# changelog

author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-304.171.1.el8uek]
changelog:
  - kpcimgr: assign CPU to handle PCIE transactions during kexec (Joe Dobosenski)  [Orabug: 37295980]
  - kexec: update start address for LPI table data (Joe Dobosenski)  [Orabug: 37295980]
  - kpcimgr: fix flush_icache_range arguments (Joe Dobosenski)  [Orabug: 37295980]
  - embedded2: Enable CONFIG_SQUASHFS_ZSTD to support zstd compression (Joe Dobosenski)  [Orabug: 37295980]
  - embedded2: Support booting an encrypted root filesystem (Joe Dobosenski)  [Orabug: 37295980]
  - Update embedded2 config for UEK7 (Joe Dobosenski)  [Orabug: 37295980]
  - Pensando: kernel config changes for kdump (Rob Gardner)  [Orabug: 34091165] [Orabug: 37295980]
  - arm64: Reserve elfcorehdr before scanning reserved memory from device tree (Joe Dobosenski)  [Orabug: 37295980]
  - arm64: kexec: add support for kexec with spin-table (Henry Willard)  [Orabug: 32549965] [Orabug: 37295980]
  - drivers/soc/pensando/cap_mem.c: Support DM region mapping. (David Clear)  [Orabug: 37295980]
  - drivers/edac: elba: Support multiple DDR bypass ranges. (David Clear)  [Orabug: 37295980]
  - mmc: sdhci-cadence: Enable host driver defined bounce buffer (Brad Larson)  [Orabug: 37295980]
  - Fix NULL pointer dereference in cn_filter() (Anjali Kulkarni)  [Orabug: 37280567]
  - selftests: connector: Fix input argument error paths to skip (Shuah Khan)  [Orabug: 37280567]
  - connector/cn_proc: Selftest for proc connector (Anjali Kulkarni)  [Orabug: 37280567]
  - connector/cn_proc: Allow non-root users access (Anjali Kulkarni)  [Orabug: 37280567]
  - connector/cn_proc: Performance improvements (Anjali Kulkarni)  [Orabug: 37280567]
  - connector/cn_proc: Add filtering to fix some bugs (Anjali Kulkarni)  [Orabug: 37280567]
  - netlink: Add new netlink_release function (Anjali Kulkarni)  [Orabug: 37280567]
  - ice: Add netif_device_attach/detach into PF reset flow (Dawid Osuchowski)  [Orabug: 37214589] {CVE-2024-46770}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-304.171.2.el8uek]
changelog:
  - uek-rpm: Add mstflint_access module to the core list (Thomas Tai)  [Orabug: 37345530]
  - uek-rpm/ol8/config-aarch64-emb3: Enable CONFIG_ARM_SDE_INTERFACE (Thomas Tai)  [Orabug: 37345530]
  - sunrpc: fix a NULL deref in svc_process() when ->sv_stats doesn't exist (Calum Mackay)  [Orabug: 37329531]
  - Partial revert "rds: Add inc/frag cache statistics" (Hans Westgaard Ry)  [Orabug: 37232315]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-304.171.3.el8uek]
changelog:
  - build: populate modules_thick.builtin for dirs containing only modules (Nick Alcock)  [Orabug: 37381702]
  - mtd: fix use-after-free in mtd release (Alexander Usyskin)  [Orabug: 37371929]
  - mtd: Clean refcounting with MTD_PARTITIONED_MASTER (Miquel Raynal)  [Orabug: 37371929]
  - mtd: call external _get and _put in right order (Alexander Usyskin)  [Orabug: 37371929]
  - nvmem: core: Check input parameter for NULL in nvmem_unregister() (Andy Shevchenko)  [Orabug: 37371929]
  - Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume" (Sherry Yang)  [Orabug: 37364544]
  - x86/pkeys: Ensure updated PKRU value is XRSTOR'd (Aruna Ramakrishna)  [Orabug: 37361290]
  - x86/pkeys: Change caller of update_pkru_in_sigframe() (Aruna Ramakrishna)  [Orabug: 37361290]
  - cgroup: cgroup-v1: do not exclude cgrp_dfl_root (Vishal Verma)  [Orabug: 37347419]
  - mm/memcontrol: Fix memcg stat calculation (Aruna Ramakrishna)  [Orabug: 37306542]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-304.171.4.el8uek]
changelog:
  - Revert "unicode: Don't special case ignorable code points" (Linus Torvalds)
  - Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K" (Aurelien Jarno)
  - tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (Kuniyuki Iwashima) [Orabug: 37434606] {CVE-2024-53206}
  - lib/buildid: Fix build ID parsing logic (Jiri Olsa)
  - powerpc/vdso: Flag VDSO64 entry points as functions (Christophe Leroy)
  - mm: krealloc: Fix MTE false alarm in __do_krealloc (Qun-Wei Lin) [Orabug: 37331938] {CVE-2024-53097}
  - Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown" (Jarosław Janik)
  - usb: dwc3: fix fault at system suspend if device was already runtime suspended (Roger Quadros) [Orabug: 37304834] {CVE-2024-53070}
  - ACPI: PRM: Clean up guid type in struct prm_handler_info (Dan Carpenter)
  - RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() (Junxian Huang) [Orabug: 37434622] {CVE-2024-53226}
  - mm: revert "mm: shmem: fix data-race in shmem_getattr()" (Andrew Morton)
  - ACPI: CPPC: Fix _CPC register setting issue (Lifeng Zheng)
  - scsi: qla2xxx: Fix abort in bsg timeout (Quinn Tran)
  - drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (Antonio Quartulli) [Orabug: 37304753] {CVE-2024-53060}
  - RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (Kashyap Desai)
  - vhost_scsi: log write descriptors (Dongli Zhang)  [Orabug: 37393531]
  - vhost-scsi: protect vq->log_base with vq->mutex (Dongli Zhang)  [Orabug: 37393531]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-304.171.4.1.el8uek]
changelog:
  - NFS/pnfs: Fix a live lock between recalled layouts and layoutget (Trond Myklebust)  [Orabug: 37487056]  
  - NFSv4/pNFS: Do layout state recovery upon reboot (Trond Myklebust)  [Orabug: 37487056]  
  - NFSv4/pNFS: Remove redundant call to unhash the layout (Trond Myklebust)  [Orabug: 37487056]  
  - NFSv4/pnfs: Give nfs4_proc_layoutreturn() a flags argument (Trond Myklebust)  [Orabug: 37487056]  
  - NFSv4/pNFS: Retry the layout return later in case of a timeout or reboot (Trond Myklebust)  [Orabug: 37487056]  
  - NFSv4/pNFS: Handle server reboots in pnfs_poc_release() (Trond Myklebust)  [Orabug: 37487056]  
  - NFSv4/pNFS: Add a helper to defer failed layoutreturn calls (Trond Myklebust)  [Orabug: 37487056]  
  - NFSv4/pnfs: Add support for the PNFS_LAYOUT_FILE_BULK_RETURN flag (Trond Myklebust)  [Orabug: 37487056]  
  - pNFS: Add a flag argument to pnfs_destroy_layouts_byclid() (Trond Myklebust)  [Orabug: 37487056]  
  - NFSv4: Clean up encode_nfs4_stateid() (Trond Myklebust)  [Orabug: 37487056]  
  - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust)  [Orabug: 37487056]  
  - NFSv4/pnfs: Remove redundant list check (Trond Myklebust)  [Orabug: 37487056]  
  - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Trond Myklebust)  [Orabug: 37487056]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-304.171.4.1.el8uek]
changelog:
  - NFS/pnfs: Fix a live lock between recalled layouts and layoutget (Trond Myklebust)  [Orabug: 37487056]
  - NFSv4/pNFS: Do layout state recovery upon reboot (Trond Myklebust)  [Orabug: 37487056]
  - NFSv4/pNFS: Remove redundant call to unhash the layout (Trond Myklebust)  [Orabug: 37487056]
  - NFSv4/pnfs: Give nfs4_proc_layoutreturn() a flags argument (Trond Myklebust)  [Orabug: 37487056]
  - NFSv4/pNFS: Retry the layout return later in case of a timeout or reboot (Trond Myklebust)  [Orabug: 37487056]
  - NFSv4/pNFS: Handle server reboots in pnfs_poc_release() (Trond Myklebust)  [Orabug: 37487056]
  - NFSv4/pNFS: Add a helper to defer failed layoutreturn calls (Trond Myklebust)  [Orabug: 37487056]
  - NFSv4/pnfs: Add support for the PNFS_LAYOUT_FILE_BULK_RETURN flag (Trond Myklebust)  [Orabug: 37487056]
  - pNFS: Add a flag argument to pnfs_destroy_layouts_byclid() (Trond Myklebust)  [Orabug: 37487056]
  - NFSv4: Clean up encode_nfs4_stateid() (Trond Myklebust)  [Orabug: 37487056]
  - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust)  [Orabug: 37487056]
  - NFSv4/pnfs: Remove redundant list check (Trond Myklebust)  [Orabug: 37487056]
  - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Trond Myklebust)  [Orabug: 37487056]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-304.171.4.2.el8uek]
changelog:
  - PCI: Fix pci_enable_acs() support for the ACS quirks (Jason Gunthorpe)  [Orabug: 37492139]
  - PCI: Clear Secondary Status errors after enumeration (Vidya Sagar)  [Orabug: 37492139]
  - PCI/AER: Configure ECRC only if AER is native (Vidya Sagar)  [Orabug: 37492139]
  - PCI: Extend ACS configurability (Vidya Sagar)  [Orabug: 37492139]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-304.171.4.3.el8uek]
changelog:
  - NFSD: Limit the number of concurrent async COPY operations (Chuck Lever)  [Orabug: 37516381]  {CVE-2024-49974} 
  - NFSD: Async COPY result needs to return a write verifier (Chuck Lever)  [Orabug: 37516381]  {CVE-2024-49974} 
  - security/keys: fix slab-out-of-bounds in key_task_permission (Chen Ridong)  [Orabug: 37516370]  {CVE-2024-50301} 
  - macsec: Fix use-after-free while sending the offloading packet (Jianbo Liu)  [Orabug: 37516375]  {CVE-2024-50261}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-304.171.4.el8uek]
changelog:
  - Revert "unicode: Don't special case ignorable code points" (Linus Torvalds)   
  - Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K" (Aurelien Jarno)   
  - tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (Kuniyuki Iwashima)   
  - lib/buildid: Fix build ID parsing logic (Jiri Olsa)   
  - powerpc/vdso: Flag VDSO64 entry points as functions (Christophe Leroy)   
  - mm: krealloc: Fix MTE false alarm in __do_krealloc (Qun-Wei Lin)   
  - Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown" (Jarosław Janik)   
  - usb: dwc3: fix fault at system suspend if device was already runtime suspended (Roger Quadros)   
  - ACPI: PRM: Clean up guid type in struct prm_handler_info (Dan Carpenter)   
  - RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() (Junxian Huang)   
  - mm: revert "mm: shmem: fix data-race in shmem_getattr()" (Andrew Morton)   
  - ACPI: CPPC: Fix _CPC register setting issue (Lifeng Zheng)   
  - scsi: qla2xxx: Fix abort in bsg timeout (Quinn Tran)   
  - drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (Antonio Quartulli)   
  - RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (Kashyap Desai)   
  - vhost_scsi: log write descriptors (Dongli Zhang)  [Orabug: 37393531]  
  - vhost-scsi: protect vq->log_base with vq->mutex (Dongli Zhang)  [Orabug: 37393531]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-305.171.1.el8uek]
changelog:
  - octeontx2-af: Fix CPT AF register offset calculation (Bharat Bhushan)  [Orabug: 37445471]
  - perf/arm-cmn: Remove for loop intial declarations (Dave Kleikamp)  [Orabug: 37409090]
  - perf/arm-cmn: Ensure port and device id bits are set properly (Namhyung Kim)  [Orabug: 37409090]
  - perf/arm-cmn: Improve format attr printing (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Clean up unnecessary NUMA_NO_NODE check (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Support CMN S3 (Robin Murphy)  [Orabug: 37409090]
  - dt-bindings: perf: arm-cmn: Add CMN S3 (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Refactor DTC PMU register access (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Make cycle counts less surprising (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Improve build-time assertion (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Ensure dtm_idx is big enough (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Fix CCLA register offset (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Refactor node ID handling. Again. (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Enable support for tertiary match group (Ilkka Koskinen)  [Orabug: 37409090]
  - perf/arm-cmn: Decouple wp_config registers from filter group number (Ilkka Koskinen)  [Orabug: 37409090]
  - perf/arm-cmn: Workaround AmpereOneX errata AC04_MESH_1 (incorrect child count) (Ilkka Koskinen)  [Orabug: 37409090]
  - perf/arm-cmn: Improve debugfs pretty-printing for large configs (Robin Murphy)  [Orabug: 37409090]
  - perf: arm-cmn: Convert to platform remove callback returning void (Uwe Kleine-König)  [Orabug: 37409090]
  - perf/arm-cmn: Fail DTC counter allocation correctly (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Fix HN-F class_occup_id events (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Enable per-DTC counter allocation (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Rework DTC counters (again) (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Fix DTC domain detection (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Add CMN-700 r3 support (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Refactor HN-F event selector macros (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Remove spurious event aliases (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Add sysfs identifier (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Revamp model detection (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Fix port detection for CMN-700 (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Validate cycles events fully (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Move overlapping wp_combine field (Ilkka Koskinen)  [Orabug: 37409090]
  - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Reset DTM_PMU_CONFIG at probe (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Decode CAL devices properly in debugfs (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Fix filter_sel lookup (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Add CMN-700 support (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Refactor occupancy filter selector (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Add CMN-650 support (Robin Murphy)  [Orabug: 37409090]
  - dt-bindings: perf: arm-cmn: Add CMN-650 and CMN-700 (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Update watchpoint format (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Hide XP PUB events for CMN-600 (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Make arm_cmn_debugfs static (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Add debugfs topology info (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Add CI-700 Support (Robin Murphy)  [Orabug: 37409090]
  - dt-bindings: perf: arm-cmn: Add CI-700 (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Support new IP features (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Demarcate CMN-600 specifics (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Move group validation data off-stack (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Optimise DTC counter accesses (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Optimise DTM counter reads (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Refactor DTM handling (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Streamline node iteration (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Refactor node ID handling (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Drop compile-test restriction (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Account for NUMA affinity (Robin Murphy)  [Orabug: 37409090]
  - Acquire mem_cgroup_per_node.lruvec locks for online nodes only. (Imran Khan)  [Orabug: 37405595]
  - Fix issues seen with mail thread patches. (Imran Khan)  [Orabug: 37405595]
  - mm: lru: use lruvec lock to serialize memcg changes (Muchun Song)  [Orabug: 37405595]
  - mm: lru: add VM_BUG_ON_PAGE to lru maintenance function (Muchun Song)  [Orabug: 37405595]
  - mm: memcontrol: rename {un}lock_page_memcg() to {un}lock_page_objcg() (Muchun Song)  [Orabug: 37405595]
  - mm: memcontrol: use obj_cgroup APIs to charge the LRU pages (Muchun Song)  [Orabug: 37405595]
  - mm: memcontrol: introduce memcg_reparent_ops (Muchun Song)  [Orabug: 37405595]
  - mm: memcontrol: make all the callers of page_memcg() safe (Muchun Song)  [Orabug: 37405595]
  - mm: thp: make split queue lock safe when LRU pages reparented (Muchun Song)  [Orabug: 37405595]
  - mm: thp: introduce split_queue_lock/unlock{_irqsave}() (Muchun Song)  [Orabug: 37405595]
  - mm: vmscan: rework move_pages_to_lru() (Muchun Song)  [Orabug: 37405595]
  - mm: memcontrol: make lruvec lock safe when the LRU pages reparented (Muchun Song)  [Orabug: 37405595]
  - mm: memcontrol: introduce compact_lock_page_irqsave (Muchun Song)  [Orabug: 37405595]
  - mm: memcontrol: prepare objcg API for non-kmem usage (Muchun Song)  [Orabug: 37405595]
  - mm: move mem_cgroup_kmem_disabled() to memcontrol.h (Muchun Song)  [Orabug: 37405595]
  - Uek-rpm/ol9: Enable CONFIG_FIPS_SIGNATURE_SELFTEST for mips64 (Vijay Kumar)  [Orabug: 37390881]
  - sfc: Fix an error handling path in efx_pci_probe() (Christophe JAILLET)  [Orabug: 37384497]
  - sfc: Separate netdev probe/remove from PCI probe/remove (Jonathan Cooper)  [Orabug: 37384497]
  - sfc: replace function name in string with __func__ (Jonathan Cooper)  [Orabug: 37384497]
  - sfc: Unsplit literal string. (Jonathan Cooper)  [Orabug: 37384497]
  - sfc: Move EF100 efx_nic_type structs to the end of the file (Jonathan Cooper)  [Orabug: 37384497]
  - sfc: Separate efx_nic memory from net_device memory (Jonathan Cooper)  [Orabug: 37384497]
  - sfc: Encapsulate access to netdev_priv() (Jonathan Cooper)  [Orabug: 37384497]
  - sfc: Add a PROBED state for EF100 VDPA use. (Jonathan Cooper)  [Orabug: 37384497]
  - ACPICA: Allow PCC Data Type in MCTP resource. (Adam Young)  [Orabug: 37311726]
  - ACPICA: Avoid undefined behavior: member access within misaligned address (Tamir Duberstein)  [Orabug: 37311726]
  - arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a (D Scott Phillips)  [Orabug: 37311726]
  - arm64: Expose the end of the linear map in PHYSMEM_END (D Scott Phillips)  [Orabug: 37311726]
  - seqcount: replace smp_rmb() in read_seqcount() with load acquire (Christoph Lameter (Ampere))  [Orabug: 37311726]
  - uek-rpm: Enable new config options for Ampere (Dave Kleikamp)  [Orabug: 37311726]
  - vmalloc: modify the alloc_vmap_area() error message for better diagnostics (Shubhang Kaushik OS)  [Orabug: 37311726]
  - NUMA: early use of cpu_to_node() returns 0 instead of the correct node id (Huang Shijie)  [Orabug: 37311726]
  - mm: mmap: no need to call khugepaged_enter_vma() for stack (Yang Shi)  [Orabug: 37311726]
  - crash_core: export vmemmap when CONFIG_SPARSEMEM_VMEMMAP is enabled (Huang Shijie)  [Orabug: 37311726]
  - PCI: acpiphp: Allow built-in drivers for Attention Indicators (D Scott Phillips)  [Orabug: 37311726]
  - PCI: acpiphp: Add missing MODULE_DESCRIPTION() macro (Jeff Johnson)  [Orabug: 37311726]
  - PCI: hotplug: Add Ampere Altra Attention Indicator extension driver (D Scott Phillips)  [Orabug: 37311726]
  - mm: mempolicy: keep VMA walk if both MPOL_MF_STRICT and MPOL_MF_MOVE are specified (Yang Shi)  [Orabug: 37311726]
  - arm64: compat: Work around uninitialized variable warning (Ard Biesheuvel)  [Orabug: 37311726]
  - arm64: compat: Implement misalignment fixups for multiword loads (Ard Biesheuvel)  [Orabug: 37311726]
  - RDMA/mlx5: Expose vhca id for all ports in multiport mode (Mark Bloch)  [Orabug: 37234285]
  - rds/ib: avoid scq/rcq polling during rds connection shutdown (Arumugam Kolappan)  [Orabug: 37055939]
  - RDMA/mlx5: Send UAR page index as ioctl attribute (Akiva Goldberger)  [Orabug: 37029766]
  - RDMA: Pass entire uverbs attr bundle to create cq function (Akiva Goldberger)  [Orabug: 37029766]
  - net/mlx5e: Fix CT entry update leaks of modify header context (Chris Mi)  [Orabug: 36948578] {CVE-2024-43864}
  - net/mlx5e: Require mlx5 tc classifier action support for IPsec prio capability (Rahul Rameshbabu)  [Orabug: 36948578]
  - net/mlx5: Fix missing lock on sync reset reload (Moshe Shemesh)  [Orabug: 36948578] {CVE-2024-42268}
  - net/mlx5: Lag, don't use the hardcoded value of the first port (Mark Bloch)  [Orabug: 36948578]
  - mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file (Aleksandr Mishin)  [Orabug: 36948578] {CVE-2024-42138}
  - net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() (Jianbo Liu)  [Orabug: 36948578]
  - net/mlx5: E-switch, Create ingress ACL when needed (Chris Mi)  [Orabug: 36948578]
  - mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems (Ido Schimmel)  [Orabug: 36948578] {CVE-2024-42073}
  - RDMA/mlx5: Fix unwind flow as part of mlx5_ib_stage_init_init (Yishai Hadas)  [Orabug: 36948578]
  - RDMA/mlx5: Ensure created mkeys always have a populated rb_key (Jason Gunthorpe)  [Orabug: 36948578]
  - RDMA/mlx5: Follow rb_key.ats when creating new mkeys (Jason Gunthorpe)  [Orabug: 36948578]
  - RDMA/mlx5: Remove extra unlock on error path (Jason Gunthorpe)  [Orabug: 36948578]
  - net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (Aleksandr Mishin)  [Orabug: 36948578] {CVE-2024-40939}
  - net/mlx5: Always stop health timer during driver removal (Shay Drory)  [Orabug: 36948578] {CVE-2024-40906}
  - net/mlx5: Fix MTMP register capability offset in MCAM register (Gal Pressman)  [Orabug: 36948578]
  - net/mlx5e: Advertise mlx5 ethernet driver updates sk_buff md_dst for MACsec (Rahul Rameshbabu)  [Orabug: 36948578]
  - mlxsw: core_env: Fix driver initialization with old firmware (Ido Schimmel)  [Orabug: 36948578]
  - net/mlx5: Lag, restore buckets number to default after hash LAG deactivation (Shay Drory)  [Orabug: 36948578]
  - net/mlx5e: Do not produce metadata freelist entries in Tx port ts WQE xmit (Rahul Rameshbabu)  [Orabug: 36948578]
  - RDMA/mlx5: Change check for cacheable mkeys (Or Har-Toov)  [Orabug: 36948578]
  - RDMA/mlx5: Uncacheable mkey has neither rb_key or cache_ent (Or Har-Toov)  [Orabug: 36948578]
  - mlx5: avoid truncating error message (Arnd Bergmann)  [Orabug: 36948578]
  - net/mlx5: Check capability for fw_reset (Moshe Shemesh)  [Orabug: 36948578]
  - net/mlx5: SF, Stop waiting for FW as teardown was called (Moshe Shemesh)  [Orabug: 36948578]
  - netlink: Correct offload_xstats size (Christoph Paasch)  [Orabug: 36948578]
  - net: fix net_dev_start_xmit trace event vs skb_transport_offset() (Eric Dumazet)  [Orabug: 36948578]
  - lib/bitmap: drop optimization of bitmap_{from,to}_arr64 (Yury Norov)  [Orabug: 36948578]
  - net: macsec: fix double free of percpu stats (Fedor Pchelkin)  [Orabug: 36948578]
  - tcp: gso: really support BIG TCP (Eric Dumazet)  [Orabug: 36948578]
  - RDMA/mlx5: Use rdma_umem_for_each_dma_block() (Jason Gunthorpe)  [Orabug: 36948578]
  - nfp: flower: fix ingress police using matchall filter (Tianyu Yuan)  [Orabug: 36948578]
  - lib/bitmap: fix off-by-one in bitmap_to_arr64() (Alexander Lobakin)  [Orabug: 36948578]
  - RDMA/mlx5: Fix flow steering egress flow (Leon Romanovsky)  [Orabug: 36948578]
  - rtnetlink: Fix handling of disabled L3 stats in RTM_GETSTATS replies (Petr Machata)  [Orabug: 36948578]
  - tun: annotate access to queue->trans_start (Antoine Tenart)  [Orabug: 36948578]
  - xsk: Do not write NULL in SW ring at allocation failure (Magnus Karlsson)  [Orabug: 36948578]
  - net/sched: fix incorrect vlan_push_eth dest field (Louis Peens)  [Orabug: 36948578]
  - RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit() (Dan Carpenter)  [Orabug: 36948578]
  - net_tstamp: define new flag HWTSTAMP_FLAG_BONDED_PHC_INDEX (Hangbin Liu)  [Orabug: 36948578]
  - net: add missing include in include/net/gro.h (Eric Dumazet)  [Orabug: 36948578]
  - IB/hfi1: Properly allocate rdma counter desc memory (Dennis Dalessandro)  [Orabug: 36948578]
  - xsk: Initialise xskb free_list_node (Ciara Loftus)  [Orabug: 36948578]
  - xsk: Fix crash on double free in buffer pool (Magnus Karlsson)  [Orabug: 36948578]
  - KVM: x86: WARN only once if KVM leaves a dangling userspace I/O request (Sean Christopherson)  [Orabug: 36815282]
  - KVM: x86: Suppress pending MMIO write exits if emulator detects exception (Sean Christopherson)  [Orabug: 36815282]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-305.171.2.el8uek]
changelog:
  - rds: ib: Avoid UAF on RDS Socket's rs_trans_lock (Håkon Bugge)  [Orabug: 37475726]
  - rds: ib: Fix blocked processes related to race in rds_rdma_free_dev_rs_worker() (Håkon Bugge)  [Orabug: 37475726]
  - rds: ib: Fix deterministic UAF in rds_rdma_free_dev_rs_worker() (Håkon Bugge)  [Orabug: 37475726]
  - uek-misc: Define a prefix for uek module messages (Alejandro Jimenez)  [Orabug: 37459411]
  - uek-misc: Clear the AVIC capability on platforms with known errata (Alejandro Jimenez)  [Orabug: 37459411]
  - uek-misc: Add identification for OCI platform (Alejandro Jimenez)  [Orabug: 37459411]
  - Revert "MIPS: do not call flush_tlb_all when setting pmd entry" (Vijay Kumar)  [Orabug: 37454162]
  - cpufreq: intel_pstate: Support highest performance change interrupt (Srinivas Pandruvada)  [Orabug: 37426908]
  - x86/cpufeatures: Add HWP highest perf change feature flag (Srinivas Pandruvada)  [Orabug: 37426908]
  - cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE() annotations (Rafael J. Wysocki)  [Orabug: 37426908]
  - cpufreq: intel_pstate: Wait for canceled delayed work to complete (Rafael J. Wysocki)  [Orabug: 37426908]
  - cpufreq: intel_pstate: Simplify spinlock locking (Rafael J. Wysocki)  [Orabug: 37426908]
  - cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes (Rafael J. Wysocki)  [Orabug: 37426908]
  - uek-rpm: Enable CONFIG_FIPS_SIGNATURE_SELFTEST for all archs (Saeed Mirzamohammadi)  [Orabug: 37400483]
  - uek-rpm: set DEFAULTKERNEL to other installed uek if possible (Sherry Yang)  [Orabug: 37399094]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-305.176.3.el8uek]
changelog:
  - LTS version: v5.15.176 (Vijayendra Suman)
  - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa)
  - dt-bindings: display: adi,adv7533: Drop single lane support (Biju Das)
  - drm: adv7511: Drop dsi single lane support (Biju Das)
  - net/sctp: Prevent autoclose integer overflow in sctp_association_init() (Nikolay Kuratov)
  - sky2: Add device ID 11ab:4373 for Marvell 88E8075 (Pascal Hambourg)
  - pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking (Evgenii Shatokhin)
  - RDMA/uverbs: Prevent integer overflow issue (Dan Carpenter)
  - kcov: mark in_softirq_really() as __always_inline (Arnd Bergmann)
  - modpost: fix the missed iteration for the max bit in do_input() (Masahiro Yamada)
  - modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host (Masahiro Yamada)
  - usb: xhci: Avoid queuing redundant Stop Endpoint commands (Michal Pecio)
  - ARC: build: Try to guess GCC variant of cross compiler (Leon Romanovsky)
  - irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (Uros Bizjak)
  - net: usb: qmi_wwan: add Telit FE910C04 compositions (Daniele Palmas)
  - bpf: fix potential error return (Anton Protopopov)
  - sound: usb: format: don't warn that raw DSD is unsupported (Adrian Ratiu)
  - sound: usb: enable DSD output for ddHiFi TC44C (Adrian Ratiu)
  - btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (Filipe Manana)
  - drm/amdkfd: Correct the migration DMA map direction (Prike Liang)
  - wifi: mac80211: wake the queues in case of failure in resume (Emmanuel Grumbach)
  - btrfs: sysfs: fix direct super block member reads (Qu Wenruo)
  - btrfs: sysfs: convert scnprintf and snprintf to sysfs_emit (Anand Jain)
  - btrfs: fix use-after-free when COWing tree bock and tracing is enabled (Filipe Manana)
  - btrfs: rename and export __btrfs_cow_block() (Filipe Manana)
  - ila: serialize calls to nf_register_net_hooks() (Eric Dumazet)
  - af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Eric Dumazet)
  - af_packet: fix vlan_get_tci() vs MSG_PEEK (Eric Dumazet)
  - net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init() (Maciej S. Szmigiero)
  - net: restrict SO_REUSEPORT to inet sockets (Eric Dumazet)
  - RDMA/rtrs: Ensure 'ib_sge list' is accessible (Li Zhijian)
  - net: mv643xx_eth: fix an OF node reference leak (Joe Hattori)
  - eth: bcmsysport: fix call balance of priv->clk handling routines (Vitalii Mordan)
  - ALSA: usb-audio: US16x08: Initialize array before use (Tanya Agarwal)
  - net: llc: reset skb->transport_header (Antonio Pastor)
  - netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext (Pablo Neira Ayuso)
  - drm/i915/dg1: Fix power gate sequence. (Rodrigo Vivi)
  - netrom: check buffer length before accessing it (Ilya Shchipletsov)
  - net: fix memory leak in tcp_conn_request() (Wang Liang)
  - net: stmmac: restructure the error path of stmmac_probe_config_dt() (Joe Hattori)
  - net: stmmac: don't create a MDIO bus if unnecessary (Andrew Halaney)
  - net: stmmac: platform: provide devm_stmmac_probe_config_dt() (Bartosz Golaszewski)
  - RDMA/hns: Fix missing flush CQE for DWQE (Chengchang Tang)
  - RDMA/hns: Fix warning storm caused by invalid input in IO path (Chengchang Tang)
  - RDMA/hns: Fix mapping error of zero-hop WQE buffer (wenglianfa)
  - RDMA/hns: Remove redundant 'bt_level' for hem_list_alloc_item() (Yunsheng Lin)
  - RDMA/hns: Remove redundant 'attr_mask' in modify_qp_init_to_init() (Yixing Liu)
  - drm/bridge: adv7511_audio: Update Audio InfoFrame properly (Stefan Ekenberg)
  - RDMA/bnxt_re: Fix the locking while accessing the QP table (Selvin Xavier)
  - RDMA/bnxt_re: Fix max_qp_wrs reported (Selvin Xavier)
  - RDMA/bnxt_re: Fix reporting hw_ver in query_device (Kalesh AP)
  - RDMA/bnxt_re: Add check for path mtu in modify_qp (Saravanan Vajravel)
  - RDMA/mlx5: Enforce same type port association for multiport RoCE (Patrisious Haddad)
  - xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic (Mathias Nyman)
  - usb: xhci: Limit Stop Endpoint retries (Michal Pecio)
  - xhci: retry Stop Endpoint on buggy NEC controllers (Michal Pecio)
  - thunderbolt: Add support for Intel Panther Lake-M/P (Mika Westerberg)
  - thunderbolt: Add support for Intel Lunar Lake (Mika Westerberg)
  - thunderbolt: Add Intel Barlow Ridge PCI ID (Mika Westerberg)
  - thunderbolt: Add support for Intel Meteor Lake (Mika Westerberg)
  - thunderbolt: Add support for Intel Raptor Lake (George D Sworo)
  - tracing: Have process_string() also allow arrays (Steven Rostedt)
  - selinux: ignore unknown extended permissions (Thiébaud Weksteen)
  - x86/hyperv: Fix hv tsc page based sched_clock for hibernation (Naman Jain)
  - net: dsa: improve shutdown sequence (Vladimir Oltean)
  - nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (Yang Erkun)
  - btrfs: avoid monopolizing a core when activating a swap file (Filipe Manana)
  - power: supply: gpio-charger: Fix set charge current limits (Dimitri Fedrau)
  - tracing: Prevent bad count for tracing_cpumask_write (Lizhi Xu)
  - tracing: Constify string literal data member in struct trace_event_call (Christian Göttsche)
  - ksmbd: fix racy issue from session lookup and expire (Namjae Jeon)
  - lib: stackinit: hide never-taken branch from compiler (Kees Cook)
  - drm/dp_mst: Verify request type in the corresponding down message reply (Imre Deak)
  - arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs (Catalin Marinas)
  - arm64: mm: Rename asid2idx() to ctxid2asid() (Yunfeng Ye)
  - ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write (Jordy Zomer)
  - ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read (Jordy Zomer)
  - drm/dp_mst: Fix MST sideband message body length check (Imre Deak)
  - bpf: Check validity of link->type in bpf_link_show_fdinfo() (Hou Tao)
  - MIPS: Probe toolchain support of -msym32 (Jiaxun Yang)
  - vmalloc: fix accounting with i915 (Matthew Wilcox (Oracle))
  - virtio-blk: don't keep queue frozen during system suspend (Ming Lei)
  - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery)
  - scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time (Ranjan Kumar)
  - platform/x86: asus-nb-wmi: Ignore unknown event 0xCF (Armin Wolf)
  - regmap: Use correct format specifier for logging range errors (Mark Brown)
  - ALSA: hda/conexant: fix Z60MR100 startup pop issue (bo liu)
  - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl)
  - scsi: qla1280: Fix hw revision numbering for ISP1020/1040 (Magnus Lindholm)
  - watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04 (James Hilliard)
  - tracing/kprobe: Make trace_kprobe's module callback called after jump_label update (Masami Hiramatsu (Google))
  - mtd: rawnand: fix double free in atmel_pmecc_create_user() (Dan Carpenter)
  - dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset (Chen Ridong)
  - dmaengine: dw: Select only supported masters for ACPI devices (Andy Shevchenko)
  - dmaengine: mv_xor: fix child node refcount handling in early exit (Javier Carrasco)
  - phy: core: Fix that API devm_phy_destroy() fails to destroy the phy (Zijun Hu)
  - phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider (Zijun Hu)
  - phy: core: Fix that API devm_phy_put() fails to release the phy (Zijun Hu)
  - phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() (Zijun Hu)
  - phy: core: Fix an OF node refcount leakage in _of_phy_get() (Zijun Hu)
  - mtd: rawnand: arasan: Fix missing de-registration of NAND (Maciej Andrzejewski)
  - mtd: rawnand: arasan: Fix double assertion of chip-select (Maciej Andrzejewski)
  - mtd: diskonchip: Cast an operand to prevent potential overflow (Zichen Xie)
  - nfsd: restore callback functionality for NFSv4.0 (NeilBrown)
  - bpf: Check negative offsets in __bpf_skb_min_len() (Cong Wang)
  - tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection (Zijian Zhang)
  - tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress() (Cong Wang)
  - mm/vmstat: fix a W=1 clang compiler warning (Bart Van Assche)
  - media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (Nikita Zhandarovich)
  - drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update (Michel Dänzer)
  - epoll: Add synchronous wakeup support for ep_poll_callback (Xuewen Yan)
  - ceph: validate snapdirname option length when mounting (Ilya Dryomov)
  - of: Fix refcount leakage for OF node returned by __of_get_dma_parent() (Zijun Hu)
  - of: Fix error path in of_parse_phandle_with_args_map() (Herve Codina)
  - udmabuf: also check for F_SEAL_FUTURE_WRITE (Jann Horn)
  - nilfs2: prevent use of deleted inode (Edward Adam Davis)
  - of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() (Zijun Hu)
  - NFS/pnfs: Fix a live lock between recalled layouts and layoutget (Trond Myklebust)
  - tracing: Add "%s" check in test_event_printk() (Steven Rostedt)
  - tracing: Add missing helper functions in event pointer dereference check (Steven Rostedt)
  - tracing: Fix test_event_printk() to process entire print argument (Steven Rostedt)
  - KVM: x86: Play nice with protected guests in complete_hypercall_exit() (Sean Christopherson)
  - Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (Michael Kelley)
  - btrfs: tree-checker: reject inline extent items with 0 ref count (Qu Wenruo)
  - zram: refuse to use zero sized block device as backing device (Kairui Song)
  - sh: clk: Fix clk_enable() to return 0 on NULL clk (Geert Uytterhoeven)
  - hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers (Murad Masimov)
  - hwmon: (tmp513) Fix Current Register value interpretation (Murad Masimov)
  - hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers (Murad Masimov)
  - hwmon: (tmp513) Use SI constants from units.h (Andy Shevchenko)
  - hwmon: (tmp513) Simplify with dev_err_probe() (Andy Shevchenko)
  - hwmon: (tmp513) Don't use "proxy" headers (Andy Shevchenko)
  - drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (Ville Syrjälä)
  - USB: serial: option: add Telit FE910C04 rmnet compositions (Daniele Palmas)
  - USB: serial: option: add MediaTek T7XX compositions (Jack Wu)
  - USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready (Mank Wang)
  - USB: serial: option: add MeiG Smart SLM770A (Michal Hrusecky)
  - USB: serial: option: add TCL IK512 MBIM & ECM (Daniel Swanemar)
  - efivarfs: Fix error on non-existent file (James Bottomley)
  - i2c: riic: Always round-up when calculating bus period (Geert Uytterhoeven)
  - chelsio/chtls: prevent potential integer overflow on 32bit (Dan Carpenter)
  - mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk (Prathamesh Shete)
  - net: mdiobus: fix an OF node reference leak (Joe Hattori)
  - netfilter: ipset: Fix for recursive locking warning (Phil Sutter)
  - net: ethernet: bgmac-platform: fix an OF node reference leak (Joe Hattori)
  - net: hinic: Fix cleanup in create_rxqs/txqs() (Dan Carpenter)
  - ionic: use ee->offset when returning sprom data (Shannon Nelson)
  - ionic: Fix netdev notifier unregister on failure (Brett Creeley)
  - netdevsim: prevent bad user input in nsim_dev_health_break_write() (Eric Dumazet)
  - net/smc: check return value of sock_recvmsg when draining clc data (Guangguan Wang)
  - net/smc: check smcd_v2_ext_offset when receiving proposal msg (Guangguan Wang)
  - net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (Guangguan Wang)
  - net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll (Guangguan Wang)
  - erofs: fix incorrect symlink detection in fast symlink (Gao Xiang)
  - i2c: pnx: Fix timeout in wait functions (Vladimir Riabchun)
  - usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled (Peng Hongchi)
  - MIPS: Loongson64: DTS: Fix msi node for ls7a (Jiaxun Yang)
  - PCI: Add ACS quirk for Broadcom BCM5760X NIC (Ajit Khaparde)
  - PCI: vmd: Create domain symlink before pci_bus_add_devices() (Jiwei Sun)
  - ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP (Pierre-Louis Bossart)
  - usb: cdns3: Add quirk flag to enable suspend residency (Roger Quadros)
  - ALSA: usb: Fix UBSAN warning in parse_audio_unit() (Takashi Iwai)
  - PCI/AER: Disable AER service on suspend (Kai-Heng Feng)
  - PCI: Use preserve_config in place of pci_flags (Vidya Sagar)
  - net: sched: fix ordering of qlen adjustment (Lion Ackermann)
  - LTS version: v5.15.175 (Vijayendra Suman)
  - x86/static-call: fix 32-bit build (Juergen Gross)
  - ALSA: usb-audio: Fix a DMA to stack memory bug (Dan Carpenter)
  - x86/xen: remove hypercall page (Juergen Gross)
  - x86/xen: use new hypercall functions instead of hypercall page (Juergen Gross)
  - x86/xen: add central hypercall functions (Juergen Gross)
  - x86/xen: don't do PV iret hypercall through hypercall page (Juergen Gross)
  - x86/static-call: provide a way to do very early static-call updates (Juergen Gross)
  - objtool/x86: allow syscall instruction (Juergen Gross)
  - x86: make get_cpu_vendor() accessible from Xen code (Juergen Gross)
  - xen/netfront: fix crash when removing device (Juergen Gross)
  - Revert "parisc: fix a possible DMA corruption" (Greg Kroah-Hartman)
  - tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe() (Nikolay Kuratov)
  - bpf: sync_linked_regs() must preserve subreg_def (Eduard Zingerman)
  - blk-iocost: Avoid using clamp() on inuse in __propagate_weights() (Nathan Chancellor)
  - ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired (Daniil Tatianin)
  - team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Daniel Borkmann)
  - bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Daniel Borkmann)
  - net/sched: netem: account for backlog updates from child qdisc (Martin Ottens)
  - Documentation: PM: Clarify pm_runtime_resume_and_get() return value (Paul Barker)
  - qca_spi: Make driver probing reliable (Stefan Wahren)
  - qca_spi: Fix clock speed for multiple QCA7000 (Stefan Wahren)
  - cxgb4: use port number to set mac addr (Anumula Murali Mohan Reddy)
  - ACPI: resource: Fix memory resource type union access (Ilpo Järvinen)
  - net: sparx5: fix the maximum frame length register (Daniel Machon)
  - net: sparx5: fix FDMA performance issue (Daniel Machon)
  - net: lapb: increase LAPB_HEADER_LEN (Eric Dumazet)
  - ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init() (Thomas Weißschuh)
  - ptp: kvm: Use decrypted memory in confidential guest on x86 (Jeremi Piotrowski)
  - selftests: mlxsw: sharedbuffer: Remove duplicate test cases (Danielle Ratson)
  - selftests: mlxsw: sharedbuffer: Remove h1 ingress test case (Danielle Ratson)
  - tipc: fix NULL deref in cleanup_bearer() (Eric Dumazet)
  - batman-adv: Do not let TT changes list grows indefinitely (Remi Pommarel)
  - batman-adv: Remove uninitialized data in full table TT response (Remi Pommarel)
  - batman-adv: Do not send uninitialized TT changes (Remi Pommarel)
  - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (Suraj Sonawane)
  - exfat: fix potential deadlock on __exfat_get_dentry_set (Sungjong Seo)
  - virtio/vsock: Fix accept_queue memory leak (Michal Luczaj)
  - bpf, sockmap: Fix update element with same (Michal Luczaj)
  - xfs: fix scrub tracepoints when inode-rooted btrees are involved (Darrick J. Wong)
  - xfs: return from xfs_symlink_verify early on V4 filesystems (Darrick J. Wong)
  - xfs: don't drop errno values when we fail to ficlone the entire range (Darrick J. Wong)
  - xfs: update btree keys correctly when _insrec splits an inode root block (Darrick J. Wong)
  - drm/i915: Fix memory leak by correcting cache object name in error handler (Jiasheng Jiang)
  - usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (Lianqin Hu)
  - usb: ehci-hcd: fix call balance of clocks handling routines (Vitalii Mordan)
  - usb: dwc2: Fix HCD port connection race (Stefan Wahren)
  - usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature (Stefan Wahren)
  - usb: dwc2: Fix HCD resume (Stefan Wahren)
  - ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() (Joe Hattori)
  - usb: host: max3421-hcd: Correctly abort a USB request. (Mark Tomlinson)
  - ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5 (Jaakko Salo)
  - tcp: check space before adding MPTCP SYN options (MoYuanhao)
  - LTS version: v5.15.174 (Vijayendra Suman)
  - Bluetooth: hci_core: Fix calling mgmt_device_connected (Luiz Augusto von Dentz)
  - net/smc: Fix af_ops of child socket pointing to released memory (Karsten Graul)
  - media: venus: vdec: fixed possible memory leak issue (Ameer Hamza)
  - serial: amba-pl011: fix build regression (Arnd Bergmann)
  - drm/amdgpu: rework resume handling for display (v2) (Alex Deucher)
  - drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX (Wayne Lin)
  - net: dsa: microchip: correct KSZ8795 static MAC table access (Tristram Ha)
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect (Luiz Augusto von Dentz)
  - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (Mark Rutland)
  - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Brown)
  - gve: Fixes for napi_poll when budget is 0 (Ziwei Xiao)
  - scsi: core: Fix scsi_mode_select() buffer length handling (Damien Le Moal)
  - Revert "drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()" (Zhang Zekun)
  - fou: remove warn in gue_gro_receive on unsupported protocol (Willem de Bruijn)
  - ima: Fix use-after-free on a dentry's dname.name (Stefan Berger)
  - crypto: hisilicon/qm - inject error before stopping queue (Weili Qian)
  - drm/amd/display: Check BIOS images before it is used (Alex Hung)
  - mmc: mtk-sd: Fix error handle of probe function (Andy-ld Lu)
  - xhci: dbc: Fix STALL transfer event handling (Mathias Nyman)
  - mm/damon/vaddr: fix issue in damon_va_evenly_split_region() (Zheng Yejian)
  - mm/damon/vaddr-test: split a test function having >1024 bytes frame size (SeongJae Park)
  - jffs2: Fix rtime decompressor (Richard Weinberger)
  - jffs2: Prevent rtime decompress memory corruption (Kinsey Moore)
  - KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE (Kunkun Jiang)
  - KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device (Kunkun Jiang)
  - KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* (Jing Zhang)
  - tracing/eprobe: Fix to release eprobe when failed to add dyn_event (Masami Hiramatsu (Google))
  - btrfs: fix missing snapshot drew unlock when root is dead during swap activation (Filipe Manana)
  - sched/core: Prevent wakeup of ksoftirqd during idle load balance (K Prateek Nayak)
  - sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy (K Prateek Nayak)
  - sched/fair: Add NOHZ balancer flag for nohz.next_balance updates (Valentin Schneider)
  - sched/core: Remove the unnecessary need_resched() check in nohz_csd_func() (K Prateek Nayak)
  - modpost: Add .irqentry.text to OTHER_SECTIONS (Thomas Gleixner)
  - modpost: Include '.text.*' in TEXT_SECTIONS (Nathan Chancellor)
  - misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle (Parker Newman)
  - powerpc/prom_init: Fixup missing powermac #size-cells (Michael Ellerman)
  - MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a (Xi Ruoyao)
  - usb: chipidea: udc: handle USB Error Interrupt if IOC not set (Xu Yang)
  - i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock (Defa Li)
  - PCI: Add ACS quirk for Wangxun FF5xxx NICs (Mengyuan Lou)
  - PCI: Add 'reset_subordinate' to reset hierarchy below bridge (Keith Busch)
  - PCI: Detect and trust built-in Thunderbolt chips (Esther Shimanovich)
  - i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (Jarkko Nikula)
  - f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode. (Qi Han)
  - nvdimm: rectify the illogical code within nd_dax_probe() (Yi Yang)
  - pinctrl: qcom-pmic-gpio: add support for PM8937 (Barnabás Czémán)
  - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Kai Mäkisara)
  - scsi: st: Don't modify unknown block number in MTIOCGET (Kai Mäkisara)
  - leds: class: Protect brightness_show() with led_cdev->led_access mutex (Mukesh Ojha)
  - scsi: hisi_sas: Add cond_resched() for no forced preemption model (Yihang Li)
  - tracing: Use atomic64_inc_return() in trace_clock_counter() (Uros Bizjak)
  - pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU (Esben Haabendal)
  - netpoll: Use rcu_access_pointer() in __netpoll_setup (Breno Leitao)
  - net/neighbor: clear error in case strict check is not set (Jakub Kicinski)
  - rocker: fix link status detection in rocker_carrier_init() (Dmitry Antipov)
  - ASoC: hdmi-codec: reorder channel allocation list (Jonas Karlman)
  - Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet (Luiz Augusto von Dentz)
  - wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (Norbert van Bolhuis)
  - wifi: ipw2x00: libipw_rx_any(): fix bad alignment (Jiapeng Chong)
  - drm/amdgpu: set the right AMDGPU sg segment limitation (Prike Liang)
  - drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov (Victor Zhao)
  - jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (Nihar Chaithanya)
  - jfs: fix array-index-out-of-bounds in jfs_readdir (Ghanshyam Agrawal)
  - jfs: fix shift-out-of-bounds in dbSplit (Ghanshyam Agrawal)
  - jfs: array-index-out-of-bounds fix in dtReadFirst (Ghanshyam Agrawal)
  - dma-debug: fix a possible deadlock on radix_lock (Levi Yun)
  - drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr (Lang Yu)
  - drm/amdgpu: Dereference the ATCS ACPI buffer (Prike Liang)
  - drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih (Victor Lu)
  - drm/panel: simple: Add Microchip AC69T88A LVDS Display panel (Manikandan Muralidharan)
  - wifi: ath5k: add PCI ID for Arcadyan devices (Rosen Penev)
  - wifi: ath5k: add PCI ID for SX76X (Rosen Penev)
  - net: inet6: do not leave a dangling sk pointer in inet6_create() (Ignat Korchagin)
  - net: inet: do not leave a dangling sk pointer in inet_create() (Ignat Korchagin)
  - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Ignat Korchagin)
  - net: af_can: do not leave a dangling sk pointer in can_create() (Ignat Korchagin)
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (Ignat Korchagin)
  - af_packet: avoid erroring out after sock_init_data() in packet_create() (Ignat Korchagin)
  - net/sched: cbs: Fix integer overflow in cbs_set_port_rate() (Elena Salomatkina)
  - net: ethernet: fs_enet: Use %pa to format resource_size_t (Simon Horman)
  - net: fec_mpc52xx_phy: Use %pa to format resource_size_t (Simon Horman)
  - samples/bpf: Fix a resource leak (Zhu Jun)
  - r8169: don't apply UDP padding quirk on RTL8126A (Heiner Kallweit)
  - drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (Igor Artemiev)
  - drm/mcde: Enable module autoloading (Liao Chen)
  - drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (Joaquín Ignacio Aramendía)
  - drm/vc4: hvs: Set AXI panic modes for the HVS (Dave Stevenson)
  - soc: imx8m: Probe the SoC driver as platform driver (Marek Vasut)
  - media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (Rohan Barar)
  - media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (David Given)
  - kcsan: Turn report_filterlist_lock into a raw_spinlock (Marco Elver)
  - kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all() (Mark Brown)
  - btrfs: avoid unnecessary device path update for the same device (Qu Wenruo)
  - s390/cpum_sf: Handle CPU hotplug remove during sampling (Thomas Richter)
  - epoll: annotate racy check (Christian Brauner)
  - iommu/arm-smmu: Defer probe of clients after smmu device bound (Pratyush Brahma)
  - ocfs2: update seq_file index in ocfs2_dlm_seq_next (Wengang Wang)
  - mmc: core: Further prevent card detect during shutdown (Ulf Hansson)
  - mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet (Hans de Goede)
  - regmap: detach regmap from dev on regmap_exit (Cosmin Tanislav)
  - xsk: fix OOB map writes when deleting elements (Maciej Fijalkowski)
  - dma-buf: fix dma_fence_array_signaled v4 (Christian König)
  - bpf: fix OOB devmap writes when deleting elements (Maciej Fijalkowski)
  - bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (Liequan Che)
  - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (Ryusuke Konishi)
  - scsi: ufs: core: sysfs: Prevent div by zero (Gwendal Grignou)
  - scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (Saurav Kashyap)
  - scsi: qla2xxx: Fix use after free on unload (Quinn Tran)
  - scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (Anil Gurumurthy)
  - scsi: qla2xxx: Fix NVMe and NPIV connect issue (Quinn Tran)
  - ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG) (Sahas Leelodharry)
  - ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8 (Nazar Bilinskyi)
  - ALSA: usb-audio: add mixer mapping for Corsair HS80 (Marie Ramlow)
  - arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (Mark Rutland)
  - tracing: Fix cmp_entries_dup() to respect sort() comparison rules (Kuan-Wei Chiu)
  - can: dev: can_set_termination(): allow sleeping GPIOs (Marc Kleine-Budde)
  - watchdog: rti: of: honor timeout-sec property (Alexander Sverdlin)
  - HID: wacom: fix when get product name maybe null pointer (WangYuli)
  - bpf: Fix exact match conditions in trie_get_next_key() (Hou Tao)
  - bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie (Hou Tao)
  - ocfs2: free inode when ocfs2_get_init_inode() fails (Tetsuo Handa)
  - drm/v3d: Enable Performance Counters before clearing them (Maíra Canal)
  - spi: mpc52xx: Add cancel_work_sync before module remove (Pei Xiao)
  - tools: Override makefile ARCH variable if defined, but empty (Björn Töpel)
  - ALSA: usb-audio: Notify xrun for low-latency mode (Takashi Iwai)
  - ALSA: pcm: Avoid reference to status->state (Takashi Iwai)
  - ALSA: pcm: Add more disconnection checks at file ops (Takashi Iwai)
  - tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (Zijian Zhang)
  - drm/sti: Add __iomem for mixer_dbg_mxn's parameter (Pei Xiao)
  - bpftool: fix potential NULL pointer dereferencing in prog_dump() (Amir Mohammadi)
  - bpftool: Remove asserts from JIT disassembler (Quentin Monnet)
  - serial: amba-pl011: Fix RX stall when DMA is used (Kartik Rajput)
  - serial: amba-pl011: Use port lock wrappers (Thomas Gleixner)
  - dt-bindings: serial: rs485: Fix rs485-rts-delay property (Michal Simek)
  - dt_bindings: rs485: Correct delay values (Lino Sanfilippo)
  - gpio: grgpio: Add NULL check in grgpio_probe (Charles Han)
  - gpio: grgpio: use a helper variable to store the address of ofdev->dev (Bartosz Golaszewski)
  - geneve: do not assume mac header is set in geneve_xmit_skb() (Eric Dumazet)
  - ethtool: Fix wrong mod state in case of verbose and no_mask bitset (Kory Maincent)
  - netfilter: nft_set_hash: skip duplicated elements pending gc run (Pablo Neira Ayuso)
  - netfilter: ipset: Hold module reference while requesting a module (Phil Sutter)
  - net: sched: fix erspan_opt settings in cls_flower (Xin Long)
  - igb: Fix potential invalid memory access in igb_init_module() (Yuan Can)
  - net/qed: allow old cards not supporting "num_images" to work (Louis Leseur)
  - net/smc: fix LGR and link use-after-free issue (Wen Gu)
  - net/smc: Limit backlog connections (D. Wythe)
  - tipc: Fix use-after-free of kernel socket in cleanup_bearer(). (Kuniyuki Iwashima)
  - dccp: Fix memory leak in dccp_feat_change_recv (Ivan Solodovnikov)
  - net/ipv6: release expired exception dst cached in socket (Jiri Wiesner)
  - can: j1939: j1939_session_new(): fix skb reference counting (Dmitry Antipov)
  - net: hsr: avoid potential out-of-bound access in fill_frame_info() (Eric Dumazet)
  - net/sched: tbf: correct backlog statistic for GSO packets (Martin Ottens)
  - ptp: Add error handling for adjfine callback in ptp_clock_adjtime (Ajay Kaher)
  - netfilter: x_tables: fix LED ID check in led_tg_check() (Dmitry Antipov)
  - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (Jinghao Jia)
  - can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
  - can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
  - can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
  - can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
  - can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL (Dario Binacchi)
  - can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails (Dario Binacchi)
  - can: do not increase rx statistics when generating a CAN rx error message frame (Vincent Mailhol)
  - can: peak_usb: CANFD: store 64-bits hw timestamps (Stephane Grosjean)
  - watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() (Yassine Oudjana)
  - iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (Oleksandr Ocheretnyi)
  - drm/etnaviv: flush shader L1 cache after user commandstream (Lucas Stach)
  - drm/sti: avoid potential dereference of error pointers (Ma Ke)
  - drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check (Ma Ke)
  - drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check (Ma Ke)
  - btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (Josef Bacik)
  - nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (Yang Erkun)
  - nfsd: make sure exp active before svc_export_show (Yang Erkun)
  - PCI: rockchip-ep: Fix address translation unit programming (Damien Le Moal)
  - dm thin: Add missing destroy_work_on_stack() (Yuan Can)
  - ovl: properly handle large files in ovl_security_fileattr (Oleksandr Tymoshenko)
  - PCI: keystone: Add link up check to ks_pcie_other_map_bus() (Kishon Vijay Abraham I)
  - i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (Frank Li)
  - scsi: ufs: exynos: Fix hibern8 notify callbacks (Peter Griffin)
  - util_macros.h: fix/rework find_closest() macros (Alexandru Ardelean)
  - s390/entry: Mark IRQ entries to fix stack depot warnings (Vasily Gorbik)
  - ad7780: fix division by zero in ad7780_write_raw() (Zicheng Qu)
  - btrfs: ref-verify: fix use-after-free after invalid ref action (Filipe Manana)
  - btrfs: add a sanity check for btrfs root in btrfs_search_slot() (Lizhi Xu)
  - btrfs: add might_sleep() annotations (ChenXiaoSong)
  - quota: flush quota_release_work upon quota writeback (Ojaswin Mujoo)
  - xfs: remove unknown compat feature check in superblock write validation (Long Li)
  - xfs: fix log recovery when unknown rocompat bits are set (Darrick J. Wong)
  - ASoC: fsl_micfil: fix the naming style for mask definition (Shengjiu Wang)
  - sh: intc: Fix use-after-free bug in register_intc_controller() (Dan Carpenter)
  - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (Liu Jian)
  - sunrpc: remove unnecessary test in rpc_task_set_client() (Thiago Rafael Becker)
  - nfs: ignore SB_RDONLY when mounting nfs (Li Lingfeng)
  - modpost: remove incorrect code in do_eisa_entry() (Masahiro Yamada)
  - rtc: ab-eoz9: don't fail temperature reads on undervoltage notification (Maxime Chevallier)
  - 9p/xen: fix release of IRQ (Alex Zenla)
  - 9p/xen: fix init sequence (Alex Zenla)
  - block: return unsigned int from bdev_io_min (Christoph Hellwig)
  - jffs2: fix use of uninitialized variable (Qingfang Deng)
  - ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit (Waqar Hameed)
  - ubi: fastmap: Fix duplicate slab cache names while attaching (Zhihao Cheng)
  - ubifs: Correct the total block count by deducting journal reservation (Zhihao Cheng)
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Yongliang Gao)
  - rtc: abx80x: Fix WDT bit position of the status register (Nobuhiro Iwamatsu)
  - rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - NFSv4.0: Fix a use-after-free problem in the asynchronous open() (Trond Myklebust)
  - um: Always dump trace for specified task in show_stack (Tiwei Bie)
  - um: Fix the return value of elf_core_copy_task_fpregs (Tiwei Bie)
  - um: Fix potential integer overflow during physmem setup (Tiwei Bie)
  - rpmsg: glink: Propagate TX failures in intentless mode as well (Bjorn Andersson)
  - SUNRPC: make sure cache entry active before cache_show (Yang Erkun)
