Описание
ELSA-2025-20095: Unbreakable Enterprise kernel security update (IMPORTANT)
[5.15.0-305.176.4]
- x86/asm: Make serialize() always_inline (Juergen Gross)
- hwmon: (tmp513) Fix division of negative numbers (David Lechner)
- Revert 'mtd: spi-nor: core: replace dummy buswidth from addr to data' (Pratyush Yadav)
- Revert 'regmap: detach regmap from dev on regmap_exit' (Greg Kroah-Hartman)
- Revert 'drm/amdgpu: rework resume handling for display (v2)' (Greg Kroah-Hartman)
- Revert 'PCI: Use preserve_config in place of pci_flags' (Terry Tritton)
- virtio-net: synchronize probe with ndo_set_features (Jason Wang) [Orabug: 36637822]
- virtio-net: synchronize operstate with admin state on up/down (Jason Wang) [Orabug: 36637822]
- virtio: allow driver to disable the configure change notification (Jason Wang) [Orabug: 36637822]
- virtio: rename virtio_config_enabled to virtio_config_core_enabled (Jason Wang) [Orabug: 36637822]
- mlxsw: pci: Fix driver initialization with Spectrum-4 (Ido Schimmel) [Orabug: 36811057]
- mlxsw: pci: Fix driver initialization with old firmware (Ido Schimmel) [Orabug: 36811057]
- mmc: sdhci-of-dwcmshc: th1520: Increase tuning loop count to 128 (Maksim Kiselev) [Orabug: 36811057]
- net/mlx5e: Switch to using _bh variant of of spinlock API in port timestamping NAPI poll context (Rahul Rameshbabu) [Orabug: 36811057]
- net/mlx5e: Fix MACsec state loss upon state update in offload path (Emeel Hakim) [Orabug: 36811057]
- net/mlx5e: Change the warning when ignore_flow_level is not supported (Jianbo Liu) [Orabug: 36811057]
- Revert 'net/mlx5: Block entering switchdev mode with ns inconsistency' (Gavin Li) [Orabug: 36811057]
- IB/mlx5: Don't expose debugfs entries for RRoCE general parameters if not supported (Mark Zhang) [Orabug: 36811057]
- net/mlx5e: Ignore IPsec replay window values on sender side (Leon Romanovsky) [Orabug: 36811057]
- net/mlx5e: Allow software parsing when IPsec crypto is enabled (Leon Romanovsky) [Orabug: 36811057]
- net/mlx5: Use mlx5 device constant for selecting CQ period mode for ASO (Rahul Rameshbabu) [Orabug: 36811057]
- net/mlx5: Bridge, fix multicast packets sent to uplink (Moshe Shemesh) [Orabug: 36811057]
- net/mlx5: Fix a WARN upon a callback command failure (Yishai Hadas) [Orabug: 36811057]
- net/mlx5e: Fix peer flow lists handling (Vlad Buslov) [Orabug: 36811057]
- net/mlx5: Fix query of sd_group field (Tariq Toukan) [Orabug: 36811057]
- net/mlx5e: Use the correct lag ports number when creating TISes (Saeed Mahameed) [Orabug: 36811057]
- selftests: mlxsw: qos_pfc: Remove wrong description (Amit Cohen) [Orabug: 36811057]
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (Ido Schimmel) [Orabug: 36811057]
- gpio: mlxbf3: add an error code check in mlxbf3_gpio_probe (Su Hui) [Orabug: 36811057]
- vdpa/mlx5: Add mkey leak detection (Dragos Tatulea) [Orabug: 36811057]
- vdpa/mlx5: Introduce reference counting to mrs (Dragos Tatulea) [Orabug: 36811057]
- vdpa/mlx5: Use vq suspend/resume during .set_map (Dragos Tatulea) [Orabug: 36811057]
- vdpa/mlx5: Mark vq state for modification in hw vq (Dragos Tatulea) [Orabug: 36811057]
- vdpa/mlx5: Mark vq addrs for modification in hw vq (Dragos Tatulea) [Orabug: 36811057]
- vdpa/mlx5: Introduce per vq and device resume (Dragos Tatulea) [Orabug: 36811057]
- vdpa/mlx5: Allow modifying multiple vq fields in one modify command (Dragos Tatulea) [Orabug: 36811057]
- vdpa/mlx5: Expose resumable vq capability (Dragos Tatulea) [Orabug: 36811057]
- Revert 'mlx5 updates 2023-12-20' (Jakub Kicinski) [Orabug: 36811057]
- net/mlx5: DPLL, Implement fractional frequency offset get pin op (Jiri Pirko) [Orabug: 36811057]
- net/mlx5: DPLL, Use struct to get values from mlx5_dpll_synce_status_get() (Jiri Pirko) [Orabug: 36811057]
- net: macsec: move sci_to_cpu to macsec header (Radu Pirea (NXP OSS)) [Orabug: 36811057]
- net/mlx5: Implement management PF Ethernet profile (Armen Ratner) [Orabug: 36811057]
- net/mlx5: Enable SD feature (Tariq Toukan) [Orabug: 36811057]
- net/mlx5e: Block TLS device offload on combined SD netdev (Tariq Toukan) [Orabug: 36811057]
- net/mlx5e: Support per-mdev queue counter (Tariq Toukan) [Orabug: 36811057]
- net/mlx5e: Support cross-vhca RSS (Tariq Toukan) [Orabug: 36811057]
- net/mlx5e: Let channels be SD-aware (Tariq Toukan) [Orabug: 36811057]
- net/mlx5e: Create EN core HW resources for all secondary devices (Tariq Toukan) [Orabug: 36811057]
- net/mlx5e: Create single netdev per SD group (Tariq Toukan) [Orabug: 36811057]
- net/mlx5: SD, Add informative prints in kernel log (Tariq Toukan) [Orabug: 36811057]
- net/mlx5: SD, Implement steering for primary and secondaries (Tariq Toukan) [Orabug: 36811057]
- net/mlx5: SD, Implement devcom communication and primary election (Tariq Toukan) [Orabug: 36811057]
- net/mlx5: SD, Implement basic query and instantiation (Tariq Toukan) [Orabug: 36811057]
- net/mlx5: SD, Introduce SD lib (Tariq Toukan) [Orabug: 36811057]
- net/mlx5: Fix query of sd_group field (Tariq Toukan) [Orabug: 36811057]
- net/mlx5e: Use the correct lag ports number when creating TISes (Saeed Mahameed) [Orabug: 36811057]
- mlxsw: spectrum_fid: Set NVE flood profile as part of FID configuration (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Add an 'any' packet type (Petr Machata) [Orabug: 36811057]
- mlxsw: reg: Add nve_flood_prf_id field to SFMR (Petr Machata) [Orabug: 36811057]
- net/mlx5: DR, Use swap() instead of open coding it (Jiapeng Chong) [Orabug: 36811057]
- net/mlx5: devcom, Add component size getter (Tariq Toukan) [Orabug: 36811057]
- net/mlx5e: Decouple CQ from priv (Tariq Toukan) [Orabug: 36811057]
- net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Tariq Toukan) [Orabug: 36811057]
- net/mlx5e: Statify function mlx5e_monitor_counter_arm (Tariq Toukan) [Orabug: 36811057]
- net/mlx5: Move TISes from priv to mdev HW resources (Tariq Toukan) [Orabug: 36811057]
- net/mlx5e: Remove TLS-specific logic in generic create TIS API (Tariq Toukan) [Orabug: 36811057]
- net/mlx5: fs, Command to control TX flow table root (Tariq Toukan) [Orabug: 36811057]
- net/mlx5: fs, Command to control L2TABLE entry silent mode (Tariq Toukan) [Orabug: 36811057]
- net/mlx5: Expose Management PCIe Index Register (MPIR) (Tariq Toukan) [Orabug: 36811057]
- net/mlx5: Add mlx5_ifc bits used for supporting single netdev Socket-Direct (Tariq Toukan) [Orabug: 36811057]
- net/mlx5: Manage ICM type of SW encap (Shun Hao) [Orabug: 36811057]
- RDMA/mlx5: Support handling of SW encap ICM area (Shun Hao) [Orabug: 36811057]
- net/mlx5: Introduce indirect-sw-encap ICM properties (Shun Hao) [Orabug: 36811057]
- mmc: sdhci-of-dwcmshc: Use logical OR instead of bitwise OR in dwcmshc_probe() (Nathan Chancellor) [Orabug: 36811057]
- mmc: sdhci-of-dwcmshc: Add support for T-Head TH1520 (Drew Fustini) [Orabug: 36811057]
- mmc: sdhci: add __sdhci_execute_tuning() to header (Drew Fustini) [Orabug: 36811057]
- mlxsw: spectrum: Use CFF mode where available (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Add support for rFID family in CFF flood mode (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Add a family for bridge FIDs in CFF flood mode (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Initialize flood profiles in CFF mode (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Add profile_id to flood profile (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Add an object to keep flood profiles (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Add hooks for RSP table maintenance (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Add a not-UC packet type (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Add an op for packing SFMR (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Add an op to get PGT address of a FID (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Add an op to get PGT allocation size (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Add an op for flood table initialization (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Move mlxsw_sp_fid_flood_table_init() up (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Make mlxsw_sp_fid_ops.setup return an int (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Split a helper out of mlxsw_sp_fid_flood_table_mid() (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Rename FID ops, families, arrays (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Privatize FID families (Petr Machata) [Orabug: 36811057]
- mlxsw: pci: Fix missing error checking (Ido Schimmel) [Orabug: 36811057]
- mlxsw: spectrum_router: Call RIF setup before obtaining FID (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_router: Add a helper to get subport number from a RIF (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Extract SFMR packing into a helper (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Drop unnecessary conditions (Petr Machata) [Orabug: 36811057]
- mlxsw: pci: Permit enabling CFF mode (Petr Machata) [Orabug: 36811057]
- mlxsw: core, pci: Add plumbing related to CFF mode (Petr Machata) [Orabug: 36811057]
- mlxsw: reg: Add to SFMR register the fields related to CFF flood mode (Petr Machata) [Orabug: 36811057]
- mlxsw: reg: Extract flood-mode specific part of mlxsw_reg_sfmr_pack() (Petr Machata) [Orabug: 36811057]
- mlxsw: reg: Drop unnecessary writes from mlxsw_reg_sfmr_pack() (Petr Machata) [Orabug: 36811057]
- mlxsw: reg: Mark SFGC & some SFMR fields as reserved in CFF mode (Petr Machata) [Orabug: 36811057]
- mlxsw: reg: Add Switch FID Flooding Profiles Register (Petr Machata) [Orabug: 36811057]
- mlxsw: resources: Add max_cap_nve_flood_prf (Petr Machata) [Orabug: 36811057]
- mlxsw: cmd: Add MLXSW_CMD_MBOX_CONFIG_PROFILE_FLOOD_MODE_CFF (Petr Machata) [Orabug: 36811057]
- mlxsw: cmd: Add cmd_mbox.query_fw.cff_support (Petr Machata) [Orabug: 36811057]
- EDAC/bluefield: Convert to platform remove callback returning void (Uwe Kleine-Konig) [Orabug: 36811057]
- selftests: mlxsw: Add PCI reset test (Ido Schimmel) [Orabug: 36811057]
- mlxsw: pci: Implement PCI reset handlers (Ido Schimmel) [Orabug: 36811057]
- mlxsw: pci: Add support for new reset flow (Ido Schimmel) [Orabug: 36811057]
- mlxsw: pci: Move software reset code to a separate function (Amit Cohen) [Orabug: 36811057]
- mlxsw: pci: Rename mlxsw_pci_sw_reset() (Amit Cohen) [Orabug: 36811057]
- mlxsw: Extend MRSR pack() function to support new commands (Amit Cohen) [Orabug: 36811057]
- net/mlx5e: Remove early assignment to netdev->features (Tariq Toukan) [Orabug: 36811057]
- net/mlx5e: Add local loopback counter to vport rep stats (Or Har-Toov) [Orabug: 36811057]
- net/mlx5: Query maximum frequency adjustment of the PTP hardware clock (Rahul Rameshbabu) [Orabug: 36811057]
- net/mlx5: Convert scaled ppm values outside the s32 range for PHC frequency adjustments (Rahul Rameshbabu) [Orabug: 36811057]
- net/mlx5: Initialize clock->ptp_info inside mlx5_init_timer_clock (Rahul Rameshbabu) [Orabug: 36811057]
- net/mlx5: Refactor real time clock operation checks for PHC (Rahul Rameshbabu) [Orabug: 36811057]
- net/mlx5e: Access array with enum values instead of magic numbers (Gal Pressman) [Orabug: 36811057]
- net/mlx5: simplify mlx5_set_driver_version string assignments (Justin Stitt) [Orabug: 36811057]
- net/mlx5: Annotate struct mlx5_flow_handle with __counted_by (Kees Cook) [Orabug: 36811057]
- net/mlx5: Annotate struct mlx5_fc_bulk with __counted_by (Kees Cook) [Orabug: 36811057]
- net/mlx5e: Some cleanup in mlx5e_tc_stats_matchall() (Amir Tzin) [Orabug: 36811057]
- net/mlx5: Allow sync reset flow when BF MGT interface device is present (Moshe Shemesh) [Orabug: 36811057]
- net/mlx5: print change on SW reset semaphore returns busy (Moshe Shemesh) [Orabug: 36811057]
- vdpa/mlx5: clean up indenting in handle_ctrl_vlan() (Dan Carpenter) [Orabug: 36811057]
- vdpa/mlx5: fix error code for deleting vlan (Dan Carpenter) [Orabug: 36811057]
- vdpa/mlx5: Fix syntax errors in comments (Xiang wangx) [Orabug: 36811057]
- macsec: Fix use-after-free while sending the offloading packet (Jianbo Liu) [Orabug: 37268700] {CVE-2024-50261}
