device
- xfrm: fix policy lookup for ipv6 gre packets
- btrfs: fix deadlock between quota enable and other quota operations
- btrfs: check the root node for uptodate before returning it
- btrfs: respect the max size in the header when activating swap file
- ext4: make sure to reset inode lockdep class when quota enabling fails
- ext4: make sure quota gets properly shutdown on error
- ext4: fix a possible ABBA deadlock due to busy PA
- ext4: initialize err_blk before calling __ext4_get_inode_loc
- ext4: fix fast commit may miss tracking range for FALLOC_FL_ZERO_RANGE
- ext4: set csum seed in tmp inode while migrating to extents
- ext4: Fix BUG_ON in ext4_bread when write quota data
- ext4: use ext4_ext_remove_space() for fast commit replay delete range
- ext4: fast commit may miss tracking unwritten range during ftruncate
- ext4: destroy ext4_fc_dentry_cachep kmemcache on module removal
- ext4: fix null-ptr-deref in '__ext4_journal_ensure_credits'
- ext4: don't use the orphan list when migrating an inode
- drm/radeon: fix error handling in radeon_driver_open_kms
- of: base: Improve argument length mismatch error
- firmware: Update Kconfig help text for Google firmware
- can: mcp251xfd: mcp251xfd_tef_obj_read(): fix typo in error message
- media: rcar-csi2: Optimize the selection PHTW register
- media: correct MEDIA_TEST_SUPPORT help text
- Documentation: dmaengine: Correctly describe dmatest with channel unset
- Documentation: ACPI: Fix data node reference documentation
- Documentation: refer to config RANDOMIZE_BASE for kernel address-space
randomization
- Documentation: fix firewire.rst ABI file path error
- Bluetooth: hci_sync: Fix not setting adv set duration
- scsi: core: Show SCMD_LAST in text form
- dmaengine: uniphier-xdmac: Fix type of address variables
- RDMA/hns: Modify the mapping attribute of doorbell to device
- RDMA/rxe: Fix a typo in opcode name
- dmaengine: stm32-mdma: fix STM32_MDMA_CTBR_TSEL_MASK
- Revert "net/mlx5: Add retry mechanism to the command entry index allocation"
- powerpc/cell: Fix clang -Wimplicit-fallthrough warning
- powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses
- block: Fix fsync always failed if once failed
- bpftool: Remove inclusion of utilities.mak from Makefiles
- xdp: check prog type before updating BPF link
- perf evsel: Override attr->sample_period for non-libpfm4 events
- ipv4: update fib_info_cnt under spinlock protection
- ipv4: avoid quadratic behavior in netns dismantle
- net/fsl: xgmac_mdio: Add workaround for erratum A-009885
- net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module
- parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries
- f2fs: compress: fix potential deadlock of compress file
- f2fs: fix to reserve space for IO align feature
- af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress
- clk: Emit a stern warning with writable debugfs enabled
- clk: si5341: Fix clock HW provider cleanup
- net/smc: Fix hung_task when removing SMC-R devices
- net: axienet: increase reset timeout
- net: axienet: Wait for PhyRstCmplt after core reset
- net: axienet: reset core on initialization prior to MDIO access
- net: axienet: add missing memory barriers
- net: axienet: limit minimum TX ring size
- net: axienet: Fix TX ring slot available check
- net: axienet: fix number of TX ring slots for available check
- net: axienet: fix for TX busy handling
- net: axienet: increase default TX ring size to 128
- HID: vivaldi: fix handling devices not using numbered reports
- rtc: pxa: fix null pointer dereference
- vdpa/mlx5: Fix wrong configuration of virtio_version_1_0
- virtio_ring: mark ring unused on error
- taskstats: Cleanup the use of task->exit_code
- inet: frags: annotate races around fqdir->dead and fqdir->high_thresh
- netns: add schedule point in ops_exit_list()
- xfrm: Don't accidentally set RTO_ONLINK in decode_session4()
- gre: Don't accidentally set RTO_ONLINK in gre_fill_metadata_dst()
- libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route()
- perf script: Fix hex dump character output
- dmaengine: at_xdmac: Don't start transactions at tx_submit level
- dmaengine: at_xdmac: Start transfer for cyclic channels in issue_pending
- dmaengine: at_xdmac: Print debug message after realeasing the lock
- dmaengine: at_xdmac: Fix concurrency over xfers_list
- dmaengine: at_xdmac: Fix lld view setting
- dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
- perf probe: Fix ppc64 'perf probe add events failed' case
- devlink: Remove misleading internal_flags from health reporter dump
- arm64: dts: qcom: msm8996: drop not documented adreno properties
- net: bonding: fix bond_xmit_broadcast return value error bug
- net_sched: restore "mpu xxx" handling
- bcmgenet: add WOL IRQ check
- net: ethernet: mtk_eth_soc: fix error checking in mtk_mac_config()
- net: sfp: fix high power modules without diagnostic monitoring
- net: mscc: ocelot: fix using match before it is set
- dt-bindings: display: meson-dw-hdmi: add missing sound-name-prefix property
- dt-bindings: display: meson-vpu: Add missing amlogic,canvas property
- dt-bindings: watchdog: Require samsung,syscon-phandle for Exynos7
- scripts/dtc: dtx_diff: remove broken example from help text
- lib82596: Fix IRQ check in sni_82596_probe
- mm/hmm.c: allow VM_MIXEDMAP to work with hmm_range_fault
- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test
- mtd: nand: bbt: Fix corner case in bad block table handling
- ath10k: Fix the MTU size on QCA9377 SDIO
- scripts: sphinx-pre-install: add required ctex dependency
- scripts: sphinx-pre-install: Fix ctex support on Debian
- KVM: x86/mmu: Fix write-protection of PTs mapped by the TDP MMU
- HID: Ignore battery for Elan touchscreen on HP Envy X360 15t-dr100
- f2fs: fix to do sanity check on inode type during garbage collection
- mtd: rawnand: Export nand_read_page_hwecc_oob_first()
- mtd: rawnand: ingenic: JZ4740 needs 'oob_first' read page function
- riscv: Get rid of MAXPHYSMEM configs
- RISC-V: Use common riscv_cpuid_to_hartid_mask() for both SMP=y and SMP=n
- riscv: try to allocate crashkern region from 32bit addressible memory
- riscv: Don't use va_pa_offset on kdump
- riscv: use hart id instead of cpu id on machine_kexec
- crypto: x86/aesni - don't require alignment of data
- net: phy: marvell: add Marvell specific PHY loopback
- media: cec: fix a deadlock situation
- media: ov8865: Disable only enabled regulators on error path
- mei: hbm: fix client dma reply status
- iio: trigger: Fix a scheduling whilst atomic issue seen on tsc2046
- bus: mhi: pci_generic: Graceful shutdown on freeze
- bus: mhi: core: Fix reading wake_capable channel configuration
- arm64: errata: Fix exec handling in erratum 1418040 workaround
- drm/tegra: Add back arm_iommu_detach_device()
- virtio/virtio_mem: handle a possible NULL as a memcpy parameter
- Bluetooth: virtio_bt: fix memory leak in virtbt_rx_handle()
- drm/vc4: crtc: Make sure the HDMI controller is powered when disabling
- libbpf: Free up resources used by inner map definition
- bpftool: Fix memory leak in prog_dump()
- arm64: dts: qcom: sc7280: Fix incorrect clock name
- libbpf: Fix glob_syms memory leak in bpf_linker
- libbpf: Fix using invalidated memory in bpf_linker
- bfq: Do not let waker requests skip proper accounting
- media: i2c: imx274: fix s_frame_interval runtime resume not requested
- media: i2c: Re-order runtime pm initialisation
- media: i2c: ov8865: Fix lockdep error
- net: stmmac: Add platform level debug register dump feature
- drm/vmwgfx: Remove the deprecated lower mem limit
- crypto: caam - save caam memory to support crypto engine retry mechanism.
- arm64: dts: ti: k3-am642: Fix the L2 cache sets
- bpf: Fix the test_task_vma selftest to support output shorter than 1 kB
- Bluetooth: refactor set_exp_feature with a feature table
- Bluetooth: MGMT: Use hci_dev_test_and_{set,clear}_flag
- drm/amd/display: Fix bug in debugfs crc_win_update entry
- wcn36xx: Fix max channels retrieval
- perf/arm-cmn: Fix CPU hotplug unregistration
- net: dsa: hellcreek: Fix insertion of static FDB entries
- net: dsa: hellcreek: Add STP forwarding rule
- net: dsa: hellcreek: Allow PTP P2P measurements on blocked ports
- net: dsa: hellcreek: Add missing PTP via UDP rules
- mt76: mt7921: drop offload_flags overwritten
- iwlwifi: mvm: perform 6GHz passive scan after suspend
- iwlwifi: mvm: set protected flag only for NDP ranging
- crypto: octeontx2 - prevent underflow in get_cores_bmap()
- regulator: qcom-labibb: OCP interrupts are not a failure while disabled
- io_uring: remove double poll on poll update
- serial: 8250_bcm7271: Propagate error codes from brcmuart_probe()
- net: ethernet: mtk_eth_soc: fix return values and refactor MDIO ops
- net: dsa: fix incorrect function pointer check for MRP ring roles
- net/smc: Reset conn->lgr when link group registration fails
- usb: dwc2: do not gate off the hardware if it does not support clock gating
- serial: liteuart: fix MODULE_ALIAS
- serial: stm32: move tx dma terminate DMA to shutdown
- x86, sched: Fix undefined reference to init_freq_invariance_cppc() build
error
- net/mlx5e: Fix wrong usage of fib_info_nh when routes with nexthop objects
are used
- Revert "net/mlx5e: Block offload of outer header csum for GRE tunnel"
- net/mlx5e: Fix matching on modified inner ip_ecn bits
- net/mlx5: Fix access to sf_dev_table on allocation failure
- net/mlx5e: Sync VXLAN udp ports during uplink representor profile change
- net: mscc: ocelot: fix incorrect balancing with down LAG ports
- net/sched: flow_dissector: Fix matching on zone id for invalid conns
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc
- bnxt_en: Refactor coredump functions
- RDMA/rtrs-clt: Fix the initial value of min_latency
- ALSA: hda: Make proper use of timecounter
- binder: avoid potential data leakage when copying txn
- scsi: core: Fix scsi_device_max_queue_depth()
- iommu/amd: X2apic mode: re-enable after resume
- iommu/amd: X2apic mode: setup the INTX registers on mask/unmask
- iommu/amd: X2apic mode: mask/unmask interrupts on suspend/resume
- iommu/amd: Remove useless irq affinity notifier
- phy: cadence: Sierra: Fix to get correct parent for mux clocks
- ALSA: hda/cs8409: Increase delay during jack detection
- ALSA: hda/cs8409: Fix Jack detection after resume
- clk: qcom: gcc-sc7280: Mark gcc_cfg_noc_lpass_clk always enabled
- of/fdt: Don't worry about non-memory region overlap for no-map
- drm/panel: Delete panel on mipi_dsi_attach() failure
- selftests/bpf: Fix memory leaks in btf_type_c_dump() helper
- media: atomisp: check before deference asd variable
- usb: dwc3: meson-g12a: fix shared reset control use
- psi: Fix PSI_MEM_FULL state when tasks are in memstall and doing reclaim
- HID: magicmouse: Report battery level over USB
- libbpf: Accommodate DWARF/compiler bug with duplicated structs
- ethernet: renesas: Use div64_ul instead of do_div
- arm64: dts: qcom: sm8350: Shorten camera-thermal-bottom name
- drm/amd/display: add else to avoid double destroy clk_mgr
- regulator: da9121: Prevent current limit change when enabled
- drm/vmwgfx: Release ttm memory if probe fails
- arm64: dts: ti: j721e-main: Fix 'dtbs_check' in serdes_ln_ctrl node
- media: atomisp: fix "variable dereferenced before check 'asd'"
- arm64: dts: renesas: Fix thermal bindings
- ARM: dts: qcom: sdx55: fix IPA interconnect definitions
- media: rockchip: rkisp1: use device name for debugfs subdir name
- mmc: tmio: reinit card irqs in reset routine
- drm/amd/amdgpu: fix psp tmr bo pin count leak in SRIOV
- drm/amd/amdgpu: fix gmc bo pin count leak in SRIOV
- crypto: ccp - Move SEV_INIT retry for corrupted data
- mt76: mt7615: fix possible deadlock while mt7615_register_ext_phy()
- mt76: mt7615: improve wmm index allocation
- ath9k_htc: fix NULL pointer dereference at ath9k_htc_rxep()
- ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet()
- iwlwifi: mvm: fix AUX ROC removal
- mmc: sdhci-pci-gli: GL9755: Support for CD/WP inversion on OF platforms
- mmc: mtk-sd: Use readl_poll_timeout instead of open-coded polling
- ACPI: CPPC: Check present CPUs for determining _CPC is valid
- bpf/selftests: Fix namespace mount setup in tc_redirect
- serial: pl011: Drop CR register reset on set_termios
- net/mlx5: Update log_max_qp value to FW max capability
- ASoC: imx-hdmi: add put_device() after of_find_device_by_node()
- interconnect: qcom: rpm: Prevent integer overflow in rate
- scsi: ufs: Fix a kernel crash during shutdown
- scsi: lpfc: Fix leaked lpfc_dmabuf mbox allocations with NPIV
- selftests/powerpc: Add a test of sigreturning to the kernel
- scsi: mpi3mr: Fixes around reply request queues
- ASoC: mediatek: mt8192-mt6359: fix device_node leak
- seg6: export get_srh() for ICMP handling
- icmp: ICMPV6: Examine invoking packet for Segment Route Headers.
- udp6: Use Segment Routing Header for dest address if present
- ifcvf/vDPA: fix misuse virtio-net device config size for blk dev
- tpm: fix potential NULL pointer access in tpm_del_char_device
- mfd: tps65910: Set PWR_OFF bit during driver probe
- sched/cpuacct: Fix user/system in shown cpuacct.usage*
- tracing: Have syscall trace events use trace_event_buffer_lock_reserve()
- remoteproc: imx_rproc: Fix a resource leak in the remove function
- drm/amd/display: Fix the uninitialized variable in enable_stream_features()
- scsi: lpfc: Fix lpfc_force_rscn ndlp kref imbalance
- drm/amdgpu: don't do resets on APUs which don't support it
- ath11k: qmi: avoid error messages when dma allocation fails
- scsi: ufs: ufs-mediatek: Fix error checking in ufs_mtk_init_va09_pwr_ctrl()
- RDMA/cma: Remove open coding of overflow checking for private_data_len
- dmaengine: idxd: fix wq settings post wq disable
- drm/vc4: crtc: Drop feed_txp from state
- drm/vc4: Fix non-blocking commit getting stuck forever
- drm/vc4: crtc: Copy assigned channel to the CRTC
- bpf: Mark PTR_TO_FUNC register initially with zero offset
- mlx5: Don't accidentally set RTO_ONLINK before mlx5e_route_lookup_ipv4_get()
- riscv: dts: microchip: mpfs: Drop empty chosen node
- drm/vmwgfx: Remove unused compile options
- f2fs: fix remove page failed in invalidate compress pages
- f2fs: fix to avoid panic in is_alive() if metadata is inconsistent
- crypto: octeontx2 - uninitialized variable in kvf_limits_store()
- gpio: mpc8xxx: Fix IRQ check in mpc8xxx_probe
- bitops: protect find_first_{,zero}_bit properly
- net: ipa: fix atomic update in ipa_endpoint_replenish()
- net: cpsw: avoid alignment faults by taking NET_IP_ALIGN into account
- net: phy: micrel: use kszphy_suspend()/kszphy_resume for irq aware devices
- sch_api: Don't skip qdisc attach on ingress
* Packaging resync (LP: #1786013)
- [Packaging] resync dkms-build{,--nvidia-N} from LRMv5
-- Joseph Salisbury <email address hidden> Thu, 14 Apr 2022 12:03:33 -0400
Available diffs
| Superseded in focal-security |
| Superseded in focal-updates |
| Deleted in focal-proposed (Reason: moved to -updates) |
linux-gcp-5.13 (5.13.0-1023.28~20.04.1) focal; urgency=medium
* focal/linux-gcp-5.13: 5.13.0-1023.28~20.04.1 -proposed tracker
(LP: #1966227)
[ Ubuntu: 5.13.0-1023.28 ]
* impish/linux-gcp: 5.13.0-1023.28 -proposed tracker (LP: #1966228)
* impish/linux: 5.13.0-39.44 -proposed tracker (LP: #1966236)
* CVE-2022-27666
- sock: remove one redundant SKB_FRAG_PAGE_ORDER macro
- esp: Fix possible buffer overflow in ESP transformation
* CVE-2022-1055
- net: sched: fix use-after-free in tc_new_tfilter()
-- Khalid Elmously <email address hidden> Tue, 29 Mar 2022 22:53:29 -0400
Available diffs
| Superseded in focal-security |
| Superseded in focal-updates |
| Deleted in focal-proposed (Reason: moved to -updates) |
linux-gcp-5.13 (5.13.0-1021.25~20.04.1) focal; urgency=medium
* focal/linux-gcp-5.13: 5.13.0-1021.25~20.04.1 -proposed tracker
(LP: #1964949)
[ Ubuntu: 5.13.0-1021.25 ]
* impish/linux-gcp: 5.13.0-1021.25 -proposed tracker (LP: #1964951)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/2022.02.21)
* impish/linux: 5.13.0-37.42 -proposed tracker (LP: #1964959)
* CVE-2022-0742
- ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report()
[ Ubuntu: 5.13.0-1020.24 ]
* impish/linux-gcp: 5.13.0-1020.24 -proposed tracker (LP: #1964162)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/2022.01.31)
* Update gvnic driver code (LP: #1953575)
- gve: Move some static functions to a common file
- gve: gve_rx_copy: Move padding to an argument
- gve: Make gve_rx_slot_page_info.page_offset an absolute offset
- gve: Introduce a new model for device options
- gve: Introduce per netdev `enum gve_queue_format`
- gve: adminq: DQO specific device descriptor logic
- gve: Add support for DQO RX PTYPE map
- gve: Add dqo descriptors
- gve: Add DQO fields for core data structures
- gve: Update adminq commands to support DQO queues
- gve: DQO: Add core netdev features
- gve: DQO: Add ring allocation and initialization
- gve: DQO: Configure interrupts on device up
- gve: DQO: Add TX path
- gve: DQO: Add RX path
- gve: Fix warnings reported for DQO patchset
- gve: DQO: Fix off by one in gve_rx_dqo()
- gve: Propagate error codes to caller
- gve: Simplify code and axe the use of a deprecated API
- gve: DQO: Remove incorrect prefetch
- gve: DQO: avoid unused variable warnings
- gve: Switch to use napi_complete_done
- gve: Add rx buffer pagecnt bias
- gve: Do lazy cleanup in TX path
- gve: Add netif_set_xps_queue call
- gve: Allow pageflips on larger pages
- gve: Add RX context.
- gve: Implement packet continuation for RX.
- gve: Add a jumbo-frame device option.
- gve: fix unmatched u64_stats_update_end()
- gve: fix for null pointer dereference.
- gve: Correct order of processing device options
- gve: Add optional metadata descriptor type GVE_TXD_MTD
- gve: Move the irq db indexes out of the ntfy block struct
- gve: Update gve_free_queue_page_list signature
- gve: remove memory barrier around seqno
- gve: Implement suspend/resume/shutdown
- gve: Add consumed counts to ethtool stats
- gve: Add tx|rx-coalesce-usec for DQO
- gve: Use kvcalloc() instead of kvzalloc()
* Packaging resync (LP: #1786013)
- [Packaging] resync getabis
- debian/dkms-versions -- update from kernel-versions (main/2022.02.21)
* Broken network on some AWS instances with focal/impish kernels
(LP: #1961968)
- SAUCE: Revert "PCI/MSI: Mask MSI-X vectors only on success"
* [SRU]PCI: vmd: Do not disable MSI-X remapping if interrupt remapping is
enabled by IOMMU (LP: #1937295)
- PCI: vmd: Do not disable MSI-X remapping if interrupt remapping is enabled
by IOMMU
* [UBUNTU 20.04] kernel: Add support for CPU-MF counter second version 7
(LP: #1960182)
- s390/cpumf: Support for CPU Measurement Facility CSVN 7
- s390/cpumf: Support for CPU Measurement Sampling Facility LS bit
* [UBUNTU 21.10] s390/cio: verify the driver availability for path_event call
(LP: #1960875)
- s390/cio: verify the driver availability for path_event call
* Impish update: upstream stable patchset 2022-02-14 (LP: #1960861)
- devtmpfs regression fix: reconfigure on each mount
- orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc()
- remoteproc: qcom: pil_info: Don't memcpy_toio more than is provided
- perf: Protect perf_guest_cbs with RCU
- KVM: x86: Register Processor Trace interrupt hook iff PT enabled in guest
- KVM: s390: Clarify SIGP orders versus STOP/RESTART
- 9p: only copy valid iattrs in 9P2000.L setattr implementation
- video: vga16fb: Only probe for EGA and VGA 16 color graphic cards
- media: uvcvideo: fix division by zero at stream start
- rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with
interrupts enabled
- firmware: qemu_fw_cfg: fix sysfs information leak
- firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries
- firmware: qemu_fw_cfg: fix kobject leak in probe error path
- KVM: x86: remove PMU FIXED_CTR3 from msrs_to_save_all
- ALSA: hda/realtek: Add speaker fixup for some Yoga 15ITL5 devices
- ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after
reboot from Windows
- ALSA: hda: ALC287: Add Lenovo IdeaPad Slim 9i 14ITL5 speaker quirk
- ALSA: hda/realtek: Add quirk for Legion Y9000X 2020
- ALSA: hda/realtek: Re-order quirk entries for Lenovo
- powerpc/pseries: Get entry and uaccess flush required bits from
H_GET_CPU_CHARACTERISTICS
- mtd: fixup CFI on ixp4xx
- KVM: x86: don't print when fail to read/write pv eoi memory
- remoteproc: qcom: pas: Add missing power-domain "mxc" for CDSP
- perf annotate: Avoid TUI crash when navigating in the annotation of
recursive functions
- ALSA: hda/realtek: Use ALC285_FIXUP_HP_GPIO_LED on another HP laptop
- ALSA: hda/tegra: Fix Tegra194 HDA reset failure
* CVE-2022-0516
- KVM: s390: Return error on SIDA memop on normal guest
* CVE-2022-0435
- tipc: improve size validations for received domain records
* CVE-2022-0492
- cgroup-v1: Require capabilities to set release_agent
* jammy 5.15 kernel soft lockup when zfs.ko is loaded on s390x w/ gcc >=
11.2.0-10ubuntu1 / gcc-11 PLT regression on s390x (LP: #1954676)
- s390/module: fix loading modules with a lot of relocations
* Impish update: upstream stable patchset 2022-02-09 (LP: #1960452)
- workqueue: Fix unbind_workers() VS wq_worker_running() race
- Bluetooth: btusb: fix memory leak in btusb_mtk_submit_wmt_recv_urb()
- Bluetooth: btusb: Add two more Bluetooth parts for WCN6855
- Bluetooth: btusb: Add support for Foxconn QCA 0xe0d0
- Bluetooth: bfusb: fix division by zero in send path
- ARM: dts: exynos: Fix BCM4330 Bluetooth reset polarity in I9100
- USB: core: Fix bug in resuming hub's handling of wakeup requests
- USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status
- ath11k: Fix buffer overflow when scanning with extraie
- mmc: sdhci-pci: Add PCI ID for Intel ADL
- mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe()
- can: gs_usb: fix use of uninitialized variable, detach device on reception
of invalid USB data
- can: isotp: convert struct tpcon::{idx,len} to unsigned int
- can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved}
- random: fix data race on crng_node_pool
- random: fix data race on crng init time
- random: fix crash on multiple early calls to add_bootloader_randomness()
- media: Revert "media: uvcvideo: Set unique vdev name based in type"
- staging: wlan-ng: Avoid bitwise vs logical OR warning in
hfa384x_usb_throttlefn()
- drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk()
- staging: greybus: fix stack size warning with UBSAN
- s390/kexec: handle R_390_PLT32DBL rela in arch_kexec_apply_relocations_add()
- Bluetooth: btusb: Add the new support ID for Realtek RTL8852A
- Bluetooth: btusb: Add support for IMC Networks Mediatek Chip(MT7921)
- Bbluetooth: btusb: Add another Bluetooth part for Realtek 8852AE
- Bluetooth: btusb: Enable MSFT extension for Mediatek Chip (MT7921)
- Bluetooth: btusb: enable Mediatek to support AOSP extension
- Bluetooth: btusb: Add one more Bluetooth part for the Realtek RTL8852AE
- Bluetooth: btusb: Add the new support IDs for WCN6855
- fget: clarify and improve __fget_files() implementation
- Bluetooth: btusb: Add one more Bluetooth part for WCN6855
- Bluetooth: add quirk disabling LE Read Transmit Power
- Bluetooth: btbcm: disable read tx power for some Macs with the T2 Security
chip
- Bluetooth: btbcm: disable read tx power for MacBook Air 8,1 and 8,2
* Impish update: upstream stable patchset 2022-01-31 (LP: #1959627)
- selftests: x86: fix [-Wstringop-overread] warn in test_process_vm_readv()
- tracing: Fix check for trace_percpu_buffer validity in get_trace_buf()
- tracing: Tag trace_percpu_buffer as a percpu pointer
- ieee802154: atusb: fix uninit value in atusb_set_extended_addr
- i40e: Fix to not show opcode msg on unsuccessful VF MAC change
- iavf: Fix limit of total number of queues to active queues of VF
- RDMA/core: Don't infoleak GRH fields
- netrom: fix copying in user data in nr_setsockopt
- RDMA/uverbs: Check for null return of kmalloc_array
- mac80211: initialize variable have_higher_than_11mbit
- sfc: The RX page_ring is optional
- i40e: fix use-after-free in i40e_sync_filters_subtask()
- i40e: Fix for displaying message regarding NVM version
- i40e: Fix incorrect netdev's real number of RX/TX queues
- ftrace/samples: Add missing prototypes direct functions
- ipv4: Check attribute length for RTA_GATEWAY in multipath route
- ipv4: Check attribute length for RTA_FLOW in multipath route
- ipv6: Check attribute length for RTA_GATEWAY in multipath route
- ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route
- lwtunnel: Validate RTA_ENCAP_TYPE attribute length
- batman-adv: mcast: don't send link-local multicast to mcast routers
- sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc
- net: ena: Fix undefined state when tx request id is out of bounds
- net: ena: Fix error handling when calculating max IO queues number
- power: supply: core: Break capacity loop
- power: reset: ltc2952: Fix use of floating point literals
- rndis_host: support Hytera digital radios
- phonet: refcount leak in pep_sock_accep
- power: bq25890: Enable continuous conversion for ADC at charging
- ipv6: Continue processing multipath route even if gateway attribute is
invalid
- ipv6: Do cleanup if attribute validation fails in multipath route
- usb: mtu3: fix interval value for intr and isoc
- scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown()
- ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate
- net: udp: fix alignment problem in udp4_seq_show()
- atlantic: Fix buff_ring OOB in aq_ring_rx_clean
- mISDN: change function names to avoid conflicts
- drm/amd/display: Added power down for DCN10
- ipv6: raw: check passed optlen before reading
- ARM: dts: gpio-ranges property is now required
- Input: zinitix - make sure the IRQ is allocated before it gets enabled
- fscache_cookie_enabled: check cookie is valid before accessing it
- Revert "net: usb: r8152: Add MAC passthrough support for more Lenovo Docks"
- mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh
- selftests: net: udpgro_fwd.sh: explicitly checking the available ping
feature
- sctp: hold endpoint before calling cb in sctp_transport_lookup_process
- net: ena: Fix wrong rx request id by resetting device
- md/raid1: fix missing bitmap update w/o WriteMostly devices
- cgroup: Use open-time credentials for process migraton perm checks
- cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv
- cgroup: Use open-time cgroup namespace for process migration perm checks
- i2c: mpc: Avoid out of bounds memory access
- net ticp:fix a kernel-infoleak in __tipc_sendmsg()
- fbdev: fbmem: add a helper to determine if an aperture is used by a fw fb
- drm/amdgpu: disable runpm if we are the primary adapter
- auxdisplay: charlcd: checking for pointer reference before dereferencing
- drm/amd/pm: Fix xgmi link control on aldebaran
- drm/amd/pm: skip setting gfx cgpg in the s0ix suspend-resume
- drm/amdgpu: always reset the asic in suspend (v2)
- drm/amdgpu: put SMU into proper state on runpm suspending for BOCO capable
platform
- userfaultfd/selftests: fix hugetlb area allocations
* Impish update: upstream stable patchset 2022-01-26 (LP: #1959134)
- Input: i8042 - add deferred probe support
- Input: i8042 - enable deferred probe quirk for ASUS UM325UA
- tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok().