  - NFSD: Prevent a potential integer overflow (Chuck Lever)
  - lib: string_helpers: silence snprintf() output truncation warning (Bartosz Golaszewski)
  - usb: dwc3: gadget: Fix looping of queued SG entries (Thinh Nguyen)
  - usb: dwc3: gadget: Fix checking for number of TRBs left (Thinh Nguyen)
  - ALSA: hda/realtek: Apply quirk for Medion E15433 (Takashi Iwai)
  - ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max (Dinesh Kumar)
  - ALSA: hda/realtek: Set PCBeep to default value for ALC274 (Kailang Yang)
  - ALSA: hda/realtek: Update ALC225 depop procedure (Kailang Yang)
  - ALSA: pcm: Add sanity NULL check for the default mmap fault handler (Takashi Iwai)
  - media: v4l2-core: v4l2-dv-timings: check cvt/gtf result (Hans Verkuil)
  - soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting() (Javier Carrasco)
  - media: wl128x: Fix atomicity violation in fmc_send_cmd() (Qiu-ji Chen)
  - HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (Jason Gerecke)
  - block: fix ordering between checking BLK_MQ_S_STOPPED request adding (Muchun Song)
  - arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (Will Deacon)
  - sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen)
  - um: vector: Do not use drvdata in release (Tiwei Bie)
  - serial: 8250: omap: Move pm_runtime_get_sync (Bin Liu)
  - um: net: Do not use drvdata in release (Tiwei Bie)
  - um: ubd: Do not use drvdata in release (Tiwei Bie)
  - ubi: wl: Put source PEB into correct list if trying locking LEB failed (Zhihao Cheng)
  - platform/chrome: cros_ec_typec: fix missing fwnode reference decrement (Javier Carrasco)
  - cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power() (Jinjie Ruan)
  - mtd: spi-nor: core: replace dummy buswidth from addr to data (Cheng Ming Lin)
  - spi: Fix acpi deferred irq probe (Stanislaw Gruszka)
  - netfilter: ipset: add missing range check in bitmap_ip_uadt (Jeongjun Park)
  - gpio: exar: set value when external pull-up or pull-down is present (Sai Kumar Cholleti)
  - Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit" (Greg Kroah-Hartman)
  - serial: sh-sci: Clean sci_ports[0] after at earlycon exit (Claudiu Beznea)
  - Revert "usb: gadget: composite: fix OS descriptors w_value logic" (Michal Vrastil)
  - driver core: bus: Fix double free in driver API bus_register() (Zijun Hu)
  - usb: xhci: Fix TD invalidation under pending Set TR Dequeue (Michal Pecio)
  - Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() (Andrej Shadura)
  - exfat: fix uninit-value in __exfat_get_dentry_set (Namjae Jeon)
  - locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass() (Ahmed Ehab)
  - tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler (Nicolas Bouchinet)
  - apparmor: test: Fix memory leak for aa_unpack_strdup() (Jinjie Ruan)
  - comedi: Flush partial mappings in error case (Jann Horn)
  - fsnotify: fix sending inotify event with unexpected filename (Amir Goldstein)
  - PCI: Fix use-after-free of slot->bus on hot remove (Lukas Wunner)
  - KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status (Raghavendra Rao Ananta)
  - powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector (Gautam Menghani)
  - crypto: x86/aegis128 - access 32-bit arguments as 32-bit (Eric Biggers)
  - perf/x86/intel/pt: Fix buffer full but size is 0 case (Adrian Hunter)
  - ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (Qiu-ji Chen)
  - jfs: xattr: check invalid xattr size more strictly (Artem Sadovnikov)
  - ext4: fix FS_IOC_GETFSMAP handling (Theodore Ts'o)
  - ext4: supress data-race warnings in ext4_free_inodes_{count,set}() (Jeongjun Park)
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Benoît Sevens)
  - soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (Manikanta Mylavarapu)
  - ASoC: Intel: sst: Fix used of uninitialized ctx to log an error (Hans de Goede)
  - Revert "drivers: clk: zynqmp: update divider round rate logic" (Joel Guittet)
  - usb: ehci-spear: fix call balance of sehci clk handling routines (Vitalii Mordan)
  - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Takashi Iwai)
  - xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (Qiu-ji Chen)
  - ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp (Namjae Jeon)
  - parisc: fix a possible DMA corruption (Mikulas Patocka)
  - apparmor: fix 'Do simple duplicate message elimination' (chao liu)
  - ALSA: hda/realtek: Update ALC256 depop procedure (Kailang Yang)
  - counter: stm32-timer-cnt: Add check for clk_enable() (Jiasheng Jiang)
  - misc: apds990x: Fix missing pm_runtime_disable() (Jinjie Ruan)
  - USB: chaoskey: Fix possible deadlock chaoskey_list_lock (Edward Adam Davis)
  - USB: chaoskey: fail open after removal (Oliver Neukum)
  - usb: yurex: make waiting on yurex_write interruptible (Oliver Neukum)
  - usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (Jeongjun Park)
  - iio: light: al3010: Fix an error handling path in al3010_probe() (Christophe JAILLET)
  - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (Saravanan Vajravel)
  - net: hsr: fix hsr_init_sk() vs network/transport headers. (Eric Dumazet)
  - spi: atmel-quadspi: Fix register name in verbose logging function (Csókás, Bence)
  - octeontx2-af: RPM: Fix mismatch in lmac type (Hariprasad Kelam)
  - net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken (Maxime Chevallier)
  - marvell: pxa168_eth: fix call balance of pep->clk handling routines (Vitalii Mordan)
  - net: mdio-ipq4019: add missing error check (Rosen Penev)
  - net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration (Oleksij Rempel)
  - tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets (Pavan Chebbi)
  - net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device (Oleksij Rempel)
  - power: supply: bq27xxx: Fix registers of bq27426 (Barnabás Czémán)
  - power: supply: core: Remove might_sleep() from power_supply_put() (Bart Van Assche)
  - fs_parser: update mount_api doc to match function signature (Randy Dunlap)
  - vfio/pci: Properly hide first-in-list PCIe extended capability (Avihai Horon)
  - selftests/mount_setattr: Fix failures on 64K PAGE_SIZE kernels (Michael Ellerman)
  - vdpa/mlx5: Fix suboptimal range on iotlb iteration (Si-Wei Liu)
  - hwmon: (tps23861) Fix reporting of negative temperatures (Murad Masimov)
  - NFSD: Fix nfsd4_shutdown_copy() (Chuck Lever)
  - svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (Ye Bin)
  - sunrpc: simplify two-level sysctl registration for svcrdma_parm_table (Luis Chamberlain)
  - NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (Chuck Lever)
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (Chuck Lever)
  - remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region (Sibi Sankar)
  - rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length (Jonathan Marek)
  - rpmsg: glink: Fix GLINK command prefix (Bjorn Andersson)
  - rpmsg: glink: Send READ_NOTIFY command in FIFO full case (Arun Kumar Neelakantam)
  - rpmsg: glink: Add TX_DATA_CONT command while sending (Arun Kumar Neelakantam)
  - perf trace: Avoid garbage when not printing a syscall's arguments (Benjamin Peterson)
  - perf trace: Do not lose last events in a race (Benjamin Peterson)
  - svcrdma: Address an integer overflow (Chuck Lever)
  - m68k: coldfire/device.c: only build FEC when HW macros are defined (Antonio Quartulli)
  - m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x (Jean-Michel Hautbois)
  - perf trace: avoid garbage when not printing a trace event's arguments (Benjamin Peterson)
  - f2fs: check curseg->inited before write_sum_page in change_curseg (Yongpeng Yang)
  - f2fs: remove the unused flush argument to change_curseg (Christoph Hellwig)
  - f2fs: open code allocate_segment_by_default (Christoph Hellwig)
  - f2fs: remove struct segment_allocation default_salloc_ops (Christoph Hellwig)
  - f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block (LongPing Wei)
  - PCI: cpqphp: Fix PCIBIOS_* return value confusion (Ilpo Järvinen)
  - PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (weiyufeng)
  - perf probe: Correct demangled symbols in C++ program (Leo Yan)
  - perf probe: Fix libdw memory leak (Ian Rogers)
  - PCI: Fix reset_method_store() memory leak (Todd Kjos)
  - perf cs-etm: Don't flush when packet_queue fills up (James Clark)
  - mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb() (Dan Carpenter)
  - pinctrl: k210: Undef K210_PC_DEFAULT (zhang jiao)
  - clk: clk-axi-clkgen: make sure to enable the AXI bus clock (Nuno Sa)
  - dt-bindings: clock: axi-clkgen: include AXI clk (Nuno Sa)
  - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() (Zhen Lei)
  - fbdev/sh7760fb: Alloc DMA memory from hardware device (Thomas Zimmermann)
  - powerpc/kexec: Fix return of uninitialized variable (Zhang Zekun)
  - powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static (Michal Suchanek)
  - ocfs2: fix uninitialized value in ocfs2_file_read_iter() (Dmitry Antipov)
  - RDMA/hns: Fix out-of-order issue of requester when setting FENCE (Junxian Huang)
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (Zhen Lei)
  - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (Zhen Lei)
  - scsi: fusion: Remove unused variable 'rc' (Zeng Heng)
  - scsi: bfa: Fix use-after-free in bfad_im_module_exit() (Ye Bin)
  - mfd: rt5033: Fix missing regmap_del_irq_chip() (Zhang Changzhong)
  - clk: imx: clk-scu: fix clk enable state save and restore (Dong Aisheng)
  - clk: imx: lpcg-scu: SW workaround for errata (e10858) (Peng Fan)
  - powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore (Michael Ellerman)
  - powerpc/mm/fault: Fix kfence page fault reporting (Ritesh Harjani (IBM))
  - mtd: rawnand: atmel: Fix possible memory leak (Miquel Raynal)
  - cpufreq: loongson2: Unregister platform_driver on failure (Yuan Can)
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices (Andy Shevchenko)
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device (Andy Shevchenko)
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device (Andy Shevchenko)
  - mfd: intel_soc_pmic_bxtwc: Use dev_err_probe() (Andy Shevchenko)
  - mfd: da9052-spi: Change read-mask to write-mask (Marcus Folkesson)
  - mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race (Jinjie Ruan)
  - pinctrl: zynqmp: drop excess struct member description (Bartosz Golaszewski)
  - trace/trace_event_perf: remove duplicate samples on the first tracepoint event (Levi Yun)
  - bpf: fix recursive lock when verdict program return SK_PASS (Jiayuan Chen)
  - wireguard: selftests: load nf_conntrack if not present (Hangbin Liu)
  - netpoll: Use rcu_access_pointer() in netpoll_poll_lock (Breno Leitao)
  - Bluetooth: fix use-after-free in device_for_each_child() (Dmitry Antipov)
  - driver core: Introduce device_find_any_child() helper (Andy Shevchenko)
  - ALSA: 6fire: Release resources at card release (Takashi Iwai)
  - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (Takashi Iwai)
  - ALSA: us122l: Use snd_card_free_when_closed() at disconnection (Takashi Iwai)
  - ALSA: usx2y: Use snd_card_free_when_closed() at disconnection (Takashi Iwai)
  - net: rfkill: gpio: Add check for clk_enable() (Mingwei Zheng)
  - drm/amdkfd: Fix wrong usage of INIT_WORK() (Yuan Can)
  - selftests: net: really check for bg process completion (Paolo Abeni)
  - bpf, sockmap: Fix sk_msg_reset_curr (Zijian Zhang)
  - bpf, sockmap: Several fixes to bpf_msg_pop_data (Zijian Zhang)
  - bpf, sockmap: Several fixes to bpf_msg_push_data (Zijian Zhang)
  - selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap (Zijian Zhang)
  - selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap (Zijian Zhang)
  - selftests, bpf: Add one test for sockmap with strparser (Liu Jian)
  - selftests/bpf: Fix SENDPAGE data logic in test_sockmap (Zijian Zhang)
  - selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap (Zijian Zhang)
  - netlink: typographical error in nlmsg_type constants definition (Maurice Lambert)
  - netfilter: nf_tables: must hold rcu read lock while iterating object type list (Florian Westphal)
  - netfilter: nf_tables: skip transaction if update object is not implemented (Pablo Neira Ayuso)
  - drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk() (Zichen Xie)
  - wifi: wfx: Fix error handling in wfx_core_init() (Yuan Can)
  - drm/etnaviv: hold GPU lock across perfmon sampling (Lucas Stach)
  - drm/etnaviv: fix power register offset on GC300 (Doug Brown)
  - drm/etnaviv: Request pages from DMA32 zone on addressing_limited (Xiaolei Wang)
  - drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - drm/panfrost: Remove unused id_mask from struct panfrost_model (Steven Price)
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (Dipendra Khadka)
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (Dipendra Khadka)
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (Dipendra Khadka)
  - drm: fsl-dcu: enable PIXCLK on LS1021A (Matthias Schiffer)
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (Alper Nebi Yasak)
  - selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap (Zijian Zhang)
  - selftests/bpf: Fix msg_verify_data in test_sockmap (Zijian Zhang)
  - drm/bridge: tc358767: Fix link properties discovery (Tomi Valkeinen)
  - netdevsim: copy addresses for both in and out paths (Hangbin Liu)
  - libbpf: fix sym_is_subprog() logic for weak global subprogs (Andrii Nakryiko)
  - bpf: Fix the xdp_adjust_tail sample prog issue (Yuan Chen)
  - libbpf: Fix output .symtab byte-order during linking (Tony Ambardar)
  - drm/bridge: anx7625: Drop EDID cache on bridge power off (Pin-yen Lin)
  - ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode (Macpaul Lin)
  - ASoC: fsl_micfil: fix regmap_write_bits usage (Shengjiu Wang)
  - ASoC: fsl_micfil: use GENMASK to define register bit fields (Sascha Hauer)
  - ASoC: fsl_micfil: do not define SHIFT/MASK for single bits (Sascha Hauer)
  - ASoC: fsl_micfil: Drop unnecessary register read (Sascha Hauer)
  - dt-bindings: vendor-prefixes: Add NeoFidelity, Inc (Igor Prusov)
  - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 (Baochen Qiang)
  - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 (Baochen Qiang)
  - drm/v3d: Address race-condition in MMU flush (Maíra Canal)
  - drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - drm/omap: Fix locking in omap_gem_new_dmabuf() (Tomi Valkeinen)
  - drm/omap: Fix possible NULL dereference (Tomi Valkeinen)
  - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (Jeongjun Park)
  - drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (Andy Shevchenko)
  - platform/x86: panasonic-laptop: Return errno correctly in show callback (Yao Zi)
  - platform/x86: panasonic-laptop: Replace snprintf in show functions with sysfs_emit (Qing Wang)
  - media: atomisp: Add check for rgby_data memory allocation failure (Li Huafei)
  - media: atomisp: remove #ifdef HAS_NO_HMEM (Mauro Carvalho Chehab)
  - media: venus: provide ctx queue lock for ioctl synchronization (Sergey Senozhatsky)
  - venus: venc: add handling for VIDIOC_ENCODER_CMD (Dikshita Agarwal)
  - media: venus : Addition of support for VIDIOC_TRY_ENCODER_CMD (Dikshita Agarwal)
  - media: venus : Addition of EOS Event support for Encoder (Viswanath Boma)
  - media: venus: vdec: decoded picture buffer handling during reconfig sequence (Mansur Alisha Shaik)
  - media: venus: venc: Use pmruntime autosuspend (Stanimir Varbanov)
  - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (Luo Qiu)
  - selftests/resctrl: Protect against array overrun during iMC config parsing (Reinette Chatre)
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add supplies for fixed regulators (Chen-Yu Tsai)
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Fix DP bridge supply names (Chen-Yu Tsai)
  - arm64: dts: mt8183: jacuzzi: Move panel under aux-bus (Hsin-Yi Wang)
  - arm64: dts: mt8183: jacuzzi: remove unused ddc-i2c-bus (Hsin-Yi Wang)
  - regmap: irq: Set lockdep class for hierarchical IRQ domains (Andy Shevchenko)
  - spi: zynqmp-gqspi: Undo runtime PM changes at driver exit time​ (Jinjie Ruan)
  - spi: tegra210-quad: Avoid shift-out-of-bounds (Breno Leitao)
  - pmdomain: ti-sci: Add missing of_node_put() for args.np (Zhang Zekun)
  - ARM: dts: cubieboard4: Fix DCDC5 regulator constraints (Andre Przywara)
  - pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle (Clark Wang)
  - arm64: dts: mt8183: Damu: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)
  - arm64: dts: mt8183: burnet: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)
  - arm64: dts: mt8183: fennel: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)
  - cgroup/bpf: only cgroup v2 can be attached by bpf programs (Chen Ridong)
  - Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline" (Chen Ridong)
  - arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source trackpad (Chen-Yu Tsai)
  - arm64: dts: mt8183: kukui: Fix the address of eeprom at i2c4 (Hsin-Te Yuan)
  - arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4 (Hsin-Te Yuan)
  - tpm: fix signed/unsigned bug when checking event logs (Gregory Price)
  - mmc: mmc_spi: drop buggy snprintf() (Bartosz Golaszewski)
  - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (Dan Carpenter)
  - soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - spi: spi-fsl-lpspi: downgrade log level for pio mode (Alexander Stein)
  - clocksource/drivers:sp804: Make user selectable (Mark Brown)
  - kcsan, seqlock: Fix incorrect assumption in read_seqbegin() (Marco Elver)
  - kcsan, seqlock: Support seqcount_latch_t (Marco Elver)
  - seqlock/latch: Provide raw_read_seqcount_latch_retry() (Peter Zijlstra)
  - timekeeping: Consolidate fast timekeeper (Thomas Gleixner)
  - time: Fix references to _msecs_to_jiffies() handling of values (Miguel Ojeda)
  - crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (Christophe JAILLET)
  - crypto: bcm - add error check in the ahash_hmac_init function (Chen Ridong)
  - crypto: caam - add error check to caam_rsa_set_priv_key_form (Chen Ridong)
  - EDAC/igen6: Avoid segmentation fault on module unload (Orange Kao)
  - crypto: cavium - Fix the if condition to exit loop after timeout (Everest K.C)
  - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (Yi Yang)
  - EDAC/fsl_ddr: Fix bad bit shift operations (Priyanka Singh)
  - thermal: core: Initialize thermal zones before registering them (Rafael J. Wysocki)
  - crypto: qat - remove faulty arbiter config reset (Ahsan Atta)
  - EDAC/bluefield: Fix potential integer overflow (David Thompson)
  - firmware: google: Unregister driver_info on failure (Yuan Can)
  - crypto: caam - Fix the pointer passed to caam_qi_shutdown() (Christophe JAILLET)
  - hfsplus: don't query the device logical block size multiple times (Thadeu Lima de Souza Cascardo)
  - s390/syscalls: Avoid creation of arch/arch/ directory (Masahiro Yamada)
  - acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() (Aleksandr Mishin)
  - arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG (Masahiro Yamada)
  - m68k: mvme147: Reinstate early console (Daniel Palmer)
  - m68k: mvme16x: Add and use "mvme16x.h" (Geert Uytterhoeven)
  - m68k: mvme147: Fix SCSI controller IRQ numbers (Daniel Palmer)
  - nvme-pci: fix freeing of the HMB descriptor table (Christoph Hellwig)
  - initramfs: avoid filename buffer overrun (David Disseldorp)
  - mips: asm: fix warning when disabling MIPS_FP_SUPPORT (Jonas Gorski)
  - brd: defer automatic disk creation until module initialization succeeds (Yang Erkun)
  - brd: remove brd_devices_mutex mutex (Tetsuo Handa)
  - s390/cio: Do not unregister the subchannel based on DNV (Vineeth Vijayan)
  - kselftest/arm64: mte: fix printf type warnings about longs (Andre Przywara)
  - x86/barrier: Do not serialize MSR accesses on AMD (Borislav Petkov (AMD))
  - nvme: fix metadata handling in nvme-passthrough (Puranjay Mohan)
  - cifs: Fix buffer overflow when parsing NFS reparse points (Pali Rohár)
  - rcu-tasks: Idle tasks on offline CPUs are in quiescent states (Paul E. McKenney)
  - ipmr: Fix access to mfc_cache_list without lock held (Breno Leitao)
  - ARM: 9420/1: smp: Fix SMP for xip kernels (Harith G)
  - ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry (Eryk Zagorski)
  - proc/softirqs: replace seq_printf with seq_put_decimal_ull_width (David Wang)
  - ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() (Luo Yifan)
  - ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() (Luo Yifan)
  - can: j1939: fix error in J1939 documentation. (Alexander Hölzl)
  - platform/x86: dell-wmi-base: Handle META key Lock/Unlock events (Kurt Borja)
  - platform/x86: dell-smbios-base: Extends support to Alienware products (Kurt Borja)
  - regulator: rk808: Add apply_bit for BUCK3 on RK809 (Mikhail Rudenko)
  - soc: qcom: Add check devm_kasprintf() returned value (Charles Han)
  - net: usb: qmi_wwan: add Quectel RG650V (Benoît Monin)
  - x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB (Arnd Bergmann)
  - ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 (Piyush Raj Chouhan)
  - selftests/watchdog-test: Fix system accidentally reset after watchdog-test (Li Zhijian)
  - usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver (Benjamin Große)
  - mac80211: fix user-power when emulating chanctx (Ben Greear)
  - wifi: iwlwifi: mvm: Use the sync timepoint API in suspend (Daniel Gabay)
  - ASoC: Intel: sst: Support LPE0F28 ACPI HID (Hans de Goede)
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet (Hans de Goede)
  - ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec (Hans de Goede)
  - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Trond Myklebust)
  - mm: resolve faulty mmap_region() error path behaviour (Lorenzo Stoakes)
  - mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (Lorenzo Stoakes)
  - mm: unconditionally close VMAs on error (Lorenzo Stoakes)
  - mm: avoid unsafe VMA hook invocation when error arises on mmap hook (Lorenzo Stoakes)
  - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Paolo Abeni)
  - NFSD: Never decrement pending_async_copies on error (Chuck Lever)
  - NFSD: Initialize struct nfsd4_copy earlier (Chuck Lever)
  - NFSD: Limit the number of concurrent async COPY operations (Chuck Lever)
  - NFSD: Async COPY result needs to return a write verifier (Chuck Lever)
  - NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point (Dai Ngo)
  - media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set (Mauro Carvalho Chehab)
  - mmc: sunxi-mmc: Fix A100 compatible description (Andre Przywara)
  - mmc: sunxi-mmc: Add D1 MMC variant (Samuel Holland)
  - drm/bridge: tc358768: Fix DSI command tx (Francesco Dolcini)
  - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (Ryusuke Konishi)
  - ocfs2: fix UBSAN warning in ocfs2_verify_volume() (Dmitry Antipov)
  - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (Ryusuke Konishi)
  - KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (Sean Christopherson)
  - KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled (Sean Christopherson)
  - vdpa/mlx5: Fix PA offset with unaligned starting iotlb map (Si-Wei Liu)
  - ocfs2: uncache inode which has failed entering the group (Dmitry Antipov)
  - mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (Jinjiang Tu)
  - x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y (Baoquan He)
  - ARM: 9419/1: mm: Fix kernel memory mapping for xip kernels (Harith G)
  - samples: pktgen: correct dev to DEV (Wei Fang)
  - net/mlx5e: CT: Fix null-ptr-deref in add rule err flow (Moshe Shemesh)
  - net/mlx5e: kTLS, Fix incorrect page refcounting (Dragos Tatulea)
  - net/mlx5: fs, lock FTE when checking if active (Mark Bloch)
  - drm/rockchip: vop: Fix a dereferenced before check warning (Andy Yan)
  - netlink: terminate outstanding dump on socket close (Jakub Kicinski)
  - clk: qcom: gcc-qcs404: fix initial rate of GPLL3 (Gabor Juhos)
  - leds: lp55xx: Remove redundant test for invalid channel number (Michal Vokáč)
  - iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (Mostafa Saleh)
  - vmstat: call fold_vm_zone_numa_events() before show per zone NUMA event (MengEn Sun)
  - ftrace: Fix regression with module command in stack_trace_filter (guoweikang)
  - ovl: Filter invalid inodes with missing lookup function (Vasiliy Kovalev)
  - media: uvcvideo: Require entities to have a non-zero unique ID (Thadeu Lima de Souza Cascardo)
  - media: uvcvideo: Stop stream during unregister (Ricardo Ribalda)
  - media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() (Gaosheng Cui)
  - media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() (Jinjie Ruan)
  - media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled (Jinjie Ruan)
  - media: ts2020: fix null-ptr-deref in ts2020_probe() (Li Zetao)
  - media: imx-jpeg: Ensure power suppliers be suspended before detach them (Ming Qian)
  - media: i2c: tc358743: Fix crash in the probe error path when using polling (Alexander Shiyan)
  - media: imx-jpeg: Set video drvdata before register video device (Ming Qian)
  - arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer (Dragan Simic)
  - LTS version: v5.15.173 (Vijayendra Suman)
  - 9p: fix slab cache name creation for real (Linus Torvalds)
  - udf: Avoid directory type conversion failure due to ENOMEM (Jan Kara)
  - udf: Allocate name buffer in directory iterator on heap (Jan Kara)
  - mm/memory: add non-anonymous page check in the copy_present_page() (Yuanzheng Song)
  - io_uring: fix possible deadlock in io_register_iowq_max_workers() (Hagar Hemdan)
  - md/raid10: improve code of mrdev in raid10_sync_request (Li Nan)
  - net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
  - HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (Hans de Goede)
  - HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad (Kenneth Albanowski)
  - fs: Fix uninitialized value issue in from_kuid and from_kgid (Alessandro Zanni)
  - vDPA/ifcvf: Fix pci_read_config_byte() return code handling (Yuan Can)
  - powerpc/powernv: Free name on error in opal_event_init() (Michael Ellerman)
  - drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS (Ian Forbes)
  - sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML (Julian Vetter)
  - crypto: marvell/cesa - Disable hash algorithms (Herbert Xu)
  - bpf: use kvzmalloc to allocate BPF verifier environment (Rik van Riel)
  - HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (WangYuli)
  - HID: multitouch: Add support for B2402FVA track point (Stefan Blum)
  - block: Fix elevator_get_default() checking for NULL q->tag_set (SurajSonawane2415)
  - irqchip/ocelot: Fix trigger register address (Sergey Matsievskiy)
  - 9p: Avoid creating multiple slab caches with the same name (Pedro Falcato)
  - LTS version: v5.15.172 (Vijayendra Suman)
  - ALSA: usb-audio: Add endianness annotations (Jan Schär)
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Hyunwoo Kim)
  - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (Hyunwoo Kim)
  - ALSA: usb-audio: Add quirks for Dell WD19 dock (Jan Schär)
  - ALSA: usb-audio: Support jack detection on Dell dock (Jan Schär)
  - ucounts: fix counter leak in inc_rlimit_get_ucounts() (Andrei Vagin)
  - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (Andrew Kanner)
  - irqchip/gic-v3: Force propagation of the active state with a read-back (Marc Zyngier)
  - USB: serial: option: add Quectel RG650V (Benoît Monin)
  - USB: serial: option: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
  - USB: serial: qcserial: add support for Sierra Wireless EM86xx (Jack Wu)
  - USB: serial: io_edgeport: fix use after free in debug printk (Dan Carpenter)
  - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() (Dan Carpenter)
  - usb: musb: sunxi: Fix accessing an released usb phy (Zijun Hu)
  - fs/proc: fix compile warning about variable 'vmcore_mmap_ops' (Qi Xi)
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Benoit Sevens)
  - net: do not delay dst_entries_add() in dst_release() (Eric Dumazet)
  - net: bridge: xmit: make sure we have at least eth header len bytes (Nikolay Aleksandrov)
  - btrfs: reinitialize delayed ref list after deleting it from the list (Filipe Manana)
  - nfs: Fix KMSAN warning in decode_getfattr_attrs() (Roberto Sassu)
  - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (Jens Axboe)
  - io_uring: use kiocb_{start,end}_write() helpers (Amir Goldstein)
  - fs: create kiocb_{start,end}_write() helpers (Amir Goldstein)
  - io_uring: rename kiocb_end_write() local helper (Amir Goldstein)
  - posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone (Benjamin Segall)
  - ALSA: usb-audio: Add quirk for HP 320 FHD Webcam (Takashi Iwai)
  - dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow (Zichen Xie)
  - dm cache: fix potential out-of-bounds access on the first resume (Ming-Hung Tsai)
  - dm cache: optimize dirty bit checking with find_next_bit when resizing (Ming-Hung Tsai)
  - dm cache: fix out-of-bounds access to the dirty bitset when resizing (Ming-Hung Tsai)
  - dm cache: correct the number of origin blocks to match the target length (Ming-Hung Tsai)
  - thermal/drivers/qcom/lmh: Remove false lockdep backtrace (Dmitry Baryshkov)
  - drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (Alex Deucher)
  - drm/amdgpu: Adjust debugfs eviction and IB access permissions (Alex Deucher)
  - pwm: imx-tpm: Use correct MODULO value for EPWM mode (Erik Schumacher)
  - media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl() (Mauro Carvalho Chehab)
  - media: v4l2-tpg: prevent the risk of a division by zero (Mauro Carvalho Chehab)
  - media: pulse8-cec: fix data timestamp at pulse8_setup() (Mauro Carvalho Chehab)
  - media: cx24116: prevent overflows on SNR calculus (Mauro Carvalho Chehab)
  - media: s5p-jpeg: prevent buffer overflows (Mauro Carvalho Chehab)
  - ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove (Amelie Delaunay)
  - ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() (Murad Masimov)
  - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer (Johannes Thumshirn)
  - media: adv7604: prevent underflow condition when reporting colorspace (Mauro Carvalho Chehab)
  - media: dvb_frontend: don't play tricks with underflow values (Mauro Carvalho Chehab)
  - media: dvbdev: prevent the risk of out of memory access (Mauro Carvalho Chehab)
  - media: stb0899_algo: initialize cfr before using it (Mauro Carvalho Chehab)
  - net: arc: fix the device for dma_map_single/dma_unmap_single (Johan Jonker)
  - net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case (Nícolas F. R. A. Prado)
  - net: phy: ti: add PHY_RST_AFTER_CLK_EN flag (Diogo Silva)
  - net: hns3: fix kernel crash when uninstalling driver (Peiyang Wang)
  - i40e: fix race condition by adding filter's intermediate sync state (Aleksandr Loktionov)
  - can: c_can: fix {rx,tx}_errors statistics (Dario Binacchi)
  - sctp: properly validate chunk size in sctp_sf_ootb() (Xin Long)
  - net: enetc: set MAC address to the VF net_device (Wei Fang)
  - security/keys: fix slab-out-of-bounds in key_task_permission (Chen Ridong)
  - nfs: avoid i_lock contention in nfs_clear_invalid_mapping (Mike Snitzer)
  - NFSv3: handle out-of-order write replies. (NeilBrown)
  - NFS: Add a tracepoint to show the results of nfs_set_cache_invalid() (Benjamin Coddington)
  - NFSv3: only use NFS timeout for MOUNT when protocols are compatible (NeilBrown)
  - HID: core: zero-initialize the report buffer (Jiri Kosina)
  - ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin (Heiko Stuebner)
  - ARM: dts: rockchip: Fix the spi controller on rk3036 (Heiko Stuebner)
  - ARM: dts: rockchip: drop grf reference from rk3036 hdmi (Heiko Stuebner)
  - ARM: dts: rockchip: fix rk3036 acodec node (Heiko Stuebner)
  - arm64: dts: imx8mp: correct sdhc ipg clk (Peng Fan)
  - arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc (Heiko Stuebner)
  - arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion (Heiko Stuebner)
  - arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards (Heiko Stuebner)
  - arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 (Diederik de Haas)
  - arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator (Geert Uytterhoeven)


author: Brian Maly <brian.maly@oracle.com> [5.15.0-305.176.4.el8uek]
changelog:
  - x86/asm: Make serialize() always_inline (Juergen Gross)   
  - hwmon: (tmp513) Fix division of negative numbers (David Lechner)   
  - Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data" (Pratyush Yadav)   
  - Revert "regmap: detach regmap from dev on regmap_exit" (Greg Kroah-Hartman)   
  - Revert "drm/amdgpu: rework resume handling for display (v2)" (Greg Kroah-Hartman)   
  - Revert "PCI: Use preserve_config in place of pci_flags" (Terry Tritton)   
  - virtio-net: synchronize probe with ndo_set_features (Jason Wang)  [Orabug: 36637822]  
  - virtio-net: synchronize operstate with admin state on up/down (Jason Wang)  [Orabug: 36637822]  
  - virtio: allow driver to disable the configure change notification (Jason Wang)  [Orabug: 36637822]  
  - virtio: rename virtio_config_enabled to virtio_config_core_enabled (Jason Wang)  [Orabug: 36637822]  
  - mlxsw: pci: Fix driver initialization with Spectrum-4 (Ido Schimmel)  [Orabug: 36811057]  
  - mlxsw: pci: Fix driver initialization with old firmware (Ido Schimmel)  [Orabug: 36811057]  
  - mmc: sdhci-of-dwcmshc: th1520: Increase tuning loop count to 128 (Maksim Kiselev)  [Orabug: 36811057]  
  - net/mlx5e: Switch to using _bh variant of of spinlock API in port timestamping NAPI poll context (Rahul Rameshbabu)  [Orabug: 36811057]  
  - net/mlx5e: Fix MACsec state loss upon state update in offload path (Emeel Hakim)  [Orabug: 36811057]  
  - net/mlx5e: Change the warning when ignore_flow_level is not supported (Jianbo Liu)  [Orabug: 36811057]  
  - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Gavin Li)  [Orabug: 36811057]  
  - IB/mlx5: Don't expose debugfs entries for RRoCE general parameters if not supported (Mark Zhang)  [Orabug: 36811057]  
  - net/mlx5e: Ignore IPsec replay window values on sender side (Leon Romanovsky)  [Orabug: 36811057]  
  - net/mlx5e: Allow software parsing when IPsec crypto is enabled (Leon Romanovsky)  [Orabug: 36811057]  
  - net/mlx5: Use mlx5 device constant for selecting CQ period mode for ASO (Rahul Rameshbabu)  [Orabug: 36811057]  
  - net/mlx5: Bridge, fix multicast packets sent to uplink (Moshe Shemesh)  [Orabug: 36811057]  
  - net/mlx5: Fix a WARN upon a callback command failure (Yishai Hadas)  [Orabug: 36811057]  
  - net/mlx5e: Fix peer flow lists handling (Vlad Buslov)  [Orabug: 36811057]  
  - net/mlx5: Fix query of sd_group field (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5e: Use the correct lag ports number when creating TISes (Saeed Mahameed)  [Orabug: 36811057]  
  - selftests: mlxsw: qos_pfc: Remove wrong description (Amit Cohen)  [Orabug: 36811057]  
  - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (Ido Schimmel)  [Orabug: 36811057]  
  - gpio: mlxbf3: add an error code check in mlxbf3_gpio_probe (Su Hui)  [Orabug: 36811057]  
  - vdpa/mlx5: Add mkey leak detection (Dragos Tatulea)  [Orabug: 36811057]  
  - vdpa/mlx5: Introduce reference counting to mrs (Dragos Tatulea)  [Orabug: 36811057]  
  - vdpa/mlx5: Use vq suspend/resume during .set_map (Dragos Tatulea)  [Orabug: 36811057]  
  - vdpa/mlx5: Mark vq state for modification in hw vq (Dragos Tatulea)  [Orabug: 36811057]  
  - vdpa/mlx5: Mark vq addrs for modification in hw vq (Dragos Tatulea)  [Orabug: 36811057]  
  - vdpa/mlx5: Introduce per vq and device resume (Dragos Tatulea)  [Orabug: 36811057]  
  - vdpa/mlx5: Allow modifying multiple vq fields in one modify command (Dragos Tatulea)  [Orabug: 36811057]  
  - vdpa/mlx5: Expose resumable vq capability (Dragos Tatulea)  [Orabug: 36811057]  
  - Revert "mlx5 updates 2023-12-20" (Jakub Kicinski)  [Orabug: 36811057]  
  - net/mlx5: DPLL, Implement fractional frequency offset get pin op (Jiri Pirko)  [Orabug: 36811057]  
  - net/mlx5: DPLL, Use struct to get values from mlx5_dpll_synce_status_get() (Jiri Pirko)  [Orabug: 36811057]  
  - net: macsec: move sci_to_cpu to macsec header (Radu Pirea (NXP OSS))  [Orabug: 36811057]  
  - net/mlx5: Implement management PF Ethernet profile (Armen Ratner)  [Orabug: 36811057]  
  - net/mlx5: Enable SD feature (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5e: Block TLS device offload on combined SD netdev (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5e: Support per-mdev queue counter (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5e: Support cross-vhca RSS (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5e: Let channels be SD-aware (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5e: Create EN core HW resources for all secondary devices (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5e: Create single netdev per SD group (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5: SD, Add informative prints in kernel log (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5: SD, Implement steering for primary and secondaries (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5: SD, Implement devcom communication and primary election (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5: SD, Implement basic query and instantiation (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5: SD, Introduce SD lib (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5: Fix query of sd_group field (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5e: Use the correct lag ports number when creating TISes (Saeed Mahameed)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Set NVE flood profile as part of FID configuration (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Add an "any" packet type (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: reg: Add nve_flood_prf_id field to SFMR (Petr Machata)  [Orabug: 36811057]  
  - net/mlx5: DR, Use swap() instead of open coding it (Jiapeng Chong)  [Orabug: 36811057]  
  - net/mlx5: devcom, Add component size getter (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5e: Decouple CQ from priv (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5e: Statify function mlx5e_monitor_counter_arm (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5: Move TISes from priv to mdev HW resources (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5e: Remove TLS-specific logic in generic create TIS API (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5: fs, Command to control TX flow table root (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5: fs, Command to control L2TABLE entry silent mode (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5: Expose Management PCIe Index Register (MPIR) (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5: Add mlx5_ifc bits used for supporting single netdev Socket-Direct (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5: Manage ICM type of SW encap (Shun Hao)  [Orabug: 36811057]  
  - RDMA/mlx5: Support handling of SW encap ICM area (Shun Hao)  [Orabug: 36811057]  
  - net/mlx5: Introduce indirect-sw-encap ICM properties (Shun Hao)  [Orabug: 36811057]  
  - mmc: sdhci-of-dwcmshc: Use logical OR instead of bitwise OR in dwcmshc_probe() (Nathan Chancellor)  [Orabug: 36811057]  
  - mmc: sdhci-of-dwcmshc: Add support for T-Head TH1520 (Drew Fustini)  [Orabug: 36811057]  
  - mmc: sdhci: add __sdhci_execute_tuning() to header (Drew Fustini)  [Orabug: 36811057]  
  - mlxsw: spectrum: Use CFF mode where available (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Add support for rFID family in CFF flood mode (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Add a family for bridge FIDs in CFF flood mode (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Initialize flood profiles in CFF mode (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Add profile_id to flood profile (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Add an object to keep flood profiles (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Add hooks for RSP table maintenance (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Add a not-UC packet type (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Add an op for packing SFMR (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Add an op to get PGT address of a FID (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Add an op to get PGT allocation size (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Add an op for flood table initialization (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Move mlxsw_sp_fid_flood_table_init() up (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Make mlxsw_sp_fid_ops.setup return an int (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Split a helper out of mlxsw_sp_fid_flood_table_mid() (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Rename FID ops, families, arrays (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Privatize FID families (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: pci: Fix missing error checking (Ido Schimmel)  [Orabug: 36811057]  
  - mlxsw: spectrum_router: Call RIF setup before obtaining FID (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_router: Add a helper to get subport number from a RIF (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Extract SFMR packing into a helper (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Drop unnecessary conditions (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: pci: Permit enabling CFF mode (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: core, pci: Add plumbing related to CFF mode (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: reg: Add to SFMR register the fields related to CFF flood mode (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: reg: Extract flood-mode specific part of mlxsw_reg_sfmr_pack() (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: reg: Drop unnecessary writes from mlxsw_reg_sfmr_pack() (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: reg: Mark SFGC & some SFMR fields as reserved in CFF mode (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: reg: Add Switch FID Flooding Profiles Register (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: resources: Add max_cap_nve_flood_prf (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: cmd: Add MLXSW_CMD_MBOX_CONFIG_PROFILE_FLOOD_MODE_CFF (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: cmd: Add cmd_mbox.query_fw.cff_support (Petr Machata)  [Orabug: 36811057]  
  - EDAC/bluefield: Convert to platform remove callback returning void (Uwe Kleine-König)  [Orabug: 36811057]  
  - selftests: mlxsw: Add PCI reset test (Ido Schimmel)  [Orabug: 36811057]  
  - mlxsw: pci: Implement PCI reset handlers (Ido Schimmel)  [Orabug: 36811057]  
  - mlxsw: pci: Add support for new reset flow (Ido Schimmel)  [Orabug: 36811057]  
  - mlxsw: pci: Move software reset code to a separate function (Amit Cohen)  [Orabug: 36811057]  
  - mlxsw: pci: Rename mlxsw_pci_sw_reset() (Amit Cohen)  [Orabug: 36811057]  
  - mlxsw: Extend MRSR pack() function to support new commands (Amit Cohen)  [Orabug: 36811057]  
  - net/mlx5e: Remove early assignment to netdev->features (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5e: Add local loopback counter to vport rep stats (Or Har-Toov)  [Orabug: 36811057]  
  - net/mlx5: Query maximum frequency adjustment of the PTP hardware clock (Rahul Rameshbabu)  [Orabug: 36811057]  
  - net/mlx5: Convert scaled ppm values outside the s32 range for PHC frequency adjustments (Rahul Rameshbabu)  [Orabug: 36811057]  
  - net/mlx5: Initialize clock->ptp_info inside mlx5_init_timer_clock (Rahul Rameshbabu)  [Orabug: 36811057]  
  - net/mlx5: Refactor real time clock operation checks for PHC (Rahul Rameshbabu)  [Orabug: 36811057]  
  - net/mlx5e: Access array with enum values instead of magic numbers (Gal Pressman)  [Orabug: 36811057]  
  - net/mlx5: simplify mlx5_set_driver_version string assignments (Justin Stitt)  [Orabug: 36811057]  
  - net/mlx5: Annotate struct mlx5_flow_handle with __counted_by (Kees Cook)  [Orabug: 36811057]  
  - net/mlx5: Annotate struct mlx5_fc_bulk with __counted_by (Kees Cook)  [Orabug: 36811057]  
  - net/mlx5e: Some cleanup in mlx5e_tc_stats_matchall() (Amir Tzin)  [Orabug: 36811057]  
  - net/mlx5: Allow sync reset flow when BF MGT interface device is present (Moshe Shemesh)  [Orabug: 36811057]  
  - net/mlx5: print change on SW reset semaphore returns busy (Moshe Shemesh)  [Orabug: 36811057]  
  - vdpa/mlx5: clean up indenting in handle_ctrl_vlan() (Dan Carpenter)  [Orabug: 36811057]  
  - vdpa/mlx5: fix error code for deleting vlan (Dan Carpenter)  [Orabug: 36811057]  
  - vdpa/mlx5: Fix syntax errors in comments (Xiang wangx)  [Orabug: 36811057]  
  - macsec: Fix use-after-free while sending the offloading packet (Jianbo Liu)  [Orabug: 37268700]  {CVE-2024-50261} 
  - xfrm: Export symbol xfrm_dev_state_delete. (Steffen Klassert)  [Orabug: 37357287]  
  - xfrm: Fix unregister netdevice hang on hardware offload. (Steffen Klassert)  [Orabug: 37357287]  
  - xfrm: fix a data-race in xfrm_lookup_with_ifid() (Eric Dumazet)  [Orabug: 37357287]  
  - xfrm: generalize xdo_dev_state_update_curlft to allow statistics update (Leon Romanovsky)  [Orabug: 37357287]  
  - xfrm: copy_to_user_state fetch offloaded SA packets/bytes statistics (Raed Salem)  [Orabug: 37357287]  
  - xfrm: annotate data-race around use_time (Eric Dumazet)  [Orabug: 37357287]  
  - xfrm: consistently use time64_t in xfrm_timer_handler() (Eric Dumazet)  [Orabug: 37357287]  
  - cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids (Srinivas Pandruvada)  [Orabug: 37383554]  
  - cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids (Pedro Henrique Kopper)  [Orabug: 37383554]  
  - cpufreq: intel_pstate: Use Meteor Lake EPPs for Arrow Lake (Srinivas Pandruvada)  [Orabug: 37383554]  
  - cpufreq: intel_pstate: Update Meteor Lake EPPs (Srinivas Pandruvada)  [Orabug: 37383554]  
  - cpufreq: intel_pstate: Switch to new Intel CPU model defines (Tony Luck)  [Orabug: 37383554]  
  - cpufreq: Switch to new Intel CPU model defines (Tony Luck)  [Orabug: 37383554]  
  - x86/cpu/vfm: Update arch/x86/include/asm/intel-family.h (Tony Luck)  [Orabug: 37383554]  
  - x86/cpu: Add model number for another Intel Arrow Lake mobile processor (Tony Luck)  [Orabug: 37383554]  
  - cpufreq: intel_pstate: Update default EPPs for Meteor Lake (Srinivas Pandruvada)  [Orabug: 37383554]  
  - cpufreq: intel_pstate: Allow model specific EPPs (Srinivas Pandruvada)  [Orabug: 37383554]  
  - x86/cpu: Add model number for Intel Clearwater Forest processor (Tony Luck)  [Orabug: 37383554]  
  - cpufreq: intel_pstate: Update hybrid scaling factor for Meteor Lake (Srinivas Pandruvada)  [Orabug: 37383554]  
  - cpufreq: intel_pstate: Prioritize firmware-provided balance performance EPP (Srinivas Pandruvada)  [Orabug: 37383554]  
  - x86/cpu: Add model number for Intel Arrow Lake mobile processor (Tony Luck)  [Orabug: 37383554]  
  - x86/cpu: Update Hybrids (Peter Zijlstra)  [Orabug: 37383554]  
  - cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (Srinivas Pandruvada)  [Orabug: 37383554]  
  - cpufreq: intel_pstate: Enable HWP IO boost for all servers (Srinivas Pandruvada)  [Orabug: 37383554]  
  - cpufreq: intel_pstate: Allow EPP 0x80 setting by the firmware (Srinivas Pandruvada)  [Orabug: 37383554]  
  - cpufreq: intel_pstate: Use firmware default EPP (Srinivas Pandruvada)  [Orabug: 37383554]  
  - net/mlx5: Add a timeout to acquire the command queue semaphore (Akiva Goldberger)  [Orabug: 37388415]  
  - PCI: Fix pci_enable_acs() support for the ACS quirks (Jason Gunthorpe)  [Orabug: 37477375]  
  - PCI: Clear Secondary Status errors after enumeration (Vidya Sagar)  [Orabug: 37477375]  
  - PCI/AER: Configure ECRC only if AER is native (Vidya Sagar)  [Orabug: 37477375]  
  - PCI: Extend ACS configurability (Vidya Sagar)  [Orabug: 37477375]  
  - NFSv4/pNFS: Do layout state recovery upon reboot (Trond Myklebust)  [Orabug: 37477755]  
  - NFSv4/pNFS: Remove redundant call to unhash the layout (Trond Myklebust)  [Orabug: 37477755]  
  - NFSv4/pnfs: Give nfs4_proc_layoutreturn() a flags argument (Trond Myklebust)  [Orabug: 37477755]  
  - NFSv4/pNFS: Retry the layout return later in case of a timeout or reboot (Trond Myklebust)  [Orabug: 37477755]  
  - NFSv4/pNFS: Handle server reboots in pnfs_poc_release() (Trond Myklebust)  [Orabug: 37477755]  
  - NFSv4/pNFS: Add a helper to defer failed layoutreturn calls (Trond Myklebust)  [Orabug: 37477755]  
  - NFSv4/pnfs: Add support for the PNFS_LAYOUT_FILE_BULK_RETURN flag (Trond Myklebust)  [Orabug: 37477755]  
  - pNFS: Add a flag argument to pnfs_destroy_layouts_byclid() (Trond Myklebust)  [Orabug: 37477755]  
  - NFSv4: Clean up encode_nfs4_stateid() (Trond Myklebust)  [Orabug: 37477755]  
  - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust)  [Orabug: 37477755]  
  - NFSv4/pnfs: Remove redundant list check (Trond Myklebust)  [Orabug: 37477755]  
  - uek-rpm: Enable CONFIG_SENSORS_ARM_SCMI and CONFIG_MVL_MHU (Thomas Tai)  [Orabug: 37498899]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-305.176.3.el8uek]
changelog:
  - LTS version: v5.15.176 (Vijayendra Suman)
  - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa)
  - dt-bindings: display: adi,adv7533: Drop single lane support (Biju Das)
  - drm: adv7511: Drop dsi single lane support (Biju Das)
  - net/sctp: Prevent autoclose integer overflow in sctp_association_init() (Nikolay Kuratov)
  - sky2: Add device ID 11ab:4373 for Marvell 88E8075 (Pascal Hambourg)
  - pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking (Evgenii Shatokhin)
  - RDMA/uverbs: Prevent integer overflow issue (Dan Carpenter)
  - kcov: mark in_softirq_really() as __always_inline (Arnd Bergmann)
  - modpost: fix the missed iteration for the max bit in do_input() (Masahiro Yamada)
  - modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host (Masahiro Yamada)
  - usb: xhci: Avoid queuing redundant Stop Endpoint commands (Michal Pecio)
  - ARC: build: Try to guess GCC variant of cross compiler (Leon Romanovsky)
  - irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (Uros Bizjak)
  - net: usb: qmi_wwan: add Telit FE910C04 compositions (Daniele Palmas)
  - bpf: fix potential error return (Anton Protopopov)
  - sound: usb: format: don't warn that raw DSD is unsupported (Adrian Ratiu)
  - sound: usb: enable DSD output for ddHiFi TC44C (Adrian Ratiu)
  - btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (Filipe Manana)
  - drm/amdkfd: Correct the migration DMA map direction (Prike Liang)
  - wifi: mac80211: wake the queues in case of failure in resume (Emmanuel Grumbach)
  - btrfs: sysfs: fix direct super block member reads (Qu Wenruo)
  - btrfs: sysfs: convert scnprintf and snprintf to sysfs_emit (Anand Jain)
  - btrfs: fix use-after-free when COWing tree bock and tracing is enabled (Filipe Manana) [Orabug: 37452645] {CVE-2024-56759}
  - btrfs: rename and export __btrfs_cow_block() (Filipe Manana)
  - ila: serialize calls to nf_register_net_hooks() (Eric Dumazet)
  - af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Eric Dumazet)
  - af_packet: fix vlan_get_tci() vs MSG_PEEK (Eric Dumazet)
  - net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init() (Maciej S. Szmigiero)
  - net: restrict SO_REUSEPORT to inet sockets (Eric Dumazet)
  - RDMA/rtrs: Ensure 'ib_sge list' is accessible (Li Zhijian)
  - net: mv643xx_eth: fix an OF node reference leak (Joe Hattori)
  - eth: bcmsysport: fix call balance of priv->clk handling routines (Vitalii Mordan)
  - ALSA: usb-audio: US16x08: Initialize array before use (Tanya Agarwal)
  - net: llc: reset skb->transport_header (Antonio Pastor)
  - netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext (Pablo Neira Ayuso)
  - drm/i915/dg1: Fix power gate sequence. (Rodrigo Vivi)
  - netrom: check buffer length before accessing it (Ilya Shchipletsov)
  - net: fix memory leak in tcp_conn_request() (Wang Liang)
  - net: stmmac: restructure the error path of stmmac_probe_config_dt() (Joe Hattori)
  - net: stmmac: don't create a MDIO bus if unnecessary (Andrew Halaney)
  - net: stmmac: platform: provide devm_stmmac_probe_config_dt() (Bartosz Golaszewski)
  - RDMA/hns: Fix missing flush CQE for DWQE (Chengchang Tang)
  - RDMA/hns: Fix warning storm caused by invalid input in IO path (Chengchang Tang)
  - RDMA/hns: Fix mapping error of zero-hop WQE buffer (wenglianfa)
  - RDMA/hns: Remove redundant 'bt_level' for hem_list_alloc_item() (Yunsheng Lin)
  - RDMA/hns: Remove redundant 'attr_mask' in modify_qp_init_to_init() (Yixing Liu)
  - drm/bridge: adv7511_audio: Update Audio InfoFrame properly (Stefan Ekenberg)
  - RDMA/bnxt_re: Fix the locking while accessing the QP table (Selvin Xavier)
  - RDMA/bnxt_re: Fix max_qp_wrs reported (Selvin Xavier)
  - RDMA/bnxt_re: Fix reporting hw_ver in query_device (Kalesh AP)
  - RDMA/bnxt_re: Add check for path mtu in modify_qp (Saravanan Vajravel)
  - RDMA/mlx5: Enforce same type port association for multiport RoCE (Patrisious Haddad)
  - xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic (Mathias Nyman)
  - usb: xhci: Limit Stop Endpoint retries (Michal Pecio)
  - xhci: retry Stop Endpoint on buggy NEC controllers (Michal Pecio)
  - thunderbolt: Add support for Intel Panther Lake-M/P (Mika Westerberg)
  - thunderbolt: Add support for Intel Lunar Lake (Mika Westerberg)
  - thunderbolt: Add Intel Barlow Ridge PCI ID (Mika Westerberg)
  - thunderbolt: Add support for Intel Meteor Lake (Mika Westerberg)
  - thunderbolt: Add support for Intel Raptor Lake (George D Sworo)
  - tracing: Have process_string() also allow arrays (Steven Rostedt)
  - selinux: ignore unknown extended permissions (Thiébaud Weksteen)
  - x86/hyperv: Fix hv tsc page based sched_clock for hibernation (Naman Jain)
  - net: dsa: improve shutdown sequence (Vladimir Oltean) [Orabug: 37206293] {CVE-2024-49998}
  - nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (Yang Erkun) [Orabug: 37252394] {CVE-2024-50121}
  - btrfs: avoid monopolizing a core when activating a swap file (Filipe Manana)
  - power: supply: gpio-charger: Fix set charge current limits (Dimitri Fedrau)
  - tracing: Prevent bad count for tracing_cpumask_write (Lizhi Xu) [Orabug: 37452666] {CVE-2024-56763}
  - tracing: Constify string literal data member in struct trace_event_call (Christian Göttsche)
  - ksmbd: fix racy issue from session lookup and expire (Namjae Jeon)
  - lib: stackinit: hide never-taken branch from compiler (Kees Cook)
  - drm/dp_mst: Verify request type in the corresponding down message reply (Imre Deak)
  - arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs (Catalin Marinas)
  - arm64: mm: Rename asid2idx() to ctxid2asid() (Yunfeng Ye)
  - ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write (Jordy Zomer) [Orabug: 37434089] {CVE-2024-56626}
  - ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read (Jordy Zomer) [Orabug: 37434096] {CVE-2024-56627}
  - drm/dp_mst: Fix MST sideband message body length check (Imre Deak) [Orabug: 37434052] {CVE-2024-56616}
  - bpf: Check validity of link->type in bpf_link_show_fdinfo() (Hou Tao) [Orabug: 37331881] {CVE-2024-53099}
  - MIPS: Probe toolchain support of -msym32 (Jiaxun Yang)
  - vmalloc: fix accounting with i915 (Matthew Wilcox (Oracle))
  - virtio-blk: don't keep queue frozen during system suspend (Ming Lei)
  - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery)
  - scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time (Ranjan Kumar)
  - platform/x86: asus-nb-wmi: Ignore unknown event 0xCF (Armin Wolf)
  - regmap: Use correct format specifier for logging range errors (Mark Brown)
  - ALSA: hda/conexant: fix Z60MR100 startup pop issue (bo liu)
  - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl)
  - scsi: qla1280: Fix hw revision numbering for ISP1020/1040 (Magnus Lindholm)
  - watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04 (James Hilliard)
  - tracing/kprobe: Make trace_kprobe's module callback called after jump_label update (Masami Hiramatsu (Google))
  - mtd: rawnand: fix double free in atmel_pmecc_create_user() (Dan Carpenter) [Orabug: 37522457] {CVE-2024-56766}
  - dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset (Chen Ridong) [Orabug: 37452680] {CVE-2024-56767}
  - dmaengine: dw: Select only supported masters for ACPI devices (Andy Shevchenko)
  - dmaengine: mv_xor: fix child node refcount handling in early exit (Javier Carrasco)
  - phy: core: Fix that API devm_phy_destroy() fails to destroy the phy (Zijun Hu)
  - phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider (Zijun Hu)
  - phy: core: Fix that API devm_phy_put() fails to release the phy (Zijun Hu)
  - phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() (Zijun Hu)
