# changelog

author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-7.86.1.el9uek]
changelog:
  - LTS version: v5.15.86 (Jack Vogel)   
  - pwm: tegra: Fix 32 bit build (Steven Price)   
  - mfd: qcom_rpm: Use devm_of_platform_populate() to simplify code (Christophe JAILLET)   
  - extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered (Yassine Oudjana)   
  - media: dvbdev: fix refcnt bug (Lin Ma)   
  - media: dvbdev: fix build warning due to comments (Lin Ma)   
  - net: stmmac: fix errno when create_singlethread_workqueue() fails (Gaosheng Cui)   
  - scsi: qla2xxx: Fix crash when I/O abort times out (Arun Easi)   
  - btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range (Filipe Manana)   
  - ovl: fix use inode directly in rcu-walk mode (Chen Zhongjin)   
  - fbdev: fbcon: release buffer when fbcon_do_set_font() failed (Tetsuo Handa)   
  - gcov: add support for checksum field (Rickard x Andersson)   
  - floppy: Fix memory leak in do_floppy_init() (Yuan Can)   
  - regulator: core: fix deadlock on regulator enable (Johan Hovold)   
  - iio: adc128s052: add proper .data members in adc128_of_match table (Rasmus Villemoes)   
  - iio: adc: ad_sigma_delta: do not use internal iio_dev lock (Nuno Sá)   
  - iio: fix memory leak in iio_device_register_eventset() (Zeng Heng)   
  - reiserfs: Add missing calls to reiserfs_security_free() (Roberto Sassu)   
  - security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 (Nathan Chancellor)   
  - 9p: set req refcount to zero to avoid uninitialized usage (Schspa Shi)   
  - loop: Fix the max_loop commandline argument treatment when it is set to 0 (Isaac J. Manjarres)   
  - HID: mcp2221: don't connect hidraw (Enrik Berkhan)   
  - HID: wacom: Ensure bootloader PID is usable in hidraw mode (Jason Gerecke)   
  - xhci: Prevent infinite loop in transaction errors recovery for streams (Mathias Nyman)   
  - usb: dwc3: core: defer probe on ulpi_read_id timeout (Ferry Toth)   
  - usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode (Sven Peter)   
  - arm64: dts: qcom: sm8250: fix USB-DP PHY registers (Johan Hovold)   
  - usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq (Chunfeng Yun)   
  - usb: cdnsp: fix lack of ZLP for ep0 (Pawel Laszczak)   
  - ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list (Jiao Zhou)   
  - ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB (Edward Pacman)   
  - ALSA: usb-audio: add the quirk for KT0206 device (wangdicheng)   
  - ima: Simplify ima_lsm_copy_rule (GUO Zihua)   
  - pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES (John Stultz)   
  - afs: Fix lost servers_outstanding count (David Howells)   
  - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Yang Jihong)   
  - pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion (John Stultz)   
  - LoadPin: Ignore the "contents" argument of the LSM hooks (Kees Cook)   
  - drm/i915/display: Don't disable DDI/Transcoder when setting phy test pattern (Khaled Almahallawy)   
  - ASoC: rt5670: Remove unbalanced pm_runtime_put() (Hans de Goede)   
  - ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() (Wang Jingjin)   
  - ASoC: wm8994: Fix potential deadlock (Marek Szyprowski)   
  - ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe() (Wang Yufen)   
  - ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() (Wang Jingjin)   
  - ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() (Wang Yufen)   
  - ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() (Wang Yufen)   
  - ASoC: Intel: Skylake: Fix driver hang during shutdown (Cezary Rojewski)   
  - ALSA: hda: add snd_hdac_stop_streams() helper (Pierre-Louis Bossart)   
  - ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c (Pierre-Louis Bossart)   
  - hwmon: (jc42) Fix missing unlock on error in jc42_write() (Yang Yingliang)   
  - KVM: selftests: Fix build regression by using accessor function (Tyler Hicks)   
  - tools/include: Add _RET_IP_ and math definitions to kernel.h (Karolina Drobnik)   
  - orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() (Zhang Xiaoxu)   
  - orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() (Zhang Xiaoxu)   
  - drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() (Nathan Chancellor)   
  - drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() (Nathan Chancellor)   
  - hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (Hawkins Jiawei)   
  - scsi: elx: libefc: Fix second parameter type in state callbacks (Nathan Chancellor)   
  - scsi: ufs: Reduce the START STOP UNIT timeout (Bart Van Assche)   
  - scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs (Justin Tee)   
  - crypto: hisilicon/hpre - fix resource leak in remove process (Zhiqi Song)   
  - clk: st: Fix memory leak in st_of_quadfs_setup() (Xiu Jianfeng)   
  - media: si470x: Fix use-after-free in si470x_int_in_callback() (Shigeru Yoshida)   
  - mmc: renesas_sdhi: better reset from HS400 mode (Wolfram Sang)   
  - mmc: f-sdh30: Add quirks for broken timeout clock capability (Kunihiko Hayashi)   
  - wifi: mt76: do not run mt76u_status_worker if the device is not running (Lorenzo Bianconi)   
  - regulator: core: fix use_count leakage when handling boot-on (Rui Zhang)   
  - libbpf: Avoid enum forward-declarations in public API in C++ mode (Andrii Nakryiko)   
  - drm/amd/display: Use the largest vready_offset in pipe group (Wesley Chalmers)   
  - blk-mq: fix possible memleak when register 'hctx' failed (Ye Bin)   
  - media: dvb-usb: fix memory leak in dvb_usb_adapter_init() (Mazin Al Haddad)   
  - media: dvbdev: adopts refcnt to avoid UAF (Lin Ma)   
  - media: dvb-frontends: fix leak of memory fw (Yan Lei)   
  - ethtool: avoiding integer overflow in ethtool_phys_id() (Maxim Korotkov)   
  - bpf: Prevent decl_tag from being referenced in func_proto arg (Stanislav Fomichev)   
  - ppp: associate skb with a device at tx (Stanislav Fomichev)   
  - mrp: introduce active flags to prevent UAF when applicant uninit (Schspa Shi)   
  - ipv6/sit: use DEV_STATS_INC() to avoid data-races (Eric Dumazet)   
  - net: add atomic_long_t to net_device_stats fields (Eric Dumazet)   
  - drm/amd/display: fix array index out of bound error in bios parser (Aurabindo Pillai)   
  - md/raid1: stop mdx_raid1 thread when raid1 array run failed (Jiang Li)   
  - drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (Li Zhong)   
  - drm/mediatek: Fix return type of mtk_hdmi_bridge_mode_valid() (Nathan Chancellor)   
  - drm/sti: Use drm_mode_copy() (Ville Syrjälä)   
  - drm/rockchip: Use drm_mode_copy() (Ville Syrjälä)   
  - drm/msm: Use drm_mode_copy() (Ville Syrjälä)   
  - s390/lcs: Fix return type of lcs_start_xmit() (Nathan Chancellor)   
  - s390/netiucv: Fix return type of netiucv_tx() (Nathan Chancellor)   
  - s390/ctcm: Fix return type of ctc{mp,}m_tx() (Nathan Chancellor)   
  - drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback (Nathan Chancellor)   
  - drm/amdgpu: Fix type of second parameter in trans_msg() callback (Nathan Chancellor)   
  - igb: Do not free q_vector unless new one was allocated (Kees Cook)   
  - wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() (Minsuk Kang)   
  - hamradio: baycom_epp: Fix return type of baycom_send_packet() (Nathan Chancellor)   
  - net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() (Nathan Chancellor)   
  - bpf: make sure skb->len != 0 when redirecting to a tunneling device (Stanislav Fomichev)   
  - qed (gcc13): use u16 for fid to be big enough (Jiri Slaby (SUSE))   
  - Revert "drm/amd/display: Limit max DSC target bpp for specific monitors" (Hamza Mahfooz)   
  - drm/amd/display: prevent memory leak (gehao)   
  - ipmi: fix memleak when unload ipmi driver (Zhang Yuchen)   
  - ASoC: codecs: rt298: Add quirk for KBL-R RVP platform (Amadeusz Sławiński)   
  - wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out (Shigeru Yoshida)   
  - wifi: ath9k: verify the expected usb_endpoints are present (Fedor Pchelkin)   
  - brcmfmac: return error when getting invalid max_flowrings from dongle (Wright Feng)   
  - media: imx-jpeg: Disable useless interrupt to avoid kernel panic (Ming Qian)   
  - drm/etnaviv: add missing quirks for GC300 (Doug Brown)   
  - hfs: fix OOB Read in __hfs_brec_find (ZhangPeng)   
  - acct: fix potential integer overflow in encode_comp_t() (Zheng Yejian)   
  - nilfs2: fix shift-out-of-bounds due to too large exponent of block size (Ryusuke Konishi)   
  - nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() (Ryusuke Konishi)   
  - ACPICA: Fix error code path in acpi_ds_call_control_method() (Rafael J. Wysocki)   
  - fs: jfs: fix shift-out-of-bounds in dbDiscardAG (Hoi Pok Wu)   
  - jfs: Fix fortify moan in symlink (Dr. David Alan Gilbert)   
  - udf: Avoid double brelse() in udf_rename() (Shigeru Yoshida)   
  - fs: jfs: fix shift-out-of-bounds in dbAllocAG (Dongliang Mu)   
  - binfmt_misc: fix shift-out-of-bounds in check_special_flags (Liu Shixin)   
  - x86/hyperv: Remove unregister syscore call from Hyper-V cleanup (Gaurav Kohli)   
  - video: hyperv_fb: Avoid taking busy spinlock on panic path (Guilherme G. Piccoli)   
  - arm64: make is_ttbrX_addr() noinstr-safe (Mark Rutland)   
  - rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() (Zqiang)   
  - HID: amd_sfh: Add missing check for dma_alloc_coherent (Jiasheng Jiang)   
  - net: stream: purge sk_error_queue in sk_stream_kill_queues() (Eric Dumazet)   
  - myri10ge: Fix an error handling path in myri10ge_probe() (Christophe JAILLET)   
  - rxrpc: Fix missing unlock in rxrpc_do_sendmsg() (David Howells)   
  - net_sched: reject TCF_EM_SIMPLE case for complex ematch module (Cong Wang)   
  - mailbox: zynq-ipi: fix error handling while device_register() fails (Yang Yingliang)   
  - mailbox: arm_mhuv2: Fix return value check in mhuv2_probe() (Yang Yingliang)   
  - mailbox: mpfs: read the system controller's status (Conor Dooley)   
  - skbuff: Account for tail adjustment during pull operations (Subash Abhinov Kasiviswanathan)   
  - arm64: dts: mt8183: Fix Mali GPU clock (Chen-Yu Tsai)   
  - soc: mediatek: pm-domains: Fix the power glitch issue (Chun-Jie Chen)   
  - openvswitch: Fix flow lookup to use unmasked key (Eelco Chaudron)   
  - selftests: devlink: fix the fd redirect in dummy_reporter_test (Jakub Kicinski)   
  - rtc: mxc_v2: Add missing clk_disable_unprepare() (GUO Zihua)   
  - igc: Set Qbv start_time and end_time to end_time if not being configured in GCL (Tan Tee Min)   
  - igc: Lift TAPRIO schedule restriction (Kurt Kanzenbach)   
  - igc: recalculate Qbv end_time by considering cycle time (Tan Tee Min)   
  - igc: allow BaseTime 0 enrollment for Qbv (Tan Tee Min)   
  - igc: Add checking for basetime less than zero (Muhammad Husaini Zulkifli)   
  - igc: Use strict cycles for Qbv scheduling (Vinicius Costa Gomes)   
  - igc: Enhance Qbv scheduling by using first flag bit (Vinicius Costa Gomes)   
  - r6040: Fix kmemleak in probe and remove (Li Zetao)   
  - unix: Fix race in SOCK_SEQPACKET's unix_dgram_sendmsg() (Kirill Tkhai)   
  - nfc: pn533: Clear nfc_target before being used (Minsuk Kang)   
  - net: enetc: avoid buffer leaks on xdp_do_redirect() failure (Vladimir Oltean)   
  - selftests/bpf: Add test for unstable CT lookup API (Kumar Kartikeya Dwivedi)   
  - block, bfq: fix possible uaf for 'bfqq->bic' (Yu Kuai)   
  - mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net: macsec: fix net device access prior to holding a lock (Emeel Hakim)   
  - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (Dan Aloni)   
  - rtc: pcf85063: fix pcf85063_clkout_control (Alexandre Belloni)   
  - rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() (Gaosheng Cui)   
  - rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() (Gaosheng Cui)   
  - netfilter: flowtable: really fix NAT IPv6 offload (Qingfang DENG)   
  - mfd: pm8008: Fix return value check in pm8008_probe() (Yang Yingliang)   
  - mfd: pm8008: Remove driver data structure pm8008_data (Lee Jones)   
  - mfd: qcom_rpm: Fix an error handling path in qcom_rpm_probe() (Christophe JAILLET)   
  - mfd: bd957x: Fix Kconfig dependency on REGMAP_IRQ (Matti Vaittinen)   
  - powerpc/pseries/eeh: use correct API for error log size (Nathan Lynch)   
  - powerpc/eeh: Drop redundant spinlock initialization (Haowen Bai)   
  - remoteproc: qcom: q6v5: Fix missing clk_disable_unprepare() in q6v5_wcss_qcs404_power_on() (Shang XiaoJing)   
  - remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() (Yuan Can)   
  - remoteproc: qcom_q6v5_pas: detach power domains on remove (Luca Weiss)   
  - remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove (Luca Weiss)   
  - remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() (Shang XiaoJing)   
  - remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() (Gaosheng Cui)   
  - pwm: mediatek: always use bus clock for PWM on MT7622 (Daniel Golle)   
  - pwm: mtk-disp: Fix the parameters calculated by the enabled flag of disp_pwm (xinlei lee)   
  - pwm: sifive: Call pwm_sifive_update_clock() while mutex is held (Uwe Kleine-König)   
  - iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (Jason Gunthorpe)   
  - selftests/powerpc: Fix resource leaks (Miaoqian Lin)   
  - powerpc/hv-gpci: Fix hv_gpci event list (Kajol Jain)   
  - powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() (Yang Yingliang)   
  - powerpc/perf: callchain validate kernel stack pointer bounds (Nicholas Piggin)   
  - powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() (Yang Yingliang)   
  - powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds (Gustavo A. R. Silva)   
  - cxl: Fix refcount leak in cxl_calc_capp_routing (Miaoqian Lin)   
  - powerpc/52xx: Fix a resource leak in an error handling path (Christophe JAILLET)   
  - macintosh/macio-adb: check the return value of ioremap() (Xie Shaowen)   
  - macintosh: fix possible memory leak in macio_add_one_device() (Yang Yingliang)   
  - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (Yuan Can)   
  - iommu/amd: Fix pci device refcount leak in ppr_notifier() (Yang Yingliang)   
  - rtc: pcf85063: Fix reading alarm (Alexander Stein)   
  - rtc: snvs: Allow a time difference on clock register read (Stefan Eichenberger)   
  - rtc: cmos: Disable ACPI RTC event on removal (Rafael J. Wysocki)   
  - rtc: cmos: Rename ACPI-related functions (Rafael J. Wysocki)   
  - rtc: cmos: Eliminate forward declarations of some functions (Rafael J. Wysocki)   
  - rtc: cmos: Call rtc_wake_setup() from cmos_do_probe() (Rafael J. Wysocki)   
  - rtc: cmos: Call cmos_wake_setup() from cmos_do_probe() (Rafael J. Wysocki)   
  - rtc: cmos: fix build on non-ACPI platforms (Alexandre Belloni)   
  - rtc: cmos: Fix wake alarm breakage (Rafael J. Wysocki)   
  - rtc: cmos: Fix event handler registration ordering issue (Rafael J. Wysocki)   
  - rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0 (Rafael J. Wysocki)   
  - dmaengine: idxd: Fix crc_val field for completion record (Fenghua Yu)   
  - fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs (Abdun Nihaal)   
  - pwm: tegra: Improve required rate calculation (Jon Hunter)   
  - include/uapi/linux/swab: Fix potentially missing __always_inline (Matt Redfearn)   
  - phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices (Al Cooper)   
  - iommu/rockchip: fix permission bits in page table entries v2 (Michael Riesch)   
  - iommu/sun50i: Fix flush size (Jernej Skrabec)   
  - iommu/sun50i: Fix R/W permission check (Jernej Skrabec)   
  - iommu/sun50i: Consider all fault sources for reset (Jernej Skrabec)   
  - iommu/sun50i: Fix reset release (Jernej Skrabec)   
  - fs/ntfs3: Harden against integer overflows (Dan Carpenter)   
  - overflow: Implement size_t saturating arithmetic helpers (Kees Cook)   
  - fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst() (Shigeru Yoshida)   
  - RDMA/siw: Fix pointer cast warning (Arnd Bergmann)   
  - perf stat: Do not delay the workload with --delay (Namhyung Kim)   
  - perf stat: Refactor __run_perf_stat() common code (Adrián Herrera Arcila)   
  - power: supply: fix null pointer dereferencing in power_supply_get_battery_info (ruanjinjie)   
  - power: supply: ab8500: Fix error handling in ab8500_charger_init() (Yuan Can)   
  - HSI: omap_ssi_core: Fix error handling in ssi_init() (Yuan Can)   
  - power: supply: z2_battery: Fix possible memleak in z2_batt_probe() (Zhang Qilong)   
  - perf symbol: correction while adjusting symbol (Ajay Kaher)   
  - perf trace: Handle failure when trace point folder is missed (Leo Yan)   
  - perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number (Leo Yan)   
  - perf trace: Return error if a system call doesn't exist (Leo Yan)   
  - power: supply: fix residue sysfs file in error handle route of __power_supply_register() (Zeng Heng)   
  - HSI: omap_ssi_core: fix possible memory leak in ssi_probe() (Yang Yingliang)   
  - HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() (Yang Yingliang)   
  - fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() (Christophe JAILLET)   
  - fbdev: uvesafb: don't build on UML (Randy Dunlap)   
  - fbdev: geode: don't build on UML (Randy Dunlap)   
  - fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() (Gaosheng Cui)   
  - fbdev: vermilion: decrease reference count in error path (Xiongfeng Wang)   
  - fbdev: via: Fix error in via_core_init() (Shang XiaoJing)   
  - fbdev: pm2fb: fix missing pci_disable_device() (Yang Yingliang)   
  - fbdev: ssd1307fb: Drop optional dependency (Andy Shevchenko)   
  - thermal/drivers/qcom/lmh: Fix irq handler return value (Bjorn Andersson)   
  - thermal/drivers/qcom/temp-alarm: Fix inaccurate warning for gen2 (Luca Weiss)   
  - thermal/drivers/imx8mm_thermal: Validate temperature range (Marcus Folkesson)   
  - samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() (Shang XiaoJing)   
  - ksmbd: Fix resource leak in ksmbd_session_rpc_open() (Xiu Jianfeng)   
  - tracing/hist: Fix issue of losting command info in error_log (Zheng Yejian)   
  - usb: storage: Add check for kcalloc (Jiasheng Jiang)   
  - i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Zheyu Ma)   
  - i2c: mux: reg: check return value after calling platform_get_resource() (Yang Yingliang)   
  - gpiolib: protect the GPIO device against being dropped while in use by user-space (Bartosz Golaszewski)   
  - gpiolib: make struct comments into real kernel docs (Bartosz Golaszewski)   
  - gpiolib: cdev: fix NULL-pointer dereferences (Bartosz Golaszewski)   
  - gpiolib: Get rid of redundant 'else' (Andy Shevchenko)   
  - vme: Fix error not catched in fake_init() (Chen Zhongjin)   
  - staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() (YueHaibing)   
  - staging: rtl8192u: Fix use after free in ieee80211_rx() (Dan Carpenter)   
  - i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe (Hui Tang)   
  - chardev: fix error handling in cdev_device_add() (Yang Yingliang)   
  - mcb: mcb-parse: fix error handing in chameleon_parse_gdd() (Yang Yingliang)   
  - drivers: mcb: fix resource leak in mcb_probe() (Zhengchao Shao)   
  - usb: gadget: f_hid: fix refcount leak on error path (John Keeping)   
  - usb: gadget: f_hid: fix f_hidg lifetime vs cdev (John Keeping)   
  - usb: roles: fix of node refcount leak in usb_role_switch_is_parent() (Yang Yingliang)   
  - coresight: trbe: remove cpuhp instance node before remove cpuhp state (Yang Shen)   
  - counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update (Fabrice Gasnier)   
  - iio: adis: add '__adis_enable_irq()' implementation (Ramona Bolboaca)   
  - iio:imu:adis: Move exports into IIO_ADISLIB namespace (Jonathan Cameron)   
  - iio: adis: stylistic changes (Nuno Sá)   
  - iio: adis: handle devices that cannot unmask the drdy pin (Nuno Sá)   
  - iio: temperature: ltc2983: make bulk write buffer DMA-safe (Cosmin Tanislav)   
  - cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() (Yang Yingliang)   
  - cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() (Yang Yingliang)   
  - firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() (Yang Yingliang)   
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (Zheng Wang)   
  - misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() (ruanjinjie)   
  - ocxl: fix pci device refcount leak when calling get_function_0() (Yang Yingliang)   
  - misc: ocxl: fix possible name leak in ocxl_file_register_afu() (Yang Yingliang)   
  - test_firmware: fix memory leak in test_firmware_init() (Zhengchao Shao)   
  - serial: sunsab: Fix error handling in sunsab_init() (Yuan Can)   
  - serial: altera_uart: fix locking in polling mode (Gabriel Somlo)   
  - tty: serial: altera_uart_{r,t}x_chars() need only uart_port (Jiri Slaby)   
  - tty: serial: clean up stop-tx part in altera_uart_tx_chars() (Jiri Slaby)   
  - serial: pch: Fix PCI device refcount leak in pch_request_dma() (Xiongfeng Wang)   
  - serial: stm32: move dma_request_chan() before clk_prepare_enable() (Valentin Caron)   
  - serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. (delisun)   
  - serial: amba-pl011: avoid SBSA UART accessing DMACR register (Jiamei Xie)   
  - extcon: usbc-tusb320: Update state on probe even if no IRQ pending (Marek Vasut)   
  - extcon: usbc-tusb320: Add USB TYPE-C support (Marek Vasut)   
  - extcon: usbc-tusb320: Factor out extcon into dedicated functions (Marek Vasut)   
  - usb: typec: Factor out non-PD fwnode properties (Samuel Holland)   
  - extcon: usbc-tusb320: Add support for TUSB320L (Yassine Oudjana)   
  - extcon: usbc-tusb320: Add support for mode setting and reset (Yassine Oudjana)   
  - usb: typec: tipd: Fix spurious fwnode_handle_put in error path (Sven Peter)   
  - usb: typec: tipd: Cleanup resources if devm_tps6598_psy_register fails (Sven Peter)   
  - usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() (Yang Yingliang)   
  - usb: typec: Check for ops->exit instead of ops->enter in altmode_exit (Sven Peter)   
  - staging: vme_user: Fix possible UAF in tsi148_dma_list_add (Gaosheng Cui)   
  - usb: fotg210-udc: Fix ages old endianness issues (Linus Walleij)   
  - uio: uio_dmem_genirq: Fix deadlock between irq config and handling (Rafael Mendonca)   
  - uio: uio_dmem_genirq: Fix missing unlock in irq configuration (Rafael Mendonca)   
  - vfio: platform: Do not pass return buffer to ACPI _RST method (Rafael Mendonca)   
  - class: fix possible memory leak in __class_register() (Yang Yingliang)   
  - serial: 8250_bcm7271: Fix error handling in brcmuart_init() (Yuan Can)   
  - serial: tegra: Read DMA status before terminating (Kartik)   
  - drivers: dio: fix possible memory leak in dio_init() (Yang Yingliang)   
  - RISC-V: Align the shadow stack (Palmer Dabbelt)   
  - IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces (Dragos Tatulea)   
  - hwrng: geode - Fix PCI device refcount leak (Xiongfeng Wang)   
  - hwrng: amd - Fix PCI device refcount leak (Xiongfeng Wang)   
  - crypto: img-hash - Fix variable dereferenced before check 'hdev->req' (Gaosheng Cui)   
  - RDMA/hns: Fix error code of CMD (Chengchang Tang)   
  - RDMA/hns: Fix page size cap from firmware (Chengchang Tang)   
  - RDMA/hns: Fix PBL page MTR find (Chengchang Tang)   
  - RDMA/hns: Fix AH attr queried by query_qp (Chengchang Tang)   
  - orangefs: Fix sysfs not cleanup when dev init failed (Zhang Xiaoxu)   
  - PCI: mt7621: Add sentinel to quirks table (John Thomson)   
  - PCI: mt7621: Rename mt7621_pci_ to mt7621_pcie_ (Bjorn Helgaas)   
  - RDMA/srp: Fix error return code in srp_parse_options() (Wang Yufen)   
  - RDMA/hfi1: Fix error return code in parse_platform_config() (Wang Yufen)   
  - riscv/mm: add arch hook arch_clear_hugepage_flags (Tong Tiangen)   
  - crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() (Shang XiaoJing)   
  - crypto: amlogic - Remove kcalloc without check (Christophe JAILLET)   
  - RDMA/nldev: Fix failure to send large messages (Mark Zhang)   
  - f2fs: avoid victim selection from previous victim section (Yonggil Song)   
  - RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() (Yuan Can)   
  - scsi: snic: Fix possible UAF in snic_tgt_create() (Gaosheng Cui)   
  - scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails (Chen Zhongjin)   
  - scsi: ipr: Fix WARNING in ipr_init() (Shang XiaoJing)   
  - scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper() (Yang Yingliang)   
  - scsi: fcoe: Fix possible name leak when device_register() fails (Yang Yingliang)   
  - scsi: scsi_debug: Fix a warning in resp_report_zones() (Harshit Mogalapalli)   
  - scsi: scsi_debug: Fix a warning in resp_verify() (Harshit Mogalapalli)   
  - scsi: efct: Fix possible memleak in efct_device_init() (Chen Zhongjin)   
  - scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() (Yang Yingliang)   
  - scsi: hpsa: Fix error handling in hpsa_add_sas_host() (Yang Yingliang)   
  - scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() (Yang Yingliang)   
  - padata: Fix list iterator in padata_do_serial() (Daniel Jordan)   
  - padata: Always leave BHs disabled when running ->parallel() (Daniel Jordan)   
  - crypto: tcrypt - Fix multibuffer skcipher speed test mem leak (Zhang Yiqun)   
  - scsi: hpsa: Fix possible memory leak in hpsa_init_one() (Yuan Can)   
  - dt-bindings: visconti-pcie: Fix interrupts array max constraints (Serge Semin)   
  - dt-bindings: imx6q-pcie: Fix clock names for imx6sx and imx8mq (Serge Semin)   
  - RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed (Zhang Xiaoxu)   
  - RDMA/hns: fix memory leak in hns_roce_alloc_mr() (Zhengchao Shao)   
  - crypto: ccree - Make cc_debugfs_global_fini() available for module init function (Uwe Kleine-König)   
  - RDMA/hfi: Decrease PCI device reference count in error path (Xiongfeng Wang)   
  - PCI: Check for alloc failure in pci_request_irq() (Zeng Heng)   
  - RDMA/hns: Fix ext_sge num error when post send (Luoyouming)   
  - RDMA/hns: Repacing 'dseg_len' by macros in fill_ext_sge_inl_data() (Luoyouming)   
  - crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() (Xiongfeng Wang)   
  - crypto: cryptd - Use request context instead of stack for sub-request (Herbert Xu)   
  - crypto: ccree - Remove debugfs when platform_driver_register failed (Gaosheng Cui)   
  - scsi: scsi_debug: Fix a warning in resp_write_scat() (Harshit Mogalapalli)   
  - RDMA/siw: Set defined status for work completion with undefined status (Bernard Metzler)   
  - RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port (Mark Zhang)   
  - RDMA/core: Make sure "ib_port" is valid when access sysfs node (Mark Zhang)   
  - RDMA/restrack: Release MR restrack when delete (Mark Zhang)   
  - PCI: vmd: Disable MSI remapping after suspend (Nirmal Patel)   
  - IB/mad: Don't call to function that might sleep while in atomic context (Leonid Ravich)   
  - RDMA/siw: Fix immediate work request flush to completion queue (Bernard Metzler)   
  - scsi: qla2xxx: Fix set-but-not-used variable warnings (Bart Van Assche)   
  - RDMA/irdma: Report the correct link speed (Shiraz Saleem)   
  - f2fs: fix to destroy sbi->post_read_wq in error path of f2fs_fill_super() (Chao Yu)   
  - f2fs: fix normal discard process (Dongdong Zhang)   
  - f2fs: fix to invalidate dcc->f2fs_issue_discard in error path (Chao Yu)   
  - apparmor: Fix memleak in alloc_ns() (Xiu Jianfeng)   
  - crypto: rockchip - rework by using crypto_engine (Corentin Labbe)   
  - crypto: rockchip - remove non-aligned handling (Corentin Labbe)   
  - crypto: rockchip - better handle cipher key (Corentin Labbe)   
  - crypto: rockchip - add fallback for ahash (Corentin Labbe)   
  - crypto: rockchip - add fallback for cipher (Corentin Labbe)   
  - crypto: rockchip - do not store mode globally (Corentin Labbe)   
  - crypto: rockchip - do not do custom power management (Corentin Labbe)   
  - f2fs: Fix the race condition of resize flag between resizefs (Zhang Qilong)   
  - PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled (Kunihiko Hayashi)   
  - RDMA/core: Fix order of nldev_exit call (Leon Romanovsky)   
  - PCI: dwc: Fix n_fts[] array overrun (Vidya Sagar)   
  - apparmor: Use pointer to struct aa_label for lbs_cred (Xiu Jianfeng)   
  - scsi: core: Fix a race between scsi_done() and scsi_timeout() (Bart Van Assche)   
  - crypto: nitrox - avoid double free on error path in nitrox_sriov_init() (Natalia Petrova)   
  - crypto: sun8i-ss - use dma_addr instead u32 (Corentin Labbe)   
  - crypto: hisilicon/qm - fix missing destroy qp_idr (Weili Qian)   
  - apparmor: Fix abi check to include v8 abi (John Johansen)   
  - apparmor: fix lockdep warning when removing a namespace (John Johansen)   
  - apparmor: fix a memleak in multi_transaction_new() (Gaosheng Cui)   
  - net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path (Vladimir Oltean)   
  - i40e: Fix the inability to attach XDP program on downed interface (Bartosz Staszewski)   
  - stmmac: fix potential division by 0 (Piergiorgio Beruto)   
  - Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: btintel: Fix missing free skb in btintel_setup_combined() (Wang ShaoBo)   
  - Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS (Inga Stotland)   
  - sctp: sysctl: make extra pointers netns aware (Firo Yang)   
  - ntb_netdev: Use dev_kfree_skb_any() in interrupt context (Eric Pilmore)   
  - net: lan9303: Fix read error execution path (Jerry Ray)   
  - can: tcan4x5x: Fix use of register error status mask (Markus Schneider-Pargmann)   
  - can: m_can: Call the RAM init directly from m_can_chip_config (Vivek Yadav)   
  - can: tcan4x5x: Remove invalid write in clear_interrupts (Markus Schneider-Pargmann)   
  - net: amd-xgbe: Check only the minimum speed for active/passive cables (Tom Lendacky)   
  - net: amd-xgbe: Fix logic around active and passive cables (Tom Lendacky)   
  - af_unix: call proto_unregister() in the error path in af_unix_init() (Yang Yingliang)   
  - net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net/tunnel: wait until all sk_user_data reader finish before releasing the sock (Hangbin Liu)   
  - net: farsync: Fix kmemleak when rmmods farsync (Li Zetao)   
  - ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() (ruanjinjie)   
  - drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() (Yuan Can)   
  - net: stmmac: fix possible memory leak in stmmac_dvr_probe() (Gaosheng Cui)   
  - net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() (Zhang Changzhong)   
  - net: defxx: Fix missing err handling in dfx_init() (Yongqiang Liu)   
  - net: vmw_vsock: vmci: Check memcpy_from_msg() (Artem Chernyshev)   
  - clk: socfpga: Fix memory leak in socfpga_gate_init() (Xiu Jianfeng)   
  - bpf: Do not zero-extend kfunc return values (Björn Töpel)   
  - blktrace: Fix output non-blktrace event when blk_classic option enabled (Yang Jihong)   
  - wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() (Wang Yufen)   
  - wifi: rtl8xxxu: Fix the channel width reporting (Bitterblue Smith)   
  - wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h (Bitterblue Smith)   
  - spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode (Kris Bahnsen)   
  - clk: samsung: Fix memory leak in _samsung_clk_register_pll() (Xiu Jianfeng)   
  - media: coda: Add check for kmalloc (Jiasheng Jiang)   
  - media: coda: Add check for dcoda_iram_alloc (Jiasheng Jiang)   
  - media: c8sectpfe: Add of_node_put() when breaking out of loop (Liang He)   
  - regulator: qcom-labibb: Fix missing of_node_put() in qcom_labibb_regulator_probe() (Yuan Can)   
  - mmc: core: Normalize the error handling branch in sd_read_ext_regs() (Zhen Lei)   
  - memstick/ms_block: Add check for alloc_ordered_workqueue (Jiasheng Jiang)   
  - memstick: ms_block: Add error handling support for add_disk() (Luis Chamberlain)   
  - mmc: renesas_sdhi: alway populate SCC pointer (Wolfram Sang)   
  - mmc: mmci: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: wbsd: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: via-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: meson-gx: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: omap_hsmmc: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: atmel-mci: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: wmt-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: vub300: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: toshsd: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: rtsx_pci: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: pxamci: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: mxcmmc: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: moxart: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: alcor: fix return value check of mmc_add_host() (Yang Yingliang)   
  - riscv, bpf: Emit fixed-length instructions for BPF_PSEUDO_FUNC (Pu Lehui)   
  - NFSv4.x: Fail client initialisation if state manager thread can't run (Trond Myklebust)   
  - SUNRPC: Fix missing release socket in rpc_sockname() (Wang ShaoBo)   
  - xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (Zhang Xiaoxu)   
  - ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt (Gaosheng Cui)   
  - media: saa7164: fix missing pci_disable_device() (Liu Shixin)   
  - ALSA: pcm: Set missing stop_operating flag at undoing trigger start (Takashi Iwai)   
  - bpf, sockmap: fix race in sock_map_free() (Eric Dumazet)   
  - hwmon: (jc42) Restore the min/max/critical temperatures on resume (Martin Blumenstingl)   
  - hwmon: (jc42) Convert register access and caching to regmap/regcache (Martin Blumenstingl)   
  - regulator: core: fix resource leak in regulator_register() (Yang Yingliang)   
  - configfs: fix possible memory leak in configfs_create_dir() (Chen Zhongjin)   
  - hsr: Synchronize sequence number updates. (Sebastian Andrzej Siewior)   
  - hsr: Synchronize sending frames to have always incremented outgoing seq nr. (Sebastian Andrzej Siewior)   
  - hsr: Disable netpoll. (Sebastian Andrzej Siewior)   
  - hsr: Avoid double remove of a node. (Sebastian Andrzej Siewior)   
  - hsr: Add a rcu-read lock to hsr_forward_skb(). (Sebastian Andrzej Siewior)   
  - clk: qcom: clk-krait: fix wrong div2 functions (Christian Marangi)   
  - clk: qcom: lpass-sc7180: Fix pm_runtime usage (Douglas Anderson)   
  - regulator: core: fix module refcount leak in set_supply() (Yang Yingliang)   
  - wifi: mt76: fix coverity overrun-call in mt76_get_txpower() (Deren Wu)   
  - wifi: mt76: mt7921: fix reporting of TX AGGR histogram (Lorenzo Bianconi)   
  - mt76: stop the radar detector after leaving dfs channel (Xing Song)   
  - wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails (Chen Zhongjin)   
  - wifi: mac80211: fix memory leak in ieee80211_if_add() (Zhengchao Shao)   
  - spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE (Alexander Sverdlin)   
  - bonding: uninitialized variable in bond_miimon_inspect() (Dan Carpenter)   
  - bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect (Pengcheng Yang)   
  - bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes (Pengcheng Yang)   
  - bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data (Pengcheng Yang)   
  - Input: wistron_btns - disable on UML (Randy Dunlap)   
  - netfilter: conntrack: set icmpv6 redirects as RELATED (Florian Westphal)   
  - ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe (Zhang Qilong)   
  - drm/amdkfd: Fix memory leakage (Konstantin Meskhidze)   
  - drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() (Xiongfeng Wang)   
  - drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() (Xiongfeng Wang)   
  - drm/amd/pm/smu11: BACO is supported when it's in BACO state (Guchun Chen)   
  - ASoC: mediatek: mt8173: Enable IRQ when pdata is ready (Ricardo Ribalda)   
  - ASoC: mediatek: mt8173: Fix debugfs registration for components (AngeloGioacchino Del Regno)   
  - wifi: iwlwifi: mvm: fix double free on tx path. (Ben Greear)   
  - ALSA: asihpi: fix missing pci_disable_device() (Liu Shixin)   
  - NFS: Fix an Oops in nfs_d_automount() (Trond Myklebust)   
  - NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (Trond Myklebust)   
  - NFSv4: Fix a credential leak in _nfs4_discover_trunking() (Trond Myklebust)   
  - NFSv4.2: Fix initialisation of struct nfs4_label (Trond Myklebust)   
  - NFSv4.2: Fix a memory stomp in decode_attr_security_label (Trond Myklebust)   
  - NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding (Trond Myklebust)   
  - ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd (Jiasheng Jiang)   
  - ASoC: dt-bindings: wcd9335: fix reset line polarity in example (Dmitry Torokhov)   
  - drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() (Zhang Zekun)   
  - media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC (Aakarsh Jain)   
  - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() (Baisong Zhong)   
  - media: dvb-core: Fix ignored return value in dvb_register_frontend() (Chen Zhongjin)   
  - pinctrl: pinconf-generic: add missing of_node_put() (ZhangPeng)   
  - clk: imx8mn: fix imx8mn_enet_phy_sels clocks list (Dario Binacchi)   
  - clk: imx8mn: fix imx8mn_sai2_sels clocks list (Dario Binacchi)   
  - clk: imx: replace osc_hdmi with dummy (Dario Binacchi)   
  - clk: imx8mn: rename vpu_pll to m7_alt_pll (Dario Binacchi)   
  - media: imon: fix a race condition in send_packet() (Gautam Menghani)   
  - media: vimc: Fix wrong function called when vimc_init() fails (Chen Zhongjin)   
  - ASoC: qcom: Add checks for devm_kcalloc (Yuan Can)   
  - drbd: destroy workqueue when drbd device was freed (Wang ShaoBo)   
  - drbd: remove call to memset before free device/resource/connection (Wang ShaoBo)   
  - mtd: maps: pxa2xx-flash: fix memory leak in probe (Zheng Yongjun)   
  - bonding: fix link recovery in mode 2 when updelay is nonzero (Jonathan Toppins)   
  - drm/amdgpu: fix pci device refcount leak (Yang Yingliang)   
  - clk: rockchip: Fix memory leak in rockchip_clk_register_pll() (Xiu Jianfeng)   
  - regulator: core: use kfree_const() to free space conditionally (Wang ShaoBo)   
  - ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT (Baisong Zhong)   
  - ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT (Baisong Zhong)   
  - pinctrl: k210: call of_node_put() (ZhangPeng)   
  - HID: hid-sensor-custom: set fixed size for custom attributes (Marcus Folkesson)   
  - bpf: Move skb->len == 0 checks into __bpf_redirect (Stanislav Fomichev)   
  - mtd: spi-nor: Fix the number of bytes for the dummy cycles (Allen-KH Cheng)   
  - mtd: spi-nor: hide jedec_id sysfs attribute if not present (Michael Walle)   
  - inet: add READ_ONCE(sk->sk_bound_dev_if) in inet_csk_bind_conflict() (Eric Dumazet)   
  - media: videobuf-dma-contig: use dma_mmap_coherent (Christoph Hellwig)   
  - media: platform: exynos4-is: Fix error handling in fimc_md_init() (Yuan Can)   
  - media: solo6x10: fix possible memory leak in solo_sysfs_init() (Yang Yingliang)   
  - media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init() (Chen Zhongjin)   
  - Input: elants_i2c - properly handle the reset GPIO when power is off (Douglas Anderson)   
  - mtd: lpddr2_nvm: Fix possible null-ptr-deref (Hui Tang)   
  - drm/msm/a6xx: Fix speed-bin detection vs probe-defer (Rob Clark)   
  - wifi: ath10k: Fix return value in ath10k_pci_init() (Xiu Jianfeng)   
  - block: clear ->slave_dir when dropping the main slave_dir reference (Christoph Hellwig)   
  - ima: Fix misuse of dereference of pointer in template_desc_init_fields() (Xiu Jianfeng)   
  - integrity: Fix memory leakage in keyring allocation error path (GUO Zihua)   
  - drm/fourcc: Fix vsub/hsub for Q410 and Q401 (Brian Starkey)   
  - drm/fourcc: Add packed 10bit YUV 4:2:0 format (Dave Stevenson)   
  - regulator: qcom-rpmh: Fix PMR735a S3 regulator spec (Konrad Dybcio)   
  - nvme: return err on nvme_init_non_mdts_limits fail (Joel Granados)   
  - amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() (Dan Carpenter)   
  - regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() (Yang Yingliang)   
  - nvmet: only allocate a single slab for bvecs (Christoph Hellwig)   
  - libbpf: Fix uninitialized warning in btf_dump_dump_type_data (David Michael)   
  - ASoC: pxa: fix null-pointer dereference in filter() (Zeng Heng)   
  - drm/mediatek: Modify dpi power on/off sequence. (Xinlei Lee)   
  - drm/radeon: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo)   
  - bfq: fix waker_bfqq inconsistency crash (Khazhismel Kumykov)   
  - rxrpc: Fix ack.bufferSize to be 0 when generating an ack (David Howells)   
  - net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write() (David Howells)   
  - media: camss: Clean up received buffers on failed start of streaming (Vladimir Zapolskiy)   
  - wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port (Marek Vasut)   
  - Input: joystick - fix Kconfig warning for JOYSTICK_ADC (Randy Dunlap)   
  - mtd: Fix device name leak when register device failed in add_mtd_device() (Zhang Xiaoxu)   
  - clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs (Manivannan Sadhasivam)   
  - bpf: propagate precision across all frames, not just the last one (Andrii Nakryiko)   
  - bpf: Check the other end of slot_type for STACK_SPILL (Martin KaFai Lau)   
  - bpf: propagate precision in ALU/ALU64 operations (Andrii Nakryiko)   
  - media: platform: exynos4-is: fix return value check in fimc_md_probe() (Yang Yingliang)   
  - media: vivid: fix compose size exceed boundary (Liu Shixin)   
  - bpf: Fix slot type check in check_stack_write_var_off (Kumar Kartikeya Dwivedi)   
  - drm/msm/hdmi: use devres helper for runtime PM management (Dmitry Baryshkov)   
  - drm/msm/hdmi: drop unused GPIO support (Dmitry Baryshkov)   
  - ima: Handle -ESTALE returned by ima_filter_rule_match() (GUO Zihua)   
  - drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure (Marek Vasut)   
  - spi: Update reference to struct spi_controller (Jonathan Neuschäfer)   
  - clk: renesas: r9a06g032: Repair grave increment error (Marek Vasut)   
  - drm/rockchip: lvds: fix PM usage counter unbalance in poweron (Zhang Qilong)   
  - can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming (Jimmy Assarsson)   
  - can: kvaser_usb: Add struct kvaser_usb_busparams (Jimmy Assarsson)   
  - can: kvaser_usb_leaf: Fix bogus restart events (Anssi Hannula)   
  - can: kvaser_usb_leaf: Fix wrong CAN state after stopping (Anssi Hannula)   
  - can: kvaser_usb_leaf: Fix improved state not being reported (Anssi Hannula)   
  - can: kvaser_usb: make use of units.h in assignment of frequency (Jimmy Assarsson)   
  - can: kvaser_usb_leaf: Set Warning state even without bus errors (Anssi Hannula)   
  - can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT (Jimmy Assarsson)   
  - can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event (Jimmy Assarsson)   
  - can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device (Jimmy Assarsson)   
  - can: kvaser_usb: do not increase tx statistics when sending error message frames (Vincent Mailhol)   
  - libbpf: Btf dedup identical struct test needs check for nested structs/arrays (Alan Maguire)   
  - media: exynos4-is: don't rely on the v4l2_async_subdev internals (Marek Szyprowski)   
  - soreuseport: Fix socket selection for SO_INCOMING_CPU. (Kuniyuki Iwashima)   
  - venus: pm_helpers: Fix error check in vcodec_domains_get() (Tang Bin)   
  - media: i2c: ad5820: Fix error path (Ricardo Ribalda)   
  - media: adv748x: afe: Select input port when initializing AFE (Niklas Söderlund)   
  - media: coda: jpeg: Add check for kmalloc (Jiasheng Jiang)   
  - media: v4l2-ctrls: Fix off-by-one error in integer menu control check (Laurent Pinchart)   
  - drm/amdgpu/powerplay/psm: Fix memory leak in power state init (Rafael Mendonca)   
  - ipmi: kcs: Poll OBF briefly to reduce OBE latency (Andrew Jeffery)   
  - ata: libata: fix NCQ autosense logic (Niklas Cassel)   
  - ata: add/use ata_taskfile::{error|status} fields (Sergey Shtylyov)   
  - ata: libata: move ata_{port,link,dev}_dbg to standard pr_XXX() macros (Hannes Reinecke)   
  - libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() (Shung-Hsi Yu)   
  - libbpf: Fix use-after-free in btf_dump_name_dups (Xu Kuohai)   
  - drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge (Abhinav Kumar)   
  - wifi: rtl8xxxu: Fix reading the vendor of combo chips (Bitterblue Smith)   
  - wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() (Fedor Pchelkin)   
  - wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() (Fedor Pchelkin)   
  - platform/mellanox: mlxbf-pmc: Fix event typo (James Hurley)   
  - rapidio: devices: fix missing put_device in mport_cdev_open (Cai Xinchen)   
  - hfs: Fix OOB Write in hfs_asc2mac (ZhangPeng)   
  - relay: fix type mismatch when allocating memory in relay_create_buf() (Gavrilov Ilia)   
  - eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD (Zhang Qilong)   
  - rapidio: fix possible UAF when kfifo_alloc() fails (Wang Weiyang)   
  - fs: sysv: Fix sysv_nblocks() returns wrong value (Chen Zhongjin)   
  - lockd: set other missing fields when unlocking files (Trond Myklebust)   
  - MIPS: OCTEON: warn only once if deprecated link status is being used (Ladislav Michl)   
  - MIPS: BCM63xx: Add check for NULL for clk in clk_enable (Anastasia Belova)   
  - platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register() (Yang Yingliang)   
  - platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() (Yu Liao)   
  - platform/chrome: cros_ec_typec: zero out stale pointers (Victor Ding)   
  - platform/chrome: cros_ec_typec: Cleanup switch handle return paths (Prashant Malani)   
  - PM: runtime: Do not call __rpm_callback() from rpm_idle() (Rafael J. Wysocki)   
  - xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() (Harshit Mogalapalli)   
  - x86/xen: Fix memory leak in xen_init_lock_cpu() (Xiu Jianfeng)   
  - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Xiu Jianfeng)   
  - uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix (Oleg Nesterov)   
  - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (Li Zetao)   
  - clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock() (Yang Yingliang)   
  - cpu/hotplug: Do not bail-out in DYING/STARTING sections (Vincent Donnefort)   
  - cpu/hotplug: Make target_store() a nop when target == state (Phil Auld)   
  - futex: Resend potentially swallowed owner death notification (Alexey Izbyshev)   
  - futex: Move to kernel/futex/ (Peter Zijlstra)   
  - mips: ralink: mt7621: do not use kzalloc too early (John Thomson)   
  - mips: ralink: mt7621: soc queries and tests as functions (John Thomson)   
  - mips: ralink: mt7621: define MT7621_SYSC_BASE with __iomem (John Thomson)   
  - clocksource/drivers/sh_cmt: Access registers according to spec (Wolfram Sang)   
  - rapidio: rio: fix possible name leak in rio_register_mport() (Yang Yingliang)   
  - rapidio: fix possible name leaks when rio_add_device() fails (Yang Yingliang)   
  - debugfs: fix error when writing negative value to atomic_t debugfs file (Akinobu Mita)   
  - lib/notifier-error-inject: fix error when writing -errno to debugfs file (Akinobu Mita)   
  - libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value (Akinobu Mita)   
  - cpufreq: amd_freq_sensitivity: Add missing pci_dev_put() (Xiongfeng Wang)   
  - genirq/irqdesc: Don't try to remove non-existing sysfs files (Yang Yingliang)   
  - nfsd: don't call nfsd_file_put from client states seqfile display (Jeff Layton)   
  - NFSD: Finish converting the NFSv2 GETACL result encoder (Chuck Lever)   
