# changelog

author: Brian Maly <brian.maly@oracle.com> [5.15.0-300.161.12.el8uek]
changelog:
  - scsi: mpt3sas: Avoid possible run-time warning with long manufacturer strings (Kees Cook)  [Orabug: 36892249]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-303.168.2.el8uek]
changelog:
  - Revert "rds: ib: Make sure receives are posted before connection is up" (Gerd Rausch)  [Orabug: 37244182]
  - uek-rpm/ol9/config-mips64: Align MIPS64 Crypto configs with x86_64 (Vijay Kumar)  [Orabug: 37218693]
  - rds: ib: Avoid reuse of IB MRs when cleaning is in progress (Håkon Bugge)  [Orabug: 37206836]
  - spec: Set CONFIG_CRYPTO_FIPS_NAME for standard & embedded kernels (Jonah Palmer)  [Orabug: 37137136]
  - spec: Set CONFIG_CRYPTO_FIPS_NAME for container kernels (Jonah Palmer)  [Orabug: 37137136]
  - spec: Add UEK release macros for UEK7 (Jonah Palmer)  [Orabug: 37137136]
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol9 Pensando embedded kernels (Jonah Palmer)  [Orabug: 37137136]
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol9 T93 embedded kernels (Jonah Palmer)  [Orabug: 37137136]
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol9 MIPS64 embedded kernels (Jonah Palmer)  [Orabug: 37137136]
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol8 Bluefield 3 smartnic embedded kernels (Jonah Palmer)  [Orabug: 37137136]
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol8/ol9 standard kernels (Jonah Palmer)  [Orabug: 37137136]
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol8/ol9 container kernels (Jonah Palmer)  [Orabug: 37137136]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-303.168.3.el8uek]
changelog:
  - ACPI: CPPC: Make rmw_lock a raw_spin_lock (Pierre Gondois) [Orabug: 37268714] {CVE-2024-50249}
  - net: usb: usbnet: fix name regression (Oliver Neukum)
  - mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (Matthieu Baerts (NGI0))
  - parport: Proper fix for array out-of-bounds access (Takashi Iwai) [Orabug: 37227435] {CVE-2024-50074}
  - netfilter: xtables: fix typo causing some targets not to load on IPv6 (Pablo Neira Ayuso)
  - block, bfq: fix procress reference leakage for bfqq in merge chain (Yu Kuai)
  - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (Ido Schimmel) [Orabug: 37304697] {CVE-2024-53042}
  - usb: dwc3: core: Fix system suspend on TI AM62 platforms (Roger Quadros)
  - Revert "driver core: Fix uevent_show() vs driver detach race" (Greg Kroah-Hartman)
  - jfs: Fix sanity check in dbMount (Dave Kleikamp)
  - octeontx2-af: Fix potential integer overflows on integer shifts (Colin Ian King)
  - gtp: allow -1 to be specified as file description from userspace (Pablo Neira Ayuso)
  - scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages (Justin Tee)  [Orabug: 37070103]  {CVE-2024-43816}
  - blk-cgroup: Properly propagate the iostat update up the hierarchy (Waiman Long)  [Orabug: 37264361]
  - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei)  [Orabug: 37264361] {CVE-2024-38384}
  - blk-cgroup: fix list corruption from resetting io stat (Ming Lei)  [Orabug: 37264361] {CVE-2024-38663}
  - blk-cgroup: Flush stats before releasing blkcg_gq (Ming Lei)  [Orabug: 37264361]
  - blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() (Waiman Long)  [Orabug: 37264361]
  - blk-cgroup: don't update io stat for root cgroup (Ming Lei)  [Orabug: 37264361]
  - blk-cgroup: Optimize blkcg_rstat_flush() (Waiman Long)  [Orabug: 37264361]
  - blk-cgroup: Return -ENOMEM directly in blkcg_css_alloc() error path (Waiman Long)  [Orabug: 37264361]
  - vfio/iommu_type1: replace kfree with kvfree (Jiacheng Shi)  [Orabug: 37263362]
  - i2c: i801: Add support for Intel Birch Stream SoC (Jarkko Nikula)  [Orabug: 37249533]
  - nvme: fix deadlock between reset and scan (Bitao Hu)  [Orabug: 37244604]
  - virt: sevguest: Add TSM_REPORTS support for SNP_GET_EXT_REPORT (Dan Williams)  [Orabug: 37070016]
  - virt: sevguest: Prep for kernel internal get_ext_report() (Dan Williams)  [Orabug: 37070016]
  - configfs-tsm: Introduce a shared ABI for attestation reports (Dan Williams)  [Orabug: 37070016]
  - virt: coco: Add a coco/Makefile and coco/Kconfig (Dan Williams)  [Orabug: 37070016]
  - virt: sevguest: Fix passing a stack buffer as a scatterlist target (Dan Williams)  [Orabug: 37070016]
  - x86/sev: Change snp_guest_issue_request()'s fw_err argument (Dionna Glaze)  [Orabug: 37070016]
  - crypto: ccp - Name -1 return value as SEV_RET_NO_FW_CALL (Peter Gonda)  [Orabug: 37070016]
  - virt/coco/sev-guest: Double-buffer messages (Dionna Glaze)  [Orabug: 37070016]
  - virt/coco/sev-guest: Add throttling awareness (Dionna Glaze)  [Orabug: 37070016]
  - virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case (Borislav Petkov (AMD))  [Orabug: 37070016]
  - virt/coco/sev-guest: Do some code style cleanups (Borislav Petkov (AMD))  [Orabug: 37070016]
  - virt/coco/sev-guest: Carve out the request issuing logic into a helper (Borislav Petkov (AMD))  [Orabug: 37070016]
  - virt/coco/sev-guest: Remove the disable_vmpck label in handle_guest_request() (Borislav Petkov (AMD))  [Orabug: 37070016]
  - virt/coco/sev-guest: Simplify extended guest request handling (Borislav Petkov (AMD))  [Orabug: 37070016]
  - virt/coco/sev-guest: Check SEV_SNP attribute at probe time (Borislav Petkov (AMD))  [Orabug: 37070016]
  - x86/sev: Mark snp_abort() noreturn (Borislav Petkov)  [Orabug: 37070016]
  - kbuild: Drop -Wdeclaration-after-statement (Peter Zijlstra)  [Orabug: 37070016]
  - apparmor: Free up __cleanup() name (Peter Zijlstra)  [Orabug: 37070016]
  - fwctl: Expand adaption of code for UEK7 (Liam Merwick)  [Orabug: 37070016]
  - mm/slab: Add __free() support for kvfree (Dan Williams)  [Orabug: 37070016]
  - mm: move kvmalloc-related functions to slab.h (Matthew Wilcox (Oracle))  [Orabug: 37070016]
  - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Tom Lendacky)  [Orabug: 37070016]
  - iommu/amd: Do not identity map v2 capable device when snp is enabled (Vasant Hegde)  [Orabug: 37070016]
  - virt: sevguest: Add CONFIG_CRYPTO dependency (Arnd Bergmann)  [Orabug: 37070016]
  - virt/sev-guest: Remove unnecessary free in init_crypto() (Rafael Mendonca)  [Orabug: 37070016]
  - virt/sev-guest: Add a MODULE_ALIAS (Cole Robinson)  [Orabug: 37070016]
  - virt/sev-guest: Return -EIO if certificate buffer is not large enough (Tom Lendacky)  [Orabug: 37070016]
  - virt/sev-guest: Prevent IV reuse in the SNP guest driver (Peter Gonda)  [Orabug: 37070016]
  - x86/compressed/64: Add identity mappings for setup_data entries (Michael Roth)  [Orabug: 37070016]
  - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Borislav Petkov (AMD))  [Orabug: 37070016]
  - x86/sev: Use the GHCB protocol when available for SNP CPUID requests (Tom Lendacky)  [Orabug: 37070016]
  - x86/boot: Fix the setup data types max limit (Borislav Petkov)  [Orabug: 37070016]
  - x86/sev: Don't use cc_platform_has() for early SEV-SNP calls (Tom Lendacky)  [Orabug: 37070016]
  - x86/sev: Fix calculation of end address based on number of pages (Tom Lendacky)  [Orabug: 37070016]
  - x86/sev: Fix kernel crash due to late update to read-only ghcb_version (Ashwin Dayanand Kamat)  [Orabug: 37070016]
  - x86/sev: Add SEV-SNP guest feature negotiation support (Nikunj A Dadhania)  [Orabug: 37070016]
  - Revert "x86/sev: Expose sev_es_ghcb_hv_call() for use by HyperV" (Borislav Petkov)  [Orabug: 37070016]
  - x86/boot: Don't propagate uninitialized boot_params->cc_blob_address (Michael Roth)  [Orabug: 37070016]
  - KVM: SVM: Only dump VMSA to klog at KERN_DEBUG level (Peter Gonda)  [Orabug: 37070016]
  - KVM: SVM: Dump Virtual Machine Save Area (VMSA) to klog (Jarkko Sakkinen)  [Orabug: 37070016]
  - KVM: SVM: Exit to userspace on ENOMEM/EFAULT GHCB errors (Sean Christopherson)  [Orabug: 37070016]
  - iommu/amd: Add support for AVIC when SNP is enabled (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Do not support IOMMUv2 APIs when SNP is enabled (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Do not support IOMMU_DOMAIN_IDENTITY after SNP is enabled (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Set translation valid bit only when IO page tables are in use (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Introduce function to check and enable SNP (Brijesh Singh)  [Orabug: 37070016]
  - iommu/amd: Globally detect SNP support (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Process all IVHDs before enabling IOMMU features (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Introduce global variable for storing common EFR and EFR2 (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Introduce Support for Extended Feature 2 Register (Suravee Suthikulpanit)  [Orabug: 37070016]
  - x86/sev: Remove duplicated assignment to variable info (Colin Ian King)  [Orabug: 37070016]
  - x86/sev: Fix address space sparse warning (Borislav Petkov)  [Orabug: 37070016]
  - x86/sev: Get the AP jump table address from secrets page (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Add missing __init annotations to SEV init routines (Michael Roth)  [Orabug: 37070016]
  - crypto: ccp - Log when resetting PSP SEV state (Peter Gonda)  [Orabug: 37070016]
  - virt: sev-guest: Pass the appropriate argument type to iounmap() (Tom Lendacky)  [Orabug: 37070016]
  - virt: sevguest: Rename the sevguest dir and files to sev-guest (Tom Lendacky)  [Orabug: 37070016]
  - virt: sevguest: Change driver name to reflect generic SEV support (Tom Lendacky)  [Orabug: 37070016]
  - x86/boot: Put globals that are accessed early into the .data section (Michael Roth)  [Orabug: 37070016]
  - virt: sevguest: Fix bool function returning negative value (Haowen Bai)  [Orabug: 37070016]
  - virt: sevguest: Fix return value check in alloc_shared_pages() (Yang Yingliang)  [Orabug: 37070016]
  - x86/sev-es: Replace open-coded hlt-loop with sev_es_terminate() (Peter Gonda)  [Orabug: 37070016]
  - virt: sevguest: Add documentation for SEV-SNP CPUID Enforcement (Michael Roth)  [Orabug: 37070016]
  - virt: sevguest: Add support to get extended report (Brijesh Singh)  [Orabug: 37070016]
  - virt: sevguest: Add support to derive key (Brijesh Singh)  [Orabug: 37070016]
  - virt: Add SEV-SNP guest driver (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Register SEV-SNP guest request platform device (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Provide support for SNP guest request NAEs (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Add a sev= cmdline option (Michael Roth)  [Orabug: 37070016]
  - x86/sev: Use firmware-validated CPUID for SEV-SNP guests (Michael Roth)  [Orabug: 37070016]
  - x86/sev: Add SEV-SNP feature detection/setup (Michael Roth)  [Orabug: 37070016]
  - x86/compressed/64: Add identity mapping for Confidential Computing blob (Michael Roth)  [Orabug: 37070016]
  - x86/compressed: Use firmware-validated CPUID leaves for SEV-SNP guests (Michael Roth)  [Orabug: 37070016]
  - x86/compressed: Add SEV-SNP feature detection/setup (Michael Roth)  [Orabug: 37070016]
  - x86/boot: Add a pointer to Confidential Computing blob in bootparams (Michael Roth)  [Orabug: 37070016]
  - x86/compressed/64: Add support for SEV-SNP CPUID table in #VC handlers (Michael Roth)  [Orabug: 37070016]
  - x86/sev: Move MSR-based VMGEXITs for CPUID to helper (Michael Roth)  [Orabug: 37070016]
  - KVM: x86: Move lookup of indexed CPUID leafs to helper (Michael Roth)  [Orabug: 37070016]
  - x86/boot: Add Confidential Computing type to setup_data (Brijesh Singh)  [Orabug: 37070016]
  - x86/compressed/acpi: Move EFI kexec handling into common code (Michael Roth)  [Orabug: 37070016]
  - x86/compressed/acpi: Move EFI vendor table lookup to helper (Michael Roth)  [Orabug: 37070016]
  - x86/compressed/acpi: Move EFI config table lookup to helper (Michael Roth)  [Orabug: 37070016]
  - x86/compressed/acpi: Move EFI system table lookup to helper (Michael Roth)  [Orabug: 37070016]
  - x86/head/64: Re-enable stack protection (Michael Roth)  [Orabug: 37070016]
  - x86/sev: Use SEV-SNP AP creation to start secondary CPUs (Tom Lendacky)  [Orabug: 37070016]
  - x86/sev: Remove do_early_exception() forward declarations (Borislav Petkov)  [Orabug: 37070016]
  - x86/mm: Validate memory when changing the C-bit (Brijesh Singh)  [Orabug: 37070016]
  - x86/mm/cpa: Generalize __set_memory_enc_pgtable() (Brijesh Singh)  [Orabug: 37070016]
  - x86/kernel: Validate ROM memory before accessing when SEV-SNP is active (Brijesh Singh)  [Orabug: 37070016]
  - x86/kernel: Mark the .bss..decrypted section as shared in the RMP table (Brijesh Singh)  [Orabug: 37070016]
  - x86/head64: Add missing __head annotation to sme_postprocess_startup() (Marco Bonelli)  [Orabug: 37070016]
  - x86/head64: Carve out the guest encryption postprocessing into a helper (Borislav Petkov)  [Orabug: 37070016]
  - x86/sev: Add helper for validating pages in early enc attribute changes (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Register GHCB memory when SEV-SNP is active (Brijesh Singh)  [Orabug: 37070016]
  - x86/compressed: Register GHCB memory when SEV-SNP is active (Brijesh Singh)  [Orabug: 37070016]
  - x86/compressed: Add helper for validating pages in the decompression stage (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Check the VMPL level (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Add a helper for the PVALIDATE instruction (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Check SEV-SNP features support (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Save the negotiated GHCB version (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Define the Linux-specific guest termination reasons (Brijesh Singh)  [Orabug: 37070016]
  - x86/mm: Extend cc_attr to include AMD SEV-SNP (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Detect/setup SEV/SME features earlier in boot (Michael Roth)  [Orabug: 37070016]
  - x86/compressed/64: Detect/setup SEV/SME features earlier during boot (Michael Roth)  [Orabug: 37070016]
  - KVM: SVM: Update the SEV-ES save area mapping (Tom Lendacky)  [Orabug: 37070016]
  - KVM: SVM: Create a separate mapping for the GHCB save area (Tom Lendacky)  [Orabug: 37070016] [Orabug: 37070016]
  - KVM: SVM: Create a separate mapping for the SEV-ES save area (Tom Lendacky)  [Orabug: 37070016]
  - KVM: SVM: Define sev_features and VMPL field in the VMSA (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Move common memory encryption code to mem_encrypt.c (Kirill A. Shutemov)  [Orabug: 37070016]
  - x86/sev: Rename mem_encrypt.c to mem_encrypt_amd.c (Kuppuswamy Sathyanarayanan)  [Orabug: 37070016]
  - x86/sev: Get rid of excessive use of defines (Borislav Petkov)  [Orabug: 37070016]
  - x86/sev: Shorten GHCB terminate macro names (Brijesh Singh)  [Orabug: 37070016]
  - x86/coco: Add API to handle encryption mask (Kirill A. Shutemov)  [Orabug: 37070016]
  - x86/coco: Explicitly declare type of confidential computing platform (Kirill A. Shutemov)  [Orabug: 37070016]
  - x86/hyperv: Initialize GHCB page in Isolation VM (Tianyu Lan)  [Orabug: 37070016]
  - x86/cc: Move arch/x86/{kernel/cc_platform.c => coco/core.c} (Kirill A. Shutemov)  [Orabug: 37070016]
  - x86/hyper-v: Add hyperv Isolation VM check in the cc_platform_has() (Tianyu Lan)  [Orabug: 37070016]
  - crypto: ccp - Add SEV_INIT_EX support (David Rientjes)  [Orabug: 37070016]
  - crypto: ccp - Add psp_init_on_probe module parameter (Peter Gonda)  [Orabug: 37070016]
  - crypto: ccp - Add SEV_INIT rc error logging on init (Peter Gonda)  [Orabug: 37070016]
  - KVM: SVM: Hide SEV migration lockdep goo behind CONFIG_PROVE_LOCKING (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SVM: Skip VMSA init in sev_es_init_vmcb() if pointer is NULL (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SEV: Init target VMCBs in sev_migrate_from (Peter Gonda)  [Orabug: 37070016]
  - KVM, SEV: Add KVM_EXIT_SHUTDOWN metadata for SEV-ES (Peter Gonda)  [Orabug: 37070016]
  - KVM: SEV: Mark nested locking of vcpu->lock (Peter Gonda)  [Orabug: 37070016]
  - KVM: SVM: Simplify and harden helper to flush SEV guest page(s) (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SEV: Add cond_resched() to loop in sev_clflush_pages() (Peter Gonda)  [Orabug: 37070016]
  - KVM: SEV: Allow SEV intra-host migration of VM with mirrors (Peter Gonda)  [Orabug: 37070016]
  - KVM: SVM: improve split between svm_prepare_guest_switch and sev_es_prepare_guest_switch (Paolo Bonzini)  [Orabug: 37070016]
  - selftests: KVM: sev_migrate_tests: Add mirror command tests (Peter Gonda)  [Orabug: 37070016]
  - selftests: KVM: sev_migrate_tests: Fix sev_ioctl() (Peter Gonda)  [Orabug: 37070016]
  - selftests: KVM: sev_migrate_tests: Fix test_sev_mirror() (Peter Gonda)  [Orabug: 37070016]
  - KVM: SEV: Mark nested locking of kvm->lock (Wanpeng Li)  [Orabug: 37070016]
  - KVM: SVM: Do not terminate SEV-ES guests on GHCB validation failure (Tom Lendacky)  [Orabug: 37070016]
  - KVM: SEV: Fall back to vmalloc for SEV-ES scratch area if necessary (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SEV: accept signals in sev_lock_two_vms (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: do not take kvm->lock when destroying (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: Prohibit migration of a VM that has mirrors (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: Do COPY_ENC_CONTEXT_FROM with both VMs locked (Paolo Bonzini)  [Orabug: 37070016]
  - selftests: sev_migrate_tests: add tests for KVM_CAP_VM_COPY_ENC_CONTEXT_FROM (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: move mirror status to destination of KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: cleanup locking for KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: do not use list_replace_init on an empty list (Paolo Bonzini)  [Orabug: 37070016]
  - selftests: sev_migrate_tests: free all VMs (Paolo Bonzini)  [Orabug: 37070016]
  - selftests: fix check for circular KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: Fix typo in and tweak name of cmd_allowed_from_miror() (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SEV: Drop a redundant setting of sev->asid during initialization (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SEV: Set sev_info.active after initial checks in sev_guest_init() (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SEV: unify cgroup cleanup code for svm_vm_migrate_from (Paolo Bonzini)  [Orabug: 37070016]
  - selftest: KVM: Add intra host migration tests (Peter Gonda)  [Orabug: 37070016]
  - KVM: selftests: Use pattern matching in .gitignore (Sean Christopherson)  [Orabug: 37070016]
  - selftest: KVM: Add open sev dev helper (Peter Gonda)  [Orabug: 37070016]
  - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature. (Ashish Kalra)  [Orabug: 37070016]
  - EFI: Introduce the new AMD Memory Encryption GUID. (Ashish Kalra)  [Orabug: 37070016]
  - mm: x86: Invoke hypercall when page encryption status is changed (Brijesh Singh)  [Orabug: 37070016]
  - x86/kvm: Add AMD SEV specific Hypercall3 (Brijesh Singh)  [Orabug: 37070016]
  - KVM: SEV: Add support for SEV-ES intra host migration (Peter Gonda)  [Orabug: 37070016]
  - KVM: SEV: Add support for SEV intra host migration (Peter Gonda)  [Orabug: 37070016]
  - KVM: SEV: provide helpers to charge/uncharge misc_cg (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: Refactor out sev_es_state struct (Peter Gonda)  [Orabug: 37070016]
  - x86/sev: Expose sev_es_ghcb_hv_call() for use by HyperV (Tianyu Lan)  [Orabug: 37070016]
  - x86/sev: Allow #VC exceptions on the VC2 stack (Joerg Roedel)  [Orabug: 37070016]
  - KVM: generalize "bugged" VM to "dead" VM (Paolo Bonzini)  [Orabug: 37070016]
  - x86/sev: Carve out HV call's return value verification (Borislav Petkov)  [Orabug: 37070016]
  - KVM: Free new dirty bitmap if creating a new memslot fails (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Fix comments that refer to the non-existent install_new_memslots() (Jun Miao)  [Orabug: 37070016]
  - KVM: x86: Retry page fault if MMU reload is pending and root has no sp (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86/mmu: Fix an sign-extension bug with mmu_seq that hangs vCPUs (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Dynamically allocate "new" memslots from the get-go (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Wait 'til the bitter end to initialize the "new" memslot (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Optimize overlapping memslots check (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Optimize gfn lookup in kvm_zap_gfn_range() (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Call kvm_arch_flush_shadow_memslot() on the old slot in kvm_invalidate_memslot() (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Keep memslots in tree-based structures instead of array-based ones (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: s390: Introduce kvm_s390_get_gfn_end() (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: s390: Add a routine for setting userspace CPU state (Eric Farman)  [Orabug: 37070016]
  - KVM: Use interval tree to do fast hva lookup in memslots (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Resolve memslot ID via a hash table instead of via a static array (Maciej S. Szmigiero)  [Orabug: 37070016]
  - Revert "kvm: fix possible spectre gadgets in include/linux/kvm_host.h" (Liam Merwick)  [Orabug: 37070016]
  - KVM: Move WARN on invalid memslot index to update_memslots() (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Integrate gfn_to_memslot_approx() into search_memslots() (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: x86: Use nr_memslot_pages to avoid traversing the memslots array (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: x86: Don't call kvm_mmu_change_mmu_pages() if the count hasn't changed (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Don't make a full copy of the old memslot in __kvm_set_memory_region() (Sean Christopherson)  [Orabug: 37070016]
  - KVM: s390: Skip gfn/size sanity checks on memslot DELETE or FLAGS_ONLY (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86: Don't assume old/new memslots are non-NULL at memslot commit (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Use prepare/commit hooks to handle generic memslot metadata updates (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Stop passing kvm_userspace_memory_region to arch memslot hooks (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86: Use "new" memslot instead of userspace memory region (Sean Christopherson)  [Orabug: 37070016]
  - KVM: s390: Use "new" memslot instead of userspace memory region (Sean Christopherson)  [Orabug: 37070016]
  - KVM: PPC: Avoid referencing userspace memory region in memslot updates (Sean Christopherson)  [Orabug: 37070016]
  - KVM: MIPS: Drop pr_debug from memslot commit to avoid using "mem" (Sean Christopherson)  [Orabug: 37070016]
  - KVM: arm64: Use "new" memslot instead of userspace memory region (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Let/force architectures to deal with arch specific memslot data (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Use "new" memslot's address space ID instead of dedicated param (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Resync only arch fields when slots_arch_lock gets reacquired (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Open code kvm_delete_memslot() into its only caller (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Require total number of memslot pages to fit in an unsigned long (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86/mmu: Extract zapping of rmaps for gfn range to separate helper (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86/mmu: Drop a redundant remote TLB flush in kvm_zap_gfn_range() (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86/mmu: Retry page fault if root is invalidated by memslot update (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86/mmu: Properly dereference rcu-protected TDP MMU sptep iterator (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86/mmu: Don't rebuild page when the page is synced and no tlb flushing is required (Hou Wenlong)  [Orabug: 37070016]
  - KVM: x86/mmu: Avoid memslot lookup in rmap_add (David Matlack)  [Orabug: 37070016]
  - KVM: MMU: pass struct kvm_page_fault to mmu_set_spte (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: pass kvm_mmu_page struct to make_spte (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: set ad_disabled in TDP MMU role (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: remove unnecessary argument to mmu_set_spte (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: clean up make_spte return value (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: inline set_spte in FNAME(sync_page) (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: inline set_spte in mmu_set_spte (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: x86/mmu: Avoid memslot lookup in page_fault_handle_page_track (David Matlack)  [Orabug: 37070016]
  - KVM: x86/mmu: Pass the memslot around via struct kvm_page_fault (David Matlack)  [Orabug: 37070016] [Orabug: 37070016]
  - KVM: MMU: unify tdp_mmu_map_set_spte_atomic and tdp_mmu_set_spte_atomic_no_dirty_log (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: mark page dirty in make_spte (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: x86/mmu: Verify shadow walk doesn't terminate early in page faults (Sean Christopherson)  [Orabug: 37070016]
  - KVM: MMU: change tracepoints arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change disallowed_hugepage_adjust() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change kvm_mmu_hugepage_adjust() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change fast_page_fault() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change tdp_mmu_map_handle_target_level() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change kvm_tdp_mmu_map() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change FNAME(fetch)() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change __direct_map() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change handle_abnormal_pfn() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change kvm_faultin_pfn() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change page_fault_handle_page_track() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change direct_page_fault() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change mmu->page_fault() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: Introduce struct kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: pass unadulterated gpa to direct_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: X86: Don't unsync pagetables when speculative (Lai Jiangshan)  [Orabug: 37070016]
  - KVM: X86: Change kvm_sync_page() to return true when remote flush is needed (Lai Jiangshan)  [Orabug: 37070016]
  - KVM: X86: Remove kvm_mmu_flush_or_zap() (Lai Jiangshan)  [Orabug: 37070016]
  - KVM: X86: Don't flush current tlb on shadow page modification (Lai Jiangshan)  [Orabug: 37070016]
  - net: mana: Fix RX buf alloc_size alignment and atomic op panic (Haiyang Zhang)  [Orabug: 37029115]  {CVE-2024-45001}
  - net/mlx5: pretend 'fast unload' succeeded on Exadata systems (Gerd Rausch)  [Orabug: 37224000]
  - rds: Do not invoke the transport's recv_path() while in atomic context (Håkon Bugge)  [Orabug: 36368605]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-303.171.4.el8uek]
changelog:
  - rds: recv_payload_bad_checksum was not 0 after running rds-stress on UEK6 (William Kucharski)  [Orabug: 37265126]
  - rds: If RDS Checksums are enabled for RDMA RDS operations, the extension headers will overflow causing incorrect operation (William Kucharski)  [Orabug: 37265124]
  - rds: rds_message_alloc() needlessly zeroes m_used_sgs (William Kucharski)  [Orabug: 37265122]
  - rds: tracepoint in rds_receive_csum_err() prints pointless information (William Kucharski)  [Orabug: 37265120]
  - rds: rds_inc_init() should initialize the inc->i_conn_path field (William Kucharski)  [Orabug: 37265116]
  - rds: Race condition in adding RDS payload checksum extension header may result in RDS header corruption (William Kucharski)  [Orabug: 37265114]
  - Revert "net/mlx5: disable the 'fast unload' feature on Exadata systems" (Qing Huang)  [Orabug: 37285222]
  - Revert "net/mlx5: pretend 'fast unload' succeeded on Exadata systems" (Qing Huang)  [Orabug: 37285222]
  - RDMA/mlx5: Fix Shared PD prefetch of ODP memory region (Mark Haywood)  [Orabug: 31688618] [Orabug: 37279176]
  - blk-mq: fix missing blk_account_io_done() in error path (Yu Kuai)  [Orabug: 37228086]
  - rds: Add rds stuck shutdown timeout (Rohit Nair)  [Orabug: 37214078]
  - KVM: x86: Stop compiling vmenter.S with OBJECT_FILES_NON_STANDARD (Sean Christopherson)  [Orabug: 37273739]
  - KVM: SVM: Create a stack frame in __svm_sev_es_vcpu_run() (Sean Christopherson)  [Orabug: 37273739]
  - KVM: SVM: Create a stack frame in __svm_vcpu_run() for unwinding (Sean Christopherson)  [Orabug: 37273739]
  - mm/memory-failure: pass the folio and the page to collect_procs() (Matthew Wilcox (Oracle))  [Orabug: 37270260]
  - LTS version: v5.15.171 (Vijayendra Suman)
  - mac80211: always have ieee80211_sta_restart() (Johannes Berg)
  - vt: prevent kernel-infoleak in con_font_get() (Jeongjun Park)
  - drm/i915: Fix potential context UAFs (Rob Clark)
  - Revert "drm/mipi-dsi: Set the fwnode for mipi_dsi_device" (Jason-JH.Lin)
  - mm: shmem: fix data-race in shmem_getattr() (Jeongjun Park) [Orabug: 37268580] {CVE-2024-50228}
  - wifi: iwlwifi: mvm: fix 6 GHz scan construction (Johannes Berg) [Orabug: 37304734] {CVE-2024-53055}
  - nilfs2: fix kernel bug due to missing clearing of checked flag (Ryusuke Konishi) [Orabug: 37268588] {CVE-2024-50230}
  - x86/bugs: Use code segment selector for VERW operand (Pawan Gupta) [Orabug: 37227383] {CVE-2024-50072}
  - ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow (Edward Adam Davis) [Orabug: 37268563] {CVE-2024-50218}
  - mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves (Matt Fleming) [Orabug: 37268568] {CVE-2024-50219}
  - mm/page_alloc: explicitly define how __GFP_HIGH non-blocking allocations accesses reserves (Mel Gorman)
  - mm/page_alloc: explicitly define what alloc flags deplete min reserves (Mel Gorman)
  - mm/page_alloc: explicitly record high-order atomic allocations in alloc_flags (Mel Gorman)
  - mm/page_alloc: treat RT tasks similar to __GFP_HIGH (Mel Gorman)
  - mm/page_alloc: rename ALLOC_HIGH to ALLOC_MIN_RESERVE (Mel Gorman)
  - mm/page_alloc: split out buddy removal code from rmqueue into separate helper (Mel Gorman)
  - mm/page_alloc: fix tracepoint mm_page_alloc_zone_locked() (Wonhyuk Yang)
  - mm/page_alloc: call check_new_pages() while zone spinlock is not held (Eric Dumazet)
  - riscv: Remove duplicated GET_RM (Chunyan Zhang)
  - riscv: Remove unused GENERATING_ASM_OFFSETS (Chunyan Zhang)
  - riscv: Use '%u' to format the output of 'cpu' (WangYuli)
  - riscv: efi: Set NX compat flag in PE/COFF header (Heinrich Schuchardt)
  - riscv: vdso: Prevent the compiler from inserting calls to memset() (Alexandre Ghiti)
  - nilfs2: fix potential deadlock with newly created symlinks (Ryusuke Konishi) [Orabug: 37268584] {CVE-2024-50229}
  - iio: light: veml6030: fix microlux value calculation (Javier Carrasco)
  - iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() (Zicheng Qu) [Orabug: 37268595] {CVE-2024-50232}
  - staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() (Zicheng Qu) [Orabug: 37268597] {CVE-2024-50233}
  - wifi: iwlegacy: Clear stale interrupts before resuming device (Ville Syrjälä) [Orabug: 37268602] {CVE-2024-50234}
  - wifi: ath10k: Fix memory leak in management tx (Manikanta Pubbisetty) [Orabug: 37268610] {CVE-2024-50236}
  - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (Felix Fietkau) [Orabug: 37268613] {CVE-2024-50237}
  - xhci: Use pm_runtime_get to prevent RPM on unsupported systems (Basavaraj Natikar)
  - xhci: Fix Link TRB DMA in command ring stopped completion event (Faisal Hassan)
  - usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() (Javier Carrasco)
  - usb: phy: Fix API devm_usb_put_phy() can not release the phy (Zijun Hu)
  - usbip: tools: Fix detach_port() invalid port error path (Zongmin Zhou)
  - misc: sgi-gru: Don't disable preemption in GRU driver (Dimitri Sivanich)
  - net: amd: mvme147: Fix probe banner message (Daniel Palmer)
  - scsi: scsi_transport_fc: Allow setting rport state to current state (Benjamin Marzinski)
  - fs/ntfs3: Additional check in ni_clear() (Konstantin Komarov) [Orabug: 37268638] {CVE-2024-50244}
  - fs/ntfs3: Fix possible deadlock in mi_read (Konstantin Komarov) [Orabug: 37268644] {CVE-2024-50245}
  - fs/ntfs3: Fix warning possible deadlock in ntfs_set_state (Konstantin Komarov)
  - fs/ntfs3: Check if more than chunk-size bytes are written (Andrew Ballance) [Orabug: 37268655] {CVE-2024-50247}
  - firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() (Xiongfeng Wang)
  - netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (Pablo Neira Ayuso) [Orabug: 37268670] {CVE-2024-50251}
  - net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension (Benoît Monin)
  - netfilter: Fix use-after-free in get_info() (Dong Chenchen) [Orabug: 37268689] {CVE-2024-50257}
  - bpf: Fix out-of-bounds write in trie_get_next_key() (Byeonguk Jeong) [Orabug: 37268702] {CVE-2024-50262}
  - netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() (Zichen Xie) [Orabug: 37268697] {CVE-2024-50259}
  - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (Pedro Tammela) [Orabug: 37304740] {CVE-2024-53057}
  - net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (Furong Xu) [Orabug: 37304745] {CVE-2024-53058}
  - ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() (Christophe JAILLET)
  - wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() (Daniel Gabay) [Orabug: 37304749] {CVE-2024-53059}
  - wifi: iwlwifi: mvm: disconnect station vifs if recovery failed (Emmanuel Grumbach)
  - mac80211: Add support to trigger sta disconnect on hardware restart (Youghandhar Chintala)
  - mac80211: do drv_reconfig_complete() before restarting all (Johannes Berg)
  - RDMA/bnxt_re: synchronize the qp-handle table array (Selvin Xavier)
  - RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down (Patrisious Haddad)
  - RDMA/cxgb4: Dump vendor specific QP details (Leon Romanovsky)
  - wifi: brcm80211: BRCM_TRACING should depend on TRACING (Geert Uytterhoeven)
  - wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys (Felix Fietkau)
  - mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING (Geert Uytterhoeven)
  - cgroup: Fix potential overflow issue when checking max_depth (Xiu Jianfeng)
  - ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context (Koba Ko) [Orabug: 37264072] {CVE-2024-50141}
  - ACPI: PRM: Change handler_addr type to void pointer (Sudeep Holla)
  - ACPI: PRM: Remove unnecessary blank lines (Aubrey Li)
  - ksmbd: fix user-after-free from session log off (Namjae Jeon) [Orabug: 37227413] {CVE-2024-50086}
  - selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test (Donet Tom)
  - LTS version: v5.15.170 (Vijayendra Suman)
  - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [Orabug: 37264074] {CVE-2024-50142}
  - ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe() (Zichen Xie) [Orabug: 37252324] {CVE-2024-50103}
  - net: phy: dp83822: Fix reset pin definitions (Michel Alex)
  - serial: protect uart_port_dtr_rts() in uart_shutdown() too (Jiri Slaby (SUSE))
  - selinux: improve error checking in sel_write_load() (Paul Moore)
  - hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event (Haiyang Zhang)
  - xfrm: fix one more kernel-infoleak in algo dumping (Petr Vaganov) [Orabug: 37252349] {CVE-2024-50110}
  - ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593 (José Relvas)
  - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (Sean Christopherson) [Orabug: 37252372] {CVE-2024-50115}
  - openat2: explicitly return -E2BIG for (usize > PAGE_SIZE) (Aleksa Sarai)
  - nilfs2: fix kernel bug due to missing clearing of buffer delay flag (Ryusuke Konishi) [Orabug: 37252377] {CVE-2024-50116}
  - ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue (Shubham Panwar)
  - ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[] (Christian Heusel)
  - drm/amd: Guard against bad data for ATIF ACPI method (Mario Limonciello) [Orabug: 37252383] {CVE-2024-50117}
  - btrfs: zoned: fix zone unusable accounting for freed reserved extent (Naohiro Aota)
  - ALSA: hda/realtek: Update default depop procedure (Kailang Yang)
  - ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (Andrey Shumilin) [Orabug: 37264274] {CVE-2024-50205}
  - bpf,perf: Fix perf_event_detach_bpf_prog error handling (Jiri Olsa)
  - posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() (Jinjie Ruan) [Orabug: 37320233] {CVE-2024-50210}
  - r8169: avoid unsolicited interrupts (Heiner Kallweit)
  - net: sched: fix use-after-free in taprio_change() (Dmitry Antipov) [Orabug: 37252407] {CVE-2024-50127}
  - net: wwan: fix global oob in wwan_rtnl_policy (Lin Ma) [Orabug: 37252410] {CVE-2024-50128}
  - net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x (Peter Rashleigh)
  - net: plip: fix break; causing plip to never transmit (Jakub Boehm)
  - be2net: fix potential memory leak in be_xmit() (Wang Hai) [Orabug: 37264143] {CVE-2024-50167}
  - net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() (Wang Hai) [Orabug: 37264149] {CVE-2024-50168}
  - xfrm: respect ip protocols rules criteria when performing dst lookups (Eyal Birger)
  - xfrm: extract dst lookup parameters into a struct (Eyal Birger)
  - tracing: Consider the NULL character when validating the event length (Leo Yan) [Orabug: 37252415] {CVE-2024-50131}
  - platform/x86: dell-sysman: add support for alienware products (Crag Wang)
  - ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string (Alexey Klimov)
  - arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning (junhua huang)
  - platform/x86: dell-wmi: Ignore suspend notifications (Armin Wolf)
  - udf: fix uninit-value use in udf_get_fileshortad (Gianfranco Trad) [Orabug: 37264080] {CVE-2024-50143}
  - arm64: Force position-independent veneers (Mark Rutland)
  - ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit (Shengjiu Wang)
  - ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values (Alexey Klimov)
  - drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA (Hans de Goede) [Orabug: 37252420] {CVE-2024-50134}
  - exec: don't WARN for racy path_noexec check (Mateusz Guzik) [Orabug: 37206344] {CVE-2024-50010}
  - XHCI: Separate PORT and CAPs macros into dedicated file (Frank Li)
  - usb: gadget: Add function wakeup support (Elson Roy Serrao)
  - KVM: s390: gaccess: Check if guest address is in memslot (Nico Boehr)
  - KVM: s390: gaccess: Cleanup access to guest pages (Janis Schoetterl-Glausch)
  - KVM: s390: gaccess: Refactor access address range check (Janis Schoetterl-Glausch)
  - KVM: s390: gaccess: Refactor gpa and length calculation (Janis Schoetterl-Glausch)
  - arm64: probes: Fix uprobes for big-endian kernels (Mark Rutland) [Orabug: 37264236] {CVE-2024-50194}
  - arm64:uprobe fix the uprobe SWBP_INSN in big-endian (junhua huang)
  - Bluetooth: bnep: fix wild-memory-access in proto_unregister (Ye Bin) [Orabug: 37264096] {CVE-2024-50148}
  - s390: Initialize psw mask in perf_arch_fetch_caller_regs() (Heiko Carstens)
  - usb: typec: altmode should keep reference to parent (Thadeu Lima de Souza Cascardo) [Orabug: 37264102] {CVE-2024-50150}
  - smb: client: fix OOBs when building SMB2_IOCTL request (Paulo Alcantara) [Orabug: 37264107] {CVE-2024-50151}
  - scsi: target: core: Fix null-ptr-deref in target_alloc_device() (Wang Hai) [Orabug: 37264112] {CVE-2024-50153}
  - genetlink: hold RCU in genlmsg_mcast() (Eric Dumazet)
  - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Kuniyuki Iwashima) [Orabug: 37264114] {CVE-2024-50154}
  - net: systemport: fix potential memory leak in bcm_sysport_xmit() (Wang Hai) [Orabug: 37264156] {CVE-2024-50171}
  - net: xilinx: axienet: fix potential memory leak in axienet_start_xmit() (Wang Hai)
  - net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid (Li RongQing)
  - net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit() (Wang Hai)
  - macsec: don't increment counters for an unrelated SA (Sabrina Dubroca)
  - net: usb: usbnet: fix race in probe failure (Oliver Neukum)
  - drm/msm: Allocate memory for disp snapshot with kvzalloc() (Douglas Anderson)
  - drm/msm: Avoid NULL dereference in msm_disp_state_print_regs() (Douglas Anderson) [Orabug: 37264122] {CVE-2024-50156}
  - drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation (Jonathan Marek)
  - RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (Bhargava Chenna Marreddy) [Orabug: 37264280] {CVE-2024-50208}
  - RDMA/bnxt_re: Return more meaningful error (Kalesh AP)
  - ipv4: give an IPv4 dev to blackhole_netdev (Xin Long)
  - RDMA/irdma: Fix misspelling of "accept*" (Alexander Zubkov)
  - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Anumula Murali Mohan Reddy)
  - ALSA: hda/cs8409: Fix possible NULL dereference (Murad Masimov) [Orabug: 37264129] {CVE-2024-50160}
  - ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin (Florian Klink)
  - x86/resctrl: Avoid overflow in MB settings in bw_validate() (Martin Kletzander)
  - RDMA/bnxt_re: Add a check for memory allocation (Kalesh AP) [Orabug: 37264285] {CVE-2024-50209}
  - RDMA/bnxt_re: Fix incorrect AVID type in WQE structure (Saravanan Vajravel)
  - bpf: devmap: provide rxq after redirect (Florian Kauer) [Orabug: 37264132] {CVE-2024-50162}
  - bpf: Make sure internal and UAPI bpf_redirect flags don't overlap (Toke Høiland-Jørgensen) [Orabug: 37264134] {CVE-2024-50163}
  - LTS version: v5.15.169 (Vijayendra Suman)
  - ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2 (Vasiliy Kovalev)
  - powerpc/mm: Always update max/min_low_pfn in mem_topology_setup() (Aneesh Kumar K.V)
  - nilfs2: propagate directory read errors from nilfs_find_entry() (Ryusuke Konishi) [Orabug: 37264266] {CVE-2024-50202}
  - mptcp: prevent MPC handshake on port-based signal endpoints (Paolo Abeni)
  - mptcp: fallback when MPTCP opts are dropped after 1st data (Matthieu Baerts (NGI0))
  - tcp: fix mptcp DSS corruption due to large pmtu xmit (Paolo Abeni) [Orabug: 37227408] {CVE-2024-50083}
  - mptcp: handle consistently DSS corruption (Paolo Abeni) [Orabug: 37264210] {CVE-2024-50185}
  - mptcp: track and update contiguous data status (Geliang Tang)
  - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Marc Zyngier) [Orabug: 37264231] {CVE-2024-50192}
  - pinctrl: ocelot: fix system hang on level based interrupts (Sergey Matsievskiy) [Orabug: 37264246] {CVE-2024-50196}
  - x86/entry_32: Clear CPU buffers after register restore in NMI return (Pawan Gupta) [Orabug: 37264234] {CVE-2024-50193}
  - x86/entry_32: Do not clobber user EFLAGS.ZF (Pawan Gupta)
  - x86/apic: Always explicitly disarm TSC-deadline timer (Zhang Rui)
  - x86/resctrl: Annotate get_mem_config() functions as __init (Nathan Chancellor)
  - USB: serial: option: add Telit FN920C04 MBIM compositions (Daniele Palmas)
  - USB: serial: option: add support for Quectel EG916Q-GL (Benjamin B. Frost)
  - xhci: Mitigate failed set dequeue pointer commands (Mathias Nyman)
  - xhci: Fix incorrect stream context type macro (Mathias Nyman)
  - Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001 (Luiz Augusto von Dentz)
  - Bluetooth: Remove debugfs directory on module init failure (Aaron Thompson)
  - iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (Javier Carrasco)
  - iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (Javier Carrasco)
  - iio: light: opt3001: add missing full-scale range value (Emil Gedenryd)
  - iio: light: veml6030: fix IIO device retrieval from embedded device (Javier Carrasco) [Orabug: 37264254] {CVE-2024-50198}
  - iio: light: veml6030: fix ALS sensor resolution (Javier Carrasco)
  - iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency() (Christophe JAILLET)
  - iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (Javier Carrasco)
  - iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig (Javier Carrasco)
  - iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig (Javier Carrasco)
  - iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig (Javier Carrasco)
  - drm/vmwgfx: Handle surface check failure correctly (Nikolay Kuratov)
  - drm/radeon: Fix encoder->possible_clones (Ville Syrjälä) [Orabug: 37264263] {CVE-2024-50201}
  - io_uring/sqpoll: close race on waiting for sqring entries (Jens Axboe)
  - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Omar Sandoval) [Orabug: 37227403] {CVE-2024-50082}
  - x86/bugs: Do not use UNTRAIN_RET with IBPB on entry (Johannes Wikner)
  - x86/bugs: Skip RSB fill at VMEXIT (Johannes Wikner)
  - x86/entry: Have entry_ibpb() invalidate return predictions (Johannes Wikner)
  - x86/cpufeatures: Add a IBPB_NO_RET BUG flag (Johannes Wikner)
  - x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET (Jim Mattson)
  - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Michael Mueller)
  - s390/sclp_vt220: Convert newlines to CRLF instead of LFCR (Thomas Weißschuh)
  - iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices (Lu Baolu) [Orabug: 37252321] {CVE-2024-50101}
  - io_uring/sqpoll: do not put cpumask on stack (Felix Moessbauer)
  - io_uring/sqpoll: retain test for whether the CPU is valid (Jens Axboe)
  - io_uring/sqpoll: do not allow pinning outside of cpuset (Felix Moessbauer)
  - drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE) (Wachowski, Karol)
  - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (Breno Leitao) [Orabug: 36835836] {CVE-2024-40953}
  - dm-crypt, dm-verity: disable tasklets (Mikulas Patocka)
  - wifi: mac80211: fix potential key use-after-free (Johannes Berg)
  - secretmem: disable memfd_secret() if arch cannot set direct map (Patrick Roy) [Orabug: 37264195] {CVE-2024-50182}
  - mm/swapfile: skip HugeTLB pages for unuse_vma (Liu Shixin) [Orabug: 37264256] {CVE-2024-50199}
  - fat: fix uninitialized variable (OGAWA Hirofumi)
  - irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1 (Nianyao Tang)
  - net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY (Oleksij Rempel)
  - arm64: probes: Fix simulate_ldr*_literal() (Mark Rutland)
  - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Rutland) [Orabug: 37252316] {CVE-2024-50099}
  - posix-clock: Fix missing timespec64 check in pc_clock_settime() (Jinjie Ruan) [Orabug: 37264241] {CVE-2024-50195}
  - net: enetc: add missing static descriptor and inline keyword (Wei Fang)
  - net: enetc: remove xdp_drops statistic from enetc_xdp_drop() (Wei Fang)
  - udf: Fix bogus checksum computation in udf_rename() (Jan Kara) [Orabug: 37320204] {CVE-2024-43845}
  - udf: Don't return bh from udf_expand_dir_adinicb() (Jan Kara)
  - udf: Handle error when expanding directory (Jan Kara)
  - udf: Remove old directory iteration code (Jan Kara)
  - udf: Convert udf_link() to new directory iteration code (Jan Kara)
  - udf: Convert udf_mkdir() to new directory iteration code (Jan Kara)
  - udf: Convert udf_add_nondir() to new directory iteration (Jan Kara)
  - udf: Implement adding of dir entries using new iteration code (Jan Kara)
  - udf: Convert udf_unlink() to new directory iteration code (Jan Kara)
  - udf: Convert udf_rmdir() to new directory iteration code (Jan Kara)
  - udf: Convert empty_dir() to new directory iteration code (Jan Kara)
  - udf: Convert udf_get_parent() to new directory iteration code (Jan Kara)
  - udf: Convert udf_lookup() to use new directory iteration code (Jan Kara)
  - udf: Convert udf_readdir() to new directory iteration (Jan Kara)
  - udf: Convert udf_rename() to new directory iteration code (Jan Kara)
  - udf: Provide function to mark entry as deleted using new directory iteration code (Jan Kara)
  - udf: Implement searching for directory entry using new iteration code (Jan Kara)
  - udf: Move udf_expand_dir_adinicb() to its callsite (Jan Kara)
  - udf: Convert udf_expand_dir_adinicb() to new directory iteration (Jan Kara)
  - udf: New directory iteration code (Jan Kara)
  - ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2 (Vasiliy Kovalev)


author: Brian Maly <brian.maly@oracle.com> [5.15.0-303.171.5.el8uek]
changelog:
  - intel_idle: fix ACPI _CST matching for newer Xeon platforms (Artem Bityutskiy)  [Orabug: 37249457]
  - x86: Fix CPUIDLE_FLAG_IRQ_ENABLE leaking timer reprogram (Peter Zijlstra)  [Orabug: 37249457]
  - perf/tests: Add AMX instructions to x86 instruction decoder test (Adrian Hunter)  [Orabug: 37249457]
  - x86/insn: Add AMX instructions to the x86 instruction decoder (Adrian Hunter)  [Orabug: 37249457]
  - intel_idle: add Granite Rapids Xeon support (Artem Bityutskiy)  [Orabug: 37249457]
  - cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again* (Peter Zijlstra)  [Orabug: 37249457]
  - intel_idle: Fix false positive RCU splats due to incorrect hardirqs state (Waiman Long)  [Orabug: 37249457]
  - cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE (Peter Zijlstra)  [Orabug: 37249457]
  - intel_idle: Add a new flag to initialize the AMX state (Chang S. Bae)  [Orabug: 37249457]
  - x86/fpu: Add a helper to prepare AMX state for low-power CPU idle (Chang S. Bae)  [Orabug: 37249457]
  - intel_idle: enable interrupts before C1 on Xeons (Artem Bityutskiy)  [Orabug: 37249457]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-304.171.1.el8uek]
changelog:
  - kpcimgr: assign CPU to handle PCIE transactions during kexec (Joe Dobosenski)  [Orabug: 37295980]
  - kexec: update start address for LPI table data (Joe Dobosenski)  [Orabug: 37295980]
  - kpcimgr: fix flush_icache_range arguments (Joe Dobosenski)  [Orabug: 37295980]
  - embedded2: Enable CONFIG_SQUASHFS_ZSTD to support zstd compression (Joe Dobosenski)  [Orabug: 37295980]
  - embedded2: Support booting an encrypted root filesystem (Joe Dobosenski)  [Orabug: 37295980]
  - Update embedded2 config for UEK7 (Joe Dobosenski)  [Orabug: 37295980]
  - Pensando: kernel config changes for kdump (Rob Gardner)  [Orabug: 34091165] [Orabug: 37295980]
  - arm64: Reserve elfcorehdr before scanning reserved memory from device tree (Joe Dobosenski)  [Orabug: 37295980]
  - arm64: kexec: add support for kexec with spin-table (Henry Willard)  [Orabug: 32549965] [Orabug: 37295980]
  - drivers/soc/pensando/cap_mem.c: Support DM region mapping. (David Clear)  [Orabug: 37295980]
  - drivers/edac: elba: Support multiple DDR bypass ranges. (David Clear)  [Orabug: 37295980]
  - mmc: sdhci-cadence: Enable host driver defined bounce buffer (Brad Larson)  [Orabug: 37295980]
  - Fix NULL pointer dereference in cn_filter() (Anjali Kulkarni)  [Orabug: 37280567]
  - selftests: connector: Fix input argument error paths to skip (Shuah Khan)  [Orabug: 37280567]
  - connector/cn_proc: Selftest for proc connector (Anjali Kulkarni)  [Orabug: 37280567]
  - connector/cn_proc: Allow non-root users access (Anjali Kulkarni)  [Orabug: 37280567]
  - connector/cn_proc: Performance improvements (Anjali Kulkarni)  [Orabug: 37280567]
  - connector/cn_proc: Add filtering to fix some bugs (Anjali Kulkarni)  [Orabug: 37280567]
  - netlink: Add new netlink_release function (Anjali Kulkarni)  [Orabug: 37280567]
  - ice: Add netif_device_attach/detach into PF reset flow (Dawid Osuchowski)  [Orabug: 37214589] {CVE-2024-46770}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-304.171.2.el8uek]
changelog:
  - uek-rpm: Add mstflint_access module to the core list (Thomas Tai)  [Orabug: 37345530]
  - uek-rpm/ol8/config-aarch64-emb3: Enable CONFIG_ARM_SDE_INTERFACE (Thomas Tai)  [Orabug: 37345530]
  - sunrpc: fix a NULL deref in svc_process() when ->sv_stats doesn't exist (Calum Mackay)  [Orabug: 37329531]
  - Partial revert "rds: Add inc/frag cache statistics" (Hans Westgaard Ry)  [Orabug: 37232315]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-304.171.3.el8uek]
changelog:
  - build: populate modules_thick.builtin for dirs containing only modules (Nick Alcock)  [Orabug: 37381702]
  - mtd: fix use-after-free in mtd release (Alexander Usyskin)  [Orabug: 37371929]
  - mtd: Clean refcounting with MTD_PARTITIONED_MASTER (Miquel Raynal)  [Orabug: 37371929]
  - mtd: call external _get and _put in right order (Alexander Usyskin)  [Orabug: 37371929]
  - nvmem: core: Check input parameter for NULL in nvmem_unregister() (Andy Shevchenko)  [Orabug: 37371929]
  - Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume" (Sherry Yang)  [Orabug: 37364544]
  - x86/pkeys: Ensure updated PKRU value is XRSTOR'd (Aruna Ramakrishna)  [Orabug: 37361290]
  - x86/pkeys: Change caller of update_pkru_in_sigframe() (Aruna Ramakrishna)  [Orabug: 37361290]
  - cgroup: cgroup-v1: do not exclude cgrp_dfl_root (Vishal Verma)  [Orabug: 37347419]
  - mm/memcontrol: Fix memcg stat calculation (Aruna Ramakrishna)  [Orabug: 37306542]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-304.171.4.el8uek]
changelog:
  - Revert "unicode: Don't special case ignorable code points" (Linus Torvalds)
  - Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K" (Aurelien Jarno)
  - tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (Kuniyuki Iwashima) [Orabug: 37434606] {CVE-2024-53206}
  - lib/buildid: Fix build ID parsing logic (Jiri Olsa)
  - powerpc/vdso: Flag VDSO64 entry points as functions (Christophe Leroy)
  - mm: krealloc: Fix MTE false alarm in __do_krealloc (Qun-Wei Lin) [Orabug: 37331938] {CVE-2024-53097}
  - Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown" (Jarosław Janik)
  - usb: dwc3: fix fault at system suspend if device was already runtime suspended (Roger Quadros) [Orabug: 37304834] {CVE-2024-53070}
  - ACPI: PRM: Clean up guid type in struct prm_handler_info (Dan Carpenter)
  - RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() (Junxian Huang) [Orabug: 37434622] {CVE-2024-53226}