- xfrm: Export symbol xfrm_dev_state_delete. (Steffen Klassert) [Orabug: 37357287]
- xfrm: Fix unregister netdevice hang on hardware offload. (Steffen Klassert) [Orabug: 37357287]
- xfrm: fix a data-race in xfrm_lookup_with_ifid() (Eric Dumazet) [Orabug: 37357287]
- xfrm: generalize xdo_dev_state_update_curlft to allow statistics update (Leon Romanovsky) [Orabug: 37357287]
- xfrm: copy_to_user_state fetch offloaded SA packets/bytes statistics (Raed Salem) [Orabug: 37357287]
- xfrm: annotate data-race around use_time (Eric Dumazet) [Orabug: 37357287]
- xfrm: consistently use time64_t in xfrm_timer_handler() (Eric Dumazet) [Orabug: 37357287]
- cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids (Srinivas Pandruvada) [Orabug: 37383554]
- cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids (Pedro Henrique Kopper) [Orabug: 37383554]
- cpufreq: intel_pstate: Use Meteor Lake EPPs for Arrow Lake (Srinivas Pandruvada) [Orabug: 37383554]
- cpufreq: intel_pstate: Update Meteor Lake EPPs (Srinivas Pandruvada) [Orabug: 37383554]
- cpufreq: intel_pstate: Switch to new Intel CPU model defines (Tony Luck) [Orabug: 37383554]
- cpufreq: Switch to new Intel CPU model defines (Tony Luck) [Orabug: 37383554]
- x86/cpu/vfm: Update arch/x86/include/asm/intel-family.h (Tony Luck) [Orabug: 37383554]
- x86/cpu: Add model number for another Intel Arrow Lake mobile processor (Tony Luck) [Orabug: 37383554]
- cpufreq: intel_pstate: Update default EPPs for Meteor Lake (Srinivas Pandruvada) [Orabug: 37383554]
- cpufreq: intel_pstate: Allow model specific EPPs (Srinivas Pandruvada) [Orabug: 37383554]
- x86/cpu: Add model number for Intel Clearwater Forest processor (Tony Luck) [Orabug: 37383554]
- cpufreq: intel_pstate: Update hybrid scaling factor for Meteor Lake (Srinivas Pandruvada) [Orabug: 37383554]
- cpufreq: intel_pstate: Prioritize firmware-provided balance performance EPP (Srinivas Pandruvada) [Orabug: 37383554]
- x86/cpu: Add model number for Intel Arrow Lake mobile processor (Tony Luck) [Orabug: 37383554]
- x86/cpu: Update Hybrids (Peter Zijlstra) [Orabug: 37383554]
- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (Srinivas Pandruvada) [Orabug: 37383554]
- cpufreq: intel_pstate: Enable HWP IO boost for all servers (Srinivas Pandruvada) [Orabug: 37383554]
- cpufreq: intel_pstate: Allow EPP 0x80 setting by the firmware (Srinivas Pandruvada) [Orabug: 37383554]
- cpufreq: intel_pstate: Use firmware default EPP (Srinivas Pandruvada) [Orabug: 37383554]
- net/mlx5: Add a timeout to acquire the command queue semaphore (Akiva Goldberger) [Orabug: 37388415]
- PCI: Fix pci_enable_acs() support for the ACS quirks (Jason Gunthorpe) [Orabug: 37477375]
- PCI: Clear Secondary Status errors after enumeration (Vidya Sagar) [Orabug: 37477375]
- PCI/AER: Configure ECRC only if AER is native (Vidya Sagar) [Orabug: 37477375]
- PCI: Extend ACS configurability (Vidya Sagar) [Orabug: 37477375]
- NFSv4/pNFS: Do layout state recovery upon reboot (Trond Myklebust) [Orabug: 37477755]
- NFSv4/pNFS: Remove redundant call to unhash the layout (Trond Myklebust) [Orabug: 37477755]
- NFSv4/pnfs: Give nfs4_proc_layoutreturn() a flags argument (Trond Myklebust) [Orabug: 37477755]
- NFSv4/pNFS: Retry the layout return later in case of a timeout or reboot (Trond Myklebust) [Orabug: 37477755]
- NFSv4/pNFS: Handle server reboots in pnfs_poc_release() (Trond Myklebust) [Orabug: 37477755]
- NFSv4/pNFS: Add a helper to defer failed layoutreturn calls (Trond Myklebust) [Orabug: 37477755]
- NFSv4/pnfs: Add support for the PNFS_LAYOUT_FILE_BULK_RETURN flag (Trond Myklebust) [Orabug: 37477755]
- pNFS: Add a flag argument to pnfs_destroy_layouts_byclid() (Trond Myklebust) [Orabug: 37477755]
- NFSv4: Clean up encode_nfs4_stateid() (Trond Myklebust) [Orabug: 37477755]
- NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [Orabug: 37477755]
- NFSv4/pnfs: Remove redundant list check (Trond Myklebust) [Orabug: 37477755]
- uek-rpm: Enable CONFIG_SENSORS_ARM_SCMI and CONFIG_MVL_MHU (Thomas Tai) [Orabug: 37498899]
[5.15.0-305.176.3]
- LTS version: v5.15.176 (Vijayendra Suman)
- mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa)
- dt-bindings: display: adi,adv7533: Drop single lane support (Biju Das)
- drm: adv7511: Drop dsi single lane support (Biju Das)
- net/sctp: Prevent autoclose integer overflow in sctp_association_init() (Nikolay Kuratov)
- sky2: Add device ID 11ab:4373 for Marvell 88E8075 (Pascal Hambourg)
- pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking (Evgenii Shatokhin)
- RDMA/uverbs: Prevent integer overflow issue (Dan Carpenter)
- kcov: mark in_softirq_really() as __always_inline (Arnd Bergmann)
- modpost: fix the missed iteration for the max bit in do_input() (Masahiro Yamada)
- modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host (Masahiro Yamada)
- usb: xhci: Avoid queuing redundant Stop Endpoint commands (Michal Pecio)
- ARC: build: Try to guess GCC variant of cross compiler (Leon Romanovsky)
- irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (Uros Bizjak)
- net: usb: qmi_wwan: add Telit FE910C04 compositions (Daniele Palmas)
- bpf: fix potential error return (Anton Protopopov)
- sound: usb: format: don't warn that raw DSD is unsupported (Adrian Ratiu)
- sound: usb: enable DSD output for ddHiFi TC44C (Adrian Ratiu)
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (Filipe Manana)
- drm/amdkfd: Correct the migration DMA map direction (Prike Liang)
- wifi: mac80211: wake the queues in case of failure in resume (Emmanuel Grumbach)
- btrfs: sysfs: fix direct super block member reads (Qu Wenruo)
- btrfs: sysfs: convert scnprintf and snprintf to sysfs_emit (Anand Jain)
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled (Filipe Manana)
- btrfs: rename and export __btrfs_cow_block() (Filipe Manana)
- ila: serialize calls to nf_register_net_hooks() (Eric Dumazet)
- af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Eric Dumazet)
- af_packet: fix vlan_get_tci() vs MSG_PEEK (Eric Dumazet)
- net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init() (Maciej S. Szmigiero)
- net: restrict SO_REUSEPORT to inet sockets (Eric Dumazet)
- RDMA/rtrs: Ensure 'ib_sge list' is accessible (Li Zhijian)
- net: mv643xx_eth: fix an OF node reference leak (Joe Hattori)
- eth: bcmsysport: fix call balance of priv->clk handling routines (Vitalii Mordan)
- ALSA: usb-audio: US16x08: Initialize array before use (Tanya Agarwal)
- net: llc: reset skb->transport_header (Antonio Pastor)
- netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext (Pablo Neira Ayuso)
- drm/i915/dg1: Fix power gate sequence. (Rodrigo Vivi)
- netrom: check buffer length before accessing it (Ilya Shchipletsov)
- net: fix memory leak in tcp_conn_request() (Wang Liang)
- net: stmmac: restructure the error path of stmmac_probe_config_dt() (Joe Hattori)
- net: stmmac: don't create a MDIO bus if unnecessary (Andrew Halaney)
- net: stmmac: platform: provide devm_stmmac_probe_config_dt() (Bartosz Golaszewski)
- RDMA/hns: Fix missing flush CQE for DWQE (Chengchang Tang)
- RDMA/hns: Fix warning storm caused by invalid input in IO path (Chengchang Tang)
- RDMA/hns: Fix mapping error of zero-hop WQE buffer (wenglianfa)
- RDMA/hns: Remove redundant 'bt_level' for hem_list_alloc_item() (Yunsheng Lin)
- RDMA/hns: Remove redundant 'attr_mask' in modify_qp_init_to_init() (Yixing Liu)
- drm/bridge: adv7511_audio: Update Audio InfoFrame properly (Stefan Ekenberg)
- RDMA/bnxt_re: Fix the locking while accessing the QP table (Selvin Xavier)
- RDMA/bnxt_re: Fix max_qp_wrs reported (Selvin Xavier)
- RDMA/bnxt_re: Fix reporting hw_ver in query_device (Kalesh AP)
- RDMA/bnxt_re: Add check for path mtu in modify_qp (Saravanan Vajravel)
- RDMA/mlx5: Enforce same type port association for multiport RoCE (Patrisious Haddad)
- xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic (Mathias Nyman)
- usb: xhci: Limit Stop Endpoint retries (Michal Pecio)
- xhci: retry Stop Endpoint on buggy NEC controllers (Michal Pecio)
- thunderbolt: Add support for Intel Panther Lake-M/P (Mika Westerberg)
- thunderbolt: Add support for Intel Lunar Lake (Mika Westerberg)
- thunderbolt: Add Intel Barlow Ridge PCI ID (Mika Westerberg)
- thunderbolt: Add support for Intel Meteor Lake (Mika Westerberg)
- thunderbolt: Add support for Intel Raptor Lake (George D Sworo)
- tracing: Have process_string() also allow arrays (Steven Rostedt)
- selinux: ignore unknown extended permissions (Thiebaud Weksteen)
- x86/hyperv: Fix hv tsc page based sched_clock for hibernation (Naman Jain)
- net: dsa: improve shutdown sequence (Vladimir Oltean)
- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (Yang Erkun)
- btrfs: avoid monopolizing a core when activating a swap file (Filipe Manana)
- power: supply: gpio-charger: Fix set charge current limits (Dimitri Fedrau)
- tracing: Prevent bad count for tracing_cpumask_write (Lizhi Xu)
- tracing: Constify string literal data member in struct trace_event_call (Christian Gottsche)
- ksmbd: fix racy issue from session lookup and expire (Namjae Jeon)
- lib: stackinit: hide never-taken branch from compiler (Kees Cook)
- drm/dp_mst: Verify request type in the corresponding down message reply (Imre Deak)
- arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs (Catalin Marinas)
- arm64: mm: Rename asid2idx() to ctxid2asid() (Yunfeng Ye)
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write (Jordy Zomer)
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read (Jordy Zomer)
- drm/dp_mst: Fix MST sideband message body length check (Imre Deak)
- bpf: Check validity of link->type in bpf_link_show_fdinfo() (Hou Tao)
- MIPS: Probe toolchain support of -msym32 (Jiaxun Yang)
- vmalloc: fix accounting with i915 (Matthew Wilcox (Oracle))
- virtio-blk: don't keep queue frozen during system suspend (Ming Lei)
- scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery)
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time (Ranjan Kumar)
- platform/x86: asus-nb-wmi: Ignore unknown event 0xCF (Armin Wolf)
- regmap: Use correct format specifier for logging range errors (Mark Brown)
- ALSA: hda/conexant: fix Z60MR100 startup pop issue (bo liu)
- scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl)
- scsi: qla1280: Fix hw revision numbering for ISP1020/1040 (Magnus Lindholm)
- watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04 (James Hilliard)
- tracing/kprobe: Make trace_kprobe's module callback called after jump_label update (Masami Hiramatsu (Google))
- mtd: rawnand: fix double free in atmel_pmecc_create_user() (Dan Carpenter)
- dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset (Chen Ridong)
- dmaengine: dw: Select only supported masters for ACPI devices (Andy Shevchenko)
- dmaengine: mv_xor: fix child node refcount handling in early exit (Javier Carrasco)
- phy: core: Fix that API devm_phy_destroy() fails to destroy the phy (Zijun Hu)
- phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider (Zijun Hu)
- phy: core: Fix that API devm_phy_put() fails to release the phy (Zijun Hu)
- phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() (Zijun Hu)
- phy: core: Fix an OF node refcount leakage in _of_phy_get() (Zijun Hu)
- mtd: rawnand: arasan: Fix missing de-registration of NAND (Maciej Andrzejewski)
- mtd: rawnand: arasan: Fix double assertion of chip-select (Maciej Andrzejewski)
- mtd: diskonchip: Cast an operand to prevent potential overflow (Zichen Xie)
- nfsd: restore callback functionality for NFSv4.0 (NeilBrown)
- bpf: Check negative offsets in __bpf_skb_min_len() (Cong Wang)
- tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection (Zijian Zhang)
- tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress() (Cong Wang)
- mm/vmstat: fix a W=1 clang compiler warning (Bart Van Assche)
- media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (Nikita Zhandarovich)
- drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update (Michel Danzer)
- epoll: Add synchronous wakeup support for ep_poll_callback (Xuewen Yan)
- ceph: validate snapdirname option length when mounting (Ilya Dryomov)
- of: Fix refcount leakage for OF node returned by __of_get_dma_parent() (Zijun Hu)