- tomoyo: use hwight16() in tomoyo_domain_quota_is_ok()
- parisc: Clear stale IIR value on instruction access rights trap
- platform/x86: apple-gmux: use resource_size() with res
- memblock: fix memblock_phys_alloc() section mismatch error
- recordmcount.pl: fix typo in s390 mcount regex
- selinux: initialize proto variable in selinux_ip_postroute_compat()
- scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write()
- net/mlx5: DR, Fix NULL vs IS_ERR checking in dr_domain_init_resources
- net/mlx5e: Wrap the tx reporter dump callback to extract the sq
- net/mlx5e: Fix interoperability between XSK and ICOSQ recovery flow
- net/mlx5e: Fix ICOSQ recovery flow for XSK
- udp: using datalen to cap ipv6 udp max gso segments
- selftests: Calculate udpgso segment count without header adjustment
- sctp: use call_rcu to free endpoint
- net/smc: fix using of uninitialized completions
- net: usb: pegasus: Do not drop long Ethernet frames
- net: ag71xx: Fix a potential double free in error handling paths
- net: lantiq_xrx200: fix statistics of received bytes
- NFC: st21nfca: Fix memory leak in device probe and remove
- net/smc: don't send CDC/LLC message if link not ready
- net/smc: fix kernel panic caused by race of smc_sock
- igc: Fix TX timestamp support for non-MSI-X platforms
- ionic: Initialize the 'lif->dbid_inuse' bitmap
- net/mlx5e: Fix wrong features assignment in case of error
- selftests/net: udpgso_bench_tx: fix dst ip argument
- net/ncsi: check for error return from call to nla_put_u32
- fsl/fman: Fix missing put_device() call in fman_port_probe
- i2c: validate user data in compat ioctl
- nfc: uapi: use kernel size_t to fix user-space builds
- uapi: fix linux/nfc.h userspace compilation errors
- drm/amdgpu: When the VCN(1.0) block is suspended, powergating is explicitly
enabled
- drm/amdgpu: add support for IP discovery gc_info table v2
- xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set.
- usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
- usb: mtu3: add memory barrier before set GPD's HWO
- usb: mtu3: fix list_head check warning
- usb: mtu3: set interval of FS intr and isoc endpoint
- binder: fix async_free_space accounting for empty parcels
- scsi: vmw_pvscsi: Set residual data length conditionally
- Input: appletouch - initialize work before device registration
- Input: spaceball - fix parsing of movement data packets
- net: fix use-after-free in tw_timer_handler
- perf script: Fix CPU filtering of a script's switch events
- net/sched: Extend qdisc control block with tc control block
- platform/mellanox: mlxbf-pmc: Fix an IS_ERR() vs NULL bug in
mlxbf_pmc_map_counters
- net/mlx5: Fix SF health recovery flow
- net/mlx5: Fix tc max supported prio for nic mode
- selftests: net: Fix a typo in udpgro_fwd.sh
- selftests: net: using ping6 for IPv6 in udpgro_fwd.sh
- fs/mount_setattr: always cleanup mount_kattr
* Impish update: upstream stable patchset 2022-01-21 (LP: #1958672)
- arm64: vdso32: require CROSS_COMPILE_COMPAT for gcc+bfd
- net: usb: lan78xx: add Allied Telesis AT29M2-AF
- ext4: prevent partial update of the extent blocks
- ext4: check for out-of-order index extents in ext4_valid_extent_entries()
- ext4: check for inconsistent extents between index and leaf block
- HID: holtek: fix mouse probing
- HID: potential dereference of null pointer
- arm64: dts: allwinner: orangepi-zero-plus: fix PHY mode
- spi: change clk_disable_unprepare to clk_unprepare
- ASoC: meson: aiu: fifo: Add missing dma_coerce_mask_and_coherent()
- IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
- RDMA/hns: Replace kfree() with kvfree()
- netfilter: fix regression in looped (broad|multi)cast's MAC handling
- ARM: dts: imx6qdl-wandboard: Fix Ethernet support
- net: marvell: prestera: fix incorrect return of port_find
- qlcnic: potential dereference null pointer of rx_queue->page_ring
- net: accept UFOv6 packages in virtio_net_hdr_to_skb
- net: skip virtio_net_hdr_set_proto if protocol already set
- igb: fix deadlock caused by taking RTNL in RPM resume path
- ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module
- bonding: fix ad_actor_system option setting to default
- fjes: Check for error irq
- drivers: net: smc911x: Check for error irq
- net: ks8851: Check for error irq
- sfc: Check null pointer of rx_queue->page_ring
- sfc: falcon: Check null pointer of rx_queue->page_ring
- pinctrl: bcm2835: Change init order for gpio hogs
- hwmon: (lm90) Fix usage of CONFIG2 register in detect function
- hwmon: (lm90) Add basic support for TI TMP461
- hwmon: (lm90) Introduce flag indicating extended temperature support
- hwmon: (lm90) Drop critical attribute support for MAX6654
- ALSA: jack: Check the return value of kstrdup()
- ALSA: drivers: opl3: Fix incorrect use of vp->state
- ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6
- ALSA: hda/realtek: Add new alc285-hp-amp-init model
- ALSA: hda/realtek: Fix quirk for Clevo NJ51CU
- ASoC: meson: aiu: Move AIU_I2S_MISC hold setting to aiu-fifo-i2s
- Input: atmel_mxt_ts - fix double free in mxt_read_info_block
- ipmi: bail out if init_srcu_struct fails
- ipmi: ssif: initialize ssif_info->client early
- ipmi: fix initialization when workqueue allocation fails
- parisc: Correct completer in lws start
- parisc: Fix mask used to select futex spinlock
- tee: handle lookup of shm with reference count 0
- x86/pkey: Fix undefined behaviour with PKRU_WD_BIT
- platform/x86: intel_pmc_core: fix memleak on registration failure
- KVM: VMX: Wake vCPU when delivering posted IRQ even if vCPU == this vCPU
- pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines
- gpio: dln2: Fix interrupts when replugging the device
- mmc: sdhci-tegra: Fix switch to HS400ES mode
- mmc: meson-mx-sdhc: Set MANUAL_STOP for multi-block SDIO commands
- mmc: core: Disable card detect during shutdown
- mmc: mmci: stm32: clear DLYB_CR after sending tuning command
- ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling
- mac80211: fix locking in ieee80211_start_ap error path
- mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page()
- tee: optee: Fix incorrect page free bug
- f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()
- usb: gadget: u_ether: fix race in setting MAC address in setup phase
- KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state
- mm: mempolicy: fix THP allocations escaping mempolicy restrictions
- Input: elants_i2c - do not check Remark ID on eKTH3900/eKTH5312
- Input: goodix - add id->model mapping for the "9111" model
- ASoC: tas2770: Fix setting of high sample rates
- ASoC: rt5682: fix the wrong jack type detected
- pinctrl: mediatek: fix global-out-of-bounds issue
- hwmom: (lm90) Fix citical alarm status for MAX6680/MAX6681
- hwmon: (lm90) Do not report 'busy' status bit as alarm
- ax25: NPD bug when detaching AX25 device
- hamradio: defer ax25 kfree after unregister_netdev
- hamradio: improve the incomplete fix to avoid NPD
- phonet/pep: refuse to enable an unbound pipe
- selftests: KVM: Fix non-x86 compiling
- NFSD: Fix READDIR buffer overflow
- PM: sleep: Fix error handling in dpm_prepare()
- bus: sunxi-rsb: Fix shutdown
- netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()
- ice: Use xdp_buf instead of rx_buf for xsk zero-copy
- ice: xsk: return xsk buffers back to pool when cleaning the ring
- tcp: move inet->rx_dst_ifindex to sk->sk_rx_dst_ifindex
- ipv6: move inet6_sk(sk)->rx_dst_cookie to sk->sk_rx_dst_cookie
- inet: fully convert sk->sk_rx_dst to RCU rules
- io_uring: zero iocb->ki_pos for stream file types
- veth: ensure skb entering GRO are not cloned.
- net: bridge: Use array_size() helper in copy_to_user()
- r8152: fix the force speed doesn't work for RTL8156
- net: stmmac: dwmac-visconti: Fix value of ETHER_CLK_SEL_FREQ_SEL_2P5M
- ARM: 9160/1: NOMMU: Reload __secondary_data after PROCINFO_INITFUNC
- uapi: Fix undefined __always_inline on non-glibc systems
- Revert "x86/boot: Pull up cmdline preparation and early param parsing"
- x86/boot: Move EFI range reservation after cmdline parsing
- ALSA: hda/hdmi: Disable silent stream on GLK
- platform/x86: amd-pmc: only use callbacks for suspend
- KVM: x86: Always set kvm_run->if_flag
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: nVMX: Synthesize TRIPLE_FAULT for L2 if emulation is required
- mm, hwpoison: fix condition in free hugetlb page path
- netfs: fix parameter of cleanup()
- arm64: dts: lx2160a: fix scl-gpios property name
- kfence: fix memory leak when cat kfence objects
- Input: iqs626a - prohibit inlining of channel parsing functions
- ASoC: SOF: Intel: pci-tgl: add ADL-M support
- ASoC: SOF: Intel: pci-tgl: add new ADL-P variant
- ASoC: SOF: Intel: pci-tgl: add ADL-N support
- r8152: sync ocp base
- tun: avoid double free in tun_free_netdev
* Impish update: upstream stable patchset 2022-01-18 (LP: #1958287)
- netfilter: selftest: conntrack_vrf.sh: fix file permission
- nfc: fix segfault in nfc_genl_dump_devices_done
- drm/msm/dsi: set default num_data_lanes
- KVM: arm64: Save PSTATE early on exit
- s390/test_unwind: use raw opcode instead of invalid instruction
- Revert "tty: serial: fsl_lpuart: drop earlycon entry for i.MX8QXP"
- net/mlx4_en: Update reported link modes for 1/10G
- ALSA: hda: Add Intel DG2 PCI ID and HDMI codec vid
- ALSA: hda/hdmi: fix HDA codec entry table order for ADL-P
- parisc/agp: Annotate parisc agp init functions with __init
- i2c: rk3x: Handle a spurious start completion interrupt flag
- net: netlink: af_netlink: Prevent empty skb by adding a check on len.
- drm/amd/display: Fix for the no Audio bug with Tiled Displays
- drm/amd/display: add connector type check for CRC source set
- tracing: Fix a kmemleak false positive in tracing_map
- staging: most: dim2: use device release method
- fuse: make sure reclaim doesn't write the inode
- hwmon: (dell-smm) Fix warning on /proc/i8k creation error
- ethtool: do not perform operations on net devices being unregistered
- perf inject: Fix itrace space allowed for new attributes
- memblock: free_unused_memmap: use pageblock units instead of MAX_ORDER
- memblock: align freed memory map on pageblock boundaries with SPARSEMEM
- memblock: ensure there is no overflow in memblock_overlaps_region()
- arm: extend pfn_valid to take into account freed memory map alignment
- arm: ioremap: don't abuse pfn_valid() to check if pfn is in RAM
- hwmon: (corsair-psu) fix plain integer used as NULL pointer
- perf bpf_skel: Do not use typedef to avoid error on old clang
- netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock
- ice: fix FDIR init missing when reset VF
- drm/msm/dp: Avoid unpowered AUX xfers that caused crashes
- KVM: selftests: Make sure kvm_create_max_vcpus test won't hit RLIMIT_NOFILE
- KVM: downgrade two BUG_ONs to WARN_ON_ONCE
- mac80211: fix regression in SSN handling of addba tx
- mac80211: mark TX-during-stop for TX in in_reconfig
- mac80211: send ADDBA requests using the tid/queue of the aggregation session
- mac80211: validate extended element ID is present
- firmware: arm_scpi: Fix string overflow in SCPI genpd driver
- bpf: Fix signed bounds propagation after mov32
- bpf: Make 32->64 bounds propagation slightly more robust
- bpf, selftests: Add test case trying to taint map value pointer
- virtio_ring: Fix querying of maximum DMA mapping size for virtio device
- vdpa: check that offsets are within bounds
- recordmcount.pl: look for jgnop instruction as well as bcrl on s390
- dm btree remove: fix use after free in rebalance_children()
- audit: improve robustness of the audit queue handling
- arm64: dts: rockchip: remove mmc-hs400-enhanced-strobe from rk3399-khadas-
edge
- arm64: dts: rockchip: fix rk3308-roc-cc vcc-sd supply
- arm64: dts: rockchip: fix rk3399-leez-p710 vcc3v3-lan supply
- arm64: dts: rockchip: fix audio-supply for Rock Pi 4
- mac80211: track only QoS data frames for admission control
- tee: amdtee: fix an IS_ERR() vs NULL bug
- ceph: fix duplicate increment of opened_inodes metric
- ceph: initialize pathlen variable in reconnect_caps_cb
- ARM: socfpga: dts: fix qspi node compatible
- clk: Don't parent clks until the parent is fully registered
- soc: imx: Register SoC device only on i.MX boards
- virtio/vsock: fix the transport to work with VMADDR_CID_ANY
- selftests: net: Correct ping6 expected rc from 2 to 1
- s390/kexec_file: fix error handling when applying relocations
- sch_cake: do not call cake_destroy() from cake_init()
- inet_diag: fix kernel-infoleak for UDP sockets
- net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg
- selftests: Add duplicate config only for MD5 VRF tests
- selftests: Fix raw socket bind tests with VRF
- selftests: Fix IPv6 address bind tests
- dmaengine: st_fdma: fix MODULE_ALIAS
- selftest/net/forwarding: declare NETIFS p9 p10
- drm/ast: potential dereference of null pointer
- mac80211: agg-tx: don't schedule_and_wake_txq() under sta->lock
- mac80211: fix lookup when adding AddBA extension element
- flow_offload: return EOPNOTSUPP for the unsupported mpls action type
- rds: memory leak in __rds_conn_create()
- drm/amd/pm: fix a potential gpu_metrics_table memory leak
- mptcp: clear 'kern' flag from fallback sockets
- soc/tegra: fuse: Fix bitwise vs. logical OR warning
- igb: Fix removal of unicast MAC filters of VFs
- igbvf: fix double free in `igbvf_probe`
- igc: Fix typo in i225 LTR functions
- ixgbe: Document how to enable NBASE-T support
- ixgbe: set X550 MDIO speed before talking to PHY
- netdevsim: Zero-initialize memory for new map's value in function
nsim_bpf_map_alloc
- sfc_ef100: potential dereference of null pointer
- net: Fix double 0x prefix print in SKB dump
- net/smc: Prevent smc_release() from long blocking
- net: systemport: Add global locking for descriptor lifecycle
- sit: do not call ipip6_dev_free() from sit_init_net()
- bpf, selftests: Fix racing issue in btf_skc_cls_ingress test
- powerpc/85xx: Fix oops when CONFIG_FSL_PMC=n
- USB: gadget: bRequestType is a bitfield, not a enum
- Revert "usb: early: convert to readl_poll_timeout_atomic()"
- KVM: x86: Drop guest CPUID check for host initiated writes to
MSR_IA32_PERF_CAPABILITIES
- tty: n_hdlc: make n_hdlc_tty_wakeup() asynchronous
- USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04)
- usb: dwc2: fix STM ID/VBUS detection startup delay in dwc2_driver_probe
- PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error
- PCI/MSI: Mask MSI-X vectors only on success
- usb: xhci: Extend support for runtime power management for AMD's Yellow
carp.
- USB: serial: cp210x: fix CP2105 GPIO registration
- USB: serial: option: add Telit FN990 compositions
- btrfs: fix memory leak in __add_inode_ref()
- btrfs: fix double free of anon_dev after failure to create subvolume
- zonefs: add MODULE_ALIAS_FS
- iocost: Fix divide-by-zero on donation from low hweight cgroup
- serial: 8250_fintek: Fix garbled text for console
- timekeeping: Really make sure wall_to_monotonic isn't positive
- libata: if T_LENGTH is zero, dma direction should be DMA_NONE
- drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE
- Input: touchscreen - avoid bitwise vs logical OR warning
- ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name
- media: mxl111sf: change mutex_init() location
- fuse: annotate lock in fuse_reverse_inval_entry()
- ovl: fix warning in ovl_create_real()
- scsi: scsi_debug: Don't call kcalloc() if size arg is zero
- scsi: scsi_debug: Fix type in min_t to avoid stack OOB
- scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()
- rcu: Mark accesses to rcu_state.n_force_qs
- bus: ti-sysc: Fix variable set but not used warning for reinit_modules
- xen/blkfront: harden blkfront against event channel storms
- xen/netfront: harden netfront against event channel storms
- xen/console: harden hvc_xen against event channel storms
- xen/netback: fix rx queue stall detection
- xen/netback: don't queue unlimited number of packages
- KVM: VMX: clear vmx_x86_ops.sync_pir_to_irr if APICv is disabled
- x86/kvm: remove unused ack_notifier callbacks
- bpf: Fix kernel address leakage in atomic fetch
- bpf, selftests: Add test case for atomic fetch on spilled pointer
- bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg
- bpf, selftests: Update test case for atomic cmpxchg on r0 with pointer
- s390/entry: fix duplicate tracking of irq nesting level
- ceph: fix up non-directory creation in SGID directories
- btrfs: convert latest_bdev type to btrfs_device and rename
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: remove stale comment about the btrfs_show_devname
- drm/i915/hdmi: convert intel_hdmi_to_dev to intel_hdmi_to_i915
- drm/i915/hdmi: Turn DP++ TMDS output buffers back on in encoder->shutdown()
- pinctrl: amd: Fix wakeups when IRQ is shared with SCI
- arm64: dts: rockchip: fix poweroff on helios64
- dmaengine: idxd: add halt interrupt support
- dmaengine: idxd: fix calling wq quiesce inside spinlock
- arm64: dts: imx8mq: remove interconnect property from lcdif
- iwlwifi: mvm: don't crash on invalid rate w/o STA
- vdpa: Consider device id larger than 31
- netdevsim: don't overwrite read only ethtool parms
- dmaengine: idxd: fix missed completion on abort path
- net: dsa: mv88e6xxx: Unforce speed & duplex in mac_link_down()
- mptcp: never allow the PM to close a listener subflow
- cfg80211: Acquire wiphy mutex on regulatory work
- net: stmmac: fix tc flower deletion for VLAN priority Rx steering
- mptcp: remove tcp ulp setsockopt support
- mptcp: fix deadlock in __mptcp_push_pending()
- dsa: mv88e6xxx: fix debug print for SPEED_UNFORCED
- arm64: kexec: Fix missing error code 'ret' warning in load_other_segments()
- bpf: Fix extable fixup offset.
- usb: cdnsp: Fix incorrect status for control request
- usb: cdnsp: Fix incorrect calling of cdnsp_died function
- usb: cdnsp: Fix issue in cdnsp_log_ep trace event
- usb: cdnsp: Fix lack of spin_lock_irqsave/spin_lock_restore
- usb: typec: tcpm: fix tcpm unregister port but leave a pending timer
- selinux: fix sleeping function called from invalid context
- btrfs: check WRITE_ERR when trying to read an extent buffer
- btrfs: fix missing blkdev_put() call in btrfs_scan_one_device()
- cifs: sanitize multiple delimiters in prepath
- riscv: dts: unleashed: Add gpio card detect to mmc-spi-slot
- riscv: dts: unmatched: Add gpio card detect to mmc-spi-slot
- drm/amdgpu: don't override default ECO_BITs setting
- drm/amd/pm: fix reading SMU FW version from amdgpu_firmware_info on YC
- can: m_can: make custom bittiming fields const
- can: m_can: pci: use custom bit timings for Elkhart Lake
- mptcp: add missing documented NL params
- USB: core: Make do_proc_control() and do_proc_bulk() killable
* Impish update: upstream stable patchset 2022-01-13 (LP: #1957832)
- usb: gadget: uvc: fix multiple opens
- HID: quirks: Add quirk for the Microsoft Surface 3 type-cover
- HID: google: add eel USB id
- HID: add hid_is_usb() function to make it simpler for USB detection
- HID: add USB_HID dependancy to hid-prodikeys
- HID: add USB_HID dependancy to hid-chicony
- HID: add USB_HID dependancy on some USB HID drivers
- HID: bigbenff: prevent null pointer dereference
- HID: wacom: fix problems when device is not a valid USB device
- HID: check for valid USB device for many HID drivers
- nft_set_pipapo: Fix bucket load in AVX2 lookup routine for six 8-bit groups
- IB/hfi1: Insure use of smp_processor_id() is preempt disabled
- IB/hfi1: Fix early init panic
- IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr
- can: kvaser_usb: get CAN clock frequency from device
- can: kvaser_pciefd: kvaser_pciefd_rx_error_frame(): increase correct
stats->{rx,tx}_errors counter
- can: sja1000: fix use after free in ems_pcmcia_add_card()
- x86/sme: Explicitly map new EFI memmap table as encrypted
- nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
- selftests: netfilter: add a vrf+conntrack testcase
- vrf: don't run conntrack on vrf with !dflt qdisc
- bpf, x86: Fix "no previous prototype" warning
- bpf: Fix the off-by-two error in range markings
- ice: ignore dropped packets during init
- bonding: make tx_rebalance_counter an atomic
- nfp: Fix memory leak in nfp_cpp_area_cache_add()
- seg6: fix the iif in the IPv6 socket control block
- udp: using datalen to cap max gso segments
- netfilter: conntrack: annotate data-races around ct->timeout
- iavf: restore MSI state on reset
- iavf: Fix reporting when setting descriptor count
- IB/hfi1: Correct guard on eager buffer deallocation
- devlink: fix netns refcount leak in devlink_nl_cmd_reload()
- net/sched: fq_pie: prevent dismantle issue
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush
hypercall
- mm: bdi: initialize bdi_min_ratio when bdi is unregistered
- ALSA: ctl: Fix copy of updated id with element read/write
- ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform
- ALSA: hda/realtek: Fix quirk for TongFang PHxTxX1
- ALSA: pcm: oss: Fix negative period/buffer sizes
- ALSA: pcm: oss: Limit the period size to 16MB
- ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*()
- scsi: qla2xxx: Format log strings only if needed
- btrfs: clear extent buffer uptodate when we fail to write it
- btrfs: replace the BUG_ON in btrfs_del_root_ref with proper error handling
- md: fix update super 1.0 on rdev size change
- nfsd: fix use-after-free due to delegation race
- nfsd: Fix nsfd startup race (again)
- tracefs: Have new files inherit the ownership of their parent
- mmc: renesas_sdhi: initialize variable properly when tuning
- clk: qcom: regmap-mux: fix parent clock lookup
- drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence.