  - mm: revert "mm: shmem: fix data-race in shmem_getattr()" (Andrew Morton)
  - ACPI: CPPC: Fix _CPC register setting issue (Lifeng Zheng)
  - scsi: qla2xxx: Fix abort in bsg timeout (Quinn Tran)
  - drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (Antonio Quartulli) [Orabug: 37304753] {CVE-2024-53060}
  - RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (Kashyap Desai)
  - vhost_scsi: log write descriptors (Dongli Zhang)  [Orabug: 37393531]
  - vhost-scsi: protect vq->log_base with vq->mutex (Dongli Zhang)  [Orabug: 37393531]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-305.171.1.el8uek]
changelog:
  - octeontx2-af: Fix CPT AF register offset calculation (Bharat Bhushan)  [Orabug: 37445471]
  - perf/arm-cmn: Remove for loop intial declarations (Dave Kleikamp)  [Orabug: 37409090]
  - perf/arm-cmn: Ensure port and device id bits are set properly (Namhyung Kim)  [Orabug: 37409090]
  - perf/arm-cmn: Improve format attr printing (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Clean up unnecessary NUMA_NO_NODE check (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Support CMN S3 (Robin Murphy)  [Orabug: 37409090]
  - dt-bindings: perf: arm-cmn: Add CMN S3 (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Refactor DTC PMU register access (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Make cycle counts less surprising (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Improve build-time assertion (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Ensure dtm_idx is big enough (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Fix CCLA register offset (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Refactor node ID handling. Again. (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Enable support for tertiary match group (Ilkka Koskinen)  [Orabug: 37409090]
  - perf/arm-cmn: Decouple wp_config registers from filter group number (Ilkka Koskinen)  [Orabug: 37409090]
  - perf/arm-cmn: Workaround AmpereOneX errata AC04_MESH_1 (incorrect child count) (Ilkka Koskinen)  [Orabug: 37409090]
  - perf/arm-cmn: Improve debugfs pretty-printing for large configs (Robin Murphy)  [Orabug: 37409090]
  - perf: arm-cmn: Convert to platform remove callback returning void (Uwe Kleine-König)  [Orabug: 37409090]
  - perf/arm-cmn: Fail DTC counter allocation correctly (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Fix HN-F class_occup_id events (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Enable per-DTC counter allocation (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Rework DTC counters (again) (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Fix DTC domain detection (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Add CMN-700 r3 support (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Refactor HN-F event selector macros (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Remove spurious event aliases (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Add sysfs identifier (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Revamp model detection (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Fix port detection for CMN-700 (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Validate cycles events fully (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Move overlapping wp_combine field (Ilkka Koskinen)  [Orabug: 37409090]
  - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Reset DTM_PMU_CONFIG at probe (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Decode CAL devices properly in debugfs (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Fix filter_sel lookup (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Add CMN-700 support (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Refactor occupancy filter selector (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Add CMN-650 support (Robin Murphy)  [Orabug: 37409090]
  - dt-bindings: perf: arm-cmn: Add CMN-650 and CMN-700 (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Update watchpoint format (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Hide XP PUB events for CMN-600 (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Make arm_cmn_debugfs static (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Add debugfs topology info (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Add CI-700 Support (Robin Murphy)  [Orabug: 37409090]
  - dt-bindings: perf: arm-cmn: Add CI-700 (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Support new IP features (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Demarcate CMN-600 specifics (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Move group validation data off-stack (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Optimise DTC counter accesses (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Optimise DTM counter reads (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Refactor DTM handling (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Streamline node iteration (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Refactor node ID handling (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Drop compile-test restriction (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Account for NUMA affinity (Robin Murphy)  [Orabug: 37409090]
  - Acquire mem_cgroup_per_node.lruvec locks for online nodes only. (Imran Khan)  [Orabug: 37405595]
  - Fix issues seen with mail thread patches. (Imran Khan)  [Orabug: 37405595]
  - mm: lru: use lruvec lock to serialize memcg changes (Muchun Song)  [Orabug: 37405595]
  - mm: lru: add VM_BUG_ON_PAGE to lru maintenance function (Muchun Song)  [Orabug: 37405595]
  - mm: memcontrol: rename {un}lock_page_memcg() to {un}lock_page_objcg() (Muchun Song)  [Orabug: 37405595]
  - mm: memcontrol: use obj_cgroup APIs to charge the LRU pages (Muchun Song)  [Orabug: 37405595]
  - mm: memcontrol: introduce memcg_reparent_ops (Muchun Song)  [Orabug: 37405595]
  - mm: memcontrol: make all the callers of page_memcg() safe (Muchun Song)  [Orabug: 37405595]
  - mm: thp: make split queue lock safe when LRU pages reparented (Muchun Song)  [Orabug: 37405595]
  - mm: thp: introduce split_queue_lock/unlock{_irqsave}() (Muchun Song)  [Orabug: 37405595]
  - mm: vmscan: rework move_pages_to_lru() (Muchun Song)  [Orabug: 37405595]
  - mm: memcontrol: make lruvec lock safe when the LRU pages reparented (Muchun Song)  [Orabug: 37405595]
  - mm: memcontrol: introduce compact_lock_page_irqsave (Muchun Song)  [Orabug: 37405595]
  - mm: memcontrol: prepare objcg API for non-kmem usage (Muchun Song)  [Orabug: 37405595]
  - mm: move mem_cgroup_kmem_disabled() to memcontrol.h (Muchun Song)  [Orabug: 37405595]
  - Uek-rpm/ol9: Enable CONFIG_FIPS_SIGNATURE_SELFTEST for mips64 (Vijay Kumar)  [Orabug: 37390881]
  - sfc: Fix an error handling path in efx_pci_probe() (Christophe JAILLET)  [Orabug: 37384497]
  - sfc: Separate netdev probe/remove from PCI probe/remove (Jonathan Cooper)  [Orabug: 37384497]
  - sfc: replace function name in string with __func__ (Jonathan Cooper)  [Orabug: 37384497]
  - sfc: Unsplit literal string. (Jonathan Cooper)  [Orabug: 37384497]
  - sfc: Move EF100 efx_nic_type structs to the end of the file (Jonathan Cooper)  [Orabug: 37384497]
  - sfc: Separate efx_nic memory from net_device memory (Jonathan Cooper)  [Orabug: 37384497]
  - sfc: Encapsulate access to netdev_priv() (Jonathan Cooper)  [Orabug: 37384497]
  - sfc: Add a PROBED state for EF100 VDPA use. (Jonathan Cooper)  [Orabug: 37384497]
  - ACPICA: Allow PCC Data Type in MCTP resource. (Adam Young)  [Orabug: 37311726]
  - ACPICA: Avoid undefined behavior: member access within misaligned address (Tamir Duberstein)  [Orabug: 37311726]
  - arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a (D Scott Phillips)  [Orabug: 37311726]
  - arm64: Expose the end of the linear map in PHYSMEM_END (D Scott Phillips)  [Orabug: 37311726]
  - seqcount: replace smp_rmb() in read_seqcount() with load acquire (Christoph Lameter (Ampere))  [Orabug: 37311726]
  - uek-rpm: Enable new config options for Ampere (Dave Kleikamp)  [Orabug: 37311726]
  - vmalloc: modify the alloc_vmap_area() error message for better diagnostics (Shubhang Kaushik OS)  [Orabug: 37311726]
  - NUMA: early use of cpu_to_node() returns 0 instead of the correct node id (Huang Shijie)  [Orabug: 37311726]
  - mm: mmap: no need to call khugepaged_enter_vma() for stack (Yang Shi)  [Orabug: 37311726]
  - crash_core: export vmemmap when CONFIG_SPARSEMEM_VMEMMAP is enabled (Huang Shijie)  [Orabug: 37311726]
  - PCI: acpiphp: Allow built-in drivers for Attention Indicators (D Scott Phillips)  [Orabug: 37311726]
  - PCI: acpiphp: Add missing MODULE_DESCRIPTION() macro (Jeff Johnson)  [Orabug: 37311726]
  - PCI: hotplug: Add Ampere Altra Attention Indicator extension driver (D Scott Phillips)  [Orabug: 37311726]
  - mm: mempolicy: keep VMA walk if both MPOL_MF_STRICT and MPOL_MF_MOVE are specified (Yang Shi)  [Orabug: 37311726]
  - arm64: compat: Work around uninitialized variable warning (Ard Biesheuvel)  [Orabug: 37311726]
  - arm64: compat: Implement misalignment fixups for multiword loads (Ard Biesheuvel)  [Orabug: 37311726]
  - RDMA/mlx5: Expose vhca id for all ports in multiport mode (Mark Bloch)  [Orabug: 37234285]
  - rds/ib: avoid scq/rcq polling during rds connection shutdown (Arumugam Kolappan)  [Orabug: 37055939]
  - RDMA/mlx5: Send UAR page index as ioctl attribute (Akiva Goldberger)  [Orabug: 37029766]
  - RDMA: Pass entire uverbs attr bundle to create cq function (Akiva Goldberger)  [Orabug: 37029766]
  - net/mlx5e: Fix CT entry update leaks of modify header context (Chris Mi)  [Orabug: 36948578] {CVE-2024-43864}
  - net/mlx5e: Require mlx5 tc classifier action support for IPsec prio capability (Rahul Rameshbabu)  [Orabug: 36948578]
  - net/mlx5: Fix missing lock on sync reset reload (Moshe Shemesh)  [Orabug: 36948578] {CVE-2024-42268}
  - net/mlx5: Lag, don't use the hardcoded value of the first port (Mark Bloch)  [Orabug: 36948578]
  - mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file (Aleksandr Mishin)  [Orabug: 36948578] {CVE-2024-42138}
  - net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() (Jianbo Liu)  [Orabug: 36948578]
  - net/mlx5: E-switch, Create ingress ACL when needed (Chris Mi)  [Orabug: 36948578]
  - mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems (Ido Schimmel)  [Orabug: 36948578] {CVE-2024-42073}
  - RDMA/mlx5: Fix unwind flow as part of mlx5_ib_stage_init_init (Yishai Hadas)  [Orabug: 36948578]
  - RDMA/mlx5: Ensure created mkeys always have a populated rb_key (Jason Gunthorpe)  [Orabug: 36948578]
  - RDMA/mlx5: Follow rb_key.ats when creating new mkeys (Jason Gunthorpe)  [Orabug: 36948578]
  - RDMA/mlx5: Remove extra unlock on error path (Jason Gunthorpe)  [Orabug: 36948578]
  - net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (Aleksandr Mishin)  [Orabug: 36948578] {CVE-2024-40939}
  - net/mlx5: Always stop health timer during driver removal (Shay Drory)  [Orabug: 36948578] {CVE-2024-40906}
  - net/mlx5: Fix MTMP register capability offset in MCAM register (Gal Pressman)  [Orabug: 36948578]
  - net/mlx5e: Advertise mlx5 ethernet driver updates sk_buff md_dst for MACsec (Rahul Rameshbabu)  [Orabug: 36948578]
  - mlxsw: core_env: Fix driver initialization with old firmware (Ido Schimmel)  [Orabug: 36948578]
  - net/mlx5: Lag, restore buckets number to default after hash LAG deactivation (Shay Drory)  [Orabug: 36948578]
  - net/mlx5e: Do not produce metadata freelist entries in Tx port ts WQE xmit (Rahul Rameshbabu)  [Orabug: 36948578]
  - RDMA/mlx5: Change check for cacheable mkeys (Or Har-Toov)  [Orabug: 36948578]
  - RDMA/mlx5: Uncacheable mkey has neither rb_key or cache_ent (Or Har-Toov)  [Orabug: 36948578]
  - mlx5: avoid truncating error message (Arnd Bergmann)  [Orabug: 36948578]
  - net/mlx5: Check capability for fw_reset (Moshe Shemesh)  [Orabug: 36948578]
  - net/mlx5: SF, Stop waiting for FW as teardown was called (Moshe Shemesh)  [Orabug: 36948578]
  - netlink: Correct offload_xstats size (Christoph Paasch)  [Orabug: 36948578]
  - net: fix net_dev_start_xmit trace event vs skb_transport_offset() (Eric Dumazet)  [Orabug: 36948578]
  - lib/bitmap: drop optimization of bitmap_{from,to}_arr64 (Yury Norov)  [Orabug: 36948578]
  - net: macsec: fix double free of percpu stats (Fedor Pchelkin)  [Orabug: 36948578]
  - tcp: gso: really support BIG TCP (Eric Dumazet)  [Orabug: 36948578]
  - RDMA/mlx5: Use rdma_umem_for_each_dma_block() (Jason Gunthorpe)  [Orabug: 36948578]
  - nfp: flower: fix ingress police using matchall filter (Tianyu Yuan)  [Orabug: 36948578]
  - lib/bitmap: fix off-by-one in bitmap_to_arr64() (Alexander Lobakin)  [Orabug: 36948578]
  - RDMA/mlx5: Fix flow steering egress flow (Leon Romanovsky)  [Orabug: 36948578]
  - rtnetlink: Fix handling of disabled L3 stats in RTM_GETSTATS replies (Petr Machata)  [Orabug: 36948578]
  - tun: annotate access to queue->trans_start (Antoine Tenart)  [Orabug: 36948578]
  - xsk: Do not write NULL in SW ring at allocation failure (Magnus Karlsson)  [Orabug: 36948578]
  - net/sched: fix incorrect vlan_push_eth dest field (Louis Peens)  [Orabug: 36948578]
  - RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit() (Dan Carpenter)  [Orabug: 36948578]
  - net_tstamp: define new flag HWTSTAMP_FLAG_BONDED_PHC_INDEX (Hangbin Liu)  [Orabug: 36948578]
  - net: add missing include in include/net/gro.h (Eric Dumazet)  [Orabug: 36948578]
  - IB/hfi1: Properly allocate rdma counter desc memory (Dennis Dalessandro)  [Orabug: 36948578]
  - xsk: Initialise xskb free_list_node (Ciara Loftus)  [Orabug: 36948578]
  - xsk: Fix crash on double free in buffer pool (Magnus Karlsson)  [Orabug: 36948578]
  - KVM: x86: WARN only once if KVM leaves a dangling userspace I/O request (Sean Christopherson)  [Orabug: 36815282]
  - KVM: x86: Suppress pending MMIO write exits if emulator detects exception (Sean Christopherson)  [Orabug: 36815282]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-305.171.2.el8uek]
changelog:
  - rds: ib: Avoid UAF on RDS Socket's rs_trans_lock (Håkon Bugge)  [Orabug: 37475726]  
  - rds: ib: Fix blocked processes related to race in rds_rdma_free_dev_rs_worker() (Håkon Bugge)  [Orabug: 37475726]  
  - rds: ib: Fix deterministic UAF in rds_rdma_free_dev_rs_worker() (Håkon Bugge)  [Orabug: 37475726]  
  - uek-misc: Define a prefix for uek module messages (Alejandro Jimenez)  [Orabug: 37459411]  
  - uek-misc: Clear the AVIC capability on platforms with known errata (Alejandro Jimenez)  [Orabug: 37459411]  
  - uek-misc: Add identification for OCI platform (Alejandro Jimenez)  [Orabug: 37459411]  
  - Revert "MIPS: do not call flush_tlb_all when setting pmd entry" (Vijay Kumar)  [Orabug: 37454162]  
  - cpufreq: intel_pstate: Support highest performance change interrupt (Srinivas Pandruvada)  [Orabug: 37426908]  
  - x86/cpufeatures: Add HWP highest perf change feature flag (Srinivas Pandruvada)  [Orabug: 37426908]  
  - cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE() annotations (Rafael J. Wysocki)  [Orabug: 37426908]  
  - cpufreq: intel_pstate: Wait for canceled delayed work to complete (Rafael J. Wysocki)  [Orabug: 37426908]  
  - cpufreq: intel_pstate: Simplify spinlock locking (Rafael J. Wysocki)  [Orabug: 37426908]  
  - cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes (Rafael J. Wysocki)  [Orabug: 37426908]  
  - uek-rpm: Enable CONFIG_FIPS_SIGNATURE_SELFTEST for all archs (Saeed Mirzamohammadi)  [Orabug: 37400483]  
  - uek-rpm: set DEFAULTKERNEL to other installed uek if possible (Sherry Yang)  [Orabug: 37399094]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-2.52.3.el8uek]
changelog:
  - posix-cpu-timers: Cleanup CPU timers before freeing them during exec (Thadeu Lima de Souza Cascardo)  [Orabug: 34495548]  {CVE-2022-2585} 
  - fix race between exit_itimers() and /proc/pid/timers (Oleg Nesterov)  [Orabug: 34495548]  
  - rds: ib: Add preemption control when using per-cpu variables (Håkon Bugge)  [Orabug: 34505120]  
  - ocfs2: fix handle refcount leak in two exception handling paths (Chenyuan Mi)  [Orabug: 34436530]  
  - netfilter: nf_tables: do not allow RULE_ID to refer to another chain (Thadeu Lima de Souza Cascardo)  [Orabug: 34495566]  {CVE-2022-2586} 
  - netfilter: nf_tables: do not allow CHAIN_ID to refer to another table (Thadeu Lima de Souza Cascardo)  [Orabug: 34495566]  {CVE-2022-2586} 
  - netfilter: nf_tables: do not allow SET_ID to refer to another table (Thadeu Lima de Souza Cascardo)  [Orabug: 34495566]  {CVE-2022-2586} 
  - rds: copy_from_user only once per rds_sendmsg system call (Hans Westgaard Ry)  [Orabug: 34510687]  {CVE-2022-21385} 
  - kernfs: Replace global kernfs_open_file_mutex with hashed mutexes. (Imran Khan)  [Orabug: 34476940]  
  - kernfs: Introduce interface to access global kernfs_open_file_mutex. (Imran Khan)  [Orabug: 34476940]  
  - kernfs: make ->attr.open RCU protected. (Imran Khan)  [Orabug: 34476940]  
  - kernfs: Rename kernfs_put_open_node to kernfs_unlink_open_file. (Imran Khan)  [Orabug: 34476940]  
  - kernfs: Remove reference counting for kernfs_open_node. (Imran Khan)  [Orabug: 34476940]  
  - Revert "net/rds: Connect TCP backends deterministically" (Gerd Rausch)  [Orabug: 34476561]  
  - rds/ib: handle posted ACK during connection shutdown (Rohit Nair)  [Orabug: 34465808]  
  - rds/ib: reap tx completions during connection shutdown (Rohit Nair)  [Orabug: 34465808]  
  - uek-rpm: Set CONFIG_VSOCKETS=m and CONFIG_VSOCKETS_DIAG=m (Victor Erminpour)  [Orabug: 34461322]  
  - scsi: target: Fix WRITE_SAME No Data Buffer crash (Mike Christie)  [Orabug: 34419970]  {CVE-2022-21546} 
  - rds/rdma: destroy CQs during user initiated rds connection resets (Rohit Nair)  [Orabug: 34414238]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-3.52.1.el8uek]
changelog:
  - rds: ib: Fix lfstack to acquire visibility to list head (Håkon Bugge)  [Orabug: 34522536]  
  - locking/atomic: Make test_and_*_bit() ordered on failure (Hector Martin)  [Orabug: 34520178]  
  - intel_idle: make SPR C1 and C1E be independent (Artem Bityutskiy)  [Orabug: 34510397]  
  - intel_idle: Add AlderLake support (Zhang Rui)  [Orabug: 34510397]  
  - intel_idle: Fix SPR C6 optimization (Artem Bityutskiy)  [Orabug: 34510397]  
  - intel_idle: Fix the 'preferred_cstates' module parameter (Artem Bityutskiy)  [Orabug: 34510397]  
  - cpuidle: intel_idle: Drop redundant backslash at line end (Rafael J. Wysocki)  [Orabug: 34510397]  
  - mlx4: Subscribe to PXM notifier (Konrad Rzeszutek Wilk)  [Orabug: 27206634] [Orabug: 34509446]  
  - xen/pci: Add PXM node notifier for PXM (NUMA) changes. (Konrad Rzeszutek Wilk)  [Orabug: 27206634] [Orabug: 34509446]  
  - xen/pcifront: Walk the PCI bus after XenStore notification (Konrad Rzeszutek Wilk)  [Orabug: 27206634] [Orabug: 34509446]  
  - xen-pcifront/hvm: Slurp up "pxm" entry and set NUMA node on PCIe device. (V5) (Konrad Rzeszutek Wilk)  [Orabug: 34509446]  
  - scsi: core: Fix warning in scsi_alloc_sgtables() (Jason Yan)  [Orabug: 33857787]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-3.60.2.el8uek]
changelog:
  - LTS version: v5.15.60 (Jack Vogel)   
  - x86/speculation: Add LFENCE to RSB fill sequence (Pawan Gupta)   
  - x86/speculation: Add RSB VM Exit protections (Daniel Sneddon)   
  - macintosh/adb: fix oob read in do_adb_query() function (Ning Qiang)   
  - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3586 (Hilda Wu)   
  - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3587 (Hilda Wu)   
  - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0CB8:0xC558 (Hilda Wu)   
  - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04C5:0x1675 (Hilda Wu)   
  - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04CA:0x4007 (Hilda Wu)   
  - Bluetooth: btusb: Add support of IMC Networks PID 0x3568 (Aaron Ma)   
  - dt-bindings: bluetooth: broadcom: Add BCM4349B1 DT binding (Ahmad Fatoum)   
  - Bluetooth: hci_bcm: Add DT compatible for CYW55572 (Hakan Jansson)   
  - Bluetooth: hci_bcm: Add BCM4349B1 variant (Ahmad Fatoum)   
  - btrfs: zoned: fix critical section of relocation inode writeback (Naohiro Aota)   
  - btrfs: zoned: prevent allocation from previous data relocation BG (Naohiro Aota)   
  - arm64: set UXN on swapper page tables (Peter Collingbourne)   
  - KVM: x86/svm: add __GFP_ACCOUNT to __sev_dbg_{en,de}crypt_user() (Mingwei Zhang)   
  - selftests: KVM: Handle compiler optimizations in ucall (Raghavendra Rao Ananta)   
  - tools/kvm_stat: fix display of error when multiple processes are found (Dmitry Klochkov)   
  - KVM: selftests: Make hyperv_clock selftest more stable (Vitaly Kuznetsov)   
  - KVM: x86: do not set st->preempted when going back to user space (Paolo Bonzini)   
  - KVM: x86: do not report a vCPU as preempted outside instruction boundaries (Paolo Bonzini) [Orabug: 34571000] {CVE-2022-39189}
  - crypto: arm64/poly1305 - fix a read out-of-bound (GUO Zihua)   
  - ACPI: APEI: Better fix to avoid spamming the console with old error logs (Tony Luck)   
  - ACPI: video: Shortening quirk list by identifying Clevo by board_name only (Werner Sembach)   
  - ACPI: video: Force backlight native for some TongFang devices (Werner Sembach)   
  - tools/vm/slabinfo: Handle files in debugfs (Stéphane Graber)   
  - block: fix default IO priority handling again (Jan Kara)   
  - selftests/bpf: Check dst_port only on the client socket (Jakub Sitnicki)   
  - selftests/bpf: Extend verifier and bpf_sock tests for dst_port loads (Jakub Sitnicki)   
  - x86/speculation: Make all RETbleed mitigations 64-bit only (Ben Hutchings)   
  - LTS version: v5.15.59 (Jack Vogel)   
  - x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available (Thadeu Lima de Souza Cascardo)   
  - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Eiichi Tsukata)   
  - EDAC/ghes: Set the DIMM label unconditionally (Toshi Kani)   
  - ARM: 9216/1: Fix MAX_DMA_ADDRESS overflow (Florian Fainelli)   
  - page_alloc: fix invalid watermark check on a negative value (Jaewon Kim)   
  - mm/hmm: fault non-owner device private entries (Ralph Campbell)   
  - ARM: crypto: comment out gcc warning that breaks clang builds (Greg Kroah-Hartman)   
  - sctp: leave the err path free in sctp_stream_init to sctp_stream_free (Xin Long)   
  - sfc: disable softirqs for ptp TX (Alejandro Lucero)   
  - perf symbol: Correct address for bss symbols (Leo Yan)   
  - virtio-net: fix the race between refill work and close (Jason Wang)   
  - netfilter: nf_queue: do not allow packet truncation below transport header offset (Florian Westphal)   
  - octeontx2-pf: cn10k: Fix egress ratelimit configuration (Sunil Goutham)   
  - sctp: fix sleep in atomic context bug in timer handlers (Duoming Zhou)   
  - i40e: Fix interface init with MSI interrupts (no MSI-X) (Michal Maloszewski)   
  - ipv4: Fix data-races around sysctl_fib_notify_on_flag_change. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_reflect_tos. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_comp_sack_nr. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_comp_sack_slack_ns. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_comp_sack_delay_ns. (Kuniyuki Iwashima)   
  - net: Fix data-races around sysctl_[rw]mem(_offset)?. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sk_pacing_rate. (Kuniyuki Iwashima)   
  - net: mld: fix reference count leak in mld_{query | report}_work() (Taehee Yoo)   
  - net: macsec: fix potential resource leak in macsec_add_rxsa() and macsec_add_txsa() (Jianglei Nie)   
  - macsec: always read MACSEC_SA_ATTR_PN as a u64 (Sabrina Dubroca)   
  - macsec: limit replay window size with XPN (Sabrina Dubroca)   
  - macsec: fix error message in macsec_add_rxsa and _txsa (Sabrina Dubroca)   
  - macsec: fix NULL deref in macsec_add_rxsa (Sabrina Dubroca)   
  - Documentation: fix sctp_wmem in ip-sysctl.rst (Xin Long)   
  - tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_autocorking. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_min_tso_segs. (Kuniyuki Iwashima)   
  - net: sungem_phy: Add of_node_put() for reference returned by of_get_parent() (Liang He)   
  - net: pcs: xpcs: propagate xpcs_read error to xpcs_get_state_c37_sgmii (Vladimir Oltean)   
  - igmp: Fix data-races around sysctl_igmp_qrv. (Kuniyuki Iwashima)   
  - net/tls: Remove the context from the list in tls_device_down (Maxim Mikityanskiy)   
  - ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr (Ziyang Xuan)   
  - net: ping6: Fix memleak in ipv6_renew_options(). (Kuniyuki Iwashima)   
  - scsi: mpt3sas: Stop fw fault watchdog work item during system shutdown (David Jeffery)   
  - tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_limit_output_bytes. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_moderate_rcvbuf. (Kuniyuki Iwashima)   
  - octeontx2-pf: Fix UDP/TCP src and dst port tc filters (Subbaraya Sundeep)   
  - Revert "tcp: change pingpong threshold to 3" (Wei Wang)   
  - scsi: ufs: host: Hold reference returned by of_parse_phandle() (Liang He)   
  - ice: do not setup vlan for loopback VSI (Maciej Fijalkowski)   
  - ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) (Maciej Fijalkowski)   
  - tcp: Fix data-races around sysctl_tcp_no_ssthresh_metrics_save. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_nometrics_save. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_frto. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_adv_win_scale. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_app_win. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_dsack. (Kuniyuki Iwashima)   
  - watch_queue: Fix missing locking in add_watch_to_object() (Linus Torvalds)   
  - watch_queue: Fix missing rcu annotation (David Howells)   
  - drm/simpledrm: Fix return type of simpledrm_simple_display_pipe_mode_valid() (Nathan Chancellor)   
  - nouveau/svm: Fix to migrate all requested pages (Alistair Popple)   
  - s390/archrandom: prevent CPACF trng invocations in interrupt context (Harald Freudenberger)   
  - asm-generic: remove a broken and needless ifdef conditional (Lukas Bulwahn)   
  - hugetlb: fix memoryleak in hugetlb_mcopy_atomic_pte (Miaohe Lin)   
  - mm: fix page leak with multiple threads mapping the same page (Josef Bacik)   
  - secretmem: fix unhandled fault in truncate (Mike Rapoport)   
  - fs: sendfile handles O_NONBLOCK of out_fd (Andrei Vagin)   
  - ntfs: fix use-after-free in ntfs_ucsncmp() (ChenXiaoSong)   
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put (Luiz Augusto von Dentz)   
  - LTS version: v5.15.58 (Jack Vogel)   
  - drm/amd/display: Fix wrong format specifier in amdgpu_dm.c (Hayden Goodfellow)   
  - x86/entry_32: Fix segment exceptions (Peter Zijlstra)   
  - drm/amdgpu: Off by one in dm_dmub_outbox1_low_irq() (Dan Carpenter)   
  - x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm() (Jan Beulich)   
  - KVM: x86: fix typo in __try_cmpxchg_user causing non-atomicness (Maxim Levitsky)   
  - x86/extable: Prefer local labels in .set directives (Nick Desaulniers)   
  - drm/amd/display: invalid parameter check in dmub_hpd_callback (José Expósito)   
  - drm/amd/display: Don't lock connection_mutex for DMUB HPD (Nicholas Kazlauskas)   
  - watch-queue: remove spurious double semicolon (Linus Torvalds)   
  - net: usb: ax88179_178a needs FLAG_SEND_ZLP (Jose Alonso)   
  - tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() (Jiri Slaby)   
  - tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() (Jiri Slaby)   
  - tty: drop tty_schedule_flip() (Jiri Slaby)   
  - tty: the rest, stop using tty_schedule_flip() (Jiri Slaby)   
  - tty: drivers/tty/, stop using tty_schedule_flip() (Jiri Slaby)   
  - watchqueue: make sure to serialize 'wqueue->defunct' properly (Linus Torvalds)   
  - drm/amd/display: Fix surface optimization regression on Carrizo (Nicholas Kazlauskas)   
  - drm/amd/display: Optimize bandwidth on following fast update (Nicholas Kazlauskas)   
  - drm/amd/display: Reset DMCUB before HW init (Nicholas Kazlauskas)   
  - exfat: use updated exfat_chain directly during renaming (Sungjong Seo)   
  - Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks (Luiz Augusto von Dentz)   
  - Bluetooth: SCO: Fix sco_send_frame returning skb->len (Luiz Augusto von Dentz)   
  - Bluetooth: Fix passing NULL to PTR_ERR (Luiz Augusto von Dentz)   
  - Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg (Luiz Augusto von Dentz)   
  - Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg (Luiz Augusto von Dentz)   
  - Bluetooth: Add bt_skb_sendmmsg helper (Luiz Augusto von Dentz)   
  - Bluetooth: Add bt_skb_sendmsg helper (Luiz Augusto von Dentz)   
  - um: virtio_uml: Fix broken device handling in time-travel (Johannes Berg)   
  - um: virtio_uml: Allow probing from devicetree (Vincent Whitchurch)   
  - tracing: Fix return value of trace_pid_write() (Wonhyuk Yang)   
  - tracing: Place trace_pid_list logic into abstract functions (Steven Rostedt (VMware))   
  - tracing: Have event format check not flag %p* on __get_dynamic_array() (Steven Rostedt (Google))   
  - exfat: fix referencing wrong parent directory information after renaming (Yuezhang Mo)   
  - crypto: qat - re-enable registration of algorithms (Giovanni Cabiddu)   
  - crypto: qat - add param check for DH (Giovanni Cabiddu)   
  - crypto: qat - add param check for RSA (Giovanni Cabiddu)   
  - crypto: qat - remove dma_free_coherent() for DH (Giovanni Cabiddu)   
  - crypto: qat - remove dma_free_coherent() for RSA (Giovanni Cabiddu)   
  - crypto: qat - fix memory leak in RSA (Giovanni Cabiddu)   
  - crypto: qat - add backlog mechanism (Giovanni Cabiddu)   
  - crypto: qat - refactor submission logic (Giovanni Cabiddu)   
  - crypto: qat - use pre-allocated buffers in datapath (Giovanni Cabiddu)   
  - crypto: qat - set to zero DH parameters before free (Giovanni Cabiddu)   
  - iwlwifi: fw: uefi: add missing include guards (Johannes Berg)   
  - mt76: fix use-after-free by removing a non-RCU wcid pointer (Felix Fietkau)   
  - xhci: Set HCD flag to defer primary roothub registration (Kishon Vijay Abraham I)   
  - xhci: dbc: Rename xhci_dbc_init and xhci_dbc_exit (Mathias Nyman)   
  - xhci: dbc: create and remove dbc structure in dbgtty driver. (Mathias Nyman)   
  - xhci: dbc: refactor xhci_dbc_init() (Mathias Nyman)   
  - KVM: x86: Use __try_cmpxchg_user() to emulate atomic accesses (Sean Christopherson)   
  - x86/extable: Extend extable functionality (Peter Zijlstra)   
  - x86/entry_32: Remove .fixup usage (Peter Zijlstra)   
  - bitfield.h: Fix "type of reg too small for mask" test (Peter Zijlstra)   
  - x86/extable: Provide EX_TYPE_DEFAULT_MCE_SAFE and EX_TYPE_FAULT_MCE_SAFE (Thomas Gleixner)   
  - x86/extable: Rework the exception table mechanics (Thomas Gleixner)   
  - x86/mce: Deduplicate exception handling (Thomas Gleixner)   
  - x86/extable: Get rid of redundant macros (Thomas Gleixner)   
  - x86/extable: Tidy up redundant handler functions (Thomas Gleixner)   
  - x86/uaccess: Implement macros for CMPXCHG on user addresses (Peter Zijlstra)   
  - dlm: fix pending remove if msg allocation fails (Alexander Aring)   
  - sched/deadline: Fix BUG_ON condition for deboosted tasks (Juri Lelli)   
  - bpf: Make sure mac_header was set before using it (Eric Dumazet)   
  - mm/mempolicy: fix uninit-value in mpol_rebind_policy() (Wang Cheng)   
  - KVM: Don't null dereference ops->destroy (Alexey Kardashevskiy)   
  - spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers (Marc Kleine-Budde)   
  - KVM: selftests: Fix target thread to be migrated in rseq_test (Gavin Shan)   
  - gpio: gpio-xilinx: Fix integer overflow (Srinivas Neeli)   
  - tcp: Fix data-races around sysctl_tcp_max_reordering. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_abort_on_overflow. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_rfc1337. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_stdurg. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_retrans_collapse. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_recovery. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_early_retrans. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl knobs related to SYN option. (Kuniyuki Iwashima)   
  - udp: Fix a data-race around sysctl_udp_l3mdev_accept. (Kuniyuki Iwashima)   
  - ip: Fix data-races around sysctl_ip_prot_sock. (Kuniyuki Iwashima)   
  - ipv4: Fix data-races around sysctl_fib_multipath_hash_fields. (Kuniyuki Iwashima)   
  - ipv4: Fix data-races around sysctl_fib_multipath_hash_policy. (Kuniyuki Iwashima)   
  - ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. (Kuniyuki Iwashima)   
  - drm/imx/dcss: Add missing of_node_put() in fail path (Liang He)   
  - net: dsa: vitesse-vsc73xx: silent spi_device_id warnings (Oleksij Rempel)   
  - net: dsa: sja1105: silent spi_device_id warnings (Oleksij Rempel)   
  - be2net: Fix buffer overflow in be_get_module_eeprom (Hristo Venev)   
  - gpio: pca953x: use the correct register address when regcache sync during init (Haibo Chen)   
  - gpio: pca953x: use the correct range when do regmap sync (Haibo Chen)   
  - gpio: pca953x: only use single read/write for No AI mode (Haibo Chen)   
  - net: stmmac: remove redunctant disable xPCS EEE call (Wong Vee Khee)   
  - ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero (Piotr Skajewski)   
  - i40e: Fix erroneous adapter reinitialization during recovery process (Dawid Lukwinski)   
  - pinctrl: armada-37xx: use raw spinlocks for regmap to avoid invalid wait context (Vladimir Oltean)   
  - pinctrl: armada-37xx: Convert to use dev_err_probe() (Andy Shevchenko)   
  - pinctrl: armada-37xx: Make use of the devm_platform_ioremap_resource() (Andy Shevchenko)   
  - pinctrl: armada-37xx: Use temporary variable for struct device (Andy Shevchenko)   
  - iavf: Fix handling of dummy receive descriptors (Przemyslaw Patynowski)   
  - tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_fastopen. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_max_syn_backlog. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_tw_reuse. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_notsent_lowat. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around some timeout sysctl knobs. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_reordering. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_migrate_req. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_syncookies. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_syn(ack)?_retries. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around keepalive sysctl knobs. (Kuniyuki Iwashima)   
  - igmp: Fix data-races around sysctl_igmp_max_msf. (Kuniyuki Iwashima)   
  - igmp: Fix a data-race around sysctl_igmp_max_memberships. (Kuniyuki Iwashima)   
  - igmp: Fix data-races around sysctl_igmp_llm_reports. (Kuniyuki Iwashima)   
  - net/tls: Fix race in TLS device down flow (Tariq Toukan)   
  - net: stmmac: fix dma queue left shift overflow issue (Junxiao Chang)   
  - perf tests: Fix Convert perf time to TSC test for hybrid (Adrian Hunter)   
  - i2c: cadence: Change large transfer count reset logic to be unconditional (Robert Hancock)   
  - i2c: mlxcpld: Fix register setting for 400KHz frequency (Vadim Pasternak)   
  - net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core() (Menglong Dong)   
  - net: ipv4: use kfree_skb_reason() in ip_rcv_core() (Menglong Dong)   
  - net: netfilter: use kfree_drop_reason() for NF_DROP (Menglong Dong)   
  - net: skb_drop_reason: add document for drop reasons (Menglong Dong)   
  - net: socket: rename SKB_DROP_REASON_SOCKET_FILTER (Menglong Dong)   
  - net: skb: use kfree_skb_reason() in __udp4_lib_rcv() (Menglong Dong)   
  - net: skb: use kfree_skb_reason() in tcp_v4_rcv() (Menglong Dong)   
  - net: skb: introduce kfree_skb_reason() (Menglong Dong)   
  - net: dsa: microchip: ksz_common: Fix refcount leak bug (Liang He)   
  - mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on program/erase times (Sascha Hauer)   
  - mtd: rawnand: gpmi: validate controller clock rate (Dario Binacchi)   
  - net: stmmac: fix unbalanced ptp clock issue in suspend/resume flow (Biao Huang)   
  - net: stmmac: fix pm runtime issue in stmmac_dvr_remove() (Biao Huang)   
  - tcp: Fix a data-race around sysctl_tcp_probe_interval. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_probe_threshold. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_min_snd_mss. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_base_mss. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_mtu_probing. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_l3mdev_accept. (Kuniyuki Iwashima)   
  - tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if() (Eric Dumazet)   
  - tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. (Kuniyuki Iwashima)   
  - ip: Fix a data-race around sysctl_fwmark_reflect. (Kuniyuki Iwashima)   
  - ip: Fix a data-race around sysctl_ip_autobind_reuse. (Kuniyuki Iwashima)   
  - ip: Fix data-races around sysctl_ip_nonlocal_bind. (Kuniyuki Iwashima)   
  - ip: Fix data-races around sysctl_ip_fwd_update_priority. (Kuniyuki Iwashima)   
  - ip: Fix data-races around sysctl_ip_fwd_use_pmtu. (Kuniyuki Iwashima)   
  - ip: Fix data-races around sysctl_ip_no_pmtu_disc. (Kuniyuki Iwashima)   
  - igc: Reinstate IGC_REMOVED logic and implement it properly (Lennert Buytenhek)   
  - Revert "e1000e: Fix possible HW unit hang after an s0ix exit" (Sasha Neftin)   
  - e1000e: Enable GPT clock before sending message to CSME (Sasha Neftin)   
  - nvme: fix block device naming collision (Israel Rukshin)   
  - nvme: check for duplicate identifiers earlier (Christoph Hellwig)   
  - scsi: ufs: core: Drop loglevel of WriteBoost message (Bjorn Andersson)   
  - scsi: megaraid: Clear READ queue map's nr_queues (Ming Lei)   
  - drm/amd/display: Ignore First MST Sideband Message Return Error (Fangzhi Zuo)   
  - drm/amdgpu/display: add quirk handling for stutter mode (Alex Deucher)   
  - drm/amd/display: Fork thread to offload work of hpd_rx_irq (Wayne Lin)   
  - drm/amd/display: Add option to defer works of hpd_rx_irq (Wayne Lin)   
  - drm/amd/display: Support for DMUB HPD interrupt handling (Jude Shih)   
  - tcp: Fix data-races around sysctl_tcp_ecn. (Kuniyuki Iwashima)   
  - sysctl: move some boundary constants from sysctl.c to sysctl_vals (Xiaoming Ni)   
  - mm/pagealloc: sysctl: change watermark_scale_factor max limit to 30% (Suren Baghdasaryan)   
  - net: tun: split run_ebpf_filter() and pskb_trim() into different "if statement" (Dongli Zhang)   
  - ipv4/tcp: do not use per netns ctl sockets (Eric Dumazet)   
  - perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() (Peter Zijlstra)   
  - pinctrl: ralink: Check for null return of devm_kcalloc (William Dean)   
  - pinctrl: ralink: rename pinctrl-rt2880 to pinctrl-ralink (Arınç ÜNAL)   
  - pinctrl: ralink: rename MT7628(an) functions to MT76X8 (Arınç ÜNAL)   
  - RDMA/irdma: Fix sleep from invalid context BUG (Mustafa Ismail)   
  - RDMA/irdma: Do not advertise 1GB page size for x722 (Mustafa Ismail)   
  - power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe (Miaoqian Lin)   
  - xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() (Hangyu Hua)   
  - ip: Fix data-races around sysctl_ip_default_ttl. (Kuniyuki Iwashima)   
  - r8152: fix a WOL issue (Hayes Wang)   
  - xfs: fix perag reference leak on iteration race with growfs (Brian Foster)   
  - xfs: terminate perag iteration reliably on agcount (Brian Foster)   
  - xfs: rename the next_agno perag iteration variable (Brian Foster)   
  - xfs: fold perag loop iteration logic into helper function (Brian Foster)   
  - xfs: fix maxlevels comparisons in the btree staging code (Darrick J. Wong)   
  - mt76: mt7921: Fix the error handling path of mt7921_pci_probe() (Christophe JAILLET)   
  - mt76: mt7921e: fix possible probe failure after reboot (Sean Wang)   
  - mt76: mt7921: use physical addr to unify register access (Sean Wang)   
  - Revert "mt76: mt7921e: fix possible probe failure after reboot" (Sean Wang)   
  - Revert "mt76: mt7921: Fix the error handling path of mt7921_pci_probe()" (Sean Wang)   
  - batman-adv: Use netif_rx_any_context() any. (Sebastian Andrzej Siewior)   
  - serial: mvebu-uart: correctly report configured baudrate value (Pali Rohár)   
  - PCI: hv: Fix interrupt mapping for multi-MSI (Jeffrey Hugo)   
  - PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Jeffrey Hugo)   
  - PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Jeffrey Hugo)   
  - PCI: hv: Fix multi-MSI to allow more than one MSI vector (Jeffrey Hugo)   
  - Revert "selftest/vm: verify mmap addr in mremap_test" (Oleksandr Tymoshenko)   
  - Revert "selftest/vm: verify remap destination address in mremap_test" (Oleksandr Tymoshenko)   
  - bus: mhi: host: pci_generic: add Telit FN990 (Daniele Palmas)   
  - bus: mhi: host: pci_generic: add Telit FN980 v1 hardware revision (Daniele Palmas)   
  - drm/ttm: fix locking in vmap/vunmap TTM GEM helpers (Christian König)   
  - mlxsw: spectrum_router: Fix IPv4 nexthop gateway indication (Ido Schimmel)   
  - riscv: add as-options for modules with assembly compontents (Ben Dooks)   
  - pinctrl: stm32: fix optional IRQ support to gpios (Fabien Dessenne)   
  - LTS version: v5.15.57 (Jack Vogel)   
  - x86: Use -mindirect-branch-cs-prefix for RETPOLINE builds (Peter Zijlstra)   
  - um: Add missing apply_returns() (Peter Zijlstra)   
  - x86/asm/32: Fix ANNOTATE_UNRET_SAFE use on 32-bit (Jiri Slaby)   
  - x86/xen: Fix initialisation in hypercall_page after rethunk (Ben Hutchings)   
  - x86/static_call: Serialize __static_call_fixup() properly (Thomas Gleixner)   
  - x86/speculation: Disable RRSBA behavior (Pawan Gupta)   
  - x86/kexec: Disable RET on kexec (Konrad Rzeszutek Wilk)   
  - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Thadeu Lima de Souza Cascardo)   
  - x86/entry: Move PUSH_AND_CLEAR_REGS() back into error_entry (Peter Zijlstra)   
  - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Pawan Gupta)   
  - x86/retbleed: Add fine grained Kconfig knobs (Peter Zijlstra)   
  - objtool: Re-add UNWIND_HINT_{SAVE_RESTORE} (Josh Poimboeuf)   
  - objtool: Add entry UNRET validation (Peter Zijlstra)   
  - x86/xen: Add UNTRAIN_RET (Peter Zijlstra)   
  - intel_idle: Disable IBRS during long idle (Peter Zijlstra)   
  - x86: Add magic AMD return-thunk (Peter Zijlstra)   
  - x86/entry: Avoid very early RET (Peter Zijlstra)   
  - x86/ftrace: Use alternative RET encoding (Peter Zijlstra)   
  - objtool: skip non-text sections when adding return-thunk sites (Thadeu Lima de Souza Cascardo)   
  - bpf,x86: Respect X86_FEATURE_RETPOLINE* (Peter Zijlstra)   
  - bpf,x86: Simplify computing label offsets (Peter Zijlstra)   
  - x86/alternative: Add debug prints to apply_retpolines() (Peter Zijlstra)   
  - x86/alternative: Try inline spectre_v2=retpoline,amd (Peter Zijlstra)   
  - x86/alternative: Handle Jcc __x86_indirect_thunk_
  eg (Peter Zijlstra)   
  - x86/alternative: Implement .retpoline_sites support (Peter Zijlstra)   
  - x86/retpoline: Create a retpoline thunk array (Peter Zijlstra)   
  - x86/retpoline: Move the retpoline thunk declarations to nospec-branch.h (Peter Zijlstra)   
  - x86/asm: Fixup odd GEN-for-each-reg.h usage (Peter Zijlstra)   
  - x86/asm: Fix register order (Peter Zijlstra)   
  - x86/retpoline: Remove unused replacement symbols (Peter Zijlstra)   
  - objtool: Introduce CFI hash (Peter Zijlstra)   
  - objtool,x86: Replace alternatives with .retpoline_sites (Peter Zijlstra)   
  - objtool: Shrink struct instruction (Peter Zijlstra)   
  - objtool: Explicitly avoid self modifying code in .altinstr_replacement (Peter Zijlstra)   
  - objtool: Fix SLS validation for kcov tail-call replacement (Peter Zijlstra)   
  - objtool: Classify symbols (Peter Zijlstra)   
  - x86/entry: Don't call error_entry() for XENPV (Lai Jiangshan)   
  - x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry() (Lai Jiangshan)   
  - x86/entry: Switch the stack after error_entry() returns (Lai Jiangshan)   
  - x86/traps: Use pt_regs directly in fixup_bad_iret() (Lai Jiangshan)   
  - LTS version: v5.15.56 (Jack Vogel)   
  - drm/aperture: Run fbdev removal before internal helpers (Thomas Zimmermann)   
  - x86/pat: Fix x86_has_pat_wp() (Juergen Gross)   
  - serial: 8250: Fix PM usage_count for console handover (Ilpo Järvinen)   
  - serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle (Ilpo Järvinen)   
  - serial: stm32: Clear prev values before setting RTS delays (Ilpo Järvinen)   
  - serial: 8250: fix return error code in serial8250_request_std_resource() (Yi Yang)   
  - vt: fix memory overlapping when deleting chars in the buffer (Yangxi Xiang)   
  - tty: serial: samsung_tty: set dma burst_size to 1 (Chanho Park)   
  - usb: dwc3: gadget: Fix event pending check (Thinh Nguyen)   
  - usb: typec: add missing uevent when partner support PD (Linyu Yuan)   
  - USB: serial: ftdi_sio: add Belimo device ids (Lucien Buchmann)   
  - signal handling: don't use BUG_ON() for debugging (Linus Torvalds)   
  - nvme-pci: phison e16 has bogus namespace ids (Keith Busch)   
  - ALSA: usb-audio: Add quirk for Fiero SC-01 (fw v1.0.0) (Egor Vorontsov)   
  - ALSA: usb-audio: Add quirk for Fiero SC-01 (Egor Vorontsov)   
  - ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices (John Veness)   
  - Revert "can: xilinx_can: Limit CANFD brp to 2" (Srinivas Neeli)   
  - ARM: dts: stm32: use the correct clock source for CEC on stm32mp151 (Gabriel Fernandez)   
  - soc: ixp4xx/npe: Fix unused match warning (Linus Walleij)   
  - x86: Clear .brk area at early boot (Juergen Gross)   
  - irqchip: or1k-pic: Undefine mask_ack for level triggered hardware (Stafford Horne)   
  - ASoC: madera: Fix event generation for rate controls (Charles Keepax)   
  - ASoC: madera: Fix event generation for OUT1 demux (Charles Keepax)   
  - ASoC: cs47l15: Fix event generation for low power mux control (Charles Keepax)   
  - ASoC: dapm: Initialise kcontrol data for mux/demux controls (Charles Keepax)   
  - ASoC: rt711-sdca: fix kernel NULL pointer dereference when IO error (Shuming Fan)   
  - ASoC: wm5110: Fix DRE control (Charles Keepax)   
  - ASoC: Intel: bytcr_wm5102: Fix GPIO related probe-ordering problem (Hans de Goede)   
  - ASoC: wcd938x: Fix event generation for some controls (Mark Brown)   
  - ASoC: SOF: Intel: hda-loader: Clarify the cl_dsp_init() flow (Peter Ujfalusi)   
  - ASoC: codecs: rt700/rt711/rt711-sdca: initialize workqueues in probe (Pierre-Louis Bossart)   
  - ASoC: rt7*-sdw: harden jack_detect_handler (Pierre-Louis Bossart)   
  - ASoC: rt711: fix calibrate mutex initialization (Pierre-Louis Bossart)   
  - ASoC: Intel: sof_sdw: handle errors on card registration (Pierre-Louis Bossart)   
  - ASoC: rt711-sdca-sdw: fix calibrate mutex initialization (Pierre-Louis Bossart)   
  - ASoC: Realtek/Maxim SoundWire codecs: disable pm_runtime on remove (Pierre-Louis Bossart)   
  - pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux() (Haowen Bai)   
  - ASoC: ops: Fix off by one in range control validation (Mark Brown)   
  - net: sfp: fix memory leak in sfp_probe() (Jianglei Nie)   
  - nvme: fix regression when disconnect a recovering ctrl (Ruozhu Li)   
  - nvme-tcp: always fail a request when sending it failed (Sagi Grimberg)   
  - NFC: nxp-nci: don't print header length mismatch on i2c error (Michael Walle)   
  - net: tipc: fix possible refcount leak in tipc_sk_create() (Hangyu Hua)   
  - fbdev: Disable sysfb device registration when removing conflicting FBs (Javier Martinez Canillas)   
  - firmware: sysfb: Add sysfb_disable() helper function (Javier Martinez Canillas)   
  - firmware: sysfb: Make sysfb_create_simplefb() return a pdev pointer (Javier Martinez Canillas)   
  - platform/x86: hp-wmi: Ignore Sanitization Mode event (Kai-Heng Feng)   
  - cpufreq: pmac32-cpufreq: Fix refcount leak bug (Liang He)   
  - scsi: hisi_sas: Limit max hw sectors for v3 HW (John Garry)   
  - netfilter: br_netfilter: do not skip all hooks with 0 priority (Florian Westphal)   
  - virtio_mmio: Restore guest page size on resume (Stephan Gerhold)   
  - virtio_mmio: Add missing PM calls to freeze/restore (Stephan Gerhold)   
  - vduse: Tie vduse mgmtdev and its device (Parav Pandit)   
  - vdpa/mlx5: Initialize CVQ vringh only once (Eli Cohen)   
  - powerpc/xive/spapr: correct bitmap allocation size (Nathan Lynch)   
  - ksmbd: use SOCK_NONBLOCK type for kernel_accept() (Namjae Jeon)   
  - btrfs: zoned: fix a leaked bioc in read_zone_info (Christoph Hellwig)   
  - btrfs: rename btrfs_bio to btrfs_io_context (Qu Wenruo)   
  - mm: sysctl: fix missing numa_stat when !CONFIG_HUGETLB_PAGE (Muchun Song)   
  - ACPI: video: Fix acpi_video_handles_brightness_key_presses() (Hans de Goede)   
  - net/tls: Check for errors in tls_device_init (Tariq Toukan)   
  - KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op() (Vitaly Kuznetsov)   
  - net: atlantic: remove aq_nic_deinit() when resume (Chia-Lin Kao (AceLan))   
  - net: atlantic: remove deep parameter on suspend/resume functions (Chia-Lin Kao (AceLan))   
  - sfc: fix kernel panic when creating VF (Íñigo Huguet)   
  - seg6: bpf: fix skb checksum in bpf_push_seg6_encap() (Andrea Mayer)   
  - seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors (Andrea Mayer)   
  - seg6: fix skb checksum evaluation in SRH encapsulation/insertion (Andrea Mayer)   
  - ceph: switch netfs read ops to use rreq->inode instead of rreq->mapping->host (Jeff Layton)   
  - sfc: fix use after free when disabling sriov (Íñigo Huguet)   
  - drm/amd/pm: Prevent divide by zero (Yefim Barashkin)   
  - drm/amd/display: Only use depth 36 bpp linebuffers on DCN display engines. (Mario Kleiner)   
  - ima: Fix potential memory leak in ima_init_crypto() (Jianglei Nie)   
  - ima: force signature verification when CONFIG_KEXEC_SIG is configured (Coiby Xu)   
  - net: stmmac: fix leaks in probe (Dan Carpenter)   
  - net: ftgmac100: Hold reference returned by of_get_child_by_name() (Liang He)   
  - nexthop: Fix data-races around nexthop_compat_mode. (Kuniyuki Iwashima)   
  - ipv4: Fix data-races around sysctl_ip_dynaddr. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_ecn_fallback. (Kuniyuki Iwashima)   
  - raw: Fix a data-race around sysctl_raw_l3mdev_accept. (Kuniyuki Iwashima)   
  - icmp: Fix a data-race around sysctl_icmp_ratemask. (Kuniyuki Iwashima)   
  - icmp: Fix a data-race around sysctl_icmp_ratelimit. (Kuniyuki Iwashima)   
  - icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr. (Kuniyuki Iwashima)   
  - icmp: Fix a data-race around sysctl_icmp_ignore_bogus_error_responses. (Kuniyuki Iwashima)   
  - icmp: Fix data-races around sysctl_icmp_echo_enable_probe. (Kuniyuki Iwashima)   
  - sysctl: Fix data-races in proc_dointvec_ms_jiffies(). (Kuniyuki Iwashima)   
  - sysctl: Fix data-races in proc_dou8vec_minmax(). (Kuniyuki Iwashima)   
  - bnxt_en: Fix bnxt_refclk_read() (Pavan Chebbi)   
  - bnxt_en: Fix bnxt_reinit_after_abort() code path (Michael Chan)   
  - drm/i915: Require the vm mutex for i915_vma_bind() (Thomas Hellström)   
  - drm/i915/uc: correctly track uc_fw init failure (Daniele Ceraolo Spurio)   
  - drm/i915/gt: Serialize TLB invalidates with GT resets (Chris Wilson)   
  - drm/i915/gt: Serialize GRDOM access between multiple engine resets (Chris Wilson)   
  - drm/i915/dg2: Add Wa_22011100796 (Bruce Chang)   
  - drm/i915/selftests: fix a couple IS_ERR() vs NULL tests (Dan Carpenter)   
  - tracing: Fix sleeping while atomic in kdb ftdump (Douglas Anderson)   
  - lockd: fix nlm_close_files (Jeff Layton)   
  - lockd: set fl_owner when unlocking files (Jeff Layton)   
  - xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE (Demi Marie Obenour)   
  - drm/i915/gvt: IS_ERR() vs NULL bug in intel_gvt_update_reg_whitelist() (Dan Carpenter)   
  - netfilter: nf_tables: replace BUG_ON by element length check (Pablo Neira Ayuso)   
  - netfilter: nf_log: incorrect offset to network header (Pablo Neira Ayuso)   
  - arm64: dts: broadcom: bcm4908: Fix cpu node for smp boot (William Zhang)   
  - arm64: dts: broadcom: bcm4908: Fix timer node for BCM4906 SoC (William Zhang)   
  - ARM: dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero (Michal Suchanek)   
  - ARM: dts: at91: sama5d2: Fix typo in i2s1 node (Ryan Wanner)   
  - ipv4: Fix a data-race around sysctl_fib_sync_mem. (Kuniyuki Iwashima)   
  - icmp: Fix data-races around sysctl. (Kuniyuki Iwashima)   
  - cipso: Fix data-races around sysctl. (Kuniyuki Iwashima)   
  - net: Fix data-races around sysctl_mem. (Kuniyuki Iwashima)   
  - inetpeer: Fix data-races around sysctl. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_max_orphans. (Kuniyuki Iwashima)   
  - sysctl: Fix data races in proc_dointvec_jiffies(). (Kuniyuki Iwashima)   
  - sysctl: Fix data races in proc_doulongvec_minmax(). (Kuniyuki Iwashima)   
  - sysctl: Fix data races in proc_douintvec_minmax(). (Kuniyuki Iwashima)   
  - sysctl: Fix data races in proc_dointvec_minmax(). (Kuniyuki Iwashima)   
  - sysctl: Fix data races in proc_douintvec(). (Kuniyuki Iwashima)   
  - sysctl: Fix data races in proc_dointvec(). (Kuniyuki Iwashima)   
  - net: ethernet: ti: am65-cpsw: Fix devlink port register sequence (Siddharth Vadapalli)   
  - net: stmmac: dwc-qos: Disable split header for Tegra194 (Jon Hunter)   
  - ASoC: Intel: Skylake: Correct the handling of fmt_config flexible array (Peter Ujfalusi)   
  - ASoC: Intel: Skylake: Correct the ssp rate discovery in skl_get_ssp_clks() (Peter Ujfalusi)   
  - ASoC: tas2764: Fix amp gain register offset & default (Hector Martin)   
  - ASoC: tas2764: Correct playback volume range (Hector Martin)   
  - ASoC: tas2764: Fix and extend FSYNC polarity handling (Martin Povišer)   
  - ASoC: tas2764: Add post reset delays (Martin Povišer)   