  - phy: core: Fix an OF node refcount leakage in _of_phy_get() (Zijun Hu)
  - mtd: rawnand: arasan: Fix missing de-registration of NAND (Maciej Andrzejewski)
  - mtd: rawnand: arasan: Fix double assertion of chip-select (Maciej Andrzejewski)
  - mtd: diskonchip: Cast an operand to prevent potential overflow (Zichen Xie)
  - nfsd: restore callback functionality for NFSv4.0 (NeilBrown)
  - bpf: Check negative offsets in __bpf_skb_min_len() (Cong Wang)
  - tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection (Zijian Zhang)
  - tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress() (Cong Wang)
  - mm/vmstat: fix a W=1 clang compiler warning (Bart Van Assche)
  - media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (Nikita Zhandarovich) [Orabug: 37452686] {CVE-2024-56769}
  - drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update (Michel Dänzer)
  - epoll: Add synchronous wakeup support for ep_poll_callback (Xuewen Yan)
  - ceph: validate snapdirname option length when mounting (Ilya Dryomov)
  - of: Fix refcount leakage for OF node returned by __of_get_dma_parent() (Zijun Hu)
  - of: Fix error path in of_parse_phandle_with_args_map() (Herve Codina)
  - udmabuf: also check for F_SEAL_FUTURE_WRITE (Jann Horn)
  - nilfs2: prevent use of deleted inode (Edward Adam Davis)
  - of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() (Zijun Hu)
  - NFS/pnfs: Fix a live lock between recalled layouts and layoutget (Trond Myklebust)
  - tracing: Add "%s" check in test_event_printk() (Steven Rostedt)
  - tracing: Add missing helper functions in event pointer dereference check (Steven Rostedt)
  - tracing: Fix test_event_printk() to process entire print argument (Steven Rostedt)
  - KVM: x86: Play nice with protected guests in complete_hypercall_exit() (Sean Christopherson)
  - Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (Michael Kelley)
  - btrfs: tree-checker: reject inline extent items with 0 ref count (Qu Wenruo)
  - zram: refuse to use zero sized block device as backing device (Kairui Song)
  - sh: clk: Fix clk_enable() to return 0 on NULL clk (Geert Uytterhoeven)
  - hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers (Murad Masimov)
  - hwmon: (tmp513) Fix Current Register value interpretation (Murad Masimov)
  - hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers (Murad Masimov)
  - hwmon: (tmp513) Use SI constants from units.h (Andy Shevchenko)
  - hwmon: (tmp513) Simplify with dev_err_probe() (Andy Shevchenko)
  - hwmon: (tmp513) Don't use "proxy" headers (Andy Shevchenko)
  - drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (Ville Syrjälä)
  - USB: serial: option: add Telit FE910C04 rmnet compositions (Daniele Palmas)
  - USB: serial: option: add MediaTek T7XX compositions (Jack Wu)
  - USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready (Mank Wang)
  - USB: serial: option: add MeiG Smart SLM770A (Michal Hrusecky)
  - USB: serial: option: add TCL IK512 MBIM & ECM (Daniel Swanemar)
  - efivarfs: Fix error on non-existent file (James Bottomley)
  - i2c: riic: Always round-up when calculating bus period (Geert Uytterhoeven)
  - chelsio/chtls: prevent potential integer overflow on 32bit (Dan Carpenter)
  - mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk (Prathamesh Shete)
  - net: mdiobus: fix an OF node reference leak (Joe Hattori)
  - netfilter: ipset: Fix for recursive locking warning (Phil Sutter)
  - net: ethernet: bgmac-platform: fix an OF node reference leak (Joe Hattori)
  - net: hinic: Fix cleanup in create_rxqs/txqs() (Dan Carpenter)
  - ionic: use ee->offset when returning sprom data (Shannon Nelson)
  - ionic: Fix netdev notifier unregister on failure (Brett Creeley) [Orabug: 37434407] {CVE-2024-56715}
  - netdevsim: prevent bad user input in nsim_dev_health_break_write() (Eric Dumazet) [Orabug: 37434410] {CVE-2024-56716}
  - net/smc: check return value of sock_recvmsg when draining clc data (Guangguan Wang)
  - net/smc: check smcd_v2_ext_offset when receiving proposal msg (Guangguan Wang)
  - net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (Guangguan Wang)
  - net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll (Guangguan Wang)
  - erofs: fix incorrect symlink detection in fast symlink (Gao Xiang)
  - i2c: pnx: Fix timeout in wait functions (Vladimir Riabchun)
  - usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled (Peng Hongchi)
  - MIPS: Loongson64: DTS: Fix msi node for ls7a (Jiaxun Yang)
  - PCI: Add ACS quirk for Broadcom BCM5760X NIC (Ajit Khaparde)
  - PCI: vmd: Create domain symlink before pci_bus_add_devices() (Jiwei Sun)
  - ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP (Pierre-Louis Bossart)
  - usb: cdns3: Add quirk flag to enable suspend residency (Roger Quadros)
  - ALSA: usb: Fix UBSAN warning in parse_audio_unit() (Takashi Iwai)
  - PCI/AER: Disable AER service on suspend (Kai-Heng Feng)
  - PCI: Use preserve_config in place of pci_flags (Vidya Sagar)
  - net: sched: fix ordering of qlen adjustment (Lion Ackermann) [Orabug: 37433381] {CVE-2024-53164}
  - LTS version: v5.15.175 (Vijayendra Suman)
  - x86/static-call: fix 32-bit build (Juergen Gross)
  - ALSA: usb-audio: Fix a DMA to stack memory bug (Dan Carpenter)
  - x86/xen: remove hypercall page (Juergen Gross)
  - x86/xen: use new hypercall functions instead of hypercall page (Juergen Gross)
  - x86/xen: add central hypercall functions (Juergen Gross)
  - x86/xen: don't do PV iret hypercall through hypercall page (Juergen Gross) [Orabug: 37427545] {CVE-2024-53241}
  - x86/static-call: provide a way to do very early static-call updates (Juergen Gross)
  - objtool/x86: allow syscall instruction (Juergen Gross)
  - x86: make get_cpu_vendor() accessible from Xen code (Juergen Gross)
  - xen/netfront: fix crash when removing device (Juergen Gross) [Orabug: 37427541] {CVE-2024-53240}
  - Revert "parisc: fix a possible DMA corruption" (Greg Kroah-Hartman)
  - tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe() (Nikolay Kuratov)
  - bpf: sync_linked_regs() must preserve subreg_def (Eduard Zingerman) [Orabug: 37388801] {CVE-2024-53125}
  - blk-iocost: Avoid using clamp() on inuse in __propagate_weights() (Nathan Chancellor)
  - ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired (Daniil Tatianin)
  - team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Daniel Borkmann)
  - bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Daniel Borkmann)
  - net/sched: netem: account for backlog updates from child qdisc (Martin Ottens)
  - Documentation: PM: Clarify pm_runtime_resume_and_get() return value (Paul Barker)
  - qca_spi: Make driver probing reliable (Stefan Wahren)
  - qca_spi: Fix clock speed for multiple QCA7000 (Stefan Wahren)
  - cxgb4: use port number to set mac addr (Anumula Murali Mohan Reddy)
  - ACPI: resource: Fix memory resource type union access (Ilpo Järvinen)
  - net: sparx5: fix the maximum frame length register (Daniel Machon)
  - net: sparx5: fix FDMA performance issue (Daniel Machon)
  - net: lapb: increase LAPB_HEADER_LEN (Eric Dumazet) [Orabug: 37434236] {CVE-2024-56659}
  - ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init() (Thomas Weißschuh)
  - ptp: kvm: Use decrypted memory in confidential guest on x86 (Jeremi Piotrowski)
  - selftests: mlxsw: sharedbuffer: Remove duplicate test cases (Danielle Ratson)
  - selftests: mlxsw: sharedbuffer: Remove h1 ingress test case (Danielle Ratson)
  - tipc: fix NULL deref in cleanup_bearer() (Eric Dumazet) [Orabug: 37522548] {CVE-2024-56661}
  - batman-adv: Do not let TT changes list grows indefinitely (Remi Pommarel)
  - batman-adv: Remove uninitialized data in full table TT response (Remi Pommarel)
  - batman-adv: Do not send uninitialized TT changes (Remi Pommarel)
  - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (Suraj Sonawane) [Orabug: 37434246] {CVE-2024-56662}
  - exfat: fix potential deadlock on __exfat_get_dentry_set (Sungjong Seo) [Orabug: 36964279] {CVE-2024-42315}
  - virtio/vsock: Fix accept_queue memory leak (Michal Luczaj) [Orabug: 37388777] {CVE-2024-53119}
  - bpf, sockmap: Fix update element with same (Michal Luczaj)
  - xfs: fix scrub tracepoints when inode-rooted btrees are involved (Darrick J. Wong)
  - xfs: return from xfs_symlink_verify early on V4 filesystems (Darrick J. Wong)
  - xfs: don't drop errno values when we fail to ficlone the entire range (Darrick J. Wong)
  - xfs: update btree keys correctly when _insrec splits an inode root block (Darrick J. Wong)
  - drm/i915: Fix memory leak by correcting cache object name in error handler (Jiasheng Jiang)
  - usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (Lianqin Hu) [Orabug: 37434263] {CVE-2024-56670}
  - usb: ehci-hcd: fix call balance of clocks handling routines (Vitalii Mordan)
  - usb: dwc2: Fix HCD port connection race (Stefan Wahren)
  - usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature (Stefan Wahren)
  - usb: dwc2: Fix HCD resume (Stefan Wahren)
  - ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() (Joe Hattori)
  - usb: host: max3421-hcd: Correctly abort a USB request. (Mark Tomlinson)
  - ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5 (Jaakko Salo)
  - tcp: check space before adding MPTCP SYN options (MoYuanhao)
  - LTS version: v5.15.174 (Vijayendra Suman)
  - Bluetooth: hci_core: Fix calling mgmt_device_connected (Luiz Augusto von Dentz)
  - net/smc: Fix af_ops of child socket pointing to released memory (Karsten Graul)
  - media: venus: vdec: fixed possible memory leak issue (Ameer Hamza)
  - serial: amba-pl011: fix build regression (Arnd Bergmann)
  - drm/amdgpu: rework resume handling for display (v2) (Alex Deucher)
  - drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX (Wayne Lin) [Orabug: 37159692] {CVE-2024-46871}
  - net: dsa: microchip: correct KSZ8795 static MAC table access (Tristram Ha)
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect (Luiz Augusto von Dentz) [Orabug: 37206073] {CVE-2024-49950}
  - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (Mark Rutland)
  - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Brown) [Orabug: 37298722] {CVE-2024-50275}
  - gve: Fixes for napi_poll when budget is 0 (Ziwei Xiao)
  - scsi: core: Fix scsi_mode_select() buffer length handling (Damien Le Moal)
  - Revert "drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()" (Zhang Zekun)
  - fou: remove warn in gue_gro_receive on unsupported protocol (Willem de Bruijn) [Orabug: 36993166] {CVE-2024-44940}
  - ima: Fix use-after-free on a dentry's dname.name (Stefan Berger) [Orabug: 36835557] {CVE-2024-39494}
  - crypto: hisilicon/qm - inject error before stopping queue (Weili Qian) [Orabug: 37200767] {CVE-2024-47730}
  - drm/amd/display: Check BIOS images before it is used (Alex Hung) [Orabug: 37116330] {CVE-2024-46809}
  - mmc: mtk-sd: Fix error handle of probe function (Andy-ld Lu)
  - xhci: dbc: Fix STALL transfer event handling (Mathias Nyman)
  - mm/damon/vaddr: fix issue in damon_va_evenly_split_region() (Zheng Yejian)
  - mm/damon/vaddr-test: split a test function having >1024 bytes frame size (SeongJae Park)
  - jffs2: Fix rtime decompressor (Richard Weinberger)
  - jffs2: Prevent rtime decompress memory corruption (Kinsey Moore)
  - KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE (Kunkun Jiang)
  - KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device (Kunkun Jiang)
  - KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* (Jing Zhang)
  - tracing/eprobe: Fix to release eprobe when failed to add dyn_event (Masami Hiramatsu (Google))
  - btrfs: fix missing snapshot drew unlock when root is dead during swap activation (Filipe Manana)
  - sched/core: Prevent wakeup of ksoftirqd during idle load balance (K Prateek Nayak)
  - sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy (K Prateek Nayak)
  - sched/fair: Add NOHZ balancer flag for nohz.next_balance updates (Valentin Schneider)
  - sched/core: Remove the unnecessary need_resched() check in nohz_csd_func() (K Prateek Nayak)
  - modpost: Add .irqentry.text to OTHER_SECTIONS (Thomas Gleixner)
  - modpost: Include '.text.*' in TEXT_SECTIONS (Nathan Chancellor)
  - misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle (Parker Newman)
  - powerpc/prom_init: Fixup missing powermac #size-cells (Michael Ellerman)
  - MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a (Xi Ruoyao)
  - usb: chipidea: udc: handle USB Error Interrupt if IOC not set (Xu Yang)
  - i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock (Defa Li)
  - PCI: Add ACS quirk for Wangxun FF5xxx NICs (Mengyuan Lou)
  - PCI: Add 'reset_subordinate' to reset hierarchy below bridge (Keith Busch)
  - PCI: Detect and trust built-in Thunderbolt chips (Esther Shimanovich)
  - i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (Jarkko Nikula)
  - f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode. (Qi Han) [Orabug: 37433860] {CVE-2024-56586}
  - nvdimm: rectify the illogical code within nd_dax_probe() (Yi Yang)
  - pinctrl: qcom-pmic-gpio: add support for PM8937 (Barnabás Czémán)
  - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Kai Mäkisara)
  - scsi: st: Don't modify unknown block number in MTIOCGET (Kai Mäkisara)
  - leds: class: Protect brightness_show() with led_cdev->led_access mutex (Mukesh Ojha) [Orabug: 37433867] {CVE-2024-56587}
  - scsi: hisi_sas: Add cond_resched() for no forced preemption model (Yihang Li) [Orabug: 37433881] {CVE-2024-56589}
  - tracing: Use atomic64_inc_return() in trace_clock_counter() (Uros Bizjak)
  - pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU (Esben Haabendal)
  - netpoll: Use rcu_access_pointer() in __netpoll_setup (Breno Leitao)
  - net/neighbor: clear error in case strict check is not set (Jakub Kicinski)
  - rocker: fix link status detection in rocker_carrier_init() (Dmitry Antipov)
  - ASoC: hdmi-codec: reorder channel allocation list (Jonas Karlman)
  - Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet (Luiz Augusto von Dentz) [Orabug: 37433887] {CVE-2024-56590}
  - wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (Norbert van Bolhuis) [Orabug: 37433907] {CVE-2024-56593}
  - wifi: ipw2x00: libipw_rx_any(): fix bad alignment (Jiapeng Chong)
  - drm/amdgpu: set the right AMDGPU sg segment limitation (Prike Liang) [Orabug: 37433913] {CVE-2024-56594}
  - drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov (Victor Zhao)
  - jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (Nihar Chaithanya) [Orabug: 37433919] {CVE-2024-56595}
  - jfs: fix array-index-out-of-bounds in jfs_readdir (Ghanshyam Agrawal) [Orabug: 37433927] {CVE-2024-56596}
  - jfs: fix shift-out-of-bounds in dbSplit (Ghanshyam Agrawal) [Orabug: 37433933] {CVE-2024-56597}
  - jfs: array-index-out-of-bounds fix in dtReadFirst (Ghanshyam Agrawal) [Orabug: 37433940] {CVE-2024-56598}
  - dma-debug: fix a possible deadlock on radix_lock (Levi Yun)
  - drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr (Lang Yu)
  - drm/amdgpu: Dereference the ATCS ACPI buffer (Prike Liang)
  - drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih (Victor Lu)
  - drm/panel: simple: Add Microchip AC69T88A LVDS Display panel (Manikandan Muralidharan)
  - wifi: ath5k: add PCI ID for Arcadyan devices (Rosen Penev)
  - wifi: ath5k: add PCI ID for SX76X (Rosen Penev)
  - net: inet6: do not leave a dangling sk pointer in inet6_create() (Ignat Korchagin) [Orabug: 37433954] {CVE-2024-56600}
  - net: inet: do not leave a dangling sk pointer in inet_create() (Ignat Korchagin) [Orabug: 37433961] {CVE-2024-56601}
  - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Ignat Korchagin) [Orabug: 37433968] {CVE-2024-56602}
  - net: af_can: do not leave a dangling sk pointer in can_create() (Ignat Korchagin) [Orabug: 37433975] {CVE-2024-56603}
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (Ignat Korchagin) [Orabug: 37433989] {CVE-2024-56605}
  - af_packet: avoid erroring out after sock_init_data() in packet_create() (Ignat Korchagin) [Orabug: 37433995] {CVE-2024-56606}
  - net/sched: cbs: Fix integer overflow in cbs_set_port_rate() (Elena Salomatkina)
  - net: ethernet: fs_enet: Use %pa to format resource_size_t (Simon Horman)
  - net: fec_mpc52xx_phy: Use %pa to format resource_size_t (Simon Horman)
  - samples/bpf: Fix a resource leak (Zhu Jun)
  - r8169: don't apply UDP padding quirk on RTL8126A (Heiner Kallweit)
  - drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (Igor Artemiev)
  - drm/mcde: Enable module autoloading (Liao Chen)
  - drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (Joaquín Ignacio Aramendía)
  - drm/vc4: hvs: Set AXI panic modes for the HVS (Dave Stevenson)
  - soc: imx8m: Probe the SoC driver as platform driver (Marek Vasut)
  - media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (Rohan Barar)
  - media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (David Given)
  - kcsan: Turn report_filterlist_lock into a raw_spinlock (Marco Elver) [Orabug: 37434021] {CVE-2024-56610}
  - kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all() (Mark Brown)
  - btrfs: avoid unnecessary device path update for the same device (Qu Wenruo)
  - s390/cpum_sf: Handle CPU hotplug remove during sampling (Thomas Richter)
  - epoll: annotate racy check (Christian Brauner)
  - iommu/arm-smmu: Defer probe of clients after smmu device bound (Pratyush Brahma) [Orabug: 37433775] {CVE-2024-56568}
  - ocfs2: update seq_file index in ocfs2_dlm_seq_next (Wengang Wang)
  - mmc: core: Further prevent card detect during shutdown (Ulf Hansson)
  - mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet (Hans de Goede)
  - regmap: detach regmap from dev on regmap_exit (Cosmin Tanislav)
  - xsk: fix OOB map writes when deleting elements (Maciej Fijalkowski) [Orabug: 37434040] {CVE-2024-56614}
  - dma-buf: fix dma_fence_array_signaled v4 (Christian König)
  - bpf: fix OOB devmap writes when deleting elements (Maciej Fijalkowski) [Orabug: 37434046] {CVE-2024-56615}
  - bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (Liequan Che)
  - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (Ryusuke Konishi) [Orabug: 37434064] {CVE-2024-56619}
  - scsi: ufs: core: sysfs: Prevent div by zero (Gwendal Grignou) [Orabug: 37434075] {CVE-2024-56622}
  - scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (Saurav Kashyap)
  - scsi: qla2xxx: Fix use after free on unload (Quinn Tran) [Orabug: 37434078] {CVE-2024-56623}
  - scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (Anil Gurumurthy)
  - scsi: qla2xxx: Fix NVMe and NPIV connect issue (Quinn Tran)
  - ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG) (Sahas Leelodharry)
  - ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8 (Nazar Bilinskyi)
  - ALSA: usb-audio: add mixer mapping for Corsair HS80 (Marie Ramlow)
  - arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (Mark Rutland)
  - tracing: Fix cmp_entries_dup() to respect sort() comparison rules (Kuan-Wei Chiu)
  - can: dev: can_set_termination(): allow sleeping GPIOs (Marc Kleine-Budde)
  - watchdog: rti: of: honor timeout-sec property (Alexander Sverdlin)
  - HID: wacom: fix when get product name maybe null pointer (WangYuli) [Orabug: 37434107] {CVE-2024-56629}
  - bpf: Fix exact match conditions in trie_get_next_key() (Hou Tao)
  - bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie (Hou Tao)
  - ocfs2: free inode when ocfs2_get_init_inode() fails (Tetsuo Handa) [Orabug: 37434112] {CVE-2024-56630}
  - drm/v3d: Enable Performance Counters before clearing them (Maíra Canal)
  - spi: mpc52xx: Add cancel_work_sync before module remove (Pei Xiao)
  - tools: Override makefile ARCH variable if defined, but empty (Björn Töpel)
  - ALSA: usb-audio: Notify xrun for low-latency mode (Takashi Iwai)
  - ALSA: pcm: Avoid reference to status->state (Takashi Iwai)
  - ALSA: pcm: Add more disconnection checks at file ops (Takashi Iwai)
  - tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (Zijian Zhang) [Orabug: 37434126] {CVE-2024-56633}
  - drm/sti: Add __iomem for mixer_dbg_mxn's parameter (Pei Xiao)
  - bpftool: fix potential NULL pointer dereferencing in prog_dump() (Amir Mohammadi)
  - bpftool: Remove asserts from JIT disassembler (Quentin Monnet)
  - serial: amba-pl011: Fix RX stall when DMA is used (Kartik Rajput)
  - serial: amba-pl011: Use port lock wrappers (Thomas Gleixner)
  - dt-bindings: serial: rs485: Fix rs485-rts-delay property (Michal Simek)
  - dt_bindings: rs485: Correct delay values (Lino Sanfilippo)
  - gpio: grgpio: Add NULL check in grgpio_probe (Charles Han) [Orabug: 37434130] {CVE-2024-56634}
  - gpio: grgpio: use a helper variable to store the address of ofdev->dev (Bartosz Golaszewski)
  - geneve: do not assume mac header is set in geneve_xmit_skb() (Eric Dumazet) [Orabug: 37434137] {CVE-2024-56636}
  - ethtool: Fix wrong mod state in case of verbose and no_mask bitset (Kory Maincent)
  - netfilter: nft_set_hash: skip duplicated elements pending gc run (Pablo Neira Ayuso)
  - netfilter: ipset: Hold module reference while requesting a module (Phil Sutter) [Orabug: 37434142] {CVE-2024-56637}
  - net: sched: fix erspan_opt settings in cls_flower (Xin Long)
  - igb: Fix potential invalid memory access in igb_init_module() (Yuan Can)
  - net/qed: allow old cards not supporting "num_images" to work (Louis Leseur)
  - net/smc: fix LGR and link use-after-free issue (Wen Gu) [Orabug: 37434151] {CVE-2024-56640}
  - net/smc: Limit backlog connections (D. Wythe)
  - tipc: Fix use-after-free of kernel socket in cleanup_bearer(). (Kuniyuki Iwashima) [Orabug: 37434160] {CVE-2024-56642}
  - dccp: Fix memory leak in dccp_feat_change_recv (Ivan Solodovnikov) [Orabug: 37434165] {CVE-2024-56643}
  - net/ipv6: release expired exception dst cached in socket (Jiri Wiesner) [Orabug: 37434172] {CVE-2024-56644}
  - can: j1939: j1939_session_new(): fix skb reference counting (Dmitry Antipov)
  - net: hsr: avoid potential out-of-bound access in fill_frame_info() (Eric Dumazet) [Orabug: 37434192] {CVE-2024-56648}
  - net/sched: tbf: correct backlog statistic for GSO packets (Martin Ottens)
  - ptp: Add error handling for adjfine callback in ptp_clock_adjtime (Ajay Kaher)
  - netfilter: x_tables: fix LED ID check in led_tg_check() (Dmitry Antipov) [Orabug: 37434199] {CVE-2024-56650}
  - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (Jinghao Jia)
  - can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
  - can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
  - can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
  - can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
  - can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL (Dario Binacchi)
  - can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails (Dario Binacchi)
  - can: do not increase rx statistics when generating a CAN rx error message frame (Vincent Mailhol)
  - can: peak_usb: CANFD: store 64-bits hw timestamps (Stephane Grosjean)
  - watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() (Yassine Oudjana)
  - iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (Oleksandr Ocheretnyi)
  - drm/etnaviv: flush shader L1 cache after user commandstream (Lucas Stach)
  - drm/sti: avoid potential dereference of error pointers (Ma Ke)
  - drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check (Ma Ke)
  - drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check (Ma Ke)
  - btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (Josef Bacik) [Orabug: 37116498] {CVE-2024-46841}
  - nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (Yang Erkun)
  - nfsd: make sure exp active before svc_export_show (Yang Erkun) [Orabug: 37433743] {CVE-2024-56558}
  - PCI: rockchip-ep: Fix address translation unit programming (Damien Le Moal)
  - dm thin: Add missing destroy_work_on_stack() (Yuan Can)
  - ovl: properly handle large files in ovl_security_fileattr (Oleksandr Tymoshenko)
  - PCI: keystone: Add link up check to ks_pcie_other_map_bus() (Kishon Vijay Abraham I)
  - i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (Frank Li) [Orabug: 37433755] {CVE-2024-56562}
  - scsi: ufs: exynos: Fix hibern8 notify callbacks (Peter Griffin)
  - util_macros.h: fix/rework find_closest() macros (Alexandru Ardelean)
  - s390/entry: Mark IRQ entries to fix stack depot warnings (Vasily Gorbik)
  - ad7780: fix division by zero in ad7780_write_raw() (Zicheng Qu) [Orabug: 37433771] {CVE-2024-56567}
  - btrfs: ref-verify: fix use-after-free after invalid ref action (Filipe Manana) [Orabug: 37433831] {CVE-2024-56581}
  - btrfs: add a sanity check for btrfs root in btrfs_search_slot() (Lizhi Xu)
  - btrfs: add might_sleep() annotations (ChenXiaoSong)
  - quota: flush quota_release_work upon quota writeback (Ojaswin Mujoo)
  - xfs: remove unknown compat feature check in superblock write validation (Long Li)
  - xfs: fix log recovery when unknown rocompat bits are set (Darrick J. Wong)
  - ASoC: fsl_micfil: fix the naming style for mask definition (Shengjiu Wang)
  - sh: intc: Fix use-after-free bug in register_intc_controller() (Dan Carpenter) [Orabug: 37433391] {CVE-2024-53165}
  - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (Liu Jian) [Orabug: 37434313] {CVE-2024-56688}
  - sunrpc: remove unnecessary test in rpc_task_set_client() (Thiago Rafael Becker)
  - nfs: ignore SB_RDONLY when mounting nfs (Li Lingfeng)
  - modpost: remove incorrect code in do_eisa_entry() (Masahiro Yamada)
  - rtc: ab-eoz9: don't fail temperature reads on undervoltage notification (Maxime Chevallier)
  - 9p/xen: fix release of IRQ (Alex Zenla) [Orabug: 37434373] {CVE-2024-56704}
  - 9p/xen: fix init sequence (Alex Zenla)
  - block: return unsigned int from bdev_io_min (Christoph Hellwig)
  - jffs2: fix use of uninitialized variable (Qingfang Deng)
  - ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit (Waqar Hameed) [Orabug: 37433413] {CVE-2024-53171}
  - ubi: fastmap: Fix duplicate slab cache names while attaching (Zhihao Cheng) [Orabug: 37433417] {CVE-2024-53172}
  - ubifs: Correct the total block count by deducting journal reservation (Zhihao Cheng)
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Yongliang Gao) [Orabug: 37434455] {CVE-2024-56739}
  - rtc: abx80x: Fix WDT bit position of the status register (Nobuhiro Iwamatsu)
  - rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - NFSv4.0: Fix a use-after-free problem in the asynchronous open() (Trond Myklebust) [Orabug: 37433425] {CVE-2024-53173}
  - um: Always dump trace for specified task in show_stack (Tiwei Bie)
  - um: Fix the return value of elf_core_copy_task_fpregs (Tiwei Bie)
  - um: Fix potential integer overflow during physmem setup (Tiwei Bie) [Orabug: 37427463] {CVE-2024-53145}
  - rpmsg: glink: Propagate TX failures in intentless mode as well (Bjorn Andersson)
  - SUNRPC: make sure cache entry active before cache_show (Yang Erkun) [Orabug: 37433432] {CVE-2024-53174}
  - NFSD: Prevent a potential integer overflow (Chuck Lever) [Orabug: 37427469] {CVE-2024-53146}
  - lib: string_helpers: silence snprintf() output truncation warning (Bartosz Golaszewski)
  - usb: dwc3: gadget: Fix looping of queued SG entries (Thinh Nguyen) [Orabug: 37434350] {CVE-2024-56698}
  - usb: dwc3: gadget: Fix checking for number of TRBs left (Thinh Nguyen)
  - ALSA: hda/realtek: Apply quirk for Medion E15433 (Takashi Iwai)
  - ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max (Dinesh Kumar)
  - ALSA: hda/realtek: Set PCBeep to default value for ALC274 (Kailang Yang)
  - ALSA: hda/realtek: Update ALC225 depop procedure (Kailang Yang)
  - ALSA: pcm: Add sanity NULL check for the default mmap fault handler (Takashi Iwai) [Orabug: 37433460] {CVE-2024-53180}
  - media: v4l2-core: v4l2-dv-timings: check cvt/gtf result (Hans Verkuil)
  - soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting() (Javier Carrasco)
  - media: wl128x: Fix atomicity violation in fmc_send_cmd() (Qiu-ji Chen) [Orabug: 37434357] {CVE-2024-56700}
  - HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (Jason Gerecke)
  - block: fix ordering between checking BLK_MQ_S_STOPPED request adding (Muchun Song)
  - arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (Will Deacon)
  - sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen)
  - um: vector: Do not use drvdata in release (Tiwei Bie) [Orabug: 37433466] {CVE-2024-53181}
  - serial: 8250: omap: Move pm_runtime_get_sync (Bin Liu)
  - um: net: Do not use drvdata in release (Tiwei Bie) [Orabug: 37433474] {CVE-2024-53183}
  - um: ubd: Do not use drvdata in release (Tiwei Bie) [Orabug: 37433483] {CVE-2024-53184}
  - ubi: wl: Put source PEB into correct list if trying locking LEB failed (Zhihao Cheng)
  - platform/chrome: cros_ec_typec: fix missing fwnode reference decrement (Javier Carrasco)
  - cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power() (Jinjie Ruan)
  - mtd: spi-nor: core: replace dummy buswidth from addr to data (Cheng Ming Lin)
  - spi: Fix acpi deferred irq probe (Stanislaw Gruszka)
  - netfilter: ipset: add missing range check in bitmap_ip_uadt (Jeongjun Park) [Orabug: 37388866] {CVE-2024-53141}
  - gpio: exar: set value when external pull-up or pull-down is present (Sai Kumar Cholleti)
  - Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit" (Greg Kroah-Hartman)
  - serial: sh-sci: Clean sci_ports[0] after at earlycon exit (Claudiu Beznea)
  - Revert "usb: gadget: composite: fix OS descriptors w_value logic" (Michal Vrastil)
  - driver core: bus: Fix double free in driver API bus_register() (Zijun Hu) [Orabug: 37206509] {CVE-2024-50055}
  - usb: xhci: Fix TD invalidation under pending Set TR Dequeue (Michal Pecio)
  - Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() (Andrej Shadura)
  - exfat: fix uninit-value in __exfat_get_dentry_set (Namjae Jeon)
  - locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass() (Ahmed Ehab)
  - tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler (Nicolas Bouchinet)
  - apparmor: test: Fix memory leak for aa_unpack_strdup() (Jinjie Ruan) [Orabug: 37434463] {CVE-2024-56741}
  - comedi: Flush partial mappings in error case (Jann Horn) [Orabug: 37427481] {CVE-2024-53148}
  - fsnotify: fix sending inotify event with unexpected filename (Amir Goldstein)
  - PCI: Fix use-after-free of slot->bus on hot remove (Lukas Wunner) [Orabug: 37433515] {CVE-2024-53194}
  - KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status (Raghavendra Rao Ananta)
  - powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector (Gautam Menghani)
  - crypto: x86/aegis128 - access 32-bit arguments as 32-bit (Eric Biggers)
  - perf/x86/intel/pt: Fix buffer full but size is 0 case (Adrian Hunter)
  - ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (Qiu-ji Chen)
  - jfs: xattr: check invalid xattr size more strictly (Artem Sadovnikov)
  - ext4: fix FS_IOC_GETFSMAP handling (Theodore Ts'o)
  - ext4: supress data-race warnings in ext4_free_inodes_{count,set}() (Jeongjun Park)
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Benoît Sevens) [Orabug: 37433531] {CVE-2024-53197}
  - soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (Manikanta Mylavarapu)
  - ASoC: Intel: sst: Fix used of uninitialized ctx to log an error (Hans de Goede)
  - Revert "drivers: clk: zynqmp: update divider round rate logic" (Joel Guittet)
  - usb: ehci-spear: fix call balance of sehci clk handling routines (Vitalii Mordan)
  - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Takashi Iwai) [Orabug: 37427488] {CVE-2024-53150}
  - xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (Qiu-ji Chen) [Orabug: 37433539] {CVE-2024-53198}
  - ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp (Namjae Jeon) [Orabug: 37298755] {CVE-2024-50283}
  - parisc: fix a possible DMA corruption (Mikulas Patocka) [Orabug: 37028940] {CVE-2024-44949}
  - apparmor: fix 'Do simple duplicate message elimination' (chao liu)
  - ALSA: hda/realtek: Update ALC256 depop procedure (Kailang Yang)
  - counter: stm32-timer-cnt: Add check for clk_enable() (Jiasheng Jiang)
  - misc: apds990x: Fix missing pm_runtime_disable() (Jinjie Ruan)
  - USB: chaoskey: Fix possible deadlock chaoskey_list_lock (Edward Adam Davis)
  - USB: chaoskey: fail open after removal (Oliver Neukum)
  - usb: yurex: make waiting on yurex_write interruptible (Oliver Neukum)
  - usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (Jeongjun Park)
  - iio: light: al3010: Fix an error handling path in al3010_probe() (Christophe JAILLET)
  - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (Saravanan Vajravel)
  - net: hsr: fix hsr_init_sk() vs network/transport headers. (Eric Dumazet)
  - spi: atmel-quadspi: Fix register name in verbose logging function (Csókás, Bence)
  - octeontx2-af: RPM: Fix mismatch in lmac type (Hariprasad Kelam)
  - net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken (Maxime Chevallier)
  - marvell: pxa168_eth: fix call balance of pep->clk handling routines (Vitalii Mordan)
  - net: mdio-ipq4019: add missing error check (Rosen Penev)
  - net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration (Oleksij Rempel)
  - tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets (Pavan Chebbi)
  - net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device (Oleksij Rempel)
  - power: supply: bq27xxx: Fix registers of bq27426 (Barnabás Czémán)
  - power: supply: core: Remove might_sleep() from power_supply_put() (Bart Van Assche)
  - fs_parser: update mount_api doc to match function signature (Randy Dunlap)
  - vfio/pci: Properly hide first-in-list PCIe extended capability (Avihai Horon) [Orabug: 37433577] {CVE-2024-53214}
  - selftests/mount_setattr: Fix failures on 64K PAGE_SIZE kernels (Michael Ellerman)
  - vdpa/mlx5: Fix suboptimal range on iotlb iteration (Si-Wei Liu)
  - hwmon: (tps23861) Fix reporting of negative temperatures (Murad Masimov)
  - NFSD: Fix nfsd4_shutdown_copy() (Chuck Lever)
  - svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (Ye Bin) [Orabug: 37433585] {CVE-2024-53215}
  - sunrpc: simplify two-level sysctl registration for svcrdma_parm_table (Luis Chamberlain)
  - NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (Chuck Lever)
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (Chuck Lever) [Orabug: 37433593] {CVE-2024-53217}
  - remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region (Sibi Sankar)
  - rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length (Jonathan Marek)
  - rpmsg: glink: Fix GLINK command prefix (Bjorn Andersson)
  - rpmsg: glink: Send READ_NOTIFY command in FIFO full case (Arun Kumar Neelakantam)
  - rpmsg: glink: Add TX_DATA_CONT command while sending (Arun Kumar Neelakantam)
  - perf trace: Avoid garbage when not printing a syscall's arguments (Benjamin Peterson)
  - perf trace: Do not lose last events in a race (Benjamin Peterson)
  - svcrdma: Address an integer overflow (Chuck Lever) [Orabug: 37427495] {CVE-2024-53151}
  - m68k: coldfire/device.c: only build FEC when HW macros are defined (Antonio Quartulli)
  - m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x (Jean-Michel Hautbois)
  - perf trace: avoid garbage when not printing a trace event's arguments (Benjamin Peterson)
  - f2fs: check curseg->inited before write_sum_page in change_curseg (Yongpeng Yang)
  - f2fs: remove the unused flush argument to change_curseg (Christoph Hellwig)
  - f2fs: open code allocate_segment_by_default (Christoph Hellwig)
  - f2fs: remove struct segment_allocation default_salloc_ops (Christoph Hellwig)
  - f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block (LongPing Wei)
  - PCI: cpqphp: Fix PCIBIOS_* return value confusion (Ilpo Järvinen)
  - PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (weiyufeng)
  - perf probe: Correct demangled symbols in C++ program (Leo Yan)
  - perf probe: Fix libdw memory leak (Ian Rogers)
  - PCI: Fix reset_method_store() memory leak (Todd Kjos) [Orabug: 37434474] {CVE-2024-56745}
  - perf cs-etm: Don't flush when packet_queue fills up (James Clark)
  - mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb() (Dan Carpenter)
  - pinctrl: k210: Undef K210_PC_DEFAULT (zhang jiao)
  - clk: clk-axi-clkgen: make sure to enable the AXI bus clock (Nuno Sa)
  - dt-bindings: clock: axi-clkgen: include AXI clk (Nuno Sa)
  - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() (Zhen Lei) [Orabug: 37434477] {CVE-2024-56746}
  - fbdev/sh7760fb: Alloc DMA memory from hardware device (Thomas Zimmermann)
  - powerpc/kexec: Fix return of uninitialized variable (Zhang Zekun)
  - powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static (Michal Suchanek)
  - ocfs2: fix uninitialized value in ocfs2_file_read_iter() (Dmitry Antipov) [Orabug: 37427502] {CVE-2024-53155}
  - RDMA/hns: Fix out-of-order issue of requester when setting FENCE (Junxian Huang)
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (Zhen Lei) [Orabug: 37434483] {CVE-2024-56747}
  - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (Zhen Lei) [Orabug: 37434488] {CVE-2024-56748}
  - scsi: fusion: Remove unused variable 'rc' (Zeng Heng)
  - scsi: bfa: Fix use-after-free in bfad_im_module_exit() (Ye Bin) [Orabug: 37433629] {CVE-2024-53227}
  - mfd: rt5033: Fix missing regmap_del_irq_chip() (Zhang Changzhong)
  - clk: imx: clk-scu: fix clk enable state save and restore (Dong Aisheng)
  - clk: imx: lpcg-scu: SW workaround for errata (e10858) (Peng Fan)
  - powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore (Michael Ellerman) [Orabug: 37434363] {CVE-2024-56701}
  - powerpc/mm/fault: Fix kfence page fault reporting (Ritesh Harjani (IBM))
  - mtd: rawnand: atmel: Fix possible memory leak (Miquel Raynal)
  - cpufreq: loongson2: Unregister platform_driver on failure (Yuan Can)
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices (Andy Shevchenko) [Orabug: 37434428] {CVE-2024-56723}
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device (Andy Shevchenko) [Orabug: 37434433] {CVE-2024-56724}
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device (Andy Shevchenko) [Orabug: 37434329] {CVE-2024-56691}
  - mfd: intel_soc_pmic_bxtwc: Use dev_err_probe() (Andy Shevchenko)
  - mfd: da9052-spi: Change read-mask to write-mask (Marcus Folkesson)
  - mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race (Jinjie Ruan)
  - pinctrl: zynqmp: drop excess struct member description (Bartosz Golaszewski)
  - trace/trace_event_perf: remove duplicate samples on the first tracepoint event (Levi Yun)
  - bpf: fix recursive lock when verdict program return SK_PASS (Jiayuan Chen) [Orabug: 37434615] {CVE-2024-56694}
  - wireguard: selftests: load nf_conntrack if not present (Hangbin Liu)
  - netpoll: Use rcu_access_pointer() in netpoll_poll_lock (Breno Leitao)
  - Bluetooth: fix use-after-free in device_for_each_child() (Dmitry Antipov) [Orabug: 37433653] {CVE-2024-53237}
  - driver core: Introduce device_find_any_child() helper (Andy Shevchenko)
  - ALSA: 6fire: Release resources at card release (Takashi Iwai) [Orabug: 37433659] {CVE-2024-53239}
  - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [Orabug: 37433665] {CVE-2024-56531}
  - ALSA: us122l: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [Orabug: 37433671] {CVE-2024-56532}
  - ALSA: usx2y: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [Orabug: 37433679] {CVE-2024-56533}
  - net: rfkill: gpio: Add check for clk_enable() (Mingwei Zheng)
  - drm/amdkfd: Fix wrong usage of INIT_WORK() (Yuan Can)
  - selftests: net: really check for bg process completion (Paolo Abeni)
  - bpf, sockmap: Fix sk_msg_reset_curr (Zijian Zhang)
  - bpf, sockmap: Several fixes to bpf_msg_pop_data (Zijian Zhang)
  - bpf, sockmap: Several fixes to bpf_msg_push_data (Zijian Zhang)
  - selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap (Zijian Zhang)
  - selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap (Zijian Zhang)
  - selftests, bpf: Add one test for sockmap with strparser (Liu Jian)
  - selftests/bpf: Fix SENDPAGE data logic in test_sockmap (Zijian Zhang)
  - selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap (Zijian Zhang)
  - netlink: typographical error in nlmsg_type constants definition (Maurice Lambert)
  - netfilter: nf_tables: must hold rcu read lock while iterating object type list (Florian Westphal)
  - netfilter: nf_tables: skip transaction if update object is not implemented (Pablo Neira Ayuso)
  - drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk() (Zichen Xie)
  - wifi: wfx: Fix error handling in wfx_core_init() (Yuan Can)
  - drm/etnaviv: hold GPU lock across perfmon sampling (Lucas Stach)
  - drm/etnaviv: fix power register offset on GC300 (Doug Brown)
  - drm/etnaviv: Request pages from DMA32 zone on addressing_limited (Xiaolei Wang)
  - drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - drm/panfrost: Remove unused id_mask from struct panfrost_model (Steven Price)
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (Dipendra Khadka) [Orabug: 37434443] {CVE-2024-56726}
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (Dipendra Khadka) [Orabug: 37434449] {CVE-2024-56728}
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (Dipendra Khadka) [Orabug: 37434293] {CVE-2024-56679}
  - drm: fsl-dcu: enable PIXCLK on LS1021A (Matthias Schiffer)
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (Alper Nebi Yasak) [Orabug: 37433694] {CVE-2024-56539}
  - selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap (Zijian Zhang)
  - selftests/bpf: Fix msg_verify_data in test_sockmap (Zijian Zhang)
  - drm/bridge: tc358767: Fix link properties discovery (Tomi Valkeinen)
  - netdevsim: copy addresses for both in and out paths (Hangbin Liu)
  - libbpf: fix sym_is_subprog() logic for weak global subprogs (Andrii Nakryiko)
  - bpf: Fix the xdp_adjust_tail sample prog issue (Yuan Chen)
  - libbpf: Fix output .symtab byte-order during linking (Tony Ambardar)
  - drm/bridge: anx7625: Drop EDID cache on bridge power off (Pin-yen Lin)
  - ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode (Macpaul Lin)
  - ASoC: fsl_micfil: fix regmap_write_bits usage (Shengjiu Wang)
  - ASoC: fsl_micfil: use GENMASK to define register bit fields (Sascha Hauer)
  - ASoC: fsl_micfil: do not define SHIFT/MASK for single bits (Sascha Hauer)
  - ASoC: fsl_micfil: Drop unnecessary register read (Sascha Hauer)
  - dt-bindings: vendor-prefixes: Add NeoFidelity, Inc (Igor Prusov)
  - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 (Baochen Qiang)
  - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 (Baochen Qiang)
  - drm/v3d: Address race-condition in MMU flush (Maíra Canal)
  - drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - drm/omap: Fix locking in omap_gem_new_dmabuf() (Tomi Valkeinen)
  - drm/omap: Fix possible NULL dereference (Tomi Valkeinen)
  - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (Jeongjun Park) [Orabug: 37427508] {CVE-2024-53156}
  - drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (Andy Shevchenko)
  - platform/x86: panasonic-laptop: Return errno correctly in show callback (Yao Zi)
  - platform/x86: panasonic-laptop: Replace snprintf in show functions with sysfs_emit (Qing Wang)
  - media: atomisp: Add check for rgby_data memory allocation failure (Li Huafei) [Orabug: 37434379] {CVE-2024-56705}
  - media: atomisp: remove #ifdef HAS_NO_HMEM (Mauro Carvalho Chehab)
  - media: venus: provide ctx queue lock for ioctl synchronization (Sergey Senozhatsky)
  - venus: venc: add handling for VIDIOC_ENCODER_CMD (Dikshita Agarwal)
  - media: venus : Addition of support for VIDIOC_TRY_ENCODER_CMD (Dikshita Agarwal)
  - media: venus : Addition of EOS Event support for Encoder (Viswanath Boma)
  - media: venus: vdec: decoded picture buffer handling during reconfig sequence (Mansur Alisha Shaik)
  - media: venus: venc: Use pmruntime autosuspend (Stanimir Varbanov)
  - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (Luo Qiu) [Orabug: 37427514] {CVE-2024-53157}
  - selftests/resctrl: Protect against array overrun during iMC config parsing (Reinette Chatre)
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add supplies for fixed regulators (Chen-Yu Tsai)
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Fix DP bridge supply names (Chen-Yu Tsai)
  - arm64: dts: mt8183: jacuzzi: Move panel under aux-bus (Hsin-Yi Wang)
  - arm64: dts: mt8183: jacuzzi: remove unused ddc-i2c-bus (Hsin-Yi Wang)
  - regmap: irq: Set lockdep class for hierarchical IRQ domains (Andy Shevchenko)
  - spi: zynqmp-gqspi: Undo runtime PM changes at driver exit time​ (Jinjie Ruan)
  - spi: tegra210-quad: Avoid shift-out-of-bounds (Breno Leitao)
  - pmdomain: ti-sci: Add missing of_node_put() for args.np (Zhang Zekun)
  - ARM: dts: cubieboard4: Fix DCDC5 regulator constraints (Andre Przywara)
  - pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle (Clark Wang)
  - arm64: dts: mt8183: Damu: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)
  - arm64: dts: mt8183: burnet: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)
  - arm64: dts: mt8183: fennel: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)
  - cgroup/bpf: only cgroup v2 can be attached by bpf programs (Chen Ridong)
  - Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline" (Chen Ridong)
  - arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source trackpad (Chen-Yu Tsai)
  - arm64: dts: mt8183: kukui: Fix the address of eeprom at i2c4 (Hsin-Te Yuan)
  - arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4 (Hsin-Te Yuan)
  - tpm: fix signed/unsigned bug when checking event logs (Gregory Price)
  - mmc: mmc_spi: drop buggy snprintf() (Bartosz Golaszewski)
  - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (Dan Carpenter) [Orabug: 37427523] {CVE-2024-53158}
  - soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - spi: spi-fsl-lpspi: downgrade log level for pio mode (Alexander Stein)
  - clocksource/drivers:sp804: Make user selectable (Mark Brown)
  - kcsan, seqlock: Fix incorrect assumption in read_seqbegin() (Marco Elver)
  - kcsan, seqlock: Support seqcount_latch_t (Marco Elver)
  - seqlock/latch: Provide raw_read_seqcount_latch_retry() (Peter Zijlstra)
  - timekeeping: Consolidate fast timekeeper (Thomas Gleixner)
  - time: Fix references to _msecs_to_jiffies() handling of values (Miguel Ojeda)
  - crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (Christophe JAILLET)
  - crypto: bcm - add error check in the ahash_hmac_init function (Chen Ridong) [Orabug: 37434297] {CVE-2024-56681}
  - crypto: caam - add error check to caam_rsa_set_priv_key_form (Chen Ridong)
  - EDAC/igen6: Avoid segmentation fault on module unload (Orange Kao) [Orabug: 37434389] {CVE-2024-56708}
  - crypto: cavium - Fix the if condition to exit loop after timeout (Everest K.C)
  - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (Yi Yang) [Orabug: 37434322] {CVE-2024-56690}
  - EDAC/fsl_ddr: Fix bad bit shift operations (Priyanka Singh)
  - thermal: core: Initialize thermal zones before registering them (Rafael J. Wysocki)
  - crypto: qat - remove faulty arbiter config reset (Ahsan Atta)
  - EDAC/bluefield: Fix potential integer overflow (David Thompson) [Orabug: 37427532] {CVE-2024-53161}
  - firmware: google: Unregister driver_info on failure (Yuan Can)
  - crypto: caam - Fix the pointer passed to caam_qi_shutdown() (Christophe JAILLET) [Orabug: 37434504] {CVE-2024-56754}
  - hfsplus: don't query the device logical block size multiple times (Thadeu Lima de Souza Cascardo) [Orabug: 37433719] {CVE-2024-56548}
  - s390/syscalls: Avoid creation of arch/arch/ directory (Masahiro Yamada)
  - acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() (Aleksandr Mishin)
  - arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG (Masahiro Yamada)
  - m68k: mvme147: Reinstate early console (Daniel Palmer)
  - m68k: mvme16x: Add and use "mvme16x.h" (Geert Uytterhoeven)
  - m68k: mvme147: Fix SCSI controller IRQ numbers (Daniel Palmer)
  - nvme-pci: fix freeing of the HMB descriptor table (Christoph Hellwig) [Orabug: 37434509] {CVE-2024-56756}
  - initramfs: avoid filename buffer overrun (David Disseldorp) [Orabug: 37388873] {CVE-2024-53142}
  - mips: asm: fix warning when disabling MIPS_FP_SUPPORT (Jonas Gorski)
  - brd: defer automatic disk creation until module initialization succeeds (Yang Erkun) [Orabug: 37434341] {CVE-2024-56693}
  - brd: remove brd_devices_mutex mutex (Tetsuo Handa)
  - s390/cio: Do not unregister the subchannel based on DNV (Vineeth Vijayan)
  - kselftest/arm64: mte: fix printf type warnings about longs (Andre Przywara)
  - x86/barrier: Do not serialize MSR accesses on AMD (Borislav Petkov (AMD))
  - nvme: fix metadata handling in nvme-passthrough (Puranjay Mohan)
  - cifs: Fix buffer overflow when parsing NFS reparse points (Pali Rohár) [Orabug: 37206283] {CVE-2024-49996}
  - rcu-tasks: Idle tasks on offline CPUs are in quiescent states (Paul E. McKenney)
  - ipmr: Fix access to mfc_cache_list without lock held (Breno Leitao)
  - ARM: 9420/1: smp: Fix SMP for xip kernels (Harith G)
  - ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry (Eryk Zagorski)
  - proc/softirqs: replace seq_printf with seq_put_decimal_ull_width (David Wang)
  - ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() (Luo Yifan)
  - ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() (Luo Yifan)
  - can: j1939: fix error in J1939 documentation. (Alexander Hölzl)
  - platform/x86: dell-wmi-base: Handle META key Lock/Unlock events (Kurt Borja)
  - platform/x86: dell-smbios-base: Extends support to Alienware products (Kurt Borja)
  - regulator: rk808: Add apply_bit for BUCK3 on RK809 (Mikhail Rudenko)
  - soc: qcom: Add check devm_kasprintf() returned value (Charles Han)
  - net: usb: qmi_wwan: add Quectel RG650V (Benoît Monin)
  - x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB (Arnd Bergmann)
  - ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 (Piyush Raj Chouhan)
  - selftests/watchdog-test: Fix system accidentally reset after watchdog-test (Li Zhijian)
  - usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver (Benjamin Große)
  - mac80211: fix user-power when emulating chanctx (Ben Greear)
  - wifi: iwlwifi: mvm: Use the sync timepoint API in suspend (Daniel Gabay)
  - ASoC: Intel: sst: Support LPE0F28 ACPI HID (Hans de Goede)
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet (Hans de Goede)
  - ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec (Hans de Goede)
  - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Trond Myklebust)
  - mm: resolve faulty mmap_region() error path behaviour (Lorenzo Stoakes) [Orabug: 37331872] {CVE-2024-53096}
  - mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (Lorenzo Stoakes)
  - mm: unconditionally close VMAs on error (Lorenzo Stoakes)
  - mm: avoid unsafe VMA hook invocation when error arises on mmap hook (Lorenzo Stoakes)
  - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Paolo Abeni) [Orabug: 37388789] {CVE-2024-53122}
  - NFSD: Never decrement pending_async_copies on error (Chuck Lever) [Orabug: 37522552] {CVE-2024-53073}
  - NFSD: Initialize struct nfsd4_copy earlier (Chuck Lever) [Orabug: 37522573] {CVE-2024-50241}
  - NFSD: Limit the number of concurrent async COPY operations (Chuck Lever) [Orabug: 37206186] {CVE-2024-49974}
  - NFSD: Async COPY result needs to return a write verifier (Chuck Lever)
  - NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point (Dai Ngo)
  - media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set (Mauro Carvalho Chehab)
  - mmc: sunxi-mmc: Fix A100 compatible description (Andre Przywara)
  - mmc: sunxi-mmc: Add D1 MMC variant (Samuel Holland)
  - drm/bridge: tc358768: Fix DSI command tx (Francesco Dolcini)
  - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (Ryusuke Konishi) [Orabug: 37388818] {CVE-2024-53130}
  - ocfs2: fix UBSAN warning in ocfs2_verify_volume() (Dmitry Antipov)
  - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (Ryusuke Konishi) [Orabug: 37388824] {CVE-2024-53131}
  - KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (Sean Christopherson) [Orabug: 37388845] {CVE-2024-53135}
  - KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled (Sean Christopherson)
  - vdpa/mlx5: Fix PA offset with unaligned starting iotlb map (Si-Wei Liu)
  - ocfs2: uncache inode which has failed entering the group (Dmitry Antipov) [Orabug: 37388752] {CVE-2024-53112}
  - mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (Jinjiang Tu) [Orabug: 37388759] {CVE-2024-53113}
  - x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y (Baoquan He)
  - ARM: 9419/1: mm: Fix kernel memory mapping for xip kernels (Harith G)
  - samples: pktgen: correct dev to DEV (Wei Fang)
  - net/mlx5e: CT: Fix null-ptr-deref in add rule err flow (Moshe Shemesh) [Orabug: 37388780] {CVE-2024-53120}
  - net/mlx5e: kTLS, Fix incorrect page refcounting (Dragos Tatulea)
  - net/mlx5: fs, lock FTE when checking if active (Mark Bloch)
  - drm/rockchip: vop: Fix a dereferenced before check warning (Andy Yan) [Orabug: 37388814] {CVE-2024-53129}
  - netlink: terminate outstanding dump on socket close (Jakub Kicinski) [Orabug: 37388860] {CVE-2024-53140}
  - clk: qcom: gcc-qcs404: fix initial rate of GPLL3 (Gabor Juhos)
  - leds: lp55xx: Remove redundant test for invalid channel number (Michal Vokáč)
  - iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (Mostafa Saleh)
  - vmstat: call fold_vm_zone_numa_events() before show per zone NUMA event (MengEn Sun)
  - ftrace: Fix regression with module command in stack_trace_filter (guoweikang) [Orabug: 37433783] {CVE-2024-56569}
  - ovl: Filter invalid inodes with missing lookup function (Vasiliy Kovalev) [Orabug: 37433788] {CVE-2024-56570}
  - media: uvcvideo: Require entities to have a non-zero unique ID (Thadeu Lima de Souza Cascardo) [Orabug: 37433794] {CVE-2024-56571}
  - media: uvcvideo: Stop stream during unregister (Ricardo Ribalda)
  - media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() (Gaosheng Cui) [Orabug: 37433797] {CVE-2024-56572}
  - media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() (Jinjie Ruan)
  - media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled (Jinjie Ruan)
  - media: ts2020: fix null-ptr-deref in ts2020_probe() (Li Zetao) [Orabug: 37433804] {CVE-2024-56574}
  - media: imx-jpeg: Ensure power suppliers be suspended before detach them (Ming Qian) [Orabug: 37433810] {CVE-2024-56575}
  - media: i2c: tc358743: Fix crash in the probe error path when using polling (Alexander Shiyan) [Orabug: 37433816] {CVE-2024-56576}
  - media: imx-jpeg: Set video drvdata before register video device (Ming Qian) [Orabug: 37433823] {CVE-2024-56578}
  - arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer (Dragan Simic)
  - LTS version: v5.15.173 (Vijayendra Suman)
  - 9p: fix slab cache name creation for real (Linus Torvalds)
  - udf: Avoid directory type conversion failure due to ENOMEM (Jan Kara)
  - udf: Allocate name buffer in directory iterator on heap (Jan Kara)
  - mm/memory: add non-anonymous page check in the copy_present_page() (Yuanzheng Song)
  - io_uring: fix possible deadlock in io_register_iowq_max_workers() (Hagar Hemdan) [Orabug: 36897353] {CVE-2024-41080}
  - md/raid10: improve code of mrdev in raid10_sync_request (Li Nan)
  - net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
  - HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (Hans de Goede)
  - HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad (Kenneth Albanowski)
  - fs: Fix uninitialized value issue in from_kuid and from_kgid (Alessandro Zanni) [Orabug: 37331927] {CVE-2024-53101}
  - vDPA/ifcvf: Fix pci_read_config_byte() return code handling (Yuan Can)
  - powerpc/powernv: Free name on error in opal_event_init() (Michael Ellerman)
  - drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS (Ian Forbes)
  - sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML (Julian Vetter)
  - crypto: marvell/cesa - Disable hash algorithms (Herbert Xu)
  - bpf: use kvzmalloc to allocate BPF verifier environment (Rik van Riel)
  - HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (WangYuli)
  - HID: multitouch: Add support for B2402FVA track point (Stefan Blum)
  - block: Fix elevator_get_default() checking for NULL q->tag_set (SurajSonawane2415)
  - irqchip/ocelot: Fix trigger register address (Sergey Matsievskiy)
  - 9p: Avoid creating multiple slab caches with the same name (Pedro Falcato)
  - LTS version: v5.15.172 (Vijayendra Suman)
  - ALSA: usb-audio: Add endianness annotations (Jan Schär)
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Hyunwoo Kim) [Orabug: 37298679] {CVE-2024-50264}
  - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (Hyunwoo Kim) [Orabug: 37344479] {CVE-2024-53103}
  - ALSA: usb-audio: Add quirks for Dell WD19 dock (Jan Schär)
  - ALSA: usb-audio: Support jack detection on Dell dock (Jan Schär)
  - ucounts: fix counter leak in inc_rlimit_get_ucounts() (Andrei Vagin)
  - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (Andrew Kanner) [Orabug: 37298684] {CVE-2024-50265}
  - irqchip/gic-v3: Force propagation of the active state with a read-back (Marc Zyngier)
  - USB: serial: option: add Quectel RG650V (Benoît Monin)
  - USB: serial: option: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
  - USB: serial: qcserial: add support for Sierra Wireless EM86xx (Jack Wu)
  - USB: serial: io_edgeport: fix use after free in debug printk (Dan Carpenter) [Orabug: 37298693] {CVE-2024-50267}
  - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() (Dan Carpenter) [Orabug: 37298700] {CVE-2024-50268}
  - usb: musb: sunxi: Fix accessing an released usb phy (Zijun Hu) [Orabug: 37298702] {CVE-2024-50269}
  - fs/proc: fix compile warning about variable 'vmcore_mmap_ops' (Qi Xi)
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Benoit Sevens) [Orabug: 37344484] {CVE-2024-53104}
  - net: do not delay dst_entries_add() in dst_release() (Eric Dumazet) [Orabug: 37206439] {CVE-2024-50036}
  - net: bridge: xmit: make sure we have at least eth header len bytes (Nikolay Aleksandrov) [Orabug: 36753371] {CVE-2024-38538}
  - btrfs: reinitialize delayed ref list after deleting it from the list (Filipe Manana) [Orabug: 37298714] {CVE-2024-50273}
  - nfs: Fix KMSAN warning in decode_getfattr_attrs() (Roberto Sassu) [Orabug: 37304778] {CVE-2024-53066}
  - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (Jens Axboe) [Orabug: 37304720] {CVE-2024-53052}
  - io_uring: use kiocb_{start,end}_write() helpers (Amir Goldstein)
  - fs: create kiocb_{start,end}_write() helpers (Amir Goldstein)
  - io_uring: rename kiocb_end_write() local helper (Amir Goldstein)
  - posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone (Benjamin Segall)
  - ALSA: usb-audio: Add quirk for HP 320 FHD Webcam (Takashi Iwai)
  - dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow (Zichen Xie)
  - dm cache: fix potential out-of-bounds access on the first resume (Ming-Hung Tsai) [Orabug: 37298731] {CVE-2024-50278}
  - dm cache: optimize dirty bit checking with find_next_bit when resizing (Ming-Hung Tsai)
  - dm cache: fix out-of-bounds access to the dirty bitset when resizing (Ming-Hung Tsai) [Orabug: 37298736] {CVE-2024-50279}
  - dm cache: correct the number of origin blocks to match the target length (Ming-Hung Tsai)
  - thermal/drivers/qcom/lmh: Remove false lockdep backtrace (Dmitry Baryshkov)
  - drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (Alex Deucher) [Orabug: 37298750] {CVE-2024-50282}
  - drm/amdgpu: Adjust debugfs eviction and IB access permissions (Alex Deucher)
  - pwm: imx-tpm: Use correct MODULO value for EPWM mode (Erik Schumacher)
  - media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl() (Mauro Carvalho Chehab)
  - media: v4l2-tpg: prevent the risk of a division by zero (Mauro Carvalho Chehab) [Orabug: 37298781] {CVE-2024-50287}
  - media: pulse8-cec: fix data timestamp at pulse8_setup() (Mauro Carvalho Chehab)
  - media: cx24116: prevent overflows on SNR calculus (Mauro Carvalho Chehab) [Orabug: 37298796] {CVE-2024-50290}
  - media: s5p-jpeg: prevent buffer overflows (Mauro Carvalho Chehab) [Orabug: 37304761] {CVE-2024-53061}
  - ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove (Amelie Delaunay) [Orabug: 37298803] {CVE-2024-50292}
  - ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() (Murad Masimov)
  - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer (Johannes Thumshirn)
  - media: adv7604: prevent underflow condition when reporting colorspace (Mauro Carvalho Chehab)
  - media: dvb_frontend: don't play tricks with underflow values (Mauro Carvalho Chehab)
  - media: dvbdev: prevent the risk of out of memory access (Mauro Carvalho Chehab) [Orabug: 37304768] {CVE-2024-53063}
  - media: stb0899_algo: initialize cfr before using it (Mauro Carvalho Chehab)
  - net: arc: fix the device for dma_map_single/dma_unmap_single (Johan Jonker) [Orabug: 37298808] {CVE-2024-50295}
  - net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case (Nícolas F. R. A. Prado)
  - net: phy: ti: add PHY_RST_AFTER_CLK_EN flag (Diogo Silva)
  - net: hns3: fix kernel crash when uninstalling driver (Peiyang Wang) [Orabug: 37298810] {CVE-2024-50296}
  - i40e: fix race condition by adding filter's intermediate sync state (Aleksandr Loktionov) [Orabug: 37304818] {CVE-2024-53088}
  - can: c_can: fix {rx,tx}_errors statistics (Dario Binacchi)
  - sctp: properly validate chunk size in sctp_sf_ootb() (Xin Long) [Orabug: 37298819] {CVE-2024-50299}
  - net: enetc: set MAC address to the VF net_device (Wei Fang)
  - security/keys: fix slab-out-of-bounds in key_task_permission (Chen Ridong) [Orabug: 37298826] {CVE-2024-50301}
  - nfs: avoid i_lock contention in nfs_clear_invalid_mapping (Mike Snitzer)
  - NFSv3: handle out-of-order write replies. (NeilBrown)
  - NFS: Add a tracepoint to show the results of nfs_set_cache_invalid() (Benjamin Coddington)
  - NFSv3: only use NFS timeout for MOUNT when protocols are compatible (NeilBrown)
  - HID: core: zero-initialize the report buffer (Jiri Kosina) [Orabug: 37298832] {CVE-2024-50302}
  - ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin (Heiko Stuebner)
  - ARM: dts: rockchip: Fix the spi controller on rk3036 (Heiko Stuebner)
  - ARM: dts: rockchip: drop grf reference from rk3036 hdmi (Heiko Stuebner)
  - ARM: dts: rockchip: fix rk3036 acodec node (Heiko Stuebner)
  - arm64: dts: imx8mp: correct sdhc ipg clk (Peng Fan)
  - arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc (Heiko Stuebner)
  - arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion (Heiko Stuebner)
  - arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards (Heiko Stuebner)
  - arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 (Diederik de Haas)
  - arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator (Geert Uytterhoeven)


author: Brian Maly <brian.maly@oracle.com> [5.15.0-305.176.4.el8uek]
changelog:
  - x86/asm: Make serialize() always_inline (Juergen Gross)
  - hwmon: (tmp513) Fix division of negative numbers (David Lechner)
  - Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data" (Pratyush Yadav)
  - Revert "regmap: detach regmap from dev on regmap_exit" (Greg Kroah-Hartman)
  - Revert "drm/amdgpu: rework resume handling for display (v2)" (Greg Kroah-Hartman)
  - Revert "PCI: Use preserve_config in place of pci_flags" (Terry Tritton)
  - virtio-net: synchronize probe with ndo_set_features (Jason Wang)  [Orabug: 36637822]
  - virtio-net: synchronize operstate with admin state on up/down (Jason Wang)  [Orabug: 36637822]
  - virtio: allow driver to disable the configure change notification (Jason Wang)  [Orabug: 36637822]
  - virtio: rename virtio_config_enabled to virtio_config_core_enabled (Jason Wang)  [Orabug: 36637822]
  - mlxsw: pci: Fix driver initialization with Spectrum-4 (Ido Schimmel)  [Orabug: 36811057]
  - mlxsw: pci: Fix driver initialization with old firmware (Ido Schimmel)  [Orabug: 36811057]
  - mmc: sdhci-of-dwcmshc: th1520: Increase tuning loop count to 128 (Maksim Kiselev)  [Orabug: 36811057]
  - net/mlx5e: Switch to using _bh variant of of spinlock API in port timestamping NAPI poll context (Rahul Rameshbabu)  [Orabug: 36811057]
  - net/mlx5e: Fix MACsec state loss upon state update in offload path (Emeel Hakim)  [Orabug: 36811057]
  - net/mlx5e: Change the warning when ignore_flow_level is not supported (Jianbo Liu)  [Orabug: 36811057]
  - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Gavin Li)  [Orabug: 36811057]
  - IB/mlx5: Don't expose debugfs entries for RRoCE general parameters if not supported (Mark Zhang)  [Orabug: 36811057]
  - net/mlx5e: Ignore IPsec replay window values on sender side (Leon Romanovsky)  [Orabug: 36811057]
  - net/mlx5e: Allow software parsing when IPsec crypto is enabled (Leon Romanovsky)  [Orabug: 36811057]
  - net/mlx5: Use mlx5 device constant for selecting CQ period mode for ASO (Rahul Rameshbabu)  [Orabug: 36811057]
  - net/mlx5: Bridge, fix multicast packets sent to uplink (Moshe Shemesh)  [Orabug: 36811057]
  - net/mlx5: Fix a WARN upon a callback command failure (Yishai Hadas)  [Orabug: 36811057]
  - net/mlx5e: Fix peer flow lists handling (Vlad Buslov)  [Orabug: 36811057]
  - net/mlx5: Fix query of sd_group field (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5e: Use the correct lag ports number when creating TISes (Saeed Mahameed)  [Orabug: 36811057]
  - selftests: mlxsw: qos_pfc: Remove wrong description (Amit Cohen)  [Orabug: 36811057]
  - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (Ido Schimmel)  [Orabug: 36811057] {CVE-2024-26595}
  - gpio: mlxbf3: add an error code check in mlxbf3_gpio_probe (Su Hui)  [Orabug: 36811057]
  - vdpa/mlx5: Add mkey leak detection (Dragos Tatulea)  [Orabug: 36811057]
  - vdpa/mlx5: Introduce reference counting to mrs (Dragos Tatulea)  [Orabug: 36811057]
  - vdpa/mlx5: Use vq suspend/resume during .set_map (Dragos Tatulea)  [Orabug: 36811057]
  - vdpa/mlx5: Mark vq state for modification in hw vq (Dragos Tatulea)  [Orabug: 36811057]
  - vdpa/mlx5: Mark vq addrs for modification in hw vq (Dragos Tatulea)  [Orabug: 36811057]
  - vdpa/mlx5: Introduce per vq and device resume (Dragos Tatulea)  [Orabug: 36811057]
  - vdpa/mlx5: Allow modifying multiple vq fields in one modify command (Dragos Tatulea)  [Orabug: 36811057]
  - vdpa/mlx5: Expose resumable vq capability (Dragos Tatulea)  [Orabug: 36811057]
  - Revert "mlx5 updates 2023-12-20" (Jakub Kicinski)  [Orabug: 36811057]
  - net/mlx5: DPLL, Implement fractional frequency offset get pin op (Jiri Pirko)  [Orabug: 36811057]
  - net/mlx5: DPLL, Use struct to get values from mlx5_dpll_synce_status_get() (Jiri Pirko)  [Orabug: 36811057]
  - net: macsec: move sci_to_cpu to macsec header (Radu Pirea (NXP OSS))  [Orabug: 36811057]
  - net/mlx5: Implement management PF Ethernet profile (Armen Ratner)  [Orabug: 36811057]
  - net/mlx5: Enable SD feature (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5e: Block TLS device offload on combined SD netdev (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5e: Support per-mdev queue counter (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5e: Support cross-vhca RSS (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5e: Let channels be SD-aware (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5e: Create EN core HW resources for all secondary devices (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5e: Create single netdev per SD group (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5: SD, Add informative prints in kernel log (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5: SD, Implement steering for primary and secondaries (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5: SD, Implement devcom communication and primary election (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5: SD, Implement basic query and instantiation (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5: SD, Introduce SD lib (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5: Fix query of sd_group field (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5e: Use the correct lag ports number when creating TISes (Saeed Mahameed)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Set NVE flood profile as part of FID configuration (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add an "any" packet type (Petr Machata)  [Orabug: 36811057]
  - mlxsw: reg: Add nve_flood_prf_id field to SFMR (Petr Machata)  [Orabug: 36811057]
  - net/mlx5: DR, Use swap() instead of open coding it (Jiapeng Chong)  [Orabug: 36811057]
  - net/mlx5: devcom, Add component size getter (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5e: Decouple CQ from priv (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5e: Statify function mlx5e_monitor_counter_arm (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5: Move TISes from priv to mdev HW resources (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5e: Remove TLS-specific logic in generic create TIS API (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5: fs, Command to control TX flow table root (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5: fs, Command to control L2TABLE entry silent mode (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5: Expose Management PCIe Index Register (MPIR) (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5: Add mlx5_ifc bits used for supporting single netdev Socket-Direct (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5: Manage ICM type of SW encap (Shun Hao)  [Orabug: 36811057]
  - RDMA/mlx5: Support handling of SW encap ICM area (Shun Hao)  [Orabug: 36811057]
  - net/mlx5: Introduce indirect-sw-encap ICM properties (Shun Hao)  [Orabug: 36811057]
  - mmc: sdhci-of-dwcmshc: Use logical OR instead of bitwise OR in dwcmshc_probe() (Nathan Chancellor)  [Orabug: 36811057]
  - mmc: sdhci-of-dwcmshc: Add support for T-Head TH1520 (Drew Fustini)  [Orabug: 36811057]
  - mmc: sdhci: add __sdhci_execute_tuning() to header (Drew Fustini)  [Orabug: 36811057]
  - mlxsw: spectrum: Use CFF mode where available (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add support for rFID family in CFF flood mode (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add a family for bridge FIDs in CFF flood mode (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Initialize flood profiles in CFF mode (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add profile_id to flood profile (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add an object to keep flood profiles (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add hooks for RSP table maintenance (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add a not-UC packet type (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add an op for packing SFMR (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add an op to get PGT address of a FID (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add an op to get PGT allocation size (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add an op for flood table initialization (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Move mlxsw_sp_fid_flood_table_init() up (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Make mlxsw_sp_fid_ops.setup return an int (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Split a helper out of mlxsw_sp_fid_flood_table_mid() (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Rename FID ops, families, arrays (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Privatize FID families (Petr Machata)  [Orabug: 36811057]
  - mlxsw: pci: Fix missing error checking (Ido Schimmel)  [Orabug: 36811057]
  - mlxsw: spectrum_router: Call RIF setup before obtaining FID (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_router: Add a helper to get subport number from a RIF (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Extract SFMR packing into a helper (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Drop unnecessary conditions (Petr Machata)  [Orabug: 36811057]
  - mlxsw: pci: Permit enabling CFF mode (Petr Machata)  [Orabug: 36811057]
  - mlxsw: core, pci: Add plumbing related to CFF mode (Petr Machata)  [Orabug: 36811057]
  - mlxsw: reg: Add to SFMR register the fields related to CFF flood mode (Petr Machata)  [Orabug: 36811057]
  - mlxsw: reg: Extract flood-mode specific part of mlxsw_reg_sfmr_pack() (Petr Machata)  [Orabug: 36811057]
  - mlxsw: reg: Drop unnecessary writes from mlxsw_reg_sfmr_pack() (Petr Machata)  [Orabug: 36811057]
  - mlxsw: reg: Mark SFGC & some SFMR fields as reserved in CFF mode (Petr Machata)  [Orabug: 36811057]
  - mlxsw: reg: Add Switch FID Flooding Profiles Register (Petr Machata)  [Orabug: 36811057]
  - mlxsw: resources: Add max_cap_nve_flood_prf (Petr Machata)  [Orabug: 36811057]
  - mlxsw: cmd: Add MLXSW_CMD_MBOX_CONFIG_PROFILE_FLOOD_MODE_CFF (Petr Machata)  [Orabug: 36811057]
  - mlxsw: cmd: Add cmd_mbox.query_fw.cff_support (Petr Machata)  [Orabug: 36811057]
  - EDAC/bluefield: Convert to platform remove callback returning void (Uwe Kleine-König)  [Orabug: 36811057]
  - selftests: mlxsw: Add PCI reset test (Ido Schimmel)  [Orabug: 36811057]
  - mlxsw: pci: Implement PCI reset handlers (Ido Schimmel)  [Orabug: 36811057]
  - mlxsw: pci: Add support for new reset flow (Ido Schimmel)  [Orabug: 36811057]
  - mlxsw: pci: Move software reset code to a separate function (Amit Cohen)  [Orabug: 36811057]
  - mlxsw: pci: Rename mlxsw_pci_sw_reset() (Amit Cohen)  [Orabug: 36811057]
  - mlxsw: Extend MRSR pack() function to support new commands (Amit Cohen)  [Orabug: 36811057]
  - net/mlx5e: Remove early assignment to netdev->features (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5e: Add local loopback counter to vport rep stats (Or Har-Toov)  [Orabug: 36811057]
  - net/mlx5: Query maximum frequency adjustment of the PTP hardware clock (Rahul Rameshbabu)  [Orabug: 36811057]
  - net/mlx5: Convert scaled ppm values outside the s32 range for PHC frequency adjustments (Rahul Rameshbabu)  [Orabug: 36811057]
  - net/mlx5: Initialize clock->ptp_info inside mlx5_init_timer_clock (Rahul Rameshbabu)  [Orabug: 36811057]
  - net/mlx5: Refactor real time clock operation checks for PHC (Rahul Rameshbabu)  [Orabug: 36811057]
  - net/mlx5e: Access array with enum values instead of magic numbers (Gal Pressman)  [Orabug: 36811057]
  - net/mlx5: simplify mlx5_set_driver_version string assignments (Justin Stitt)  [Orabug: 36811057]
  - net/mlx5: Annotate struct mlx5_flow_handle with __counted_by (Kees Cook)  [Orabug: 36811057]
  - net/mlx5: Annotate struct mlx5_fc_bulk with __counted_by (Kees Cook)  [Orabug: 36811057]
  - net/mlx5e: Some cleanup in mlx5e_tc_stats_matchall() (Amir Tzin)  [Orabug: 36811057]
  - net/mlx5: Allow sync reset flow when BF MGT interface device is present (Moshe Shemesh)  [Orabug: 36811057]
  - net/mlx5: print change on SW reset semaphore returns busy (Moshe Shemesh)  [Orabug: 36811057]
  - vdpa/mlx5: clean up indenting in handle_ctrl_vlan() (Dan Carpenter)  [Orabug: 36811057]
  - vdpa/mlx5: fix error code for deleting vlan (Dan Carpenter)  [Orabug: 36811057]
  - vdpa/mlx5: Fix syntax errors in comments (Xiang wangx)  [Orabug: 36811057]
  - macsec: Fix use-after-free while sending the offloading packet (Jianbo Liu)  [Orabug: 37268700]  {CVE-2024-50261}
  - xfrm: Export symbol xfrm_dev_state_delete. (Steffen Klassert)  [Orabug: 37357287]
  - xfrm: Fix unregister netdevice hang on hardware offload. (Steffen Klassert)  [Orabug: 37357287]
  - xfrm: fix a data-race in xfrm_lookup_with_ifid() (Eric Dumazet)  [Orabug: 37357287]
  - xfrm: generalize xdo_dev_state_update_curlft to allow statistics update (Leon Romanovsky)  [Orabug: 37357287]
  - xfrm: copy_to_user_state fetch offloaded SA packets/bytes statistics (Raed Salem)  [Orabug: 37357287]
  - xfrm: annotate data-race around use_time (Eric Dumazet)  [Orabug: 37357287]
  - xfrm: consistently use time64_t in xfrm_timer_handler() (Eric Dumazet)  [Orabug: 37357287]
  - cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids (Srinivas Pandruvada)  [Orabug: 37383554]
  - cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids (Pedro Henrique Kopper)  [Orabug: 37383554]
  - cpufreq: intel_pstate: Use Meteor Lake EPPs for Arrow Lake (Srinivas Pandruvada)  [Orabug: 37383554]
  - cpufreq: intel_pstate: Update Meteor Lake EPPs (Srinivas Pandruvada)  [Orabug: 37383554]
  - cpufreq: intel_pstate: Switch to new Intel CPU model defines (Tony Luck)  [Orabug: 37383554]
  - cpufreq: Switch to new Intel CPU model defines (Tony Luck)  [Orabug: 37383554]
  - x86/cpu/vfm: Update arch/x86/include/asm/intel-family.h (Tony Luck)  [Orabug: 37383554]
  - x86/cpu: Add model number for another Intel Arrow Lake mobile processor (Tony Luck)  [Orabug: 37383554]
  - cpufreq: intel_pstate: Update default EPPs for Meteor Lake (Srinivas Pandruvada)  [Orabug: 37383554]
  - cpufreq: intel_pstate: Allow model specific EPPs (Srinivas Pandruvada)  [Orabug: 37383554]
  - x86/cpu: Add model number for Intel Clearwater Forest processor (Tony Luck)  [Orabug: 37383554]
  - cpufreq: intel_pstate: Update hybrid scaling factor for Meteor Lake (Srinivas Pandruvada)  [Orabug: 37383554]
  - cpufreq: intel_pstate: Prioritize firmware-provided balance performance EPP (Srinivas Pandruvada)  [Orabug: 37383554]
  - x86/cpu: Add model number for Intel Arrow Lake mobile processor (Tony Luck)  [Orabug: 37383554]
  - x86/cpu: Update Hybrids (Peter Zijlstra)  [Orabug: 37383554]
  - cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (Srinivas Pandruvada)  [Orabug: 37383554]
  - cpufreq: intel_pstate: Enable HWP IO boost for all servers (Srinivas Pandruvada)  [Orabug: 37383554]
  - cpufreq: intel_pstate: Allow EPP 0x80 setting by the firmware (Srinivas Pandruvada)  [Orabug: 37383554]
  - cpufreq: intel_pstate: Use firmware default EPP (Srinivas Pandruvada)  [Orabug: 37383554]
  - net/mlx5: Add a timeout to acquire the command queue semaphore (Akiva Goldberger)  [Orabug: 37388415] {CVE-2024-38556}
  - PCI: Fix pci_enable_acs() support for the ACS quirks (Jason Gunthorpe)  [Orabug: 37477375]
  - PCI: Clear Secondary Status errors after enumeration (Vidya Sagar)  [Orabug: 37477375]
  - PCI/AER: Configure ECRC only if AER is native (Vidya Sagar)  [Orabug: 37477375]
  - PCI: Extend ACS configurability (Vidya Sagar)  [Orabug: 37477375]
  - NFSv4/pNFS: Do layout state recovery upon reboot (Trond Myklebust)  [Orabug: 37477755]
  - NFSv4/pNFS: Remove redundant call to unhash the layout (Trond Myklebust)  [Orabug: 37477755]
  - NFSv4/pnfs: Give nfs4_proc_layoutreturn() a flags argument (Trond Myklebust)  [Orabug: 37477755]
  - NFSv4/pNFS: Retry the layout return later in case of a timeout or reboot (Trond Myklebust)  [Orabug: 37477755]
  - NFSv4/pNFS: Handle server reboots in pnfs_poc_release() (Trond Myklebust)  [Orabug: 37477755]
  - NFSv4/pNFS: Add a helper to defer failed layoutreturn calls (Trond Myklebust)  [Orabug: 37477755]
  - NFSv4/pnfs: Add support for the PNFS_LAYOUT_FILE_BULK_RETURN flag (Trond Myklebust)  [Orabug: 37477755]
  - pNFS: Add a flag argument to pnfs_destroy_layouts_byclid() (Trond Myklebust)  [Orabug: 37477755]
  - NFSv4: Clean up encode_nfs4_stateid() (Trond Myklebust)  [Orabug: 37477755]
  - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust)  [Orabug: 37477755]
  - NFSv4/pnfs: Remove redundant list check (Trond Myklebust)  [Orabug: 37477755]
  - uek-rpm: Enable CONFIG_SENSORS_ARM_SCMI and CONFIG_MVL_MHU (Thomas Tai)  [Orabug: 37498899]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.176.1.el8uek]
changelog:
  - mm/page_alloc: fix min_free_kbytes calculation regarding ZONE_MOVABLE (liuq)  [Orabug: 37503579]
  - mm: Limit warning message in vmemmap_verify() to once (Ma Wupeng)  [Orabug: 37503579]
  - assoc_array: fix the return value in assoc_array_insert_mid_shortcut() (Roman Smirnov)  [Orabug: 37503579]
  - assoc_array: Avoid open coded arithmetic in allocator arguments (Len Baker)  [Orabug: 37503579]
  - mm/page_alloc: use accumulated load when building node fallback list (Krupa Ramakrishnan)  [Orabug: 37503525]
  - mm/page_alloc: print node fallback order (Bharata B Rao)  [Orabug: 37503525]
  - PCI: Support BAR sizes up to 8TB (Dongdong Liu)  [Orabug: 37503525]
  - uek-rpm: Enable USB_XHCI_PCI_RENESAS as a module for aarch64 platforms (Harshit Mogalapalli)  [Orabug: 37552080]
  - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara)  [Orabug: 37535421]
  - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara)  [Orabug: 37535421]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.177.2.el8uek]
changelog:
  - LTS version: v5.15.177 (Vijayendra Suman)
  - Partial revert of xhci: use pm_ptr() instead #ifdef for CONFIG_PM conditionals (Ron Economos)
  - xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals (Arnd Bergmann)
  - net: fix data-races around sk->sk_forward_alloc (Wang Liang) [Orabug: 37388795] {CVE-2024-53124}
  - scsi: sg: Fix slab-use-after-free read in sg_release() (Suraj Sonawane) [Orabug: 37434117] {CVE-2024-56631}
  - x86/xen: fix SLS mitigation in xen_hypercall_iret() (Juergen Gross)
  - nfsd: add list_head nf_gc to struct nfsd_file (Youzhong Yang)
  - ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (Eric Dumazet) [Orabug: 37200706] {CVE-2024-47707}
  - vsock/virtio: discard packets if the transport changes (Stefano Garzarella)
  - blk-cgroup: Fix UAF in blkcg_unpin_online() (Tejun Heo) [Orabug: 37434276] {CVE-2024-56672}
  - iio: adc: rockchip_saradc: fix information leak in triggered buffer (Javier Carrasco)
  - iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on (Jean-Baptiste Maneyrol)
  - iio: imu: inv_icm42600: fix spi burst write not supported (Jean-Baptiste Maneyrol)
  - drm/i915/fb: Relax clear color alignment to 64 bytes (Ville Syrjälä)
  - irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly (Yogesh Lal)
  - gpiolib: cdev: Fix use after free in lineinfo_changed_notify (Zhongqiu Han) [Orabug: 36683269] {CVE-2024-36899}
  - fs/proc: fix softlockup in __read_vmcore (part 2) (Rik van Riel)
  - filemap: avoid truncating 64-bit offset to 32 bits (Marco Nelissen)
  - vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (Stefano Garzarella)
  - vsock: reset socket state when de-assigning the transport (Stefano Garzarella)
  - vsock/virtio: cancel close work in the destructor (Stefano Garzarella)
  - net: ethernet: xgbe: re-add aneg to supported features in PHY quirks (Heiner Kallweit)
  - nvmet: propagate npwg topology (Luis Chamberlain)
  - poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll() (Oleg Nesterov)
  - ACPI: resource: acpi_dev_irq_override(): Check DMI match last (Hans de Goede)
  - kheaders: Ignore silly-rename files (David Howells)
  - fs: fix missing declaration of init_files (Zhang Kunbo)
  - hfs: Sanity check the root record (Leo Stone)
  - mac802154: check local interfaces before deleting sdata list (Lizhi Xu)
  - i2c: rcar: fix NACK handling when being a target (Wolfram Sang)
  - i2c: mux: demux-pinctrl: check initial mux selection, too (Wolfram Sang)
  - drm/v3d: Ensure job pointer is set to NULL after job completion (Maíra Canal)
  - net/mlx5: Fix RDMA TX steering prio (Patrisious Haddad)
  - net: xilinx: axienet: Fix IRQ coalescing packet count overflow (Sean Anderson)
  - nfp: bpf: prevent integer overflow in nfp_bpf_event_output() (Dan Carpenter)
  - pktgen: Avoid out-of-bounds access in get_imix_entries (Artem Chernyshev)
  - bpf: Fix bpf_sk_select_reuseport() memory leak (Michal Luczaj)
  - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field() (Sudheer Kumar Doredla)
  - phy: usb: Fix clock imbalance for suspend/resume (Justin Chen)
  - phy: usb: Use slow clock for wake enabled suspend (Justin Chen)
  - mptcp: fix TCP options overflow. (Paolo Abeni)
  - mptcp: drop port parameter of mptcp_pm_add_addr_signal (Geliang Tang)
  - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (Dennis Lam)
  - ocfs2: correct return value of ocfs2_local_free_info() (Joseph Qi)
  - phy: usb: Toggle the PHY power during init (Justin Chen)
  - phy: usb: Add "wake on" functionality for newer Synopsis XHCI controllers (Al Cooper)
  - of: address: Preserve the flags portion on 1:1 dma-ranges mapping (Andrea della Porta)
  - of: address: Store number of bus flag cells rather than bool (Rob Herring)
  - of: address: Remove duplicated functions (Herve Codina)
  - of: address: Fix address translation when address-size is greater than 2 (Herve Codina)
  - of/address: Add support for 3 address cell bus (Rob Herring)
  - of: unittest: Add bus address range parsing tests (Rob Herring)
  - arm64: dts: rockchip: add hevc power domain clock to rk3328 (Peter Geis)
  - block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (Yu Kuai)
  - iio: adc: ad7124: Disable all channels at probe time (Uwe Kleine-König)
  - iio: inkern: call iio_device_put() only on mapped devices (Joe Hattori)
  - iio: adc: at91: call input_free_device() on allocated iio_dev (Joe Hattori)
  - iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() (Fabio Estevam)
  - iio: gyro: fxas21002c: Fix missing data update in trigger handler (Carlos Song)
  - iio: adc: ti-ads8688: fix information leak in triggered buffer (Javier Carrasco)
  - iio: imu: kmx61: fix information leak in triggered buffer (Javier Carrasco)
  - iio: light: vcnl4035: fix information leak in triggered buffer (Javier Carrasco)
  - iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (Javier Carrasco)
  - iio: pressure: zpa2326: fix information leak in triggered buffer (Javier Carrasco)
  - usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (Akash M)
  - usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints (Prashanth K)
  - usb: fix reference leak in usb_new_device() (Ma Ke)
  - USB: core: Disable LPM only for non-suspended ports (Kai-Heng Feng)
  - USB: usblp: return error when setting unsupported protocol (Jun Yan)
  - usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null (Lianqin Hu)
  - topology: Keep the cpumask unchanged when printing cpumap (Li Huafei)
  - usb: dwc3: gadget: fix writing NYET threshold (André Draszik)
  - USB: serial: cp210x: add Phoenix Contact UPS Device (Johan Hovold)
  - usb-storage: Add max sectors quirk for Nokia 208 (Lubomir Rintel)
  - staging: iio: ad9832: Correct phase range check (Zicheng Qu)
  - staging: iio: ad9834: Correct phase range check (Zicheng Qu)
  - USB: serial: option: add Neoway N723-EA support (Michal Hrusecky)
  - USB: serial: option: add MeiG Smart SRM815 (Chukun Pan)
  - md/raid5: fix atomicity violation in raid5_cache_count (Gui-Dong Han)
  - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Kuan-Wei Chiu)
  - drm/amd/display: increase MAX_SURFACES to the value supported by hw (Melissa Wen)
  - ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (Hans de Goede)
  - ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (Hans de Goede)
  - riscv: Fix sleeping in invalid context in die() (Nam Cao)
  - drm/amd/display: Add check for granularity in dml ceil/floor helpers (Roman Li)
  - sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (Matthieu Baerts (NGI0))
  - sctp: sysctl: udp_port: avoid using current->nsproxy (Matthieu Baerts (NGI0))
  - sctp: sysctl: auth_enable: avoid using current->nsproxy (Matthieu Baerts (NGI0))
  - sctp: sysctl: rto_min/max: avoid using current->nsproxy (Matthieu Baerts (NGI0))
  - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (Matthieu Baerts (NGI0))
  - dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY (Mikulas Patocka)
  - dm thin: make get_first_thin use rcu-safe list first function (Krister Johansen)
  - afs: Fix the maximum cell name length (David Howells)
  - ksmbd: fix a missing return value check bug (Wentao Liang)
  - drm/mediatek: Add support for 180-degree rotation in the display driver (Jason-JH.Lin)
  - netfilter: conntrack: clamp maximum hashtable size to INT_MAX (Pablo Neira Ayuso)
  - netfilter: nf_tables: imbalance in flowtable binding (Pablo Neira Ayuso)
  - tls: Fix tls_sw_sendmsg error handling (Benjamin Coddington)
  - cxgb4: Avoid removal of uninserted tid (Anumula Murali Mohan Reddy)
  - bnxt_en: Fix possible memory leak when hwrm_req_replace fails (Kalesh AP)
  - net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (Eric Dumazet)
  - tcp/dccp: allow a connection when sk_max_ack_backlog is zero (Zhongqiu Duan)
  - tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog (Jason Xing)
  - net: 802: LLC+SNAP OID:PID lookup on start of skb data (Antonio Pastor)
  - ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() (Keisuke Nishimura)
  - ASoC: mediatek: disable buffer pre-allocation (Chen-Yu Tsai)
  - exfat: fix the infinite loop in __exfat_free_cluster() (Yuezhang Mo)
  - exfat: fix the infinite loop in exfat_readdir() (Yuezhang Mo)
  - dm array: fix cursor index when skipping across block boundaries (Ming-Hung Tsai)
  - dm array: fix unreleased btree blocks on closing a faulty array cursor (Ming-Hung Tsai)
  - dm array: fix releasing a faulty array block twice in dm_array_cursor_end (Ming-Hung Tsai)
  - jbd2: flush filesystem device before updating tail sequence (Zhang Yi)
  - ceph: give up on paths longer than PATH_MAX (Max Kellermann)


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.177.3.el8uek]
changelog:
  - uek-rpm: Update network stress testing options for embedded2 (Joe Dobosenski)  [Orabug: 37530219]
  - mm, madvise: fix potential workingset node list_lru leaks (Kairui Song)  [Orabug: 37464586]
  - crypto: qat/qat_4xxx - fix off by one in uof_get_name() (Dan Carpenter)  [Orabug: 37427536] {CVE-2024-53162}
  - vdpa/mlx5: Fix error path during device add (Dragos Tatulea)  [Orabug: 37296163]
  - vp_vdpa: fix id_table array not null terminated error (Xiaoguang Wang)  [Orabug: 37296163] {CVE-2024-53110}
  - vdpa/mlx5: Postpone MR deletion (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Introduce init/destroy for MR resources (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Rename mr_mtx -> lock (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Extract mr members in own resource struct (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Rename function (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Delete direct MKEYs in parallel (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Create direct MKEYs in parallel (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Parallelize VQ suspend/resume for CVQ MQ command (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Small improvement for change_num_qps() (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Keep notifiers during suspend but ignore (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Parallelize device resume (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Parallelize device suspend (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Use async API for vq modify commands (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Use async API for vq query command (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Introduce async fw command wrapper (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Introduce error logging function (Dragos Tatulea)  [Orabug: 37296163]
  - net/mlx5: Support throttled commands from async API (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Add the support of set mac address (Cindy Lu)  [Orabug: 37296163]
  - vdpa_sim_net: Add the support of set mac address (Cindy Lu)  [Orabug: 37296163]
  - vdpa: support set mac address from vdpa tool (Cindy Lu)  [Orabug: 37296163]
  - vdpa/mlx5: Fix invalid mr resource destroy (Dragos Tatulea)  [Orabug: 37296163] {CVE-2024-47687}
  - vdpa/mlx5: Don't enable non-active VQs in .set_vq_ready() (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Don't reset VQs more than necessary (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Re-create HW VQs under certain conditions (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Pre-create hardware VQs at vdpa .dev_add time (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Use suspend/resume during VQP change (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Forward error in suspend/resume device (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Consolidate all VQ modify to Ready to use resume_vq() (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Add error code for suspend/resume VQ (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Accept Init -> Ready VQ transition in resume_vq() (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Allow creation of blank VQs (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Set mkey modified flags on all VQs (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Start off rqt_size with max VQPs (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Set an initial size on the VQ (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Add support for modifying the VQ features field (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Add support for modifying the virtio_version VQ field (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Rename init_mvqs (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Clear and reinitialize software VQ data on reset (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Initialize and reset device with one queue pair (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Remove duplicate suspend code (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Iterate over active VQs during suspend/resume (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Drop redundant check in teardown_virtqueues() (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Drop redundant code (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Make setup/teardown_vq_resources() symmetrical (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Clarify meaning thorough function rename (Dragos Tatulea)  [Orabug: 37296163]
  - vhost-vdpa: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET)  [Orabug: 37296163]
  - vp_vdpa: don't allocate unused msix vectors (Yuxue Liu)  [Orabug: 37296163]
  - vdpa: Convert sprintf/snprintf to sysfs_emit (Li Zhijian)  [Orabug: 37296163]
  - vp_vdpa: Fix return value check vp_vdpa_request_irq (Yuxue Liu)  [Orabug: 37296163]
  - vhost-vdpa: change ioctl # for VDPA_GET_VRING_SIZE (Michael S. Tsirkin)  [Orabug: 37296163]
  - virtio_vdpa: create vqs with the actual size (Zhu Lingshan)  [Orabug: 37296163]
  - vdpa_sim: implement vdpa_config_ops.get_vq_size for vDPA simulator (Zhu Lingshan)  [Orabug: 37296163]
  - vp_vdpa: implement vdpa_config_ops.get_vq_size (Zhu Lingshan)  [Orabug: 37296163]
  - vDPA: introduce get_vq_size to vdpa_config_ops (Zhu Lingshan)  [Orabug: 37296163]
  - vhost-vdpa: uapi to support reporting per vq size (Zhu Lingshan)  [Orabug: 37296163]
  - vdpa: skip suspend/resume ops if not DRIVER_OK (Steve Sistare)  [Orabug: 37296163]
  - vdpa_sim: reset must not run (Steve Sistare)  [Orabug: 37296163]
  - vdpa: Block vq property changes in DRIVER_OK (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa: Track device suspended state (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET)  [Orabug: 37296163]
  - SUNRPC: do not retry on EKEYEXPIRED when user TGT ticket expired (Dai Ngo)  [Orabug: 34162493]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.177.4.el8uek]
changelog:
  - Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null" (Greg Kroah-Hartman)
  - drm/v3d: Assign job pointer to NULL before signaling the fence (Maíra Canal)
  - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (Ranjan Kumar)  [Orabug: 37472354]  {CVE-2024-57804}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.177.4.1.el8uek]
changelog:
  - jbd2: increase maximum transaction size (Jan Kara)  [Orabug: 37741884]  
  - rtc: add new RTC_FEATURE_ALARM_WAKEUP_ONLY feature (Alexandre Belloni)  [Orabug: 37741883]  
  - thermal: core: Drop excessive lockdep_assert_held() calls (Rafael J. Wysocki)  [Orabug: 37741883]  
  - thermal: core: Introduce thermal_cooling_device_update() (Rafael J. Wysocki)  [Orabug: 37741883]  
  - thermal: core: Introduce thermal_cooling_device_present() (Rafael J. Wysocki)  [Orabug: 37741883]  
  - thermal: sysfs: Reuse cdev->max_state (Viresh Kumar)  [Orabug: 37741883]  
  - rtc: efi: Enable SET/GET WAKEUP services as optional (Shanker Donthineni)  [Orabug: 37741883]  
  - rtc: efi: Add wakeup support (Riwen Lu)  [Orabug: 37741883]  
  - rtc: efi: switch to RTC_FEATURE_UPDATE_INTERRUPT (Alexandre Belloni)  [Orabug: 37741883]  
  - rtc: add BSM parameter (Alexandre Belloni)  [Orabug: 37741883]  
  - rtc: add correction parameter (Alexandre Belloni)  [Orabug: 37741883]  
  - rtc: add parameter ioctl (Alexandre Belloni)  [Orabug: 37741883]  
  - rtc: expose correction feature (Alexandre Belloni)  [Orabug: 37741883]  
  - rtc: add alarm related features (Alexandre Belloni)  [Orabug: 37741883]  
  - rtc: efi: switch to devm_rtc_allocate_device (Alexandre Belloni)  [Orabug: 37741883]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.177.4.el8uek]
changelog:
  - Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null" (Greg Kroah-Hartman)   
  - drm/v3d: Assign job pointer to NULL before signaling the fence (Maíra Canal)   
  - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (Ranjan Kumar)  [Orabug: 37472354]  {CVE-2024-57804}


author: Brian Maly <brian.maly@oracle.com> [5.15.0-305.176.4.el8uek]
changelog:
  - x86/asm: Make serialize() always_inline (Juergen Gross)
  - hwmon: (tmp513) Fix division of negative numbers (David Lechner)
  - Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data" (Pratyush Yadav)
  - Revert "regmap: detach regmap from dev on regmap_exit" (Greg Kroah-Hartman)
  - Revert "drm/amdgpu: rework resume handling for display (v2)" (Greg Kroah-Hartman)
  - Revert "PCI: Use preserve_config in place of pci_flags" (Terry Tritton)
  - virtio-net: synchronize probe with ndo_set_features (Jason Wang) [Orabug: 36637822]
  - virtio-net: synchronize operstate with admin state on up/down (Jason Wang) [Orabug: 36637822]
  - virtio: allow driver to disable the configure change notification (Jason Wang) [Orabug: 36637822]
  - virtio: rename virtio_config_enabled to virtio_config_core_enabled (Jason Wang) [Orabug: 36637822]
  - mlxsw: pci: Fix driver initialization with Spectrum-4 (Ido Schimmel) [Orabug: 36811057]
  - mlxsw: pci: Fix driver initialization with old firmware (Ido Schimmel) [Orabug: 36811057]
  - mmc: sdhci-of-dwcmshc: th1520: Increase tuning loop count to 128 (Maksim Kiselev) [Orabug: 36811057]
  - net/mlx5e: Switch to using _bh variant of of spinlock API in port timestamping NAPI poll context (Rahul Rameshbabu) [Orabug: 36811057]
  - net/mlx5e: Fix MACsec state loss upon state update in offload path (Emeel Hakim) [Orabug: 36811057]
  - net/mlx5e: Change the warning when ignore_flow_level is not supported (Jianbo Liu) [Orabug: 36811057]
  - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Gavin Li) [Orabug: 36811057,36940500] {CVE-2023-52658}
  - IB/mlx5: Don't expose debugfs entries for RRoCE general parameters if not supported (Mark Zhang) [Orabug: 36811057]
  - net/mlx5e: Ignore IPsec replay window values on sender side (Leon Romanovsky) [Orabug: 36811057]
  - net/mlx5e: Allow software parsing when IPsec crypto is enabled (Leon Romanovsky) [Orabug: 36811057]
  - net/mlx5: Use mlx5 device constant for selecting CQ period mode for ASO (Rahul Rameshbabu) [Orabug: 36811057]
  - net/mlx5: Bridge, fix multicast packets sent to uplink (Moshe Shemesh) [Orabug: 36811057]
  - net/mlx5: Fix a WARN upon a callback command failure (Yishai Hadas) [Orabug: 36811057]
  - net/mlx5e: Fix peer flow lists handling (Vlad Buslov) [Orabug: 36811057]
  - net/mlx5: Fix query of sd_group field (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5e: Use the correct lag ports number when creating TISes (Saeed Mahameed) [Orabug: 36811057]
  - selftests: mlxsw: qos_pfc: Remove wrong description (Amit Cohen) [Orabug: 36811057]
  - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (Ido Schimmel) [Orabug: 36811057] {CVE-2024-26595}
  - gpio: mlxbf3: add an error code check in mlxbf3_gpio_probe (Su Hui) [Orabug: 36811057]
  - vdpa/mlx5: Add mkey leak detection (Dragos Tatulea) [Orabug: 36811057]
  - vdpa/mlx5: Introduce reference counting to mrs (Dragos Tatulea) [Orabug: 36811057]
  - vdpa/mlx5: Use vq suspend/resume during .set_map (Dragos Tatulea) [Orabug: 36811057]
  - vdpa/mlx5: Mark vq state for modification in hw vq (Dragos Tatulea) [Orabug: 36811057]
  - vdpa/mlx5: Mark vq addrs for modification in hw vq (Dragos Tatulea) [Orabug: 36811057]
  - vdpa/mlx5: Introduce per vq and device resume (Dragos Tatulea) [Orabug: 36811057]
  - vdpa/mlx5: Allow modifying multiple vq fields in one modify command (Dragos Tatulea) [Orabug: 36811057]
  - vdpa/mlx5: Expose resumable vq capability (Dragos Tatulea) [Orabug: 36811057]
  - Revert "mlx5 updates 2023-12-20" (Jakub Kicinski) [Orabug: 36811057]
  - net/mlx5: DPLL, Implement fractional frequency offset get pin op (Jiri Pirko) [Orabug: 36811057]
  - net/mlx5: DPLL, Use struct to get values from mlx5_dpll_synce_status_get() (Jiri Pirko) [Orabug: 36811057]
  - net: macsec: move sci_to_cpu to macsec header (Radu Pirea) [Orabug: 36811057]
  - net/mlx5: Implement management PF Ethernet profile (Armen Ratner) [Orabug: 36811057]
  - net/mlx5: Enable SD feature (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5e: Block TLS device offload on combined SD netdev (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5e: Support per-mdev queue counter (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5e: Support cross-vhca RSS (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5e: Let channels be SD-aware (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5e: Create EN core HW resources for all secondary devices (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5e: Create single netdev per SD group (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5: SD, Add informative prints in kernel log (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5: SD, Implement steering for primary and secondaries (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5: SD, Implement devcom communication and primary election (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5: SD, Implement basic query and instantiation (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5: SD, Introduce SD lib (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5: Fix query of sd_group field (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5e: Use the correct lag ports number when creating TISes (Saeed Mahameed) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Set NVE flood profile as part of FID configuration (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add an "any" packet type (Petr Machata) [Orabug: 36811057]
  - mlxsw: reg: Add nve_flood_prf_id field to SFMR (Petr Machata) [Orabug: 36811057]
  - net/mlx5: DR, Use swap() instead of open coding it (Jiapeng Chong) [Orabug: 36811057]
  - net/mlx5: devcom, Add component size getter (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5e: Decouple CQ from priv (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5e: Statify function mlx5e_monitor_counter_arm (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5: Move TISes from priv to mdev HW resources (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5e: Remove TLS-specific logic in generic create TIS API (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5: fs, Command to control TX flow table root (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5: fs, Command to control L2TABLE entry silent mode (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5: Expose Management PCIe Index Register (MPIR) (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5: Add mlx5_ifc bits used for supporting single netdev Socket-Direct (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5: Manage ICM type of SW encap (Shun Hao) [Orabug: 36811057]
  - RDMA/mlx5: Support handling of SW encap ICM area (Shun Hao) [Orabug: 36811057]
  - net/mlx5: Introduce indirect-sw-encap ICM properties (Shun Hao) [Orabug: 36811057]
  - mmc: sdhci-of-dwcmshc: Use logical OR instead of bitwise OR in dwcmshc_probe() (Nathan Chancellor) [Orabug: 36811057]
  - mmc: sdhci-of-dwcmshc: Add support for T-Head TH1520 (Drew Fustini) [Orabug: 36811057]
  - mmc: sdhci: add __sdhci_execute_tuning() to header (Drew Fustini) [Orabug: 36811057]
  - mlxsw: spectrum: Use CFF mode where available (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add support for rFID family in CFF flood mode (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add a family for bridge FIDs in CFF flood mode (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Initialize flood profiles in CFF mode (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add profile_id to flood profile (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add an object to keep flood profiles (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add hooks for RSP table maintenance (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add a not-UC packet type (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add an op for packing SFMR (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add an op to get PGT address of a FID (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add an op to get PGT allocation size (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add an op for flood table initialization (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Move mlxsw_sp_fid_flood_table_init() up (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Make mlxsw_sp_fid_ops.setup return an int (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Split a helper out of mlxsw_sp_fid_flood_table_mid() (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Rename FID ops, families, arrays (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Privatize FID families (Petr Machata) [Orabug: 36811057]
  - mlxsw: pci: Fix missing error checking (Ido Schimmel) [Orabug: 36811057]
  - mlxsw: spectrum_router: Call RIF setup before obtaining FID (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_router: Add a helper to get subport number from a RIF (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Extract SFMR packing into a helper (Petr Machata) [Orabug: 36811057]
  - mlxsw: spectrum_fid: Drop unnecessary conditions (Petr Machata) [Orabug: 36811057]
  - mlxsw: pci: Permit enabling CFF mode (Petr Machata) [Orabug: 36811057]
  - mlxsw: core, pci: Add plumbing related to CFF mode (Petr Machata) [Orabug: 36811057]
  - mlxsw: reg: Add to SFMR register the fields related to CFF flood mode (Petr Machata) [Orabug: 36811057]
  - mlxsw: reg: Extract flood-mode specific part of mlxsw_reg_sfmr_pack() (Petr Machata) [Orabug: 36811057]
  - mlxsw: reg: Drop unnecessary writes from mlxsw_reg_sfmr_pack() (Petr Machata) [Orabug: 36811057]
  - mlxsw: reg: Mark SFGC & some SFMR fields as reserved in CFF mode (Petr Machata) [Orabug: 36811057]
  - mlxsw: reg: Add Switch FID Flooding Profiles Register (Petr Machata) [Orabug: 36811057]
  - mlxsw: resources: Add max_cap_nve_flood_prf (Petr Machata) [Orabug: 36811057]
  - mlxsw: cmd: Add MLXSW_CMD_MBOX_CONFIG_PROFILE_FLOOD_MODE_CFF (Petr Machata) [Orabug: 36811057]
  - mlxsw: cmd: Add cmd_mbox.query_fw.cff_support (Petr Machata) [Orabug: 36811057]
  - EDAC/bluefield: Convert to platform remove callback returning void (Uwe Kleine-König) [Orabug: 36811057]
  - selftests: mlxsw: Add PCI reset test (Ido Schimmel) [Orabug: 36811057]
  - mlxsw: pci: Implement PCI reset handlers (Ido Schimmel) [Orabug: 36811057]
  - mlxsw: pci: Add support for new reset flow (Ido Schimmel) [Orabug: 36811057]
  - mlxsw: pci: Move software reset code to a separate function (Amit Cohen) [Orabug: 36811057]
  - mlxsw: pci: Rename mlxsw_pci_sw_reset() (Amit Cohen) [Orabug: 36811057]
  - mlxsw: Extend MRSR pack() function to support new commands (Amit Cohen) [Orabug: 36811057]
  - net/mlx5e: Remove early assignment to netdev->features (Tariq Toukan) [Orabug: 36811057]
  - net/mlx5e: Add local loopback counter to vport rep stats (Or Har-Toov) [Orabug: 36811057]
  - net/mlx5: Query maximum frequency adjustment of the PTP hardware clock (Rahul Rameshbabu) [Orabug: 36811057]
  - net/mlx5: Convert scaled ppm values outside the s32 range for PHC frequency adjustments (Rahul Rameshbabu) [Orabug: 36811057]
  - net/mlx5: Initialize clock->ptp_info inside mlx5_init_timer_clock (Rahul Rameshbabu) [Orabug: 36811057]
  - net/mlx5: Refactor real time clock operation checks for PHC (Rahul Rameshbabu) [Orabug: 36811057]
  - net/mlx5e: Access array with enum values instead of magic numbers (Gal Pressman) [Orabug: 36811057]
  - net/mlx5: simplify mlx5_set_driver_version string assignments (Justin Stitt) [Orabug: 36811057]
  - net/mlx5: Annotate struct mlx5_flow_handle with __counted_by (Kees Cook) [Orabug: 36811057]
  - net/mlx5: Annotate struct mlx5_fc_bulk with __counted_by (Kees Cook) [Orabug: 36811057]
  - net/mlx5e: Some cleanup in mlx5e_tc_stats_matchall() (Amir Tzin) [Orabug: 36811057]
  - net/mlx5: Allow sync reset flow when BF MGT interface device is present (Moshe Shemesh) [Orabug: 36811057]
  - net/mlx5: print change on SW reset semaphore returns busy (Moshe Shemesh) [Orabug: 36811057]
  - vdpa/mlx5: clean up indenting in handle_ctrl_vlan() (Dan Carpenter) [Orabug: 36811057]
  - vdpa/mlx5: fix error code for deleting vlan (Dan Carpenter) [Orabug: 36811057]
  - vdpa/mlx5: Fix syntax errors in comments (Xiang Wangx) [Orabug: 36811057]
  - macsec: Fix use-after-free while sending the offloading packet (Jianbo Liu) [Orabug: 37268700,37516375] {CVE-2024-50261}
  - xfrm: Export symbol xfrm_dev_state_delete. (Steffen Klassert) [Orabug: 37357287]
  - xfrm: Fix unregister netdevice hang on hardware offload. (Steffen Klassert) [Orabug: 37357287]
  - xfrm: fix a data-race in xfrm_lookup_with_ifid() (Eric Dumazet) [Orabug: 37357287]
  - xfrm: generalize xdo_dev_state_update_curlft to allow statistics update (Leon Romanovsky) [Orabug: 37357287]
  - xfrm: copy_to_user_state fetch offloaded SA packets/bytes statistics (Raed Salem) [Orabug: 37357287]
  - xfrm: annotate data-race around use_time (Eric Dumazet) [Orabug: 37357287]
  - xfrm: consistently use time64_t in xfrm_timer_handler() (Eric Dumazet) [Orabug: 37357287]
  - cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids (Srinivas Pandruvada) [Orabug: 37383554]
  - cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids (Pedro Henrique Kopper) [Orabug: 37383554]
  - cpufreq: intel_pstate: Use Meteor Lake EPPs for Arrow Lake (Srinivas Pandruvada) [Orabug: 37383554]
  - cpufreq: intel_pstate: Update Meteor Lake EPPs (Srinivas Pandruvada) [Orabug: 37383554]
  - cpufreq: intel_pstate: Switch to new Intel CPU model defines (Tony Luck) [Orabug: 37383554]
  - cpufreq: Switch to new Intel CPU model defines (Tony Luck) [Orabug: 37383554]
  - x86/cpu/vfm: Update arch/x86/include/asm/intel-family.h (Tony Luck) [Orabug: 37383554]
  - x86/cpu: Add model number for another Intel Arrow Lake mobile processor (Tony Luck) [Orabug: 37383554]
  - cpufreq: intel_pstate: Update default EPPs for Meteor Lake (Srinivas Pandruvada) [Orabug: 37383554]
  - cpufreq: intel_pstate: Allow model specific EPPs (Srinivas Pandruvada) [Orabug: 37383554]
  - x86/cpu: Add model number for Intel Clearwater Forest processor (Tony Luck) [Orabug: 37383554]
  - cpufreq: intel_pstate: Update hybrid scaling factor for Meteor Lake (Srinivas Pandruvada) [Orabug: 37383554]
  - cpufreq: intel_pstate: Prioritize firmware-provided balance performance EPP (Srinivas Pandruvada) [Orabug: 37383554]
  - x86/cpu: Add model number for Intel Arrow Lake mobile processor (Tony Luck) [Orabug: 37383554]
  - x86/cpu: Update Hybrids (Peter Zijlstra) [Orabug: 37383554]
  - cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (Srinivas Pandruvada) [Orabug: 37383554]
  - cpufreq: intel_pstate: Enable HWP IO boost for all servers (Srinivas Pandruvada) [Orabug: 37383554]
  - cpufreq: intel_pstate: Allow EPP 0x80 setting by the firmware (Srinivas Pandruvada) [Orabug: 37383554]
  - cpufreq: intel_pstate: Use firmware default EPP (Srinivas Pandruvada) [Orabug: 37383554]
  - net/mlx5: Add a timeout to acquire the command queue semaphore (Akiva Goldberger) [Orabug: 36753441,37388415] {CVE-2024-38556}
  - PCI: Fix pci_enable_acs() support for the ACS quirks (Jason Gunthorpe) [Orabug: 37477375,37492139]
  - PCI: Clear Secondary Status errors after enumeration (Vidya Sagar) [Orabug: 37477375,37492139]
  - PCI/AER: Configure ECRC only if AER is native (Vidya Sagar) [Orabug: 37477375,37492139]
  - PCI: Extend ACS configurability (Vidya Sagar) [Orabug: 37477375,37492139]
  - NFSv4/pNFS: Do layout state recovery upon reboot (Trond Myklebust) [Orabug: 37477755,37487056]
  - NFSv4/pNFS: Remove redundant call to unhash the layout (Trond Myklebust) [Orabug: 37477755,37487056]
  - NFSv4/pnfs: Give nfs4_proc_layoutreturn() a flags argument (Trond Myklebust) [Orabug: 37477755,37487056]
  - NFSv4/pNFS: Retry the layout return later in case of a timeout or reboot (Trond Myklebust) [Orabug: 37477755,37487056]
  - NFSv4/pNFS: Handle server reboots in pnfs_poc_release() (Trond Myklebust) [Orabug: 37477755,37487056]
  - NFSv4/pNFS: Add a helper to defer failed layoutreturn calls (Trond Myklebust) [Orabug: 37477755,37487056]
  - NFSv4/pnfs: Add support for the PNFS_LAYOUT_FILE_BULK_RETURN flag (Trond Myklebust) [Orabug: 37477755,37487056]
  - pNFS: Add a flag argument to pnfs_destroy_layouts_byclid() (Trond Myklebust) [Orabug: 37477755,37487056]
  - NFSv4: Clean up encode_nfs4_stateid() (Trond Myklebust) [Orabug: 37477755,37487056]
  - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [Orabug: 37477755,37487056]
  - NFSv4/pnfs: Remove redundant list check (Trond Myklebust) [Orabug: 37477755,37487056]
