[SRU][Jammy][PULL] Jammy update: v5.15.180 upstream stable release
Manuel Diewald
manuel.diewald at canonical.com
Fri Apr 25 14:30:21 UTC 2025
This pull request (282 commits) includes the following Jammy stable patchsets:
Jammy update: v5.15.180 upstream stable release
https://bugs.launchpad.net/bugs/2109355
Note also that the 'stable-next' branch head contains this and all
prior pending upstream stable releases. I recommend fetching and
applying just this reference ('stable-next') instead of each
tags/jammy-stable-* reference:
git://git.launchpad.net/~ubuntu-kernel-stable/+git/jammy stable-next
-Manuel
------------------------------------------------------------------------
The following changes since commit 93f7bb39f69e7d893dd86b1c2707919942fe4d62:
PCI: Batch BAR sizing operations (2025-04-23 10:00:51 +0200)
are available in the Git repository at:
git://git.launchpad.net/~ubuntu-kernel-stable/+git/jammy tags/jammy-stable-v5.15.180
for you to fetch changes up to b99b6d54ce4566d5d606da49ae5ebe1c44d1fa3d:
UBUNTU: Upstream stable to v5.15.180 (2025-04-25 16:12:29 +0200)
----------------------------------------------------------------
Acs, Jakub (1):
ext4: fix OOB read when checking dotdot dir
Al Viro (2):
spufs: fix a leak on spufs_new_file() failure
spufs: fix a leak in spufs_create_context()
Alex Hung (1):
drm/amd/display: Assign normalized_pix_clk when color depth = 14
Alexey Kashavkin (1):
netfilter: nft_exthdr: fix offset with ipv4_find_option()
Alistair Popple (1):
fuse: fix dax truncate/punch_hole fault path
Andreas Kemnade (1):
i2c: omap: fix IRQ storms
Andrii Nakryiko (2):
lib/buildid: Handle memfd_secret() files in build_id_parse()
libbpf: Fix hypothetical STT_SECTION extern NULL deref case
Andy Shevchenko (1):
hrtimers: Mark is_migration_base() with __always_inline
AngeloGioacchino Del Regno (2):
drm/mediatek: mtk_hdmi: Unregister audio platform device on failure
drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member
Arnaldo Carvalho de Melo (5):
perf units: Fix insufficient array space
perf python: Fixup description of sample.id event member
perf python: Decrement the refcount of just created event on failure
perf python: Don't keep a raw_data pointer to consumed ring buffer space
perf python: Check if there is space to copy all the event
Arnd Bergmann (3):
x86/irq: Define trace events conditionally
x86/platform: Only allow CONFIG_EISA for 32-bit
mdacon: rework dependency list
Arthur Mongodin (1):
mptcp: Fix data stream corruption in the address announcement
Artur Weber (2):
pinctrl: bcm281xx: Fix incorrect regmap max_registers value
power: supply: max77693: Fix wrong conversion of charge input threshold value
Barnabás Czémán (1):
clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock
Bart Van Assche (1):
fs/procfs: fix the comment above proc_pid_wchan()
Benjamin Berg (1):
x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct()
Boon Khai Ng (1):
USB: serial: ftdi_sio: add support for Altera USB Blaster 3
Brahmajit Das (1):
vboxsf: fix building with GCC 15
Breno Leitao (1):
netpoll: hold rcu read lock in __netpoll_send_skb()
Cameron Williams (2):
tty: serial: 8250: Add some more device IDs
tty: serial: 8250: Add Brainboxes XC devices
Carolina Jubran (1):
net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices
Charles Keepax (1):
ASoC: ops: Consistently treat platform_max as control value
Chengchang Tang (1):
RDMA/hns: Remove redundant 'phy_addr' in hns_roce_hem_list_find_mtt()
Chenyuan Yang (1):
thermal: int340x: Add NULL check for adev
Chia-Lin Kao (AceLan) (1):
HID: ignore non-functional sensor in HP 5MP Camera
Christian Eggers (1):