- can: pch_can: pch_can_rx_normal: fix use after free
- can: m_can: Disable and ignore ELO interrupt
- libata: add horkage for ASMedia 1092
- wait: add wake_up_pollfree()
- SAUCE: binder: export __wake_up_pollfree for binder module
- binder: use wake_up_pollfree()
- signalfd: use wake_up_pollfree()
- aio: keep poll requests on waitqueue until completed
- aio: fix use-after-free due to missing POLLFREE handling
- net: mvpp2: fix XDP rx queues registering
- tracefs: Set all files to the same group ownership as the mount option
- block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2)
- scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc()
- scsi: scsi_debug: Fix buffer size of REPORT ZONES command
- qede: validate non LSO skb length
- PM: runtime: Fix pm_runtime_active() kerneldoc comment
- ASoC: rt5682: Fix crash due to out of scope stack vars
- ASoC: qdsp6: q6routing: Fix return value from msm_routing_put_audio_mixer
- ASoC: codecs: wsa881x: fix return values from kcontrol put
- ASoC: codecs: wcd934x: handle channel mappping list correctly
- ASoC: codecs: wcd934x: return correct value from mixer put
- RDMA/hns: Do not halt commands during reset until later
- RDMA/hns: Do not destroy QP resources in the hw resetting phase
- clk: imx: use module_platform_driver
- i40e: Fix failed opcode appearing if handling messages from VF
- i40e: Fix pre-set max number of queues for VF
- mtd: rawnand: fsmc: Take instruction delay into account
- mtd: rawnand: fsmc: Fix timing computation
- i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc
- Revert "PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge"
- perf tools: Fix SMT detection fast read path
- Documentation/locking/locktypes: Update migrate_disable() bits.
- dt-bindings: net: Reintroduce PHY no lane swap binding
- tools build: Remove needless libpython-version feature check that breaks
test-all fast path
- net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero
- net: altera: set a couple error code in probe()
- net: fec: only clear interrupt of handling queue in fec_enet_rx_queue()
- net, neigh: clear whole pneigh_entry at alloc time
- net/qla3xxx: fix an error code in ql_adapter_up()
- Revert "UBUNTU: SAUCE: selftests: fib_tests: assign address to dummy1 for
rp_filter tests"
- selftests/fib_tests: Rework fib_rp_filter_test()
- USB: gadget: detect too-big endpoint 0 requests
- USB: gadget: zero allocate endpoint 0 buffers
- usb: core: config: fix validation of wMaxPacketValue entries
- xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime
suspending
- usb: core: config: using bit mask instead of individual bits
- xhci: avoid race between disable slot command and host runtime suspend
- iio: gyro: adxrs290: fix data signedness
- iio: trigger: Fix reference counting
- iio: trigger: stm32-timer: fix MODULE_ALIAS
- iio: stk3310: Don't return error code in interrupt handler
- iio: mma8452: Fix trigger reference couting
- iio: ltr501: Don't return error code in trigger handler
- iio: kxsd9: Don't return error code in trigger handler
- iio: itg3200: Call iio_trigger_notify_done() on error
- iio: dln2-adc: Fix lockdep complaint
- iio: dln2: Check return value of devm_iio_trigger_register()
- iio: at91-sama5d2: Fix incorrect sign extension
- iio: adc: stm32: fix a current leak by resetting pcsel before disabling vdda
- iio: adc: axp20x_adc: fix charging current reporting on AXP22x
- iio: ad7768-1: Call iio_trigger_notify_done() on error
- iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
- csky: fix typo of fpu config macro
- irqchip/aspeed-scu: Replace update_bits with write_bits.
- irqchip/armada-370-xp: Fix return value of armada_370_xp_msi_alloc()
- irqchip/armada-370-xp: Fix support for Multi-MSI interrupts
- irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL
- irqchip: nvic: Fix offset for Interrupt Priority Offsets
- misc: fastrpc: fix improper packet size calculation
- bpf: Add selftests to cover packet access corner cases
- HID: intel-ish-hid: ipc: only enable IRQ wakeup when requested
- mmc: spi: Add device-tree SPI IDs
- HID: Ignore battery for Elan touchscreen on Asus UX550VE
- can: m_can: pci: fix incorrect reference clock rate
- net: dsa: mv88e6xxx: fix "don't use PHY_DETECT on internal PHY's"
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- bpf: Make sure bpf_disable_instrumentation() is safe vs preemption.
- netfilter: nft_exthdr: break evaluation if setting TCP option fails
- net: bcm4908: Handle dma_set_coherent_mask error codes
- net: dsa: mv88e6xxx: error handling for serdes_power functions
- net: dsa: felix: Fix memory leak in felix_setup_mmio_filtering
- KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit
- KVM: x86: Ignore sparse banks size for an "all CPUs", non-sparse IPI req
- timers: implement usleep_idle_range()
- btrfs: fix re-dirty process of tree-log nodes
- btrfs: free exchange changeset on failures
- perf intel-pt: Fix some PGE (packet generation enable/control flow packets)
usage
- perf intel-pt: Fix sync state when a PSB (synchronization) packet is found
- perf intel-pt: Fix intel_pt_fup_event() assumptions about setting state type
- perf intel-pt: Fix state setting when receiving overflow (OVF) packet
- perf intel-pt: Fix next 'err' value, walking trace
- perf intel-pt: Fix missing 'instruction' events with 'q' option
- perf intel-pt: Fix error timestamp setting on the decoder error path
- selftests: KVM: avoid failures due to reserved HyperTransport region
- hwmon: (pwm-fan) Ensure the fan going on in .probe()
- thermal: int340x: Fix VCoRefLow MMIO bit offset for TGL
- i2c: mpc: Use atomic read and fix break condition
- ALSA: usb-audio: Reorder snd_djm_devices[] entries
- clk: qcom: clk-alpha-pll: Don't reconfigure running Trion
- misc: rtsx: Avoid mangling IRQ during runtime PM
- bus: mhi: pci_generic: Fix device recovery failed issue
- bus: mhi: core: Add support for forced PM resume
- clocksource/drivers/dw_apb_timer_of: Fix probe failure
* Impish update: upstream stable patchset 2022-01-07 (LP: #1956791)
- can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM
- gfs2: release iopen glock early in evict
- gfs2: Fix length of holes reported at end-of-file
- powerpc/pseries/ddw: Revert "Extend upper limit for huge DMA window for
persistent memory"
- drm/sun4i: fix unmet dependency on RESET_CONTROLLER for PHY_SUN6I_MIPI_DPHY
- mac80211: do not access the IV when it was stripped
- net/smc: Transfer remaining wait queue entries during fallback
- atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
- net: return correct error code
- platform/x86: thinkpad_acpi: Add support for dual fan control
- platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep
- s390/setup: avoid using memblock_enforce_memory_limit
- btrfs: check-integrity: fix a warning on write caching disabled disk
- thermal: core: Reset previous low and high trip during thermal zone init
- scsi: iscsi: Unblock session then wake up error handler
- drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again
- drm/amd/amdgpu: fix potential memleak
- ata: ahci: Add Green Sardine vendor ID as board_ahci_mobile
- ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in
hns_dsaf_ge_srst_by_port()
- ipv6: check return value of ipv6_skip_exthdr
- net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of
bound
- net: ethernet: dec: tulip: de4x5: fix possible array overflows in
type3_infoblock()
- perf inject: Fix ARM SPE handling
- perf hist: Fix memory leak of a perf_hpp_fmt
- perf report: Fix memory leaks around perf_tip()
- net/smc: Avoid warning of possible recursive locking
- ACPI: Add stubs for wakeup handler functions
- vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit
- kprobes: Limit max data_size of the kretprobe instances
- rt2x00: do not mark device gone on EPROTO errors during start
- cpufreq: Fix get_cpu_device() failure in add_cpu_dev_symlink()
- s390/pci: move pseudo-MMIO to prevent MIO overlap
- sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl
- sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl
- ipv6: fix memory leak in fib6_rule_suppress
- drm/amd/display: Allow DSC on supported MST branch devices
- KVM: Disallow user memslot with size that exceeds "unsigned long"
- KVM: nVMX: Flush current VPID (L1 vs. L2) for KVM_REQ_TLB_FLUSH_GUEST
- KVM: x86: Use a stable condition around all VT-d PI paths
- KVM: arm64: Avoid setting the upper 32 bits of TCR_EL2 and CPTR_EL2 to 1
- KVM: X86: Use vcpu->arch.walk_mmu for kvm_mmu_invlpg()
- tracing/histograms: String compares should not care about signed values
- wireguard: selftests: increase default dmesg log size
- wireguard: allowedips: add missing __rcu annotation to satisfy sparse
- wireguard: selftests: actually test for routing loops
- wireguard: selftests: rename DEBUG_PI_LIST to DEBUG_PLIST
- wireguard: device: reset peer src endpoint when netns exits
- wireguard: receive: use ring buffer for incoming handshakes
- wireguard: receive: drop handshakes if queue lock is contended
- wireguard: ratelimiter: use kvcalloc() instead of kvzalloc()
- i2c: stm32f7: flush TX FIFO upon transfer errors
- i2c: stm32f7: recover the bus on access timeout
- i2c: stm32f7: stop dma transfer in case of NACK
- i2c: cbus-gpio: set atomic transfer callback
- natsemi: xtensa: fix section mismatch warnings
- tcp: fix page frag corruption on page fault
- net: qlogic: qlcnic: Fix a NULL pointer dereference in
qlcnic_83xx_add_rings()
- net: mpls: Fix notifications when deleting a device
- siphash: use _unaligned version by default
- arm64: ftrace: add missing BTIs
- net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
- selftests: net: Correct case name
- mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode
- ASoC: tegra: Fix wrong value type in ADMAIF
- ASoC: tegra: Fix wrong value type in I2S
- ASoC: tegra: Fix wrong value type in DMIC
- ASoC: tegra: Fix wrong value type in DSPK
- ASoC: tegra: Fix kcontrol put callback in ADMAIF
- ASoC: tegra: Fix kcontrol put callback in I2S
- ASoC: tegra: Fix kcontrol put callback in DMIC
- ASoC: tegra: Fix kcontrol put callback in DSPK
- ASoC: tegra: Fix kcontrol put callback in AHUB
- rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle()
- rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
- ALSA: intel-dsp-config: add quirk for CML devices based on ES8336 codec
- net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no IRQ
is available
- net: marvell: mvpp2: Fix the computation of shared CPUs
- dpaa2-eth: destroy workqueue at the end of remove function
- net: annotate data-races on txq->xmit_lock_owner
- ipv4: convert fib_num_tclassid_users to atomic_t
- net/smc: fix wrong list_del in smc_lgr_cleanup_early
- net/rds: correct socket tunable error in rds_tcp_tune()
- drm/msm/a6xx: Allocate enough space for GMU registers
- drm/msm: Do hw_init() before capturing GPU state
- atlantic: Increase delay for fw transactions
- atlatnic: enable Nbase-t speeds with base-t
- atlantic: Fix to display FW bundle version instead of FW mac version.
- atlantic: Add missing DIDs and fix 115c.
- Remove Half duplex mode speed capabilities.
- atlantic: Fix statistics logic for production hardware
- atlantic: Remove warn trace message.
- KVM: x86/pmu: Fix reserved bits for AMD PerfEvtSeln register
- KVM: VMX: Set failure code in prepare_vmcs02()
- x86/sev: Fix SEV-ES INS/OUTS instructions for word, dword, and qword
- x86/entry: Use the correct fence macro after swapgs in kernel CR3
- x86/xen: Add xenpv_restore_regs_and_return_to_usermode()
- sched/uclamp: Fix rq->uclamp_max not set on first enqueue
- x86/entry: Add a fence for kernel entry SWAPGS in paranoid_entry()
- parisc: Fix KBUILD_IMAGE for self-extracting kernel
- parisc: Fix "make install" on newer debian releases
- vgacon: Propagate console boot parameters before calling `vc_resize'
- xhci: Fix commad ring abort, write all 64 bits to CRCR register.
- USB: NO_LPM quirk Lenovo Powered USB-C Travel Hub
- usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect
- x86/tsc: Add a timer to make sure TSC_adjust is always checked
- x86/tsc: Disable clocksource watchdog for TSC on qualified platorms
- x86/64/mm: Map all kernel memory into trampoline_pgd
- tty: serial: msm_serial: Deactivate RX DMA for polling support
- serial: pl011: Add ACPI SBSA UART match id
- serial: tegra: Change lower tolerance baud rate limit for tegra20 and
tegra30
- serial: core: fix transmit-buffer reset and memleak
- serial: 8250_pci: Fix ACCES entries in pci_serial_quirks array
- serial: 8250_pci: rewrite pericom_do_set_divisor()
- serial: 8250: Fix RTS modem control while in rs485 mode
- iwlwifi: mvm: retry init flow if failed
- parisc: Mark cr16 CPU clocksource unstable on all SMP machines
- net/tls: Fix authentication failure in CCM mode
- ALSA: usb-audio: Restrict rates for the shared clocks
- ALSA: usb-audio: Check available frames for the next packet size
- ALSA: usb-audio: Add spinlock to stop_urbs()
- ALSA: usb-audio: Avoid killing in-flight URBs during draining
- mac80211: fix throughput LED trigger
- x86/hyperv: Move required MSRs check to initial platform probing
- platform/x86: dell-wmi-descriptor: disable by default
- btrfs: silence lockdep when reading chunk tree during mount
- drm/amd/pm: Remove artificial freq level on Navi1x
- perf sort: Fix the 'weight' sort key behavior
- perf sort: Fix the 'ins_lat' sort key behavior
- perf sort: Fix the 'p_stage_cyc' sort key behavior
- tracing: Don't use out-of-sync va_list in event printing
- dma-buf: system_heap: Use 'for_each_sgtable_sg' in pages free flow
- drm/i915/dp: Perform 30ms delay after source OUI write
- KVM: SVM: move check for kvm_vcpu_apicv_active outside of
avic_vcpu_{put|load}
- KVM: fix avic_set_running for preemptable kernels
- KVM: x86/mmu: Fix TDP MMU page table level
- KVM: x86/mmu: Fix TLB flush range when handling disconnected pt
- KVM: x86: ignore APICv if LAPIC is not enabled
- KVM: nVMX: Abide to KVM_REQ_TLB_FLUSH_GUEST request on nested vmentry/vmexit
- KVM: x86: check PIR even for vCPUs with disabled APICv
- net: dsa: mv88e6xxx: Fix application of erratum 4.8 for 88E6393X
- net: dsa: mv88e6xxx: Drop unnecessary check in
mv88e6393x_serdes_erratum_4_6()
- net: dsa: mv88e6xxx: Save power by disabling SerDes trasmitter and receiver
- net: dsa: mv88e6xxx: Add fix for erratum 5.2 of 88E6393X family
- net: dsa: mv88e6xxx: Fix inband AN for 2500base-x on 88E6393X family
- net: dsa: mv88e6xxx: Link in pcs_get_state() if AN is bypassed
- iwlwifi: fix warnings produced by kernel debug options
- net: stmmac: Avoid DMA_CHAN_CONTROL write if no Split Header support
- octeontx2-af: Fix a memleak bug in rvu_mbox_init()
- drm/vc4: kms: Wait for the commit before increasing our clock rate
- drm/vc4: kms: Fix return code check
- drm/vc4: kms: Add missing drm_crtc_commit_put
- drm/vc4: kms: Clear the HVS FIFO commit pointer once done
- drm/vc4: kms: Don't duplicate pending commit
- drm/vc4: kms: Fix previous HVS commit wait
- KVM: x86/mmu: Skip tlb flush if it has been done in zap_gfn_range()
- KVM: SEV: initialize regions_list of a mirror VM
- preempt/dynamic: Fix setup_preempt_mode() return value
- KVM: SEV: Return appropriate error codes if SEV-ES scratch setup fails
- serial: 8250_bcm7271: UART errors after resuming from S2
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous
requests
- usb: cdnsp: Fix a NULL pointer dereference in cdnsp_endpoint_init()
- serial: liteuart: Fix NULL pointer dereference in ->remove()
- serial: liteuart: fix use-after-free and memleak on unbind
- serial: liteuart: fix minor-number leak on probe errors
* CVE-2022-23222
- bpf: Fix out of bounds access from invalid *_or_null type verification
- bpf: Don't promote bogus looking registers after null check.
- bpf, selftests: Add verifier test for mem_or_null register with offset.
-- Khalid Elmously <email address hidden> Wed, 16 Mar 2022 23:03:19 -0400
linux-gcp-5.13 (5.13.0-1019.23~20.04.1) focal; urgency=medium
[ Ubuntu: 5.13.0-1019.23 ]
* CVE-2022-0847
- lib/iov_iter: initialize "flags" in new pipe_buffer
| Deleted in focal-proposed (Reason: moved to -updates) |
linux-gcp-5.13 (5.13.0-1016.19~20.04.1) focal; urgency=medium
* focal/linux-gcp-5.13: 5.13.0-1016.19~20.04.1 -proposed tracker
(LP: #1961211)
[ Ubuntu: 5.13.0-1016.19 ]
* impish/linux-gcp: 5.13.0-1016.19 -proposed tracker (LP: #1961212)
* Update gvnic driver code (LP: #1953575)
- gve: Move some static functions to a common file
- gve: gve_rx_copy: Move padding to an argument
- gve: Make gve_rx_slot_page_info.page_offset an absolute offset
- gve: Introduce a new model for device options
- gve: Introduce per netdev `enum gve_queue_format`
- gve: adminq: DQO specific device descriptor logic
- gve: Add support for DQO RX PTYPE map
- gve: Add dqo descriptors
- gve: Add DQO fields for core data structures
- gve: Update adminq commands to support DQO queues
- gve: DQO: Add core netdev features
- gve: DQO: Add ring allocation and initialization
- gve: DQO: Configure interrupts on device up
- gve: DQO: Add TX path
- gve: DQO: Add RX path
- gve: Fix warnings reported for DQO patchset
- gve: DQO: Fix off by one in gve_rx_dqo()
- gve: Propagate error codes to caller
- gve: Simplify code and axe the use of a deprecated API
- gve: DQO: Remove incorrect prefetch
- gve: DQO: avoid unused variable warnings
- gve: Switch to use napi_complete_done
- gve: Add rx buffer pagecnt bias
- gve: Do lazy cleanup in TX path
- gve: Add netif_set_xps_queue call
- gve: Allow pageflips on larger pages
- gve: Add RX context.
- gve: Implement packet continuation for RX.
- gve: Add a jumbo-frame device option.
- gve: fix unmatched u64_stats_update_end()
- gve: fix for null pointer dereference.
- gve: Correct order of processing device options
- gve: Add optional metadata descriptor type GVE_TXD_MTD
- gve: Move the irq db indexes out of the ntfy block struct
- gve: Update gve_free_queue_page_list signature
- gve: remove memory barrier around seqno
- gve: Implement suspend/resume/shutdown
- gve: Add consumed counts to ethtool stats
- gve: Add tx|rx-coalesce-usec for DQO
- gve: Use kvcalloc() instead of kvzalloc()
* impish/linux: 5.13.0-32.35 -proposed tracker (LP: #1961973)
* Broken network on some AWS instances with focal/impish kernels
(LP: #1961968)
- SAUCE: Revert "PCI/MSI: Mask MSI-X vectors only on success"
* impish/linux: 5.13.0-31.34 -proposed tracker (LP: #1961220)
* Packaging resync (LP: #1786013)
- [Packaging] resync getabis
- debian/dkms-versions -- update from kernel-versions (main/2022.02.21)
* [SRU]PCI: vmd: Do not disable MSI-X remapping if interrupt remapping is
enabled by IOMMU (LP: #1937295)
- PCI: vmd: Do not disable MSI-X remapping if interrupt remapping is enabled
by IOMMU
* [UBUNTU 20.04] kernel: Add support for CPU-MF counter second version 7
(LP: #1960182)
- s390/cpumf: Support for CPU Measurement Facility CSVN 7
- s390/cpumf: Support for CPU Measurement Sampling Facility LS bit
* [UBUNTU 21.10] s390/cio: verify the driver availability for path_event call
(LP: #1960875)
- s390/cio: verify the driver availability for path_event call
* Impish update: upstream stable patchset 2022-02-14 (LP: #1960861)
- devtmpfs regression fix: reconfigure on each mount
- orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc()
- remoteproc: qcom: pil_info: Don't memcpy_toio more than is provided
- perf: Protect perf_guest_cbs with RCU
- KVM: x86: Register Processor Trace interrupt hook iff PT enabled in guest
- KVM: s390: Clarify SIGP orders versus STOP/RESTART
- 9p: only copy valid iattrs in 9P2000.L setattr implementation
- video: vga16fb: Only probe for EGA and VGA 16 color graphic cards
- media: uvcvideo: fix division by zero at stream start
- rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with
interrupts enabled
- firmware: qemu_fw_cfg: fix sysfs information leak
- firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries
- firmware: qemu_fw_cfg: fix kobject leak in probe error path
- KVM: x86: remove PMU FIXED_CTR3 from msrs_to_save_all
- ALSA: hda/realtek: Add speaker fixup for some Yoga 15ITL5 devices
- ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after
reboot from Windows
- ALSA: hda: ALC287: Add Lenovo IdeaPad Slim 9i 14ITL5 speaker quirk
- ALSA: hda/realtek: Add quirk for Legion Y9000X 2020
- ALSA: hda/realtek: Re-order quirk entries for Lenovo
- powerpc/pseries: Get entry and uaccess flush required bits from
H_GET_CPU_CHARACTERISTICS
- mtd: fixup CFI on ixp4xx
- KVM: x86: don't print when fail to read/write pv eoi memory
- remoteproc: qcom: pas: Add missing power-domain "mxc" for CDSP
- perf annotate: Avoid TUI crash when navigating in the annotation of
recursive functions
- ALSA: hda/realtek: Use ALC285_FIXUP_HP_GPIO_LED on another HP laptop
- ALSA: hda/tegra: Fix Tegra194 HDA reset failure
* CVE-2022-0516
- KVM: s390: Return error on SIDA memop on normal guest
* CVE-2022-0435
- tipc: improve size validations for received domain records
* CVE-2022-0492
- cgroup-v1: Require capabilities to set release_agent
* jammy 5.15 kernel soft lockup when zfs.ko is loaded on s390x w/ gcc >=
11.2.0-10ubuntu1 / gcc-11 PLT regression on s390x (LP: #1954676)
- s390/module: fix loading modules with a lot of relocations
* Impish update: upstream stable patchset 2022-02-09 (LP: #1960452)
- workqueue: Fix unbind_workers() VS wq_worker_running() race
- Bluetooth: btusb: fix memory leak in btusb_mtk_submit_wmt_recv_urb()
- Bluetooth: btusb: Add two more Bluetooth parts for WCN6855
- Bluetooth: btusb: Add support for Foxconn QCA 0xe0d0
- Bluetooth: bfusb: fix division by zero in send path
- ARM: dts: exynos: Fix BCM4330 Bluetooth reset polarity in I9100
- USB: core: Fix bug in resuming hub's handling of wakeup requests
- USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status
- ath11k: Fix buffer overflow when scanning with extraie
- mmc: sdhci-pci: Add PCI ID for Intel ADL
- mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe()
- can: gs_usb: fix use of uninitialized variable, detach device on reception
of invalid USB data
- can: isotp: convert struct tpcon::{idx,len} to unsigned int
- can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved}
- random: fix data race on crng_node_pool
- random: fix data race on crng init time
- random: fix crash on multiple early calls to add_bootloader_randomness()
- media: Revert "media: uvcvideo: Set unique vdev name based in type"
- staging: wlan-ng: Avoid bitwise vs logical OR warning in
hfa384x_usb_throttlefn()
- drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk()
- staging: greybus: fix stack size warning with UBSAN
- s390/kexec: handle R_390_PLT32DBL rela in arch_kexec_apply_relocations_add()
- Bluetooth: btusb: Add the new support ID for Realtek RTL8852A
- Bluetooth: btusb: Add support for IMC Networks Mediatek Chip(MT7921)
- Bbluetooth: btusb: Add another Bluetooth part for Realtek 8852AE
- Bluetooth: btusb: Enable MSFT extension for Mediatek Chip (MT7921)
- Bluetooth: btusb: enable Mediatek to support AOSP extension
- Bluetooth: btusb: Add one more Bluetooth part for the Realtek RTL8852AE
- Bluetooth: btusb: Add the new support IDs for WCN6855
- fget: clarify and improve __fget_files() implementation
- Bluetooth: btusb: Add one more Bluetooth part for WCN6855
- Bluetooth: add quirk disabling LE Read Transmit Power
- Bluetooth: btbcm: disable read tx power for some Macs with the T2 Security
chip
- Bluetooth: btbcm: disable read tx power for MacBook Air 8,1 and 8,2
* Impish update: upstream stable patchset 2022-01-31 (LP: #1959627)
- selftests: x86: fix [-Wstringop-overread] warn in test_process_vm_readv()
- tracing: Fix check for trace_percpu_buffer validity in get_trace_buf()
- tracing: Tag trace_percpu_buffer as a percpu pointer
- ieee802154: atusb: fix uninit value in atusb_set_extended_addr
- i40e: Fix to not show opcode msg on unsuccessful VF MAC change
- iavf: Fix limit of total number of queues to active queues of VF
- RDMA/core: Don't infoleak GRH fields
- netrom: fix copying in user data in nr_setsockopt
- RDMA/uverbs: Check for null return of kmalloc_array
- mac80211: initialize variable have_higher_than_11mbit
- sfc: The RX page_ring is optional
- i40e: fix use-after-free in i40e_sync_filters_subtask()
- i40e: Fix for displaying message regarding NVM version
- i40e: Fix incorrect netdev's real number of RX/TX queues
- ftrace/samples: Add missing prototypes direct functions
- ipv4: Check attribute length for RTA_GATEWAY in multipath route
- ipv4: Check attribute length for RTA_FLOW in multipath route
- ipv6: Check attribute length for RTA_GATEWAY in multipath route
- ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route
- lwtunnel: Validate RTA_ENCAP_TYPE attribute length
- batman-adv: mcast: don't send link-local multicast to mcast routers
- sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc
- net: ena: Fix undefined state when tx request id is out of bounds
- net: ena: Fix error handling when calculating max IO queues number
- power: supply: core: Break capacity loop
- power: reset: ltc2952: Fix use of floating point literals
- rndis_host: support Hytera digital radios
- phonet: refcount leak in pep_sock_accep
- power: bq25890: Enable continuous conversion for ADC at charging
- ipv6: Continue processing multipath route even if gateway attribute is
invalid
- ipv6: Do cleanup if attribute validation fails in multipath route
- usb: mtu3: fix interval value for intr and isoc
- scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown()
- ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate
- net: udp: fix alignment problem in udp4_seq_show()
- atlantic: Fix buff_ring OOB in aq_ring_rx_clean
- mISDN: change function names to avoid conflicts
- drm/amd/display: Added power down for DCN10
- ipv6: raw: check passed optlen before reading
- ARM: dts: gpio-ranges property is now required
- Input: zinitix - make sure the IRQ is allocated before it gets enabled
- fscache_cookie_enabled: check cookie is valid before accessing it
- Revert "net: usb: r8152: Add MAC passthrough support for more Lenovo Docks"
- mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh
- selftests: net: udpgro_fwd.sh: explicitly checking the available ping
feature
- sctp: hold endpoint before calling cb in sctp_transport_lookup_process
- net: ena: Fix wrong rx request id by resetting device
- md/raid1: fix missing bitmap update w/o WriteMostly devices
- cgroup: Use open-time credentials for process migraton perm checks
- cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv
- cgroup: Use open-time cgroup namespace for process migration perm checks
- i2c: mpc: Avoid out of bounds memory access
- net ticp:fix a kernel-infoleak in __tipc_sendmsg()
- fbdev: fbmem: add a helper to determine if an aperture is used by a fw fb
- drm/amdgpu: disable runpm if we are the primary adapter
- auxdisplay: charlcd: checking for pointer reference before dereferencing
- drm/amd/pm: Fix xgmi link control on aldebaran
- drm/amd/pm: skip setting gfx cgpg in the s0ix suspend-resume
- drm/amdgpu: always reset the asic in suspend (v2)
- drm/amdgpu: put SMU into proper state on runpm suspending for BOCO capable
platform
- userfaultfd/selftests: fix hugetlb area allocations
* Impish update: upstream stable patchset 2022-01-26 (LP: #1959134)
- Input: i8042 - add deferred probe support
- Input: i8042 - enable deferred probe quirk for ASUS UM325UA
- tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok().