  - uek-rpm: Enable CONFIG_SENSORS_ARM_SCMI and CONFIG_MVL_MHU (Thomas Tai) [Orabug: 37498899]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.176.1.el8uek]
changelog:
  - mm/page_alloc: fix min_free_kbytes calculation regarding ZONE_MOVABLE (Liuq) [Orabug: 37503579,37556932]
  - mm: Limit warning message in vmemmap_verify() to once (Ma Wupeng) [Orabug: 37503579,37556932]
  - assoc_array: fix the return value in assoc_array_insert_mid_shortcut() (Roman Smirnov) [Orabug: 37503579,37556932]
  - assoc_array: Avoid open coded arithmetic in allocator arguments (Len Baker) [Orabug: 37503579,37556932]
  - mm/page_alloc: use accumulated load when building node fallback list (Krupa Ramakrishnan) [Orabug: 37503525]
  - mm/page_alloc: print node fallback order (Bharata B Rao) [Orabug: 37503525]
  - PCI: Support BAR sizes up to 8TB (Dongdong Liu) [Orabug: 37503525]
  - uek-rpm: Enable USB_XHCI_PCI_RENESAS as a module for aarch64 platforms (Harshit Mogalapalli) [Orabug: 37552080,37556911]
  - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [Orabug: 37535421]
  - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [Orabug: 37535421]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.177.2.el8uek]
changelog:
  - LTS version: v5.15.177 (Vijayendra Suman)
  - Partial revert of xhci: use pm_ptr() instead #ifdef for CONFIG_PM conditionals (Ron Economos)
  - xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals (Arnd Bergmann)
  - net: fix data-races around sk->sk_forward_alloc (Wang Liang) [Orabug: 37388795] {CVE-2024-53124}
  - scsi: sg: Fix slab-use-after-free read in sg_release() (Surajsonawane2415) [Orabug: 37434117] {CVE-2024-56631}
  - x86/xen: fix SLS mitigation in xen_hypercall_iret() (Juergen Gross)
  - nfsd: add list_head nf_gc to struct nfsd_file (Youzhong Yang)
  - ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (Eric Dumazet) [Orabug: 37200706] {CVE-2024-47707}
  - vsock/virtio: discard packets if the transport changes (Stefano Garzarella) [Orabug: 37555796] {CVE-2025-21669}
  - blk-cgroup: Fix UAF in blkcg_unpin_online() (Tejun Heo) [Orabug: 37434276] {CVE-2024-56672}
  - iio: adc: rockchip_saradc: fix information leak in triggered buffer (Javier Carrasco) [Orabug: 37497164] {CVE-2024-57907}
  - iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on (Jean-Baptiste Maneyrol)
  - iio: imu: inv_icm42600: fix spi burst write not supported (Jean-Baptiste Maneyrol)
  - drm/i915/fb: Relax clear color alignment to 64 bytes (Ville Syrjälä)
  - irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly (Yogesh Lal)
  - gpiolib: cdev: Fix use after free in lineinfo_changed_notify (Zhongqiu Han) [Orabug: 36683269] {CVE-2024-36899}
  - fs/proc: fix softlockup in __read_vmcore (part 2) (Rik Van Riel) [Orabug: 37592151] {CVE-2025-21694}
  - filemap: avoid truncating 64-bit offset to 32 bits (Marco Nelissen) [Orabug: 37555782] {CVE-2025-21665}
  - vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (Stefano Garzarella) [Orabug: 37555785] {CVE-2025-21666}
  - vsock: reset socket state when de-assigning the transport (Stefano Garzarella)
  - vsock/virtio: cancel close work in the destructor (Stefano Garzarella)
  - net: ethernet: xgbe: re-add aneg to supported features in PHY quirks (Heiner Kallweit)
  - nvmet: propagate npwg topology (Luis Chamberlain)
  - poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll() (Oleg Nesterov)
  - ACPI: resource: acpi_dev_irq_override(): Check DMI match last (Hans de Goede)
  - kheaders: Ignore silly-rename files (David Howells)
  - fs: fix missing declaration of init_files (Zhang Kunbo)
  - hfs: Sanity check the root record (Leo Stone)
  - mac802154: check local interfaces before deleting sdata list (Lizhi Xu) [Orabug: 37555775] {CVE-2024-57948}
  - i2c: rcar: fix NACK handling when being a target (Wolfram Sang)
  - i2c: mux: demux-pinctrl: check initial mux selection, too (Wolfram Sang)
  - drm/v3d: Ensure job pointer is set to NULL after job completion (Maíra Canal)
  - net/mlx5: Fix RDMA TX steering prio (Patrisious Haddad)
  - net: xilinx: axienet: Fix IRQ coalescing packet count overflow (Sean Anderson)
  - nfp: bpf: prevent integer overflow in nfp_bpf_event_output() (Dan Carpenter)
  - pktgen: Avoid out-of-bounds access in get_imix_entries (Artem Chernyshev) [Orabug: 37555838] {CVE-2025-21680}
  - bpf: Fix bpf_sk_select_reuseport() memory leak (Michal Luczaj) [Orabug: 37555850] {CVE-2025-21683}
  - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field() (Sudheer Kumar Doredla)
  - phy: usb: Fix clock imbalance for suspend/resume (Justin Chen)
  - phy: usb: Use slow clock for wake enabled suspend (Justin Chen)
  - mptcp: fix TCP options overflow. (Paolo Abeni) [Orabug: 37484954] {CVE-2024-57882}
  - mptcp: drop port parameter of mptcp_pm_add_addr_signal (Geliang Tang)
  - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (Dennis Lam) [Orabug: 37485003] {CVE-2024-57892}
  - ocfs2: correct return value of ocfs2_local_free_info() (Joseph Qi)
  - phy: usb: Toggle the PHY power during init (Justin Chen)
  - phy: usb: Add "wake on" functionality for newer Synopsis XHCI controllers (Al Cooper)
  - of: address: Preserve the flags portion on 1:1 dma-ranges mapping (Andrea Della Porta)
  - of: address: Store number of bus flag cells rather than bool (Rob Herring)
  - of: address: Remove duplicated functions (Herve Codina)
  - of: address: Fix address translation when address-size is greater than 2 (Herve Codina)
  - of/address: Add support for 3 address cell bus (Rob Herring)
  - of: unittest: Add bus address range parsing tests (Rob Herring)
  - arm64: dts: rockchip: add hevc power domain clock to rk3328 (Peter Geis)
  - block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (Yu Kuai) [Orabug: 37497408] {CVE-2025-21631}
  - iio: adc: ad7124: Disable all channels at probe time (Uwe Kleine-König)
  - iio: inkern: call iio_device_put() only on mapped devices (Joe Hattori)
  - iio: adc: at91: call input_free_device() on allocated iio_dev (Joe Hattori) {CVE-2024-57904}
  - iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() (Fabio Estevam)
  - iio: gyro: fxas21002c: Fix missing data update in trigger handler (Carlos Song)
  - iio: adc: ti-ads8688: fix information leak in triggered buffer (Javier Carrasco) {CVE-2024-57906}
  - iio: imu: kmx61: fix information leak in triggered buffer (Javier Carrasco) {CVE-2024-57908}
  - iio: light: vcnl4035: fix information leak in triggered buffer (Javier Carrasco) {CVE-2024-57910}
  - iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (Javier Carrasco) {CVE-2024-57911}
  - iio: pressure: zpa2326: fix information leak in triggered buffer (Javier Carrasco) {CVE-2024-57912}
  - usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (Akash M) {CVE-2024-57913}
  - usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints (Prashanth K)
  - usb: fix reference leak in usb_new_device() (Ma Ke)
  - USB: core: Disable LPM only for non-suspended ports (Kai-Heng Feng)
  - USB: usblp: return error when setting unsupported protocol (Yan Jun)
  - usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null (Lianqin Hu)
  - topology: Keep the cpumask unchanged when printing cpumap (Li Huafei) [Orabug: 37497212] {CVE-2024-57917}
  - usb: dwc3: gadget: fix writing NYET threshold (André Draszik)
  - USB: serial: cp210x: add Phoenix Contact UPS Device (Johan Hovold)
  - usb-storage: Add max sectors quirk for Nokia 208 (Lubomir Rintel)
  - staging: iio: ad9832: Correct phase range check (Zicheng Qu)
  - staging: iio: ad9834: Correct phase range check (Zicheng Qu)
  - USB: serial: option: add Neoway N723-EA support (Michal Hrusecky)
  - USB: serial: option: add MeiG Smart SRM815 (Chukun Pan)
  - md/raid5: fix atomicity violation in raid5_cache_count (Gui-Dong Han)
  - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Kuan-Wei Chiu)
  - drm/amd/display: increase MAX_SURFACES to the value supported by hw (Melissa Wen)
  - ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (Hans de Goede)
  - ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (Hans de Goede)
  - riscv: Fix sleeping in invalid context in die() (Nam Cao) {CVE-2024-57939}
  - drm/amd/display: Add check for granularity in dml ceil/floor helpers (Roman Li) [Orabug: 37497224] {CVE-2024-57922}
  - sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (Matthieu Baerts) [Orabug: 37497275] {CVE-2025-21636}
  - sctp: sysctl: udp_port: avoid using current->nsproxy (Matthieu Baerts) [Orabug: 37497279] {CVE-2025-21637}
  - sctp: sysctl: auth_enable: avoid using current->nsproxy (Matthieu Baerts) [Orabug: 37497282] {CVE-2025-21638}
  - sctp: sysctl: rto_min/max: avoid using current->nsproxy (Matthieu Baerts) [Orabug: 37497289] {CVE-2025-21639}
  - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (Matthieu Baerts) [Orabug: 37497302] {CVE-2025-21640}
  - dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY (Mikulas Patocka)
  - dm thin: make get_first_thin use rcu-safe list first function (Krister Johansen) [Orabug: 37506782] {CVE-2025-21664}
  - afs: Fix the maximum cell name length (David Howells) {CVE-2025-21646}
  - ksmbd: fix a missing return value check bug (Wentao Liang) {CVE-2024-57925}
  - drm/mediatek: Add support for 180-degree rotation in the display driver (Jason-JH Lin)
  - netfilter: conntrack: clamp maximum hashtable size to INT_MAX (Pablo Neira Ayuso) [Orabug: 37497323] {CVE-2025-21648}
  - netfilter: nf_tables: imbalance in flowtable binding (Pablo Neira Ayuso)
  - tls: Fix tls_sw_sendmsg error handling (Benjamin Coddington)
  - cxgb4: Avoid removal of uninserted tid (Anumula Murali Mohan Reddy)
  - bnxt_en: Fix possible memory leak when hwrm_req_replace fails (Kalesh Ap)
  - net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (Eric Dumazet) [Orabug: 37497345] {CVE-2025-21653}
  - tcp/dccp: allow a connection when sk_max_ack_backlog is zero (Zhongqiu Duan)
  - tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog (Jason Xing)
  - net: 802: LLC+SNAP OID:PID lookup on start of skb data (Antonio Pastor)
  - ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() (Keisuke Nishimura)
  - ASoC: mediatek: disable buffer pre-allocation (Chen-Yu Tsai)
  - exfat: fix the infinite loop in __exfat_free_cluster() (Yuezhang Mo)
  - exfat: fix the infinite loop in exfat_readdir() (Yuezhang Mo) [Orabug: 37506742] {CVE-2024-57940}
  - dm array: fix cursor index when skipping across block boundaries (Ming-Hung Tsai)
  - dm array: fix unreleased btree blocks on closing a faulty array cursor (Ming-Hung Tsai)
  - dm array: fix releasing a faulty array block twice in dm_array_cursor_end (Ming-Hung Tsai) [Orabug: 37497248] {CVE-2024-57929}
  - jbd2: flush filesystem device before updating tail sequence (Zhang Yi)
  - ceph: give up on paths longer than PATH_MAX (Max Kellermann) [Orabug: 37472273] {CVE-2024-53685}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.177.3.el8uek]
changelog:
  - uek-rpm: Update network stress testing options for embedded2 (Joseph Dobosenski) [Orabug: 37530219]
  - mm, madvise: fix potential workingset node list_lru leaks (Kairui Song) [Orabug: 37464586]
  - crypto: qat/qat_4xxx - fix off by one in uof_get_name() (Dan Carpenter) [Orabug: 37427536] {CVE-2024-53162}
  - vdpa/mlx5: Fix error path during device add (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vp_vdpa: fix id_table array not null terminated error (Xiaoguang Wang) [Orabug: 37296163,37561499,37602514] {CVE-2024-53110}
  - vdpa/mlx5: Postpone MR deletion (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Introduce init/destroy for MR resources (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Rename mr_mtx -> lock (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Extract mr members in own resource struct (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Rename function (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Delete direct MKEYs in parallel (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Create direct MKEYs in parallel (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Parallelize VQ suspend/resume for CVQ MQ command (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Small improvement for change_num_qps() (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Keep notifiers during suspend but ignore (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Parallelize device resume (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Parallelize device suspend (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Use async API for vq modify commands (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Use async API for vq query command (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Introduce async fw command wrapper (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Introduce error logging function (Dragos Tatulea) [Orabug: 37296163,37561499]
  - net/mlx5: Support throttled commands from async API (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Add the support of set mac address (Cindy Lu) [Orabug: 37296163,37561499]
  - vdpa_sim_net: Add the support of set mac address (Cindy Lu) [Orabug: 37296163,37561499]
  - vdpa: support set mac address from vdpa tool (Cindy Lu) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Fix invalid mr resource destroy (Dragos Tatulea) [Orabug: 37296163,37561499,37602562] {CVE-2024-47687}
  - vdpa/mlx5: Don't enable non-active VQs in .set_vq_ready() (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Don't reset VQs more than necessary (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Re-create HW VQs under certain conditions (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Pre-create hardware VQs at vdpa .dev_add time (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Use suspend/resume during VQP change (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Forward error in suspend/resume device (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Consolidate all VQ modify to Ready to use resume_vq() (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Add error code for suspend/resume VQ (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Accept Init -> Ready VQ transition in resume_vq() (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Allow creation of blank VQs (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Set mkey modified flags on all VQs (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Start off rqt_size with max VQPs (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Set an initial size on the VQ (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Add support for modifying the VQ features field (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Add support for modifying the virtio_version VQ field (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Rename init_mvqs (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Clear and reinitialize software VQ data on reset (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Initialize and reset device with one queue pair (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Remove duplicate suspend code (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Iterate over active VQs during suspend/resume (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Drop redundant check in teardown_virtqueues() (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Drop redundant code (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Make setup/teardown_vq_resources() symmetrical (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa/mlx5: Clarify meaning thorough function rename (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vhost-vdpa: Remove usage of the deprecated ida_simple_xx() API (Christophe Jaillet) [Orabug: 37296163,37561499]
  - vp_vdpa: don't allocate unused msix vectors (Yuxue Liu) [Orabug: 37296163,37561499]
  - vdpa: Convert sprintf/snprintf to sysfs_emit (Li Zhijian) [Orabug: 37296163,37561499]
  - vp_vdpa: Fix return value check vp_vdpa_request_irq (Yuxue Liu) [Orabug: 37296163,37561499]
  - vhost-vdpa: change ioctl # for VDPA_GET_VRING_SIZE (Michael S Tsirkin) [Orabug: 37296163,37561499]
  - virtio_vdpa: create vqs with the actual size (Zhu Lingshan) [Orabug: 37296163,37561499]
  - vdpa_sim: implement vdpa_config_ops.get_vq_size for vDPA simulator (Zhu Lingshan) [Orabug: 37296163,37561499]
  - vp_vdpa: implement vdpa_config_ops.get_vq_size (Zhu Lingshan) [Orabug: 37296163,37561499]
  - vDPA: introduce get_vq_size to vdpa_config_ops (Zhu Lingshan) [Orabug: 37296163,37561499]
  - vhost-vdpa: uapi to support reporting per vq size (Zhu Lingshan) [Orabug: 37296163,37561499]
  - vdpa: skip suspend/resume ops if not DRIVER_OK (Steve Sistare) [Orabug: 37296163,37561499]
  - vdpa_sim: reset must not run (Steve Sistare) [Orabug: 37296163,37561499]
  - vdpa: Block vq property changes in DRIVER_OK (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa: Track device suspended state (Dragos Tatulea) [Orabug: 37296163,37561499]
  - vdpa: Remove usage of the deprecated ida_simple_xx() API (Christophe Jaillet) [Orabug: 37296163,37561499]
  - SUNRPC: do not retry on EKEYEXPIRED when user TGT ticket expired (Dai Ngo) [Orabug: 34162493]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.177.4.el8uek]
changelog:
  - Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null" (Greg Kroah-Hartman)
  - drm/v3d: Assign job pointer to NULL before signaling the fence (Maíra Canal)
  - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (Ranjan Kumar) [Orabug: 37472354] {CVE-2024-57804}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-307.177.1.el8uek]
changelog:
  - nvmet: always initialize cqe.result (Daniel Wagner) [Orabug: 36897348] {CVE-2024-41079}
  - nvmet-auth: complete a request only after freeing the dhchap pointers (Maurizio Lombardi) [Orabug: 36897348] {CVE-2024-41079}
  - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Justin Tee) [Orabug: 37116505] {CVE-2024-46842}
  - netdevsim: use cond_resched() in nsim_dev_trap_report_work() (Eric Dumazet) [Orabug: 37264120] {CVE-2024-50155}
  - nvmet-auth: assign dh_key to NULL after kfree_sensitive (Vitaliy Shevtsov) [Orabug: 37268555] {CVE-2024-50215}
  - net: usb: lan78xx: Fix double free issue with interrupt buffer allocation (Oleksij Rempel) [Orabug: 37433573] {CVE-2024-53213}
  - PCI/MSI: Handle lack of irqdomain gracefully (Thomas Gleixner) [Orabug: 37452651] {CVE-2024-56760}
  - selftests: rtnetlink: update netdevsim ipsec output format (Hangbin Liu) [Orabug: 37547931]
  - netdevsim: print human readable IP address (Hangbin Liu) [Orabug: 37547931]
  - uek: kabi: Fix build error for HIDE_INCLUDE macro (Saeed Mirzamohammadi) [Orabug: 37619141]
  - Add __init annotation to pensando_efi_mem_reserve (Joseph Dobosenski) [Orabug: 37619785]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-307.177.2.el8uek]
changelog:
  - uek-rpm: Enable CONFIG_MICROSOFT_MANA as module in aarch64 (Vijayendra Suman)  [Orabug: 37647393]
  - rtc: add new RTC_FEATURE_ALARM_WAKEUP_ONLY feature (Alexandre Belloni)  [Orabug: 37631796]
  - thermal: core: Drop excessive lockdep_assert_held() calls (Rafael J. Wysocki)  [Orabug: 37631796]
  - thermal: core: Introduce thermal_cooling_device_update() (Rafael J. Wysocki)  [Orabug: 37631796]
  - thermal: core: Introduce thermal_cooling_device_present() (Rafael J. Wysocki)  [Orabug: 37631796]
  - thermal: sysfs: Reuse cdev->max_state (Viresh Kumar)  [Orabug: 37631796]
  - rtc: efi: Enable SET/GET WAKEUP services as optional (Shanker Donthineni)  [Orabug: 37631796]
  - rtc: efi: Add wakeup support (Riwen Lu)  [Orabug: 37631796]
  - rtc: efi: switch to RTC_FEATURE_UPDATE_INTERRUPT (Alexandre Belloni)  [Orabug: 37631796]
  - rtc: add BSM parameter (Alexandre Belloni)  [Orabug: 37631796]
  - rtc: add correction parameter (Alexandre Belloni)  [Orabug: 37631796]
  - rtc: add parameter ioctl (Alexandre Belloni)  [Orabug: 37631796]
  - rtc: expose correction feature (Alexandre Belloni)  [Orabug: 37631796]
  - rtc: add alarm related features (Alexandre Belloni)  [Orabug: 37631796]
  - rtc: efi: switch to devm_rtc_allocate_device (Alexandre Belloni)  [Orabug: 37631796]
  - cgroup: Make operations on the cgroup root_list RCU safe (Yafang Shao)  [Orabug: 37621589]
  - rds: ib: Avoid sleeping function inside RCU region by using sampled values instead (Håkon Bugge)  [Orabug: 37586089]
  - bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (Michael Chan)  [Orabug: 37434220]  {CVE-2024-56656}
  - bnxt_en: Fix receive ring space parameters when XDP is active (Shravya KN)  [Orabug: 37433562]  {CVE-2024-53209}
  - bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (Aleksandr Mishin)  [Orabug: 37070333]  {CVE-2024-40919}
  - bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init() (Vikas Gupta)  [Orabug: 37070270]  {CVE-2024-35972}
  - bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (Somnath Kotur)  [Orabug: 37070266]  {CVE-2024-44984}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-307.177.3.el8uek]
changelog:
  - jbd2: increase maximum transaction size (Jan Kara)  [Orabug: 37688920]
  - net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled (Carolina Jubran)  [Orabug: 37534698]
  - net/mlx5e: Always start IPsec sequence number from 1 (Leon Romanovsky)  [Orabug: 37534698]
  - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (Shravan Kumar Ramani)  [Orabug: 37534698]
  - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (Shravan Kumar Ramani)  [Orabug: 37534698]
  - platform/mellanox: mlxbf-pmc: incorrect type in assignment (Pei Xiao)  [Orabug: 37534698]
  - net/mlx5e: Disable loopback self-test on multi-PF netdev (Carolina Jubran)  [Orabug: 37534698]
  - net/mlx5: Unregister notifier on eswitch init failure (Cosmin Ratiu)  [Orabug: 37534698]
  - mmc: sdhci-of-dwcmshc: Prevent stale command interrupt handling (Michal Wilczynski)  [Orabug: 37534698]
  - net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice (Jianbo Liu)  [Orabug: 37534698]
  - platform/mellanox: mlxbf-pmc: fix lockdep warning (Luiz Capitulino)  [Orabug: 37534698]
  - net/mlx5: Fix bridge mode operations when there are no VFs (Benjamin Poirier)  [Orabug: 37534698]
  - mmc: sdhci-of-dwcmshc: Add hw_reset() support for BlueField-3 SoC (Liming Sun)  [Orabug: 37534698]
  - mmc: sdhci-of-dwcmshc: add dwcmshc_pltfm_data (Chen Wang)  [Orabug: 37534698]
  - mmc: sdhci-of-dwcmshc: factor out code into dwcmshc_rk35xx_init (Chen Wang)  [Orabug: 37534698]
  - mmc: sdhci-of-dwcmshc: factor out code for th1520_init() (Chen Wang)  [Orabug: 37534698]
  - mmc: sdhci-of-dwcmshc: move two rk35xx functions (Chen Wang)  [Orabug: 37534698]
  - mmc: sdhci-of-dwcmshc: add common bulk optional clocks support (Chen Wang)  [Orabug: 37534698]
  - net/mlx5e: Take state lock during tx timeout reporter (Dragos Tatulea)  [Orabug: 37534698]
  - net/mlx5: SD, Do not query MPIR register if no sd_group (Tariq Toukan)  [Orabug: 37534698]
  - net/mlx5: Always drain health in shutdown callback (Shay Drory)  [Orabug: 37534698]
  - mmc: dw_mmc-bluefield: Add support for eMMC HW reset (Liming Sun)  [Orabug: 37534698]
  - mmc: dw_mmc: Add support for platform specific eMMC HW reset (Liming Sun)  [Orabug: 37534698]
  - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Dragos Tatulea)  [Orabug: 37534698]
  - net/mlx5e: SHAMPO, Fix incorrect page release (Dragos Tatulea)  [Orabug: 37534698]
  - net/mlx5: Do not query MPIR on embedded CPU function (Tariq Toukan)  [Orabug: 37534698]
  - net/mlx5: Reload only IB representors upon lag disable/enable (Maher Sanalla)  [Orabug: 37534698]
  - mmc: sdhci-of-dwcmshc: Add tuning support for Sophgo CV1800B and SG200X (Jisheng Zhang)  [Orabug: 37534698]
  - macsec: Detect if Rx skb is macsec-related for offloading devices that update md_dst (Rahul Rameshbabu)  [Orabug: 37534698]
  - macsec: Enable devices to advertise whether they update sk_buff md_dst during offloads (Rahul Rameshbabu)  [Orabug: 37534698]
  - net/mlx5e: Prevent deadlock while disabling aRFS (Carolina Jubran)  [Orabug: 37534698]
  - net/mlx5e: Use channel mdev reference instead of global mdev instance for coalescing (Rahul Rameshbabu)  [Orabug: 37534698]
  - net/mlx5: SD, Handle possible devcom ERR_PTR (Tariq Toukan)  [Orabug: 37534698]
  - net/mlx5: Disallow SRIOV switchdev mode when in multi-PF netdev (Tariq Toukan)  [Orabug: 37534698]
  - mmc: sdhci-of-dwcmshc: Implement SDHCI CQE support (Sergey Khimich)  [Orabug: 37534698]
  - mmc: cqhci: Add cqhci set_tran_desc() callback (Sergey Khimich)  [Orabug: 37534698]
  - platform/mellanox: mlxbf-pmc: fix signedness bugs (Dan Carpenter)  [Orabug: 37534698]
  - net/mlx5e: Create EN core HW resources for all secondary devices (Tariq Toukan)  [Orabug: 37534698]
  - net/mlx5e: Create single netdev per SD group (Tariq Toukan)  [Orabug: 37534698]
  - net/mlx5: SD, Add debugfs (Tariq Toukan)  [Orabug: 37534698]
  - net/mlx5: SD, Add informative prints in kernel log (Tariq Toukan)  [Orabug: 37534698]
  - net/mlx5: SD, Implement steering for primary and secondaries (Tariq Toukan)  [Orabug: 37534698]
  - net/mlx5: SD, Implement devcom communication and primary election (Tariq Toukan)  [Orabug: 37534698]
  - net/mlx5: SD, Implement basic query and instantiation (Tariq Toukan)  [Orabug: 37534698]
  - net/mlx5: SD, Introduce SD lib (Tariq Toukan)  [Orabug: 37534698]
  - net/mlx5: Add MPIR bit in mcam_access_reg (Tariq Toukan)  [Orabug: 37534698]
  - lib: memcpy_kunit: Fix an invalid format specifier in an assertion msg (David Gow)  [Orabug: 37534698]
  - platform/mellanox: mlxbf-pmc: Ignore unsupported performance blocks (Luiz Capitulino)  [Orabug: 37534698]
  - platform/mellanox: mlxbf-pmc: mlxbf_pmc_event_list(): make size ptr optional (Luiz Capitulino)  [Orabug: 37534698]
  - mmc: sdhci-of-dwcmshc: Add support for Sophgo CV1800B and SG2002 (Jisheng Zhang)  [Orabug: 37534698]
  - platform/mellanox: mlxbf-pmc: Cleanup signed/unsigned mix-up (Shravan Kumar Ramani)  [Orabug: 37534698]
  - platform/mellanox: mlxbf-pmc: Replace uintN_t with kernel-style types (Shravan Kumar Ramani)  [Orabug: 37534698]
  - net: macsec: revert the MAC address if mdo_upd_secy fails (Radu Pirea (NXP OSS))  [Orabug: 37534698]
  - net: macsec: documentation for macsec_context and macsec_ops (Radu Pirea (NXP OSS))  [Orabug: 37534698]
  - fortify: Do not cast to "unsigned char" (Kees Cook)  [Orabug: 37534698]
  - fortify: Use SIZE_MAX instead of (size_t)-1 (Kees Cook)  [Orabug: 37534698]
  - fortify: Fix __compiletime_strlen() under UBSAN_BOUNDS_LOCAL (Kees Cook)  [Orabug: 37534698]
  - mmc: dw_mmc: Add driver callbacks for data read timeout (Mårten Lindahl)  [Orabug: 37534698]
  - mmc: dw_mmc-exynos: Add support for ARTPEC-8 (Mårten Lindahl)  [Orabug: 37534698]
  - mmc: dw_mmc: clean up a debug message (Dan Carpenter)  [Orabug: 37534698]
  - mmc: dw_mmc: exynos: use common_caps (John Keeping)  [Orabug: 37534698]
  - mmc: dw_mmc: add common capabilities to replace caps (John Keeping)  [Orabug: 37534698]
  - mmc: dw_mmc: Allow lower TMOUT value than maximum (Mårten Lindahl)  [Orabug: 37534698]
  - rds: Make sure transmit path and connection tear-down does not run concurrently (Håkon Bugge)  [Orabug: 36441944]
  - ice: always add legacy 32byte RXDID in supported_rxdids (Michal Schmidt)  [Orabug: 36252756]
  - ice: virtchnl rss hena support (Md Fahad Iqbal Polash)  [Orabug: 36252756]
  - ice: Add support Flex RXD (Michal Jaron)  [Orabug: 36252756]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-307.178.4.el8uek]
changelog:
  - LTS version: v5.15.178 (Vijayendra Suman)
  - Input: xpad - add support for wooting two he (arm) (Jack Greiner)
  - Input: xpad - add unofficial Xbox 360 wireless receiver clone (Nilton Perim Neto)
  - Input: atkbd - map F23 key to support default copilot shortcut (Mark Pearson)
  - ALSA: usb-audio: Add delay quirk for USB Audio Device (Lianqin Hu)
  - USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (Qasim Ijaz)
  - wifi: iwlwifi: add a few rate index validity checks (Anjaneyulu)
  - scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (Easwar Hariharan)
  - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (Ido Schimmel)
  - platform/chrome: cros_ec_typec: Check for EC driver (Akihiko Odaki)
  - fs/ntfs3: Additional check in ntfs_file_release (Konstantin Komarov)
  - Bluetooth: RFCOMM: Fix not validating setsockopt user input (Luiz Augusto von Dentz)
  - Bluetooth: SCO: Fix not validating setsockopt user input (Luiz Augusto von Dentz)
  - vfio/platform: check the bounds of read/write syscalls (Alex Williamson)
  - net: sched: fix ets qdisc OOB Indexing (Jamal Hadi Salim)
  - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher)
  - mptcp: don't always assume copied data in mptcp_cleanup_rbuf() (Paolo Abeni)
  - regmap: detach regmap from dev on regmap_exit (Cosmin Tanislav)
  - ASoC: samsung: Add missing depends on I2C (Charles Keepax)
  - irqchip/sunxi-nmi: Add missing SKIP_WAKE flag (Philippe Simons)
  - scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request (Xiang Zhang)
  - seccomp: Stub for !CONFIG_SECCOMP (Linus Walleij)
  - ASoC: samsung: Add missing selects for MFD_WM8994 (Charles Keepax)
  - ASoC: wm8994: Add depends on MFD core (Charles Keepax)


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-307.178.5.el8uek]
changelog:
  - net/mlx5: DR, prevent potential error pointer dereference (Dan Carpenter)  [Orabug: 37434242]  {CVE-2024-56660} 
  - uek-rpm: Set CONFIG_IP6_NF_IPTABLES for ol9/ol8 container kernels (Jonah Palmer)  [Orabug: 37703179]  
  - net: hsr: fix fill_frame_info() regression vs VLAN packets (Eric Dumazet)   
  - f2fs: Introduce linear search for dentries (Daniel Lee)   
  - tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind (Marco Leogrande)   
  - net: loopback: Avoid sending IP packets without an Ethernet header (Ido Schimmel)   
  - x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (Andrew Cooper)   
  - sched: sch_cake: add bounds checks to host bulk flow fairness counts (Toke Høiland-Jørgensen)   
  - usb: atm: cxacru: fix a flaw in existing endpoint checks (Nikita Zhandarovich)   
  - x86/xen: fix xen_hypercall_hvm() to not clobber %rbx (Juergen Gross)   
  - x86/xen: add FRAME_END to xen_hypercall_hvm() (Juergen Gross)   
  - ocfs2: fix incorrect CPU endianness conversion causing mount failure (Heming Zhao)   
  - usb: dwc3: Set SUSPENDENABLE soon after phy init (Thinh Nguyen)   
  - Revert "btrfs: avoid monopolizing a core when activating a swap file" (Koichiro Den)   
  - Revert "media: uvcvideo: Require entities to have a non-zero unique ID" (Thadeu Lima de Souza Cascardo)   
  - netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (Cong Wang)


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-4.60.1.el8uek]
changelog:
  - net: mana: Add the Linux MANA PF driver (Dexuan Cui)  [Orabug: 34405108]  
  - rds: cong: Make rds_cong_wait an array to reduce lock contention (Håkon Bugge)  [Orabug: 34488341]  
  - rds: cong: Make rs_cong_notify and rs_cong_mask atomic64_t (Håkon Bugge)  [Orabug: 34488341]  
  - Revert "cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()" (Imran Khan)  [Orabug: 34620700]  
  - Revert "cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock" (Imran Khan)  [Orabug: 34620700]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-4.70.2.el8uek]
changelog:
  - LTS version: v5.15.70 (Jack Vogel)   
  - ALSA: hda/sigmatel: Fix unused variable warning for beep power change (Takashi Iwai)   
  - KVM: SEV: add cache flush to solve SEV cache incoherency issues (Mingwei Zhang)   
  - net: Find dst with sk's xfrm policy not ctl_sk (sewookseo)   
  - video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write (Hyunwoo Kim)   
  - mksysmap: Fix the mismatch of 'L0' symbols in System.map (Youling Tang)   
  - drm/panfrost: devfreq: set opp to the recommended one to configure regulator (Clément Péron)   
  - MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping() (Alexander Sverdlin)   
  - afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked (David Howells)   
  - net: usb: qmi_wwan: add Quectel RM520N (jerry.meng)   
  - ALSA: hda/tegra: Align BDL entry to 4KB boundary (Mohan Kumar)   
  - ALSA: hda/sigmatel: Keep power up while beep is enabled (Takashi Iwai)   
  - wifi: mac80211_hwsim: check length for virtio packets (Soenke Huster)   
  - rxrpc: Fix calc of resend age (David Howells)   
  - rxrpc: Fix local destruction being repeated (David Howells)   
  - scsi: lpfc: Return DID_TRANSPORT_DISRUPTED instead of DID_REQUEUE (Hannes Reinecke)   
  - regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe() (Xiaolei Wang)   
  - ASoC: nau8824: Fix semaphore unbalance at error paths (Takashi Iwai)   
  - arm64: dts: juno: Add missing MHU secure-irq (Jassi Brar)   
  - video: fbdev: i740fb: Error out if 'pixclock' equals zero (Zheyu Ma)   
  - binder: remove inaccurate mmap_assert_locked() (Carlos Llamas)   
  - drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega (Alex Deucher)   
  - drm/amdgpu: move nbio ih_doorbell_range() into ih code for vega (Alex Deucher)   
  - drm/amdgpu: Don't enable LTR if not supported (Lijo Lazar)   
  - tools/include/uapi: Fix <asm/errno.h> for parisc and xtensa (Ben Hutchings)   
  - parisc: Allow CONFIG_64BIT with ARCH=parisc (Helge Deller)   
  - cifs: always initialize struct msghdr smb_msg completely (Stefan Metzmacher)   
  - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Stefan Metzmacher)   
  - cifs: revalidate mapping when doing direct writes (Ronnie Sahlberg)   
  - of/device: Fix up of_dma_configure_id() stub (Thierry Reding)   
  - parisc: ccio-dma: Add missing iounmap in error path in ccio_probe() (Yang Yingliang)   
  - block: blk_queue_enter() / __bio_queue_enter() must return -EAGAIN for nowait (Stefan Roesch)   
  - drm/meson: Fix OSD1 RGB to YCbCr coefficient (Stuart Menefy)   
  - drm/meson: Correct OSD1 global alpha value (Stuart Menefy)   
  - gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx (Pali Rohár)   
  - NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0 (Trond Myklebust)   
  - pinctrl: sunxi: Fix name for A100 R_PIO (Michael Wu)   
  - pinctrl: rockchip: Enhance support for IRQ_TYPE_EDGE_BOTH (João H. Spies)   
  - pinctrl: qcom: sc8180x: Fix wrong pin numbers (Molly Sophia)   
  - pinctrl: qcom: sc8180x: Fix gpio_wakeirq_map (Molly Sophia)   
  - of: fdt: fix off-by-one error in unflatten_dt_nodes() (Sergey Shtylyov)   
  - tty: serial: atmel: Preserve previous USART mode if RS485 disabled (Sergiu Moga)   
  - serial: atmel: remove redundant assignment in rs485_config (Lino Sanfilippo)   
  - drm/tegra: vic: Fix build warning when CONFIG_PM=n (YueHaibing)   
  - LTS version: v5.15.69 (Jack Vogel)   
  - Input: goodix - add compatible string for GT1158 (Jarrah Gosbell)   
  - RDMA/irdma: Use s/g array in post send only when its valid (Sindhu-Devale)   
  - usb: gadget: f_uac2: fix superspeed transfer (Jing Leng)   
  - usb: gadget: f_uac2: clean up some inconsistent indenting (Colin Ian King)   
  - soc: fsl: select FSL_GUTS driver for DPIO (Mathew McBride)   
  - mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region() (Jann Horn)   
  - usb: storage: Add ASUS <0x0b05:0x1932> to IGNORE_UAS (Hu Xiaoying)   
  - platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes (Hans de Goede)   
  - perf/arm_pmu_platform: fix tests for platform_get_irq() failure (Yu Zhe)   
  - net: dsa: hellcreek: Print warning only once (Kurt Kanzenbach)   
  - drm/amd/amdgpu: skip ucode loading if ucode_size == 0 (Chengming Gui)   
  - nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() (Maurizio Lombardi)   
  - Input: iforce - add support for Boeder Force Feedback Wheel (Greg Tulli)   
  - ieee802154: cc2520: add rc code in cc2520_tx() (Li Qiong)   
  - gpio: mockup: remove gpio debugfs when remove device (Wei Yongjun)   
  - tg3: Disable tg3 device on system reboot to avoid triggering AER (Kai-Heng Feng)   
  - hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message (Even Xu)   
  - HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo (Jason Wang)   
  - dt-bindings: iio: gyroscope: bosch,bmg160: correct number of pins (Krzysztof Kozlowski)   
  - drm/msm/rd: Fix FIFO-full deadlock (Rob Clark)   
  - platform/surface: aggregator_registry: Add support for Surface Laptop Go 2 (Maximilian Luz)   
  - Input: goodix - add support for GT1158 (Ondrej Jirman)   
  - iommu/vt-d: Fix kdump kernels boot failure with scalable mode (Lu Baolu)   
  - tracefs: Only clobber mode/uid/gid on remount if asked (Brian Norris)   
  - tracing: hold caller_addr to hardirq_{enable,disable}_ip (Yipeng Zou)   
  - task_stack, x86/cea: Force-inline stack helpers (Borislav Petkov)   
  - x86/mm: Force-inline __phys_addr_nodebug() (Borislav Petkov)   
  - lockdep: Fix -Wunused-parameter for _THIS_IP_ (Nick Desaulniers)   
  - ARM: dts: at91: sama7g5ek: specify proper regulator output ranges (Claudiu Beznea)   
  - ARM: dts: at91: fix low limit for CPU regulator (Claudiu Beznea)   
  - ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible (Marco Felsch)   
  - ARM: dts: imx: align SPI NOR node name with dtschema (Krzysztof Kozlowski)   
  - ACPI: resource: skip IRQ override on AMD Zen platforms (Chuanhong Guo)   
  - NFS: Fix WARN_ON due to unionization of nfs_inode.nrequests (Dave Wysochanski)   
  - LTS version: v5.15.68 (Jack Vogel)   
  - ARM: at91: ddr: remove CONFIG_SOC_SAMA7 dependency (Claudiu Beznea)   
  - perf machine: Use path__join() to compose a path instead of snprintf(dir, '/', filename) (Arnaldo Carvalho de Melo)   
  - drm/bridge: display-connector: implement bus fmts callbacks (Neil Armstrong)   
  - arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly (Ionela Voinescu)   
  - iommu/vt-d: Correctly calculate sagaw value of IOMMU (Lu Baolu)   
  - arm64/bti: Disable in kernel BTI when cross section thunks are broken (Mark Brown)   
  - Revert "arm64: kasan: Revert "arm64: mte: reset the page tag in page->flags"" (Sasha Levin)   
  - hwmon: (mr75203) enable polling for all VM channels (Eliav Farber)   
  - hwmon: (mr75203) fix multi-channel voltage reading (Eliav Farber)   
  - hwmon: (mr75203) fix voltage equation for negative source input (Eliav Farber)   
  - hwmon: (mr75203) update pvt->v_num and vm_num to the actual number of used sensors (Eliav Farber)   
  - hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined (Eliav Farber)   
  - s390/boot: fix absolute zero lowcore corruption on boot (Alexander Gordeev)   
  - iommu/amd: use full 64-bit value in build_completion_wait() (John Sperbeck)   
  - swiotlb: avoid potential left shift overflow (Chao Gao)   
  - i40e: Fix ADQ rate limiting for PF (Przemyslaw Patynowski)   
  - i40e: Refactor tc mqprio checks (Przemyslaw Patynowski)   
  - kbuild: disable header exports for UML in a straightforward way (Masahiro Yamada)   
  - MIPS: loongson32: ls1c: Fix hang during startup (Yang Ling)   
  - ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion (Nathan Chancellor)   
  - ASoC: mchp-spdiftx: remove references to mchp_i2s_caps (Claudiu Beznea)   
  - hwmon: (tps23861) fix byte order in resistance register (Alexandru Gagniuc)   
  - perf script: Fix Cannot print 'iregs' field for hybrid systems (Zhengjun Xing)   
  - sch_sfb: Also store skb len before calling child enqueue (Toke Høiland-Jørgensen)   
  - RDMA/irdma: Report RNR NAK generation in device caps (Sindhu-Devale)   
  - RDMA/irdma: Return correct WC error for bind operation failure (Sindhu-Devale)   
  - RDMA/irdma: Report the correct max cqes from query device (Sindhu-Devale)   
  - nvmet: fix mar and mor off-by-one errors (Dennis Maisenbacher)   
  - tcp: fix early ETIMEDOUT after spurious non-SACK RTO (Neal Cardwell)   
  - nvme-tcp: fix regression that causes sporadic requests to time out (Sagi Grimberg)   
  - nvme-tcp: fix UAF when detecting digest errors (Sagi Grimberg)   
  - erofs: fix pcluster use-after-free on UP platforms (Gao Xiang)   
  - RDMA/mlx5: Set local port to one when accessing counters (Chris Mi)   
  - IB/core: Fix a nested dead lock as part of ODP flow (Yishai Hadas)   
  - ipv6: sr: fix out-of-bounds read when setting HMAC data. (David Lebrun)   
  - RDMA/siw: Pass a pointer to virt_to_page() (Linus Walleij)   
  - xen-netback: only remove 'hotplug-status' when the vif is actually destroyed (Paul Durrant)   
  - iavf: Detach device during reset task (Ivan Vecera)   
  - i40e: Fix kernel crash during module removal (Ivan Vecera)   
  - ice: use bitmap_free instead of devm_kfree (Michal Swiatkowski)   
  - tcp: TX zerocopy should not sense pfmemalloc status (Eric Dumazet)   
  - net: introduce __skb_fill_page_desc_noacc (Pavel Begunkov)   
  - tipc: fix shift wrapping bug in map_get() (Dan Carpenter)   
  - sch_sfb: Don't assume the skb is still around after enqueueing to child (Toke Høiland-Jørgensen)   
  - Revert "net: phy: meson-gxl: improve link-up behavior" (Heiner Kallweit)   
  - afs: Use the operation issue time instead of the reply time for callbacks (David Howells)   
  - rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() (David Howells)   
  - rxrpc: Fix ICMP/ICMP6 error handling (David Howells)   
  - ALSA: usb-audio: Register card again for iface over delayed_register option (Takashi Iwai)   
  - ALSA: usb-audio: Inform the delayed registration more properly (Takashi Iwai)   
  - RDMA/srp: Set scmnd->result only when scmnd is not NULL (yangx.jy@fujitsu.com)   
  - netfilter: nf_conntrack_irc: Fix forged IP logic (David Leadbeater)   
  - netfilter: nf_tables: clean up hook list when offload flags check fails (Pablo Neira Ayuso)   
  - netfilter: br_netfilter: Drop dst references before setting. (Harsh Modi)   
  - ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time (Claudiu Beznea)   
  - ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time (Claudiu Beznea)   
  - ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges (Claudiu Beznea)   
  - ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges (Claudiu Beznea)   
  - ARM: at91: pm: fix DDR recalibration when resuming from backup and self-refresh (Claudiu Beznea)   
  - ARM: at91: pm: fix self-refresh for sama7g5 (Claudiu Beznea)   
  - wifi: wilc1000: fix DMA on stack objects (Ajay.Kathat@microchip.com)   
  - RDMA/hns: Fix wrong fixed value of qp->rq.wqe_shift (Wenpeng Liang)   
  - RDMA/hns: Fix supported page size (Chengchang Tang)   
  - soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs (Liang He)   
  - RDMA/cma: Fix arguments order in net device validation (Michael Guralnik)   
  - tee: fix compiler warning in tee_shm_register() (Jens Wiklander)   
  - regulator: core: Clean up on enable failure (Andrew Halaney)   
  - soc: imx: gpcv2: Assert reset before ungating clock (Marek Vasut)   
  - ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node (Marco Felsch)   
  - RDMA/rtrs-srv: Pass the correct number of entries for dma mapped SGL (Jack Wang)   
  - RDMA/rtrs-clt: Use the right sg_cnt after ib_dma_map_sg (Jack Wang)   
  - ASoC: qcom: sm8250: add missing module owner (Srinivas Kandagatla)   
  - cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Tejun Heo)   
  - NFS: Fix another fsync() issue after a server reboot (Trond Myklebust)   
  - NFS: Save some space in the inode (Trond Myklebust)   
  - NFS: Further optimisations for 'ls -l' (Trond Myklebust)   
  - scsi: lpfc: Add missing destroy_workqueue() in error path (Yang Yingliang)   
  - scsi: mpt3sas: Fix use-after-free warning (Sreekanth Reddy)   
  - drm/i915: Implement WaEdpLinkRateDataReload (Ville Syrjälä)   
  - nvmet: fix a use-after-free (Bart Van Assche)   
  - drm/amd/display: fix memory leak when using debugfs_lookup() (Greg Kroah-Hartman)   
  - sched/debug: fix dentry leak in update_sched_domain_debugfs (Greg Kroah-Hartman)   
  - debugfs: add debugfs_lookup_and_remove() (Greg Kroah-Hartman)   
  - kprobes: Prohibit probes in gate area (Christian A. Ehrhardt)   
  - vfio/type1: Unpin zero pages (Alex Williamson)   
  - btrfs: zoned: set pseudo max append zone limit in zone emulation mode (Shin'ichiro Kawasaki)   
  - tracing: Fix to check event_mutex is held while accessing trigger list (Masami Hiramatsu (Google))   
  - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() (Dongxiang Ke)   
  - ALSA: usb-audio: Split endpoint setups for hw_params and prepare (Takashi Iwai)   
  - ALSA: aloop: Fix random zeros in capture data when using jiffies timer (Pattara Teerapong)   
  - ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() (Tasos Sahanidis)   
  - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC (Takashi Iwai)   
  - drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly (Qu Huang)   
  - fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() (Yang Yingliang)   
  - fbdev: fbcon: Destroy mutex on freeing struct fb_info (Shigeru Yoshida)   
  - md: Flush workqueue md_rdev_misc_wq in md_alloc() (David Sloan)   
  - net/core/skbuff: Check the return value of skb_copy_bits() (lily)   
  - cpufreq: check only freq_table in __resolve_freq() (Lukasz Luba)   
  - netfilter: conntrack: work around exceeded receive window (Florian Westphal)   
  - arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level (Sudeep Holla)   
  - parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines (Helge Deller)   
  - parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() (Li Qiong)   
  - Revert "parisc: Show error if wrong 32/64-bit compiler is being used" (Helge Deller)   
  - scsi: ufs: core: Reduce the power mode change timeout (Bart Van Assche)   
  - drm/radeon: add a force flush to delay work when radeon (Zhenneng Li)   
  - drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. (Candice Li)   
  - drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini (YiPeng Chai)   
  - drm/gem: Fix GEM handle release errors (Jeffy Chen)   
  - scsi: megaraid_sas: Fix double kfree() (Guixin Liu)   
  - scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX (Tony Battersby)   
  - Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()" (Yee Lee)   
  - fs: only do a memory barrier for the first set_buffer_uptodate() (Linus Torvalds)   
  - wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() (Stanislaw Gruszka)   
  - efi: capsule-loader: Fix use-after-free in efi_capsule_write (Hyunwoo Kim)   
  - efi: libstub: Disable struct randomization (Ard Biesheuvel)   
  - net: wwan: iosm: remove pointless null check (Jakub Kicinski)   
  - LTS version: v5.15.67 (Jack Vogel)   
  - kbuild: fix up permissions on scripts/pahole-flags.sh (Greg Kroah-Hartman)   
  - LTS version: v5.15.66 (Jack Vogel)   
  - USB: serial: ch341: fix disabled rx timer on older devices (Johan Hovold)   
  - USB: serial: ch341: fix lost character on LCR updates (Johan Hovold)   
  - usb: dwc3: disable USB core PHY management (Johan Hovold)   
  - usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup (Johan Hovold)   
  - usb: dwc3: fix PHY disable sequence (Johan Hovold)   
  - kbuild: Add skip_encoding_btf_enum64 option to pahole (Martin Rodriguez Reboredo)   
  - kbuild: Unify options for BTF generation for vmlinux and modules (Jiri Olsa)   
  - tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf() (Mazin Al Haddad)   
  - drm/i915: Skip wm/ddb readout for disabled pipes (Ville Syrjälä)   
  - drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk (Diego Santa Cruz)   
  - ALSA: seq: Fix data-race at module auto-loading (Takashi Iwai)   
  - ALSA: seq: oss: Fix data-race for max_midi_devs access (Takashi Iwai)   
  - ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298 (Kacper Michajłow)   
  - net: mac802154: Fix a condition in the receive path (Miquel Raynal)   
  - net: Use u64_stats_fetch_begin_irq() for stats fetch. (Sebastian Andrzej Siewior)   
  - ip: fix triggering of 'icmp redirect' (Nicolas Dichtel)   
  - wifi: mac80211: Fix UAF in ieee80211_scan_rx() (Siddh Raman Pant)   
  - wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected (Siddh Raman Pant)   
  - driver core: Don't probe devices after bus_type.match() probe deferral (Isaac J. Manjarres)   
  - usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS (Krishna Kurapati)   
  - usb: xhci-mtk: fix bandwidth release issue (Chunfeng Yun)   
  - usb: xhci-mtk: relax TT periodic bandwidth allocation (Chunfeng Yun)   
  - USB: core: Prevent nested device-reset calls (Alan Stern)   
  - s390: fix nospec table alignments (Josh Poimboeuf)   
  - s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages (Gerald Schaefer)   
  - usb-storage: Add ignore-residue quirk for NXP PN7462AU (Witold Lipieta)   
  - USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) (Thierry GUIBERT)   
  - usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer (Pawel Laszczak)   
  - usb: cdns3: fix issue with rearming ISO OUT endpoint (Pawel Laszczak)   
  - usb: dwc2: fix wrong order of phy_power_on and phy_init (Heiner Kallweit)   
  - usb: typec: tcpm: Return ENOTSUPP for power supply prop writes (Badhri Jagan Sridharan)   
  - usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device (Utkarsh Patel)   
  - usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles (Pablo Sun)   
  - USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode (Slark Xiao)   
  - USB: serial: option: add Quectel EM060K modem (Yonglin Tan)   
  - USB: serial: option: add support for OPPO R11 diag port (Yan Xinyu)   
  - USB: serial: cp210x: add Decagon UCA device id (Johan Hovold)   
  - xhci: Add grace period after xHC start to prevent premature runtime suspend. (Mathias Nyman)   
  - media: mceusb: Use new usb_control_msg_*() routines (Alan Stern)   
  - usb: dwc3: pci: Add support for Intel Raptor Lake (Heikki Krogerus)   
  - thunderbolt: Use the actual buffer in tb_async_error() (Mika Westerberg)   
  - xen-blkfront: Cache feature_persistent value before advertisement (SeongJae Park)   
  - xen-blkfront: Advertise feature-persistent as user requested (SeongJae Park)   
  - xen-blkback: Advertise feature-persistent as user requested (SeongJae Park)   
  - mm: pagewalk: Fix race between unmap and page walker (Steven Price)   
  - xen/grants: prevent integer overflow in gnttab_dma_alloc_pages() (Dan Carpenter)   
  - KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (Jim Mattson)   
  - gpio: pca953x: Add mutex_lock for regcache sync in PM (Haibo Chen)   
  - hwmon: (gpio-fan) Fix array out of bounds access (Armin Wolf)   
  - clk: bcm: rpi: Add missing newline (Stefan Wahren)   
  - clk: bcm: rpi: Prevent out-of-bounds access (Stefan Wahren)   
  - clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc() (Christophe JAILLET)   
  - clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate (Stefan Wahren)   
  - Input: rk805-pwrkey - fix module autoloading (Peter Robinson)   
  - clk: core: Fix runtime PM sequence in clk_core_unprepare() (Chen-Yu Tsai)   
  - Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops" (Stephen Boyd)   
  - clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops (Chen-Yu Tsai)   
  - drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported" (Colin Ian King)   
  - KVM: VMX: Heed the 'msr' argument in msr_write_intercepted() (Jim Mattson)   
  - cifs: fix small mempool leak in SMB2_negotiate() (Enzo Matsumiya)   
  - binder: fix alloc->vma_vm_mm null-ptr dereference (Carlos Llamas)   
  - binder: fix UAF of ref->proc caused by race condition (Carlos Llamas)   
  - mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure (Adrian Hunter)   
  - mmc: core: Fix UHS-I SD 1.8V workaround branch (Adrian Hunter)   
  - USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id (Niek Nooijens)   
  - misc: fastrpc: fix memory corruption on open (Johan Hovold)   
  - misc: fastrpc: fix memory corruption on probe (Johan Hovold)   
  - iio: adc: mcp3911: use correct formula for AD conversion (Marcus Folkesson)   
  - iio: ad7292: Prevent regulator double disable (Matti Vaittinen)   
  - Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag (Tetsuo Handa)   
  - tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete (Sherry Sun)   
  - musb: fix USB_MUSB_TUSB6010 dependency (Arnd Bergmann)   
  - vt: Clear selection before changing the font (Helge Deller)   
  - powerpc: align syscall table for ppc32 (Masahiro Yamada)   
  - staging: r8188eu: add firmware dependency (Grzegorz Szymaszek)   
  - staging: rtl8712: fix use after free bugs (Dan Carpenter)   
  - serial: fsl_lpuart: RS485 RTS polariy is inverse (Shenwei Wang)   
  - soundwire: qcom: fix device status array range (Srinivas Kandagatla)   
  - net/smc: Remove redundant refcount increase (Yacan Liu)   
  - Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb" (Jakub Kicinski)   
  - tcp: annotate data-race around challenge_timestamp (Eric Dumazet)   
  - sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb (Toke Høiland-Jørgensen)   
  - kcm: fix strp_init() order and cleanup (Cong Wang)   
  - mlxbf_gige: compute MDIO period based on i1clk (David Thompson)   
  - ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler (Duoming Zhou)   
  - net/sched: fix netdevice reference leaks in attach_default_qdiscs() (Wang Hai)   
  - net: sched: tbf: don't call qdisc_put() while holding tree lock (Zhengchao Shao)   
  - net: dsa: xrs700x: Use irqsave variant for u64 stats update (Sebastian Andrzej Siewior)   
  - openvswitch: fix memory leak at failed datapath creation (Andrey Zhadchenko)   
  - net: smsc911x: Stop and start PHY during suspend and resume (Florian Fainelli)   
  - net: sparx5: fix handling uneven length packets in manual extraction (Casper Andersson)   
  - Revert "xhci: turn off port power in shutdown" (Mathias Nyman)   
  - wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() (Dan Carpenter)   
  - ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array (Peter Ujfalusi)   
  - ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg (Pierre-Louis Bossart)   
  - drm/i915/display: avoid warnings when registering dual panel backlight (Arun R Murthy)   
  - drm/i915/backlight: extract backlight code to a separate file (Jani Nikula)   
  - ieee802154/adf7242: defer destroy_workqueue call (Lin Ma)   
  - bpf, cgroup: Fix kernel BUG in purge_effective_progs (Pu Lehui)   
  - bpf: Restrict bpf_sys_bpf to CAP_PERFMON (YiFei Zhu)   
  - skmsg: Fix wrong last sg check in sk_msg_recvmsg() (Liu Jian)   
  - iio: adc: mcp3911: make use of the sign bit (Marcus Folkesson)   
  - platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask (Andy Shevchenko)   
  - drm/msm/dsi: Fix number of regulators for SDM660 (Douglas Anderson)   
  - drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg (Douglas Anderson)   
  - drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4 (Kuogee Hsieh)   
  - drm/msm/dsi: fix the inconsistent indenting (sunliming)   
  - LTS version: v5.15.65 (Jack Vogel)   
  - net: neigh: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net/af_packet: check len when min_header_len equals to 0 (Zhengchao Shao)   
  - android: binder: fix lockdep check on clearing vma (Liam Howlett)   
  - btrfs: fix space cache corruption and potential double allocations (Omar Sandoval)   
  - kprobes: don't call disarm_kprobe() for disabled kprobes (Kuniyuki Iwashima)   
  - btrfs: tree-checker: check for overlapping extent items (Josef Bacik)   
  - btrfs: fix lockdep splat with reloc root extent buffers (Josef Bacik)   
  - btrfs: move lockdep class helpers to locking.c (Josef Bacik)   
  - testing: selftests: nft_flowtable.sh: use random netns names (Florian Westphal)   
  - netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y (Geert Uytterhoeven)   
  - drm/amd/display: avoid doing vm_init multiple time (Charlene Liu)   
  - drm/amdgpu: Increase tlb flush timeout for sriov (Dusica Milinkovic)   
  - drm/amd/display: Fix pixel clock programming (Ilya Bakoulin)   
  - drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid (Evan Quan)   
  - ksmbd: don't remove dos attribute xattr on O_TRUNC open (Namjae Jeon)   
  - s390/hypfs: avoid error message under KVM (Juergen Gross)   
  - neigh: fix possible DoS due to net iface start/stop loop (Denis V. Lunev)   
  - ksmbd: return STATUS_BAD_NETWORK_NAME error status if share is not configured (Namjae Jeon)   
  - drm/amd/display: clear optc underflow before turn off odm clock (Fudong Wang)   
  - drm/amd/display: For stereo keep "FLIP_ANY_FRAME" (Alvin Lee)   
  - drm/amd/display: Fix HDMI VSIF V3 incorrect issue (Leo Ma)   
  - drm/amd/display: Avoid MPC infinite loop (Josip Pavic)   
  - ASoC: sh: rz-ssi: Improve error handling in rz_ssi_probe() error path (Biju Das)   
  - fs/ntfs3: Fix work with fragmented xattr (Konstantin Komarov)   
  - btrfs: fix warning during log replay when bumping inode link count (Filipe Manana)   