- of: Fix error path in of_parse_phandle_with_args_map() (Herve Codina)
- udmabuf: also check for F_SEAL_FUTURE_WRITE (Jann Horn)
- nilfs2: prevent use of deleted inode (Edward Adam Davis)
- of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() (Zijun Hu)
- NFS/pnfs: Fix a live lock between recalled layouts and layoutget (Trond Myklebust)
- tracing: Add '%s' check in test_event_printk() (Steven Rostedt)
- tracing: Add missing helper functions in event pointer dereference check (Steven Rostedt)
- tracing: Fix test_event_printk() to process entire print argument (Steven Rostedt)
- KVM: x86: Play nice with protected guests in complete_hypercall_exit() (Sean Christopherson)
- Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (Michael Kelley)
- btrfs: tree-checker: reject inline extent items with 0 ref count (Qu Wenruo)
- zram: refuse to use zero sized block device as backing device (Kairui Song)
- sh: clk: Fix clk_enable() to return 0 on NULL clk (Geert Uytterhoeven)
- hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers (Murad Masimov)
- hwmon: (tmp513) Fix Current Register value interpretation (Murad Masimov)
- hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers (Murad Masimov)
- hwmon: (tmp513) Use SI constants from units.h (Andy Shevchenko)
- hwmon: (tmp513) Simplify with dev_err_probe() (Andy Shevchenko)
- hwmon: (tmp513) Don't use 'proxy' headers (Andy Shevchenko)
- drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (Ville Syrjala)
- USB: serial: option: add Telit FE910C04 rmnet compositions (Daniele Palmas)
- USB: serial: option: add MediaTek T7XX compositions (Jack Wu)
- USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready (Mank Wang)
- USB: serial: option: add MeiG Smart SLM770A (Michal Hrusecky)
- USB: serial: option: add TCL IK512 MBIM & ECM (Daniel Swanemar)
- efivarfs: Fix error on non-existent file (James Bottomley)
- i2c: riic: Always round-up when calculating bus period (Geert Uytterhoeven)
- chelsio/chtls: prevent potential integer overflow on 32bit (Dan Carpenter)
- mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk (Prathamesh Shete)
- net: mdiobus: fix an OF node reference leak (Joe Hattori)
- netfilter: ipset: Fix for recursive locking warning (Phil Sutter)
- net: ethernet: bgmac-platform: fix an OF node reference leak (Joe Hattori)
- net: hinic: Fix cleanup in create_rxqs/txqs() (Dan Carpenter)
- ionic: use ee->offset when returning sprom data (Shannon Nelson)
- ionic: Fix netdev notifier unregister on failure (Brett Creeley)
- netdevsim: prevent bad user input in nsim_dev_health_break_write() (Eric Dumazet)
- net/smc: check return value of sock_recvmsg when draining clc data (Guangguan Wang)
- net/smc: check smcd_v2_ext_offset when receiving proposal msg (Guangguan Wang)
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (Guangguan Wang)
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll (Guangguan Wang)
- erofs: fix incorrect symlink detection in fast symlink (Gao Xiang)
- i2c: pnx: Fix timeout in wait functions (Vladimir Riabchun)
- usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled (Peng Hongchi)
- MIPS: Loongson64: DTS: Fix msi node for ls7a (Jiaxun Yang)
- PCI: Add ACS quirk for Broadcom BCM5760X NIC (Ajit Khaparde)
- PCI: vmd: Create domain symlink before pci_bus_add_devices() (Jiwei Sun)
- ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP (Pierre-Louis Bossart)
- usb: cdns3: Add quirk flag to enable suspend residency (Roger Quadros)
- ALSA: usb: Fix UBSAN warning in parse_audio_unit() (Takashi Iwai)
- PCI/AER: Disable AER service on suspend (Kai-Heng Feng)
- PCI: Use preserve_config in place of pci_flags (Vidya Sagar)
- net: sched: fix ordering of qlen adjustment (Lion Ackermann)
- LTS version: v5.15.175 (Vijayendra Suman)
- x86/static-call: fix 32-bit build (Juergen Gross)
- ALSA: usb-audio: Fix a DMA to stack memory bug (Dan Carpenter)
- x86/xen: remove hypercall page (Juergen Gross)
- x86/xen: use new hypercall functions instead of hypercall page (Juergen Gross)
- x86/xen: add central hypercall functions (Juergen Gross)
- x86/xen: don't do PV iret hypercall through hypercall page (Juergen Gross)
- x86/static-call: provide a way to do very early static-call updates (Juergen Gross)
- objtool/x86: allow syscall instruction (Juergen Gross)
- x86: make get_cpu_vendor() accessible from Xen code (Juergen Gross)
- xen/netfront: fix crash when removing device (Juergen Gross)
- Revert 'parisc: fix a possible DMA corruption' (Greg Kroah-Hartman)
- tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe() (Nikolay Kuratov)
- bpf: sync_linked_regs() must preserve subreg_def (Eduard Zingerman)
- blk-iocost: Avoid using clamp() on inuse in __propagate_weights() (Nathan Chancellor)
- ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired (Daniil Tatianin)
- team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Daniel Borkmann)
- bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Daniel Borkmann)
- net/sched: netem: account for backlog updates from child qdisc (Martin Ottens)
- Documentation: PM: Clarify pm_runtime_resume_and_get() return value (Paul Barker)
- qca_spi: Make driver probing reliable (Stefan Wahren)
- qca_spi: Fix clock speed for multiple QCA7000 (Stefan Wahren)
- cxgb4: use port number to set mac addr (Anumula Murali Mohan Reddy)
- ACPI: resource: Fix memory resource type union access (Ilpo Jarvinen)
- net: sparx5: fix the maximum frame length register (Daniel Machon)
- net: sparx5: fix FDMA performance issue (Daniel Machon)
- net: lapb: increase LAPB_HEADER_LEN (Eric Dumazet)
- ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init() (Thomas Weissschuh)
- ptp: kvm: Use decrypted memory in confidential guest on x86 (Jeremi Piotrowski)
- selftests: mlxsw: sharedbuffer: Remove duplicate test cases (Danielle Ratson)
- selftests: mlxsw: sharedbuffer: Remove h1 ingress test case (Danielle Ratson)
- tipc: fix NULL deref in cleanup_bearer() (Eric Dumazet)
- batman-adv: Do not let TT changes list grows indefinitely (Remi Pommarel)
- batman-adv: Remove uninitialized data in full table TT response (Remi Pommarel)
- batman-adv: Do not send uninitialized TT changes (Remi Pommarel)
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (Suraj Sonawane)
- exfat: fix potential deadlock on __exfat_get_dentry_set (Sungjong Seo)
- virtio/vsock: Fix accept_queue memory leak (Michal Luczaj)
- bpf, sockmap: Fix update element with same (Michal Luczaj)
- xfs: fix scrub tracepoints when inode-rooted btrees are involved (Darrick J. Wong)
- xfs: return from xfs_symlink_verify early on V4 filesystems (Darrick J. Wong)
- xfs: don't drop errno values when we fail to ficlone the entire range (Darrick J. Wong)
- xfs: update btree keys correctly when _insrec splits an inode root block (Darrick J. Wong)
- drm/i915: Fix memory leak by correcting cache object name in error handler (Jiasheng Jiang)
- usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (Lianqin Hu)
- usb: ehci-hcd: fix call balance of clocks handling routines (Vitalii Mordan)
- usb: dwc2: Fix HCD port connection race (Stefan Wahren)
- usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature (Stefan Wahren)
- usb: dwc2: Fix HCD resume (Stefan Wahren)
- ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() (Joe Hattori)
- usb: host: max3421-hcd: Correctly abort a USB request. (Mark Tomlinson)
- ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5 (Jaakko Salo)
- tcp: check space before adding MPTCP SYN options (MoYuanhao)
- LTS version: v5.15.174 (Vijayendra Suman)
- Bluetooth: hci_core: Fix calling mgmt_device_connected (Luiz Augusto von Dentz)
- net/smc: Fix af_ops of child socket pointing to released memory (Karsten Graul)
- media: venus: vdec: fixed possible memory leak issue (Ameer Hamza)
- serial: amba-pl011: fix build regression (Arnd Bergmann)
- drm/amdgpu: rework resume handling for display (v2) (Alex Deucher)
- drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX (Wayne Lin)
- net: dsa: microchip: correct KSZ8795 static MAC table access (Tristram Ha)
- Bluetooth: L2CAP: Fix uaf in l2cap_connect (Luiz Augusto von Dentz)
- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (Mark Rutland)
- arm64/sve: Discard stale CPU state when handling SVE traps (Mark Brown)
- gve: Fixes for napi_poll when budget is 0 (Ziwei Xiao)
- scsi: core: Fix scsi_mode_select() buffer length handling (Damien Le Moal)
- Revert 'drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()' (Zhang Zekun)
- fou: remove warn in gue_gro_receive on unsupported protocol (Willem de Bruijn)
- ima: Fix use-after-free on a dentry's dname.name (Stefan Berger)
- crypto: hisilicon/qm - inject error before stopping queue (Weili Qian)
- drm/amd/display: Check BIOS images before it is used (Alex Hung)
- mmc: mtk-sd: Fix error handle of probe function (Andy-ld Lu)
- xhci: dbc: Fix STALL transfer event handling (Mathias Nyman)
- mm/damon/vaddr: fix issue in damon_va_evenly_split_region() (Zheng Yejian)
- mm/damon/vaddr-test: split a test function having >1024 bytes frame size (SeongJae Park)
- jffs2: Fix rtime decompressor (Richard Weinberger)
- jffs2: Prevent rtime decompress memory corruption (Kinsey Moore)
- KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE (Kunkun Jiang)
- KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device (Kunkun Jiang)
- KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* (Jing Zhang)
- tracing/eprobe: Fix to release eprobe when failed to add dyn_event (Masami Hiramatsu (Google))
- btrfs: fix missing snapshot drew unlock when root is dead during swap activation (Filipe Manana)
- sched/core: Prevent wakeup of ksoftirqd during idle load balance (K Prateek Nayak)
- sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy (K Prateek Nayak)
- sched/fair: Add NOHZ balancer flag for nohz.next_balance updates (Valentin Schneider)
- sched/core: Remove the unnecessary need_resched() check in nohz_csd_func() (K Prateek Nayak)
- modpost: Add .irqentry.text to OTHER_SECTIONS (Thomas Gleixner)
- modpost: Include '.text.*' in TEXT_SECTIONS (Nathan Chancellor)
- misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle (Parker Newman)
- powerpc/prom_init: Fixup missing powermac #size-cells (Michael Ellerman)
- MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a (Xi Ruoyao)
- usb: chipidea: udc: handle USB Error Interrupt if IOC not set (Xu Yang)
- i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock (Defa Li)
- PCI: Add ACS quirk for Wangxun FF5xxx NICs (Mengyuan Lou)
- PCI: Add 'reset_subordinate' to reset hierarchy below bridge (Keith Busch)
- PCI: Detect and trust built-in Thunderbolt chips (Esther Shimanovich)
- i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (Jarkko Nikula)
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode. (Qi Han)
- nvdimm: rectify the illogical code within nd_dax_probe() (Yi Yang)
- pinctrl: qcom-pmic-gpio: add support for PM8937 (Barnabas Czeman)
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Kai Makisara)
- scsi: st: Don't modify unknown block number in MTIOCGET (Kai Makisara)
- leds: class: Protect brightness_show() with led_cdev->led_access mutex (Mukesh Ojha)
- scsi: hisi_sas: Add cond_resched() for no forced preemption model (Yihang Li)
- tracing: Use atomic64_inc_return() in trace_clock_counter() (Uros Bizjak)
- pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU (Esben Haabendal)
- netpoll: Use rcu_access_pointer() in __netpoll_setup (Breno Leitao)
- net/neighbor: clear error in case strict check is not set (Jakub Kicinski)
- rocker: fix link status detection in rocker_carrier_init() (Dmitry Antipov)
- ASoC: hdmi-codec: reorder channel allocation list (Jonas Karlman)
- Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet (Luiz Augusto von Dentz)
- wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (Norbert van Bolhuis)
- wifi: ipw2x00: libipw_rx_any(): fix bad alignment (Jiapeng Chong)
- drm/amdgpu: set the right AMDGPU sg segment limitation (Prike Liang)
- drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov (Victor Zhao)
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (Nihar Chaithanya)