  - SUNRPC: Return true/false (not 1/0) from bool functions (Haowen Bai)   
  - EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (Yang Yingliang)   
  - irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init() (Wei Yongjun)   
  - irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() (Shang XiaoJing)   
  - thermal: core: fix some possible name leaks in error paths (Yang Yingliang)   
  - platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() (Yuan Can)   
  - perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() (Xiongfeng Wang)   
  - perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() (Xiongfeng Wang)   
  - perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() (Xiongfeng Wang)   
  - perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() (Xiongfeng Wang)   
  - PNP: fix name memory leak in pnp_alloc_dev() (Yang Yingliang)   
  - selftests/efivarfs: Add checking of the test return value (Zhao Gongyi)   
  - MIPS: vpe-cmp: fix possible memory leak while module exiting (Yang Yingliang)   
  - MIPS: vpe-mt: fix possible memory leak while module exiting (Yang Yingliang)   
  - ocfs2: fix memory leak in ocfs2_stack_glue_init() (Shang XiaoJing)   
  - lib/fonts: fix undefined behavior in bit shift for get_default_font (Gaosheng Cui)   
  - proc: fixup uptime selftest (Alexey Dobriyan)   
  - timerqueue: Use rb_entry_safe() in timerqueue_getnext() (Barnabás Pőcze)   
  - platform/x86: huawei-wmi: fix return value calculation (Barnabás Pőcze)   
  - lib/debugobjects: fix stat count and optimize debug_objects_mem_init (wuchi)   
  - perf: Fix possible memleak in pmu_dev_alloc() (Chen Zhongjin)   
  - selftests/ftrace: event_triggers: wait longer for test_event_enable (Yipeng Zou)   
  - cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut() (Chen Hui)   
  - fs: don't audit the capability check in simple_xattr_list() (Ondrej Mosnacek)   
  - PM: hibernate: Fix mistake in kerneldoc comment (xiongxin)   
  - x86/sgx: Reduce delay and interference of enclave release (Reinette Chatre)   
  - alpha: fix syscall entry in !AUDUT_SYSCALL case (Al Viro)   
  - alpha: fix TIF_NOTIFY_SIGNAL handling (Al Viro)   
  - cpuidle: dt: Return the correct numbers of parsed idle states (Ulf Hansson)   
  - sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() (Qais Yousef)   
  - sched/core: Introduce sched_asym_cpucap_active() (Dietmar Eggemann)   
  - sched/fair: Removed useless update of p->recent_used_cpu (Vincent Guittot)   
  - sched/uclamp: Make select_idle_capacity() use util_fits_cpu() (Qais Yousef)   
  - sched/uclamp: Make task_fits_capacity() use util_fits_cpu() (Qais Yousef)   
  - sched/uclamp: Fix relationship between uclamp and migration margin (Qais Yousef)   
  - sched/fair: Cleanup task_util and capacity type (Vincent Donnefort)   
  - ovl: remove privs in ovl_fallocate() (Amir Goldstein)   
  - ovl: remove privs in ovl_copyfile() (Amir Goldstein)   
  - ovl: use ovl_copy_{real,upper}attr() wrappers (Christian Brauner)   
  - ovl: store lower path in ovl_inode (Amir Goldstein)   
  - tpm/tpm_crb: Fix error message in __crb_relinquish_locality() (Michael Kelley)   
  - tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init() (Yuan Can)   
  - pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP (Stephen Boyd)   
  - ARM: mmp: fix timer_read delay (Doug Brown)   
  - pstore/ram: Fix error return code in ramoops_probe() (Wang Yufen)   
  - seccomp: Move copy_seccomp() to no failure path. (Kuniyuki Iwashima)   
  - arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC (Pali Rohár)   
  - ARM: dts: turris-omnia: Add switch port 6 node (Pali Rohár)   
  - ARM: dts: turris-omnia: Add ethernet aliases (Pali Rohár)   
  - ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name (AngeloGioacchino Del Regno)   
  - arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings (AngeloGioacchino Del Regno)   
  - arm64: dts: mt2712-evb: Fix usb vbus regulators unit names (AngeloGioacchino Del Regno)   
  - arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names (AngeloGioacchino Del Regno)   
  - arm64: dts: mt2712e: Fix unit address for pinctrl node (AngeloGioacchino Del Regno)   
  - arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators (AngeloGioacchino Del Regno)   
  - arm64: dts: mt6779: Fix devicetree build warnings (AngeloGioacchino Del Regno)   
  - ARM: dts: nuvoton: Remove bogus unit addresses from fixed-partition nodes (Jonathan Neuschäfer)   
  - arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node (Jayesh Choudhary)   
  - arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node (Jayesh Choudhary)   
  - perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() (Shang XiaoJing)   
  - perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() (Shang XiaoJing)   
  - perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() (Yuan Can)   
  - arm64: mm: kfence: only handle translation faults (Mark Rutland)   
  - arm64: Treat ESR_ELx as a 64-bit register (Alexandru Elisei)   
  - soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe (Zhang Qilong)   
  - soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe (Zhang Qilong)   
  - soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync (Minghao Chi)   
  - arm: dts: spear600: Fix clcd interrupt (Kory Maincent)   
  - arm64: dts: qcom: sm6125: fix SDHCI CQE reg names (Krzysztof Kozlowski)   
  - soc: qcom: apr: Add check for idr_alloc and of_property_read_string_index (Jiasheng Jiang)   
  - soc: qcom: apr: make code more reuseable (Srinivas Kandagatla)   
  - arm64: dts: qcom: sm8250: drop bogus DP PHY clock (Johan Hovold)   
  - arm64: dts: qcom: sm8350: fix UFS PHY registers (Johan Hovold)   
  - arm64: dts: qcom: sm8250: fix UFS PHY registers (Johan Hovold)   
  - arm64: dts: qcom: sm8150: fix UFS PHY registers (Johan Hovold)   
  - arm64: dts: qcom: Correct QMP PHY child node name (Shawn Guo)   
  - soc: qcom: llcc: make irq truly optional (Luca Weiss)   
  - arm64: dts: qcom: sm8250: correct LPASS pin pull down (Krzysztof Kozlowski)   
  - arm64: dts: qcom: pm660: Use unique ADC5_VCOIN address in node name (Marijn Suijten)   
  - drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static (Chen Jiahao)   
  - ARM: dts: stm32: Fix AV96 WLAN regulator gpio property (Marek Vasut)   
  - ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96 (Marek Vasut)   
  - objtool, kcsan: Add volatile read/write instrumentation to whitelist (Marco Elver)   
  - arm64: dts: qcom: msm8916: Drop MSS fallback compatible (Stephan Gerhold)   
  - arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias (Krzysztof Kozlowski)   
  - arm64: dts: qcom: sdm630: fix UART1 pin bias (Krzysztof Kozlowski)   
  - ARM: dts: qcom: apq8064: fix coresight compatible (Luca Weiss)   
  - arm64: dts: qcom: msm8996: fix GPU OPP table (Dmitry Baryshkov)   
  - arm64: dts: qcom: msm8996: fix supported-hw in cpufreq OPP tables (Dmitry Baryshkov)   
  - arm64: dts: qcom: msm8996: Add MSM8996 Pro support (Yassine Oudjana)   
  - arm64: dts: qcom: sm8250-sony-xperia-edo: fix touchscreen bias-disable (Krzysztof Kozlowski)   
  - arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins (Krzysztof Kozlowski)   
  - usb: musb: remove extra check in musb_gadget_vbus_draw (Ivaylo Dimitrov)   
  - drm/amd/display: Manually adjust strobe for DCN303 (Martin Leung)   
  - LTS version: v5.15.85 (Jack Vogel)   
  - net: loopback: use NET_NAME_PREDICTABLE for name_assign_type (Rasmus Villemoes)   
  - selftests: net: Use "grep -E" instead of "egrep" (Tiezhu Yang)   
  - Bluetooth: L2CAP: Fix u8 overflow (Sungwoo Kim)   
  - HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk (José Expósito)   
  - usb: dwc3: pci: Update PCIe device ID for USB3 controller on CPU sub-system for Raptor Lake (Shruthi Sanil)   
  - igb: Initialize mailbox message for VF reset (Tony Nguyen)   
  - xhci: Apply XHCI_RESET_TO_DEFAULT quirk to ADL-N (Reka Norman)   
  - USB: serial: f81534: fix division by zero on line-speed change (Johan Hovold)   
  - USB: serial: f81232: fix division by zero on line-speed change (Johan Hovold)   
  - USB: serial: cp210x: add Kamstrup RF sniffer PIDs (Bruno Thomsen)   
  - USB: serial: option: add Quectel EM05-G modem (Duke Xin)   
  - usb: gadget: uvc: Prevent buffer overflow in setup handler (Szymon Heidrich)   
  - udf: Fix extending file within last block (Jan Kara)   
  - udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size (Jan Kara)   
  - udf: Fix preallocation discarding at indirect extent boundary (Jan Kara)   
  - udf: Discard preallocation before extending file with a hole (Jan Kara)   
  - LTS version: v5.15.84 (Jack Vogel)   
  - net: fec: properly guard irq coalesce setup (Rasmus Villemoes)   
  - ASoC: ops: Correct bounds check for second channel on SX controls (Charles Keepax)   
  - nvme-pci: clear the prp2 field when not used (Lei Rao)   
  - perf: Fix perf_pending_task() UaF (Peter Zijlstra)   
  - ASoC: cs42l51: Correct PGA Volume minimum value (Charles Keepax)   
  - net: fec: don't reset irq coalesce settings to defaults on "ip link up" (Rasmus Villemoes)   
  - can: mcba_usb: Fix termination command argument (Yasushi SHOJI)   
  - can: sja1000: fix size of OCR_MODE_MASK define (Heiko Schocher)   
  - pinctrl: meditatek: Startup with the IRQs disabled (Ricardo Ribalda)   
  - libbpf: Use page size as max_entries when probing ring buffer map (Hou Tao)   
  - ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() (Mark Brown)   
  - ASoC: fsl_micfil: explicitly clear CHnF flags (Shengjiu Wang)   
  - ASoC: fsl_micfil: explicitly clear software reset bit (Shengjiu Wang)   
  - nfp: fix use-after-free in area_cache_get() (Jialiang Wang) [Orabug: 34719738] {CVE-2022-3545}
  - vfs: fix copy_file_range() averts filesystem freeze protection (Amir Goldstein)   
  - x86/vdso: Conditionally export __vdso_sgx_enter_enclave() (Nathan Chancellor)   
  - LTS version: v5.15.83 (Jack Vogel)   
  - io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() (Harshit Mogalapalli)   
  - io_uring: move to separate directory (Jens Axboe)   
  - block: move CONFIG_BLOCK guard to top Makefile (Masahiro Yamada)   
  - can: esd_usb: Allow REC and TEC to return to zero (Frank Jungclaus)   
  - s390/qeth: fix use-after-free in hsci (Alexandra Winter)   
  - s390/qeth: fix various format strings (Heiko Carstens)   
  - macsec: add missing attribute validation for offload (Emeel Hakim)   
  - net: mvneta: Fix an out of bounds check (Dan Carpenter)   
  - net: thunderbolt: fix memory leak in tbnet_open() (Zhengchao Shao)   
  - ipv6: avoid use-after-free in ip6_fragment() (Eric Dumazet)   
  - net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq() (Yang Yingliang)   
  - net: phy: mxl-gpy: fix version reporting (Michael Walle)   
  - xen/netback: fix build warning (Juergen Gross)   
  - dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove() (Yuan Can)   
  - ethernet: aeroflex: fix potential skb leak in greth_init_rings() (Zhang Changzhong)   
  - tipc: call tipc_lxc_xmit without holding node_read_lock (Xin Long)   
  - net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() (Zhengchao Shao)   
  - ipv4: Fix incorrect route flushing when table ID 0 is used (Ido Schimmel)   
  - ipv4: Fix incorrect route flushing when source address is deleted (Ido Schimmel)   
  - tipc: Fix potential OOB in tipc_link_proto_rcv() (YueHaibing)   
  - net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (Liu Jian)   
  - net: mdio: fix unbalanced fwnode reference count in mdio_device_release() (Zeng Heng)   
  - net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (Liu Jian)   
  - net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq (Yongqiang Liu)   
  - net: microchip: sparx5: Fix missing destroy_workqueue of mact_queue (Qiheng Lin)   
  - ip_gre: do not report erspan version on GRE interface (Hangbin Liu)   
  - net: stmmac: fix "snps,axi-config" node property parsing (Jisheng Zhang)   
  - gpio/rockchip: fix refcount leak in rockchip_gpiolib_register() (Wang Yufen)   
  - nvme initialize core quirks before calling nvme_init_subsystem (Pankaj Raghav)   
  - NFC: nci: Bounds check struct nfc_target arrays (Kees Cook)   
  - i40e: Disallow ip4 and ip6 l4_4_bytes (Przemyslaw Patynowski)   
  - i40e: Fix for VF MAC address 0 (Sylwester Dziedziuch)   
  - i40e: Fix not setting default xps_cpus after reset (Michal Jaron)   
  - net: mvneta: Prevent out of bounds read in mvneta_config_rss() (Dan Carpenter)   
  - xen-netfront: Fix NULL sring after live migration (Lin Liu)   
  - octeontx2-pf: Fix potential memory leak in otx2_init_tc() (Ziyang Xuan)   
  - net: mdiobus: fix double put fwnode in the error path (Yang Yingliang)   
  - net: mdiobus: fwnode_mdiobus_register_phy() rework error handling (Oleksij Rempel)   
  - net: encx24j600: Fix invalid logic in reading of MISTAT register (Valentina Goncharenko)   
  - net: encx24j600: Add parentheses to fix precedence (Valentina Goncharenko)   
  - mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (Wei Yongjun)   
  - selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload (Zhengchao Shao)   
  - net: dsa: sja1105: Check return value (Artem Chernyshev)   
  - net: dsa: hellcreek: Check return value (Artem Chernyshev)   
  - net: dsa: ksz: Check return value (Artem Chernyshev)   
  - Bluetooth: Fix not cleanup led when bt_init fails (Chen Zhongjin)   
  - Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() (Wang ShaoBo)   
  - vmxnet3: use correct intrConf reference when using extended queues (Ronak Doshi)   
  - vmxnet3: correctly report encapsulated LRO packet (Ronak Doshi)   
  - af_unix: Get user_ns from in_skb in unix_diag_get_exact(). (Kuniyuki Iwashima)   
  - drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420 (Guillaume BRUN)   
  - net: broadcom: Add PTP_1588_CLOCK_OPTIONAL dependency for BCMGENET under ARCH_BCM2835 (YueHaibing)   
  - igb: Allocate MSI-X vector when testing (Akihiko Odaki)   
  - e1000e: Fix TX dispatch condition (Akihiko Odaki)   
  - gpio: amd8111: Fix PCI device reference count leak (Xiongfeng Wang)   
  - drm/bridge: ti-sn65dsi86: Fix output polarity setting bug (Qiqi Zhang)   
  - netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark (Pablo Neira Ayuso)   
  - ca8210: Fix crash by zero initializing data (Hauke Mehrtens)   
  - ieee802154: cc2520: Fix error return code in cc2520_hw_init() (Ziyang Xuan)   
  - drm/vmwgfx: Fix race issue calling pin_user_pages (Dawei Li)   
  - netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one (Stefano Brivio)   
  - gpiolib: fix memory leak in gpiochip_setup_dev() (Zeng Heng)   
  - gpiolib: check the 'ngpios' property in core gpiolib code (Bartosz Golaszewski)   
  - gpiolib: improve coding style for local variables (Bartosz Golaszewski)   
  - clk: Fix pointer casting to prevent oops in devm_clk_release() (Uwe Kleine-König)   
  - can: af_can: fix NULL pointer dereference in can_rcv_filter (Oliver Hartkopp)   
  - HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10 (Hans de Goede)   
  - HID: core: fix shift-out-of-bounds in hid_report_raw_event (ZhangPeng)   
  - HID: hid-lg4ff: Add check for empty lbuf (Anastasia Belova)   
  - HID: usbhid: Add ALWAYS_POLL quirk for some mice (Ankit Patel)   
  - net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() (Radu Nicolae Pirea (OSS))   
  - drm/shmem-helper: Avoid vm_open error paths (Rob Clark)   
  - drm/shmem-helper: Remove errant put in error path (Rob Clark)   
  - drm/amdgpu/sdma_v4_0: turn off SDMA ring buffer in the s2idle suspend (Prike Liang)   
  - drm/vmwgfx: Don't use screen objects when SEV is active (Zack Rusin)   
  - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth)   
  - Bluetooth: Fix crash when replugging CSR fake controllers (Luiz Augusto von Dentz)   
  - Bluetooth: btusb: Add debug message for CSR controllers (Ismael Ferreras Morezuelas)   
  - mm/gup: fix gup_pud_range() for dax (John Starks)   
  - memcg: fix possible use-after-free in memcg_write_event_control() (Tejun Heo)   
  - media: v4l2-dv-timings.c: fix too strict blanking sanity checks (Hans Verkuil)   
  - Revert "ARM: dts: imx7: Fix NAND controller size-cells" (Francesco Dolcini)   
  - soundwire: intel: Initialize clock stop timeout (Sjoerd Simons)   
  - media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area() (Hans Verkuil)   
  - xen/netback: don't call kfree_skb() with interrupts disabled (Juergen Gross)   
  - xen/netback: do some code cleanup (Juergen Gross)   
  - xen/netback: Ensure protocol headers don't fall in the non-linear area (Ross Lagerwall)   
  - drm/bridge: anx7625: Fix edid_read break case in sp_tx_edid_read() (Hsin-Yi Wang)   
  - cifs: fix use-after-free caused by invalid pointer `hostname` (Zeng Heng)   
  - rtc: cmos: avoid UIP when reading alarm time (Mateusz Jończyk)   
  - rtc: cmos: avoid UIP when writing alarm time (Mateusz Jończyk)   
  - rtc: mc146818-lib: extract mc146818_avoid_UIP (Mateusz Jończyk)   
  - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths (Jann Horn)   
  - mm/khugepaged: fix GUP-fast interaction by sending IPI (Jann Horn)   
  - mm/khugepaged: take the right locks for page table retraction (Jann Horn)   
  - net: usb: qmi_wwan: add u-blox 0x1342 composition (Davide Tronchin)   
  - 9p/xen: check logical size for buffer size (Dominique Martinet)   
  - usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer (Thinh Nguyen)   
  - fbcon: Use kzalloc() in fbcon_prepare_logo() (Tetsuo Handa)   
  - regulator: twl6030: fix get status of twl6032 regulators (Andreas Kemnade)   
  - ASoC: soc-pcm: Add NULL check in BE reparenting (Srinivasa Rao Mandadapu)   
  - btrfs: send: avoid unaligned encoded writes when attempting to clone range (Filipe Manana)   
  - selftests/net: Find nettest in current directory (Daniel Díaz)   
  - ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event (Kees Cook)   
  - regulator: slg51000: Wait after asserting CS pin (Konrad Dybcio)   
  - 9p/fd: Use P9_HDRSZ for header size (GUO Zihua)   
  - ASoC: rt711-sdca: fix the latency time of clock stop prepare state machine transitions (Shuming Fan)   
  - ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188 (Johan Jonker)   
  - spi: mediatek: Fix DEVAPC Violation at KO Remove (Zhichao Liu)   
  - ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register (Chancel Liu)   
  - ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation (Giulio Benetti)   
  - ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels (Tomislav Novak)   
  - fs: use acquire ordering in __fget_light() (Jann Horn)   
  - ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name (Johan Jonker)   
  - arm64: dts: rockchip: fix ir-receiver node names (Johan Jonker)   
  - ARM: dts: rockchip: fix ir-receiver node names (Johan Jonker)   
  - arm: dts: rockchip: remove clock-frequency from rtc (Sebastian Reichel)   
  - arm: dts: rockchip: fix node name for hym8563 rtc (Sebastian Reichel)   
  - arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series (FUKAUMI Naoki)   
  - mmc: mtk-sd: Fix missing clk_disable_unprepare in msdc_of_clock_parse() (Gaosheng Cui)   
  - clk: Provide new devm_clk helpers for prepared and enabled clocks (Uwe Kleine-König)   
  - clk: generalize devm_clk_get() a bit (Uwe Kleine-König)   
  - LTS version: v5.15.82 (Jack Vogel)   
  - ipc/sem: Fix dangling sem_array access in semtimedop race (Jann Horn)   
  - Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send() (Zhang Xiaoxu)   
  - char: tpm: Protect tpm_pm_suspend with locks (Jan Dabros)   
  - Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend" (Conor Dooley)   
  - ACPI: HMAT: Fix initiator registration for single-initiator systems (Vishal Verma)   
  - ACPI: HMAT: remove unnecessary variable initialization (Vishal Verma)   
  - i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set (Andrew Lunn)   
  - i2c: npcm7xx: Fix error handling in npcm_i2c_init() (Yuan Can)   
  - serial: stm32: Deassert Transmit Enable on ->rs485_config() (Lukas Wunner)   
  - serial: stm32: Use TC interrupt to deassert GPIO RTS in RS485 mode (Marek Vasut)   
  - serial: stm32: Factor out GPIO RTS toggling into separate function (Marek Vasut)   
  - ipv4: Fix route deletion when nexthop info is not specified (Ido Schimmel)   
  - ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference (David Ahern) [Orabug: 34703911] {CVE-2022-3435}
  - selftests: net: fix nexthop warning cleanup double ip typo (Nikolay Aleksandrov)   
  - selftests: net: add delete nexthop route warning test (Nikolay Aleksandrov)   
  - Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled (Lee Jones)   
  - parisc: Increase FRAME_WARN to 2048 bytes on parisc (Helge Deller)   
  - mm: migrate: fix THP's mapcount on isolation (Gavin Shan)   
  - mm: __isolate_lru_page_prepare() in isolate_migratepages_block() (Hugh Dickins)   
  - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (Xiongfeng Wang)   
  - iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (Xiongfeng Wang)   
  - nvme: fix SRCU protection of nvme_ns_head list (Caleb Sander)   
  - riscv: kexec: Fixup irq controller broken in kexec crash path (Guo Ren)   
  - riscv: fix race when vmap stack overflow (Jisheng Zhang)   
  - riscv: Sync efi page table's kernel mappings before switching (Alexandre Ghiti)   
  - pinctrl: single: Fix potential division by zero (Maxim Korotkov)   
  - ASoC: ops: Fix bounds check for _sx controls (Mark Brown)   
  - KVM: x86/mmu: Fix race condition in direct_page_fault (Kazuki Takiguchi)   [Orabug: 34951672] {CVE-2022-45869} 
  - io_uring/poll: fix poll_refs race with cancelation (Lin Ma)   
  - io_uring: make poll refs more robust (Pavel Begunkov)   
  - io_uring: cmpxchg for poll arm refs release (Pavel Begunkov)   
  - io_uring: fix tw losing poll events (Pavel Begunkov)   
  - io_uring: update res mask in io_poll_check_events (Pavel Begunkov)   
  - tracing: Free buffers when a used dynamic event is removed (Steven Rostedt (Google))   
  - tracing: Fix race where histograms can be called before the event (Steven Rostedt (Google))   
  - tracing/osnoise: Fix duration type (Daniel Bristot de Oliveira)   
  - drm/i915: Never return 0 if not all requests retired (Janusz Krzysztofik)   
  - drm/i915: Fix negative value passed as remaining time (Janusz Krzysztofik)   
  - drm/amdgpu: enable Vangogh VCN indirect sram mode (Leo Liu)   
  - drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame (Lee Jones)   
  - mmc: sdhci: Fix voltage switch delay (Adrian Hunter)   
  - mmc: sdhci-sprd: Fix no reset data and command after voltage switch (Wenchao Chen)   
  - mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check (Sebastian Falbesoner)   
  - mmc: core: Fix ambiguous TRIM and DISCARD arg (Christian Löhle)   
  - mmc: mmc_test: Fix removal of debugfs file (Ye Bin)   
  - net: stmmac: Set MAC's flow control register to reflect current settings (Goh, Wei Sheng)   
  - v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails (Linus Torvalds)   
  - pinctrl: intel: Save and restore pins in "direct IRQ" mode (Andy Shevchenko)   
  - x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 (Pawan Gupta)   
  - nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() (ZhangPeng)   
  - tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep" (Tiezhu Yang)   
  - error-injection: Add prompt for function error injection (Steven Rostedt (Google))   
  - ALSA: dice: fix regression for Lexicon I-ONIX FW810S (Takashi Sakamoto)   
  - riscv: mm: Proper page permissions after initmem free (Björn Töpel)   
  - riscv: vdso: fix section overlapping under some conditions (Jisheng Zhang)   
  - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (Yang Yingliang)   
  - hwmon: (coretemp) Check for null before removing sysfs attrs (Phil Auld)   
  - net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed (Yoshihiro Shimoda)   
  - sctp: fix memory leak in sctp_stream_outq_migrate() (Zhengchao Shao)   
  - packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE (Willem de Bruijn)   
  - net: tun: Fix use-after-free in tun_detach() (Shigeru Yoshida)   
  - afs: Fix fileserver probe RTT handling (David Howells)   
  - net: mdiobus: fix unbalanced node reference count (Yang Yingliang)   
  - net: hsr: Fix potential use-after-free (YueHaibing)   
  - tipc: re-fetch skb cb after tipc_msg_validate (Xin Long)   
  - dsa: lan9303: Correct stat name (Jerry Ray)   
  - net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type (M Chetan Kumar)   
  - net: wwan: iosm: fix kernel test robot reported error (M Chetan Kumar)   
  - net: ethernet: nixge: fix NULL dereference (Yuri Karpov)   
  - net/9p: Fix a potential socket leak in p9_socket_open (Wang Hai)   
  - net: net_netdev: Fix error handling in ntb_netdev_init_module() (Yuan Can)   
  - net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe() (Zhang Changzhong)   
  - net: phy: fix null-ptr-deref while probe() failed (Yang Yingliang)   
  - wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration (Lorenzo Bianconi)   
  - wifi: cfg80211: don't allow multi-BSSID in S1G (Johannes Berg)   
  - wifi: cfg80211: fix buffer overflow in elem comparison (Johannes Berg)   
  - aquantia: Do not purge addresses when setting the number of rings (Izabela Bakollari)   
  - qlcnic: fix sleep-in-atomic-context bugs caused by msleep (Duoming Zhou)   
  - can: m_can: Add check for devm_clk_get (Jiasheng Jiang)   
  - can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (Zhang Changzhong)   
  - can: etas_es58x: es58x_init_netdev(): free netdev when register_candev() (Zhang Changzhong)   
  - can: cc770: cc770_isa_probe(): add missing free_cc770dev() (Zhang Changzhong)   
  - can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() (Zhang Changzhong)   
  - net/mlx5e: Fix use-after-free when reverting termination table (Roi Dayan)   
  - net/mlx5: Fix uninitialized variable bug in outlen_write() (YueHaibing)   
  - net/mlx5: DR, Fix uninitialized var warning (YueHaibing)   
  - net/mlx5: DR, Rename list field in matcher struct to list_node (Yevgeny Kliteynik)   
  - e100: Fix possible use after free in e100_xmit_prepare (Wang Hai)   
  - iavf: Fix error handling in iavf_init_module() (Yuan Can)   
  - iavf: remove redundant ret variable (Minghao Chi)   
  - fm10k: Fix error handling in fm10k_init_module() (Yuan Can)   
  - i40e: Fix error handling in i40e_init_module() (Shang XiaoJing)   
  - ixgbevf: Fix resource leak in ixgbevf_init_module() (Shang XiaoJing)   
  - of: property: decrement node refcount in of_fwnode_get_reference_args() (Yang Yingliang)   
  - nvmem: rmem: Fix return value check in rmem_read() (Wei Yongjun)   
  - bpf: Do not copy spin lock field from user in bpf_selem_alloc (Xu Kuohai)   
  - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (Gaosheng Cui)   
  - hwmon: (i5500_temp) fix missing pci_disable_device() (Yang Yingliang)   
  - hwmon: (ina3221) Fix shunt sum critical calculation (Ninad Malwade)   
  - hwmon: (ltc2947) fix temperature scaling (Derek Nguyen)   
  - libbpf: Handle size overflow for ringbuf mmap (Hou Tao)   
  - ARM: at91: rm9200: fix usb device clock id (Michael Grzeschik)   
  - scripts/faddr2line: Fix regression in name resolution on ppc64le (Srikar Dronamraju)   
  - bpf, perf: Use subprog name when reporting subprog ksymbol (Hou Tao)   
  - iio: light: rpr0521: add missing Kconfig dependencies (Paul Gazzillo)   
  - iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw (Wei Yongjun)   
  - iio: health: afe4403: Fix oob read in afe4403_read_raw (Wei Yongjun)   
  - drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly when the edid is read" (Alex Deucher)   
  - drm/amdgpu: update drm_display_info correctly when the edid is read (Claudio Suarez)   
  - drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code (Lyude Paul)   
  - btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() (ChenXiaoSong)   
  - btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker (Nikolay Borisov)   
  - spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock (Frieder Schrempf)   
  - btrfs: free btrfs_path before copying inodes to userspace (Anand Jain)   
  - btrfs: sink iterator parameter to btrfs_ioctl_logical_to_ino (David Sterba)   
  - erofs: fix order >= MAX_ORDER warning due to crafted negative i_size (Gao Xiang)   
  - drm/i915/gt: Use i915_vm_put on ppgtt_create error paths (Chris Wilson)   
  - drm/i915: Create a dummy object for gen6 ppgtt (Maarten Lankhorst)   
  - arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored (Catalin Marinas)   
  - LTS version: v5.15.81 (Jack Vogel)   
  - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara)   
  - drm/i915: fix TLB invalidation for Gen12 video and compute engines (Andrzej Hajda)   [Orabug: 35005633] {CVE-2022-4139} 
  - drm/amdgpu: always register an MMU notifier for userptr (Christian König)   
  - drm/amdgpu: Enable Aldebaran devices to report CU Occupancy (Ramesh Errabolu)   
  - drm/amd/display: No display after resume from WB/CB (Tsung-hua Lin)   
  - drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN (Lyude Paul)   
  - btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs() (Zhen Lei)   
  - btrfs: use kvcalloc in btrfs_get_dev_zone_info (Christoph Hellwig)   
  - btrfs: zoned: fix missing endianness conversion in sb_write_pointer (Christoph Hellwig)   
  - btrfs: free btrfs_path before copying subvol info to userspace (Anand Jain)   
  - btrfs: free btrfs_path before copying fspath to userspace (Anand Jain)   
  - btrfs: free btrfs_path before copying root refs to userspace (Josef Bacik)   
  - genirq: Take the proposed affinity at face value if force==true (Luiz Capitulino)   
  - irqchip/gic-v3: Always trust the managed affinity provided by the core code (Luiz Capitulino)   
  - genirq: Always limit the affinity to online CPUs (Luiz Capitulino)   
  - genirq/msi: Shutdown managed interrupts with unsatifiable affinities (Luiz Capitulino)   
  - wifi: wilc1000: validate number of channels (Phil Turnbull)   
  - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute (Phil Turnbull)   
  - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute (Phil Turnbull)   
  - wifi: wilc1000: validate pairwise and authentication suite offsets (Phil Turnbull)   
  - fuse: lock inode unconditionally in fuse_fallocate() (Miklos Szeredi)   
  - dm integrity: clear the journal on suspend (Mikulas Patocka)   
  - dm integrity: flush the journal on suspend (Mikulas Patocka)   
  - gpu: host1x: Avoid trying to use GART on Tegra20 (Robin Murphy)   
  - scsi: iscsi: Fix possible memory leak when device_register() failed (Zhou Guanghui)   
  - net: usb: qmi_wwan: add Telit 0x103a composition (Enrico Sau)   
  - tcp: configurable source port perturb table size (Gleb Mazovetskiy)   
  - platform/x86: ideapad-laptop: Fix interrupt storm on fn-lock toggle on some Yoga laptops (Arnav Rawat)   
  - platform/x86: hp-wmi: Ignore Smart Experience App event (Kai-Heng Feng)   
  - zonefs: fix zone report size in __zonefs_io_error() (Damien Le Moal)   
  - drm/amdgpu: disable BACO support on more cards (Guchun Chen)   
  - platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) (Hans de Goede)   
  - platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() (Xiongfeng Wang)   
  - xen/platform-pci: add missing free_irq() in error path (ruanjinjie)   
  - xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too (Marek Marczykowski-Górecki)   
  - ASoC: stm32: dfsdm: manage cb buffers cleanup (Olivier Moysan)   
  - Input: i8042 - apply probe defer to more ASUS ZenBook models (Takashi Iwai)   
  - Input: soc_button_array - add Acer Switch V 10 to dmi_use_low_level_irq[] (Hans de Goede)   
  - Input: soc_button_array - add use_low_level_irq module parameter (Hans de Goede)   
  - Input: goodix - try resetting the controller when no config is set (Hans de Goede)   
  - serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios() (Lukas Wunner)   
  - tools: iio: iio_generic_buffer: Fix read size (Matti Vaittinen)   
  - ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 (Hans de Goede)   
  - Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode (Aman Dhoot)   
  - x86/ioremap: Fix page aligned size calculation in __ioremap_caller() (Michael Kelley)   
  - x86/pm: Add enumeration check before spec MSRs save/restore setup (Pawan Gupta)   
  - x86/tsx: Add a feature bit for TSX control MSR support (Pawan Gupta)   
  - KVM: x86: remove exit_int_info warning in svm_handle_exit (Maxim Levitsky)   
  - KVM: x86: add kvm_leave_nested (Maxim Levitsky)   
  - KVM: x86: nSVM: harden svm_free_nested against freeing vmcb02 while still in use (Maxim Levitsky)   
  - KVM: x86: forcibly leave nested mode on vCPU reset (Maxim Levitsky)   
  - KVM: x86: nSVM: leave nested mode on vCPU free (Maxim Levitsky)   
  - mm: vmscan: fix extreme overreclaim and swap floods (Johannes Weiner)   
  - gcov: clang: fix the buffer overflow issue (Mukesh Ojha)   
  - nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty (Chen Zhongjin)   
  - usb: dwc3: gadget: Clear ep descriptor last (Thinh Nguyen)   
  - usb: dwc3: gadget: Return -ESHUTDOWN on ep disable (Thinh Nguyen)   
  - usb: dwc3: gadget: conditionally remove requests (Michael Grzeschik)   
  - bus: ixp4xx: Don't touch bit 7 on IXP42x (Linus Walleij)   
  - iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails (Chen Zhongjin)   
  - iio: light: apds9960: fix wrong register for gesture gain (Alejandro Concepción Rodríguez)   
  - arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency (Jakob Unterwurzacher)   
  - ext4: fix use-after-free in ext4_ext_shift_extents (Baokun Li)   
  - usb: cdnsp: fix issue with ZLP - added TD_SIZE = 1 (Pawel Laszczak)   
  - usb: cdnsp: Fix issue with Clear Feature Halt Endpoint (Pawel Laszczak)   
  - usb: dwc3: exynos: Fix remove() function (Marek Szyprowski)   
  - KVM: arm64: pkvm: Fixup boot mode to reflect that the kernel resumes from EL1 (Marc Zyngier)   
  - mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)   
  - mmc: sdhci-brcmstb: Enable Clock Gating to save power (Al Cooper)   
  - mmc: sdhci-brcmstb: Re-organize flags (Al Cooper)   
  - nios2: add FORCE for vmlinuz.gz (Randy Dunlap)   
  - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Alexandre Belloni)   
  - lib/vdso: use "grep -E" instead of "egrep" (Greg Kroah-Hartman)   
  - s390/crashdump: fix TOD programmable field size (Heiko Carstens)   
  - net: thunderx: Fix the ACPI memory leak (Yu Liao)   
  - octeontx2-af: Fix reference count issue in rvu_sdp_init() (Xiongfeng Wang)   
  - octeontx2-pf: Add check for devm_kcalloc (Jiasheng Jiang)   
  - net: enetc: preserve TX ring priority across reconfiguration (Vladimir Oltean)   
  - net: enetc: cache accesses to &priv->si->hw (Vladimir Oltean)   
  - net: enetc: manage ENETC_F_QBV in priv->active_offloads only when enabled (Vladimir Oltean)   
  - nfc: st-nci: fix incorrect sizing calculations in EVT_TRANSACTION (Martin Faltesek)   
  - nfc: st-nci: fix memory leaks in EVT_TRANSACTION (Martin Faltesek)   
  - nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION (Martin Faltesek)   
  - s390/dasd: fix no record found for raw_track_access (Stefan Haberland)   
  - arcnet: fix potential memory leak in com20020_probe() (Wang Hai)   
  - ipv4: Fix error return code in fib_table_insert() (Ziyang Xuan)   
  - dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). (Kuniyuki Iwashima)   
  - fs: do not update freeing inode i_io_list (Svyatoslav Feldsherov)   
  - netfilter: flowtable_offload: add missing locking (Felix Fietkau)   
  - netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface (Jozsef Kadlecsik)   
  - dma-buf: fix racing conflict of dma_heap_add() (Dawei Li)   
  - bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() (Yang Yingliang)   
  - regulator: twl6030: re-add TWL6032_SUBCLASS (Andreas Kemnade)   
  - NFC: nci: fix memory leak in nci_rx_data_packet() (Liu Shixin)   
  - net: sched: allow act_ct to be built without NF_NAT (Xin Long)   
  - net: sparx5: fix error handling in sparx5_port_open() (Liu Jian)   
  - sfc: fix potential memleak in __ef100_hard_start_xmit() (Zhang Changzhong)   
  - net: wwan: iosm: use ACPI_FREE() but not kfree() in ipc_pcie_read_bios_cfg() (Wang ShaoBo)   
  - xfrm: Fix ignored return value in xfrm6_init() (Chen Zhongjin)   
  - xfrm: Fix oops in __xfrm_state_delete() (Thomas Jarosch)   
  - tipc: check skb_linearize() return value in tipc_disc_rcv() (YueHaibing)   
  - tipc: add an extra conn_get in tipc_conn_alloc (Xin Long)   
  - tipc: set con sock in tipc_conn_alloc (Xin Long)   
  - net/mlx5: Fix handling of entry refcount when command is not issued to FW (Moshe Shemesh)   
  - net/mlx5: Fix FW tracer timestamp calculation (Moshe Shemesh)   
  - net/mlx5: Do not query pci info while pci disabled (Roy Novich)   
  - netfilter: ipset: regression in ip_set_hash_ip.c (Vishwanath Pai)   
  - Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() (Yang Yingliang)   
  - Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() (Yang Yingliang)   
  - macsec: Fix invalid error code set (YueHaibing)   
  - nfp: add port from netdev validation for EEPROM access (Jaco Coetzee)   
  - nfp: fill splittable of devlink_port_attrs correctly (Diana Wang)   
  - net: pch_gbe: fix pci device refcount leak while module exiting (Yang Yingliang)   
  - octeontx2-af: debugsfs: fix pci device refcount leak (Yang Yingliang)   
  - net/qla3xxx: fix potential memleak in ql3xxx_send() (Zhang Changzhong)   
  - net: mvpp2: fix possible invalid pointer dereference (Hui Tang)   
  - net/mlx4: Check retval of mlx4_bitmap_init (Peter Kosyh)   
  - net: ethernet: mtk_eth_soc: fix error handling in mtk_open() (Liu Jian)   
  - ARM: dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties (Fabio Estevam)   
  - ARM: mxs: fix memory leak in mxs_machine_init() (Zheng Yongjun)   
  - iavf: Fix race condition between iavf_shutdown and iavf_remove (Slawomir Laba)   
  - iavf: Do not restart Tx queues after reset task failure (Ivan Vecera)   
  - iavf: Fix a crash during reset task (Ivan Vecera)   
  - netfilter: nf_tables: do not set up extensions for end interval (Pablo Neira Ayuso)   
  - netfilter: conntrack: Fix data-races around ct mark (Daniel Xu)   
  - 9p/fd: fix issue of list_del corruption in p9_fd_cancel() (Zhengchao Shao)   
  - net: pch_gbe: fix potential memleak in pch_gbe_tx_queue() (Wang Hai)   
  - nfc/nci: fix race with opening and closing (Lin Ma)   
  - net: dsa: sja1105: disallow C45 transactions on the BASE-TX MDIO bus (Vladimir Oltean)   
  - rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] (David Howells)   
  - rxrpc: Use refcount_t rather than atomic_t (David Howells)   
  - rxrpc: Allow list of in-use local UDP endpoints to be viewed in /proc (David Howells)   
  - net: liquidio: simplify if expression (Leon Romanovsky)   
  - selftests: mptcp: fix mibit vs mbit mix up (Matthieu Baerts)   
  - selftests: mptcp: more stable simult_flows tests (Paolo Abeni)   
  - ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl (Michael Grzeschik)   
  - tee: optee: fix possible memory leak in optee_register_device() (Yang Yingliang)   
  - bus: sunxi-rsb: Support atomic transfers (Samuel Holland)   
  - bus: sunxi-rsb: Remove the shutdown callback (Samuel Holland)   
  - regulator: core: fix UAF in destroy_regulator() (Yang Yingliang)   
  - spi: dw-dma: decrease reference count in dw_spi_dma_init_mfld() (Xiongfeng Wang)   
  - regulator: core: fix kobject release warning and memory leak in regulator_register() (Zeng Heng)   
  - ASoC: max98373: Add checks for devm_kcalloc (Jiasheng Jiang)   
  - scsi: storvsc: Fix handling of srb_status and capacity change events (Michael Kelley)   
  - x86/hyperv: Restore VP assist page after cpu offlining/onlining (Vitaly Kuznetsov)   
  - ASoC: soc-pcm: Don't zero TDM masks in __soc_pcm_open() (Richard Fitzgerald)   
  - ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove (Detlev Casanova)   
  - ASoC: hdac_hda: fix hda pcm buffer overflow issue (Junxiao Chang)   
  - ARM: dts: am335x-pcm-953: Define fixed regulators in root node (Dominik Haller)   
  - af_key: Fix send_acquire race with pfkey_register (Herbert Xu)   
  - xfrm: replay: Fix ESN wrap around for GSO (Christian Langrock)   
  - xfrm: fix "disable_policy" on ipv4 early demux (Eyal Birger)   
  - MIPS: pic32: treat port as signed integer (Jason A. Donenfeld)   
  - RISC-V: vdso: Do not add missing symbols to version section in linker script (Nathan Chancellor)   
  - ALSA: usb-audio: add quirk to fix Hamedal C20 disconnect issue (Ai Chao)   
  - Revert "drm/amdgpu: Revert "drm/amdgpu: getting fan speed pwm for vega10 properly"" (Asher Song)   
  - nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked (Aleksandr Miloserdov)   
  - arm64/syscall: Include asm/ptrace.h in syscall_wrapper header. (Kuniyuki Iwashima)   
  - block, bfq: fix null pointer dereference in bfq_bio_bfqg() (Yu Kuai)   
  - drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017) (Hans de Goede)   
  - scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC (Bart Van Assche)   
  - scsi: ibmvfc: Avoid path failures during live migration (Brian King)   
  - platform/x86/intel/hid: Add some ACPI device IDs (Ivan Hu)   
  - platform/x86/intel/pmt: Sapphire Rapids PMT errata fix (David E. Box)   
  - platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1 (Hans de Goede)   
  - platform/x86: ideapad-laptop: Disable touchpad_switch (Manyi Li)   
  - Revert "net: macsec: report real_dev features when HW offloading is enabled" (Sabrina Dubroca)   
  - selftests/bpf: Add verifier test for release_reference() (Youlin Li)   
  - spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run (Sean Nyekjaer)   
  - wifi: ath11k: Fix QCN9074 firmware boot on x86 (Tyler J. Stachecki)   
  - wifi: mac80211: Fix ack frame idr leak when mesh has no route (Nicolas Cavallari)   
  - wifi: airo: do not assign -1 to unsigned char (Jason A. Donenfeld)   
  - audit: fix undefined behavior in bit shift for AUDIT_BIT (Gaosheng Cui)   
  - riscv: dts: sifive unleashed: Add PWM controlled LEDs (Emil Renner Berthing)   
  - wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support (Jonas Jelonek)   
  - wifi: mac80211: fix memory free error when registering wiphy fail (taozhang)   
  - ceph: fix NULL pointer dereference for req->r_session (Xiubo Li)   
  - ceph: Use kcalloc for allocating multiple elements (Kenneth Lee)   
  - binder: validate alloc->mm in ->mmap() handler (Carlos Llamas)   
  - x86/sgx: Add overflow check in sgx_validate_offset_length() (Borys Popławski)   
  - x86/sgx: Create utility to validate user provided offset and length (Reinette Chatre)   
  - ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li)   
  - ceph: do not update snapshot context when there is no new snapshot (Xiubo Li)   
  - iio: pressure: ms5611: fixed value compensation bug (Mitja Spes)   
  - iio: ms5611: Simplify IO callback parameters (Lars-Peter Clausen)   
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Netac NV7000 (Tiago Dias Ferreira)   
  - nvme-pci: disable write zeroes on various Kingston SSD (Xander Li)   
  - nvme-pci: disable namespace identifiers for the MAXIO MAP1001 (Christoph Hellwig)   
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Micron Nitro (Bean Huo)   
  - nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH (Leo Savernik)   
  - drm/display: Don't assume dual mode adaptors support i2c sub-addressing (Simon Rettberg)   
  - ata: libata-core: do not issue non-internal commands once EH is pending (Niklas Cassel)   
  - ata: libata-scsi: simplify __ata_scsi_queuecmd() (Wenchao Hao)   
  - cifs: Fix connections leak when tlink setup failed (Zhang Xiaoxu)   
  - cifs: support nested dfs links over reconnect (Paulo Alcantara)   
  - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara)   
  - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara)   
  - sctp: clear out_curr if all frag chunks of current msg are pruned (Xin Long)   
  - sctp: remove the unnecessary sinfo_stream check in sctp_prsctp_prune_unsent (Xin Long)   
  - tty: serial: fsl_lpuart: don't break the on-going transfer when global reset (Sherry Sun)   
  - serial: fsl_lpuart: Fill in rs485_supported (Ilpo Järvinen)   
  - serial: Add rs485_supported to uart_port (Ilpo Järvinen)   
  - ASoC: fsl_asrc fsl_esai fsl_sai: allow CONFIG_PM=N (Maarten Zanders)   
  - ASoC: fsl_sai: use local device pointer (Marco Felsch)   
  - net: mana: Fix race on per-CQ variable napi work_done (Haiyang Zhang)  [Orabug: 34917684]  
  - vhost-scsi: Fix max number of virtqueues (Mike Christie)  [Orabug: 34915127]  
  - uek_kabi: unneeded include of uek_kabi.h in ip.h (Alan Maguire)  [Orabug: 34911234]  
  - uek-container: Enable CONFIG_IA32_EMULATION (Liam Merwick)  [Orabug: 34909790]  
  - uek-rpm: Disable CONFIG_SND_PCM_OSS for OL8 and OL9 (Harshit Mogalapalli)  [Orabug: 34885467]  
  - uek-container: ol9: Update config with that generated by 'make olddefconfig' (Liam Merwick)  [Orabug: 34850980]  
  - uek-container: ol8: Update config with that generated by 'make olddefconfig' (Liam Merwick)  [Orabug: 34850980]  
  - uek-container: Fix x86_64 PVH ELF note with binutils >= 2.36 (Liam Merwick)  [Orabug: 34850980]  
  - uek-rpm: ol9: Add spec file changes to build container kernel (Liam Merwick)  [Orabug: 34850980]  
  - uek-rpm: ol8: Add spec file changes to build container kernel (Liam Merwick)  [Orabug: 34850980]  
  - uek-rpm: ol9: x86_64: Add kernel-uek-container config file (Liam Merwick)  [Orabug: 34850980]  
  - uek-rpm: ol8: x86_64: Add kernel-uek-container config file (Liam Merwick)  [Orabug: 34850980]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-7.86.2.el9uek]
changelog:
  - net/rds: Trigger rds_send_hs_ping() more than once (Gerd Rausch)  [Orabug: 34607844]  
  - Revert "RDS: TCP: Track peer's connection generation number" (Gerd Rausch)  [Orabug: 34700109]  
  - net/rds: Use the first lane until RDS_EXTHDR_NPATHS arrives (Gerd Rausch)  [Orabug: 34314502]  
  - net/rds: Kick-start TCP receiver after accept (Gerd Rausch)  [Orabug: 34600819]  
  - net/rds: rds_tcp_conn_path_shutdown must not discard messages (Gerd Rausch)  [Orabug: 34560700]  
  - net/rds: Encode cp_index in TCP source port (Gerd Rausch)  [Orabug: 34556036]  
  - uek: kabi: enable aarch64 kABI checking (Saeed Mirzamohammadi)  [Orabug: 34339132]  
  - uek-rpm: Disable Promise SuperTrak EX series storage controllers (Somasundaram Krishnasamy)  [Orabug: 34670747]  
  - uek-rpm: ol9: Disable CONFIG_IR_MCEUSB from UEK7 OL9. (Harshit Mogalapalli)  [Orabug: 34820237]  
  - IB/mlx5: Add a signature check to received EQEs and CQEs (Rohit Nair)  [Orabug: 34821073]  
  - rds: ib: Avoid tear-down of caches unless already initialized (Håkon Bugge)  [Orabug: 34826403]  
  - KVM: SVM: Fix AVIC GATag to support max number of vCPUs (Suravee Suthikulpanit)  [Orabug: 34961703]  
  - Revert "rds: ib: Enable FC by default" (Håkon Bugge)  [Orabug: 34964359]  
  - uek-rpm: Add nft_reject* modules to core rpm. (Somasundaram Krishnasamy)  [Orabug: 34970060]  
  - cpufreq: intel_pstate: Support Sapphire Rapids OOB mode (Srinivas Pandruvada)  [Orabug: 34961609]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-7.86.4.el9uek]
changelog:
  - net/rds: Fill in rds_exthdr_size gaps (Gerd Rausch)  [Orabug: 34979170]  
  - Revert "uek: kabi: enable aarch64 kABI checking" (Jack Vogel)   
  - Revert "uek-rpm: Disable kABI checking for aarch64 64k builds" (Jack Vogel)