  - btrfs: add and use helper for unlinking inode during log replay (Filipe Manana)   
  - btrfs: remove no longer needed logic for replaying directory deletes (Filipe Manana)   
  - btrfs: remove root argument from btrfs_unlink_inode() (Filipe Manana)   
  - mmc: sdhci-of-dwcmshc: Re-enable support for the BlueField-3 SoC (Liming Sun)   
  - mmc: sdhci-of-dwcmshc: rename rk3568 to rk35xx (Sebastian Reichel)   
  - mmc: sdhci-of-dwcmshc: add reset call back for rockchip Socs (Yifeng Zhao)   
  - mmc: mtk-sd: Clear interrupts when cqe off/disable (Wenbin Mei)   
  - drm/i915/gt: Skip TLB invalidations once wedged (Chris Wilson)   
  - HID: thrustmaster: Add sparco wheel and fix array length (Michael Hübner)   
  - HID: asus: ROG NKey: Ignore portion of 0x5a report (Josh Kilmer)   
  - HID: AMD_SFH: Add a DMI quirk entry for Chromebooks (Akihiko Odaki)   
  - HID: add Lenovo Yoga C630 battery quirk (Steev Klimaszewski)   
  - ALSA: usb-audio: Add quirk for LH Labs Geek Out HD Audio 1V5 (Takashi Iwai)   
  - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Jann Horn)   
  - bpf: Don't redirect packets with invalid pkt_len (Zhengchao Shao)   
  - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (Yang Jihong)   
  - fbdev: fb_pm2fb: Avoid potential divide by zero error (Letu Ren)   
  - net: fix refcount bug in sk_psock_get (2) (Hawkins Jiawei)   
  - HID: hidraw: fix memory leak in hidraw_release() (Karthik Alapati)   
  - media: pvrusb2: fix memory leak in pvr_probe (Dongliang Mu)   
  - udmabuf: Set the DMA mask for the udmabuf device (v2) (Vivek Kasireddy)   
  - HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report (Lee Jones)   
  - Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()" (Greg Kroah-Hartman)   
  - Bluetooth: L2CAP: Fix build errors in some archs (Luiz Augusto von Dentz)   
  - kbuild: Fix include path in scripts/Makefile.modpost (Jing Leng)   
  - io_uring: fix UAF due to missing POLLFREE handling (Pavel Begunkov)   
  - io_uring: fix wrong arm_poll error handling (Pavel Begunkov)   
  - io_uring: fail links when poll fails (Pavel Begunkov)   
  - io_uring: bump poll refs to full 31-bits (Jens Axboe)   
  - io_uring: remove poll entry from list when canceling all (Jens Axboe)   
  - io_uring: Remove unused function req_ref_put (Jiapeng Chong)   
  - io_uring: poll rework (Pavel Begunkov)   
  - io_uring: inline io_poll_complete (Pavel Begunkov)   
  - io_uring: kill poll linking optimisation (Pavel Begunkov)   
  - io_uring: move common poll bits (Pavel Begunkov)   
  - io_uring: refactor poll update (Pavel Begunkov)   
  - io_uring: clean cqe filling functions (Pavel Begunkov)   
  - io_uring: correct fill events helpers types (Pavel Begunkov)   
  - arm64: errata: Add Cortex-A510 to the repeat tlbi list (James Morse)   
  - mm/hugetlb: avoid corrupting page->mapping in hugetlb_mcopy_atomic_pte (Miaohe Lin)   
  - Drivers: hv: balloon: Support status report for larger page sizes (Boqun Feng)   
  - crypto: lib - remove unneeded selection of XOR_BLOCKS (Eric Biggers)   
  - firmware: tegra: bpmp: Do only aligned access to IPC memory area (Timo Alho)   
  - drm/vc4: hdmi: Depends on CONFIG_PM (Maxime Ripard)   
  - drm/vc4: hdmi: Rework power up (Maxime Ripard)   
  - ACPI: thermal: drop an always true check (Adam Borowski)   
  - drm/bridge: Add stubs for devm_drm_of_get_bridge when OF is disabled (Maxime Ripard)   
  - mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() (Jann Horn)   
  - LTS version: v5.15.64 (Jack Vogel)   
  - bpf: Don't use tnum_range on array range checking for poke descriptors (Daniel Borkmann)   
  - scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq (Saurabh Sengar)   
  - scsi: ufs: core: Enable link lost interrupt (Kiwoong Kim)   
  - perf stat: Clear evsel->reset_group for each stat run (Ian Rogers)   
  - perf/x86/intel/ds: Fix precise store latency handling (Stephane Eranian)   
  - perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU (Stephane Eranian)   
  - perf python: Fix build when PYTHON_CONFIG is user supplied (James Clark)   
  - blk-mq: fix io hung due to missing commit_rqs (Yu Kuai)   
  - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Salvatore Bonaccorso)   
  - x86/nospec: Fix i386 RSB stuffing (Peter Zijlstra)   
  - binder_alloc: add missing mmap_lock calls when using the VMA (Liam Howlett)   
  - arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76 (Zenghui Yu)   
  - mptcp: Fix crash due to tcp_tsorted_anchor was initialized before release skb (Yonglong Li)   
  - md: call __md_stop_writes in md_stop (Guoqing Jiang)   
  - Revert "md-raid: destroy the bitmap after destroying the thread" (Guoqing Jiang)   
  - mm/hugetlb: fix hugetlb not supporting softdirty tracking (David Hildenbrand)   
  - Revert "usbnet: smsc95xx: Forward PHY interrupts to PHY driver to avoid polling" (Greg Kroah-Hartman)   
  - Revert "usbnet: smsc95xx: Fix deadlock on runtime resume" (Greg Kroah-Hartman)   
  - io_uring: fix issue with io_write() not always undoing sb_start_write() (Jens Axboe)   
  - riscv: traps: add missing prototype (Conor Dooley)   
  - xen/privcmd: fix error exit of privcmd_ioctl_dm_op() (Juergen Gross)   
  - smb3: missing inode locks in punch hole (David Howells)   
  - nouveau: explicitly wait on the fence in nouveau_bo_move_m2mf (Karol Herbst)   
  - ACPI: processor: Remove freq Qos request for all CPUs (Riwen Lu)   
  - Revert "memcg: cleanup racy sum avoidance code" (Shakeel Butt)   
  - fbdev: fbcon: Properly revert changes when vc_resize() failed (Shigeru Yoshida)   
  - s390: fix double free of GS and RI CBs on fork() failure (Brian Foster)   
  - bootmem: remove the vmemmap pages from kmemleak in put_page_bootmem (Liu Shixin)   
  - s390/mm: do not trigger write fault when vma does not allow VM_WRITE (Gerald Schaefer)   
  - mm/damon/dbgfs: avoid duplicate context directory creation (Badari Pulavarty)   
  - asm-generic: sections: refactor memory_intersects (Quanyang Wang)   
  - writeback: avoid use-after-free after removing device (Khazhismel Kumykov)   
  - loop: Check for overflow while configuring loop (Siddh Raman Pant)   
  - x86/nospec: Unwreck the RSB stuffing (Peter Zijlstra)   
  - x86/bugs: Add "unknown" reporting for MMIO Stale Data (Pawan Gupta)   
  - x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry (Chen Zhongjin)   
  - perf/x86/lbr: Enable the branch type for the Arch LBR by default (Kan Liang)   
  - btrfs: fix possible memory leak in btrfs_get_dev_args_from_path() (Zixuan Fu)   
  - btrfs: check if root is readonly while setting security xattr (Goldwyn Rodrigues)   
  - btrfs: add info when mount fails due to stale replace target (Anand Jain)   
  - btrfs: replace: drop assert for suspended replace (Anand Jain)   
  - btrfs: fix silent failure when deleting root reference (Filipe Manana)   
  - net: stmmac: work around sporadic tx issue on link-up (Heiner Kallweit)   
  - ionic: VF initial random MAC address if no assigned mac (R Mohamed Shah)   
  - ionic: fix up issues with handling EAGAIN on FW cmds (Shannon Nelson)   
  - ionic: clear broken state on generation change (Shannon Nelson)   
  - ionic: widen queue_lock use around lif init and deinit (Shannon Nelson)   
  - rxrpc: Fix locking in rxrpc's sendmsg (David Howells)   
  - i40e: Fix incorrect address type for IPv6 flow rules (Sylwester Dziedziuch)   
  - ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter (Jacob Keller)   
  - net: Fix a data-race around sysctl_somaxconn. (Kuniyuki Iwashima)   
  - net: Fix data-races around sysctl_devconf_inherit_init_net. (Kuniyuki Iwashima)   
  - net: Fix data-races around sysctl_fb_tunnels_only_for_init_net. (Kuniyuki Iwashima)   
  - net: Fix a data-race around netdev_budget_usecs. (Kuniyuki Iwashima)   
  - net: Fix data-races around sysctl_max_skb_frags. (Kuniyuki Iwashima)   
  - mptcp: stop relying on tcp_tx_skb_cache (Paolo Abeni)   
  - tcp: expose the tcp_mark_push() and tcp_skb_entail() helpers (Paolo Abeni)   
  - net: Fix a data-race around netdev_budget. (Kuniyuki Iwashima)   
  - net: Fix a data-race around sysctl_net_busy_read. (Kuniyuki Iwashima)   
  - net: Fix a data-race around sysctl_net_busy_poll. (Kuniyuki Iwashima)   
  - net: Fix a data-race around sysctl_tstamp_allow_data. (Kuniyuki Iwashima)   
  - net: Fix data-races around sysctl_optmem_max. (Kuniyuki Iwashima)   
  - ratelimit: Fix data-races in ___ratelimit(). (Kuniyuki Iwashima)   
  - net: Fix data-races around netdev_tstamp_prequeue. (Kuniyuki Iwashima)   
  - net: Fix data-races around netdev_max_backlog. (Kuniyuki Iwashima)   
  - net: Fix data-races around weight_p and dev_weight_[rt]x_bias. (Kuniyuki Iwashima)   
  - net: Fix data-races around sysctl_[rw]mem_(max|default). (Kuniyuki Iwashima)   
  - netfilter: flowtable: fix stuck flows on cleanup due to pending work (Pablo Neira Ayuso)   
  - netfilter: flowtable: add function to invoke garbage collection immediately (Pablo Neira Ayuso)   
  - netfilter: nf_tables: disallow binding to already bound chain (Pablo Neira Ayuso)   
  - netfilter: nf_tables: disallow jump to implicit chain from set element (Pablo Neira Ayuso)   
  - netfilter: nf_tables: upfront validation of data via nft_data_init() (Pablo Neira Ayuso)   
  - netfilter: bitwise: improve error goto labels (Jeremy Sowden)   
  - netfilter: nft_cmp: optimize comparison for 16-bytes (Pablo Neira Ayuso)   
  - netfilter: nf_tables: consolidate rule verdict trace call (Pablo Neira Ayuso)   
  - netfilter: nft_tunnel: restrict it to netdev family (Pablo Neira Ayuso)   
  - netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families (Pablo Neira Ayuso)   
  - netfilter: nf_tables: do not leave chain stats enabled on error (Pablo Neira Ayuso)   
  - netfilter: nft_payload: do not truncate csum_offset and csum_type (Pablo Neira Ayuso)   
  - netfilter: nft_payload: report ERANGE for too long offset and length (Pablo Neira Ayuso)   
  - netfilter: nf_tables: make table handle allocation per-netns friendly (Pablo Neira Ayuso)   
  - netfilter: nf_tables: disallow updates of implicit chain (Pablo Neira Ayuso)   
  - bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (Vikas Gupta)   
  - net: ipvtap - add __init/__exit annotations to module init/exit funcs (Maciej Żenczykowski)   
  - bonding: 802.3ad: fix no transmission of LACPDUs (Jonathan Toppins)   
  - net: moxa: get rid of asymmetry in DMA mapping/unmapping (Sergei Antonov)   
  - net: phy: Don't WARN for PHY_READY state in mdio_bus_phy_resume() (Xiaolei Wang)   
  - net: ipa: don't assume SMEM is page-aligned (Alex Elder)   
  - net/mlx5e: Fix wrong tc flag used when set hw-tc-offload off (Maor Dickman)   
  - net/mlx5e: Fix wrong application of the LRO state (Aya Levin)   
  - net/mlx5: Avoid false positive lockdep warning by adding lock_class_key (Moshe Shemesh)   
  - net/mlx5e: Properly disable vlan strip on non-UL reps (Vlad Buslov)   
  - ice: xsk: prohibit usage of non-balanced queue id (Maciej Fijalkowski)   
  - ice: xsk: Force rings to be sized to power of 2 (Maciej Fijalkowski)   
  - nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout (Duoming Zhou)   
  - r8152: fix the RX FIFO settings when suspending (Hayes Wang)   
  - r8152: fix the units of some registers for RTL8156A (Hayes Wang)   
  - rose: check NULL rose_loopback_neigh->loopback (Bernard Pidoux)   
  - ntfs: fix acl handling (Christian Brauner)   
  - mm/smaps: don't access young/dirty bit if pte unpresent (Peter Xu)   
  - SUNRPC: RPC level errors should set task->tk_rpc_status (Trond Myklebust)   
  - NFSv4.2 fix problems with __nfs42_ssc_open (Olga Kornievskaia)   
  - NFS: Don't allocate nfs_fattr on the stack in __nfs42_ssc_open() (Trond Myklebust)   
  - Revert "net: macsec: update SCI upon MAC address change." (Sabrina Dubroca)   
  - net: use eth_hw_addr_set() instead of ether_addr_copy() (Jakub Kicinski)   
  - fs: require CAP_SYS_ADMIN in target namespace for idmapped mounts (Seth Forshee)   
  - xfrm: policy: fix metadata dst->dev xmit null pointer dereference (Nikolay Aleksandrov)   
  - xfrm: clone missing x->lastused in xfrm_do_migrate (Antony Antony)   
  - xfrm: fix refcount leak in __xfrm_policy_check() (Xin Xiong)   
  - riscv: lib: uaccess: fix CSR_STATUS SR_SUM bit (Chen Lifu)   
  - riscv: lib: uaccess: fold fixups into body (Jisheng Zhang)   
  - btrfs: remove unnecessary parameter delalloc_start for writepage_delalloc() (Qu Wenruo)   
  - btrfs: pass the dentry to btrfs_log_new_name() instead of the inode (Filipe Manana)   
  - btrfs: put initial index value of a directory in a constant (Filipe Manana)   
  - scsi: qla2xxx: edif: Fix dropped IKE message (Quinn Tran)   
  - scsi: qla2xxx: Fix response queue handler reading stale packets (Arun Easi)   
  - drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (Phil Auld)   
  - Input: i8042 - add additional TUXEDO devices to i8042 quirk tables (Werner Sembach)   
  - Input: i8042 - add TUXEDO devices to i8042 quirk tables (Werner Sembach)   
  - Input: i8042 - merge quirk tables (Werner Sembach)   
  - Input: i8042 - move __initconst to fix code styling warning (Werner Sembach)   
  - btrfs: convert count_max_extents() to use fs_info->max_extent_size (Naohiro Aota)   
  - btrfs: replace BTRFS_MAX_EXTENT_SIZE with fs_info->max_extent_size (Naohiro Aota)   
  - btrfs: zoned: revive max_zone_append_bytes (Naohiro Aota)   
  - block: add bdev_max_segments() helper (Naohiro Aota)   
  - block: add a bdev_max_zone_append_sectors helper (Christoph Hellwig)   
  - x86/entry: Move CLD to the start of the idtentry macro (Lai Jiangshan)   
  - kernel/sys_ni: add compat entry for fadvise64_64 (Randy Dunlap)   
  - parisc: Fix exception handler for fldw and fstw instructions (Helge Deller)   
  - parisc: Make CONFIG_64BIT available for ARCH=parisc64 only (Helge Deller)   
  - cgroup: Fix race condition at rebind_subsystems() (Jing-Ting Wu)   
  - audit: fix potential double free on error path from fsnotify_add_inode_mark (Gaosheng Cui)   
  - eth: sun: cassini: remove dead code (Martin Liška)   
  - wifi: rtlwifi: remove always-true condition pointed out by GCC 12 (Jakub Kicinski)   
  - LTS version: v5.15.63 (Jack Vogel)   
  - xfs: revert "xfs: actually bump warning counts when we send warnings" (Eric Sandeen)   
  - xfs: fix soft lockup via spinning in filestream ag selection loop (Brian Foster)   
  - xfs: fix overfilling of reserve pool (Darrick J. Wong)   
  - xfs: always succeed at setting the reserve pool size (Darrick J. Wong)   
  - xfs: remove infinite loop when reserving free block pool (Darrick J. Wong)   
  - xfs: reserve quota for target dir expansion when renaming files (Darrick J. Wong)   
  - xfs: reserve quota for dir expansion when linking/unlinking files (Darrick J. Wong)   
  - scsi: ufs: ufs-mediatek: Fix build error and type mismatch (Ren Zhijie)   
  - can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once() (Fedor Pchelkin)   
  - MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0 (Nathan Chancellor)   
  - video: fbdev: i740fb: Check the argument of i740_calc_vclk() (Zheyu Ma)   
  - venus: pm_helpers: Fix warning in OPP during probe (Stanimir Varbanov)   
  - powerpc/64: Init jump labels before parse_early_param() (Zhouyi Zhou)   
  - smb3: check xattr value length earlier (Steve French)   
  - f2fs: fix to do sanity check on segment type in build_sit_entries() (Chao Yu)   
  - f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page() (Chao Yu)   
  - ALSA: control: Use deferred fasync helper (Takashi Iwai)   
  - ALSA: timer: Use deferred fasync helper (Takashi Iwai)   
  - ALSA: core: Add async signal helpers (Takashi Iwai)   
  - powerpc/ioda/iommu/debugfs: Generate unique debugfs entries (Alexey Kardashevskiy)   
  - ovl: warn if trusted xattr creation fails (Miklos Szeredi)   
  - powerpc/32: Don't always pass -mcpu=powerpc to the compiler (Christophe Leroy)   
  - powerpc/32: Set an IBAT covering up to _einittext during init (Christophe Leroy)   
  - watchdog: export lockup_detector_reconfigure (Laurent Dufour)   
  - RISC-V: Add fast call path of crash_kexec() (Xianting Tian)   
  - riscv: mmap with PROT_WRITE but no PROT_READ is invalid (Celeste Liu)   
  - riscv: dts: canaan: Add k210 topology information (Conor Dooley)   
  - riscv: dts: sifive: Add fu740 topology information (Conor Dooley)   
  - ASoC: rsnd: care default case on rsnd_ssiu_busif_err_irq_ctrl() (Kuninori Morimoto)   
  - modules: Ensure natural alignment for .altinstructions and __bug_table sections (Helge Deller)   
  - iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit (Yunfei Wang)   
  - mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start (Liang He)   
  - vfio: Clear the caps->buf to NULL after free (Schspa Shi)   
  - KVM: PPC: Book3S HV: Fix "rm_exit" entry in debugfs timings (Fabiano Rosas)   
  - tty: serial: Fix refcount leak bug in ucc_uart.c (Liang He)   
  - lib/list_debug.c: Detect uninitialized lists (Guenter Roeck)   
  - ext4: avoid resizing to a partial cluster size (Kiselev, Oleg)   
  - ext4: avoid remove directory when directory is corrupted (Ye Bin)   
  - drivers:md:fix a potential use-after-free bug (Wentao_Liang)   
  - nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown (Sagi Grimberg)   
  - md: Notify sysfs sync_completed in md_reap_sync_thread() (Logan Gunthorpe)   
  - phy: samsung: phy-exynos-pcie: sanitize init/power_on callbacks (Marek Szyprowski)   
  - openrisc: io: Define iounmap argument as volatile (Stafford Horne)   
  - dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed (Uwe Kleine-König)   
  - selftests/kprobe: Do not test for GRP/ without event failures (Steven Rostedt (Google))   
  - csky/kprobe: reclaim insn_slot on kprobe unregistration (Liao Chang)   
  - RDMA/rxe: Limit the number of calls to each tasklet (Bob Pearson)   
  - dmaengine: dw-axi-dmac: ignore interrupt if no descriptor (Ben Dooks)   
  - dmaengine: dw-axi-dmac: do not print NULL LLI during error (Ben Dooks)   
  - um: add "noreboot" command line option for PANIC_TIMEOUT=-1 setups (Jason A. Donenfeld)   
  - PCI/ACPI: Guard ARM64-specific mcfg_quirks (Huacai Chen)   
  - cxl: Fix a memory leak in an error handling path (Christophe JAILLET)   
  - pinctrl: intel: Check against matching data instead of ACPI companion (Andy Shevchenko)   
  - mmc: tmio: avoid glitches when resetting (Wolfram Sang)   
  - habanalabs/gaudi: mask constant value before cast (Oded Gabbay)   
  - habanalabs/gaudi: fix shift out of bounds (Ofir Bitton)   
  - coresight: etm4x: avoid build failure with unrolled loops (Nick Desaulniers)   
  - gadgetfs: ep_io - wait until IRQ finishes (Jozef Martiniak)   
  - scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE (James Smart)   
  - scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input (James Smart)   
  - clk: qcom: clk-alpha-pll: fix clk_trion_pll_configure description (Vladimir Zapolskiy)   
  - zram: do not lookup algorithm in backends table (Sergey Senozhatsky)   
  - uacce: Handle parent device removal or parent driver module rmmod (Jean-Philippe Brucker)   
  - clk: qcom: ipq8074: dont disable gcc_sleep_clk_src (Robert Marko)   
  - vboxguest: Do not use devm for irq (Pascal Terjan)   
  - usb: dwc2: gadget: remove D+ pull-up while no vbus with usb-role-switch (Amelie Delaunay)   
  - usb: renesas: Fix refcount leak bug (Liang He)   
  - usb: host: ohci-ppc-of: Fix refcount leak bug (Liang He)   
  - scsi: ufs: ufs-mediatek: Fix the timing of configuring device regulators (Po-Wen Kao)   
  - clk: ti: Stop using legacy clkctrl names for omap4 and 5 (Tony Lindgren)   
  - drm/meson: Fix overflow implicit truncation warnings (Sai Prakash Ranjan)   
  - irqchip/tegra: Fix overflow implicit truncation warnings (Sai Prakash Ranjan)   
  - PCI: aardvark: Fix reporting Slot capabilities on emulated bridge (Pali Rohár)   
  - usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info (Michael Grzeschik)   
  - usb: gadget: uvc: calculate the number of request depending on framesize (Michael Grzeschik)   
  - usb: cdns3: fix random warning message when driver load (Frank Li)   
  - usb: cdns3 fix use-after-free at workaround 2 (Frank Li)   
  - platform/chrome: cros_ec_proto: don't show MKBP version if unsupported (Tzung-Bi Shih)   
  - PCI: Add ACS quirk for Broadcom BCM5750x NICs (Pavan Chebbi)   
  - HID: multitouch: new device class fix Lenovo X12 trackpad sticky (Tao Jin)   
  - KVM: arm64: Reject 32bit user PSTATE on asymmetric systems (Oliver Upton)   
  - KVM: arm64: Treat PMCR_EL1.LC as RES1 on asymmetric systems (Oliver Upton)   
  - net: qrtr: start MHI channel after endpoit creation (Maxim Kochetkov)   
  - drm/sun4i: dsi: Prevent underflow when computing packet sizes (Samuel Holland)   
  - drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() (Liang He)   
  - ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf() (Takashi Iwai)   
  - ASoC: SOF: Intel: hda: Define rom_status_reg in sof_intel_dsp_desc (Ranjani Sridharan)   
  - drm/imx/dcss: get rid of HPD warning message (Laurentiu Palcu)   
  - tracing/eprobes: Fix reading of string fields (Steven Rostedt (Google))   
  - gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file (Andrew Donnellan)   
  - kbuild: fix the modules order between drivers and libs (Masahiro Yamada)   
  - igb: Add lock to avoid data race (Lin Ma)   
  - stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove() (Christophe JAILLET)   
  - fec: Fix timer capture timing in `fec_ptp_enable_pps()` (Csókás Bence)   
  - i40e: Fix to stop tx_timeout recovery if GLOBR fails (Alan Brady)   
  - regulator: pca9450: Remove restrictions for regulator-name (Frieder Schrempf)   
  - i2c: imx: Make sure to unregister adapter on remove() (Uwe Kleine-König)   
  - ice: Ignore EEXIST when setting promisc mode (Grzegorz Siwik)   
  - net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions() (Rustam Subkhankulov)   
  - net: dsa: don't warn in dsa_port_set_state_now() when driver doesn't support it (Vladimir Oltean)   
  - net: genl: fix error path memory leak in policy dumping (Jakub Kicinski)   
  - net: dsa: felix: fix ethtool 256-511 and 512-1023 TX packet counters (Vladimir Oltean)   
  - net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry (Arun Ramadoss)   
  - net: fix potential refcount leak in ndisc_router_discovery() (Xin Xiong)   
  - net: moxa: pass pdev instead of ndev to DMA functions (Sergei Antonov)   
  - mlxsw: spectrum: Clear PTP configuration after unregistering the netdevice (Amit Cohen)   
  - net: dsa: mv88e6060: prevent crash on an unused port (Sergei Antonov)   
  - net/sunrpc: fix potential memory leaks in rpc_sysfs_xprt_state_change() (Xin Xiong)   
  - spi: meson-spicc: add local pow2 clock ops to preserve rate between messages (Neil Armstrong)   
  - powerpc/pci: Fix get_phb_number() locking (Michael Ellerman)   
  - netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified (Pablo Neira Ayuso)   
  - netfilter: nf_tables: disallow NFT_SET_ELEM_CATCHALL and NFT_SET_ELEM_INTERVAL_END (Pablo Neira Ayuso)   
  - netfilter: nf_tables: NFTA_SET_ELEM_KEY_END requires concat and interval flags (Pablo Neira Ayuso)   
  - netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag (Pablo Neira Ayuso)   
  - netfilter: nf_tables: really skip inactive sets when allocating name (Pablo Neira Ayuso)   
  - netfilter: nf_tables: possible module reference underflow in error path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: disallow NFTA_SET_ELEM_KEY_END with NFT_SET_ELEM_INTERVAL_END flag (Pablo Neira Ayuso)   
  - fs/ntfs3: uninitialized variable in ntfs_set_acl_ex() (Dan Carpenter)   
  - netfilter: nf_tables: use READ_ONCE and WRITE_ONCE for shared generation id access (Pablo Neira Ayuso)   
  - ASoC: codec: tlv320aic32x4: fix mono playback via I2S (Philipp Zabel)   
  - ASoC: tas2770: Fix handling of mute/unmute (Martin Povišer)   
  - ASoC: tas2770: Drop conflicting set_bias_level power setting (Martin Povišer)   
  - ASoC: tas2770: Allow mono streams (Martin Povišer)   
  - ASoC: tas2770: Set correct FSYNC polarity (Martin Povišer)   
  - ASoC: SOF: debug: Fix potential buffer overflow by snprintf() (Takashi Iwai)   
  - iavf: Fix reset error handling (Przemyslaw Patynowski)   
  - iavf: Fix adminq error handling (Przemyslaw Patynowski)   
  - nios2: add force_successful_syscall_return() (Al Viro)   
  - nios2: restarts apply only to the first sigframe we build... (Al Viro)   
  - nios2: fix syscall restart checks (Al Viro)   
  - nios2: traced syscall does need to check the syscall number (Al Viro)   
  - nios2: don't leave NULLs in sys_call_table[] (Al Viro)   
  - nios2: page fault et.al. are *not* restartable syscalls... (Al Viro)   
  - fs/ntfs3: Fix missing i_op in ntfs_read_mft (Konstantin Komarov)   
  - fs/ntfs3: Do not change mode if ntfs_set_ea failed (Konstantin Komarov)   
  - fs/ntfs3: Fix double free on remount (Konstantin Komarov)   
  - fs/ntfs3: Don't clear upper bits accidentally in log_replay() (Dan Carpenter)   
  - fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr (Pavel Skripkin)   
  - fs/ntfs3: Fix using uninitialized value n when calling indx_read (Yan Lei)   
  - dpaa2-eth: trace the allocated address instead of page struct (Chen Lin)   
  - perf tests: Fix Track with sched_switch test for hybrid case (Adrian Hunter)   
  - perf parse-events: Fix segfault when event parser gets an error (Adrian Hunter)   
  - perf probe: Fix an error handling path in 'parse_perf_probe_command()' (Christophe JAILLET)   
  - geneve: fix TOS inheriting for ipv4 (Matthias May)   
  - atm: idt77252: fix use-after-free bugs caused by tst_timer (Duoming Zhou)   
  - xen/xenbus: fix return type in xenbus_file_read() (Dan Carpenter)   
  - nfp: ethtool: fix the display error of `ethtool -m DEVNAME` (Yu Xiao)   
  - NTB: ntb_tool: uninitialized heap data in tool_fn_write() (Dan Carpenter)   
  - tools build: Switch to new openssl API for test-libcrypto (Roberto Sassu)   
  - kbuild: dummy-tools: avoid tmpdir leak in dummy gcc (Ondrej Mosnacek)   
  - ceph: don't leak snap_rwsem in handle_cap_grant (Jeff Layton)   
  - tools/vm/slabinfo: use alphabetic order when two values are equal (Yuanzheng Song)   
  - ceph: use correct index when encoding client supported features (Luís Henriques)   
  - spi: dt-bindings: zynqmp-qspi: add missing 'required' (Krzysztof Kozlowski)   
  - spi: dt-bindings: cadence: add missing 'required' (Krzysztof Kozlowski)   
  - dt-bindings: clock: qcom,gcc-msm8996: add more GCC clock sources (Dmitry Baryshkov)   
  - dt-bindings: arm: qcom: fix MSM8994 boards compatibles (Krzysztof Kozlowski)   
  - dt-bindings: arm: qcom: fix MSM8916 MTP compatibles (Krzysztof Kozlowski)   
  - dt-bindings: arm: qcom: fix Longcheer L8150 compatibles (Krzysztof Kozlowski)   
  - dt-bindings: gpio: zynq: Add missing compatible strings (Michal Simek)   
  - vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout() (Peilin Ye)   
  - vsock: Fix memory leak in vsock_connect() (Peilin Ye)   
  - plip: avoid rcu debug splat (Florian Westphal)   
  - ipv6: do not use RT_TOS for IPv6 flowlabel (Matthias May)   
  - mlx5: do not use RT_TOS for IPv6 flowlabel (Matthias May)   
  - geneve: do not use RT_TOS for IPv6 flowlabel (Matthias May)   
  - ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool (Sakari Ailus)   
  - octeontx2-af: Fix key checking for source mac (Subbaraya Sundeep)   
  - octeontx2-af: Fix mcam entry resource leak (Subbaraya Sundeep)   
  - octeontx2-af: suppress external profile loading warning (Harman Kalra)   
  - octeontx2-af: Apply tx nibble fixup always (Stanislaw Kardach)   
  - octeontx2-pf: Fix NIX_AF_TL3_TL2X_LINKX_CFG register configuration (Naveen Mamindlapalli)   
  - Input: exc3000 - fix return value check of wait_for_completion_timeout (Miaoqian Lin)   
  - pinctrl: qcom: sm8250: Fix PDC map (Jianhua Lu)   
  - pinctrl: sunxi: Add I/O bias setting for H6 R-PIO (Samuel Holland)   
  - pinctrl: amd: Don't save/restore interrupt status and wake status bits (Basavaraj Natikar)   
  - pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed (Nikita Travkin)   
  - pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map (Miaoqian Lin)   
  - dt-bindings: arm: qcom: fix Alcatel OneTouch Idol 3 compatibles (Krzysztof Kozlowski)   
  - selftests: forwarding: Fix failing tests with old libnet (Ido Schimmel)   
  - net: bgmac: Fix a BUG triggered by wrong bytes_compl (Sandor Bodo-Merle)   
  - net: bcmgenet: Indicate MAC is in charge of PHY PM (Florian Fainelli)   
  - net: phy: Warn about incorrect mdio_bus_phy_resume() state (Florian Fainelli)   
  - devlink: Fix use-after-free after a failed reload (Ido Schimmel)   
  - virtio_net: fix memory leak inside XPD_TX with mergeable (Xuan Zhuo)   
  - SUNRPC: Reinitialise the backchannel request buffers before reuse (Trond Myklebust)   
  - SUNRPC: Fix xdr_encode_bool() (Chuck Lever)   
  - sunrpc: fix expiry of auth creds (Dan Aloni)   
  - m68k: coldfire/device.c: protect FLEXCAN blocks (Randy Dunlap)   
  - net: atlantic: fix aq_vec index out of range error (Chia-Lin Kao (AceLan))   
  - can: j1939: j1939_session_destroy(): fix memory leak of skbs (Fedor Pchelkin)   
  - can: mcp251x: Fix race condition on receive interrupt (Sebastian Würl)   
  - bpf: Check the validity of max_rdwr_access for sock local storage map iterator (Hou Tao)   
  - bpf: Acquire map uref in .init_seq_private for sock{map,hash} iterator (Hou Tao)   
  - bpf: Acquire map uref in .init_seq_private for sock local storage map iterator (Hou Tao)   
  - bpf: Acquire map uref in .init_seq_private for hash map iterator (Hou Tao)   
  - bpf: Acquire map uref in .init_seq_private for array map iterator (Hou Tao)   
  - bpf: Don't reinit map value in prealloc_lru_pop (Kumar Kartikeya Dwivedi)   
  - BPF: Fix potential bad pointer dereference in bpf_sys_bpf() (Jinghao Jia)   
  - NFSv4/pnfs: Fix a use-after-free bug in open (Trond Myklebust)   
  - NFSv4.1: RECLAIM_COMPLETE must handle EACCES (Zhang Xianwei)   
  - NFSv4: Fix races in the legacy idmapper upcall (Trond Myklebust)   
  - NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly (Trond Myklebust)   
  - NFSv4.1: Don't decrease the value of seq_nr_highest_sent (Trond Myklebust)   
  - Documentation: ACPI: EINJ: Fix obsolete example (Qifu Zhang)   
  - apparmor: Fix memleak in aa_simple_write_to_buffer() (Xiu Jianfeng)   
  - apparmor: fix reference count leak in aa_pivotroot() (Xin Xiong)   
  - apparmor: fix overlapping attachment computation (John Johansen)   
  - apparmor: fix setting unconfined mode on a loaded profile (John Johansen)   
  - apparmor: fix aa_label_asxprint return check (Tom Rix)   
  - apparmor: Fix failed mount permission check error message (John Johansen)   
  - apparmor: fix absroot causing audited secids to begin with = (John Johansen)   
  - apparmor: fix quiet_denied for file rules (John Johansen)   
  - can: ems_usb: fix clang's -Wunaligned-access warning (Marc Kleine-Budde)   
  - dt-bindings: usb: mtk-xhci: Allow wakeup interrupt-names to be optional (Nícolas F. R. A. Prado)   
  - ALSA: usb-audio: More comprehensive mixer map for ASUS ROG Zenith II (Takashi Iwai)   
  - tracing: Have filter accept "common_cpu" to be consistent (Steven Rostedt (Google))   
  - tracing/probes: Have kprobes and uprobes use $COMM too (Steven Rostedt (Google))   
  - tracing/eprobes: Have event probes be consistent with kprobes and uprobes (Steven Rostedt (Google))   
  - tracing/eprobes: Do not hardcode $comm as a string (Steven Rostedt (Google))   
  - tracing/eprobes: Do not allow eprobes to use $stack, or % for regs (Steven Rostedt (Google))   
  - tracing/perf: Fix double put of trace event when init fails (Steven Rostedt (Google))   
  - x86/kprobes: Fix JNG/JNLE emulation (Nadav Amit)   
  - cifs: Fix memory leak on the deferred close (Zhang Xiaoxu)   
  - btrfs: fix lost error handling when looking up extended ref on log replay (Filipe Manana)   
  - btrfs: reset RO counter on block group if we fail to relocate (Josef Bacik)   
  - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() (Zixuan Fu)   
  - mmc: meson-gx: Fix an error handling path in meson_mmc_probe() (Christophe JAILLET)   
  - mmc: pxamci: Fix an error handling path in pxamci_probe() (Christophe JAILLET)   
  - mmc: pxamci: Fix another error handling path in pxamci_probe() (Christophe JAILLET)   
  - ata: libata-eh: Add missing command name (Damien Le Moal)   
  - drm/amd/display: Check correct bounds for stream encoder instances for DCN303 (Aurabindo Pillai)   
  - drm/ttm: Fix dummy res NULL ptr deref bug (Arunpravin Paneer Selvam)   
  - drm/nouveau: recognise GA103 (Karol Herbst)   
  - x86/mm: Use proper mask when setting PUD mapping (Aaron Lu)   
  - KVM: Unconditionally get a ref to /dev/kvm module when creating a VM (Sean Christopherson)   
  - ALSA: hda/realtek: Add quirk for Clevo NS50PU, NS70PU (Christoffer Sandberg)   
  - ALSA: info: Fix llseek return value when using callback (Amadeusz Sławiński)   
  - LTS version: v5.15.62 (Jack Vogel)   
  - btrfs: raid56: don't trust any cached sector in __raid56_parity_recover() (Qu Wenruo)   
  - btrfs: only write the sectors in the vertical stripe which has data stripes (Qu Wenruo)   
  - x86/ftrace: Use alternative RET encoding (Peter Zijlstra)   
  - x86/ibt,ftrace: Make function-graph play nice (Peter Zijlstra)   
  - Revert "x86/ftrace: Use alternative RET encoding" (Thadeu Lima de Souza Cascardo)   
  - ksmbd: fix heap-based overflow in set_ntacl_dacl() (Namjae Jeon)   
  - ksmbd: prevent out of bound read for SMB2_WRITE (Hyunchul Lee)   
  - net_sched: cls_route: disallow handle of 0 (Jamal Hadi Salim)   
  - tee: add overflow check in register_shm_helper() (Jens Wiklander)   
  - io_uring: use original request task for inflight tracking (Jens Axboe)   
  - LTS version: v5.15.61 (Jack Vogel)   
  - scsi: lpfc: Resolve some cleanup issues following SLI path refactoring (James Smart)   
  - scsi: lpfc: Fix element offset in __lpfc_sli_release_iocbq_s4() (James Smart)   
  - scsi: lpfc: Fix locking for lpfc_sli_iocbq_lookup() (James Smart)   
  - drm/bridge: Move devm_drm_of_get_bridge to bridge/panel.c (Maxime Ripard)   
  - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression (Luiz Augusto von Dentz)   
  - Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP" (Jose Alonso)   
  - io_uring: mem-account pbuf buckets (Pavel Begunkov)   
  - drm/meson: Fix refcount leak in meson_encoder_hdmi_init (Miaoqian Lin)   
  - drm/msm: Fix dirtyfb refcounting (Rob Clark)   
  - tracing/perf: Avoid -Warray-bounds warning for __rel_loc macro (Kees Cook)   
  - drm/vc4: change vc4_dma_range_matches from a global to static (Tom Rix)   
  - net: phy: smsc: Disable Energy Detect Power-Down in interrupt mode (Lukas Wunner)   
  - drm/bridge: tc358767: Fix (e)DP bridge endpoint parsing in dedicated function (Marek Vasut)   
  - Revert "s390/smp: enforce lowcore protection on CPU restart" (Alexander Gordeev)   
  - Revert "mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv" (Greg Kroah-Hartman)   
  - crypto: lib/blake2s - reduce stack frame usage in self test (Jason A. Donenfeld)   
  - tcp: fix over estimation in sk_forced_mem_schedule() (Eric Dumazet)   
  - mac80211: fix a memory leak where sta_info is not freed (Ahmed Zaki)   
  - tracing: Use a struct alignof to determine trace event field alignment (Steven Rostedt (Google))   
  - powerpc: Fix eh field when calling lwarx on PPC32 (Christophe Leroy)   
  - xen-blkfront: Apply 'feature_persistent' parameter when connect (SeongJae Park)   
  - xen-blkback: Apply 'feature_persistent' parameter when connect (Maximilian Heyne)   
  - xen-blkback: fix persistent grants negotiation (SeongJae Park)   
  - tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH (Huacai Chen)   
  - KEYS: asymmetric: enforce SM2 signature use pkey algo (Tianjia Zhang)   
  - ext4: fix race when reusing xattr blocks (Jan Kara)   
  - ext4: unindent codeblock in ext4_xattr_block_set() (Jan Kara)   
  - ext4: use kmemdup() to replace kmalloc + memcpy (Shuqi Zhang)   
  - ext4: remove EA inode entry from mbcache on inode eviction (Jan Kara)   
  - ext4: make sure ext4_append() always allocates new block (Lukas Czerner)   
  - ext4: check if directory block is within i_size (Lukas Czerner)   {CVE-2022-1184} 
  - ext4: fix warning in ext4_iomap_begin as race between bmap and write (Ye Bin)   
  - ext4: correct the misjudgment in ext4_iget_extra_inode (Baokun Li)   
  - ext4: correct max_inline_xattr_value_size computing (Baokun Li)   
  - ext4: fix use-after-free in ext4_xattr_set_entry (Baokun Li)   
  - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (Baokun Li)   
  - ext4: fix extent status tree race in writeback error recovery path (Eric Whitney)   
  - ext4: update s_overhead_clusters in the superblock during an on-line resize (Theodore Ts'o)   
  - tracing: Avoid -Warray-bounds warning for __rel_loc macro (Masami Hiramatsu)   
  - tracing: Add '__rel_loc' using trace event macros (Masami Hiramatsu)   
  - dm raid: fix address sanitizer warning in raid_resume (Mikulas Patocka)   
  - dm raid: fix address sanitizer warning in raid_status (Mikulas Patocka)   
  - KVM: nVMX: Attempt to load PERF_GLOBAL_CTRL on nVMX xfer iff it exists (Sean Christopherson)   
  - KVM: VMX: Add helper to check if the guest PMU has PERF_GLOBAL_CTRL (Sean Christopherson)   
  - KVM: x86/pmu: Ignore pmu->global_ctrl check if vPMU doesn't support global_ctrl (Like Xu)   
  - KVM: VMX: Mark all PERF_GLOBAL_(OVF)_CTRL bits reserved if there's no vPMU (Sean Christopherson)   
  - KVM: x86/pmu: Introduce the ctrl_mask value for fixed counter (Like Xu)   
  - powerpc/powernv/kvm: Use darn for H_RANDOM on Power9 (Jason A. Donenfeld)   
  - ACPI: CPPC: Do not prevent CPPC from working in the future (Rafael J. Wysocki)   
  - btrfs: properly flag filesystem with BTRFS_FEATURE_INCOMPAT_BIG_METADATA (Nikolay Borisov)   
  - btrfs: reset block group chunk force if we have to wait (Josef Bacik)   
  - btrfs: ensure pages are unlocked on cow_file_range() failure (Naohiro Aota)   
  - block: don't allow the same type rq_qos add more than once (Jinke Han)   
  - block: remove the struct blk_queue_ctx forward declaration (Christoph Hellwig)   
  - locking/csd_lock: Change csdlock_debug from early_param to __setup (Chen Zhongjin)   
  - timekeeping: contribute wall clock to rng on time change (Jason A. Donenfeld)   
  - ARM: remove some dead code (Ard Biesheuvel)   
  - net/9p: Initialize the iounit field during fid creation (Tyler Hicks)   
  - dm thin: fix use-after-free crash in dm_sm_register_threshold_callback (Luo Meng)   
  - kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification (Michal Suchanek)   
  - dm writecache: set a default MAX_WRITEBACK_JOBS (Mikulas Patocka)   
  - tty: 8250: Add support for Brainboxes PX cards. (Cameron Williams)   
  - serial: 8250: Add proper clock handling for OxSemi PCIe devices (Maciej W. Rozycki)   
  - serial: 8250: Fold EndRun device support into OxSemi Tornado code (Maciej W. Rozycki)   
  - serial: 8250_pci: Replace dev_*() by pci_*() macros (Andy Shevchenko)   
  - serial: 8250_pci: Refactor the loop in pci_ite887x_init() (Andy Shevchenko)   
  - PCI: qcom: Power on PHY before IPQ8074 DBI register accesses (Robert Marko)   
  - PCI/AER: Iterate over error counters instead of error strings (Mohamed Khalfella)   
  - iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) (Alexander Lobakin)   
  - KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS) (Sean Christopherson)   
  - KVM: set_msr_mce: Permit guests to ignore single-bit ECC errors (Lev Kujawski)   
  - intel_th: pci: Add Raptor Lake-S CPU support (Alexander Shishkin)   
  - intel_th: pci: Add Raptor Lake-S PCH support (Alexander Shishkin)   
  - intel_th: pci: Add Meteor Lake-P support (Alexander Shishkin)   
  - scsi: lpfc: Remove extra atomic_inc on cmd_pending in queuecommand after VMID (James Smart)   
  - scsi: lpfc: SLI path split: Refactor SCSI paths (James Smart)   
  - scsi: lpfc: SLI path split: Refactor fast and slow paths to native SLI4 (James Smart)   
  - scsi: lpfc: SLI path split: Refactor lpfc_iocbq (James Smart)   
  - scsi: lpfc: Fix EEH support for NVMe I/O (James Smart)   
  - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Sudeep Holla)   
  - usbnet: smsc95xx: Fix deadlock on runtime resume (Lukas Wunner)   
  - usbnet: smsc95xx: Forward PHY interrupts to PHY driver to avoid polling (Lukas Wunner)   
  - usbnet: smsc95xx: Avoid link settings race on interrupt reception (Lukas Wunner)   
  - usbnet: smsc95xx: Don't clear read-only PHY interrupt (Lukas Wunner)   
  - drm/vc4: drv: Adopt the dma configuration from the HVS or V3D component (Dave Stevenson)   
  - drm/dp/mst: Read the extended DPCD capabilities during system resume (Imre Deak)   
  - crypto: blake2s - remove shash module (Jason A. Donenfeld)   
  - drm/mediatek: Keep dsi as LP00 before dcs cmds transfer (Jitao Shi)   
  - drm/mediatek: Allow commands to be sent during video mode (Julien STEPHAN)   
  - spmi: trace: fix stack-out-of-bound access in SPMI tracing functions (David Collins)   
  - __follow_mount_rcu(): verify that mount_lock remains unchanged (Al Viro)   
  - Input: gscps2 - check return value of ioremap() in gscps2_probe() (Xie Shaowen)   
  - SMB3: fix lease break timeout when multiple deferred close handles for the same file. (Bharath SM)   
  - x86/olpc: fix 'logical not is only applied to the left hand side' (Alexander Lobakin)   
  - x86/kprobes: Update kcb status flag after singlestepping (Masami Hiramatsu (Google))   
  - ftrace/x86: Add back ftrace_expected assignment (Steven Rostedt (Google))   
  - x86/bugs: Enable STIBP for IBPB mitigated RETBleed (Kim Phillips)   
  - scsi: qla2xxx: Fix losing FCP-2 targets during port perturbation tests (Arun Easi)   
  - scsi: qla2xxx: Fix losing target when it reappears during delete (Arun Easi)   
  - scsi: qla2xxx: Fix losing FCP-2 targets on long port disable with I/Os (Arun Easi)   
  - scsi: qla2xxx: Wind down adapter after PCIe error (Quinn Tran)   
  - scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection (Quinn Tran)   
  - scsi: qla2xxx: Fix excessive I/O error messages by default (Arun Easi)   
  - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Arun Easi)   
  - scsi: qla2xxx: Turn off multi-queue for 8G adapters (Quinn Tran)   
  - scsi: qla2xxx: Fix discovery issues in FC-AL topology (Arun Easi)   
  - scsi: qla2xxx: Fix imbalance vha->vref_count (Quinn Tran)   
  - scsi: zfcp: Fix missing auto port scan and thus missing target ports (Steffen Maier)   
  - scsi: ufs: core: Correct ufshcd_shutdown() flow (Peter Wang)   
  - video: fbdev: s3fb: Check the size of screen before memset_io() (Zheyu Ma)   
  - video: fbdev: arkfb: Check the size of screen before memset_io() (Zheyu Ma)   
  - video: fbdev: vt8623fb: Check the size of screen before memset_io() (Zheyu Ma)   
  - f2fs: do not allow to decompress files have FI_COMPRESS_RELEASED (Jaewook Kim)   
  - f2fs: allow compression for mmap files in compress_mode=user (Sungjong Seo)   
  - x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y (Andrea Righi)   
  - sched/core: Do not requeue task on CPU excluded from cpus_mask (Mel Gorman)   
  - sched: Remove the limitation of WF_ON_CPU on wakelist if wakee cpu is idle (Tianchen Ding)   
  - sched: Fix the check of nr_running at queue wakelist (Tianchen Ding)   
  - tools/thermal: Fix possible path truncations (Florian Fainelli)   
  - video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() (Zheyu Ma)   
  - x86/numa: Use cpumask_available instead of hardcoded NULL check (Siddh Raman Pant)   
  - sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed (Waiman Long)   
  - sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() (Dietmar Eggemann)   
  - scripts/faddr2line: Fix vmlinux detection on arm64 (Josh Poimboeuf)   
  - genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO (Arnaldo Carvalho de Melo)   
  - powerpc/pci: Fix PHB numbering when using opal-phbid (Michael Ellerman)   
  - x86/bus_lock: Don't assume the init value of DEBUGCTLMSR.BUS_LOCK_DETECT to be zero (Chenyi Qiang)   
  - kprobes: Forbid probing on trampoline and BPF code areas (Chen Zhongjin)   
  - perf symbol: Fail to read phdr workaround (Ian Rogers)   
  - powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address (Miaoqian Lin)   
  - powerpc/xive: Fix refcount leak in xive_get_max_prio (Miaoqian Lin)   
  - powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader (Miaoqian Lin)   
  - f2fs: fix to remove F2FS_COMPR_FL and tag F2FS_NOCOMP_FL at the same time (Chao Liu)   
  - s390/smp: enforce lowcore protection on CPU restart (Alexander Gordeev)   
  - s390/maccess: rework absolute lowcore accessors (Alexander Gordeev)   
  - s390/smp: cleanup control register update routines (Alexander Gordeev)   
  - s390/smp: cleanup target CPU callback starting (Alexander Gordeev)   
  - s390/dump: fix os_info virtual vs physical address confusion (Alexander Gordeev)   
  - tty: serial: fsl_lpuart: correct the count of break characters (Sherry Sun)   
  - powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias (Pali Rohár)   
  - powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (Alexey Kardashevskiy)   
  - powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32 (Christophe Leroy)   
  - powerpc/32: Call mmu_mark_initmem_nx() regardless of data block mapping. (Christophe Leroy)   
  - ASoC: mchp-spdifrx: disable end of block interrupt on failures (Claudiu Beznea)   
  - video: fbdev: sis: fix typos in SiS_GetModeID() (Rustam Subkhankulov)   
  - video: fbdev: amba-clcd: Fix refcount leak bugs (Liang He)   
  - watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe() (William Dean)   
  - watchdog: sp5100_tco: Fix a memory leak of EFCH MMIO resource (Jean Delvare)   
  - ASoC: audio-graph-card: Add of_node_put() in fail path (Liang He)   
  - fuse: Remove the control interface for virtio-fs (Xie Yongji)   
  - ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp() (Christophe JAILLET)   
  - ASoC: imx-card: use snd_pcm_format_t type for asrc_format (Shengjiu Wang)   
  - ASoC: fsl_easrc: use snd_pcm_format_t type for sample_format (Shengjiu Wang)   
  - ASoC: fsl-asoc-card: force cast the asrc_format type (Shengjiu Wang)   
  - ASoC: fsl_asrc: force cast the asrc_format type (Shengjiu Wang)   
  - s390/zcore: fix race when reading from hardware system area (Alexander Gordeev)   
  - s390/crash: fix incorrect number of bytes to copy to user space (Alexander Gordeev)   
  - s390/maccess: fix semantics of memcpy_real() and its callers (Alexander Gordeev)   
  - s390/dump: fix old lowcore virtual vs physical address confusion (Alexander Gordeev)   
  - perf tools: Fix dso_id inode generation comparison (Adrian Hunter)   
  - iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop (Liang He)   
  - mfd: max77620: Fix refcount leak in max77620_initialise_fps (Miaoqian Lin)   
  - mfd: t7l66xb: Drop platform disable callback (Uwe Kleine-König)   
  - remoteproc: sysmon: Wait for SSCTL service to come up (Sibi Sankar)   
  - remoteproc: qcom: pas: Check if coredump is enabled (Siddharth Gupta)   
  - proc: fix a dentry lock race between release_task and lookup (Zhihao Cheng)   
  - lib/smp_processor_id: fix imbalanced instrumentation_end() call (Tetsuo Handa)   
  - kfifo: fix kfifo_to_user() return type (Dan Carpenter)   
  - rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge (Miaoqian Lin)   
  - MIPS: Fixed __debug_virt_addr_valid() (Florian Fainelli)   
  - net: 9p: fix refcount leak in p9_read_work() error handling (Hangyu Hua)   
  - 9p: Add client parameter to p9_req_put() (Kent Overstreet)   
  - 9p: Drop kref usage (Kent Overstreet)   
  - 9p: fix a bunch of checkpatch warnings (Dominique Martinet)   
  - iommu/exynos: Handle failed IOMMU device registration properly (Sam Protsenko)   
  - serial: 8250_bcm7271: Save/restore RTS in suspend/resume (Doug Berger)   
  - ASoC: mt6359: Fix refcount leak bug (Liang He)   
  - swiotlb: fail map correctly with failed io_tlb_default_mem (Robin Murphy)   
  - MIPS: vdso: Utilize __pa() for gic_pfn (Florian Fainelli)   
  - tty: n_gsm: fix missing corner cases in gsmld_poll() (Daniel Starke)   
  - tty: n_gsm: fix DM command (Daniel Starke)   
  - tty: n_gsm: fix wrong T1 retry count handling (Daniel Starke)   
  - serial: 8250_fsl: Don't report FE, PE and OE twice (Uwe Kleine-König)   
  - vfio/ccw: Do not change FSM state in subchannel event (Eric Farman)   
  - remoteproc: qcom: wcnss: Fix handling of IRQs (Sireesh Kodali)   
  - ASoC: imx-card: Fix DSD/PDM mclk frequency (Shengjiu Wang)   
  - ASoC: qcom: Fix missing of_node_put() in asoc_qcom_lpass_cpu_platform_probe() (Liang He)   
  - tty: n_gsm: fix resource allocation order in gsm_activate_mux() (Daniel Starke)   
  - tty: n_gsm: fix race condition in gsmld_write() (Daniel Starke)   
  - tty: n_gsm: fix packet re-transmission without open control channel (Daniel Starke)   
  - tty: n_gsm: fix non flow control frames during mux flow off (Daniel Starke)   
  - tty: n_gsm: fix missing timer to handle stalled links (Daniel Starke)   
  - tty: n_gsm: fix wrong queuing behavior in gsm_dlci_data_output() (Daniel Starke)   
  - tty: n_gsm: fix tty registration before control channel open (Daniel Starke)   
  - tty: n_gsm: fix user open not possible at responder until initiator open (Daniel Starke)   
  - tty: n_gsm: Delete gsmtty open SABM frame when config requester (Zhenguo Zhao)   
  - ASoC: samsung: change gpiod_speaker_power and rx1950_audio from global to static variables (Tom Rix)   
  - powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable (Athira Rajeev)   
  - ASoC: samsung: h1940_uda1380: include proepr GPIO consumer header (Krzysztof Kozlowski)   
  - remoteproc: imx_rproc: Fix refcount leak in imx_rproc_addr_init (Miaoqian Lin)   
  - profiling: fix shift too large makes kernel panic (Chen Zhongjin)   
  - selftests/livepatch: better synchronize test_klp_callbacks_busy (Joe Lawrence)   
  - remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init (Miaoqian Lin)   
  - rpmsg: mtk_rpmsg: Fix circular locking dependency (AngeloGioacchino Del Regno)   
  - rpmsg: char: Add mutex protection for rpmsg_eptdev_open() (Shengjiu Wang)   
  - ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV (Srinivas Kandagatla)   
  - ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV (Srinivas Kandagatla)   
  - serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty() (Ilpo Järvinen)   
  - serial: 8250: dma: Allow driver operations before starting DMA transfers (Miquel Raynal)   
  - serial: 8250: Export ICR access helpers for internal use (Maciej W. Rozycki)   
  - ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe (Miaoqian Lin)   
  - ASoC: codecs: da7210: add check for i2c_add_driver (Jiasheng Jiang)   
  - ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe (Miaoqian Lin)   
  - ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe (Miaoqian Lin)   
  - ASoC: imx-audmux: Silence a clang warning (Fabio Estevam)   
  - ASoC: samsung: Fix error handling in aries_audio_probe (Miaoqian Lin)   
  - ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe (Miaoqian Lin)   
  - opp: Fix error check in dev_pm_opp_attach_genpd() (Tang Bin)   
  - usb: cdns3: Don't use priv_dev uninitialized in cdns3_gadget_ep_enable() (Nathan Chancellor)   
  - jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted (Zhihao Cheng)   
  - ext4: recover csum seed of tmp_inode after migrating to extents (Li Lingfeng)   
  - jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction() (Zhang Yi)   
  - block: ensure iov_iter advances for added pages (Keith Busch)   
  - block/bio: remove duplicate append pages code (Keith Busch)   
  - nvme: catch -ENODEV from nvme_revalidate_zones again (Christoph Hellwig)   
  - nvme: don't return an error from nvme_configure_metadata (Christoph Hellwig)   
  - nvme: disable namespace access for unsupported metadata (Keith Busch)   
  - nvme: define compat_ioctl again to unbreak 32-bit userspace. (Nick Bowler)   
  - nvme: use command_id instead of req->tag in trace_nvme_complete_rq() (Bean Huo)   
  - null_blk: fix ida error handling in null_add_dev() (Dan Carpenter)   
  - block/rnbd-srv: Set keep_id to true after mutex_trylock (Md Haris Iqbal)   
  - RDMA/rxe: Fix error unwind in rxe_create_qp() (Zhu Yanjun)   
  - RDMA/rxe: Remove the is_user members of struct rxe_sq/rxe_rq/rxe_srq (Xiao Yang)   
  - RDMA/rxe: Add memory barriers to kernel queues (Bob Pearson)   
  - RDMA/mlx5: Add missing check for return value in get namespace flow (Maor Gottlieb)   
  - of/fdt: declared return type does not match actual return type (Xu Qiang)   
  - selftests: kvm: set rax before vmcall (Andrei Vagin)   
  - mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region (Miaohe Lin)   
  - android: binder: stop saving a pointer to the VMA (Liam R. Howlett)   
  - RDMA/srpt: Fix a use-after-free (Bart Van Assche)   
  - RDMA/srpt: Introduce a reference count in struct srpt_device (Bart Van Assche)   
  - RDMA/srpt: Duplicate port name members (Bart Van Assche)   
  - platform/olpc: Fix uninitialized data in debugfs write (Dan Carpenter)   
  - KVM: nVMX: Set UMIP bit CR4_FIXED1 MSR when emulating UMIP (Sean Christopherson)   
  - mtd: spi-nor: fix spi_nor_spimem_setup_op() call in spi_nor_erase_{sector,chip}() (Patrice Chotard)   
  - usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() (Andrey Strachuk)   
  - USB: serial: fix tty-port initialized comments (Johan Hovold)   
  - HID: amd_sfh: Handle condition of "no sensors" (Basavaraj Natikar)   
  - PCI: tegra194: Fix link up retry sequence (Vidya Sagar)   
  - PCI: tegra194: Fix Root Port interrupt handling (Vidya Sagar)   
  - RDMA/rxe: For invalidate compare according to set keys in mr (Md Haris Iqbal)   
  - HID: alps: Declare U1_UNICORN_LEGACY support (Artem Borisov)   
  - mmc: cavium-thunderx: Add of_node_put() when breaking out of loop (Liang He)   
  - mmc: cavium-octeon: Add of_node_put() when breaking out of loop (Liang He)   
  - RDMA/rxe: Fix mw bind to allow any consumer key portion (Bob Pearson)   
  - scripts/gdb: fix 'lx-dmesg' on 32 bits arch (Antonio Borneo)   
  - scripts/gdb: lx-dmesg: read records individually (John Ogness)   
  - dmaengine: imx-dma: Cast of_device_get_match_data() with (uintptr_t) (Fabio Estevam)   
  - HID: amd_sfh: Add NULL check for hid device (Basavaraj Natikar)   
  - HID: mcp2221: prevent a buffer overflow in mcp_smbus_write() (Harshit Mogalapalli)   
  - gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data() (Liang He)   
  - RDMA/hfi1: fix potential memory leak in setup_base_ctxt() (Jianglei Nie)   
  - clk: qcom: gcc-msm8939: Fix weird field spacing in ftbl_gcc_camss_cci_clk (Bryan O'Donoghue)   
  - iio: cros: Register FIFO callback after sensor is registered (Gwendal Grignou)   
  - RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event (Cheng Xu)   
  - RDMA/hns: Fix incorrect clearing of interrupt status register (Haoyue Xu)   
  - RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() (Jianglei Nie)   
  - RDMA/rtrs-clt: Replace list_next_or_null_rr_rcu with an inline function (Md Haris Iqbal)   
  - RDMA/rtrs-clt: Rename rtrs_clt_sess to rtrs_clt_path (Vaishali Thakkar)   
  - RDMA/rtrs-srv: Rename rtrs_srv_sess to rtrs_srv_path (Vaishali Thakkar)   
  - RDMA/rtrs: Rename rtrs_sess to rtrs_path (Vaishali Thakkar)   
  - RDMA/rtrs: Do not allow sessname to contain special symbols / and . (Md Haris Iqbal)   
  - RDMA/rtrs: Introduce destroy_cq helper (Md Haris Iqbal)   
  - RDMA/rtrs: Replace duplicate check with is_pollqueue helper (Jack Wang)   
  - RDMA/rtrs: Fix warning when use poll mode on client side. (Jack Wang)   
  - RDMA/rtrs-srv: Fix modinfo output for stringify (Jack Wang)   
  - RDMA/irdma: Fix setting of QP context err_rq_idx_valid field (Mustafa Ismail)   
  - RDMA/irdma: Fix VLAN connection with wildcard address (Mustafa Ismail)   
  - RDMA/irdma: Fix a window for use-after-free (Mustafa Ismail)   
  - um: random: Don't initialise hwrng struct with zero (Christopher Obbard)   
  - interconnect: imx: fix max_node_id (Peng Fan)   
  - phy: stm32: fix error return in stm32_usbphyc_phy_init (Fabrice Gasnier)   
  - eeprom: idt_89hpesx: uninitialized data in idt_dbgfs_csr_write() (Dan Carpenter)   
  - usb: dwc3: qcom: fix missing optional irq warnings (Johan Hovold)   
  - usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup (Rohith Kollalsi)   
  - usb: dwc3: core: Deprecate GCTL.CORESOFTRESET (Thinh Nguyen)   
  - usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc() (Liang He)   