  - ASoC: sgtl5000: Fix noise on shutdown/remove (Francesco Dolcini)   
  - ima: Fix a potential integer overflow in ima_appraise_measurement (Huaxin Lu)   
  - drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector() (Hangyu Hua)   
  - net/mlx5e: Ring the TX doorbell on DMA errors (Maxim Mikityanskiy)   
  - net/mlx5e: Fix capability check for updating vnic env counters (Gal Pressman)   
  - net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Paul Blakey)   
  - net/mlx5e: kTLS, Fix build time constant test in RX (Tariq Toukan)   
  - net/mlx5e: kTLS, Fix build time constant test in TX (Tariq Toukan)   
  - ARM: 9210/1: Mark the FDT_FIXED sections as shareable (Zhen Lei)   
  - ARM: 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle (Ard Biesheuvel)   
  - spi: amd: Limit max transfer and message size (Cristian Ciocaltea)   
  - ARM: dts: imx6qdl-ts7970: Fix ngpio typo and count (Kris Bahnsen)   
  - reset: Fix devm bulk optional exclusive control getter (Serge Semin)   
  - xfs: drop async cache flushes from CIL commits. (Dave Chinner)   
  - xfs: don't include bnobt blocks when reserving free block pool (Darrick J. Wong)   
  - Revert "evm: Fix memleak in init_desc" (Xiu Jianfeng)   
  - sh: convert nommu io{re,un}map() to static inline functions (Geert Uytterhoeven)   
  - nilfs2: fix incorrect masking of permission flags for symlinks (Ryusuke Konishi)   
  - fs/remap: constrain dedupe of EOF blocks (Dave Chinner)   
  - drm/panfrost: Fix shrinker list corruption by madvise IOCTL (Dmitry Osipenko)   
  - drm/panfrost: Put mapping instead of shmem obj on panfrost_mmu_map_fault_addr() error (Dmitry Osipenko)   
  - btrfs: return -EAGAIN for NOWAIT dio reads/writes on compressed and inline extents (Filipe Manana)   
  - cgroup: Use separate src/dst nodes when preloading css_sets for migration (Tejun Heo)   
  - wifi: mac80211: fix queue selection for mesh/OCB interfaces (Felix Fietkau)   
  - ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction (Ard Biesheuvel)   
  - ARM: 9213/1: Print message about disabled Spectre workarounds only once (Dmitry Osipenko)   
  - ip: fix dflt addr selection for connected nexthop (Nicolas Dichtel)   
  - net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale pointer (Steven Rostedt (Google))   
  - tracing/histograms: Fix memory leak problem (Zheng Yejian)   
  - mm: split huge PUD on wp_huge_pud fallback (Gowans, James)   
  - mm: userfaultfd: fix UFFDIO_CONTINUE on fallocated shmem pages (Axel Rasmussen)   
  - xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue (Juergen Gross)   
  - ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop (Meng Tang)   
  - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc221 (Meng Tang)   
  - ALSA: hda/realtek: fix mute/micmute LEDs for HP machines (Jeremy Szu)   
  - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 (Meng Tang)   
  - ALSA: hda/realtek: Fix headset mic for Acer SF313-51 (Meng Tang)   
  - ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model (Meng Tang)   
  - ALSA: hda - Add fixup for Dell Latitidue E5430 (Meng Tang)   
  - LTS version: v5.15.55 (Jack Vogel)   
  - Revert "mtd: rawnand: gpmi: Fix setting busy timeout setting" (Greg Kroah-Hartman)   
  - LTS version: v5.15.54 (Jack Vogel)   
  - selftests/net: fix section name when using xdp_dummy.o (Hangbin Liu)   
  - dmaengine: idxd: force wq context cleanup on device disable path (Dave Jiang)   
  - dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate (Miaoqian Lin)   
  - dmaengine: qcom: bam_dma: fix runtime PM underflow (Caleb Connolly)   
  - dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate (Miaoqian Lin)   
  - dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly (Michael Walle)   
  - dmaengine: lgm: Fix an error handling path in intel_ldma_probe() (Christophe JAILLET)   
  - dmaengine: pl330: Fix lockdep warning about non-static key (Dmitry Osipenko)   
  - ida: don't use BUG_ON() for debugging (Linus Torvalds)   
  - dt-bindings: dma: allwinner,sun50i-a64-dma: Fix min/max typo (Samuel Holland)   
  - Revert "serial: 8250_mtk: Make sure to select the right FEATURE_SEL" (AngeloGioacchino Del Regno)   
  - Revert "mm/memory-failure.c: fix race with changing page compound again" (Naoya Horiguchi)   
  - misc: rtsx_usb: set return value in rsp_buf alloc err path (Shuah Khan)   
  - misc: rtsx_usb: use separate command and response buffers (Shuah Khan)   
  - misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer (Shuah Khan)   
  - dmaengine: imx-sdma: Allow imx8m for imx7 FW revs (Peter Robinson)   
  - i2c: cadence: Unregister the clk notifier in error path (Satish Nagireddy)   
  - r8169: fix accessing unset transport header (Heiner Kallweit)   
  - selftests: forwarding: fix error message in learning_test (Vladimir Oltean)   
  - selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT (Vladimir Oltean)   
  - selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT (Vladimir Oltean)   
  - ibmvnic: Properly dispose of all skbs during a failover. (Rick Lindsley)   
  - ARM: dts: stm32: add missing usbh clock and fix clk order on stm32mp15 (Fabrice Gasnier)   
  - ARM: dts: stm32: use usbphyc ck_usbo_48m as USBH OHCI clock on stm32mp151 (Amelie Delaunay)   
  - i40e: Fix VF's MAC Address change on VM (Norbert Zulinski)   
  - i40e: Fix dropped jumbo frames statistics (Lukasz Cieplicki)   
  - i2c: piix4: Fix a memory leak in the EFCH MMIO support (Jean Delvare)   
  - xsk: Clear page contiguity bit when unmapping pool (Ivan Malov)   
  - ARM: at91: fix soc detection for SAM9X60 SiPs (Mihai Sain)   
  - ARM: dts: at91: sama5d2_icp: fix eeprom compatibles (Eugen Hristev)   
  - ARM: dts: at91: sam9x60ek: fix eeprom compatible and size (Eugen Hristev)   
  - ARM: at91: pm: use proper compatibles for sama7g5's rtc and rtt (Claudiu Beznea)   
  - ARM: at91: pm: use proper compatibles for sam9x60's rtc and rtt (Claudiu Beznea)   
  - ARM: at91: pm: use proper compatible for sama5d2's rtc (Claudiu Beznea)   
  - arm64: dts: qcom: msm8992-*: Fix vdd_lvs1_2-supply typo (Stephan Gerhold)   
  - pinctrl: sunxi: sunxi_pconf_set: use correct offset (Andrei Lalaev)   
  - arm64: dts: imx8mp-phyboard-pollux-rdk: correct i2c2 & mmc settings (Peng Fan)   
  - arm64: dts: imx8mp-phyboard-pollux-rdk: correct eqos pad settings (Peng Fan)   
  - arm64: dts: imx8mp-phyboard-pollux-rdk: correct uart pad settings (Peng Fan)   
  - arm64: dts: imx8mp-evk: correct I2C3 pad settings (Peng Fan)   
  - arm64: dts: imx8mp-evk: correct I2C1 pad settings (Peng Fan)   
  - arm64: dts: imx8mp-evk: correct eqos pad settings (Peng Fan)   
  - arm64: dts: imx8mp-evk: correct vbus pad settings (Peng Fan)   
  - arm64: dts: imx8mp-evk: correct gpio-led pad settings (Peng Fan)   
  - arm64: dts: imx8mp-evk: correct the uart2 pinctl value (Sherry Sun)   
  - arm64: dts: imx8mp-evk: correct mmc pad settings (Peng Fan)   
  - ARM: mxs_defconfig: Enable the framebuffer (Fabio Estevam)   
  - arm64: dts: qcom: sdm845: use dispcc AHB clock for mdss node (Dmitry Baryshkov)   
  - arm64: dts: qcom: msm8994: Fix CPU6/7 reg values (Konrad Dybcio)   
  - ASoC: codecs: rt700/rt711/rt711-sdca: resume bus/codec in .set_jack_detect (Pierre-Louis Bossart)   
  - ASoC: rt711-sdca: Add endianness flag in snd_soc_component_driver (Charles Keepax)   
  - ASoC: rt711: Add endianness flag in snd_soc_component_driver (Charles Keepax)   
  - pinctrl: sunxi: a83t: Fix NAND function name for some pins (Samuel Holland)   
  - ARM: meson: Fix refcount leak in meson_smp_prepare_cpus (Miaoqian Lin)   
  - tty: n_gsm: fix encoding of command/response bit (daniel.starke@siemens.com)   
  - btrfs: fix use of uninitialized variable at rm device ioctl (Tom Rix)   
  - virtio-blk: modify the value type of num in virtio_queue_rq() (Ye Guojin)   
  - btrfs: fix error pointer dereference in btrfs_ioctl_rm_dev_v2() (Dan Carpenter)   
  - Revert "serial: sc16is7xx: Clear RS485 bits in the shutdown" (Hui Wang)   
  - can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits (Jimmy Assarsson)   
  - can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression (Jimmy Assarsson)   
  - can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info (Jimmy Assarsson)   
  - net: dsa: qca8k: reset cpu port on MTU change (Christian Marangi)   
  - powerpc/powernv: delay rng platform device creation until later in boot (Jason A. Donenfeld)   
  - video: of_display_timing.h: include errno.h (Hsin-Yi Wang)   
  - memregion: Fix memregion_free() fallback definition (Dan Williams)   
  - PM: runtime: Redefine pm_runtime_release_supplier() (Rafael J. Wysocki)   
  - fbcon: Prevent that screen size is smaller than font size (Helge Deller)   
  - fbcon: Disallow setting font bigger than screen size (Helge Deller)   
  - fbmem: Check virtual screen sizes in fb_set_var() (Helge Deller)   
  - fbdev: fbmem: Fix logo center image dx issue (Guiling Deng)   
  - iommu/vt-d: Fix PCI bus rescan device hot add (Yian Chen)   
  - module: fix [e_shstrndx].sh_size=0 OOB access (Alexey Dobriyan)   
  - module: change to print useful messages from elf_validity_check() (Shuah Khan)   
  - dt-bindings: soc: qcom: smd-rpm: Fix missing MSM8936 compatible (Bryan O'Donoghue)   
  - dt-bindings: soc: qcom: smd-rpm: Add compatible for MSM8953 SoC (Vladimir Lypak)   
  - rxrpc: Fix locking issue (David Howells)   
  - irqchip/gic-v3: Refactor ISB + EOIR at ack time (Mark Rutland)   
  - irqchip/gic-v3: Ensure pseudo-NMIs have an ISB between ack and handling (Mark Rutland)   
  - io_uring: avoid io-wq -EAGAIN looping for !IOPOLL (Pavel Begunkov)   
  - Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event (Sean Wang)   
  - Bluetooth: protect le accept and resolv lists with hdev->lock (Niels Dossche)   
  - drm/mediatek: Add vblank register/unregister callback functions (Rex-BC Chen)   
  - drm/mediatek: Add cmdq_handle in mtk_crtc (Chun-Kuang Hu)   
  - drm/mediatek: Detect CMDQ execution timeout (Chun-Kuang Hu)   
  - drm/mediatek: Remove the pointer of struct cmdq_client (Chun-Kuang Hu)   
  - drm/mediatek: Use mailbox rx_callback instead of cmdq_task_cb (Chun-Kuang Hu)   
  - drm/i915: Fix a race between vma / object destruction and unbinding (Thomas Hellström)   
  - drm/amdgpu: vi: disable ASPM on Intel Alder Lake based systems (Richard Gong)   
  - drm/amd: Refactor `amdgpu_aspm` to be evaluated per device (Mario Limonciello)   
  - tty: n_gsm: fix invalid gsmtty_write_room() result (Daniel Starke)   
  - serial: 8250_mtk: Make sure to select the right FEATURE_SEL (AngeloGioacchino Del Regno)   
  - tty: n_gsm: fix sometimes uninitialized warning in gsm_dlci_modem_output() (Daniel Starke)   
  - tty: n_gsm: fix invalid use of MSC in advanced option (Daniel Starke)   
  - mm/hwpoison: fix race between hugetlb free/demotion and memory_failure_hugetlb() (Naoya Horiguchi)   
  - mm/memory-failure.c: fix race with changing page compound again (Miaohe Lin)   
  - mm/hwpoison: avoid the impact of hwpoison_filter() return value on mce handler (luofei)   
  - mm/hwpoison: mf_mutex for soft offline and unpoison (Naoya Horiguchi)   
  - KVM: Initialize debugfs_dentry when a VM is created to avoid NULL deref (Sean Christopherson)   
  - btrfs: zoned: use dedicated lock for data relocation (Naohiro Aota)   
  - btrfs: zoned: encapsulate inode locking for zoned relocation (Johannes Thumshirn)   
  - tty: n_gsm: fix missing update of modem controls after DLCI open (Daniel Starke)   
  - ALSA: usb-audio: add mapping for MSI MAG X570S Torpedo MAX. (Maurizio Avogadro)   
  - ALSA: usb-audio: add mapping for MSI MPG X570S Carbon Max Wifi. (Johannes Schickel)   
  - tty: n_gsm: fix frame reception handling (Daniel Starke)   
  - tty: n_gsm: Save dlci address open status when config requester (Zhenguo Zhao)   
  - tty: n_gsm: Modify CR,PF bit when config requester (Zhenguo Zhao)   
  - KVM: Don't create VM debugfs files outside of the VM directory (Oliver Upton)   
  - drm/amd/vcn: fix an error msg on vcn 3.0 (tiancyin)   
  - ASoC: rt5682: fix an incorrect NULL check on list iterator (Xiaomeng Tong)   
  - ASoC: rt5682: move clk related code to rt5682_i2c_probe (Jack Yu)   
  - uapi/linux/stddef.h: Add include guards (Tadeusz Struk)   
  - stddef: Introduce DECLARE_FLEX_ARRAY() helper (Kees Cook)   
  - bus: mhi: Fix pm_state conversion to string (Paul Davey)   
  - bus: mhi: core: Use correctly sized arguments for bit field (Kees Cook)   
  - serial: sc16is7xx: Clear RS485 bits in the shutdown (Hui Wang)   
  - powerpc/tm: Fix more userspace r13 corruption (Nicholas Piggin)   
  - powerpc: flexible GPR range save/restore macros (Nicholas Piggin)   
  - powerpc/32: Don't use lmw/stmw for saving/restoring non volatile regs (Christophe Leroy)   
  - scsi: qla2xxx: Fix loss of NVMe namespaces after driver reload test (Arun Easi)   
  - KVM: s390x: fix SCK locking (Claudio Imbrenda)   
  - btrfs: don't access possibly stale fs_info data in device_list_add (Dongliang Mu)   
  - KVM: use __vcalloc for very large allocations (Paolo Bonzini)   
  - mm: vmalloc: introduce array allocation functions (Paolo Bonzini)   
  - Compiler Attributes: add __alloc_size() for better bounds checking (Kees Cook)   
  - mtd: spi-nor: Skip erase logic when SPI_NOR_NO_ERASE is set (Tudor Ambarus)   
  - batman-adv: Use netif_rx(). (Sebastian Andrzej Siewior)   
  - iio: accel: mma8452: use the correct logic to get mma8452_data (Haibo Chen)   
  - riscv/mm: Add XIP_FIXUP for riscv_pfn_base (Palmer Dabbelt)   
  - NFSD: COMMIT operations must not return NFS?ERR_INVAL (Chuck Lever)   
  - NFSD: De-duplicate net_generic(nf->nf_net, nfsd_net_id) (Chuck Lever)   
  - drm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bw (CHANDAN VURDIGERE NATARAJ)   
  - drm/amd/display: Set min dcfclk if pipe count is 0 (Michael Strauss)   
  - drbd: fix an invalid memory access caused by incorrect use of list iterator (Xiaomeng Tong)   
  - drbd: Fix double free problem in drbd_create_device (Wu Bo)   
  - drbd: add error handling support for add_disk() (Luis Chamberlain)   
  - btrfs: remove device item and update super block in the same transaction (Qu Wenruo)   
  - btrfs: use btrfs_get_dev_args_from_path in dev removal ioctls (Josef Bacik)   
  - btrfs: add a btrfs_get_dev_args_from_path helper (Josef Bacik)   
  - btrfs: handle device lookup with btrfs_dev_lookup_args (Josef Bacik)   
  - vdpa/mlx5: Avoid processing works if workqueue was destroyed (Eli Cohen)   
  - gfs2: Fix gfs2_file_buffered_write endless loop workaround (Andreas Gruenbacher)   
  - scsi: qla2xxx: Fix crash during module load unload test (Arun Easi)   
  - scsi: qla2xxx: edif: Replace list_for_each_safe with list_for_each_entry_safe (Quinn Tran)   
  - scsi: qla2xxx: Fix laggy FC remote port session recovery (Quinn Tran)   
  - scsi: qla2xxx: Move heartbeat handling from DPC thread to workqueue (Manish Rangankar)   
  - KVM: x86/mmu: Use common TDP MMU zap helper for MMU notifier unmap hook (Sean Christopherson)   
  - KVM: x86/mmu: Use yield-safe TDP MMU root iter in MMU notifier unmapping (Sean Christopherson)   
  - clk: renesas: r9a07g044: Update multiplier and divider values for PLL2/3 (Lad Prabhakar)   
  - cxl/port: Hold port reference until decoder release (Dan Williams)   
  - mt76: mt7921: do not always disable fw runtime-pm (Lorenzo Bianconi)   
  - mt76: mt76_connac: fix MCU_CE_CMD_SET_ROC definition error (Sean Wang)   
  - media: davinci: vpif: fix use-after-free on driver unbind (Johan Hovold)   
  - media: omap3isp: Use struct_group() for memcpy() region (Kees Cook)   
  - stddef: Introduce struct_group() helper macro (Kees Cook)   
  - block: fix rq-qos breakage from skipping rq_qos_done_bio() (Tejun Heo)   
  - block: only mark bio as tracked if it really is tracked (Jens Axboe)   
  - block: use bdev_get_queue() in bio.c (Pavel Begunkov)   
  - io_uring: ensure that fsnotify is always called (Jens Axboe)   
  - virtio-blk: avoid preallocating big SGL for data (Max Gurtovoy)   
  - ibmvnic: Allow queueing resets during probe (Sukadev Bhattiprolu)   
  - ibmvnic: clear fop when retrying probe (Sukadev Bhattiprolu)   
  - ibmvnic: init init_done_rc earlier (Sukadev Bhattiprolu)   
  - s390/setup: preserve memory at OLDMEM_BASE and OLDMEM_SIZE (Alexander Egorenkov)   
  - s390/setup: use physical pointers for memblock_reserve() (Alexander Gordeev)   
  - s390/boot: allocate amode31 section in decompressor (Alexander Gordeev)   
  - netfilter: nft_payload: don't allow th access for fragments (Florian Westphal)   
  - netfilter: nft_payload: support for inner header matching / mangling (Pablo Neira Ayuso)   
  - netfilter: nf_tables: convert pktinfo->tprot_set to flags field (Pablo Neira Ayuso)   
  - ASoC: rt5682: Fix deadlock on resume (Peter Ujfalusi)   
  - ASoC: rt5682: Re-detect the combo jack after resuming (Derek Fang)   
  - ASoC: rt5682: Avoid the unexpected IRQ event during going to suspend (Derek Fang)   
  - net/mlx5e: TC, Reject rules with forward and drop actions (Roi Dayan)   
  - net/mlx5e: TC, Reject rules with drop and modify hdr action (Roi Dayan)   
  - net/mlx5e: Split actions_match_supported() into a sub function (Roi Dayan)   
  - net/mlx5e: Check action fwd/drop flag exists also for nic flows (Roi Dayan)   
  - RISC-V: defconfigs: Set CONFIG_FB=y, for FB console (Palmer Dabbelt)   
  - riscv: defconfig: enable DRM_NOUVEAU (Heinrich Schuchardt)   
  - bpf, arm64: Use emit_addr_mov_i64() for BPF_PSEUDO_FUNC (Hou Tao)   
  - bpf: Stop caching subprog index in the bpf_pseudo_func insn (Martin KaFai Lau)   
  - mt76: mt7921: fix a possible race enabling/disabling runtime-pm (Lorenzo Bianconi)   
  - mt76: mt7921: introduce mt7921_mcu_set_beacon_filter utility routine (Lorenzo Bianconi)   
  - mt76: mt7921: get rid of mt7921_mac_set_beacon_filter (Lorenzo Bianconi)   
  - platform/x86: wmi: Fix driver->notify() vs ->probe() race (Hans de Goede)   
  - platform/x86: wmi: Replace read_takes_no_args with a flags field (Hans de Goede)   
  - platform/x86: wmi: introduce helper to convert driver to WMI driver (Barnabás Pőcze)   
  - qed: Improve the stack space of filter_config() (Shai Malin)   
  - ath11k: add hw_param for wakeup_mhi (Seevalamuthu Mariappan)   
  - memory: renesas-rpc-if: Avoid unaligned bus access for HyperFlash (Andrew Gabbasov)   
  - media: ir_toy: prevent device from hanging during transmit (Sean Young)   
  - PCI: pciehp: Ignore Link Down/Up caused by error-induced Hot Reset (Lukas Wunner)   
  - PCI/portdrv: Rename pm_iter() to pcie_port_device_iter() (Lukas Wunner)   
  - drm/i915: Replace the unconditional clflush with drm_clflush_virt_range() (Ville Syrjälä)   
  - drm/i915/gt: Register the migrate contexts with their engines (Thomas Hellström)   
  - drm/i915: Disable bonding on gen12+ platforms (Matthew Brost)   
  - btrfs: fix deadlock between chunk allocation and chunk btree modifications (Filipe Manana)   
  - dma-buf/poll: Get a file reference for outstanding fence callbacks (Michel Dänzer)   
  - Input: goodix - try not to touch the reset-pin on x86/ACPI devices (Hans de Goede)   
  - Input: goodix - refactor reset handling (Hans de Goede)   
  - Input: goodix - add a goodix.h header file (Hans de Goede)   
  - Input: goodix - change goodix_i2c_write() len parameter type to int (Hans de Goede)   
  - Input: cpcap-pwrbutton - handle errors from platform_get_irq() (Tang Bin)   
  - btrfs: fix warning when freeing leaf after subvolume creation failure (Filipe Manana)   
  - btrfs: fix invalid delayed ref after subvolume creation failure (Filipe Manana)   
  - btrfs: add additional parameters to btrfs_init_tree_ref/btrfs_init_data_ref (Nikolay Borisov)   
  - btrfs: rename btrfs_alloc_chunk to btrfs_create_chunk (Nikolay Borisov)   
  - netfilter: nft_set_pipapo: release elements in clone from abort path (Pablo Neira Ayuso)   
  - net: rose: fix UAF bug caused by rose_t0timer_expiry (Duoming Zhou)   
  - usbnet: fix memory leak in error case (Oliver Neukum)   
  - bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals (Daniel Borkmann)   
  - bpf: Fix incorrect verifier simulation around jmp32's jeq/jne (Daniel Borkmann)   
  - can: mcp251xfd: mcp251xfd_regmap_crc_read(): update workaround broken CRC on TBC register (Thomas Kopp)   
  - can: mcp251xfd: mcp251xfd_regmap_crc_read(): improve workaround handling for mcp2517fd (Thomas Kopp)   
  - can: m_can: m_can_{read_fifo,echo_tx_event}(): shift timestamp to full 32 bits (Marc Kleine-Budde)   
  - can: m_can: m_can_chip_config(): actually enable internal timestamping (Marc Kleine-Budde)   
  - can: gs_usb: gs_usb_open/close(): fix memory leak (Rhett Aultman)   
  - can: grcan: grcan_probe(): remove extra of_node_get() (Liang He)   
  - can: bcm: use call_rcu() instead of costly synchronize_rcu() (Oliver Hartkopp)   
  - ALSA: cs46xx: Fix missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: hda/realtek: Add quirk for Clevo L140PU (Tim Crawford)   
  - ALSA: usb-audio: Workarounds for Behringer UMC 204/404 HD (Takashi Iwai)   
  - Revert "selftests/bpf: Add test for bpf_timer overwriting crash" (Po-Hsu Lin)   
  - mm/filemap: fix UAF in find_lock_entries (Liu Shixin)   
  - mm/slub: add missing TID updates on slab deactivation (Jann Horn)   
  - LTS version: v5.15.53 (Jack Vogel)   
  - hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails (Yang Yingliang)   
  - hwmon: (occ) Prevent power cap command overwriting poll response (Eddie James)   
  - hwmon: (occ) Remove sequence numbering and checksum calculation (Eddie James)   
  - drm/fourcc: fix integer type usage in uapi header (Carlos Llamas)   
  - platform/x86: panasonic-laptop: filter out duplicate volume up/down/mute keypresses (Hans de Goede)   
  - platform/x86: panasonic-laptop: don't report duplicate brightness key-presses (Hans de Goede)   
  - platform/x86: panasonic-laptop: revert "Resolve hotkey double trigger bug" (Hans de Goede)   
  - platform/x86: panasonic-laptop: sort includes alphabetically (Hans de Goede)   
  - platform/x86: panasonic-laptop: de-obfuscate button codes (Stefan Seyfried)   
  - drivers: cpufreq: Add missing of_node_put() in qoriq-cpufreq.c (Liang He)   
  - drm/msm/gem: Fix error return on fence id alloc fail (Rob Clark)   
  - drm/i915/gem: add missing else (katrinzhou)   
  - net: fix IFF_TX_SKB_NO_LINEAR definition (Dan Carpenter)   
  - fsi: occ: Force sequence numbering per OCC (Eddie James)   
  - clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup() (Greg Kroah-Hartman)   
  - net: usb: qmi_wwan: add Telit 0x1070 composition (Daniele Palmas)   
  - xen/arm: Fix race in RB-tree based P2M accounting (Oleksandr Tyshchenko)   
  - xen-netfront: restore __skb_queue_tail() positioning in xennet_get_responses() (Jan Beulich)   
  - xen/blkfront: force data bouncing when backend is untrusted (Roger Pau Monne)   
  - xen/netfront: force data bouncing when backend is untrusted (Roger Pau Monne)   
  - xen/netfront: fix leaking data in shared pages (Roger Pau Monne)   
  - xen/blkfront: fix leaking data in shared pages (Roger Pau Monne)   
  - selftests/rseq: Change type of rseq_offset to ptrdiff_t (Mathieu Desnoyers)   
  - selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread area (Mathieu Desnoyers)   
  - selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread area (Mathieu Desnoyers)   
  - selftests/rseq: Fix: work-around asm goto compiler bugs (Mathieu Desnoyers)   
  - selftests/rseq: Remove arm/mips asm goto compiler work-around (Mathieu Desnoyers)   
  - selftests/rseq: Fix warnings about #if checks of undefined tokens (Mathieu Desnoyers)   
  - selftests/rseq: Fix ppc32 offsets by using long rather than off_t (Mathieu Desnoyers)   
  - selftests/rseq: Fix ppc32 missing instruction selection "u" and "x" for load/store (Mathieu Desnoyers)   
  - selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian (Mathieu Desnoyers)   
  - selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35 (Mathieu Desnoyers)   
  - selftests/rseq: Introduce thread pointer getters (Mathieu Desnoyers)   
  - selftests/rseq: Introduce rseq_get_abi() helper (Mathieu Desnoyers)   
  - selftests/rseq: Remove volatile from __rseq_abi (Mathieu Desnoyers)   
  - selftests/rseq: Remove useless assignment to cpu variable (Mathieu Desnoyers)   
  - selftests/rseq: introduce own copy of rseq uapi header (Mathieu Desnoyers)   
  - selftests/rseq: remove ARRAY_SIZE define from individual tests (Shuah Khan)   
  - selftests/bpf: Add test_verifier support to fixup kfunc call insns (Kumar Kartikeya Dwivedi)   
  - tcp: add a missing nf_reset_ct() in 3WHS handling (Eric Dumazet)   
  - MAINTAINERS: add Leah as xfs maintainer for 5.15.y (Leah Rumancik)   
  - net: tun: avoid disabling NAPI twice (Jakub Kicinski)   
  - mlxsw: spectrum_router: Fix rollback in tunnel next hop init (Petr Machata)   
  - ipv6: fix lockdep splat in in6_dump_addrs() (Eric Dumazet)   
  - ipv6/sit: fix ipip6_tunnel_get_prl return value (katrinzhou)   
  - tunnels: do not assume mac header is set in skb_tunnel_check_pmtu() (Eric Dumazet)   
  - ACPI: video: Change how we determine if brightness key-presses are handled (Hans de Goede)   
  - io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio (Jens Axboe)   
  - epic100: fix use after free on rmmod (Tong Zhang)   
  - tipc: move bc link creation back to tipc_node_create (Xin Long)   
  - NFC: nxp-nci: Don't issue a zero length i2c_master_read() (Michael Walle)   
  - nfc: nfcmrvl: Fix irq_of_parse_and_map() return value (Krzysztof Kozlowski)   
  - powerpc/memhotplug: Add add_pages override for PPC (Aneesh Kumar K.V)   
  - net: bonding: fix use-after-free after 802.3ad slave unbind (Yevhen Orlov)   
  - net: phy: ax88772a: fix lost pause advertisement configuration (Oleksij Rempel)   
  - net: bonding: fix possible NULL deref in rlb code (Eric Dumazet)   
  - net: asix: fix "can't send until first packet is send" issue (Oleksij Rempel)   
  - net/sched: act_api: Notify user space if any actions were flushed before error (Victor Nogueira)   
  - net/dsa/hirschmann: Add missing of_node_get() in hellcreek_led_setup() (Liang He)   
  - netfilter: nft_dynset: restore set element counter when failing to update (Pablo Neira Ayuso)   
  - s390: remove unneeded 'select BUILD_BIN2C' (Masahiro Yamada)   
  - vdpa/mlx5: Update Control VQ callback information (Eli Cohen)   
  - PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events (Miaoqian Lin)   
  - caif_virtio: fix race between virtio_device_ready() and ndo_open() (Jason Wang)   
  - vfs: fix copy_file_range() regression in cross-fs copies (Amir Goldstein)   
  - NFSD: restore EINVAL error translation in nfsd_commit() (Alexey Khoroshilov)   
  - net: ipv6: unexport __init-annotated seg6_hmac_net_init() (YueHaibing)   
  - selftests: mptcp: more stable diag tests (Paolo Abeni)   
  - usbnet: fix memory allocation in helpers (Oliver Neukum)   
  - net: usb: asix: do not force pause frames support (Oleksij Rempel)   
  - linux/dim: Fix divide by 0 in RDMA DIM (Tao Liu)   
  - RDMA/cm: Fix memory leak in ib_cm_insert_listen (Miaoqian Lin)   
  - RDMA/qedr: Fix reporting QP timeout attribute (Kamal Heib)   
  - net: dp83822: disable rx error interrupt (Enguerrand de Ribaucourt)   
  - net: dp83822: disable false carrier interrupt (Enguerrand de Ribaucourt)   
  - net: tun: stop NAPI when detaching queues (Jakub Kicinski)   
  - net: tun: unlink NAPI from device on destruction (Jakub Kicinski)   
  - net: dsa: bcm_sf2: force pause link settings (Doug Berger)   
  - selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test (Dimitris Michailidis)   
  - virtio-net: fix race between ndo_open() and virtio_device_ready() (Jason Wang)   
  - net: usb: ax88179_178a: Fix packet receiving (Jose Alonso)   
  - net: rose: fix UAF bugs caused by timer handler (Duoming Zhou)   
  - SUNRPC: Fix READ_PLUS crasher (Chuck Lever)   
  - s390/archrandom: simplify back to earlier design and initialize earlier (Jason A. Donenfeld)   
  - dm raid: fix KASAN warning in raid5_add_disks (Mikulas Patocka)   
  - dm raid: fix accesses beyond end of raid member array (Heinz Mauelshagen)   
  - powerpc/bpf: Fix use of user_pt_regs in uapi (Naveen N. Rao)   
  - powerpc/book3e: Fix PUD allocation size in map_kernel_page() (Christophe Leroy)   
  - powerpc/prom_init: Fix kernel config grep (Liam Howlett)   
  - nvdimm: Fix badblocks clear off-by-one error (Chris Ye)   
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA IM2P33F8ABR1 (Lamarque Vieira Souza)   
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG SX6000LNP (AKA SPECTRIX S40G) (Pablo Greco)   
  - net: phy: Don't trigger state machine while in suspend (Lukas Wunner)   
  - ipv6: take care of disable_policy when restoring routes (Nicolas Dichtel)   
  - ksmbd: use vfs_llseek instead of dereferencing NULL (Jason A. Donenfeld)   
  - ksmbd: check invalid FileOffset and BeyondFinalZero in FSCTL_ZERO_DATA (Namjae Jeon)   
  - ksmbd: set the range of bytes to zero without extending file size in FSCTL_ZERO_DATA (Namjae Jeon)   
  - drm/amdgpu: To flush tlb for MMHUB of RAVEN series (Ruili Ji)   
  - Revert "drm/amdgpu/display: set vblank_disable_immediate for DC" (Alex Deucher)   
  - cpufreq:cppc_cpufreq: prevent crash on reading freqdomain_cpus (chris hyser)  [Orabug: 34327463]  
  - vmcoreinfo: add kallsyms_num_syms symbol (Stephen Brennan)  [Orabug: 34475877]  
  - vmcoreinfo: include kallsyms symbols (Stephen Brennan)  [Orabug: 34475877]  
  - kallsyms: move declarations to internal header (Stephen Brennan)  [Orabug: 34475877]  
  - Revert "KVM: x86: Print error code in exception injection tracepoint iff valid" (Sherry Yang)  [Orabug: 34539458]  
  - uek-rpm: Enable IMA_APPRAISE_SB_BOOTPARAM (Eric Snowberg)  [Orabug: 34549007]  
  - integrity: Allow ima_appraise bootparam to be set when SB is enabled (Eric Snowberg)  [Orabug: 34549007]  
  - net/mlx5: E-Switch, change VFs default admin state to auto in switchdev (Maor Dickman)  [Orabug: 34533007]  
  - Revert "net/mlx5: E-Switch, change VFs default admin state to auto in switchdev" (Devesh Sharma)  [Orabug: 34532946]  
  - uek-rpm: Install kernel-rpm-macros as build dependency (Somasundaram Krishnasamy)  [Orabug: 34529696]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-3.60.3.el8uek]
changelog:
  - audit: annotate branch direction for audit_in_mask() (Ankur Arora)  [Orabug: 34544783]  
  - audit: cache ctx->major in audit_filter_syscall() (Ankur Arora)  [Orabug: 34544783]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-3.60.4.el8uek]
changelog:
  - netfilter: ebtables: reject blobs that don't provide all entry points (Florian Westphal)  [Orabug: 34513977]  
  - uek-rpm: Disable CONFIG_CRYPTO_STREEBOG (Victor Erminpour)  [Orabug: 34538054]  
  - uek-rpm: Disable CONFIG_CRYPTO_SM3 (Victor Erminpour)  [Orabug: 34538054]  
  - uek-rpm: Disable CONFIG_CRYPTO_SM4 (Victor Erminpour)  [Orabug: 34538054]  
  - af_key: Do not call xfrm_probe_algs in parallel (Herbert Xu)  [Orabug: 34566751]  {CVE-2022-3028} 
  - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Tetsuo Handa)  [Orabug: 34567776]  
  - cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock (Tejun Heo)  [Orabug: 34567776]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-3.60.5.el8uek]
changelog:
  - hwmon: (opbmc) Add support for AST2600 based Pilot (Jan Zdarek)  [Orabug: 34605427]  
  - random: Fix incorrect type for 'rc' variable (Harshit Mogalapalli)  [Orabug: 34596909]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-4.60.1.el8uek]
changelog:
  - net: mana: Add the Linux MANA PF driver (Dexuan Cui)  [Orabug: 34405108]  
  - rds: cong: Make rds_cong_wait an array to reduce lock contention (Håkon Bugge)  [Orabug: 34488341]  
  - rds: cong: Make rs_cong_notify and rs_cong_mask atomic64_t (Håkon Bugge)  [Orabug: 34488341]  
  - Revert "cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()" (Imran Khan)  [Orabug: 34620700]  
  - Revert "cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock" (Imran Khan)  [Orabug: 34620700]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-6.80.1.el8uek]
changelog:
  - LTS version: v5.15.80 (Jack Vogel)   
  - ntfs: check overflow when iterating ATTR_RECORDs (Hawkins Jiawei)   
  - ntfs: fix out-of-bounds read in ntfs_attr_find() (Hawkins Jiawei)   
  - ntfs: fix use-after-free in ntfs_attr_find() (Hawkins Jiawei)   
  - net/9p: use a dedicated spinlock for trans_fd (Dominique Martinet)   
  - mm: fs: initialize fsdata passed to write_begin/write_end interface (Alexander Potapenko)   
  - wifi: wext: use flex array destination for memcpy() (Hawkins Jiawei)   
  - 9p/trans_fd: always use O_NONBLOCK read/write (Tetsuo Handa)   
  - gfs2: Switch from strlcpy to strscpy (Andreas Gruenbacher)   
  - gfs2: Check sb_bsize_shift after reading superblock (Andrew Price)   
  - 9p: trans_fd/p9_conn_cancel: drop client lock earlier (Dominique Martinet)   
  - kcm: close race conditions on sk_receive_queue (Cong Wang)   
  - kcm: avoid potential race in kcm_tx_work (Eric Dumazet)   
  - tcp: cdg: allow tcp_cdg_release() to be called multiple times (Eric Dumazet)   
  - macvlan: enforce a consistent minimal mtu (Eric Dumazet)   
  - Input: i8042 - fix leaking of platform device on module removal (Chen Jun)   
  - kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case (Li Huafei)   
  - scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper() (Yuan Can)   
  - scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() (Yang Yingliang)   
  - net: use struct_group to copy ip/ipv6 header addresses (Hangbin Liu)   
  - tracing: Fix warning on variable 'struct trace_array' (Aashish Sharma)   
  - ring-buffer: Include dropped pages in counting dirty patches (Steven Rostedt (Google))   
  - perf: Improve missing SIGTRAP checking (Marco Elver)   
  - serial: 8250_lpss: Use 16B DMA burst with Elkhart Lake (Ilpo Järvinen)   
  - nvme: ensure subsystem reset is single threaded (Keith Busch)   
  - nvme: restrict management ioctls to admin (Keith Busch)   
  - perf/x86/intel/pt: Fix sampling using single range output (Adrian Hunter)   
  - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (Alexander Potapenko)   
  - docs: update mediator contact information in CoC doc (Shuah Khan)   
  - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() (Xiongfeng Wang)   
  - mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout (Chevron Li)   
  - mmc: core: properly select voltage range without power cycle (Yann Gautier)   
  - firmware: coreboot: Register bus in module init (Brian Norris)   
  - iommu/vt-d: Set SRE bit only when hardware has SRS cap (Tina Zhang)   
  - iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (Tina Zhang)   
  - scsi: zfcp: Fix double free of FSF request when qdio send fails (Benjamin Block)   
  - net: phy: marvell: add sleep time after enabling the loopback bit (Aminuddin Jamaluddin)   
  - maccess: Fix writing offset in case of fault in strncpy_from_kernel_nofault() (Alban Crequy)   
  - Input: iforce - invert valid length check when fetching device IDs (Tetsuo Handa)   
  - serial: 8250_lpss: Configure DMA also w/o DMA filter (Ilpo Järvinen)   
  - serial: 8250: Flush DMA Rx on RLSI (Ilpo Järvinen)   
  - serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs (Ilpo Järvinen)   
  - dm ioctl: fix misbehavior if list_versions races with module loading (Mikulas Patocka)   
  - iio: pressure: ms5611: changed hardcoded SPI speed to value limited (Mitja Spes)   
  - iio: adc: mp2629: fix potential array out of bound access (Saravanan Sekar)   
  - iio: adc: mp2629: fix wrong comparison of channel (Saravanan Sekar)   
  - iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() (Yang Yingliang)   
  - iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() (Yang Yingliang)   
  - usb: typec: mux: Enter safe mode only when pins need to be reconfigured (Rajat Khandelwal)   
  - usb: cdns3: host: fix endless superspeed hub port reset (Li Jun)   
  - usb: chipidea: fix deadlock in ci_otg_del_timer (Duoming Zhou)   
  - usb: add NO_LPM quirk for Realforce 87U Keyboard (Nicolas Dumazet)   
  - USB: serial: option: add Fibocom FM160 0x0111 composition (Reinhard Speyerer)   
  - USB: serial: option: add u-blox LARA-L6 modem (Davide Tronchin)   
  - USB: serial: option: add u-blox LARA-R6 00B modem (Davide Tronchin)   
  - USB: serial: option: remove old LARA-R6 PID (Davide Tronchin)   
  - USB: serial: option: add Sierra Wireless EM9191 (Benoît Monin)   
  - USB: bcma: Make GPIO explicitly optional (Linus Walleij)   
  - speakup: fix a segfault caused by switching consoles (Mushahid Hussain)   
  - slimbus: stream: correct presence rate frequencies (Krzysztof Kozlowski)   
  - slimbus: qcom-ngd: Fix build error when CONFIG_SLIM_QCOM_NGD_CTRL=y && CONFIG_QCOM_RPROC_COMMON=m (Zheng Bin)   
  - Revert "usb: dwc3: disable USB core PHY management" (Johan Hovold)   
  - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 (Takashi Iwai)   
  - ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro (Emil Flink)   
  - ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() (Takashi Iwai)   
  - drm/amd/display: Add HUBP surface flip interrupt handler (Rodrigo Siqueira)   
  - tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit() (Shang XiaoJing)   
  - tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit() (Shang XiaoJing)   
  - tracing: Fix race where eprobes can be called before the event (Steven Rostedt (Google))   
  - tracing: Fix wild-memory-access in register_synth_event() (Shang XiaoJing)   
  - tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() (Shang XiaoJing)   
  - tracing/ring-buffer: Have polling block on watermark (Steven Rostedt (Google))   
  - tracing: Fix memory leak in tracing_read_pipe() (Wang Yufen)   
  - ring_buffer: Do not deactivate non-existant pages (Daniil Tatianin)   
  - ftrace: Fix null pointer dereference in ftrace_add_mod() (Xiu Jianfeng)   
  - ftrace: Optimize the allocation for mcount entries (Wang Wensheng)   
  - ftrace: Fix the possible incorrect kernel message (Wang Wensheng)   
  - cifs: add check for returning value of SMB2_set_info_init (Anastasia Belova)   
  - net: thunderbolt: Fix error handling in tbnet_init() (Yuan Can)   
  - net: microchip: sparx5: Fix potential null-ptr-deref in sparx_stats_init() and sparx5_start() (Shang XiaoJing)   
  - cifs: Fix wrong return value checking when GETFLAGS (Zhang Xiaoxu)   
  - net/x25: Fix skb leak in x25_lapb_receive_frame() (Wei Yongjun)   
  - net: ag71xx: call phylink_disconnect_phy if ag71xx_hw_enable() fail in ag71xx_open() (Liu Jian)   
  - cifs: add check for returning value of SMB2_close_init (Anastasia Belova)   
  - platform/surface: aggregator: Do not check for repeated unsequenced packets (Maximilian Luz)   
  - platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized (Roger Pau Monné)   
  - drbd: use after free in drbd_create_device() (Dan Carpenter)   
  - bridge: switchdev: Fix memory leaks when changing VLAN protocol (Ido Schimmel)   
  - net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process (Guangbin Huang)   
  - net: ena: Fix error handling in ena_init() (Yuan Can)   
  - net: ionic: Fix error handling in ionic_init_module() (Yuan Can)   
  - xen/pcpu: fix possible memory leak in register_pcpu() (Yang Yingliang)   
  - net: dsa: make dsa_master_ioctl() see through port_hwtstamp_get() shims (Vladimir Oltean)   
  - net: mhi: Fix memory leak in mhi_net_dellink() (Wei Yongjun)   
  - bnxt_en: Remove debugfs when pci_register_driver failed (Gaosheng Cui)   
  - net: caif: fix double disconnect client in chnl_net_open() (Zhengchao Shao)   
  - net: macvlan: Use built-in RCU list checking (Chuang Wang)   
  - mISDN: fix misuse of put_device() in mISDN_register_device() (Wang ShaoBo)   
  - net: liquidio: release resources when liquidio driver open failed (Zhengchao Shao)   
  - soc: imx8m: Enable OCOTP clock before reading the register (Xiaolei Wang)   
  - net: stmmac: ensure tx function is not running in stmmac_xdp_release() (Mohd Faizal Abdul Rahim)   
  - net: hinic: Fix error handling in hinic_module_init() (Yuan Can)   
  - mISDN: fix possible memory leak in mISDN_dsp_element_register() (Yang Yingliang)   
  - net: bgmac: Drop free_netdev() from bgmac_enet_remove() (Wei Yongjun)   
  - bpf: Initialize same number of free nodes for each pcpu_freelist (Xu Kuohai)   
  - MIPS: Loongson64: Add WARN_ON on kexec related kmalloc failed (Liao Chang)   
  - MIPS: fix duplicate definitions for exported symbols (Rongwei Zhang)   
  - nfp: change eeprom length to max length enumerators (Jaco Coetzee)   
  - ata: libata-transport: fix error handling in ata_tdev_add() (Yang Yingliang)   
  - ata: libata-transport: fix error handling in ata_tlink_add() (Yang Yingliang)   
  - ata: libata-transport: fix error handling in ata_tport_add() (Yang Yingliang)   
  - ata: libata-transport: fix double ata_host_put() in ata_tport_add() (Yang Yingliang)   
  - arm64: dts: imx8mn: Fix NAND controller size-cells (Marek Vasut)   
  - arm64: dts: imx8mm: Fix NAND controller size-cells (Marek Vasut)   
  - ARM: dts: imx7: Fix NAND controller size-cells (Marek Vasut)   
  - drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker() (Shang XiaoJing)   
  - drm/drv: Fix potential memory leak in drm_dev_init() (Shang XiaoJing)   
  - drm/panel: simple: set bpc field for logic technologies displays (Aishwarya Kothari)   
  - drm/vc4: kms: Fix IS_ERR() vs NULL check for vc4_kms (Gaosheng Cui)   
  - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map (Zeng Heng)   
  - parport_pc: Avoid FIFO port location truncation (Maciej W. Rozycki)   
  - siox: fix possible memory leak in siox_device_add() (Yang Yingliang)   
  - arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro (D Scott Phillips)   
  - bpf: Fix memory leaks in __check_func_call (Wang Yufen)   
  - block: sed-opal: kmalloc the cmd/resp buffers (Serge Semin)   
  - scsi: scsi_transport_sas: Fix error handling in sas_phy_add() (Yang Yingliang)   
  - pinctrl: rockchip: list all pins in a possible mux route for PX30 (Quentin Schulz)   
  - ASoC: soc-utils: Remove __exit for snd_soc_util_exit() (Chen Zhongjin)   
  - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() (Baisong Zhong)   
  - tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send (Duoming Zhou)   
  - serial: imx: Add missing .thaw_noirq hook (Shawn Guo)   
  - serial: 8250: omap: Flush PM QOS work on remove (Tony Lindgren)   
  - serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove() (Tony Lindgren)   
  - serial: 8250_omap: remove wait loop from Errata i202 workaround (Matthias Schiffer)   
  - serial: 8250: omap: Fix missing PM runtime calls for omap8250_set_mctrl() (Tony Lindgren)   
  - ARM: at91: pm: avoid soft resetting AC DLL (Claudiu Beznea)   
  - ASoC: tas2764: Fix set_tdm_slot in case of single slot (Martin Povišer)   
  - ASoC: tas2770: Fix set_tdm_slot in case of single slot (Martin Povišer)   
  - ASoC: core: Fix use-after-free in snd_soc_exit() (Chen Zhongjin)   
  - ARM: dts: at91: sama7g5: fix signal name of pin PB2 (Mihai Sain)   
  - spi: stm32: Print summary 'callbacks suppressed' message (Marek Vasut)   
  - arm64: dts: qcom: sm8350-hdk: Specify which LDO modes are allowed (Douglas Anderson)   
  - arm64: dts: qcom: sm8250-xperia-edo: Specify which LDO modes are allowed (Douglas Anderson)   
  - arm64: dts: qcom: sm8150-xperia-kumano: Specify which LDO modes are allowed (Douglas Anderson)   
  - arm64: dts: qcom: sa8155p-adp: Specify which LDO modes are allowed (Douglas Anderson)   
  - KVM: x86/pmu: Do not speculatively query Intel GP PMCs that don't exist yet (Like Xu)   
  - spi: intel: Use correct mask for flash and protected regions (Mika Westerberg)   
  - mtd: spi-nor: intel-spi: Disable write protection only if asked (Mika Westerberg)   
  - ASoC: codecs: jz4725b: Fix spelling mistake "Sourc" -> "Source", "Routee" -> "Route" (Colin Ian King)   
  - x86/cpu: Add several Intel server CPU model numbers (Tony Luck)   
  - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (Luiz Augusto von Dentz)   
  - btrfs: remove pointless and double ulist frees in error paths of qgroup tests (Filipe Manana)   
  - drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid (Nathan Huckleberry)   
  - i2c: i801: add lis3lv02d's I2C address for Vostro 5568 (Nam Cao)   
  - i2c: tegra: Allocate DMA memory for DMA engine (Thierry Reding)   
  - firmware: arm_scmi: Cleanup the core driver removal callback (Cristian Marussi)   
  - ACPI: x86: Add another system to quirk list for forcing StorageD3Enable (Mario Limonciello)   
  - NFSv4: Retry LOCK on OLD_STATEID during delegation return (Benjamin Coddington)   
  - btrfs: raid56: properly handle the error when unable to find the missing stripe (Qu Wenruo)   
  - RDMA/efa: Add EFA 0xefa2 PCI ID (Michael Margolin)   
  - ACPI: scan: Add LATT2021 to acpi_ignore_dep_ids[] (Hans de Goede)   
  - drm/amd/display: Remove wrong pipe control lock (Rodrigo Siqueira)   
  - ASoC: rt1308-sdw: add the default value of some registers (Shuming Fan)   
  - selftests/intel_pstate: fix build for ARCH=x86_64 (Ricardo Cañuelo)   
  - selftests/futex: fix build for clang (Ricardo Cañuelo)   
  - ASoC: Intel: sof_sdw: add quirk variant for LAPBC710 NUC15 (Pierre-Louis Bossart)   
  - ASoC: codecs: jz4725b: fix capture selector naming (Siarhei Volkau)   
  - ASoC: codecs: jz4725b: use right control for Capture Volume (Siarhei Volkau)   
  - ASoC: codecs: jz4725b: fix reported volume for Master ctl (Siarhei Volkau)   
  - ASoC: codecs: jz4725b: add missed Line In power control bit (Siarhei Volkau)   
  - spi: intel: Fix the offset to get the 64K erase opcode (Mauro Lima)   
  - ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK (Xiaolei Wang)   
  - ASoC: rt1019: Fix the TDM settings (Derek Fang)   
  - ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe (Zhang Qilong)   
  - ASoC: wm8997: Revert "ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe" (Zhang Qilong)   
  - ASoC: wm5110: Revert "ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe" (Zhang Qilong)   
  - ASoC: wm5102: Revert "ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe" (Zhang Qilong)   
  - LTS version: v5.15.79 (Jack Vogel)   
  - x86/cpu: Restore AMD's DE_CFG MSR after resume (Borislav Petkov)   
  - net: tun: call napi_schedule_prep() to ensure we own a napi (Eric Dumazet)   
  - drm/amdkfd: Migrate in CPU page fault use current mm (Philip Yang)   
  - marvell: octeontx2: build error: unknown type name 'u64' (Anders Roxell)   
  - dmaengine: at_hdmac: Check return code of dma_async_device_register (Tudor Ambarus)   
  - dmaengine: at_hdmac: Fix impossible condition (Tudor Ambarus)   
  - dmaengine: at_hdmac: Don't allow CPU to reorder channel enable (Tudor Ambarus)   
  - dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors (Tudor Ambarus)   
  - dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware (Tudor Ambarus)   
  - dmaengine: at_hdmac: Fix concurrency over the active list (Tudor Ambarus)   
  - dmaengine: at_hdmac: Free the memset buf without holding the chan lock (Tudor Ambarus)   
  - dmaengine: at_hdmac: Fix concurrency over descriptor (Tudor Ambarus)   
  - dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all() (Tudor Ambarus)   
  - dmaengine: at_hdmac: Protect atchan->status with the channel lock (Tudor Ambarus)   
  - dmaengine: at_hdmac: Do not call the complete callback on device_terminate_all (Tudor Ambarus)   
  - dmaengine: at_hdmac: Fix premature completion of desc in issue_pending (Tudor Ambarus)   
  - dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending (Tudor Ambarus)   
  - dmaengine: at_hdmac: Don't start transactions at tx_submit level (Tudor Ambarus)   
  - dmaengine: at_hdmac: Fix at_lli struct definition (Tudor Ambarus)   
  - cert host tools: Stop complaining about deprecated OpenSSL functions (Linus Torvalds)   
  - can: j1939: j1939_send_one(): fix missing CAN header initialization (Oliver Hartkopp)   
  - mm/shmem: use page_mapping() to detect page cache for uffd continue (Peter Xu)   
  - mm/memremap.c: map FS_DAX device memory as decrypted (Pankaj Gupta)   
  - mm/damon/dbgfs: check if rm_contexts input is for a real context (SeongJae Park)   
  - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (ZhangPeng)   
  - mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)   
  - btrfs: zoned: initialize device's zone info for seeding (Johannes Thumshirn)   
  - btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() (Zhang Xiaoxu)   
  - btrfs: fix match incorrectly in dev_args_match_device (Liu Shixin)   
  - wifi: ath11k: avoid deadlock during regulatory update in ath11k_regd_update() (Wen Gong)   
  - platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi (Jorge Lopez)   
  - drm/amdgpu: disable BACO on special BEIGE_GOBY card (Guchun Chen)   
  - drm/i915/dmabuf: fix sg_table handling in map_dma_buf (Matthew Auld)   
  - nilfs2: fix use-after-free bug of ns_writer on remount (Ryusuke Konishi)   
  - nilfs2: fix deadlock in nilfs_count_free_blocks() (Ryusuke Konishi)   
  - ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure (Shin'ichiro Kawasaki)   
  - vmlinux.lds.h: Fix placement of '.data..decrypted' section (Nathan Chancellor)   
  - ALSA: usb-audio: Add DSD support for Accuphase DAC-60 (Jussi Laako)   
  - ALSA: usb-audio: Add quirk entry for M-Audio Micro (Takashi Iwai)   
  - ALSA: usb-audio: Yet more regression for for the delayed card registration (Takashi Iwai)   
  - ALSA: hda/realtek: Add Positivo C6300 model quirk (Edson Juliano Drosdeck)   
  - ALSA: hda: fix potential memleak in 'add_widget_node' (Ye Bin)   
  - ALSA: hda/ca0132: add quirk for EVGA Z390 DARK (Xian Wang)   
  - ALSA: hda/hdmi - enable runtime pm for more AMD display audio (Evan Quan)   
  - mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA (Haibo Chen)   
  - mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)   
  - mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)   
  - mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)   
  - mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI (Brian Norris)   
  - MIPS: jump_label: Fix compat branch range check (Jiaxun Yang)   
  - arm64: efi: Fix handling of misaligned runtime regions and drop warning (Ard Biesheuvel)   
  - riscv: fix reserved memory setup (Conor Dooley)   
  - riscv: vdso: fix build with llvm (Jisheng Zhang)   
  - riscv: process: fix kernel info leakage (Jisheng Zhang)   
  - net: macvlan: fix memory leaks of macvlan_common_newlink (Chuang Wang)   
  - ethernet: tundra: free irq when alloc ring failed in tsi108_open() (Zhengchao Shao)   
  - net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open() (Zhengchao Shao)   
  - ethernet: s2io: disable napi when start nic failed in s2io_card_up() (Zhengchao Shao)   
  - net: atlantic: macsec: clear encryption keys from the stack (Antoine Tenart)   
  - net: phy: mscc: macsec: clear encryption keys when freeing a flow (Antoine Tenart)   
  - stmmac: dwmac-loongson: fix missing of_node_put() while module exiting (Yang Yingliang)   
  - stmmac: dwmac-loongson: fix missing pci_disable_device() in loongson_dwmac_probe() (Yang Yingliang)   
  - stmmac: dwmac-loongson: fix missing pci_disable_msi() while module exiting (Yang Yingliang)   
  - cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open() (Zhengchao Shao)   
  - mctp: Fix an error handling path in mctp_init() (Wei Yongjun)   
  - stmmac: intel: Update PCH PTP clock rate from 200MHz to 204.8MHz (Tan, Tee Min)   
  - stmmac: intel: Enable 2.5Gbps for Intel AlderLake-S (Wong Vee Khee)   
  - net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() (Zhengchao Shao)   
  - net: cpsw: disable napi in cpsw_ndo_open() (Zhengchao Shao)   
  - net/mlx5e: E-Switch, Fix comparing termination table instance (Roi Dayan)   
  - net/mlx5: Allow async trigger completion execution on single CPU systems (Roy Novich)   
  - net/mlx5: Bridge, verify LAG state when adding bond to bridge (Vlad Buslov)   
  - net: wwan: iosm: fix memory leak in ipc_pcie_read_bios_cfg (M Chetan Kumar)   
  - net: nixge: disable napi when enable interrupts failed in nixge_open() (Zhengchao Shao)   
  - net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init() (Zhengchao Shao)   
  - netfilter: Cleanup nft_net->module_list from nf_tables_exit_net() (Shigeru Yoshida)   
  - netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg() (Ziyang Xuan)   
  - perf tools: Add the include/perf/ directory to .gitignore (Donglin Peng)   
  - perf stat: Fix printing os->prefix in CSV metrics output (Athira Rajeev)   
  - drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() (Zhengchao Shao)   
  - net: lapbether: fix issue of invalid opcode in lapbeth_open() (Zhengchao Shao)   
  - dmaengine: ti: k3-udma-glue: fix memory leak when register device fail (Yang Yingliang)   
  - dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() (Christophe JAILLET)   
  - dmaengine: pxa_dma: use platform_get_irq_optional (Doug Brown)   
  - tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header (Xin Long)   
  - net: broadcom: Fix BCMGENET Kconfig (YueHaibing)   
  - net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable() (Rasmus Villemoes)   
  - can: af_can: fix NULL pointer dereference in can_rx_register() (Zhengchao Shao)   
  - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network (Alexander Potapenko)   
  - tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent (Lu Wei)   
  - drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() (Yuan Can)   
  - net: wwan: mhi: fix memory leak in mhi_mbim_dellink (HW He)   
  - net: wwan: iosm: fix memory leak in ipc_wwan_dellink (HW He)   
  - hamradio: fix issue of dev reference count leakage in bpq_device_event() (Zhengchao Shao)   
  - net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event() (Zhengchao Shao)   
  - KVM: s390: pv: don't allow userspace to set the clock under PV (Nico Boehr)   