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-7.86.5.el9uek]
changelog:
  - uek-rpm: Enable HP watchdog for aarch64 (Saeed Mirzamohammadi)  [Orabug: 34902069]  
  - watchdog/hpwdt: Include nmi.h only if CONFIG_HPWDT_NMI_DECODING (Jerry Hoemann)  [Orabug: 34902069]  
  - watchdog/hpwdt: Enable HP_WATCHDOG for ARM64 systems. (Jerry Hoemann)  [Orabug: 34902069]  
  - Revert "selftests/bpf: Add test for unstable CT lookup API" (Alan Maguire)  [Orabug: 34951842]  
  - uek-rpm: config-x86-64*: enable CONFIG_MT7921E (Todd Vierling)  [Orabug: 34970472]  
  - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits (Pablo Neira Ayuso)  [Orabug: 34978152]  {CVE-2023-0179} 
  - perf/x86/rapl: Use standard Energy Unit for SPR Dram RAPL domain (Zhang Rui)  [Orabug: 34978296]  
  - powercap: intel_rapl: support new layout of Psys PowerLimit Register on SPR (Zhang Rui)  [Orabug: 34978296]  
  - uek: kabi: enable aarch64 kABI checking (Saeed Mirzamohammadi)  [Orabug: 34339132]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-7.86.6.el9uek]
changelog:
  - runtime revert of virtio_net: Stripe queue affinities across cores. (Konrad Rzeszutek Wilk)  [Orabug: 35001044]  
  - rds: ib: Make sure messages that errors out also get unmapped (Håkon Bugge)  [Orabug: 35015598]  
  - Ignore hot plug events when force powering off a device (James Puthukattukaran)  [Orabug: 35015761]  
  - mptcp: UEK: disable mptcp protocol (Jack Vogel)  [Orabug: 34821286]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-8.91.1.el9uek]
changelog:
  - LTS version: v5.15.91 (Jack Vogel)   
  - perf/x86/amd: fix potential integer overflow on shift of a int (Colin Ian King)   
  - netfilter: conntrack: unify established states for SCTP paths (Sriram Yagnaraman)   
  - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (Thomas Gleixner)   
  - block: fix and cleanup bio_check_ro (Christoph Hellwig)   
  - kbuild: Allow kernel installation packaging to override pkg-config (Chun-Tse Shao)   
  - cpufreq: governor: Use kobject release() method to free dbs_data (Kevin Hao)   
  - cpufreq: Move to_gov_attr_set() to cpufreq.h (Kevin Hao)   
  - Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode" (Dmitry Torokhov)   
  - tools: gpio: fix -c option of gpio-event-mon (Ivo Borisov Shopov)   
  - treewide: fix up files incorrectly marked executable (Linus Torvalds)   
  - net: mdio-mux-meson-g12a: force internal PHY off on mux switch (Jerome Brunet)   
  - net/tg3: resolve deadlock in tg3_reset_task() during EEH (David Christensen)   
  - thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type() (Rafael J. Wysocki)   
  - net: mctp: mark socks as dead on unhash, prevent re-add (Jeremy Kerr)   
  - net: ravb: Fix possible hang if RIS2_QFF1 happen (Yoshihiro Shimoda)   
  - net: ravb: Fix lack of register setting after system resumed for Gen3 (Yoshihiro Shimoda)   
  - ravb: Rename "no_ptp_cfg_active" and "ptp_cfg_active" variables (Biju Das)   
  - gpio: mxc: Unlock on error path in mxc_flip_edge() (Dan Carpenter)   
  - nvme: fix passthrough csi check (Keith Busch)   
  - riscv/kprobe: Fix instruction simulation of JALR (Liao Chang)   
  - sctp: fail if no bound addresses can be used for a given scope (Marcelo Ricardo Leitner)   
  - net/sched: sch_taprio: do not schedule in taprio_reset() (Eric Dumazet)   
  - netrom: Fix use-after-free of a listening socket. (Kuniyuki Iwashima)   
  - netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE (Sriram Yagnaraman)   
  - ipv4: prevent potential spectre v1 gadget in fib_metrics_match() (Eric Dumazet)   
  - ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() (Eric Dumazet)   
  - netlink: annotate data races around sk_state (Eric Dumazet)   
  - netlink: annotate data races around dst_portid and dst_group (Eric Dumazet)   
  - netlink: annotate data races around nlk->portid (Eric Dumazet)   
  - netfilter: nft_set_rbtree: skip elements in transaction from garbage collection (Pablo Neira Ayuso)   
  - netfilter: nft_set_rbtree: Switch to node list walk for overlap detection (Pablo Neira Ayuso)   
  - drm/i915/selftest: fix intel_selftest_modify_policy argument types (Arnd Bergmann)   
  - net: fix UaF in netns ops registration error path (Paolo Abeni)   
  - netlink: prevent potential spectre v1 gadgets (Eric Dumazet)   
  - i2c: designware: use casting of u64 in clock multiplication to avoid overflow (Lareine Khawaly)   
  - scsi: ufs: core: Fix devfreq deadlocks (Johan Hovold)   
  - net: mana: Fix IRQ name - add PCI and queue number (Haiyang Zhang)   
  - EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info (Manivannan Sadhasivam)   
  - EDAC/device: Respect any driver-supplied workqueue polling value (Manivannan Sadhasivam)   
  - ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment (Giulio Benetti)   
  - ipv6: fix reachability confirmation with proxy_ndp (Gergely Risko)   
  - thermal: intel: int340x: Protect trip temperature from concurrent updates (Srinivas Pandruvada)   
  - KVM: arm64: GICv4.1: Fix race with doorbell on VPE activation/deactivation (Marc Zyngier)   
  - KVM: x86/vmx: Do not skip segment attributes if unusable bit is set (Hendrik Borghorst)   
  - ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi)   
  - ksmbd: limit pdu length size according to connection status (Namjae Jeon)   
  - ksmbd: downgrade ndr version error message to debug (Namjae Jeon)   
  - ksmbd: do not sign response to session request for guest login (Marios Makassikis)   
  - ksmbd: add max connections parameter (Namjae Jeon)   
  - ksmbd: add smbd max io size parameter (Namjae Jeon)   
  - i2c: mv64xxx: Add atomic_xfer method to driver (Chris Morgan)   
  - i2c: mv64xxx: Remove shutdown method from driver (Chris Morgan)   
  - cifs: Fix oops due to uncleared server->smbd_conn in reconnect (David Howells)   
  - ftrace/scripts: Update the instructions for ftrace-bisect.sh (Steven Rostedt (Google))   
  - trace_events_hist: add check for return value of 'create_hist_field' (Natalia Petrova)   
  - tracing: Make sure trace_printk() can output as soon as it can be used (Steven Rostedt (Google))   
  - module: Don't wait for GOING modules (Petr Pavlu)   
  - KVM: SVM: fix tsc scaling cache logic (Maxim Levitsky)   
  - scsi: hpsa: Fix allocation size for scsi_host_alloc() (Alexey V. Vissarionov)   
  - drm/amdgpu: complete gfxoff allow signal during suspend without delay (Harsh Jain)   
  - Bluetooth: hci_sync: cancel cmd_timer if hci_open failed (Archie Pusaka)   
  - exit: Use READ_ONCE() for all oops/warn limit reads (Kees Cook)   
  - docs: Fix path paste-o for /sys/kernel/warn_count (Kees Cook)   
  - panic: Expose "warn_count" to sysfs (Kees Cook)   
  - panic: Introduce warn_limit (Kees Cook)   
  - panic: Consolidate open-coded panic_on_warn checks (Kees Cook)   
  - exit: Allow oops_limit to be disabled (Kees Cook)   
  - exit: Expose "oops_count" to sysfs (Kees Cook)   
  - exit: Put an upper limit on how often we can oops (Jann Horn)   
  - panic: Separate sysctl logic from CONFIG_SMP (Kees Cook)   
  - ia64: make IA64_MCA_RECOVERY bool instead of tristate (Randy Dunlap)   
  - csky: Fix function name in csky_alignment() and die() (Nathan Chancellor)   
  - h8300: Fix build errors from do_exit() to make_task_dead() transition (Nathan Chancellor)   
  - hexagon: Fix function name in die() (Nathan Chancellor)   
  - objtool: Add a missing comma to avoid string concatenation (Eric W. Biederman)   
  - exit: Add and use make_task_dead. (Eric W. Biederman)   
  - kasan: no need to unset panic_on_warn in end_report() (Tiezhu Yang)   
  - ubsan: no need to unset panic_on_warn in ubsan_epilogue() (Tiezhu Yang)   
  - panic: unset panic_on_warn inside panic() (Tiezhu Yang)   
  - kernel/panic: move panic sysctls to its own file (tangmeng)   
  - sysctl: add a new register_sysctl_init() interface (Xiaoming Ni)   
  - fs: reiserfs: remove useless new_opts in reiserfs_remount (Dongliang Mu)   
  - x86: ACPI: cstate: Optimize C3 entry on AMD CPUs (Deepak Sharma)   
  - drm/i915: Remove unused variable (Nirmoy Das)   
  - Revert "selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID" (Sasha Levin)   
  - drm/i915: Allow switching away via vga-switcheroo if uninitialized (Thomas Zimmermann)   
  - firmware: coreboot: Check size of table entry and use flex-array (Kees Cook)   
  - lockref: stop doing cpu_relax in the cmpxchg loop (Mateusz Guzik)   
  - platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK (Hans de Goede)   
  - platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD (Michael Klein)   
  - r8152: add vendor/device ID pair for Microsoft Devkit (Andre Przywara)   
  - scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id (Yihang Li)   
  - KVM: s390: interrupt: use READ_ONCE() before cmpxchg() (Heiko Carstens)   
  - spi: spidev: remove debug messages that access spidev->spi without locking (Bartosz Golaszewski)   
  - ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets (Mark Brown)   
  - ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC (Mark Brown)   
  - cpufreq: armada-37xx: stop using 0 as NULL pointer (Miles Chen)   
  - perf/x86/intel/uncore: Add Emerald Rapids (Kan Liang)   
  - perf/x86/msr: Add Emerald Rapids (Kan Liang)   
  - s390: expicitly align _edata and _end symbols on page boundary (Alexander Gordeev)   
  - s390/debug: add _ASM_S390_ prefix to header guard (Niklas Schnelle)   
  - drm: Add orientation quirk for Lenovo ideapad D330-10IGL (Patrick Thompson)   
  - net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem (Hui Wang)   
  - ASoC: fsl_micfil: Correct the number of steps on SX controls (Chancel Liu)   
  - cpufreq: Add SM6375 to cpufreq-dt-platdev blocklist (Konrad Dybcio)   
  - kcsan: test: don't put the expect array on the stack (Max Filippov)   
  - cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist (Sumit Gupta)   
  - scsi: iscsi: Fix multiple iSCSI session unbind events sent to userspace (Wenchao Hao)   
  - tcp: fix rate_app_limited to default to 1 (David Morley)   
  - net: stmmac: enable all safety features by default (Andrew Halaney)   
  - thermal: core: call put_device() only after device_register() fails (Viresh Kumar)   
  - thermal/core: fix error code in __thermal_cooling_device_register() (Dan Carpenter)   
  - thermal: Validate new state in cur_state_store() (Viresh Kumar)   
  - thermal/core: Rename 'trips' to 'num_trips' (Daniel Lezcano)   
  - thermal/core: Remove duplicate information when an error occurs (Daniel Lezcano)   
  - net: dsa: microchip: ksz9477: port map correction in ALU table entry register (Rakesh Sankaranarayanan)   
  - selftests/net: toeplitz: fix race on tpacket_v3 block close (Willem de Bruijn)   
  - driver core: Fix test_async_probe_init saves device in wrong array (Chen Zhongjin)   
  - w1: fix WARNING after calling w1_process() (Yang Yingliang)   
  - w1: fix deadloop in __w1_remove_master_device() (Yang Yingliang)   
  - device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() (Yang Yingliang)   
  - ptdma: pt_core_execute_cmd() should use spinlock (Eric Pilmore)   
  - octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt (Kevin Hao)   
  - tcp: avoid the lookup process failing to get sk in ehash table (Jason Xing)   
  - nvme-pci: fix timeout request state check (Keith Busch)   
  - drm/amd/display: fix issues with driver unload (Hamza Mahfooz)   
  - phy: phy-can-transceiver: Skip warning if no "max-bitrate" (Geert Uytterhoeven)   
  - dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node() (Liu Shixin)   
  - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara)   
  - HID: betop: check shape of output reports (Pietro Borrello)   
  - l2tp: prevent lockdep issue in l2tp_tunnel_register() (Eric Dumazet)   
  - virtio-net: correctly enable callback during start_xmit (Jason Wang)   
  - net: macb: fix PTP TX timestamp failure due to packet padding (Robert Hancock)   
  - dmaengine: Fix double increment of client_count in dma_chan_get() (Koba Ko)   
  - drm/panfrost: fix GENERIC_ATOMIC64 dependency (Arnd Bergmann)   
  - net: mlx5: eliminate anonymous module_init & module_exit (Randy Dunlap)   
  - net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT (Maor Dickman)   
  - net: ipa: disable ipa interrupt during suspend (Caleb Connolly)   
  - Bluetooth: Fix possible deadlock in rfcomm_sk_state_change (Ying Hsu)   
  - usb: gadget: f_fs: Ensure ep0req is dequeued before free_request (Udipto Goswami)   
  - usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait (Udipto Goswami)   
  - HID: revert CHERRY_MOUSE_000C quirk (Jiri Kosina)   
  - pinctrl: rockchip: fix mux route data for rk3568 (Jonas Karlman)   
  - net: stmmac: fix invalid call to mdiobus_get_phy() (Heiner Kallweit)   
  - HID: check empty report_list in bigben_probe() (Pietro Borrello)   
  - HID: check empty report_list in hid_validate_values() (Pietro Borrello)   
  - net: mdio: validate parameter addr in mdiobus_get_phy() (Heiner Kallweit)   
  - net: usb: sr9700: Handle negative len (Szymon Heidrich)   
  - octeontx2-pf: Avoid use of GFP_KERNEL in atomic context (Geetha sowjanya)   
  - l2tp: close all race conditions in l2tp_tunnel_register() (Cong Wang)   
  - l2tp: convert l2tp_tunnel_list to idr (Cong Wang)   
  - l2tp: Don't sleep and disable BH under writer-side sk_callback_lock (Jakub Sitnicki)   
  - l2tp: Serialize access to sk_user_data with sk_callback_lock (Jakub Sitnicki) [Orabug: 34951574] {CVE-2022-4129}
  - net/sched: sch_taprio: fix possible use-after-free (Eric Dumazet)   
  - net: stmmac: Fix queue statistics reading (Kurt Kanzenbach)   
  - pinctrl: rockchip: fix reading pull type on rk3568 (Jonas Karlman)   
  - pinctrl/rockchip: add error handling for pull/drive register getters (Sebastian Reichel)   
  - pinctrl/rockchip: Use temporary variable for struct device (Andy Shevchenko)   
  - wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid (Szymon Heidrich) [Orabug: 35037701] {CVE-2023-23559}
  - gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode (Marek Vasut)   
  - gpio: mxc: Protect GPIO irqchip RMW with bgpio spinlock (Marek Vasut)   
  - gpio: use raw spinlock for gpio chip shadowed data (Schspa Shi)   
  - sch_htb: Avoid grafting on htb_destroy_class_offload when destroying htb (Rahul Rameshbabu)   
  - net: enetc: avoid deadlock in enetc_tx_onestep_tstamp() (Vladimir Oltean)   
  - net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs (Esina Ekaterina)   
  - net: nfc: Fix use-after-free in local_cleanup() (Jisoo Jang)   
  - phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() (Shang XiaoJing)   
  - bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation (Luis Gerhorst)   
  - amd-xgbe: Delay AN timeout during KR training (Raju Rangoju)   
  - amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent (Raju Rangoju)   
  - ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60 (Claudiu Beznea)   
  - NFSD: fix use-after-free in nfsd4_ssc_setup_dul() (Xingyuan Mo)   
  - phy: ti: fix Kconfig warning and operator precedence (Randy Dunlap)   
  - arm64: dts: qcom: msm8992-libra: Fix the memory map (Konrad Dybcio)   
  - arm64: dts: qcom: msm8992-libra: Add CPU regulators (Konrad Dybcio)   
  - arm64: dts: qcom: msm8992: Don't use sfpb mutex (Konrad Dybcio)   
  - PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe() (Christophe JAILLET)   
  - affs: initialize fsdata in affs_truncate() (Alexander Potapenko)   
  - IB/hfi1: Remove user expected buffer invalidate race (Dean Luick)   
  - IB/hfi1: Immediately remove invalid memory from hardware (Dean Luick)   
  - IB/hfi1: Fix expected receive setup error exit issues (Dean Luick)   
  - IB/hfi1: Reserve user expected TIDs (Dean Luick)   
  - IB/hfi1: Reject a zero-length user expected buffer (Dean Luick)   
  - RDMA/core: Fix ib block iterator counter overflow (Yonatan Nachum)   
  - tomoyo: fix broken dependency on *.conf.default (Masahiro Yamada)   
  - firmware: arm_scmi: Harden shared memory access in fetch_notification (Cristian Marussi)   
  - firmware: arm_scmi: Harden shared memory access in fetch_response (Cristian Marussi)   
  - EDAC/highbank: Fix memory leak in highbank_mc_probe() (Miaoqian Lin)   
  - reset: uniphier-glue: Fix possible null-ptr-deref (Hui Tang)   
  - reset: uniphier-glue: Use reset_control_bulk API (Philipp Zabel)   
  - soc: imx8m: Fix incorrect check for of_clk_get_by_name() (Miaoqian Lin)   
  - arm64: dts: imx8mm-venice-gw7901: fix USB2 controller OC polarity (Tim Harvey)   
  - HID: intel_ish-hid: Add check for ishtp_dma_tx_map (Jiasheng Jiang)   
  - ARM: imx: add missing of_node_put() (Dario Binacchi)   
  - arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux (Adam Ford)   
  - ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' (Fabio Estevam)   
  - ARM: dts: imx7d-pico: Use 'clock-frequency' (Fabio Estevam)   
  - ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency' (Fabio Estevam)   
  - arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property (Fabio Estevam)   
  - dmaengine: ti: k3-udma: Do conditional decrement of UDMA_CHAN_RT_PEER_BCNT_REG (Jayesh Choudhary)   
  - memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe() (Gaosheng Cui)   
  - memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe() (Gaosheng Cui)   
  - memory: tegra: Remove clients SID override programming (Ashish Mhetre)   
  - LTS version: v5.15.90 (Jack Vogel)   
  - io_uring/rw: remove leftover debug statement (Jens Axboe)   
  - io_uring/rw: ensure kiocb_end_write() is always called (Jens Axboe)   
  - io_uring: fix double poll leak on repolling (Pavel Begunkov)   
  - io_uring: Clean up a false-positive warning from GCC 9.3.0 (Alviro Iskandar Setiawan)   
  - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Hugh Dickins)   
  - soc: qcom: apr: Make qcom,protection-domain optional again (Stephan Gerhold)   
  - Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()" (Eric Dumazet)   
  - block: mq-deadline: Rename deadline_is_seq_writes() (Damien Le Moal)   
  - net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() (Yang Yingliang)   
  - net/ulp: use consistent error code when blocking ULP (Paolo Abeni)   
  - io_uring/net: fix fast_iov assignment in io_setup_async_msg() (Stefan Metzmacher)   
  - io_uring: io_kiocb_update_pos() should not touch file for non -1 offset (Jens Axboe)   
  - tracing: Use alignof__(struct {type b;}) instead of offsetof() (Steven Rostedt (Google))   
  - x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN (YingChi Long)   
  - Revert "drm/amdgpu: make display pinning more flexible (v2)" (Alex Deucher)   
  - efi: rt-wrapper: Add missing include (Ard Biesheuvel)   
  - arm64: efi: Execute runtime services from a dedicated stack (Ard Biesheuvel)   
  - fs/ntfs3: Fix attr_punch_hole() null pointer derenference (Alon Zahavi)   
  - drm/amdgpu: drop experimental flag on aldebaran (Alex Deucher)   
  - drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix (Joshua Ashton)   
  - drm/amd/display: Calculate output_color_space after pixel encoding adjustment (Joshua Ashton)   
  - drm/amd/display: Fix set scaling doesn's work (hongao)   
  - drm/i915/display: Check source height is > 0 (Drew Davenport)   
  - drm/i915: re-disable RC6p on Sandy Bridge (Sasa Dragic)   
  - mei: me: add meteor lake point M DID (Alexander Usyskin)   
  - gsmi: fix null-deref in gsmi_get_variable (Khazhismel Kumykov)   
  - serial: atmel: fix incorrect baudrate setup (Tobias Schramm)   
  - serial: amba-pl011: fix high priority character transmission in rs486 mode (Lino Sanfilippo)   
  - dmaengine: idxd: Let probe fail when workqueue cannot be enabled (Reinette Chatre)   
  - dmaengine: tegra210-adma: fix global intr clear (Mohan Kumar)   
  - dmaengine: lgm: Move DT parsing after initialization (Peter Harliman Liem)   
  - serial: pch_uart: Pass correct sg to dma_unmap_sg() (Ilpo Järvinen)   
  - dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation (Heiner Kallweit)   
  - dt-bindings: phy: g12a-usb2-phy: fix compatible string documentation (Heiner Kallweit)   
  - usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 (Juhyung Park)   
  - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (Maciej Żenczykowski)   
  - usb: gadget: g_webcam: Send color matching descriptor per frame (Daniel Scally)   
  - usb: typec: altmodes/displayport: Fix pin assignment calculation (Prashant Malani)   
  - usb: typec: altmodes/displayport: Add pin assignment helper (Prashant Malani)   
  - usb: typec: tcpm: Fix altmode re-registration causes sysfs create fail (ChiYuan Huang)   
  - usb: host: ehci-fsl: Fix module alias (Alexander Stein)   
  - usb: cdns3: remove fetched trb from cache before dequeuing (Pawel Laszczak)   
  - USB: serial: cp210x: add SCALANCE LPE-9000 device id (Michael Adler)   
  - USB: gadgetfs: Fix race between mounting and unmounting (Alan Stern)   
  - tty: fix possible null-ptr-defer in spk_ttyio_release (Gaosheng Cui)   
  - tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer (Krzysztof Kozlowski)   
  - staging: mt7621-dts: change some node hex addresses to lower case (Sergio Paracuellos)   
  - bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD (Paul Moore)   
  - riscv: dts: sifive: fu740: fix size of pcie 32bit memory (Ben Dooks)   
  - thunderbolt: Use correct function to calculate maximum USB3 link rate (Mika Westerberg)   
  - cifs: do not include page data when checking signature (Enzo Matsumiya)   
  - btrfs: fix race between quota rescan and disable leading to NULL pointer deref (Filipe Manana)   
  - btrfs: do not abort transaction on failure to write log tree when syncing log (Filipe Manana)   
  - mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting (Haibo Chen)   
  - mmc: sunxi-mmc: Fix clock refcount imbalance during unbind (Samuel Holland)   
  - ACPI: PRM: Check whether EFI runtime is available (Ard Biesheuvel)   
  - comedi: adv_pci1760: Fix PWM instruction handling (Ian Abbott)   
  - usb: core: hub: disable autosuspend for TI TUSB8041 (Flavio Suligoi)   
  - misc: fastrpc: Fix use-after-free race condition for maps (Ola Jeppsson)   
  - misc: fastrpc: Don't remove map on creater_process and device_release (Abel Vesa)   
  - USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 (Greg Kroah-Hartman)   
  - staging: vchiq_arm: fix enum vchiq_status return types (Arnd Bergmann)   
  - USB: serial: option: add Quectel EM05CN modem (Duke Xin(辛安文))   
  - USB: serial: option: add Quectel EM05CN (SG) modem (Duke Xin(辛安文))   
  - USB: serial: option: add Quectel EC200U modem (Ali Mirghasemi)   
  - USB: serial: option: add Quectel EM05-G (RS) modem (Duke Xin(辛安文))   
  - USB: serial: option: add Quectel EM05-G (CS) modem (Duke Xin(辛安文))   
  - USB: serial: option: add Quectel EM05-G (GR) modem (Duke Xin(辛安文))   
  - prlimit: do_prlimit needs to have a speculation check (Greg Kroah-Hartman)   
  - xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables (Mathias Nyman)   
  - usb: acpi: add helper to check port lpm capability using acpi _DSM (Mathias Nyman)   
  - xhci: Add a flag to disable USB3 lpm on a xhci root port level. (Mathias Nyman)   
  - xhci: Add update_hub_device override for PCI xHCI hosts (Mathias Nyman)   
  - xhci: Fix null pointer dereference when host dies (Mathias Nyman)   
  - usb: xhci: Check endpoint is valid before dereferencing it (Jimmy Hu)   
  - xhci-pci: set the dma max_seg_size (Ricardo Ribalda)   
  - io_uring/rw: defer fsnotify calls to task context (Jens Axboe)   
  - io_uring: do not recalculate ppos unnecessarily (Dylan Yudaken)   
  - io_uring: update kiocb->ki_pos at execution time (Dylan Yudaken)   
  - io_uring: remove duplicated calls to io_kiocb_ppos (Dylan Yudaken)   
  - io_uring: ensure that cached task references are always put on exit (Jens Axboe)   
  - io_uring: fix async accept on O_NONBLOCK sockets (Dylan Yudaken)   
  - io_uring: allow re-poll if we made progress (Jens Axboe)   
  - io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG) (Jens Axboe)   
  - io_uring: add flag for disabling provided buffer recycling (Jens Axboe)   
  - io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly (Jens Axboe)   
  - io_uring: improve send/recv error handling (Pavel Begunkov)   
  - io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups (Jens Axboe)   
  - eventfd: provide a eventfd_signal_mask() helper (Jens Axboe)   
  - eventpoll: add EPOLL_URING_WAKE poll wakeup flag (Jens Axboe)   
  - io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL (Jens Axboe)   
  - hugetlb: unshare some PMDs when splitting VMAs (James Houghton)   
  - drm/amd: Delay removal of the firmware framebuffer (Sasha Levin)   
  - drm/amdgpu: disable runtime pm on several sienna cichlid cards(v2) (Guchun Chen)   
  - ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP platform (Jeremy Szu)   
  - ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook (Andy Chi)   
  - efi: fix userspace infinite retry read efivars after EFI runtime services page fault (Ding Hui)   
  - nilfs2: fix general protection fault in nilfs_btree_insert() (Ryusuke Konishi)   
  - zonefs: Detect append writes at invalid locations (Damien Le Moal)   
  - Add exception protection processing for vd in axi_chan_handle_err function (Shawn.Shao)   
  - wifi: mac80211: sdata can be NULL during AMPDU start (Alexander Wetzel)   
  - wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices (Arend van Spriel)   
  - Bluetooth: hci_qca: Fix driver shutdown on closed serdev (Krzysztof Kozlowski)   
  - fbdev: omapfb: avoid stack overflow warning (Arnd Bergmann)   
  - perf/x86/rapl: Treat Tigerlake like Icelake (Chris Wilson)   
  - f2fs: let's avoid panic if extent_tree is not created (Jaegeuk Kim)   
  - x86/asm: Fix an assembler warning with current binutils (Mikulas Patocka)   
  - btrfs: always report error in run_one_delayed_ref() (Qu Wenruo)   
  - RDMA/srp: Move large values to a new enum for gcc13 (Jiri Slaby (SUSE))   
  - r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down() (Chunhao Lin)   
  - net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats (Daniil Tatianin)   
  - vduse: Validate vq_num in vduse_validate_config() (Harshit Mogalapalli)   
  - virtio_pci: modify ENOENT to EINVAL (Angus Chen)   
  - tools/virtio: initialize spinlocks in vring_test.c (Ricardo Cañuelo)   
  - selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID (Hao Sun)   
  - pNFS/filelayout: Fix coalescing test for single DS (Olga Kornievskaia)   
  - btrfs: fix trace event name typo for FLUSH_DELAYED_REFS (Naohiro Aota)   
  - LTS version: v5.15.89 (Jack Vogel)   
  - pinctrl: amd: Add dynamic debugging for active GPIOs (Mario Limonciello)   
  - Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout" (Ferry Toth)   
  - block: handle bio_split_to_limits() NULL return (Jens Axboe)   
  - io_uring/io-wq: only free worker if it was allocated for creation (Jens Axboe)   
  - io_uring/io-wq: free worker if task_work creation is canceled (Jens Axboe)   
  - efi: fix NULL-deref in init error path (Johan Hovold)   
  - arm64: cmpxchg_double*: hazard against entire exchange variable (Mark Rutland)   
  - arm64: atomics: remove LL/SC trampolines (Mark Rutland)   
  - arm64: atomics: format whitespace consistently (Mark Rutland)   
  - io_uring: lock overflowing for IOPOLL (Pavel Begunkov)   
  - KVM: x86: Do not return host topology information from KVM_GET_SUPPORTED_CPUID (Paolo Bonzini)   
  - Documentation: KVM: add API issues section (Paolo Bonzini)   
  - mm: Always release pages to the buddy allocator in memblock_free_late(). (Aaron Thompson)   
  - platform/surface: aggregator: Add missing call to ssam_request_sync_free() (Maximilian Luz)   
  - igc: Fix PPS delta between two synchronized end-points (Christopher S Hall)   
  - perf build: Properly guard libbpf includes (Ian Rogers)   
  - net/mlx5e: Don't support encap rules with gbp option (Gavin Li)   
  - net/mlx5: Fix ptp max frequency adjustment range (Rahul Rameshbabu)   
  - net/sched: act_mpls: Fix warning during failed attribute validation (Ido Schimmel)   
  - tools/nolibc: fix the O_* fcntl/open macro definitions for riscv (Willy Tarreau)   
  - tools/nolibc: restore mips branch ordering in the _start block (Willy Tarreau)   
  - tools/nolibc: Remove .global _start from the entry point code (Ammar Faizi)   
  - tools/nolibc/arch: mark the _start symbol as weak (Willy Tarreau)   
  - tools/nolibc/arch: split arch-specific code into individual files (Willy Tarreau)   
  - tools/nolibc/types: split syscall-specific definitions into their own files (Willy Tarreau)   
  - tools/nolibc/std: move the standard type definitions to std.h (Willy Tarreau)   
  - tools/nolibc: use pselect6 on RISCV (Willy Tarreau)   
  - tools/nolibc: x86-64: Use `mov $60,%eax` instead of `mov $60,%rax` (Ammar Faizi)   
  - tools/nolibc: x86: Remove `r8`, `r9` and `r10` from the clobber list (Ammar Faizi)   
  - af_unix: selftest: Fix the size of the parameter to connect() (Mirsad Goran Todorovac)   
  - nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() (Minsuk Kang)   
  - hvc/xen: lock console list traversal (Roger Pau Monne)   
  - octeontx2-af: Fix LMAC config in cgx_lmac_rx_tx_enable (Angela Czubak)   
  - tipc: fix unexpected link reset due to discovery messages (Tung Nguyen)   
  - ALSA: usb-audio: Relax hw constraints for implicit fb sync (Takashi Iwai)   
  - ALSA: usb-audio: Make sure to stop endpoints before closing EPs (Takashi Iwai)   
  - ASoC: wm8904: fix wrong outputs volume after power reactivation (Emanuele Ghidoli)   
  - scsi: ufs: core: WLUN suspend SSU/enter hibern8 fail recovery (Peter Wang)   
  - scsi: ufs: Stop using the clock scaling lock in the error handler (Bart Van Assche)   
  - scsi: mpi3mr: Refer CONFIG_SCSI_MPI3MR in Makefile (Shin'ichiro Kawasaki)   
  - regulator: da9211: Use irq handler when ready (Ricardo Ribalda)   
  - x86/resctrl: Fix task CLOSID/RMID update race (Peter Newman)   
  - EDAC/device: Fix period calculation in edac_device_reset_delay_period() (Eliav Farber)   
  - x86/boot: Avoid using Intel mnemonics in AT&T syntax asm (Peter Zijlstra)   
  - powerpc/imc-pmu: Fix use of mutex in IRQs disabled section (Kajol Jain)   
  - netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. (Gavrilov Ilia)   
  - sched/core: Fix use-after-free bug in dup_user_cpus_ptr() (Waiman Long)   
  - iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe() (Christophe JAILLET)   
  - iommu/iova: Fix alloc iova overflows issue (Yunfei Wang)   
  - usb: ulpi: defer ulpi_register on ulpi_read_id timeout (Ferry Toth)   
  - bus: mhi: host: Fix race between channel preparation and M0 event (Qiang Yu)   
  - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (Herbert Xu) [Orabug: 35005828] {CVE-2023-0394}
  - ixgbe: fix pci device refcount leak (Yang Yingliang)   
  - platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe (Hans de Goede)   
  - dt-bindings: msm/dsi: Don't require vcca-supply on 14nm PHY (Konrad Dybcio)   
  - dt-bindings: msm/dsi: Don't require vdds-supply on 10nm PHY (Konrad Dybcio)   
  - drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer (Kuogee Hsieh)   
  - platform/x86: ideapad-laptop: Add Legion 5 15ARH05 DMI id to set_fn_lock_led_list[] (Hans de Goede)   
  - dt-bindings: msm: dsi-phy-28nm: Add missing qcom, dsi-phy-regulator-ldo-mode (Bryan O'Donoghue)   
  - dt-bindings: msm: dsi-controller-main: Fix description of core clock (Bryan O'Donoghue)   
  - dt-bindings: msm: dsi-controller-main: Fix power-domain constraint (Bryan O'Donoghue)   
  - drm/msm/adreno: Make adreno quirks not overwrite each other (Konrad Dybcio)   
  - dt-bindings: msm: dsi-controller-main: Fix operating-points-v2 constraint (Bryan O'Donoghue)   
  - platform/x86: dell-privacy: Fix SW_CAMERA_LENS_COVER reporting (Hans de Goede)   
  - platform/surface: aggregator: Ignore command messages not intended for us (Maximilian Luz)   
  - platform/x86: dell-privacy: Only register SW_CAMERA_LENS_COVER if present (Hans de Goede)   
  - cifs: Fix uninitialized memory read for smb311 posix symlink create (Volker Lendecke)   
  - net/mlx5e: Set action fwd flag when parsing tc action goto (Roi Dayan)   
  - drm/i915/gt: Reset twice (Chris Wilson)   
  - drm/virtio: Fix GEM handle creation UAF (Rob Clark)   
  - s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() (Heiko Carstens)   
  - s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops (Heiko Carstens)   
  - ASoC: qcom: lpass-cpu: Fix fallback SD line index handling (Brian Norris)   
  - s390/kexec: fix ipl report address for kdump (Alexander Egorenkov)   
  - perf auxtrace: Fix address filter duplicate symbol selection (Adrian Hunter)   
  - net: stmmac: add aux timestamps fifo clearance wait (Noor Azura Ahmad Tarmizi)   
  - docs: Fix the docs build with Sphinx 6.0 (Jonathan Corbet)   
  - efi: tpm: Avoid READ_ONCE() for accessing the event log (Ard Biesheuvel)   
  - selftests: kvm: Fix a compile error in selftests/kvm/rseq_test.c (Jinrong Liang)   
  - KVM: arm64: nvhe: Fix build with profile optimization (Denis Nikitin)   
  - KVM: arm64: Fix S1PTW handling on RO memslots (Marc Zyngier)   
  - ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360 13-aw0xxx (Luka Guzenko)   
  - ALSA: hda/realtek - Turn on power early (Yuchi Yang)   
  - ALSA: control-led: use strscpy in set_led_id() (Jaroslav Kysela)   
  - LTS version: v5.15.88 (Jack Vogel)   
  - ALSA: hda - Enable headset mic on another Dell laptop with ALC3254 (Chris Chiu)   
  - ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list (Adrian Chan)   
  - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Clement Lecigne) [Orabug: 34983525] {CVE-2023-0266}
  - net/ulp: prevent ULP without clone op from entering the LISTEN status (Paolo Abeni)   
  - net: sched: disallow noqueue for qdisc classes (Frederick Lawler) [Orabug: 35005790] {CVE-2022-47929}
  - serial: fixup backport of "serial: Deassert Transmit Enable on probe in driver-specific way" (Rasmus Villemoes)   
  - selftests/vm/pkeys: Add a regression test for setting PKRU through ptrace (Kyle Huey)   
  - x86/fpu: Emulate XRSTOR's behavior if the xfeatures PKRU bit is not set (Kyle Huey)   
  - x86/fpu: Allow PKRU to be (once again) written by ptrace. (Kyle Huey)   
  - x86/fpu: Add a pkru argument to copy_uabi_to_xstate() (Kyle Huey)   
  - x86/fpu: Add a pkru argument to copy_uabi_from_kernel_to_xstate(). (Kyle Huey)   
  - x86/fpu: Take task_struct* in copy_sigframe_from_user_to_xstate() (Kyle Huey)   
  - parisc: Align parisc MADV_XXX constants with all other architectures (Helge Deller)   
  - LTS version: v5.15.87 (Jack Vogel)   
  - drm/mgag200: Fix PLL setup for G200_SE_A rev >=4 (Jocelyn Falempe)   
  - io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res() (Harshit Mogalapalli)   
  - efi: random: combine bootloader provided RNG seed with RNG protocol output (Ard Biesheuvel)   
  - mbcache: Avoid nesting of cache->c_list_lock under bit locks (Jan Kara)   
  - net: hns3: fix return value check bug of rx copybreak (Jie Wang)   
  - btrfs: make thaw time super block check to also verify checksum (Qu Wenruo)   
  - selftests: set the BUILD variable to absolute path (Muhammad Usama Anjum)   
  - ext4: don't allow journal inode to have encrypt flag (Eric Biggers)   
  - mptcp: use proper req destructor for IPv6 (Matthieu Baerts)   
  - mptcp: dedicated request sock for subflow in v6 (Matthieu Baerts)   
  - Revert "ACPI: PM: Add support for upcoming AMD uPEP HID AMDI007" (Mario Limonciello)   
  - ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob (William Liu)   
  - ksmbd: fix infinite loop in ksmbd_conn_handler_loop() (Namjae Jeon)   
  - hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (Linus Torvalds)   
  - hfs/hfsplus: use WARN_ON for sanity check (Arnd Bergmann)   
  - drm/i915/gvt: fix vgpu debugfs clean in remove (Zhenyu Wang)   
  - drm/i915/gvt: fix gvt debugfs destroy (Zhenyu Wang)   
  - riscv, kprobes: Stricter c.jr/c.jalr decoding (Björn Töpel)   
  - riscv: uaccess: fix type of 0 variable on error in get_user() (Ben Dooks)   
  - thermal: int340x: Add missing attribute for data rate base (Srinivas Pandruvada)   
  - io_uring: fix CQ waiting timeout handling (Pavel Begunkov)   
  - block: don't allow splitting of a REQ_NOWAIT bio (Jens Axboe)   
  - fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB (Paul Menzel)   
  - nfsd: fix handling of readdir in v4root vs. mount upcall timeout (Jeff Layton)   
  - x86/bugs: Flush IBP in ib_prctl_set() (Rodrigo Branco)   
  - x86/kexec: Fix double-free of elf header buffer (Takashi Iwai)   
  - btrfs: check superblock to ensure the fs was not modified at thaw time (Qu Wenruo)   
  - nvme: also return I/O command effects from nvme_command_effects (Christoph Hellwig)   
  - nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it (Christoph Hellwig)   
  - io_uring: check for valid register opcode earlier (Jens Axboe)   
  - nvme: fix multipath crash caused by flush request when blktrace is enabled (Yanjun Zhang)   
  - ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet (Hans de Goede)   
  - udf: Fix extension of the last extent in the file (Jan Kara)   
  - caif: fix memory leak in cfctrl_linkup_request() (Zhengchao Shao)   
  - drm/i915: unpin on error in intel_vgpu_shadow_mm_pin() (Dan Carpenter)   
  - perf stat: Fix handling of --for-each-cgroup with --bpf-counters to match non BPF mode (Namhyung Kim)   
  - usb: rndis_host: Secure rndis_query check against int overflow (Szymon Heidrich)   
  - octeontx2-pf: Fix lmtst ID used in aura free (Geetha sowjanya)   
  - drivers/net/bonding/bond_3ad: return when there's no aggregator (Daniil Tatianin)   
  - fs/ntfs3: don't hold ni_lock when calling truncate_setsize() (Tetsuo Handa)   
  - drm/imx: ipuv3-plane: Fix overlay plane width (Philipp Zabel)   
  - perf tools: Fix resources leak in perf_data__open_dir() (Miaoqian Lin)   
  - netfilter: ipset: Rework long task execution when adding/deleting entries (Jozsef Kadlecsik)   
  - netfilter: ipset: fix hash:net,port,net hang with /0 subnet (Jozsef Kadlecsik)   
  - net: sparx5: Fix reading of the MAC address (Horatiu Vultur)   
  - net: sched: cbq: dont intepret cls results when asked to drop (Jamal Hadi Salim) [Orabug: 34983582] {CVE-2023-23454}
  - net: sched: atm: dont intepret cls results when asked to drop (Jamal Hadi Salim) [Orabug: 34983613] {CVE-2023-23455}
  - gpio: sifive: Fix refcount leak in sifive_gpio_probe (Miaoqian Lin)   
  - ceph: switch to vfs_inode_has_locks() to fix file lock bug (Xiubo Li)   
  - filelock: new helper: vfs_inode_has_locks (Jeff Layton)   
  - drm/meson: Reduce the FIFO lines held when AFBC is not used (Carlo Caione)   
  - RDMA/mlx5: Fix validation of max_rd_atomic caps for DC (Maor Gottlieb)   
  - RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device (Shay Drory)   
  - net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe (Miaoqian Lin)   
  - net: ena: Update NUMA TPH hint register upon NUMA node update (David Arinzon)   
  - net: ena: Set default value for RX interrupt moderation (David Arinzon)   
  - net: ena: Fix rx_copybreak value update (David Arinzon)   
  - net: ena: Use bitmask to indicate packet redirection (David Arinzon)   
  - net: ena: Account for the number of processed bytes in XDP (David Arinzon)   
  - net: ena: Don't register memory info on XDP exchange (David Arinzon)   
  - net: ena: Fix toeplitz initial hash value (David Arinzon)   
  - net: amd-xgbe: add missed tasklet_kill (Jiguang Xiao)   
  - net/mlx5e: Fix hw mtu initializing at XDP SQ allocation (Adham Faris)   
  - net/mlx5e: Always clear dest encap in neigh-update-del (Chris Mi)   
  - net/mlx5e: TC, Refactor mlx5e_tc_add_flow_mod_hdr() to get flow attr (Roi Dayan)   
  - net/mlx5e: IPoIB, Don't allow CQE compression to be turned on by default (Dragos Tatulea)   
  - net/mlx5: Avoid recovery in probe flows (Shay Drory)   
  - net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path (Jiri Pirko)   
  - net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Moshe Shemesh)   
  - vdpa_sim: fix vringh initialization in vdpasim_queue_ready() (Stefano Garzarella)   
  - vhost: fix range used in translate_desc() (Stefano Garzarella)   
  - vringh: fix range used in iotlb_translate() (Stefano Garzarella)   
  - vhost/vsock: Fix error handling in vhost_vsock_init() (Yuan Can)   
  - vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() (ruanjinjie)   
  - nfc: Fix potential resource leaks (Miaoqian Lin)   
  - net: dsa: mv88e6xxx: depend on PTP conditionally (Johnny S. Lee)   
  - qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure (Daniil Tatianin)   
  - net: sched: fix memory leak in tcindex_set_parms (Hawkins Jiawei)   
  - net: hns3: fix VF promisc mode not update when mac table full (Jian Shen)   
  - net: hns3: fix miss L3E checking for rx packet (Jian Shen)   
  - net: hns3: extract macro to simplify ring stats update code (Peng Li)   
  - net: hns3: refactor hns3_nic_reuse_page() (Hao Chen)   
  - net: hns3: add interrupts re-initialization while doing VF FLR (Jie Wang)   
  - nfsd: shut down the NFSv4 state objects before the filecache (Jeff Layton)   
  - veth: Fix race with AF_XDP exposing old or uninitialized descriptors (Shawn Bohrer)   
  - netfilter: nf_tables: honor set timeout and garbage collection updates (Pablo Neira Ayuso)   
  - vmxnet3: correctly report csum_level for encapsulated packet (Ronak Doshi)   
  - netfilter: nf_tables: perform type checking for existing sets (Pablo Neira Ayuso)   
  - netfilter: nf_tables: add function to create set stateful expressions (Pablo Neira Ayuso)   
  - netfilter: nf_tables: consolidate set description (Pablo Neira Ayuso)   
  - drm/panfrost: Fix GEM handle creation ref-counting (Steven Price)   
  - bpf: pull before calling skb_postpull_rcsum() (Jakub Kicinski)   
  - btrfs: fix an error handling path in btrfs_defrag_leaves() (Sasha Levin)   
  - SUNRPC: ensure the matching upcall is in-flight upon downcall (minoura makoto)   
  - drm/i915/migrate: fix length calculation (Matthew Auld)   
  - drm/i915/migrate: fix offset calculation (Matthew Auld)   
  - drm/i915/migrate: don't check the scratch page (Matthew Auld)   
  - ext4: fix deadlock due to mbcache entry corruption (Jan Kara)   
  - mbcache: automatically delete entries from cache on freeing (Jan Kara)   
  - ext4: correct inconsistent error msg in nojournal mode (Baokun Li)   
  - ext4: goto right label 'failed_mount3a' (Jason Yan)   
  - ravb: Fix "failed to switch device to config mode" message during unbind (Biju Das)   
  - perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data (Masami Hiramatsu (Google))   
  - perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor (Masami Hiramatsu (Google))   
  - media: s5p-mfc: Fix in register read and write for H264 (Smitha T Murthy)   
  - media: s5p-mfc: Clear workbit to handle error condition (Smitha T Murthy)   
  - media: s5p-mfc: Fix to handle reference queue during finishing (Smitha T Murthy)   
  - x86/MCE/AMD: Clear DFR errors found in THR handler (Yazen Ghannam)   
  - x86/mce: Get rid of msr_ops (Borislav Petkov)   
  - btrfs: fix extent map use-after-free when handling missing device in read_one_chunk (void0red)   
  - btrfs: move missing device handling in a dedicate function (Nikolay Borisov)   
  - btrfs: replace strncpy() with strscpy() (Sasha Levin)   
  - phy: qcom-qmp-combo: fix out-of-bounds clock access (Sasha Levin)   
  - ARM: renumber bits related to _TIF_WORK_MASK (Jens Axboe)   
  - ext4: fix off-by-one errors in fast-commit block filling (Eric Biggers)   
  - ext4: fix unaligned memory access in ext4_fc_reserve_space() (Eric Biggers)   
  - ext4: add missing validation of fast-commit record lengths (Eric Biggers)   
  - ext4: don't set up encryption key during jbd2 transaction (Eric Biggers)   
  - ext4: disable fast-commit of encrypted dir operations (Eric Biggers)   
  - ext4: fix potential out of bound read in ext4_fc_replay_scan() (Eric Biggers)   
  - ext4: factor out ext4_fc_get_tl() (Eric Biggers)   
  - ext4: introduce EXT4_FC_TAG_BASE_LEN helper (Eric Biggers)   
  - ext4: use ext4_debug() instead of jbd_debug() (Eric Biggers)   
  - ext4: remove unused enum EXT4_FC_COMMIT_FAILED (Eric Biggers)   
  - tracing: Fix issue of missing one synthetic field (Zheng Yejian)   
  - block: mq-deadline: Fix dd_finish_request() for zoned devices (Damien Le Moal)   
  - drm/amdgpu: make display pinning more flexible (v2) (Alex Deucher)   
  - drm/amdgpu: handle polaris10/11 overlap asics (v2) (Alex Deucher)   
  - ext4: allocate extended attribute value in vmalloc area (Ye Bin)   
  - ext4: avoid unaccounted block allocation when expanding inode (Jan Kara)   
  - ext4: initialize quota before expanding inode in setproject ioctl (Jan Kara)   
  - ext4: fix inode leak in ext4_xattr_inode_create() on an error path (Ye Bin)   
  - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (Ye Bin)   
  - ext4: avoid BUG_ON when creating xattrs (Jan Kara)   
  - ext4: fix error code return to user-space in ext4_get_branch() (Luís Henriques)   
  - ext4: fix corruption when online resizing a 1K bigalloc fs (Baokun Li)   
  - ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline (Eric Whitney)   
  - ext4: init quota for 'old.inode' in 'ext4_rename' (Ye Bin)   
  - ext4: fix uninititialized value in 'ext4_evict_inode' (Ye Bin)   
  - ext4: fix leaking uninitialized memory in fast-commit journal (Eric Biggers)   
  - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (Baokun Li)   
  - ext4: check and assert if marking an no_delete evicting inode dirty (Zhang Yi)   
  - ext4: fix reserved cluster accounting in __es_remove_extent() (Ye Bin)   
  - ext4: fix bug_on in __es_tree_search caused by bad quota inode (Baokun Li)   
  - ext4: add helper to check quota inums (Baokun Li)   
  - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (Baokun Li)   
  - ext4: fix undefined behavior in bit shift for ext4_check_flag_values (Gaosheng Cui)   
  - ext4: fix use-after-free in ext4_orphan_cleanup (Baokun Li)   
  - fs: ext4: initialize fsdata in pagecache_write() (Alexander Potapenko)   
  - ext4: remove trailing newline from ext4_msg() message (Luís Henriques)   
  - ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop (Baokun Li)   
  - ext4: silence the warning when evicting inode with dioread_nolock (Zhang Yi)   
  - drm/ingenic: Fix missing platform_driver_unregister() call in ingenic_drm_init() (Yuan Can)   
  - drm/i915/dsi: fix VBT send packet port selection for dual link DSI (Mikko Kovanen)   
  - drm/vmwgfx: Validate the box size for the snooped cursor (Zack Rusin)   
  - drm/connector: send hotplug uevent on connector cleanup (Simon Ser)   
  - device_cgroup: Roll back to original exceptions after copy failure (Wang Weiyang)   
  - parisc: led: Fix potential null-ptr-deref in start_task() (Shang XiaoJing)   
  - remoteproc: core: Do pm_relax when in RPROC_OFFLINE state (Maria Yu)   
  - iommu/amd: Fix ivrs_acpihid cmdline parsing code (Kim Phillips)   
  - phy: qcom-qmp-combo: fix sc8180x reset (Johan Hovold)   
  - driver core: Fix bus_type.match() error handling in __driver_attach() (Isaac J. Manjarres)   
  - crypto: ccp - Add support for TEE for PCI ID 0x14CA (Mario Limonciello)   
  - crypto: n2 - add missing hash statesize (Corentin Labbe)   
  - riscv: mm: notify remote harts about mmu cache updates (Sergey Matyukevich)   
  - riscv: stacktrace: Fixup ftrace_graph_ret_addr retp argument (Guo Ren)   
  - PCI/sysfs: Fix double free in error path (Sascha Hauer)   
  - PCI: Fix pci_device_is_present() for VFs by checking PF (Michael S. Tsirkin)   
  - ipmi: fix use after free in _ipmi_destroy_user() (Dan Carpenter)   
  - ima: Fix a potential NULL pointer access in ima_restore_measurement_list (Huaxin Lu)   
  - mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type() (Alexander Sverdlin)   
  - ipmi: fix long wait in unload when IPMI disconnect (Zhang Yuchen)   
  - ipu3-imgu: Fix NULL pointer dereference in imgu_subdev_set_selection() (Maximilian Luz)   
  - ASoC: jz4740-i2s: Handle independent FIFO flush bits (Aidan MacDonald)   
  - wifi: wilc1000: sdio: fix module autoloading (Michael Walle)   
  - efi: Add iMac Pro 2017 to uefi skip cert quirk (Aditya Garg)   
  - md/bitmap: Fix bitmap chunk size overflow issues (Florian-Ewald Mueller)   
  - block: mq-deadline: Do not break sequential write streams to zoned HDDs (Damien Le Moal)   
  - rtc: ds1347: fix value written to century register (Ian Abbott)   
  - cifs: fix missing display of three mount options (Steve French)   
  - cifs: fix confusing debug message (Paulo Alcantara)   
  - media: dvb-core: Fix UAF due to refcount races at releasing (Takashi Iwai) [Orabug: 34820628] {CVE-2022-41218}
  - media: dvb-core: Fix double free in dvb_register_device() (Keita Suzuki)   
  - ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod (Nick Desaulniers)   
  - staging: media: tegra-video: fix device_node use after free (Luca Ceresoli)   
  - staging: media: tegra-video: fix chan->mipi value on error (Luca Ceresoli)   
  - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line (Yang Jihong)   
  - tracing/probes: Handle system names with hyphens (Steven Rostedt (Google))   
  - tracing/hist: Fix wrong return value in parse_action_params() (Zheng Yejian)   
  - tracing: Fix complicated dependency of CONFIG_TRACER_MAX_TRACE (Masami Hiramatsu (Google))   
  - tracing: Fix race where eprobes can be called before the event (Steven Rostedt (Google))   
  - x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK (Masami Hiramatsu (Google))   
  - x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK (Masami Hiramatsu (Google))   
  - ftrace/x86: Add back ftrace_expected for ftrace bug reports (Steven Rostedt (Google))   
  - x86/microcode/intel: Do not retry microcode reloading on the APs (Ashok Raj)   
  - KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 (Sean Christopherson)   
  - KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails (Sean Christopherson)   
  - KVM: VMX: Resume guest immediately when injecting #GP on ECREATE (Sean Christopherson)   
  - of/kexec: Fix reading 32-bit "linux,initrd-{start,end}" values (Rob Herring)   
  - perf/core: Call LSM hook after copying perf_event_attr (Namhyung Kim)   
  - tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' (Zheng Yejian)   
  - dm cache: set needs_check flag after aborting metadata (Mike Snitzer)   
  - dm cache: Fix UAF in destroy() (Luo Meng)   
  - dm clone: Fix UAF in clone_dtr() (Luo Meng)   
  - dm integrity: Fix UAF in dm_integrity_dtr() (Luo Meng)   
  - dm thin: Fix UAF in run_timer_softirq() (Luo Meng)   
  - dm thin: resume even if in FAIL mode (Luo Meng)   
  - dm thin: Use last transaction's pmd->root when commit failed (Zhihao Cheng)   
  - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (Zhihao Cheng)   
  - dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort (Mike Snitzer)   
  - mptcp: remove MPTCP 'ifdef' in TCP SYN cookies (Matthieu Baerts)   
  - mptcp: mark ops structures as ro_after_init (Florian Westphal)   
  - fs: dlm: retry accept() until -EAGAIN or error returns (Alexander Aring)   
  - fs: dlm: fix sock release if listen fails (Alexander Aring)   
  - ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude laptops (Chris Chiu)   
  - ALSA: patch_realtek: Fix Dell Inspiron Plus 16 (Philipp Jungkamp)   
  - cpufreq: Init completion before kobject_init_and_add() (Yongqiang Liu)   
  - PM/devfreq: governor: Add a private governor_data for governor (Kant Fan)   
  - selftests: Use optional USERCFLAGS and USERLDFLAGS (Mickaël Salaün)   
  - arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength (Krzysztof Kozlowski)   
  - ARM: ux500: do not directly dereference __iomem (Jason A. Donenfeld)   
  - btrfs: fix resolving backrefs for inline extent followed by prealloc (Boris Burkov)   
  - mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K (Wenchao Chen)   
  - arm64: dts: qcom: sdm845-db845c: correct SPI2 pins drive strength (Krzysztof Kozlowski)   
  - perf/x86/intel/uncore: Clear attr_update properly (Alexander Antonov)   
  - perf/x86/intel/uncore: Disable I/O stacks to PMU mapping on ICX-D (Alexander Antonov)   
  - jbd2: use the correct print format (Bixuan Cui)   
  - ktest.pl minconfig: Unset configs instead of just removing them (Steven Rostedt)   
  - kest.pl: Fix grub2 menu handling for rebooting (Steven Rostedt)   
  - soc: qcom: Select REMAP_MMIO for LLCC driver (Manivannan Sadhasivam)   
  - media: stv0288: use explicitly signed char (Jason A. Donenfeld)   
  - net/af_packet: make sure to pull mac header (Eric Dumazet)   
  - net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO (Hangbin Liu)   
  - rcu-tasks: Simplify trc_read_check_handler() atomic operations (Paul E. McKenney)   
  - ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire (Pierre-Louis Bossart)   
  - ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio (Pierre-Louis Bossart)   
  - kcsan: Instrument memcpy/memset/memmove with newer Clang (Marco Elver)   
  - SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails (Chuck Lever)   
  - tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo)   
  - tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo)   
  - tpm: acpi: Call acpi_put_table() to fix memory leak (Hanjun Guo)   
  - mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING (Deren Wu)   
  - f2fs: allow to read node block after shutdown (Jaegeuk Kim)   
  - f2fs: should put a page when checking the summary info (Pavel Machek)   
  - mm, compaction: fix fast_isolate_around() to stay within boundaries (NARIBAYASHI Akira)   
  - md: fix a crash in mempool_free (Mikulas Patocka)   
  - mfd: mt6360: Add bounds checking in Regmap read/write call-backs (ChiYuan Huang)   
  - pnode: terminate at peers of source (Christian Brauner)   
  - ALSA: line6: fix stack overflow in line6_midi_transmit (Artem Egorkine)   
  - ALSA: line6: correct midi status byte when receiving data from podxt (Artem Egorkine)   
  - ovl: Use ovl mounter's fsuid and fsgid in ovl_link() (Zhang Tianci)   
  - binfmt: Fix error return code in load_elf_fdpic_binary() (Wang Yufen)   
  - hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount (Aditya Garg)   
  - pstore/zone: Use GFP_ATOMIC to allocate zone buffer (Qiujun Huang)   
  - pstore: Properly assign mem_type property (Luca Stefani)   
  - HID: plantronics: Additional PIDs for double volume key presses quirk (Terry Junge)   
  - HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint (José Expósito)   
  - powerpc/rtas: avoid scheduling in rtas_os_term() (Nathan Lynch)   
  - powerpc/rtas: avoid device tree lookups in rtas_os_term() (Nathan Lynch)   
  - objtool: Fix SEGFAULT (Christophe Leroy)   
  - fs/ntfs3: Fix slab-out-of-bounds in r_page (Yin Xiujiang)   
  - fs/ntfs3: Delete duplicate condition in ntfs_read_mft() (Dan Carpenter)   
  - fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_fill_super() (Tetsuo Handa)   
  - fs/ntfs3: Use __GFP_NOWARN allocation at wnd_init() (Tetsuo Handa)   
  - fs/ntfs3: Validate index root when initialize NTFS security (Edward Lo)   
  - soundwire: dmi-quirks: add quirk variant for LAPBC710 NUC15 (Pierre-Louis Bossart)   
  - fs/ntfs3: Fix slab-out-of-bounds read in run_unpack (Hawkins Jiawei)   
  - fs/ntfs3: Validate resident attribute name (Edward Lo)   
  - fs/ntfs3: Validate buffer length while parsing index (Edward Lo)   
  - fs/ntfs3: Validate attribute name offset (Edward Lo)   
  - fs/ntfs3: Add null pointer check for inode operations (Edward Lo)   
  - fs/ntfs3: Fix memory leak on ntfs_fill_super() error path (Shigeru Yoshida)   
  - fs/ntfs3: Add null pointer check to attr_load_runs_vcn (Edward Lo)   
  - fs/ntfs3: Validate data run offset (Edward Lo)   
  - fs/ntfs3: Add overflow check for attribute size (edward lo)   
  - fs/ntfs3: Validate BOOT record_size (edward lo)   
  - nvmet: don't defer passthrough commands with trivial effects to the workqueue (Christoph Hellwig)   
  - nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition (Christoph Hellwig)   
  - ata: ahci: Fix PCS quirk application for suspend (Adam Vodopjan)   
  - block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq (Yu Kuai)   
  - ACPI: resource: do IRQ override on Lenovo 14ALC7 (Adrian Freund)   
  - ACPI: resource: do IRQ override on XMG Core 15 (Erik Schumacher)   
  - ACPI: resource: do IRQ override on LENOVO IdeaPad (Jiri Slaby (SUSE))   
  - ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA (Tamim Khan)   
  - nvme-pci: fix page size checks (Keith Busch)   
  - nvme-pci: fix mempool alloc size (Keith Busch)   
  - nvme-pci: fix doorbell buffer value endianness (Klaus Jensen)   
  - cifs: fix oops during encryption (Paulo Alcantara)   
  - usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init (Miaoqian Lin)   
  - IB/mlx4: Implement backend callback for "ib_get_vector_irqn" (Gerd Rausch)  [Orabug: 34276618]  
  - net/rds: Split send & receive vectors again (Gerd Rausch)  [Orabug: 34276609]  
  - drivers: base: cacheinfo: export symbol "get_cpu_cacheinfo" (Gerd Rausch)  [Orabug: 34276609]  
  - net/rds: Bring tasklets back for better latency (Gerd Rausch)  [Orabug: 34276240]  
  - net/rds: Throttle check for CQ CPU affinity (Gerd Rausch)  [Orabug: 34276240]  
  - net/rds: Follow the observed CQ CPU affinity (Gerd Rausch)  [Orabug: 34276240]  
  - net/rds: Add "preferred_cpu" option to "rds_rdma.ko" (Gerd Rausch)  [Orabug: 34276240]  
  - net/mlx5: Add new verb "ib_get_vector_irqn" (Gerd Rausch)  [Orabug: 34276240]  
  - net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work (Gerd Rausch)  [Orabug: 34276240]  
  - net/rds: Make workers use the designated CPU (Gerd Rausch)  [Orabug: 34276240]  
  - net/rds: Put more CPU cores to work (Gerd Rausch)  [Orabug: 34276240]  
  - net/rds: Get rid of tasklets (Gerd Rausch)  [Orabug: 34276240]  
  - net/rds: Use the same vector for send & receive (Gerd Rausch)  [Orabug: 34276240]  
  - net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 34276240]  
  - net/rds: Allocate pages on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 34276240]  
  - uek-rpm: [act|cls]_bpf should be part of core (Alan Maguire)  [Orabug: 34551630]  
  - net/rds: Do not RESET_ALT_CONN if conn drops with DR_IB_DISCONNECTED_EVENT (Sharath Srinivasan)  [Orabug: 34864406]  
  - rds: ib: Keep IB MRs on clean_list unless we are tearing down the pool (Håkon Bugge)  [Orabug: 34987233]  
  - rds: ib: Add FRWR related statistics counters (Håkon Bugge)  [Orabug: 34987233]  
  - scsi: megaraid_sas: Skip syncing the RAID map on older controllers (Martin K. Petersen)  [Orabug: 35028425]  
  - iommu/amd: Don't block updates to GATag if guest mode is already on (Joao Martins)  [Orabug: 34988288]  
  - IB/core: Make GID table entry (gid_idx) available immediately (Konrad Rzeszutek Wilk)  [Orabug: 35015836]  
  - iommu/amd: Disable AVIC on certain systems BIOS (Joao Martins)  [Orabug: 35018580]  
  - xfs: fix incorrect i_nlink caused by inode racing (Long Li)  [Orabug: 35021004]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.3.1.el9_2]
changelog:
  - cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret' (Mark Langsdorf) [2170475]
  - cpufreq: ACPI: Only set boost MSRs on supported CPUs (Mark Langsdorf) [2170475]
  - Drivers: vmbus: Check for channel allocation before looking up relids (Mohammed Gamal) [2156126]
  - NFSD: copy the whole verifier in nfsd_copy_write_verifier (Jeffrey Layton) [2166658]
  - nfsd: don't fsync nfsd_files on last close (Jeffrey Layton) [2166658]
  - NFSD: fix problems with cleanup on errors in nfsd4_copy (Jeffrey Layton) [2166658]
  - nfsd: fix race to check ls_layouts (Jeffrey Layton) [2166658]
  - nfsd: don't hand out delegation on setuid files being opened for write (Jeffrey Layton) [2127406]
  - nfsd: remove fs/nfsd/fault_inject.c (Jeffrey Layton) [2166658]
  - NFSD: fix leaked reference count of nfsd4_ssc_umount_item (Jeffrey Layton) [2166658]
  - nfsd: clean up potential nfsd_file refcount leaks in COPY codepath (Jeffrey Layton) [2166658]
  - nfsd: zero out pointers after putting nfsd_files on COPY setup error (Jeffrey Layton) [2166658]
  - nfsd: eliminate __nfs4_get_fd (Jeffrey Layton) [2166658]
  - nfsd: add some kerneldoc comments for stateid preprocessing functions (Jeffrey Layton) [2166658]
  - nfsd: eliminate find_deleg_file_locked (Jeffrey Layton) [2166658]
  - nfsd: don't take nfsd4_copy ref for OP_OFFLOAD_STATUS (Jeffrey Layton) [2166658]
  - nfsd: move reply cache initialization into nfsd startup (Jeffrey Layton) [2166658]
  - nfsd: fix potential race in nfs4_find_file (Jeffrey Layton) [1997177]
  - nfsd: allow nfsd_file_get to sanely handle a NULL pointer (Jeffrey Layton) [2166658]
  - NFSD: enhance inter-server copy cleanup (Jeffrey Layton) [2166658]
  - NFSD: Rename the fields in copy_stateid_t (Jeffrey Layton) [2166658]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.4.1.el9_2]
changelog:
  - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [2109548]
  - Revert "GFS2: free disk inode which is deleted by remote node -V2" (Bob Peterson) [2109548]
  - gfs2: Evict inodes cooperatively (Andreas Gruenbacher) [2109548]
  - gfs2: Flush delete work before shrinking inode cache (Andreas Gruenbacher) [2109548]
  - gfs2: Cease delete work during unmount (Bob Peterson) [2109548]
  - gfs2: Add SDF_DEACTIVATING super block flag (Bob Peterson) [2109548]
  - gfs2: check gl_object in rgrp glops (Bob Peterson) [2109548]
  - gfs2: Split the two kinds of glock "delete" work (Andreas Gruenbacher) [2109548]
  - gfs2: Move delete workqueue into super block (Andreas Gruenbacher) [2109548]
  - gfs2: Get rid of GLF_PENDING_DELETE flag (Andreas Gruenbacher) [2109548]
  - gfs2: Make glock lru list scanning safer (Andreas Gruenbacher) [2109548]
  - gfs2: Clean up gfs2_scan_glock_lru (Andreas Gruenbacher) [2109548]
  - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [2109548]
  - gfs2: gl_object races fix (Andreas Gruenbacher) [2109548]
  - iomap/gfs2: Unlock and put folio in page_done handler (Andreas Gruenbacher) [2109548]
  - iomap: Add __iomap_put_folio helper (Andreas Gruenbacher) [2109548]
  - Revert "gfs2: stop using generic_writepages in gfs2_ail1_start_one" (Andreas Gruenbacher) [2109548]
  - gfs2: Remove support for glock holder auto-demotion (2) (Andreas Gruenbacher) [2109548]
  - gfs2: Remove support for glock holder auto-demotion (Andreas Gruenbacher) [2109548]
  - gfs2: Minor gfs2_try_evict cleanup (Andreas Gruenbacher) [2109548]
  - gfs2: Partially revert gfs2_inode_lookup change (Andreas Gruenbacher) [2109548]
  - gfs2: Add gfs2_inode_lookup comment (Andreas Gruenbacher) [2109548]
  - gfs2: Uninline and improve glock_{set,clear}_object (Andreas Gruenbacher) [2109548]
  - gfs2: Simply dequeue iopen glock in gfs2_evict_inode (Andreas Gruenbacher) [2109548]
  - gfs2: Clean up after gfs2_create_inode rework (Andreas Gruenbacher) [2109548]
  - gfs2: Avoid dequeuing GL_ASYNC glock holders twice (Andreas Gruenbacher) [2109548]
  - gfs2: Make gfs2_glock_hold return its glock argument (Andreas Gruenbacher) [2109548]
  - gfs2: Always check inode size of inline inodes (Andreas Gruenbacher) [2109548]
  - gfs2: Cosmetic gfs2_dinode_{in,out} cleanup (Andreas Gruenbacher) [2109548]
  - gfs2: Handle -EBUSY result of insert_inode_locked4 (Andreas Gruenbacher) [2109548]
  - gfs2: Fix and clean up create / evict interaction (Andreas Gruenbacher) [2109548]
  - gfs2: Clean up initialization of "ip" in gfs2_create_inode (Andreas Gruenbacher) [2109548]
  - gfs2: Get rid of ghs[] in gfs2_create_inode (Andreas Gruenbacher) [2109548]
  - gfs2: Add extra error check in alloc_dinode (Andreas Gruenbacher) [2109548]
  - gfs2: Check sb_bsize_shift after reading superblock (Andrew Price) [2109548]
  - gfs2: Switch from strlcpy to strscpy (Andreas Gruenbacher) [2109548]
  - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [2109548]
  - gfs2: Dequeue waiters when withdrawn (Bob Peterson) [2109548]
  - gfs2: Prevent double iput for journal on error (Bob Peterson) [2109548]
  - gfs2: Convert gfs2_jhead_process_page() to use a folio (Andreas Gruenbacher) [2109548]
  - gfs2: remove ->writepage (Andreas Gruenbacher) [2109548]
  - gfs2: stop using generic_writepages in gfs2_ail1_start_one (Andreas Gruenbacher) [2109548]
  - gfs2: List traversal in do_promote is safe (Andreas Gruenbacher) [2109548]
  - gfs2: do_promote glock holder stealing fix (Bob Peterson) [2109548]
  - gfs2: Use better variable name (Andreas Gruenbacher) [2109548]
  - gfs2: Make go_instantiate take a glock (Andreas Gruenbacher) [2109548]
  - gfs2: Add new go_held glock operation (Andreas Gruenbacher) [2109548]
  - gfs2: Revert 'Fix "truncate in progress" hang' (Andreas Gruenbacher) [2109548]
  - gfs2: Instantiate glocks ouside of glock state engine (Andreas Gruenbacher) [2109548]
  - gfs2: Fix up gfs2_glock_async_wait (Andreas Gruenbacher) [2109548]
  - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [2109548]
  - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [2109548]
  - gfs2: Add GL_NOPID flag for process-independent glock holders (Andreas Gruenbacher) [2109548]
  - gfs2: Add flocks to glockfd debugfs file (Andreas Gruenbacher) [2109548]
  - gfs2: Add glockfd debugfs file (Andreas Gruenbacher) [2109548]
  - gfs2: Minor gfs2_glock_nq_m cleanup (Andreas Gruenbacher) [2109548]
  - gfs2: Fix spelling mistake in comment (Andreas Gruenbacher) [2109548]
  - gfs2: Rewrap overlong comment in do_promote (Bob Peterson) [2109548]
  - gfs2: Remove redundant NULL check before kfree (Andreas Gruenbacher) [2109548]
  - gfs2: Use container_of() for gfs2_glock(aspace) (Andreas Gruenbacher) [2109548]
  - gfs2: dump inode object for iopen glocks (Bob Peterson) [2109548]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.5.1.el9_2]
changelog:
  - redhat: fix trivial syntax error in 64k-debug modules signing (Herton R. Krzesinski)
  - redhat/configs: Revert "enable DAMON configs" (Vladis Dronov)
  - block: bio-integrity: Copy flags when bio_integrity_payload is cloned (Ming Lei) [2164903]
  - afs: remove afs_cache_netfs and afs_zap_permits() declarations (Marc Dionne) [2166628]
  - afs: remove variable nr_servers (Marc Dionne) [2166628]
  - afs: Fix lost servers_outstanding count (Marc Dionne) [2166628]
  - afs: Fix server->active leak in afs_put_server (Marc Dionne) [2166628]
  - afs: Fix fileserver probe RTT handling (Marc Dionne) [2166628]
  - afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked (Marc Dionne) [2166628]
  - afs: Use the operation issue time instead of the reply time for callbacks (Marc Dionne) [2166628]
  - afs: Enable multipage folio support (Marc Dionne) [2166628]
  - afs: Fix access after dec in put functions (Marc Dionne) [2166628]
  - afs: Use refcount_t rather than atomic_t (Marc Dionne) [2166628]
  - afs: Fix dynamic root getattr (Marc Dionne) [2166628]
  - afs: Remove check of PageError (Marc Dionne) [2166628]
  - afs: Fix some checker issues (Marc Dionne) [2166628]
  - afs: Fix infinite loop found by xfstest generic/676 (Marc Dionne) [2166628]
  - afs: Adjust ACK interpretation to try and cope with NAT (Marc Dionne) [2166628]
  - afs: Prefer struct_size over open coded arithmetic (Marc Dionne) [2166628]
  - afs: Convert invalidatepage to invalidate_folio (Marc Dionne) [2166628]
  - afs: Convert directory aops to invalidate_folio (Marc Dionne) [2166628]
  - blk-mq: fix "bad unlock balance detected" on q->srcu in __blk_mq_run_dispatch_ops (Chris Leech) [2170101]
  - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS (Jon Maloy) [2160029] {CVE-2022-2196}
  - ice: fix lost multicast packets in promisc mode (Petr Oros) [2170694]
  - net: use indirect calls helpers for sk_exit_memory_pressure() (Florian Westphal) [2155182]
  - bpf: pull before calling skb_postpull_rcsum() (Felix Maurer) [2164806]
  - bpf, sockmap: fix race in sock_map_free() (Felix Maurer) [2164806]
  - bpf, sock_map: Move cancel_work_sync() out of sock lock (Felix Maurer) [2164806]
  - xsk: Inherit need_wakeup flag for shared sockets (Felix Maurer) [2164806]
  - xsk: Fix backpressure mechanism on Tx (Felix Maurer) [2164806]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.6.1.el9_2]
changelog:
  - NFS: Correct timing for assigning access cache timestamp (Benjamin Coddington) [2180882]
  - nfsd: don't replace page in rq_pages if it's a continuation of last page (Jeffrey Layton) [2179342]
  - tun: avoid double free in tun_free_netdev (Jon Maloy) [2156374] {CVE-2022-4744}