  - usb: gadget: udc: amd5536 depends on HAS_DMA (Randy Dunlap)   
  - xtensa: iss: fix handling error cases in iss_net_configure() (Yang Yingliang)   
  - xtensa: iss/network: provide release() callback (Max Filippov)   
  - scsi: smartpqi: Fix DMA direction for RAID requests (Mahesh Rajashekhara)   
  - PCI: qcom: Set up rev 2.1.0 PARF_PHY before enabling clocks (Christian Marangi)   
  - PCI/portdrv: Don't disable AER reporting in get_port_device_capability() (Stefan Roese)   
  - KVM: s390: pv: leak the topmost page table when destroy fails (Claudio Imbrenda)   
  - mmc: block: Add single read for 4k sector cards (Christian Loehle)   
  - of: device: Fix missing of_node_put() in of_dma_set_restricted_buffer (Liang He)   
  - mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R (Eugen Hristev)   
  - memstick/ms_block: Fix a memory leak (Christophe JAILLET)   
  - memstick/ms_block: Fix some incorrect memory allocation (Christophe JAILLET)   
  - mmc: renesas_sdhi: Get the reset handle early in the probe (Lad Prabhakar)   
  - mmc: mxcmmc: Silence a clang warning (Fabio Estevam)   
  - mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch (Miaoqian Lin)   
  - staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback (Duoming Zhou)   
  - binder: fix redefinition of seq_file attributes (Carlos Llamas)   
  - intel_th: msu: Fix vmalloced buffers (Alexander Shishkin)   
  - intel_th: msu-sink: Potential dereference of null pointer (Jiasheng Jiang)   
  - intel_th: Fix a resource leak in an error handling path (Christophe JAILLET)   
  - scsi: qla2xxx: Check correct variable in qla24xx_async_gffid() (Dan Carpenter)   
  - PCI: endpoint: Don't stop controller when unbinding endpoint function (Shunsuke Mie)   
  - dmaengine: sf-pdma: Add multithread support for a DMA channel (Viacheslav Mitrofanov)   
  - KVM: arm64: Don't return from void function (Quentin Perret)   
  - soundwire: revisit driver bind/unbind and callbacks (Pierre-Louis Bossart)   
  - soundwire: bus_type: fix remove and shutdown support (Pierre-Louis Bossart)   
  - PCI: dwc: Always enable CDM check if "snps,enable-cdm-check" exists (Serge Semin)   
  - PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors (Serge Semin)   
  - PCI: dwc: Set INCREASE_REGION_SIZE flag based on limit address (Serge Semin)   
  - PCI: dwc: Disable outbound windows only for controllers using iATU (Serge Semin)   
  - PCI: dwc: Add unroll iATU space support to dw_pcie_disable_atu() (Serge Semin)   
  - PCI: dwc: Stop link on host_init errors and de-initialization (Serge Semin)   
  - mm/mempolicy: fix get_nodes out of bound access (Tianyu Li)   
  - clk: qcom: clk-rcg2: Make sure to not write d=0 to the NMD register (Nikita Travkin)   
  - clk: qcom: clk-rcg2: Fail Duty-Cycle configuration if MND divider is not enabled. (Nikita Travkin)   
  - clk: qcom: camcc-sm8250: Fix topology around titan_top power domain (Vladimir Zapolskiy)   
  - clk: qcom: camcc-sdm845: Fix topology around titan_top power domain (Vladimir Zapolskiy)   
  - clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks (Robert Marko)   
  - clk: qcom: ipq8074: fix NSS port frequency tables (Robert Marko)   
  - clk: qcom: ipq8074: SW workaround for UBI32 PLL lock (Robert Marko)   
  - clk: qcom: ipq8074: fix NSS core PLL-s (Robert Marko)   
  - RDMA/rxe: Fix deadlock in rxe_do_local_ops() (Bob Pearson)   
  - usb: host: xhci: use snprintf() in xhci_decode_trb() (Sergey Shtylyov)   
  - clk: qcom: gcc-msm8939: Point MM peripherals to system_mm_noc clock (Bryan O'Donoghue)   
  - clk: qcom: gcc-msm8939: Add missing system_mm_noc_bfdcd_clk_src (Bryan O'Donoghue)   
  - clk: qcom: gcc-msm8939: Fix bimc_ddr_clk_src rcgr base address (Bryan O'Donoghue)   
  - clk: qcom: gcc-msm8939: Add missing SYSTEM_MM_NOC_BFDCD_CLK_SRC (Bryan O'Donoghue)   
  - clk: qcom: clk-krait: unlock spin after mux completion (Ansuel Smith)   
  - driver core: fix potential deadlock in __driver_attach (Zhang Wensheng)   
  - misc: rtsx: Fix an error handling path in rtsx_pci_probe() (Christophe JAILLET)   
  - clk: qcom: camcc-sm8250: Fix halt on boot by reducing driver's init level (Vladimir Zapolskiy)   
  - mtd: dataflash: Add SPI ID table (Mark Brown)   
  - dmaengine: dw-edma: Fix eDMA Rd/Wr-channels and DMA-direction semantics (Serge Semin)   
  - scsi: iscsi: Fix session removal on shutdown (Mike Christie)   
  - scsi: iscsi: Add helper to remove a session from the kernel (Mike Christie)   
  - scsi: iscsi: Allow iscsi_if_stop_conn() to be called from kernel (Mike Christie)   
  - mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv (Duoming Zhou)   
  - mwifiex: Ignore BTCOEX events from the 88W8897 firmware (Jonas Dreßler)   
  - KVM: Don't set Accessed/Dirty bits for ZERO_PAGE (Sean Christopherson)   
  - lib/test_hmm: avoid accessing uninitialized pages (Miaohe Lin)   
  - clk: mediatek: reset: Fix written reset bit offset (Rex-BC Chen)   
  - iio: accel: bma400: Reordering of header files (Jagath Jog J)   
  - platform/chrome: cros_ec: Always expose last resume result (Stephen Boyd)   
  - iio: accel: bma400: Fix the scale min and max macro values (Jagath Jog J)   
  - scsi: qla2xxx: edif: Fix no logout on delete for N2N (Quinn Tran)   
  - scsi: qla2xxx: edif: Fix session thrash (Quinn Tran)   
  - scsi: qla2xxx: edif: Tear down session if keys have been removed (Quinn Tran)   
  - scsi: qla2xxx: edif: Fix no login after app start (Quinn Tran)   
  - scsi: qla2xxx: edif: Reduce disruption due to multiple app start (Quinn Tran)   
  - scsi: qla2xxx: edif: Send LOGO for unexpected IKE message (Quinn Tran)   
  - netfilter: xtables: Bring SPDX identifier back (Thomas Gleixner)   
  - usb: xhci: tegra: Fix error check (Tang Bin)   
  - usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init() (Tang Bin)   
  - usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe (Miaoqian Lin)   
  - usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe (Miaoqian Lin)   
  - fpga: altera-pr-ip: fix unsigned comparison with less than zero (Marco Pagani)   
  - PCI: mediatek-gen3: Fix refcount leak in mtk_pcie_init_irq_domains() (Miaoqian Lin)   
  - mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path (Uwe Kleine-König)   
  - mtd: parsers: ofpart: Fix refcount leak in bcm4908_partitions_fw_offset (Miaoqian Lin)   
  - mtd: partitions: Fix refcount leak in parse_redboot_of (Miaoqian Lin)   
  - mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release (Duoming Zhou)   
  - HID: cp2112: prevent a buffer overflow in cp2112_xfer() (Harshit Mogalapalli)   
  - PCI: tegra194: Fix PM error handling in tegra_pcie_config_ep() (Miaoqian Lin)   
  - PCI: microchip: Fix refcount leak in mc_pcie_init_irq_domains() (Miaoqian Lin)   
  - phy: samsung: exynosautov9-ufs: correct TSRV register configurations (Chanho Park)   
  - scsi: qla2xxx: edif: Fix n2n login retry for secure device (Quinn Tran)   
  - scsi: qla2xxx: edif: Fix n2n discovery issue with secure target (Quinn Tran)   
  - scsi: qla2xxx: edif: Add retry for ELS passthrough (Quinn Tran)   
  - scsi: qla2xxx: edif: Synchronize NPIV deletion with authentication application (Quinn Tran)   
  - scsi: qla2xxx: edif: Fix inconsistent check of db_flags (Quinn Tran)   
  - scsi: qla2xxx: edif: Reduce connection thrash (Quinn Tran)   
  - scsi: qla2xxx: edif: Fix potential stuck session in sa update (Quinn Tran)   
  - scsi: qla2xxx: edif: Reduce Initiator-Initiator thrashing (Quinn Tran)   
  - of: check previous kernel's ima-kexec-buffer against memory bounds (Vaibhav Jain)   
  - mtd: rawnand: meson: Fix a potential double free issue (Christophe JAILLET)   
  - mtd: maps: Fix refcount leak in ap_flash_init (Miaoqian Lin)   
  - mtd: maps: Fix refcount leak in of_flash_probe_versatile (Miaoqian Lin)   
  - clk: renesas: r9a06g032: Fix UART clkgrp bitsel (Ralph Siemsen)   
  - HID: amd_sfh: Don't show client init failed as error when discovery fails (Mario Limonciello)   
  - wireguard: allowedips: don't corrupt stack when detecting overflow (Jason A. Donenfeld)   
  - wireguard: ratelimiter: use hrtimer in selftest (Jason A. Donenfeld)   
  - net: usb: make USB_RTL8153_ECM non user configurable (Maciej Żenczykowski)   
  - dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock (Hangyu Hua)   
  - net: ionic: fix error check for vlan flags in ionic_set_nic_features() (Jian Shen)   
  - net: rose: fix netdev reference changes (Eric Dumazet)   
  - netdevsim: Avoid allocation warnings triggered from user space (Jakub Kicinski)   
  - iavf: Fix 'tc qdisc show' listing too many queues (Przemyslaw Patynowski)   
  - iavf: Fix max_rate limiting (Przemyslaw Patynowski)   
  - wifi: rtw88: check the return value of alloc_workqueue() (William Dean)   
  - netdevsim: fib: Fix reference count leak on route deletion failure (Ido Schimmel)   
  - net: allow unbound socket for packets in VRF when tcp_l3mdev_accept set (Mike Manning)   
  - ipv6: add READ_ONCE(sk->sk_bound_dev_if) in INET6_MATCH() (Eric Dumazet)   
  - inet: add READ_ONCE(sk->sk_bound_dev_if) in INET_MATCH() (Eric Dumazet)   
  - crypto: hisilicon/sec - fix auth key size error (Kai Ye)   
  - crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of (Pali Rohár)   
  - crypto: hisilicon/hpre - don't use GFP_KERNEL to alloc mem during softirq (Zhengchao Shao)   
  - net/mlx5: Adjust log_max_qp to be 18 at most (Maher Sanalla)   
  - net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS (Maxim Mikityanskiy)   
  - net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version (Gal Pressman)   
  - media: cedrus: hevc: Add check for invalid timestamp (Jernej Skrabec)   
  - wifi: libertas: Fix possible refcount leak in if_usb_probe() (Hangyu Hua)   
  - wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue (Jose Ignacio Tornos Martinez)   
  - wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` (Ammar Faizi)   
  - i2c: mux-gpmux: Add of_node_put() when breaking out of loop (Liang He)   
  - i2c: cadence: Support PEC for SMBus block read (Lars-Peter Clausen)   
  - Bluetooth: hci_intel: Add check for platform_driver_register (Jiasheng Jiang)   
  - can: pch_can: pch_can_error(): initialize errc before using it (Vincent Mailhol)   
  - can: error: specify the values of data[5..7] of CAN error frames (Vincent Mailhol)   
  - can: usb_8dev: do not report txerr and rxerr during bus-off (Vincent Mailhol)   
  - can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off (Vincent Mailhol)   
  - can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off (Vincent Mailhol)   
  - can: sun4i_can: do not report txerr and rxerr during bus-off (Vincent Mailhol)   
  - can: hi311x: do not report txerr and rxerr during bus-off (Vincent Mailhol)   
  - can: sja1000: do not report txerr and rxerr during bus-off (Vincent Mailhol)   
  - can: rcar_can: do not report txerr and rxerr during bus-off (Vincent Mailhol)   
  - can: pch_can: do not report txerr and rxerr during bus-off (Vincent Mailhol)   
  - libbpf: fix an snprintf() overflow check (Dan Carpenter)   
  - selftests/bpf: fix a test for snprintf() overflow (Dan Carpenter)   
  - wifi: p54: add missing parentheses in p54_flush() (Rustam Subkhankulov)   
  - wifi: p54: Fix an error handling path in p54spi_probe() (Christophe JAILLET)   
  - wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() (Dan Carpenter)   
  - media: staging: media: hantro: Fix typos (Sebastian Fricke)   
  - media: hevc: Embedded indexes in RPS (Benjamin Gaignard)   
  - media: hantro: Simplify postprocessor (Ezequiel Garcia)   
  - media: hantro: postproc: Fix motion vector space size (Ezequiel Garcia)   
  - media: cedrus: h265: Fix flag name (Jernej Skrabec)   
  - fs: check FMODE_LSEEK to control internal pipe splicing (Jason A. Donenfeld)   
  - bpf: Fix subprog names in stack traces. (Alexei Starovoitov)   
  - selftests: timers: clocksource-switch: fix passing errors from child (Wolfram Sang)   
  - selftests: timers: valid-adjtimex: build fix for newer toolchains (Wolfram Sang)   
  - libbpf: Fix the name of a reused map (Anquan Wu)   
  - tcp: make retransmitted SKB fit into the send window (Yonglong Li)   
  - drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed. (Jian Zhang)   
  - skmsg: Fix invalid last sg check in sk_msg_recvmsg() (Liu Jian)   
  - mediatek: mt76: eeprom: fix missing of_node_put() in mt76_find_power_limits_node() (Liang He)   
  - mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init() (Liang He)   
  - mt76: mt7921: enlarge maximum VHT MPDU length to 11454 (Deren Wu)   
  - mt76: mt7921: fix aggregation subframes setting to HE max (Deren Wu)   
  - ieee80211: add EHT 1K aggregation definitions (Mordechay Goodstein)   
  - mt76: mt7615: do not update pm stats in case of error (Lorenzo Bianconi)   
  - mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg (Lorenzo Bianconi)   
  - drm/msm/dpu: Fix for non-visible planes (Rob Clark)   
  - drm/msm: Avoid dirtyfb stalls on video mode displays (v2) (Rob Clark)   
  - media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment (AngeloGioacchino Del Regno)   
  - crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq (Zhengchao Shao)   
  - crypto: hisilicon/sec - don't sleep when in softirq (Zhengchao Shao)   
  - drm/msm/mdp5: Fix global state lock backoff (Rob Clark)   
  - net: hinic: avoid kernel hung in hinic_get_stats64() (Qiao Ma)   
  - net: hinic: fix bug that ethtool get wrong stats (Qiao Ma)   
  - hinic: Use the bitmap API when applicable (Christophe JAILLET)   
  - drm: bridge: sii8620: fix possible off-by-one (Hangyu Hua)   
  - drm/mediatek: dpi: Only enable dpi after the bridge is enabled (Guillaume Ranquet)   
  - drm/mediatek: dpi: Remove output format of YUV (Bo-Chen Chen)   
  - drm/rockchip: Fix an error handling path rockchip_dp_probe() (Christophe JAILLET)   
  - drm/rockchip: vop: Don't crash for invalid duplicate_state() (Brian Norris)   
  - selftests/xsk: Destroy BPF resources only when ctx refcount drops to 0 (Maciej Fijalkowski)   
  - crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE (Qian Cai)   
  - drm/vc4: hdmi: Correct HDMI timing registers for interlaced modes (Dave Stevenson)   
  - drm/vc4: hdmi: Fix timings for interlaced modes (Mateusz Kwiatkowski)   
  - drm/vc4: hdmi: Reset HDMI MISC_CONTROL register (Dave Stevenson)   
  - drm/vc4: hdmi: Avoid full hdmi audio fifo writes (Dom Cobley)   
  - drm/vc4: hdmi: Fix HPD GPIO detection (Maxime Ripard)   
  - drm/vc4: dsi: Add correct stop condition to vc4_dsi_encoder_disable iteration (Dave Stevenson)   
  - drm/vc4: dsi: Fix dsi0 interrupt support (Dave Stevenson)   
  - drm/vc4: dsi: Register dsi0 as the correct vc4 encoder type (Dave Stevenson)   
  - drm/vc4: dsi: Correct pixel order for DSI0 (Dave Stevenson)   
  - drm/vc4: dsi: Correct DSI divider calculations (Dave Stevenson)   
  - drm/vc4: dsi: Release workaround buffer and DMA (Dave Stevenson)   
  - drm/vc4: Use of_device_get_match_data() (Minghao Chi (CGEL ZTE))   
  - drm/vc4: dsi: Switch to devm_drm_of_get_bridge (Maxime Ripard)   
  - drm/bridge: Add a function to abstract away panels (Maxime Ripard)   
  - drm/vc4: plane: Fix margin calculations for the right/bottom edges (Dave Stevenson)   
  - drm/vc4: plane: Remove subpixel positioning check (Dom Cobley)   
  - media: tw686x: Fix memory leak in tw686x_video_init (Miaoqian Lin)   
  - media: driver/nxp/imx-jpeg: fix a unexpected return value problem (Jian Zhang)   
  - media: v4l2-mem2mem: prevent pollerr when last_buffer_dequeued is set (Ming Qian)   
  - media: hdpvr: fix error value returns in hdpvr_read (Niels Dossche)   
  - drm/mcde: Fix refcount leak in mcde_dsi_bind (Miaoqian Lin)   
  - media: imx-jpeg: Disable slot interrupt when frame done (Ming Qian)   
  - drm: bridge: adv7511: Add check for mipi_dsi_driver_register (Jiasheng Jiang)   
  - crypto: ccp - During shutdown, check SEV data pointer before using (Tom Lendacky)   
  - test_bpf: fix incorrect netdev features (Jian Shen)   
  - rcutorture: Fix ksoftirqd boosting timing and iteration (Frederic Weisbecker)   
  - rcutorture: Don't cpuhp_remove_state() if cpuhp_setup_state() failed (Paul E. McKenney)   
  - rcutorture: Warn on individual rcu_torture_init() error conditions (Paul E. McKenney)   
  - drm/radeon: fix incorrrect SPDX-License-Identifiers (Alex Deucher)   
  - wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() (Alexey Kodanev)   
  - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb (Pavel Skripkin)   
  - media: imx-jpeg: Implement drain using v4l2-mem2mem helpers (Ming Qian)   
  - media: imx-jpeg: Align upwards buffer size (Ming Qian)   
  - media: imx-jpeg: Support dynamic resolution change (Ming Qian)   
  - media: imx-jpeg: Handle source change in a function (Ming Qian)   
  - media: imx-jpeg: Identify and handle precision correctly (Ming Qian)   
  - media: imx-jpeg: Refactor function mxc_jpeg_parse (Ming Qian)   
  - media: imx-jpeg: Set V4L2_BUF_FLAG_LAST at eos (Ming Qian)   
  - media: imx-jpeg: use NV12M to represent non contiguous NV12 (Ming Qian)   
  - media: imx-jpeg: Add pm-runtime support for imx-jpeg (Mirela Rabulea)   
  - media: imx-jpeg: Leave a blank space before the configuration data (Ming Qian)   
  - media: imx-jpeg: Correct some definition according specification (Ming Qian)   
  - media: tw686x: Register the irq at the end of probe (Zheyu Ma)   
  - media: atmel: atmel-sama7g5-isc: fix warning in configs without OF (Eugen Hristev)   
  - crypto: sun8i-ss - fix infinite loop in sun8i_ss_setup_ivs() (Alexey Khoroshilov)   
  - i2c: Fix a potential use after free (Xu Wang)   
  - can: netlink: allow configuring of fixed data bit rates without need for do_set_data_bittiming callback (Marc Kleine-Budde)   
  - can: netlink: allow configuring of fixed bit rates without need for do_set_bittiming callback (Marc Kleine-Budde)   
  - net: fix sk_wmem_schedule() and sk_rmem_schedule() errors (Eric Dumazet)   
  - crypto: sun8i-ss - fix error codes in allocate_flows() (Dan Carpenter)   
  - crypto: sun8i-ss - do not allocate memory when handling hash requests (Corentin Labbe)   
  - drm: adv7511: override i2c address of cec before accessing it (Antonio Borneo)   
  - drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init (Miaoqian Lin)   
  - drm/shmem-helper: Pass GEM shmem object in public interfaces (Thomas Zimmermann)   
  - drm/shmem-helper: Export dedicated wrappers for GEM object functions (Thomas Zimmermann)   
  - drm/shmem-helper: Unexport drm_gem_shmem_create_with_handle() (Thomas Zimmermann)   
  - virtio-gpu: fix a missing check to avoid NULL dereference (Xiaomeng Tong)   
  - i2c: mxs: Silence a clang warning (Fabio Estevam)   
  - i2c: npcm: Correct slave role behavior (Tali Perry)   
  - i2c: npcm: Remove own slave addresses 2:10 (Tali Perry)   
  - drm/bridge: lt9611uxc: Cancel only driver's work (Bjorn Andersson)   
  - drm/meson: encoder_hdmi: Fix refcount leak in meson_encoder_hdmi_init (Miaoqian Lin)   
  - drm/meson: encoder_hdmi: switch to bridge DRM_BRIDGE_ATTACH_NO_CONNECTOR (Neil Armstrong)   
  - drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function (Xinlei Lee)   
  - drm/mediatek: Separate poweron/poweroff from enable/disable and define new funcs (Jitao Shi)   
  - drm/mediatek: Modify dsi funcs to atomic operations (Xinlei Lee)   
  - drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() (Alexey Kodanev)   
  - ath11k: Fix incorrect debug_mask mappings (Manikanta Pubbisetty)   
  - drm/mipi-dbi: align max_chunk to 2 in spi_transfer (Yunhao Tian)   
  - ath11k: fix netdev open race (Johan Hovold)   
  - wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c() (Dan Carpenter)   
  - drm/panel: Fix build error when CONFIG_DRM_PANEL_SAMSUNG_ATNA33XC20=y && CONFIG_DRM_DISPLAY_HELPER=m (Gao Chao)   
  - drm/st7735r: Fix module autoloading for Okaya RH128128T (Javier Martinez Canillas)   
  - ath10k: do not enforce interrupt trigger type (Krzysztof Kozlowski)   
  - drm/bridge: tc358767: Move (e)DP bridge endpoint parsing into dedicated function (Marek Vasut)   
  - drm/dp: Export symbol / kerneldoc fixes for DP AUX bus (Douglas Anderson)   
  - pwm: lpc18xx: Fix period handling (Uwe Kleine-König)   
  - pwm: lpc18xx-sct: Simplify driver by not using pwm_[gs]et_chip_data() (Uwe Kleine-König)   
  - pwm: lpc18xx-sct: Reduce number of devm memory allocations (Uwe Kleine-König)   
  - pwm: sifive: Shut down hardware only after pwmchip_remove() completed (Uwe Kleine-König)   
  - pwm: sifive: Ensure the clk is enabled exactly once per running PWM (Uwe Kleine-König)   
  - pwm: sifive: Simplify offset calculation for PWMCMP registers (Uwe Kleine-König)   
  - dm: return early from dm_pr_call() if DM device is suspended (Mike Snitzer)   
  - thermal/tools/tmon: Include pthread and time headers in tmon.h (Markus Mayer)   
  - selftests/seccomp: Fix compile warning when CC=clang (YiFei Zhu)   
  - nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt() (Nicolas Saenz Julienne)   
  - drivers/perf: arm_spe: Fix consistency of SYS_PMSCR_EL1.CX (Anshuman Khandual)   
  - irqdomain: Report irq number for NOMAP domains (Xu Qiang)   
  - arm64: dts: qcom: qcs404: Fix incorrect USB2 PHYs assignment (Sumit Garg)   
  - soc: qcom: Make QCOM_RPMPD depend on PM (Konrad Dybcio)   
  - regulator: of: Fix refcount leak bug in of_get_regulation_constraints() (Liang He)   
  - dm writecache: count number of blocks discarded, not number of discard bios (Mikulas Patocka)   
  - dm writecache: count number of blocks written, not number of write bios (Mikulas Patocka)   
  - dm writecache: count number of blocks read, not number of read bios (Mikulas Patocka)   
  - dm writecache: return void from functions (Mikulas Patocka)   
  - PM: domains: Ensure genpd_debugfs_dir exists before remove (Hsin-Yi Wang)   
  - blktrace: Trace remapped requests correctly (Bart Van Assche)   
  - hwmon: (drivetemp) Add module alias (Linus Walleij)   
  - spi: tegra20-slink: fix UAF in tegra_slink_remove() (Yang Yingliang)   
  - spi: Fix simplification of devm_spi_register_controller (Yang Yingliang)   
  - blk-mq: don't create hctx debugfs dir until q->debugfs_dir is created (Ming Lei)   
  - erofs: avoid consecutive detection for Highmem memory (Gao Xiang)   
  - arm64: tegra: Fix SDMMC1 CD on P2888 (Tamás Szűcs)   
  - arm64: tegra: Mark BPMP channels as no-memory-wc (Mikko Perttunen)   
  - arm64: tegra: Update Tegra234 BPMP channel addresses (Mikko Perttunen)   
  - arm64: tegra: Fixup SYSRAM references (Thierry Reding)   
  - arm64: dts: mt7622: fix BPI-R64 WPS button (Nick Hainke)   
  - arm64: dts: qcom: sm8250: add missing PCIe PHY clock-cells (Johan Hovold)   
  - arm64: dts: qcom: sm6125: Append -state suffix to pinctrl nodes (Marijn Suijten)   
  - arm64: dts: qcom: sm6125: Move sdc2 pinctrl from seine-pdx201 to sm6125 (Marijn Suijten)   
  - ACPI: VIOT: Fix ACS setup (Eric Auger)   
  - drivers/iio: Remove all strcpy() uses (Len Baker)   
  - ACPI: APEI: explicit init of HEST and GHES in apci_init() (Shuai Xue)   
  - arm64: dts: qcom: msm8916: Fix typo in pronto remoteproc node (Sireesh Kodali)   
  - stack: Declare {randomize_,}kstack_offset to fix Sparse warnings (GONG, Ruiqi)   
  - bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe() (Yang Yingliang)   
  - ARM: dts: qcom: pm8841: add required thermal-sensor-cells (Krzysztof Kozlowski)   
  - soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register (Miaoqian Lin)   
  - soc: qcom: ocmem: Fix refcount leak in of_get_ocmem (Miaoqian Lin)   
  - ARM: dts: qcom-msm8974: fix irq type on blsp2_uart1 (Luca Weiss)   
  - ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP (Dan Williams)   
  - regulator: qcom_smd: Fix pm8916_pldo range (Stephan Gerhold)   
  - cpufreq: zynq: Fix refcount leak in zynq_get_revision (Miaoqian Lin)   
  - arm64: dts: qcom: sdm636-sony-xperia-ganges-mermaid: correct sdc2 pinconf (Dmitry Baryshkov)   
  - arm64: dts: qcom: sdm630: fix gpu's interconnect path (Dmitry Baryshkov)   
  - arm64: dts: qcom: sdm630: fix the qusb2phy ref clock (Dmitry Baryshkov)   
  - arm64: dts: qcom: sdm630: disable GPU by default (Dmitry Baryshkov)   
  - ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init (Miaoqian Lin)   
  - ARM: OMAP2+: Fix refcount leak in omapdss_init_of (Miaoqian Lin)   
  - ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg (Krzysztof Kozlowski)   
  - block: fix infinite loop for invalid zone append (Keith Busch)   
  - soc: fsl: guts: machine variable might be unset (Michael Walle)   
  - arm64: dts: qcom: sc7180: Remove ipa_fw_mem node on trogdor (Stephen Boyd)   
  - locking/lockdep: Fix lockdep_init_map_*() confusion (Peter Zijlstra)   
  - arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1 (Alexandru Elisei)   
  - arm64: select TRACE_IRQFLAGS_NMI_SUPPORT (Mark Rutland)   
  - arm64: dts: mt8192: Fix idle-states entry-method (Nícolas F. R. A. Prado)   
  - arm64: dts: mt8192: Fix idle-states nodes naming scheme (Nícolas F. R. A. Prado)   
  - ARM: dts: ast2600-evb-a1: fix board compatible (Krzysztof Kozlowski)   
  - ARM: dts: ast2600-evb: fix board compatible (Krzysztof Kozlowski)   
  - ARM: dts: ast2500-evb: fix board compatible (Krzysztof Kozlowski)   
  - x86/pmem: Fix platform-device leak in error path (Johan Hovold)   
  - arm64: dts: renesas: Fix thermal-sensors on single-zone sensors (Geert Uytterhoeven)   
  - soc: amlogic: Fix refcount leak in meson-secure-pwrc.c (Liang He)   
  - dt-bindings: iio: accel: Add DT binding doc for ADXL355 (Puranjay Mohan)   
  - scsi: hisi_sas: Use managed PCI functions (Xiang Chen)   
  - soc: renesas: r8a779a0-sysc: Fix A2DP1 and A2CV[2357] PDR values (Geert Uytterhoeven)   
  - ARM: dts: imx7d-colibri-emmc: add cpu1 supply (Marcel Ziswiler)   
  - ACPI: processor/idle: Annotate more functions to live in cpuidle section (Guilherme G. Piccoli)   
  - ARM: bcm: Fix refcount leak in bcm_kona_smc_init (Miaoqian Lin)   
  - spi: spi-altera-dfl: Fix an error handling path (Christophe JAILLET)   
  - arm64: dts: renesas: beacon: Fix regulator node names (Geert Uytterhoeven)   
  - meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init (Miaoqian Lin)   
  - ARM: findbit: fix overflowing offset (Russell King (Oracle))   
  - spi: spi-rspi: Fix PIO fallback on RZ platforms (Biju Das)   
  - powerpc/64s: Disable stack variable initialisation for prom_init (Michael Ellerman)   
  - drm/amdgpu: Remove one duplicated ef removal (xinhui pan)   
  - kasan: test: Silence GCC 12 warnings (Kees Cook)   
  - selinux: Add boundary check in put_entry() (Xiu Jianfeng)   
  - selinux: fix memleak in security_read_state_kernel() (Xiu Jianfeng)   
  - PM: hibernate: defer device probing when resuming from hibernation (Tetsuo Handa)   
  - hwmon: (sht15) Fix wrong assumptions in device remove callback (Uwe Kleine-König)   
  - hwmon: (dell-smm) Add Dell XPS 13 7390 to fan control whitelist (Armin Wolf)   
  - firmware: tegra: Fix error check return value of debugfs_create_file() (Lv Ruyi)   
  - ARM: shmobile: rcar-gen2: Increase refcount for new reference (Liang He)   
  - arm64: dts: allwinner: a64: orangepi-win: Fix LED node name (Samuel Holland)   
  - arm64: dts: qcom: ipq8074: fix NAND node name (Robert Marko)   
  - ARM: dts: qcom: sdx55: Fix the IRQ trigger type for UART (Manivannan Sadhasivam)   
  - ACPI: LPSS: Fix missing check in register_device_clock() (huhai)   
  - ACPI: PM: save NVS memory for Lenovo G40-45 (Manyi Li)   
  - ACPI: EC: Drop the EC_FLAGS_IGNORE_DSDT_GPE quirk (Hans de Goede)   
  - ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks (Hans de Goede)   
  - ARM: OMAP2+: pdata-quirks: Fix refcount leak bug (Liang He)   
  - ARM: OMAP2+: display: Fix refcount leak bug (Liang He)   
  - spi: synquacer: Add missing clk_disable_unprepare() (Guo Mengqi)   
  - ARM: dts: ux500: Fix Gavini accelerometer mounting matrix (Linus Walleij)   
  - ARM: dts: ux500: Fix Codina accelerometer mounting matrix (Linus Walleij)   
  - ARM: dts: BCM5301X: Add DT for Meraki MR26 (Christian Lamparter)   
  - ARM: dts: imx6ul: fix qspi node compatible (Alexander Stein)   
  - ARM: dts: imx6ul: fix lcdif node compatible (Alexander Stein)   
  - ARM: dts: imx6ul: fix csi node compatible (Alexander Stein)   
  - ARM: dts: imx6ul: fix keypad compatible (Alexander Stein)   
  - ARM: dts: imx6ul: change operating-points to uint32-matrix (Alexander Stein)   
  - ARM: dts: imx6ul: add missing properties for sram (Alexander Stein)   
  - wait: Fix __wait_event_hrtimeout for RT/DL tasks (Juri Lelli)   
  - irqchip/mips-gic: Check the return value of ioremap() in gic_of_init() (William Dean)   
  - sched/core: Always flush pending blk_plug (John Keeping)   
  - genirq: GENERIC_IRQ_IPI depends on SMP (Samuel Holland)   
  - irqchip/mips-gic: Only register IPI domain when SMP is enabled (Samuel Holland)   
  - genirq: Don't return error on missing optional irq_request_resources() (Antonio Borneo)   
  - sched/fair: Introduce SIS_UTIL to search idle CPU based on sum of util_avg (Chen Yu)   
  - ext2: Add more validity checks for inode counts (Jan Kara)   
  - arm64: kasan: Revert "arm64: mte: reset the page tag in page->flags" (Catalin Marinas)   
  - arm64: fix oops in concurrently setting insn_emulation sysctls (haibinzhang (张海斌))   
  - arm64: Do not forget syscall when starting a new thread. (Francis Laniel)   
  - arch: make TRACE_IRQFLAGS_NMI_SUPPORT generic (Mark Rutland)   
  - x86: Handle idle=nomwait cmdline properly for x86_idle (Wyes Karny)   
  - epoll: autoremove wakers even more aggressively (Benjamin Segall)   
  - netfilter: nf_tables: fix null deref due to zeroed list head (Florian Westphal)   
  - usb: dwc3: gadget: fix high speed multiplier setting (Michael Grzeschik)   
  - usb: dwc3: gadget: refactor dwc3_repare_one_trb (Michael Grzeschik)   
  - arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC (Kunihiko Hayashi)   
  - ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC (Kunihiko Hayashi)   
  - USB: HCD: Fix URB giveback issue in tasklet function (Weitao Wang)   
  - usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion (Linyu Yuan)   
  - coresight: Clear the connection field properly (Suzuki K Poulose)   
  - MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen)   
  - powerpc/powernv: Avoid crashing if rng is NULL (Michael Ellerman)   
  - powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E (Christophe Leroy)   
  - powerpc/fsl-pci: Fix Class Code of PCIe Root Port (Pali Rohár)   
  - PCI: Add defines for normal and subtractive PCI bridges (Pali Rohár)   
  - ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr() (Alexander Lobakin)   
  - media: [PATCH] pci: atomisp_cmd: fix three missing checks on list iterator (Xiaomeng Tong)   
  - mbcache: add functions to delete entry if unused (Jan Kara)   
  - mbcache: don't reclaim used entries (Jan Kara)   
  - md-raid10: fix KASAN warning (Mikulas Patocka)   
  - md-raid: destroy the bitmap after destroying the thread (Mikulas Patocka)   
  - serial: mvebu-uart: uart2 error bits clearing (Narendra Hadke)   
  - fuse: ioctl: translate ENOSYS (Miklos Szeredi)   
  - fuse: limit nsec (Miklos Szeredi)   
  - ksmbd: fix use-after-free bug in smb2_tree_disconect (Namjae Jeon)   
  - ksmbd: prevent out of bound read for SMB2_TREE_CONNNECT (Hyunchul Lee)   
  - ksmbd: fix memory leak in smb2_handle_negotiate (Namjae Jeon)   
  - soundwire: qcom: Check device status before reading devid (Srinivas Kandagatla)   
  - scsi: qla2xxx: Zero undefined mailbox IN registers (Bikash Hazarika)   
  - scsi: qla2xxx: Fix incorrect display of max frame size (Bikash Hazarika)   
  - scsi: sg: Allow waiting for commands to complete on removed device (Tony Battersby)   
  - iio: light: isl29028: Fix the warning in isl29028_remove() (Zheyu Ma)   
  - iio: fix iio_format_avail_range() printing for none IIO_VAL_INT (Fawzi Khaber)   
  - um: seed rng using host OS rng (Jason A. Donenfeld)   
  - um: Remove straying parenthesis (Benjamin Beichler)   
  - mtd: rawnand: arasan: Update NAND bus clock instead of system clock (Amit Kumar Mahapatra)   
  - mtd: rawnand: arasan: Fix clock rate in NV-DDR (Olga Kitaina)   
  - btrfs: reject log replay if there is unsupported RO compat flag (Qu Wenruo)   
  - bpf: Fix KASAN use-after-free Read in compute_effective_progs (Tadeusz Struk)   
  - drm/amdgpu: fix check in fbdev init (Alex Deucher)   
  - drm/amdgpu: Check BO's requested pinning domains against its preferred_domains (Leo Li)   
  - drm/nouveau/kms: Fix failure path for creating DP connectors (Lyude Paul)   
  - drm/nouveau/acpi: Don't print error when we get -EINPROGRESS from pm_runtime (Lyude Paul)   
  - drm/nouveau: Don't pm_runtime_put_sync(), only pm_runtime_put_autosuspend() (Lyude Paul)   
  - drm/nouveau: fix another off-by-one in nvbios_addr (Timur Tabi)   
  - drm/hyperv-drm: Include framebuffer and EDID headers (Thomas Zimmermann)   
  - drm/vc4: hdmi: Disable audio if dmas property is present but empty (Phil Elwell)   
  - drm/shmem-helper: Add missing vunmap on error (Dmitry Osipenko)   
  - drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error (Dmitry Osipenko)   
  - rtc: rx8025: fix 12/24 hour mode detection on RX-8035 (Mathew McBride)   
  - RISC-V: Add modules to virtual kernel memory layout dump (Xianting Tian)   
  - RISC-V: Fixup schedule out issue in machine_crash_shutdown() (Xianting Tian)   
  - RISC-V: Fixup get incorrect user mode PC for kernel mode regs (Xianting Tian)   
  - RISC-V: kexec: Fixup use of smp_processor_id() in preemptible context (Xianting Tian)   
  - dt-bindings: riscv: fix SiFive l2-cache's cache-sets (Conor Dooley)   
  - riscv:uprobe fix SR_SPIE set/clear handling (Yipeng Zou)   
  - parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode (Helge Deller)   
  - parisc: Check the return value of ioremap() in lba_driver_probe() (William Dean)   
  - parisc: Drop pa_swapper_pg_lock spinlock (Helge Deller)   
  - parisc: Fix device names in /proc/iomem (Helge Deller)   
  - ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh() (Jiachen Zhang)   
  - crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak (John Allen)   
  - fix short copy handling in copy_mc_pipe_to_iter() (Al Viro)   
  - usbnet: Fix linkwatch use-after-free on disconnect (Lukas Wunner)   
  - fbcon: Fix accelerated fbdev scrolling while logo is still shown (Helge Deller)   
  - fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters (Helge Deller)   
  - thermal: sysfs: Fix cooling_device_stats_setup() error code path (Rafael J. Wysocki)   
  - fs: Add missing umask strip in vfs_tmpfile (Yang Xu)   
  - vfs: Check the truncate maximum size in inode_newsize_ok() (David Howells)   
  - tty: vt: initialize unicode screen buffer (Tetsuo Handa)   
  - ALSA: hda/realtek: Add a quirk for HP OMEN 15 (8786) mute LED (Bedant Patnaik)   
  - ALSA: hda/realtek: Add quirk for another Asus K42JZ model (Meng Tang)   
  - ALSA: hda/cirrus - support for iMac 12,1 model (Allen Ballway)   
  - ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model (Meng Tang)   
  - riscv: set default pm_power_off to NULL (Dimitri John Ledkov)   
  - KVM: x86: revalidate steal time cache if MSR value changes (Paolo Bonzini)   
  - KVM: x86: do not report preemption if the steal time cache is stale (Paolo Bonzini)   
  - KVM: x86: Tag kvm_mmu_x86_module_init() with __init (Sean Christopherson)   
  - KVM: nVMX: Always enable TSC scaling for L2 when it was enabled for L1 (Vitaly Kuznetsov)   
  - KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP (Sean Christopherson)   
  - KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks (Sean Christopherson)   
  - KVM: nVMX: Inject #UD if VMXON is attempted with incompatible CR0/CR4 (Sean Christopherson)   
  - KVM: nVMX: Account for KVM reserved CR4 bits in consistency checks (Sean Christopherson)   
  - KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value (Sean Christopherson)   
  - KVM: x86: Split kvm_is_valid_cr4() and export only the non-vendor bits (Sean Christopherson)   
  - KVM: s390: pv: don't present the ecall interrupt twice (Nico Boehr)   
  - KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case (Sean Christopherson)   
  - KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case (Sean Christopherson)   
  - HID: wacom: Don't register pad_input for touch switch (Ping Cheng)   
  - HID: wacom: Only report rotation for art pen (Ping Cheng)   
  - HID: hid-input: add Surface Go battery quirk (Maximilian Luz)   
  - lockd: detect and reject lock arguments that overflow (Jeff Layton)   
  - add barriers to buffer_uptodate and set_buffer_uptodate (Mikulas Patocka)   
  - wifi: mac80211_hwsim: use 32-bit skb cookie (Johannes Berg)   
  - wifi: mac80211_hwsim: add back erroneously removed cast (Johannes Berg)   
  - wifi: mac80211_hwsim: fix race condition in pending packet (Jeongik Cha)   
  - ALSA: hda/realtek: Add quirk for HP Spectre x360 15-eb0xxx (Ivan Hasenkampf)   
  - ALSA: hda/realtek: Add quirk for Clevo NV45PZ (Tim Crawford)   
  - ALSA: bcd2000: Fix a UAF bug on the error path of probing (Zheyu Ma)   
  - ALSA: usb-audio: Add quirk for Behringer UMC202HD (Takashi Iwai)   
  - nfsd: eliminate the NFSD_FILE_BREAK_* flags (Jeff Layton)   
  - NFSD: Clean up the show_nf_flags() macro (Chuck Lever)   
  - pNFS/flexfiles: Report RDMA connection errors to the server (Trond Myklebust)   
  - scsi: Revert "scsi: qla2xxx: Fix disk failure to rediscover" (Nilesh Javali)   
  - Revert "pNFS: nfs3_set_ds_client should set NFS_CS_NOPING" (Trond Myklebust)   
  - x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (Nick Desaulniers)   
  - Makefile: link with -z noexecstack --no-warn-rwx-segments (Nick Desaulniers)   
  - ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Dave Hansen)  [Orabug: 34671450]  
  - uek-rpm: config-x86_64*: enable more LPSS bus options for hardware support (Todd Vierling)  [Orabug: 34576146]  
  - uek-rpm: Disable floppy related configs (Saeed Mirzamohammadi)  [Orabug: 34644238]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-4.70.3.el8uek]
changelog:
  - Revert "Makefile: link with -z noexecstack --no-warn-rwx-segments" (Jack Vogel)   
  - Revert "x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments" (Jack Vogel)


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-4.70.4.el8uek]
changelog:
  - xen/ovmapi: Build OVM guest messaging driver (Jonah Palmer)  [Orabug: 34512197]  
  - net/rds: Send congestion map updates only via path zero (Anand Khoje)  [Orabug: 34578048]  
  - Revert "RDS/IB: Fix RDS IB SRQ implementation and tune it" (Hans Westgaard Ry)  [Orabug: 34662659]  
  - RDMA/cma: Use output interface for net_dev check (Håkon Bugge)  [Orabug: 34694979]  
  - crypto: qat - add support for 401xx devices (Giovanni Cabiddu)  [Orabug: 34686738]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-4.70.5.el8uek]
changelog:
  - uek: kabi: update kABI files for new symbols (Saeed Mirzamohammadi)  [Orabug: 34595591]  
  - Revert "scsi: lpfc: SLI path split: Refactor lpfc_iocbq" (John Donnelly)  [Orabug: 34678989]  
  - Revert "scsi: lpfc: SLI path split: Refactor fast and slow paths to native SLI4" (John Donnelly)  [Orabug: 34678989]  
  - Revert "scsi: lpfc: SLI path split: Refactor SCSI paths" (John Donnelly)  [Orabug: 34678989]  
  - Revert "scsi: lpfc: Remove extra atomic_inc on cmd_pending in queuecommand after VMID" (John Donnelly)  [Orabug: 34678989]  
  - Revert "scsi: lpfc: Fix locking for lpfc_sli_iocbq_lookup()" (John Donnelly)  [Orabug: 34678989]  
  - Revert "scsi: lpfc: Fix element offset in __lpfc_sli_release_iocbq_s4()" (John Donnelly)  [Orabug: 34678989]  
  - Revert "scsi: lpfc: Resolve some cleanup issues following SLI path refactoring" (John Donnelly)  [Orabug: 34678989]  
  - Revert "scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input" (John Donnelly)  [Orabug: 34678989]  
  - Revert "scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE" (John Donnelly)  [Orabug: 34678989]  
  - RDS/IB Fix allocation warning (Hans Westgaard Ry)  [Orabug: 34684321]  
  - fs: remove no_llseek (Jason A. Donenfeld)  [Orabug: 34705082]  
  - vfio: do not set FMODE_LSEEK flag (Jason A. Donenfeld)  [Orabug: 34705082]  
  - dma-buf: remove useless FMODE_LSEEK flag (Jason A. Donenfeld)  [Orabug: 34705082]  
  - fs: do not compare against ->llseek (Jason A. Donenfeld)  [Orabug: 34705082]  
  - fs: clear or set FMODE_LSEEK based on llseek function (Jason A. Donenfeld)  [Orabug: 34705082]  
  - hwmon: (opbmc) AST2600 SP reset driver adjustment (Jan Zdarek)  [Orabug: 34710681]  
  - hwmon: (opbmc) Driver message prefixes (Jan Zdarek)  [Orabug: 34710681]  
  - NFSD: fix use-after-free on source server when doing inter-server copy (Dai Ngo)  [Orabug: 34716070]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-4.70.5.2.el8uek]
changelog:
  - Revert "sched: Remove the limitation of WF_ON_CPU on wakelist if wakee cpu is idle" (Samasth Norway Ananda)  [Orabug: 34783367]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-5.70.1.el8uek]
changelog:
  - net/rds: drop rs_transport module reference count on error (Gerd Rausch)  [Orabug: 34500806]  
  - net/rds: rds_tcp_accept_one ought to not discard messages (Gerd Rausch)  [Orabug: 34488375]  
  - iommu/vt-d: set default value of INTEL_IOMMU_FLOPPY_WA to n (Harshit Mogalapalli)  [Orabug: 34724809]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-5.76.2.el8uek]
changelog:
  - LTS version: v5.15.76 (Jack Vogel)   
  - mm: /proc/pid/smaps_rollup: fix no vma's null-deref (Seth Jenkins)   
  - mmc: core: Add SD card quirk for broken discard (Avri Altman)   
  - Makefile.debug: re-enable debug info for .S files (Nick Desaulniers)   
  - x86/Kconfig: Drop check for -mabi=ms for CONFIG_EFI_STUB (Nathan Chancellor)   
  - ACPI: video: Force backlight native for more TongFang devices (Werner Sembach)   
  - perf: Skip and warn on unknown format 'configN' attrs (Rob Herring)   
  - mmc: sdhci-tegra: Use actual clock rate for SW tuning correction (Prathamesh Shete)   
  - tracing: Do not free snapshot if tracer is on cmdline (Steven Rostedt (Google))   
  - tracing: Simplify conditional compilation code in tracing_set_tracer() (sunliming)   
  - ksmbd: fix incorrect handling of iterate_dir (Namjae Jeon)   
  - ksmbd: handle smb2 query dir request for OutputBufferLength that is too small (Namjae Jeon)   
  - arm64: mte: move register initialization to C (Peter Collingbourne)   
  - fs: dlm: fix invalid derefence of sb_lvbptr (Alexander Aring)   
  - iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar)   
  - iommu/vt-d: Allow NVS regions in arch_rmrr_sanity_check() (Charlotte Tan)   
  - net: phy: dp83822: disable MDI crossover status change interrupt (Felix Riemann)   
  - net: sched: fix race condition in qdisc_graft() (Eric Dumazet)   
  - net: hns: fix possible memory leak in hnae_ae_register() (Yang Yingliang)   
  - wwan_hwsim: fix possible memory leak in wwan_hwsim_dev_new() (Yang Yingliang)   
  - sfc: include vport_id in filter spec hash and equal() (Pieter Jansen van Vuuren)   
  - net: sched: sfb: fix null pointer access issue when sfb_init() fails (Zhengchao Shao)   
  - net: sched: delete duplicate cleanup of backlog and qlen (Zhengchao Shao)   
  - net: sched: cake: fix null pointer access issue when cake_init() fails (Zhengchao Shao)   
  - nvmet: fix workqueue MEM_RECLAIM flushing dependency (Sagi Grimberg)   
  - nvme-hwmon: kmalloc the NVME SMART log buffer (Serge Semin)   
  - nvme-hwmon: consistently ignore errors from nvme_hwmon_init (Christoph Hellwig)   
  - netfilter: nf_tables: relax NFTA_SET_ELEM_KEY_END set flags requirements (Pablo Neira Ayuso)   
  - ionic: catch NULL pointer issue on reconfig (Brett Creeley)   
  - net: hsr: avoid possible NULL deref in skb_clone() (Eric Dumazet)   
  - dm: remove unnecessary assignment statement in alloc_dev() (Genjian Zhang)   
  - cifs: Fix xid leak in cifs_ses_add_channel() (Zhang Xiaoxu)   
  - cifs: Fix xid leak in cifs_flock() (Zhang Xiaoxu)   
  - cifs: Fix xid leak in cifs_copy_file_range() (Zhang Xiaoxu)   
  - cifs: Fix xid leak in cifs_create() (Zhang Xiaoxu)   
  - udp: Update reuse->has_conns under reuseport_lock. (Kuniyuki Iwashima)   
  - scsi: lpfc: Fix memory leak in lpfc_create_port() (Rafael Mendonca)   
  - net: phylink: add mac_managed_pm in phylink_config structure (Shenwei Wang)   
  - net: phy: dp83867: Extend RX strap quirk for SGMII mode (Harini Katakam)   
  - net/atm: fix proc_mpc_write incorrect return value (Xiaobo Liu)   
  - sfc: Change VF mac via PF as first preference if available. (Jonathan Cooper)   
  - HID: magicmouse: Do not set BTN_MOUSE on double report (José Expósito)   
  - i40e: Fix DMA mappings leak (Jan Sokolowski)   
  - tipc: fix an information leak in tipc_topsrv_kern_subscr (Alexander Potapenko)   
  - tipc: Fix recognition of trial period (Mark Tomlinson)   
  - ACPI: extlog: Handle multiple records (Tony Luck)   
  - drm/vc4: Add module dependency on hdmi-codec (Maxime Ripard)   
  - btrfs: fix processing of delayed tree block refs during backref walking (Filipe Manana)   
  - btrfs: fix processing of delayed data refs during backref walking (Filipe Manana)   
  - x86/topology: Fix duplicated core ID within a package (Zhang Rui)   
  - x86/topology: Fix multiple packages shown on a single-package system (Zhang Rui)   
  - media: venus: dec: Handle the case where find_format fails (Bryan O'Donoghue)   
  - media: mceusb: set timeout to at least timeout provided (Sean Young)   
  - media: ipu3-imgu: Fix NULL pointer dereference in active selection access (Sakari Ailus)   
  - KVM: arm64: vgic: Fix exit condition in scan_its_table() (Eric Ren)   
  - kvm: Add support for arch compat vm ioctls (Alexander Graf)   
  - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages (Rik van Riel)   
  - drm/amdgpu: fix sdma doorbell init ordering on APUs (Alex Deucher)   
  - cpufreq: qcom: fix memory leak in error path (Fabien Parent)   
  - x86/resctrl: Fix min_cbm_bits for AMD (Babu Moger)   
  - ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS (Kai-Heng Feng)   
  - ata: ahci-imx: Fix MODULE_ALIAS (Alexander Stein)   
  - hwmon/coretemp: Handle large core ID value (Zhang Rui)   
  - x86/microcode/AMD: Apply the patch early on every logical thread (Borislav Petkov)   
  - i2c: qcom-cci: Fix ordering of pm_runtime_xx and i2c_add_adapter (Bryan O'Donoghue)   
  - cpufreq: qcom: fix writes in read-only memory region (Fabien Parent)   
  - selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context() (GONG, Ruiqi)   
  - ocfs2: fix BUG when iput after ocfs2_mknod fails (Joseph Qi)   
  - ocfs2: clear dinode links count in case of error (Joseph Qi)   
  - btrfs: enhance unsupported compat RO flags handling (Qu Wenruo)   
  - perf/x86/intel/pt: Relax address filter validation (Adrian Hunter)   
  - arm64: errata: Remove AES hwcap for COMPAT tasks (James Morse)   
  - usb: gadget: uvc: improve sg exit condition (Michael Grzeschik)   
  - usb: gadget: uvc: giveback vb2 buffer on req complete (Michael Grzeschik)   
  - usb: gadget: uvc: rework uvcg_queue_next_buffer to uvcg_complete_buffer (Michael Grzeschik)   
  - usb: gadget: uvc: use on returned header len in video_encode_isoc_sg (Michael Grzeschik)   
  - usb: gadget: uvc: consistently use define for headerlen (Michael Grzeschik)   
  - arm64/mm: Consolidate TCR_EL1 fields (Anshuman Khandual)   
  - r8152: add PID for the Lenovo OneLink+ Dock (Jean-Francois Le Fillatre)   
  - LTS version: v5.15.75 (Jack Vogel)   
  - io-wq: Fix memory leak in worker creation (Rafael Mendonca)   
  - gcov: support GCC 12.1 and newer compilers (Martin Liska)   
  - thermal: intel_powerclamp: Use first online CPU as control_cpu (Rafael J. Wysocki)   
  - ext4: continue to expand file system when the target size doesn't reach (Jerry Lee 李修賢)   
  - lib/Kconfig.debug: Add check for non-constant .{s,u}leb128 support to DWARF5 (Nathan Chancellor)   
  - Kconfig.debug: add toolchain checks for DEBUG_INFO_DWARF_TOOLCHAIN_DEFAULT (Masahiro Yamada)   
  - Kconfig.debug: simplify the dependency of DEBUG_INFO_DWARF4/5 (Masahiro Yamada)   
  - drm/amd/display: Fix build breakage with CONFIG_DEBUG_FS=n (Nathan Chancellor)   
  - net/ieee802154: don't warn zero-sized raw_sendmsg() (Tetsuo Handa)   
  - Revert "net/ieee802154: reject zero-sized raw_sendmsg()" (Alexander Aring)   
  - net: ethernet: ti: davinci_mdio: fix build for mdio bitbang uses (Randy Dunlap)   
  - blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() (Yu Kuai)   
  - ALSA: usb-audio: Fix last interface check for registration (Takashi Iwai)   
  - net: ieee802154: return -EINVAL for unknown addr type (Alexander Aring)   
  - mm: hugetlb: fix UAF in hugetlb_handle_userfault (Liu Shixin)   
  - io_uring/rw: fix unexpected link breakage (Pavel Begunkov)   
  - io_uring/rw: fix error'ed retry return values (Pavel Begunkov)   
  - io_uring/rw: fix short rw error handling (Pavel Begunkov)   
  - io_uring: correct pinned_vm accounting (Pavel Begunkov)   
  - io_uring/af_unix: defer registered files gc to io_uring release (Pavel Begunkov)   
  - perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc (Adrian Hunter)   
  - clk: bcm2835: Round UART input clock up (Ivan T. Ivanov)   
  - clk: bcm2835: Make peripheral PLLC critical (Maxime Ripard)   
  - usb: idmouse: fix an uninit-value in idmouse_open (Dongliang Mu)   
  - nvmet-tcp: add bounds check on Transfer Tag (Varun Prakash)   
  - nvme: copy firmware_rev on each init (Keith Busch)   
  - ext2: Use kvmalloc() for group descriptor array (Jan Kara)   
  - scsi: tracing: Fix compile error in trace_array calls when TRACING is disabled (Arun Easi)   
  - staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() (Xiaoke Wang)   
  - staging: rtl8723bs: fix potential memory leak in rtw_init_drv_sw() (Xiaoke Wang)   
  - Revert "usb: storage: Add quirk for Samsung Fit flash" (sunghwan jung)   
  - usb: dwc3: core: Enable GUCTL1 bit 10 for fixing termination error after resume bug (Piyush Mehta)   
  - arm64: dts: imx8mp: Add snps,gfladj-refclk-lpm-sel quirk to USB nodes (Alexander Stein)   
  - usb: musb: Fix musb_gadget.c rxstate overflow bug (Robin Guo)   
  - usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() (Jianglei Nie)   
  - md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d (Logan Gunthorpe)   
  - eventfd: guard wake_up in eventfd fs calls as well (Dylan Yudaken)   
  - HID: roccat: Fix use-after-free in roccat_read() (Hyunwoo Kim)   
  - soundwire: intel: fix error handling on dai registration issues (Pierre-Louis Bossart)   
  - soundwire: cadence: Don't overwrite msg->buf during write commands (Richard Fitzgerald)   
  - bcache: fix set_at_max_writeback_rate() for multiple attached devices (Coly Li)   
  - ata: libahci_platform: Sanity check the DT child nodes number (Serge Semin)   
  - blk-throttle: prevent overflow while calculating wait time (Yu Kuai)   
  - staging: vt6655: fix potential memory leak (Nam Cao)   
  - power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() (Wei Yongjun)   
  - iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (Yicong Yang)   
  - nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (Shigeru Yoshida)   
  - scsi: 3w-9xxx: Avoid disabling device if failing to enable it (Letu Ren)   
  - dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent overflow (Vaishnav Achath)   
  - usb: host: xhci-plat: suspend/resume clks for brcm (Justin Chen)   
  - usb: host: xhci-plat: suspend and resume clocks (Justin Chen)   
  - clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate (Quanyang Wang)   
  - media: platform: fix some double free in meson-ge2d and mtk-jpeg and s5p-mfc (Hangyu Hua)   
  - media: cx88: Fix a null-ptr-deref bug in buffer_prepare() (Zheyu Ma)   
  - clk: zynqmp: Fix stack-out-of-bounds in strncpy` (Ian Nam)   
  - ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n (Alex Sverdlin)   
  - btrfs: don't print information about space cache or tree every remount (Maciej S. Szmigiero)   
  - btrfs: scrub: try to fix super block errors (Qu Wenruo)   
  - btrfs: dump extra info if one free space cache has more bitmaps than it should (Qu Wenruo)   
  - arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply (Sebastian Krzyszkowiak)   
  - kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT (Mark Brown)   
  - ARM: dts: imx6sx: add missing properties for sram (Alexander Stein)   
  - ARM: dts: imx6sll: add missing properties for sram (Alexander Stein)   
  - ARM: dts: imx6sl: add missing properties for sram (Alexander Stein)   
  - ARM: dts: imx6qp: add missing properties for sram (Alexander Stein)   
  - ARM: dts: imx6dl: add missing properties for sram (Alexander Stein)   
  - ARM: dts: imx6q: add missing properties for sram (Alexander Stein)   
  - ARM: dts: imx7d-sdb: config the max pressure for tsc2046 (Haibo Chen)   
  - drm/amd/display: Remove interface for periodic interrupt 1 (Aric Cyr)   
  - drm/dp: Don't rewrite link config when setting phy test pattern (Khaled Almahallawy)   
  - mmc: sdhci-msm: add compatible string check for sdm670 (Richard Acayan)   
  - drm/meson: explicitly remove aggregate driver at module unload time (Adrián Larumbe)   
  - drm/meson: reorder driver deinit sequence to fix use-after-free bug (Adrián Larumbe)   
  - drm/amdgpu: fix initial connector audio value (hongao)   
  - ASoC: SOF: pci: Change DMI match info to support all Chrome platforms (Jairaj Arava)   
  - platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading (Hans de Goede)   
  - platform/chrome: cros_ec: Notify the PM of wake events during resume (Jameson Thies)   
  - drm: panel-orientation-quirks: Add quirk for Anbernic Win600 (Maya Matuszczyk)   
  - drm/vc4: vec: Fix timings for VEC modes (Mateusz Kwiatkowski)   
  - ALSA: usb-audio: Register card at the last interface (Takashi Iwai)   
  - drm: bridge: dw_hdmi: only trigger hotplug event on link change (Lucas Stach)   
  - udmabuf: Set ubuf->sg = NULL if the creation of sg table fails (Vivek Kasireddy)   
  - drm/amd/display: fix overflow on MIN_I64 definition (David Gow)   
  - gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init() (Zeng Jingxiang)   
  - drm/komeda: Fix handling of atomic commits in the atomic_commit_tail hook (Liviu Dudau)   
  - drm: Prevent drm_copy_field() to attempt copying a NULL pointer (Javier Martinez Canillas)   
  - drm: Use size_t type for len variable in drm_copy_field() (Javier Martinez Canillas)   
  - drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() (Jianglei Nie)   
  - r8152: Rate limit overflow messages (Andrew Gaul)   
  - Bluetooth: L2CAP: Fix user-after-free (Luiz Augusto von Dentz)   
  - net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory (Liu Jian)   
  - hwmon: (sht4x) do not overflow clamping operation on 32-bit platforms (Jason A. Donenfeld)   
  - wifi: rt2x00: correctly set BBP register 86 for MT7620 (Daniel Golle)   
  - wifi: rt2x00: set SoC wmac clock register (Daniel Golle)   
  - wifi: rt2x00: set VGC gain for both chains of MT7620 (Daniel Golle)   
  - wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 (Daniel Golle)   
  - wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 (Daniel Golle)   
  - can: bcm: check the result of can_send() in bcm_can_tx() (Ziyang Xuan)   
  - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times (Luiz Augusto von Dentz)   
  - Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() (Tetsuo Handa)   
  - wifi: mt76: mt7921: reset msta->airtime_ac while clearing up hw value (Sean Wang)   
  - regulator: core: Prevent integer underflow (Patrick Rudolph)   
  - Bluetooth: btintel: Mark Intel controller to support LE_STATES quirk (Kiran K)   
  - wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() (Alexander Coffin)   
  - iavf: Fix race between iavf_close and iavf_reset_task (Michal Jaron)   
  - xfrm: Update ipcomp_scratches with NULL when freed (Khalid Masum)   
  - thunderbolt: Add back Intel Falcon Ridge end-to-end flow control workaround (Mika Westerberg)   
  - wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() (Tetsuo Handa)   
  - x86/mce: Retrieve poison range from hardware (Jane Chu)   
  - tcp: annotate data-race around tcp_md5sig_pool_populated (Eric Dumazet)   
  - openvswitch: Fix overreporting of drops in dropwatch (Mike Pattrick)   
  - openvswitch: Fix double reporting of drops in dropwatch (Mike Pattrick)   
  - net: ethernet: ti: davinci_mdio: Add workaround for errata i2329 (Ravi Gunasekaran)   
  - ice: set tx_tstamps when creating new Tx rings via ethtool (Jacob Keller)   
  - bpftool: Clear errno after libcap's checks (Quentin Monnet)   