  - phy: ralink: mt7621-pci: add sentinel to quirks table (John Thomson)   
  - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK (Gaosheng Cui)   
  - net: fman: Unregister ethernet device on removal (Sean Anderson)   
  - bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer (Alex Barba)   
  - bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() (Michael Chan)   
  - net: tun: Fix memory leaks of napi_get_frags (Wang Yufen)   
  - octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT] (Ratheesh Kannoth)   
  - octeontx2-pf: Use hardware register for CQE count (Geetha sowjanya)   
  - macsec: clear encryption keys from the stack after setting up offload (Sabrina Dubroca)   
  - macsec: fix detection of RXSCs when toggling offloading (Sabrina Dubroca)   
  - macsec: fix secy->n_rx_sc accounting (Sabrina Dubroca)   
  - macsec: delete new rxsc when offload fails (Sabrina Dubroca)   
  - net: gso: fix panic on frag_list with mixed head alloc types (Jiri Benc)   
  - bpf: Fix wrong reg type conversion in release_reference() (Youlin Li)   
  - bpf: Add helper macro bpf_for_each_reg_in_vstate (Kumar Kartikeya Dwivedi)   
  - bpf, sock_map: Move cancel_work_sync() out of sock lock (Cong Wang)   
  - bpf: Fix sockmap calling sleepable function in teardown path (John Fastabend)   
  - bpf, sockmap: Fix sk->sk_forward_alloc warn_on in sk_stream_kill_queues (Wang Yufen)   
  - HID: hyperv: fix possible memory leak in mousevsc_probe() (Yang Yingliang)   
  - bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE (Pu Lehui)   
  - wifi: mac80211: Set TWT Information Frame Disabled bit as 1 (Howard Hsu)   
  - bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues (Wang Yufen)   
  - bpf, verifier: Fix memory leak in array reallocation for stack state (Kees Cook)   
  - soundwire: qcom: check for outanding writes before doing a read (Srinivas Kandagatla)   
  - soundwire: qcom: reinit broadcast completion (Srinivas Kandagatla)   
  - wifi: cfg80211: fix memory leak in query_regdb_file() (Arend van Spriel)   
  - wifi: cfg80211: silence a sparse RCU warning (Johannes Berg)   
  - phy: stm32: fix an error code in probe (Dan Carpenter)   
  - hwspinlock: qcom: correct MMIO max register for newer SoCs (Krzysztof Kozlowski)   
  - drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram() (Yang Li)   
  - drm/amdkfd: handle CPU fault on COW mapping (Philip Yang)   
  - drm/amdkfd: avoid recursive lock in migrations back to RAM (Alex Sierra)   
  - fuse: fix readdir cache race (Miklos Szeredi)   
  - thunderbolt: Add DP OUT resource when DP tunnel is discovered (Sanjay R Mehta)   
  - thunderbolt: Tear down existing tunnels when resuming from hibernate (Mika Westerberg)   
  - LTS version: v5.15.78 (Jack Vogel)   
  - wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() (Dokyung Song)   
  - drm/i915/sdvo: Setup DDC fully before output init (Ville Syrjälä)   
  - drm/i915/sdvo: Filter out invalid outputs more sensibly (Ville Syrjälä)   
  - drm/rockchip: dsi: Force synchronous probe (Brian Norris)   
  - drm/rockchip: dsi: Clean up 'usage_mode' when failing to attach (Brian Norris)   
  - cifs: fix regression in very old smb1 mounts (Ronnie Sahlberg)   
  - ext4,f2fs: fix readahead of verity data (Matthew Wilcox (Oracle))   
  - tee: Fix tee_shm_register() for kernel TEE drivers (Sumit Garg)   
  - KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky)   
  - KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky)   
  - KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky)   
  - KVM: x86: emulator: em_sysexit should update ctxt->mode (Maxim Levitsky)   
  - KVM: arm64: Fix bad dereference on MTE-enabled systems (Ryan Roberts)   
  - KVM: VMX: fully disable SGX if SECONDARY_EXEC_ENCLS_EXITING unavailable (Emanuele Giuseppe Esposito)   
  - KVM: x86: Mask off reserved bits in CPUID.8000001FH (Jim Mattson)   
  - KVM: x86: Mask off reserved bits in CPUID.80000001H (Jim Mattson)   
  - KVM: x86: Mask off reserved bits in CPUID.80000008H (Jim Mattson)   
  - KVM: x86: Mask off reserved bits in CPUID.8000001AH (Jim Mattson)   
  - KVM: x86: Mask off reserved bits in CPUID.80000006H (Jim Mattson)   
  - x86/syscall: Include asm/ptrace.h in syscall_wrapper header (Jiri Olsa)   
  - ext4: fix BUG_ON() when directory entry has invalid rec_len (Luís Henriques)   
  - ext4: fix warning in 'ext4_da_release_space' (Ye Bin)   
  - parisc: Avoid printing the hardware path twice (Helge Deller)   
  - parisc: Export iosapic_serial_irq() symbol for serial port driver (Helge Deller)   
  - parisc: Make 8250_gsc driver dependend on CONFIG_PARISC (Helge Deller)   
  - perf/x86/intel: Fix pebs event constraints for SPR (Kan Liang)   
  - perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[] (Kan Liang)   
  - perf/x86/intel: Fix pebs event constraints for ICL (Kan Liang)   
  - arm64: entry: avoid kprobe recursion (Mark Rutland)   
  - efi: random: Use 'ACPI reclaim' memory for random seed (Ard Biesheuvel)   
  - efi: random: reduce seed size to 32 bytes (Ard Biesheuvel)   
  - fuse: add file_modified() to fallocate (Miklos Szeredi)   
  - capabilities: fix potential memleak on error path from vfs_getxattr_alloc() (Gaosheng Cui)   
  - tracing/histogram: Update document for KEYS_MAX size (Zheng Yejian)   
  - tools/nolibc/string: Fix memcmp() implementation (Rasmus Villemoes)   
  - ring-buffer: Check for NULL cpu_buffer in ring_buffer_wake_waiters() (Steven Rostedt (Google))   
  - kprobe: reverse kp->flags when arm_kprobe failed (Li Qiang)   
  - tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() (Shang XiaoJing)   
  - tcp/udp: Make early_demux back namespacified. (Kuniyuki Iwashima)   
  - ftrace: Fix use-after-free for dynamic ftrace_ops (Li Huafei)   
  - btrfs: fix type of parameter generation in btrfs_get_dentry (David Sterba)   
  - btrfs: fix tree mod log mishandling of reallocated nodes (Josef Bacik)   
  - btrfs: fix lost file sync on direct IO write with nowait and dsync iocb (Filipe Manana)   
  - fscrypt: fix keyring memory leak on mount failure (Eric Biggers)   
  - fscrypt: stop using keyrings subsystem for fscrypt_master_key (Eric Biggers)   
  - af_unix: Fix memory leaks of the whole sk due to OOB skb. (Kuniyuki Iwashima)   
  - block, bfq: protect 'bfqd->queued' by 'bfqd->lock' (Yu Kuai)   
  - Bluetooth: L2CAP: Fix attempting to access uninitialized memory (Luiz Augusto von Dentz)   {CVE-2022-42895} 
  - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (Luiz Augusto von Dentz)   {CVE-2022-42896} 
  - i2c: piix4: Fix adapter not be removed in piix4_remove() (Chen Zhongjin)   
  - arm64: dts: juno: Add thermal critical trip points (Cristian Marussi)   
  - firmware: arm_scmi: Fix devres allocation device in virtio transport (Cristian Marussi)   
  - firmware: arm_scmi: Make Rx chan_setup fail on memory errors (Cristian Marussi)   
  - firmware: arm_scmi: Suppress the driver's bind attributes (Cristian Marussi)   
  - block: Fix possible memory leak for rq_wb on add_disk failure (Chen Zhongjin)   
  - arm64: dts: ls208xa: specify clock frequencies for the MDIO controllers (Ioana Ciornei)   
  - arm64: dts: ls1088a: specify clock frequencies for the MDIO controllers (Ioana Ciornei)   
  - arm64: dts: lx2160a: specify clock frequencies for the MDIO controllers (Ioana Ciornei)   
  - arm64: dts: imx8: correct clock order (Peng Fan)   
  - ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset (Tim Harvey)   
  - clk: qcom: Update the force mem core bit for GPU clocks (Taniya Das)   
  - efi/tpm: Pass correct address to memblock_reserve (Jerry Snitselaar)   
  - i2c: xiic: Add platform module alias (Martin Tůma)   
  - drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case (Danijel Slivka)   
  - HID: saitek: add madcatz variant of MMO7 mouse device ID (Samuel Bailey)   
  - scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar)   
  - ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() (Ashish Kalra)   
  - media: v4l: subdev: Fail graciously when getting try data for NULL state (Sakari Ailus)   
  - media: meson: vdec: fix possible refcount leak in vdec_probe() (Hangyu Hua)   
  - media: dvb-frontends/drxk: initialize err to 0 (Hans Verkuil)   
  - media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE (Hans Verkuil)   
  - media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE (Hans Verkuil)   
  - media: rkisp1: Zero v4l2_subdev_format fields in when validating links (Laurent Pinchart)   
  - media: rkisp1: Use correct macro for gradient registers (Laurent Pinchart)   
  - media: rkisp1: Initialize color space on resizer sink and source pads (Laurent Pinchart)   
  - media: rkisp1: Don't pass the quantization to rkisp1_csm_config() (Laurent Pinchart)   
  - s390/cio: fix out-of-bounds access on cio_ignore free (Peter Oberparleiter)   
  - s390/cio: derive cdev information only for IO-subchannels (Vineeth Vijayan)   
  - s390/boot: add secure boot trailer (Peter Oberparleiter)   
  - s390/uaccess: add missing EX_TABLE entries to __clear_user() (Heiko Carstens)   
  - mtd: parsers: bcm47xxpart: Fix halfblock reads (Linus Walleij)   
  - mtd: parsers: bcm47xxpart: print correct offset on read error (Rafał Miłecki)   
  - fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards (Helge Deller)   
  - video/fbdev/stifb: Implement the stifb_fillrect() function (Helge Deller)   
  - drm/msm/hdmi: fix IRQ lifetime (Johan Hovold)   
  - drm/msm/hdmi: Remove spurious IRQF_ONESHOT flag (Daniel Thompson)   
  - vsock: fix possible infinite sleep in vsock_connectible_wait_data() (Dexuan Cui)   
  - ipv6: fix WARNING in ip6_route_net_exit_late() (Zhengchao Shao)   
  - net, neigh: Fix null-ptr-deref in neigh_table_clear() (Chen Zhongjin)   
  - net/smc: Fix possible leaked pernet namespace in smc_init() (Chen Zhongjin)   
  - stmmac: dwmac-loongson: fix invalid mdio_node (Liu Peibao)   
  - ibmvnic: Free rwi on reset success (Nick Child)   
  - net: mdio: fix undefined behavior in bit shift for __mdiobus_register (Gaosheng Cui)   
  - Bluetooth: L2CAP: Fix memory leak in vhci_write (Hawkins Jiawei)   
  - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() (Zhengchao Shao)   
  - Bluetooth: virtio_bt: Use skb_put to set length (Soenke Huster)   
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Maxim Mikityanskiy)   
  - netfilter: ipset: enforce documented limit to prevent allocating huge memory (Jozsef Kadlecsik)   
  - btrfs: fix ulist leaks in error paths of qgroup self tests (Filipe Manana)   
  - btrfs: fix inode list leak during backref walking at find_parent_nodes() (Filipe Manana)   
  - btrfs: fix inode list leak during backref walking at resolve_indirect_refs() (Filipe Manana)   
  - isdn: mISDN: netjet: fix wrong check of device registration (Yang Yingliang)   
  - mISDN: fix possible memory leak in mISDN_register_device() (Yang Yingliang)   
  - rose: Fix NULL pointer dereference in rose_send_frame() (Zhang Qilong)   
  - ipvs: fix WARNING in ip_vs_app_net_cleanup() (Zhengchao Shao)   
  - ipvs: fix WARNING in __ip_vs_cleanup_batch() (Zhengchao Shao)   
  - ipvs: use explicitly signed chars (Jason A. Donenfeld)   
  - netfilter: nf_tables: release flow rule object from commit path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: netlink notifier might race to release objects (Pablo Neira Ayuso)   
  - net: tun: fix bugs for oversize packet when napi frags enabled (Ziyang Xuan)   
  - net: sched: Fix use after free in red_enqueue() (Dan Carpenter)   
  - ata: pata_legacy: fix pdc20230_set_piomode() (Sergey Shtylyov)   
  - net: fec: fix improper use of NETDEV_TX_BUSY (Zhang Changzhong)   
  - nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() (Shang XiaoJing)   
  - nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() (Shang XiaoJing)   
  - nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() (Shang XiaoJing)   
  - nfc: fdp: Fix potential memory leak in fdp_nci_send() (Shang XiaoJing)   
  - net: dsa: fall back to default tagger if we can't load the one from DT (Vladimir Oltean)   
  - RDMA/qedr: clean up work queue on failure in qedr_alloc_resources() (Dan Carpenter)   
  - RDMA/core: Fix null-ptr-deref in ib_core_cleanup() (Chen Zhongjin)   
  - net: dsa: Fix possible memory leaks in dsa_loop_init() (Chen Zhongjin)   
  - nfs4: Fix kmemleak when allocate slot failed (Zhang Xiaoxu)   
  - NFSv4.2: Fixup CLONE dest file size for zero-length count (Benjamin Coddington)   
  - SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed (Zhang Xiaoxu)   
  - NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot (Trond Myklebust)   
  - NFSv4.1: Handle RECLAIM_COMPLETE trunking errors (Trond Myklebust)   
  - NFSv4: Fix a potential state reclaim deadlock (Trond Myklebust)   
  - RDMA/hns: Disable local invalidate operation (Yangyang Li)   
  - RDMA/hns: Use hr_reg_xxx() instead of remaining roce_set_xxx() (Wenpeng Liang)   
  - RDMA/hns: Remove magic number (Xinhao Liu)   
  - IB/hfi1: Correctly move list in sc_disable() (Dean Luick)   
  - KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER (Alexander Graf)   
  - KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() (Alexander Graf)   
  - KVM: x86: Protect the unused bits in MSR exiting flags (Aaron Lewis)   
  - HID: playstation: add initial DualSense Edge controller support (Roderick Colenbrander)   
  - mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page (Baolin Wang)   
  - drm/amd/display: explicitly disable psr_feature_enable appropriately (Shirish S)   
  - KVM: x86: Treat #DBs from the emulator as fault-like (code and DR7.GD=1) (Sean Christopherson)   
  - serial: ar933x: Deassert Transmit Enable on ->rs485_config() (Lukas Wunner)   
  - scsi: lpfc: Rework MIB Rx Monitor debug info logic (James Smart)   
  - scsi: lpfc: Adjust CMF total bytes and rxmonitor (James Smart)   
  - scsi: lpfc: Adjust bytes received vales during cmf timer interval (James Smart)   
  - LTS version: v5.15.77 (Jack Vogel)   
  - tcp/udp: Fix memory leak in ipv6_renew_options(). (Kuniyuki Iwashima)   
  - serial: Deassert Transmit Enable on probe in driver-specific way (Lukas Wunner)   
  - serial: core: move RS485 configuration tasks from drivers into core (Lino Sanfilippo)   
  - can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive (Biju Das)   
  - can: rcar_canfd: fix channel specific IRQ handling for RZ/G2L (Biju Das)   
  - scsi: sd: Revert "scsi: sd: Remove a local variable" (Yu Kuai)   
  - arm64: Add AMPERE1 to the Spectre-BHB affected list (D Scott Phillips)   
  - net: enetc: survive memory pressure without crashing (Vladimir Oltean)   
  - kcm: do not sense pfmemalloc status in kcm_sendpage() (Eric Dumazet)   
  - net: do not sense pfmemalloc status in skb_append_pagefrags() (Eric Dumazet)   
  - net/mlx5: Fix crash during sync firmware reset (Suresh Devarakonda)   
  - net/mlx5: Update fw fatal reporter state on PCI handlers successful recover (Roy Novich)   
  - net/mlx5: Print more info on pci error handlers (Saeed Mahameed)   
  - net/mlx5: Fix possible use-after-free in async command interface (Tariq Toukan)   
  - net/mlx5e: Extend SKB room check to include PTP-SQ (Aya Levin)   
  - net/mlx5e: Do not increment ESN when updating IPsec ESN state (Hyong Youb Kim)   
  - netdevsim: remove dir in nsim_dev_debugfs_init() when creating ports dir failed (Zhengchao Shao)   
  - net: broadcom: bcm4908_enet: update TX stats after actual transmission (Rafał Miłecki)   
  - net: broadcom: bcm4908enet: remove redundant variable bytes (Colin Ian King)   
  - nh: fix scope used to find saddr when adding non gw nh (Nicolas Dichtel)   
  - net: bcmsysport: Indicate MAC is in charge of PHY PM (Florian Fainelli)   
  - net: ehea: fix possible memory leak in ehea_register_port() (Yang Yingliang)   
  - openvswitch: switch from WARN to pr_warn (Aaron Conole)   
  - ALSA: aoa: Fix I2S device accounting (Takashi Iwai)   
  - ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() (Yang Yingliang)   
  - net: ethernet: ave: Fix MAC to be in charge of PHY PM (Kunihiko Hayashi)   
  - net: fec: limit register access on i.MX6UL (Juergen Borleis)   
  - perf vendor events arm64: Fix incorrect Hisi hip08 L3 metrics (Shang XiaoJing)   
  - PM: domains: Fix handling of unavailable/disabled idle states (Sudeep Holla)   
  - net: ksz884x: fix missing pci_disable_device() on error in pcidev_init() (Yang Yingliang)   
  - i40e: Fix flow-type by setting GL_HASH_INSET registers (Slawomir Laba)   
  - i40e: Fix VF hang when reset is triggered on another VF (Sylwester Dziedziuch)   
  - i40e: Fix ethtool rx-flow-hash setting for X722 (Slawomir Laba)   
  - ipv6: ensure sane device mtu in tunnels (Eric Dumazet)   
  - perf vendor events power10: Fix hv-24x7 metric events (Kajol Jain)   
  - media: vivid: set num_in/outputs to 0 if not supported (Hans Verkuil)   
  - media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced' (Hans Verkuil)   
  - media: v4l2-dv-timings: add sanity checks for blanking values (Hans Verkuil)   
  - media: vivid: dev->bitmap_cap wasn't freed in all cases (Hans Verkuil)   
  - media: vivid: s_fbuf: add more sanity checks (Hans Verkuil)   
  - PM: hibernate: Allow hybrid sleep to work with s2idle (Mario Limonciello)   
  - can: mcp251x: mcp251x_can_probe(): add missing unregister_candev() in error path (Dongliang Mu)   
  - can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path (Dongliang Mu)   
  - drm/amdkfd: Fix memory leak in kfd_mem_dmamap_userptr() (Rafael Mendonca)   
  - net-memcg: avoid stalls when under memory pressure (Jakub Kicinski)   
  - tcp: fix indefinite deferral of RTO with SACK reneging (Neal Cardwell)   
  - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Lu Wei)   
  - tcp: minor optimization in tcp_add_backlog() (Eric Dumazet)   
  - net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY (Zhang Changzhong)   
  - net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed (Zhengchao Shao)   
  - kcm: annotate data-races around kcm->rx_wait (Eric Dumazet)   
  - kcm: annotate data-races around kcm->rx_psock (Eric Dumazet)   
  - atlantic: fix deadlock at aq_nic_stop (Íñigo Huguet)   
  - drm/i915/dp: Reset frl trained flag before restarting FRL training (Ankit Nautiyal)   
  - amd-xgbe: add the bit rate quirk for Molex cables (Raju Rangoju)   
  - amd-xgbe: fix the SFP compliance codes check for DAC cables (Raju Rangoju)   
  - x86/unwind/orc: Fix unreliable stack dump with gcov (Chen Zhongjin)   
  - nfc: virtual_ncidev: Fix memory leak in virtual_nci_send() (Shang XiaoJing)   
  - net: macb: Specify PHY PM management done by MAC (Sergiu Moga)   
  - net: hinic: fix the issue of double release MBOX callback of VF (Zhengchao Shao)   
  - net: hinic: fix the issue of CMDQ memory leaks (Zhengchao Shao)   
  - net: hinic: fix memory leak when reading function table (Zhengchao Shao)   
  - net: hinic: fix incorrect assignment issue in hinic_set_interrupt_cfg() (Zhengchao Shao)   
  - net: netsec: fix error handling in netsec_register_mdio() (Yang Yingliang)   
  - tipc: fix a null-ptr-deref in tipc_topsrv_accept (Xin Long)   
  - perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap() (Maxim Levitsky)   
  - ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() (Yang Yingliang)   
  - ASoC: qcom: lpass-cpu: Mark HDMI TX parity register as volatile (Srinivasa Rao Mandadapu)   
  - mtd: rawnand: intel: Add missing of_node_put() in ebu_nand_probe() (Yang Yingliang)   
  - arc: iounmap() arg is volatile (Randy Dunlap)   
  - sched/core: Fix comparison in sched_group_cookie_match() (Lin Shengwang)   
  - perf: Fix missing SIGTRAPs (Peter Zijlstra)   
  - ASoC: qcom: lpass-cpu: mark HDMI TX registers as volatile (Srinivasa Rao Mandadapu)   
  - KVM: selftests: Fix number of pages for memory slot in memslot_modification_stress_test (Gavin Shan)   
  - drm/msm: Fix return type of mdp4_lvds_connector_mode_valid (Nathan Huckleberry)   
  - media: atomisp: prevent integer overflow in sh_css_set_black_frame() (Dan Carpenter)   
  - media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation (Alexander Stein)   
  - net: ieee802154: fix error return code in dgram_bind() (Wei Yongjun)   
  - ethtool: eeprom: fix null-deref on genl_info in dump (Xin Long)   
  - mmc: block: Remove error check of hw_reset on reset (Christian Löhle)   
  - s390/pci: add missing EX_TABLE entries to __pcistg_mio_inuser()/__pcilg_mio_inuser() (Heiko Carstens)   
  - s390/futex: add missing EX_TABLE entry to __futex_atomic_op() (Heiko Carstens)   
  - perf auxtrace: Fix address filter symbol name match for modules (Adrian Hunter)   
  - ARC: mm: fix leakage of memory allocated for PTE (Pavel Kozlov)   
  - pinctrl: Ingenic: JZ4755 bug fixes (Siarhei Volkau)   
  - kernfs: fix use-after-free in __kernfs_remove (Christian A. Ehrhardt)   
  - counter: microchip-tcb-capture: Handle Signal1 read and Synapse (William Breathitt Gray)   
  - mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on 8bit bus (Sascha Hauer)   
  - mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake (Patrick Thompson)   
  - mmc: core: Fix kernel panic when remove non-standard SDIO card (Matthew Ma)   
  - mmc: sdhci_am654: 'select', not 'depends' REGMAP_MMIO (Brian Norris)   
  - coresight: cti: Fix hang in cti_disable_hw() (James Clark)   
  - drm/msm/dp: fix IRQ lifetime (Johan Hovold)   
  - drm/msm/hdmi: fix memory corruption with too many bridges (Johan Hovold)   
  - drm/msm/dsi: fix memory corruption with too many bridges (Johan Hovold)   
  - drm/amdgpu: disallow gfxoff until GC IP blocks complete s2idle resume (Prike Liang)   
  - scsi: qla2xxx: Use transport-defined speed mask for supported_speeds (Manish Rangankar)   
  - mac802154: Fix LQI recording (Miquel Raynal)   
  - exec: Copy oldsighand->action under spin-lock (Bernd Edlinger)   
  - fs/binfmt_elf: Fix memory leak in load_elf_binary() (Li Zetao)   
  - cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (Rafael J. Wysocki)   
  - cpufreq: intel_pstate: Read all MSRs on the target CPU (Rafael J. Wysocki)   
  - fbdev: smscufx: Fix several use-after-free bugs (Hyunwoo Kim)   
  - iio: adxl372: Fix unsafe buffer attributes (Matti Vaittinen)   
  - iio: temperature: ltc2983: allocate iio channels once (Cosmin Tanislav)   
  - iio: light: tsl2583: Fix module unloading (Shreeya Patel)   
  - tools: iio: iio_utils: fix digit calculation (Matti Vaittinen)   
  - xhci: Remove device endpoints from bandwidth list when freeing the device (Mathias Nyman)   
  - xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices (Mario Limonciello)   
  - xhci: Add quirk to reset host back to default state at shutdown (Mathias Nyman)   
  - mtd: rawnand: marvell: Use correct logic for nand-keep-config (Tony O'Brien)   
  - usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller (Jens Glathe)   
  - usb: bdc: change state when port disconnected (Justin Chen)   
  - usb: dwc3: gadget: Don't set IMI for no_interrupt (Thinh Nguyen)   
  - usb: dwc3: gadget: Stop processing more requests on IMI (Thinh Nguyen)   
  - usb: gadget: uvc: fix sg handling during video encode (Jeff Vanhoof)   
  - usb: gadget: uvc: fix sg handling in error case (Dan Vacura)   
  - USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM (Hannu Hartikainen)   
  - ALSA: rme9652: use explicitly signed char (Jason A. Donenfeld)   
  - ALSA: au88x0: use explicitly signed char (Jason A. Donenfeld)   
  - ALSA: usb-audio: Add quirks for M-Audio Fast Track C400/600 (Takashi Iwai)   
  - ALSA: Use del_timer_sync() before freeing timer (Steven Rostedt (Google))   
  - can: kvaser_usb: Fix possible completions during init_completion (Anssi Hannula)   
  - can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb() (Yang Yingliang)   
  - NFSv4: Add an fattr allocation to _nfs4_discover_trunking() (Scott Mayhew)   
  - NFSv4: Fix free of uninitialized nfs4_label on referral lookup. (Benjamin Coddington)   
  - rds: ib: Enable FC by default (Håkon Bugge)  [Orabug: 33930793]  
  - Adding a new sysfs entry point -- forcepower -- to /sys/bus/pci/slots/X. (James Puthukattukaran)  [Orabug: 34719459]  
  - nvme: paring quiesce/unquiesce (Ming Lei)  [Orabug: 34719459]  
  - nvme: prepare for pairing quiescing and unquiescing (Ming Lei)  [Orabug: 34719459]  
  - nvme: apply nvme API to quiesce/unquiesce admin queue (Ming Lei)  [Orabug: 34719459]  
  - nvme: add APIs for stopping/starting admin queue (Ming Lei)  [Orabug: 34719459]  
  - hugetlbfs: don't delete error page from pagecache (James Houghton)  [Orabug: 34772616]  
  - mm: shmem: don't truncate page if memory failure happens (Yang Shi)  [Orabug: 34772616]  
  - mm: hwpoison: handle non-anonymous THP correctly (Yang Shi)  [Orabug: 34772616]  
  - mm: hwpoison: refactor refcount check handling (Yang Shi)  [Orabug: 34772616]  
  - net/rds: Quiesce heartbeat worker in rds_conn_path_destroy() (Sharath Srinivasan)  [Orabug: 34815818]  
  - net/rds: Add support for tracing RDS heartbeats (Sharath Srinivasan)  [Orabug: 34815818]  
  - net/rds: Enable RDS heartbeat by default (Sharath Srinivasan)  [Orabug: 34815818]  
  - uek-rpm: core.list: add VirtualBox guest drivers to core package (Todd Vierling)  [Orabug: 34820755]  
  - tools/power turbostat: fix SPR PC6 limits (Artem Bityutskiy)  [Orabug: 34838996]  
  - tools/power turbostat: separate SPR from ICX (Artem Bityutskiy)  [Orabug: 34838996]  
  - rds: ib: Fix incorrect error handling during QP creation (Håkon Bugge)  [Orabug: 34857202]  
  - Revert "random: clear fast pool, crng, and batches in cpuhp bring up" (Somasundaram Krishnasamy)  [Orabug: 34850847]  
  - uek: kabi: update kABI files for new symbols (Saeed Mirzamohammadi)  [Orabug: 34850847]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-6.80.2.el8uek]
changelog:
  - scsi: mpi3mr: Remove unnecessary cast (Jules Irenge)  [Orabug: 34640445]  
  - scsi: mpi3mr: Update driver version to 8.2.0.3.0 (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Fix scheduling while atomic type bug (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Scan the devices during resume time (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Free enclosure objects during driver unload (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Handle 0xF003 Fault Code (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Graceful handling of surprise removal of PCIe HBA (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Support new power management framework (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Update mpi3 header files (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Fix error code in mpi3mr_transport_smp_handler() (Dan Carpenter)  [Orabug: 34640445]  
  - scsi: mpi3mr: Fix error codes in mpi3mr_report_manufacture() (Dan Carpenter)  [Orabug: 34640445]  
  - scsi: mpi3mr: Block I/Os while refreshing target dev objects (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Refresh SAS ports during soft reset (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Support SAS transport class callbacks (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add framework to issue MPT transport cmds (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add SAS SATA end devices to STL (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Get target object based on rphy (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add expander devices to STL (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Enable STL on HBAs where multipath is disabled (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add helper functions to manage device's port (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add helper functions to retrieve device objects (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add framework to add phys to STL (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Enable Enclosure device add event (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add helper functions to retrieve config pages (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add framework to issue config requests (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add config and transport related debug flags (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Delete a stray tab (Dan Carpenter)  [Orabug: 34640445]  
  - scsi: mpi3mr: Unlock on error path (Dan Carpenter)  [Orabug: 34640445]  
  - scsi: mpi3mr: Reduce VD queue depth on detecting throttling (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Resource Based Metering (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Increase cmd_per_lun to 128 (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Enable shared host tagset (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Fix kernel-doc (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Rework mrioc->bsg_device model to fix warnings (Sumit Saxena)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add target device related sysfs (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add shost related sysfs attributes (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Return error if dma_alloc_coherent() fails (Dan Carpenter)  [Orabug: 34640445]  
  - scsi: mpi3mr: Fix a NULL vs IS_ERR() bug in mpi3mr_bsg_init() (Dan Carpenter)  [Orabug: 34640445]  
  - scsi: mpi3mr: Return I/Os to an unrecoverable HBA with DID_ERROR (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Hidden drives not removed during soft reset (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Increase I/O timeout value to 60s (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Update driver version to 8.0.0.69.0 (Sumit Saxena)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add support for NVMe passthrough (Sumit Saxena)  [Orabug: 34640445]  
  - scsi: mpi3mr: Expose adapter state to sysfs (Chandrakanth patil)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add support for PEL commands (Sumit Saxena)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add support for MPT commands (Sumit Saxena)  [Orabug: 34640445]  
  - scsi: mpi3mr: Move data structures/definitions from MPI headers to uapi header (Sumit Saxena)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add support for driver commands (Sumit Saxena)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add bsg device support (Sumit Saxena)  [Orabug: 34640445]  
  - scsi: mpi3mr: Fix flushing !WQ_MEM_RECLAIM events warning (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Bump driver version to 8.0.0.68.0 (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Update the copyright year (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Fix cmnd getting marked as in use forever (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Fix hibernation issue (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Update MPI3 headers (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Fix printing of pending I/O count (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Fix deadlock while canceling the fw event (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Fix formatting problems in some kernel-doc comments (Yang Li)  [Orabug: 34640445]  
  - scsi: mpi3mr: Fix some spelling mistakes (Colin Ian King)  [Orabug: 34640445]  
  - scsi: mpi3mr: Bump driver version to 8.0.0.61.0 (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Enhanced Task Management Support Reply handling (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Use TM response codes from MPI3 headers (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add io_uring interface support in I/O-polled mode (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Print cable mngnt and temp threshold events (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Support Prepare for Reset event (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add Event acknowledgment logic (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Gracefully handle online FW update operation (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Detect async reset that occurred in firmware (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add IOC reinit function (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Handle offline FW activation in graceful manner (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Code refactor of IOC init - part2 (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Code refactor of IOC init - part1 (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Fault IOC when internal command gets timeout (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Display IOC firmware package version (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Handle unaligned PLL in unmap cmnds (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Increase internal cmnds timeout to 60s (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Do access status validation before adding devices (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add support for PCIe Managed Switch SES device (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Update MPI3 headers - part2 (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Update MPI3 headers - part1 (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Don't reset IOC if cmnds flush with reset status (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Replace spin_lock() with spin_lock_irqsave() (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Add debug APIs based on logging_level bits (Sreekanth Reddy)  [Orabug: 34640445]  
  - scsi: mpi3mr: Use scnprintf() instead of snprintf() (Dan Carpenter)  [Orabug: 34640445]  
  - scsi: mpi3mr: Clean up mpi3mr_print_ioc_info() (Dan Carpenter)  [Orabug: 34640445]  
  - rds: ib: Remove unnecessary call to rds_ib_ring_unalloc (Håkon Bugge)  [Orabug: 34768825]  
  - rds: ib: Remove unnecessary i_flowctl term from conditions (Håkon Bugge)  [Orabug: 34768825]  
  - rds: ib: Remove unnesesarry variable initialization (Håkon Bugge)  [Orabug: 34768825]  
  - rds: ib: Make sure receives are posted before connection is up (Håkon Bugge)  [Orabug: 34768825]  
  - rds: ib: Fix the Retry counter dependency on RNR NAK Retry counter (Håkon Bugge)  [Orabug: 34768825]  
  - rds: Deduct one credit on the passive side (Håkon Bugge)  [Orabug: 34768825]  
  - rds: Use all eight bits for credit updates (Håkon Bugge)  [Orabug: 34768825]  
  - RDS/IB: Fix the misplaced counter update rdma dto path (Devesh Sharma)  [Orabug: 34865847]  
  - uek-rpm: Enable CONFIG_HP_ILO for aarch64 (Saeed Mirzamohammadi)  [Orabug: 34869880]  
  - uek-rpm: ol8: Choose right annobin plugin for UEK build (Somasundaram Krishnasamy)  [Orabug: 34873882]  
  - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds)  [Orabug: 34882775]  {CVE-2022-4378} 
  - proc: avoid integer type confusion in get_proc_long (Linus Torvalds)  [Orabug: 34882775]  {CVE-2022-4378}


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-7.86.1.el8uek]
changelog:
  - LTS version: v5.15.86 (Jack Vogel)   
  - pwm: tegra: Fix 32 bit build (Steven Price)   
  - mfd: qcom_rpm: Use devm_of_platform_populate() to simplify code (Christophe JAILLET)   
  - extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered (Yassine Oudjana)   
  - media: dvbdev: fix refcnt bug (Lin Ma)   
  - media: dvbdev: fix build warning due to comments (Lin Ma)   
  - net: stmmac: fix errno when create_singlethread_workqueue() fails (Gaosheng Cui)   
  - scsi: qla2xxx: Fix crash when I/O abort times out (Arun Easi)   
  - btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range (Filipe Manana)   
  - ovl: fix use inode directly in rcu-walk mode (Chen Zhongjin)   
  - fbdev: fbcon: release buffer when fbcon_do_set_font() failed (Tetsuo Handa)   
  - gcov: add support for checksum field (Rickard x Andersson)   
  - floppy: Fix memory leak in do_floppy_init() (Yuan Can)   
  - regulator: core: fix deadlock on regulator enable (Johan Hovold)   
  - iio: adc128s052: add proper .data members in adc128_of_match table (Rasmus Villemoes)   
  - iio: adc: ad_sigma_delta: do not use internal iio_dev lock (Nuno Sá)   
  - iio: fix memory leak in iio_device_register_eventset() (Zeng Heng)   
  - reiserfs: Add missing calls to reiserfs_security_free() (Roberto Sassu)   
  - security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 (Nathan Chancellor)   
  - 9p: set req refcount to zero to avoid uninitialized usage (Schspa Shi)   
  - loop: Fix the max_loop commandline argument treatment when it is set to 0 (Isaac J. Manjarres)   
  - HID: mcp2221: don't connect hidraw (Enrik Berkhan)   
  - HID: wacom: Ensure bootloader PID is usable in hidraw mode (Jason Gerecke)   
  - xhci: Prevent infinite loop in transaction errors recovery for streams (Mathias Nyman)   
  - usb: dwc3: core: defer probe on ulpi_read_id timeout (Ferry Toth)   
  - usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode (Sven Peter)   
  - arm64: dts: qcom: sm8250: fix USB-DP PHY registers (Johan Hovold)   
  - usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq (Chunfeng Yun)   
  - usb: cdnsp: fix lack of ZLP for ep0 (Pawel Laszczak)   
  - ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list (Jiao Zhou)   
  - ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB (Edward Pacman)   
  - ALSA: usb-audio: add the quirk for KT0206 device (wangdicheng)   
  - ima: Simplify ima_lsm_copy_rule (GUO Zihua)   
  - pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES (John Stultz)   
  - afs: Fix lost servers_outstanding count (David Howells)   
  - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Yang Jihong)   
  - pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion (John Stultz)   
  - LoadPin: Ignore the "contents" argument of the LSM hooks (Kees Cook)   
  - drm/i915/display: Don't disable DDI/Transcoder when setting phy test pattern (Khaled Almahallawy)   
  - ASoC: rt5670: Remove unbalanced pm_runtime_put() (Hans de Goede)   
  - ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() (Wang Jingjin)   
  - ASoC: wm8994: Fix potential deadlock (Marek Szyprowski)   
  - ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe() (Wang Yufen)   
  - ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() (Wang Jingjin)   
  - ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() (Wang Yufen)   
  - ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() (Wang Yufen)   
  - ASoC: Intel: Skylake: Fix driver hang during shutdown (Cezary Rojewski)   
  - ALSA: hda: add snd_hdac_stop_streams() helper (Pierre-Louis Bossart)   
  - ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c (Pierre-Louis Bossart)   
  - hwmon: (jc42) Fix missing unlock on error in jc42_write() (Yang Yingliang)   
  - KVM: selftests: Fix build regression by using accessor function (Tyler Hicks)   
  - tools/include: Add _RET_IP_ and math definitions to kernel.h (Karolina Drobnik)   
  - orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() (Zhang Xiaoxu)   
  - orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() (Zhang Xiaoxu)   
  - drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() (Nathan Chancellor)   
  - drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() (Nathan Chancellor)   
  - hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (Hawkins Jiawei)   
  - scsi: elx: libefc: Fix second parameter type in state callbacks (Nathan Chancellor)   
  - scsi: ufs: Reduce the START STOP UNIT timeout (Bart Van Assche)   
  - scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs (Justin Tee)   
  - crypto: hisilicon/hpre - fix resource leak in remove process (Zhiqi Song)   
  - clk: st: Fix memory leak in st_of_quadfs_setup() (Xiu Jianfeng)   
  - media: si470x: Fix use-after-free in si470x_int_in_callback() (Shigeru Yoshida)   
  - mmc: renesas_sdhi: better reset from HS400 mode (Wolfram Sang)   
  - mmc: f-sdh30: Add quirks for broken timeout clock capability (Kunihiko Hayashi)   
  - wifi: mt76: do not run mt76u_status_worker if the device is not running (Lorenzo Bianconi)   
  - regulator: core: fix use_count leakage when handling boot-on (Rui Zhang)   
  - libbpf: Avoid enum forward-declarations in public API in C++ mode (Andrii Nakryiko)   
  - drm/amd/display: Use the largest vready_offset in pipe group (Wesley Chalmers)   
  - blk-mq: fix possible memleak when register 'hctx' failed (Ye Bin)   
  - media: dvb-usb: fix memory leak in dvb_usb_adapter_init() (Mazin Al Haddad)   
  - media: dvbdev: adopts refcnt to avoid UAF (Lin Ma)   
  - media: dvb-frontends: fix leak of memory fw (Yan Lei)   
  - ethtool: avoiding integer overflow in ethtool_phys_id() (Maxim Korotkov)   
  - bpf: Prevent decl_tag from being referenced in func_proto arg (Stanislav Fomichev)   
  - ppp: associate skb with a device at tx (Stanislav Fomichev)   
  - mrp: introduce active flags to prevent UAF when applicant uninit (Schspa Shi)   
  - ipv6/sit: use DEV_STATS_INC() to avoid data-races (Eric Dumazet)   
  - net: add atomic_long_t to net_device_stats fields (Eric Dumazet)   
  - drm/amd/display: fix array index out of bound error in bios parser (Aurabindo Pillai)   
  - md/raid1: stop mdx_raid1 thread when raid1 array run failed (Jiang Li)   
  - drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (Li Zhong)   
  - drm/mediatek: Fix return type of mtk_hdmi_bridge_mode_valid() (Nathan Chancellor)   
  - drm/sti: Use drm_mode_copy() (Ville Syrjälä)   
  - drm/rockchip: Use drm_mode_copy() (Ville Syrjälä)   
  - drm/msm: Use drm_mode_copy() (Ville Syrjälä)   
  - s390/lcs: Fix return type of lcs_start_xmit() (Nathan Chancellor)   
  - s390/netiucv: Fix return type of netiucv_tx() (Nathan Chancellor)   
  - s390/ctcm: Fix return type of ctc{mp,}m_tx() (Nathan Chancellor)   
  - drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback (Nathan Chancellor)   
  - drm/amdgpu: Fix type of second parameter in trans_msg() callback (Nathan Chancellor)   
  - igb: Do not free q_vector unless new one was allocated (Kees Cook)   
  - wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() (Minsuk Kang)   
  - hamradio: baycom_epp: Fix return type of baycom_send_packet() (Nathan Chancellor)   
  - net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() (Nathan Chancellor)   
  - bpf: make sure skb->len != 0 when redirecting to a tunneling device (Stanislav Fomichev)   
  - qed (gcc13): use u16 for fid to be big enough (Jiri Slaby (SUSE))   
  - Revert "drm/amd/display: Limit max DSC target bpp for specific monitors" (Hamza Mahfooz)   
  - drm/amd/display: prevent memory leak (gehao)   
  - ipmi: fix memleak when unload ipmi driver (Zhang Yuchen)   
  - ASoC: codecs: rt298: Add quirk for KBL-R RVP platform (Amadeusz Sławiński)   
  - wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out (Shigeru Yoshida)   
  - wifi: ath9k: verify the expected usb_endpoints are present (Fedor Pchelkin)   
  - brcmfmac: return error when getting invalid max_flowrings from dongle (Wright Feng)   
  - media: imx-jpeg: Disable useless interrupt to avoid kernel panic (Ming Qian)   
  - drm/etnaviv: add missing quirks for GC300 (Doug Brown)   
  - hfs: fix OOB Read in __hfs_brec_find (ZhangPeng)   
  - acct: fix potential integer overflow in encode_comp_t() (Zheng Yejian)   
  - nilfs2: fix shift-out-of-bounds due to too large exponent of block size (Ryusuke Konishi)   
  - nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() (Ryusuke Konishi)   
  - ACPICA: Fix error code path in acpi_ds_call_control_method() (Rafael J. Wysocki)   
  - fs: jfs: fix shift-out-of-bounds in dbDiscardAG (Hoi Pok Wu)   
  - jfs: Fix fortify moan in symlink (Dr. David Alan Gilbert)   
  - udf: Avoid double brelse() in udf_rename() (Shigeru Yoshida)   
  - fs: jfs: fix shift-out-of-bounds in dbAllocAG (Dongliang Mu)   
  - binfmt_misc: fix shift-out-of-bounds in check_special_flags (Liu Shixin)   
  - x86/hyperv: Remove unregister syscore call from Hyper-V cleanup (Gaurav Kohli)   
  - video: hyperv_fb: Avoid taking busy spinlock on panic path (Guilherme G. Piccoli)   
  - arm64: make is_ttbrX_addr() noinstr-safe (Mark Rutland)   
  - rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() (Zqiang)   
  - HID: amd_sfh: Add missing check for dma_alloc_coherent (Jiasheng Jiang)   
  - net: stream: purge sk_error_queue in sk_stream_kill_queues() (Eric Dumazet)   
  - myri10ge: Fix an error handling path in myri10ge_probe() (Christophe JAILLET)   
  - rxrpc: Fix missing unlock in rxrpc_do_sendmsg() (David Howells)   
  - net_sched: reject TCF_EM_SIMPLE case for complex ematch module (Cong Wang)   
  - mailbox: zynq-ipi: fix error handling while device_register() fails (Yang Yingliang)   
  - mailbox: arm_mhuv2: Fix return value check in mhuv2_probe() (Yang Yingliang)   
  - mailbox: mpfs: read the system controller's status (Conor Dooley)   
  - skbuff: Account for tail adjustment during pull operations (Subash Abhinov Kasiviswanathan)   
  - arm64: dts: mt8183: Fix Mali GPU clock (Chen-Yu Tsai)   
  - soc: mediatek: pm-domains: Fix the power glitch issue (Chun-Jie Chen)   
  - openvswitch: Fix flow lookup to use unmasked key (Eelco Chaudron)   
  - selftests: devlink: fix the fd redirect in dummy_reporter_test (Jakub Kicinski)   
  - rtc: mxc_v2: Add missing clk_disable_unprepare() (GUO Zihua)   
  - igc: Set Qbv start_time and end_time to end_time if not being configured in GCL (Tan Tee Min)   
  - igc: Lift TAPRIO schedule restriction (Kurt Kanzenbach)   
  - igc: recalculate Qbv end_time by considering cycle time (Tan Tee Min)   
  - igc: allow BaseTime 0 enrollment for Qbv (Tan Tee Min)   
  - igc: Add checking for basetime less than zero (Muhammad Husaini Zulkifli)   
  - igc: Use strict cycles for Qbv scheduling (Vinicius Costa Gomes)   
  - igc: Enhance Qbv scheduling by using first flag bit (Vinicius Costa Gomes)   
  - r6040: Fix kmemleak in probe and remove (Li Zetao)   
  - unix: Fix race in SOCK_SEQPACKET's unix_dgram_sendmsg() (Kirill Tkhai)   
  - nfc: pn533: Clear nfc_target before being used (Minsuk Kang)   
  - net: enetc: avoid buffer leaks on xdp_do_redirect() failure (Vladimir Oltean)   
  - selftests/bpf: Add test for unstable CT lookup API (Kumar Kartikeya Dwivedi)   
  - block, bfq: fix possible uaf for 'bfqq->bic' (Yu Kuai)   
  - mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net: macsec: fix net device access prior to holding a lock (Emeel Hakim)   
  - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (Dan Aloni)   
  - rtc: pcf85063: fix pcf85063_clkout_control (Alexandre Belloni)   
  - rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() (Gaosheng Cui)   
  - rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() (Gaosheng Cui)   
  - netfilter: flowtable: really fix NAT IPv6 offload (Qingfang DENG)   
  - mfd: pm8008: Fix return value check in pm8008_probe() (Yang Yingliang)   
  - mfd: pm8008: Remove driver data structure pm8008_data (Lee Jones)   
  - mfd: qcom_rpm: Fix an error handling path in qcom_rpm_probe() (Christophe JAILLET)   
  - mfd: bd957x: Fix Kconfig dependency on REGMAP_IRQ (Matti Vaittinen)   
  - powerpc/pseries/eeh: use correct API for error log size (Nathan Lynch)   
  - powerpc/eeh: Drop redundant spinlock initialization (Haowen Bai)   
  - remoteproc: qcom: q6v5: Fix missing clk_disable_unprepare() in q6v5_wcss_qcs404_power_on() (Shang XiaoJing)   
  - remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() (Yuan Can)   
  - remoteproc: qcom_q6v5_pas: detach power domains on remove (Luca Weiss)   
  - remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove (Luca Weiss)   
  - remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() (Shang XiaoJing)   
  - remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() (Gaosheng Cui)   
  - pwm: mediatek: always use bus clock for PWM on MT7622 (Daniel Golle)   
  - pwm: mtk-disp: Fix the parameters calculated by the enabled flag of disp_pwm (xinlei lee)   
  - pwm: sifive: Call pwm_sifive_update_clock() while mutex is held (Uwe Kleine-König)   
  - iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (Jason Gunthorpe)   
  - selftests/powerpc: Fix resource leaks (Miaoqian Lin)   
  - powerpc/hv-gpci: Fix hv_gpci event list (Kajol Jain)   
  - powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() (Yang Yingliang)   
  - powerpc/perf: callchain validate kernel stack pointer bounds (Nicholas Piggin)   
  - powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() (Yang Yingliang)   
  - powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds (Gustavo A. R. Silva)   
  - cxl: Fix refcount leak in cxl_calc_capp_routing (Miaoqian Lin)   
  - powerpc/52xx: Fix a resource leak in an error handling path (Christophe JAILLET)   
  - macintosh/macio-adb: check the return value of ioremap() (Xie Shaowen)   
  - macintosh: fix possible memory leak in macio_add_one_device() (Yang Yingliang)   
  - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (Yuan Can)   
  - iommu/amd: Fix pci device refcount leak in ppr_notifier() (Yang Yingliang)   
  - rtc: pcf85063: Fix reading alarm (Alexander Stein)   
  - rtc: snvs: Allow a time difference on clock register read (Stefan Eichenberger)   
  - rtc: cmos: Disable ACPI RTC event on removal (Rafael J. Wysocki)   
  - rtc: cmos: Rename ACPI-related functions (Rafael J. Wysocki)   
  - rtc: cmos: Eliminate forward declarations of some functions (Rafael J. Wysocki)   
  - rtc: cmos: Call rtc_wake_setup() from cmos_do_probe() (Rafael J. Wysocki)   
  - rtc: cmos: Call cmos_wake_setup() from cmos_do_probe() (Rafael J. Wysocki)   
  - rtc: cmos: fix build on non-ACPI platforms (Alexandre Belloni)   
  - rtc: cmos: Fix wake alarm breakage (Rafael J. Wysocki)   
  - rtc: cmos: Fix event handler registration ordering issue (Rafael J. Wysocki)   
  - rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0 (Rafael J. Wysocki)   
  - dmaengine: idxd: Fix crc_val field for completion record (Fenghua Yu)   
  - fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs (Abdun Nihaal)   
  - pwm: tegra: Improve required rate calculation (Jon Hunter)   
  - include/uapi/linux/swab: Fix potentially missing __always_inline (Matt Redfearn)   
  - phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices (Al Cooper)   
  - iommu/rockchip: fix permission bits in page table entries v2 (Michael Riesch)   
  - iommu/sun50i: Fix flush size (Jernej Skrabec)   
  - iommu/sun50i: Fix R/W permission check (Jernej Skrabec)   
  - iommu/sun50i: Consider all fault sources for reset (Jernej Skrabec)   
  - iommu/sun50i: Fix reset release (Jernej Skrabec)   
  - fs/ntfs3: Harden against integer overflows (Dan Carpenter)   
  - overflow: Implement size_t saturating arithmetic helpers (Kees Cook)   
  - fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst() (Shigeru Yoshida)   
  - RDMA/siw: Fix pointer cast warning (Arnd Bergmann)   
  - perf stat: Do not delay the workload with --delay (Namhyung Kim)   
  - perf stat: Refactor __run_perf_stat() common code (Adrián Herrera Arcila)   
  - power: supply: fix null pointer dereferencing in power_supply_get_battery_info (ruanjinjie)   
  - power: supply: ab8500: Fix error handling in ab8500_charger_init() (Yuan Can)   
  - HSI: omap_ssi_core: Fix error handling in ssi_init() (Yuan Can)   
  - power: supply: z2_battery: Fix possible memleak in z2_batt_probe() (Zhang Qilong)   
  - perf symbol: correction while adjusting symbol (Ajay Kaher)   
  - perf trace: Handle failure when trace point folder is missed (Leo Yan)   
  - perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number (Leo Yan)   
  - perf trace: Return error if a system call doesn't exist (Leo Yan)   
  - power: supply: fix residue sysfs file in error handle route of __power_supply_register() (Zeng Heng)   
  - HSI: omap_ssi_core: fix possible memory leak in ssi_probe() (Yang Yingliang)   
  - HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() (Yang Yingliang)   
  - fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() (Christophe JAILLET)   
  - fbdev: uvesafb: don't build on UML (Randy Dunlap)   
  - fbdev: geode: don't build on UML (Randy Dunlap)   
  - fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() (Gaosheng Cui)   
  - fbdev: vermilion: decrease reference count in error path (Xiongfeng Wang)   
  - fbdev: via: Fix error in via_core_init() (Shang XiaoJing)   
  - fbdev: pm2fb: fix missing pci_disable_device() (Yang Yingliang)   
  - fbdev: ssd1307fb: Drop optional dependency (Andy Shevchenko)   
  - thermal/drivers/qcom/lmh: Fix irq handler return value (Bjorn Andersson)   
  - thermal/drivers/qcom/temp-alarm: Fix inaccurate warning for gen2 (Luca Weiss)   
  - thermal/drivers/imx8mm_thermal: Validate temperature range (Marcus Folkesson)   
  - samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() (Shang XiaoJing)   
  - ksmbd: Fix resource leak in ksmbd_session_rpc_open() (Xiu Jianfeng)   
  - tracing/hist: Fix issue of losting command info in error_log (Zheng Yejian)   
  - usb: storage: Add check for kcalloc (Jiasheng Jiang)   
  - i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Zheyu Ma)   
  - i2c: mux: reg: check return value after calling platform_get_resource() (Yang Yingliang)   
  - gpiolib: protect the GPIO device against being dropped while in use by user-space (Bartosz Golaszewski)   
  - gpiolib: make struct comments into real kernel docs (Bartosz Golaszewski)   
  - gpiolib: cdev: fix NULL-pointer dereferences (Bartosz Golaszewski)   
  - gpiolib: Get rid of redundant 'else' (Andy Shevchenko)   
  - vme: Fix error not catched in fake_init() (Chen Zhongjin)   
  - staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() (YueHaibing)   
  - staging: rtl8192u: Fix use after free in ieee80211_rx() (Dan Carpenter)   
  - i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe (Hui Tang)   
  - chardev: fix error handling in cdev_device_add() (Yang Yingliang)   
  - mcb: mcb-parse: fix error handing in chameleon_parse_gdd() (Yang Yingliang)   
  - drivers: mcb: fix resource leak in mcb_probe() (Zhengchao Shao)   