- jfs: fix array-index-out-of-bounds in jfs_readdir (Ghanshyam Agrawal)
- jfs: fix shift-out-of-bounds in dbSplit (Ghanshyam Agrawal)
- jfs: array-index-out-of-bounds fix in dtReadFirst (Ghanshyam Agrawal)
- dma-debug: fix a possible deadlock on radix_lock (Levi Yun)
- drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr (Lang Yu)
- drm/amdgpu: Dereference the ATCS ACPI buffer (Prike Liang)
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih (Victor Lu)
- drm/panel: simple: Add Microchip AC69T88A LVDS Display panel (Manikandan Muralidharan)
- wifi: ath5k: add PCI ID for Arcadyan devices (Rosen Penev)
- wifi: ath5k: add PCI ID for SX76X (Rosen Penev)
- net: inet6: do not leave a dangling sk pointer in inet6_create() (Ignat Korchagin)
- net: inet: do not leave a dangling sk pointer in inet_create() (Ignat Korchagin)
- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Ignat Korchagin)
- net: af_can: do not leave a dangling sk pointer in can_create() (Ignat Korchagin)
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (Ignat Korchagin)
- af_packet: avoid erroring out after sock_init_data() in packet_create() (Ignat Korchagin)
- net/sched: cbs: Fix integer overflow in cbs_set_port_rate() (Elena Salomatkina)
- net: ethernet: fs_enet: Use %pa to format resource_size_t (Simon Horman)
- net: fec_mpc52xx_phy: Use %pa to format resource_size_t (Simon Horman)
- samples/bpf: Fix a resource leak (Zhu Jun)
- r8169: don't apply UDP padding quirk on RTL8126A (Heiner Kallweit)
- drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (Igor Artemiev)
- drm/mcde: Enable module autoloading (Liao Chen)
- drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (Joaquin Ignacio Aramendia)
- drm/vc4: hvs: Set AXI panic modes for the HVS (Dave Stevenson)
- soc: imx8m: Probe the SoC driver as platform driver (Marek Vasut)
- media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (Rohan Barar)
- media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (David Given)
- kcsan: Turn report_filterlist_lock into a raw_spinlock (Marco Elver)
- kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all() (Mark Brown)
- btrfs: avoid unnecessary device path update for the same device (Qu Wenruo)
- s390/cpum_sf: Handle CPU hotplug remove during sampling (Thomas Richter)
- epoll: annotate racy check (Christian Brauner)
- iommu/arm-smmu: Defer probe of clients after smmu device bound (Pratyush Brahma)
- ocfs2: update seq_file index in ocfs2_dlm_seq_next (Wengang Wang)
- mmc: core: Further prevent card detect during shutdown (Ulf Hansson)
- mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet (Hans de Goede)
- regmap: detach regmap from dev on regmap_exit (Cosmin Tanislav)
- xsk: fix OOB map writes when deleting elements (Maciej Fijalkowski)
- dma-buf: fix dma_fence_array_signaled v4 (Christian Konig)
- bpf: fix OOB devmap writes when deleting elements (Maciej Fijalkowski)
- bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (Liequan Che)
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (Ryusuke Konishi)
- scsi: ufs: core: sysfs: Prevent div by zero (Gwendal Grignou)
- scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (Saurav Kashyap)
- scsi: qla2xxx: Fix use after free on unload (Quinn Tran)
- scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (Anil Gurumurthy)
- scsi: qla2xxx: Fix NVMe and NPIV connect issue (Quinn Tran)
- ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG) (Sahas Leelodharry)
- ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8 (Nazar Bilinskyi)
- ALSA: usb-audio: add mixer mapping for Corsair HS80 (Marie Ramlow)
- arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (Mark Rutland)
- tracing: Fix cmp_entries_dup() to respect sort() comparison rules (Kuan-Wei Chiu)
- can: dev: can_set_termination(): allow sleeping GPIOs (Marc Kleine-Budde)
- watchdog: rti: of: honor timeout-sec property (Alexander Sverdlin)
- HID: wacom: fix when get product name maybe null pointer (WangYuli)
- bpf: Fix exact match conditions in trie_get_next_key() (Hou Tao)
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie (Hou Tao)
- ocfs2: free inode when ocfs2_get_init_inode() fails (Tetsuo Handa)
- drm/v3d: Enable Performance Counters before clearing them (Maira Canal)
- spi: mpc52xx: Add cancel_work_sync before module remove (Pei Xiao)
- tools: Override makefile ARCH variable if defined, but empty (Bjorn Topel)
- ALSA: usb-audio: Notify xrun for low-latency mode (Takashi Iwai)
- ALSA: pcm: Avoid reference to status->state (Takashi Iwai)
- ALSA: pcm: Add more disconnection checks at file ops (Takashi Iwai)
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (Zijian Zhang)
- drm/sti: Add __iomem for mixer_dbg_mxn's parameter (Pei Xiao)
- bpftool: fix potential NULL pointer dereferencing in prog_dump() (Amir Mohammadi)
- bpftool: Remove asserts from JIT disassembler (Quentin Monnet)
- serial: amba-pl011: Fix RX stall when DMA is used (Kartik Rajput)
- serial: amba-pl011: Use port lock wrappers (Thomas Gleixner)
- dt-bindings: serial: rs485: Fix rs485-rts-delay property (Michal Simek)
- dt_bindings: rs485: Correct delay values (Lino Sanfilippo)
- gpio: grgpio: Add NULL check in grgpio_probe (Charles Han)
- gpio: grgpio: use a helper variable to store the address of ofdev->dev (Bartosz Golaszewski)
- geneve: do not assume mac header is set in geneve_xmit_skb() (Eric Dumazet)
- ethtool: Fix wrong mod state in case of verbose and no_mask bitset (Kory Maincent)
- netfilter: nft_set_hash: skip duplicated elements pending gc run (Pablo Neira Ayuso)
- netfilter: ipset: Hold module reference while requesting a module (Phil Sutter)
- net: sched: fix erspan_opt settings in cls_flower (Xin Long)
- igb: Fix potential invalid memory access in igb_init_module() (Yuan Can)
- net/qed: allow old cards not supporting 'num_images' to work (Louis Leseur)
- net/smc: fix LGR and link use-after-free issue (Wen Gu)
- net/smc: Limit backlog connections (D. Wythe)
- tipc: Fix use-after-free of kernel socket in cleanup_bearer(). (Kuniyuki Iwashima)
- dccp: Fix memory leak in dccp_feat_change_recv (Ivan Solodovnikov)
- net/ipv6: release expired exception dst cached in socket (Jiri Wiesner)
- can: j1939: j1939_session_new(): fix skb reference counting (Dmitry Antipov)
- net: hsr: avoid potential out-of-bound access in fill_frame_info() (Eric Dumazet)
- net/sched: tbf: correct backlog statistic for GSO packets (Martin Ottens)
- ptp: Add error handling for adjfine callback in ptp_clock_adjtime (Ajay Kaher)
- netfilter: x_tables: fix LED ID check in led_tg_check() (Dmitry Antipov)
- ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (Jinghao Jia)
- can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
- can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
- can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
- can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
- can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL (Dario Binacchi)
- can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails (Dario Binacchi)
- can: do not increase rx statistics when generating a CAN rx error message frame (Vincent Mailhol)
- can: peak_usb: CANFD: store 64-bits hw timestamps (Stephane Grosjean)
- watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() (Yassine Oudjana)
- iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (Oleksandr Ocheretnyi)
- drm/etnaviv: flush shader L1 cache after user commandstream (Lucas Stach)
- drm/sti: avoid potential dereference of error pointers (Ma Ke)
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check (Ma Ke)
- drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check (Ma Ke)
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (Josef Bacik)
- nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (Yang Erkun)
- nfsd: make sure exp active before svc_export_show (Yang Erkun)
- PCI: rockchip-ep: Fix address translation unit programming (Damien Le Moal)
- dm thin: Add missing destroy_work_on_stack() (Yuan Can)
- ovl: properly handle large files in ovl_security_fileattr (Oleksandr Tymoshenko)
- PCI: keystone: Add link up check to ks_pcie_other_map_bus() (Kishon Vijay Abraham I)
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (Frank Li)
- scsi: ufs: exynos: Fix hibern8 notify callbacks (Peter Griffin)
- util_macros.h: fix/rework find_closest() macros (Alexandru Ardelean)
- s390/entry: Mark IRQ entries to fix stack depot warnings (Vasily Gorbik)
- ad7780: fix division by zero in ad7780_write_raw() (Zicheng Qu)
- btrfs: ref-verify: fix use-after-free after invalid ref action (Filipe Manana)
- btrfs: add a sanity check for btrfs root in btrfs_search_slot() (Lizhi Xu)
- btrfs: add might_sleep() annotations (ChenXiaoSong)
- quota: flush quota_release_work upon quota writeback (Ojaswin Mujoo)
- xfs: remove unknown compat feature check in superblock write validation (Long Li)
- xfs: fix log recovery when unknown rocompat bits are set (Darrick J. Wong)
- ASoC: fsl_micfil: fix the naming style for mask definition (Shengjiu Wang)
- sh: intc: Fix use-after-free bug in register_intc_controller() (Dan Carpenter)
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (Liu Jian)
- sunrpc: remove unnecessary test in rpc_task_set_client() (Thiago Rafael Becker)
- nfs: ignore SB_RDONLY when mounting nfs (Li Lingfeng)
- modpost: remove incorrect code in do_eisa_entry() (Masahiro Yamada)
- rtc: ab-eoz9: don't fail temperature reads on undervoltage notification (Maxime Chevallier)
- 9p/xen: fix release of IRQ (Alex Zenla)
- 9p/xen: fix init sequence (Alex Zenla)
- block: return unsigned int from bdev_io_min (Christoph Hellwig)
- jffs2: fix use of uninitialized variable (Qingfang Deng)
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit (Waqar Hameed)
- ubi: fastmap: Fix duplicate slab cache names while attaching (Zhihao Cheng)
- ubifs: Correct the total block count by deducting journal reservation (Zhihao Cheng)
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Yongliang Gao)
- rtc: abx80x: Fix WDT bit position of the status register (Nobuhiro Iwamatsu)
- rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- NFSv4.0: Fix a use-after-free problem in the asynchronous open() (Trond Myklebust)
- um: Always dump trace for specified task in show_stack (Tiwei Bie)
- um: Fix the return value of elf_core_copy_task_fpregs (Tiwei Bie)
- um: Fix potential integer overflow during physmem setup (Tiwei Bie)
- rpmsg: glink: Propagate TX failures in intentless mode as well (Bjorn Andersson)
- SUNRPC: make sure cache entry active before cache_show (Yang Erkun)
- NFSD: Prevent a potential integer overflow (Chuck Lever)
- lib: string_helpers: silence snprintf() output truncation warning (Bartosz Golaszewski)
- usb: dwc3: gadget: Fix looping of queued SG entries (Thinh Nguyen)
- usb: dwc3: gadget: Fix checking for number of TRBs left (Thinh Nguyen)
- ALSA: hda/realtek: Apply quirk for Medion E15433 (Takashi Iwai)
- ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max (Dinesh Kumar)
- ALSA: hda/realtek: Set PCBeep to default value for ALC274 (Kailang Yang)
- ALSA: hda/realtek: Update ALC225 depop procedure (Kailang Yang)
- ALSA: pcm: Add sanity NULL check for the default mmap fault handler (Takashi Iwai)
- media: v4l2-core: v4l2-dv-timings: check cvt/gtf result (Hans Verkuil)
- soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting() (Javier Carrasco)
- media: wl128x: Fix atomicity violation in fmc_send_cmd() (Qiu-ji Chen)
- HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (Jason Gerecke)
- block: fix ordering between checking BLK_MQ_S_STOPPED request adding (Muchun Song)
- arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (Will Deacon)
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen)
- um: vector: Do not use drvdata in release (Tiwei Bie)
- serial: 8250: omap: Move pm_runtime_get_sync (Bin Liu)
- um: net: Do not use drvdata in release (Tiwei Bie)
- um: ubd: Do not use drvdata in release (Tiwei Bie)
- ubi: wl: Put source PEB into correct list if trying locking LEB failed (Zhihao Cheng)
- platform/chrome: cros_ec_typec: fix missing fwnode reference decrement (Javier Carrasco)
- cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power() (Jinjie Ruan)
- mtd: spi-nor: core: replace dummy buswidth from addr to data (Cheng Ming Lin)
- spi: Fix acpi deferred irq probe (Stanislaw Gruszka)
- netfilter: ipset: add missing range check in bitmap_ip_uadt (Jeongjun Park)
- gpio: exar: set value when external pull-up or pull-down is present (Sai Kumar Cholleti)
- Revert 'serial: sh-sci: Clean sci_ports[0] after at earlycon exit' (Greg Kroah-Hartman)
- serial: sh-sci: Clean sci_ports[0] after at earlycon exit (Claudiu Beznea)
- Revert 'usb: gadget: composite: fix OS descriptors w_value logic' (Michal Vrastil)
- driver core: bus: Fix double free in driver API bus_register() (Zijun Hu)
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue (Michal Pecio)
- Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() (Andrej Shadura)
- exfat: fix uninit-value in __exfat_get_dentry_set (Namjae Jeon)
- locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass() (Ahmed Ehab)
- tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler (Nicolas Bouchinet)
- apparmor: test: Fix memory leak for aa_unpack_strdup() (Jinjie Ruan)
- comedi: Flush partial mappings in error case (Jann Horn)
- fsnotify: fix sending inotify event with unexpected filename (Amir Goldstein)
- PCI: Fix use-after-free of slot->bus on hot remove (Lukas Wunner)
- KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status (Raghavendra Rao Ananta)
- powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector (Gautam Menghani)
- crypto: x86/aegis128 - access 32-bit arguments as 32-bit (Eric Biggers)
- perf/x86/intel/pt: Fix buffer full but size is 0 case (Adrian Hunter)
- ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (Qiu-ji Chen)
- jfs: xattr: check invalid xattr size more strictly (Artem Sadovnikov)
- ext4: fix FS_IOC_GETFSMAP handling (Theodore Ts'o)
- ext4: supress data-race warnings in ext4_free_inodes_{count,set}() (Jeongjun Park)
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Benoit Sevens)
- soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (Manikanta Mylavarapu)
- ASoC: Intel: sst: Fix used of uninitialized ctx to log an error (Hans de Goede)
- Revert 'drivers: clk: zynqmp: update divider round rate logic' (Joel Guittet)
- usb: ehci-spear: fix call balance of sehci clk handling routines (Vitalii Mordan)
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Takashi Iwai)
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (Qiu-ji Chen)
- ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp (Namjae Jeon)
- parisc: fix a possible DMA corruption (Mikulas Patocka)
- apparmor: fix 'Do simple duplicate message elimination' (chao liu)
- ALSA: hda/realtek: Update ALC256 depop procedure (Kailang Yang)
- counter: stm32-timer-cnt: Add check for clk_enable() (Jiasheng Jiang)
- misc: apds990x: Fix missing pm_runtime_disable() (Jinjie Ruan)
- USB: chaoskey: Fix possible deadlock chaoskey_list_lock (Edward Adam Davis)
- USB: chaoskey: fail open after removal (Oliver Neukum)
- usb: yurex: make waiting on yurex_write interruptible (Oliver Neukum)
- usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (Jeongjun Park)
- iio: light: al3010: Fix an error handling path in al3010_probe() (Christophe JAILLET)
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (Saravanan Vajravel)
- net: hsr: fix hsr_init_sk() vs network/transport headers. (Eric Dumazet)
- spi: atmel-quadspi: Fix register name in verbose logging function (Csokas, Bence)
- octeontx2-af: RPM: Fix mismatch in lmac type (Hariprasad Kelam)
- net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken (Maxime Chevallier)
- marvell: pxa168_eth: fix call balance of pep->clk handling routines (Vitalii Mordan)
- net: mdio-ipq4019: add missing error check (Rosen Penev)
- net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration (Oleksij Rempel)
- tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets (Pavan Chebbi)
- net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device (Oleksij Rempel)
- power: supply: bq27xxx: Fix registers of bq27426 (Barnabas Czeman)
- power: supply: core: Remove might_sleep() from power_supply_put() (Bart Van Assche)
- fs_parser: update mount_api doc to match function signature (Randy Dunlap)
- vfio/pci: Properly hide first-in-list PCIe extended capability (Avihai Horon)
- selftests/mount_setattr: Fix failures on 64K PAGE_SIZE kernels (Michael Ellerman)
- vdpa/mlx5: Fix suboptimal range on iotlb iteration (Si-Wei Liu)
- hwmon: (tps23861) Fix reporting of negative temperatures (Murad Masimov)
- NFSD: Fix nfsd4_shutdown_copy() (Chuck Lever)
- svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (Ye Bin)
- sunrpc: simplify two-level sysctl registration for svcrdma_parm_table (Luis Chamberlain)
- NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (Chuck Lever)
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (Chuck Lever)
- remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region (Sibi Sankar)
- rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length (Jonathan Marek)
- rpmsg: glink: Fix GLINK command prefix (Bjorn Andersson)
- rpmsg: glink: Send READ_NOTIFY command in FIFO full case (Arun Kumar Neelakantam)
- rpmsg: glink: Add TX_DATA_CONT command while sending (Arun Kumar Neelakantam)
- perf trace: Avoid garbage when not printing a syscall's arguments (Benjamin Peterson)
- perf trace: Do not lose last events in a race (Benjamin Peterson)
- svcrdma: Address an integer overflow (Chuck Lever)
- m68k: coldfire/device.c: only build FEC when HW macros are defined (Antonio Quartulli)
- m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x (Jean-Michel Hautbois)
- perf trace: avoid garbage when not printing a trace event's arguments (Benjamin Peterson)
- f2fs: check curseg->inited before write_sum_page in change_curseg (Yongpeng Yang)
- f2fs: remove the unused flush argument to change_curseg (Christoph Hellwig)
- f2fs: open code allocate_segment_by_default (Christoph Hellwig)
- f2fs: remove struct segment_allocation default_salloc_ops (Christoph Hellwig)
- f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block (LongPing Wei)
- PCI: cpqphp: Fix PCIBIOS_* return value confusion (Ilpo Jarvinen)
- PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (weiyufeng)
- perf probe: Correct demangled symbols in C++ program (Leo Yan)
- perf probe: Fix libdw memory leak (Ian Rogers)
- PCI: Fix reset_method_store() memory leak (Todd Kjos)
- perf cs-etm: Don't flush when packet_queue fills up (James Clark)
- mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb() (Dan Carpenter)
- pinctrl: k210: Undef K210_PC_DEFAULT (zhang jiao)
- clk: clk-axi-clkgen: make sure to enable the AXI bus clock (Nuno Sa)
- dt-bindings: clock: axi-clkgen: include AXI clk (Nuno Sa)
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() (Zhen Lei)
- fbdev/sh7760fb: Alloc DMA memory from hardware device (Thomas Zimmermann)
- powerpc/kexec: Fix return of uninitialized variable (Zhang Zekun)
- powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static (Michal Suchanek)
- ocfs2: fix uninitialized value in ocfs2_file_read_iter() (Dmitry Antipov)
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE (Junxian Huang)
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (Zhen Lei)
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (Zhen Lei)
- scsi: fusion: Remove unused variable 'rc' (Zeng Heng)
- scsi: bfa: Fix use-after-free in bfad_im_module_exit() (Ye Bin)
- mfd: rt5033: Fix missing regmap_del_irq_chip() (Zhang Changzhong)
- clk: imx: clk-scu: fix clk enable state save and restore (Dong Aisheng)
- clk: imx: lpcg-scu: SW workaround for errata (e10858) (Peng Fan)
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore (Michael Ellerman)
- powerpc/mm/fault: Fix kfence page fault reporting (Ritesh Harjani (IBM))
- mtd: rawnand: atmel: Fix possible memory leak (Miquel Raynal)
- cpufreq: loongson2: Unregister platform_driver on failure (Yuan Can)
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices (Andy Shevchenko)
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device (Andy Shevchenko)
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device (Andy Shevchenko)
- mfd: intel_soc_pmic_bxtwc: Use dev_err_probe() (Andy Shevchenko)
- mfd: da9052-spi: Change read-mask to write-mask (Marcus Folkesson)
- mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race (Jinjie Ruan)
- pinctrl: zynqmp: drop excess struct member description (Bartosz Golaszewski)
- trace/trace_event_perf: remove duplicate samples on the first tracepoint event (Levi Yun)
- bpf: fix recursive lock when verdict program return SK_PASS (Jiayuan Chen)
- wireguard: selftests: load nf_conntrack if not present (Hangbin Liu)
- netpoll: Use rcu_access_pointer() in netpoll_poll_lock (Breno Leitao)
- Bluetooth: fix use-after-free in device_for_each_child() (Dmitry Antipov)
- driver core: Introduce device_find_any_child() helper (Andy Shevchenko)
- ALSA: 6fire: Release resources at card release (Takashi Iwai)
- ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (Takashi Iwai)
- ALSA: us122l: Use snd_card_free_when_closed() at disconnection (Takashi Iwai)
- ALSA: usx2y: Use snd_card_free_when_closed() at disconnection (Takashi Iwai)
- net: rfkill: gpio: Add check for clk_enable() (Mingwei Zheng)
- drm/amdkfd: Fix wrong usage of INIT_WORK() (Yuan Can)
- selftests: net: really check for bg process completion (Paolo Abeni)
- bpf, sockmap: Fix sk_msg_reset_curr (Zijian Zhang)
- bpf, sockmap: Several fixes to bpf_msg_pop_data (Zijian Zhang)
- bpf, sockmap: Several fixes to bpf_msg_push_data (Zijian Zhang)
- selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap (Zijian Zhang)
- selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap (Zijian Zhang)
- selftests, bpf: Add one test for sockmap with strparser (Liu Jian)
- selftests/bpf: Fix SENDPAGE data logic in test_sockmap (Zijian Zhang)
- selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap (Zijian Zhang)
- netlink: typographical error in nlmsg_type constants definition (Maurice Lambert)
- netfilter: nf_tables: must hold rcu read lock while iterating object type list (Florian Westphal)
- netfilter: nf_tables: skip transaction if update object is not implemented (Pablo Neira Ayuso)
- drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk() (Zichen Xie)
- wifi: wfx: Fix error handling in wfx_core_init() (Yuan Can)
- drm/etnaviv: hold GPU lock across perfmon sampling (Lucas Stach)
- drm/etnaviv: fix power register offset on GC300 (Doug Brown)
- drm/etnaviv: Request pages from DMA32 zone on addressing_limited (Xiaolei Wang)
- drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- drm/panfrost: Remove unused id_mask from struct panfrost_model (Steven Price)
- octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (Dipendra Khadka)
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (Dipendra Khadka)
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (Dipendra Khadka)
- drm: fsl-dcu: enable PIXCLK on LS1021A (Matthias Schiffer)
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (Alper Nebi Yasak)
- selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap (Zijian Zhang)
- selftests/bpf: Fix msg_verify_data in test_sockmap (Zijian Zhang)
- drm/bridge: tc358767: Fix link properties discovery (Tomi Valkeinen)
- netdevsim: copy addresses for both in and out paths (Hangbin Liu)
- libbpf: fix sym_is_subprog() logic for weak global subprogs (Andrii Nakryiko)
- bpf: Fix the xdp_adjust_tail sample prog issue (Yuan Chen)
- libbpf: Fix output .symtab byte-order during linking (Tony Ambardar)
- drm/bridge: anx7625: Drop EDID cache on bridge power off (Pin-yen Lin)
- ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode (Macpaul Lin)
- ASoC: fsl_micfil: fix regmap_write_bits usage (Shengjiu Wang)
- ASoC: fsl_micfil: use GENMASK to define register bit fields (Sascha Hauer)
- ASoC: fsl_micfil: do not define SHIFT/MASK for single bits (Sascha Hauer)
- ASoC: fsl_micfil: Drop unnecessary register read (Sascha Hauer)
- dt-bindings: vendor-prefixes: Add NeoFidelity, Inc (Igor Prusov)
- wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 (Baochen Qiang)
- wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 (Baochen Qiang)
- drm/v3d: Address race-condition in MMU flush (Maira Canal)
- drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- drm/omap: Fix locking in omap_gem_new_dmabuf() (Tomi Valkeinen)
- drm/omap: Fix possible NULL dereference (Tomi Valkeinen)
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (Jeongjun Park)
- drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (Andy Shevchenko)
- platform/x86: panasonic-laptop: Return errno correctly in show callback (Yao Zi)
- platform/x86: panasonic-laptop: Replace snprintf in show functions with sysfs_emit (Qing Wang)
- media: atomisp: Add check for rgby_data memory allocation failure (Li Huafei)
- media: atomisp: remove #ifdef HAS_NO_HMEM (Mauro Carvalho Chehab)
- media: venus: provide ctx queue lock for ioctl synchronization (Sergey Senozhatsky)
- venus: venc: add handling for VIDIOC_ENCODER_CMD (Dikshita Agarwal)
- media: venus : Addition of support for VIDIOC_TRY_ENCODER_CMD (Dikshita Agarwal)
- media: venus : Addition of EOS Event support for Encoder (Viswanath Boma)
- media: venus: vdec: decoded picture buffer handling during reconfig sequence (Mansur Alisha Shaik)
- media: venus: venc: Use pmruntime autosuspend (Stanimir Varbanov)
- firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (Luo Qiu)
- selftests/resctrl: Protect against array overrun during iMC config parsing (Reinette Chatre)
- arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add supplies for fixed regulators (Chen-Yu Tsai)
- arm64: dts: mediatek: mt8183-kukui-jacuzzi: Fix DP bridge supply names (Chen-Yu Tsai)
- arm64: dts: mt8183: jacuzzi: Move panel under aux-bus (Hsin-Yi Wang)
- arm64: dts: mt8183: jacuzzi: remove unused ddc-i2c-bus (Hsin-Yi Wang)
- regmap: irq: Set lockdep class for hierarchical IRQ domains (Andy Shevchenko)
- spi: zynqmp-gqspi: Undo runtime PM changes at driver exit time (Jinjie Ruan)
- spi: tegra210-quad: Avoid shift-out-of-bounds (Breno Leitao)
- pmdomain: ti-sci: Add missing of_node_put() for args.np (Zhang Zekun)
- ARM: dts: cubieboard4: Fix DCDC5 regulator constraints (Andre Przywara)
- pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle (Clark Wang)
- arm64: dts: mt8183: Damu: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)
- arm64: dts: mt8183: burnet: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)
- arm64: dts: mt8183: fennel: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)
- cgroup/bpf: only cgroup v2 can be attached by bpf programs (Chen Ridong)
- Revert 'cgroup: Fix memory leak caused by missing cgroup_bpf_offline' (Chen Ridong)
- arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source trackpad (Chen-Yu Tsai)
- arm64: dts: mt8183: kukui: Fix the address of eeprom at i2c4 (Hsin-Te Yuan)
- arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4 (Hsin-Te Yuan)
- tpm: fix signed/unsigned bug when checking event logs (Gregory Price)
- mmc: mmc_spi: drop buggy snprintf() (Bartosz Golaszewski)
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (Dan Carpenter)
- soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- spi: spi-fsl-lpspi: downgrade log level for pio mode (Alexander Stein)
- clocksource/drivers:sp804: Make user selectable (Mark Brown)
- kcsan, seqlock: Fix incorrect assumption in read_seqbegin() (Marco Elver)
- kcsan, seqlock: Support seqcount_latch_t (Marco Elver)
- seqlock/latch: Provide raw_read_seqcount_latch_retry() (Peter Zijlstra)
- timekeeping: Consolidate fast timekeeper (Thomas Gleixner)
- time: Fix references to _msecs_to_jiffies() handling of values (Miguel Ojeda)
- crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (Christophe JAILLET)
- crypto: bcm - add error check in the ahash_hmac_init function (Chen Ridong)
- crypto: caam - add error check to caam_rsa_set_priv_key_form (Chen Ridong)
- EDAC/igen6: Avoid segmentation fault on module unload (Orange Kao)
- crypto: cavium - Fix the if condition to exit loop after timeout (Everest K.C)
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (Yi Yang)
- EDAC/fsl_ddr: Fix bad bit shift operations (Priyanka Singh)
- thermal: core: Initialize thermal zones before registering them (Rafael J. Wysocki)
- crypto: qat - remove faulty arbiter config reset (Ahsan Atta)
- EDAC/bluefield: Fix potential integer overflow (David Thompson)
- firmware: google: Unregister driver_info on failure (Yuan Can)
- crypto: caam - Fix the pointer passed to caam_qi_shutdown() (Christophe JAILLET)
- hfsplus: don't query the device logical block size multiple times (Thadeu Lima de Souza Cascardo)
- s390/syscalls: Avoid creation of arch/arch/ directory (Masahiro Yamada)
- acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() (Aleksandr Mishin)
- arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG (Masahiro Yamada)
- m68k: mvme147: Reinstate early console (Daniel Palmer)
- m68k: mvme16x: Add and use 'mvme16x.h' (Geert Uytterhoeven)
- m68k: mvme147: Fix SCSI controller IRQ numbers (Daniel Palmer)
- nvme-pci: fix freeing of the HMB descriptor table (Christoph Hellwig)
- initramfs: avoid filename buffer overrun (David Disseldorp)
- mips: asm: fix warning when disabling MIPS_FP_SUPPORT (Jonas Gorski)
- brd: defer automatic disk creation until module initialization succeeds (Yang Erkun)
- brd: remove brd_devices_mutex mutex (Tetsuo Handa)
- s390/cio: Do not unregister the subchannel based on DNV (Vineeth Vijayan)
- kselftest/arm64: mte: fix printf type warnings about longs (Andre Przywara)
- x86/barrier: Do not serialize MSR accesses on AMD (Borislav Petkov (AMD))
- nvme: fix metadata handling in nvme-passthrough (Puranjay Mohan)
- cifs: Fix buffer overflow when parsing NFS reparse points (Pali Rohar)
- rcu-tasks: Idle tasks on offline CPUs are in quiescent states (Paul E. McKenney)
- ipmr: Fix access to mfc_cache_list without lock held (Breno Leitao)
- ARM: 9420/1: smp: Fix SMP for xip kernels (Harith G)
- ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry (Eryk Zagorski)
- proc/softirqs: replace seq_printf with seq_put_decimal_ull_width (David Wang)
- ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() (Luo Yifan)
- ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() (Luo Yifan)
- can: j1939: fix error in J1939 documentation. (Alexander Holzl)
- platform/x86: dell-wmi-base: Handle META key Lock/Unlock events (Kurt Borja)
- platform/x86: dell-smbios-base: Extends support to Alienware products (Kurt Borja)
- regulator: rk808: Add apply_bit for BUCK3 on RK809 (Mikhail Rudenko)
- soc: qcom: Add check devm_kasprintf() returned value (Charles Han)
- net: usb: qmi_wwan: add Quectel RG650V (Benoit Monin)
- x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB (Arnd Bergmann)
- ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 (Piyush Raj Chouhan)
- selftests/watchdog-test: Fix system accidentally reset after watchdog-test (Li Zhijian)
- usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver (Benjamin Grosse)
- mac80211: fix user-power when emulating chanctx (Ben Greear)
- wifi: iwlwifi: mvm: Use the sync timepoint API in suspend (Daniel Gabay)
- ASoC: Intel: sst: Support LPE0F28 ACPI HID (Hans de Goede)
- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet (Hans de Goede)
- ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec (Hans de Goede)
- NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Trond Myklebust)
- mm: resolve faulty mmap_region() error path behaviour (Lorenzo Stoakes)
- mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (Lorenzo Stoakes)
- mm: unconditionally close VMAs on error (Lorenzo Stoakes)
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook (Lorenzo Stoakes)
- mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Paolo Abeni)
- NFSD: Never decrement pending_async_copies on error (Chuck Lever)
- NFSD: Initialize struct nfsd4_copy earlier (Chuck Lever)
- NFSD: Limit the number of concurrent async COPY operations (Chuck Lever)
- NFSD: Async COPY result needs to return a write verifier (Chuck Lever)
- NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point (Dai Ngo)
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set (Mauro Carvalho Chehab)
- mmc: sunxi-mmc: Fix A100 compatible description (Andre Przywara)
- mmc: sunxi-mmc: Add D1 MMC variant (Samuel Holland)
- drm/bridge: tc358768: Fix DSI command tx (Francesco Dolcini)
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (Ryusuke Konishi)
- ocfs2: fix UBSAN warning in ocfs2_verify_volume() (Dmitry Antipov)
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (Ryusuke Konishi)
- KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (Sean Christopherson)
- KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled (Sean Christopherson)
- vdpa/mlx5: Fix PA offset with unaligned starting iotlb map (Si-Wei Liu)
- ocfs2: uncache inode which has failed entering the group (Dmitry Antipov)
- mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (Jinjiang Tu)
- x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y (Baoquan He)
- ARM: 9419/1: mm: Fix kernel memory mapping for xip kernels (Harith G)
- samples: pktgen: correct dev to DEV (Wei Fang)
- net/mlx5e: CT: Fix null-ptr-deref in add rule err flow (Moshe Shemesh)
- net/mlx5e: kTLS, Fix incorrect page refcounting (Dragos Tatulea)
- net/mlx5: fs, lock FTE when checking if active (Mark Bloch)
- drm/rockchip: vop: Fix a dereferenced before check warning (Andy Yan)
- netlink: terminate outstanding dump on socket close (Jakub Kicinski)
- clk: qcom: gcc-qcs404: fix initial rate of GPLL3 (Gabor Juhos)
- leds: lp55xx: Remove redundant test for invalid channel number (Michal Vokac)
- iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (Mostafa Saleh)
- vmstat: call fold_vm_zone_numa_events() before show per zone NUMA event (MengEn Sun)
- ftrace: Fix regression with module command in stack_trace_filter (guoweikang)
- ovl: Filter invalid inodes with missing lookup function (Vasiliy Kovalev)
- media: uvcvideo: Require entities to have a non-zero unique ID (Thadeu Lima de Souza Cascardo)
- media: uvcvideo: Stop stream during unregister (Ricardo Ribalda)
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() (Gaosheng Cui)
- media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() (Jinjie Ruan)
- media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled (Jinjie Ruan)
- media: ts2020: fix null-ptr-deref in ts2020_probe() (Li Zetao)
- media: imx-jpeg: Ensure power suppliers be suspended before detach them (Ming Qian)
- media: i2c: tc358743: Fix crash in the probe error path when using polling (Alexander Shiyan)
- media: imx-jpeg: Set video drvdata before register video device (Ming Qian)
- arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer (Dragan Simic)
- LTS version: v5.15.173 (Vijayendra Suman)
- 9p: fix slab cache name creation for real (Linus Torvalds)
- udf: Avoid directory type conversion failure due to ENOMEM (Jan Kara)
- udf: Allocate name buffer in directory iterator on heap (Jan Kara)
- mm/memory: add non-anonymous page check in the copy_present_page() (Yuanzheng Song)
- io_uring: fix possible deadlock in io_register_iowq_max_workers() (Hagar Hemdan)
- md/raid10: improve code of mrdev in raid10_sync_request (Li Nan)
- net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
- HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (Hans de Goede)
- HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad (Kenneth Albanowski)
- fs: Fix uninitialized value issue in from_kuid and from_kgid (Alessandro Zanni)
- vDPA/ifcvf: Fix pci_read_config_byte() return code handling (Yuan Can)
- powerpc/powernv: Free name on error in opal_event_init() (Michael Ellerman)
- drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS (Ian Forbes)
- sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML (Julian Vetter)
- crypto: marvell/cesa - Disable hash algorithms (Herbert Xu)
- bpf: use kvzmalloc to allocate BPF verifier environment (Rik van Riel)
- HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (WangYuli)
- HID: multitouch: Add support for B2402FVA track point (Stefan Blum)