regulator: check that dummy regulator has been probed before using it
Christophe JAILLET (4):
ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
i2c: ali1535: Fix an error handling path in ali1535_probe()
i2c: ali15x3: Fix an error handling path in ali15x3_probe()
i2c: sis630: Fix an error handling path in sis630_probe()
Chuck Lever (1):
NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up
Cong Wang (1):
net_sched: skbprio: Remove overly strict queue assertions
Cosmin Ratiu (1):
xfrm_output: Force software GSO only in tunnel mode
Dan Carpenter (6):
ipvs: prevent integer overflow in do_ip_vs_get_ctl()
Bluetooth: Fix error code in chan_alloc_skb_cb()
net: atm: fix use after free in lec_send()
PCI: Remove stray put_device() in pci_register_host_bridge()
drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer()
fs/ntfs3: Fix a couple integer overflows on 32bit systems
Daniel Lezcano (1):
thermal/cpufreq_cooling: Remove structure member documentation
Daniel Stodden (1):
PCI/ASPM: Fix link state exit during switch upstream function removal
Daniel Wagner (2):
nvme-fc: go straight to connecting state when initializing
nvme: only allow entering LIVE from CONNECTING state
Danila Chernetsov (1):
fbdev: sm501fb: Add some geometry checks.
David Rosca (1):
drm/amdgpu: Fix JPEG video caps max size for navi1x and raven
David Woodhouse (1):
clockevents/drivers/i8253: Fix stop sequence for timer 0
Debin Zhu (1):
netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
Dhruv Deshpande (1):
ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx
Dominique Martinet (1):
net: usb: usbnet: restore usb%d name exception for local mac addresses
Douglas Raillard (2):
tracing: Ensure module defining synth event cannot be unloaded while tracing
tracing: Fix synth event printk format for str fields
Eric Dumazet (2):
vlan: fix memory leak in vlan_newlink()
tcp: fix races in tcp_abort()
Eric Sandeen (1):
watch_queue: fix pipe accounting mismatch
Eric W. Biederman (1):
alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
Fabio Porcedda (4):
USB: serial: option: add Telit Cinterion FE990B compositions
USB: serial: option: fix Telit Cinterion FE990A name
net: usb: qmi_wwan: add Telit Cinterion FN990B composition
net: usb: qmi_wwan: add Telit Cinterion FE990B composition
Fabrice Gasnier (1):
counter: stm32-lptimer-cnt: fix error handling when enabling
Fabrizio Castro (2):
pinctrl: renesas: rza2: Fix missing of_node_put() call
pinctrl: renesas: rzg2l: Fix missing of_node_put() call
Feng Tang (1):
PCI/portdrv: Only disable pciehp interrupts early when needed
Feng Yang (1):
ring-buffer: Fix bytes_dropped calculation issue
Fernando Fernandez Mancera (1):
ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS
Florent Revest (1):
x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
Gannon Kolding (1):
ACPI: resource: IRQ override for Eluktronics MECH-17
Geert Uytterhoeven (2):
ARM: shmobile: smp: Enforce shmobile_smp_* alignment
drm/bridge: ti-sn65dsi86: Fix multiple instances
Geetha sowjanya (2):
octeontx2-af: Fix mbox INTR handler when num VFs > 64
octeontx2-af: Free NIX_AF_INT_VEC_GEN irq
Giovanni Gherdovich (1):
ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid
Greg Kroah-Hartman (1):
Linux 5.15.180
Grzegorz Nitka (1):
ice: fix memory leak in aRFS after reset
Gu Bowen (1):
mmc: atmel-mci: Add missing clk_disable_unprepare()
Guilherme G. Piccoli (1):
x86/tsc: Always save/restore TSC sched_clock() on suspend/resume
Guillaume Nault (3):
gre: Fix IPv6 link-local address generation.
Revert "gre: Fix IPv6 link-local address generation."
tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().