  - usb: gadget: f_hid: fix refcount leak on error path (John Keeping)   
  - usb: gadget: f_hid: fix f_hidg lifetime vs cdev (John Keeping)   
  - usb: roles: fix of node refcount leak in usb_role_switch_is_parent() (Yang Yingliang)   
  - coresight: trbe: remove cpuhp instance node before remove cpuhp state (Yang Shen)   
  - counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update (Fabrice Gasnier)   
  - iio: adis: add '__adis_enable_irq()' implementation (Ramona Bolboaca)   
  - iio:imu:adis: Move exports into IIO_ADISLIB namespace (Jonathan Cameron)   
  - iio: adis: stylistic changes (Nuno Sá)   
  - iio: adis: handle devices that cannot unmask the drdy pin (Nuno Sá)   
  - iio: temperature: ltc2983: make bulk write buffer DMA-safe (Cosmin Tanislav)   
  - cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() (Yang Yingliang)   
  - cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() (Yang Yingliang)   
  - firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() (Yang Yingliang)   
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (Zheng Wang)   
  - misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() (ruanjinjie)   
  - ocxl: fix pci device refcount leak when calling get_function_0() (Yang Yingliang)   
  - misc: ocxl: fix possible name leak in ocxl_file_register_afu() (Yang Yingliang)   
  - test_firmware: fix memory leak in test_firmware_init() (Zhengchao Shao)   
  - serial: sunsab: Fix error handling in sunsab_init() (Yuan Can)   
  - serial: altera_uart: fix locking in polling mode (Gabriel Somlo)   
  - tty: serial: altera_uart_{r,t}x_chars() need only uart_port (Jiri Slaby)   
  - tty: serial: clean up stop-tx part in altera_uart_tx_chars() (Jiri Slaby)   
  - serial: pch: Fix PCI device refcount leak in pch_request_dma() (Xiongfeng Wang)   
  - serial: stm32: move dma_request_chan() before clk_prepare_enable() (Valentin Caron)   
  - serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. (delisun)   
  - serial: amba-pl011: avoid SBSA UART accessing DMACR register (Jiamei Xie)   
  - extcon: usbc-tusb320: Update state on probe even if no IRQ pending (Marek Vasut)   
  - extcon: usbc-tusb320: Add USB TYPE-C support (Marek Vasut)   
  - extcon: usbc-tusb320: Factor out extcon into dedicated functions (Marek Vasut)   
  - usb: typec: Factor out non-PD fwnode properties (Samuel Holland)   
  - extcon: usbc-tusb320: Add support for TUSB320L (Yassine Oudjana)   
  - extcon: usbc-tusb320: Add support for mode setting and reset (Yassine Oudjana)   
  - usb: typec: tipd: Fix spurious fwnode_handle_put in error path (Sven Peter)   
  - usb: typec: tipd: Cleanup resources if devm_tps6598_psy_register fails (Sven Peter)   
  - usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() (Yang Yingliang)   
  - usb: typec: Check for ops->exit instead of ops->enter in altmode_exit (Sven Peter)   
  - staging: vme_user: Fix possible UAF in tsi148_dma_list_add (Gaosheng Cui)   
  - usb: fotg210-udc: Fix ages old endianness issues (Linus Walleij)   
  - uio: uio_dmem_genirq: Fix deadlock between irq config and handling (Rafael Mendonca)   
  - uio: uio_dmem_genirq: Fix missing unlock in irq configuration (Rafael Mendonca)   
  - vfio: platform: Do not pass return buffer to ACPI _RST method (Rafael Mendonca)   
  - class: fix possible memory leak in __class_register() (Yang Yingliang)   
  - serial: 8250_bcm7271: Fix error handling in brcmuart_init() (Yuan Can)   
  - serial: tegra: Read DMA status before terminating (Kartik)   
  - drivers: dio: fix possible memory leak in dio_init() (Yang Yingliang)   
  - RISC-V: Align the shadow stack (Palmer Dabbelt)   
  - IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces (Dragos Tatulea)   
  - hwrng: geode - Fix PCI device refcount leak (Xiongfeng Wang)   
  - hwrng: amd - Fix PCI device refcount leak (Xiongfeng Wang)   
  - crypto: img-hash - Fix variable dereferenced before check 'hdev->req' (Gaosheng Cui)   
  - RDMA/hns: Fix error code of CMD (Chengchang Tang)   
  - RDMA/hns: Fix page size cap from firmware (Chengchang Tang)   
  - RDMA/hns: Fix PBL page MTR find (Chengchang Tang)   
  - RDMA/hns: Fix AH attr queried by query_qp (Chengchang Tang)   
  - orangefs: Fix sysfs not cleanup when dev init failed (Zhang Xiaoxu)   
  - PCI: mt7621: Add sentinel to quirks table (John Thomson)   
  - PCI: mt7621: Rename mt7621_pci_ to mt7621_pcie_ (Bjorn Helgaas)   
  - RDMA/srp: Fix error return code in srp_parse_options() (Wang Yufen)   
  - RDMA/hfi1: Fix error return code in parse_platform_config() (Wang Yufen)   
  - riscv/mm: add arch hook arch_clear_hugepage_flags (Tong Tiangen)   
  - crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() (Shang XiaoJing)   
  - crypto: amlogic - Remove kcalloc without check (Christophe JAILLET)   
  - RDMA/nldev: Fix failure to send large messages (Mark Zhang)   
  - f2fs: avoid victim selection from previous victim section (Yonggil Song)   
  - RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() (Yuan Can)   
  - scsi: snic: Fix possible UAF in snic_tgt_create() (Gaosheng Cui)   
  - scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails (Chen Zhongjin)   
  - scsi: ipr: Fix WARNING in ipr_init() (Shang XiaoJing)   
  - scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper() (Yang Yingliang)   
  - scsi: fcoe: Fix possible name leak when device_register() fails (Yang Yingliang)   
  - scsi: scsi_debug: Fix a warning in resp_report_zones() (Harshit Mogalapalli)   
  - scsi: scsi_debug: Fix a warning in resp_verify() (Harshit Mogalapalli)   
  - scsi: efct: Fix possible memleak in efct_device_init() (Chen Zhongjin)   
  - scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() (Yang Yingliang)   
  - scsi: hpsa: Fix error handling in hpsa_add_sas_host() (Yang Yingliang)   
  - scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() (Yang Yingliang)   
  - padata: Fix list iterator in padata_do_serial() (Daniel Jordan)   
  - padata: Always leave BHs disabled when running ->parallel() (Daniel Jordan)   
  - crypto: tcrypt - Fix multibuffer skcipher speed test mem leak (Zhang Yiqun)   
  - scsi: hpsa: Fix possible memory leak in hpsa_init_one() (Yuan Can)   
  - dt-bindings: visconti-pcie: Fix interrupts array max constraints (Serge Semin)   
  - dt-bindings: imx6q-pcie: Fix clock names for imx6sx and imx8mq (Serge Semin)   
  - RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed (Zhang Xiaoxu)   
  - RDMA/hns: fix memory leak in hns_roce_alloc_mr() (Zhengchao Shao)   
  - crypto: ccree - Make cc_debugfs_global_fini() available for module init function (Uwe Kleine-König)   
  - RDMA/hfi: Decrease PCI device reference count in error path (Xiongfeng Wang)   
  - PCI: Check for alloc failure in pci_request_irq() (Zeng Heng)   
  - RDMA/hns: Fix ext_sge num error when post send (Luoyouming)   
  - RDMA/hns: Repacing 'dseg_len' by macros in fill_ext_sge_inl_data() (Luoyouming)   
  - crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() (Xiongfeng Wang)   
  - crypto: cryptd - Use request context instead of stack for sub-request (Herbert Xu)   
  - crypto: ccree - Remove debugfs when platform_driver_register failed (Gaosheng Cui)   
  - scsi: scsi_debug: Fix a warning in resp_write_scat() (Harshit Mogalapalli)   
  - RDMA/siw: Set defined status for work completion with undefined status (Bernard Metzler)   
  - RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port (Mark Zhang)   
  - RDMA/core: Make sure "ib_port" is valid when access sysfs node (Mark Zhang)   
  - RDMA/restrack: Release MR restrack when delete (Mark Zhang)   
  - PCI: vmd: Disable MSI remapping after suspend (Nirmal Patel)   
  - IB/mad: Don't call to function that might sleep while in atomic context (Leonid Ravich)   
  - RDMA/siw: Fix immediate work request flush to completion queue (Bernard Metzler)   
  - scsi: qla2xxx: Fix set-but-not-used variable warnings (Bart Van Assche)   
  - RDMA/irdma: Report the correct link speed (Shiraz Saleem)   
  - f2fs: fix to destroy sbi->post_read_wq in error path of f2fs_fill_super() (Chao Yu)   
  - f2fs: fix normal discard process (Dongdong Zhang)   
  - f2fs: fix to invalidate dcc->f2fs_issue_discard in error path (Chao Yu)   
  - apparmor: Fix memleak in alloc_ns() (Xiu Jianfeng)   
  - crypto: rockchip - rework by using crypto_engine (Corentin Labbe)   
  - crypto: rockchip - remove non-aligned handling (Corentin Labbe)   
  - crypto: rockchip - better handle cipher key (Corentin Labbe)   
  - crypto: rockchip - add fallback for ahash (Corentin Labbe)   
  - crypto: rockchip - add fallback for cipher (Corentin Labbe)   
  - crypto: rockchip - do not store mode globally (Corentin Labbe)   
  - crypto: rockchip - do not do custom power management (Corentin Labbe)   
  - f2fs: Fix the race condition of resize flag between resizefs (Zhang Qilong)   
  - PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled (Kunihiko Hayashi)   
  - RDMA/core: Fix order of nldev_exit call (Leon Romanovsky)   
  - PCI: dwc: Fix n_fts[] array overrun (Vidya Sagar)   
  - apparmor: Use pointer to struct aa_label for lbs_cred (Xiu Jianfeng)   
  - scsi: core: Fix a race between scsi_done() and scsi_timeout() (Bart Van Assche)   
  - crypto: nitrox - avoid double free on error path in nitrox_sriov_init() (Natalia Petrova)   
  - crypto: sun8i-ss - use dma_addr instead u32 (Corentin Labbe)   
  - crypto: hisilicon/qm - fix missing destroy qp_idr (Weili Qian)   
  - apparmor: Fix abi check to include v8 abi (John Johansen)   
  - apparmor: fix lockdep warning when removing a namespace (John Johansen)   
  - apparmor: fix a memleak in multi_transaction_new() (Gaosheng Cui)   
  - net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path (Vladimir Oltean)   
  - i40e: Fix the inability to attach XDP program on downed interface (Bartosz Staszewski)   
  - stmmac: fix potential division by 0 (Piergiorgio Beruto)   
  - Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: btintel: Fix missing free skb in btintel_setup_combined() (Wang ShaoBo)   
  - Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS (Inga Stotland)   
  - sctp: sysctl: make extra pointers netns aware (Firo Yang)   
  - ntb_netdev: Use dev_kfree_skb_any() in interrupt context (Eric Pilmore)   
  - net: lan9303: Fix read error execution path (Jerry Ray)   
  - can: tcan4x5x: Fix use of register error status mask (Markus Schneider-Pargmann)   
  - can: m_can: Call the RAM init directly from m_can_chip_config (Vivek Yadav)   
  - can: tcan4x5x: Remove invalid write in clear_interrupts (Markus Schneider-Pargmann)   
  - net: amd-xgbe: Check only the minimum speed for active/passive cables (Tom Lendacky)   
  - net: amd-xgbe: Fix logic around active and passive cables (Tom Lendacky)   
  - af_unix: call proto_unregister() in the error path in af_unix_init() (Yang Yingliang)   
  - net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net/tunnel: wait until all sk_user_data reader finish before releasing the sock (Hangbin Liu)   
  - net: farsync: Fix kmemleak when rmmods farsync (Li Zetao)   
  - ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() (ruanjinjie)   
  - drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() (Yuan Can)   
  - net: stmmac: fix possible memory leak in stmmac_dvr_probe() (Gaosheng Cui)   
  - net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() (Zhang Changzhong)   
  - net: defxx: Fix missing err handling in dfx_init() (Yongqiang Liu)   
  - net: vmw_vsock: vmci: Check memcpy_from_msg() (Artem Chernyshev)   
  - clk: socfpga: Fix memory leak in socfpga_gate_init() (Xiu Jianfeng)   
  - bpf: Do not zero-extend kfunc return values (Björn Töpel)   
  - blktrace: Fix output non-blktrace event when blk_classic option enabled (Yang Jihong)   
  - wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() (Wang Yufen)   
  - wifi: rtl8xxxu: Fix the channel width reporting (Bitterblue Smith)   
  - wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h (Bitterblue Smith)   
  - spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode (Kris Bahnsen)   
  - clk: samsung: Fix memory leak in _samsung_clk_register_pll() (Xiu Jianfeng)   
  - media: coda: Add check for kmalloc (Jiasheng Jiang)   
  - media: coda: Add check for dcoda_iram_alloc (Jiasheng Jiang)   
  - media: c8sectpfe: Add of_node_put() when breaking out of loop (Liang He)   
  - regulator: qcom-labibb: Fix missing of_node_put() in qcom_labibb_regulator_probe() (Yuan Can)   
  - mmc: core: Normalize the error handling branch in sd_read_ext_regs() (Zhen Lei)   
  - memstick/ms_block: Add check for alloc_ordered_workqueue (Jiasheng Jiang)   
  - memstick: ms_block: Add error handling support for add_disk() (Luis Chamberlain)   
  - mmc: renesas_sdhi: alway populate SCC pointer (Wolfram Sang)   
  - mmc: mmci: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: wbsd: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: via-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: meson-gx: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: omap_hsmmc: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: atmel-mci: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: wmt-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: vub300: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: toshsd: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: rtsx_pci: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: pxamci: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: mxcmmc: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: moxart: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: alcor: fix return value check of mmc_add_host() (Yang Yingliang)   
  - riscv, bpf: Emit fixed-length instructions for BPF_PSEUDO_FUNC (Pu Lehui)   
  - NFSv4.x: Fail client initialisation if state manager thread can't run (Trond Myklebust)   
  - SUNRPC: Fix missing release socket in rpc_sockname() (Wang ShaoBo)   
  - xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (Zhang Xiaoxu)   
  - ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt (Gaosheng Cui)   
  - media: saa7164: fix missing pci_disable_device() (Liu Shixin)   
  - ALSA: pcm: Set missing stop_operating flag at undoing trigger start (Takashi Iwai)   
  - bpf, sockmap: fix race in sock_map_free() (Eric Dumazet)   
  - hwmon: (jc42) Restore the min/max/critical temperatures on resume (Martin Blumenstingl)   
  - hwmon: (jc42) Convert register access and caching to regmap/regcache (Martin Blumenstingl)   
  - regulator: core: fix resource leak in regulator_register() (Yang Yingliang)   
  - configfs: fix possible memory leak in configfs_create_dir() (Chen Zhongjin)   
  - hsr: Synchronize sequence number updates. (Sebastian Andrzej Siewior)   
  - hsr: Synchronize sending frames to have always incremented outgoing seq nr. (Sebastian Andrzej Siewior)   
  - hsr: Disable netpoll. (Sebastian Andrzej Siewior)   
  - hsr: Avoid double remove of a node. (Sebastian Andrzej Siewior)   
  - hsr: Add a rcu-read lock to hsr_forward_skb(). (Sebastian Andrzej Siewior)   
  - clk: qcom: clk-krait: fix wrong div2 functions (Christian Marangi)   
  - clk: qcom: lpass-sc7180: Fix pm_runtime usage (Douglas Anderson)   
  - regulator: core: fix module refcount leak in set_supply() (Yang Yingliang)   
  - wifi: mt76: fix coverity overrun-call in mt76_get_txpower() (Deren Wu)   
  - wifi: mt76: mt7921: fix reporting of TX AGGR histogram (Lorenzo Bianconi)   
  - mt76: stop the radar detector after leaving dfs channel (Xing Song)   
  - wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails (Chen Zhongjin)   
  - wifi: mac80211: fix memory leak in ieee80211_if_add() (Zhengchao Shao)   
  - spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE (Alexander Sverdlin)   
  - bonding: uninitialized variable in bond_miimon_inspect() (Dan Carpenter)   
  - bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect (Pengcheng Yang)   
  - bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes (Pengcheng Yang)   
  - bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data (Pengcheng Yang)   
  - Input: wistron_btns - disable on UML (Randy Dunlap)   
  - netfilter: conntrack: set icmpv6 redirects as RELATED (Florian Westphal)   
  - ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe (Zhang Qilong)   
  - drm/amdkfd: Fix memory leakage (Konstantin Meskhidze)   
  - drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() (Xiongfeng Wang)   
  - drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() (Xiongfeng Wang)   
  - drm/amd/pm/smu11: BACO is supported when it's in BACO state (Guchun Chen)   
  - ASoC: mediatek: mt8173: Enable IRQ when pdata is ready (Ricardo Ribalda)   
  - ASoC: mediatek: mt8173: Fix debugfs registration for components (AngeloGioacchino Del Regno)   
  - wifi: iwlwifi: mvm: fix double free on tx path. (Ben Greear)   
  - ALSA: asihpi: fix missing pci_disable_device() (Liu Shixin)   
  - NFS: Fix an Oops in nfs_d_automount() (Trond Myklebust)   
  - NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (Trond Myklebust)   
  - NFSv4: Fix a credential leak in _nfs4_discover_trunking() (Trond Myklebust)   
  - NFSv4.2: Fix initialisation of struct nfs4_label (Trond Myklebust)   
  - NFSv4.2: Fix a memory stomp in decode_attr_security_label (Trond Myklebust)   
  - NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding (Trond Myklebust)   
  - ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd (Jiasheng Jiang)   
  - ASoC: dt-bindings: wcd9335: fix reset line polarity in example (Dmitry Torokhov)   
  - drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() (Zhang Zekun)   
  - media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC (Aakarsh Jain)   
  - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() (Baisong Zhong)   
  - media: dvb-core: Fix ignored return value in dvb_register_frontend() (Chen Zhongjin)   
  - pinctrl: pinconf-generic: add missing of_node_put() (ZhangPeng)   
  - clk: imx8mn: fix imx8mn_enet_phy_sels clocks list (Dario Binacchi)   
  - clk: imx8mn: fix imx8mn_sai2_sels clocks list (Dario Binacchi)   
  - clk: imx: replace osc_hdmi with dummy (Dario Binacchi)   
  - clk: imx8mn: rename vpu_pll to m7_alt_pll (Dario Binacchi)   
  - media: imon: fix a race condition in send_packet() (Gautam Menghani)   
  - media: vimc: Fix wrong function called when vimc_init() fails (Chen Zhongjin)   
  - ASoC: qcom: Add checks for devm_kcalloc (Yuan Can)   
  - drbd: destroy workqueue when drbd device was freed (Wang ShaoBo)   
  - drbd: remove call to memset before free device/resource/connection (Wang ShaoBo)   
  - mtd: maps: pxa2xx-flash: fix memory leak in probe (Zheng Yongjun)   
  - bonding: fix link recovery in mode 2 when updelay is nonzero (Jonathan Toppins)   
  - drm/amdgpu: fix pci device refcount leak (Yang Yingliang)   
  - clk: rockchip: Fix memory leak in rockchip_clk_register_pll() (Xiu Jianfeng)   
  - regulator: core: use kfree_const() to free space conditionally (Wang ShaoBo)   
  - ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT (Baisong Zhong)   
  - ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT (Baisong Zhong)   
  - pinctrl: k210: call of_node_put() (ZhangPeng)   
  - HID: hid-sensor-custom: set fixed size for custom attributes (Marcus Folkesson)   
  - bpf: Move skb->len == 0 checks into __bpf_redirect (Stanislav Fomichev)   
  - mtd: spi-nor: Fix the number of bytes for the dummy cycles (Allen-KH Cheng)   
  - mtd: spi-nor: hide jedec_id sysfs attribute if not present (Michael Walle)   
  - inet: add READ_ONCE(sk->sk_bound_dev_if) in inet_csk_bind_conflict() (Eric Dumazet)   
  - media: videobuf-dma-contig: use dma_mmap_coherent (Christoph Hellwig)   
  - media: platform: exynos4-is: Fix error handling in fimc_md_init() (Yuan Can)   
  - media: solo6x10: fix possible memory leak in solo_sysfs_init() (Yang Yingliang)   
  - media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init() (Chen Zhongjin)   
  - Input: elants_i2c - properly handle the reset GPIO when power is off (Douglas Anderson)   
  - mtd: lpddr2_nvm: Fix possible null-ptr-deref (Hui Tang)   
  - drm/msm/a6xx: Fix speed-bin detection vs probe-defer (Rob Clark)   
  - wifi: ath10k: Fix return value in ath10k_pci_init() (Xiu Jianfeng)   
  - block: clear ->slave_dir when dropping the main slave_dir reference (Christoph Hellwig)   
  - ima: Fix misuse of dereference of pointer in template_desc_init_fields() (Xiu Jianfeng)   
  - integrity: Fix memory leakage in keyring allocation error path (GUO Zihua)   
  - drm/fourcc: Fix vsub/hsub for Q410 and Q401 (Brian Starkey)   
  - drm/fourcc: Add packed 10bit YUV 4:2:0 format (Dave Stevenson)   
  - regulator: qcom-rpmh: Fix PMR735a S3 regulator spec (Konrad Dybcio)   
  - nvme: return err on nvme_init_non_mdts_limits fail (Joel Granados)   
  - amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() (Dan Carpenter)   
  - regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() (Yang Yingliang)   
  - nvmet: only allocate a single slab for bvecs (Christoph Hellwig)   
  - libbpf: Fix uninitialized warning in btf_dump_dump_type_data (David Michael)   
  - ASoC: pxa: fix null-pointer dereference in filter() (Zeng Heng)   
  - drm/mediatek: Modify dpi power on/off sequence. (Xinlei Lee)   
  - drm/radeon: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo)   
  - bfq: fix waker_bfqq inconsistency crash (Khazhismel Kumykov)   
  - rxrpc: Fix ack.bufferSize to be 0 when generating an ack (David Howells)   
  - net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write() (David Howells)   
  - media: camss: Clean up received buffers on failed start of streaming (Vladimir Zapolskiy)   
  - wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port (Marek Vasut)   
  - Input: joystick - fix Kconfig warning for JOYSTICK_ADC (Randy Dunlap)   
  - mtd: Fix device name leak when register device failed in add_mtd_device() (Zhang Xiaoxu)   
  - clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs (Manivannan Sadhasivam)   
  - bpf: propagate precision across all frames, not just the last one (Andrii Nakryiko)   
  - bpf: Check the other end of slot_type for STACK_SPILL (Martin KaFai Lau)   
  - bpf: propagate precision in ALU/ALU64 operations (Andrii Nakryiko)   
  - media: platform: exynos4-is: fix return value check in fimc_md_probe() (Yang Yingliang)   
  - media: vivid: fix compose size exceed boundary (Liu Shixin)   
  - bpf: Fix slot type check in check_stack_write_var_off (Kumar Kartikeya Dwivedi)   
  - drm/msm/hdmi: use devres helper for runtime PM management (Dmitry Baryshkov)   
  - drm/msm/hdmi: drop unused GPIO support (Dmitry Baryshkov)   
  - ima: Handle -ESTALE returned by ima_filter_rule_match() (GUO Zihua)   
  - drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure (Marek Vasut)   
  - spi: Update reference to struct spi_controller (Jonathan Neuschäfer)   
  - clk: renesas: r9a06g032: Repair grave increment error (Marek Vasut)   
  - drm/rockchip: lvds: fix PM usage counter unbalance in poweron (Zhang Qilong)   
  - can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming (Jimmy Assarsson)   
  - can: kvaser_usb: Add struct kvaser_usb_busparams (Jimmy Assarsson)   
  - can: kvaser_usb_leaf: Fix bogus restart events (Anssi Hannula)   
  - can: kvaser_usb_leaf: Fix wrong CAN state after stopping (Anssi Hannula)   
  - can: kvaser_usb_leaf: Fix improved state not being reported (Anssi Hannula)   
  - can: kvaser_usb: make use of units.h in assignment of frequency (Jimmy Assarsson)   
  - can: kvaser_usb_leaf: Set Warning state even without bus errors (Anssi Hannula)   
  - can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT (Jimmy Assarsson)   
  - can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event (Jimmy Assarsson)   
  - can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device (Jimmy Assarsson)   
  - can: kvaser_usb: do not increase tx statistics when sending error message frames (Vincent Mailhol)   
  - libbpf: Btf dedup identical struct test needs check for nested structs/arrays (Alan Maguire)   
  - media: exynos4-is: don't rely on the v4l2_async_subdev internals (Marek Szyprowski)   
  - soreuseport: Fix socket selection for SO_INCOMING_CPU. (Kuniyuki Iwashima)   
  - venus: pm_helpers: Fix error check in vcodec_domains_get() (Tang Bin)   
  - media: i2c: ad5820: Fix error path (Ricardo Ribalda)   
  - media: adv748x: afe: Select input port when initializing AFE (Niklas Söderlund)   
  - media: coda: jpeg: Add check for kmalloc (Jiasheng Jiang)   
  - media: v4l2-ctrls: Fix off-by-one error in integer menu control check (Laurent Pinchart)   
  - drm/amdgpu/powerplay/psm: Fix memory leak in power state init (Rafael Mendonca)   
  - ipmi: kcs: Poll OBF briefly to reduce OBE latency (Andrew Jeffery)   
  - ata: libata: fix NCQ autosense logic (Niklas Cassel)   
  - ata: add/use ata_taskfile::{error|status} fields (Sergey Shtylyov)   
  - ata: libata: move ata_{port,link,dev}_dbg to standard pr_XXX() macros (Hannes Reinecke)   
  - libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() (Shung-Hsi Yu)   
  - libbpf: Fix use-after-free in btf_dump_name_dups (Xu Kuohai)   
  - drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge (Abhinav Kumar)   
  - wifi: rtl8xxxu: Fix reading the vendor of combo chips (Bitterblue Smith)   
  - wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() (Fedor Pchelkin)   
  - wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() (Fedor Pchelkin)   
  - platform/mellanox: mlxbf-pmc: Fix event typo (James Hurley)   
  - rapidio: devices: fix missing put_device in mport_cdev_open (Cai Xinchen)   
  - hfs: Fix OOB Write in hfs_asc2mac (ZhangPeng)   
  - relay: fix type mismatch when allocating memory in relay_create_buf() (Gavrilov Ilia)   
  - eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD (Zhang Qilong)   
  - rapidio: fix possible UAF when kfifo_alloc() fails (Wang Weiyang)   
  - fs: sysv: Fix sysv_nblocks() returns wrong value (Chen Zhongjin)   
  - lockd: set other missing fields when unlocking files (Trond Myklebust)   
  - MIPS: OCTEON: warn only once if deprecated link status is being used (Ladislav Michl)   
  - MIPS: BCM63xx: Add check for NULL for clk in clk_enable (Anastasia Belova)   
  - platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register() (Yang Yingliang)   
  - platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() (Yu Liao)   
  - platform/chrome: cros_ec_typec: zero out stale pointers (Victor Ding)   
  - platform/chrome: cros_ec_typec: Cleanup switch handle return paths (Prashant Malani)   
  - PM: runtime: Do not call __rpm_callback() from rpm_idle() (Rafael J. Wysocki)   
  - xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() (Harshit Mogalapalli)   
  - x86/xen: Fix memory leak in xen_init_lock_cpu() (Xiu Jianfeng)   
  - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Xiu Jianfeng)   
  - uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix (Oleg Nesterov)   
  - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (Li Zetao)   
  - clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock() (Yang Yingliang)   
  - cpu/hotplug: Do not bail-out in DYING/STARTING sections (Vincent Donnefort)   
  - cpu/hotplug: Make target_store() a nop when target == state (Phil Auld)   
  - futex: Resend potentially swallowed owner death notification (Alexey Izbyshev)   
  - futex: Move to kernel/futex/ (Peter Zijlstra)   
  - mips: ralink: mt7621: do not use kzalloc too early (John Thomson)   
  - mips: ralink: mt7621: soc queries and tests as functions (John Thomson)   
  - mips: ralink: mt7621: define MT7621_SYSC_BASE with __iomem (John Thomson)   
  - clocksource/drivers/sh_cmt: Access registers according to spec (Wolfram Sang)   
  - rapidio: rio: fix possible name leak in rio_register_mport() (Yang Yingliang)   
  - rapidio: fix possible name leaks when rio_add_device() fails (Yang Yingliang)   
  - debugfs: fix error when writing negative value to atomic_t debugfs file (Akinobu Mita)   
  - lib/notifier-error-inject: fix error when writing -errno to debugfs file (Akinobu Mita)   
  - libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value (Akinobu Mita)   
  - cpufreq: amd_freq_sensitivity: Add missing pci_dev_put() (Xiongfeng Wang)   
  - genirq/irqdesc: Don't try to remove non-existing sysfs files (Yang Yingliang)   
  - nfsd: don't call nfsd_file_put from client states seqfile display (Jeff Layton)   
  - NFSD: Finish converting the NFSv2 GETACL result encoder (Chuck Lever)   
  - SUNRPC: Return true/false (not 1/0) from bool functions (Haowen Bai)   
  - EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (Yang Yingliang)   
  - irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init() (Wei Yongjun)   
  - irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() (Shang XiaoJing)   
  - thermal: core: fix some possible name leaks in error paths (Yang Yingliang)   
  - platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() (Yuan Can)   
  - perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() (Xiongfeng Wang)   
  - perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() (Xiongfeng Wang)   
  - perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() (Xiongfeng Wang)   
  - perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() (Xiongfeng Wang)   
  - PNP: fix name memory leak in pnp_alloc_dev() (Yang Yingliang)   
  - selftests/efivarfs: Add checking of the test return value (Zhao Gongyi)   
  - MIPS: vpe-cmp: fix possible memory leak while module exiting (Yang Yingliang)   
  - MIPS: vpe-mt: fix possible memory leak while module exiting (Yang Yingliang)   
  - ocfs2: fix memory leak in ocfs2_stack_glue_init() (Shang XiaoJing)   
  - lib/fonts: fix undefined behavior in bit shift for get_default_font (Gaosheng Cui)   
  - proc: fixup uptime selftest (Alexey Dobriyan)   
  - timerqueue: Use rb_entry_safe() in timerqueue_getnext() (Barnabás Pőcze)   
  - platform/x86: huawei-wmi: fix return value calculation (Barnabás Pőcze)   
  - lib/debugobjects: fix stat count and optimize debug_objects_mem_init (wuchi)   
  - perf: Fix possible memleak in pmu_dev_alloc() (Chen Zhongjin)   
  - selftests/ftrace: event_triggers: wait longer for test_event_enable (Yipeng Zou)   
  - cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut() (Chen Hui)   
  - fs: don't audit the capability check in simple_xattr_list() (Ondrej Mosnacek)   
  - PM: hibernate: Fix mistake in kerneldoc comment (xiongxin)   
  - x86/sgx: Reduce delay and interference of enclave release (Reinette Chatre)   
  - alpha: fix syscall entry in !AUDUT_SYSCALL case (Al Viro)   
  - alpha: fix TIF_NOTIFY_SIGNAL handling (Al Viro)   
  - cpuidle: dt: Return the correct numbers of parsed idle states (Ulf Hansson)   
  - sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() (Qais Yousef)   
  - sched/core: Introduce sched_asym_cpucap_active() (Dietmar Eggemann)   
  - sched/fair: Removed useless update of p->recent_used_cpu (Vincent Guittot)   
  - sched/uclamp: Make select_idle_capacity() use util_fits_cpu() (Qais Yousef)   
  - sched/uclamp: Make task_fits_capacity() use util_fits_cpu() (Qais Yousef)   
  - sched/uclamp: Fix relationship between uclamp and migration margin (Qais Yousef)   
  - sched/fair: Cleanup task_util and capacity type (Vincent Donnefort)   
  - ovl: remove privs in ovl_fallocate() (Amir Goldstein)   
  - ovl: remove privs in ovl_copyfile() (Amir Goldstein)   
  - ovl: use ovl_copy_{real,upper}attr() wrappers (Christian Brauner)   
  - ovl: store lower path in ovl_inode (Amir Goldstein)   
  - tpm/tpm_crb: Fix error message in __crb_relinquish_locality() (Michael Kelley)   
  - tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init() (Yuan Can)   
  - pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP (Stephen Boyd)   
  - ARM: mmp: fix timer_read delay (Doug Brown)   
  - pstore/ram: Fix error return code in ramoops_probe() (Wang Yufen)   
  - seccomp: Move copy_seccomp() to no failure path. (Kuniyuki Iwashima)   
  - arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC (Pali Rohár)   
  - ARM: dts: turris-omnia: Add switch port 6 node (Pali Rohár)   
  - ARM: dts: turris-omnia: Add ethernet aliases (Pali Rohár)   
  - ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name (AngeloGioacchino Del Regno)   
  - arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings (AngeloGioacchino Del Regno)   
  - arm64: dts: mt2712-evb: Fix usb vbus regulators unit names (AngeloGioacchino Del Regno)   
  - arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names (AngeloGioacchino Del Regno)   
  - arm64: dts: mt2712e: Fix unit address for pinctrl node (AngeloGioacchino Del Regno)   
  - arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators (AngeloGioacchino Del Regno)   
  - arm64: dts: mt6779: Fix devicetree build warnings (AngeloGioacchino Del Regno)   
  - ARM: dts: nuvoton: Remove bogus unit addresses from fixed-partition nodes (Jonathan Neuschäfer)   
  - arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node (Jayesh Choudhary)   
  - arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node (Jayesh Choudhary)   
  - perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() (Shang XiaoJing)   
  - perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() (Shang XiaoJing)   
  - perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() (Yuan Can)   
  - arm64: mm: kfence: only handle translation faults (Mark Rutland)   
  - arm64: Treat ESR_ELx as a 64-bit register (Alexandru Elisei)   
  - soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe (Zhang Qilong)   
  - soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe (Zhang Qilong)   
  - soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync (Minghao Chi)   
  - arm: dts: spear600: Fix clcd interrupt (Kory Maincent)   
  - arm64: dts: qcom: sm6125: fix SDHCI CQE reg names (Krzysztof Kozlowski)   
  - soc: qcom: apr: Add check for idr_alloc and of_property_read_string_index (Jiasheng Jiang)   
  - soc: qcom: apr: make code more reuseable (Srinivas Kandagatla)   
  - arm64: dts: qcom: sm8250: drop bogus DP PHY clock (Johan Hovold)   
  - arm64: dts: qcom: sm8350: fix UFS PHY registers (Johan Hovold)   
  - arm64: dts: qcom: sm8250: fix UFS PHY registers (Johan Hovold)   
  - arm64: dts: qcom: sm8150: fix UFS PHY registers (Johan Hovold)   
  - arm64: dts: qcom: Correct QMP PHY child node name (Shawn Guo)   
  - soc: qcom: llcc: make irq truly optional (Luca Weiss)   
  - arm64: dts: qcom: sm8250: correct LPASS pin pull down (Krzysztof Kozlowski)   
  - arm64: dts: qcom: pm660: Use unique ADC5_VCOIN address in node name (Marijn Suijten)   
  - drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static (Chen Jiahao)   
  - ARM: dts: stm32: Fix AV96 WLAN regulator gpio property (Marek Vasut)   
  - ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96 (Marek Vasut)   
  - objtool, kcsan: Add volatile read/write instrumentation to whitelist (Marco Elver)   
  - arm64: dts: qcom: msm8916: Drop MSS fallback compatible (Stephan Gerhold)   
  - arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias (Krzysztof Kozlowski)   
  - arm64: dts: qcom: sdm630: fix UART1 pin bias (Krzysztof Kozlowski)   
  - ARM: dts: qcom: apq8064: fix coresight compatible (Luca Weiss)   
  - arm64: dts: qcom: msm8996: fix GPU OPP table (Dmitry Baryshkov)   
  - arm64: dts: qcom: msm8996: fix supported-hw in cpufreq OPP tables (Dmitry Baryshkov)   
  - arm64: dts: qcom: msm8996: Add MSM8996 Pro support (Yassine Oudjana)   
  - arm64: dts: qcom: sm8250-sony-xperia-edo: fix touchscreen bias-disable (Krzysztof Kozlowski)   
  - arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins (Krzysztof Kozlowski)   
  - usb: musb: remove extra check in musb_gadget_vbus_draw (Ivaylo Dimitrov)   
  - drm/amd/display: Manually adjust strobe for DCN303 (Martin Leung)   
  - LTS version: v5.15.85 (Jack Vogel)   
  - net: loopback: use NET_NAME_PREDICTABLE for name_assign_type (Rasmus Villemoes)   
  - selftests: net: Use "grep -E" instead of "egrep" (Tiezhu Yang)   
  - Bluetooth: L2CAP: Fix u8 overflow (Sungwoo Kim)   
  - HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk (José Expósito)   
  - usb: dwc3: pci: Update PCIe device ID for USB3 controller on CPU sub-system for Raptor Lake (Shruthi Sanil)   
  - igb: Initialize mailbox message for VF reset (Tony Nguyen)   
  - xhci: Apply XHCI_RESET_TO_DEFAULT quirk to ADL-N (Reka Norman)   
  - USB: serial: f81534: fix division by zero on line-speed change (Johan Hovold)   
  - USB: serial: f81232: fix division by zero on line-speed change (Johan Hovold)   
  - USB: serial: cp210x: add Kamstrup RF sniffer PIDs (Bruno Thomsen)   
  - USB: serial: option: add Quectel EM05-G modem (Duke Xin)   
  - usb: gadget: uvc: Prevent buffer overflow in setup handler (Szymon Heidrich)   
  - udf: Fix extending file within last block (Jan Kara)   
  - udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size (Jan Kara)   
  - udf: Fix preallocation discarding at indirect extent boundary (Jan Kara)   
  - udf: Discard preallocation before extending file with a hole (Jan Kara)   
  - LTS version: v5.15.84 (Jack Vogel)   
  - net: fec: properly guard irq coalesce setup (Rasmus Villemoes)   
  - ASoC: ops: Correct bounds check for second channel on SX controls (Charles Keepax)   
  - nvme-pci: clear the prp2 field when not used (Lei Rao)   
  - perf: Fix perf_pending_task() UaF (Peter Zijlstra)   
  - ASoC: cs42l51: Correct PGA Volume minimum value (Charles Keepax)   
  - net: fec: don't reset irq coalesce settings to defaults on "ip link up" (Rasmus Villemoes)   
  - can: mcba_usb: Fix termination command argument (Yasushi SHOJI)   
  - can: sja1000: fix size of OCR_MODE_MASK define (Heiko Schocher)   
  - pinctrl: meditatek: Startup with the IRQs disabled (Ricardo Ribalda)   
  - libbpf: Use page size as max_entries when probing ring buffer map (Hou Tao)   
  - ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() (Mark Brown)   
  - ASoC: fsl_micfil: explicitly clear CHnF flags (Shengjiu Wang)   
  - ASoC: fsl_micfil: explicitly clear software reset bit (Shengjiu Wang)   
  - nfp: fix use-after-free in area_cache_get() (Jialiang Wang)   
  - vfs: fix copy_file_range() averts filesystem freeze protection (Amir Goldstein)   
  - x86/vdso: Conditionally export __vdso_sgx_enter_enclave() (Nathan Chancellor)   
  - LTS version: v5.15.83 (Jack Vogel)   
  - io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() (Harshit Mogalapalli)   
  - io_uring: move to separate directory (Jens Axboe)   
  - block: move CONFIG_BLOCK guard to top Makefile (Masahiro Yamada)   
  - can: esd_usb: Allow REC and TEC to return to zero (Frank Jungclaus)   
  - s390/qeth: fix use-after-free in hsci (Alexandra Winter)   
  - s390/qeth: fix various format strings (Heiko Carstens)   
  - macsec: add missing attribute validation for offload (Emeel Hakim)   
  - net: mvneta: Fix an out of bounds check (Dan Carpenter)   
  - net: thunderbolt: fix memory leak in tbnet_open() (Zhengchao Shao)   
  - ipv6: avoid use-after-free in ip6_fragment() (Eric Dumazet)   
  - net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq() (Yang Yingliang)   
  - net: phy: mxl-gpy: fix version reporting (Michael Walle)   
  - xen/netback: fix build warning (Juergen Gross)   
  - dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove() (Yuan Can)   
  - ethernet: aeroflex: fix potential skb leak in greth_init_rings() (Zhang Changzhong)   
  - tipc: call tipc_lxc_xmit without holding node_read_lock (Xin Long)   
  - net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() (Zhengchao Shao)   
  - ipv4: Fix incorrect route flushing when table ID 0 is used (Ido Schimmel)   
  - ipv4: Fix incorrect route flushing when source address is deleted (Ido Schimmel)   
  - tipc: Fix potential OOB in tipc_link_proto_rcv() (YueHaibing)   
  - net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (Liu Jian)   
  - net: mdio: fix unbalanced fwnode reference count in mdio_device_release() (Zeng Heng)   
  - net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (Liu Jian)   
  - net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq (Yongqiang Liu)   
  - net: microchip: sparx5: Fix missing destroy_workqueue of mact_queue (Qiheng Lin)   
  - ip_gre: do not report erspan version on GRE interface (Hangbin Liu)   
  - net: stmmac: fix "snps,axi-config" node property parsing (Jisheng Zhang)   
  - gpio/rockchip: fix refcount leak in rockchip_gpiolib_register() (Wang Yufen)   
  - nvme initialize core quirks before calling nvme_init_subsystem (Pankaj Raghav)   
  - NFC: nci: Bounds check struct nfc_target arrays (Kees Cook)   
  - i40e: Disallow ip4 and ip6 l4_4_bytes (Przemyslaw Patynowski)   
  - i40e: Fix for VF MAC address 0 (Sylwester Dziedziuch)   
  - i40e: Fix not setting default xps_cpus after reset (Michal Jaron)   
  - net: mvneta: Prevent out of bounds read in mvneta_config_rss() (Dan Carpenter)   
  - xen-netfront: Fix NULL sring after live migration (Lin Liu)   
  - octeontx2-pf: Fix potential memory leak in otx2_init_tc() (Ziyang Xuan)   
  - net: mdiobus: fix double put fwnode in the error path (Yang Yingliang)   
  - net: mdiobus: fwnode_mdiobus_register_phy() rework error handling (Oleksij Rempel)   
  - net: encx24j600: Fix invalid logic in reading of MISTAT register (Valentina Goncharenko)   
  - net: encx24j600: Add parentheses to fix precedence (Valentina Goncharenko)   
  - mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (Wei Yongjun)   
  - selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload (Zhengchao Shao)   
  - net: dsa: sja1105: Check return value (Artem Chernyshev)   
  - net: dsa: hellcreek: Check return value (Artem Chernyshev)   
  - net: dsa: ksz: Check return value (Artem Chernyshev)   
  - Bluetooth: Fix not cleanup led when bt_init fails (Chen Zhongjin)   
  - Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() (Wang ShaoBo)   
  - vmxnet3: use correct intrConf reference when using extended queues (Ronak Doshi)   
  - vmxnet3: correctly report encapsulated LRO packet (Ronak Doshi)   
  - af_unix: Get user_ns from in_skb in unix_diag_get_exact(). (Kuniyuki Iwashima)   
  - drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420 (Guillaume BRUN)   
  - net: broadcom: Add PTP_1588_CLOCK_OPTIONAL dependency for BCMGENET under ARCH_BCM2835 (YueHaibing)   
  - igb: Allocate MSI-X vector when testing (Akihiko Odaki)   
  - e1000e: Fix TX dispatch condition (Akihiko Odaki)   
  - gpio: amd8111: Fix PCI device reference count leak (Xiongfeng Wang)   
  - drm/bridge: ti-sn65dsi86: Fix output polarity setting bug (Qiqi Zhang)   
  - netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark (Pablo Neira Ayuso)   
  - ca8210: Fix crash by zero initializing data (Hauke Mehrtens)   
  - ieee802154: cc2520: Fix error return code in cc2520_hw_init() (Ziyang Xuan)   
  - drm/vmwgfx: Fix race issue calling pin_user_pages (Dawei Li)   
  - netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one (Stefano Brivio)   
  - gpiolib: fix memory leak in gpiochip_setup_dev() (Zeng Heng)   
  - gpiolib: check the 'ngpios' property in core gpiolib code (Bartosz Golaszewski)   
  - gpiolib: improve coding style for local variables (Bartosz Golaszewski)   
  - clk: Fix pointer casting to prevent oops in devm_clk_release() (Uwe Kleine-König)   
  - can: af_can: fix NULL pointer dereference in can_rcv_filter (Oliver Hartkopp)   
  - HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10 (Hans de Goede)   
  - HID: core: fix shift-out-of-bounds in hid_report_raw_event (ZhangPeng)   
  - HID: hid-lg4ff: Add check for empty lbuf (Anastasia Belova)   
  - HID: usbhid: Add ALWAYS_POLL quirk for some mice (Ankit Patel)   
  - net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() (Radu Nicolae Pirea (OSS))   
  - drm/shmem-helper: Avoid vm_open error paths (Rob Clark)   
  - drm/shmem-helper: Remove errant put in error path (Rob Clark)   
  - drm/amdgpu/sdma_v4_0: turn off SDMA ring buffer in the s2idle suspend (Prike Liang)   
  - drm/vmwgfx: Don't use screen objects when SEV is active (Zack Rusin)   
  - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth)   
  - Bluetooth: Fix crash when replugging CSR fake controllers (Luiz Augusto von Dentz)   
  - Bluetooth: btusb: Add debug message for CSR controllers (Ismael Ferreras Morezuelas)   
  - mm/gup: fix gup_pud_range() for dax (John Starks)   
  - memcg: fix possible use-after-free in memcg_write_event_control() (Tejun Heo)   
  - media: v4l2-dv-timings.c: fix too strict blanking sanity checks (Hans Verkuil)   
  - Revert "ARM: dts: imx7: Fix NAND controller size-cells" (Francesco Dolcini)   
  - soundwire: intel: Initialize clock stop timeout (Sjoerd Simons)   
  - media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area() (Hans Verkuil)   
  - xen/netback: don't call kfree_skb() with interrupts disabled (Juergen Gross)   
  - xen/netback: do some code cleanup (Juergen Gross)   
  - xen/netback: Ensure protocol headers don't fall in the non-linear area (Ross Lagerwall)   
  - drm/bridge: anx7625: Fix edid_read break case in sp_tx_edid_read() (Hsin-Yi Wang)   
  - cifs: fix use-after-free caused by invalid pointer `hostname` (Zeng Heng)   
  - rtc: cmos: avoid UIP when reading alarm time (Mateusz Jończyk)   
  - rtc: cmos: avoid UIP when writing alarm time (Mateusz Jończyk)   
  - rtc: mc146818-lib: extract mc146818_avoid_UIP (Mateusz Jończyk)   
  - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths (Jann Horn)   
  - mm/khugepaged: fix GUP-fast interaction by sending IPI (Jann Horn)   
  - mm/khugepaged: take the right locks for page table retraction (Jann Horn)   
  - net: usb: qmi_wwan: add u-blox 0x1342 composition (Davide Tronchin)   
  - 9p/xen: check logical size for buffer size (Dominique Martinet)   
  - usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer (Thinh Nguyen)   
  - fbcon: Use kzalloc() in fbcon_prepare_logo() (Tetsuo Handa)   
  - regulator: twl6030: fix get status of twl6032 regulators (Andreas Kemnade)   
  - ASoC: soc-pcm: Add NULL check in BE reparenting (Srinivasa Rao Mandadapu)   
  - btrfs: send: avoid unaligned encoded writes when attempting to clone range (Filipe Manana)   
  - selftests/net: Find nettest in current directory (Daniel Díaz)   
  - ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event (Kees Cook)   
  - regulator: slg51000: Wait after asserting CS pin (Konrad Dybcio)   
  - 9p/fd: Use P9_HDRSZ for header size (GUO Zihua)   
  - ASoC: rt711-sdca: fix the latency time of clock stop prepare state machine transitions (Shuming Fan)   
  - ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188 (Johan Jonker)   
  - spi: mediatek: Fix DEVAPC Violation at KO Remove (Zhichao Liu)   
  - ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register (Chancel Liu)   
  - ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation (Giulio Benetti)   
  - ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels (Tomislav Novak)   
  - fs: use acquire ordering in __fget_light() (Jann Horn)   
  - ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name (Johan Jonker)   
  - arm64: dts: rockchip: fix ir-receiver node names (Johan Jonker)   
  - ARM: dts: rockchip: fix ir-receiver node names (Johan Jonker)   
  - arm: dts: rockchip: remove clock-frequency from rtc (Sebastian Reichel)   
  - arm: dts: rockchip: fix node name for hym8563 rtc (Sebastian Reichel)   
  - arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series (FUKAUMI Naoki)   
  - mmc: mtk-sd: Fix missing clk_disable_unprepare in msdc_of_clock_parse() (Gaosheng Cui)   
  - clk: Provide new devm_clk helpers for prepared and enabled clocks (Uwe Kleine-König)   
  - clk: generalize devm_clk_get() a bit (Uwe Kleine-König)   
  - LTS version: v5.15.82 (Jack Vogel)   
  - ipc/sem: Fix dangling sem_array access in semtimedop race (Jann Horn)   
  - Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send() (Zhang Xiaoxu)   
  - char: tpm: Protect tpm_pm_suspend with locks (Jan Dabros)   
  - Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend" (Conor Dooley)   
  - ACPI: HMAT: Fix initiator registration for single-initiator systems (Vishal Verma)   
  - ACPI: HMAT: remove unnecessary variable initialization (Vishal Verma)   
  - i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set (Andrew Lunn)   
  - i2c: npcm7xx: Fix error handling in npcm_i2c_init() (Yuan Can)   
  - serial: stm32: Deassert Transmit Enable on ->rs485_config() (Lukas Wunner)   
  - serial: stm32: Use TC interrupt to deassert GPIO RTS in RS485 mode (Marek Vasut)   
  - serial: stm32: Factor out GPIO RTS toggling into separate function (Marek Vasut)   
  - ipv4: Fix route deletion when nexthop info is not specified (Ido Schimmel)   
  - ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference (David Ahern)   
  - selftests: net: fix nexthop warning cleanup double ip typo (Nikolay Aleksandrov)   
  - selftests: net: add delete nexthop route warning test (Nikolay Aleksandrov)   
  - Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled (Lee Jones)   
  - parisc: Increase FRAME_WARN to 2048 bytes on parisc (Helge Deller)   
  - mm: migrate: fix THP's mapcount on isolation (Gavin Shan)   
  - mm: __isolate_lru_page_prepare() in isolate_migratepages_block() (Hugh Dickins)   
  - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (Xiongfeng Wang)   
  - iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (Xiongfeng Wang)   
  - nvme: fix SRCU protection of nvme_ns_head list (Caleb Sander)   
  - riscv: kexec: Fixup irq controller broken in kexec crash path (Guo Ren)   
  - riscv: fix race when vmap stack overflow (Jisheng Zhang)   
  - riscv: Sync efi page table's kernel mappings before switching (Alexandre Ghiti)   
  - pinctrl: single: Fix potential division by zero (Maxim Korotkov)   
  - ASoC: ops: Fix bounds check for _sx controls (Mark Brown)   
  - KVM: x86/mmu: Fix race condition in direct_page_fault (Kazuki Takiguchi)   {CVE-2022-45869} 
  - io_uring/poll: fix poll_refs race with cancelation (Lin Ma)   
  - io_uring: make poll refs more robust (Pavel Begunkov)   
  - io_uring: cmpxchg for poll arm refs release (Pavel Begunkov)   
  - io_uring: fix tw losing poll events (Pavel Begunkov)   
  - io_uring: update res mask in io_poll_check_events (Pavel Begunkov)   
  - tracing: Free buffers when a used dynamic event is removed (Steven Rostedt (Google))   
  - tracing: Fix race where histograms can be called before the event (Steven Rostedt (Google))   
  - tracing/osnoise: Fix duration type (Daniel Bristot de Oliveira)   
  - drm/i915: Never return 0 if not all requests retired (Janusz Krzysztofik)   
  - drm/i915: Fix negative value passed as remaining time (Janusz Krzysztofik)   
  - drm/amdgpu: enable Vangogh VCN indirect sram mode (Leo Liu)   
  - drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame (Lee Jones)   
  - mmc: sdhci: Fix voltage switch delay (Adrian Hunter)   
  - mmc: sdhci-sprd: Fix no reset data and command after voltage switch (Wenchao Chen)   
  - mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check (Sebastian Falbesoner)   
  - mmc: core: Fix ambiguous TRIM and DISCARD arg (Christian Löhle)   
  - mmc: mmc_test: Fix removal of debugfs file (Ye Bin)   
  - net: stmmac: Set MAC's flow control register to reflect current settings (Goh, Wei Sheng)   
  - v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails (Linus Torvalds)   
  - pinctrl: intel: Save and restore pins in "direct IRQ" mode (Andy Shevchenko)   
  - x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 (Pawan Gupta)   
  - nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() (ZhangPeng)   
  - tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep" (Tiezhu Yang)   
  - error-injection: Add prompt for function error injection (Steven Rostedt (Google))   
  - ALSA: dice: fix regression for Lexicon I-ONIX FW810S (Takashi Sakamoto)   
  - riscv: mm: Proper page permissions after initmem free (Björn Töpel)   
  - riscv: vdso: fix section overlapping under some conditions (Jisheng Zhang)   
  - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (Yang Yingliang)   
  - hwmon: (coretemp) Check for null before removing sysfs attrs (Phil Auld)   
  - net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed (Yoshihiro Shimoda)   
  - sctp: fix memory leak in sctp_stream_outq_migrate() (Zhengchao Shao)   
  - packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE (Willem de Bruijn)   
  - net: tun: Fix use-after-free in tun_detach() (Shigeru Yoshida)   
  - afs: Fix fileserver probe RTT handling (David Howells)   
  - net: mdiobus: fix unbalanced node reference count (Yang Yingliang)   
  - net: hsr: Fix potential use-after-free (YueHaibing)   
  - tipc: re-fetch skb cb after tipc_msg_validate (Xin Long)   
  - dsa: lan9303: Correct stat name (Jerry Ray)   
  - net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type (M Chetan Kumar)   
  - net: wwan: iosm: fix kernel test robot reported error (M Chetan Kumar)   
  - net: ethernet: nixge: fix NULL dereference (Yuri Karpov)   
  - net/9p: Fix a potential socket leak in p9_socket_open (Wang Hai)   
  - net: net_netdev: Fix error handling in ntb_netdev_init_module() (Yuan Can)   
  - net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe() (Zhang Changzhong)   
  - net: phy: fix null-ptr-deref while probe() failed (Yang Yingliang)   
  - wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration (Lorenzo Bianconi)   
  - wifi: cfg80211: don't allow multi-BSSID in S1G (Johannes Berg)   
  - wifi: cfg80211: fix buffer overflow in elem comparison (Johannes Berg)   
  - aquantia: Do not purge addresses when setting the number of rings (Izabela Bakollari)   
  - qlcnic: fix sleep-in-atomic-context bugs caused by msleep (Duoming Zhou)   
  - can: m_can: Add check for devm_clk_get (Jiasheng Jiang)   
  - can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (Zhang Changzhong)   