- block: Fix elevator_get_default() checking for NULL q->tag_set (SurajSonawane2415)
- irqchip/ocelot: Fix trigger register address (Sergey Matsievskiy)
- 9p: Avoid creating multiple slab caches with the same name (Pedro Falcato)
- LTS version: v5.15.172 (Vijayendra Suman)
- ALSA: usb-audio: Add endianness annotations (Jan Schar)
- vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Hyunwoo Kim)
- hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (Hyunwoo Kim)
- ALSA: usb-audio: Add quirks for Dell WD19 dock (Jan Schar)
- ALSA: usb-audio: Support jack detection on Dell dock (Jan Schar)
- ucounts: fix counter leak in inc_rlimit_get_ucounts() (Andrei Vagin)
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (Andrew Kanner)
- irqchip/gic-v3: Force propagation of the active state with a read-back (Marc Zyngier)
- USB: serial: option: add Quectel RG650V (Benoit Monin)
- USB: serial: option: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
- USB: serial: qcserial: add support for Sierra Wireless EM86xx (Jack Wu)
- USB: serial: io_edgeport: fix use after free in debug printk (Dan Carpenter)
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() (Dan Carpenter)
- usb: musb: sunxi: Fix accessing an released usb phy (Zijun Hu)
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops' (Qi Xi)
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Benoit Sevens)
- net: do not delay dst_entries_add() in dst_release() (Eric Dumazet)
- net: bridge: xmit: make sure we have at least eth header len bytes (Nikolay Aleksandrov)
- btrfs: reinitialize delayed ref list after deleting it from the list (Filipe Manana)
- nfs: Fix KMSAN warning in decode_getfattr_attrs() (Roberto Sassu)
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (Jens Axboe)
- io_uring: use kiocb_{start,end}_write() helpers (Amir Goldstein)
- fs: create kiocb_{start,end}_write() helpers (Amir Goldstein)
- io_uring: rename kiocb_end_write() local helper (Amir Goldstein)
- posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone (Benjamin Segall)
- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam (Takashi Iwai)
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow (Zichen Xie)
- dm cache: fix potential out-of-bounds access on the first resume (Ming-Hung Tsai)
- dm cache: optimize dirty bit checking with find_next_bit when resizing (Ming-Hung Tsai)
- dm cache: fix out-of-bounds access to the dirty bitset when resizing (Ming-Hung Tsai)
- dm cache: correct the number of origin blocks to match the target length (Ming-Hung Tsai)
- thermal/drivers/qcom/lmh: Remove false lockdep backtrace (Dmitry Baryshkov)
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (Alex Deucher)
- drm/amdgpu: Adjust debugfs eviction and IB access permissions (Alex Deucher)
- pwm: imx-tpm: Use correct MODULO value for EPWM mode (Erik Schumacher)
- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl() (Mauro Carvalho Chehab)
- media: v4l2-tpg: prevent the risk of a division by zero (Mauro Carvalho Chehab)
- media: pulse8-cec: fix data timestamp at pulse8_setup() (Mauro Carvalho Chehab)
- media: cx24116: prevent overflows on SNR calculus (Mauro Carvalho Chehab)
- media: s5p-jpeg: prevent buffer overflows (Mauro Carvalho Chehab)
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove (Amelie Delaunay)
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() (Murad Masimov)
- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer (Johannes Thumshirn)
- media: adv7604: prevent underflow condition when reporting colorspace (Mauro Carvalho Chehab)
- media: dvb_frontend: don't play tricks with underflow values (Mauro Carvalho Chehab)
- media: dvbdev: prevent the risk of out of memory access (Mauro Carvalho Chehab)
- media: stb0899_algo: initialize cfr before using it (Mauro Carvalho Chehab)
- net: arc: fix the device for dma_map_single/dma_unmap_single (Johan Jonker)
- net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case (Nicolas F. R. A. Prado)
- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag (Diogo Silva)
- net: hns3: fix kernel crash when uninstalling driver (Peiyang Wang)
- i40e: fix race condition by adding filter's intermediate sync state (Aleksandr Loktionov)
- can: c_can: fix {rx,tx}_errors statistics (Dario Binacchi)
- sctp: properly validate chunk size in sctp_sf_ootb() (Xin Long)
- net: enetc: set MAC address to the VF net_device (Wei Fang)
- security/keys: fix slab-out-of-bounds in key_task_permission (Chen Ridong)
- nfs: avoid i_lock contention in nfs_clear_invalid_mapping (Mike Snitzer)
- NFSv3: handle out-of-order write replies. (NeilBrown)
- NFS: Add a tracepoint to show the results of nfs_set_cache_invalid() (Benjamin Coddington)
- NFSv3: only use NFS timeout for MOUNT when protocols are compatible (NeilBrown)
- HID: core: zero-initialize the report buffer (Jiri Kosina)
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin (Heiko Stuebner)
- ARM: dts: rockchip: Fix the spi controller on rk3036 (Heiko Stuebner)
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi (Heiko Stuebner)
- ARM: dts: rockchip: fix rk3036 acodec node (Heiko Stuebner)
- arm64: dts: imx8mp: correct sdhc ipg clk (Peng Fan)
- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc (Heiko Stuebner)
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion (Heiko Stuebner)
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards (Heiko Stuebner)
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 (Diederik de Haas)
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator (Geert Uytterhoeven)
[5.15.0-305.171.2]
- rds: ib: Avoid UAF on RDS Socket's rs_trans_lock (Hakon Bugge) [Orabug: 37475726]
- rds: ib: Fix blocked processes related to race in rds_rdma_free_dev_rs_worker() (Hakon Bugge) [Orabug: 37475726]
- rds: ib: Fix deterministic UAF in rds_rdma_free_dev_rs_worker() (Hakon Bugge) [Orabug: 37475726]
- uek-misc: Define a prefix for uek module messages (Alejandro Jimenez) [Orabug: 37459411]
- uek-misc: Clear the AVIC capability on platforms with known errata (Alejandro Jimenez) [Orabug: 37459411]
- uek-misc: Add identification for OCI platform (Alejandro Jimenez) [Orabug: 37459411]
- Revert 'MIPS: do not call flush_tlb_all when setting pmd entry' (Vijay Kumar) [Orabug: 37454162]
- cpufreq: intel_pstate: Support highest performance change interrupt (Srinivas Pandruvada) [Orabug: 37426908]
- x86/cpufeatures: Add HWP highest perf change feature flag (Srinivas Pandruvada) [Orabug: 37426908]
- cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE() annotations (Rafael J. Wysocki) [Orabug: 37426908]
- cpufreq: intel_pstate: Wait for canceled delayed work to complete (Rafael J. Wysocki) [Orabug: 37426908]
- cpufreq: intel_pstate: Simplify spinlock locking (Rafael J. Wysocki) [Orabug: 37426908]
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes (Rafael J. Wysocki) [Orabug: 37426908]
- uek-rpm: Enable CONFIG_FIPS_SIGNATURE_SELFTEST for all archs (Saeed Mirzamohammadi) [Orabug: 37400483]
- uek-rpm: set DEFAULTKERNEL to other installed uek if possible (Sherry Yang) [Orabug: 37399094]
[5.15.0-305.171.1]
- octeontx2-af: Fix CPT AF register offset calculation (Bharat Bhushan) [Orabug: 37445471]
- perf/arm-cmn: Remove for loop intial declarations (Dave Kleikamp) [Orabug: 37409090]
- perf/arm-cmn: Ensure port and device id bits are set properly (Namhyung Kim) [Orabug: 37409090]
- perf/arm-cmn: Improve format attr printing (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Clean up unnecessary NUMA_NO_NODE check (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Support CMN S3 (Robin Murphy) [Orabug: 37409090]
- dt-bindings: perf: arm-cmn: Add CMN S3 (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Refactor DTC PMU register access (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Make cycle counts less surprising (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Improve build-time assertion (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Ensure dtm_idx is big enough (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Fix CCLA register offset (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Refactor node ID handling. Again. (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Enable support for tertiary match group (Ilkka Koskinen) [Orabug: 37409090]
- perf/arm-cmn: Decouple wp_config registers from filter group number (Ilkka Koskinen) [Orabug: 37409090]
- perf/arm-cmn: Workaround AmpereOneX errata AC04_MESH_1 (incorrect child count) (Ilkka Koskinen) [Orabug: 37409090]
- perf/arm-cmn: Improve debugfs pretty-printing for large configs (Robin Murphy) [Orabug: 37409090]
- perf: arm-cmn: Convert to platform remove callback returning void (Uwe Kleine-Konig) [Orabug: 37409090]
- perf/arm-cmn: Fail DTC counter allocation correctly (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Fix HN-F class_occup_id events (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Enable per-DTC counter allocation (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Rework DTC counters (again) (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Fix DTC domain detection (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Add CMN-700 r3 support (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Refactor HN-F event selector macros (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Remove spurious event aliases (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Add sysfs identifier (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Revamp model detection (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Fix port detection for CMN-700 (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Validate cycles events fully (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Move overlapping wp_combine field (Ilkka Koskinen) [Orabug: 37409090]
- Partially revert 'perf/arm-cmn: Optimise DTC counter accesses' (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Reset DTM_PMU_CONFIG at probe (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Decode CAL devices properly in debugfs (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Fix filter_sel lookup (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Add CMN-700 support (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Refactor occupancy filter selector (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Add CMN-650 support (Robin Murphy) [Orabug: 37409090]
- dt-bindings: perf: arm-cmn: Add CMN-650 and CMN-700 (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Update watchpoint format (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Hide XP PUB events for CMN-600 (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Make arm_cmn_debugfs static (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Add debugfs topology info (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Add CI-700 Support (Robin Murphy) [Orabug: 37409090]
- dt-bindings: perf: arm-cmn: Add CI-700 (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Support new IP features (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Demarcate CMN-600 specifics (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Move group validation data off-stack (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Optimise DTC counter accesses (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Optimise DTM counter reads (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Refactor DTM handling (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Streamline node iteration (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Refactor node ID handling (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Drop compile-test restriction (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Account for NUMA affinity (Robin Murphy) [Orabug: 37409090]
- Acquire mem_cgroup_per_node.lruvec locks for online nodes only. (Imran Khan) [Orabug: 37405595]
- Fix issues seen with mail thread patches. (Imran Khan) [Orabug: 37405595]
- mm: lru: use lruvec lock to serialize memcg changes (Muchun Song) [Orabug: 37405595]
- mm: lru: add VM_BUG_ON_PAGE to lru maintenance function (Muchun Song) [Orabug: 37405595]