Haibo Chen (2):
can: flexcan: only change CAN state when link up in system PM
can: flexcan: disable transceiver during system PM
Hans Zhang (1):
PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload
Haoxiang Li (1):
qlcnic: fix memory leak issues in qlcnic_sriov_common.c
Hector Martin (3):
ASoC: tas2770: Fix volume scale
ASoC: tas2764: Fix power control mask
ASoC: tas2764: Set the SDOUT polarity correctly
Henrique Carvalho (1):
smb: client: Fix match_session bug preventing session reuse
Henry Martin (2):
ASoC: imx-card: Add NULL check in imx_card_probe()
arcnet: Add NULL check in com20020pci_probe()
Herbert Xu (1):
crypto: nx - Fix uninitialised hv_nxc on error
Hersen Wu (1):
drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
Hou Tao (1):
bpf: Use preempt_count() directly in bpf_send_signal_common()
Icenowy Zheng (2):
nvme-pci: clean up CMBMSC when registering CMB fails
nvme-pci: skip CMB blocks incompatible with PCI P2P DMA
Ilkka Koskinen (1):
coresight: catu: Fix number of pages while using 64k pages
Ilpo Järvinen (1):
PCI: pciehp: Don't enable HPIE when resuming in poll mode
Ilya Maximets (1):
net: openvswitch: remove misbehaving actions length check
Ivan Abramov (1):
drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
Jann Horn (4):
sched: Clarify wake_up_q()'s write to task->wake_q.next
x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
Jayesh Choudhary (1):
ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible
Jerome Brunet (4):
clk: amlogic: gxbb: drop incorrect flag on 32k clock
clk: amlogic: g12b: fix cluster A parent data
clk: amlogic: gxbb: drop non existing 32k clock parent
clk: amlogic: g12a: fix mmc A peripheral clock
Jesse Zhang (1):
drm/amd/pm: Fix negative array index read
Jianbo Liu (1):
net/mlx5: Bridge, fix the crash caused by LAG state check
Jie Zhan (1):
cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
Jim Quinlan (1):
PCI: brcmstb: Use internal register to change link capability
Jiri Kosina (1):
HID: remove superfluous (and wrong) Makefile entry for CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER
Joe Hattori (4):
powercap: call put_device() on an error path in powercap_register_control_type()
firmware: imx-scu: fix OF node leak in .probe()
media: platform: allgro-dvt: unregister v4l2_device on the error path
soundwire: slave: fix an OF node reference leak in soundwire slave device
Johan Hovold (1):
USB: serial: option: match on interface class for Telit FN990B
Johannes Berg (1):
wifi: iwlwifi: fw: allocate chained SG tables for dump
John Keeping (1):
serial: 8250_dma: terminate correct DMA in tx_dma_flush()
Jonathan Cameron (1):
iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio
Josef Bacik (1):
btrfs: handle errors from btrfs_dec_ref() properly
Joseph Huang (1):
net: dsa: mv88e6xxx: Verify after ATU Load ops
Josh Poimboeuf (2):
objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
sched/smt: Always inline sched_smt_active()
José Expósito (1):
drm/vkms: Fix use after free and double free on init error
Juhan Jin (1):
riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and make_call_ra
Junxian Huang (4):
RDMA/hns: Fix soft lockup during bt pages loop
RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
RDMA/hns: Fix wrong value of max_sge_rd
Justin Klaassen (1):
arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S
Kamal Dasu (3):
mmc: sdhci-brcmstb: Add ability to increase max clock rate for 72116b0
mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops
mmc: sdhci-brcmstb: use clk_get_rate(base_clk) in PM resume
Karel Balej (1):
mmc: sdhci-pxav3: set NEED_RSP_BUSY capability
Kashyap Desai (1):
RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx
Kees Cook (5):
slab: clean up function prototypes
slab: Introduce kmalloc_size_roundup()
openvswitch: Use kmalloc_size_roundup() to match ksize() usage
ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed()
ARM: 9351/1: fault: Add "cut here" line for prefetch aborts
Kohei Enju (1):
netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
Kuninori Morimoto (1):
ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
Kuniyuki Iwashima (2):
ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().