  - can: etas_es58x: es58x_init_netdev(): free netdev when register_candev() (Zhang Changzhong)   
  - can: cc770: cc770_isa_probe(): add missing free_cc770dev() (Zhang Changzhong)   
  - can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() (Zhang Changzhong)   
  - net/mlx5e: Fix use-after-free when reverting termination table (Roi Dayan)   
  - net/mlx5: Fix uninitialized variable bug in outlen_write() (YueHaibing)   
  - net/mlx5: DR, Fix uninitialized var warning (YueHaibing)   
  - net/mlx5: DR, Rename list field in matcher struct to list_node (Yevgeny Kliteynik)   
  - e100: Fix possible use after free in e100_xmit_prepare (Wang Hai)   
  - iavf: Fix error handling in iavf_init_module() (Yuan Can)   
  - iavf: remove redundant ret variable (Minghao Chi)   
  - fm10k: Fix error handling in fm10k_init_module() (Yuan Can)   
  - i40e: Fix error handling in i40e_init_module() (Shang XiaoJing)   
  - ixgbevf: Fix resource leak in ixgbevf_init_module() (Shang XiaoJing)   
  - of: property: decrement node refcount in of_fwnode_get_reference_args() (Yang Yingliang)   
  - nvmem: rmem: Fix return value check in rmem_read() (Wei Yongjun)   
  - bpf: Do not copy spin lock field from user in bpf_selem_alloc (Xu Kuohai)   
  - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (Gaosheng Cui)   
  - hwmon: (i5500_temp) fix missing pci_disable_device() (Yang Yingliang)   
  - hwmon: (ina3221) Fix shunt sum critical calculation (Ninad Malwade)   
  - hwmon: (ltc2947) fix temperature scaling (Derek Nguyen)   
  - libbpf: Handle size overflow for ringbuf mmap (Hou Tao)   
  - ARM: at91: rm9200: fix usb device clock id (Michael Grzeschik)   
  - scripts/faddr2line: Fix regression in name resolution on ppc64le (Srikar Dronamraju)   
  - bpf, perf: Use subprog name when reporting subprog ksymbol (Hou Tao)   
  - iio: light: rpr0521: add missing Kconfig dependencies (Paul Gazzillo)   
  - iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw (Wei Yongjun)   
  - iio: health: afe4403: Fix oob read in afe4403_read_raw (Wei Yongjun)   
  - drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly when the edid is read" (Alex Deucher)   
  - drm/amdgpu: update drm_display_info correctly when the edid is read (Claudio Suarez)   
  - drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code (Lyude Paul)   
  - btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() (ChenXiaoSong)   
  - btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker (Nikolay Borisov)   
  - spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock (Frieder Schrempf)   
  - btrfs: free btrfs_path before copying inodes to userspace (Anand Jain)   
  - btrfs: sink iterator parameter to btrfs_ioctl_logical_to_ino (David Sterba)   
  - erofs: fix order >= MAX_ORDER warning due to crafted negative i_size (Gao Xiang)   
  - drm/i915/gt: Use i915_vm_put on ppgtt_create error paths (Chris Wilson)   
  - drm/i915: Create a dummy object for gen6 ppgtt (Maarten Lankhorst)   
  - arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored (Catalin Marinas)   
  - LTS version: v5.15.81 (Jack Vogel)   
  - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara)   
  - drm/i915: fix TLB invalidation for Gen12 video and compute engines (Andrzej Hajda)   {CVE-2022-4139} 
  - drm/amdgpu: always register an MMU notifier for userptr (Christian König)   
  - drm/amdgpu: Enable Aldebaran devices to report CU Occupancy (Ramesh Errabolu)   
  - drm/amd/display: No display after resume from WB/CB (Tsung-hua Lin)   
  - drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN (Lyude Paul)   
  - btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs() (Zhen Lei)   
  - btrfs: use kvcalloc in btrfs_get_dev_zone_info (Christoph Hellwig)   
  - btrfs: zoned: fix missing endianness conversion in sb_write_pointer (Christoph Hellwig)   
  - btrfs: free btrfs_path before copying subvol info to userspace (Anand Jain)   
  - btrfs: free btrfs_path before copying fspath to userspace (Anand Jain)   
  - btrfs: free btrfs_path before copying root refs to userspace (Josef Bacik)   
  - genirq: Take the proposed affinity at face value if force==true (Luiz Capitulino)   
  - irqchip/gic-v3: Always trust the managed affinity provided by the core code (Luiz Capitulino)   
  - genirq: Always limit the affinity to online CPUs (Luiz Capitulino)   
  - genirq/msi: Shutdown managed interrupts with unsatifiable affinities (Luiz Capitulino)   
  - wifi: wilc1000: validate number of channels (Phil Turnbull)   
  - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute (Phil Turnbull)   
  - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute (Phil Turnbull)   
  - wifi: wilc1000: validate pairwise and authentication suite offsets (Phil Turnbull)   
  - fuse: lock inode unconditionally in fuse_fallocate() (Miklos Szeredi)   
  - dm integrity: clear the journal on suspend (Mikulas Patocka)   
  - dm integrity: flush the journal on suspend (Mikulas Patocka)   
  - gpu: host1x: Avoid trying to use GART on Tegra20 (Robin Murphy)   
  - scsi: iscsi: Fix possible memory leak when device_register() failed (Zhou Guanghui)   
  - net: usb: qmi_wwan: add Telit 0x103a composition (Enrico Sau)   
  - tcp: configurable source port perturb table size (Gleb Mazovetskiy)   
  - platform/x86: ideapad-laptop: Fix interrupt storm on fn-lock toggle on some Yoga laptops (Arnav Rawat)   
  - platform/x86: hp-wmi: Ignore Smart Experience App event (Kai-Heng Feng)   
  - zonefs: fix zone report size in __zonefs_io_error() (Damien Le Moal)   
  - drm/amdgpu: disable BACO support on more cards (Guchun Chen)   
  - platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) (Hans de Goede)   
  - platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() (Xiongfeng Wang)   
  - xen/platform-pci: add missing free_irq() in error path (ruanjinjie)   
  - xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too (Marek Marczykowski-Górecki)   
  - ASoC: stm32: dfsdm: manage cb buffers cleanup (Olivier Moysan)   
  - Input: i8042 - apply probe defer to more ASUS ZenBook models (Takashi Iwai)   
  - Input: soc_button_array - add Acer Switch V 10 to dmi_use_low_level_irq[] (Hans de Goede)   
  - Input: soc_button_array - add use_low_level_irq module parameter (Hans de Goede)   
  - Input: goodix - try resetting the controller when no config is set (Hans de Goede)   
  - serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios() (Lukas Wunner)   
  - tools: iio: iio_generic_buffer: Fix read size (Matti Vaittinen)   
  - ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 (Hans de Goede)   
  - Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode (Aman Dhoot)   
  - x86/ioremap: Fix page aligned size calculation in __ioremap_caller() (Michael Kelley)   
  - x86/pm: Add enumeration check before spec MSRs save/restore setup (Pawan Gupta)   
  - x86/tsx: Add a feature bit for TSX control MSR support (Pawan Gupta)   
  - KVM: x86: remove exit_int_info warning in svm_handle_exit (Maxim Levitsky)   
  - KVM: x86: add kvm_leave_nested (Maxim Levitsky)   
  - KVM: x86: nSVM: harden svm_free_nested against freeing vmcb02 while still in use (Maxim Levitsky)   
  - KVM: x86: forcibly leave nested mode on vCPU reset (Maxim Levitsky)   
  - KVM: x86: nSVM: leave nested mode on vCPU free (Maxim Levitsky)   
  - mm: vmscan: fix extreme overreclaim and swap floods (Johannes Weiner)   
  - gcov: clang: fix the buffer overflow issue (Mukesh Ojha)   
  - nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty (Chen Zhongjin)   
  - usb: dwc3: gadget: Clear ep descriptor last (Thinh Nguyen)   
  - usb: dwc3: gadget: Return -ESHUTDOWN on ep disable (Thinh Nguyen)   
  - usb: dwc3: gadget: conditionally remove requests (Michael Grzeschik)   
  - bus: ixp4xx: Don't touch bit 7 on IXP42x (Linus Walleij)   
  - iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails (Chen Zhongjin)   
  - iio: light: apds9960: fix wrong register for gesture gain (Alejandro Concepción Rodríguez)   
  - arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency (Jakob Unterwurzacher)   
  - ext4: fix use-after-free in ext4_ext_shift_extents (Baokun Li)   
  - usb: cdnsp: fix issue with ZLP - added TD_SIZE = 1 (Pawel Laszczak)   
  - usb: cdnsp: Fix issue with Clear Feature Halt Endpoint (Pawel Laszczak)   
  - usb: dwc3: exynos: Fix remove() function (Marek Szyprowski)   
  - KVM: arm64: pkvm: Fixup boot mode to reflect that the kernel resumes from EL1 (Marc Zyngier)   
  - mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)   
  - mmc: sdhci-brcmstb: Enable Clock Gating to save power (Al Cooper)   
  - mmc: sdhci-brcmstb: Re-organize flags (Al Cooper)   
  - nios2: add FORCE for vmlinuz.gz (Randy Dunlap)   
  - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Alexandre Belloni)   
  - lib/vdso: use "grep -E" instead of "egrep" (Greg Kroah-Hartman)   
  - s390/crashdump: fix TOD programmable field size (Heiko Carstens)   
  - net: thunderx: Fix the ACPI memory leak (Yu Liao)   
  - octeontx2-af: Fix reference count issue in rvu_sdp_init() (Xiongfeng Wang)   
  - octeontx2-pf: Add check for devm_kcalloc (Jiasheng Jiang)   
  - net: enetc: preserve TX ring priority across reconfiguration (Vladimir Oltean)   
  - net: enetc: cache accesses to &priv->si->hw (Vladimir Oltean)   
  - net: enetc: manage ENETC_F_QBV in priv->active_offloads only when enabled (Vladimir Oltean)   
  - nfc: st-nci: fix incorrect sizing calculations in EVT_TRANSACTION (Martin Faltesek)   
  - nfc: st-nci: fix memory leaks in EVT_TRANSACTION (Martin Faltesek)   
  - nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION (Martin Faltesek)   
  - s390/dasd: fix no record found for raw_track_access (Stefan Haberland)   
  - arcnet: fix potential memory leak in com20020_probe() (Wang Hai)   
  - ipv4: Fix error return code in fib_table_insert() (Ziyang Xuan)   
  - dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). (Kuniyuki Iwashima)   
  - fs: do not update freeing inode i_io_list (Svyatoslav Feldsherov)   
  - netfilter: flowtable_offload: add missing locking (Felix Fietkau)   
  - netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface (Jozsef Kadlecsik)   
  - dma-buf: fix racing conflict of dma_heap_add() (Dawei Li)   
  - bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() (Yang Yingliang)   
  - regulator: twl6030: re-add TWL6032_SUBCLASS (Andreas Kemnade)   
  - NFC: nci: fix memory leak in nci_rx_data_packet() (Liu Shixin)   
  - net: sched: allow act_ct to be built without NF_NAT (Xin Long)   
  - net: sparx5: fix error handling in sparx5_port_open() (Liu Jian)   
  - sfc: fix potential memleak in __ef100_hard_start_xmit() (Zhang Changzhong)   
  - net: wwan: iosm: use ACPI_FREE() but not kfree() in ipc_pcie_read_bios_cfg() (Wang ShaoBo)   
  - xfrm: Fix ignored return value in xfrm6_init() (Chen Zhongjin)   
  - xfrm: Fix oops in __xfrm_state_delete() (Thomas Jarosch)   
  - tipc: check skb_linearize() return value in tipc_disc_rcv() (YueHaibing)   
  - tipc: add an extra conn_get in tipc_conn_alloc (Xin Long)   
  - tipc: set con sock in tipc_conn_alloc (Xin Long)   
  - net/mlx5: Fix handling of entry refcount when command is not issued to FW (Moshe Shemesh)   
  - net/mlx5: Fix FW tracer timestamp calculation (Moshe Shemesh)   
  - net/mlx5: Do not query pci info while pci disabled (Roy Novich)   
  - netfilter: ipset: regression in ip_set_hash_ip.c (Vishwanath Pai)   
  - Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() (Yang Yingliang)   
  - Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() (Yang Yingliang)   
  - macsec: Fix invalid error code set (YueHaibing)   
  - nfp: add port from netdev validation for EEPROM access (Jaco Coetzee)   
  - nfp: fill splittable of devlink_port_attrs correctly (Diana Wang)   
  - net: pch_gbe: fix pci device refcount leak while module exiting (Yang Yingliang)   
  - octeontx2-af: debugsfs: fix pci device refcount leak (Yang Yingliang)   
  - net/qla3xxx: fix potential memleak in ql3xxx_send() (Zhang Changzhong)   
  - net: mvpp2: fix possible invalid pointer dereference (Hui Tang)   
  - net/mlx4: Check retval of mlx4_bitmap_init (Peter Kosyh)   
  - net: ethernet: mtk_eth_soc: fix error handling in mtk_open() (Liu Jian)   
  - ARM: dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties (Fabio Estevam)   
  - ARM: mxs: fix memory leak in mxs_machine_init() (Zheng Yongjun)   
  - iavf: Fix race condition between iavf_shutdown and iavf_remove (Slawomir Laba)   
  - iavf: Do not restart Tx queues after reset task failure (Ivan Vecera)   
  - iavf: Fix a crash during reset task (Ivan Vecera)   
  - netfilter: nf_tables: do not set up extensions for end interval (Pablo Neira Ayuso)   
  - netfilter: conntrack: Fix data-races around ct mark (Daniel Xu)   
  - 9p/fd: fix issue of list_del corruption in p9_fd_cancel() (Zhengchao Shao)   
  - net: pch_gbe: fix potential memleak in pch_gbe_tx_queue() (Wang Hai)   
  - nfc/nci: fix race with opening and closing (Lin Ma)   
  - net: dsa: sja1105: disallow C45 transactions on the BASE-TX MDIO bus (Vladimir Oltean)   
  - rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] (David Howells)   
  - rxrpc: Use refcount_t rather than atomic_t (David Howells)   
  - rxrpc: Allow list of in-use local UDP endpoints to be viewed in /proc (David Howells)   
  - net: liquidio: simplify if expression (Leon Romanovsky)   
  - selftests: mptcp: fix mibit vs mbit mix up (Matthieu Baerts)   
  - selftests: mptcp: more stable simult_flows tests (Paolo Abeni)   
  - ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl (Michael Grzeschik)   
  - tee: optee: fix possible memory leak in optee_register_device() (Yang Yingliang)   
  - bus: sunxi-rsb: Support atomic transfers (Samuel Holland)   
  - bus: sunxi-rsb: Remove the shutdown callback (Samuel Holland)   
  - regulator: core: fix UAF in destroy_regulator() (Yang Yingliang)   
  - spi: dw-dma: decrease reference count in dw_spi_dma_init_mfld() (Xiongfeng Wang)   
  - regulator: core: fix kobject release warning and memory leak in regulator_register() (Zeng Heng)   
  - ASoC: max98373: Add checks for devm_kcalloc (Jiasheng Jiang)   
  - scsi: storvsc: Fix handling of srb_status and capacity change events (Michael Kelley)   
  - x86/hyperv: Restore VP assist page after cpu offlining/onlining (Vitaly Kuznetsov)   
  - ASoC: soc-pcm: Don't zero TDM masks in __soc_pcm_open() (Richard Fitzgerald)   
  - ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove (Detlev Casanova)   
  - ASoC: hdac_hda: fix hda pcm buffer overflow issue (Junxiao Chang)   
  - ARM: dts: am335x-pcm-953: Define fixed regulators in root node (Dominik Haller)   
  - af_key: Fix send_acquire race with pfkey_register (Herbert Xu)   
  - xfrm: replay: Fix ESN wrap around for GSO (Christian Langrock)   
  - xfrm: fix "disable_policy" on ipv4 early demux (Eyal Birger)   
  - MIPS: pic32: treat port as signed integer (Jason A. Donenfeld)   
  - RISC-V: vdso: Do not add missing symbols to version section in linker script (Nathan Chancellor)   
  - ALSA: usb-audio: add quirk to fix Hamedal C20 disconnect issue (Ai Chao)   
  - Revert "drm/amdgpu: Revert "drm/amdgpu: getting fan speed pwm for vega10 properly"" (Asher Song)   
  - nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked (Aleksandr Miloserdov)   
  - arm64/syscall: Include asm/ptrace.h in syscall_wrapper header. (Kuniyuki Iwashima)   
  - block, bfq: fix null pointer dereference in bfq_bio_bfqg() (Yu Kuai)   
  - drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017) (Hans de Goede)   
  - scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC (Bart Van Assche)   
  - scsi: ibmvfc: Avoid path failures during live migration (Brian King)   
  - platform/x86/intel/hid: Add some ACPI device IDs (Ivan Hu)   
  - platform/x86/intel/pmt: Sapphire Rapids PMT errata fix (David E. Box)   
  - platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1 (Hans de Goede)   
  - platform/x86: ideapad-laptop: Disable touchpad_switch (Manyi Li)   
  - Revert "net: macsec: report real_dev features when HW offloading is enabled" (Sabrina Dubroca)   
  - selftests/bpf: Add verifier test for release_reference() (Youlin Li)   
  - spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run (Sean Nyekjaer)   
  - wifi: ath11k: Fix QCN9074 firmware boot on x86 (Tyler J. Stachecki)   
  - wifi: mac80211: Fix ack frame idr leak when mesh has no route (Nicolas Cavallari)   
  - wifi: airo: do not assign -1 to unsigned char (Jason A. Donenfeld)   
  - audit: fix undefined behavior in bit shift for AUDIT_BIT (Gaosheng Cui)   
  - riscv: dts: sifive unleashed: Add PWM controlled LEDs (Emil Renner Berthing)   
  - wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support (Jonas Jelonek)   
  - wifi: mac80211: fix memory free error when registering wiphy fail (taozhang)   
  - ceph: fix NULL pointer dereference for req->r_session (Xiubo Li)   
  - ceph: Use kcalloc for allocating multiple elements (Kenneth Lee)   
  - binder: validate alloc->mm in ->mmap() handler (Carlos Llamas)   
  - x86/sgx: Add overflow check in sgx_validate_offset_length() (Borys Popławski)   
  - x86/sgx: Create utility to validate user provided offset and length (Reinette Chatre)   
  - ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li)   
  - ceph: do not update snapshot context when there is no new snapshot (Xiubo Li)   
  - iio: pressure: ms5611: fixed value compensation bug (Mitja Spes)   
  - iio: ms5611: Simplify IO callback parameters (Lars-Peter Clausen)   
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Netac NV7000 (Tiago Dias Ferreira)   
  - nvme-pci: disable write zeroes on various Kingston SSD (Xander Li)   
  - nvme-pci: disable namespace identifiers for the MAXIO MAP1001 (Christoph Hellwig)   
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Micron Nitro (Bean Huo)   
  - nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH (Leo Savernik)   
  - drm/display: Don't assume dual mode adaptors support i2c sub-addressing (Simon Rettberg)   
  - ata: libata-core: do not issue non-internal commands once EH is pending (Niklas Cassel)   
  - ata: libata-scsi: simplify __ata_scsi_queuecmd() (Wenchao Hao)   
  - cifs: Fix connections leak when tlink setup failed (Zhang Xiaoxu)   
  - cifs: support nested dfs links over reconnect (Paulo Alcantara)   
  - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara)   
  - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara)   
  - sctp: clear out_curr if all frag chunks of current msg are pruned (Xin Long)   
  - sctp: remove the unnecessary sinfo_stream check in sctp_prsctp_prune_unsent (Xin Long)   
  - tty: serial: fsl_lpuart: don't break the on-going transfer when global reset (Sherry Sun)   
  - serial: fsl_lpuart: Fill in rs485_supported (Ilpo Järvinen)   
  - serial: Add rs485_supported to uart_port (Ilpo Järvinen)   
  - ASoC: fsl_asrc fsl_esai fsl_sai: allow CONFIG_PM=N (Maarten Zanders)   
  - ASoC: fsl_sai: use local device pointer (Marco Felsch)   
  - net: mana: Fix race on per-CQ variable napi work_done (Haiyang Zhang)  [Orabug: 34917684]  
  - vhost-scsi: Fix max number of virtqueues (Mike Christie)  [Orabug: 34915127]  
  - uek_kabi: unneeded include of uek_kabi.h in ip.h (Alan Maguire)  [Orabug: 34911234]  
  - uek-container: Enable CONFIG_IA32_EMULATION (Liam Merwick)  [Orabug: 34909790]  
  - uek-rpm: Disable CONFIG_SND_PCM_OSS for OL8 and OL9 (Harshit Mogalapalli)  [Orabug: 34885467]  
  - uek-container: ol9: Update config with that generated by 'make olddefconfig' (Liam Merwick)  [Orabug: 34850980]  
  - uek-container: ol8: Update config with that generated by 'make olddefconfig' (Liam Merwick)  [Orabug: 34850980]  
  - uek-container: Fix x86_64 PVH ELF note with binutils >= 2.36 (Liam Merwick)  [Orabug: 34850980]  
  - uek-rpm: ol9: Add spec file changes to build container kernel (Liam Merwick)  [Orabug: 34850980]  
  - uek-rpm: ol8: Add spec file changes to build container kernel (Liam Merwick)  [Orabug: 34850980]  
  - uek-rpm: ol9: x86_64: Add kernel-uek-container config file (Liam Merwick)  [Orabug: 34850980]  
  - uek-rpm: ol8: x86_64: Add kernel-uek-container config file (Liam Merwick)  [Orabug: 34850980]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-6.80.1.el8uek]
changelog:
  - LTS version: v5.15.80 (Jack Vogel)   
  - ntfs: check overflow when iterating ATTR_RECORDs (Hawkins Jiawei)   
  - ntfs: fix out-of-bounds read in ntfs_attr_find() (Hawkins Jiawei)   
  - ntfs: fix use-after-free in ntfs_attr_find() (Hawkins Jiawei)   
  - net/9p: use a dedicated spinlock for trans_fd (Dominique Martinet)   
  - mm: fs: initialize fsdata passed to write_begin/write_end interface (Alexander Potapenko)   
  - wifi: wext: use flex array destination for memcpy() (Hawkins Jiawei)   
  - 9p/trans_fd: always use O_NONBLOCK read/write (Tetsuo Handa)   
  - gfs2: Switch from strlcpy to strscpy (Andreas Gruenbacher)   
  - gfs2: Check sb_bsize_shift after reading superblock (Andrew Price)   
  - 9p: trans_fd/p9_conn_cancel: drop client lock earlier (Dominique Martinet)   
  - kcm: close race conditions on sk_receive_queue (Cong Wang)   
  - kcm: avoid potential race in kcm_tx_work (Eric Dumazet)   
  - tcp: cdg: allow tcp_cdg_release() to be called multiple times (Eric Dumazet)   
  - macvlan: enforce a consistent minimal mtu (Eric Dumazet)   
  - Input: i8042 - fix leaking of platform device on module removal (Chen Jun)   
  - kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case (Li Huafei)   
  - scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper() (Yuan Can)   
  - scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() (Yang Yingliang)   
  - net: use struct_group to copy ip/ipv6 header addresses (Hangbin Liu)   
  - tracing: Fix warning on variable 'struct trace_array' (Aashish Sharma)   
  - ring-buffer: Include dropped pages in counting dirty patches (Steven Rostedt (Google))   
  - perf: Improve missing SIGTRAP checking (Marco Elver)   
  - serial: 8250_lpss: Use 16B DMA burst with Elkhart Lake (Ilpo Järvinen)   
  - nvme: ensure subsystem reset is single threaded (Keith Busch) [Orabug: 34619364] {CVE-2022-3169}
  - nvme: restrict management ioctls to admin (Keith Busch)   
  - perf/x86/intel/pt: Fix sampling using single range output (Adrian Hunter)   
  - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (Alexander Potapenko)   
  - docs: update mediator contact information in CoC doc (Shuah Khan)   
  - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() (Xiongfeng Wang)   
  - mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout (Chevron Li)   
  - mmc: core: properly select voltage range without power cycle (Yann Gautier)   
  - firmware: coreboot: Register bus in module init (Brian Norris)   
  - iommu/vt-d: Set SRE bit only when hardware has SRS cap (Tina Zhang)   
  - iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (Tina Zhang)   
  - scsi: zfcp: Fix double free of FSF request when qdio send fails (Benjamin Block)   
  - net: phy: marvell: add sleep time after enabling the loopback bit (Aminuddin Jamaluddin)   
  - maccess: Fix writing offset in case of fault in strncpy_from_kernel_nofault() (Alban Crequy)   
  - Input: iforce - invert valid length check when fetching device IDs (Tetsuo Handa)   
  - serial: 8250_lpss: Configure DMA also w/o DMA filter (Ilpo Järvinen)   
  - serial: 8250: Flush DMA Rx on RLSI (Ilpo Järvinen)   
  - serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs (Ilpo Järvinen)   
  - dm ioctl: fix misbehavior if list_versions races with module loading (Mikulas Patocka)   
  - iio: pressure: ms5611: changed hardcoded SPI speed to value limited (Mitja Spes)   
  - iio: adc: mp2629: fix potential array out of bound access (Saravanan Sekar)   
  - iio: adc: mp2629: fix wrong comparison of channel (Saravanan Sekar)   
  - iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() (Yang Yingliang)   
  - iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() (Yang Yingliang)   
  - usb: typec: mux: Enter safe mode only when pins need to be reconfigured (Rajat Khandelwal)   
  - usb: cdns3: host: fix endless superspeed hub port reset (Li Jun)   
  - usb: chipidea: fix deadlock in ci_otg_del_timer (Duoming Zhou)   
  - usb: add NO_LPM quirk for Realforce 87U Keyboard (Nicolas Dumazet)   
  - USB: serial: option: add Fibocom FM160 0x0111 composition (Reinhard Speyerer)   
  - USB: serial: option: add u-blox LARA-L6 modem (Davide Tronchin)   
  - USB: serial: option: add u-blox LARA-R6 00B modem (Davide Tronchin)   
  - USB: serial: option: remove old LARA-R6 PID (Davide Tronchin)   
  - USB: serial: option: add Sierra Wireless EM9191 (Benoît Monin)   
  - USB: bcma: Make GPIO explicitly optional (Linus Walleij)   
  - speakup: fix a segfault caused by switching consoles (Mushahid Hussain)   
  - slimbus: stream: correct presence rate frequencies (Krzysztof Kozlowski)   
  - slimbus: qcom-ngd: Fix build error when CONFIG_SLIM_QCOM_NGD_CTRL=y && CONFIG_QCOM_RPROC_COMMON=m (Zheng Bin)   
  - Revert "usb: dwc3: disable USB core PHY management" (Johan Hovold)   
  - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 (Takashi Iwai)   
  - ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro (Emil Flink)   
  - ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() (Takashi Iwai)   
  - drm/amd/display: Add HUBP surface flip interrupt handler (Rodrigo Siqueira)   
  - tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit() (Shang XiaoJing)   
  - tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit() (Shang XiaoJing)   
  - tracing: Fix race where eprobes can be called before the event (Steven Rostedt (Google))   
  - tracing: Fix wild-memory-access in register_synth_event() (Shang XiaoJing)   
  - tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() (Shang XiaoJing)   
  - tracing/ring-buffer: Have polling block on watermark (Steven Rostedt (Google))   
  - tracing: Fix memory leak in tracing_read_pipe() (Wang Yufen)   
  - ring_buffer: Do not deactivate non-existant pages (Daniil Tatianin)   
  - ftrace: Fix null pointer dereference in ftrace_add_mod() (Xiu Jianfeng)   
  - ftrace: Optimize the allocation for mcount entries (Wang Wensheng)   
  - ftrace: Fix the possible incorrect kernel message (Wang Wensheng)   
  - cifs: add check for returning value of SMB2_set_info_init (Anastasia Belova)   
  - net: thunderbolt: Fix error handling in tbnet_init() (Yuan Can)   
  - net: microchip: sparx5: Fix potential null-ptr-deref in sparx_stats_init() and sparx5_start() (Shang XiaoJing)   
  - cifs: Fix wrong return value checking when GETFLAGS (Zhang Xiaoxu)   
  - net/x25: Fix skb leak in x25_lapb_receive_frame() (Wei Yongjun)   
  - net: ag71xx: call phylink_disconnect_phy if ag71xx_hw_enable() fail in ag71xx_open() (Liu Jian)   
  - cifs: add check for returning value of SMB2_close_init (Anastasia Belova)   
  - platform/surface: aggregator: Do not check for repeated unsequenced packets (Maximilian Luz)   
  - platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized (Roger Pau Monné)   
  - drbd: use after free in drbd_create_device() (Dan Carpenter)   
  - bridge: switchdev: Fix memory leaks when changing VLAN protocol (Ido Schimmel)   
  - net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process (Guangbin Huang)   
  - net: ena: Fix error handling in ena_init() (Yuan Can)   
  - net: ionic: Fix error handling in ionic_init_module() (Yuan Can)   
  - xen/pcpu: fix possible memory leak in register_pcpu() (Yang Yingliang)   
  - net: dsa: make dsa_master_ioctl() see through port_hwtstamp_get() shims (Vladimir Oltean)   
  - net: mhi: Fix memory leak in mhi_net_dellink() (Wei Yongjun)   
  - bnxt_en: Remove debugfs when pci_register_driver failed (Gaosheng Cui)   
  - net: caif: fix double disconnect client in chnl_net_open() (Zhengchao Shao)   
  - net: macvlan: Use built-in RCU list checking (Chuang Wang)   
  - mISDN: fix misuse of put_device() in mISDN_register_device() (Wang ShaoBo)   
  - net: liquidio: release resources when liquidio driver open failed (Zhengchao Shao)   
  - soc: imx8m: Enable OCOTP clock before reading the register (Xiaolei Wang)   
  - net: stmmac: ensure tx function is not running in stmmac_xdp_release() (Mohd Faizal Abdul Rahim)   
  - net: hinic: Fix error handling in hinic_module_init() (Yuan Can)   
  - mISDN: fix possible memory leak in mISDN_dsp_element_register() (Yang Yingliang)   
  - net: bgmac: Drop free_netdev() from bgmac_enet_remove() (Wei Yongjun)   
  - bpf: Initialize same number of free nodes for each pcpu_freelist (Xu Kuohai)   
  - MIPS: Loongson64: Add WARN_ON on kexec related kmalloc failed (Liao Chang)   
  - MIPS: fix duplicate definitions for exported symbols (Rongwei Zhang)   
  - nfp: change eeprom length to max length enumerators (Jaco Coetzee)   
  - ata: libata-transport: fix error handling in ata_tdev_add() (Yang Yingliang)   
  - ata: libata-transport: fix error handling in ata_tlink_add() (Yang Yingliang)   
  - ata: libata-transport: fix error handling in ata_tport_add() (Yang Yingliang)   
  - ata: libata-transport: fix double ata_host_put() in ata_tport_add() (Yang Yingliang)   
  - arm64: dts: imx8mn: Fix NAND controller size-cells (Marek Vasut)   
  - arm64: dts: imx8mm: Fix NAND controller size-cells (Marek Vasut)   
  - ARM: dts: imx7: Fix NAND controller size-cells (Marek Vasut)   
  - drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker() (Shang XiaoJing)   
  - drm/drv: Fix potential memory leak in drm_dev_init() (Shang XiaoJing)   
  - drm/panel: simple: set bpc field for logic technologies displays (Aishwarya Kothari)   
  - drm/vc4: kms: Fix IS_ERR() vs NULL check for vc4_kms (Gaosheng Cui)   
  - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map (Zeng Heng)   
  - parport_pc: Avoid FIFO port location truncation (Maciej W. Rozycki)   
  - siox: fix possible memory leak in siox_device_add() (Yang Yingliang)   
  - arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro (D Scott Phillips)   
  - bpf: Fix memory leaks in __check_func_call (Wang Yufen)   
  - block: sed-opal: kmalloc the cmd/resp buffers (Serge Semin)   
  - scsi: scsi_transport_sas: Fix error handling in sas_phy_add() (Yang Yingliang)   
  - pinctrl: rockchip: list all pins in a possible mux route for PX30 (Quentin Schulz)   
  - ASoC: soc-utils: Remove __exit for snd_soc_util_exit() (Chen Zhongjin)   
  - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() (Baisong Zhong)   
  - tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send (Duoming Zhou)   
  - serial: imx: Add missing .thaw_noirq hook (Shawn Guo)   
  - serial: 8250: omap: Flush PM QOS work on remove (Tony Lindgren)   
  - serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove() (Tony Lindgren)   
  - serial: 8250_omap: remove wait loop from Errata i202 workaround (Matthias Schiffer)   
  - serial: 8250: omap: Fix missing PM runtime calls for omap8250_set_mctrl() (Tony Lindgren)   
  - ARM: at91: pm: avoid soft resetting AC DLL (Claudiu Beznea)   
  - ASoC: tas2764: Fix set_tdm_slot in case of single slot (Martin Povišer)   
  - ASoC: tas2770: Fix set_tdm_slot in case of single slot (Martin Povišer)   
  - ASoC: core: Fix use-after-free in snd_soc_exit() (Chen Zhongjin)   
  - ARM: dts: at91: sama7g5: fix signal name of pin PB2 (Mihai Sain)   
  - spi: stm32: Print summary 'callbacks suppressed' message (Marek Vasut)   
  - arm64: dts: qcom: sm8350-hdk: Specify which LDO modes are allowed (Douglas Anderson)   
  - arm64: dts: qcom: sm8250-xperia-edo: Specify which LDO modes are allowed (Douglas Anderson)   
  - arm64: dts: qcom: sm8150-xperia-kumano: Specify which LDO modes are allowed (Douglas Anderson)   
  - arm64: dts: qcom: sa8155p-adp: Specify which LDO modes are allowed (Douglas Anderson)   
  - KVM: x86/pmu: Do not speculatively query Intel GP PMCs that don't exist yet (Like Xu)   
  - spi: intel: Use correct mask for flash and protected regions (Mika Westerberg)   
  - mtd: spi-nor: intel-spi: Disable write protection only if asked (Mika Westerberg)   
  - ASoC: codecs: jz4725b: Fix spelling mistake "Sourc" -> "Source", "Routee" -> "Route" (Colin Ian King)   
  - x86/cpu: Add several Intel server CPU model numbers (Tony Luck)   
  - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (Luiz Augusto von Dentz)   
  - btrfs: remove pointless and double ulist frees in error paths of qgroup tests (Filipe Manana)   
  - drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid (Nathan Huckleberry)   
  - i2c: i801: add lis3lv02d's I2C address for Vostro 5568 (Nam Cao)   
  - i2c: tegra: Allocate DMA memory for DMA engine (Thierry Reding)   
  - firmware: arm_scmi: Cleanup the core driver removal callback (Cristian Marussi)   
  - ACPI: x86: Add another system to quirk list for forcing StorageD3Enable (Mario Limonciello)   
  - NFSv4: Retry LOCK on OLD_STATEID during delegation return (Benjamin Coddington)   
  - btrfs: raid56: properly handle the error when unable to find the missing stripe (Qu Wenruo)   
  - RDMA/efa: Add EFA 0xefa2 PCI ID (Michael Margolin)   
  - ACPI: scan: Add LATT2021 to acpi_ignore_dep_ids[] (Hans de Goede)   
  - drm/amd/display: Remove wrong pipe control lock (Rodrigo Siqueira)   
  - ASoC: rt1308-sdw: add the default value of some registers (Shuming Fan)   
  - selftests/intel_pstate: fix build for ARCH=x86_64 (Ricardo Cañuelo)   
  - selftests/futex: fix build for clang (Ricardo Cañuelo)   
  - ASoC: Intel: sof_sdw: add quirk variant for LAPBC710 NUC15 (Pierre-Louis Bossart)   
  - ASoC: codecs: jz4725b: fix capture selector naming (Siarhei Volkau)   
  - ASoC: codecs: jz4725b: use right control for Capture Volume (Siarhei Volkau)   
  - ASoC: codecs: jz4725b: fix reported volume for Master ctl (Siarhei Volkau)   
  - ASoC: codecs: jz4725b: add missed Line In power control bit (Siarhei Volkau)   
  - spi: intel: Fix the offset to get the 64K erase opcode (Mauro Lima)   
  - ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK (Xiaolei Wang)   
  - ASoC: rt1019: Fix the TDM settings (Derek Fang)   
  - ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe (Zhang Qilong)   
  - ASoC: wm8997: Revert "ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe" (Zhang Qilong)   
  - ASoC: wm5110: Revert "ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe" (Zhang Qilong)   
  - ASoC: wm5102: Revert "ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe" (Zhang Qilong)   
  - LTS version: v5.15.79 (Jack Vogel)   
  - x86/cpu: Restore AMD's DE_CFG MSR after resume (Borislav Petkov)   
  - net: tun: call napi_schedule_prep() to ensure we own a napi (Eric Dumazet)   
  - drm/amdkfd: Migrate in CPU page fault use current mm (Philip Yang)   
  - marvell: octeontx2: build error: unknown type name 'u64' (Anders Roxell)   
  - dmaengine: at_hdmac: Check return code of dma_async_device_register (Tudor Ambarus)   
  - dmaengine: at_hdmac: Fix impossible condition (Tudor Ambarus)   
  - dmaengine: at_hdmac: Don't allow CPU to reorder channel enable (Tudor Ambarus)   
  - dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors (Tudor Ambarus)   
  - dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware (Tudor Ambarus)   
  - dmaengine: at_hdmac: Fix concurrency over the active list (Tudor Ambarus)   
  - dmaengine: at_hdmac: Free the memset buf without holding the chan lock (Tudor Ambarus)   
  - dmaengine: at_hdmac: Fix concurrency over descriptor (Tudor Ambarus)   
  - dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all() (Tudor Ambarus)   
  - dmaengine: at_hdmac: Protect atchan->status with the channel lock (Tudor Ambarus)   
  - dmaengine: at_hdmac: Do not call the complete callback on device_terminate_all (Tudor Ambarus)   
  - dmaengine: at_hdmac: Fix premature completion of desc in issue_pending (Tudor Ambarus)   
  - dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending (Tudor Ambarus)   
  - dmaengine: at_hdmac: Don't start transactions at tx_submit level (Tudor Ambarus)   
  - dmaengine: at_hdmac: Fix at_lli struct definition (Tudor Ambarus)   
  - cert host tools: Stop complaining about deprecated OpenSSL functions (Linus Torvalds)   
  - can: j1939: j1939_send_one(): fix missing CAN header initialization (Oliver Hartkopp)   
  - mm/shmem: use page_mapping() to detect page cache for uffd continue (Peter Xu)   
  - mm/memremap.c: map FS_DAX device memory as decrypted (Pankaj Gupta)   
  - mm/damon/dbgfs: check if rm_contexts input is for a real context (SeongJae Park)   
  - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (ZhangPeng)   
  - mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)   
  - btrfs: zoned: initialize device's zone info for seeding (Johannes Thumshirn)   
  - btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() (Zhang Xiaoxu)   
  - btrfs: fix match incorrectly in dev_args_match_device (Liu Shixin)   
  - wifi: ath11k: avoid deadlock during regulatory update in ath11k_regd_update() (Wen Gong)   
  - platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi (Jorge Lopez)   
  - drm/amdgpu: disable BACO on special BEIGE_GOBY card (Guchun Chen)   
  - drm/i915/dmabuf: fix sg_table handling in map_dma_buf (Matthew Auld)   
  - nilfs2: fix use-after-free bug of ns_writer on remount (Ryusuke Konishi)   
  - nilfs2: fix deadlock in nilfs_count_free_blocks() (Ryusuke Konishi)   
  - ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure (Shin'ichiro Kawasaki)   
  - vmlinux.lds.h: Fix placement of '.data..decrypted' section (Nathan Chancellor)   
  - ALSA: usb-audio: Add DSD support for Accuphase DAC-60 (Jussi Laako)   
  - ALSA: usb-audio: Add quirk entry for M-Audio Micro (Takashi Iwai)   
  - ALSA: usb-audio: Yet more regression for for the delayed card registration (Takashi Iwai)   
  - ALSA: hda/realtek: Add Positivo C6300 model quirk (Edson Juliano Drosdeck)   
  - ALSA: hda: fix potential memleak in 'add_widget_node' (Ye Bin)   
  - ALSA: hda/ca0132: add quirk for EVGA Z390 DARK (Xian Wang)   
  - ALSA: hda/hdmi - enable runtime pm for more AMD display audio (Evan Quan)   
  - mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA (Haibo Chen)   
  - mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)   
  - mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)   
  - mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)   
  - mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI (Brian Norris)   
  - MIPS: jump_label: Fix compat branch range check (Jiaxun Yang)   
  - arm64: efi: Fix handling of misaligned runtime regions and drop warning (Ard Biesheuvel)   
  - riscv: fix reserved memory setup (Conor Dooley)   
  - riscv: vdso: fix build with llvm (Jisheng Zhang)   
  - riscv: process: fix kernel info leakage (Jisheng Zhang)   
  - net: macvlan: fix memory leaks of macvlan_common_newlink (Chuang Wang)   
  - ethernet: tundra: free irq when alloc ring failed in tsi108_open() (Zhengchao Shao)   
  - net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open() (Zhengchao Shao)   
  - ethernet: s2io: disable napi when start nic failed in s2io_card_up() (Zhengchao Shao)   
  - net: atlantic: macsec: clear encryption keys from the stack (Antoine Tenart)   
  - net: phy: mscc: macsec: clear encryption keys when freeing a flow (Antoine Tenart)   
  - stmmac: dwmac-loongson: fix missing of_node_put() while module exiting (Yang Yingliang)   
  - stmmac: dwmac-loongson: fix missing pci_disable_device() in loongson_dwmac_probe() (Yang Yingliang)   
  - stmmac: dwmac-loongson: fix missing pci_disable_msi() while module exiting (Yang Yingliang)   
  - cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open() (Zhengchao Shao)   
  - mctp: Fix an error handling path in mctp_init() (Wei Yongjun)   
  - stmmac: intel: Update PCH PTP clock rate from 200MHz to 204.8MHz (Tan, Tee Min)   
  - stmmac: intel: Enable 2.5Gbps for Intel AlderLake-S (Wong Vee Khee)   
  - net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() (Zhengchao Shao)   
  - net: cpsw: disable napi in cpsw_ndo_open() (Zhengchao Shao)   
  - net/mlx5e: E-Switch, Fix comparing termination table instance (Roi Dayan)   
  - net/mlx5: Allow async trigger completion execution on single CPU systems (Roy Novich)   
  - net/mlx5: Bridge, verify LAG state when adding bond to bridge (Vlad Buslov)   
  - net: wwan: iosm: fix memory leak in ipc_pcie_read_bios_cfg (M Chetan Kumar)   
  - net: nixge: disable napi when enable interrupts failed in nixge_open() (Zhengchao Shao)   
  - net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init() (Zhengchao Shao)   
  - netfilter: Cleanup nft_net->module_list from nf_tables_exit_net() (Shigeru Yoshida)   
  - netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg() (Ziyang Xuan)   
  - perf tools: Add the include/perf/ directory to .gitignore (Donglin Peng)   
  - perf stat: Fix printing os->prefix in CSV metrics output (Athira Rajeev)   
  - drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() (Zhengchao Shao)   
  - net: lapbether: fix issue of invalid opcode in lapbeth_open() (Zhengchao Shao)   
  - dmaengine: ti: k3-udma-glue: fix memory leak when register device fail (Yang Yingliang)   
  - dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() (Christophe JAILLET)   
  - dmaengine: pxa_dma: use platform_get_irq_optional (Doug Brown)   
  - tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header (Xin Long)   
  - net: broadcom: Fix BCMGENET Kconfig (YueHaibing)   
  - net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable() (Rasmus Villemoes)   
  - can: af_can: fix NULL pointer dereference in can_rx_register() (Zhengchao Shao)   
  - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network (Alexander Potapenko)   
  - tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent (Lu Wei)   
  - drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() (Yuan Can)   
  - net: wwan: mhi: fix memory leak in mhi_mbim_dellink (HW He)   
  - net: wwan: iosm: fix memory leak in ipc_wwan_dellink (HW He)   
  - hamradio: fix issue of dev reference count leakage in bpq_device_event() (Zhengchao Shao)   
  - net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event() (Zhengchao Shao)   
  - KVM: s390: pv: don't allow userspace to set the clock under PV (Nico Boehr)   
  - phy: ralink: mt7621-pci: add sentinel to quirks table (John Thomson)   
  - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK (Gaosheng Cui)   
  - net: fman: Unregister ethernet device on removal (Sean Anderson)   
  - bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer (Alex Barba)   
  - bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() (Michael Chan)   
  - net: tun: Fix memory leaks of napi_get_frags (Wang Yufen)   
  - octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT] (Ratheesh Kannoth)   
  - octeontx2-pf: Use hardware register for CQE count (Geetha sowjanya)   
  - macsec: clear encryption keys from the stack after setting up offload (Sabrina Dubroca)   
  - macsec: fix detection of RXSCs when toggling offloading (Sabrina Dubroca)   
  - macsec: fix secy->n_rx_sc accounting (Sabrina Dubroca)   
  - macsec: delete new rxsc when offload fails (Sabrina Dubroca)   
  - net: gso: fix panic on frag_list with mixed head alloc types (Jiri Benc)   
  - bpf: Fix wrong reg type conversion in release_reference() (Youlin Li)   
  - bpf: Add helper macro bpf_for_each_reg_in_vstate (Kumar Kartikeya Dwivedi)   
  - bpf, sock_map: Move cancel_work_sync() out of sock lock (Cong Wang)   
  - bpf: Fix sockmap calling sleepable function in teardown path (John Fastabend)   
  - bpf, sockmap: Fix sk->sk_forward_alloc warn_on in sk_stream_kill_queues (Wang Yufen)   
  - HID: hyperv: fix possible memory leak in mousevsc_probe() (Yang Yingliang)   
  - bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE (Pu Lehui)   
  - wifi: mac80211: Set TWT Information Frame Disabled bit as 1 (Howard Hsu)   
  - bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues (Wang Yufen)   
  - bpf, verifier: Fix memory leak in array reallocation for stack state (Kees Cook)   
  - soundwire: qcom: check for outanding writes before doing a read (Srinivas Kandagatla)   
  - soundwire: qcom: reinit broadcast completion (Srinivas Kandagatla)   
  - wifi: cfg80211: fix memory leak in query_regdb_file() (Arend van Spriel)   
  - wifi: cfg80211: silence a sparse RCU warning (Johannes Berg)   
  - phy: stm32: fix an error code in probe (Dan Carpenter)   
  - hwspinlock: qcom: correct MMIO max register for newer SoCs (Krzysztof Kozlowski)   
  - drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram() (Yang Li)   
  - drm/amdkfd: handle CPU fault on COW mapping (Philip Yang)   
  - drm/amdkfd: avoid recursive lock in migrations back to RAM (Alex Sierra)   
  - fuse: fix readdir cache race (Miklos Szeredi)   
  - thunderbolt: Add DP OUT resource when DP tunnel is discovered (Sanjay R Mehta)   
  - thunderbolt: Tear down existing tunnels when resuming from hibernate (Mika Westerberg)   
  - LTS version: v5.15.78 (Jack Vogel)   
  - wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() (Dokyung Song)   
  - drm/i915/sdvo: Setup DDC fully before output init (Ville Syrjälä)   
  - drm/i915/sdvo: Filter out invalid outputs more sensibly (Ville Syrjälä)   
  - drm/rockchip: dsi: Force synchronous probe (Brian Norris)   
  - drm/rockchip: dsi: Clean up 'usage_mode' when failing to attach (Brian Norris)   
  - cifs: fix regression in very old smb1 mounts (Ronnie Sahlberg)   
  - ext4,f2fs: fix readahead of verity data (Matthew Wilcox (Oracle))   
  - tee: Fix tee_shm_register() for kernel TEE drivers (Sumit Garg)   
  - KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky)   
  - KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky)   
  - KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky)   
  - KVM: x86: emulator: em_sysexit should update ctxt->mode (Maxim Levitsky)   
  - KVM: arm64: Fix bad dereference on MTE-enabled systems (Ryan Roberts)   
  - KVM: VMX: fully disable SGX if SECONDARY_EXEC_ENCLS_EXITING unavailable (Emanuele Giuseppe Esposito)   
  - KVM: x86: Mask off reserved bits in CPUID.8000001FH (Jim Mattson)   
  - KVM: x86: Mask off reserved bits in CPUID.80000001H (Jim Mattson)   
  - KVM: x86: Mask off reserved bits in CPUID.80000008H (Jim Mattson)   
  - KVM: x86: Mask off reserved bits in CPUID.8000001AH (Jim Mattson)   
  - KVM: x86: Mask off reserved bits in CPUID.80000006H (Jim Mattson)   
  - x86/syscall: Include asm/ptrace.h in syscall_wrapper header (Jiri Olsa)   
  - ext4: fix BUG_ON() when directory entry has invalid rec_len (Luís Henriques)   
  - ext4: fix warning in 'ext4_da_release_space' (Ye Bin)   
  - parisc: Avoid printing the hardware path twice (Helge Deller)   
  - parisc: Export iosapic_serial_irq() symbol for serial port driver (Helge Deller)   
  - parisc: Make 8250_gsc driver dependend on CONFIG_PARISC (Helge Deller)   
  - perf/x86/intel: Fix pebs event constraints for SPR (Kan Liang)   
  - perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[] (Kan Liang)   
  - perf/x86/intel: Fix pebs event constraints for ICL (Kan Liang)   
  - arm64: entry: avoid kprobe recursion (Mark Rutland)   
  - efi: random: Use 'ACPI reclaim' memory for random seed (Ard Biesheuvel)   
  - efi: random: reduce seed size to 32 bytes (Ard Biesheuvel)   
  - fuse: add file_modified() to fallocate (Miklos Szeredi)   
  - capabilities: fix potential memleak on error path from vfs_getxattr_alloc() (Gaosheng Cui)   
  - tracing/histogram: Update document for KEYS_MAX size (Zheng Yejian)   
  - tools/nolibc/string: Fix memcmp() implementation (Rasmus Villemoes)   
  - ring-buffer: Check for NULL cpu_buffer in ring_buffer_wake_waiters() (Steven Rostedt (Google))   
  - kprobe: reverse kp->flags when arm_kprobe failed (Li Qiang)   
  - tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() (Shang XiaoJing)   
  - tcp/udp: Make early_demux back namespacified. (Kuniyuki Iwashima)   
  - ftrace: Fix use-after-free for dynamic ftrace_ops (Li Huafei)   
  - btrfs: fix type of parameter generation in btrfs_get_dentry (David Sterba)   
  - btrfs: fix tree mod log mishandling of reallocated nodes (Josef Bacik)   
  - btrfs: fix lost file sync on direct IO write with nowait and dsync iocb (Filipe Manana)   
  - fscrypt: fix keyring memory leak on mount failure (Eric Biggers)   
  - fscrypt: stop using keyrings subsystem for fscrypt_master_key (Eric Biggers)   
  - af_unix: Fix memory leaks of the whole sk due to OOB skb. (Kuniyuki Iwashima)   
  - block, bfq: protect 'bfqd->queued' by 'bfqd->lock' (Yu Kuai)   
  - Bluetooth: L2CAP: Fix attempting to access uninitialized memory (Luiz Augusto von Dentz)   [Orabug: 34951659] {CVE-2022-42895} 
  - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (Luiz Augusto von Dentz)   [Orabug: 34833304] {CVE-2022-42896} 
  - i2c: piix4: Fix adapter not be removed in piix4_remove() (Chen Zhongjin)   
  - arm64: dts: juno: Add thermal critical trip points (Cristian Marussi)   
  - firmware: arm_scmi: Fix devres allocation device in virtio transport (Cristian Marussi)   
  - firmware: arm_scmi: Make Rx chan_setup fail on memory errors (Cristian Marussi)   
  - firmware: arm_scmi: Suppress the driver's bind attributes (Cristian Marussi)   
  - block: Fix possible memory leak for rq_wb on add_disk failure (Chen Zhongjin)   
  - arm64: dts: ls208xa: specify clock frequencies for the MDIO controllers (Ioana Ciornei)   
  - arm64: dts: ls1088a: specify clock frequencies for the MDIO controllers (Ioana Ciornei)   
  - arm64: dts: lx2160a: specify clock frequencies for the MDIO controllers (Ioana Ciornei)   
  - arm64: dts: imx8: correct clock order (Peng Fan)   
  - ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset (Tim Harvey)   
  - clk: qcom: Update the force mem core bit for GPU clocks (Taniya Das)   
  - efi/tpm: Pass correct address to memblock_reserve (Jerry Snitselaar)   
  - i2c: xiic: Add platform module alias (Martin Tůma)   
  - drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case (Danijel Slivka)   
  - HID: saitek: add madcatz variant of MMO7 mouse device ID (Samuel Bailey)   
  - scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar)   
  - ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() (Ashish Kalra)   
  - media: v4l: subdev: Fail graciously when getting try data for NULL state (Sakari Ailus)   
  - media: meson: vdec: fix possible refcount leak in vdec_probe() (Hangyu Hua)   
  - media: dvb-frontends/drxk: initialize err to 0 (Hans Verkuil)   
  - media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE (Hans Verkuil)   
  - media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE (Hans Verkuil)   
  - media: rkisp1: Zero v4l2_subdev_format fields in when validating links (Laurent Pinchart)   
  - media: rkisp1: Use correct macro for gradient registers (Laurent Pinchart)   
  - media: rkisp1: Initialize color space on resizer sink and source pads (Laurent Pinchart)   
  - media: rkisp1: Don't pass the quantization to rkisp1_csm_config() (Laurent Pinchart)   
  - s390/cio: fix out-of-bounds access on cio_ignore free (Peter Oberparleiter)   
  - s390/cio: derive cdev information only for IO-subchannels (Vineeth Vijayan)   
  - s390/boot: add secure boot trailer (Peter Oberparleiter)   
  - s390/uaccess: add missing EX_TABLE entries to __clear_user() (Heiko Carstens)   
  - mtd: parsers: bcm47xxpart: Fix halfblock reads (Linus Walleij)   
  - mtd: parsers: bcm47xxpart: print correct offset on read error (Rafał Miłecki)   
  - fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards (Helge Deller)   
  - video/fbdev/stifb: Implement the stifb_fillrect() function (Helge Deller)   
  - drm/msm/hdmi: fix IRQ lifetime (Johan Hovold)   
  - drm/msm/hdmi: Remove spurious IRQF_ONESHOT flag (Daniel Thompson)   
  - vsock: fix possible infinite sleep in vsock_connectible_wait_data() (Dexuan Cui)   
  - ipv6: fix WARNING in ip6_route_net_exit_late() (Zhengchao Shao)   
  - net, neigh: Fix null-ptr-deref in neigh_table_clear() (Chen Zhongjin)   
  - net/smc: Fix possible leaked pernet namespace in smc_init() (Chen Zhongjin)   
  - stmmac: dwmac-loongson: fix invalid mdio_node (Liu Peibao)   
  - ibmvnic: Free rwi on reset success (Nick Child)   
  - net: mdio: fix undefined behavior in bit shift for __mdiobus_register (Gaosheng Cui)   
  - Bluetooth: L2CAP: Fix memory leak in vhci_write (Hawkins Jiawei) [Orabug: 34752256] {CVE-2022-3619}
  - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() (Zhengchao Shao) [Orabug: 34752611] {CVE-2022-3640}
  - Bluetooth: virtio_bt: Use skb_put to set length (Soenke Huster)   
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Maxim Mikityanskiy)   
  - netfilter: ipset: enforce documented limit to prevent allocating huge memory (Jozsef Kadlecsik)   
  - btrfs: fix ulist leaks in error paths of qgroup self tests (Filipe Manana)   
  - btrfs: fix inode list leak during backref walking at find_parent_nodes() (Filipe Manana)   
  - btrfs: fix inode list leak during backref walking at resolve_indirect_refs() (Filipe Manana)   
  - isdn: mISDN: netjet: fix wrong check of device registration (Yang Yingliang)   
  - mISDN: fix possible memory leak in mISDN_register_device() (Yang Yingliang)   
  - rose: Fix NULL pointer dereference in rose_send_frame() (Zhang Qilong)   
  - ipvs: fix WARNING in ip_vs_app_net_cleanup() (Zhengchao Shao)   
  - ipvs: fix WARNING in __ip_vs_cleanup_batch() (Zhengchao Shao)   
  - ipvs: use explicitly signed chars (Jason A. Donenfeld)   
  - netfilter: nf_tables: release flow rule object from commit path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: netlink notifier might race to release objects (Pablo Neira Ayuso)   
  - net: tun: fix bugs for oversize packet when napi frags enabled (Ziyang Xuan)   
  - net: sched: Fix use after free in red_enqueue() (Dan Carpenter)   
  - ata: pata_legacy: fix pdc20230_set_piomode() (Sergey Shtylyov)   