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.7.1.el9_2]
changelog:
  - rxrpc: Fix wrong error return in rxrpc_connect_call() (Marc Dionne) [2170099]
  - rxrpc: Fix incoming call setup race (Marc Dionne) [2170099]
  - rxrpc: Move client call connection to the I/O thread (Marc Dionne) [2170099]
  - rxrpc: Move the client conn cache management to the I/O thread (Marc Dionne) [2170099]
  - rxrpc: Remove call->state_lock (Marc Dionne) [2170099]
  - rxrpc: Move call state changes from recvmsg to I/O thread (Marc Dionne) [2170099]
  - rxrpc: Move call state changes from sendmsg to I/O thread (Marc Dionne) [2170099]
  - rxrpc: Wrap accesses to get call state to put the barrier in one place (Marc Dionne) [2170099]
  - rxrpc: Split out the call state changing functions into their own file (Marc Dionne) [2170099]
  - rxrpc: Set up a connection bundle from a call, not rxrpc_conn_parameters (Marc Dionne) [2170099]
  - rxrpc: Offload the completion of service conn security to the I/O thread (Marc Dionne) [2170099]
  - rxrpc: Make the set of connection IDs per local endpoint (Marc Dionne) [2170099]
  - rxrpc: Tidy up abort generation infrastructure (Marc Dionne) [2170099]
  - rxrpc: Clean up connection abort (Marc Dionne) [2170099]
  - rxrpc: Implement a mechanism to send an event notification to a connection (Marc Dionne) [2170099]
  - rxrpc: Only disconnect calls in the I/O thread (Marc Dionne) [2170099]
  - rxrpc: Only set/transmit aborts in the I/O thread (Marc Dionne) [2170099]
  - rxrpc: Separate call retransmission from other conn events (Marc Dionne) [2170099]
  - rxrpc: Make the local endpoint hold a ref on a connected call (Marc Dionne) [2170099]
  - rxrpc: Stash the network namespace pointer in rxrpc_local (Marc Dionne) [2170099]
  - rxrpc: Fix a couple of potential use-after-frees (Marc Dionne) [2170099]
  - rxrpc: Fix the return value of rxrpc_new_incoming_call() (Marc Dionne) [2170099]
  - rxrpc: rxperf: Fix uninitialised variable (Marc Dionne) [2170099]
  - rxrpc: Fix I/O thread stop (Marc Dionne) [2170099]
  - rxrpc: Fix switched parameters in peer tracing (Marc Dionne) [2170099]
  - rxrpc: Fix locking issues in rxrpc_put_peer_locked() (Marc Dionne) [2170099]
  - rxrpc: Fix I/O thread startup getting skipped (Marc Dionne) [2170099]
  - rxrpc: Fix NULL deref in rxrpc_unuse_local() (Marc Dionne) [2170099]
  - rxrpc: Fix security setting propagation (Marc Dionne) [2170099]
  - rxrpc: Fix missing unlock in rxrpc_do_sendmsg() (Marc Dionne) [2170099]
  - rxrpc: Transmit ACKs at the point of generation (Marc Dionne) [2170099]
  - rxrpc: Fold __rxrpc_unuse_local() into rxrpc_unuse_local() (Marc Dionne) [2170099]
  - rxrpc: Move the cwnd degradation after transmitting packets (Marc Dionne) [2170099]
  - rxrpc: Trace/count transmission underflows and cwnd resets (Marc Dionne) [2170099]
  - rxrpc: Remove the _bh annotation from all the spinlocks (Marc Dionne) [2170099]
  - rxrpc: Make the I/O thread take over the call and local processor work (Marc Dionne) [2170099]
  - rxrpc: Extract the peer address from an incoming packet earlier (Marc Dionne) [2170099]
  - rxrpc: Reduce the use of RCU in packet input (Marc Dionne) [2170099]
  - rxrpc: Simplify skbuff accounting in receive path (Marc Dionne) [2170099]
  - rxrpc: Remove RCU from peer->error_targets list (Marc Dionne) [2170099]
  - rxrpc: Move DATA transmission into call processor work item (Marc Dionne) [2170099]
  - rxrpc: Copy client call parameters into rxrpc_call earlier (Marc Dionne) [2170099]
  - rxrpc: Implement a mechanism to send an event notification to a call (Marc Dionne) [2170099]
  - rxrpc: Don't use sk->sk_receive_queue.lock to guard socket state changes (Marc Dionne) [2170099]
  - rxrpc: Remove call->input_lock (Marc Dionne) [2170099]
  - rxrpc: Move error processing into the local endpoint I/O thread (Marc Dionne) [2170099]
  - rxrpc: Move packet reception processing into I/O thread (Marc Dionne) [2170099]
  - rxrpc: Create a per-local endpoint receive queue and I/O thread (Marc Dionne) [2170099]
  - rxrpc: Split the receive code (Marc Dionne) [2170099]
  - rxrpc: Don't hold a ref for connection workqueue (Marc Dionne) [2170099]
  - rxrpc: Don't hold a ref for call timer or workqueue (Marc Dionne) [2170099]
  - rxrpc: trace: Don't use __builtin_return_address for sk_buff tracing (Marc Dionne) [2170099]
  - rxrpc: Trace rxrpc_bundle refcount (Marc Dionne) [2170099]
  - rxrpc: trace: Don't use __builtin_return_address for rxrpc_call tracing (Marc Dionne) [2170099]
  - rxrpc: trace: Don't use __builtin_return_address for rxrpc_conn tracing (Marc Dionne) [2170099]
  - rxrpc: trace: Don't use __builtin_return_address for rxrpc_peer tracing (Marc Dionne) [2170099]
  - rxrpc: trace: Don't use __builtin_return_address for rxrpc_local tracing (Marc Dionne) [2170099]
  - rxrpc: Extract the code from a received ABORT packet much earlier (Marc Dionne) [2170099]
  - rxrpc: Drop rxrpc_conn_parameters from rxrpc_connection and rxrpc_bundle (Marc Dionne) [2170099]
  - rxrpc: Remove the [_k]net() debugging macros (Marc Dionne) [2170099]
  - rxrpc: Remove the [k_]proto() debugging macros (Marc Dionne) [2170099]
  - rxrpc: Remove handling of duplicate packets in recvmsg_queue (Marc Dionne) [2170099]
  - rxrpc: Fix call leak (Marc Dionne) [2170099]
  - rxrpc: Enable rxperf test module (Marc Dionne) [2170099]
  - rxrpc: Implement an in-kernel rxperf server for testing purposes (Marc Dionne) [2170099]
  - rxrpc: Fix checker warning (Marc Dionne) [2170099]
  - rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] (Marc Dionne) [2170099]
  - rxrpc: uninitialized variable in rxrpc_send_ack_packet() (Marc Dionne) [2170099]
  - rxrpc: fix rxkad_verify_response() (Marc Dionne) [2170099]
  - rxrpc: Fix network address validation (Marc Dionne) [2170099]
  - rxrpc: Fix oops from calling udpv6_sendmsg() on AF_INET socket (Marc Dionne) [2170099]
  - rxrpc: Allocate an skcipher each time needed rather than reusing (Marc Dionne) [2170099]
  - rxrpc: Fix congestion management (Marc Dionne) [2170099]
  - rxrpc: Remove the rxtx ring (Marc Dionne) [2170099]
  - rxrpc: Save last ACK's SACK table rather than marking txbufs (Marc Dionne) [2170099]
  - rxrpc: Remove call->lock (Marc Dionne) [2170099]
  - rxrpc: Don't use a ring buffer for call Tx queue (Marc Dionne) [2170099]
  - rxrpc: Get rid of the Rx ring (Marc Dionne) [2170099]
  - rxrpc: Clone received jumbo subpackets and queue separately (Marc Dionne) [2170099]
  - rxrpc: Split the rxrpc_recvmsg tracepoint (Marc Dionne) [2170099]
  - rxrpc: Clean up ACK handling (Marc Dionne) [2170099]
  - rxrpc: Allocate ACK records at proposal and queue for transmission (Marc Dionne) [2170099]
  - rxrpc: Define rxrpc_txbuf struct to carry data to be transmitted (Marc Dionne) [2170099]
  - rxrpc: Remove call->tx_phase (Marc Dionne) [2170099]
  - rxrpc: Remove the flags from the rxrpc_skb tracepoint (Marc Dionne) [2170099]
  - rxrpc: Remove unnecessary header inclusions (Marc Dionne) [2170099]
  - rxrpc: Call udp_sendmsg() directly (Marc Dionne) [2170099]
  - rxrpc: Fix ack.bufferSize to be 0 when generating an ack (Marc Dionne) [2170099]
  - rxrpc: Record stats for why the REQUEST-ACK flag is being set (Marc Dionne) [2170099]
  - rxrpc: Record statistics about ACK types (Marc Dionne) [2170099]
  - rxrpc: Add stats procfile and DATA packet stats (Marc Dionne) [2170099]
  - rxrpc: Track highest acked serial (Marc Dionne) [2170099]
  - rxrpc: Split call timer-expiration from call timer-set tracepoint (Marc Dionne) [2170099]
  - rxrpc: Trace setting of the request-ack flag (Marc Dionne) [2170099]
  - rxrpc: Automatically generate trace tag enums (Marc Dionne) [2170099]
  - rxrpc: remove rxrpc_max_call_lifetime declaration (Marc Dionne) [2170099]
  - rxrpc: Remove rxrpc_get_reply_time() which is no longer used (Marc Dionne) [2170099]
  - rxrpc: Fix calc of resend age (Marc Dionne) [2170099]
  - rxrpc: Fix local destruction being repeated (Marc Dionne) [2170099]
  - rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() (Marc Dionne) [2170099]
  - rxrpc: Fix locking in rxrpc's sendmsg (Marc Dionne) [2170099]
  - net: rxrpc: fix clang -Wformat warning (Marc Dionne) [2170099]
  - rxrpc: Fix decision on when to generate an IDLE ACK (Marc Dionne) [2170099]
  - rxrpc: Don't let ack.previousPacket regress (Marc Dionne) [2170099]
  - rxrpc: Fix overlapping ACK accounting (Marc Dionne) [2170099]
  - rxrpc: Don't try to resend the request if we're receiving the reply (Marc Dionne) [2170099]
  - rxrpc: Fix listen() setting the bar too high for the prealloc rings (Marc Dionne) [2170099]
  - rxrpc, afs: Fix selection of abort codes (Marc Dionne) [2170099]
  - rxrpc: Return an error to sendmsg if call failed (Marc Dionne) [2170099]
  - rxrpc: Fix locking issue (Marc Dionne) [2170099]
  - rxrpc: Use refcount_t rather than atomic_t (Marc Dionne) [2170099]
  - rxrpc: Allow list of in-use local UDP endpoints to be viewed in /proc (Marc Dionne) [2170099]
  - rxrpc: Enable IPv6 checksums on transport socket (Marc Dionne) [2170099]
  - rxrpc: Restore removed timer deletion (Marc Dionne) [2170099]
  - rxrpc: fix a race in rxrpc_exit_net() (Marc Dionne) [2170099]
  - rxrpc: fix some null-ptr-deref bugs in server_key.c (Marc Dionne) [2170099]
  - rxrpc: Fix call timer start racing with call destruction (Marc Dionne) [2170099]
  - rxrpc: Adjust retransmission backoff (Marc Dionne) [2170099]
  - rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (Marc Dionne) [2170099]
  - rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (Marc Dionne) [2170099]
  - rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies() (Marc Dionne) [2170099]
  - net: RxRPC: make dependent Kconfig symbols be shown indented (Marc Dionne) [2170099]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.8.1.el9_2]
changelog:
  - Reinstate "GFS2: free disk inode which is deleted by remote node -V2" (Bob Peterson) [2181344]
  - iavf: fix hang on reboot with ice (Stefan Assmann) [2175775]
  - xfs: fix off-by-one-block in xfs_discard_folio() (Carlos Maiolino) [2178173]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.10.1.el9_2]
changelog:
  - dm: fix __send_duplicate_bios() to always allow for splitting IO (Benjamin Marzinski) [2184420]
  - dm: fix improper splitting for abnormal bios (Benjamin Marzinski) [2184420]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.11.1.el9_2]
changelog:
  - vfio: Make the group FD disassociate from the iommu_group (Alex Williamson) [2180649]
  - vfio: Hold a reference to the iommu_group in kvm for SPAPR (Alex Williamson) [2180649]
  - vfio: Add vfio_file_is_group() (Alex Williamson) [2180649]
  - vfio: Change vfio_group->group_rwsem to a mutex (Alex Williamson) [2180649]
  - vfio: Remove the vfio_group->users and users_comp (Alex Williamson) [2180649]
  - vfio: Follow a strict lifetime for struct iommu_group (Alex Williamson) [2180649]