- mm: memcontrol: rename {un}lock_page_memcg() to {un}lock_page_objcg() (Muchun Song) [Orabug: 37405595]
- mm: memcontrol: use obj_cgroup APIs to charge the LRU pages (Muchun Song) [Orabug: 37405595]
- mm: memcontrol: introduce memcg_reparent_ops (Muchun Song) [Orabug: 37405595]
- mm: memcontrol: make all the callers of page_memcg() safe (Muchun Song) [Orabug: 37405595]
- mm: thp: make split queue lock safe when LRU pages reparented (Muchun Song) [Orabug: 37405595]
- mm: thp: introduce split_queue_lock/unlock{_irqsave}() (Muchun Song) [Orabug: 37405595]
- mm: vmscan: rework move_pages_to_lru() (Muchun Song) [Orabug: 37405595]
- mm: memcontrol: make lruvec lock safe when the LRU pages reparented (Muchun Song) [Orabug: 37405595]
- mm: memcontrol: introduce compact_lock_page_irqsave (Muchun Song) [Orabug: 37405595]
- mm: memcontrol: prepare objcg API for non-kmem usage (Muchun Song) [Orabug: 37405595]
- mm: move mem_cgroup_kmem_disabled() to memcontrol.h (Muchun Song) [Orabug: 37405595]
- Uek-rpm/ol9: Enable CONFIG_FIPS_SIGNATURE_SELFTEST for mips64 (Vijay Kumar) [Orabug: 37390881]
- sfc: Fix an error handling path in efx_pci_probe() (Christophe JAILLET) [Orabug: 37384497]
- sfc: Separate netdev probe/remove from PCI probe/remove (Jonathan Cooper) [Orabug: 37384497]
- sfc: replace function name in string with func (Jonathan Cooper) [Orabug: 37384497]
- sfc: Unsplit literal string. (Jonathan Cooper) [Orabug: 37384497]
- sfc: Move EF100 efx_nic_type structs to the end of the file (Jonathan Cooper) [Orabug: 37384497]
- sfc: Separate efx_nic memory from net_device memory (Jonathan Cooper) [Orabug: 37384497]
- sfc: Encapsulate access to netdev_priv() (Jonathan Cooper) [Orabug: 37384497]
- sfc: Add a PROBED state for EF100 VDPA use. (Jonathan Cooper) [Orabug: 37384497]
- ACPICA: Allow PCC Data Type in MCTP resource. (Adam Young) [Orabug: 37311726]
- ACPICA: Avoid undefined behavior: member access within misaligned address (Tamir Duberstein) [Orabug: 37311726]
- arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a (D Scott Phillips) [Orabug: 37311726]
- arm64: Expose the end of the linear map in PHYSMEM_END (D Scott Phillips) [Orabug: 37311726]
- seqcount: replace smp_rmb() in read_seqcount() with load acquire (Christoph Lameter (Ampere)) [Orabug: 37311726]
- uek-rpm: Enable new config options for Ampere (Dave Kleikamp) [Orabug: 37311726]
- vmalloc: modify the alloc_vmap_area() error message for better diagnostics (Shubhang Kaushik OS) [Orabug: 37311726]
- NUMA: early use of cpu_to_node() returns 0 instead of the correct node id (Huang Shijie) [Orabug: 37311726]
- mm: mmap: no need to call khugepaged_enter_vma() for stack (Yang Shi) [Orabug: 37311726]
- crash_core: export vmemmap when CONFIG_SPARSEMEM_VMEMMAP is enabled (Huang Shijie) [Orabug: 37311726]
- PCI: acpiphp: Allow built-in drivers for Attention Indicators (D Scott Phillips) [Orabug: 37311726]
- PCI: acpiphp: Add missing MODULE_DESCRIPTION() macro (Jeff Johnson) [Orabug: 37311726]
- PCI: hotplug: Add Ampere Altra Attention Indicator extension driver (D Scott Phillips) [Orabug: 37311726]
- mm: mempolicy: keep VMA walk if both MPOL_MF_STRICT and MPOL_MF_MOVE are specified (Yang Shi) [Orabug: 37311726]
- arm64: compat: Work around uninitialized variable warning (Ard Biesheuvel) [Orabug: 37311726]
- arm64: compat: Implement misalignment fixups for multiword loads (Ard Biesheuvel) [Orabug: 37311726]
- RDMA/mlx5: Expose vhca id for all ports in multiport mode (Mark Bloch) [Orabug: 37234285]
- rds/ib: avoid scq/rcq polling during rds connection shutdown (Arumugam Kolappan) [Orabug: 37055939]
- RDMA/mlx5: Send UAR page index as ioctl attribute (Akiva Goldberger) [Orabug: 37029766]
- RDMA: Pass entire uverbs attr bundle to create cq function (Akiva Goldberger) [Orabug: 37029766]
- net/mlx5e: Fix CT entry update leaks of modify header context (Chris Mi) [Orabug: 36948578] {CVE-2024-43864}
- net/mlx5e: Require mlx5 tc classifier action support for IPsec prio capability (Rahul Rameshbabu) [Orabug: 36948578]
- net/mlx5: Fix missing lock on sync reset reload (Moshe Shemesh) [Orabug: 36948578] {CVE-2024-42268}
- net/mlx5: Lag, don't use the hardcoded value of the first port (Mark Bloch) [Orabug: 36948578]
- mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file (Aleksandr Mishin) [Orabug: 36948578] {CVE-2024-42138}
- net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() (Jianbo Liu) [Orabug: 36948578]
- net/mlx5: E-switch, Create ingress ACL when needed (Chris Mi) [Orabug: 36948578]
- mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems (Ido Schimmel) [Orabug: 36948578] {CVE-2024-42073}
- RDMA/mlx5: Fix unwind flow as part of mlx5_ib_stage_init_init (Yishai Hadas) [Orabug: 36948578]
- RDMA/mlx5: Ensure created mkeys always have a populated rb_key (Jason Gunthorpe) [Orabug: 36948578]
- RDMA/mlx5: Follow rb_key.ats when creating new mkeys (Jason Gunthorpe) [Orabug: 36948578]
- RDMA/mlx5: Remove extra unlock on error path (Jason Gunthorpe) [Orabug: 36948578]
- net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (Aleksandr Mishin) [Orabug: 36948578] {CVE-2024-40939}
- net/mlx5: Always stop health timer during driver removal (Shay Drory) [Orabug: 36948578] {CVE-2024-40906}
- net/mlx5: Fix MTMP register capability offset in MCAM register (Gal Pressman) [Orabug: 36948578]
- net/mlx5e: Advertise mlx5 ethernet driver updates sk_buff md_dst for MACsec (Rahul Rameshbabu) [Orabug: 36948578]
- mlxsw: core_env: Fix driver initialization with old firmware (Ido Schimmel) [Orabug: 36948578]
- net/mlx5: Lag, restore buckets number to default after hash LAG deactivation (Shay Drory) [Orabug: 36948578]
- net/mlx5e: Do not produce metadata freelist entries in Tx port ts WQE xmit (Rahul Rameshbabu) [Orabug: 36948578]
- RDMA/mlx5: Change check for cacheable mkeys (Or Har-Toov) [Orabug: 36948578]
- RDMA/mlx5: Uncacheable mkey has neither rb_key or cache_ent (Or Har-Toov) [Orabug: 36948578]
- mlx5: avoid truncating error message (Arnd Bergmann) [Orabug: 36948578]
- net/mlx5: Check capability for fw_reset (Moshe Shemesh) [Orabug: 36948578]
- net/mlx5: SF, Stop waiting for FW as teardown was called (Moshe Shemesh) [Orabug: 36948578]
- netlink: Correct offload_xstats size (Christoph Paasch) [Orabug: 36948578]
- net: fix net_dev_start_xmit trace event vs skb_transport_offset() (Eric Dumazet) [Orabug: 36948578]
- lib/bitmap: drop optimization of bitmap_{from,to}_arr64 (Yury Norov) [Orabug: 36948578]
- net: macsec: fix double free of percpu stats (Fedor Pchelkin) [Orabug: 36948578]
- tcp: gso: really support BIG TCP (Eric Dumazet) [Orabug: 36948578]
- RDMA/mlx5: Use rdma_umem_for_each_dma_block() (Jason Gunthorpe) [Orabug: 36948578]
- nfp: flower: fix ingress police using matchall filter (Tianyu Yuan) [Orabug: 36948578]
- lib/bitmap: fix off-by-one in bitmap_to_arr64() (Alexander Lobakin) [Orabug: 36948578]
- RDMA/mlx5: Fix flow steering egress flow (Leon Romanovsky) [Orabug: 36948578]
- rtnetlink: Fix handling of disabled L3 stats in RTM_GETSTATS replies (Petr Machata) [Orabug: 36948578]
- tun: annotate access to queue->trans_start (Antoine Tenart) [Orabug: 36948578]
- xsk: Do not write NULL in SW ring at allocation failure (Magnus Karlsson) [Orabug: 36948578]
- net/sched: fix incorrect vlan_push_eth dest field (Louis Peens) [Orabug: 36948578]
- RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit() (Dan Carpenter) [Orabug: 36948578]
- net_tstamp: define new flag HWTSTAMP_FLAG_BONDED_PHC_INDEX (Hangbin Liu) [Orabug: 36948578]
- net: add missing include in include/net/gro.h (Eric Dumazet) [Orabug: 36948578]
- IB/hfi1: Properly allocate rdma counter desc memory (Dennis Dalessandro) [Orabug: 36948578]
- xsk: Initialise xskb free_list_node (Ciara Loftus) [Orabug: 36948578]
- xsk: Fix crash on double free in buffer pool (Magnus Karlsson) [Orabug: 36948578]
- KVM: x86: WARN only once if KVM leaves a dangling userspace I/O request (Sean Christopherson) [Orabug: 36815282]
- KVM: x86: Suppress pending MMIO write exits if emulator detects exception (Sean Christopherson) [Orabug: 36815282]
Обновленные пакеты
Oracle Linux 9
Oracle Linux aarch64
bpftool
5.15.0-305.176.4.el9uek
kernel-uek
5.15.0-305.176.4.el9uek
kernel-uek-container
5.15.0-305.176.4.el9uek
kernel-uek-container-debug
5.15.0-305.176.4.el9uek
kernel-uek-core
5.15.0-305.176.4.el9uek
kernel-uek-debug
5.15.0-305.176.4.el9uek
kernel-uek-debug-core
5.15.0-305.176.4.el9uek
kernel-uek-debug-devel
5.15.0-305.176.4.el9uek
kernel-uek-debug-modules
5.15.0-305.176.4.el9uek
kernel-uek-debug-modules-extra
5.15.0-305.176.4.el9uek
kernel-uek-devel
5.15.0-305.176.4.el9uek
kernel-uek-doc
5.15.0-305.176.4.el9uek
kernel-uek-modules
5.15.0-305.176.4.el9uek
kernel-uek-modules-extra
5.15.0-305.176.4.el9uek
Oracle Linux x86_64
bpftool
5.15.0-305.176.4.el9uek
kernel-uek
5.15.0-305.176.4.el9uek
kernel-uek-core
5.15.0-305.176.4.el9uek
kernel-uek-debug
5.15.0-305.176.4.el9uek
kernel-uek-debug-modules
5.15.0-305.176.4.el9uek
kernel-uek-devel
5.15.0-305.176.4.el9uek
kernel-uek-doc
5.15.0-305.176.4.el9uek
kernel-uek-modules
5.15.0-305.176.4.el9uek
kernel-uek-container
5.15.0-305.176.4.el9uek
kernel-uek-container-debug
5.15.0-305.176.4.el9uek
kernel-uek-debug-core
5.15.0-305.176.4.el9uek
kernel-uek-debug-devel
5.15.0-305.176.4.el9uek
kernel-uek-debug-modules-extra
5.15.0-305.176.4.el9uek
kernel-uek-modules-extra
5.15.0-305.176.4.el9uek
Oracle Linux 8
Oracle Linux aarch64
bpftool
5.15.0-305.176.4.el8uek
kernel-uek
5.15.0-305.176.4.el8uek
kernel-uek-container
5.15.0-305.176.4.el8uek
kernel-uek-container-debug
5.15.0-305.176.4.el8uek
kernel-uek-core
5.15.0-305.176.4.el8uek
kernel-uek-debug
5.15.0-305.176.4.el8uek
kernel-uek-debug-core
5.15.0-305.176.4.el8uek
kernel-uek-debug-devel
5.15.0-305.176.4.el8uek
kernel-uek-debug-modules
5.15.0-305.176.4.el8uek
kernel-uek-debug-modules-extra
5.15.0-305.176.4.el8uek
kernel-uek-devel
5.15.0-305.176.4.el8uek
kernel-uek-doc
5.15.0-305.176.4.el8uek
kernel-uek-modules
5.15.0-305.176.4.el8uek
kernel-uek-modules-extra
5.15.0-305.176.4.el8uek
Oracle Linux x86_64
bpftool
5.15.0-305.176.4.el8uek
kernel-uek
5.15.0-305.176.4.el8uek
kernel-uek-container
5.15.0-305.176.4.el8uek
kernel-uek-container-debug
5.15.0-305.176.4.el8uek
kernel-uek-core
5.15.0-305.176.4.el8uek
kernel-uek-debug
5.15.0-305.176.4.el8uek
kernel-uek-debug-core
5.15.0-305.176.4.el8uek
kernel-uek-debug-devel
5.15.0-305.176.4.el8uek
kernel-uek-debug-modules
5.15.0-305.176.4.el8uek
kernel-uek-debug-modules-extra
5.15.0-305.176.4.el8uek
kernel-uek-devel
5.15.0-305.176.4.el8uek
kernel-uek-doc
5.15.0-305.176.4.el8uek
kernel-uek-modules
5.15.0-305.176.4.el8uek
kernel-uek-modules-extra
5.15.0-305.176.4.el8uek
Связанные CVE
Ссылки на источники
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail In case of region creation fail in ipc_devlink_create_region(), previously created regions delete process starts from tainted pointer which actually holds error code value. Fix this bug by decreasing region index before delete. Found by Linux Verification Center (linuxtesting.org) with SVACE.
In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail In case of region creation fail in ipc_devlink_create_region(), previously created regions delete process starts from tainted pointer which actually holds error code value. Fix this bug by decreasing region index before delete. Found by Linux Verification Center (linuxtesting.org) with SVACE.
In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail In case of region creation fail in ipc_devlink_create_region(), previously created regions delete process starts from tainted pointer which actually holds error code value. Fix this bug by decreasing region index before delete. Found by Linux Verification Center (linuxtesting.org) with SVACE.
In the Linux kernel, the following vulnerability has been resolved: n ...
In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail In case of region creation fail in ipc_devlink_create_region(), previously created regions delete process starts from tainted pointer which actually holds error code value. Fix this bug by decreasing region index before delete. Found by Linux Verification Center (linuxtesting.org) with SVACE.