- tomoyo: use hwight16() in tomoyo_domain_quota_is_ok()
- parisc: Clear stale IIR value on instruction access rights trap
- platform/x86: apple-gmux: use resource_size() with res
- memblock: fix memblock_phys_alloc() section mismatch error
- recordmcount.pl: fix typo in s390 mcount regex
- selinux: initialize proto variable in selinux_ip_postroute_compat()
- scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write()
- net/mlx5: DR, Fix NULL vs IS_ERR checking in dr_domain_init_resources
- net/mlx5e: Wrap the tx reporter dump callback to extract the sq
- net/mlx5e: Fix interoperability between XSK and ICOSQ recovery flow
- net/mlx5e: Fix ICOSQ recovery flow for XSK
- udp: using datalen to cap ipv6 udp max gso segments
- selftests: Calculate udpgso segment count without header adjustment
- sctp: use call_rcu to free endpoint
- net/smc: fix using of uninitialized completions
- net: usb: pegasus: Do not drop long Ethernet frames
- net: ag71xx: Fix a potential double free in error handling paths
- net: lantiq_xrx200: fix statistics of received bytes
- NFC: st21nfca: Fix memory leak in device probe and remove
- net/smc: don't send CDC/LLC message if link not ready
- net/smc: fix kernel panic caused by race of smc_sock
- igc: Fix TX timestamp support for non-MSI-X platforms
- ionic: Initialize the 'lif->dbid_inuse' bitmap
- net/mlx5e: Fix wrong features assignment in case of error
- selftests/net: udpgso_bench_tx: fix dst ip argument
- net/ncsi: check for error return from call to nla_put_u32
- fsl/fman: Fix missing put_device() call in fman_port_probe
- i2c: validate user data in compat ioctl
- nfc: uapi: use kernel size_t to fix user-space builds
- uapi: fix linux/nfc.h userspace compilation errors
- drm/amdgpu: When the VCN(1.0) block is suspended, powergating is explicitly
enabled
- drm/amdgpu: add support for IP discovery gc_info table v2
- xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set.
- usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
- usb: mtu3: add memory barrier before set GPD's HWO
- usb: mtu3: fix list_head check warning
- usb: mtu3: set interval of FS intr and isoc endpoint
- binder: fix async_free_space accounting for empty parcels
- scsi: vmw_pvscsi: Set residual data length conditionally
- Input: appletouch - initialize work before device registration
- Input: spaceball - fix parsing of movement data packets
- net: fix use-after-free in tw_timer_handler
- perf script: Fix CPU filtering of a script's switch events
- net/sched: Extend qdisc control block with tc control block
- platform/mellanox: mlxbf-pmc: Fix an IS_ERR() vs NULL bug in
mlxbf_pmc_map_counters
- net/mlx5: Fix SF health recovery flow
- net/mlx5: Fix tc max supported prio for nic mode
- selftests: net: Fix a typo in udpgro_fwd.sh
- selftests: net: using ping6 for IPv6 in udpgro_fwd.sh
- fs/mount_setattr: always cleanup mount_kattr
* Impish update: upstream stable patchset 2022-01-21 (LP: #1958672)
- arm64: vdso32: require CROSS_COMPILE_COMPAT for gcc+bfd
- net: usb: lan78xx: add Allied Telesis AT29M2-AF
- ext4: prevent partial update of the extent blocks
- ext4: check for out-of-order index extents in ext4_valid_extent_entries()
- ext4: check for inconsistent extents between index and leaf block
- HID: holtek: fix mouse probing
- HID: potential dereference of null pointer
- arm64: dts: allwinner: orangepi-zero-plus: fix PHY mode
- spi: change clk_disable_unprepare to clk_unprepare
- ASoC: meson: aiu: fifo: Add missing dma_coerce_mask_and_coherent()
- IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
- RDMA/hns: Replace kfree() with kvfree()
- netfilter: fix regression in looped (broad|multi)cast's MAC handling
- ARM: dts: imx6qdl-wandboard: Fix Ethernet support
- net: marvell: prestera: fix incorrect return of port_find
- qlcnic: potential dereference null pointer of rx_queue->page_ring
- net: accept UFOv6 packages in virtio_net_hdr_to_skb
- net: skip virtio_net_hdr_set_proto if protocol already set
- igb: fix deadlock caused by taking RTNL in RPM resume path
- ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module
- bonding: fix ad_actor_system option setting to default
- fjes: Check for error irq
- drivers: net: smc911x: Check for error irq
- net: ks8851: Check for error irq
- sfc: Check null pointer of rx_queue->page_ring
- sfc: falcon: Check null pointer of rx_queue->page_ring
- pinctrl: bcm2835: Change init order for gpio hogs
- hwmon: (lm90) Fix usage of CONFIG2 register in detect function
- hwmon: (lm90) Add basic support for TI TMP461
- hwmon: (lm90) Introduce flag indicating extended temperature support
- hwmon: (lm90) Drop critical attribute support for MAX6654
- ALSA: jack: Check the return value of kstrdup()
- ALSA: drivers: opl3: Fix incorrect use of vp->state
- ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6
- ALSA: hda/realtek: Add new alc285-hp-amp-init model
- ALSA: hda/realtek: Fix quirk for Clevo NJ51CU
- ASoC: meson: aiu: Move AIU_I2S_MISC hold setting to aiu-fifo-i2s
- Input: atmel_mxt_ts - fix double free in mxt_read_info_block
- ipmi: bail out if init_srcu_struct fails
- ipmi: ssif: initialize ssif_info->client early
- ipmi: fix initialization when workqueue allocation fails
- parisc: Correct completer in lws start
- parisc: Fix mask used to select futex spinlock
- tee: handle lookup of shm with reference count 0
- x86/pkey: Fix undefined behaviour with PKRU_WD_BIT
- platform/x86: intel_pmc_core: fix memleak on registration failure
- KVM: VMX: Wake vCPU when delivering posted IRQ even if vCPU == this vCPU
- pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines
- gpio: dln2: Fix interrupts when replugging the device
- mmc: sdhci-tegra: Fix switch to HS400ES mode
- mmc: meson-mx-sdhc: Set MANUAL_STOP for multi-block SDIO commands
- mmc: core: Disable card detect during shutdown
- mmc: mmci: stm32: clear DLYB_CR after sending tuning command
- ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling
- mac80211: fix locking in ieee80211_start_ap error path
- mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page()
- tee: optee: Fix incorrect page free bug
- f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()
- usb: gadget: u_ether: fix race in setting MAC address in setup phase
- KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state
- mm: mempolicy: fix THP allocations escaping mempolicy restrictions
- Input: elants_i2c - do not check Remark ID on eKTH3900/eKTH5312
- Input: goodix - add id->model mapping for the "9111" model
- ASoC: tas2770: Fix setting of high sample rates
- ASoC: rt5682: fix the wrong jack type detected
- pinctrl: mediatek: fix global-out-of-bounds issue
- hwmom: (lm90) Fix citical alarm status for MAX6680/MAX6681
- hwmon: (lm90) Do not report 'busy' status bit as alarm
- ax25: NPD bug when detaching AX25 device
- hamradio: defer ax25 kfree after unregister_netdev
- hamradio: improve the incomplete fix to avoid NPD
- phonet/pep: refuse to enable an unbound pipe
- selftests: KVM: Fix non-x86 compiling
- NFSD: Fix READDIR buffer overflow
- PM: sleep: Fix error handling in dpm_prepare()
- bus: sunxi-rsb: Fix shutdown
- netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()
- ice: Use xdp_buf instead of rx_buf for xsk zero-copy
- ice: xsk: return xsk buffers back to pool when cleaning the ring
- tcp: move inet->rx_dst_ifindex to sk->sk_rx_dst_ifindex
- ipv6: move inet6_sk(sk)->rx_dst_cookie to sk->sk_rx_dst_cookie
- inet: fully convert sk->sk_rx_dst to RCU rules
- io_uring: zero iocb->ki_pos for stream file types
- veth: ensure skb entering GRO are not cloned.
- net: bridge: Use array_size() helper in copy_to_user()
- r8152: fix the force speed doesn't work for RTL8156
- net: stmmac: dwmac-visconti: Fix value of ETHER_CLK_SEL_FREQ_SEL_2P5M
- ARM: 9160/1: NOMMU: Reload __secondary_data after PROCINFO_INITFUNC
- uapi: Fix undefined __always_inline on non-glibc systems
- Revert "x86/boot: Pull up cmdline preparation and early param parsing"
- x86/boot: Move EFI range reservation after cmdline parsing
- ALSA: hda/hdmi: Disable silent stream on GLK
- platform/x86: amd-pmc: only use callbacks for suspend
- KVM: x86: Always set kvm_run->if_flag
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: nVMX: Synthesize TRIPLE_FAULT for L2 if emulation is required
- mm, hwpoison: fix condition in free hugetlb page path
- netfs: fix parameter of cleanup()
- arm64: dts: lx2160a: fix scl-gpios property name
- kfence: fix memory leak when cat kfence objects
- Input: iqs626a - prohibit inlining of channel parsing functions
- ASoC: SOF: Intel: pci-tgl: add ADL-M support
- ASoC: SOF: Intel: pci-tgl: add new ADL-P variant
- ASoC: SOF: Intel: pci-tgl: add ADL-N support
- r8152: sync ocp base
- tun: avoid double free in tun_free_netdev
* Impish update: upstream stable patchset 2022-01-18 (LP: #1958287)
- netfilter: selftest: conntrack_vrf.sh: fix file permission
- nfc: fix segfault in nfc_genl_dump_devices_done
- drm/msm/dsi: set default num_data_lanes
- KVM: arm64: Save PSTATE early on exit
- s390/test_unwind: use raw opcode instead of invalid instruction
- Revert "tty: serial: fsl_lpuart: drop earlycon entry for i.MX8QXP"
- net/mlx4_en: Update reported link modes for 1/10G
- ALSA: hda: Add Intel DG2 PCI ID and HDMI codec vid
- ALSA: hda/hdmi: fix HDA codec entry table order for ADL-P
- parisc/agp: Annotate parisc agp init functions with __init
- i2c: rk3x: Handle a spurious start completion interrupt flag
- net: netlink: af_netlink: Prevent empty skb by adding a check on len.
- drm/amd/display: Fix for the no Audio bug with Tiled Displays
- drm/amd/display: add connector type check for CRC source set
- tracing: Fix a kmemleak false positive in tracing_map
- staging: most: dim2: use device release method
- fuse: make sure reclaim doesn't write the inode
- hwmon: (dell-smm) Fix warning on /proc/i8k creation error
- ethtool: do not perform operations on net devices being unregistered
- perf inject: Fix itrace space allowed for new attributes
- memblock: free_unused_memmap: use pageblock units instead of MAX_ORDER
- memblock: align freed memory map on pageblock boundaries with SPARSEMEM
- memblock: ensure there is no overflow in memblock_overlaps_region()
- arm: extend pfn_valid to take into account freed memory map alignment
- arm: ioremap: don't abuse pfn_valid() to check if pfn is in RAM
- hwmon: (corsair-psu) fix plain integer used as NULL pointer
- perf bpf_skel: Do not use typedef to avoid error on old clang
- netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock
- ice: fix FDIR init missing when reset VF
- drm/msm/dp: Avoid unpowered AUX xfers that caused crashes
- KVM: selftests: Make sure kvm_create_max_vcpus test won't hit RLIMIT_NOFILE
- KVM: downgrade two BUG_ONs to WARN_ON_ONCE
- mac80211: fix regression in SSN handling of addba tx
- mac80211: mark TX-during-stop for TX in in_reconfig
- mac80211: send ADDBA requests using the tid/queue of the aggregation session
- mac80211: validate extended element ID is present
- firmware: arm_scpi: Fix string overflow in SCPI genpd driver
- bpf: Fix signed bounds propagation after mov32
- bpf: Make 32->64 bounds propagation slightly more robust
- bpf, selftests: Add test case trying to taint map value pointer
- virtio_ring: Fix querying of maximum DMA mapping size for virtio device
- vdpa: check that offsets are within bounds
- recordmcount.pl: look for jgnop instruction as well as bcrl on s390
- dm btree remove: fix use after free in rebalance_children()
- audit: improve robustness of the audit queue handling
- arm64: dts: rockchip: remove mmc-hs400-enhanced-strobe from rk3399-khadas-
edge
- arm64: dts: rockchip: fix rk3308-roc-cc vcc-sd supply
- arm64: dts: rockchip: fix rk3399-leez-p710 vcc3v3-lan supply
- arm64: dts: rockchip: fix audio-supply for Rock Pi 4
- mac80211: track only QoS data frames for admission control
- tee: amdtee: fix an IS_ERR() vs NULL bug
- ceph: fix duplicate increment of opened_inodes metric
- ceph: initialize pathlen variable in reconnect_caps_cb
- ARM: socfpga: dts: fix qspi node compatible
- clk: Don't parent clks until the parent is fully registered
- soc: imx: Register SoC device only on i.MX boards
- virtio/vsock: fix the transport to work with VMADDR_CID_ANY
- selftests: net: Correct ping6 expected rc from 2 to 1
- s390/kexec_file: fix error handling when applying relocations
- sch_cake: do not call cake_destroy() from cake_init()
- inet_diag: fix kernel-infoleak for UDP sockets
- net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg
- selftests: Add duplicate config only for MD5 VRF tests
- selftests: Fix raw socket bind tests with VRF
- selftests: Fix IPv6 address bind tests
- dmaengine: st_fdma: fix MODULE_ALIAS
- selftest/net/forwarding: declare NETIFS p9 p10
- drm/ast: potential dereference of null pointer
- mac80211: agg-tx: don't schedule_and_wake_txq() under sta->lock
- mac80211: fix lookup when adding AddBA extension element
- flow_offload: return EOPNOTSUPP for the unsupported mpls action type
- rds: memory leak in __rds_conn_create()
- drm/amd/pm: fix a potential gpu_metrics_table memory leak
- mptcp: clear 'kern' flag from fallback sockets
- soc/tegra: fuse: Fix bitwise vs. logical OR warning
- igb: Fix removal of unicast MAC filters of VFs
- igbvf: fix double free in `igbvf_probe`
- igc: Fix typo in i225 LTR functions
- ixgbe: Document how to enable NBASE-T support
- ixgbe: set X550 MDIO speed before talking to PHY
- netdevsim: Zero-initialize memory for new map's value in function
nsim_bpf_map_alloc
- sfc_ef100: potential dereference of null pointer
- net: Fix double 0x prefix print in SKB dump
- net/smc: Prevent smc_release() from long blocking
- net: systemport: Add global locking for descriptor lifecycle
- sit: do not call ipip6_dev_free() from sit_init_net()
- bpf, selftests: Fix racing issue in btf_skc_cls_ingress test
- powerpc/85xx: Fix oops when CONFIG_FSL_PMC=n
- USB: gadget: bRequestType is a bitfield, not a enum
- Revert "usb: early: convert to readl_poll_timeout_atomic()"
- KVM: x86: Drop guest CPUID check for host initiated writes to
MSR_IA32_PERF_CAPABILITIES
- tty: n_hdlc: make n_hdlc_tty_wakeup() asynchronous
- USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04)
- usb: dwc2: fix STM ID/VBUS detection startup delay in dwc2_driver_probe
- PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error
- PCI/MSI: Mask MSI-X vectors only on success
- usb: xhci: Extend support for runtime power management for AMD's Yellow
carp.
- USB: serial: cp210x: fix CP2105 GPIO registration
- USB: serial: option: add Telit FN990 compositions
- btrfs: fix memory leak in __add_inode_ref()
- btrfs: fix double free of anon_dev after failure to create subvolume
- zonefs: add MODULE_ALIAS_FS
- iocost: Fix divide-by-zero on donation from low hweight cgroup
- serial: 8250_fintek: Fix garbled text for console
- timekeeping: Really make sure wall_to_monotonic isn't positive
- libata: if T_LENGTH is zero, dma direction should be DMA_NONE
- drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE
- Input: touchscreen - avoid bitwise vs logical OR warning
- ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name
- media: mxl111sf: change mutex_init() location
- fuse: annotate lock in fuse_reverse_inval_entry()
- ovl: fix warning in ovl_create_real()
- scsi: scsi_debug: Don't call kcalloc() if size arg is zero
- scsi: scsi_debug: Fix type in min_t to avoid stack OOB
- scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()
- rcu: Mark accesses to rcu_state.n_force_qs
- bus: ti-sysc: Fix variable set but not used warning for reinit_modules
- xen/blkfront: harden blkfront against event channel storms
- xen/netfront: harden netfront against event channel storms
- xen/console: harden hvc_xen against event channel storms
- xen/netback: fix rx queue stall detection
- xen/netback: don't queue unlimited number of packages
- KVM: VMX: clear vmx_x86_ops.sync_pir_to_irr if APICv is disabled
- x86/kvm: remove unused ack_notifier callbacks
- bpf: Fix kernel address leakage in atomic fetch
- bpf, selftests: Add test case for atomic fetch on spilled pointer
- bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg
- bpf, selftests: Update test case for atomic cmpxchg on r0 with pointer
- s390/entry: fix duplicate tracking of irq nesting level
- ceph: fix up non-directory creation in SGID directories
- btrfs: convert latest_bdev type to btrfs_device and rename
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: remove stale comment about the btrfs_show_devname
- drm/i915/hdmi: convert intel_hdmi_to_dev to intel_hdmi_to_i915
- drm/i915/hdmi: Turn DP++ TMDS output buffers back on in encoder->shutdown()
- pinctrl: amd: Fix wakeups when IRQ is shared with SCI
- arm64: dts: rockchip: fix poweroff on helios64
- dmaengine: idxd: add halt interrupt support
- dmaengine: idxd: fix calling wq quiesce inside spinlock
- arm64: dts: imx8mq: remove interconnect property from lcdif
- iwlwifi: mvm: don't crash on invalid rate w/o STA
- vdpa: Consider device id larger than 31
- netdevsim: don't overwrite read only ethtool parms
- dmaengine: idxd: fix missed completion on abort path
- net: dsa: mv88e6xxx: Unforce speed & duplex in mac_link_down()
- mptcp: never allow the PM to close a listener subflow
- cfg80211: Acquire wiphy mutex on regulatory work
- net: stmmac: fix tc flower deletion for VLAN priority Rx steering
- mptcp: remove tcp ulp setsockopt support
- mptcp: fix deadlock in __mptcp_push_pending()
- dsa: mv88e6xxx: fix debug print for SPEED_UNFORCED
- arm64: kexec: Fix missing error code 'ret' warning in load_other_segments()
- bpf: Fix extable fixup offset.
- usb: cdnsp: Fix incorrect status for control request
- usb: cdnsp: Fix incorrect calling of cdnsp_died function
- usb: cdnsp: Fix issue in cdnsp_log_ep trace event
- usb: cdnsp: Fix lack of spin_lock_irqsave/spin_lock_restore
- usb: typec: tcpm: fix tcpm unregister port but leave a pending timer
- selinux: fix sleeping function called from invalid context
- btrfs: check WRITE_ERR when trying to read an extent buffer
- btrfs: fix missing blkdev_put() call in btrfs_scan_one_device()
- cifs: sanitize multiple delimiters in prepath
- riscv: dts: unleashed: Add gpio card detect to mmc-spi-slot
- riscv: dts: unmatched: Add gpio card detect to mmc-spi-slot
- drm/amdgpu: don't override default ECO_BITs setting
- drm/amd/pm: fix reading SMU FW version from amdgpu_firmware_info on YC
- can: m_can: make custom bittiming fields const
- can: m_can: pci: use custom bit timings for Elkhart Lake
- mptcp: add missing documented NL params
- USB: core: Make do_proc_control() and do_proc_bulk() killable
* Impish update: upstream stable patchset 2022-01-13 (LP: #1957832)
- usb: gadget: uvc: fix multiple opens
- HID: quirks: Add quirk for the Microsoft Surface 3 type-cover
- HID: google: add eel USB id
- HID: add hid_is_usb() function to make it simpler for USB detection
- HID: add USB_HID dependancy to hid-prodikeys
- HID: add USB_HID dependancy to hid-chicony
- HID: add USB_HID dependancy on some USB HID drivers
- HID: bigbenff: prevent null pointer dereference
- HID: wacom: fix problems when device is not a valid USB device
- HID: check for valid USB device for many HID drivers
- nft_set_pipapo: Fix bucket load in AVX2 lookup routine for six 8-bit groups
- IB/hfi1: Insure use of smp_processor_id() is preempt disabled
- IB/hfi1: Fix early init panic
- IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr
- can: kvaser_usb: get CAN clock frequency from device
- can: kvaser_pciefd: kvaser_pciefd_rx_error_frame(): increase correct
stats->{rx,tx}_errors counter
- can: sja1000: fix use after free in ems_pcmcia_add_card()
- x86/sme: Explicitly map new EFI memmap table as encrypted
- nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
- selftests: netfilter: add a vrf+conntrack testcase
- vrf: don't run conntrack on vrf with !dflt qdisc
- bpf, x86: Fix "no previous prototype" warning
- bpf: Fix the off-by-two error in range markings
- ice: ignore dropped packets during init
- bonding: make tx_rebalance_counter an atomic
- nfp: Fix memory leak in nfp_cpp_area_cache_add()
- seg6: fix the iif in the IPv6 socket control block
- udp: using datalen to cap max gso segments
- netfilter: conntrack: annotate data-races around ct->timeout
- iavf: restore MSI state on reset
- iavf: Fix reporting when setting descriptor count
- IB/hfi1: Correct guard on eager buffer deallocation
- devlink: fix netns refcount leak in devlink_nl_cmd_reload()
- net/sched: fq_pie: prevent dismantle issue
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush
hypercall
- mm: bdi: initialize bdi_min_ratio when bdi is unregistered
- ALSA: ctl: Fix copy of updated id with element read/write
- ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform
- ALSA: hda/realtek: Fix quirk for TongFang PHxTxX1
- ALSA: pcm: oss: Fix negative period/buffer sizes
- ALSA: pcm: oss: Limit the period size to 16MB
- ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*()
- scsi: qla2xxx: Format log strings only if needed
- btrfs: clear extent buffer uptodate when we fail to write it
- btrfs: replace the BUG_ON in btrfs_del_root_ref with proper error handling
- md: fix update super 1.0 on rdev size change
- nfsd: fix use-after-free due to delegation race
- nfsd: Fix nsfd startup race (again)
- tracefs: Have new files inherit the ownership of their parent
- mmc: renesas_sdhi: initialize variable properly when tuning
- clk: qcom: regmap-mux: fix parent clock lookup
- drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence.