  - net: fec: fix improper use of NETDEV_TX_BUSY (Zhang Changzhong)   
  - nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() (Shang XiaoJing)   
  - nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() (Shang XiaoJing)   
  - nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() (Shang XiaoJing)   
  - nfc: fdp: Fix potential memory leak in fdp_nci_send() (Shang XiaoJing)   
  - net: dsa: fall back to default tagger if we can't load the one from DT (Vladimir Oltean)   
  - RDMA/qedr: clean up work queue on failure in qedr_alloc_resources() (Dan Carpenter)   
  - RDMA/core: Fix null-ptr-deref in ib_core_cleanup() (Chen Zhongjin)   
  - net: dsa: Fix possible memory leaks in dsa_loop_init() (Chen Zhongjin)   
  - nfs4: Fix kmemleak when allocate slot failed (Zhang Xiaoxu)   
  - NFSv4.2: Fixup CLONE dest file size for zero-length count (Benjamin Coddington)   
  - SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed (Zhang Xiaoxu)   
  - NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot (Trond Myklebust)   
  - NFSv4.1: Handle RECLAIM_COMPLETE trunking errors (Trond Myklebust)   
  - NFSv4: Fix a potential state reclaim deadlock (Trond Myklebust)   
  - RDMA/hns: Disable local invalidate operation (Yangyang Li)   
  - RDMA/hns: Use hr_reg_xxx() instead of remaining roce_set_xxx() (Wenpeng Liang)   
  - RDMA/hns: Remove magic number (Xinhao Liu)   
  - IB/hfi1: Correctly move list in sc_disable() (Dean Luick)   
  - KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER (Alexander Graf)   
  - KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() (Alexander Graf)   
  - KVM: x86: Protect the unused bits in MSR exiting flags (Aaron Lewis)   
  - HID: playstation: add initial DualSense Edge controller support (Roderick Colenbrander)   
  - mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page (Baolin Wang) [Orabug: 34752422] {CVE-2022-3623}
  - drm/amd/display: explicitly disable psr_feature_enable appropriately (Shirish S)   
  - KVM: x86: Treat #DBs from the emulator as fault-like (code and DR7.GD=1) (Sean Christopherson)   
  - serial: ar933x: Deassert Transmit Enable on ->rs485_config() (Lukas Wunner)   
  - scsi: lpfc: Rework MIB Rx Monitor debug info logic (James Smart)   
  - scsi: lpfc: Adjust CMF total bytes and rxmonitor (James Smart)   
  - scsi: lpfc: Adjust bytes received vales during cmf timer interval (James Smart)   
  - LTS version: v5.15.77 (Jack Vogel)   
  - tcp/udp: Fix memory leak in ipv6_renew_options(). (Kuniyuki Iwashima)   
  - serial: Deassert Transmit Enable on probe in driver-specific way (Lukas Wunner)   
  - serial: core: move RS485 configuration tasks from drivers into core (Lino Sanfilippo)   
  - can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive (Biju Das)   
  - can: rcar_canfd: fix channel specific IRQ handling for RZ/G2L (Biju Das)   
  - scsi: sd: Revert "scsi: sd: Remove a local variable" (Yu Kuai)   
  - arm64: Add AMPERE1 to the Spectre-BHB affected list (D Scott Phillips)   
  - net: enetc: survive memory pressure without crashing (Vladimir Oltean)   
  - kcm: do not sense pfmemalloc status in kcm_sendpage() (Eric Dumazet)   
  - net: do not sense pfmemalloc status in skb_append_pagefrags() (Eric Dumazet)   
  - net/mlx5: Fix crash during sync firmware reset (Suresh Devarakonda)   
  - net/mlx5: Update fw fatal reporter state on PCI handlers successful recover (Roy Novich)   
  - net/mlx5: Print more info on pci error handlers (Saeed Mahameed)   
  - net/mlx5: Fix possible use-after-free in async command interface (Tariq Toukan)   
  - net/mlx5e: Extend SKB room check to include PTP-SQ (Aya Levin)   
  - net/mlx5e: Do not increment ESN when updating IPsec ESN state (Hyong Youb Kim)   
  - netdevsim: remove dir in nsim_dev_debugfs_init() when creating ports dir failed (Zhengchao Shao)   
  - net: broadcom: bcm4908_enet: update TX stats after actual transmission (Rafał Miłecki)   
  - net: broadcom: bcm4908enet: remove redundant variable bytes (Colin Ian King)   
  - nh: fix scope used to find saddr when adding non gw nh (Nicolas Dichtel)   
  - net: bcmsysport: Indicate MAC is in charge of PHY PM (Florian Fainelli)   
  - net: ehea: fix possible memory leak in ehea_register_port() (Yang Yingliang)   
  - openvswitch: switch from WARN to pr_warn (Aaron Conole)   
  - ALSA: aoa: Fix I2S device accounting (Takashi Iwai)   
  - ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() (Yang Yingliang)   
  - net: ethernet: ave: Fix MAC to be in charge of PHY PM (Kunihiko Hayashi)   
  - net: fec: limit register access on i.MX6UL (Juergen Borleis)   
  - perf vendor events arm64: Fix incorrect Hisi hip08 L3 metrics (Shang XiaoJing)   
  - PM: domains: Fix handling of unavailable/disabled idle states (Sudeep Holla)   
  - net: ksz884x: fix missing pci_disable_device() on error in pcidev_init() (Yang Yingliang)   
  - i40e: Fix flow-type by setting GL_HASH_INSET registers (Slawomir Laba)   
  - i40e: Fix VF hang when reset is triggered on another VF (Sylwester Dziedziuch)   
  - i40e: Fix ethtool rx-flow-hash setting for X722 (Slawomir Laba)   
  - ipv6: ensure sane device mtu in tunnels (Eric Dumazet)   
  - perf vendor events power10: Fix hv-24x7 metric events (Kajol Jain)   
  - media: vivid: set num_in/outputs to 0 if not supported (Hans Verkuil)   
  - media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced' (Hans Verkuil)   
  - media: v4l2-dv-timings: add sanity checks for blanking values (Hans Verkuil)   
  - media: vivid: dev->bitmap_cap wasn't freed in all cases (Hans Verkuil)   
  - media: vivid: s_fbuf: add more sanity checks (Hans Verkuil)   
  - PM: hibernate: Allow hybrid sleep to work with s2idle (Mario Limonciello)   
  - can: mcp251x: mcp251x_can_probe(): add missing unregister_candev() in error path (Dongliang Mu)   
  - can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path (Dongliang Mu)   
  - drm/amdkfd: Fix memory leak in kfd_mem_dmamap_userptr() (Rafael Mendonca)   
  - net-memcg: avoid stalls when under memory pressure (Jakub Kicinski)   
  - tcp: fix indefinite deferral of RTO with SACK reneging (Neal Cardwell)   
  - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Lu Wei)   
  - tcp: minor optimization in tcp_add_backlog() (Eric Dumazet)   
  - net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY (Zhang Changzhong)   
  - net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed (Zhengchao Shao)   
  - kcm: annotate data-races around kcm->rx_wait (Eric Dumazet)   
  - kcm: annotate data-races around kcm->rx_psock (Eric Dumazet)   
  - atlantic: fix deadlock at aq_nic_stop (Íñigo Huguet)   
  - drm/i915/dp: Reset frl trained flag before restarting FRL training (Ankit Nautiyal)   
  - amd-xgbe: add the bit rate quirk for Molex cables (Raju Rangoju)   
  - amd-xgbe: fix the SFP compliance codes check for DAC cables (Raju Rangoju)   
  - x86/unwind/orc: Fix unreliable stack dump with gcov (Chen Zhongjin)   
  - nfc: virtual_ncidev: Fix memory leak in virtual_nci_send() (Shang XiaoJing)   
  - net: macb: Specify PHY PM management done by MAC (Sergiu Moga)   
  - net: hinic: fix the issue of double release MBOX callback of VF (Zhengchao Shao)   
  - net: hinic: fix the issue of CMDQ memory leaks (Zhengchao Shao)   
  - net: hinic: fix memory leak when reading function table (Zhengchao Shao)   
  - net: hinic: fix incorrect assignment issue in hinic_set_interrupt_cfg() (Zhengchao Shao)   
  - net: netsec: fix error handling in netsec_register_mdio() (Yang Yingliang)   
  - tipc: fix a null-ptr-deref in tipc_topsrv_accept (Xin Long)   
  - perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap() (Maxim Levitsky)   
  - ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() (Yang Yingliang)   
  - ASoC: qcom: lpass-cpu: Mark HDMI TX parity register as volatile (Srinivasa Rao Mandadapu)   
  - mtd: rawnand: intel: Add missing of_node_put() in ebu_nand_probe() (Yang Yingliang)   
  - arc: iounmap() arg is volatile (Randy Dunlap)   
  - sched/core: Fix comparison in sched_group_cookie_match() (Lin Shengwang)   
  - perf: Fix missing SIGTRAPs (Peter Zijlstra)   
  - ASoC: qcom: lpass-cpu: mark HDMI TX registers as volatile (Srinivasa Rao Mandadapu)   
  - KVM: selftests: Fix number of pages for memory slot in memslot_modification_stress_test (Gavin Shan)   
  - drm/msm: Fix return type of mdp4_lvds_connector_mode_valid (Nathan Huckleberry)   
  - media: atomisp: prevent integer overflow in sh_css_set_black_frame() (Dan Carpenter)   
  - media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation (Alexander Stein)   
  - net: ieee802154: fix error return code in dgram_bind() (Wei Yongjun)   
  - ethtool: eeprom: fix null-deref on genl_info in dump (Xin Long)   
  - mmc: block: Remove error check of hw_reset on reset (Christian Löhle)   
  - s390/pci: add missing EX_TABLE entries to __pcistg_mio_inuser()/__pcilg_mio_inuser() (Heiko Carstens)   
  - s390/futex: add missing EX_TABLE entry to __futex_atomic_op() (Heiko Carstens)   
  - perf auxtrace: Fix address filter symbol name match for modules (Adrian Hunter)   
  - ARC: mm: fix leakage of memory allocated for PTE (Pavel Kozlov)   
  - pinctrl: Ingenic: JZ4755 bug fixes (Siarhei Volkau)   
  - kernfs: fix use-after-free in __kernfs_remove (Christian A. Ehrhardt)   
  - counter: microchip-tcb-capture: Handle Signal1 read and Synapse (William Breathitt Gray)   
  - mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on 8bit bus (Sascha Hauer)   
  - mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake (Patrick Thompson)   
  - mmc: core: Fix kernel panic when remove non-standard SDIO card (Matthew Ma)   
  - mmc: sdhci_am654: 'select', not 'depends' REGMAP_MMIO (Brian Norris)   
  - coresight: cti: Fix hang in cti_disable_hw() (James Clark)   
  - drm/msm/dp: fix IRQ lifetime (Johan Hovold)   
  - drm/msm/hdmi: fix memory corruption with too many bridges (Johan Hovold)   
  - drm/msm/dsi: fix memory corruption with too many bridges (Johan Hovold)   
  - drm/amdgpu: disallow gfxoff until GC IP blocks complete s2idle resume (Prike Liang)   
  - scsi: qla2xxx: Use transport-defined speed mask for supported_speeds (Manish Rangankar)   
  - mac802154: Fix LQI recording (Miquel Raynal)   
  - exec: Copy oldsighand->action under spin-lock (Bernd Edlinger)   
  - fs/binfmt_elf: Fix memory leak in load_elf_binary() (Li Zetao)   
  - cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (Rafael J. Wysocki)   
  - cpufreq: intel_pstate: Read all MSRs on the target CPU (Rafael J. Wysocki)   
  - fbdev: smscufx: Fix several use-after-free bugs (Hyunwoo Kim)   
  - iio: adxl372: Fix unsafe buffer attributes (Matti Vaittinen)   
  - iio: temperature: ltc2983: allocate iio channels once (Cosmin Tanislav)   
  - iio: light: tsl2583: Fix module unloading (Shreeya Patel)   
  - tools: iio: iio_utils: fix digit calculation (Matti Vaittinen)   
  - xhci: Remove device endpoints from bandwidth list when freeing the device (Mathias Nyman)   
  - xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices (Mario Limonciello)   
  - xhci: Add quirk to reset host back to default state at shutdown (Mathias Nyman)   
  - mtd: rawnand: marvell: Use correct logic for nand-keep-config (Tony O'Brien)   
  - usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller (Jens Glathe)   
  - usb: bdc: change state when port disconnected (Justin Chen)   
  - usb: dwc3: gadget: Don't set IMI for no_interrupt (Thinh Nguyen)   
  - usb: dwc3: gadget: Stop processing more requests on IMI (Thinh Nguyen)   
  - usb: gadget: uvc: fix sg handling during video encode (Jeff Vanhoof)   
  - usb: gadget: uvc: fix sg handling in error case (Dan Vacura)   
  - USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM (Hannu Hartikainen)   
  - ALSA: rme9652: use explicitly signed char (Jason A. Donenfeld)   
  - ALSA: au88x0: use explicitly signed char (Jason A. Donenfeld)   
  - ALSA: usb-audio: Add quirks for M-Audio Fast Track C400/600 (Takashi Iwai)   
  - ALSA: Use del_timer_sync() before freeing timer (Steven Rostedt (Google))   
  - can: kvaser_usb: Fix possible completions during init_completion (Anssi Hannula)   
  - can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb() (Yang Yingliang)   
  - NFSv4: Add an fattr allocation to _nfs4_discover_trunking() (Scott Mayhew)   
  - NFSv4: Fix free of uninitialized nfs4_label on referral lookup. (Benjamin Coddington)   
  - rds: ib: Enable FC by default (Håkon Bugge)  [Orabug: 33930793]  
  - Adding a new sysfs entry point -- forcepower -- to /sys/bus/pci/slots/X. (James Puthukattukaran)  [Orabug: 34719459]  
  - nvme: paring quiesce/unquiesce (Ming Lei)  [Orabug: 34719459]  
  - nvme: prepare for pairing quiescing and unquiescing (Ming Lei)  [Orabug: 34719459]  
  - nvme: apply nvme API to quiesce/unquiesce admin queue (Ming Lei)  [Orabug: 34719459]  
  - nvme: add APIs for stopping/starting admin queue (Ming Lei)  [Orabug: 34719459]  
  - hugetlbfs: don't delete error page from pagecache (James Houghton)  [Orabug: 34772616]  
  - mm: shmem: don't truncate page if memory failure happens (Yang Shi)  [Orabug: 34772616]  
  - mm: hwpoison: handle non-anonymous THP correctly (Yang Shi)  [Orabug: 34772616]  
  - mm: hwpoison: refactor refcount check handling (Yang Shi)  [Orabug: 34772616]  
  - net/rds: Quiesce heartbeat worker in rds_conn_path_destroy() (Sharath Srinivasan)  [Orabug: 34815818]  
  - net/rds: Add support for tracing RDS heartbeats (Sharath Srinivasan)  [Orabug: 34815818]  
  - net/rds: Enable RDS heartbeat by default (Sharath Srinivasan)  [Orabug: 34815818]  
  - uek-rpm: core.list: add VirtualBox guest drivers to core package (Todd Vierling)  [Orabug: 34820755]  
  - tools/power turbostat: fix SPR PC6 limits (Artem Bityutskiy)  [Orabug: 34838996]  
  - tools/power turbostat: separate SPR from ICX (Artem Bityutskiy)  [Orabug: 34838996]  
  - rds: ib: Fix incorrect error handling during QP creation (Håkon Bugge)  [Orabug: 34857202]  
  - Revert "random: clear fast pool, crng, and batches in cpuhp bring up" (Somasundaram Krishnasamy)  [Orabug: 34850847]  
  - uek: kabi: update kABI files for new symbols (Saeed Mirzamohammadi)  [Orabug: 34850847]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-7.86.1.el8uek]
changelog:
  - LTS version: v5.15.86 (Jack Vogel)   
  - pwm: tegra: Fix 32 bit build (Steven Price)   
  - mfd: qcom_rpm: Use devm_of_platform_populate() to simplify code (Christophe JAILLET)   
  - extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered (Yassine Oudjana)   
  - media: dvbdev: fix refcnt bug (Lin Ma) [Orabug: 34983294] {CVE-2022-45886} {CVE-2022-45885} {CVE-2022-45919} {CVE-2022-45887} {CVE-2022-45884}
  - media: dvbdev: fix build warning due to comments (Lin Ma)   
  - net: stmmac: fix errno when create_singlethread_workqueue() fails (Gaosheng Cui)   
  - scsi: qla2xxx: Fix crash when I/O abort times out (Arun Easi)   
  - btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range (Filipe Manana)   
  - ovl: fix use inode directly in rcu-walk mode (Chen Zhongjin)   
  - fbdev: fbcon: release buffer when fbcon_do_set_font() failed (Tetsuo Handa)   
  - gcov: add support for checksum field (Rickard x Andersson)   
  - floppy: Fix memory leak in do_floppy_init() (Yuan Can)   
  - regulator: core: fix deadlock on regulator enable (Johan Hovold)   
  - iio: adc128s052: add proper .data members in adc128_of_match table (Rasmus Villemoes)   
  - iio: adc: ad_sigma_delta: do not use internal iio_dev lock (Nuno Sá)   
  - iio: fix memory leak in iio_device_register_eventset() (Zeng Heng)   
  - reiserfs: Add missing calls to reiserfs_security_free() (Roberto Sassu)   
  - security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 (Nathan Chancellor)   
  - 9p: set req refcount to zero to avoid uninitialized usage (Schspa Shi)   
  - loop: Fix the max_loop commandline argument treatment when it is set to 0 (Isaac J. Manjarres)   
  - HID: mcp2221: don't connect hidraw (Enrik Berkhan)   
  - HID: wacom: Ensure bootloader PID is usable in hidraw mode (Jason Gerecke)   
  - xhci: Prevent infinite loop in transaction errors recovery for streams (Mathias Nyman)   
  - usb: dwc3: core: defer probe on ulpi_read_id timeout (Ferry Toth)   
  - usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode (Sven Peter)   
  - arm64: dts: qcom: sm8250: fix USB-DP PHY registers (Johan Hovold)   
  - usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq (Chunfeng Yun)   
  - usb: cdnsp: fix lack of ZLP for ep0 (Pawel Laszczak)   
  - ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list (Jiao Zhou)   
  - ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB (Edward Pacman)   
  - ALSA: usb-audio: add the quirk for KT0206 device (wangdicheng)   
  - ima: Simplify ima_lsm_copy_rule (GUO Zihua)   
  - pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES (John Stultz)   
  - afs: Fix lost servers_outstanding count (David Howells)   
  - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Yang Jihong)   
  - pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion (John Stultz)   
  - LoadPin: Ignore the "contents" argument of the LSM hooks (Kees Cook)   
  - drm/i915/display: Don't disable DDI/Transcoder when setting phy test pattern (Khaled Almahallawy)   
  - ASoC: rt5670: Remove unbalanced pm_runtime_put() (Hans de Goede)   
  - ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() (Wang Jingjin)   
  - ASoC: wm8994: Fix potential deadlock (Marek Szyprowski)   
  - ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe() (Wang Yufen)   
  - ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() (Wang Jingjin)   
  - ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() (Wang Yufen)   
  - ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() (Wang Yufen)   
  - ASoC: Intel: Skylake: Fix driver hang during shutdown (Cezary Rojewski)   
  - ALSA: hda: add snd_hdac_stop_streams() helper (Pierre-Louis Bossart)   
  - ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c (Pierre-Louis Bossart)   
  - hwmon: (jc42) Fix missing unlock on error in jc42_write() (Yang Yingliang)   
  - KVM: selftests: Fix build regression by using accessor function (Tyler Hicks)   
  - tools/include: Add _RET_IP_ and math definitions to kernel.h (Karolina Drobnik)   
  - orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() (Zhang Xiaoxu)   
  - orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() (Zhang Xiaoxu)   
  - drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() (Nathan Chancellor)   
  - drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() (Nathan Chancellor)   
  - hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (Hawkins Jiawei)   
  - scsi: elx: libefc: Fix second parameter type in state callbacks (Nathan Chancellor)   
  - scsi: ufs: Reduce the START STOP UNIT timeout (Bart Van Assche)   
  - scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs (Justin Tee)   
  - crypto: hisilicon/hpre - fix resource leak in remove process (Zhiqi Song)   
  - clk: st: Fix memory leak in st_of_quadfs_setup() (Xiu Jianfeng)   
  - media: si470x: Fix use-after-free in si470x_int_in_callback() (Shigeru Yoshida)   
  - mmc: renesas_sdhi: better reset from HS400 mode (Wolfram Sang)   
  - mmc: f-sdh30: Add quirks for broken timeout clock capability (Kunihiko Hayashi)   
  - wifi: mt76: do not run mt76u_status_worker if the device is not running (Lorenzo Bianconi)   
  - regulator: core: fix use_count leakage when handling boot-on (Rui Zhang)   
  - libbpf: Avoid enum forward-declarations in public API in C++ mode (Andrii Nakryiko)   
  - drm/amd/display: Use the largest vready_offset in pipe group (Wesley Chalmers)   
  - blk-mq: fix possible memleak when register 'hctx' failed (Ye Bin)   
  - media: dvb-usb: fix memory leak in dvb_usb_adapter_init() (Mazin Al Haddad)   
  - media: dvbdev: adopts refcnt to avoid UAF (Lin Ma) [Orabug: 34983294] {CVE-2022-45885} {CVE-2022-45884} {CVE-2022-45886} {CVE-2022-45887} {CVE-2022-45919}
  - media: dvb-frontends: fix leak of memory fw (Yan Lei)   
  - ethtool: avoiding integer overflow in ethtool_phys_id() (Maxim Korotkov)   
  - bpf: Prevent decl_tag from being referenced in func_proto arg (Stanislav Fomichev)   
  - ppp: associate skb with a device at tx (Stanislav Fomichev)   
  - mrp: introduce active flags to prevent UAF when applicant uninit (Schspa Shi)   
  - ipv6/sit: use DEV_STATS_INC() to avoid data-races (Eric Dumazet)   
  - net: add atomic_long_t to net_device_stats fields (Eric Dumazet)   
  - drm/amd/display: fix array index out of bound error in bios parser (Aurabindo Pillai)   
  - md/raid1: stop mdx_raid1 thread when raid1 array run failed (Jiang Li)   
  - drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (Li Zhong)   
  - drm/mediatek: Fix return type of mtk_hdmi_bridge_mode_valid() (Nathan Chancellor)   
  - drm/sti: Use drm_mode_copy() (Ville Syrjälä)   
  - drm/rockchip: Use drm_mode_copy() (Ville Syrjälä)   
  - drm/msm: Use drm_mode_copy() (Ville Syrjälä)   
  - s390/lcs: Fix return type of lcs_start_xmit() (Nathan Chancellor)   
  - s390/netiucv: Fix return type of netiucv_tx() (Nathan Chancellor)   
  - s390/ctcm: Fix return type of ctc{mp,}m_tx() (Nathan Chancellor)   
  - drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback (Nathan Chancellor)   
  - drm/amdgpu: Fix type of second parameter in trans_msg() callback (Nathan Chancellor)   
  - igb: Do not free q_vector unless new one was allocated (Kees Cook)   
  - wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() (Minsuk Kang)   
  - hamradio: baycom_epp: Fix return type of baycom_send_packet() (Nathan Chancellor)   
  - net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() (Nathan Chancellor)   
  - bpf: make sure skb->len != 0 when redirecting to a tunneling device (Stanislav Fomichev)   
  - qed (gcc13): use u16 for fid to be big enough (Jiri Slaby (SUSE))   
  - Revert "drm/amd/display: Limit max DSC target bpp for specific monitors" (Hamza Mahfooz)   
  - drm/amd/display: prevent memory leak (gehao)   
  - ipmi: fix memleak when unload ipmi driver (Zhang Yuchen)   
  - ASoC: codecs: rt298: Add quirk for KBL-R RVP platform (Amadeusz Sławiński)   
  - wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out (Shigeru Yoshida)   
  - wifi: ath9k: verify the expected usb_endpoints are present (Fedor Pchelkin)   
  - brcmfmac: return error when getting invalid max_flowrings from dongle (Wright Feng)   
  - media: imx-jpeg: Disable useless interrupt to avoid kernel panic (Ming Qian)   
  - drm/etnaviv: add missing quirks for GC300 (Doug Brown)   
  - hfs: fix OOB Read in __hfs_brec_find (ZhangPeng)   
  - acct: fix potential integer overflow in encode_comp_t() (Zheng Yejian)   
  - nilfs2: fix shift-out-of-bounds due to too large exponent of block size (Ryusuke Konishi)   
  - nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() (Ryusuke Konishi)   
  - ACPICA: Fix error code path in acpi_ds_call_control_method() (Rafael J. Wysocki)   
  - fs: jfs: fix shift-out-of-bounds in dbDiscardAG (Hoi Pok Wu)   
  - jfs: Fix fortify moan in symlink (Dr. David Alan Gilbert)   
  - udf: Avoid double brelse() in udf_rename() (Shigeru Yoshida)   
  - fs: jfs: fix shift-out-of-bounds in dbAllocAG (Dongliang Mu)   
  - binfmt_misc: fix shift-out-of-bounds in check_special_flags (Liu Shixin)   
  - x86/hyperv: Remove unregister syscore call from Hyper-V cleanup (Gaurav Kohli)   
  - video: hyperv_fb: Avoid taking busy spinlock on panic path (Guilherme G. Piccoli)   
  - arm64: make is_ttbrX_addr() noinstr-safe (Mark Rutland)   
  - rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() (Zqiang)   
  - HID: amd_sfh: Add missing check for dma_alloc_coherent (Jiasheng Jiang)   
  - net: stream: purge sk_error_queue in sk_stream_kill_queues() (Eric Dumazet)   
  - myri10ge: Fix an error handling path in myri10ge_probe() (Christophe JAILLET)   
  - rxrpc: Fix missing unlock in rxrpc_do_sendmsg() (David Howells)   
  - net_sched: reject TCF_EM_SIMPLE case for complex ematch module (Cong Wang)   
  - mailbox: zynq-ipi: fix error handling while device_register() fails (Yang Yingliang)   
  - mailbox: arm_mhuv2: Fix return value check in mhuv2_probe() (Yang Yingliang)   
  - mailbox: mpfs: read the system controller's status (Conor Dooley)   
  - skbuff: Account for tail adjustment during pull operations (Subash Abhinov Kasiviswanathan)   
  - arm64: dts: mt8183: Fix Mali GPU clock (Chen-Yu Tsai)   
  - soc: mediatek: pm-domains: Fix the power glitch issue (Chun-Jie Chen)   
  - openvswitch: Fix flow lookup to use unmasked key (Eelco Chaudron)   
  - selftests: devlink: fix the fd redirect in dummy_reporter_test (Jakub Kicinski)   
  - rtc: mxc_v2: Add missing clk_disable_unprepare() (GUO Zihua)   
  - igc: Set Qbv start_time and end_time to end_time if not being configured in GCL (Tan Tee Min)   
  - igc: Lift TAPRIO schedule restriction (Kurt Kanzenbach)   
  - igc: recalculate Qbv end_time by considering cycle time (Tan Tee Min)   
  - igc: allow BaseTime 0 enrollment for Qbv (Tan Tee Min)   
  - igc: Add checking for basetime less than zero (Muhammad Husaini Zulkifli)   
  - igc: Use strict cycles for Qbv scheduling (Vinicius Costa Gomes)   
  - igc: Enhance Qbv scheduling by using first flag bit (Vinicius Costa Gomes)   
  - r6040: Fix kmemleak in probe and remove (Li Zetao)   
  - unix: Fix race in SOCK_SEQPACKET's unix_dgram_sendmsg() (Kirill Tkhai)   
  - nfc: pn533: Clear nfc_target before being used (Minsuk Kang)   
  - net: enetc: avoid buffer leaks on xdp_do_redirect() failure (Vladimir Oltean)   
  - selftests/bpf: Add test for unstable CT lookup API (Kumar Kartikeya Dwivedi)   
  - block, bfq: fix possible uaf for 'bfqq->bic' (Yu Kuai)   
  - mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net: macsec: fix net device access prior to holding a lock (Emeel Hakim)   
  - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (Dan Aloni)   
  - rtc: pcf85063: fix pcf85063_clkout_control (Alexandre Belloni)   
  - rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() (Gaosheng Cui)   
  - rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() (Gaosheng Cui)   
  - netfilter: flowtable: really fix NAT IPv6 offload (Qingfang DENG)   
  - mfd: pm8008: Fix return value check in pm8008_probe() (Yang Yingliang)   
  - mfd: pm8008: Remove driver data structure pm8008_data (Lee Jones)   
  - mfd: qcom_rpm: Fix an error handling path in qcom_rpm_probe() (Christophe JAILLET)   
  - mfd: bd957x: Fix Kconfig dependency on REGMAP_IRQ (Matti Vaittinen)   
  - powerpc/pseries/eeh: use correct API for error log size (Nathan Lynch)   
  - powerpc/eeh: Drop redundant spinlock initialization (Haowen Bai)   
  - remoteproc: qcom: q6v5: Fix missing clk_disable_unprepare() in q6v5_wcss_qcs404_power_on() (Shang XiaoJing)   
  - remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() (Yuan Can)   
  - remoteproc: qcom_q6v5_pas: detach power domains on remove (Luca Weiss)   
  - remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove (Luca Weiss)   
  - remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() (Shang XiaoJing)   
  - remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() (Gaosheng Cui)   
  - pwm: mediatek: always use bus clock for PWM on MT7622 (Daniel Golle)   
  - pwm: mtk-disp: Fix the parameters calculated by the enabled flag of disp_pwm (xinlei lee)   
  - pwm: sifive: Call pwm_sifive_update_clock() while mutex is held (Uwe Kleine-König)   
  - iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (Jason Gunthorpe)   
  - selftests/powerpc: Fix resource leaks (Miaoqian Lin)   
  - powerpc/hv-gpci: Fix hv_gpci event list (Kajol Jain)   
  - powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() (Yang Yingliang)   
  - powerpc/perf: callchain validate kernel stack pointer bounds (Nicholas Piggin)   
  - powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() (Yang Yingliang)   
  - powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds (Gustavo A. R. Silva)   
  - cxl: Fix refcount leak in cxl_calc_capp_routing (Miaoqian Lin)   
  - powerpc/52xx: Fix a resource leak in an error handling path (Christophe JAILLET)   
  - macintosh/macio-adb: check the return value of ioremap() (Xie Shaowen)   
  - macintosh: fix possible memory leak in macio_add_one_device() (Yang Yingliang)   
  - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (Yuan Can)   
  - iommu/amd: Fix pci device refcount leak in ppr_notifier() (Yang Yingliang)   
  - rtc: pcf85063: Fix reading alarm (Alexander Stein)   
  - rtc: snvs: Allow a time difference on clock register read (Stefan Eichenberger)   
  - rtc: cmos: Disable ACPI RTC event on removal (Rafael J. Wysocki)   
  - rtc: cmos: Rename ACPI-related functions (Rafael J. Wysocki)   
  - rtc: cmos: Eliminate forward declarations of some functions (Rafael J. Wysocki)   
  - rtc: cmos: Call rtc_wake_setup() from cmos_do_probe() (Rafael J. Wysocki)   
  - rtc: cmos: Call cmos_wake_setup() from cmos_do_probe() (Rafael J. Wysocki)   
  - rtc: cmos: fix build on non-ACPI platforms (Alexandre Belloni)   
  - rtc: cmos: Fix wake alarm breakage (Rafael J. Wysocki)   
  - rtc: cmos: Fix event handler registration ordering issue (Rafael J. Wysocki)   
  - rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0 (Rafael J. Wysocki)   
  - dmaengine: idxd: Fix crc_val field for completion record (Fenghua Yu)   
  - fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs (Abdun Nihaal)   
  - pwm: tegra: Improve required rate calculation (Jon Hunter)   
  - include/uapi/linux/swab: Fix potentially missing __always_inline (Matt Redfearn)   
  - phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices (Al Cooper)   
  - iommu/rockchip: fix permission bits in page table entries v2 (Michael Riesch)   
  - iommu/sun50i: Fix flush size (Jernej Skrabec)   
  - iommu/sun50i: Fix R/W permission check (Jernej Skrabec)   
  - iommu/sun50i: Consider all fault sources for reset (Jernej Skrabec)   
  - iommu/sun50i: Fix reset release (Jernej Skrabec)   
  - fs/ntfs3: Harden against integer overflows (Dan Carpenter)   
  - overflow: Implement size_t saturating arithmetic helpers (Kees Cook)   
  - fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst() (Shigeru Yoshida)   
  - RDMA/siw: Fix pointer cast warning (Arnd Bergmann)   
  - perf stat: Do not delay the workload with --delay (Namhyung Kim)   
  - perf stat: Refactor __run_perf_stat() common code (Adrián Herrera Arcila)   
  - power: supply: fix null pointer dereferencing in power_supply_get_battery_info (ruanjinjie)   
  - power: supply: ab8500: Fix error handling in ab8500_charger_init() (Yuan Can)   
  - HSI: omap_ssi_core: Fix error handling in ssi_init() (Yuan Can)   
  - power: supply: z2_battery: Fix possible memleak in z2_batt_probe() (Zhang Qilong)   
  - perf symbol: correction while adjusting symbol (Ajay Kaher)   
  - perf trace: Handle failure when trace point folder is missed (Leo Yan)   
  - perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number (Leo Yan)   
  - perf trace: Return error if a system call doesn't exist (Leo Yan)   
  - power: supply: fix residue sysfs file in error handle route of __power_supply_register() (Zeng Heng)   
  - HSI: omap_ssi_core: fix possible memory leak in ssi_probe() (Yang Yingliang)   
  - HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() (Yang Yingliang)   
  - fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() (Christophe JAILLET)   
  - fbdev: uvesafb: don't build on UML (Randy Dunlap)   
  - fbdev: geode: don't build on UML (Randy Dunlap)   
  - fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() (Gaosheng Cui)   
  - fbdev: vermilion: decrease reference count in error path (Xiongfeng Wang)   
  - fbdev: via: Fix error in via_core_init() (Shang XiaoJing)   
  - fbdev: pm2fb: fix missing pci_disable_device() (Yang Yingliang)   
  - fbdev: ssd1307fb: Drop optional dependency (Andy Shevchenko)   
  - thermal/drivers/qcom/lmh: Fix irq handler return value (Bjorn Andersson)   
  - thermal/drivers/qcom/temp-alarm: Fix inaccurate warning for gen2 (Luca Weiss)   
  - thermal/drivers/imx8mm_thermal: Validate temperature range (Marcus Folkesson)   
  - samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() (Shang XiaoJing)   
  - ksmbd: Fix resource leak in ksmbd_session_rpc_open() (Xiu Jianfeng)   
  - tracing/hist: Fix issue of losting command info in error_log (Zheng Yejian)   
  - usb: storage: Add check for kcalloc (Jiasheng Jiang)   
  - i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Zheyu Ma) [Orabug: 34555526] {CVE-2022-2873}
  - i2c: mux: reg: check return value after calling platform_get_resource() (Yang Yingliang)   
  - gpiolib: protect the GPIO device against being dropped while in use by user-space (Bartosz Golaszewski)   
  - gpiolib: make struct comments into real kernel docs (Bartosz Golaszewski)   
  - gpiolib: cdev: fix NULL-pointer dereferences (Bartosz Golaszewski)   
  - gpiolib: Get rid of redundant 'else' (Andy Shevchenko)   
  - vme: Fix error not catched in fake_init() (Chen Zhongjin)   
  - staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() (YueHaibing)   
  - staging: rtl8192u: Fix use after free in ieee80211_rx() (Dan Carpenter)   
  - i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe (Hui Tang)   
  - chardev: fix error handling in cdev_device_add() (Yang Yingliang)   
  - mcb: mcb-parse: fix error handing in chameleon_parse_gdd() (Yang Yingliang)   
  - drivers: mcb: fix resource leak in mcb_probe() (Zhengchao Shao)   
  - usb: gadget: f_hid: fix refcount leak on error path (John Keeping)   
  - usb: gadget: f_hid: fix f_hidg lifetime vs cdev (John Keeping)   
  - usb: roles: fix of node refcount leak in usb_role_switch_is_parent() (Yang Yingliang)   
  - coresight: trbe: remove cpuhp instance node before remove cpuhp state (Yang Shen)   
  - counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update (Fabrice Gasnier)   
  - iio: adis: add '__adis_enable_irq()' implementation (Ramona Bolboaca)   
  - iio:imu:adis: Move exports into IIO_ADISLIB namespace (Jonathan Cameron)   
  - iio: adis: stylistic changes (Nuno Sá)   
  - iio: adis: handle devices that cannot unmask the drdy pin (Nuno Sá)   
  - iio: temperature: ltc2983: make bulk write buffer DMA-safe (Cosmin Tanislav)   
  - cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() (Yang Yingliang)   
  - cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() (Yang Yingliang)   
  - firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() (Yang Yingliang)   
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (Zheng Wang)   
  - misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() (ruanjinjie)   
  - ocxl: fix pci device refcount leak when calling get_function_0() (Yang Yingliang)   
  - misc: ocxl: fix possible name leak in ocxl_file_register_afu() (Yang Yingliang)   
  - test_firmware: fix memory leak in test_firmware_init() (Zhengchao Shao)   
  - serial: sunsab: Fix error handling in sunsab_init() (Yuan Can)   
  - serial: altera_uart: fix locking in polling mode (Gabriel Somlo)   
  - tty: serial: altera_uart_{r,t}x_chars() need only uart_port (Jiri Slaby)   
  - tty: serial: clean up stop-tx part in altera_uart_tx_chars() (Jiri Slaby)   
  - serial: pch: Fix PCI device refcount leak in pch_request_dma() (Xiongfeng Wang)   
  - serial: stm32: move dma_request_chan() before clk_prepare_enable() (Valentin Caron)   
  - serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. (delisun)   
  - serial: amba-pl011: avoid SBSA UART accessing DMACR register (Jiamei Xie)   
  - extcon: usbc-tusb320: Update state on probe even if no IRQ pending (Marek Vasut)   
  - extcon: usbc-tusb320: Add USB TYPE-C support (Marek Vasut)   
  - extcon: usbc-tusb320: Factor out extcon into dedicated functions (Marek Vasut)   
  - usb: typec: Factor out non-PD fwnode properties (Samuel Holland)   
  - extcon: usbc-tusb320: Add support for TUSB320L (Yassine Oudjana)   
  - extcon: usbc-tusb320: Add support for mode setting and reset (Yassine Oudjana)   
  - usb: typec: tipd: Fix spurious fwnode_handle_put in error path (Sven Peter)   
  - usb: typec: tipd: Cleanup resources if devm_tps6598_psy_register fails (Sven Peter)   
  - usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() (Yang Yingliang)   
  - usb: typec: Check for ops->exit instead of ops->enter in altmode_exit (Sven Peter)   
  - staging: vme_user: Fix possible UAF in tsi148_dma_list_add (Gaosheng Cui)   
  - usb: fotg210-udc: Fix ages old endianness issues (Linus Walleij)   
  - uio: uio_dmem_genirq: Fix deadlock between irq config and handling (Rafael Mendonca)   
  - uio: uio_dmem_genirq: Fix missing unlock in irq configuration (Rafael Mendonca)   
  - vfio: platform: Do not pass return buffer to ACPI _RST method (Rafael Mendonca)   
  - class: fix possible memory leak in __class_register() (Yang Yingliang)   
  - serial: 8250_bcm7271: Fix error handling in brcmuart_init() (Yuan Can)   
  - serial: tegra: Read DMA status before terminating (Kartik)   
  - drivers: dio: fix possible memory leak in dio_init() (Yang Yingliang)   
  - RISC-V: Align the shadow stack (Palmer Dabbelt)   
  - IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces (Dragos Tatulea)   
  - hwrng: geode - Fix PCI device refcount leak (Xiongfeng Wang)   
  - hwrng: amd - Fix PCI device refcount leak (Xiongfeng Wang)   
  - crypto: img-hash - Fix variable dereferenced before check 'hdev->req' (Gaosheng Cui)   
  - RDMA/hns: Fix error code of CMD (Chengchang Tang)   
  - RDMA/hns: Fix page size cap from firmware (Chengchang Tang)   
  - RDMA/hns: Fix PBL page MTR find (Chengchang Tang)   
  - RDMA/hns: Fix AH attr queried by query_qp (Chengchang Tang)   
  - orangefs: Fix sysfs not cleanup when dev init failed (Zhang Xiaoxu)   
  - PCI: mt7621: Add sentinel to quirks table (John Thomson)   
  - PCI: mt7621: Rename mt7621_pci_ to mt7621_pcie_ (Bjorn Helgaas)   
  - RDMA/srp: Fix error return code in srp_parse_options() (Wang Yufen)   
  - RDMA/hfi1: Fix error return code in parse_platform_config() (Wang Yufen)   
  - riscv/mm: add arch hook arch_clear_hugepage_flags (Tong Tiangen)   
  - crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() (Shang XiaoJing)   
  - crypto: amlogic - Remove kcalloc without check (Christophe JAILLET)   
  - RDMA/nldev: Fix failure to send large messages (Mark Zhang)   
  - f2fs: avoid victim selection from previous victim section (Yonggil Song)   
  - RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() (Yuan Can)   
  - scsi: snic: Fix possible UAF in snic_tgt_create() (Gaosheng Cui)   
  - scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails (Chen Zhongjin)   
  - scsi: ipr: Fix WARNING in ipr_init() (Shang XiaoJing)   
  - scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper() (Yang Yingliang)   
  - scsi: fcoe: Fix possible name leak when device_register() fails (Yang Yingliang)   
  - scsi: scsi_debug: Fix a warning in resp_report_zones() (Harshit Mogalapalli)   
  - scsi: scsi_debug: Fix a warning in resp_verify() (Harshit Mogalapalli)   
  - scsi: efct: Fix possible memleak in efct_device_init() (Chen Zhongjin)   
  - scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() (Yang Yingliang)   
  - scsi: hpsa: Fix error handling in hpsa_add_sas_host() (Yang Yingliang)   
  - scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() (Yang Yingliang)   
  - padata: Fix list iterator in padata_do_serial() (Daniel Jordan)   
  - padata: Always leave BHs disabled when running ->parallel() (Daniel Jordan)   
  - crypto: tcrypt - Fix multibuffer skcipher speed test mem leak (Zhang Yiqun)   
  - scsi: hpsa: Fix possible memory leak in hpsa_init_one() (Yuan Can)   
  - dt-bindings: visconti-pcie: Fix interrupts array max constraints (Serge Semin)   
  - dt-bindings: imx6q-pcie: Fix clock names for imx6sx and imx8mq (Serge Semin)   
  - RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed (Zhang Xiaoxu)   
  - RDMA/hns: fix memory leak in hns_roce_alloc_mr() (Zhengchao Shao)   
  - crypto: ccree - Make cc_debugfs_global_fini() available for module init function (Uwe Kleine-König)   
  - RDMA/hfi: Decrease PCI device reference count in error path (Xiongfeng Wang)   
  - PCI: Check for alloc failure in pci_request_irq() (Zeng Heng)   
  - RDMA/hns: Fix ext_sge num error when post send (Luoyouming)   
  - RDMA/hns: Repacing 'dseg_len' by macros in fill_ext_sge_inl_data() (Luoyouming)   
  - crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() (Xiongfeng Wang)   
  - crypto: cryptd - Use request context instead of stack for sub-request (Herbert Xu)   
  - crypto: ccree - Remove debugfs when platform_driver_register failed (Gaosheng Cui)   
  - scsi: scsi_debug: Fix a warning in resp_write_scat() (Harshit Mogalapalli)   
  - RDMA/siw: Set defined status for work completion with undefined status (Bernard Metzler)   
  - RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port (Mark Zhang)   
  - RDMA/core: Make sure "ib_port" is valid when access sysfs node (Mark Zhang)   
  - RDMA/restrack: Release MR restrack when delete (Mark Zhang)   
  - PCI: vmd: Disable MSI remapping after suspend (Nirmal Patel)   
  - IB/mad: Don't call to function that might sleep while in atomic context (Leonid Ravich)   
  - RDMA/siw: Fix immediate work request flush to completion queue (Bernard Metzler)   
  - scsi: qla2xxx: Fix set-but-not-used variable warnings (Bart Van Assche)   
  - RDMA/irdma: Report the correct link speed (Shiraz Saleem)   
  - f2fs: fix to destroy sbi->post_read_wq in error path of f2fs_fill_super() (Chao Yu)   
  - f2fs: fix normal discard process (Dongdong Zhang)   
  - f2fs: fix to invalidate dcc->f2fs_issue_discard in error path (Chao Yu)   
  - apparmor: Fix memleak in alloc_ns() (Xiu Jianfeng)   
  - crypto: rockchip - rework by using crypto_engine (Corentin Labbe)   
  - crypto: rockchip - remove non-aligned handling (Corentin Labbe)   
  - crypto: rockchip - better handle cipher key (Corentin Labbe)   
  - crypto: rockchip - add fallback for ahash (Corentin Labbe)   
  - crypto: rockchip - add fallback for cipher (Corentin Labbe)   
  - crypto: rockchip - do not store mode globally (Corentin Labbe)   
  - crypto: rockchip - do not do custom power management (Corentin Labbe)   
  - f2fs: Fix the race condition of resize flag between resizefs (Zhang Qilong)   
  - PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled (Kunihiko Hayashi)   
  - RDMA/core: Fix order of nldev_exit call (Leon Romanovsky)   
  - PCI: dwc: Fix n_fts[] array overrun (Vidya Sagar)   
  - apparmor: Use pointer to struct aa_label for lbs_cred (Xiu Jianfeng)   
  - scsi: core: Fix a race between scsi_done() and scsi_timeout() (Bart Van Assche)   
  - crypto: nitrox - avoid double free on error path in nitrox_sriov_init() (Natalia Petrova)   
  - crypto: sun8i-ss - use dma_addr instead u32 (Corentin Labbe)   
  - crypto: hisilicon/qm - fix missing destroy qp_idr (Weili Qian)   
  - apparmor: Fix abi check to include v8 abi (John Johansen)   
  - apparmor: fix lockdep warning when removing a namespace (John Johansen)   
  - apparmor: fix a memleak in multi_transaction_new() (Gaosheng Cui)   
  - net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path (Vladimir Oltean)   
  - i40e: Fix the inability to attach XDP program on downed interface (Bartosz Staszewski)   
  - stmmac: fix potential division by 0 (Piergiorgio Beruto)   
  - Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: btintel: Fix missing free skb in btintel_setup_combined() (Wang ShaoBo)   
  - Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS (Inga Stotland)   
  - sctp: sysctl: make extra pointers netns aware (Firo Yang)   
  - ntb_netdev: Use dev_kfree_skb_any() in interrupt context (Eric Pilmore)   
  - net: lan9303: Fix read error execution path (Jerry Ray)   
  - can: tcan4x5x: Fix use of register error status mask (Markus Schneider-Pargmann)   
  - can: m_can: Call the RAM init directly from m_can_chip_config (Vivek Yadav)   
  - can: tcan4x5x: Remove invalid write in clear_interrupts (Markus Schneider-Pargmann)   
  - net: amd-xgbe: Check only the minimum speed for active/passive cables (Tom Lendacky)   
  - net: amd-xgbe: Fix logic around active and passive cables (Tom Lendacky)   
  - af_unix: call proto_unregister() in the error path in af_unix_init() (Yang Yingliang)   
  - net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net/tunnel: wait until all sk_user_data reader finish before releasing the sock (Hangbin Liu)   
  - net: farsync: Fix kmemleak when rmmods farsync (Li Zetao)   
  - ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() (ruanjinjie)   
  - drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() (Yuan Can)   
  - net: stmmac: fix possible memory leak in stmmac_dvr_probe() (Gaosheng Cui)   
  - net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() (Zhang Changzhong)   
  - net: defxx: Fix missing err handling in dfx_init() (Yongqiang Liu)   
  - net: vmw_vsock: vmci: Check memcpy_from_msg() (Artem Chernyshev)   
  - clk: socfpga: Fix memory leak in socfpga_gate_init() (Xiu Jianfeng)   
  - bpf: Do not zero-extend kfunc return values (Björn Töpel)   
  - blktrace: Fix output non-blktrace event when blk_classic option enabled (Yang Jihong)   
  - wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() (Wang Yufen)   
  - wifi: rtl8xxxu: Fix the channel width reporting (Bitterblue Smith)   
  - wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h (Bitterblue Smith)   
  - spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode (Kris Bahnsen)   
  - clk: samsung: Fix memory leak in _samsung_clk_register_pll() (Xiu Jianfeng)   
  - media: coda: Add check for kmalloc (Jiasheng Jiang)   
  - media: coda: Add check for dcoda_iram_alloc (Jiasheng Jiang)   
  - media: c8sectpfe: Add of_node_put() when breaking out of loop (Liang He)   
  - regulator: qcom-labibb: Fix missing of_node_put() in qcom_labibb_regulator_probe() (Yuan Can)   
  - mmc: core: Normalize the error handling branch in sd_read_ext_regs() (Zhen Lei)   
  - memstick/ms_block: Add check for alloc_ordered_workqueue (Jiasheng Jiang)   
  - memstick: ms_block: Add error handling support for add_disk() (Luis Chamberlain)   
  - mmc: renesas_sdhi: alway populate SCC pointer (Wolfram Sang)   
  - mmc: mmci: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: wbsd: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: via-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: meson-gx: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: omap_hsmmc: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: atmel-mci: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: wmt-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: vub300: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: toshsd: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: rtsx_pci: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: pxamci: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: mxcmmc: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: moxart: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: alcor: fix return value check of mmc_add_host() (Yang Yingliang)   
  - riscv, bpf: Emit fixed-length instructions for BPF_PSEUDO_FUNC (Pu Lehui)   
  - NFSv4.x: Fail client initialisation if state manager thread can't run (Trond Myklebust)   
  - SUNRPC: Fix missing release socket in rpc_sockname() (Wang ShaoBo)   
  - xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (Zhang Xiaoxu)   
  - ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt (Gaosheng Cui)   
  - media: saa7164: fix missing pci_disable_device() (Liu Shixin)   
  - ALSA: pcm: Set missing stop_operating flag at undoing trigger start (Takashi Iwai)   
  - bpf, sockmap: fix race in sock_map_free() (Eric Dumazet)   
  - hwmon: (jc42) Restore the min/max/critical temperatures on resume (Martin Blumenstingl)   
  - hwmon: (jc42) Convert register access and caching to regmap/regcache (Martin Blumenstingl)   
  - regulator: core: fix resource leak in regulator_register() (Yang Yingliang)   
  - configfs: fix possible memory leak in configfs_create_dir() (Chen Zhongjin)   
  - hsr: Synchronize sequence number updates. (Sebastian Andrzej Siewior)   
  - hsr: Synchronize sending frames to have always incremented outgoing seq nr. (Sebastian Andrzej Siewior)   
  - hsr: Disable netpoll. (Sebastian Andrzej Siewior)   
  - hsr: Avoid double remove of a node. (Sebastian Andrzej Siewior)   
  - hsr: Add a rcu-read lock to hsr_forward_skb(). (Sebastian Andrzej Siewior)   
  - clk: qcom: clk-krait: fix wrong div2 functions (Christian Marangi)   
  - clk: qcom: lpass-sc7180: Fix pm_runtime usage (Douglas Anderson)   
  - regulator: core: fix module refcount leak in set_supply() (Yang Yingliang)   
  - wifi: mt76: fix coverity overrun-call in mt76_get_txpower() (Deren Wu)   
  - wifi: mt76: mt7921: fix reporting of TX AGGR histogram (Lorenzo Bianconi)   
  - mt76: stop the radar detector after leaving dfs channel (Xing Song)   
  - wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails (Chen Zhongjin)   
  - wifi: mac80211: fix memory leak in ieee80211_if_add() (Zhengchao Shao)   
  - spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE (Alexander Sverdlin)   
  - bonding: uninitialized variable in bond_miimon_inspect() (Dan Carpenter)   
  - bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect (Pengcheng Yang)   
  - bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes (Pengcheng Yang)   
  - bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data (Pengcheng Yang)   
  - Input: wistron_btns - disable on UML (Randy Dunlap)   
  - netfilter: conntrack: set icmpv6 redirects as RELATED (Florian Westphal)   
  - ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe (Zhang Qilong)   
  - drm/amdkfd: Fix memory leakage (Konstantin Meskhidze)   
  - drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() (Xiongfeng Wang)   
  - drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() (Xiongfeng Wang)   
  - drm/amd/pm/smu11: BACO is supported when it's in BACO state (Guchun Chen)   
  - ASoC: mediatek: mt8173: Enable IRQ when pdata is ready (Ricardo Ribalda)   
  - ASoC: mediatek: mt8173: Fix debugfs registration for components (AngeloGioacchino Del Regno)   
  - wifi: iwlwifi: mvm: fix double free on tx path. (Ben Greear)   
  - ALSA: asihpi: fix missing pci_disable_device() (Liu Shixin)   
  - NFS: Fix an Oops in nfs_d_automount() (Trond Myklebust)   
  - NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (Trond Myklebust)   
  - NFSv4: Fix a credential leak in _nfs4_discover_trunking() (Trond Myklebust)   
  - NFSv4.2: Fix initialisation of struct nfs4_label (Trond Myklebust)   
  - NFSv4.2: Fix a memory stomp in decode_attr_security_label (Trond Myklebust)   
  - NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding (Trond Myklebust)   
  - ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd (Jiasheng Jiang)   
  - ASoC: dt-bindings: wcd9335: fix reset line polarity in example (Dmitry Torokhov)   
  - drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() (Zhang Zekun)   
  - media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC (Aakarsh Jain)   
  - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() (Baisong Zhong)   
  - media: dvb-core: Fix ignored return value in dvb_register_frontend() (Chen Zhongjin)   
  - pinctrl: pinconf-generic: add missing of_node_put() (ZhangPeng)   
  - clk: imx8mn: fix imx8mn_enet_phy_sels clocks list (Dario Binacchi)   
  - clk: imx8mn: fix imx8mn_sai2_sels clocks list (Dario Binacchi)   
  - clk: imx: replace osc_hdmi with dummy (Dario Binacchi)   
  - clk: imx8mn: rename vpu_pll to m7_alt_pll (Dario Binacchi)   
  - media: imon: fix a race condition in send_packet() (Gautam Menghani)   
  - media: vimc: Fix wrong function called when vimc_init() fails (Chen Zhongjin)   
  - ASoC: qcom: Add checks for devm_kcalloc (Yuan Can)   
  - drbd: destroy workqueue when drbd device was freed (Wang ShaoBo)   
  - drbd: remove call to memset before free device/resource/connection (Wang ShaoBo)   
  - mtd: maps: pxa2xx-flash: fix memory leak in probe (Zheng Yongjun)   
  - bonding: fix link recovery in mode 2 when updelay is nonzero (Jonathan Toppins)   
  - drm/amdgpu: fix pci device refcount leak (Yang Yingliang)   
  - clk: rockchip: Fix memory leak in rockchip_clk_register_pll() (Xiu Jianfeng)   
  - regulator: core: use kfree_const() to free space conditionally (Wang ShaoBo)   
  - ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT (Baisong Zhong)   
  - ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT (Baisong Zhong)   
  - pinctrl: k210: call of_node_put() (ZhangPeng)   
  - HID: hid-sensor-custom: set fixed size for custom attributes (Marcus Folkesson)   
  - bpf: Move skb->len == 0 checks into __bpf_redirect (Stanislav Fomichev)   
  - mtd: spi-nor: Fix the number of bytes for the dummy cycles (Allen-KH Cheng)   
  - mtd: spi-nor: hide jedec_id sysfs attribute if not present (Michael Walle)   
  - inet: add READ_ONCE(sk->sk_bound_dev_if) in inet_csk_bind_conflict() (Eric Dumazet)   
  - media: videobuf-dma-contig: use dma_mmap_coherent (Christoph Hellwig)   
  - media: platform: exynos4-is: Fix error handling in fimc_md_init() (Yuan Can)   
  - media: solo6x10: fix possible memory leak in solo_sysfs_init() (Yang Yingliang)   
  - media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init() (Chen Zhongjin)   
  - Input: elants_i2c - properly handle the reset GPIO when power is off (Douglas Anderson)   
  - mtd: lpddr2_nvm: Fix possible null-ptr-deref (Hui Tang)   
  - drm/msm/a6xx: Fix speed-bin detection vs probe-defer (Rob Clark)   
  - wifi: ath10k: Fix return value in ath10k_pci_init() (Xiu Jianfeng)   
  - block: clear ->slave_dir when dropping the main slave_dir reference (Christoph Hellwig)   
  - ima: Fix misuse of dereference of pointer in template_desc_init_fields() (Xiu Jianfeng)   