  - wifi: brcmfmac: fix invalid address access when enabling SCAN log level (Wright Feng)   
  - NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data (Anna Schumaker)   
  - x86/entry: Work around Clang __bdos() bug (Kees Cook)   
  - ACPI: x86: Add a quirk for Dell Inspiron 14 2-in-1 for StorageD3Enable (Mario Limonciello)   
  - ARM: decompressor: Include .data.rel.ro.local (Kees Cook)   
  - thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash (Srinivas Pandruvada)   
  - powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue (Chao Qin)   
  - MIPS: BCM47XX: Cast memcmp() of function to (void *) (Kees Cook)   
  - cpufreq: intel_pstate: Add Tigerlake support in no-HWP mode (Doug Smythies)   
  - ACPI: tables: FPDT: Don't call acpi_os_map_memory() on invalid phys address (Hans de Goede)   
  - ACPI: video: Add Toshiba Satellite/Portege Z830 quirk (Arvid Norlander)   
  - rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE() (Zqiang)   
  - rcu: Back off upon fill_page_cache_func() allocation failure (Michal Hocko)   
  - rcu: Avoid triggering strict-GP irq-work when RCU is idle (Zqiang)   
  - fs: dlm: fix race in lowcomms (Alexander Aring)   
  - selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle (Stefan Berger)   
  - f2fs: fix to account FS_CP_DATA_IO correctly (Chao Yu)   
  - f2fs: fix race condition on setting FI_NO_EXTENT flag (Zhang Qilong)   
  - ACPI: APEI: do not add task_work to kernel thread to avoid memory leak (Shuai Xue)   
  - thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id (Vincent Knecht)   
  - crypto: cavium - prevent integer overflow loading firmware (Dan Carpenter)   
  - crypto: marvell/octeontx - prevent integer overflows (Dan Carpenter)   
  - kbuild: rpm-pkg: fix breakage when V=1 is used (Janis Schoetterl-Glausch)   
  - kbuild: remove the target in signal traps when interrupted (Masahiro Yamada)   
  - tracing/osnoise: Fix possible recursive locking in stop_per_cpu_kthreads (Nico Pache)   
  - tracing: kprobe: Make gen test module work in arm and riscv (Yipeng Zou)   
  - tracing: kprobe: Fix kprobe event gen test module on exit (Yipeng Zou)   
  - iommu/iova: Fix module config properly (Robin Murphy)   
  - cifs: return correct error in ->calc_signature() (Enzo Matsumiya)   
  - crypto: qat - fix DMA transfer direction (Damian Muszynski)   
  - crypto: inside-secure - Change swab to swab32 (Peter Harliman Liem)   
  - crypto: ccp - Release dma channels before dmaengine unrgister (Koba Ko)   
  - crypto: akcipher - default implementation for setting a private key (Ignat Korchagin)   
  - iommu/omap: Fix buffer overflow in debugfs (Dan Carpenter)   
  - cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset (Waiman Long)   
  - crypto: hisilicon/qm - fix missing put dfx access (Weili Qian)   
  - crypto: qat - fix default value of WDT timer (Lucas Segarra Fernandez)   
  - hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear() (Kshitiz Varshney)   
  - cgroup: Honor caller's cgroup NS when resolving path (Michal Koutný)   
  - hwrng: arm-smccc-trng - fix NO_ENTROPY handling (James Cowgill)   
  - crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr (Ye Weihua)   
  - crypto: sahara - don't sleep when in softirq (Zhengchao Shao)   
  - powerpc/pseries/vas: Pass hw_cpu_id to node associativity HCALL (Haren Myneni)   
  - powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe() (Li Huafei)   
  - powerpc: Fix SPE Power ISA properties for e500v1 platforms (Pali Rohár)   
  - powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5 (Nicholas Piggin)   
  - x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition (Vitaly Kuznetsov)   
  - powerpc: Fix fallocate and fadvise64_64 compat parameter combination (Rohan McLure)   
  - powerpc/powernv: add missing of_node_put() in opal_export_attrs() (Zheng Yongjun)   
  - powerpc/pci_dn: Add missing of_node_put() (Liang He)   
  - powerpc/sysdev/fsl_msi: Add missing of_node_put() (Liang He)   
  - powerpc/math_emu/efp: Include module.h (Nathan Chancellor)   
  - powerpc/configs: Properly enable PAPR_SCM in pseries_defconfig (Michael Ellerman)   
  - mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg (Jack Wang)   
  - mailbox: mpfs: account for mbox offsets while sending (Conor Dooley)   
  - mailbox: mpfs: fix handling of the reg property (Conor Dooley)   
  - clk: ast2600: BCLK comes from EPLL (Joel Stanley)   
  - clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe (Miaoqian Lin)   
  - clk: imx: scu: fix memleak on platform_device_add() fails (Lin Yujun)   
  - clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration (Stefan Wahren)   
  - clk: baikal-t1: Add SATA internal ref clock buffer (Serge Semin)   
  - clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent (Serge Semin)   
  - clk: baikal-t1: Fix invalid xGMAC PTP clock divider (Serge Semin)   
  - clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD (Serge Semin)   
  - spmi: pmic-arb: correct duplicate APID to PPID mapping logic (David Collins)   
  - usb: mtu3: fix failed runtime suspend in host only mode (Chunfeng Yun)   
  - dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() (Dave Jiang)   
  - clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent (Chen-Yu Tsai)   
  - mfd: sm501: Add check for platform_driver_register() (Jiasheng Jiang)   
  - mfd: fsl-imx25: Fix check for platform_get_irq() errors (Dan Carpenter)   
  - mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() (Christophe JAILLET)   
  - mfd: lp8788: Fix an error handling path in lp8788_probe() (Christophe JAILLET)   
  - mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() (Christophe JAILLET)   
  - mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() (Christophe JAILLET)   
  - fsi: core: Check error number after calling ida_simple_get (Jiasheng Jiang)   
  - RDMA/rxe: Fix resize_finish() in rxe_queue.c (Bob Pearson)   
  - clk: qcom: gcc-sm6115: Override default Alpha PLL regs (Adam Skladowski)   
  - clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical (Robert Marko)   
  - scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() (Mike Christie)   
  - scsi: iscsi: Run recv path from workqueue (Mike Christie)   
  - scsi: iscsi: Add recv workqueue helpers (Mike Christie)   
  - scsi: iscsi: Rename iscsi_conn_queue_work() (Mike Christie)   
  - scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() (Duoming Zhou)   
  - serial: 8250: Fix restoring termios speed after suspend (Pali Rohár)   
  - firmware: google: Test spinlock on panic path to avoid lockups (Guilherme G. Piccoli)   
  - slimbus: qcom-ngd-ctrl: allow compile testing without QCOM_RPROC_COMMON (Krzysztof Kozlowski)   
  - staging: vt6655: fix some erroneous memory clean-up loops (Nam Cao)   
  - phy: qualcomm: call clk_disable_unprepare in the error handling (Dongliang Mu)   
  - tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown (Sherry Sun)   
  - serial: 8250: Toggle IER bits on only after irq has been set up (Ilpo Järvinen)   
  - drivers: serial: jsm: fix some leaks in probe (Dan Carpenter)   
  - usb: gadget: function: fix dangling pnp_string in f_printer.c (Albert Briscoe)   
  - xhci: Don't show warning for reinit on known broken suspend (Mario Limonciello)   
  - IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers (Daisuke Matsuda)   
  - RDMA/cm: Use SLID in the work completion as the DLID in responder side (Mark Zhang)   
  - md/raid5: Remove unnecessary bio_put() in raid5_read_one_chunk() (David Sloan)   
  - md/raid5: Ensure stripe_fill happens on non-read IO with journal (Logan Gunthorpe)   
  - md: Replace snprintf with scnprintf (Saurabh Sengar)   
  - mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() (Dan Carpenter)   
  - ata: fix ata_id_has_dipm() (Niklas Cassel)   
  - ata: fix ata_id_has_ncq_autosense() (Niklas Cassel)   
  - ata: fix ata_id_has_devslp() (Niklas Cassel)   
  - ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() (Niklas Cassel)   
  - RDMA/siw: Fix QP destroy to wait for all references dropped. (Bernard Metzler)   
  - RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. (Bernard Metzler)   
  - RDMA/srp: Fix srp_abort() (Bart Van Assche)   
  - RDMA/irdma: Align AE id codes to correct flush code and event (Sindhu-Devale)   
  - mtd: rawnand: fsl_elbc: Fix none ECC mode (Pali Rohár)   
  - mtd: rawnand: intel: Remove undocumented compatible string (Martin Blumenstingl)   
  - mtd: rawnand: intel: Read the chip-select line from the correct OF node (Martin Blumenstingl)   
  - phy: phy-mtk-tphy: fix the phy type setting issue (Chunfeng Yun)   
  - phy: amlogic: phy-meson-axg-mipi-pcie-analog: Hold reference returned by of_get_parent() (Liang He)   
  - mtd: devices: docg3: check the return value of devm_ioremap() in the probe (William Dean)   
  - clk: qcom: sm6115: Select QCOM_GDSC (Dang Huynh)   
  - dyndbg: drop EXPORTed dynamic_debug_exec_queries (Jim Cromie)   
  - dyndbg: let query-modname override actual module name (Jim Cromie)   
  - dyndbg: fix module.dyndbg handling (Jim Cromie)   
  - dyndbg: fix static_branch manipulation (Jim Cromie)   
  - dmaengine: hisilicon: Add multi-thread support for a DMA channel (Jie Hai)   
  - dmaengine: hisilicon: Fix CQ head update (Jie Hai)   
  - dmaengine: hisilicon: Disable channels when unregister hisi_dma (Jie Hai)   
  - fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() (Dan Carpenter)   
  - misc: ocxl: fix possible refcount leak in afu_ioctl() (Hangyu Hua)   
  - RDMA/rxe: Fix the error caused by qp->sk (Zhu Yanjun)   
  - RDMA/rxe: Fix "kernel NULL pointer dereference" error (Zhu Yanjun)   
  - media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init (Miaoqian Lin)   
  - media: uvcvideo: Use entity get_cur in uvc_ctrl_set (Yunke Cao)   
  - media: uvcvideo: Fix memory leak in uvc_gpio_parse (José Expósito)   
  - media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start() (Xu Qiang)   
  - tty: xilinx_uartps: Fix the ignore_status (Shubhrajyoti Datta)   
  - media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop (Liang He)   
  - HSI: omap_ssi_port: Fix dma_map_sg error check (Jack Wang)   
  - HSI: omap_ssi: Fix refcount leak in ssi_probe (Miaoqian Lin)   
  - clk: tegra20: Fix refcount leak in tegra20_clock_init (Miaoqian Lin)   
  - clk: tegra: Fix refcount leak in tegra114_clock_init (Miaoqian Lin)   
  - clk: tegra: Fix refcount leak in tegra210_clock_init (Miaoqian Lin)   
  - clk: sprd: Hold reference returned by of_get_parent() (Liang He)   
  - clk: berlin: Add of_node_put() for of_get_parent() (Liang He)   
  - clk: qoriq: Hold reference returned by of_get_parent() (Liang He)   
  - clk: oxnas: Hold reference returned by of_get_parent() (Liang He)   
  - clk: meson: Hold reference returned by of_get_parent() (Liang He)   
  - usb: common: debug: Check non-standard control requests (Thinh Nguyen)   
  - RDMA/mlx5: Don't compare mkey tags in DEVX indirect mkey (Aharon Landau)   
  - iio: magnetometer: yas530: Change data type of hard_offsets to signed (Jakob Hauser)   
  - iio: ABI: Fix wrong format of differential capacitance channel ABI. (Jonathan Cameron)   
  - iio: inkern: fix return value in devm_of_iio_channel_get_by_name() (Nuno Sá)   
  - iio: inkern: only release the device node when done with it (Nuno Sá)   
  - iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume (Claudiu Beznea)   
  - iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq (Claudiu Beznea)   
  - iio: adc: at91-sama5d2_adc: check return status for pressure and touch (Claudiu Beznea)   
  - iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX (Claudiu Beznea)   
  - ARM: dts: exynos: fix polarity of VBUS GPIO of Origen (Dmitry Torokhov)   
  - arm64: ftrace: fix module PLTs with mcount (Mark Rutland)   
  - ext4: don't run ext4lazyinit for read-only filesystems (Josh Triplett)   
  - ARM: Drop CMDLINE_* dependency on ATAGS (Geert Uytterhoeven)   
  - ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family (Dmitry Torokhov)   
  - arm64: dts: ti: k3-j7200: fix main pinmux range (Matt Ranostay)   
  - soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA (Dmitry Osipenko)   
  - ia64: export memory_add_physaddr_to_nid to fix cxl build error (Randy Dunlap)   
  - ARM: dts: kirkwood: lsxl: remove first ethernet port (Michael Walle)   
  - ARM: dts: kirkwood: lsxl: fix serial line (Michael Walle)   
  - ARM: dts: turris-omnia: Fix mpp26 pin name and comment (Marek Behún)   
  - ARM: dts: imx6qdl-kontron-samx6i: hook up DDC i2c bus (Lucas Stach)   
  - soc: qcom: smem_state: Add refcounting for the 'state->of_node' (Liang He)   
  - soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() (Liang He)   
  - locks: fix TOCTOU race when granting write lease (Amir Goldstein)   
  - memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() (Liang He)   
  - memory: of: Fix refcount leak bug in of_get_ddr_timings() (Liang He)   
  - memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() (Liang He)   
  - ALSA: hda/hdmi: Don't skip notification handling during PM operation (Takashi Iwai)   
  - ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe (Zhang Qilong)   
  - ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe (Zhang Qilong)   
  - ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe (Zhang Qilong)   
  - ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe (Zhang Qilong)   
  - mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() (Christophe JAILLET)   
  - ALSA: dmaengine: increment buffer pointer atomically (Andreas Pape)   
  - ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() (Christophe JAILLET)   
  - ASoC: codecs: tx-macro: fix kcontrol put (Srinivas Kandagatla)   
  - drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() (Rafael Mendonca)   
  - drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa() (Kuogee Hsieh)   
  - drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx (Dmitry Baryshkov)   
  - ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API (Liang He)   
  - mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() (Christophe JAILLET)   
  - drm/amdgpu: Fix memory leak in hpd_rx_irq_create_workqueue() (Rafael Mendonca)   
  - drm/omap: dss: Fix refcount leak bugs (Liang He)   
  - drm/bochs: fix blanking (Gerd Hoffmann)   
  - ALSA: hda: beep: Simplify keep-power-at-enable behavior (Takashi Iwai)   
  - ASoC: rsnd: Add check for rsnd_mod_power_on (Jiasheng Jiang)   
  - drm/bridge: megachips: Fix a null pointer dereference bug (Zheyu Ma)   
  - drm/amdgpu: add missing pci_disable_device() in amdgpu_pmops_runtime_resume() (Yang Yingliang)   
  - platform/chrome: cros_ec_typec: Correct alt mode index (Prashant Malani)   
  - platform/x86: msi-laptop: Fix resource cleanup (Hans de Goede)   
  - platform/x86: msi-laptop: Fix old-ec check for backlight registering (Hans de Goede)   
  - ASoC: tas2764: Fix mute/unmute (Martin Povišer)   
  - ASoC: tas2764: Drop conflicting set_bias_level power setting (Martin Povišer)   
  - ASoC: tas2764: Allow mono streams (Martin Povišer)   
  - platform/chrome: fix memory corruption in ioctl (Dan Carpenter)   
  - platform/chrome: fix double-free in chromeos_laptop_prepare() (Rustam Subkhankulov)   
  - ASoC: mt6359: fix tests for platform_get_irq() failure (Dan Carpenter)   
  - drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node() (Liang He)   
  - drm/dp_mst: fix drm_dp_dpcd_read return value checks (Simon Ser)   
  - drm/bridge: parade-ps8640: Fix regulator supply order (Chen-Yu Tsai)   
  - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling (Dmitry Osipenko)   
  - drm/mipi-dsi: Detach devices when removing the host (Maxime Ripard)   
  - drm/bridge: Avoid uninitialized variable warning (Dan Carpenter)   
  - drm: bridge: adv7511: unregister cec i2c device after cec adapter (Alvin Šipraga)   
  - drm: bridge: adv7511: fix CEC power down control register offset (Alvin Šipraga)   
  - net: mvpp2: fix mvpp2 debugfs leak (Russell King (Oracle))   
  - once: add DO_ONCE_SLOW() for sleepable contexts (Eric Dumazet)   
  - net/ieee802154: reject zero-sized raw_sendmsg() (Tetsuo Handa)   
  - net: wwan: iosm: Call mutex_init before locking it (Maxim Mikityanskiy)   
  - bnx2x: fix potential memory leak in bnx2x_tpa_stop() (Jianglei Nie)   
  - hwmon: (pmbus/mp2888) Fix sensors readouts for MPS Multi-phase mp2888 controller (Oleksandr Shamray)   
  - spi: Ensure that sg_table won't be used after being freed (Marek Szyprowski)   
  - tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited (Neal Cardwell)   
  - sctp: handle the error returned from sctp_auth_asoc_init_active_key (Xin Long)   
  - mISDN: fix use-after-free bugs in l1oip timer handlers (Duoming Zhou)   
  - eth: alx: take rtnl_lock on resume (Jakub Kicinski)   
  - vhost/vsock: Use kvmalloc/kvfree for larger packets. (Junichi Uekawa)   
  - wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM (Bitterblue Smith)   
  - spi: s3c64xx: Fix large transfers with DMA (Vincent Whitchurch)   
  - netfilter: nft_fib: Fix for rpath check with VRF devices (Phil Sutter)   
  - xfrm: Reinject transport-mode packets through workqueue (Liu Jian)   
  - Bluetooth: hci_core: Fix not handling link timeouts propertly (Luiz Augusto von Dentz)   
  - i2c: mlxbf: support lock mechanism (Asmaa Mnebhi)   
  - skmsg: Schedule psock work if the cached skb exists on the psock (Liu Jian)   
  - spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe (Zhang Qilong)   
  - spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe (Zhang Qilong)   
  - x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype (Luciano Leão)   
  - x86/microcode/AMD: Track patch allocation size explicitly (Kees Cook)   
  - wifi: ath11k: fix number of VHT beamformee spatial streams (Jesus Fernandez Manzano)   
  - netfilter: conntrack: revisit the gc initial rescheduling bias (Antoine Tenart)   
  - netfilter: conntrack: fix the gc rescheduling delay (Antoine Tenart)   
  - Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure (Tetsuo Handa)   
  - bpf: Ensure correct locking around vulnerable function find_vpid() (Lee Jones)   
  - net: fs_enet: Fix wrong check in do_pd_setup (Zheng Yongjun)   
  - Bluetooth: RFCOMM: Fix possible deadlock on socket shutdown/release (Luiz Augusto von Dentz)   
  - wifi: mt76: mt7915: do not check state before configuring implicit beamform (Howard Hsu)   
  - wifi: mt76: mt7615: add mt7615_mutex_acquire/release in mt7615_sta_set_decap_offload (Lorenzo Bianconi)   
  - wifi: mt76: sdio: fix transmitting packet hangs (YN Chen)   
  - wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask (Bitterblue Smith)   
  - wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration (Bitterblue Smith)   
  - bpf: btf: fix truncated last_member_type_id in btf_struct_resolve (Lorenz Bauer)   
  - spi: meson-spicc: do not rely on busy flag in pow2 clk ops (Neil Armstrong)   
  - wifi: rtl8xxxu: Fix skb misuse in TX queue selection (Bitterblue Smith)   
  - spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() (Xu Qiang)   
  - spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() (Xu Qiang)   
  - selftests/xsk: Avoid use-after-free on ctx (Ian Rogers)   
  - wifi: rtw88: add missing destroy_workqueue() on error path in rtw_core_init() (Yang Yingliang)   
  - wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() (Dan Carpenter)   
  - Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend (Sean Wang)   
  - bpf: Use this_cpu_{inc|dec|inc_return} for bpf_task_storage_busy (Hou Tao)   
  - bpf: Propagate error from htab_lock_bucket() to userspace (Hou Tao)   
  - bpf: Disable preemption when increasing per-cpu map_locked (Hou Tao)   
  - xsk: Fix backpressure mechanism on Tx (Maciej Fijalkowski)   
  - x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register (Kohei Tarumizu)   
  - spi: mt7621: Fix an error message in mt7621_spi_probe() (Christophe JAILLET)   
  - bpftool: Fix a wrong type cast in btf_dumper_int (Lam Thai)   
  - wifi: mac80211: allow bw change during channel switch in mesh (Hari Chandrakanthan)   
  - bpf: Fix reference state management for synchronous callbacks (Kumar Kartikeya Dwivedi)   
  - leds: lm3601x: Don't use mutex after it was destroyed (Uwe Kleine-König)   
  - wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() (Wen Gong)   
  - wifi: rtlwifi: 8192de: correct checking of IQK reload (Ping-Ke Shih)   
  - NFSD: Fix handling of oversized NFSv4 COMPOUND requests (Chuck Lever)   
  - NFSD: Protect against send buffer overflow in NFSv2 READDIR (Chuck Lever)   
  - SUNRPC: Fix svcxdr_init_encode's buflen calculation (Chuck Lever)   
  - SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Chuck Lever)   
  - nfsd: Fix a memory leak in an error handling path (Christophe JAILLET)   
  - objtool: Preserve special st_shndx indexes in elf_update_symbol (Sami Tolvanen)   
  - ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE (Wang Kefeng)   
  - ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd() (Wang Kefeng)   
  - MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create() (Lin Yujun)   
  - MIPS: SGI-IP27: Free some unused memory (Christophe JAILLET)   
  - sh: machvec: Use char[] for section boundaries (Kees Cook)   
  - thermal: cpufreq_cooling: Check the policy first in cpufreq_cooling_register() (Xuewen Yan)   
  - ntfs3: rework xattr handlers and switch to POSIX ACL VFS helpers (Christian Brauner)   
  - userfaultfd: open userfaultfds with O_RDONLY (Ondrej Mosnacek)   
  - ima: fix blocking of security.ima xattrs of unsupported algorithms (Mimi Zohar)   
  - selinux: use "grep -E" instead of "egrep" (Greg Kroah-Hartman)   
  - smb3: must initialize two ACL struct fields to zero (Steve French)   
  - drm/amd/display: Fix vblank refcount in vrr transition (Yunxiang Li)   
  - drm/i915: Fix watermark calculations for gen12+ CCS+CC modifier (Ville Syrjälä)   
  - drm/i915: Fix watermark calculations for gen12+ MC CCS modifier (Ville Syrjälä)   
  - drm/i915: Fix watermark calculations for gen12+ RC CCS modifier (Ville Syrjälä)   
  - drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() (Jianglei Nie)   
  - drm/nouveau/kms/nv140-: Disable interlacing (Lyude Paul)   
  - staging: greybus: audio_helper: remove unused and wrong debugfs usage (Greg Kroah-Hartman)   
  - KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS (Sean Christopherson)   
  - KVM: nVMX: Don't propagate vmcs12's PERF_GLOBAL_CTRL settings to vmcs02 (Sean Christopherson)   
  - KVM: nVMX: Unconditionally purge queued/injected events on nested "exit" (Sean Christopherson)   
  - KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility (Michal Luczaj)   
  - blk-wbt: call rq_qos_add() after wb_normal is initialized (Yu Kuai)   
  - media: cedrus: Fix endless loop in cedrus_h265_skip_bits() (Dmitry Osipenko)   
  - media: cedrus: Set the platform driver data earlier (Dmitry Osipenko)   
  - efi: libstub: drop pointless get_memory_map() call (Ard Biesheuvel)   
  - thunderbolt: Explicitly enable lane adapter hotplug events at startup (Mario Limonciello)   
  - tracing: Fix reading strings from synthetic events (Steven Rostedt (Google))   
  - tracing: Add "(fault)" name injection to kernel probes (Steven Rostedt (Google))   
  - tracing: Move duplicate code of trace_kprobe/eprobe.c into header (Steven Rostedt (Google))   
  - tracing: Add ioctl() to force ring buffer waiters to wake up (Steven Rostedt (Google))   
  - tracing: Wake up waiters when tracing is disabled (Steven Rostedt (Google))   
  - tracing: Wake up ring buffer waiters on closing of the file (Steven Rostedt (Google))   
  - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (Waiman Long)   
  - ring-buffer: Fix race between reset page and reading page (Steven Rostedt (Google))   
  - ring-buffer: Add ring_buffer_wake_waiters() (Steven Rostedt (Google))   
  - ring-buffer: Check pending waiters when doing wake ups as well (Steven Rostedt (Google))   
  - ring-buffer: Have the shortest_full queue be the shortest not longest (Steven Rostedt (Google))   
  - ring-buffer: Allow splice to read previous partially read pages (Steven Rostedt (Google))   
  - ftrace: Properly unset FTRACE_HASH_FL_MOD (Zheng Yejian)   
  - livepatch: fix race between fork and KLP transition (Rik van Riel)   
  - ext4: update 'state->fc_regions_size' after successful memory allocation (Ye Bin)   
  - ext4: fix potential memory leak in ext4_fc_record_regions() (Ye Bin)   
  - ext4: fix potential memory leak in ext4_fc_record_modified_inode() (Ye Bin)   
  - ext4: fix miss release buffer head in ext4_fc_write_inode (Ye Bin)   
  - ext4: fix dir corruption when ext4_dx_add_entry() fails (Zhihao Cheng)   
  - ext4: place buffer head allocation before handle start (Jinke Han)   
  - ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate (Zhang Yi)   
  - ext4: don't increase iversion counter for ea_inodes (Lukas Czerner)   
  - ext4: fix check for block being out of directory size (Jan Kara)   {CVE-2022-1184} 
  - ext4: make ext4_lazyinit_thread freezable (Lalith Rajendran)   
  - ext4: fix null-ptr-deref in ext4_write_info (Baokun Li)   
  - ext4: avoid crash when inline data creation follows DIO write (Jan Kara)   
  - jbd2: add miss release buffer head in fc_do_one_pass() (Ye Bin)   
  - jbd2: fix potential use-after-free in jbd2_fc_wait_bufs (Ye Bin)   
  - jbd2: fix potential buffer head reference count leak (Ye Bin)   
  - jbd2: wake up journal waiters in FIFO order, not LIFO (Andrew Perepechko)   
  - hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero (Kees Cook)   
  - hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO (Kees Cook)   
  - f2fs: fix to do sanity check on summary info (Chao Yu)   
  - f2fs: fix to do sanity check on destination blkaddr during recovery (Chao Yu)   
  - f2fs: increase the limit for reserve_root (Jaegeuk Kim)   
  - f2fs: flush pending checkpoints when freezing super (Jaegeuk Kim)   
  - f2fs: complete checkpoints during remount (Jaegeuk Kim)   
  - btrfs: set generation before calling btrfs_clean_tree_block in btrfs_init_new_buffer (Tetsuo Handa)   
  - btrfs: fix race between quota enable and quota rescan ioctl (Filipe Manana)   
  - fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE (Lukas Czerner)   
  - ksmbd: Fix user namespace mapping (Mickaël Salaün)   
  - ksmbd: Fix wrong return value and message length check in smb2_ioctl() (Zhang Xiaoxu)   
  - ksmbd: fix endless loop when encryption for response fails (Namjae Jeon)   
  - fbdev: smscufx: Fix use-after-free in ufx_ops_open() (Hyunwoo Kim)   
  - pinctrl: rockchip: add pinmux_ops.gpio_set_direction callback (Quentin Schulz)   
  - gpio: rockchip: request GPIO mux to pinctrl when setting direction (Quentin Schulz)   
  - scsi: qedf: Populate sysfs attributes for vport (Saurav Kashyap)   
  - slimbus: qcom-ngd: cleanup in probe error path (Krzysztof Kozlowski)   
  - slimbus: qcom-ngd: use correct error in message of pdr_add_lookup() failure (Krzysztof Kozlowski)   
  - powerpc/boot: Explicitly disable usage of SPE instructions (Pali Rohár)   
  - powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain (Zhang Rui)   
  - NFSD: Protect against send buffer overflow in NFSv3 READ (Chuck Lever)   
  - NFSD: Protect against send buffer overflow in NFSv2 READ (Chuck Lever)   
  - NFSD: Protect against send buffer overflow in NFSv3 READDIR (Chuck Lever)   
  - serial: 8250: Request full 16550A feature probing for OxSemi PCIe devices (Maciej W. Rozycki)   
  - serial: 8250: Let drivers request full 16550A feature probing (Maciej W. Rozycki)   
  - PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge (Maciej W. Rozycki)   
  - xen/gntdev: Accommodate VMA splitting (M. Vefa Bicakci)   
  - xen/gntdev: Prevent leaking grants (M. Vefa Bicakci)   
  - mm/mmap: undo ->mmap() when arch_validate_flags() fails (Carlos Llamas)   
  - mm/damon: validate if the pmd entry is present before accessing (Baolin Wang)   
  - arm64: errata: Add Cortex-A55 to the repeat tlbi list (James Morse)   
  - drm/udl: Restore display mode on resume (Takashi Iwai)   
  - drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() (Dmitry Osipenko)   
  - drm/virtio: Unlock reservations on virtio_gpu_object_shmem_init() error (Dmitry Osipenko)   
  - drm/virtio: Check whether transferred 2D BO is shmem (Dmitry Osipenko)   
  - dmaengine: mxs: use platform_driver_register (Dario Binacchi)   
  - Revert "drm/amdgpu: use dirty framebuffer helper" (Hamza Mahfooz)   
  - nvme-pci: set min_align_mask before calculating max_hw_sectors (Rishabh Bhatnagar)   
  - nvme-multipath: fix possible hang in live ns resize with ANA access (Sagi Grimberg)   
  - nvmem: core: Fix memleak in nvmem_register() (Gaosheng Cui)   
  - UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen)   
  - riscv: Pass -mno-relax only on lld < 15.0.0 (Fangrui Song)   
  - riscv: always honor the CONFIG_CMDLINE_FORCE when parsing dtb (Wenting Zhang)   
  - riscv: Make VM_WRITE imply VM_READ (Andrew Bresticker)   
  - riscv: Allow PROT_WRITE-only mmap() (Andrew Bresticker)   
  - parisc: fbdev/stifb: Align graphics memory size to 4MB (Helge Deller)   
  - RISC-V: Make port I/O string accessors actually work (Maciej W. Rozycki)   
  - riscv: topology: fix default topology reporting (Conor Dooley)   
  - arm64: topology: move store_cpu_topology() to shared code (Conor Dooley)   
  - regulator: qcom_rpm: Fix circular deferral regression (Linus Walleij)   
  - net: thunderbolt: Enable DMA paths only after rings are enabled (Mika Westerberg)   
  - hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API (Liang He)   
  - ASoC: wcd934x: fix order of Slimbus unprepare/disable (Krzysztof Kozlowski)   
  - ASoC: wcd9335: fix order of Slimbus unprepare/disable (Krzysztof Kozlowski)   
  - platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure (Patryk Duda)   
  - quota: Check next/prev free block number after reading from quota file (Zhihao Cheng)   
  - HID: multitouch: Add memory barriers (Andri Yngvason)   
  - fs: dlm: handle -EBUSY first in lock arg validation (Alexander Aring)   
  - fs: dlm: fix race between test_bit() and queue_work() (Alexander Aring)   
  - i2c: designware: Fix handling of real but unexpected device interrupts (Jarkko Nikula)   
  - mmc: sdhci-sprd: Fix minimum clock limit (Wenchao Chen)   
  - can: kvaser_usb_leaf: Fix CAN state after restart (Anssi Hannula)   
  - can: kvaser_usb_leaf: Fix TX queue out of sync after restart (Anssi Hannula)   
  - can: kvaser_usb_leaf: Fix overread with an invalid command (Anssi Hannula)   
  - can: kvaser_usb: Fix use of uninitialized completion (Anssi Hannula)   
  - usb: add quirks for Lenovo OneLink+ Dock (Jean-Francois Le Fillatre)   
  - xhci: dbc: Fix memory leak in xhci_alloc_dbc() (Rafael Mendonca)   
  - iio: pressure: dps310: Reset chip after timeout (Eddie James)   
  - iio: pressure: dps310: Refactor startup procedure (Eddie James)   
  - iio: adc: ad7923: fix channel readings for some variants (Nuno Sá)   
  - iio: ltc2497: Fix reading conversion results (Uwe Kleine-König)   
  - iio: dac: ad5593r: Fix i2c read protocol requirements (Michael Hennerich)   
  - cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message (Zhang Xiaoxu)   
  - cifs: destage dirty pages before re-reading them for cache=none (Ronnie Sahlberg)   
  - hv_netvsc: Fix race between VF offering and VF association message from host (Gaurav Kohli)   
  - io_uring/net: don't update msg_name if not provided (Pavel Begunkov)   
  - mtd: rawnand: atmel: Unmap streaming DMA mappings (Tudor Ambarus)   
  - ALSA: hda/realtek: Add Intel Reference SSID to support headset keys (Saranya Gopal)   
  - ALSA: hda/realtek: Add quirk for ASUS GV601R laptop (Luke D. Jones)   
  - ALSA: hda/realtek: Correct pin configs for ASUS G533Z (Luke D. Jones)   
  - ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530 (Callum Osmotherly)   
  - ALSA: usb-audio: Fix NULL dererence at error path (Takashi Iwai)   
  - ALSA: usb-audio: Fix potential memory leaks (Takashi Iwai)   
  - ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() (Takashi Iwai)   
  - ALSA: oss: Fix potential deadlock at unregistration (Takashi Iwai)   
  - Revert "fs: check FMODE_LSEEK to control internal pipe splicing" (Sasha Levin)   
  - LTS version: v5.15.74 (Jack Vogel)   
  - wifi: mac80211: fix MBSSID parsing use-after-free (Johannes Berg)   
  - mac80211: fix memory leaks with element parsing (Johannes Berg)   
  - mac80211: always allocate struct ieee802_11_elems (Johannes Berg)   
  - mac80211: mlme: find auth challenge directly (Johannes Berg)   
  - mac80211: move CRC into struct ieee802_11_elems (Johannes Berg)   
  - mac80211: mesh: clean up rx_bcn_presp API (Johannes Berg)   
  - misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic (Shunsuke Mie)   
  - misc: pci_endpoint_test: Aggregate params checking for xfer (Shunsuke Mie)   
  - Input: xpad - fix wireless 360 controller breaking after suspend (Cameron Gutman)   
  - Input: xpad - add supported devices as contributed on github (Pavel Rojtberg)   
  - wifi: cfg80211: update hidden BSSes to avoid WARN_ON (Johannes Berg)   
  - wifi: mac80211: fix crash in beacon protection for P2P-device (Johannes Berg)   
  - wifi: mac80211_hwsim: avoid mac80211 warning on bad rate (Johannes Berg)   
  - wifi: cfg80211: avoid nontransmitted BSS list corruption (Johannes Berg)   
  - wifi: cfg80211: fix BSS refcounting bugs (Johannes Berg)   
  - wifi: cfg80211: ensure length byte is present before access (Johannes Berg)   
  - wifi: cfg80211/mac80211: reject bad MBSSID elements (Johannes Berg)   
  - wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() (Johannes Berg)   
  - Revert "crypto: qat - reduce size of mapped region" (Giovanni Cabiddu)   
  - Revert "powerpc/rtas: Implement reentrant rtas call" (Nathan Lynch)   
  - USB: serial: qcserial: add new usb-id for Dell branded EM7455 (Frank Wunderlich)   
  - scsi: stex: Properly zero out the passthrough command structure (Linus Torvalds)   
  - efi: Correct Macmini DMI match in uefi cert quirk (Orlando Chamberlain)   
  - ALSA: hda: Fix position reporting on Poulsbo (Takashi Iwai)   
  - random: clamp credited irq bits to maximum mixed (Jason A. Donenfeld)   
  - random: restore O_NONBLOCK support (Jason A. Donenfeld)   
  - ceph: don't truncate file in atomic_open (Hu Weiwen)   
  - nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure (Ryusuke Konishi)   
  - nilfs2: fix leak of nilfs_root in case of writer thread creation failure (Ryusuke Konishi)   
  - nilfs2: fix use-after-free bug of struct nilfs_root (Ryusuke Konishi)   
  - nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() (Ryusuke Konishi)   
  - LTS version: v5.15.73 (Jack Vogel)   
  - Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5" (Sasha Levin)   
  - rpmsg: qcom: glink: replace strncpy() with strscpy_pad() (Krzysztof Kozlowski)   
  - USB: serial: ftdi_sio: fix 300 bps rate for SIO (Johan Hovold)   
  - usb: mon: make mmapped memory read only (Tadeusz Struk)   
  - net/mlx5: Disable irq when locking lag_lock (Vlad Buslov)   
  - wifi: cfg80211: fix MCS divisor value (Tamizh Chelvam Raja)   
  - mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all() (Naoya Horiguchi)   
  - mm/huge_memory: minor cleanup for split_huge_pages_all (Miaohe Lin)   
  - perf parse-events: Identify broken modifiers (Ian Rogers)   
  - mmc: core: Terminate infinite loop in SD-UHS voltage switch (Brian Norris)   
  - mmc: core: Replace with already defined values for readability (ChanWoo Lee)   
  - drm/amd/display: skip audio setup when audio stream is enabled (zhikzhai)   
  - drm/amd/display: update gamut remap if plane has changed (Hugo Hu)   
  - drm/amd/display: Assume an LTTPR is always present on fixed_vs links (Michael Strauss)   
  - drm/amd/display: Fix double cursor on non-video RGB MPO (Leo Li)   
  - net: atlantic: fix potential memory leak in aq_ndev_close() (Jianglei Nie)   
  - arch: um: Mark the stack non-executable to fix a binutils warning (David Gow)   
  - um: Cleanup compiler warning in arch/x86/um/tls_32.c (Lukas Straub)   
  - um: Cleanup syscall_handler_t cast in syscalls_32.h (Lukas Straub)   
  - ALSA: hda/hdmi: Fix the converter reuse for the silent stream (Jaroslav Kysela)   
  - net: marvell: prestera: add support for for Aldrin2 (Oleksandr Mazur)   
  - net/ieee802154: fix uninit value bug in dgram_sendmsg (Haimin Zhang)   
  - scsi: qedf: Fix a UAF bug in __qedf_probe() (Letu Ren)   
  - ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer (Sergei Antonov)   
  - dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure (Swati Agarwal)   
  - dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property (Swati Agarwal)   
  - dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling (Swati Agarwal)   
  - firmware: arm_scmi: Add SCMI PM driver remove routine (Cristian Marussi)   
  - firmware: arm_scmi: Harden accesses to the sensor domains (Cristian Marussi)   
  - firmware: arm_scmi: Improve checks in the info_get operations (Cristian Marussi)   
  - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Dongliang Mu)   
  - powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush (Yang Shi)   
  - mm: gup: fix the fast GUP race against THP collapse (Yang Shi)   
  - xsk: Inherit need_wakeup flag for shared sockets (Jalal Mostafa)   
  - docs: update mediator information in CoC docs (Shuah Khan)   
  - Makefile.extrawarn: Move -Wcast-function-type-strict to W=1 (Sami Tolvanen)   
  - LTS version: v5.15.72 (Jack Vogel)   
  - drm/i915/gem: Really move i915_gem_context.link under ref protection (Chris Wilson)   
  - x86/alternative: Fix race in try_get_desc() (Nadav Amit)   
  - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Jim Mattson)   
  - clk: iproc: Do not rely on node name for correct PLL setup (Florian Fainelli)   
  - clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks (Han Xu)   
  - fs: split off setxattr_copy and do_setxattr function from setxattr (Stefan Roesch)   
  - vdpa/ifcvf: fix the calculation of queuepair (Angus Chen)   
  - selftests: Fix the if conditions of in test_extra_filter() (Wang Yufen)   
  - net: phy: Don't WARN for PHY_UP state in mdio_bus_phy_resume() (Lukas Wunner)   
  - net: stmmac: power up/down serdes in stmmac_open/release (Junxiao Chang)   
  - wifi: mac80211: fix regression with non-QoS drivers (Hans de Goede)   
  - nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices (Michael Kelley)   
  - net/mlxbf_gige: Fix an IS_ERR() vs NULL bug in mlxbf_gige_mdio_probe (Peng Wu)   
  - cxgb4: fix missing unlock on ETHOFLD desc collect fail path (Rafael Mendonca)   
  - net: sched: act_ct: fix possible refcount leak in tcf_ct_init() (Hangyu Hua)   
  - usbnet: Fix memory leak in usbnet_disconnect() (Peilin Ye)   
  - gpio: mvebu: Fix check for pwm support on non-A8K platforms (Pali Rohár)   
  - Input: melfas_mip4 - fix return value check in mip4_probe() (Yang Yingliang)   
  - Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time" (Brian Norris)   
  - drm/bridge: lt8912b: fix corrupted image output (Francesco Dolcini)   
  - drm/bridge: lt8912b: set hdmi or dvi mode (Philippe Schenker)   
  - drm/bridge: lt8912b: add vsync hsync (Philippe Schenker)   
  - ASoC: tas2770: Reinit regcache on reset (Martin Povišer)   
  - arm64: dts: qcom: sm8350: fix UFS PHY serdes size (Johan Hovold)   
  - ASoC: imx-card: Fix refcount issue with of_node_put (Shengjiu Wang)   
  - soc: sunxi: sram: Fix debugfs info for A64 SRAM C (Samuel Holland)   
  - soc: sunxi: sram: Fix probe function ordering issues (Samuel Holland)   
  - soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource() (Cai Huoqing)   
  - soc: sunxi: sram: Prevent the driver from being unbound (Samuel Holland)   
  - soc: sunxi: sram: Actually claim SRAM regions (Samuel Holland)   
  - ARM: dts: am5748: keep usb4_tm disabled (Romain Naour)   
  - reset: imx7: Fix the iMX8MP PCIe PHY PERST support (Richard Zhu)   
  - ARM: dts: am33xx: Fix MMCHS0 dma properties (YuTong Chang)   
  - swiotlb: max mapping size takes min align mask into account (Tianyu Lan)   
  - media: v4l2-compat-ioctl32.c: zero buffer passed to v4l2_compat_get_array_args() (Hans Verkuil)   
  - media: rkvdec: Disable H.264 error detection (Nicolas Dufresne)   
  - media: dvb_vb2: fix possible out of bound access (Hangyu Hua)   
  - mm,hwpoison: check mm when killing accessing process (Shuai Xue)   
  - mm: fix madivse_pageout mishandling on non-LRU page (Minchan Kim)   
  - mm/migrate_device.c: flush TLB while holding PTL (Alistair Popple)   
  - mm: fix dereferencing possible ERR_PTR (Binyi Han)   
  - mm: prevent page_frag_alloc() from corrupting the memory (Maurizio Lombardi)   
  - mm/page_alloc: fix race condition between build_all_zonelists and page allocation (Mel Gorman)   
  - mmc: hsq: Fix data stomping during mmc recovery (Wenchao Chen)   
  - mmc: moxart: fix 4-bit bus width and remove 8-bit bus width (Sergei Antonov)   
  - libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205 (Niklas Cassel)   
  - vduse: prevent uninitialized memory accesses (Maxime Coquelin)   
  - drm/amdgpu: Add amdgpu suspend-resume code path under SRIOV (Bokun Zhang)   
  - drm/i915/gt: Restrict forced preemption to the active context (Chris Wilson)   
  - Revert "firmware: arm_scmi: Add clock management to the SCMI power domain" (Ulf Hansson)   
  - net: mt7531: only do PLL once after the reset (Alexander Couzens)   
  - mm/damon/dbgfs: fix memory leak when using debugfs_lookup() (Greg Kroah-Hartman)   
  - ntfs: fix BUG_ON in ntfs_lookup_inode_by_name() (ChenXiaoSong)   
  - ARM: dts: integrator: Tag PCI host with device_type (Linus Walleij)   
  - x86/sgx: Do not fail on incomplete sanitization on premature stop of ksgxd (Jarkko Sakkinen)   
  - clk: ingenic-tcu: Properly enable registers before accessing timers (Aidan MacDonald)   
  - can: c_can: don't cache TX messages for C_CAN cores (Marc Kleine-Budde)   
  - Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address (Sebastian Krzyszkowiak)   
  - net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455 (Frank Wunderlich)   
  - thunderbolt: Explicitly reset plug events delay back to USB4 spec value (Mario Limonciello)   
  - usb: typec: ucsi: Remove incorrect warning (Heikki Krogerus)   
  - uas: ignore UAS for Thinkplus chips (Hongling Zeng)   
  - usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS (Hongling Zeng)   
  - uas: add no-uas quirk for Hiksemi usb_disk (Hongling Zeng)   
  - cgroup: cgroup_get_from_id() must check the looked-up kn is a directory (Ming Lei)   
  - cgroup: reduce dependency on cgroup_mutex (Shakeel Butt)   
  - ALSA: hda/realtek: fix speakers and micmute on HP 855 G8 (Alexander Sergeyev)   
  - ALSA: hda: Fix Nvidia dp infoframe (Mohan Kumar)   
  - ALSA: hda: Fix hang at HD-audio codec unbinding due to refcount saturation (Takashi Iwai)   
  - ALSA: hda: Do disconnect jacks at codec unbind (Takashi Iwai)   
  - LTS version: v5.15.71 (Jack Vogel)   
  - ext4: use locality group preallocation for small closed files (Jan Kara)   
  - ext4: avoid unnecessary spreading of allocations among groups (Jan Kara)   
  - ext4: make mballoc try target group first even with mb_optimize_scan (Jan Kara)   
  - ext4: limit the number of retries after discarding preallocations blocks (Theodore Ts'o)   
  - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 (Luís Henriques)   
  - ext4: make directory inode spreading reflect flexbg size (Jan Kara)   
  - devdax: Fix soft-reservation memory description (Dan Williams)   
  - NFSv4: Fixes for nfs4_inode_return_delegation() (Trond Myklebust)   
  - drm/amdgpu: don't register a dirty callback for non-atomic (Alex Deucher)   
  - i2c: mlxbf: Fix frequency calculation (Asmaa Mnebhi)   
  - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Asmaa Mnebhi)   
  - i2c: mlxbf: incorrect base address passed during io write (Asmaa Mnebhi)   
  - i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible (Uwe Kleine-König)   
  - workqueue: don't skip lockdep work dependency in cancel_work_sync() (Tetsuo Handa)   
  - fsdax: Fix infinite loop in dax_iomap_rw() (Li Jinlin)   
  - drm/rockchip: Fix return type of cdn_dp_connector_mode_valid (Nathan Huckleberry)   
  - drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage (Nathan Chancellor)   
  - drm/amd/display: Reduce number of arguments of dml31's CalculateFlipSchedule() (Nathan Chancellor)   
  - drm/amd/display: Reduce number of arguments of dml31's CalculateWatermarksAndDRAMSpeedChangeSupport() (Nathan Chancellor)   
  - drm/amd/display: Limit user regamma to a valid value (Yao Wang1)   
  - drm/amdgpu: use dirty framebuffer helper (Hamza Mahfooz)   
  - drm/amd/pm: disable BACO entry/exit completely on several sienna cichlid cards (Guchun Chen)   
  - drm/gma500: Fix BUG: sleeping function called from invalid context errors (Hans de Goede)   
  - Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region (Vitaly Kuznetsov)   
  - drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV (Jingwen Chen)   
  - s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup (Stefan Haberland)   
  - serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting (Ilpo Järvinen)   
  - serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting (Ilpo Järvinen)   
  - serial: Create uart_xmit_advance() (Ilpo Järvinen)   
  - serial: fsl_lpuart: Reset prior to registration (Lukas Wunner)   
  - KVM: x86/mmu: Fold rmap_recycle into rmap_add (David Matlack)   
  - selftests: forwarding: add shebang for sch_red.sh (Hangbin Liu)   
  - bnxt: prevent skb UAF after handing over to PTP worker (Jakub Kicinski)   
  - net: sched: fix possible refcount leak in tc_new_tfilter() (Hangyu Hua)   
  - net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD (Sean Anderson)   
  - bonding: fix NULL deref in bond_rr_gen_slave_id (Jonathan Toppins)   
  - net/smc: Stop the CLC flow if no link to map buffers on (Wen Gu)   
  - drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff() (Nícolas F. R. A. Prado)   
  - perf tools: Honor namespace when synthesizing build-ids (Namhyung Kim)   
  - perf kcore_copy: Do not check /proc/modules is unchanged (Adrian Hunter)   
  - perf jit: Include program header in ELF files (Lieven Hey)   
  - perf stat: Fix BPF program section name (Namhyung Kim)   
  - can: gs_usb: gs_can_open(): fix race dev->can.state condition (Marc Kleine-Budde)   
  - net: sh_eth: Fix PHY state warning splat during system resume (Geert Uytterhoeven)   
  - net: ravb: Fix PHY state warning splat during system resume (Geert Uytterhoeven)   
  - netfilter: ebtables: fix memory leak when blob is malformed (Florian Westphal)   
  - netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain() (Tetsuo Handa)   
  - netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain() (Tetsuo Handa)   
  - net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs (Vladimir Oltean)   
  - net/sched: taprio: avoid disabling offload when it was never enabled (Vladimir Oltean)   
  - net: enetc: deny offload of tc-based TSN features on VF interfaces (Vladimir Oltean)   
  - net: enetc: move enetc_set_psfp() out of the common enetc_set_features() (Vladimir Oltean)   
  - wireguard: netlink: avoid variable-sized memcpy on sockaddr (Jason A. Donenfeld)   
  - wireguard: ratelimiter: disable timings test by default (Jason A. Donenfeld)   
  - net: ipa: properly limit modem routing table use (Alex Elder)   
  - of: mdio: Add of_node_put() when breaking out of for_each_xx (Liang He)   
  - drm/hisilicon: Add depends on MMU (Randy Dunlap)   
  - drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled (Javier Martinez Canillas)   
  - sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet)   
  - sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet)   
  - i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Michal Jaron)   
  - i40e: Fix VF set max MTU size (Michal Jaron)   
  - iavf: Fix set max MTU size with port VLAN and jumbo frames (Michal Jaron)   
  - mlxbf_gige: clear MDIO gateway lock after read (David Thompson)   
  - iavf: Fix bad page state (Norbert Zulinski)   
  - um: fix default console kernel parameter (Christian Lamparter)   
  - MIPS: Loongson32: Fix PHY-mode being left unspecified (Serge Semin)   
  - MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko (Randy Dunlap)   
  - drm/panel: simple: Fix innolux_g121i1_l01 bus_format (Heiko Schocher)   
  - net: team: Unsync device addresses on ndo_stop (Benjamin Poirier)   
  - net: bonding: Unsync device addresses on ndo_stop (Benjamin Poirier)   
  - net: bonding: Share lacpdu_mcast_addr definition (Benjamin Poirier)   
  - scsi: mpt3sas: Fix return value check of dma_get_required_mask() (Sreekanth Reddy)   
  - scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts() (Rafael Mendonca)   
  - net: phy: aquantia: wait for the suspend/resume operations to finish (Ioana Ciornei)   
  - net: core: fix flow symmetric hash (Ludovic Cintrat)   
  - ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header (Lu Wei)   
  - iavf: Fix cached head and tail value for iavf_get_tx_pending (Brett Creeley)   
  - ice: Don't double unplug aux on peer initiated reset (Dave Ertman)   
  - netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() (Pablo Neira Ayuso)   
  - netfilter: nf_conntrack_irc: Tighten matching on DCC message (David Leadbeater)   
  - netfilter: nf_conntrack_sip: fix ct_sip_walk_headers (Igor Ryzhov)   
  - arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma (Fabio Estevam)   
  - dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get() (Liang He)   
  - arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz (zain wang)   
  - drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks (AngeloGioacchino Del Regno)   
  - arm64: dts: rockchip: Fix typo in lisense text for PX30.Core (Jagan Teki)   
  - arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob (Brian Norris)   
  - firmware: arm_scmi: Fix the asynchronous reset requests (Cristian Marussi)   
  - firmware: arm_scmi: Harden accesses to the reset domains (Cristian Marussi)   
  - xfs: validate inode fork size against fork format (Dave Chinner)   
  - xfs: fix xfs_ifree() error handling to not leak perag ref (Brian Foster)   
  - xfs: reorder iunlink remove operation in xfs_ifree (Dave Chinner)   
  - vmlinux.lds.h: CFI: Reduce alignment of jump-table to function alignment (Will Deacon)   
  - arm64: topology: fix possible overflow in amu_fie_setup() (Sergey Shtylyov)   
  - KVM: x86: Inject #UD on emulated XSETBV if XSAVES isn't enabled (Sean Christopherson)   
  - mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context. (Maurizio Lombardi)   
  - mm/slub: fix to return errno if kmalloc() fails (Chao Yu)   
  - net: mana: Add rmb after checking owner bits (Haiyang Zhang)   
  - can: flexcan: flexcan_mailbox_read() fix return value for drop = true (Marc Kleine-Budde)   
  - kasan: call kasan_malloc() from __kmalloc_*track_caller() (Peter Collingbourne)   
  - riscv: fix a nasty sigreturn bug... (Al Viro)   
  - gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully (Meng Li)   
  - gpio: mockup: Fix potential resource leakage when register a chip (Andy Shevchenko)   
  - gpio: mockup: fix NULL pointer dereference when removing debugfs (Bartosz Golaszewski)   
  - wifi: mt76: fix reading current per-tid starting sequence number for aggregation (Felix Fietkau)   
  - efi: libstub: check Shim mode using MokSBStateRT (Ard Biesheuvel)   
  - efi: x86: Wipe setup_data on pure EFI boot (Ard Biesheuvel)   
  - thunderbolt: Add support for Intel Maple Ridge single port controller (Gil Fine)   
  - usb: dwc3: core: leave default DMA if the controller does not support 64-bit DMA (William Wu)   
  - media: flexcop-usb: fix endpoint type check (Johan Hovold)   
  - btrfs: fix hang during unmount when stopping a space reclaim worker (Filipe Manana)   
  - btrfs: fix hang during unmount when stopping block group reclaim worker (Filipe Manana)   
  - iommu/vt-d: Check correct capability for sagaw determination (Yi Liu)   
  - ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop (Callum Osmotherly)   
  - ALSA: hda/realtek: Add quirk for ASUS GA503R laptop (Luke D. Jones)   
  - ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack (Luke D. Jones)   
  - ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack (Luke D. Jones)   
  - ALSA: hda/realtek: Re-arrange quirk table entries (Takashi Iwai)   
  - ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop (Callum Osmotherly)   
  - ALSA: hda/realtek: Add quirk for Huawei WRT-WX9 (huangwenhui)   
  - ALSA: hda: add Intel 5 Series / 3400 PCI DID (Kai Vehmanen)   
  - ALSA: hda/tegra: set depop delay for tegra (Mohan Kumar)   
  - ALSA: core: Fix double-free at snd_card_new() (Takashi Iwai)   
  - Revert "ALSA: usb-audio: Split endpoint setups for hw_params and prepare" (Takashi Iwai)   
  - USB: serial: option: add Quectel RM520N (jerry meng)   
  - USB: serial: option: add Quectel BG95 0x0203 composition (Carl Yin(殷张成))   
  - USB: core: Fix RST error in hub.c (Alan Stern)   
  - drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES (Phil Auld)   
  - Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio" (Greg Kroah-Hartman)   
  - Revert "usb: add quirks for Lenovo OneLink+ Dock" (Greg Kroah-Hartman)   
  - usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (Piyush Mehta)   
  - usb: add quirks for Lenovo OneLink+ Dock (Jean-Francois Le Fillatre)   
  - usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop (Wesley Cheng)   
  - usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup() (Thinh Nguyen)   
  - usb: dwc3: gadget: Refactor pullup() (Thinh Nguyen)   
  - usb: dwc3: gadget: Prevent repeat pullup() (Thinh Nguyen)   
  - usb: dwc3: Issue core soft reset before enabling run/stop (Wesley Cheng)   
  - usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind (Wesley Cheng)   
  - staging: r8188eu: Add Rosewill USB-N150 Nano to device tables (Larry Finger)   
  - staging: r8188eu: Remove support for devices with 8188FU chipset (0bda:f179) (Candy Febriyanto)   
  - drm/amdgpu: make sure to init common IP before gmc (Alex Deucher)   
  - drm/amdgpu: Separate vf2pf work item init from virt data exchange (Victor Skvortsov)   
  - bnxt_en: reclaim max resources if sriov enable fails (Kashyap Desai)  [Orabug: 34083583]  
  - eth: bnxt: make ulp_id unsigned to make GCC 12 happy (Jakub Kicinski)  [Orabug: 34083583]  
  - bnxt_en: Enable packet timestamping for all RX packets (Pavan Chebbi)  [Orabug: 34083583]  
  - bnxt_en: Configure ptp filters during bnxt open (Pavan Chebbi)  [Orabug: 34083583]  
  - bnxt_en: Update firmware interface to 1.10.2.95 (Michael Chan)  [Orabug: 34083583]  
  - bnxt_en: Initiallize bp->ptp_lock first before using it (Michael Chan)  [Orabug: 34083583]  
  - bnxt_en: Properly report no pause support on some cards (Michael Chan)  [Orabug: 34083583]  
  - bnxt_en: add more error checks to HWRM_NVM_INSTALL_UPDATE (Kalesh AP)  [Orabug: 34083583]  
  - bnxt_en: refactor error handling of HWRM_NVM_INSTALL_UPDATE (Kalesh AP)  [Orabug: 34083583]  
  - bnxt_en: Handle async event when the PHC is updated in RTC mode (Pavan Chebbi)  [Orabug: 34083583]  
  - bnxt_en: Implement .adjtime() for PTP RTC mode (Pavan Chebbi)  [Orabug: 34083583]  
  - bnxt_en: Add driver support to use Real Time Counter for PTP (Pavan Chebbi)  [Orabug: 34083583]  
  - bnxt_en: PTP: Refactor PTP initialization functions (Pavan Chebbi)  [Orabug: 34083583]  
  - bnxt_en: Update firmware interface to 1.10.2.73 (Michael Chan)  [Orabug: 34083583]  
  - bnxt_en: Use page frag RX buffers for better software GRO performance (Jakub Kicinski)  [Orabug: 34083583]  
  - bnxt_en: convert to xdp_do_flush (Edwin Peer)  [Orabug: 34083583]  
  - bnxt_en: enable interrupt sampling on 5750X for DIM (Andy Gospodarek)  [Orabug: 34083583]  
  - bnxt_en: Log error report for dropped doorbell (Michael Chan)  [Orabug: 34083583]  
  - bnxt_en: Add event handler for PAUSE Storm event (Somnath Kotur)  [Orabug: 34083583]  
  - bnxt_en: Update firmware interface to 1.10.2.63 (Michael Chan)  [Orabug: 34083583]  
  - bnxt: use netif_is_rxfh_configured instead of open code (Juhee Kang)  [Orabug: 34083583]  
  - uek-rpm: add aarch64 to list of vdso arches (Tom Saeger)  [Orabug: 34716172]  
  - uapi: Fix [rs]cq_vector data types in rds[6]_info_rdma_connection (Mark Haywood)  [Orabug: 34734247]  
  - uapi: Fix congested flag type in rds[6]_info_socket (Mark Haywood)  [Orabug: 34734247]  
  - uek-rpm: ol9: disable CONFIG_MISDN and dependent drivers on OL9/UEK7 (Harshit Mogalapalli)  [Orabug: 34734324]