- can: pch_can: pch_can_rx_normal: fix use after free
- can: m_can: Disable and ignore ELO interrupt
- libata: add horkage for ASMedia 1092
- wait: add wake_up_pollfree()
- SAUCE: binder: export __wake_up_pollfree for binder module
- binder: use wake_up_pollfree()
- signalfd: use wake_up_pollfree()
- aio: keep poll requests on waitqueue until completed
- aio: fix use-after-free due to missing POLLFREE handling
- net: mvpp2: fix XDP rx queues registering
- tracefs: Set all files to the same group ownership as the mount option
- block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2)
- scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc()
- scsi: scsi_debug: Fix buffer size of REPORT ZONES command
- qede: validate non LSO skb length
- PM: runtime: Fix pm_runtime_active() kerneldoc comment
- ASoC: rt5682: Fix crash due to out of scope stack vars
- ASoC: qdsp6: q6routing: Fix return value from msm_routing_put_audio_mixer
- ASoC: codecs: wsa881x: fix return values from kcontrol put
- ASoC: codecs: wcd934x: handle channel mappping list correctly
- ASoC: codecs: wcd934x: return correct value from mixer put
- RDMA/hns: Do not halt commands during reset until later
- RDMA/hns: Do not destroy QP resources in the hw resetting phase
- clk: imx: use module_platform_driver
- i40e: Fix failed opcode appearing if handling messages from VF
- i40e: Fix pre-set max number of queues for VF
- mtd: rawnand: fsmc: Take instruction delay into account
- mtd: rawnand: fsmc: Fix timing computation
- i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc
- Revert "PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge"
- perf tools: Fix SMT detection fast read path
- Documentation/locking/locktypes: Update migrate_disable() bits.
- dt-bindings: net: Reintroduce PHY no lane swap binding
- tools build: Remove needless libpython-version feature check that breaks
test-all fast path
- net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero
- net: altera: set a couple error code in probe()
- net: fec: only clear interrupt of handling queue in fec_enet_rx_queue()
- net, neigh: clear whole pneigh_entry at alloc time
- net/qla3xxx: fix an error code in ql_adapter_up()
- Revert "UBUNTU: SAUCE: selftests: fib_tests: assign address to dummy1 for
rp_filter tests"
- selftests/fib_tests: Rework fib_rp_filter_test()
- USB: gadget: detect too-big endpoint 0 requests
- USB: gadget: zero allocate endpoint 0 buffers
- usb: core: config: fix validation of wMaxPacketValue entries
- xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime
suspending
- usb: core: config: using bit mask instead of individual bits
- xhci: avoid race between disable slot command and host runtime suspend
- iio: gyro: adxrs290: fix data signedness
- iio: trigger: Fix reference counting
- iio: trigger: stm32-timer: fix MODULE_ALIAS
- iio: stk3310: Don't return error code in interrupt handler
- iio: mma8452: Fix trigger reference couting
- iio: ltr501: Don't return error code in trigger handler
- iio: kxsd9: Don't return error code in trigger handler
- iio: itg3200: Call iio_trigger_notify_done() on error
- iio: dln2-adc: Fix lockdep complaint
- iio: dln2: Check return value of devm_iio_trigger_register()
- iio: at91-sama5d2: Fix incorrect sign extension
- iio: adc: stm32: fix a current leak by resetting pcsel before disabling vdda
- iio: adc: axp20x_adc: fix charging current reporting on AXP22x
- iio: ad7768-1: Call iio_trigger_notify_done() on error
- iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
- csky: fix typo of fpu config macro
- irqchip/aspeed-scu: Replace update_bits with write_bits.
- irqchip/armada-370-xp: Fix return value of armada_370_xp_msi_alloc()
- irqchip/armada-370-xp: Fix support for Multi-MSI interrupts
- irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL
- irqchip: nvic: Fix offset for Interrupt Priority Offsets
- misc: fastrpc: fix improper packet size calculation
- bpf: Add selftests to cover packet access corner cases
- HID: intel-ish-hid: ipc: only enable IRQ wakeup when requested
- mmc: spi: Add device-tree SPI IDs
- HID: Ignore battery for Elan touchscreen on Asus UX550VE
- can: m_can: pci: fix incorrect reference clock rate
- net: dsa: mv88e6xxx: fix "don't use PHY_DETECT on internal PHY's"
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- bpf: Make sure bpf_disable_instrumentation() is safe vs preemption.
- netfilter: nft_exthdr: break evaluation if setting TCP option fails
- net: bcm4908: Handle dma_set_coherent_mask error codes
- net: dsa: mv88e6xxx: error handling for serdes_power functions
- net: dsa: felix: Fix memory leak in felix_setup_mmio_filtering
- KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit
- KVM: x86: Ignore sparse banks size for an "all CPUs", non-sparse IPI req
- timers: implement usleep_idle_range()
- btrfs: fix re-dirty process of tree-log nodes
- btrfs: free exchange changeset on failures
- perf intel-pt: Fix some PGE (packet generation enable/control flow packets)
usage
- perf intel-pt: Fix sync state when a PSB (synchronization) packet is found
- perf intel-pt: Fix intel_pt_fup_event() assumptions about setting state type
- perf intel-pt: Fix state setting when receiving overflow (OVF) packet
- perf intel-pt: Fix next 'err' value, walking trace
- perf intel-pt: Fix missing 'instruction' events with 'q' option
- perf intel-pt: Fix error timestamp setting on the decoder error path
- selftests: KVM: avoid failures due to reserved HyperTransport region
- hwmon: (pwm-fan) Ensure the fan going on in .probe()
- thermal: int340x: Fix VCoRefLow MMIO bit offset for TGL
- i2c: mpc: Use atomic read and fix break condition
- ALSA: usb-audio: Reorder snd_djm_devices[] entries
- clk: qcom: clk-alpha-pll: Don't reconfigure running Trion
- misc: rtsx: Avoid mangling IRQ during runtime PM
- bus: mhi: pci_generic: Fix device recovery failed issue
- bus: mhi: core: Add support for forced PM resume
- clocksource/drivers/dw_apb_timer_of: Fix probe failure
* Impish update: upstream stable patchset 2022-01-07 (LP: #1956791)
- can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM
- gfs2: release iopen glock early in evict
- gfs2: Fix length of holes reported at end-of-file
- powerpc/pseries/ddw: Revert "Extend upper limit for huge DMA window for
persistent memory"
- drm/sun4i: fix unmet dependency on RESET_CONTROLLER for PHY_SUN6I_MIPI_DPHY
- mac80211: do not access the IV when it was stripped
- net/smc: Transfer remaining wait queue entries during fallback
- atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
- net: return correct error code
- platform/x86: thinkpad_acpi: Add support for dual fan control
- platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep
- s390/setup: avoid using memblock_enforce_memory_limit
- btrfs: check-integrity: fix a warning on write caching disabled disk
- thermal: core: Reset previous low and high trip during thermal zone init
- scsi: iscsi: Unblock session then wake up error handler
- drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again
- drm/amd/amdgpu: fix potential memleak
- ata: ahci: Add Green Sardine vendor ID as board_ahci_mobile
- ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in
hns_dsaf_ge_srst_by_port()
- ipv6: check return value of ipv6_skip_exthdr
- net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of
bound
- net: ethernet: dec: tulip: de4x5: fix possible array overflows in
type3_infoblock()
- perf inject: Fix ARM SPE handling
- perf hist: Fix memory leak of a perf_hpp_fmt
- perf report: Fix memory leaks around perf_tip()
- net/smc: Avoid warning of possible recursive locking
- ACPI: Add stubs for wakeup handler functions
- vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit
- kprobes: Limit max data_size of the kretprobe instances
- rt2x00: do not mark device gone on EPROTO errors during start
- cpufreq: Fix get_cpu_device() failure in add_cpu_dev_symlink()
- s390/pci: move pseudo-MMIO to prevent MIO overlap
- sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl
- sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl
- ipv6: fix memory leak in fib6_rule_suppress
- drm/amd/display: Allow DSC on supported MST branch devices
- KVM: Disallow user memslot with size that exceeds "unsigned long"
- KVM: nVMX: Flush current VPID (L1 vs. L2) for KVM_REQ_TLB_FLUSH_GUEST
- KVM: x86: Use a stable condition around all VT-d PI paths
- KVM: arm64: Avoid setting the upper 32 bits of TCR_EL2 and CPTR_EL2 to 1
- KVM: X86: Use vcpu->arch.walk_mmu for kvm_mmu_invlpg()
- tracing/histograms: String compares should not care about signed values
- wireguard: selftests: increase default dmesg log size
- wireguard: allowedips: add missing __rcu annotation to satisfy sparse
- wireguard: selftests: actually test for routing loops
- wireguard: selftests: rename DEBUG_PI_LIST to DEBUG_PLIST
- wireguard: device: reset peer src endpoint when netns exits
- wireguard: receive: use ring buffer for incoming handshakes
- wireguard: receive: drop handshakes if queue lock is contended
- wireguard: ratelimiter: use kvcalloc() instead of kvzalloc()
- i2c: stm32f7: flush TX FIFO upon transfer errors
- i2c: stm32f7: recover the bus on access timeout
- i2c: stm32f7: stop dma transfer in case of NACK
- i2c: cbus-gpio: set atomic transfer callback
- natsemi: xtensa: fix section mismatch warnings
- tcp: fix page frag corruption on page fault
- net: qlogic: qlcnic: Fix a NULL pointer dereference in
qlcnic_83xx_add_rings()
- net: mpls: Fix notifications when deleting a device
- siphash: use _unaligned version by default
- arm64: ftrace: add missing BTIs
- net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
- selftests: net: Correct case name
- mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode
- ASoC: tegra: Fix wrong value type in ADMAIF
- ASoC: tegra: Fix wrong value type in I2S
- ASoC: tegra: Fix wrong value type in DMIC
- ASoC: tegra: Fix wrong value type in DSPK
- ASoC: tegra: Fix kcontrol put callback in ADMAIF
- ASoC: tegra: Fix kcontrol put callback in I2S
- ASoC: tegra: Fix kcontrol put callback in DMIC
- ASoC: tegra: Fix kcontrol put callback in DSPK
- ASoC: tegra: Fix kcontrol put callback in AHUB
- rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle()
- rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
- ALSA: intel-dsp-config: add quirk for CML devices based on ES8336 codec
- net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no IRQ
is available
- net: marvell: mvpp2: Fix the computation of shared CPUs
- dpaa2-eth: destroy workqueue at the end of remove function
- net: annotate data-races on txq->xmit_lock_owner
- ipv4: convert fib_num_tclassid_users to atomic_t
- net/smc: fix wrong list_del in smc_lgr_cleanup_early
- net/rds: correct socket tunable error in rds_tcp_tune()
- drm/msm/a6xx: Allocate enough space for GMU registers
- drm/msm: Do hw_init() before capturing GPU state
- atlantic: Increase delay for fw transactions
- atlatnic: enable Nbase-t speeds with base-t
- atlantic: Fix to display FW bundle version instead of FW mac version.
- atlantic: Add missing DIDs and fix 115c.
- Remove Half duplex mode speed capabilities.
- atlantic: Fix statistics logic for production hardware
- atlantic: Remove warn trace message.
- KVM: x86/pmu: Fix reserved bits for AMD PerfEvtSeln register
- KVM: VMX: Set failure code in prepare_vmcs02()
- x86/sev: Fix SEV-ES INS/OUTS instructions for word, dword, and qword
- x86/entry: Use the correct fence macro after swapgs in kernel CR3
- x86/xen: Add xenpv_restore_regs_and_return_to_usermode()
- sched/uclamp: Fix rq->uclamp_max not set on first enqueue
- x86/entry: Add a fence for kernel entry SWAPGS in paranoid_entry()
- parisc: Fix KBUILD_IMAGE for self-extracting kernel
- parisc: Fix "make install" on newer debian releases
- vgacon: Propagate console boot parameters before calling `vc_resize'
- xhci: Fix commad ring abort, write all 64 bits to CRCR register.
- USB: NO_LPM quirk Lenovo Powered USB-C Travel Hub
- usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect
- x86/tsc: Add a timer to make sure TSC_adjust is always checked
- x86/tsc: Disable clocksource watchdog for TSC on qualified platorms
- x86/64/mm: Map all kernel memory into trampoline_pgd
- tty: serial: msm_serial: Deactivate RX DMA for polling support
- serial: pl011: Add ACPI SBSA UART match id
- serial: tegra: Change lower tolerance baud rate limit for tegra20 and
tegra30
- serial: core: fix transmit-buffer reset and memleak
- serial: 8250_pci: Fix ACCES entries in pci_serial_quirks array
- serial: 8250_pci: rewrite pericom_do_set_divisor()
- serial: 8250: Fix RTS modem control while in rs485 mode
- iwlwifi: mvm: retry init flow if failed
- parisc: Mark cr16 CPU clocksource unstable on all SMP machines
- net/tls: Fix authentication failure in CCM mode
- ALSA: usb-audio: Restrict rates for the shared clocks
- ALSA: usb-audio: Check available frames for the next packet size
- ALSA: usb-audio: Add spinlock to stop_urbs()
- ALSA: usb-audio: Avoid killing in-flight URBs during draining
- mac80211: fix throughput LED trigger
- x86/hyperv: Move required MSRs check to initial platform probing
- platform/x86: dell-wmi-descriptor: disable by default
- btrfs: silence lockdep when reading chunk tree during mount
- drm/amd/pm: Remove artificial freq level on Navi1x
- perf sort: Fix the 'weight' sort key behavior
- perf sort: Fix the 'ins_lat' sort key behavior
- perf sort: Fix the 'p_stage_cyc' sort key behavior
- tracing: Don't use out-of-sync va_list in event printing
- dma-buf: system_heap: Use 'for_each_sgtable_sg' in pages free flow
- drm/i915/dp: Perform 30ms delay after source OUI write
- KVM: SVM: move check for kvm_vcpu_apicv_active outside of
avic_vcpu_{put|load}
- KVM: fix avic_set_running for preemptable kernels
- KVM: x86/mmu: Fix TDP MMU page table level
- KVM: x86/mmu: Fix TLB flush range when handling disconnected pt
- KVM: x86: ignore APICv if LAPIC is not enabled
- KVM: nVMX: Abide to KVM_REQ_TLB_FLUSH_GUEST request on nested vmentry/vmexit
- KVM: x86: check PIR even for vCPUs with disabled APICv
- net: dsa: mv88e6xxx: Fix application of erratum 4.8 for 88E6393X
- net: dsa: mv88e6xxx: Drop unnecessary check in
mv88e6393x_serdes_erratum_4_6()
- net: dsa: mv88e6xxx: Save power by disabling SerDes trasmitter and receiver
- net: dsa: mv88e6xxx: Add fix for erratum 5.2 of 88E6393X family
- net: dsa: mv88e6xxx: Fix inband AN for 2500base-x on 88E6393X family
- net: dsa: mv88e6xxx: Link in pcs_get_state() if AN is bypassed
- iwlwifi: fix warnings produced by kernel debug options
- net: stmmac: Avoid DMA_CHAN_CONTROL write if no Split Header support
- octeontx2-af: Fix a memleak bug in rvu_mbox_init()
- drm/vc4: kms: Wait for the commit before increasing our clock rate
- drm/vc4: kms: Fix return code check
- drm/vc4: kms: Add missing drm_crtc_commit_put
- drm/vc4: kms: Clear the HVS FIFO commit pointer once done
- drm/vc4: kms: Don't duplicate pending commit
- drm/vc4: kms: Fix previous HVS commit wait
- KVM: x86/mmu: Skip tlb flush if it has been done in zap_gfn_range()
- KVM: SEV: initialize regions_list of a mirror VM
- preempt/dynamic: Fix setup_preempt_mode() return value
- KVM: SEV: Return appropriate error codes if SEV-ES scratch setup fails
- serial: 8250_bcm7271: UART errors after resuming from S2
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous
requests
- usb: cdnsp: Fix a NULL pointer dereference in cdnsp_endpoint_init()
- serial: liteuart: Fix NULL pointer dereference in ->remove()
- serial: liteuart: fix use-after-free and memleak on unbind
- serial: liteuart: fix minor-number leak on probe errors
* CVE-2022-23222
- bpf: Fix out of bounds access from invalid *_or_null type verification
- bpf: Don't promote bogus looking registers after null check.
- bpf, selftests: Add verifier test for mem_or_null register with offset.
-- Khalid Elmously <email address hidden> Thu, 03 Mar 2022 10:51:24 -0500
Available diffs
linux-gcp-5.13 (5.13.0-1015.18~20.04.1) focal; urgency=medium
* focal/linux-gcp-5.13: 5.13.0-1015.18~20.04.1 -proposed tracker
(LP: #1960045)
* Packaging resync (LP: #1786013)
- [Packaging] update variants
[ Ubuntu: 5.13.0-1015.18 ]
* impish/linux-gcp: 5.13.0-1015.18 -proposed tracker (LP: #1960046)
* impish/linux: 5.13.0-30.33 -proposed tracker (LP: #1960055)
* systemd/248.3-1ubuntu8.2 ADT test failure with linux/5.13.0-29.32
(LP: #1960034)
- Revert "block: avoid to quiesce queue in elevator_init_mq"
- Revert "blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and
disk_release()"
[ Ubuntu: 5.13.0-1014.17 ]
* impish/linux-gcp: 5.13.0-1014.17 -proposed tracker (LP: #1959230)
* impish/linux: 5.13.0-29.32 -proposed tracker (LP: #1959238)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/2022.01.31)
* CVE-2022-22942
- SAUCE: drm/vmwgfx: Fix stale file descriptors on failed usercopy
* CVE-2022-0330
- drm/i915: Flush TLBs before releasing backing store
* Impish update: upstream stable patchset 2022-01-05 (LP: #1956508)
- ACPI: Get acpi_device's parent from the parent field
- USB: serial: option: add Telit LE910S1 0x9200 composition
- USB: serial: option: add Fibocom FM101-GL variants
- usb: dwc2: gadget: Fix ISOC flow for elapsed frames
- usb: dwc2: hcd_queue: Fix use of floating point literal
- usb: dwc3: gadget: Ignore NoStream after End Transfer
- usb: dwc3: gadget: Check for L1/L2/U3 for Start Transfer
- usb: dwc3: gadget: Fix null pointer exception
- net: nexthop: fix null pointer dereference when IPv6 is not enabled
- usb: chipidea: ci_hdrc_imx: fix potential error pointer dereference in probe
- usb: typec: fusb302: Fix masking of comparator and bc_lvl interrupts
- usb: hub: Fix usb enumeration issue due to address0 race
- usb: hub: Fix locking issues with address0_mutex
- binder: fix test regression due to sender_euid change
- ALSA: ctxfi: Fix out-of-range access
- ALSA: hda/realtek: Add quirk for ASRock NUC Box 1100
- ALSA: hda/realtek: Fix LED on HP ProBook 435 G7
- media: cec: copy sequence field for the reply
- Revert "parisc: Fix backtrace to always include init funtion names"
- HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts
- staging/fbtft: Fix backlight
- staging: greybus: Add missing rwsem around snd_ctl_remove() calls
- staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
- fuse: release pipe buf after last use
- xen: don't continue xenstore initialization in case of errors
- xen: detect uninitialized xenbus in xenbus_init
- KVM: PPC: Book3S HV: Prevent POWER7/8 TLB flush flushing SLB
- tracing/uprobe: Fix uprobe_perf_open probes iteration
- tracing: Fix pid filtering when triggers are attached
- mmc: sdhci-esdhc-imx: disable CMDQ support
- mmc: sdhci: Fix ADMA for PAGE_SIZE >= 64KiB
- mdio: aspeed: Fix "Link is Down" issue
- powerpc/32: Fix hardlockup on vmap stack overflow
- PCI: aardvark: Deduplicate code in advk_pcie_rd_conf()
- PCI: aardvark: Implement re-issuing config requests on CRS response
- PCI: aardvark: Simplify initialization of rootcap on virtual bridge
- PCI: aardvark: Fix link training
- proc/vmcore: fix clearing user buffer by properly using clear_user()
- netfilter: ctnetlink: fix filtering with CTA_TUPLE_REPLY
- netfilter: ctnetlink: do not erase error code with EINVAL
- netfilter: ipvs: Fix reuse connection if RS weight is 0
- netfilter: flowtable: fix IPv6 tunnel addr match
- ARM: dts: BCM5301X: Fix I2C controller interrupt
- ARM: dts: BCM5301X: Add interrupt properties to GPIO node
- ARM: dts: bcm2711: Fix PCIe interrupts
- ASoC: qdsp6: q6routing: Conditionally reset FrontEnd Mixer
- ASoC: qdsp6: q6asm: fix q6asm_dai_prepare error handling
- ASoC: topology: Add missing rwsem around snd_ctl_remove() calls
- ASoC: codecs: wcd934x: return error code correctly from hw_params
- net: ieee802154: handle iftypes as u32
- firmware: arm_scmi: pm: Propagate return value to caller
- NFSv42: Don't fail clone() unless the OP_CLONE operation failed
- ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE
- drm/nouveau/acr: fix a couple NULL vs IS_ERR() checks
- scsi: mpt3sas: Fix kernel panic during drive powercycle test
- drm/vc4: fix error code in vc4_create_object()
- net: marvell: prestera: fix double free issue on err path
- iavf: Prevent changing static ITR values if adaptive moderation is on
- ALSA: intel-dsp-config: add quirk for JSL devices based on ES8336 codec
- mptcp: fix delack timer
- firmware: smccc: Fix check for ARCH_SOC_ID not implemented
- ipv6: fix typos in __ip6_finish_output()
- nfp: checking parameter process for rx-usecs/tx-usecs is invalid
- net: stmmac: retain PTP clock time during SIOCSHWTSTAMP ioctls
- net: ipv6: add fib6_nh_release_dsts stub
- net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group
- ice: fix vsi->txq_map sizing
- ice: avoid bpf_prog refcount underflow
- scsi: core: sysfs: Fix setting device state to SDEV_RUNNING
- scsi: scsi_debug: Zero clear zones at reset write pointer
- erofs: fix deadlock when shrink erofs slab
- net/smc: Ensure the active closing peer first closes clcsock
- mlxsw: Verify the accessed index doesn't exceed the array length
- mlxsw: spectrum: Protect driver from buggy firmware
- net: marvell: mvpp2: increase MTU limit when XDP enabled
- nvmet-tcp: fix incomplete data digest send