author: Mridula Shastry <mridula.c.shastry@oracle.com> - [5.14.0-284.18.1.el9_2.OL9]
changelog:
  - cifs: fix wrong unlock before return from cifs_tree_connect()
  - docs: Remove the unnecessary unicode character
  - perf vendor events intel: Refresh ivytown metrics and events
  - perf vendor events: Update Intel ivytown
  - perf vendor events intel: Refresh jaketown metrics and events
  - perf vendor events: Update Intel jaketown
  - NFSD: RHEL-only bug introduced in fix for COMMIT and NFS4ERR_DELAY loop
  - NFSD: Fix problem of COMMIT and NFS4ERR_DELAY in infinite loop
  - workqueue: Fix isolated CPUs interference problem
  - sched/core: Fix arch_scale_freq_tick() on tickless systems
  - ice: no busy waiting in GNSS thread and for SQ commands
  - wdat_wdt: avoid watchdog timeout during reboot
  - hugetlbfs: don't delete error page from pagecache
  - mm/filemap: fix page end in filemap_get_read_batch
  - isched/deadline: Add more reschedule cases to prio_changed_dl()
  - sched/rt: Fix bad task migration for rt tasks
  - blk-mq: directly poll requests
  - KVM: VMX: Fix crash due to uninitialized current_vmcs
  - wifi: iwlwifi: mvm: protect TXQ list manipulation
  - crypto: jitter - permanent and intermittent health errors
  - cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores
  - cpufreq: intel_pstate: Read all MSRs on the target CPU
  - cpufreq: intel_pstate: Enable HWP IO boost for all servers
  - crypto: qat: Update QAT drivers upto v6.2
  - info/owners.yaml: Adjust intel_qat subsystem entry
  - net: tls: fix possible race condition between do_tls_getsockopt_conf and do_tls_setsockopt_conf() {CVE-2023-28466}
  - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() {CVE-2023-2194}
  - xfs: verify buffer contents when we skip log replay {CVE-2023-2124} 
  - bluetooth: Perform careful capability checks in hci_sock_ioctl() {CVE-2023-2002}
  - netfilter: nf_tables: deactivate anonymous set from preparation phase {CVE-2023-32233}
  - perf: Fix check before add_event_to_groups() in perf_group_detach() {CVE-2023-2235}


author:
  Nagappan Ramasamy Palaniappan <nagappan.ramasamy.palaniappan@oracle.com> - [5.14.0-284.25.1.el9_2.OL9]

changelog:
  - KVM: x86/mmu: Fix race condition in direct_page_fault
  - prlimit: do_prlimit needs to have a speculation check {CVE-2023-0458}
  - x86/speculation: Allow enabling STIBP with legacy IBRS {CVE-2023-1998}
  - ipvlan: Fix out of bounds caused by unclear skb->cb {CVE-2023-3090}
  - net/sched: flower: fix possible OOB write in fl_set_geneve_opt {CVE-2023-35788}


author:
  Nagappan Ramasamy Palaniappan <nagappan.ramasamy.palaniappan@oracle.com> - [5.14.0-284.25.1.el9_2.OL9]

changelog:
  - KVM x86 mmuFix race condition in direct_page_fault
  - prlimit do_prlimit needs to have a speculation check
  - x86 speculation Allow enabling STIBP with legacy IBR
  - ipvlan Fix out of bounds caused by unclear skb cb
  - net sched flower fix possible OOB write in fl_set_geneve_opt


author: Mridula Shastry <mridula.c.shastry@oracle.com> - [5.14.0-284.30.0.1.el9_2.OL9]
changelog:
  - x86/tsx: Add a feature bit for TSX control MSR support {CVE-2023-1637}
  - x86/speculation: Restore speculation related MSRs {CVE-2023-1637}
  - x86/pm: Save the MSR validity status at context setup {CVE-2023-1637}
  - x86/pm: Fix false positive kmemleak report in msr_build_context() {CVE-2023-1637}
  - x86/cpu: Restore AMD's DE_CFG MSR after resume {CVE-2023-1637}
  - x86/pm: Add enumeration check before spec MSRs {CVE-2023-1637}
  - arm64: efi: Execute runtime services from a dedicated {CVE-2023-21102}
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE {CVE-2023-3390}
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain {CVE-2023-3390}
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails {CVE-2023-3390}
  - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID {CVE-2023-4147}
  - netfilter: nf_tables: do not ignore genmask when looking up chain by id {CVE-2023-31248}
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval {CVE-2023-35001}
  - netfilter: nft_set_pipapo: fix improper element removal {CVE-2023-4004}
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free {CVE-2023-3776}


author: Mridula Shastry <mridula.c.shastry@oracle.com> - [5.14.0-284.30.0.1.el9_2.OL9]
changelog:
  - x86/tsx: Add a feature bit for TSX control MSR support {CVE-2023-1637}
  - x86/speculation: Restore speculation related MSRs {CVE-2023-1637}
  - x86/pm: Save the MSR validity status at context setup {CVE-2023-1637}
  - x86/pm: Fix false positive kmemleak report in msr_build_context() {CVE-2023-1637}
  - x86/cpu: Restore AMD's DE_CFG MSR after resume {CVE-2023-1637}
  - x86/pm: Add enumeration check before spec MSRs {CVE-2023-1637}
  - arm64: efi: Execute runtime services from a dedicated {CVE-2023-21102}
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE {CVE-2023-3390}
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain {CVE-2023-3390}
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails {CVE-2023-3390}
  - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID {CVE-2023-4147}
  - netfilter: nf_tables: do not ignore genmask when looking up chain by id {CVE-2023-31248}
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval {CVE-2023-35001}
  - netfilter: nf_tables: fix chain binding transaction logic {CVE-2023-3610}
  - netfilter: nft_set_pipapo: fix improper element removal {CVE-2023-4004}
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free {CVE-2023-3776}


author: Mridula Shastry <mridula.c.shastry@oracle.com> - [5.14.0-284.30.1.el9_2.OL9]
changelog:
  - x86/microcode/intel: Expose collect_cpu_info_early() for IFS
  - x86/cpu: Load microcode during restore_processor_state()
  - x86/microcode: Rip out the OLD_INTERFACE
  - x86/microcode: Default-disable late loading
  - x86/microcode: Taint and warn on late loading
  - x86/microcode: Remove unnecessary perf callback
  - x86/microcode: Print previous version of microcode after reload 
  - x86/microcode: Rip out the subsys interface gunk
  - x86/microcode: Simplify init path even more
  - x86/microcode/AMD: Rename a couple of functions {CVE-2023-20593}
  - x86/microcode: Add a parameter to microcode_check() to store CPU capabilities {CVE-2023-20593}
  - x86/microcode: Check CPU capabilities after late microcode update correctly {CVE-2023-20593}
  - x86/microcode: Adjust late loading result reporting message {CVE-2023-20593}
  - x86/amd: Cache debug register values in percpu variables {CVE-2023-20593}
  - x86/microcode: Remove ->request_microcode_user()
  - x86/microcode: Kill refresh_fw
  - x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter {CVE-2023-20593}
  - x86/microcode: Drop struct ucode_cpu_info.valid
  - x86/microcode/AMD: Add a @cpu parameter to the reloading functions {CVE-2023-20593}
  - x86/microcode/AMD: Track patch allocation size explicitly
  - x86/microcode/AMD: Fix mixed steppings support {CVE-2023-20593}
  - x86/microcode/core: Return an error only when necessary {CVE-2023-20593}
  - x86/apic: Don't disable x2APIC if locked
  - x86/cpu/amd: Move the errata checking functionality up {CVE-2023-20593}
  - x86/cpu: Remove redundant extern x86_read_arch_cap_msr()
  - x86/cpu, kvm: Add support for CPUID_80000021_EAX
  - KVM: x86: Advertise that the SMM_CTL MSR is not supported
  - KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
  - x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature
  - x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3
  - x86/cpu: Support AMD Automatic IBRS
  - x86/CPU/AMD: Make sure EFER[AIBRSE] is set
  - x86/cpu/amd: Add a Zenbleed fix {CVE-2023-20593}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.2.1.el9_3]
changelog:
  - PCI: hv: Fix a crash in hv_pci_restore_msi_msg() during hibernation (Vitaly Kuznetsov) [2211797]
  - rhel: Re-add can-dev features that were removed accidentally (Radu Rendec) [2213891]
  - EDAC/amd64: Add support for ECC on family 19h model 60h-7Fh (Aristeu Rozanski) [2218686]
  - EDAC/amd64: Remove PCI Function 0 (Aristeu Rozanski) [2218686]
  - EDAC/amd64: Remove PCI Function 6 (Aristeu Rozanski) [2218686]
  - EDAC/amd64: Remove scrub rate control for Family 17h and later (Aristeu Rozanski) [2218686]
  - EDAC/amd64: Don't set up EDAC PCI control on Family 17h+ (Aristeu Rozanski) [2218686]
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225102] {CVE-2023-3776}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.3.1.el9_3]
changelog:
  - blk-throttle: Fix io statistics for cgroup v1 (Ming Lei) [2208905]
  - block: make sure local irq is disabled when calling __blkcg_rstat_flush (Ming Lei) [2208905]
  - blk-cgroup: Flush stats before releasing blkcg_gq (Ming Lei) [2208905]
  - blk-cgroup: hold queue_lock when removing blkg->q_node (Ming Lei) [2217205]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.4.1.el9_3]
changelog:
  - Revert "net: macsec: preserve ingress frame ordering" (Sabrina Dubroca) [RHEL-2248]
  - nfsd: fix change_info in NFSv4 RENAME replies (Jeffrey Layton) [2218844]
  - drm/amd/display: fix the white screen issue when >= 64GB DRAM (Mika Penttilä) [2231925]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.5.1.el9_3]
changelog:
  - x86/mce: Add support for Extended Physical Address MCA changes (Aristeu Rozanski) [2164637]
  - x86/mce: Define a function to extract ErrorAddr from MCA_ADDR (Aristeu Rozanski) [2164637]
  - x86/mce: Avoid unnecessary padding in struct mce_bank (Aristeu Rozanski) [2164637]
  - net/mlx5e: TC, Remove sample and ct limitation (Amir Tzin) [2229736]
  - net/mlx5e: TC, Remove mirror and ct limitation (Amir Tzin) [2229736]
  - net/mlx5e: TC, Remove tuple rewrite and ct limitation (Amir Tzin) [2229736]
  - net/mlx5e: TC, Remove multiple ct actions limitation (Amir Tzin) [2229736]
  - net/mlx5e: TC, Remove CT action reordering (Amir Tzin) [2229736]
  - net/mlx5e: CT: Use per action stats (Amir Tzin) [2229736]
  - net/mlx5e: TC, Move main flow attribute cleanup to helper func (Amir Tzin) [2229736]
  - net/mlx5e: TC, Remove unused vf_tun variable (Amir Tzin) [2229736]
  - net/mlx5e: Set default can_offload action (Amir Tzin) [2229736]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.6.1.el9_3]
changelog:
  - kabi: enable check-kabi (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol zlib_inflate_workspacesize to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol zlib_inflateInit2 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol zlib_inflateEnd to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol zlib_inflate to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol zalloc_cpumask_var to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol yield to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xz_dec_run to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xz_dec_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xz_dec_end to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_store to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xas_find to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_set_mark to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_load to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __xa_insert to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_get_mark to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_find_after to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_find to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_erase to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_destroy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_clear_mark to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __xa_alloc_cyclic to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __xa_alloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol x86_spec_ctrl_base to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_return_thunk to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_rsi to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_rdx to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_rdi to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_rcx to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_rbx to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_rbp to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_rax to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_r9 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_r8 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_r15 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_r14 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_r13 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_r12 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_r11 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_r10 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol x86_cpu_to_apicid to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __write_overflow_field to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __warn_printk to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __wake_up to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol wait_for_completion_timeout to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol wait_for_completion_interruptible to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol wait_for_completion to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vzalloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vsprintf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vsnprintf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vprintk to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vm_zone_stat to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vm_munmap to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vm_event_states to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vmemmap_base to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vmalloc_to_page to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vmalloc_node to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vmalloc_base to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vmalloc_32 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vmalloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __vmalloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __virt_addr_valid to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vfree to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __var_waitqueue to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_undefined to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_teardown_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_setup_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_possible_blades to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __uv_hub_info_list to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_get_hubless_system to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __uv_cpu_info to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_bios_obj_count to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_bios_install_heap to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_bios_get_pci_topology to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_bios_get_master_nasid to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_bios_get_heapsize to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_bios_get_geoinfo to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_bios_enum_ports to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_bios_enum_objs to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol usleep_range_state to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol up_write to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol up_read to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol up to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol unregister_shrinker to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol unregister_reboot_notifier to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol unregister_nmi_handler to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol unregister_kprobe to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol unregister_chrdev_region to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __unregister_chrdev to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol unregister_blkdev to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __udelay to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol tty_termios_encode_baud_rate to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol tty_std_termios to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol tsc_khz to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol try_wait_for_completion to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol trace_seq_putc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol trace_seq_printf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol trace_print_flags_seq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol trace_handle_return to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol touch_softlockup_watchdog to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _totalram_pages to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol timer_delete_sync to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol timer_delete to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol timecounter_read to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol timecounter_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol timecounter_cyc2time to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol time64_to_tm to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol this_cpu_off to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol tasklet_unlock_wait to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol tasklet_setup to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __tasklet_schedule to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol tasklet_kill to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol tasklet_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __tasklet_hi_schedule to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sys_tz to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol system_wq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol system_state to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol system_freezing_cnt to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sysfs_streq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sysfs_emit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol synchronize_rcu to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol synchronize_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __symbol_put to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __symbol_get to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __sw_hweight64 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __sw_hweight32 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strstr to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strsep to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strscpy_pad to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strscpy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strrchr to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strnlen_user to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strnlen to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strncpy_from_user to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strncpy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strncmp to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strncasecmp to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strlen to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strlcpy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strlcat to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strim to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strcspn to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strcpy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strcmp to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strchr to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strcat to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol static_key_slow_inc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol static_key_slow_dec to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol static_key_count to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __stack_chk_fail to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sscanf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sprintf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sort to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sn_region_size to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol snprintf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sn_partition_id to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol smp_call_function_single_async to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol smp_call_function_single to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol smp_call_function_many to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sme_me_mask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol simple_write_to_buffer to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol simple_strtoull to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol simple_strtoul to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol simple_strtol to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol simple_read_from_buffer to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol si_meminfo to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sigprocmask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __sg_page_iter_start to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __sg_page_iter_dma_next to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sg_next to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol set_normalized_timespec64 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol set_freezable to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol set_current_groups to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol security_sb_eat_lsm_opts to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol security_free_mnt_opts to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __SCT__tp_func_xdp_exception to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __SCT__preempt_schedule_notrace to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __SCT__preempt_schedule to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __SCT__might_resched to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __SCT__cond_resched to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol scsilun_to_int to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol scsi_command_size_tbl to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol scnprintf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol schedule_timeout to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol schedule to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sched_clock_cpu to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sched_clock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol round_jiffies to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rht_bucket_nested_insert to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rht_bucket_nested to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __rht_bucket_nested to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rhltable_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rhashtable_insert_slow to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rhashtable_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rhashtable_free_and_destroy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rhashtable_destroy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol request_threaded_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __request_region to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __request_module to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol remove_wait_queue to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __release_region to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol release_firmware to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol register_shrinker to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol register_reboot_notifier to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __register_nmi_handler to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol register_kprobe to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol register_chrdev_region to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __register_blkdev to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __refrigerator to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol refcount_warn_saturate to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol refcount_dec_if_one to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol refcount_dec_and_mutex_lock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol recalc_sigpending to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __read_overflow2_field to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rcu_read_unlock_strict to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __rcu_read_unlock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __rcu_read_lock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rcu_barrier to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rb_next to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rb_insert_color to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rb_first to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rb_erase to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_unlock_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_unlock_bh to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_unlock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_trylock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_lock_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_lock_bh to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_lock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_unlock_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_unlock_bh to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_unlock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_trylock_bh to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_trylock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_lock_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_lock_bh to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_lock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_read_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_read_unlock_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_read_unlock_bh to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_read_unlock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_read_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_read_lock_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_read_lock_bh to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_read_lock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ___ratelimit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol radix_tree_tag_set to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol radix_tree_next_chunk to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol radix_tree_lookup to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol radix_tree_insert to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol radix_tree_delete to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol queue_work_on to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol queue_delayed_work_on to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol qed_put_iscsi_ops to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol qed_put_eth_ops to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __put_user_8 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __put_user_4 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __put_user_2 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol put_unused_fd to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ptrs_per_p4d to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol proc_dostring to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol proc_dointvec_minmax to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol proc_dointvec to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __printk_ratelimit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _printk to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol print_hex_dump to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol prepare_to_wait_exclusive to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol prepare_to_wait_event to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol prepare_to_wait to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol prandom_u32 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol posix_acl_alloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol physical_mask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol phys_base to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol pgprot_writecombine to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol pgdir_shift to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol perf_trace_buf_alloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol percpu_ref_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol percpu_ref_exit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __per_cpu_offset to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol panic_notifier_list to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol panic to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol page_offset_base to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol page_frag_free to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol on_each_cpu_cond_mask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __num_online_cpus to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol numa_node to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ns_to_timespec64 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol nr_cpu_ids to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol node_to_cpumask_map to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol node_states to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __node_distance to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __ndelay to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mutex_unlock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mutex_trylock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mutex_lock_interruptible to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mutex_lock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mutex_is_locked to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __mutex_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol msleep_interruptible to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol msleep to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __msecs_to_jiffies to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mod_timer to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mod_delayed_work_on to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol memset to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mem_section to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mempool_free_slab to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mempool_free to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mempool_destroy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mempool_create_node to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mempool_create to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mempool_alloc_slab to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mempool_alloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol memparse to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol memory_read_from_buffer to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol memmove to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol memdup_user to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol memcpy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol memcmp to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol memchr_inv to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mds_idle_clear to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol loops_per_jiffy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol lookup_bdev to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol lockref_get to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __local_bh_enable_ip to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol llist_add_batch to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __list_del_entry_valid to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __list_add_valid to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kvmalloc_node to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kvfree_call_rcu to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kvfree to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ktime_get_with_offset to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ktime_get_ts64 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ktime_get_real_ts64 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ktime_get_real_seconds to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ktime_get_coarse_real_ts64 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ktime_get to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kthread_should_stop to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kthread_delayed_work_timer_fn to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kthread_complete_and_exit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kstrtoull to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kstrtouint to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kstrtou8 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kstrtou16 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kstrtoll to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kstrtoint to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kstrtobool to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kstrdup to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol krealloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kmemdup to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kmem_cache_create_usercopy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kmem_cache_create to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kmalloc_order_trace to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __kmalloc_node to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __kmalloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kfree to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kexec_crash_loaded to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kernel_sigaction to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kernel_fpu_end to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kernel_fpu_begin_mask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kasprintf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol jiffies_to_usecs to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol jiffies_to_msecs to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol jiffies_64 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol jiffies to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol is_vmalloc_addr to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol is_uv_system to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol iscsi_boot_create_host_kset to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol irq_set_affinity_notifier to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol irq_poll_enable to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol irq_poll_disable to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol irq_cpu_rmap_add to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __irq_apply_affinity_hint to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol iowrite32be to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol iounmap to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ioremap_wc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ioremap to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ioread8 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ioread32be to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ioread16be to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol iomem_resource to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol int_to_scsilun to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol int_pow to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol init_wait_var_entry to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __init_waitqueue_head to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol init_wait_entry to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol init_timer_key to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __init_swait_queue_head to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __init_rwsem to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol in_group_p to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol in_aton to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol in6_pton to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol in4_pton to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol idr_remove to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol idr_preload to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol idr_get_next_ul to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol idr_find to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol idr_destroy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol idr_alloc_u32 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol idr_alloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ida_free to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ida_destroy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ida_alloc_range to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __hw_addr_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol hugetlb_optimize_vmemmap_key to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol hrtimer_start_range_ns to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol hrtimer_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol hrtimer_forward to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol hrtimer_cancel to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol groups_free to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol groups_alloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol get_zeroed_page to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __get_user_nocheck_1 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __get_user_2 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __get_user_1 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol get_unused_fd_flags to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol get_random_bytes to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __get_free_pages to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol gcd to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol free_percpu to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol free_pages to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol free_irq_cpu_rmap to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol free_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol free_cpumask_var to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol fortify_panic to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __flush_workqueue to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol flush_work to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol finish_wait to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _find_next_zero_bit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _find_next_bit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _find_last_bit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _find_first_zero_bit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _find_first_bit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __fentry__ to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol enable_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol empty_zero_page to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol emergency_restart to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol elfcorehdr_addr to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol efi to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __dynamic_pr_debug to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dump_stack to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dql_reset to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dql_completed to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol down_write_trylock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol down_write to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol down_trylock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol down_read_trylock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol down_read to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol down_interruptible to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol downgrade_write to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol down to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dmi_get_system_info to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dmi_find_device to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dma_pool_free to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dma_pool_destroy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dma_pool_alloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol disable_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol devmap_managed_key to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dev_base_lock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol destroy_workqueue to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol delayed_work_timer_fn to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __delay to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol default_wake_function to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dca_unregister_notify to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dca_register_notify to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol current_umask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _ctype to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol csum_partial to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol csum_ipv6_magic to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol crc32_le to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cpu_sibling_map to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __cpu_present_mask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __cpu_possible_mask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __cpu_online_mask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cpu_number to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cpumask_local_spread to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cpu_khz to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cpu_info to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __cpuhp_setup_state to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __cpuhp_remove_state to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cpufreq_quick_get to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cpu_bit_bitmap to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol copy_user_generic_unrolled to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol copy_user_generic_string to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _copy_to_user to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __copy_overflow to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _copy_from_user to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __const_udelay to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol congestion_wait to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __cond_resched to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol complete_all to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol complete to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol clock_t_to_jiffies to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __check_object_size to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cdev_alloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cc_mkdec to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol capable to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cancel_work_sync to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cancel_work to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cancel_delayed_work_sync to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cancel_delayed_work to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol call_usermodehelper to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol call_srcu to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol call_rcu to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cachemode2protval to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol boot_cpu_data to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol blocking_notifier_call_chain to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol blk_status_to_errno to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol blk_stack_limits to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol blk_mq_map_queues to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol blkdev_get_by_path to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol blkdev_get_by_dev to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __blk_alloc_disk to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bitmap_zalloc_node to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bitmap_zalloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_xor to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_weight to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_subset to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_set to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bitmap_release_region to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bitmap_print_to_pagebuf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bitmap_parselist to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_or to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_intersects to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bitmap_from_arr32 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bitmap_free to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bitmap_find_free_region to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_equal to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_clear to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_andnot to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_and to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bio_kmalloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bin2hex to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol avenrun to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol autoremove_wake_function to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol atomic_notifier_call_chain to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _atomic_dec_and_lock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol async_synchronize_full_domain to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol async_synchronize_full to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol argv_split to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol argv_free to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol arch_touch_nmi_watchdog to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol alloc_workqueue to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __alloc_percpu to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol alloc_pages to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __alloc_pages to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol alloc_cpu_rmap to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol alloc_cpumask_var to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol alloc_chrdev_region to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol add_wait_queue_exclusive to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol add_wait_queue to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol add_timer to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol acpi_get_table to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol acpi_disabled to stablelist (Čestmír Kalina) [RHEL-8864]
  - scsi: lpfc: Prevent use-after-free during rmmod with mapped NVMe rports (Paul Ely) [RHEL-2604]
  - scsi: lpfc: Early return after marking final NLP_DROPPED flag in dev_loss_tmo (Paul Ely) [RHEL-2604]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.7.1.el9_3]
changelog:
  - drm/amd: flush any delayed gfxoff on suspend entry (Mika Penttilä) [2232662]
  - drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (Mika Penttilä) [2232662]
  - drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (Mika Penttilä) [2232662]
  - Revert "net/mlx5e: Switch to using napi_build_skb()" (Mohammad Kabat) [RHEL-1267]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.8.1.el9_3]
changelog:
  - Revert "cnic: don't pass bogus GFP_ flags to dma_alloc_coherent" (Chris Leech) [RHEL-2542]
  - Revert "dma-mapping: reject __GFP_COMP in dma_alloc_attrs" (Chris Leech) [RHEL-2542]


author: Natalya Naumova <natalya.naumova@oracle.com> - [5.14.0-362.8.1.el9_3.OL9]
changelog:
  - Update Oracle Linux certificates (Kevin Lyons)
  - Disable signing for aarch64 (Ilya Okomin)
  - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
  - Update x509.genkey [Orabug: 24817676]
  - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5.el9
  - Remove nmap references from kernel (Mridula Shastry) [Orabug: 34313944]
  - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
  - Disable unified kernel image package build
  - Add Oracle Linux IMA certificates


author: Mridula Shastry <mridula.c.shastry@oracle.com> - [5.14.0-362.13.0.1.el9_3.OL9]
changelog:
  - cifs: Fix UAF in cifs_demultiplex_thread() (Zhang Xiaoxu) (Steve French) {CVE-2023-1192}
  - fs/smb/client: Reset password pointer to NULL (Quang Le) (Steve French) {CVE-2023-5345}
  - igb: set max size RX buffer when store bad packet is enabled (Tony Nguyen) (David S. Miller) {CVE-2023-45871}


author: Mridula Shastry <mridula.c.shastry@oracle.com> - [5.14.0-362.13.1.el9_3.OL9]
changelog:
  - x86/retpoline: Document some thunk handling aspects (Borislav Petkov) {CVE-2023-20569}
  - objtool: Fix return thunk patching in retpolines (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Remove unnecessary semicolon (Yang Li) {CVE-2023-20569}
  - x86/calldepth: Rename __x86_return_skl() to call_depth_return_thunk() (Josh Poimboeuf) {CVE-2023-20569}
  - x86/nospec: Refactor UNTRAIN_RET[_*] (Josh Poimboeuf) {CVE-2023-20569}
  - x86/rethunk: Use SYM_CODE_START[_LOCAL]_NOALIGN macros (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Disentangle rethunk-dependent options (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Move retbleed IBPB check into existing 'has_microcode' code block (Josh Poimboeuf) {CVE-2023-20569}
  - x86/bugs: Remove default case for fully switched enums (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Remove 'pred_cmd' label (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Unexport untraining functions (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Improve i-cache locality for alias mitigation (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Fix unret validation dependencies (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Fix vulnerability reporting for missing microcode (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Print mitigation for retbleed IBPB case (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Print actual mitigation if requested mitigation isn't possible (Josh Poimboeuf) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix SBPB enablement for (possible) future fixed HW (Josh Poimboeuf) {CVE-2023-20569}
  - x86,static_call: Fix static-call vs return-thunk (Peter Zijlstra) {CVE-2023-20569}
  - x86/alternatives: Remove faulty optimization (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Don't probe microcode in a guest (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Set CPUID feature bits independently of bug or mitigation status (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Fix srso_show_state() side effect (Josh Poimboeuf) {CVE-2023-20569}
  - x86/cpu: Fix amd_check_microcode() declaration (Arnd Bergmann) {CVE-2023-20569}
  - x86/srso: Correct the mitigation status when SMT is disabled (Borislav Petkov) {CVE-2023-20569}
  - x86/static_call: Fix __static_call_fixup() (Peter Zijlstra) {CVE-2023-20569}
  - objtool/x86: Fixup frame-pointer vs rethunk (Peter Zijlstra) {CVE-2023-20569}
  - x86/srso: Explain the untraining sequences a bit more (Borislav Petkov) {CVE-2023-20569}
  - x86/cpu/kvm: Provide UNTRAIN_RET_VM (Peter Zijlstra) {CVE-2023-20569}
  - x86/cpu: Cleanup the untrain mess (Peter Zijlstra) {CVE-2023-20569}
  - x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (Peter Zijlstra) {CVE-2023-20569}
  - x86/cpu: Rename original retbleed methods (Peter Zijlstra) {CVE-2023-20569}
  - x86/cpu: Clean up SRSO return thunk mess (Peter Zijlstra) {CVE-2023-20569}
  - x86/alternative: Make custom return thunk unconditional (Peter Zijlstra) {CVE-2023-20569}
  - objtool/x86: Fix SRSO mess (Peter Zijlstra) {CVE-2023-20569}
  - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (Peter Zijlstra) {CVE-2023-20569}
  - x86/cpu: Fix __x86_return_thunk symbol type (Peter Zijlstra) {CVE-2023-20569}
  - x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (Petr Pavlu) {CVE-2023-20569}
  - x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (Petr Pavlu) {CVE-2023-20569}
  - x86/srso: Disable the mitigation on unaffected configurations (Borislav Petkov) {CVE-2023-20569}
  - x86/CPU/AMD: Fix the DIV(0) initial fix attempt (Borislav Petkov) {CVE-2023-20588}
  - x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (Sean Christopherson) {CVE-2023-20569}
  - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (Cristian Ciocaltea) {CVE-2023-20593}
  - driver core: cpu: Fix the fallback cpu_show_gds() name (Borislav Petkov) {CVE-2023-20569}
  - x86: Move gds_ucode_mitigated() declaration to header (Arnd Bergmann) {CVE-2023-20569}
  - x86/speculation: Add cpu_show_gds() prototype (Arnd Bergmann) {CVE-2023-20569}
  - driver core: cpu: Make cpu_show_not_affected() static (Borislav Petkov) {CVE-2023-20569}
  - x86/srso: Fix build breakage with the LLVM linker (Nick Desaulniers) {CVE-2023-20569}
  - Documentation/srso: Document IBPB aspect and fix formatting (Borislav Petkov) {CVE-2023-20569}
  - driver core: cpu: Unify redundant silly stubs (Borislav Petkov) {CVE-2023-20569}
  - Documentation/hw-vuln: Unify filename specification in index (Borislav Petkov) {CVE-2023-20569}
  - x86/CPU/AMD: Do not leak quotient data after a division by 0 (Borislav Petkov) {CVE-2023-20588}
  - x86/srso: Tie SBPB bit setting to microcode patch detection (Borislav Petkov) {CVE-2023-20569}
  - x86/srso: Add a forgotten NOENDBR annotation (Borislav Petkov) {CVE-2023-20569}
  - x86/srso: Fix return thunks in generated code (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Add IBPB on VMEXIT (Borislav Petkov) {CVE-2023-20569}
  - x86/srso: Add IBPB (Borislav Petkov) {CVE-2023-20569}
  - x86/srso: Add SRSO_NO support (Borislav Petkov) {CVE-2023-20569}
  - x86/srso: Add IBPB_BRTYPE support (Borislav Petkov) {CVE-2023-20569}
  - redhat/configs/x86: Enable CONFIG_CPU_SRSO (Borislav Petkov) {CVE-2023-20569}
  - x86/srso: Add a Speculative RAS Overflow mitigation (Borislav Petkov) {CVE-2023-20569}
  - x86/retbleed: Add __x86_return_thunk alignment checks (Borislav Petkov) {CVE-2023-20569}
  - x86/retbleed: Fix return thunk alignment (Borislav Petkov) {CVE-2023-20569}
  - x86/alternative: Optimize returns patching (Borislav Petkov) {CVE-2023-20569}
  - x86,objtool: Separate unret validation from unwind hints (Josh Poimboeuf) {CVE-2023-20569}
  - objtool: Add objtool_types.h (Josh Poimboeuf) {CVE-2023-20569}
  - objtool: Union instruction::{call_dest,jump_table} (Peter Zijlstra) {CVE-2023-20569}
  - x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK (Peter Zijlstra) {CVE-2023-20569}
  - objtool: Fix SEGFAULT (Christophe Leroy) {CVE-2023-20569}
  - vmlinux.lds.h: add BOUNDED_SECTION* macros (Jim Cromie) {CVE-2023-20569}


author: Mridula Shastry <mridula.c.shastry@oracle.com> - [5.14.0-362.18.0.1.el9_3.OL9]
changelog:
  - nfp: fix use-after-free in area_cache_get() (Jialiang Wang) {CVE-2022-3545}
  - drivers: net: slip: fix NPD bug in sl_tx_timeout() (Duoming Zhou) {CVE-2022-41858}
  - can: af_can: fix NULL pointer dereference in can_rcv_filter (Oliver Hartkopp) {CVE-2023-2166}
  - RDMA/core: Fix resolve_prepare_src error cleanup (Patrisious Haddad) {CVE-2023-2176}
  - netfilter: nf_tables: skip bound chain on rule flush (Pablo Neira Ayuso} {CVE-2023-3777}
  - net: tun: fix bugs for oversize packet when napi frags enabled (Ziyang Xuan) {CVE-2023-3812}
  - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR (Pablo Neira Ayuso) {CVE-2023-4015}
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Kuniyuki Iwashima) {CVE-2023-4622}
  - nvmet-tcp: Fix a possible UAF in queue intialization setup (Sagi Grimberg) {CVE-2023-5178}
  - fbcon: set_con2fb_map needs to set con2fb_map! (Daniel Vetter) {CVE-2023-38409}
  - fbcon: Fix error paths in set_con2fb_map (Daniel Vetter) {CVE-2023-38409}
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Sungwoo Kim) {CVE-2023-40283)
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng) {CVE-2023-42753}
  - x86/sev: Check IOBM for IOIO exceptions from user-space (Joerg Roedel) {CVE-2023-46813}
  - x86/sev: Disable MMIO emulation from user mode (Borislav Petkov) {CVE-2023-46813}
  - x86/sev: Check for user-space IOIO pointing to kernel space (Joerg Roedel) {CVE-2023-46813}


author: Srikanth C S <srikanth.c.s@oracle.com> - [5.14.0-362.18.0.2.el9_3.OL9]
changelog:
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623}
  - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve {CVE-2023-4623}
  - dpll: core: Add DPLL framework base functions {CVE-2023-6679}
  - dpll: spec: Add Netlink spec in YAML {CVE-2023-6679}
  - dpll: netlink: Add DPLL framework base functions {CVE-2023-6679}
  - netdev: expose DPLL pin handle for netdevice {CVE-2023-6679}
  - netdev: Remove unneeded semicolon {CVE-2023-6679}
  - dpll: netlink/core: add support for pin-dpll signal phase offset/adjust {CVE-2023-6679}
  - dpll: netlink/core: change pin frequency set behavior {CVE-2023-6679}
  - dpll: Fix potential msg memleak when genlmsg_put_reply failed {CVE-2023-6679}
  - dpll: sanitize possible null pointer dereference in dpll_pin_parent_pin_set() {CVE-2023-6679}