  - integrity: Fix memory leakage in keyring allocation error path (GUO Zihua)   
  - drm/fourcc: Fix vsub/hsub for Q410 and Q401 (Brian Starkey)   
  - drm/fourcc: Add packed 10bit YUV 4:2:0 format (Dave Stevenson)   
  - regulator: qcom-rpmh: Fix PMR735a S3 regulator spec (Konrad Dybcio)   
  - nvme: return err on nvme_init_non_mdts_limits fail (Joel Granados)   
  - amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() (Dan Carpenter)   
  - regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() (Yang Yingliang)   
  - nvmet: only allocate a single slab for bvecs (Christoph Hellwig)   
  - libbpf: Fix uninitialized warning in btf_dump_dump_type_data (David Michael)   
  - ASoC: pxa: fix null-pointer dereference in filter() (Zeng Heng)   
  - drm/mediatek: Modify dpi power on/off sequence. (Xinlei Lee)   
  - drm/radeon: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo)   
  - bfq: fix waker_bfqq inconsistency crash (Khazhismel Kumykov)   
  - rxrpc: Fix ack.bufferSize to be 0 when generating an ack (David Howells)   
  - net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write() (David Howells)   
  - media: camss: Clean up received buffers on failed start of streaming (Vladimir Zapolskiy)   
  - wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port (Marek Vasut)   
  - Input: joystick - fix Kconfig warning for JOYSTICK_ADC (Randy Dunlap)   
  - mtd: Fix device name leak when register device failed in add_mtd_device() (Zhang Xiaoxu)   
  - clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs (Manivannan Sadhasivam)   
  - bpf: propagate precision across all frames, not just the last one (Andrii Nakryiko)   
  - bpf: Check the other end of slot_type for STACK_SPILL (Martin KaFai Lau)   
  - bpf: propagate precision in ALU/ALU64 operations (Andrii Nakryiko)   
  - media: platform: exynos4-is: fix return value check in fimc_md_probe() (Yang Yingliang)   
  - media: vivid: fix compose size exceed boundary (Liu Shixin)   
  - bpf: Fix slot type check in check_stack_write_var_off (Kumar Kartikeya Dwivedi)   
  - drm/msm/hdmi: use devres helper for runtime PM management (Dmitry Baryshkov)   
  - drm/msm/hdmi: drop unused GPIO support (Dmitry Baryshkov)   
  - ima: Handle -ESTALE returned by ima_filter_rule_match() (GUO Zihua)   
  - drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure (Marek Vasut)   
  - spi: Update reference to struct spi_controller (Jonathan Neuschäfer)   
  - clk: renesas: r9a06g032: Repair grave increment error (Marek Vasut)   
  - drm/rockchip: lvds: fix PM usage counter unbalance in poweron (Zhang Qilong)   
  - can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming (Jimmy Assarsson)   
  - can: kvaser_usb: Add struct kvaser_usb_busparams (Jimmy Assarsson)   
  - can: kvaser_usb_leaf: Fix bogus restart events (Anssi Hannula)   
  - can: kvaser_usb_leaf: Fix wrong CAN state after stopping (Anssi Hannula)   
  - can: kvaser_usb_leaf: Fix improved state not being reported (Anssi Hannula)   
  - can: kvaser_usb: make use of units.h in assignment of frequency (Jimmy Assarsson)   
  - can: kvaser_usb_leaf: Set Warning state even without bus errors (Anssi Hannula)   
  - can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT (Jimmy Assarsson)   
  - can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event (Jimmy Assarsson)   
  - can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device (Jimmy Assarsson)   
  - can: kvaser_usb: do not increase tx statistics when sending error message frames (Vincent Mailhol)   
  - libbpf: Btf dedup identical struct test needs check for nested structs/arrays (Alan Maguire)   
  - media: exynos4-is: don't rely on the v4l2_async_subdev internals (Marek Szyprowski)   
  - soreuseport: Fix socket selection for SO_INCOMING_CPU. (Kuniyuki Iwashima)   
  - venus: pm_helpers: Fix error check in vcodec_domains_get() (Tang Bin)   
  - media: i2c: ad5820: Fix error path (Ricardo Ribalda)   
  - media: adv748x: afe: Select input port when initializing AFE (Niklas Söderlund)   
  - media: coda: jpeg: Add check for kmalloc (Jiasheng Jiang)   
  - media: v4l2-ctrls: Fix off-by-one error in integer menu control check (Laurent Pinchart)   
  - drm/amdgpu/powerplay/psm: Fix memory leak in power state init (Rafael Mendonca)   
  - ipmi: kcs: Poll OBF briefly to reduce OBE latency (Andrew Jeffery)   
  - ata: libata: fix NCQ autosense logic (Niklas Cassel)   
  - ata: add/use ata_taskfile::{error|status} fields (Sergey Shtylyov)   
  - ata: libata: move ata_{port,link,dev}_dbg to standard pr_XXX() macros (Hannes Reinecke)   
  - libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() (Shung-Hsi Yu)   
  - libbpf: Fix use-after-free in btf_dump_name_dups (Xu Kuohai)   
  - drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge (Abhinav Kumar)   
  - wifi: rtl8xxxu: Fix reading the vendor of combo chips (Bitterblue Smith)   
  - wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() (Fedor Pchelkin)   
  - wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() (Fedor Pchelkin)   
  - platform/mellanox: mlxbf-pmc: Fix event typo (James Hurley)   
  - rapidio: devices: fix missing put_device in mport_cdev_open (Cai Xinchen)   
  - hfs: Fix OOB Write in hfs_asc2mac (ZhangPeng)   
  - relay: fix type mismatch when allocating memory in relay_create_buf() (Gavrilov Ilia)   
  - eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD (Zhang Qilong)   
  - rapidio: fix possible UAF when kfifo_alloc() fails (Wang Weiyang)   
  - fs: sysv: Fix sysv_nblocks() returns wrong value (Chen Zhongjin)   
  - lockd: set other missing fields when unlocking files (Trond Myklebust)   
  - MIPS: OCTEON: warn only once if deprecated link status is being used (Ladislav Michl)   
  - MIPS: BCM63xx: Add check for NULL for clk in clk_enable (Anastasia Belova)   
  - platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register() (Yang Yingliang)   
  - platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() (Yu Liao)   
  - platform/chrome: cros_ec_typec: zero out stale pointers (Victor Ding)   
  - platform/chrome: cros_ec_typec: Cleanup switch handle return paths (Prashant Malani)   
  - PM: runtime: Do not call __rpm_callback() from rpm_idle() (Rafael J. Wysocki)   
  - xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() (Harshit Mogalapalli)   
  - x86/xen: Fix memory leak in xen_init_lock_cpu() (Xiu Jianfeng)   
  - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Xiu Jianfeng)   
  - uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix (Oleg Nesterov)   
  - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (Li Zetao)   
  - clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock() (Yang Yingliang)   
  - cpu/hotplug: Do not bail-out in DYING/STARTING sections (Vincent Donnefort)   
  - cpu/hotplug: Make target_store() a nop when target == state (Phil Auld)   
  - futex: Resend potentially swallowed owner death notification (Alexey Izbyshev)   
  - futex: Move to kernel/futex/ (Peter Zijlstra)   
  - mips: ralink: mt7621: do not use kzalloc too early (John Thomson)   
  - mips: ralink: mt7621: soc queries and tests as functions (John Thomson)   
  - mips: ralink: mt7621: define MT7621_SYSC_BASE with __iomem (John Thomson)   
  - clocksource/drivers/sh_cmt: Access registers according to spec (Wolfram Sang)   
  - rapidio: rio: fix possible name leak in rio_register_mport() (Yang Yingliang)   
  - rapidio: fix possible name leaks when rio_add_device() fails (Yang Yingliang)   
  - debugfs: fix error when writing negative value to atomic_t debugfs file (Akinobu Mita)   
  - lib/notifier-error-inject: fix error when writing -errno to debugfs file (Akinobu Mita)   
  - libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value (Akinobu Mita)   
  - cpufreq: amd_freq_sensitivity: Add missing pci_dev_put() (Xiongfeng Wang)   
  - genirq/irqdesc: Don't try to remove non-existing sysfs files (Yang Yingliang)   
  - nfsd: don't call nfsd_file_put from client states seqfile display (Jeff Layton)   
  - NFSD: Finish converting the NFSv2 GETACL result encoder (Chuck Lever)   
  - SUNRPC: Return true/false (not 1/0) from bool functions (Haowen Bai)   
  - EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (Yang Yingliang)   
  - irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init() (Wei Yongjun)   
  - irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() (Shang XiaoJing)   
  - thermal: core: fix some possible name leaks in error paths (Yang Yingliang)   
  - platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() (Yuan Can)   
  - perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() (Xiongfeng Wang)   
  - perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() (Xiongfeng Wang)   
  - perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() (Xiongfeng Wang)   
  - perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() (Xiongfeng Wang)   
  - PNP: fix name memory leak in pnp_alloc_dev() (Yang Yingliang)   
  - selftests/efivarfs: Add checking of the test return value (Zhao Gongyi)   
  - MIPS: vpe-cmp: fix possible memory leak while module exiting (Yang Yingliang)   
  - MIPS: vpe-mt: fix possible memory leak while module exiting (Yang Yingliang)   
  - ocfs2: fix memory leak in ocfs2_stack_glue_init() (Shang XiaoJing)   
  - lib/fonts: fix undefined behavior in bit shift for get_default_font (Gaosheng Cui)   
  - proc: fixup uptime selftest (Alexey Dobriyan)   
  - timerqueue: Use rb_entry_safe() in timerqueue_getnext() (Barnabás Pőcze)   
  - platform/x86: huawei-wmi: fix return value calculation (Barnabás Pőcze)   
  - lib/debugobjects: fix stat count and optimize debug_objects_mem_init (wuchi)   
  - perf: Fix possible memleak in pmu_dev_alloc() (Chen Zhongjin)   
  - selftests/ftrace: event_triggers: wait longer for test_event_enable (Yipeng Zou)   
  - cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut() (Chen Hui)   
  - fs: don't audit the capability check in simple_xattr_list() (Ondrej Mosnacek)   
  - PM: hibernate: Fix mistake in kerneldoc comment (xiongxin)   
  - x86/sgx: Reduce delay and interference of enclave release (Reinette Chatre)   
  - alpha: fix syscall entry in !AUDUT_SYSCALL case (Al Viro)   
  - alpha: fix TIF_NOTIFY_SIGNAL handling (Al Viro)   
  - cpuidle: dt: Return the correct numbers of parsed idle states (Ulf Hansson)   
  - sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() (Qais Yousef)   
  - sched/core: Introduce sched_asym_cpucap_active() (Dietmar Eggemann)   
  - sched/fair: Removed useless update of p->recent_used_cpu (Vincent Guittot)   
  - sched/uclamp: Make select_idle_capacity() use util_fits_cpu() (Qais Yousef)   
  - sched/uclamp: Make task_fits_capacity() use util_fits_cpu() (Qais Yousef)   
  - sched/uclamp: Fix relationship between uclamp and migration margin (Qais Yousef)   
  - sched/fair: Cleanup task_util and capacity type (Vincent Donnefort)   
  - ovl: remove privs in ovl_fallocate() (Amir Goldstein)   
  - ovl: remove privs in ovl_copyfile() (Amir Goldstein)   
  - ovl: use ovl_copy_{real,upper}attr() wrappers (Christian Brauner)   
  - ovl: store lower path in ovl_inode (Amir Goldstein)   
  - tpm/tpm_crb: Fix error message in __crb_relinquish_locality() (Michael Kelley)   
  - tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init() (Yuan Can)   
  - pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP (Stephen Boyd)   
  - ARM: mmp: fix timer_read delay (Doug Brown)   
  - pstore/ram: Fix error return code in ramoops_probe() (Wang Yufen)   
  - seccomp: Move copy_seccomp() to no failure path. (Kuniyuki Iwashima)   
  - arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC (Pali Rohár)   
  - ARM: dts: turris-omnia: Add switch port 6 node (Pali Rohár)   
  - ARM: dts: turris-omnia: Add ethernet aliases (Pali Rohár)   
  - ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name (AngeloGioacchino Del Regno)   
  - arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings (AngeloGioacchino Del Regno)   
  - arm64: dts: mt2712-evb: Fix usb vbus regulators unit names (AngeloGioacchino Del Regno)   
  - arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names (AngeloGioacchino Del Regno)   
  - arm64: dts: mt2712e: Fix unit address for pinctrl node (AngeloGioacchino Del Regno)   
  - arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators (AngeloGioacchino Del Regno)   
  - arm64: dts: mt6779: Fix devicetree build warnings (AngeloGioacchino Del Regno)   
  - ARM: dts: nuvoton: Remove bogus unit addresses from fixed-partition nodes (Jonathan Neuschäfer)   
  - arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node (Jayesh Choudhary)   
  - arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node (Jayesh Choudhary)   
  - perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() (Shang XiaoJing)   
  - perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() (Shang XiaoJing)   
  - perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() (Yuan Can)   
  - arm64: mm: kfence: only handle translation faults (Mark Rutland)   
  - arm64: Treat ESR_ELx as a 64-bit register (Alexandru Elisei)   
  - soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe (Zhang Qilong)   
  - soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe (Zhang Qilong)   
  - soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync (Minghao Chi)   
  - arm: dts: spear600: Fix clcd interrupt (Kory Maincent)   
  - arm64: dts: qcom: sm6125: fix SDHCI CQE reg names (Krzysztof Kozlowski)   
  - soc: qcom: apr: Add check for idr_alloc and of_property_read_string_index (Jiasheng Jiang)   
  - soc: qcom: apr: make code more reuseable (Srinivas Kandagatla)   
  - arm64: dts: qcom: sm8250: drop bogus DP PHY clock (Johan Hovold)   
  - arm64: dts: qcom: sm8350: fix UFS PHY registers (Johan Hovold)   
  - arm64: dts: qcom: sm8250: fix UFS PHY registers (Johan Hovold)   
  - arm64: dts: qcom: sm8150: fix UFS PHY registers (Johan Hovold)   
  - arm64: dts: qcom: Correct QMP PHY child node name (Shawn Guo)   
  - soc: qcom: llcc: make irq truly optional (Luca Weiss)   
  - arm64: dts: qcom: sm8250: correct LPASS pin pull down (Krzysztof Kozlowski)   
  - arm64: dts: qcom: pm660: Use unique ADC5_VCOIN address in node name (Marijn Suijten)   
  - drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static (Chen Jiahao)   
  - ARM: dts: stm32: Fix AV96 WLAN regulator gpio property (Marek Vasut)   
  - ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96 (Marek Vasut)   
  - objtool, kcsan: Add volatile read/write instrumentation to whitelist (Marco Elver)   
  - arm64: dts: qcom: msm8916: Drop MSS fallback compatible (Stephan Gerhold)   
  - arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias (Krzysztof Kozlowski)   
  - arm64: dts: qcom: sdm630: fix UART1 pin bias (Krzysztof Kozlowski)   
  - ARM: dts: qcom: apq8064: fix coresight compatible (Luca Weiss)   
  - arm64: dts: qcom: msm8996: fix GPU OPP table (Dmitry Baryshkov)   
  - arm64: dts: qcom: msm8996: fix supported-hw in cpufreq OPP tables (Dmitry Baryshkov)   
  - arm64: dts: qcom: msm8996: Add MSM8996 Pro support (Yassine Oudjana)   
  - arm64: dts: qcom: sm8250-sony-xperia-edo: fix touchscreen bias-disable (Krzysztof Kozlowski)   
  - arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins (Krzysztof Kozlowski)   
  - usb: musb: remove extra check in musb_gadget_vbus_draw (Ivaylo Dimitrov)   
  - drm/amd/display: Manually adjust strobe for DCN303 (Martin Leung)   
  - LTS version: v5.15.85 (Jack Vogel)   
  - net: loopback: use NET_NAME_PREDICTABLE for name_assign_type (Rasmus Villemoes)   
  - selftests: net: Use "grep -E" instead of "egrep" (Tiezhu Yang)   
  - Bluetooth: L2CAP: Fix u8 overflow (Sungwoo Kim) [Orabug: 34880793] {CVE-2022-45934}
  - HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk (José Expósito)   
  - usb: dwc3: pci: Update PCIe device ID for USB3 controller on CPU sub-system for Raptor Lake (Shruthi Sanil)   
  - igb: Initialize mailbox message for VF reset (Tony Nguyen)   
  - xhci: Apply XHCI_RESET_TO_DEFAULT quirk to ADL-N (Reka Norman)   
  - USB: serial: f81534: fix division by zero on line-speed change (Johan Hovold)   
  - USB: serial: f81232: fix division by zero on line-speed change (Johan Hovold)   
  - USB: serial: cp210x: add Kamstrup RF sniffer PIDs (Bruno Thomsen)   
  - USB: serial: option: add Quectel EM05-G modem (Duke Xin)   
  - usb: gadget: uvc: Prevent buffer overflow in setup handler (Szymon Heidrich)   
  - udf: Fix extending file within last block (Jan Kara)   
  - udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size (Jan Kara)   
  - udf: Fix preallocation discarding at indirect extent boundary (Jan Kara)   
  - udf: Discard preallocation before extending file with a hole (Jan Kara)   
  - LTS version: v5.15.84 (Jack Vogel)   
  - net: fec: properly guard irq coalesce setup (Rasmus Villemoes)   
  - ASoC: ops: Correct bounds check for second channel on SX controls (Charles Keepax)   
  - nvme-pci: clear the prp2 field when not used (Lei Rao)   
  - perf: Fix perf_pending_task() UaF (Peter Zijlstra)   
  - ASoC: cs42l51: Correct PGA Volume minimum value (Charles Keepax)   
  - net: fec: don't reset irq coalesce settings to defaults on "ip link up" (Rasmus Villemoes)   
  - can: mcba_usb: Fix termination command argument (Yasushi SHOJI)   
  - can: sja1000: fix size of OCR_MODE_MASK define (Heiko Schocher)   
  - pinctrl: meditatek: Startup with the IRQs disabled (Ricardo Ribalda)   
  - libbpf: Use page size as max_entries when probing ring buffer map (Hou Tao)   
  - ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() (Mark Brown)   
  - ASoC: fsl_micfil: explicitly clear CHnF flags (Shengjiu Wang)   
  - ASoC: fsl_micfil: explicitly clear software reset bit (Shengjiu Wang)   
  - nfp: fix use-after-free in area_cache_get() (Jialiang Wang) [Orabug: 34719738] {CVE-2022-3545}
  - vfs: fix copy_file_range() averts filesystem freeze protection (Amir Goldstein)   
  - x86/vdso: Conditionally export __vdso_sgx_enter_enclave() (Nathan Chancellor)   
  - LTS version: v5.15.83 (Jack Vogel)   
  - io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() (Harshit Mogalapalli)   
  - io_uring: move to separate directory (Jens Axboe)   
  - block: move CONFIG_BLOCK guard to top Makefile (Masahiro Yamada)   
  - can: esd_usb: Allow REC and TEC to return to zero (Frank Jungclaus)   
  - s390/qeth: fix use-after-free in hsci (Alexandra Winter)   
  - s390/qeth: fix various format strings (Heiko Carstens)   
  - macsec: add missing attribute validation for offload (Emeel Hakim)   
  - net: mvneta: Fix an out of bounds check (Dan Carpenter)   
  - net: thunderbolt: fix memory leak in tbnet_open() (Zhengchao Shao)   
  - ipv6: avoid use-after-free in ip6_fragment() (Eric Dumazet)   
  - net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq() (Yang Yingliang)   
  - net: phy: mxl-gpy: fix version reporting (Michael Walle)   
  - xen/netback: fix build warning (Juergen Gross)   
  - dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove() (Yuan Can)   
  - ethernet: aeroflex: fix potential skb leak in greth_init_rings() (Zhang Changzhong)   
  - tipc: call tipc_lxc_xmit without holding node_read_lock (Xin Long)   
  - net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() (Zhengchao Shao)   
  - ipv4: Fix incorrect route flushing when table ID 0 is used (Ido Schimmel)   
  - ipv4: Fix incorrect route flushing when source address is deleted (Ido Schimmel)   
  - tipc: Fix potential OOB in tipc_link_proto_rcv() (YueHaibing)   
  - net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (Liu Jian)   
  - net: mdio: fix unbalanced fwnode reference count in mdio_device_release() (Zeng Heng)   
  - net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (Liu Jian)   
  - net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq (Yongqiang Liu)   
  - net: microchip: sparx5: Fix missing destroy_workqueue of mact_queue (Qiheng Lin)   
  - ip_gre: do not report erspan version on GRE interface (Hangbin Liu)   
  - net: stmmac: fix "snps,axi-config" node property parsing (Jisheng Zhang)   
  - gpio/rockchip: fix refcount leak in rockchip_gpiolib_register() (Wang Yufen)   
  - nvme initialize core quirks before calling nvme_init_subsystem (Pankaj Raghav)   
  - NFC: nci: Bounds check struct nfc_target arrays (Kees Cook)   
  - i40e: Disallow ip4 and ip6 l4_4_bytes (Przemyslaw Patynowski)   
  - i40e: Fix for VF MAC address 0 (Sylwester Dziedziuch)   
  - i40e: Fix not setting default xps_cpus after reset (Michal Jaron)   
  - net: mvneta: Prevent out of bounds read in mvneta_config_rss() (Dan Carpenter)   
  - xen-netfront: Fix NULL sring after live migration (Lin Liu)   
  - octeontx2-pf: Fix potential memory leak in otx2_init_tc() (Ziyang Xuan)   
  - net: mdiobus: fix double put fwnode in the error path (Yang Yingliang)   
  - net: mdiobus: fwnode_mdiobus_register_phy() rework error handling (Oleksij Rempel)   
  - net: encx24j600: Fix invalid logic in reading of MISTAT register (Valentina Goncharenko)   
  - net: encx24j600: Add parentheses to fix precedence (Valentina Goncharenko)   
  - mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (Wei Yongjun)   
  - selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload (Zhengchao Shao)   
  - net: dsa: sja1105: Check return value (Artem Chernyshev)   
  - net: dsa: hellcreek: Check return value (Artem Chernyshev)   
  - net: dsa: ksz: Check return value (Artem Chernyshev)   
  - Bluetooth: Fix not cleanup led when bt_init fails (Chen Zhongjin)   
  - Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() (Wang ShaoBo)   
  - vmxnet3: use correct intrConf reference when using extended queues (Ronak Doshi)   
  - vmxnet3: correctly report encapsulated LRO packet (Ronak Doshi)   
  - af_unix: Get user_ns from in_skb in unix_diag_get_exact(). (Kuniyuki Iwashima)   
  - drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420 (Guillaume BRUN)   
  - net: broadcom: Add PTP_1588_CLOCK_OPTIONAL dependency for BCMGENET under ARCH_BCM2835 (YueHaibing)   
  - igb: Allocate MSI-X vector when testing (Akihiko Odaki)   
  - e1000e: Fix TX dispatch condition (Akihiko Odaki)   
  - gpio: amd8111: Fix PCI device reference count leak (Xiongfeng Wang)   
  - drm/bridge: ti-sn65dsi86: Fix output polarity setting bug (Qiqi Zhang)   
  - netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark (Pablo Neira Ayuso)   
  - ca8210: Fix crash by zero initializing data (Hauke Mehrtens)   
  - ieee802154: cc2520: Fix error return code in cc2520_hw_init() (Ziyang Xuan)   
  - drm/vmwgfx: Fix race issue calling pin_user_pages (Dawei Li)   
  - netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one (Stefano Brivio)   
  - gpiolib: fix memory leak in gpiochip_setup_dev() (Zeng Heng)   
  - gpiolib: check the 'ngpios' property in core gpiolib code (Bartosz Golaszewski)   
  - gpiolib: improve coding style for local variables (Bartosz Golaszewski)   
  - clk: Fix pointer casting to prevent oops in devm_clk_release() (Uwe Kleine-König)   
  - can: af_can: fix NULL pointer dereference in can_rcv_filter (Oliver Hartkopp)   
  - HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10 (Hans de Goede)   
  - HID: core: fix shift-out-of-bounds in hid_report_raw_event (ZhangPeng)   
  - HID: hid-lg4ff: Add check for empty lbuf (Anastasia Belova)   
  - HID: usbhid: Add ALWAYS_POLL quirk for some mice (Ankit Patel)   
  - net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() (Radu Nicolae Pirea (OSS))   
  - drm/shmem-helper: Avoid vm_open error paths (Rob Clark)   
  - drm/shmem-helper: Remove errant put in error path (Rob Clark)   
  - drm/amdgpu/sdma_v4_0: turn off SDMA ring buffer in the s2idle suspend (Prike Liang)   
  - drm/vmwgfx: Don't use screen objects when SEV is active (Zack Rusin)   
  - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth)   
  - Bluetooth: Fix crash when replugging CSR fake controllers (Luiz Augusto von Dentz)   
  - Bluetooth: btusb: Add debug message for CSR controllers (Ismael Ferreras Morezuelas)   
  - mm/gup: fix gup_pud_range() for dax (John Starks)   
  - memcg: fix possible use-after-free in memcg_write_event_control() (Tejun Heo)   
  - media: v4l2-dv-timings.c: fix too strict blanking sanity checks (Hans Verkuil)   
  - Revert "ARM: dts: imx7: Fix NAND controller size-cells" (Francesco Dolcini)   
  - soundwire: intel: Initialize clock stop timeout (Sjoerd Simons)   
  - media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area() (Hans Verkuil)   
  - xen/netback: don't call kfree_skb() with interrupts disabled (Juergen Gross)   
  - xen/netback: do some code cleanup (Juergen Gross)   
  - xen/netback: Ensure protocol headers don't fall in the non-linear area (Ross Lagerwall)   
  - drm/bridge: anx7625: Fix edid_read break case in sp_tx_edid_read() (Hsin-Yi Wang)   
  - cifs: fix use-after-free caused by invalid pointer `hostname` (Zeng Heng)   
  - rtc: cmos: avoid UIP when reading alarm time (Mateusz Jończyk)   
  - rtc: cmos: avoid UIP when writing alarm time (Mateusz Jończyk)   
  - rtc: mc146818-lib: extract mc146818_avoid_UIP (Mateusz Jończyk)   
  - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths (Jann Horn)   
  - mm/khugepaged: fix GUP-fast interaction by sending IPI (Jann Horn)   
  - mm/khugepaged: take the right locks for page table retraction (Jann Horn)   
  - net: usb: qmi_wwan: add u-blox 0x1342 composition (Davide Tronchin)   
  - 9p/xen: check logical size for buffer size (Dominique Martinet)   
  - usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer (Thinh Nguyen)   
  - fbcon: Use kzalloc() in fbcon_prepare_logo() (Tetsuo Handa)   
  - regulator: twl6030: fix get status of twl6032 regulators (Andreas Kemnade)   
  - ASoC: soc-pcm: Add NULL check in BE reparenting (Srinivasa Rao Mandadapu)   
  - btrfs: send: avoid unaligned encoded writes when attempting to clone range (Filipe Manana)   
  - selftests/net: Find nettest in current directory (Daniel Díaz)   
  - ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event (Kees Cook)   
  - regulator: slg51000: Wait after asserting CS pin (Konrad Dybcio)   
  - 9p/fd: Use P9_HDRSZ for header size (GUO Zihua)   
  - ASoC: rt711-sdca: fix the latency time of clock stop prepare state machine transitions (Shuming Fan)   
  - ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188 (Johan Jonker)   
  - spi: mediatek: Fix DEVAPC Violation at KO Remove (Zhichao Liu)   
  - ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register (Chancel Liu)   
  - ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation (Giulio Benetti)   
  - ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels (Tomislav Novak)   
  - fs: use acquire ordering in __fget_light() (Jann Horn)   
  - ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name (Johan Jonker)   
  - arm64: dts: rockchip: fix ir-receiver node names (Johan Jonker)   
  - ARM: dts: rockchip: fix ir-receiver node names (Johan Jonker)   
  - arm: dts: rockchip: remove clock-frequency from rtc (Sebastian Reichel)   
  - arm: dts: rockchip: fix node name for hym8563 rtc (Sebastian Reichel)   
  - arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series (FUKAUMI Naoki)   
  - mmc: mtk-sd: Fix missing clk_disable_unprepare in msdc_of_clock_parse() (Gaosheng Cui)   
  - clk: Provide new devm_clk helpers for prepared and enabled clocks (Uwe Kleine-König)   
  - clk: generalize devm_clk_get() a bit (Uwe Kleine-König)   
  - LTS version: v5.15.82 (Jack Vogel)   
  - ipc/sem: Fix dangling sem_array access in semtimedop race (Jann Horn)   
  - Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send() (Zhang Xiaoxu)   
  - char: tpm: Protect tpm_pm_suspend with locks (Jan Dabros)   
  - Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend" (Conor Dooley)   
  - ACPI: HMAT: Fix initiator registration for single-initiator systems (Vishal Verma)   
  - ACPI: HMAT: remove unnecessary variable initialization (Vishal Verma)   
  - i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set (Andrew Lunn)   
  - i2c: npcm7xx: Fix error handling in npcm_i2c_init() (Yuan Can)   
  - serial: stm32: Deassert Transmit Enable on ->rs485_config() (Lukas Wunner)   
  - serial: stm32: Use TC interrupt to deassert GPIO RTS in RS485 mode (Marek Vasut)   
  - serial: stm32: Factor out GPIO RTS toggling into separate function (Marek Vasut)   
  - ipv4: Fix route deletion when nexthop info is not specified (Ido Schimmel)   
  - ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference (David Ahern) [Orabug: 34703911] {CVE-2022-3435}
  - selftests: net: fix nexthop warning cleanup double ip typo (Nikolay Aleksandrov)   
  - selftests: net: add delete nexthop route warning test (Nikolay Aleksandrov)   
  - Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled (Lee Jones)   
  - parisc: Increase FRAME_WARN to 2048 bytes on parisc (Helge Deller)   
  - mm: migrate: fix THP's mapcount on isolation (Gavin Shan)   
  - mm: __isolate_lru_page_prepare() in isolate_migratepages_block() (Hugh Dickins)   
  - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (Xiongfeng Wang)   
  - iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (Xiongfeng Wang)   
  - nvme: fix SRCU protection of nvme_ns_head list (Caleb Sander)   
  - riscv: kexec: Fixup irq controller broken in kexec crash path (Guo Ren)   
  - riscv: fix race when vmap stack overflow (Jisheng Zhang)   
  - riscv: Sync efi page table's kernel mappings before switching (Alexandre Ghiti)   
  - pinctrl: single: Fix potential division by zero (Maxim Korotkov)   
  - ASoC: ops: Fix bounds check for _sx controls (Mark Brown)   
  - KVM: x86/mmu: Fix race condition in direct_page_fault (Kazuki Takiguchi)   [Orabug: 34951672] {CVE-2022-45869} 
  - io_uring/poll: fix poll_refs race with cancelation (Lin Ma) [Orabug: 35037619] {CVE-2023-0468}
  - io_uring: make poll refs more robust (Pavel Begunkov) [Orabug: 35037619] {CVE-2023-0468}
  - io_uring: cmpxchg for poll arm refs release (Pavel Begunkov)   
  - io_uring: fix tw losing poll events (Pavel Begunkov)   
  - io_uring: update res mask in io_poll_check_events (Pavel Begunkov)   
  - tracing: Free buffers when a used dynamic event is removed (Steven Rostedt (Google))   
  - tracing: Fix race where histograms can be called before the event (Steven Rostedt (Google))   
  - tracing/osnoise: Fix duration type (Daniel Bristot de Oliveira)   
  - drm/i915: Never return 0 if not all requests retired (Janusz Krzysztofik)   
  - drm/i915: Fix negative value passed as remaining time (Janusz Krzysztofik)   
  - drm/amdgpu: enable Vangogh VCN indirect sram mode (Leo Liu)   
  - drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame (Lee Jones)   
  - mmc: sdhci: Fix voltage switch delay (Adrian Hunter)   
  - mmc: sdhci-sprd: Fix no reset data and command after voltage switch (Wenchao Chen)   
  - mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check (Sebastian Falbesoner)   
  - mmc: core: Fix ambiguous TRIM and DISCARD arg (Christian Löhle)   
  - mmc: mmc_test: Fix removal of debugfs file (Ye Bin)   
  - net: stmmac: Set MAC's flow control register to reflect current settings (Goh, Wei Sheng)   
  - v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails (Linus Torvalds)   
  - pinctrl: intel: Save and restore pins in "direct IRQ" mode (Andy Shevchenko)   
  - x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 (Pawan Gupta)   
  - nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() (ZhangPeng)   
  - tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep" (Tiezhu Yang)   
  - error-injection: Add prompt for function error injection (Steven Rostedt (Google))   
  - ALSA: dice: fix regression for Lexicon I-ONIX FW810S (Takashi Sakamoto)   
  - riscv: mm: Proper page permissions after initmem free (Björn Töpel)   
  - riscv: vdso: fix section overlapping under some conditions (Jisheng Zhang)   
  - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (Yang Yingliang)   
  - hwmon: (coretemp) Check for null before removing sysfs attrs (Phil Auld)   
  - net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed (Yoshihiro Shimoda)   
  - sctp: fix memory leak in sctp_stream_outq_migrate() (Zhengchao Shao)   
  - packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE (Willem de Bruijn)   
  - net: tun: Fix use-after-free in tun_detach() (Shigeru Yoshida)   
  - afs: Fix fileserver probe RTT handling (David Howells)   
  - net: mdiobus: fix unbalanced node reference count (Yang Yingliang)   
  - net: hsr: Fix potential use-after-free (YueHaibing)   
  - tipc: re-fetch skb cb after tipc_msg_validate (Xin Long)   
  - dsa: lan9303: Correct stat name (Jerry Ray)   
  - net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type (M Chetan Kumar)   
  - net: wwan: iosm: fix kernel test robot reported error (M Chetan Kumar)   
  - net: ethernet: nixge: fix NULL dereference (Yuri Karpov)   
  - net/9p: Fix a potential socket leak in p9_socket_open (Wang Hai)   
  - net: net_netdev: Fix error handling in ntb_netdev_init_module() (Yuan Can)   
  - net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe() (Zhang Changzhong)   
  - net: phy: fix null-ptr-deref while probe() failed (Yang Yingliang)   
  - wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration (Lorenzo Bianconi)   
  - wifi: cfg80211: don't allow multi-BSSID in S1G (Johannes Berg)   
  - wifi: cfg80211: fix buffer overflow in elem comparison (Johannes Berg)   
  - aquantia: Do not purge addresses when setting the number of rings (Izabela Bakollari)   
  - qlcnic: fix sleep-in-atomic-context bugs caused by msleep (Duoming Zhou)   
  - can: m_can: Add check for devm_clk_get (Jiasheng Jiang)   
  - can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (Zhang Changzhong)   
  - can: etas_es58x: es58x_init_netdev(): free netdev when register_candev() (Zhang Changzhong)   
  - can: cc770: cc770_isa_probe(): add missing free_cc770dev() (Zhang Changzhong)   
  - can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() (Zhang Changzhong)   
  - net/mlx5e: Fix use-after-free when reverting termination table (Roi Dayan)   
  - net/mlx5: Fix uninitialized variable bug in outlen_write() (YueHaibing)   
  - net/mlx5: DR, Fix uninitialized var warning (YueHaibing)   
  - net/mlx5: DR, Rename list field in matcher struct to list_node (Yevgeny Kliteynik)   
  - e100: Fix possible use after free in e100_xmit_prepare (Wang Hai)   
  - iavf: Fix error handling in iavf_init_module() (Yuan Can)   
  - iavf: remove redundant ret variable (Minghao Chi)   
  - fm10k: Fix error handling in fm10k_init_module() (Yuan Can)   
  - i40e: Fix error handling in i40e_init_module() (Shang XiaoJing)   
  - ixgbevf: Fix resource leak in ixgbevf_init_module() (Shang XiaoJing)   
  - of: property: decrement node refcount in of_fwnode_get_reference_args() (Yang Yingliang)   
  - nvmem: rmem: Fix return value check in rmem_read() (Wei Yongjun)   
  - bpf: Do not copy spin lock field from user in bpf_selem_alloc (Xu Kuohai)   
  - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (Gaosheng Cui)   
  - hwmon: (i5500_temp) fix missing pci_disable_device() (Yang Yingliang)   
  - hwmon: (ina3221) Fix shunt sum critical calculation (Ninad Malwade)   
  - hwmon: (ltc2947) fix temperature scaling (Derek Nguyen)   
  - libbpf: Handle size overflow for ringbuf mmap (Hou Tao)   
  - ARM: at91: rm9200: fix usb device clock id (Michael Grzeschik)   
  - scripts/faddr2line: Fix regression in name resolution on ppc64le (Srikar Dronamraju)   
  - bpf, perf: Use subprog name when reporting subprog ksymbol (Hou Tao)   
  - iio: light: rpr0521: add missing Kconfig dependencies (Paul Gazzillo)   
  - iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw (Wei Yongjun)   
  - iio: health: afe4403: Fix oob read in afe4403_read_raw (Wei Yongjun)   
  - drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly when the edid is read" (Alex Deucher)   
  - drm/amdgpu: update drm_display_info correctly when the edid is read (Claudio Suarez)   
  - drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code (Lyude Paul)   
  - btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() (ChenXiaoSong)   
  - btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker (Nikolay Borisov)   
  - spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock (Frieder Schrempf)   
  - btrfs: free btrfs_path before copying inodes to userspace (Anand Jain)   
  - btrfs: sink iterator parameter to btrfs_ioctl_logical_to_ino (David Sterba)   
  - erofs: fix order >= MAX_ORDER warning due to crafted negative i_size (Gao Xiang)   
  - drm/i915/gt: Use i915_vm_put on ppgtt_create error paths (Chris Wilson)   
  - drm/i915: Create a dummy object for gen6 ppgtt (Maarten Lankhorst)   
  - arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored (Catalin Marinas)   
  - LTS version: v5.15.81 (Jack Vogel)   
  - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara)   
  - drm/i915: fix TLB invalidation for Gen12 video and compute engines (Andrzej Hajda)   [Orabug: 35005633] {CVE-2022-4139} 
  - drm/amdgpu: always register an MMU notifier for userptr (Christian König)   
  - drm/amdgpu: Enable Aldebaran devices to report CU Occupancy (Ramesh Errabolu)   
  - drm/amd/display: No display after resume from WB/CB (Tsung-hua Lin)   
  - drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN (Lyude Paul)   
  - btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs() (Zhen Lei)   
  - btrfs: use kvcalloc in btrfs_get_dev_zone_info (Christoph Hellwig)   
  - btrfs: zoned: fix missing endianness conversion in sb_write_pointer (Christoph Hellwig)   
  - btrfs: free btrfs_path before copying subvol info to userspace (Anand Jain)   
  - btrfs: free btrfs_path before copying fspath to userspace (Anand Jain)   
  - btrfs: free btrfs_path before copying root refs to userspace (Josef Bacik)   
  - genirq: Take the proposed affinity at face value if force==true (Luiz Capitulino)   
  - irqchip/gic-v3: Always trust the managed affinity provided by the core code (Luiz Capitulino)   
  - genirq: Always limit the affinity to online CPUs (Luiz Capitulino)   
  - genirq/msi: Shutdown managed interrupts with unsatifiable affinities (Luiz Capitulino)   
  - wifi: wilc1000: validate number of channels (Phil Turnbull)   
  - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute (Phil Turnbull)   
  - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute (Phil Turnbull)   
  - wifi: wilc1000: validate pairwise and authentication suite offsets (Phil Turnbull)   
  - fuse: lock inode unconditionally in fuse_fallocate() (Miklos Szeredi)   
  - dm integrity: clear the journal on suspend (Mikulas Patocka)   
  - dm integrity: flush the journal on suspend (Mikulas Patocka)   
  - gpu: host1x: Avoid trying to use GART on Tegra20 (Robin Murphy)   
  - scsi: iscsi: Fix possible memory leak when device_register() failed (Zhou Guanghui)   
  - net: usb: qmi_wwan: add Telit 0x103a composition (Enrico Sau)   
  - tcp: configurable source port perturb table size (Gleb Mazovetskiy)   
  - platform/x86: ideapad-laptop: Fix interrupt storm on fn-lock toggle on some Yoga laptops (Arnav Rawat)   
  - platform/x86: hp-wmi: Ignore Smart Experience App event (Kai-Heng Feng)   
  - zonefs: fix zone report size in __zonefs_io_error() (Damien Le Moal)   
  - drm/amdgpu: disable BACO support on more cards (Guchun Chen)   
  - platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) (Hans de Goede)   
  - platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() (Xiongfeng Wang)   
  - xen/platform-pci: add missing free_irq() in error path (ruanjinjie)   
  - xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too (Marek Marczykowski-Górecki)   
  - ASoC: stm32: dfsdm: manage cb buffers cleanup (Olivier Moysan)   
  - Input: i8042 - apply probe defer to more ASUS ZenBook models (Takashi Iwai)   
  - Input: soc_button_array - add Acer Switch V 10 to dmi_use_low_level_irq[] (Hans de Goede)   
  - Input: soc_button_array - add use_low_level_irq module parameter (Hans de Goede)   
  - Input: goodix - try resetting the controller when no config is set (Hans de Goede)   
  - serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios() (Lukas Wunner)   
  - tools: iio: iio_generic_buffer: Fix read size (Matti Vaittinen)   
  - ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 (Hans de Goede)   
  - Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode (Aman Dhoot)   
  - x86/ioremap: Fix page aligned size calculation in __ioremap_caller() (Michael Kelley)   
  - x86/pm: Add enumeration check before spec MSRs save/restore setup (Pawan Gupta)   
  - x86/tsx: Add a feature bit for TSX control MSR support (Pawan Gupta)   
  - KVM: x86: remove exit_int_info warning in svm_handle_exit (Maxim Levitsky)   
  - KVM: x86: add kvm_leave_nested (Maxim Levitsky)   
  - KVM: x86: nSVM: harden svm_free_nested against freeing vmcb02 while still in use (Maxim Levitsky)   
  - KVM: x86: forcibly leave nested mode on vCPU reset (Maxim Levitsky)   
  - KVM: x86: nSVM: leave nested mode on vCPU free (Maxim Levitsky)   
  - mm: vmscan: fix extreme overreclaim and swap floods (Johannes Weiner)   
  - gcov: clang: fix the buffer overflow issue (Mukesh Ojha)   
  - nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty (Chen Zhongjin)   
  - usb: dwc3: gadget: Clear ep descriptor last (Thinh Nguyen)   
  - usb: dwc3: gadget: Return -ESHUTDOWN on ep disable (Thinh Nguyen)   
  - usb: dwc3: gadget: conditionally remove requests (Michael Grzeschik)   
  - bus: ixp4xx: Don't touch bit 7 on IXP42x (Linus Walleij)   
  - iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails (Chen Zhongjin)   
  - iio: light: apds9960: fix wrong register for gesture gain (Alejandro Concepción Rodríguez)   
  - arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency (Jakob Unterwurzacher)   
  - ext4: fix use-after-free in ext4_ext_shift_extents (Baokun Li)   
  - usb: cdnsp: fix issue with ZLP - added TD_SIZE = 1 (Pawel Laszczak)   
  - usb: cdnsp: Fix issue with Clear Feature Halt Endpoint (Pawel Laszczak)   
  - usb: dwc3: exynos: Fix remove() function (Marek Szyprowski)   
  - KVM: arm64: pkvm: Fixup boot mode to reflect that the kernel resumes from EL1 (Marc Zyngier)   
  - mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)   
  - mmc: sdhci-brcmstb: Enable Clock Gating to save power (Al Cooper)   
  - mmc: sdhci-brcmstb: Re-organize flags (Al Cooper)   
  - nios2: add FORCE for vmlinuz.gz (Randy Dunlap)   
  - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Alexandre Belloni)   
  - lib/vdso: use "grep -E" instead of "egrep" (Greg Kroah-Hartman)   
  - s390/crashdump: fix TOD programmable field size (Heiko Carstens)   
  - net: thunderx: Fix the ACPI memory leak (Yu Liao)   
  - octeontx2-af: Fix reference count issue in rvu_sdp_init() (Xiongfeng Wang)   
  - octeontx2-pf: Add check for devm_kcalloc (Jiasheng Jiang)   
  - net: enetc: preserve TX ring priority across reconfiguration (Vladimir Oltean)   
  - net: enetc: cache accesses to &priv->si->hw (Vladimir Oltean)   
  - net: enetc: manage ENETC_F_QBV in priv->active_offloads only when enabled (Vladimir Oltean)   
  - nfc: st-nci: fix incorrect sizing calculations in EVT_TRANSACTION (Martin Faltesek)   
  - nfc: st-nci: fix memory leaks in EVT_TRANSACTION (Martin Faltesek)   
  - nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION (Martin Faltesek)   
  - s390/dasd: fix no record found for raw_track_access (Stefan Haberland)   
  - arcnet: fix potential memory leak in com20020_probe() (Wang Hai)   
  - ipv4: Fix error return code in fib_table_insert() (Ziyang Xuan)   
  - dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). (Kuniyuki Iwashima)   
  - fs: do not update freeing inode i_io_list (Svyatoslav Feldsherov)   
  - netfilter: flowtable_offload: add missing locking (Felix Fietkau)   
  - netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface (Jozsef Kadlecsik)   
  - dma-buf: fix racing conflict of dma_heap_add() (Dawei Li)   
  - bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() (Yang Yingliang)   
  - regulator: twl6030: re-add TWL6032_SUBCLASS (Andreas Kemnade)   
  - NFC: nci: fix memory leak in nci_rx_data_packet() (Liu Shixin)   
  - net: sched: allow act_ct to be built without NF_NAT (Xin Long)   
  - net: sparx5: fix error handling in sparx5_port_open() (Liu Jian)   
  - sfc: fix potential memleak in __ef100_hard_start_xmit() (Zhang Changzhong)   
  - net: wwan: iosm: use ACPI_FREE() but not kfree() in ipc_pcie_read_bios_cfg() (Wang ShaoBo)   
  - xfrm: Fix ignored return value in xfrm6_init() (Chen Zhongjin)   
  - xfrm: Fix oops in __xfrm_state_delete() (Thomas Jarosch)   
  - tipc: check skb_linearize() return value in tipc_disc_rcv() (YueHaibing)   
  - tipc: add an extra conn_get in tipc_conn_alloc (Xin Long)   
  - tipc: set con sock in tipc_conn_alloc (Xin Long)   
  - net/mlx5: Fix handling of entry refcount when command is not issued to FW (Moshe Shemesh)   
  - net/mlx5: Fix FW tracer timestamp calculation (Moshe Shemesh)   
  - net/mlx5: Do not query pci info while pci disabled (Roy Novich)   
  - netfilter: ipset: regression in ip_set_hash_ip.c (Vishwanath Pai)   
  - Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() (Yang Yingliang)   
  - Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() (Yang Yingliang)   
  - macsec: Fix invalid error code set (YueHaibing)   
  - nfp: add port from netdev validation for EEPROM access (Jaco Coetzee)   
  - nfp: fill splittable of devlink_port_attrs correctly (Diana Wang)   
  - net: pch_gbe: fix pci device refcount leak while module exiting (Yang Yingliang)   
  - octeontx2-af: debugsfs: fix pci device refcount leak (Yang Yingliang)   
  - net/qla3xxx: fix potential memleak in ql3xxx_send() (Zhang Changzhong)   
  - net: mvpp2: fix possible invalid pointer dereference (Hui Tang)   
  - net/mlx4: Check retval of mlx4_bitmap_init (Peter Kosyh)   
  - net: ethernet: mtk_eth_soc: fix error handling in mtk_open() (Liu Jian)   
  - ARM: dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties (Fabio Estevam)   
  - ARM: mxs: fix memory leak in mxs_machine_init() (Zheng Yongjun)   
  - iavf: Fix race condition between iavf_shutdown and iavf_remove (Slawomir Laba)   
  - iavf: Do not restart Tx queues after reset task failure (Ivan Vecera)   
  - iavf: Fix a crash during reset task (Ivan Vecera)   
  - netfilter: nf_tables: do not set up extensions for end interval (Pablo Neira Ayuso)   
  - netfilter: conntrack: Fix data-races around ct mark (Daniel Xu)   
  - 9p/fd: fix issue of list_del corruption in p9_fd_cancel() (Zhengchao Shao)   
  - net: pch_gbe: fix potential memleak in pch_gbe_tx_queue() (Wang Hai)   
  - nfc/nci: fix race with opening and closing (Lin Ma)   
  - net: dsa: sja1105: disallow C45 transactions on the BASE-TX MDIO bus (Vladimir Oltean)   
  - rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] (David Howells)   
  - rxrpc: Use refcount_t rather than atomic_t (David Howells)   
  - rxrpc: Allow list of in-use local UDP endpoints to be viewed in /proc (David Howells)   
  - net: liquidio: simplify if expression (Leon Romanovsky)   
  - selftests: mptcp: fix mibit vs mbit mix up (Matthieu Baerts)   
  - selftests: mptcp: more stable simult_flows tests (Paolo Abeni)   
  - ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl (Michael Grzeschik)   
  - tee: optee: fix possible memory leak in optee_register_device() (Yang Yingliang)   
  - bus: sunxi-rsb: Support atomic transfers (Samuel Holland)   
  - bus: sunxi-rsb: Remove the shutdown callback (Samuel Holland)   
  - regulator: core: fix UAF in destroy_regulator() (Yang Yingliang)   
  - spi: dw-dma: decrease reference count in dw_spi_dma_init_mfld() (Xiongfeng Wang)   
  - regulator: core: fix kobject release warning and memory leak in regulator_register() (Zeng Heng)   
  - ASoC: max98373: Add checks for devm_kcalloc (Jiasheng Jiang)   
  - scsi: storvsc: Fix handling of srb_status and capacity change events (Michael Kelley)   
  - x86/hyperv: Restore VP assist page after cpu offlining/onlining (Vitaly Kuznetsov)   
  - ASoC: soc-pcm: Don't zero TDM masks in __soc_pcm_open() (Richard Fitzgerald)   
  - ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove (Detlev Casanova)   
  - ASoC: hdac_hda: fix hda pcm buffer overflow issue (Junxiao Chang)   
  - ARM: dts: am335x-pcm-953: Define fixed regulators in root node (Dominik Haller)   
  - af_key: Fix send_acquire race with pfkey_register (Herbert Xu)   
  - xfrm: replay: Fix ESN wrap around for GSO (Christian Langrock)   
  - xfrm: fix "disable_policy" on ipv4 early demux (Eyal Birger)   
  - MIPS: pic32: treat port as signed integer (Jason A. Donenfeld)   
  - RISC-V: vdso: Do not add missing symbols to version section in linker script (Nathan Chancellor)   
  - ALSA: usb-audio: add quirk to fix Hamedal C20 disconnect issue (Ai Chao)   
  - Revert "drm/amdgpu: Revert "drm/amdgpu: getting fan speed pwm for vega10 properly"" (Asher Song)   
  - nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked (Aleksandr Miloserdov)   
  - arm64/syscall: Include asm/ptrace.h in syscall_wrapper header. (Kuniyuki Iwashima)   
  - block, bfq: fix null pointer dereference in bfq_bio_bfqg() (Yu Kuai)   
  - drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017) (Hans de Goede)   
  - scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC (Bart Van Assche)   
  - scsi: ibmvfc: Avoid path failures during live migration (Brian King)   
  - platform/x86/intel/hid: Add some ACPI device IDs (Ivan Hu)   
  - platform/x86/intel/pmt: Sapphire Rapids PMT errata fix (David E. Box)   
  - platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1 (Hans de Goede)   
  - platform/x86: ideapad-laptop: Disable touchpad_switch (Manyi Li)   
  - Revert "net: macsec: report real_dev features when HW offloading is enabled" (Sabrina Dubroca)   
  - selftests/bpf: Add verifier test for release_reference() (Youlin Li)   
  - spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run (Sean Nyekjaer)   
  - wifi: ath11k: Fix QCN9074 firmware boot on x86 (Tyler J. Stachecki)   
  - wifi: mac80211: Fix ack frame idr leak when mesh has no route (Nicolas Cavallari)   
  - wifi: airo: do not assign -1 to unsigned char (Jason A. Donenfeld)   
  - audit: fix undefined behavior in bit shift for AUDIT_BIT (Gaosheng Cui)   
  - riscv: dts: sifive unleashed: Add PWM controlled LEDs (Emil Renner Berthing)   
  - wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support (Jonas Jelonek)   
  - wifi: mac80211: fix memory free error when registering wiphy fail (taozhang)   
  - ceph: fix NULL pointer dereference for req->r_session (Xiubo Li)   
  - ceph: Use kcalloc for allocating multiple elements (Kenneth Lee)   
  - binder: validate alloc->mm in ->mmap() handler (Carlos Llamas)   
  - x86/sgx: Add overflow check in sgx_validate_offset_length() (Borys Popławski)   
  - x86/sgx: Create utility to validate user provided offset and length (Reinette Chatre)   
  - ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li)   
  - ceph: do not update snapshot context when there is no new snapshot (Xiubo Li)   
  - iio: pressure: ms5611: fixed value compensation bug (Mitja Spes)   
  - iio: ms5611: Simplify IO callback parameters (Lars-Peter Clausen)   
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Netac NV7000 (Tiago Dias Ferreira)   
  - nvme-pci: disable write zeroes on various Kingston SSD (Xander Li)   
  - nvme-pci: disable namespace identifiers for the MAXIO MAP1001 (Christoph Hellwig)   
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Micron Nitro (Bean Huo)   
  - nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH (Leo Savernik)   
  - drm/display: Don't assume dual mode adaptors support i2c sub-addressing (Simon Rettberg)   
  - ata: libata-core: do not issue non-internal commands once EH is pending (Niklas Cassel)   
  - ata: libata-scsi: simplify __ata_scsi_queuecmd() (Wenchao Hao)   
  - cifs: Fix connections leak when tlink setup failed (Zhang Xiaoxu)   
  - cifs: support nested dfs links over reconnect (Paulo Alcantara)   
  - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara)   
  - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara)   
  - sctp: clear out_curr if all frag chunks of current msg are pruned (Xin Long)   
  - sctp: remove the unnecessary sinfo_stream check in sctp_prsctp_prune_unsent (Xin Long)   
  - tty: serial: fsl_lpuart: don't break the on-going transfer when global reset (Sherry Sun)   
  - serial: fsl_lpuart: Fill in rs485_supported (Ilpo Järvinen)   
  - serial: Add rs485_supported to uart_port (Ilpo Järvinen)   
  - ASoC: fsl_asrc fsl_esai fsl_sai: allow CONFIG_PM=N (Maarten Zanders)   
  - ASoC: fsl_sai: use local device pointer (Marco Felsch)   
  - net: mana: Fix race on per-CQ variable napi work_done (Haiyang Zhang)  [Orabug: 34917684]  
  - vhost-scsi: Fix max number of virtqueues (Mike Christie)  [Orabug: 34915127]  
  - uek_kabi: unneeded include of uek_kabi.h in ip.h (Alan Maguire)  [Orabug: 34911234]  
  - uek-container: Enable CONFIG_IA32_EMULATION (Liam Merwick)  [Orabug: 34909790]  
  - uek-rpm: Disable CONFIG_SND_PCM_OSS for OL8 and OL9 (Harshit Mogalapalli)  [Orabug: 34885467]  
  - uek-container: ol9: Update config with that generated by 'make olddefconfig' (Liam Merwick)  [Orabug: 34850980]  
  - uek-container: ol8: Update config with that generated by 'make olddefconfig' (Liam Merwick)  [Orabug: 34850980]  
  - uek-container: Fix x86_64 PVH ELF note with binutils >= 2.36 (Liam Merwick)  [Orabug: 34850980]  
  - uek-rpm: ol9: Add spec file changes to build container kernel (Liam Merwick)  [Orabug: 34850980]  
  - uek-rpm: ol8: Add spec file changes to build container kernel (Liam Merwick)  [Orabug: 34850980]  
  - uek-rpm: ol9: x86_64: Add kernel-uek-container config file (Liam Merwick)  [Orabug: 34850980]  
  - uek-rpm: ol8: x86_64: Add kernel-uek-container config file (Liam Merwick)  [Orabug: 34850980]