- net/ncsi : Add payload to be 32-bit aligned to fix dropped packets
- PM: hibernate: use correct mode for swsusp_close()
- drm/amd/display: Set plane update flags for all planes in reset
- tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited
flows
- lan743x: fix deadlock in lan743x_phy_link_status_change()
- net: phylink: Force link down and retrigger resolve on interface change
- net: phylink: Force retrigger in case of latched link-fail indicator
- net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk()
- net/smc: Fix loop in smc_listen
- nvmet: use IOCB_NOWAIT only if the filesystem supports it
- igb: fix netpoll exit with traffic
- MIPS: loongson64: fix FTLB configuration
- MIPS: use 3-level pgtable for 64KB page size on MIPS_VA_BITS_48
- tls: splice_read: fix record type check
- tls: fix replacing proto_ops
- net/sched: sch_ets: don't peek at classes beyond 'nbands'
- net: vlan: fix underflow for the real_dev refcnt
- net/smc: Don't call clcsock shutdown twice when smc shutdown
- net: hns3: fix VF RSS failed problem after PF enable multi-TCs
- net: mscc: ocelot: don't downgrade timestamping RX filters in SIOCSHWTSTAMP
- net: mscc: ocelot: correctly report the timestamping RX filters in ethtool
- sched/scs: Reset task stack state in bringup_cpu()
- f2fs: set SBI_NEED_FSCK flag when inconsistent node block found
- ceph: properly handle statfs on multifs setups
- iommu/amd: Clarify AMD IOMMUv2 initialization messages
- vhost/vsock: fix incorrect used length reported to the guest
- tracing: Check pid filtering when creating events
- xen: sync include/xen/interface/io/ring.h with Xen's newest version
- xen/blkfront: read response from backend only once
- xen/blkfront: don't take local copy of a request from the ring page
- xen/blkfront: don't trust the backend response data blindly
- xen/netfront: read response from backend only once
- xen/netfront: don't read data from request on the ring page
- xen/netfront: disentangle tx_skb_freelist
- xen/netfront: don't trust the backend response data blindly
- tty: hvc: replace BUG_ON() with negative return value
- net: stmmac: platform: fix build warning when with !CONFIG_PM_SLEEP
- drm/amdgpu/gfx9: switch to golden tsc registers for renoir+
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- USB: serial: pl2303: fix GC type detection
- usb: dwc3: core: Revise GHWPARAMS9 offset
- net: usb: Correct PHY handling of smsc95xx
- drm/amdgpu: IH process reset count when restart
- drm/nouveau: recognise GA106
- arm64: mm: Fix VM_BUG_ON(mm != &init_mm) for trans_pgd
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- NFSv42: Fix pagecache invalidation after COPY/CLONE
- ASoC: SOF: Intel: hda: fix hotplug when only codec is suspended
- media: v4l2-core: fix VIDIOC_DQEVENT handling on non-x86
- ASoC: codecs: lpass-rx-macro: fix HPHR setting CLSH mask
- firmware: arm_scmi: Fix base agent discover response
- ASoC: stm32: i2s: fix 32 bits channel length without mclk
- scsi: mpt3sas: Fix system going into read-only mode
- scsi: mpt3sas: Fix incorrect system timestamp
- drm/aspeed: Fix vga_pw sysfs output
- iavf: Fix refreshing iavf adapter stats on ethtool request
- iavf: Fix VLAN feature flags after VFR
- x86/pvh: add prototype for xen_pvh_init()
- xen/pvh: add missing prototype to header
- mptcp: use delegate action to schedule 3rd ack retrans
- net: ipa: kill ipa_cmd_pipeline_clear()
- arm64: uaccess: avoid blocking within critical sections
- tls splice: remove inappropriate flags checking for MSG_PEEK
- tls: splice_read: fix accessing pre-processed records
- net: stmmac: Disable Tx queues when reconfiguring the interface
- locking/rwsem: Make handoff bit handling more consistent
- perf: Ignore sigtrap for tracepoints destined for other tasks
- f2fs: quota: fix potential deadlock
- riscv: dts: microchip: fix board compatible
- riscv: dts: microchip: drop duplicated MMC/SDHC node
- cifs: nosharesock should not share socket with future sessions
- vdpa_sim: avoid putting an uninitialized iova_domain
- io_uring: fix soft lockup when call __io_remove_buffers
- firmware: arm_scmi: Fix type error assignment in voltage protocol
- firmware: arm_scmi: Fix type error in sensor protocol
- blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and
disk_release()
- block: avoid to quiesce queue in elevator_init_mq
- net/smc: Keep smc_close_final rc during active close
- net/sched: sch_ets: don't remove idle classes from the round-robin list
- HID: wacom: Reset expected and received contact counts at the same time
- HID: wacom: Ignore the confidence flag when a touch is removed
- net: usb: Correct reset handling of smsc95xx
- cifs: nosharesock should be set on new server
- net/packet: rx_owner_map depends on pg_vec
* net/mlx5e: EPERM on vlan 0 programming (LP: #1957753)
- net/mlx5e: Unblock setting vid 0 for VF in case PF isn't eswitch manager
* [SRU][I/J/OEM-5.13/OEM-5.14] Add basic support of MT7922 (LP: #1958151)
- mt76: mt7921: Add mt7922 support
- mt76: mt7921: add support for PCIe ID 0x0608/0x0616
- mt76: mt7921: introduce 160 MHz channel bandwidth support
- Bluetooth: btusb: Add protocol for MediaTek bluetooth devices(MT7922)
- Bluetooth: btusb: Add support for Foxconn MT7922A
* Pod traffic not taking advantage of interfaces with multiple tx queues
(LP: #1958155)
- veth: Do not record rx queue hint in veth_xmit
* [uacc-0623] hisi_sec2 fail to alloc uacce (LP: #1933301)
- crypto: hisilicon/qm - modify the uacce mode check
* ubunut_kernel_selftests: memory-hotplug: avoid spamming logs with
dump_page() (LP: #1941829)
- selftests: memory-hotplug: avoid spamming logs with dump_page(), ratio limit
hot-remove error test
* smartpqi: Update 20.04.4 to latest kernel.org patch level (LP: #1953689)
- scsi: smartpqi: Replace one-element array with flexible-array member
- scsi: smartpqi: Update device removal management
- scsi: smartpqi: Capture controller reason codes
- scsi: smartpqi: Update LUN reset handler
- scsi: smartpqi: Add TEST UNIT READY check for SANITIZE operation
- scsi: smartpqi: Avoid failing I/Os for offline devices
- scsi: smartpqi: Add extended report physical LUNs
- scsi: smartpqi: Fix boot failure during LUN rebuild
- scsi: smartpqi: Fix duplicate device nodes for tape changers
- scsi: smartpqi: Add 3252-8i PCI id
- scsi: smartpqi: Update version to 2.1.12-055
* CVE-2021-4083
- fget: check that the fd still exists after getting a ref to it
* CVE-2021-4155
- xfs: map unwritten blocks in XFS_IOC_{ALLOC, FREE}SP just like fallocate
-- Khalid Elmously <email address hidden> Wed, 16 Feb 2022 03:32:50 -0500
Available diffs
| Superseded in focal-security |
| Superseded in focal-updates |
| Deleted in focal-proposed (Reason: moved to -updates) |
linux-gcp-5.13 (5.13.0-1013.16~20.04.1) focal; urgency=medium
* focal/linux-gcp-5.13: 5.13.0-1013.16~20.04.1 -proposed tracker
(LP: #1955190)
* Packaging resync (LP: #1786013)
- [Packaging] update Ubuntu.md
[ Ubuntu: 5.13.0-1013.16 ]
* impish/linux-gcp: 5.13.0-1013.16 -proposed tracker (LP: #1955191)
* Impish update: upstream stable patchset 2021-12-09 (LP: #1954337)
- [Config] gcp: updateconfigs for ARCH_HAS_CC_PLATFORM
* amd_sfh: Null pointer dereference on early device init causes early panic
and fails to boot (LP: #1956519)
- HID: amd_sfh: Fix potential NULL pointer dereference
* impish: ddebs build take too long and times out (LP: #1957810)
- [Packaging] enforce xz compression for ddebs
* audio mute/ mic mute are not working on a HP machine (LP: #1955691)
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
* rtw88_8821ce causes freeze (LP: #1927808)
- rtw88: Disable PCIe ASPM while doing NAPI poll on 8821CE
* alsa/sdw: fix the audio sdw codec parsing logic in the acpi table
(LP: #1955686)
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- ALSA: hda: intel-sdw-acpi: go through HDAS ACPI at max depth of 2
* icmp_redirect from selftests fails on F/kvm (unary operator expected)
(LP: #1938964)
- selftests: icmp_redirect: pass xfail=0 to log_test()
* Impish update: upstream stable patchset 2021-12-17 (LP: #1955180)
- arm64: zynqmp: Do not duplicate flash partition label property
- arm64: zynqmp: Fix serial compatible string
- ARM: dts: sunxi: Fix OPPs node name
- arm64: dts: allwinner: h5: Fix GPU thermal zone node name
- arm64: dts: allwinner: a100: Fix thermal zone node name
- staging: wfx: ensure IRQ is ready before enabling it
- ARM: dts: NSP: Fix mpcore, mmc node names
- scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
- arm64: dts: rockchip: Disable CDN DP on Pinebook Pro
- arm64: dts: hisilicon: fix arm,sp805 compatible string
- RDMA/bnxt_re: Check if the vlan is valid before reporting
- bus: ti-sysc: Add quirk handling for reinit on context lost
- bus: ti-sysc: Use context lost quirk for otg
- usb: musb: tusb6010: check return value after calling
platform_get_resource()
- usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
- ARM: dts: ux500: Skomer regulator fixes
- staging: rtl8723bs: remove possible deadlock when disconnect (v2)
- ARM: BCM53016: Specify switch ports for Meraki MR32
- arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency
- arm64: dts: qcom: ipq6018: Fix qcom,controlled-remotely property
- arm64: dts: freescale: fix arm,sp805 compatible string
- ASoC: SOF: Intel: hda-dai: fix potential locking issue
- clk: imx: imx6ul: Move csi_sel mux to correct base register
- ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect
- scsi: advansys: Fix kernel pointer leak
- ALSA: intel-dsp-config: add quirk for APL/GLK/TGL devices based on ES8336
codec
- firmware_loader: fix pre-allocated buf built-in firmware use
- ARM: dts: omap: fix gpmc,mux-add-data type
- usb: host: ohci-tmio: check return value after calling
platform_get_resource()
- ARM: dts: ls1021a: move thermal-zones node out of soc/
- ARM: dts: ls1021a-tsn: use generic "jedec,spi-nor" compatible for flash
- ALSA: ISA: not for M68K
- tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
- MIPS: sni: Fix the build
- scsi: scsi_debug: Fix out-of-bound read in resp_readcap16()
- scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs()
- scsi: target: Fix ordered tag handling
- scsi: target: Fix alua_tg_pt_gps_count tracking
- iio: imu: st_lsm6dsx: Avoid potential array overflow in st_lsm6dsx_set_odr()
- powerpc/5200: dts: fix memory node unit name
- ARM: dts: qcom: fix memory and mdio nodes naming for RB3011
- ALSA: gus: fix null pointer dereference on pointer block
- powerpc/dcr: Use cmplwi instead of 3-argument cmpli
- powerpc/8xx: Fix Oops with STRICT_KERNEL_RWX without DEBUG_RODATA_TEST
- sh: check return code of request_irq
- maple: fix wrong return value of maple_bus_init().
- f2fs: fix up f2fs_lookup tracepoints
- f2fs: fix to use WHINT_MODE
- sh: fix kconfig unmet dependency warning for FRAME_POINTER
- sh: math-emu: drop unused functions
- sh: define __BIG_ENDIAN for math-emu
- f2fs: compress: disallow disabling compress on non-empty compressed file
- f2fs: fix incorrect return value in f2fs_sanity_check_ckpt()
- clk: ingenic: Fix bugs with divided dividers
- clk/ast2600: Fix soc revision for AHB
- clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk
- mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set
- sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
- perf/x86/vlbr: Add c->flags to vlbr event constraints
- blkcg: Remove extra blkcg_bio_issue_init
- tracing/histogram: Do not copy the fixed-size char array field over the
field size
- perf bpf: Avoid memory leak from perf_env__insert_btf()
- perf bench futex: Fix memory leak of perf_cpu_map__new()
- perf tests: Remove bash construct from record+zstd_comp_decomp.sh
- drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame
- tcp: Fix uninitialized access in skb frags array for Rx 0cp.
- tracing: Add length protection to histogram string copies
- net: ipa: disable HOLB drop when updating timer
- net: bnx2x: fix variable dereferenced before check
- bnxt_en: reject indirect blk offload when hw-tc-offload is off
- tipc: only accept encrypted MSG_CRYPTO msgs
- sock: fix /proc/net/sockstat underflow in sk_clone_lock()
- net/smc: Make sure the link_id is unique
- iavf: Fix return of set the new channel count
- iavf: check for null in iavf_fix_features
- iavf: free q_vectors before queues in iavf_disable_vf
- iavf: Fix failure to exit out from last all-multicast mode
- iavf: prevent accidental free of filter structure
- iavf: validate pointers
- iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset
- iavf: Fix for setting queues to 0
- MIPS: generic/yamon-dt: fix uninitialized variable error
- mips: bcm63xx: add support for clk_get_parent()
- mips: lantiq: add support for clk_get_parent()
- platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()'
- net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove()
- net/mlx5: Lag, update tracker when state change event received
- net/mlx5: E-Switch, return error if encap isn't supported
- scsi: core: sysfs: Fix hang when device state is set via sysfs
- net: sched: act_mirred: drop dst for the direction from egress to ingress
- net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove
- net: virtio_net_hdr_to_skb: count transport header in UFO
- i40e: Fix correct max_pkt_size on VF RX queue
- i40e: Fix NULL ptr dereference on VSI filter sync
- i40e: Fix changing previously set num_queue_pairs for PFs
- i40e: Fix ping is lost after configuring ADq on VF
- i40e: Fix warning message and call stack during rmmod i40e driver
- i40e: Fix creation of first queue by omitting it if is not power of two
- i40e: Fix display error code in dmesg
- NFC: reorganize the functions in nci_request
- NFC: reorder the logic in nfc_{un,}register_device
- NFC: add NCI_UNREG flag to eliminate the race
- e100: fix device suspend/resume
- KVM: PPC: Book3S HV: Use GLOBAL_TOC for kvmppc_h_set_dabr/xdabr()
- pinctrl: qcom: sdm845: Enable dual edge errata
- perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server
- perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
- s390/kexec: fix return code handling
- net: stmmac: dwmac-rk: Fix ethernet on rk3399 based devices
- tun: fix bonding active backup with arp monitoring
- hexagon: export raw I/O routines for modules
- hexagon: clean up timer-regs.h
- tipc: check for null after calling kmemdup
- ipc: WARN if trying to remove ipc object which is absent
- mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag
- x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails
- powerpc/8xx: Fix pinned TLBs with CONFIG_STRICT_KERNEL_RWX
- scsi: qla2xxx: Fix mailbox direction flags in qla2xxx_get_adapter_id()
- s390/kexec: fix memory leak of ipl report buffer
- block: Check ADMIN before NICE for IOPRIO_CLASS_RT
- KVM: nVMX: don't use vcpu->arch.efer when checking host state on nested
state load
- udf: Fix crash after seekdir
- net: stmmac: socfpga: add runtime suspend/resume callback for stratix10
platform
- btrfs: fix memory ordering between normal and ordered work functions
- parisc/sticon: fix reverse colors
- cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
- drm/amd/display: Update swizzle mode enums
- drm/udl: fix control-message timeout
- drm/nouveau: Add a dedicated mutex for the clients list
- drm/nouveau: use drm_dev_unplug() during device removal
- drm/nouveau: clean up all clients on device removal
- drm/i915/dp: Ensure sink rate values are always valid
- drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga
and dvi connectors
- scsi: ufs: core: Fix task management completion
- scsi: ufs: core: Fix task management completion timeout race
- RDMA/netlink: Add __maybe_unused to static inline in C file
- selinux: fix NULL-pointer dereference when hashtab allocation fails
- ASoC: DAPM: Cover regression by kctl change notification fix
- usb: max-3421: Use driver data instead of maintaining a list of bound
devices
- ice: Delete always true check of PF pointer
- fs: export an inode_update_time helper
- btrfs: update device path inode time instead of bd_inode
- x86/Kconfig: Fix an unused variable error in dell-smm-hwmon
- ALSA: hda: hdac_ext_stream: fix potential locking issues
- ALSA: hda: hdac_stream: fix potential locking issue in
snd_hdac_stream_assign()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- ARM: dts: BCM5301X: Fix nodes names
- ARM: dts: BCM5301X: Fix MDIO mux binding
- arm64: dts: broadcom: bcm4908: Move reboot syscon out of bus
- scsi: pm80xx: Fix memory leak during rmmod
- staging: rtl8723bs: remove a third possible deadlock
- arm64: dts: qcom: sdm845: Fix qcom,controlled-remotely property
- arm64: dts: ls1012a: Add serial alias for ls1012a-rdb
- ALSA: usb-audio: disable implicit feedback sync for Behringer UFX1204 and
UFX1604
- ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ
- ASoC: rt5651: Use IRQF_NO_AUTOEN when requesting the IRQ
- scsi: smartpqi: Add controller handshake during kdump
- arm64: dts: imx8mm-kontron: Fix reset delays for ethernet PHY
- ASoC: Intel: soc-acpi: add missing quirk for TGL SDCA single amp
- ASoC: Intel: sof_sdw: add missing quirk for Dell SKU 0A45
- HID: multitouch: disable sticky fingers for UPERFECT Y
- ALSA: usb-audio: Add support for the Pioneer DJM 750MK2 Mixer/Soundcard
- ASoC: rt5682: fix a little pop while playback
- iommu/vt-d: Do not falsely log intel_iommu is unsupported kernel option
- scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine
- scsi: lpfc: Fix link down processing to address NULL pointer dereference
- memory: tegra20-emc: Add runtime dependency on devfreq governor module
- arm64: dts: qcom: Fix node name of rpm-msg-ram device nodes
- clk: at91: sama7g5: remove prescaler part of master clock
- f2fs: fix wrong condition to trigger background checkpoint correctly
- sched/fair: Prevent dead task groups from regaining cfs_rq's
- net/ipa: ipa_resource: Fix wrong for loop range
- nl80211: fix radio statistics in survey dump
- mac80211: fix monitor_sdata RCU/locking assertions
- net: ipa: HOLB register sometimes must be written twice
- selftests: gpio: fix gpio compiling error
- iavf: don't clear a lock we don't hold
- iavf: Restore VLAN filters after link down
- bpf: Fix toctou on read-only map's constant scalar tracking
- udp: Validate checksum in udp_read_sock()
- btrfs: make 1-bit bit-fields of scrub_page unsigned int
- net/mlx5e: kTLS, Fix crash in RX resync flow
- net/mlx5e: Wait for concurrent flow deletion during neigh/fib events
- net/mlx5: E-Switch, Fix resetting of encap mode when entering switchdev
- net/mlx5: Update error handler for UCTX and UMEM
- net/mlx5e: CT, Fix multiple allocations and memleak of mod acts
- riscv: fix building external modules
- powerpc: clean vdso32 and vdso64 directories
- pinctrl: qcom: sm8350: Correct UFS and SDC offsets
- perf/x86/intel/uncore: Fix IIO event constraints for Snowridge
- blk-cgroup: fix missing put device in error path from blkg_conf_pref()
- shm: extend forced shm destroy to support objects from several IPC nses
- hugetlb, userfaultfd: fix reservation restore on userfaultfd error
- kmap_local: don't assume kmap PTEs are linear arrays in memory
- [Config] updateconfigs for KMAP_LOCAL_NON_LINEAR_PTE_ARRAY
- x86/boot: Pull up cmdline preparation and early param parsing
- x86/sgx: Fix free page accounting
- KVM: x86: Assume a 64-bit hypercall for guests with protected state
- KVM: x86: Fix uninitialized eoi_exit_bitmap usage in vcpu_load_eoi_exitmap()
- powerpc/signal32: Fix sigset_t copy
- Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"
- s390/setup: avoid reserving memory above identity mapping
- KVM: SEV: Disallow COPY_ENC_CONTEXT_FROM if target has created vCPUs
- spi: fix use-after-free of the add_lock mutex
- Drivers: hv: balloon: Use VMBUS_RING_SIZE() wrapper for dm_ring_size
- fs: handle circular mappings correctly
- net: stmmac: Fix signed/unsigned wreckage
- mac80211: drop check for DONT_REORDER in __ieee80211_select_queue
- drm/amd/display: Limit max DSC target bpp for specific monitors
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- drm/i915/dp: Ensure max link params are always valid
- drm/i915: Fix type1 DVI DP dual mode adapter heuristic for modern platforms
- drm/amd/pm: avoid duplicate powergate/ungate setting
- ice: Fix VF true promiscuous mode
- net: add and use skb_unclone_keeptruesize() helper
* Impish update: upstream stable patchset 2021-12-16 (LP: #1955070)
- fortify: Explicitly disable Clang support
- block: Add a helper to validate the block size
- loop: Use blk_validate_block_size() to validate block size
- bootconfig: init: Fix memblock leak in xbc_make_cmdline()
- net: stmmac: dwmac-rk: fix unbalanced pm_runtime_enable warnings
- parisc/entry: fix trace test in syscall exit path
- PCI/MSI: Destroy sysfs before freeing entries
- PCI/MSI: Deal with devices lying about their MSI mask capability
- PCI: Add MSI masking quirk for Nvidia ION AHCI
- erofs: remove the occupied parameter from z_erofs_pagevec_enqueue()
- erofs: fix unsafe pagevec reuse of hooked pclusters
- perf/core: Avoid put_page() when GUP fails
- thermal: Fix NULL pointer dereferences in of_thermal_ functions
- selftests/x86/iopl: Adjust to the faked iopl CLI/STI usage
- KVM: Fix steal time asm constraints
- Bluetooth: btusb: Add 0x0b05:0x190e Realtek 8761BU (ASUS BT500) device.