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-362.11.1.el9_3]
changelog:
  - mm, mremap: fix mremap() expanding for vma's with vm_ops->close() (Donald Dutile) [RHEL-15277 RHEL-9198]
  - qed: fix LL2 RX buffer allocation (Chris Leech) [RHEL-14496 RHEL-8466]
  - fs/buffer.c: disable per-CPU buffer_head cache for isolated CPUs (Marcelo Tosatti) [RHEL-12101 2158709]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.12.1.el9_3]
changelog:
  - fs/smb/client: Reset password pointer to NULL (Scott Mayhew) [RHEL-11804 RHEL-11808 RHEL-11805 RHEL-11809] {CVE-2023-5345}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.13.1.el9_3]
changelog:
  - cifs: Fix UAF in cifs_demultiplex_thread() (Scott Mayhew) [RHEL-15169 RHEL-15173 RHEL-15170 RHEL-15174] {CVE-2023-1192}
  - iommu: Optimise PCI SAC address trick (Jerry Snitselaar) [RHEL-15381 RHEL-11705]
  - igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15191 RHEL-15202 RHEL-15192 RHEL-15203] {CVE-2023-45871}
  - bio-integrity: create multi-page bvecs in bio_integrity_add_page() (Ming Lei) [RHEL-15107 RHEL-13714]
  - bio-integrity: cleanup adding integrity pages to bip's bvec. (Ming Lei) [RHEL-15107 RHEL-13714]
  - bio-integrity: update the payload size in bio_integrity_add_page() (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: make bvec_try_merge_hw_page() non-static (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: don't pass a bio to bio_try_merge_hw_seg (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: move the bi_size update out of __bio_try_merge_page (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: downgrade a bio_full call in bio_add_page (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: move the bi_size overflow check in __bio_try_merge_page (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: move the bi_vcnt check out of __bio_try_merge_page (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: move the BIO_CLONED checks out of __bio_try_merge_page (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: use SECTOR_SHIFT bio_add_hw_page (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: tidy up the bio full checks in bio_add_hw_page (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: kmsan: skip bio block merging logic for KMSAN (Ming Lei) [RHEL-15107 RHEL-13714]
  - redhat: change builder image to rhel-9.3 (Michael Hofmann)
  - x86/retpoline: Document some thunk handling aspects (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - objtool: Fix return thunk patching in retpolines (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Remove unnecessary semicolon (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/calldepth: Rename __x86_return_skl() to call_depth_return_thunk() (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/nospec: Refactor UNTRAIN_RET[_*] (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/rethunk: Use SYM_CODE_START[_LOCAL]_NOALIGN macros (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Disentangle rethunk-dependent options (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Move retbleed IBPB check into existing 'has_microcode' code block (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/bugs: Remove default case for fully switched enums (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Remove 'pred_cmd' label (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Unexport untraining functions (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Improve i-cache locality for alias mitigation (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix unret validation dependencies (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix vulnerability reporting for missing microcode (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Print mitigation for retbleed IBPB case (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Print actual mitigation if requested mitigation isn't possible (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix SBPB enablement for (possible) future fixed HW (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86,static_call: Fix static-call vs return-thunk (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/alternatives: Remove faulty optimization (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Don't probe microcode in a guest (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Set CPUID feature bits independently of bug or mitigation status (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix srso_show_state() side effect (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Fix amd_check_microcode() declaration (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Correct the mitigation status when SMT is disabled (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/static_call: Fix __static_call_fixup() (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - objtool/x86: Fixup frame-pointer vs rethunk (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Explain the untraining sequences a bit more (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu/kvm: Provide UNTRAIN_RET_VM (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Cleanup the untrain mess (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Rename original retbleed methods (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Clean up SRSO return thunk mess (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/alternative: Make custom return thunk unconditional (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - objtool/x86: Fix SRSO mess (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Fix __x86_return_thunk symbol type (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Disable the mitigation on unaffected configurations (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/CPU/AMD: Fix the DIV(0) initial fix attempt (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - driver core: cpu: Fix the fallback cpu_show_gds() name (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86: Move gds_ucode_mitigated() declaration to header (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/speculation: Add cpu_show_gds() prototype (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - driver core: cpu: Make cpu_show_not_affected() static (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix build breakage with the LLVM linker (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - Documentation/srso: Document IBPB aspect and fix formatting (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - driver core: cpu: Unify redundant silly stubs (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/CPU/AMD: Do not leak quotient data after a division by 0 (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Tie SBPB bit setting to microcode patch detection (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add a forgotten NOENDBR annotation (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix return thunks in generated code (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add IBPB on VMEXIT (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add IBPB (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add SRSO_NO support (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add IBPB_BRTYPE support (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - redhat/configs/x86: Enable CONFIG_CPU_SRSO (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add a Speculative RAS Overflow mitigation (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/retbleed: Add __x86_return_thunk alignment checks (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/retbleed: Fix return thunk alignment (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/alternative: Optimize returns patching (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86,objtool: Separate unret validation from unwind hints (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - objtool: Add objtool_types.h (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - objtool: Union instruction::{call_dest,jump_table} (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - objtool: Fix SEGFAULT (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - vmlinux.lds.h: add BOUNDED_SECTION* macros (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - ice: Don't tx before switchdev is fully configured (Michal Schmidt) [RHEL-15799 2241234]
  - wifi: rtw89: Fix loading of compressed firmware (Jose Ignacio Tornos Martinez) [RHEL-14353 RHEL-13881]
  - x86/sev: Make enc_dec_hypercall() accept a size instead of npages (Vitaly Kuznetsov) [RHEL-5757 RHEL-3904]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.14.1.el9_3]
changelog:
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Florian Westphal) [RHEL-8436 RHEL-8454 RHEL-8437 RHEL-8455] {CVE-2023-42753}
  - sctp: update hb timer immediately after users change hb_interval (Xin Long) [RHEL-14301 RHEL-14179]
  - sctp: update transport state when processing a dupcook packet (Xin Long) [RHEL-14301 RHEL-14179]
  - netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp (Xin Long) [RHEL-14301 RHEL-14179]
  - sctp: annotate data-races around sk->sk_wmem_queued (Xin Long) [RHEL-14301 RHEL-14179]
  - cifs: fix missing unload_nls() in smb2_reconnect() (Scott Mayhew) [RHEL-16477 RHEL-11577]
  - cifs: avoid race conditions with parallel reconnects (Scott Mayhew) [RHEL-16477 RHEL-11577]
  - cifs: update ip_addr for ses only for primary chan setup (Scott Mayhew) [RHEL-16477 RHEL-11577]
  - cifs: prevent data race in cifs_reconnect_tcon() (Scott Mayhew) [RHEL-16477 RHEL-11577]
  - cifs: prevent data race in smb2_reconnect() (Scott Mayhew) [RHEL-16477 RHEL-11577]
  - nvmet-tcp: Fix a possible UAF in queue intialization setup (John Meneghini) [RHEL-11487 RHEL-11491 RHEL-11488 RHEL-11492] {CVE-2023-5178}
  - Enable CONFIG_DPLL (Petr Oros) [RHEL-15800 2232515]
  - ice: implement dpll interface to control cgu (Petr Oros) [RHEL-15800 2232515]
  - ice: add admin commands to access cgu configuration (Petr Oros) [RHEL-15800 2232515]
  - netdev: expose DPLL pin handle for netdevice (Petr Oros) [RHEL-15800 2232515]
  - dpll: netlink: Add DPLL framework base functions (Petr Oros) [RHEL-15800 2232515]
  - dpll: core: Add DPLL framework base functions (Petr Oros) [RHEL-15800 2232515]
  - dpll: spec: Add Netlink spec in YAML (Petr Oros) [RHEL-15800 2232515]
  - dpll: documentation on DPLL subsystem interface (Petr Oros) [RHEL-15800 2232515]
  - ice: do not re-enable miscellaneous interrupt until thread_fn completes (Petr Oros) [RHEL-15806 2229762]
  - ice: trigger PFINT_OICR_TSYN_TX interrupt instead of polling (Petr Oros) [RHEL-15806 2229762]
  - ice: introduce ICE_TX_TSTAMP_WORK enumeration (Petr Oros) [RHEL-15806 2229762]
  - mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() (Rafael Aquini) [RHEL-11589 RHEL-2466]
  - sched/fair: Block nohz tick_stop when cfs bandwidth in use (Phil Auld) [RHEL-8701 2208016]
  - sched, cgroup: Restore meaning to hierarchical_quota (Phil Auld) [RHEL-8701 2208016]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.15.1.el9_3]
changelog:
  - drm/mgag200: Flush the cache to improve latency (Jocelyn Falempe) [RHEL-16560]
  - sched/fair: Make the BW replenish timer expire in hardirq context for PREEMPT_RT (Valentin Schneider) [RHEL-16842 RHEL-7232]
  - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16893 RHEL-16894 RHEL-14233 RHEL-16617] {CVE-2023-4623}
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Davide Caratti) [RHEL-16893 RHEL-16894 RHEL-14233 RHEL-16617] {CVE-2023-4623}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.16.1.el9_3]
changelog:
  - tracing/timerlat: Add user-space interface (Chris White) [RHEL-18927 RHEL-14932]
  - tracing/osnoise: Skip running osnoise if all instances are off (Chris White) [RHEL-18927 RHEL-14932]
  - tracing/osnoise: Switch from PF_NO_SETAFFINITY to migrate_disable (Chris White) [RHEL-18927 RHEL-14932]
  - tracing/timerlat: Always wakeup the timerlat thread (John Kacur) [RHEL-18356 RHEL-16305]
  - tracing: Rename kvfree_rcu() to kvfree_rcu_mightsleep() (John Kacur) [RHEL-18356 RHEL-16305]
  - tracing/osnoise: Fix notify new tracing_max_latency (John Kacur) [RHEL-18356 RHEL-16305]
  - tracing/timerlat: Notify new max thread latency (John Kacur) [RHEL-18356 RHEL-16305]
  - tracing/osnoise: set several trace_osnoise.c variables storage-class-specifier to static (John Kacur) [RHEL-18356 RHEL-16305]
  - trace/osnoise: make use of the helper function kthread_run_on_cpu() (John Kacur) [RHEL-18356 RHEL-16305]
  - tracing: Switch to kvfree_rcu() API (John Kacur) [RHEL-18356 RHEL-16305]
  - rcu/kvfree: Add kvfree_rcu_mightsleep() and kfree_rcu_mightsleep() (Waiman Long) [RHEL-18356 RHEL-16305]
  - x86/sev: Check for user-space IOIO pointing to kernel space (Paolo Bonzini) [RHEL-18089 RHEL-18090 RHEL-14980 RHEL-14981] {CVE-2023-46813}
  - x86/sev: Check IOBM for IOIO exceptions from user-space (Paolo Bonzini) [RHEL-18089 RHEL-18090 RHEL-14980 RHEL-14981] {CVE-2023-46813}
  - x86/sev: Disable MMIO emulation from user mode (Paolo Bonzini) [RHEL-18089 RHEL-18090 RHEL-14980 RHEL-14981] {CVE-2023-46813}
  - hwmon: (ina3221) Add support for channel summation disable (Steve Best) [RHEL-17898 RHEL-1899]
  - ice: reset first in crash dump kernels (Petr Oros) [RHEL-17613 RHEL-15698]
  - bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire (Tomas Glozar) [RHEL-17571 2229975]
  - net: fix net device address assign type (Michal Schmidt) [RHEL-17279 RHEL-6368]
  - net: add check for current MAC address in dev_set_mac_address (Michal Schmidt) [RHEL-17279 RHEL-6368]
  - drm/amdgpu: Fix possible null pointer dereference (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/amdgpu: Fix possible null pointer dereference (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Keep a gem reference to user bos in surfaces (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: fix typo of sizeof argument (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Fix possible invalid drm gem put calls (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Fix shader stage validation (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: remove unused vmw_overlay function (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Fix Legacy Display Unit atomic drm support (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Print errors when running on broken/unsupported configs (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Drop mksstat_init_record fn as currently unused (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Fix src/dst_pitch confusion (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Replace one-element array with flexible-array member (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Do not drop the reference to the handle too soon (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Stop accessing buffer objects which failed init (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Make the driver work without the dummy resources (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Stop using raw ttm_buffer_object's (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Abstract placement selection (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Rename dummy to is_iomem (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Cleanup the vmw bo usage in the cursor paths (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Simplify fb pinning (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Rename vmw_buffer_object to vmw_bo (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Remove the duplicate bo_free function (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Use the common gem mmap instead of the custom code (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/radeon: handle NULL bo->resource in move callback (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/qxl: handle NULL bo->resource in move callback (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/gem-vram: handle NULL bo->resource in move callback (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/ttm: prevent moving of pinned BOs (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/ttm: stop allocating a dummy resource for pipelined gutting (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/ttm: stop allocating dummy resources during BO creation (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/ttm: clear the ttm_tt when bo->resource is NULL (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/i915/ttm: audit remaining bo->resource (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - Revert "drm/vmwgfx: Stop accessing buffer objects which failed init" (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - Revert "drm/vmwgfx: Do not drop the reference to the handle too soon" (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - Revert "drm/vmwgfx: Fix Legacy Display Unit atomic drm support" (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.17.1.el9_3]
changelog:
  - netfilter: nf_tables: skip bound chain on rule flush (Florian Westphal) [RHEL-10111 RHEL-10113 RHEL-10112 RHEL-10114] {CVE-2023-3777}
  - drivers: net: slip: fix NPD bug in sl_tx_timeout() (Michal Schmidt) [RHEL-18553 RHEL-18968 RHEL-6654 RHEL-7239] {CVE-2022-41858}
  - RDMA/core: Update CMA destination address on rdma_resolve_addr (Kamal Heib) [RHEL-19358 RHEL-19400 RHEL-6832 RHEL-7244] {CVE-2023-2176}
  - RDMA/core: Refactor rdma_bind_addr (Kamal Heib) [RHEL-19358 RHEL-19400 RHEL-6832 RHEL-7244] {CVE-2023-2176}
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-17263 RHEL-17265 RHEL-17264 RHEL-17266] {CVE-2023-4622}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.18.1.el9_3]
changelog:
  - nfp: fix use-after-free in area_cache_get() (Ricardo Robaina) [RHEL-19456 RHEL-19536 RHEL-6566 RHEL-7241] {CVE-2022-3545}
  - rtla: Fix uninitialized variable found (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/timerlat: Do not stop user-space if a cpu is offline (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/timerlat_aa: Fix previous IRQ delay for IRQs that happens after thread sample (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/timerlat_aa: Fix negative IRQ delay (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/timerlat_aa: Zero thread sum after every sample analysis (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/timerlat_hist: Add timerlat user-space support (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/timerlat_top: Add timerlat user-space support (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/hwnoise: Reduce runtime to 75% (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla: Start the tracers after creating all instances (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/timerlat_hist: Add auto-analysis support (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/timerlat: Give timerlat auto analysis its own instance (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla: Automatically move rtla to a house-keeping cpu (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla: Change monitored_cpus from char * to cpu_set_t (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla: Add --house-keeping option (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla: Add -C cgroup support (John Kacur) [RHEL-18360 RHEL-10079]
  - ata: ahci: Add Intel Alder Lake-P AHCI controller to low power chipsets list (Tomas Henzl) [RHEL-19394 RHEL-10941]
  - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1106 RHEL-1109 RHEL-12930 RHEL-13899] {CVE-2023-38409}
  - fbcon: Fix error paths in set_con2fb_map (Jocelyn Falempe) [RHEL-1106 RHEL-1109 RHEL-12930 RHEL-13899] {CVE-2023-38409}
  - net: tun: fix bugs for oversize packet when napi frags enabled (Ricardo Robaina) [RHEL-12495 RHEL-12496 RHEL-7186 RHEL-7264] {CVE-2023-3812}
  - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR (Florian Westphal) [RHEL-10536 RHEL-10538 RHEL-10537 RHEL-10539] {CVE-2023-4015}
  - md: Put the right device in md_seq_next (Nigel Croxon) [RHEL-16363 RHEL-12455]
  - dpll: sanitize possible null pointer dereference in dpll_pin_parent_pin_set() (Michal Schmidt) [RHEL-19677 RHEL-19095] {CVE-2023-6679}
  - dpll: Fix potential msg memleak when genlmsg_put_reply failed (Michal Schmidt) [RHEL-19677 RHEL-19095] {CVE-2023-6679}
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Bastien Nocera) [RHEL-19003 RHEL-2717] {CVE-2023-40283}
  - tcp: enforce receive buffer memory limits by allowing the tcp window to shrink (Felix Maurer) [RHEL-16129 RHEL-11592]
  - tcp: adjust rcv_ssthresh according to sk_reserved_mem (Felix Maurer) [RHEL-16129 RHEL-11592]
  - md: raid0: account for split bio in iostat accounting (Nigel Croxon) [RHEL-4082 RHEL-2718]
  - can: af_can: fix NULL pointer dereference in can_rcv_filter (Ricardo Robaina) [RHEL-19465 RHEL-19526 RHEL-6428 RHEL-7052] {CVE-2023-2166}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.19.1.el9_3]
changelog:
  - redhat: fix kernel changelog entry for RHEL-16560 (Jan Stancek)
  - perf/core: Fix potential NULL deref (Wander Lairson Costa) [RHEL-18087 RHEL-18088 RHEL-14984 RHEL-14985] {CVE-2023-5717}
  - perf: Disallow mis-matched inherited group reads (Wander Lairson Costa) [RHEL-18087 RHEL-18088 RHEL-14984 RHEL-14985] {CVE-2023-5717}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.20.1.el9_3]
changelog:
  - s390/dasd: print copy pair message only for the correct error (Tobias Huschle) [RHEL-11980 RHEL-2833]
  - x86/microcode/AMD: Rip out static buffers (David Arcari) [RHEL-14590 RHEL-10030]
  - x86/microcode/AMD: Load late on both threads too (David Arcari) [RHEL-14590 RHEL-10030]
  - x86/microcode/amd: Remove unneeded pointer arithmetic (David Arcari) [RHEL-14590 RHEL-10030]
  - x86/microcode/AMD: Get rid of __find_equiv_id() (David Arcari) [RHEL-14590 RHEL-10030]
  - docs: move x86 documentation into Documentation/arch/ (David Arcari) [RHEL-14590 RHEL-10030]
  - x86/microcode/AMD: Handle multiple glued containers properly (David Arcari) [RHEL-14590 RHEL-10030]
  - mm: Fix copy_from_user_nofault(). (Waiman Long) [RHEL-18946 RHEL-18440]
  - redhat: rewrite genlog and support Y- tags (Jan Stancek)


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.21.1.el9_3]
changelog:
  - x86/microcode: do not cache microcode if it will not be used (Paolo Bonzini) [RHEL-21567 RHEL-16225]
  - x86/hyperv: Move the code in ivm.c around to avoid unnecessary ifdef's (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Remove hv_isolation_type_en_snp (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Use TDX GHCI to access some MSRs in a TDX VM with the paravisor (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - Drivers: hv: vmbus: Bring the post_msg_page back for TDX VMs with the paravisor (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Introduce a global variable hyperv_paravisor_present (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Add missing 'inline' to hv_snp_boot_ap() stub (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Mark hv_ghcb_terminate() as noreturn (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - Drivers: hv: vmbus: Support >64 VPs for a fully enlightened TDX/SNP VM (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Fix serial console interrupts for fully enlightened TDX guests (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - Drivers: hv: vmbus: Support fully enlightened TDX guests (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Support hypercalls for fully enlightened TDX guests (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Add hv_isolation_type_tdx() to detect TDX guests (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Fix undefined reference to isolation_type_en_snp without CONFIG_HYPERV (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Add hyperv-specific handling for VMMCALL under SEV-ES (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Add smp support for SEV-SNP guest (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Add VTL specific structs and hypercalls (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - clocksource: hyper-v: Mark hyperv tsc page unencrypted in sev-snp enlightened guest (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Use vmmcall to implement Hyper-V hypercall in sev-snp enlightened guest (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - drivers: hv: Mark percpu hvcall input arg page unencrypted in SEV-SNP enlightened guest (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - Drivers: hv: vmbus: Remove the per-CPU post_msg_page (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Mark Hyper-V vp assist page unencrypted in SEV-SNP enlightened guest (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Set Virtual Trust Level in VMBus init message (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Add sev-snp enlightened guest static key (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/tdx: Expand __tdx_hypercall() to handle more arguments (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/tdx: Add more registers to struct tdx_hypercall_args (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/tdx: Fix typo in comment in __tdx_hypercall() (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - blk-mq: don't count completed flush data request as inflight in case of quiesce (Ming Lei) [RHEL-19105 RHEL-18054]
  - NFS: Use parent's objective cred in nfs_access_login_time() (Jay Shin) [RHEL-22147 RHEL-16024]
  - s390/qeth: Don't call dev_close/dev_open (DOWN/UP) (Tobias Huschle) [RHEL-17887 RHEL-2412]
  - smb: client: fix potential OOB in smb2_dump_detail() (Scott Mayhew) [RHEL-19146 RHEL-21679 RHEL-19147 RHEL-21677] {CVE-2023-6610}
  - smb: client: fix potential OOB in cifs_dump_detail() (Scott Mayhew) [RHEL-19146 RHEL-21679 RHEL-19147 RHEL-21677] {CVE-2023-6610}
  - x86/sev: Do not handle #VC for DR7 read/write (Paolo Bonzini) [RHEL-21885 RHEL-15069]
  - x86/sev: Use the GHCB protocol when available for SNP CPUID requests (Paolo Bonzini) [RHEL-21885 RHEL-15069]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.22.1.el9_3]
changelog:
  - usb: typec: ucsi: Use GET_CAPABILITY attributes data to set power supply scope (Desnes Nunes) [RHEL-21838 RHEL-14573]
  - KVM: SVM: Do not use user return MSR support for virtualized TSC_AUX (Paolo Bonzini) [RHEL-20415 RHEL-16384]
  - KVM: SVM: Fix TSC_AUX virtualization setup (Paolo Bonzini) [RHEL-20415 RHEL-16384]
  - KVM: SVM: INTERCEPT_RDTSCP is never intercepted anyway (Paolo Bonzini) [RHEL-20415 RHEL-16384]
  - net: tls, update curr on splice as well (Sabrina Dubroca) [RHEL-22094 RHEL-22097 RHEL-19066 RHEL-19067] {CVE-2024-0646}
  - smb: client: fix OOB in smbCalcSize() (Scott Mayhew) [RHEL-21664 RHEL-21669 RHEL-18992 RHEL-18993] {CVE-2023-6606}
  - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Jeffrey Layton) [RHEL-22284 RHEL-7936]
  - NFSv4.1: fix zero value filehandle in post open getattr (Jeffrey Layton) [RHEL-22284 RHEL-7936]
  - NFSv4.1: fix pnfs MDS=DS session trunking (Jeffrey Layton) [RHEL-22284 RHEL-7936]
  - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Jeffrey Layton) [RHEL-22284 RHEL-7936]
  - nvmet-tcp: Fix the H2C expected PDU len calculation (Maurizio Lombardi) [RHEL-22290 RHEL-22292 RHEL-22627 RHEL-22629 RHEL-22632 RHEL-22636 RHEL-19150 RHEL-19153 RHEL-19156 RHEL-19159 RHEL-19162 RHEL-19165] {CVE-2023-6356 CVE-2023-6535 CVE-2023-6536}
  - nvmet-tcp: remove boilerplate code (Maurizio Lombardi) [RHEL-22290 RHEL-22292 RHEL-22627 RHEL-22629 RHEL-22632 RHEL-22636 RHEL-19150 RHEL-19153 RHEL-19156 RHEL-19159 RHEL-19162 RHEL-19165] {CVE-2023-6356 CVE-2023-6535 CVE-2023-6536}
  - nvmet-tcp: fix a crash in nvmet_req_complete() (Maurizio Lombardi) [RHEL-22290 RHEL-22292 RHEL-22627 RHEL-22629 RHEL-22632 RHEL-22636 RHEL-19150 RHEL-19153 RHEL-19156 RHEL-19159 RHEL-19162 RHEL-19165] {CVE-2023-6356 CVE-2023-6535 CVE-2023-6536}
  - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length (Maurizio Lombardi) [RHEL-22290 RHEL-22292 RHEL-22627 RHEL-22629 RHEL-22632 RHEL-22636 RHEL-19150 RHEL-19153 RHEL-19156 RHEL-19159 RHEL-19162 RHEL-19165] {CVE-2023-6356 CVE-2023-6535 CVE-2023-6536}
  - ice: dpll: fix phase offset value (Petr Oros) [RHEL-17652 RHEL-15789]
  - dpll: netlink/core: change pin frequency set behavior (Petr Oros) [RHEL-17652 RHEL-15789]
  - ice: dpll: implement phase related callbacks (Petr Oros) [RHEL-17652 RHEL-15789]
  - dpll: netlink/core: add support for pin-dpll signal phase offset/adjust (Petr Oros) [RHEL-17652 RHEL-15789]
  - dpll: spec: add support for pin-dpll signal phase offset/adjust (Petr Oros) [RHEL-17652 RHEL-15789]
  - dpll: docs: add support for pin signal phase offset/adjust (Petr Oros) [RHEL-17652 RHEL-15789]
  - netlink: specs: remove redundant type keys from attributes in subsets (Petr Oros) [RHEL-17652 RHEL-15789]
  - md/raid6: use valid sector values to determine if an I/O should wait on the reshape (Nigel Croxon) [RHEL-20933 RHEL-17276]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.23.1.el9_3]
changelog:
  - iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range (Jerry Snitselaar) [RHEL-19382 RHEL-11590]
  - arm64/smmu: use TLBI ASID when invalidating entire range (Jerry Snitselaar) [RHEL-19382 RHEL-11590]
  - netfilter: nft_set_pipapo: skip inactive elements during set walk (Florian Westphal) [RHEL-20701 RHEL-20709 RHEL-19722 RHEL-19961] {CVE-2023-6817}
  - netfilter: nf_tables: split async and sync catchall in two functions (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: remove catchall element in GC sync path (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: expose opaque set element as struct nft_elem_priv (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: set backend .flush always succeeds (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_set_pipapo: no need to call pipapo_deactivate() from flush (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: work around newrule after chain binding (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: fix memleak when more than 255 elements expired (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: disable toggling dormant table state more than once (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: disallow element removal on anonymous sets (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: disallow rule removal from chain binding (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: defer gc run if previous batch is still pending (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: fix out of memory error handling (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: use correct lock to protect gc_list (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: GC transaction race with abort path (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: flush pending destroy work before netlink notifier (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_dynset: disallow object maps (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: GC transaction race with netns dismantle (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: don't fail inserts if duplicate has expired (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: deactivate catchall elements in next generation (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: fix kdoc warnings after gc rework (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: fix false-positive lockdep splat (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: remove busy mark and gc batch API (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_set_hash: mark set element as dead when deleting from packet path (Florian Westphal) [RHEL-22131 RHEL-22134 RHEL-1720 RHEL-1721] {CVE-2023-4244}
  - netfilter: nf_tables: adapt set backend to use GC transaction API (Florian Westphal) [RHEL-22131 RHEL-22134 RHEL-1720 RHEL-1721] {CVE-2023-4244}
  - netfilter: nft_set_rbtree: fix overlap expiration walk (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: GC transaction API to avoid race with control plane (Florian Westphal) [RHEL-22131 RHEL-22134 RHEL-1720 RHEL-1721] {CVE-2023-4244}
  - netfilter: nf_tables: don't skip expired elements during walk (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: skip bound chain in netns release path (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: fix spurious set element insertion failure (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: report use refcount overflow (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: fix underflow in chain reference counter (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: disallow timeout for anonymous sets (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: disallow updates of anonymous sets (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: reject unbound chain set before commit phase (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: reject unbound anonymous set before commit phase (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: disallow element updates of bound anonymous sets (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: fix underflow in object reference counter (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: drop map element references from preparation phase (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: validate variable length element extension (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_set_pipapo: .walk does not deal with generations (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: relax set/map validation checks (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: integrate pipapo into commit protocol (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: upfront validation of data via nft_data_init() (Florian Westphal) [RHEL-22131 RHEL-1720]
  - rbd: don't move requests to the running list on errors (Ilya Dryomov) [RHEL-23863 RHEL-21939]
  - ASoC: SOF: intel: hda: Clean up link DMA for IPC3 during stop (Jaroslav Kysela) [RHEL-24033 RHEL-13724]
  - platform/x86/intel-uncore-freq: Return error on write frequency (David Arcari) [RHEL-15751 2177013]
  - platform/x86: intel-uncore-freq: Add client processors (David Arcari) [RHEL-15751 2177013]
  - platform/x86: intel-uncore-freq: add Emerald Rapids support (David Arcari) [RHEL-15751 2177013]
  - platform/x86: intel-uncore-freq: Use sysfs_emit() to instead of scnprintf() (David Arcari) [RHEL-15751 2177013]
  - platform/x86: intel-uncore-freq: Prevent driver loading in guests (David Arcari) [RHEL-15751 2177013]
  - platform/x86: intel-uncore-freq: fix uncore_freq_common_init() error codes (David Arcari) [RHEL-15751 2177013]
  - Documentation: admin-guide: pm: Document uncore frequency scaling (David Arcari) [RHEL-15751 2177013]
  - platform/x86/intel-uncore-freq: Split common and enumeration part (David Arcari) [RHEL-15751 2177013]
  - platform/x86/intel/uncore-freq: Display uncore current frequency (David Arcari) [RHEL-15751 2177013]
  - platform/x86/intel/uncore-freq: Use sysfs API to create attributes (David Arcari) [RHEL-15751 2177013]
  - platform/x86/intel/uncore-freq: Move to uncore-frequency folder (David Arcari) [RHEL-15751 2177013]
  - platform/x86: intel-uncore-frequency: use default_groups in kobj_type (David Arcari) [RHEL-15751 2177013]
  - platform/x86: intel-uncore-frequency: Move to intel sub-directory (David Arcari) [RHEL-15751 2177013]
  - Revert "platform/x86: intel-uncore-freq: add Emerald Rapids support" (David Arcari) [RHEL-15751 2177013]
  - iommu/iova: Manage the depot list size (Jay Shin) [RHEL-21517 RHEL-11148]
  - iommu/iova: Make the rcache depot scale better (Jay Shin) [RHEL-21517 RHEL-11148]
  - drm/amd/pm: Fix error of MACO flag setting code (Michel Dänzer) [RHEL-16741 RHEL-16742 RHEL-14571 RHEL-15927]
  - drm/amd: Fix detection of _PR3 on the PCIe root port (Michel Dänzer) [RHEL-16741 RHEL-16742 RHEL-14571 RHEL-15927]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.24.1.el9_3]
changelog:
  - RDMA/mlx5: Fix assigning access flags to cache mkeys (Mohammad Kabat) [RHEL-25242 RHEL-882]
  - drm/amdgpu: Fix potential fence use-after-free v2 (Jan Stancek) [RHEL-24501 RHEL-24504 RHEL-22506 RHEL-22507] {CVE-2023-51042}
  - ceph: defer stopping mdsc delayed_work (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: never send metrics if disable_send_metrics is set (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: don't let check_caps skip sending responses for revoke msgs (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: issue a cap release immediately if no cap exists (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: trigger to flush the buffer when making snapshot (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: fix blindly expanding the readahead windows (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: add a dedicated private data for netfs rreq (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: voluntarily drop Xx caps for requests those touch parent mtime (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: try to dump the msgs when decoding fails (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: only send metrics when the MDS rank is ready (Xiubo Li) [RHEL-22256 RHEL-16415]
  - x86/boot: Ignore NMIs during very early boot (Derek Barbosa) [RHEL-24449 RHEL-9380]
  - Documentation, mm/unaccepted: document accept_memory kernel parameter (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - proc/kcore: do not try to access unaccepted memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/unaccepted: do not let /proc/vmcore try to access unaccepted memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/traps: Fix load_unaligned_zeropad() handling for shared TDX memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/unaccepted: Fix off-by-one when checking for overlapping ranges (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Zero out the missing RSI in TDX_HYPERCALL macro (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/kvm: Do not try to disable kvmclock if it was not enabled (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Mark TSC reliable (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - RHEL: kABI fixup for struct zone (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - RHEL: introduce NR_VM_ZONE_STAT_ITEMS_ACTUAL for kABI-preserving zone stats (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - RHEL: 9.3 kABI fixup for struct efi (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/mm: Fix enc_status_change_finish_noop() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Fix race between set_memory_encrypted() and load_unaligned_zeropad() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/mm: Allow guest.enc_status_change_prepare() to fail (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/coco: Mark cc_platform_has() and descendants noinstr (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - virt: sevguest: Add CONFIG_CRYPTO dependency (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - mm/page_alloc: make deferred page init free pages in MAX_ORDER blocks (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - mm/page_alloc: fix obsolete comment in deferred_pfn_valid() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/sev: Change npages to unsigned long in snp_accept_memory() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/unaccepted: Fix soft lockups caused by parallel memory acceptance (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/unaccepted: Make sure unaccepted table is mapped (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/efi: Safely enable unaccepted memory in UEFI (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/sev: Add SNP-specific unaccepted memory support (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/sev: Use large PSC requests if applicable (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/sev: Allow for use of the early boot GHCB for PSC requests (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/sev: Put PSC struct on the stack in prep for unaccepted memory support (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/sev: Fix calculation of end address based on number of pages (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Wrap exit reason with hcall_func() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Add unaccepted memory support (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Refactor try_accept_one() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/unaccepted: Avoid load_unaligned_zeropad() stepping into unaccepted memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: Add unaccepted memory support (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/boot/compressed: Handle unaccepted memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/unaccepted: Use ACPI reclaim memory for unaccepted memory table (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/libstub: Implement support for unaccepted memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/x86: Get full memory map in allocate_e820() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - memblock tests: Fix compilation errors. (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - mm: Add support for unaccepted memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/boot: Centralize __pa()/__va() definitions (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/boot: Add an efi.h header for the decompressor (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Make _tdx_hypercall() and __tdx_module_call() available in boot stub (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Drop flags from __tdx_hypercall() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Disable NOTIFY_ENABLES (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Relax SEPT_VE_DISABLE check for debug TD (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Use ReportFatalError to report missing SEPT_VE_DISABLE (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - cpuidle, tdx: Make TDX code noinstr clean (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Remove TDX_HCALL_ISSUE_STI (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - mm: add pageblock_aligned() macro (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: memmap: Disregard bogus entries instead of returning them (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: memmap: Move manipulation routines into x86 arch tree (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: memmap: Move EFI fake memmap support into x86 arch tree (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: install boot-time memory map as config table (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: remove DT dependency from generic stub (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: unify initrd loading between architectures (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: remove pointless goto kludge (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: simplify efi_get_memory_map() and struct efi_boot_memmap (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: avoid efi_get_memory_map() for allocating the virt map (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: drop pointless get_memory_map() call (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/libstub: move efi_system_table global var into separate object (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/x86: libstub: remove unused variable (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: Correct comment on efi_memmap_alloc (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - drivers: fix typo in firmware/efi/memmap.c (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - netfilter: nf_tables: skip set commit for deleted/destroyed sets (Phil Sutter) [RHEL-20683 RHEL-20686 RHEL-20214 RHEL-20217] {CVE-2024-0193}
  - redhat: add missing -rt JIRAs (Jan Stancek)