- Bluetooth: btusb: Add support for TP-Link UB500 Adapter
- string: uninline memcpy_and_pad
- btrfs: introduce btrfs_is_data_reloc_root
- btrfs: zoned: add a dedicated data relocation block group
- btrfs: zoned: only allow one process to add pages to a relocation inode
- btrfs: zoned: use regular writes for relocation
- btrfs: check for relocation inodes on zoned btrfs in should_nocow
- btrfs: zoned: allow preallocation for relocation inodes
* CVE-2021-4090
- NFSD: Fix exposure in nfsd4_decode_bitmap()
* AMD: Suspend not working when some cores are disabled through cpufreq
(LP: #1954930)
- ACPI: processor idle: Allow playing dead in C3 state
* system crash when removing ipmi_msghandler module (LP: #1950666)
- ipmi: Move remove_work to dedicated workqueue
- ipmi: msghandler: Make symbol 'remove_work_wq' static
* [UBUNTU 20.04] KVM hardware diagnose data improvements for guest kernel -
kernel part (LP: #1953334)
- KVM: s390: add debug statement for diag 318 CPNC data
* New fix for jack detection after resume on CS8409 sound driver
(LP: #1954773)
- ALSA: hda/cs8409: Set PMSG_ON earlier inside cs8409 driver
* s2idle suspend failure: amd_pmc AMDI0005:00: SMU response timed out
(LP: #1954633)
- platform/x86: amd-pmc: Fix s2idle failures on certain AMD laptops
* mt7921e: Failed to start WM firmware (LP: #1954300)
- Bluetooth: btusb: Handle download_firmware failure cases
- SAUCE: Bluetooth: btusb: Return error code when getting patch status failed
* [SRU][I/J/OEM-5.13/OEM-5.14] Fix pci port lost when hotplug dock
(LP: #1954646)
- PCI: Re-enable Downstream Port LTR after reset or hotplug
* [SRU][I/OEM-5.13/OEM-5.14] Fix USB3.1 hotplug after S3 on AMD renoir
(LP: #1952817)
- drm/amd/display: Look at firmware version to determine using dmub on dcn21
* Thinkpad E14 Gen2: Kernel panic with trackpad and trackpoint enabled
(LP: #1945590)
- Input: elantech - fix stack out of bound access in
elantech_change_report_id()
* [SRU][Ubuntu 21.10][Broadcom] mpi3mr driver submission request
(LP: #1933359)
- scsi: mpi3mr: Add mpi30 Rev-R headers and Kconfig
- scsi: mpi3mr: Base driver code
- scsi: mpi3mr: Create operational request and reply queue pair
- scsi: mpi3mr: Add support for queue command processing
- scsi: mpi3mr: Add support for internal watchdog thread
- scsi: mpi3mr: Add support for device add/remove event handling
- scsi: mpi3mr: Add support for PCIe device event handling
- scsi: mpi3mr: Additional event handling
- scsi: mpi3mr: Add support for recovering controller
- scsi: mpi3mr: Add support for timestamp sync with firmware
- scsi: mpi3mr: Print IOC info for debugging
- scsi: mpi3mr: Add bios_param SCSI host template hook
- scsi: mpi3mr: Implement SCSI error handler hooks
- scsi: mpi3mr: Add change queue depth support
- scsi: mpi3mr: Allow certain commands during pci-remove hook
- scsi: mpi3mr: Hardware workaround for UNMAP commands to NVMe drives
- scsi: mpi3mr: Add support for threaded ISR
- scsi: mpi3mr: Complete support for soft reset
- scsi: mpi3mr: Print pending host I/Os for debugging
- scsi: mpi3mr: Wait for pending I/O completions upon detection of VD I/O
timeout
- scsi: mpi3mr: Add support for PM suspend and resume
- scsi: mpi3mr: Add support for DSN secure firmware check
- scsi: mpi3mr: Add EEDP DIF DIX support
- scsi: mpi3mr: Add event handling debug prints
- [Config] updateconfigs for CONFIG_SCSI_MPI3MR
* Add F81966 watchdog support (LP: #1949063)
- SAUCE: watchdog: f71808e_wdt: Add F81966 support
* Impish update: upstream stable patchset 2021-12-09 (LP: #1954337)
- xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good
delay
- usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
- Input: iforce - fix control-message timeout
- Input: i8042 - Add quirk for Fujitsu Lifebook T725
- libata: fix read log timeout value
- ocfs2: fix data corruption on truncate
- scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
- scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
- scsi: qla2xxx: Fix use after free in eh_abort path
- mmc: mtk-sd: Add wait dma stop done flow
- mmc: dw_mmc: Dont wait for DRTO on Write RSP error
- exfat: fix incorrect loading of i_blocks for large files
- parisc: Fix set_fixmap() on PA1.x CPUs
- parisc: Fix ptrace check on syscall return
- tpm: Check for integer overflow in tpm2_map_response_body()
- firmware/psci: fix application of sizeof to pointer
- crypto: s5p-sss - Add error handling in s5p_aes_probe()
- media: rkvdec: Do not override sizeimage for output format
- media: ite-cir: IR receiver stop working after receive overflow
- media: rkvdec: Support dynamic resolution changes
- media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
- media: v4l2-ioctl: Fix check_ext_ctrls
- ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
- ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
- ALSA: hda/realtek: Add quirk for Clevo PC70HS
- ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
- ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
- ALSA: hda/realtek: Add quirk for ASUS UX550VE
- ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
- ALSA: ua101: fix division by zero at probe
- ALSA: 6fire: fix control and bulk message timeouts
- ALSA: line6: fix control and interrupt message timeouts
- ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
- ALSA: usb-audio: Add registration quirk for JBL Quantum 400
- ALSA: hda: Free card instance properly at probe errors
- ALSA: synth: missing check for possible NULL after the call to kstrdup
- ALSA: timer: Fix use-after-free problem
- ALSA: timer: Unconditionally unlink slave instances, too
- ext4: fix lazy initialization next schedule time computation in more
granular unit
- ext4: ensure enough credits in ext4_ext_shift_path_extents
- ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
- fuse: fix page stealing
- x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
- x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
- x86/irq: Ensure PI wakeup handler is unregistered before module unload
- ASoC: soc-core: fix null-ptr-deref in snd_soc_del_component_unlocked()
- ALSA: hda/realtek: Fixes HP Spectre x360 15-eb1xxx speakers
- cavium: Return negative value when pci_alloc_irq_vectors() fails
- scsi: qla2xxx: Return -ENOMEM if kzalloc() fails
- scsi: qla2xxx: Fix unmap of already freed sgl
- mISDN: Fix return values of the probe function
- cavium: Fix return values of the probe function
- sfc: Export fibre-specific supported link modes
- sfc: Don't use netif_info before net_device setup
- hyperv/vmbus: include linux/bitops.h
- ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode
- reset: socfpga: add empty driver allowing consumers to probe
- mmc: winbond: don't build on M68K
- drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
- fcnal-test: kill hanging ping/nettest binaries on cleanup
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT
- bpf: Prevent increasing bpf_jit_limit above max
- gpio: mlxbf2.c: Add check for bgpio_init failure
- xen/netfront: stop tx queues during live migration
- nvmet-tcp: fix a memory leak when releasing a queue
- spi: spl022: fix Microwire full duplex mode
- net: multicast: calculate csum of looped-back and forwarded packets
- watchdog: Fix OMAP watchdog early handling
- drm: panel-orientation-quirks: Add quirk for GPD Win3
- block: schedule queue restart after BLK_STS_ZONE_RESOURCE
- nvmet-tcp: fix header digest verification
- r8169: Add device 10ec:8162 to driver r8169
- vmxnet3: do not stop tx queues after netif_device_detach()
- nfp: bpf: relax prog rejection for mtu check through max_pkt_offset
- net/smc: Fix smc_link->llc_testlink_time overflow
- net/smc: Correct spelling mistake to TCPF_SYN_RECV
- btrfs: clear MISSING device status bit in btrfs_close_one_device
- btrfs: fix lost error handling when replaying directory deletes
- btrfs: call btrfs_check_rw_degradable only if there is a missing device
- KVM: VMX: Unregister posted interrupt wakeup handler on hardware unsetup
- ia64: kprobes: Fix to pass correct trampoline address to the handler
- selinux: fix race condition when computing ocontext SIDs
- hwmon: (pmbus/lm25066) Add offset coefficients
- regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is
disabled
- regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-
dvs-idx property
- EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
- mwifiex: fix division by zero in fw download path
- ath6kl: fix division by zero in send path
- ath6kl: fix control-message timeout
- ath10k: fix control-message timeout
- ath10k: fix division by zero in send path
- PCI: Mark Atheros QCA6174 to avoid bus reset
- rtl8187: fix control-message timeouts
- evm: mark evm_fixmode as __ro_after_init
- ifb: Depend on netfilter alternatively to tc
- wcn36xx: Fix HT40 capability for 2Ghz band
- wcn36xx: Fix tx_status mechanism
- wcn36xx: Fix (QoS) null data frame bitrate/modulation
- PM: sleep: Do not let "syscore" devices runtime-suspend during system
transitions
- mwifiex: Read a PCI register after writing the TX ring write pointer
- mwifiex: Try waking the firmware until we get an interrupt
- libata: fix checking of DMA state
- wcn36xx: handle connection loss indication
- rsi: fix occasional initialisation failure with BT coex
- rsi: fix key enabled check causing unwanted encryption for vap_id > 0
- rsi: fix rate mask set leading to P2P failure
- rsi: Fix module dev_oper_mode parameter description
- perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server
- perf/x86/intel/uncore: Fix Intel ICX IIO event constraints
- RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
- signal: Remove the bogus sigkill_pending in ptrace_stop
- memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode
- signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
- soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id
- soc: fsl: dpio: use the combined functions to protect critical zone
- mtd: rawnand: socrates: Keep the driver compatible with on-die ECC engines
- power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
- power: supply: max17042_battery: use VFSOC for capacity when no rsns
- KVM: arm64: Extract ESR_ELx.EC only
- KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
- can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
- can: j1939: j1939_can_recv(): ignore messages with invalid source address
- powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
- ring-buffer: Protect ring_buffer_reset() from reentrancy
- serial: core: Fix initializing and restoring termios speed
- ifb: fix building without CONFIG_NET_CLS_ACT
- ALSA: mixer: oss: Fix racy access to slots
- ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
- xen/balloon: add late_initcall_sync() for initial ballooning done
- ovl: fix use after free in struct ovl_aio_req
- PCI: pci-bridge-emul: Fix emulation of W1C bits
- PCI: cadence: Add cdns_plat_pcie_probe() missing return
- PCI: aardvark: Do not clear status bits of masked interrupts
- PCI: aardvark: Fix checking for link up via LTSSM state
- PCI: aardvark: Do not unmask unused interrupts
- PCI: aardvark: Fix reporting Data Link Layer Link Active
- PCI: aardvark: Fix configuring Reference clock
- PCI: aardvark: Fix return value of MSI domain .alloc() method
- PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
- PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated
bridge
- PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
- PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
- PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge
- quota: check block number when reading the block in quota file
- quota: correct error number in free_dqentry()
- pinctrl: core: fix possible memory leak in pinctrl_enable()
- coresight: cti: Correct the parameter for pm_runtime_put
- iio: dac: ad5446: Fix ad5622_write() return value
- iio: ad5770r: make devicetree property reading consistent
- USB: serial: keyspan: fix memleak on probe errors
- serial: 8250: fix racy uartclk update
- most: fix control-message timeouts
- USB: iowarrior: fix control-message timeouts
- USB: chipidea: fix interrupt deadlock
- power: supply: max17042_battery: Clear status bits in interrupt handler
- dma-buf: WARN on dmabuf release with pending attachments
- drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
- drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
- drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
- Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
- Bluetooth: fix use-after-free error in lock_sock_nested()
- drm/panel-orientation-quirks: add Valve Steam Deck
- rcutorture: Avoid problematic critical section nesting on PREEMPT_RT
- platform/x86: wmi: do not fail if disabling fails
- MIPS: lantiq: dma: add small delay after reset
- MIPS: lantiq: dma: reset correct number of channel
- locking/lockdep: Avoid RCU-induced noinstr fail
- net: sched: update default qdisc visibility after Tx queue cnt changes
- rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop
- smackfs: Fix use-after-free in netlbl_catmap_walk()
- ath11k: Align bss_chan_info structure with firmware
- x86: Increase exception stack sizes
- mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
- mwifiex: Properly initialize private structure on interface type changes
- fscrypt: allow 256-bit master keys with AES-256-XTS
- drm/amdgpu: Fix MMIO access page fault
- ath11k: Avoid reg rules update during firmware recovery
- ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED
- ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets
- ath10k: high latency fixes for beacon buffer
- media: mt9p031: Fix corrupted frame after restarting stream
- media: netup_unidvb: handle interrupt properly according to the firmware
- media: atomisp: Fix error handling in probe
- media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
- media: uvcvideo: Set capability in s_param
- media: uvcvideo: Return -EIO for control errors
- media: uvcvideo: Set unique vdev name based in type
- media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
- media: s5p-mfc: Add checking to s5p_mfc_probe().
- media: imx: set a media_device bus_info string
- media: mceusb: return without resubmitting URB in case of -EPROTO error.
- ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
- rtw88: fix RX clock gate setting while fifo dump
- brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
- media: rcar-csi2: Add checking to rcsi2_start_receiver()
- ipmi: Disable some operations during a panic
- fs/proc/uptime.c: Fix idle time reporting in /proc/uptime
- ACPICA: Avoid evaluating methods too early during system resume
- media: ipu3-imgu: imgu_fmt: Handle properly try
- media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
- media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
- net-sysfs: try not to restart the syscall if it will fail eventually
- tracefs: Have tracefs directories not set OTH permission bits by default
- ath: dfs_pattern_detector: Fix possible null-pointer dereference in
channel_detector_create()
- mmc: moxart: Fix reference count leaks in moxart_probe
- iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
- ACPI: battery: Accept charges over the design capacity as full
- drm/amdkfd: fix resume error when iommu disabled in Picasso
- net: phy: micrel: make *-skew-ps check more lenient
- leaking_addresses: Always print a trailing newline
- drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()
- block: bump max plugged deferred size from 16 to 32
- md: update superblock after changing rdev flags in state_store
- memstick: r592: Fix a UAF bug when removing the driver
- lib/xz: Avoid overlapping memcpy() with invalid input with in-place
decompression
- lib/xz: Validate the value before assigning it to an enum variable
- workqueue: make sysfs of unbound kworker cpumask more clever
- tracing/cfi: Fix cmp_entries_* functions signature mismatch
- mt76: mt7915: fix an off-by-one bound check
- mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
- block: remove inaccurate requeue check
- media: allegro: ignore interrupt if mailbox is not initialized
- nvmet: fix use-after-free when a port is removed
- nvmet-rdma: fix use-after-free when a port is removed
- nvmet-tcp: fix use-after-free when a port is removed
- nvme: drop scan_lock and always kick requeue list when removing namespaces
- PM: hibernate: Get block device exclusively in swsusp_check()
- selftests: kvm: fix mismatched fclose() after popen()
- selftests/bpf: Fix perf_buffer test on system with offline cpus
- iwlwifi: mvm: disable RX-diversity in powersave
- smackfs: use __GFP_NOFAIL for smk_cipso_doi()
- ARM: clang: Do not rely on lr register for stacktrace
- gre/sit: Don't generate link-local addr if addr_gen_mode is
IN6_ADDR_GEN_MODE_NONE
- gfs2: Cancel remote delete work asynchronously
- gfs2: Fix glock_hash_walk bugs
- ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
- vrf: run conntrack only in context of lower/physdev for locally generated
packets
- net: annotate data-race in neigh_output()
- ACPI: AC: Quirk GK45 to skip reading _PSR
- btrfs: reflink: initialize return value to 0 in btrfs_extent_same()
- btrfs: do not take the uuid_mutex in btrfs_rm_device
- spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in
bcm_qspi_probe()
- wcn36xx: Correct band/freq reporting on RX
- x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
- drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled
- selftests/core: fix conflicting types compile error for close_range()
- parisc: fix warning in flush_tlb_all
- task_stack: Fix end_of_stack() for architectures with upwards-growing stack
- erofs: don't trigger WARN() when decompression fails
- parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
- parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
- netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream
state
- selftests/bpf: Fix strobemeta selftest regression
- Bluetooth: fix init and cleanup of sco_conn.timeout_work
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
- MIPS: lantiq: dma: fix burst length for DEU
- x86/xen: Mark cpu_bringup_and_idle() as dead_end_function
- drm/v3d: fix wait for TMU write combiner flush
- virtio-gpu: fix possible memory allocation failure
- lockdep: Let lock_is_held_type() detect recursive read as read
- net: net_namespace: Fix undefined member in key_remove_domain()
- cgroup: Make rebind_subsystems() disable v2 controllers all at once
- wcn36xx: Fix Antenna Diversity Switching
- wilc1000: fix possible memory leak in cfg_scan_result()
- Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
- crypto: caam - disable pkc for non-E SoCs
- rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
- net: dsa: rtl8366rb: Fix off-by-one bug
- ath11k: fix some sleeping in atomic bugs
- ath11k: Avoid race during regd updates
- ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status
- ath11k: Fix memory leak in ath11k_qmi_driver_event_work
- ath10k: Fix missing frame timestamp for beacon/probe-resp
- ath10k: sdio: Add missing BH locking around napi_schdule()
- drm/ttm: stop calling tt_swapin in vm_access
- arm64: mm: update max_pfn after memory hotplug
- drm/amdgpu: fix warning for overflow check
- media: em28xx: add missing em28xx_close_extension
- media: cxd2880-spi: Fix a null pointer dereference on error handling path
- media: dvb-usb: fix ununit-value in az6027_rc_query
- media: v4l2-ioctl: S_CTRL output the right value
- media: TDA1997x: handle short reads of hdmi info frame.
- media: mtk-vpu: Fix a resource leak in the error handling path of
'mtk_vpu_probe()'
- media: radio-wl1273: Avoid card name truncation
- media: si470x: Avoid card name truncation
- media: tm6000: Avoid card name truncation
- media: cx23885: Fix snd_card_free call on null card pointer
- kprobes: Do not use local variable when creating debugfs file
- crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
- cpuidle: Fix kobject memory leaks in error paths
- media: em28xx: Don't use ops->suspend if it is NULL
- ath9k: Fix potential interrupt storm on queue reset
- PM: EM: Fix inefficient states detection
- EDAC/amd64: Handle three rank interleaving mode
- rcu: Always inline rcu_dynticks_task*_{enter,exit}()
- netfilter: nft_dynset: relax superfluous check on set updates
- media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
- crypto: qat - detect PFVF collision after ACK
- crypto: qat - disregard spurious PFVF interrupts
- hwrng: mtk - Force runtime pm ops for sleep ops
- b43legacy: fix a lower bounds test
- b43: fix a lower bounds test
- gve: Recover from queue stall due to missed IRQ
- mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
- mmc: sdhci-omap: Fix context restore
- memstick: avoid out-of-range warning
- memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
- net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
- hwmon: Fix possible memleak in __hwmon_device_register()
- hwmon: (pmbus/lm25066) Let compiler determine outer dimension of
lm25066_coeff
- ath10k: fix max antenna gain unit
- kernel/sched: Fix sched_fork() access an invalid sched_task_group
- tcp: switch orphan_count to bare per-cpu counters
- drm/msm: potential error pointer dereference in init()
- drm/msm: uninitialized variable in msm_gem_import()
- net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
- media: ir_toy: assignment to be16 should be of correct type
- mmc: mxs-mmc: disable regulator on error and in the remove function
- platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
- mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi
- mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
- mt76: mt7915: fix possible infinite loop release semaphore
- mt76: mt7915: fix sta_rec_wtbl tag len
- mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req()
- rsi: stop thread firstly in rsi_91x_init() error handling
- mwifiex: Send DELBA requests according to spec
- net: enetc: unmap DMA in enetc_send_cmd()
- phy: micrel: ksz8041nl: do not use power down mode
- nvme-rdma: fix error code in nvme_rdma_setup_ctrl
- PM: hibernate: fix sparse warnings
- clocksource/drivers/timer-ti-dm: Select TIMER_OF
- x86/sev: Fix stack type check in vc_switch_off_ist()
- drm/msm: Fix potential NULL dereference in DPU SSPP
- smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
- KVM: selftests: Fix nested SVM tests when built with clang
- bpftool: Avoid leaking the JSON writer prepared for program metadata
- libbpf: Fix overflow in BTF sanity checks
- libbpf: Fix BTF header parsing checks
- s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
- KVM: s390: pv: avoid double free of sida page
- KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
- irq: mips: avoid nested irq_enter()
- tpm: fix Atmel TPM crash caused by too frequent queries
- tpm_tis_spi: Add missing SPI ID
- libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED()
- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
- spi: spi-rpc-if: Check return value of rpcif_sw_init()
- samples/kretprobes: Fix return value if register_kretprobe() failed
- KVM: s390: Fix handle_sske page fault handling
- libertas_tf: Fix possible memory leak in probe and disconnect
- libertas: Fix possible memory leak in probe and disconnect
- wcn36xx: add proper DMA memory barriers in rx path
- wcn36xx: Fix discarded frames due to wrong sequence number
- drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
- selftests/bpf: Fix fd cleanup in sk_lookup test
- net: amd-xgbe: Toggle PLL settings during rate change
- net: phylink: avoid mvneta warning when setting pause parameters
- crypto: pcrypt - Delay write to padata->info
- selftests/bpf: Fix fclose/pclose mismatch in test_progs
- udp6: allow SO_MARK ctrl msg to affect routing
- ibmvnic: don't stop queue in xmit
- ibmvnic: Process crqs after enabling interrupts
- cgroup: Fix rootcg cpu.stat guest double counting
- bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.
- bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.
- of: unittest: fix EXPECT text for gpio hog errors
- iio: st_sensors: Call st_sensors_power_enable() from bus drivers
- iio: st_sensors: disable regulators after device unregistration
- RDMA/rxe: Fix wrong port_cap_flags
- ARM: dts: BCM5301X: Fix memory nodes names
- clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
- ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
- arm64: dts: rockchip: Fix GPU register width for RK3328
- ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
- RDMA/bnxt_re: Fix query SRQ failure
- arm64: dts: ti: k3-j721e-main: Fix "max-virtual-functions" in PCIe EP nodes
- arm64: dts: ti: k3-j721e-main: Fix "bus-range" upto 256 bus number for PCIe
- arm64: dts: meson-g12a: Fix the pwm regulator supply properties
- arm64: dts: meson-g12b: Fix the pwm regulator supply properties
- bus: ti-sysc: Fix timekeeping_suspended warning on resume
- ARM: dts: at91: tse850: the emac<->phy interface is rmii
- scsi: dc395: Fix error case unwinding
- MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
- JFS: fix memleak in jfs_mount
- arm64: dts: qcom: msm8916: Fix Secondary MI2S bit clock
- arm64: dts: renesas: beacon: Fix Ethernet PHY mode
- arm64: dts: qcom: pm8916: Remove wrong reg-names for rtc@6000
- ALSA: hda: Reduce udelay() at SKL+ position reporting
- ALSA: hda: Fix hang during shutdown due to link reset
- ALSA: hda: Use position buffer for SKL+ again
- soundwire: debugfs: use controller id and link_id for debugfs
- scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp()
- driver core: Fix possible memory leak in device_link_add()
- arm: dts: omap3-gta04a4: accelerometer irq fix
- ASoC: SOF: topology: do not power down primary core during topology removal
- soc/tegra: Fix an error handling path in tegra_powergate_power_up()
- memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
- clk: at91: check pmc node status before registering syscore ops
- video: fbdev: chipsfb: use memset_io() instead of memset()
- powerpc: fix unbalanced node refcount in check_kvm_guest()
- serial: 8250_dw: Drop wrong use of ACPI_PTR()
- usb: gadget: hid: fix error code in do_config()
- power: supply: rt5033_battery: Change voltage values to µV
- power: supply: max17040: fix null-ptr-deref in max17040_probe()
- scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
- RDMA/mlx4: Return missed an error if device doesn't support steering
- usb: musb: select GENERIC_PHY instead of depending on it
- staging: most: dim2: do not double-register the same device
- staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
- pinctrl: renesas: checker: Fix off-by-one bug in drive register check
- ARM: dts: stm32: Reduce DHCOR SPI NOR frequency to 50 MHz
- ARM: dts: stm32: fix SAI sub nodes register range
- ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
- ASoC: cs42l42: Correct some register default values
- ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
- soc: qcom: rpmhpd: Make power_on actually enable the domain
- usb: typec: STUSB160X should select REGMAP_I2C
- iio: adis: do not disabe IRQs in 'adis_init()'
- scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer
- serial: imx: fix detach/attach of serial console
- usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init
- usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be disabled
- usb: dwc2: drd: reset current session before setting the new one
- firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available()
- soc: qcom: apr: Add of_node_put() before return
- pinctrl: equilibrium: Fix function addition in multiple groups
- phy: qcom-qusb2: Fix a memory leak on probe
- phy: ti: gmii-sel: check of_get_address() for failure
- phy: qcom-snps: Correct the FSEL_MASK
- serial: xilinx_uartps: Fix race condition causing stuck TX
- clk: at91: sam9x60-pll: use DIV_ROUND_CLOSEST_ULL
- HID: u2fzero: clarify error check and length calculations
- HID: u2fzero: properly handle timeouts in usb_submit_urb
- powerpc/44x/fsp2: add missing of_node_put
- ASoC: cs42l42: Use device_property API instead of of_property
- ASoC: cs42l42: Correct configuring of switch inversion from ts-inv
- virtio_ring: check desc == NULL when using indirect with packed
- mips: cm: Convert to bitfield API to fix out-of-bounds access
- power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
- apparmor: fix error check
- rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
- nfsd: don't alloc under spinlock in rpc_parse_scope_id
- i2c: mediatek: fixing the incorrect register offset
- NFS: Fix dentry verifier races
- pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
- drm/plane-helper: fix uninitialized variable reference
- PCI: aardvark: Don't spam about PIO Response Status
- PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
- opp: Fix return in _opp_add_static_v2()
- NFS: Fix deadlocks in nfs_scan_commit_list()
- fs: orangefs: fix error return code of orangefs_revalidate_lookup()
- mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
- PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation
- mtd: core: don't remove debugfs directory if device is in use
- remoteproc: Fix a memory leak in an error handling path in
'rproc_handle_vdev()'
- rtc: rv3032: fix error handling in rv3032_clkout_set_rate()
- dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
- NFS: Fix up commit deadlocks
- NFS: Fix an Oops in pnfs_mark_request_commit()
- Fix user namespace leak
- auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
- auxdisplay: ht16k33: Connect backlight to fbdev
- auxdisplay: ht16k33: Fix frame buffer device blanking
- soc: fsl: dpaa2-console: free buffer before returning from
dpaa2_console_read
- netfilter: nfnetlink_queue: fix OOB when mac header was cleared
- dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
- signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
- m68k: set a default value for MEMORY_RESERVE
- watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
- ar7: fix kernel builds for compiler test
- scsi: qla2xxx: Changes to support FCP2 Target
- scsi: qla2xxx: Relogin during fabric disturbance
- scsi: qla2xxx: Fix gnl list corruption
- scsi: qla2xxx: Turn off target reset during issue_lip
- NFSv4: Fix a regression in nfs_set_open_stateid_locked()
- i2c: xlr: Fix a resource leak in the error handling path of
'xlr_i2c_probe()'
- xen-pciback: Fix return in pm_ctrl_init()
- net: davinci_emac: Fix interrupt pacing disable
- ethtool: fix ethtool msg len calculation for pause stats
- openrisc: fix SMP tlb flush NULL pointer dereference
- net: vlan: fix a UAF in vlan_dev_real_dev()
- ice: Fix replacing VF hardware MAC to existing MAC filter
- ice: Fix not stopping Tx queues for VFs
- ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
- drm/nouveau/svm: Fix refcount leak bug and missing check against null bug
- net: phy: fix duplex out of sync problem while changing settings
- bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
- mfd: core: Add missing of_node_put for loop iteration
- can: mcp251xfd: mcp251xfd_chip_start(): fix error handling for
mcp251xfd_chip_rx_int_enable()
- mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and
zs_unregister_migration()
- zram: off by one in read_block_state()
- perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
- llc: fix out-of-bound array index in llc_sk_dev_hash()
- nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
- arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
- bpf, sockmap: Remove unhash handler for BPF sockmap usage
- bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
- gve: Fix off by one in gve_tx_timeout()
- seq_file: fix passing wrong private data
- net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
- net: hns3: fix kernel crash when unload VF while it is being reset
- net: hns3: allow configure ETS bandwidth of all TCs
- net: stmmac: allow a tc-taprio base-time of zero
- vsock: prevent unnecessary refcnt inc for nonblocking connect
- net/smc: fix sk_refcnt underflow on linkdown and fallback
- cxgb4: fix eeprom len when diagnostics not implemented
- selftests/net: udpgso_bench_rx: fix port argument
- ARM: 9155/1: fix early early_iounmap()
- ARM: 9156/1: drop cc-option fallbacks for architecture selection
- MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL
- x86/mce: Add errata workaround for Skylake SKX37
- posix-cpu-timers: Clear task::posix_cputimers_work in copy_process()
- irqchip/sifive-plic: Fixup EOI failed when masked
- f2fs: should use GFP_NOFS for directory inodes
- net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
- 9p/net: fix missing error check in p9_check_errors
- memcg: prohibit unconditional exceeding the limit of dying tasks
- powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
- mm, oom: do not trigger out_of_memory from the #PF
- mfd: dln2: Add cell for initializing DLN2 ADC
- video: backlight: Drop maximum brightness override for brightness zero
- s390/cio: check the subchannel validity for dev_busid
- s390/tape: fix timer initialization in tape_std_assign()
- s390/ap: Fix hanging ioctl caused by orphaned replies
- s390/cio: make ccw_device_dma_* more robust
- mtd: rawnand: ams-delta: Keep the driver compatible with on-die ECC engines
- mtd: rawnand: xway: Keep the driver compatible with on-die ECC engines
- mtd: rawnand: mpc5121: Keep the driver compatible with on-die ECC engines
- mtd: rawnand: gpio: Keep the driver compatible with on-die ECC engines
- mtd: rawnand: pasemi: Keep the driver compatible with on-die ECC engines
- mtd: rawnand: orion: Keep the driver compatible with on-die ECC engines
- mtd: rawnand: plat_nand: Keep the driver compatible with on-die ECC engines
- mtd: rawnand: au1550nd: Keep the driver compatible with on-die ECC engines
- powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
- powerpc/85xx: fix timebase sync issue when CONFIG_HOTPLUG_CPU=n
- drm/sun4i: Fix macros in sun8i_csc.h
- PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
- PCI: aardvark: Fix PCIe Max Payload Size setting
- SUNRPC: Partial revert of commit 6f9f17287e78
- ath10k: fix invalid dma_addr_t token assignment
- mmc: moxart: Fix null pointer dereference on pointer host
- selftests/bpf: Fix also no-alu32 strobemeta selftest
- arch/cc: Introduce a function to check for confidential computing features
- x86/sev: Add an x86 version of cc_platform_has()
- [Config] updateconfigs for ARCH_HAS_CC_PLATFORM
- x86/sev: Make the #VC exception stacks part of the default stacks storage
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does not
run
- scsi: lpfc: Don't release final kref on Fport node while ABTS outstanding
- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines
- ce/gf100: fix incorrect CE0 address calculation on some GPUs
- x86/insn-eval: Make 0 a valid RIP for insn_get_effective_ip()
- x86/iopl: Fake iopl(3) CLI/STI usage
- KVM: arm64: Report corrupted refcount at EL2
- ASoC: cs42l42: Ensure 0dB full scale volume is used for headsets
- ptp: fix error print of ptp_kvm on X86_64 platform
- net: mscc: ocelot: Add of_node_put() before goto
- spi: altera: Change to dynamic allocation of spi id
- bpf: Define bpf_jit_alloc_exec_limit for riscv JIT
- net: hns3: ignore reset event before initialization process is done
- tools/testing/selftests/vm/split_huge_page_test.c: fix application of sizeof
to pointer
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ
handling
- ipmi:watchdog: Set panic count to proper value on a panic
- md/raid1: only allocate write behind bio for WriteMostly device
- platform/surface: aggregator_registry: Add support for Surface Laptop Studio
- mt76: mt7615: fix skb use-after-free on mac reset
- HID: surface-hid: Use correct event registry for managing HID events
- HID: surface-hid: Allow driver matching for target ID 1 devices
- perf/x86/intel/uncore: Fix invalid unit check
- soc: samsung: exynos-pmu: Fix compilation when nothing selects
CONFIG_MFD_CORE
- iio: core: fix double free in iio_device_unregister_sysfs()
- KVM: x86: Fix recording of guest steal time / preempted status
- KVM: nVMX: Handle dynamic MSR intercept toggling
- cifs: To match file servers, make sure the server hostname matches
- cifs: set a minimum of 120s for next dns resolution
- coresight: trbe: Fix incorrect access of the sink specific data
- coresight: trbe: Defer the probe on offline CPUs
- iio: buffer: check return value of kstrdup_const()
- iio: buffer: Fix memory leak in iio_buffers_alloc_sysfs_and_mask()
- iio: buffer: Fix memory leak in __iio_buffer_alloc_sysfs_and_mask()
- iio: buffer: Fix memory leak in iio_buffer_register_legacy_sysfs_groups()
- drivers: iio: dac: ad5766: Fix dt property name
- Documentation:devicetree:bindings:iio:dac: Fix val
- crypto: aesni - check walk.nbytes instead of err
- x86/mm/64: Improve stack overflow warnings
- spi: Check we have a spi_device_id for each DT compatible
- drm/amd/display: Fix null pointer dereference for encoders
- selftests: net: fib_nexthops: Wait before checking reported idle time
- media: vidtv: Fix memory leak in remove
- media: videobuf2: rework vb2_mem_ops API
- media: rcar-vin: Use user provided buffers when starting
- ice: Move devlink port to PF/VF struct
- media: imx-jpeg: Fix possible null pointer dereference
- tracing: Disable "other" permission bits in the tracefs files
- drm/amd/display: fix null pointer deref when plugging in display
- thermal/core: Fix null pointer dereference in thermal_release()
- thermal/drivers/tsens: Add timeout to get_temp_tsens_valid
- floppy: fix calling platform_device_unregister() on invalid drives
- locking/rwsem: Disable preemption for spinning region
- iwlwifi: change all JnP to NO-160 configuration
- drm/amdgpu/pm: properly handle sclk for profiling modes on vangogh
- arm64: vdso32: suppress error message for 'make mrproper'
- can: bittiming: can_fixup_bittiming(): change type of tseg1 and alltseg to
unsigned int
- tools/latency-collector: Use correct size when writing queue_full_warning
- wcn36xx: Fix packet drop on resume
- Revert "wcn36xx: Enable firmware link monitoring"
- ftrace: do CPU checking after preemption disabled
- perf/x86/intel: Fix ICL/SPR INST_RETIRED.PREC_DIST encodings
- fbdev/efifb: Release PCI device's runtime PM ref during FB destroy
- drm/bridge: anx7625: Propagate errors from sp_tx_rst_aux()
- libbpf: Don't crash on object files with no symbol tables
- objtool: Handle __sanitize_cov*() tail calls
- net: phylink: don't call netif_carrier_off() with NULL netdev
- spi: Fixed division by zero warning
- bnxt_en: Check devlink allocation and registration status
- qed: Don't ignore devlink allocation failures
- fortify: Fix dropped strcpy() compile-time write overflow check
- cfg80211: always free wiphy specific regdomain
- net: dsa: rtl8366: Fix a bug in deleting VLANs
- media: meson-ge2d: Fix rotation parameter changes detection in
'ge2d_s_ctrl()'
- media: imx258: Fix getting clock frequency
- media: mtk-vcodec: venc: fix return value when start_streaming fails
- media: imx-jpeg: Fix the error handling path of 'mxc_jpeg_probe()'
- media: i2c: ths8200 needs V4L2_ASYNC
- scs: Release kasan vmalloc poison in scs_free process
- ath10k: Don't always treat modem stop events as crashes
- x86/insn: Use get_unaligned() instead of memcpy()
- crypto: ccree - avoid out-of-range warnings from clang
- gve: Track RX buffer allocation failures
- crypto: octeontx2 - set assoclen in aead_do_fallback()
- thermal/core: fix a UAF bug in __thermal_cooling_device_register()
- drm/msm: fix potential NULL dereference in cleanup
- block: ataflop: fix breakage introduced at blk-mq refactoring
- drm/amdkfd: Fix an inappropriate error handling in allloc memory of gpu
- mt76: mt7915: fix info leak in mt7915_mcu_set_pre_cal()
- mt76: connac: fix mt76_connac_gtk_rekey_tlv usage
- mt76: fix build error implicit enumeration conversion
- mt76: mt7921: fix survey-dump reporting
- mt76: mt7921: Fix out of order process by invalid event pkt
- mt76: mt7915: fix potential overflow of eeprom page index
- mt76: mt7915: fix bit fields for HT rate idx
- mt76: mt7921: fix dma hang in rmmod
- mt76: connac: fix GTK rekey offload failure on WPA mixed mode
- mt76: overwrite default reg_ops if necessary
- mt76: mt7921: report HE MU radiotap
- mt76: mt7921: fix firmware usage of RA info using legacy rates
- mt76: mt7921: fix kernel warning from cfg80211_calculate_bitrate
- mt76: mt7921: always wake device if necessary in debugfs
- mt76: mt7921: fix retrying release semaphore without end
- mt76: mt7615: fix monitor mode tear down crash
- mt76: connac: fix possible NULL pointer dereference in
mt76_connac_get_phy_mode_v2
- iwlwifi: mvm: reset PM state on unsuccessful resume
- nbd: Fix use-after-free in pid_show
- crypto: tcrypt - fix skcipher multi-buffer tests for 1420B blocks
- libbpf: Fix memory leak in btf__dedup()
- mt76: mt7615: mt7622: fix ibss and meshpoint
- mm: add vma_lookup(), update find_vma_intersection() comments
- s390/gmap: validate VMA in __gmap_zap()
- s390/mm: validate VMA in PGSTE manipulation functions
- s390/mm: fix VMA and page table handling code in storage key handling
functions
- s390/uv: fully validate the VMA before calling follow_page()
- ARM: 9142/1: kasan: work around LPAE build warning
- ath10k: fix module load regression with iram-recovery feature
- block: ataflop: more blk-mq refactoring fixes
- blk-cgroup: synchronize blkg creation against policy deactivation
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- wcn36xx: Channel list update before hardware scan
- selftests/bpf: Fix memory leak in test_ima
- net: bridge: fix uninitialized variables when BRIDGE_CFM is disabled
- selftests: net: bridge: update IGMP/MLD membership interval value
- skmsg: Lose offset info in sk_psock_skb_ingress
- arm64: dts: meson: sm1: add Ethernet PHY reset line for ODROID-C4/HC4
- arm64: dts: broadcom: bcm4908: Fix UART clock name
- scsi: pm80xx: Fix lockup in outbound queue management
- arm64: dts: ti: j7200-main: Fix "vendor-id"/"device-id" properties of pcie
node
- arm64: dts: ti: j7200-main: Fix "bus-range" upto 256 bus number for PCIe
- soc: qcom: llcc: Disable MMUHWT retention
- iommu/mediatek: Fix out-of-range warning with clang
- iommu/dma: Fix arch_sync_dma for map
- power: reset: at91-reset: check properly the return value of devm_of_iomap
- scsi: megaraid_sas: Fix concurrent access to ISR between IRQ polling and
real interrupt
- powerpc/mem: Fix arch/powerpc/mm/mem.c:53:12: error: no previous prototype
for 'create_section_mapping'
- powerpc/paravirt: correct preempt debug splat in vcpu_is_preempted()
- powerpc/perf: Fix cycles/instructions as PM_CYC/PM_INST_CMPL in power10
- ARM: dts: stm32: fix STUSB1600 Type-C irq level on stm32mp15xx-dkx
- ASoC: cs42l42: Always configure both ASP TX channels
- iio: buffer: Fix double-free in iio_buffers_alloc_sysfs_and_mask()
- soundwire: bus: stop dereferencing invalid slave pointer
- scsi: lpfc: Wait for successful restart of SLI3 adapter during host sg_reset
- powerpc/booke: Disable STRICT_KERNEL_RWX, DEBUG_PAGEALLOC and KFENCE
- soc: qcom: rpmhpd: fix sm8350_mxc's peer domain
- arm64: dts: qcom: sdm845: Use RPMH_CE_CLK macro directly
- arm64: dts: qcom: sdm845: Fix Qualcomm crypto engine bus clock
- ASoC: topology: Fix stub for snd_soc_tplg_component_remove()
- phy: Sparx5 Eth SerDes: Fix return value check in sparx5_serdes_probe()
- clk: at91: clk-master: check if div or pres is zero
- clk: at91: clk-master: fix prescaler logic
- powerpc/nohash: Fix __ptep_set_access_flags() and ptep_set_wrprotect()
- RDMA/hns: Modify the value of MAX_LP_MSG_LEN to meet hardware compatibility
- serial: cpm_uart: Protect udbg definitions by CONFIG_SERIAL_CPM_CONSOLE
- RDMA/core: Require the driver to set the IOVA correctly during rereg_mr
- mtd: rawnand: intel: Fix potential buffer overflow in probe
- NFS: Default change_attr_type to NFS4_CHANGE_TYPE_IS_UNDEFINED
- NFS: Don't set NFS_INO_DATA_INVAL_DEFER and NFS_INO_INVALID_DATA
- NFS: Ignore the directory size when marking for revalidation
- drm/bridge/lontium-lt9611uxc: fix provided connector suport
- Input: st1232 - increase "wait ready" timeout
- dmaengine: at_xdmac: call at_xdmac_axi_config() on resume path
- dmaengine: stm32-dma: fix stm32_dma_get_max_width
- scsi: target: core: Remove from tmr_list during LUN unlink
- gpio: realtek-otto: fix GPIO line IRQ offset
- nbd: fix max value for 'first_minor'
- nbd: fix possible overflow for 'first_minor' in nbd_dev_add()
- kselftests/net: add missed icmp.sh test to Makefile
- net: dsa: tag_ocelot: break circular dependency with ocelot switch lib
driver
- net: dsa: felix: fix broken VLAN-tagged PTP under VLAN-aware bridge
- PCI: j721e: Fix j721e_pcie_probe() error path
- nvdimm/btt: do not call del_gendisk() if not needed
- block/ataflop: use the blk_cleanup_disk() helper
- block/ataflop: add registration bool before calling del_gendisk()
- block/ataflop: provide a helper for cleanup up an atari disk
- ataflop: remove ataflop_probe_lock mutex
- mfd: altera-sysmgr: Fix a mistake caused by resource_size conversion
- can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path
- arm64: arm64_ftr_reg->name may not be a human-readable string
- bpf, sockmap: sk_skb data_end access incorrect when src_reg = dst_reg
- dmaengine: stm32-dma: fix burst in case of unaligned memory address
- drm/i915/fb: Fix rounding error in subsampled plane size calculation
- net: dsa: mv88e6xxx: Don't support >1G speeds on 6191X on ports other than
10
- net: hns3: fix ROCE base interrupt vector initialization bug
- net: hns3: fix pfc packet number incorrect after querying pfc parameters
- net: ethernet: ti: cpsw_ale: Fix access to un-initialized memory
- net: marvell: mvpp2: Fix wrong SerDes reconfiguration order
- smb3: do not error on fsync when readonly
- parisc: Fix backtrace to always include init funtion names
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for
user page
- MIPS: fix duplicated slashes for Platform file path
- KVM: x86: move guest_pv_has out of user_access section
- f2fs: include non-compressed blocks in compr_written_block
- f2fs: fix UAF in f2fs_available_free_memory
- dmaengine: ti: k3-udma: Set bchan to NULL if a channel request fail
- dmaengine: ti: k3-udma: Set r/tchan or rflow to NULL if request fail
- dmaengine: bestcomm: fix system boot lockups
- mm/filemap.c: remove bogus VM_BUG_ON
- io-wq: fix queue stalling race
- io-wq: serialize hash clear with wakeup
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- remoteproc: elf_loader: Fix loading segment when is_iomem true
- remoteproc: Fix the wrong default value of is_iomem
- remoteproc: imx_rproc: Fix ignoring mapping vdev regions
- remoteproc: imx_rproc: Fix rsc-table name
- mtd: rawnand: fsmc: Fix use of SM ORDER
- powerpc/32e: Ignore ESR in instruction storage interrupt handler
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- pinctrl: amd: Add irq field data
- media: videobuf2: always set buffer vb2 pointer
* Faulty Elantech Trackpoint firmware unusable as it causes sudden cursor jump
to an edge/corner on Lenovo Thinkpad X13, T14s, A475 --> Apply kernel patch
to mitigate the FW bug (LP: #1936295) // Impish update: upstream stable
patchset 2021-12-09 (LP: #1954337)
- Input: elantench - fix misreporting trackpoint coordinates
* Impish update: upstream stable patchset 2021-11-29 (LP: #1952665)
- ARM: 9132/1: Fix __get_user_check failure with ARM KASAN images
- ARM: 9133/1: mm: proc-macros: ensure *_tlb_fns are 4B aligned
- ARM: 9134/1: remove duplicate memcpy() definition
- ARM: 9138/1: fix link warning with XIP + frame-pointer
- ARM: 9139/1: kprobes: fix arch_init_kprobes() prototype
- ARM: 9141/1: only warn about XIP address when not compile testing
- usbnet: sanity check for maxpacket
- usbnet: fix error return code in usbnet_probe()
- Revert "pinctrl: bcm: ns: support updated DT binding as syscon subnode"
- pinctrl: amd: disable and mask interrupts on probe
- ata: sata_mv: Fix the error handling of mv_chip_id()
- nfc: port100: fix using -ERRNO as command type mask
- net/tls: Fix flipped sign in tls_err_abort() calls
- mmc: vub300: fix control-message timeouts
- mmc: cqhci: clear HALT state after CQE enable
- mmc: mediatek: Move cqhci init behind ungate clock
- mmc: dw_mmc: exynos: fix the finding clock sample value
- mmc: sdhci: Map more voltage level to SDHCI_POWER_330
- mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning
circuit
- ocfs2: fix race between searching chunks and release journal_head from
buffer_head
- nvme-tcp: fix H2CData PDU send accounting (again)
- cfg80211: scan: fix RCU in cfg80211_add_nontrans_list()
- cfg80211: fix management registrations locking
- net: lan78xx: fix division by zero in send path
- mm, thp: bail out early in collapse_file for writeback page
- drm/amdgpu: fix out of bounds write
- cgroup: Fix memory leak caused by missing cgroup_bpf_offline
- riscv, bpf: Fix potential NULL dereference
- tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function
- bpf: Fix potential race in tail call compatibility check
- bpf: Fix error usage of map_fd and fdget() in generic_map_update_batch()
- IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
- IB/hfi1: Fix abba locking issue with sc_disable()
- nvmet-tcp: fix data digest pointer calculation
- nvme-tcp: fix data digest pointer calculation
- nvme-tcp: fix possible req->offset corruption
- octeontx2-af: Display all enabled PF VF rsrc_alloc entries.
- RDMA/mlx5: Set user priority for DCT
- arm64: dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node
- reset: brcmstb-rescal: fix incorrect polarity of status bit
- regmap: Fix possible double-free in regcache_rbtree_exit()
- net: batman-adv: fix error handling
- net-sysfs: initialize uid and gid before calling net_ns_get_ownership
- cfg80211: correct bridge/4addr mode check
- net: Prevent infinite while loop in skb_tx_hash()
- RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string
- gpio: xgs-iproc: fix parsing of ngpios property
- nios2: Make NIOS2_DTB_SOURCE_BOOL depend on !COMPILE_TEST
- mlxsw: pci: Recycle received packet upon allocation failure
- net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume
fails
- net: ethernet: microchip: lan743x: Fix dma allocation failure by using
dma_set_mask_and_coherent
- net: nxp: lpc_eth.c: avoid hang when bringing interface down
- net/tls: Fix flipped sign in async_wait.err assignment
- phy: phy_ethtool_ksettings_get: Lock the phy for consistency
- phy: phy_ethtool_ksettings_set: Move after phy_start_aneg
- phy: phy_start_aneg: Add an unlocked version
- phy: phy_ethtool_ksettings_set: Lock the PHY while changing settings
- sctp: use init_tag from inithdr for ABORT chunk
- sctp: fix the processing for INIT_ACK chunk
- sctp: fix the processing for COOKIE_ECHO chunk
- sctp: add vtag check in sctp_sf_violation
- sctp: add vtag check in sctp_sf_do_8_5_1_E_sa
- sctp: add vtag check in sctp_sf_ootb
- KVM: s390: clear kicked_mask before sleeping again
- KVM: s390: preserve deliverable_mask in __airqs_kick_single_vcpu
- scsi: ufs: ufs-exynos: Correct timeout value setting registers
- riscv: fix misalgned trap vector base address
- riscv: Fix asan-stack clang build
- perf script: Check session->header.env.arch before using it
- mmc: tmio: reenable card irqs after the reset callback
- mmc: sdhci-pci: Read card detect from ACPI for Intel Merrifield
- block: Fix partition check for host-aware zoned block devices
- ftrace/nds32: Update the proto for ftrace_trace_function to match
ftrace_stub
- mm: hwpoison: remove the unnecessary THP check
- mm: filemap: check if THP has hwpoisoned subpage for PMD page fault
- arm64: dts: imx8mm-kontron: Fix polarity of reg_rst_eth2
- arm64: dts: imx8mm-kontron: Fix CAN SPI clock frequency
- arm64: dts: imx8mm-kontron: Fix connection type for VSC8531 RGMII PHY
- arm64: dts: imx8mm-kontron: Set lower limit of VDD_SNVS to 800 mV
- arm64: dts: imx8mm-kontron: Make sure SOC and DRAM supply voltages are
correct
- mac80211: mesh: fix HE operation element length check
- drm/ttm: fix memleak in ttm_transfered_destroy
- drm/i915: Convert unconditional clflush to drm_clflush_virt_range()
- drm/i915: Catch yet another unconditioal clflush
- drm/i915/dp: Skip the HW readout of DPCD on disabled encoders
- octeontx2-af: Fix possible null pointer dereference.
- ice: Respond to a NETDEV_UNREGISTER event for LAG
- RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR
- net: hns3: fix pause config problem after autoneg disabled
- net: ethernet: microchip: lan743x: Fix skb allocation failure
- sctp: fix the processing for INIT chunk
- bpf: Use kvmalloc for map values in syscall
- bpf: Move BPF_MAP_TYPE for INODE_STORAGE and TASK_STORAGE outside of
CONFIG_NET
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- scsi: ibmvfc: Fix up duplicate response detection
- riscv: Do not re-populate shadow memory with kasan_populate_early_shadow
- KVM: x86: switch pvclock_gtod_sync_lock to a raw spinlock
- KVM: SEV-ES: fix another issue with string I/O VMGEXITs
- KVM: x86: Take srcu lock in post_kvm_run_save()
- scsi: core: Put LLD module refcnt after SCSI device is released
- sfc: Fix reading non-legacy supported link modes
- vrf: Revert "Reset skb conntrack connection..."
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
- Revert "xhci: Set HCD flag to defer primary roothub registration"
- Revert "usb: core: hcd: Add support for deferring roothub registration"
- mm: khugepaged: skip huge page collapse for special files
- Revert "drm/ttm: fix memleak in ttm_transfered_destroy"
- ARM: 9120/1: Revert "amba: make use of -1 IRQs warn"
- Revert "wcn36xx: Disable bmps when encryption is disabled"
- ALSA: usb-audio: Add Schiit Hel device to mixer map quirk table
- ALSA: usb-audio: Add Audient iD14 to mixer map quirk table
- drm/i915: Remove memory frequency calculation
- drm/amdgpu: revert "Add autodump debugfs node for gpu reset v8"
- drm/amd/display: Revert "Directly retrain link from debugfs"
- Revert "drm/i915/gt: Propagate change in error status to children on unhold"
- KVM: x86/mmu: Add helpers to do full reserved SPTE checks w/ generic MMU
- KVM: x86: avoid warning with -Wbitwise-instead-of-logical
- Revert "x86/kvm: fix vcpu-id indexed array sizes"
- usb: ehci: handshake CMD_RUN instead of STS_HALT
- usb: gadget: Mark USB_FSL_QE broken on 64-bit
- usb: musb: Balance list entry in musb_gadget_queue
- usb-storage: Add compatibility quirk flags for iODD 2531/2541
- binder: don't detect sender/target during buffer cleanup
- staging: rtl8712: fix use-after-free in rtl8712_dl_fw
- isofs: Fix out of bound access for corrupted isofs image
- comedi: dt9812: fix DMA buffers on stack
- comedi: ni_usb6501: fix NULL-deref in command paths
- comedi: vmk80xx: fix transfer-buffer overflows
- comedi: vmk80xx: fix bulk-buffer overflow
- comedi: vmk80xx: fix bulk and interrupt message timeouts
- staging: r8712u: fix control-message timeout
- staging: rtl8192u: fix control-message timeouts
- media: staging/intel-ipu3: css: Fix wrong size comparison imgu_css_fw_init
- rsi: fix control-message timeout
- ALSA: pcm: Check mmap capability of runtime dma buffer at first
- ALSA: pci: cs46xx: Fix set up buffer type properly
- Revert "proc/wchan: use printk format instead of lookup_symbol_name()"
- binder: use euid from cred instead of using task
* Impish update: upstream stable patchset 2021-11-29 (LP: #1952665) //
CVE-2021-42327 was fixed by:
- drm/amdgpu: Fix even more out of bound writes from debugfs
[ Ubuntu: 5.13.0-1012.15 ]
* CVE-2022-0185
- SAUCE: vfs: Out-of-bounds write of heap buffer in fs_context.c
- SAUCE: vfs: test that one given mount param is not larger than PAGE_SIZE
[ Ubuntu: 5.13.0-1010.12 ]
* amdgpu hangs for 90 seconds at a time in 5.13.0-23, but 5.13.0-22 works
(LP: #1956401)
- drm/amdkfd: fix boot failure when iommu is disabled in Picasso.
* OOB write on BPF_RINGBUF (LP: #1956585)
- SAUCE: bpf: prevent helper argument PTR_TO_ALLOC_MEM to have offset other
than 0
-- Khalid Elmously <email address hidden> Thu, 27 Jan 2022 00:14:31 -0500
linux-gcp-5.13 (5.13.0-1012.15~20.04.1) focal; urgency=medium
[ Ubuntu: 5.13.0-1012.15 ]
* CVE-2022-0185
- SAUCE: vfs: Out-of-bounds write of heap buffer in fs_context.c
- SAUCE: vfs: test that one given mount param is not larger than PAGE_SIZE
[ Ubuntu: 5.13.0-1010.12 ]
* amdgpu hangs for 90 seconds at a time in 5.13.0-23, but 5.13.0-22 works
(LP: #1956401)
- drm/amdkfd: fix boot failure when iommu is disabled in Picasso.
* OOB write on BPF_RINGBUF (LP: #1956585)
- SAUCE: bpf: prevent helper argument PTR_TO_ALLOC_MEM to have offset other
than 0
-- Stefan Bader <email address hidden> Fri, 14 Jan 2022 10:10:34 +0100
Available diffs
| Superseded in focal-security |
| Superseded in focal-updates |
| Deleted in focal-proposed (Reason: moved to -updates) |
| Superseded in focal-proposed |
linux-gcp-5.13 (5.13.0-1008.9~20.04.3) focal; urgency=medium
* Miscellaneous Ubuntu changes
- SAUCE: AUFS
- SAUCE: aufs: switch to 64-bit ino_t for s390x
* Miscellaneous upstream changes
- mm, slub: change run-time assertion in kmalloc_index() to compile-time
-- Khalid Elmously <email address hidden> Tue, 14 Dec 2021 19:24:21 -0500
Available diffs
| 1 → 15 of 15 results | First • Previous • Next • Last |