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.1.1.el9_3]
changelog:
  - dlm: fix plock lookup when using multiple lockspaces (Alexander Aring) [2234868]
  - redhat: enable zstream release numbering for rhel 9.3 (Jan Stancek)
  - redhat: change default dist suffix for RHEL 9.3 (Jan Stancek)
  - thunderbolt: Fix Thunderbolt 3 display flickering issue on 2nd hot plug onwards (Desnes Nunes) [2233967]
  - Revert "firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()'" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Relax base protocol sanity checks on the protocol list" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Fix incorrect error propagation in scmi_voltage_descriptors_get" (Lenny Szubowicz) [2234390]
  - Revert "pstore: Add priv field to pstore_record for backend specific use" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Don't drop lock in the middle of efivar_init()" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Add thin wrapper around EFI get/set variable interface" (Lenny Szubowicz) [2234390]
  - Revert "efi: pstore: Omit efivars caching EFI varstore access layer" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Use locking version to iterate over efivars linked lists" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Drop __efivar_entry_iter() helper which is no longer used" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Remove deprecated 'efivars' sysfs interface" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Switch to new wrapper layer" (Lenny Szubowicz) [2234390]
  - Revert "efi: avoid efivars layer when loading SSDTs from variables" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Move efivar caching layer into efivarfs" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Add SCMI v3.1 System Power extensions" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Add devm_protocol_acquire helper" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Add SCMI System Power Control driver" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Add SCMI v3.1 powercap protocol basic support" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Generalize the fast channel support" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Add SCMI v3.1 powercap fast channels support" (Lenny Szubowicz) [2234390]
  - Revert "include: trace: Add SCMI fast channel tracing" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Use fast channel tracing" (Lenny Szubowicz) [2234390]
  - Revert "efi: Fix efi_power_off() not being run before acpi_power_off() when necessary" (Lenny Szubowicz) [2234390]
  - Revert "cpufreq: scmi: Use .register_em() to register with energy model" (Lenny Szubowicz) [2234390]
  - Revert "cpufreq: scmi: Support the power scale in micro-Watts in SCMI v3.1" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Get detailed power scale from perf" (Lenny Szubowicz) [2234390]
  - Revert "firmware: dmi: Use the proper accessor for the version field" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Fix missing kernel-doc in optee" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Improve checks in the info_get operations" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Harden accesses to the sensor domains" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Harden accesses to the reset domains" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Fix the asynchronous reset requests" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Add SCMI PM driver remove routine" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Disable struct randomization" (Lenny Szubowicz) [2234390]
  - Revert "efi/x86: libstub: remove unused variable" (Lenny Szubowicz) [2234390]
  - Revert "efi: capsule-loader: Fix use-after-free in efi_capsule_write" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: add some missing EFI prototypes" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: use EFI provided memcpy/memset routines" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: move efi_system_table global var into separate object" (Lenny Szubowicz) [2234390]
  - Revert "efi/dev-path-parser: Refactor _UID handling to use acpi_dev_uid_to_integer()" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: implement generic EFI zboot" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: fix type confusion for load_options_size" (Lenny Szubowicz) [2234390]
  - Revert "efi: efibc: avoid efivar API for setting variables" (Lenny Szubowicz) [2234390]
  - Revert "efi: efibc: Guard against allocation failure" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: drop pointless get_memory_map() call" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: check Shim mode using MokSBStateRT" (Lenny Szubowicz) [2234390]
  - Revert "Revert "firmware: arm_scmi: Add clock management to the SCMI power domain"" (Lenny Szubowicz) [2234390]
  - Revert "firmware: dmi: Fortify entry point length checks" (Lenny Szubowicz) [2234390]
  - Revert "psci: Fix the function type for psci_initcall_t" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: avoid efi_get_memory_map() for allocating the virt map" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: simplify efi_get_memory_map() and struct efi_boot_memmap" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: remove pointless goto kludge" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: unify initrd loading between architectures" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: remove DT dependency from generic stub" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: install boot-time memory map as config table" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: refactor the initrd measuring functions" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: measure EFI LoadOptions" (Lenny Szubowicz) [2234390]
  - Revert "efi/arm: libstub: move ARM specific code out of generic routines" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: fix up the last remaining open coded boot service call" (Lenny Szubowicz) [2234390]
  - Revert "efi: zboot: create MemoryMapped() device path for the parent if needed" (Lenny Szubowicz) [2234390]
  - Revert "efi/arm64: libstub: avoid SetVirtualAddressMap() when possible" (Lenny Szubowicz) [2234390]
  - Revert "firmware: raspberrypi: Use dev_err_probe() to simplify code" (Lenny Szubowicz) [2234390]
  - Revert "efi: pstore: Follow convention for the efi-pstore backend name" (Lenny Szubowicz) [2234390]
  - Revert "efi/cper: Export several helpers for ghes_edac to use" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Remove zboot signing from build options" (Lenny Szubowicz) [2234390]
  - Revert "efi: ssdt: Don't free memory if ACPI table was loaded successfully" (Lenny Szubowicz) [2234390]
  - Revert "efi: efivars: Fix variable writes without query_variable_store()" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Give efi_main() asmlinkage qualification" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Fix incorrect payload size in zboot header" (Lenny Szubowicz) [2234390]
  - Revert "efi: runtime: Don't assume virtual mappings are missing if VA == PA == 0" (Lenny Szubowicz) [2234390]
  - Revert "firmware: imx: scu-pd: add missed USB_1_PHY pd" (Lenny Szubowicz) [2234390]
  - Revert "efi: random: reduce seed size to 32 bytes" (Lenny Szubowicz) [2234390]
  - Revert "efi: random: Use 'ACPI reclaim' memory for random seed" (Lenny Szubowicz) [2234390]
  - Revert "firmware: raspberrypi: Introduce rpi_firmware_find_node()" (Lenny Szubowicz) [2234390]
  - Revert "firmware: ti_sci: Switch transport to polled mode during system suspend" (Lenny Szubowicz) [2234390]
  - Revert "firmware: ti_sci: Use the bitmap API to allocate bitmaps" (Lenny Szubowicz) [2234390]
  - Revert "firmware: ti_sci: Use the non-atomic bitmap API when applicable" (Lenny Szubowicz) [2234390]
  - Revert "firmware: ti_sci: Fix polled mode during system suspend" (Lenny Szubowicz) [2234390]
  - Revert "efi: efivars: Fix variable writes with unsupported query_variable_store()" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Cleanup the core driver removal callback" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Suppress the driver's bind attributes" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Fix devres allocation device in virtio transport" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Fix deferred_tx_wq release on error paths" (Lenny Szubowicz) [2234390]
  - Revert "firmware: ti_sci: Use devm_bitmap_zalloc when applicable" (Lenny Szubowicz) [2234390]
  - Revert "ARM: 9255/1: efi/dump UEFI runtime page tables for ARM" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Drop randomization of runtime memory map" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Drop handling of EFI properties table" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Deduplicate ftrace command line argument filtering" (Lenny Szubowicz) [2234390]
  - Revert "arm64: efi: Move dcache cleaning of loaded image out of efi_enter_kernel()" (Lenny Szubowicz) [2234390]
  - Revert "arm64: efi: Avoid dcache_clean_poc() altogether in efi_enter_kernel()" (Lenny Szubowicz) [2234390]
  - Revert "arm64: efi: Move efi-entry.S into the libstub source directory" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Use local strncmp() implementation unconditionally" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Clone memcmp() into the stub" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Enable efi_printk() in zboot decompressor" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Move screen_info handling to common code" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Provide local implementations of strrchr() and memchr()" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Factor out EFI stub entrypoint into separate file" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Add image code and data size to the zimage metadata" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Factor out min alignment and preferred kernel load address" (Lenny Szubowicz) [2234390]
  - Revert "efi/arm64: libstub: Split off kernel image relocation for builtin stub" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Merge zboot decompressor with the ordinary stub" (Lenny Szubowicz) [2234390]
  - Revert "arm64: unwind: add asynchronous unwind tables to kernel and modules" (Lenny Szubowicz) [2234390]
  - Revert "arm64: efi: Force the use of SetVirtualAddressMap() on Altra machines" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Implement devicepath support for initrd commandline loader" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Permit mixed mode return types other than efi_status_t" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Add mixed mode support to command line initrd loader" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Undeprecate the command line initrd loader" (Lenny Szubowicz) [2234390]
  - Revert "efi: memmap: Move EFI fake memmap support into x86 arch tree" (Lenny Szubowicz) [2234390]
  - Revert "efi: Correct comment on efi_memmap_alloc" (Lenny Szubowicz) [2234390]
  - Revert "drivers: fix typo in firmware/efi/memmap.c" (Lenny Szubowicz) [2234390]
  - Revert "efi: memmap: Move manipulation routines into x86 arch tree" (Lenny Szubowicz) [2234390]
  - Revert "efi: pstore: Add module parameter for setting the record size" (Lenny Szubowicz) [2234390]
  - Revert "efi: random: combine bootloader provided RNG seed with RNG protocol output" (Lenny Szubowicz) [2234390]
  - Revert "firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe()" (Lenny Szubowicz) [2234390]
  - Revert "efi: stub: use random seed from EFI variable" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Always enable initrd command line loader and bump version" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_ffa: Move constants to header file" (Lenny Szubowicz) [2234390]
  - Revert "efi: Put Linux specific magic number in the DOS header" (Lenny Szubowicz) [2234390]
  - Revert "efi: fix NULL-deref in init error path" (Lenny Szubowicz) [2234390]
  - Revert "efi: fix userspace infinite retry read efivars after EFI runtime services page fault" (Lenny Szubowicz) [2234390]
  - Revert "firmware/sysfb: Fix EFI/VESA format selection" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Clear stale xfer->hdr.status" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Harden shared memory access in fetch_response" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Harden shared memory access in fetch_notification" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Fix virtio channels cleanup on shutdown" (Lenny Szubowicz) [2234390]
  - Revert "efi/earlycon: Replace open coded strnchrnul()" (Lenny Szubowicz) [2234390]
  - Revert "firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle" (Lenny Szubowicz) [2234390]
  - Revert "efi: memmap: Disregard bogus entries instead of returning them" (Lenny Szubowicz) [2234390]
  - Revert "efi: verify that variable services are supported" (Lenny Szubowicz) [2234390]
  - Revert "efi: efivars: prevent double registration" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: Add memory attribute protocol definitions" (Lenny Szubowicz) [2234390]
  - Revert "efi: Accept version 2 of memory attributes table" (Lenny Szubowicz) [2234390]
  - Revert "efi: fix potential NULL deref in efi_mem_reserve_persistent" (Lenny Szubowicz) [2234390]
  - Revert "efi: zboot: Use EFI protocol to remap code/data with the right attributes" (Lenny Szubowicz) [2234390]
  - Revert "efi: Use standard format for printing the EFI revision" (Lenny Szubowicz) [2234390]
  - Revert "efi: Discover BTI support in runtime services regions" (Lenny Szubowicz) [2234390]
  - Revert "arm64: efi: Force the use of SetVirtualAddressMap() on eMAG and Altra Max machines" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: zboot: Mark zboot EFI application as NX compatible" (Lenny Szubowicz) [2234390]
  - Revert "efi: earlycon: Reprobe after parsing config tables" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: smbios: Use length member instead of record struct size" (Lenny Szubowicz) [2234390]
  - Revert "arm64: efi: Use SMBIOS processor version to key off Ampere quirk" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: smbios: Drop unused 'recsize' parameter" (Lenny Szubowicz) [2234390]
  - Revert "efi: sysfb_efi: Fix DMI quirks not working for simpledrm" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: zboot: Add compressed image to make targets" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: randomalloc: Return EFI_OUT_OF_RESOURCES on failure" (Lenny Szubowicz) [2234390]
  - Revert "efi: Bump stub image version for macOS HVF compatibility" (Lenny Szubowicz) [2234390]
  - Revert "firmware/sysfb: Fix VESA format selection" (Lenny Szubowicz) [2234390]
  - Revert "redhat/configs: update firmware configs" (Lenny Szubowicz) [2234390]
  - Revert "ACPI: power: Switch to sys-off handler API" (Lenny Szubowicz) [2234390]
  - Revert "gsmi: fix null-deref in gsmi_get_variable" (Lenny Szubowicz) [2234390]
  - Revert "efi: efivars: drop kobject from efivars_register()" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: fix efi_load_initrd_dev_path() kernel-doc comment" (Lenny Szubowicz) [2234390]
  - Revert "notifier: Add atomic_notifier_call_chain_is_empty()" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Wrap legacy power-off callbacks into sys-off handlers" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Add do_kernel_power_off()" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Add stub for pm_power_off" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Add kernel_can_power_off()" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Add register_platform_power_off()" (Lenny Szubowicz) [2234390]
  - Revert "reboot: Remove pm_power_off_prepare()" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Change registration order of legacy power-off handler" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Use static handler for register_platform_power_off()" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Fix powering off using a non-syscall code paths" (Lenny Szubowicz) [2234390]
  - Revert "PM: hibernate: Use kernel_can_power_off()" (Lenny Szubowicz) [2234390]
  - x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled (Waiman Long) [2227917]
  - Documentation/hw-vuln: Document the interaction between IBRS and STIBP (Waiman Long) [2227917]
  - x86/CPU/AMD: Make sure EFER[AIBRSE] is set (Waiman Long) [2227917]
  - sched/core: Use empty mask to reset cpumasks in sched_setaffinity() (Waiman Long) [2219681]
  - cgroup/cpuset: Extend test_cpuset_prs.sh to test remote partition (Waiman Long) [2174568]
  - cgroup/cpuset: Documentation update for partition (Waiman Long) [2174568]
  - cgroup/cpuset: Check partition conflict with housekeeping setup (Waiman Long) [2174568]
  - cgroup/cpuset: Introduce remote partition (Waiman Long) [2174568]
  - cgroup/cpuset: Add cpuset.cpus.exclusive for v2 (Waiman Long) [2174568]
  - cgroup/cpuset: Add cpuset.cpus.exclusive.effective for v2 (Waiman Long) [2174568]
  - cgroup/cpuset: simplify the percpu kthreads check in update_tasks_cpumask() (Waiman Long) [2174568]
  - cgroup/cpuset: Allow suppression of sched domain rebuild in update_cpumasks_hier() (Waiman Long) [2174568]
  - cgroup/cpuset: Improve temporary cpumasks handling (Waiman Long) [2174568]
  - cgroup/cpuset: Extract out CS_CPU_EXCLUSIVE & CS_SCHED_LOAD_BALANCE handling (Waiman Long) [2174568]
  - cgroup/cpuset: Inherit parent's load balance state in v2 (Waiman Long) [2174568]
  - cgroup/cpuset: Free DL BW in case can_attach() fails (Waiman Long) [2174568]
  - sched/deadline: Create DL BW alloc, free & check overflow interface (Waiman Long) [2174568]
  - cgroup/cpuset: Iterate only if DEADLINE tasks are present (Waiman Long) [2174568]
  - sched/cpuset: Keep track of SCHED_DEADLINE task in cpusets (Waiman Long) [2174568]
  - sched/cpuset: Bring back cpuset_mutex (Waiman Long) [2174568]
  - cgroup/cpuset: Rename functions dealing with DEADLINE accounting (Waiman Long) [2174568]
  - cgroup/cpuset: Minor updates to test_cpuset_prs.sh (Waiman Long) [2174568]
  - cgroup/cpuset: Include offline CPUs when tasks' cpumasks in top_cpuset are updated (Waiman Long) [2174568]
  - cgroup/cpuset: Skip task update if hotplug doesn't affect current cpuset (Waiman Long) [2174568]
  - kselftest/cgroup: Add cleanup() to test_cpuset_prs.sh (Waiman Long) [2174568]
  - kselftest/cgroup: Fix gathering number of CPUs (Waiman Long) [2174568]
  - redhat: configs: Disable CONFIG_CRYPTO_STATS since performance issue for storage (Herbert Xu) [2227964]
  - redhat: list Z-Jiras in the changelog before Y-Jiras (Herton R. Krzesinski)


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.6.1.el9_4]
changelog:
  - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Daniel Vacek) [RHEL-26063]
  - ASoC: Intel: soc-acpi: rt713+rt1316, no sdw-dmic config (Jaroslav Kysela) [RHEL-26456]
  - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Maxim Levitsky) [RHEL-26435]
  - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Maxim Levitsky) [RHEL-26435]
  - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26463 RHEL-26465] {CVE-2024-26586}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.7.1.el9_4]
changelog:
  - NFS: Read unlock folio on nfs_page_create_from_folio() error (Benjamin Coddington) [RHEL-18029]
  - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-15701]
  - i40e: Fix firmware version comparison function (Ivan Vecera) [RHEL-15701]
  - i40e: disable NAPI right after disabling irqs when handling xsk_pool (Ivan Vecera) [RHEL-15701]
  - i40e: take into account XDP Tx queues when stopping rings (Ivan Vecera) [RHEL-15701]
  - i40e: avoid double calling i40e_pf_rxq_wait() (Ivan Vecera) [RHEL-15701]
  - i40e: Fix wrong mask used during DCB config (Ivan Vecera) [RHEL-15701]
  - i40e: Fix waiting for queues of all VSIs to be disabled (Ivan Vecera) [RHEL-15701]
  - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-15701]
  - net: intel: fix old compiler regressions (Ivan Vecera) [RHEL-15701]
  - i40e: update xdp_rxq_info::frag_size for ZC enabled Rx queue (Ivan Vecera) [RHEL-15701]
  - i40e: set xdp_rxq_info::frag_size (Ivan Vecera) [RHEL-15701]
  - intel: xsk: initialize skb_frag_t::bv_offset in ZC drivers (Ivan Vecera) [RHEL-15701]
  - i40e: handle multi-buffer packets that are shrunk by xdp prog (Ivan Vecera) [RHEL-15701]
  - i40e: Include types.h to some headers (Ivan Vecera) [RHEL-15701]
  - i40e: Restore VF MSI-X state during PCI reset (Ivan Vecera) [RHEL-15701]
  - i40e: fix use-after-free in i40e_aqc_add_filters() (Ivan Vecera) [RHEL-15701]
  - i40e: Avoid unnecessary use of comma operator (Ivan Vecera) [RHEL-15701]
  - i40e: Fix VF disable behavior to block all traffic (Ivan Vecera) [RHEL-15701]
  - i40e: Fix filter input checks to prevent config with invalid values (Ivan Vecera) [RHEL-15701]
  - i40e: field get conversion (Ivan Vecera) [RHEL-15701]
  - i40e: field prep conversion (Ivan Vecera) [RHEL-15701]
  - intel: add bit macro includes where needed (Ivan Vecera) [RHEL-15701]
  - i40e: remove fake support of rx-frames-irq (Ivan Vecera) [RHEL-15701]
  - i40e: Fix ST code value for Clause 45 (Ivan Vecera) [RHEL-15701]
  - i40e: Fix unexpected MFS warning message (Ivan Vecera) [RHEL-15701]
  - i40e: Remove queue tracking fields from i40e_adminq_ring (Ivan Vecera) [RHEL-15701]
  - i40e: Remove AQ register definitions for VF types (Ivan Vecera) [RHEL-15701]
  - i40e: Delete unused and useless i40e_pf fields (Ivan Vecera) [RHEL-15701]
  - i40e: Fix adding unsupported cloud filters (Ivan Vecera) [RHEL-15701]
  - i40e: Delete unused i40e_mac_info fields (Ivan Vecera) [RHEL-15701]
  - i40e: Move inline helpers to i40e_prototype.h (Ivan Vecera) [RHEL-15701]
  - i40e: Remove VF MAC types (Ivan Vecera) [RHEL-15701]
  - i40e: Use helpers to check running FW and AQ API versions (Ivan Vecera) [RHEL-15701]
  - i40e: Add other helpers to check version of running firmware and AQ API (Ivan Vecera) [RHEL-15701]
  - i40e: Move i40e_is_aq_api_ver_ge helper (Ivan Vecera) [RHEL-15701]
  - i40e: Initialize hardware capabilities at single place (Ivan Vecera) [RHEL-15701]
  - i40e: Consolidate hardware capabilities (Ivan Vecera) [RHEL-15701]
  - i40e: Use DECLARE_BITMAP for flags field in i40e_hw (Ivan Vecera) [RHEL-15701]
  - i40e: Use DECLARE_BITMAP for flags and hw_features fields in i40e_pf (Ivan Vecera) [RHEL-15701]
  - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-15701]
  - i40e: Remove unused flags (Ivan Vecera) [RHEL-15701]
  - i40e: add an error code check in i40e_vsi_setup (Ivan Vecera) [RHEL-15701]
  - i40e: increase max descriptors for XL710 (Ivan Vecera) [RHEL-15701]
  - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (Ivan Vecera) [RHEL-15701]
  - i40e: sync next_to_clean and next_to_process for programming status desc (Ivan Vecera) [RHEL-15701]
  - i40e: Fix I40E_FLAG_VF_VLAN_PRUNING value (Ivan Vecera) [RHEL-15701]
  - i40e: xsk: remove count_mask (Ivan Vecera) [RHEL-15701]
  - i40e: use scnprintf over strncpy+strncat (Ivan Vecera) [RHEL-15701]
  - intel: fix format warnings (Ivan Vecera) [RHEL-15701]
  - i40e: Refactor and rename i40e_read_pba_string() (Ivan Vecera) [RHEL-15701]
  - i40e: Split and refactor i40e_nvm_version_str() (Ivan Vecera) [RHEL-15701]
  - i40e: prevent crash on probe if hw registers have invalid values (Ivan Vecera) [RHEL-15701]
  - i40e: Move DDP specific macros and structures to i40e_ddp.c (Ivan Vecera) [RHEL-15701]
  - i40e: Remove circular header dependencies and fix headers (Ivan Vecera) [RHEL-15701]
  - i40e: Split i40e_osdep.h (Ivan Vecera) [RHEL-15701]
  - i40e: Move memory allocation structures to i40e_alloc.h (Ivan Vecera) [RHEL-15701]
  - i40e: Simplify memory allocation functions (Ivan Vecera) [RHEL-15701]
  - i40e: Refactor I40E_MDIO_CLAUSE* macros (Ivan Vecera) [RHEL-15701]
  - i40e: Move I40E_MASK macro to i40e_register.h (Ivan Vecera) [RHEL-15701]
  - i40e: Remove back pointer from i40e_hw structure (Ivan Vecera) [RHEL-15701]
  - i40e: Add rx_missed_errors for buffer exhaustion (Ivan Vecera) [RHEL-15701]
  - net: Tree wide: Replace xdp_do_flush_map() with xdp_do_flush(). (Ivan Vecera) [RHEL-15701]
  - i40e: fix potential memory leaks in i40e_remove() (Ivan Vecera) [RHEL-15701]
  - i40e: fix potential NULL pointer dereferencing of pf->vf i40e_sync_vsi_filters() (Ivan Vecera) [RHEL-15701]
  - i40e: fix misleading debug logs (Ivan Vecera) [RHEL-15701]
  - i40e: Replace one-element array with flex-array member in struct i40e_profile_aq_section (Ivan Vecera) [RHEL-15701]
  - i40e: Replace one-element array with flex-array member in struct i40e_section_table (Ivan Vecera) [RHEL-15701]
  - i40e: Replace one-element array with flex-array member in struct i40e_profile_segment (Ivan Vecera) [RHEL-15701]
  - i40e: Replace one-element array with flex-array member in struct i40e_package_header (Ivan Vecera) [RHEL-15701]
  - i40e: Remove unused function declarations (Ivan Vecera) [RHEL-15701]
  - i40e: remove i40e_status (Ivan Vecera) [RHEL-15701]
  - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (Ivan Vecera) [RHEL-15701]
  - i40e: xsk: add TX multi-buffer support (Ivan Vecera) [RHEL-15701]
  - i40e: xsk: add RX multi-buffer support (Ivan Vecera) [RHEL-15701]
  - i40e, xsk: fix comment typo (Ivan Vecera) [RHEL-15701]
  - i40e: remove unnecessary check for old MAC == new MAC (Ivan Vecera) [RHEL-15701]
  - i40e: fix i40e_setup_misc_vector() error handling (Ivan Vecera) [RHEL-15701]
  - i40e: fix accessing vsi->active_filters without holding lock (Ivan Vecera) [RHEL-15701]
  - i40e: Add support for VF to specify its primary MAC address (Ivan Vecera) [RHEL-15701]
  - i40e: fix registers dump after run ethtool adapter self test (Ivan Vecera) [RHEL-15701]
  - i40e: fix flow director packet filter programming (Ivan Vecera) [RHEL-15701]
  - i40e: add support for XDP multi-buffer Rx (Ivan Vecera) [RHEL-15701]
  - i40e: add xdp_buff to i40e_ring struct (Ivan Vecera) [RHEL-15701]
  - i40e: introduce next_to_process to i40e_ring (Ivan Vecera) [RHEL-15701]
  - i40e: use frame_sz instead of recalculating truesize for building skb (Ivan Vecera) [RHEL-15701]
  - i40e: Change size to truesize when using i40e_rx_buffer_flip() (Ivan Vecera) [RHEL-15701]
  - i40e: add pre-xdp page_count in rx_buffer (Ivan Vecera) [RHEL-15701]
  - i40e: change Rx buffer size for legacy-rx to support XDP multi-buffer (Ivan Vecera) [RHEL-15701]
  - i40e: consolidate maximum frame size calculation for vsi (Ivan Vecera) [RHEL-15701]
  - i40e: check vsi type before setting xdp_features flag (Ivan Vecera) [RHEL-15701]
  - drivers: net: turn on XDP features (Ivan Vecera) [RHEL-15701]
  - i40e: add xdp frags support to ndo_xdp_xmit (Ivan Vecera) [RHEL-15701]
  - dmaengine: idxd: Ensure safe user copy of completion record (Jerry Snitselaar) [RHEL-28511]
  - dmaengine: idxd: Remove shadow Event Log head stored in idxd (Jerry Snitselaar) [RHEL-28511]
  - dmaengine: idxd: Move dma_free_coherent() out of spinlocked context (Jerry Snitselaar) [RHEL-28511]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.8.1.el9_4]
changelog:
  - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29679]
  - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29679]
  - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-7976]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.10.1.el9_4]
changelog:
  - NFS: remove sync_mode test from nfs_writepage_locked() (Jeffrey Layton) [RHEL-28630]
  - nfs: Remove writepage (Jeffrey Layton) [RHEL-28630]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.12.1.el9_4]
changelog:
  - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28877 RHEL-28878] {CVE-2023-52489}
  - Revert "[redhat] kabi: add symbol __scsi_execute to stablelist" (Ewan D. Milne) [RHEL-30725]


author: Mark Will <mark.will@oracle.com> [5.14.0-427.13.1.el9_4.OL9]
changelog:
  - Disable UKI signing [Orabug: 36571828]
  - Update Oracle Linux certificates (Kevin Lyons)
  - Disable signing for aarch64 (Ilya Okomin)
  - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
  - Update x509.genkey [Orabug: 24817676]
  - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5.el9
  - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
  - Add Oracle Linux IMA certificates


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.14.1.el9_4]
changelog:
  - crypto: dh - implement FIPS PCT (Vladis Dronov) [RHEL-27009 RHEL-25845]
  - crypto: tcrypt - add ffdhe2048(dh) test (Vladis Dronov) [RHEL-27009 RHEL-25845]
  - crypto: dh - Make public key test FIPS-only (Vladis Dronov) [RHEL-27009 RHEL-25845]
  - printk: allow disabling printk per-console device kthreads at boot (Luis Claudio R. Goncalves) [RHEL-30678 RHEL-17709]
  - mm, vmscan: remove ISOLATE_UNMAPPED (Nico Pache) [RHEL-29235 RHEL-28667]
  - trace-vmscan-postprocess: sync with tracepoints updates (Nico Pache) [RHEL-29235 RHEL-28667]
  - tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm/mglru: skip special VMAs in lru_gen_look_around() (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm/mglru: reclaim offlined memcgs harder (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm/mglru: try to stop at high watermarks (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm/mglru: fix underprotected page cache (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm: multi-gen LRU: reuse some legacy trace events (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm: multi-gen LRU: improve design doc (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm: multi-gen LRU: clean up sysfs code (Nico Pache) [RHEL-29235 RHEL-28667]
  - cpu/hotplug: Do not bail-out in DYING/STARTING sections (David Arcari) [RHEL-29673 RHEL-19514]
  - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-29079 RHEL-17113] {CVE-2023-6240}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.15.1.el9_4]
changelog:
  - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-30110 RHEL-19000]
  - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-30110 RHEL-19000]
  - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-30110 RHEL-19000]
  - crypto: iaa - mark tech preview (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - crypto: iaa - Fix nr_cpus < nr_iaa case (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - crypto: iaa - fix the missing CRYPTO_ALG_ASYNC in cra_flags (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - crypto: iaa - Fix comp/decomp delay statistics (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - crypto: iaa - Fix async_disable descriptor leak (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - crypto: iaa - Remove unnecessary debugfs_create_dir() error check in iaa_crypto_debugfs_init() (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - crypto: iaa - Remove header table code (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - cgroup: cgroup-v1: do not exclude cgrp_dfl_root (Laurent Vivier) [RHEL-32716 RHEL-31381]
  - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30030 RHEL-30031] {CVE-2024-25743 CVE-2024-25742}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.16.1.el9_4]
changelog:
  - memory: tegra: Skip SID programming if SID registers aren't set (Robert Foss) [RHEL-32675 RHEL-23656]
  - memory: tegra: Add SID override programming for MC clients (Robert Foss) [RHEL-32675 RHEL-23656]
  - iommu: Don't reserve 0-length IOVA region (Robert Foss) [RHEL-32675 RHEL-23656]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.17.1.el9_4]
changelog:
  - ceph: switch to use cap_delay_lock for the unlink delay list (Jay Shin) [RHEL-33003 RHEL-32997]
  - ceph: remove useless session parameter for check_caps() (Xiubo Li) [RHEL-33003 RHEL-19813]
  - ceph: flush the dirty caps immediatelly when quota is approaching (Xiubo Li) [RHEL-33003 RHEL-19813]
  - vhost: Add smp_rmb() in vhost_enable_notify() (Gavin Shan) [RHEL-31839 RHEL-26104]
  - vhost: Add smp_rmb() in vhost_vq_avail_empty() (Gavin Shan) [RHEL-31839 RHEL-26104]
  - iommu/vt-d: Support enforce_cache_coherency only for empty domains (Jerry Snitselaar) [RHEL-32793 RHEL-31083]
  - iommu/vt-d: Add MTL to quirk list to skip TE disabling (Jerry Snitselaar) [RHEL-32793 RHEL-31083]
  - iommu/vt-d: Make context clearing consistent with context mapping (Jerry Snitselaar) [RHEL-32793 RHEL-31083]
  - iommu/vt-d: Disable PCI ATS in legacy passthrough mode (Jerry Snitselaar) [RHEL-32793 RHEL-31083]
  - iommu/vt-d: Omit devTLB invalidation requests when TES=0 (Jerry Snitselaar) [RHEL-32793 RHEL-31083]
  - PCI/MSI: Prevent MSI hardware interrupt number truncation (Myron Stowe) [RHEL-33656 RHEL-21453]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.18.1.el9_4]
changelog:
  - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-32971 RHEL-30082] {CVE-2024-26642}
  - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-33070 RHEL-30078] {CVE-2024-26643}
  - netfilter: nft_ct: fix l3num expectations with inet pseudo family (Phil Sutter) [RHEL-32963 RHEL-31345] {CVE-2024-26673}
  - netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (Phil Sutter) [RHEL-32963 RHEL-31345] {CVE-2024-26673}
  - arm64: tlb: Fix TLBI RANGE operand (Shaoqin Huang) [RHEL-33412 RHEL-26259]
  - arm64/mm: Modify range-based tlbi to decrement scale (Shaoqin Huang) [RHEL-33412 RHEL-26259]
  - rh_messages.h: mark mlx5 on Bluefield-3 as unmaintained (Scott Weaver) [RHEL-35878 RHEL-33061]
  - net: ip_tunnel: prevent perpetual headroom growth (Guillaume Nault) [RHEL-33934 RHEL-31816] {CVE-2024-26804}
  - gitlab-ci: use zstream builder container image (Michael Hofmann)
  - selftests: net: gro fwd: update vxlan GRO test expectations (Antoine Tenart) [RHEL-30910 RHEL-19729]
  - udp: prevent local UDP tunnel packets from being GROed (Antoine Tenart) [RHEL-30910 RHEL-19729]
  - udp: do not transition UDP GRO fraglist partial checksums to unnecessary (Antoine Tenart) [RHEL-30910 RHEL-19729]
  - gro: fix ownership transfer (Antoine Tenart) [RHEL-30910 RHEL-19729]
  - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Antoine Tenart) [RHEL-30910 RHEL-19729]
  - bpf, tcx: Get rid of tcx_link_const (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Add additional mprog query test coverage (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Make seen_tc* variable tests more robust (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Test query on empty mprog and pass revision into attach (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Adapt assert_mprog_count to always expect 0 count (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Test bpf_mprog query API via libbpf and raw syscall (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftest/bpf: Add various selftests for program limits (Felix Maurer) [RHEL-33062 RHEL-28590]
  - bpf: Refuse unused attributes in bpf_prog_{attach,detach} (Felix Maurer) [RHEL-33062 RHEL-28590]
  - bpf: Handle bpf_mprog_query with NULL entry (Felix Maurer) [RHEL-33062 RHEL-28590]
  - net: Fix skb consume leak in sch_handle_egress (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Add various more tcx test cases (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Add test for detachment on empty mprog entry (Felix Maurer) [RHEL-33062 RHEL-28590]
  - tcx: Fix splat during dev unregister (Felix Maurer) [RHEL-33062 RHEL-28590]
  - tcx: Fix splat in ingress_destroy upon tcx_entry_free (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Add mprog API tests for BPF tcx links (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Add mprog API tests for BPF tcx opts (Felix Maurer) [RHEL-33062 RHEL-28590]
  - bpf: Add fd-based tcx multi-prog infra with link support (Felix Maurer) [RHEL-33062 RHEL-28590]
  - bpftool: Implement link show support for tcx (Artem Savkov) [RHEL-33062 RHEL-23643]
  - bpftool: Extend net dump with tcx progs (Artem Savkov) [RHEL-33062 RHEL-23643]
  - bpf: fix precision backtracking instruction iteration (Jay Shin) [RHEL-35230 RHEL-23643]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.19.1.el9_4]
changelog:
  - x86/mce: Cleanup mce_usable_address() (Prarit Bhargava) [RHEL-33810 RHEL-25415]
  - x86/mce: Define amd_mce_usable_address() (Prarit Bhargava) [RHEL-33810 RHEL-25415]
  - x86/MCE/AMD: Split amd_mce_is_memory_error() (Prarit Bhargava) [RHEL-33810 RHEL-25415]
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35302 RHEL-35078] {CVE-2024-26993}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.20.1.el9_4]
changelog:
  - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-33968 RHEL-31732] {CVE-2024-26735}
  - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-36145 RHEL-29035]
  - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-36145 RHEL-29035]
  - PCI: Fix pci_rh_check_status() call semantics (Luiz Capitulino) [RHEL-36541 RHEL-35032]
  - cxgb4: Properly lock TX queue for the selftest. (John B. Wyatt IV) [RHEL-36530 RHEL-31990 RHEL-9354]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.21.1.el9_4]
changelog:
  - drm/i915/display: Increase number of fast wake precharge pulses (Mika Penttilä) [RHEL-36534 RHEL-20439]
  - drm/i915/psr: Improve fast and IO wake lines calculation (Mika Penttilä) [RHEL-36534 RHEL-20439]
  - drm/i915/display: Make intel_dp_aux_fw_sync_len available for PSR code (Mika Penttilä) [RHEL-36534 RHEL-20439]
  - smb: client: improve DFS mount check (Jay Shin) [RHEL-36743 RHEL-28739]
  - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-37622 RHEL-9872]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.22.1.el9_4]
changelog:
  - dpll: fix dpll_pin_on_pin_register() for multiple parent pins (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: indent DPLL option type by a tab (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: fix dpll_xa_ref_*_del() for multiple registrations (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: spec: use proper enum for pin capabilities attribute (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: move all dpll<>netdev helpers to dpll code (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: fix build failure due to rcu_dereference_check() on unknown type (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: rely on rcu for netdev_dpll_pin() (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: fix possible deadlock during netlink dump operation (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: check that pin is registered in __dpll_pin_unregister() (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: move xa_erase() call in to match dpll_pin_alloc() error path order (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: expose fractional frequency offset value to user (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: allocate pin ids in cycle (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: remove leftover mode_supported() op and use mode_get() instead (Petr Oros) [RHEL-36572 RHEL-32098]
  - Documentation: dpll: wrap DPLL_CMD_PIN_GET output in a code block (Petr Oros) [RHEL-36572 RHEL-32098]
  - Documentation: dpll: Fix code blocks (Petr Oros) [RHEL-36572 RHEL-32098]
  - MAINTAINERS: adjust header file entry in DPLL SUBSYSTEM (Petr Oros) [RHEL-36572 RHEL-32098]
  - netdev: Remove unneeded semicolon (Petr Oros) [RHEL-36572 RHEL-32098]
  - netlink: add variable-length / auto integers (Petr Oros) [RHEL-36572 RHEL-30145]
  - netlink: allow be16 and be32 types in all uint policy checks (Ivan Vecera) [RHEL-36572 RHEL-30656]
  - net: netlink: recommend policy range validation (Ivan Vecera) [RHEL-36572 RHEL-30344]
  - netlink: add nla be16/32 types to minlen array (Ivan Vecera) [RHEL-36572 RHEL-30344]
  - netlink: introduce bigendian integer types (Michal Schmidt) [RHEL-36572 RHEL-30344]
  - netlink: introduce NLA_POLICY_MAX_BE (Ivan Vecera) [RHEL-36572 RHEL-30344]
  - ice: use irq_update_affinity_hint() (Michal Schmidt) [RHEL-38512 RHEL-35293]
  - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-9296 RHEL-19514]
  - x86/smpboot: Make TSC synchronization function call based (David Arcari) [RHEL-9296 RHEL-19514]
  - Bluetooth: hci_core: Remove le_restart_scan work (David Marlin) [RHEL-38524 RHEL-30099]
  - hwmon: (coretemp) Enlarge per package core count limit (David Arcari) [RHEL-35447 RHEL-22705]
  - hwmon: (coretemp) Fix bogus core_id to attr name mapping (David Arcari) [RHEL-35447 RHEL-22705]
  - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-35447 RHEL-22705]
  - perf: arm_cspmu: Reject events meant for other PMUs (Michael Petlan) [RHEL-34991 RHEL-25824]
  - smb: client: refresh referral without acquiring refpath_lock (Jay Shin) [RHEL-38904 RHEL-7986]
  - smb: client: guarantee refcounted children from parent session (Jay Shin) [RHEL-38904 RHEL-7986]
  - smb3: show beginning time for per share stats (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: fix mount when dns_resolver key is not available (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: get rid of dfs code dep in namespace.c (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: get rid of dfs naming in automount code (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: rename cifs_dfs_ref.c to namespace.c (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: ensure to try all targets when finding nested links (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: introduce DFS_CACHE_TGT_LIST() (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: remove redundant pointer 'server' (Jay Shin) [RHEL-38904 RHEL-28739]
  - smb: client: fix parsing of source mount option (Jay Shin) [RHEL-38904 RHEL-28739]
  - integrity: eliminate unnecessary "Problem loading X.509 certificate" msg (Coiby Xu) [RHEL-39933 RHEL-12346]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.23.1.el9_4]
changelog:
  - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-34050 RHEL-30492] {CVE-2023-52626}
  - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-38595 RHEL-36684]
  - net/sched: flower: Add lock protection when remove filter handle (Petr Oros) [RHEL-35672 RHEL-33379]
  - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-33913 RHEL-31828] {CVE-2024-26801}
  - net: hns3: do not allow call hns3_nic_net_open repeatedly (Jose Ignacio Tornos Martinez) [RHEL-38933 RHEL-37707] {CVE-2021-47400}
  - tmpfs: fix Documentation of noswap and huge mount options (Nico Pache) [RHEL-38252 RHEL-31975]
  - shmem: add support to ignore swap (Chris von Recklinghausen) [RHEL-38252 RHEL-31975]
  - shmem: update documentation (Chris von Recklinghausen) [RHEL-38252 RHEL-31975]
  - shmem: skip page split if we're not reclaiming (Chris von Recklinghausen) [RHEL-38252 RHEL-31975]
  - shmem: move reclaim check early on writepages() (Chris von Recklinghausen) [RHEL-38252 RHEL-31975]
  - shmem: set shmem_writepage() variables early (Chris von Recklinghausen) [RHEL-38252 RHEL-31975]
  - shmem: remove check for folio lock on writepage() (Chris von Recklinghausen) [RHEL-38252 RHEL-31975]
  - ice: Add automatic VF reset on Tx MDD events (Petr Oros) [RHEL-39083 RHEL-36317]
  - net/ipv6: SKB symmetric hash should incorporate transport ports (Ivan Vecera) [RHEL-37641 RHEL-36218]
  - ipv6: sr: fix memleak in seg6_hmac_init_algo (Hangbin Liu) [RHEL-37669 RHEL-37511]
  - ipv6: sr: fix missing sk_buff release in seg6_input_core (Hangbin Liu) [RHEL-37669 RHEL-37511]
  - ipv6: sr: fix invalid unregister error path (Hangbin Liu) [RHEL-37669 RHEL-37511]
  - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-37669 RHEL-37511]
  - ipv6: sr: add missing seg6_local_exit (Hangbin Liu) [RHEL-37669 RHEL-37511]
  - block: fix q->blkg_list corruption during disk rebind (Ming Lei) [RHEL-36687 RHEL-33577]
  - ice: fix uninitialized dplls mutex usage (Petr Oros) [RHEL-36716 RHEL-36283]
  - ice: fix pin phase adjust updates on PF reset (Petr Oros) [RHEL-36716 RHEL-36283]
  - ice: fix dpll periodic work data updates on PF reset (Petr Oros) [RHEL-36716 RHEL-36283]
  - ice: fix dpll and dpll_pin data access on PF reset (Petr Oros) [RHEL-36716 RHEL-36283]
  - ice: fix dpll input pin phase_adjust value updates (Petr Oros) [RHEL-36716 RHEL-36283]
  - ice: fix connection state of DPLL and out pin (Petr Oros) [RHEL-36716 RHEL-36283]
  - redhat: remove the merge subtrees script (Derek Barbosa)
  - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa)
  - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa)
  - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-38954 RHEL-37422] {CVE-2024-35960}
  - smb: client: fix UAF in smb2_reconnect_server() (Jay Shin) [RHEL-28943 RHEL-40177 RHEL-37273 RHEL-7986] {CVE-2024-35870}
  - smb: client: remove extra @chan_count check in __cifs_put_smb_ses() (Jay Shin) [RHEL-28943 RHEL-31245]
  - RHEL: enable CONFIG_AMD_ATL (Aristeu Rozanski) [RHEL-36220 RHEL-26704]
  - EDAC/amd64: Use new AMD Address Translation Library (Aristeu Rozanski) [RHEL-36220 RHEL-26704]
  - RAS: Introduce AMD Address Translation Library (Aristeu Rozanski) [RHEL-36220 RHEL-26704]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.24.1.el9_4]
changelog:
  - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-43272 RHEL-23117]
  - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-43272 RHEL-23117]
  - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-43272 RHEL-23117]
  - bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() (Michal Schmidt) [RHEL-43272 RHEL-23117]
  - bnx2x: fix potential memory leak in bnx2x_tpa_stop() (Michal Schmidt) [RHEL-43272 RHEL-23117]
  - xen-netfront: Add missing skb_mark_for_recycle (Vitaly Kuznetsov) [RHEL-37626 RHEL-36573] {CVE-2024-27393}
  - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-34953 RHEL-29239]
  - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-34953 RHEL-29239]
  - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-38972 RHEL-37093] {CVE-2023-52667}
  - crypto: qat - Fix typo (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-38546 RHEL-35816] {CVE-2024-26974}
  - crypto: qat - specify firmware files for 402xx (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - validate slices count returned by FW (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - improve error logging to be consistent across features (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - improve error message in adf_get_arbiter_mapping() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - Fix spelling mistake "Invalide" -> "Invalid" (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - Avoid -Wflex-array-member-not-at-end warnings (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - implement interface for live migration (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add interface for live migration (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add bank save and restore flows (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - expand CSR operations for QAT GEN4 devices (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - rename get_sla_arr_of_type() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - relocate CSR access code (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - move PFVF compat checker to a function (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - relocate and rename 4xxx PF2VM definitions (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - adf_get_etr_base() helper (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - redhat/configs: Add CONFIG_CRYPTO_DEV_QAT_420XX (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - make ring to service map common for QAT GEN4 (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - fix ring to service map for dcc in 420xx (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - fix ring to service map for dcc in 4xxx (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - fix comment structure (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - remove unnecessary description from comment (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - remove double initialization of value (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - removed unused macro in adf_cnv_dbgfs.c (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - remove unused macros in qat_comp_alg.c (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - uninitialized variable in adf_hb_error_inject_write() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - Documentation: qat: fix auto_reset section (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-38546 RHEL-35816] {CVE-2024-26974}
  - crypto: qat - change SLAs cleanup flow at shutdown (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - improve aer error reset handling (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - limit heartbeat notifications (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add auto reset on error (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add fatal error notification (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - re-enable sriov after pf reset (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - update PFVF protocol for recovery (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - disable arbitration before reset (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add fatal error notify method (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add heartbeat error simulator (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - avoid memcpy() overflow warning (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - fix arbiter mapping generation algorithm for QAT 402xx (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - generate dynamically arbiter mappings (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add support for ring pair level telemetry (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add support for device telemetry (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add admin msgs for telemetry (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - include pci.h for GET_DEV() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add support for 420xx devices (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - move fw config related structures (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - relocate portions of qat_4xxx code (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - change signature of uof_get_num_objs() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - relocate and rename get_service_enabled() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - seq_file: add helper macro to define attribute for rw file (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - minmax: Introduce {min,max}_array() (Vladis Dronov) [RHEL-38546 RHEL-35816]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.25.1.el9_4]
changelog:
  - nvme: fix reconnection fail due to reserved tag allocation (Maurizio Lombardi) [RHEL-42896 RHEL-36896] {CVE-2024-27435}
  - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (cki-backport-bot) [RHEL-43625] {CVE-2021-47596}
  - scsi: sg: Avoid race in error handling & drop bogus warn (Ewan D. Milne) [RHEL-36106 RHEL-35659]
  - scsi: sg: Avoid sg device teardown race (Ewan D. Milne) [RHEL-36106 RHEL-35659]
  - netfilter: nf_tables: use timestamp to check for set element timeout (Florian Westphal) [RHEL-38032 RHEL-33985] {CVE-2024-27397}
  - netfilter: nft_set_rbtree: Remove unused variable nft_net (Florian Westphal) [RHEL-38032 RHEL-33985]
  - netfilter: nft_set_rbtree: prefer sync gc to async worker (Florian Westphal) [RHEL-38032 RHEL-33985]
  - netfilter: nft_set_rbtree: rename gc deactivate+erase function (Florian Westphal) [RHEL-38032 RHEL-33985]
  - netfilter: nf_tables: de-constify set commit ops function argument (Florian Westphal) [RHEL-38032 RHEL-33985]
  - octeontx2-af: avoid off-by-one read from userspace (Kamal Heib) [RHEL-40486 RHEL-39873] {CVE-2024-36957}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.26.1.el9_4]
changelog:
  - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-39217 RHEL-37430] {CVE-2024-35958}
  - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-41749 RHEL-39837] {CVE-2024-36904}
  - mm/mglru: Revert "don't sync disk for each aging cycle" (Waiman Long) [RHEL-44418]
  - tipc: fix UAF in error path (Xin Long) [RHEL-34848 RHEL-34280] {CVE-2024-36886}
  - selftest/cgroup: Update test_cpuset_prs.sh to match changes (Waiman Long) [RHEL-45139]
  - cgroup/cpuset: Make cpuset.cpus.exclusive independent of cpuset.cpus (Waiman Long) [RHEL-45139]
  - cgroup/cpuset: Delay setting of CS_CPU_EXCLUSIVE until valid partition (Waiman Long) [RHEL-45139]
  - selftest/cgroup: Fix test_cpuset_prs.sh problems reported by test robot (Waiman Long) [RHEL-45139]
  - cgroup/cpuset: Fix remote root partition creation problem (Waiman Long) [RHEL-45139]
  - cgroup/cpuset: Optimize isolated partition only generate_sched_domains() calls (Waiman Long) [RHEL-45139]
  - cgroup/cpuset: Fix retval in update_cpumask() (Waiman Long) [RHEL-45139]
  - cgroup/cpuset: Fix a memory leak in update_exclusive_cpumask() (Waiman Long) [RHEL-45139]
  - ice: implement AQ download pkg retry (Petr Oros) [RHEL-38907 RHEL-17318]
  - redhat: include resolve_btfids in kernel-devel (Viktor Malik) [RHEL-43426 RHEL-40707]
  - blk-cgroup: fix list corruption from resetting io stat (cki-backport-bot) [RHEL-44977] {CVE-2024-38663}
  - misc: rtsx: do clear express reg every SD_INT (David Arcari) [RHEL-39985 RHEL-33706]
  - misc: rtsx: Fix rts5264 driver status incorrect when card removed (David Arcari) [RHEL-39985 RHEL-33706]
  - netfilter: tproxy: bail out if IP has been disabled on the device (cki-backport-bot) [RHEL-44371] {CVE-2024-36270}
  - lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure (cki-backport-bot) [RHEL-44263 RHEL-44261] {CVE-2024-38543}
  - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44039] {CVE-2024-38586}
  - net: micrel: Fix receiving the timestamp in the frame for lan8841 (cki-backport-bot) [RHEL-43996] {CVE-2024-38593}
  - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-43379 RHEL-27780] {CVE-2022-48627}
  - net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map (Kamal Heib) [RHEL-42728 RHEL-34192] {CVE-2024-26858}
  - locking/atomic: Make test_and_*_bit() ordered on failure (Paolo Bonzini) [RHEL-45896]
  - mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index (Rafael Aquini) [RHEL-42659 RHEL-31840] {CVE-2024-26783}
  - can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (Jose Ignacio Tornos Martinez) [RHEL-42379 RHEL-31530] {CVE-2023-52638}
  - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-42226 RHEL-38715] {CVE-2021-47548}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.27.1.el9_4]
changelog:
  - drm/ast: Fix soft lockup (CKI Backport Bot) [RHEL-45716]
  - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41838 RHEL-33217] {CVE-2024-26880}
  - KVM: arm64: Do not re-initialize the KVM lock (Sebastian Ott) [RHEL-37528 RHEL-36279]
  - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Sebastian Ott) [RHEL-37528 RHEL-36279]
  - KVM: arm64: Fix host-programmed guest events in nVHE (Sebastian Ott) [RHEL-37528 RHEL-36279]
  - KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler (Sebastian Ott) [RHEL-37528 RHEL-36279]
  - KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table() (Sebastian Ott) [RHEL-37528 RHEL-36279]
  - KVM: arm64: Fix double-free following kvm_pgtable_stage2_free_unlinked() (Sebastian Ott) [RHEL-37528 RHEL-36279]
  - octeontx2-af: Use separate handlers for interrupts (Kamal Heib) [RHEL-42846 RHEL-35170] {CVE-2024-27030}
  - Squashfs: check the inode number is not the invalid value of zero (Abhi Das) [RHEL-42811 RHEL-35098] {CVE-2024-26982}
  - net: fix sk_memory_allocated_{add|sub} vs softirqs (Paolo Abeni) [RHEL-36773 RHEL-34070]
  - tcp: sk_forced_mem_schedule() optimization (Paolo Abeni) [RHEL-36773 RHEL-34070]
  - net: make SK_MEMORY_PCPU_RESERV tunable (Paolo Abeni) [RHEL-36773 RHEL-34070]
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-42655 RHEL-31690] {CVE-2024-26773}
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-42528 RHEL-38200] {CVE-2023-52809}
  - KVM: x86/mmu: Retry fault before acquiring mmu_lock if mapping is changing (Maxim Levitsky) [RHEL-43388]
  - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-40398 RHEL-36047]
  - RAS: enable CONFIG_RAS_FMPM (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS: Avoid build errors when CONFIG_DEBUG_FS=n (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/FMPM: Safely handle saved records of various sizes (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/FMPM: Avoid NULL ptr deref in get_saved_records() (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - Merge tag 'edac_updates_for_v6.9' of git://git.kernel.org/pub/scm/linux/kernel/git/ras/ras (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/FMPM: Fix off by one when unwinding on error (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/FMPM: Add debugfs interface to print record entries (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/FMPM: Save SPA values (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS: Export helper to get ras_debugfs_dir (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/ATL: Fix bit overflow in denorm_addr_df4_np2() (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS: Introduce a FRU memory poison manager (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - x86/cpu/amd: Provide a separate accessor for Node ID (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/ATL: Add MI300 row retirement support (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - Documentation: Move RAS section to admin-guide (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300() (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/ATL: Add MI300 support (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - Documentation: RAS: Add index and address translation section (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - cpu/SMT: Make SMT control more robust against enumeration failures (Aristeu Rozanski) [RHEL-36212 RHEL-17008]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.28.1.el9_4]
changelog:
  - mlxbf_gige: call request_irq() after NAPI initialized (Kamal Heib) [RHEL-43012 RHEL-37179] {CVE-2024-35907}
  - mlxbf_gige: stop PHY during open() error paths (Kamal Heib) [RHEL-43012 RHEL-37179] {CVE-2024-35907}
  - mlxbf_gige: stop interface during shutdown (Kamal Heib) [RHEL-41708 RHEL-37244] {CVE-2024-35885}
  - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43796 RHEL-43794] {CVE-2022-48743}
  - nfp: flower: handle acti_netdevs allocation failure (Ken Cox) [RHEL-42852 RHEL-35158] {CVE-2024-27046}
  - block: add check that partition length needs to be aligned with block size (Ming Lei) [RHEL-45501 RHEL-26616] {CVE-2023-52458}
  - nfsd: hold a lighter-weight client reference over CB_RECALL_ANY (Benjamin Coddington) [RHEL-45517 RHEL-31513]
  - NFSD: CREATE_SESSION must never cache NFS4ERR_DELAY replies (Benjamin Coddington) [RHEL-45517 RHEL-31513]
  - NFSD: Document the phases of CREATE_SESSION (Benjamin Coddington) [RHEL-45517 RHEL-31513]
  - NFSD: Fix the NFSv4.1 CREATE_SESSION operation (Benjamin Coddington) [RHEL-45517 RHEL-31513]
  - icmp: prevent possible NULL dereferences from icmp_build_probe() (Antoine Tenart) [RHEL-42974 RHEL-37002] {CVE-2024-35857}
  - NFSv4.1: fix handling NFS4ERR_DELAY when testing for session trunking (Scott Mayhew) [RHEL-45360 RHEL-24133]
  - RAS/AMD/ATL: Use system settings for MI300 DRAM to normalized address translation (Aristeu Rozanski) [RHEL-46335 RHEL-38634]
  - RAS/AMD/ATL: Fix MI300 bank hash (Aristeu Rozanski) [RHEL-46335 RHEL-38634]
  - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-42689 RHEL-33271] {CVE-2024-26852}
  - epoll: be better about file lifetimes (Pavel Reichl) [RHEL-44091 RHEL-44083] {CVE-2024-38580}
  - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Dick Kennedy) [RHEL-40659 RHEL-40665 RHEL-24508 RHEL-39793] {CVE-2024-36924}
  - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Dick Kennedy) [RHEL-40659 RHEL-40669 RHEL-24508 RHEL-39887] {CVE-2024-36952}
  - bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel (Viktor Malik) [RHEL-42640 RHEL-31726] {CVE-2024-26737}
  - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (Ken Cox) [RHEL-41489 RHEL-38415] {CVE-2021-47459}
  - wifi: ath11k: restore country code during resume (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: refactor setting country code logic (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - bus: mhi: host: Add mhi_power_down_keep_dev() API to support system suspend/hibernation (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - net: qrtr: support suspend/hibernation (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: support hibernation (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: thermal: don't try to register multiple times (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: fix warning on DMA ring capabilities event (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: do not dump SRNG statistics during resume (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: remove MHI LOOPBACK channels (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: rearrange IRQ enable/disable in reset path (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.29.1.el9_4]
changelog:
  - net: Avoid address overwrite in kernel_connect (Davide Caratti) [RHEL-45728 RHEL-30875]
  - net: replace calls to sock->ops->connect() with kernel_connect() (Davide Caratti) [RHEL-45728 RHEL-33410]
  - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-41638 RHEL-39704] {CVE-2024-36020}
  - cifs: translate network errors on send to -ECONNABORTED (Jay Shin) [RHEL-47047 RHEL-31245]
  - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44132] {CVE-2024-38575}
  - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-43208 RHEL-39803] {CVE-2024-36921}
  - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-42906 RHEL-36809] {CVE-2024-35789}
  - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-42886 RHEL-36900] {CVE-2024-27434}
  - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-42860 RHEL-35142] {CVE-2024-27052}
  - wifi: mt76: mt7925e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-42856 RHEL-35148] {CVE-2024-27049}
  - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-42743 RHEL-34187] {CVE-2024-26897}
  - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (Jose Ignacio Tornos Martinez) [RHEL-42383 RHEL-35199] {CVE-2023-52651}
  - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-41402 RHEL-39781] {CVE-2024-36929}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.30.1.el9_4]
changelog:
  - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35840] {CVE-2024-21823}
  - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35840] {CVE-2024-21823}
  - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35840] {CVE-2024-21823}
  - tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer (Mark Salter) [RHEL-49538 RHEL-39308]
  - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails (Jon Maloy) [RHEL-44467] {CVE-2024-37353}
  - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-36271 RHEL-26682] {CVE-2024-26600}
  - eeprom: at24: fix memory corruption race condition (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - eeprom: at24: Probe for DDR3 thermal sensor in the SPD case (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - eeprom: at24: Use dev_err_probe for nvmem register failure (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - eeprom: at24: Add support for 24c1025 EEPROM (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - eeprom: at24: remove struct at24_client (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - at24: Support probing while in non-zero ACPI D state (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44439] {CVE-2024-37356}
  - cxl/region: Fix cxlr_pmem leaks (cki-backport-bot) [RHEL-44486] {CVE-2024-38391}
  - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44480] {CVE-2024-36489}
  - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-42714 RHEL-33266] {CVE-2024-26853}
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44404 RHEL-44402] {CVE-2024-33621}
  - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-44404 RHEL-32205]
  - ipvlan: properly track tx_errors (Davide Caratti) [RHEL-44404 RHEL-32205]
  - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-41698 RHEL-39754] {CVE-2024-36941}
  - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-41658 RHEL-37028] {CVE-2024-35845}
  - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-41556 RHEL-37018] {CVE-2024-35852}
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44215] {CVE-2024-38558}
  - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-41520 RHEL-39799] {CVE-2024-36922}
  - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-38754 RHEL-37345] {CVE-2024-35937}
  - ice: fix memory corruption bug with suspend and rebuild (Petr Oros) [RHEL-49858 RHEL-17486] {CVE-2024-35911}
  - ipv6: prevent possible NULL deref in fib6_nh_init() (Hangbin Liu) [RHEL-48182 RHEL-45826] {CVE-2024-40961}
  - netns: Make get_net_ns() handle zero refcount net (Paolo Abeni) [RHEL-48117 RHEL-46610] {CVE-2024-40958}
  - net: do not leave a dangling sk pointer, when socket creation fails (Paolo Abeni) [RHEL-48072 RHEL-46610] {CVE-2024-40954}
  - net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (CKI Backport Bot) [RHEL-47902] {CVE-2024-40928}
  - net: netlink: af_netlink: Prevent empty skb by adding a check on len. (Ivan Vecera) [RHEL-43619 RHEL-30344] {CVE-2021-47606}
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46921] {CVE-2024-39487}
  - nfs: fix panic when nfs4_ff_layout_prepare_ds() fails (Benjamin Coddington) [RHEL-42732 RHEL-34875] {CVE-2024-26868}
  - efi: fix panic in kdump kernel (Steve Best) [RHEL-42920 RHEL-36998] {CVE-2024-35800}
  - ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() (Hangbin Liu) [RHEL-41735 RHEL-31050] {CVE-2024-27417}
  - netfilter: nf_tables: do not compare internal table flags on updates (Florian Westphal) [RHEL-41682 RHEL-33985] {CVE-2024-27065}
  - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-41466 RHEL-39786] {CVE-2024-36903}
  - netfilter: nf_tables: honor table dormant flag from netdev release event path (Florian Westphal) [RHEL-40056 RHEL-33985] {CVE-2024-36005}
  - cifs: fix underflow in parse_server_interfaces() (Paulo Alcantara) [RHEL-34636 RHEL-31245] {CVE-2024-26828}
  - drm/i915/audio: Fix audio time stamp programming for DP (CKI Backport Bot) [RHEL-45843]
  - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-42548 RHEL-38260] {CVE-2023-52864}
  - platform/x86: wmi: remove unnecessary initializations (David Arcari) [RHEL-42548 RHEL-38260] {CVE-2023-52864}
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (CKI Backport Bot) [RHEL-43170] {CVE-2024-36017}
  - netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (Florian Westphal) [RHEL-40062 RHEL-33985] {CVE-2024-26808}
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-39017 RHEL-32372] {CVE-2024-35969}
  - netfilter: nf_tables: flush pending destroy work before exit_net release (Florian Westphal) [RHEL-38765 RHEL-33985] {CVE-2024-35899}
  - vt: fix unicode buffer corruption when deleting characters (Andrew Halaney) [RHEL-42947 RHEL-24205] {CVE-2024-35823}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.31.1.el9_4]
changelog:
  - net: fix __dst_negative_advice() race (CKI Backport Bot) [RHEL-46798] {CVE-2024-36971}
  - net: annotate data-races around sk->sk_dst_pending_confirm (CKI Backport Bot) [RHEL-46798] {CVE-2024-36971}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.32.1.el9_4]
changelog:
  - REDHAT: Makefile, dont reset dist-git-tmp if set (Lucas Zampieri)
  - net/mlx5e: Fix netif state handling (Benjamin Poirier) [RHEL-43872 RHEL-43870] {CVE-2024-38608}
  - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Benjamin Poirier) [RHEL-43872 RHEL-43870] {CVE-2024-38608}
  - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50202 RHEL-50203] {CVE-2024-41091}
  - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50264 RHEL-50265] {CVE-2024-41090}
  - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-43421 RHEL-30023] {CVE-2024-26810}
  - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44299] {CVE-2024-38538}
  - KVM: arm64: Ensure target address is granule-aligned for range TLBI (Sebastian Ott) [RHEL-52248 RHEL-31215]
  - RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (cki-backport-bot) [RHEL-44250] {CVE-2024-38544}
  - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-52082] {CVE-2024-41076}
  - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46421 RHEL-35393] {CVE-2024-39476}
  - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50074]
  - cxl/port: Fix delete_endpoint() vs parent unregistration race (John W. Linville) [RHEL-39290 RHEL-23582] {CVE-2023-52771}
  - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (Petr Oros) [RHEL-49862 RHEL-17486] {CVE-2024-26855}
  - ice: fix LAG and VF lock dependency in ice_reset_vf() (Petr Oros) [RHEL-49820 RHEL-17486] {CVE-2024-36003}
  - net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (Jose Ignacio Tornos Martinez) [RHEL-47992 RHEL-9429] {CVE-2024-40939}
  - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47770] {CVE-2024-40911}
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47788] {CVE-2024-40912}
  - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47920] {CVE-2024-40929}
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48028] {CVE-2024-40941}
  - seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors (Hangbin Liu) [RHEL-48098 RHEL-45826] {CVE-2024-40957}
  - ipv6: fix possible race in __fib6_drop_pcpu_from() (Hangbin Liu) [RHEL-47572 RHEL-45826] {CVE-2024-40905}
  - redhat/configs: Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-39581 RHEL-28760]
  - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-39581 RHEL-28760]
  - drm/mgag200: Fix caching setup for remapped video memory (Scott Weaver) [RHEL-39581 RHEL-24102]
  - Revert "drm/mgag200: Flush the cache to improve latency" (Scott Weaver) [RHEL-39581 RHEL-28760]
  - net: psample: fix flag being set in wrong skb (Adrian Moreno) [RHEL-47275]
  - net: openvswitch: store sampling probability in cb. (Adrian Moreno) [RHEL-47275]
  - net: openvswitch: add psample action (Adrian Moreno) [RHEL-47275]
  - net: psample: allow using rate as probability (Adrian Moreno) [RHEL-47275]
  - net: psample: skip packet copy if no listeners (Adrian Moreno) [RHEL-47275]
  - net: psample: add user cookie (Adrian Moreno) [RHEL-47275]
  - i40e: fix: remove needless retries of NVM update (CKI Backport Bot) [RHEL-48169 RHEL-36692]
  - ice: Reject pin requests with unsupported flags (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: Don't process extts if PTP is disabled (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: Fix improper extts handling (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: stop destroying and reinitalizing Tx tracker during reset (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: factor out ice_ptp_rebuild_owner() (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: rename ice_ptp_tx_cfg_intr (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: don't check has_ready_bitmap in E810 functions (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: rename verify_cached to has_ready_bitmap (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: pass reset type to PTP reset functions (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: introduce PTP state machine (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: make RX HW timestamp reading code more reusable (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: Rename E822 to E82X (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: periodically kick Tx timestamp interrupt (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: Re-enable timestamping correctly after reset (Petr Oros) [RHEL-50388 RHEL-17486]
  - ptp: introduce helpers to adjust by scaled parts per million (Petr Oros) [RHEL-50388 RHEL-17486]
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (Andrew Halaney) [RHEL-42566 RHEL-24205] {CVE-2023-52880}
  - netfilter: complete validation of user input (Phil Sutter) [RHEL-47384 RHEL-37212] {CVE-2024-35962}
  - netfilter: validate user input for expected length (Phil Sutter) [RHEL-41668 RHEL-37212] {CVE-2024-35896}
  - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-40051 RHEL-39719] {CVE-2024-36025}
  - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-37615 RHEL-33260] {CVE-2024-26908}
  - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Prarit Bhargava) [RHEL-37615 RHEL-25415]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.33.1.el9_4]
changelog:
  - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44287] {CVE-2024-38540}
  - netfilter: flowtable: validate pppoe header (Florian Westphal) [RHEL-44430 RHEL-33469] {CVE-2024-27016}
  - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44116] {CVE-2024-38579}
  - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51035 RHEL-51033] {CVE-2024-41041}
  - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Florian Westphal) [RHEL-42832 RHEL-33985] {CVE-2024-27019}
  - netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV (Florian Westphal) [RHEL-42832 RHEL-33985]
  - netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj() (Florian Westphal) [RHEL-42832 RHEL-33985]
  - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Florian Westphal) [RHEL-41802 RHEL-33985] {CVE-2024-26925}
  - netfilter: nf_tables: discard table flag update with pending basechain deletion (Florian Westphal) [RHEL-40231 RHEL-33985] {CVE-2024-35897}
  - netfilter: nf_tables: reject table flag and netdev basechain updates (Florian Westphal) [RHEL-40231 RHEL-33985]
  - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-42966 RHEL-37040] {CVE-2024-35839}
  - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-42966 RHEL-37040] {CVE-2024-35839}
  - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-42966 RHEL-37040] {CVE-2024-35839}
  - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-42966 RHEL-37040] {CVE-2024-35839}
  - netfilter: nft_limit: reject configurations that cause integer overflow (Florian Westphal) [RHEL-40065 RHEL-33985] {CVE-2024-26668}
  - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48339] {CVE-2024-40978}
  - mm/huge_memory: don't unpoison huge_zero_folio (Aristeu Rozanski) [RHEL-47804] {CVE-2024-40914}
  - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48375 RHEL-6118] {CVE-2024-40983}
  - netfilter: nft_set_rbtree: skip end interval element from gc (Florian Westphal) [RHEL-41265] {CVE-2024-26581}
  - nvmet: fix a possible leak when destroy a ctrl during qp establishment (CKI Backport Bot) [RHEL-52021 RHEL-52019 RHEL-52020] {CVE-2024-42152}
  - net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (CKI Backport Bot) [RHEL-51756] {CVE-2024-42110}
  - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Florian Westphal) [RHEL-40265 RHEL-33985] {CVE-2024-35898}
  - netfilter: br_netfilter: remove WARN traps (CKI Backport Bot) [RHEL-42882] {CVE-2024-27415}
  - netfilter: br_netfilter: skip conntrack input hook for promisc packets (CKI Backport Bot) [RHEL-42882] {CVE-2024-27415}
  - netfilter: bridge: confirm multicast packets before passing them up the stack (CKI Backport Bot) [RHEL-42882] {CVE-2024-27415}
  - netfilter: nf_conntrack_bridge: initialize err to 0 (CKI Backport Bot) [RHEL-42882] {CVE-2024-27415}
  - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Florian Westphal) [RHEL-42842 RHEL-33985] {CVE-2024-27020}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.34.1.el9_4]
changelog:
  - mm: prevent derefencing NULL ptr in pfn_section_valid() (Jarod Wilson) [RHEL-51140 RHEL-51138] {CVE-2024-41055}
  - mm, kmsan: fix infinite recursion due to RCU critical section (Jarod Wilson) [RHEL-51140 RHEL-51138] {CVE-2024-41055}
  - ppp: reject claimed-as-LCP but actually malformed packets (CKI Backport Bot) [RHEL-51061 RHEL-51059] {CVE-2024-41044}
  - x86: stop playing stack games in profile_pc() (CKI Backport Bot) [RHEL-51651] {CVE-2024-42096}
  - PCI/MSI: Fix UAF in msi_capability_init (CKI Backport Bot) [RHEL-51438] {CVE-2024-41096}
  - iommufd: Fix missing update of domains_itree after splitting iopt_area (Jerry Snitselaar) [RHEL-42518 RHEL-28780] {CVE-2023-52801}
  - mm: cachestat: fix folio read-after-free in cache walk (Nico Pache) [RHEL-41739 RHEL-5619] {CVE-2024-26630}
  - regmap: maple: Fix cache corruption in regcache_maple_drop() (Jaroslav Kysela) [RHEL-43179 RHEL-39706] {CVE-2024-36019}
  - mm: cachestat: fix two shmem bugs (Nico Pache) [RHEL-36912] {CVE-2024-35797}
  - kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address (Steve Best) [RHEL-42778 RHEL-34985] {CVE-2024-26946}
  - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-43132 RHEL-37467] {CVE-2024-36000}
  - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52675 RHEL-50366]
  - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52675 RHEL-50366]
  - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52675 RHEL-50366]
  - gpio: tegra186: Fix tegra186_gpio_is_accessible() check (Charles Mirabile) [RHEL-49347 RHEL-32452]
  - net/sched: Fix UAF when resolving a clash (CKI Backport Bot) [RHEL-51022 RHEL-51020] {CVE-2024-41040}
  - KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() (Maxim Levitsky) [RHEL-41462 RHEL-32430] {CVE-2024-35791}
  - cxl/region: Fix memregion leaks in devm_cxl_add_region() (John W. Linville) [RHEL-47965 RHEL-23582] {CVE-2024-40936}
  - x86/coco: Require seeding RNG with RDRAND on CoCo systems (Lenny Szubowicz) [RHEL-42986 RHEL-37269] {CVE-2024-35875}
  - scsi: qedf: Ensure the copied buf is NUL terminated (cki-backport-bot) [RHEL-44203] {CVE-2024-38559}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.35.1.el9_4]
changelog:
  - usb-storage: alauda: Check whether the media is initialized (CKI Backport Bot) [RHEL-43716] {CVE-2024-38619}
  - ceph: force sending a cap update msg back to MDS for revoke op (Xiubo Li) [RHEL-55437]
  - ceph: periodically flush the cap releases (Xiubo Li) [RHEL-55437]
  - mm: avoid overflows in dirty throttling logic (Jay Shin) [RHEL-51848 RHEL-50004] {CVE-2024-42131}
  - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Jay Shin) [RHEL-51701 RHEL-50004] {CVE-2024-42102}
  - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Jay Shin) [RHEL-42628 RHEL-5619] {CVE-2024-26720}
  - net: fix out-of-bounds access in ops_init (Paolo Abeni) [RHEL-43188 RHEL-46610] {CVE-2024-36883}
  - nvme: avoid double free special payload (CKI Backport Bot) [RHEL-51311] {CVE-2024-41073}
  - kernfs: change kernfs_rename_lock into a read-write lock (Jay Shin) [RHEL-55253 RHEL-52956]
  - kernfs: Separate kernfs_pr_cont_buf and rename_lock (Jay Shin) [RHEL-55253 RHEL-52956]
  - kernfs: fix missing kernfs_iattr_rwsem locking (Jay Shin) [RHEL-55253 RHEL-52956]
  - kernfs: Use a per-fs rwsem to protect per-fs list of kernfs_super_info (Jay Shin) [RHEL-55253 RHEL-52956]
  - kernfs: Introduce separate rwsem to protect inode attributes (Jay Shin) [RHEL-55253 RHEL-52956]
  - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47894 RHEL-47892] {CVE-2024-40927}
  - Bluetooth: af_bluetooth: Fix deadlock (Bastien Nocera) [RHEL-34161] {CVE-2024-26886}
  - xdp: Remove WARN() from __xdp_reg_mem_model() (CKI Backport Bot) [RHEL-51586] {CVE-2024-42082}
  - nfsd: don't take fi_lock in nfsd_break_deleg_cb() (Benjamin Coddington) [RHEL-42578 RHEL-34875]
  - nfsd: fix RELEASE_LOCKOWNER (Benjamin Coddington) [RHEL-42578 RHEL-34875] {CVE-2024-26629}
  - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (CKI Backport Bot) [RHEL-43729 RHEL-43727]
  - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (CKI Backport Bot) [RHEL-43729 RHEL-43727]
  - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43729] {CVE-2024-36979}
  - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-42343 RHEL-26588] {CVE-2023-52463}
  - ACPI: arm64: export acpi_arch_thermal_cpufreq_pctg() (Charles Mirabile) [RHEL-34234 RHEL-1697]
  - ACPI: processor: reduce CPUFREQ thermal reduction pctg for Tegra241 (Charles Mirabile) [RHEL-34234 RHEL-1697]
  - ACPI: thermal: Add Thermal fast Sampling Period (_TFP) support (Scott Weaver) [RHEL-34234 RHEL-1697]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.36.1.el9_4]
changelog:
  - scsi: qla2xxx: Fix double free of fcport (Nilesh Javali) [RHEL-39547 RHEL-40034 RHEL-25184 RHEL-35020] {CVE-2024-26929}
  - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Nilesh Javali) [RHEL-39547 RHEL-41325 RHEL-25184 RHEL-35016] {CVE-2024-26930}
  - scsi: qla2xxx: Fix command flush on cable pull (Nilesh Javali) [RHEL-39547 RHEL-40029 RHEL-25184 RHEL-35012] {CVE-2024-26931}
  - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (Benjamin Coddington) [RHEL-53708 RHEL-53004] {CVE-2024-42246}
  - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-56275 RHEL-56084]
  - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52368] {CVE-2024-42225}
  - cppc_cpufreq: Fix possible null pointer dereference (cki-backport-bot) [RHEL-44145] {CVE-2024-38573}
  - ring-buffer: Fix a race between readers and resize checks (cki-backport-bot) [RHEL-43920] {CVE-2024-38601}
  - fork: defer linking file vma until vma is fully initialized (Rafael Aquini) [RHEL-35617 RHEL-35022] {CVE-2024-27022}
  - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48393 RHEL-48391] {CVE-2024-40984}
  - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes (Maxim Levitsky) [RHEL-41345 RHEL-32430] {CVE-2024-26991}
  - net/sched: act_mirred: don't override retval if we already lost the skb (Davide Caratti) [RHEL-42644 RHEL-31724] {CVE-2024-26739}
  - net/sched: act_mirred: Create function tcf_mirred_to_dev and improve readability (Davide Caratti) [RHEL-42644 RHEL-32137]
  - cpufreq: exit() callback is optional (cki-backport-bot) [RHEL-43848] {CVE-2024-38615}
  - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44157 RHEL-44155] {CVE-2024-38570}
  - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44157 RHEL-44155] {CVE-2024-38570}
  - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44157 RHEL-44155] {CVE-2024-38570}
  - wifi: nl80211: Avoid address calculations via out of bounds array indexing (Jose Ignacio Tornos Martinez) [RHEL-46505 RHEL-34696] {CVE-2024-38562}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.37.1.el9_4]
changelog:
  - ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses (CKI Backport Bot) [RHEL-42783] {CVE-2024-26947}
  - powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV (Mamatha Inamdar) [RHEL-45537 RHEL-25055]
  - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-40517 RHEL-39354] {CVE-2024-36016}
  - smb: client: set correct id, uid and cruid for multiuser automounts (Jay Shin) [RHEL-47260 RHEL-31245]
  - printk: printk.c: Disable per_console_kthreads on !CONFIG_PREEMPT_RT (Derek Barbosa) [RHEL-39064]
  - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-41275 RHEL-26233] {CVE-2023-52439}
  - gpiolib: cdev: Fix use after free in lineinfo_changed_notify (Steve Best) [RHEL-43192 RHEL-39849] {CVE-2024-36899}
  - wifi: mac80211: Avoid address calculations via out of bounds array indexing (CKI Backport Bot) [RHEL-51287 RHEL-51285] {CVE-2024-41071}
  - Input: cyapa - add missing input core locking to suspend/resume functions (cki-backport-bot) [RHEL-44455] {CVE-2023-52884}
  - net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Limit number of driver warning messages (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Fix race condition in disconnect handling (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Fix race conditions in suspend/resume handling (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Fix partial packet errors on suspend/resume (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Add missing return code checks (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Remove unused pause frame queue (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Set flow control threshold to prevent packet loss (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Remove unused timer (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Fix white space and style issues (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - sctp: fix association labeling in the duplicate COOKIE-ECHO case (CKI Backport Bot) [RHEL-56745 RHEL-48647]
  - ice: xsk: fix txq interrupt mapping (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: add missing WRITE_ONCE when clearing ice_rx_ring::xdp_prog (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: improve updating ice_{t,r}x_ring::xsk_pool (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: toggle netif_carrier when setting up XSK pool (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: modify error handling when setting XSK pool in ndo_bpf (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: replace synchronize_rcu with synchronize_net (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: don't busy wait for Rx queue disable in ice_qp_dis() (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: respect netif readiness in AF_XDP ZC related ndo's (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: remove af_xdp_zc_qps bitmap (Petr Oros) [RHEL-52771 RHEL-17486]
  - ice: reorder disabling IRQ and NAPI in ice_qp_dis (Petr Oros) [RHEL-52771 RHEL-17486]
  - ice: make ice_vsi_cfg_txq() static (Petr Oros) [RHEL-52771 RHEL-17486]
  - ice: make ice_vsi_cfg_rxq() static (Petr Oros) [RHEL-52771 RHEL-17486]
  - ice: make use of DEFINE_FLEX() for struct ice_aqc_add_tx_qgrp (Petr Oros) [RHEL-52771 RHEL-17486]
  - xdp: reflect tail increase for MEM_TYPE_XSK_BUFF_POOL (Petr Oros) [RHEL-52771 RHEL-38863]
  - ice: update xdp_rxq_info::frag_size for ZC enabled Rx queue (Petr Oros) [RHEL-52771 RHEL-38863]
  - intel: xsk: initialize skb_frag_t::bv_offset in ZC drivers (Petr Oros) [RHEL-52771 RHEL-38863]
  - ice: remove redundant xdp_rxq_info registration (Petr Oros) [RHEL-52771 RHEL-38863]
  - ice: work on pre-XDP prog frag count (Petr Oros) [RHEL-52771 RHEL-38863]
  - xsk: fix usage of multi-buffer BPF helpers for ZC XDP (Petr Oros) [RHEL-52771 RHEL-38863]
  - xsk: make xsk_buff_pool responsible for clearing xdp_buff::flags (Petr Oros) [RHEL-52771 RHEL-38863]
  - xsk: recycle buffer in case Rx queue was full (Petr Oros) [RHEL-52771 RHEL-38863]
  - overflow: add DEFINE_FLEX() for on-stack allocs (Petr Oros) [RHEL-52771 RHEL-30138]
  - overflow: Add struct_size_t() helper (Petr Oros) [RHEL-52771 RHEL-30138]
  - bpf, sockmap: Prevent lock inversion deadlock in map delete elem (Felix Maurer) [RHEL-41479 RHEL-30107] {CVE-2024-35895}
  - xfs: allow SECURE namespace xattrs to use reserved block pool (CKI Backport Bot) [RHEL-54443 RHEL-49806]
  - platform/x86/intel-uncore-freq: Don't present root domain on error (David Arcari) [RHEL-43291 RHEL-38558]
  - platform/x86/intel-uncore-freq: Increase minor number support (David Arcari) [RHEL-43291 RHEL-38558]
  - platform/x86/intel-uncore-freq: Process read/write blocked feature status (David Arcari) [RHEL-43291 RHEL-38558]
  - platform/x86/intel/tpmi: Move TPMI ID definition (Steve Best) [RHEL-43291 RHEL-35956]
  - ice: fix VSI lists confusion when adding VLANs (CKI Backport Bot) [RHEL-57778 RHEL-20571]
  - ice: fix accounting for filters shared by multiple VSIs (CKI Backport Bot) [RHEL-57778 RHEL-20571]
  - ice: fix accounting if a VLAN already exists (CKI Backport Bot) [RHEL-57778 RHEL-17486]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.38.1.el9_4]
changelog:
  - module: avoid allocation if module is already present and ready (Donald Dutile) [RHEL-52417]
  - module: move early sanity checks into a helper (Donald Dutile) [RHEL-52417]
  - module: extract patient module check into helper (Donald Dutile) [RHEL-52417]
  - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-58636 RHEL-39662]
  - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-58636 RHEL-39662]
  - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (cki-backport-bot) [RHEL-43472] {CVE-2024-36978}
  - netfilter: nft_flow_offload: release dst in case direct xmit path is used (Florian Westphal) [RHEL-38520 RHEL-33469]
  - netfilter: nft_flow_offload: reset dst in route object after setting up flow (Florian Westphal) [RHEL-38520 RHEL-33469] {CVE-2024-27403}
  - netfilter: flowtable: simplify route logic (Florian Westphal) [RHEL-38520 RHEL-33469]
  - net: psample: fix uninitialized metadata. (Adrian Moreno) [RHEL-56909]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.39.1.el9_4]
changelog:
  - mptcp: ensure snd_nxt is properly initialized on connect (cki-backport-bot) [RHEL-52474 RHEL-39867] {CVE-2024-36889}
  - ping: fix address binding wrt vrf (Antoine Tenart) [RHEL-57563 RHEL-50920]
  - net/mlx5: Add a timeout to acquire the command queue semaphore (Benjamin Poirier) [RHEL-44227 RHEL-44225] {CVE-2024-38556}
  - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48142 RHEL-48140] {CVE-2024-40959}
  - ionic: fix use after netif_napi_del() (Michal Schmidt) [RHEL-47636 RHEL-47634] {CVE-2024-39502}
  - ionic: clean interrupt before enabling queue to avoid credit race (Michal Schmidt) [RHEL-47636 RHEL-36065]
  - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Benjamin Poirier) [RHEL-42391 RHEL-24466] {CVE-2023-52658}
  - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55075 RHEL-55074] {CVE-2024-42284}
  - x86: set FSRS automatically on AMD CPUs that have FSRM (Prarit Bhargava) [RHEL-56970 RHEL-25415]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.40.1.el9_4]
changelog:
  - gfs2: Fix NULL pointer dereference in gfs2_log_flush (CKI Backport Bot) [RHEL-51561 RHEL-51559] {CVE-2024-42079}
  - net: stmmac: Separate C22 and C45 transactions for xgmac (CKI Backport Bot) [RHEL-60274 RHEL-6297]
  - dmaengine: idxd: Check for driver name match before sva user feature (Jerry Snitselaar) [RHEL-47239 RHEL-44836 RHEL-46619]
  - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-57609 RHEL-26722]
  - KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked (CKI Backport Bot) [RHEL-46428] {CVE-2024-39483}
  - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-60567 RHEL-46609]
  - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-60567 RHEL-46609]
  - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - redhat/configs: Enable x86 CONFIG_MITIGATION_RFDS (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - KVM/VMX: Move VERW closer to VMentry for MDS mitigation (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/entry: Harden return-to-user (Prarit Bhargava) [RHEL-48713 RHEL-25415]
  - x86/entry: Optimize common_interrupt_return() (Prarit Bhargava) [RHEL-48713 RHEL-25415]
  - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - sched: act_ct: take care of padding in struct zones_ht_key (Xin Long) [RHEL-55112 RHEL-50682] {CVE-2024-42272}
  - sched: act_ct: add netns into the key of tcf_ct_flow_table (Xin Long) [RHEL-55112 RHEL-28816]
  - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (CKI Backport Bot) [RHEL-41361] {CVE-2024-35989}
  - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-42115 RHEL-37721] {CVE-2021-47385}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.41.1.el9_4]
changelog:
  - iommu/amd: Fix panic accessing amd_iommu_enable_faulting (Jerry Snitselaar) [RHEL-55507 RHEL-37320 RHEL-40344]
  - iommu/vt-d: Allocate DMAR fault interrupts locally (Jerry Snitselaar) [RHEL-55507 RHEL-28780]
  - netfilter: nft_inner: validate mandatory meta and payload (Phil Sutter) [RHEL-47488 RHEL-47486] {CVE-2024-39504}
  - netfilter: flowtable: initialise extack before use (CKI Backport Bot) [RHEL-58546 RHEL-58544] {CVE-2024-45018}
  - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48285 RHEL-48282] {CVE-2024-40972}
  - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48285 RHEL-48282] {CVE-2024-40972}
  - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48519 RHEL-48517] {CVE-2024-40998}
  - ext4: turn quotas off if mount failed after enabling quotas (Carlos Maiolino) [RHEL-48519 RHEL-48517] {CVE-2024-40998}
  - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-59920 RHEL-32669] {CVE-2024-26826}
  - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50864 RHEL-50862] {CVE-2024-41014}
  - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Davide Caratti) [RHEL-42771 RHEL-33410]
  - af_unix: Fix garbage collector racing against connect() (Davide Caratti) [RHEL-42771 RHEL-33410] {CVE-2024-26923}
  - af_unix: fix lockdep positive in sk_diag_dump_icons() (Davide Caratti) [RHEL-42771 RHEL-33410]
  - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50887 RHEL-50885] {CVE-2024-41013}
  - ipv6: prevent possible NULL dereference in rt6_probe() (Hangbin Liu) [RHEL-48161 RHEL-45826] {CVE-2024-40960}
  - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-42795 RHEL-34969] {CVE-2024-26961}
  - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47945 RHEL-47943] {CVE-2024-40931}
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47560 RHEL-47558] {CVE-2024-40904}
  - nvme-multipath: fix io accounting on failover (John Meneghini) [RHEL-59646 RHEL-56635]
  - nvme: fix multipath batched completion accounting (John Meneghini) [RHEL-59646 RHEL-56635]
  - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46481 RHEL-46479] {CVE-2024-39472}
  - tcp: add sanity checks to rx zerocopy (Paolo Abeni) [RHEL-58403 RHEL-29496] {CVE-2024-26640}
  - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49373 RHEL-49371] {CVE-2024-41005}
  - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48321 RHEL-48319] {CVE-2024-40977}
  - smb: client: fix hang in wait_for_response() for negproto (Jay Shin) [RHEL-61606 RHEL-57983]
  - NFSv4.1/pnfs: fix NFS with TLS in pnfs (Benjamin Coddington) [RHEL-61467 RHEL-34576]
  - ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [RHEL-61415 RHEL-60255]
  - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Davide Caratti) [RHEL-48483 RHEL-44375] {CVE-2024-40995}
  - net/sched: taprio: extend minimum interval restriction to entire cycle too (Davide Caratti) [RHEL-44377 RHEL-44375] {CVE-2024-36244}
  - net/sched: taprio: make q->picos_per_byte available to fill_sched_entry() (Davide Caratti) [RHEL-44377 RHEL-44375] {CVE-2024-36244}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.42.1.el9_4]
changelog:
  - redhat/configs: Add CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - KVM: x86: Add BHI_NO (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - KVM: x86: Use a switch statement and macros in __feature_translate() (Maxim Levitsky) [RHEL-45492 RHEL-32430]
  - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Maxim Levitsky) [RHEL-45492 RHEL-32430]
  - x86/entry/32: Convert do_fast_syscall_32() to bool return type (Prarit Bhargava) [RHEL-45492 RHEL-25415]
  - x86/entry: Add do_SYSENTER_32() prototype (Prarit Bhargava) [RHEL-45492 RHEL-25415]
  - x86/bugs: Reset speculation control settings on init (Prarit Bhargava) [RHEL-45492 RHEL-25415]
  - mpls: Reduce skb re-allocations due to skb_cow() (Guillaume Nault) [RHEL-61696 RHEL-55145]
  - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-39539 RHEL-39601 RHEL-33543 RHEL-35000] {CVE-2024-26935}
  - tty: Fix out-of-bound vmalloc access in imageblit (Andrew Halaney) [RHEL-42095 RHEL-24205] {CVE-2021-47383}
  - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54769 RHEL-54768] {CVE-2024-43854}
  - block: cleanup bio_integrity_prep (Ming Lei) [RHEL-54769 RHEL-25988]
  - block: refactor to use helper (Ming Lei) [RHEL-54769 RHEL-25988]
  - ceph: fix cap ref leak via netfs init_request (Patrick Donnelly) [RHEL-62666 RHEL-61459]
  - redhat/configs: Enable CONFIG_OCTEON_EP_VF (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: add ethtool support (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: add Tx/Rx processing and interrupt support (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: add support for ndo ops (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: add Tx/Rx ring resource setup and cleanup (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: add VF-PF mailbox communication. (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: add hardware configuration APIs (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: Add driver framework and device initialization (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep: support firmware notifications for VFs (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep: control net framework to support VF offloads (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep: PF-VF mailbox version support (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep: add PF-VF mailbox communication (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Chris von Recklinghausen) [RHEL-62209 RHEL-26268]
  - netfilter: nfnetlink_queue: un-break NF_REPEAT (Phil Sutter) [RHEL-62299]