Li Lingfeng (1):
nfsd: put dl_stid if fail to queue dl_recall
Lin Ma (3):
net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES
netfilter: nft_tunnel: fix geneve_opt type confusion addition
net: fix geneve_opt length integer overflow
Luca Weiss (2):
remoteproc: qcom_q6v5_pas: Make single-PD handling more robust
remoteproc: qcom_q6v5_mss: Handle platforms with one power domain
Luiz Augusto von Dentz (1):
Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
Luo Qiu (1):
memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
Ma Ke (1):
drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params
Magnus Lindholm (1):
scsi: qla1280: Fix kernel oops when debug level > 2
Maher Sanalla (1):
IB/mad: Check available slots before posting receive WRs
Manuel Diewald (3):
Revert "smb: client: fix potential UAF in cifs_debug_files_proc_show()"
UBUNTU: [Config] updateconfigs for HAVE_EISA
UBUNTU: Upstream stable to v5.15.180
Mario Limonciello (3):
drm/amd/display: Restore correct backlight brightness after a GPU reset
drm/amd/display: Fix slab-use-after-free on hdcp_work
drm/amd: Keep display off while going into S4
Mark Zhang (1):
rtnetlink: Allocate vfinfo size for VF GUIDs when supported
Markus Elfring (2):
fbdev: au1100fb: Move a variable assignment behind a null pointer check
ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()
Matthieu Baerts (NGI0) (1):
mptcp: safety check before fallback
Maxim Mikityanskiy (1):
netfilter: socket: Lookup orig tuple for IPv6 SNAT
Maíra Canal (1):
drm/v3d: Don't run jobs that have errors flagged in its fence
Miaoqian Lin (1):
ksmbd: use aead_request_free to match aead_request_alloc
Michael Kelley (2):
fbdev: hyperv_fb: iounmap() the correct memory when removing a device
Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
Michael Strauss (1):
drm/amd/display: Check for invalid input params when building scaling params
Michal Luczaj (1):
bpf, sockmap: Fix race between element replace and close()
Mike Rapoport (Microsoft) (1):
x86/mm/pat: cpa-test: fix length for CPA_ARRAY test
Miklos Szeredi (1):
fuse: don't truncate cached, mutated symlink
Ming Lei (1):
block: fix 'kmem_cache of name 'bio-108' already exists'
Minjoong Kim (1):
atm: Fix NULL pointer dereference
Murad Masimov (5):
cifs: Fix integer overflow while processing acregmax mount option
cifs: Fix integer overflow while processing acdirmax mount option
cifs: Fix integer overflow while processing actimeo mount option
cifs: Fix integer overflow while processing closetimeo mount option
acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
Namjae Jeon (2):
ksmbd: fix multichannel connection failure
ksmbd: fix incorrect validation for num_aces field of smb_acl
Nathan Chancellor (1):
mmc: sdhci-brcmstb: Initialize base_clk to NULL in sdhci_brcmstb_probe()
Navon John Lukose (1):
ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx
Nikita Shubin (1):
ntb: intel: Fix using link status DB's
Nikita Zhandarovich (2):
drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
mfd: sm501: Switch to BIT() to mitigate integer overflows
Nishanth Aravamudan (1):
PCI: Avoid reset when disabled via sysfs
Oleg Nesterov (1):
sched/isolation: Prevent boot crash when the boot CPU is nohz_full
Oliver Hartkopp (1):
can: statistics: use atomic access in hot path
Pablo Neira Ayuso (1):
netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only
Patrisious Haddad (1):
RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
Paul Menzel (1):
ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP
Paulo Alcantara (1):
smb: client: fix potential UAF in cifs_debug_files_proc_show()
Peng Fan (1):
remoteproc: core: Clear table_sz when rproc_shutdown
Peter Geis (1):
clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent
Peter Oberparleiter (1):
s390/cio: Fix CHPID "configure" attribute caching
Phil Elwell (2):
ARM: dts: bcm2711: PL011 UARTs are actually r1p5
ARM: dts: bcm2711: Don't mark timer regs unconfigured
Prathamesh Shete (1):
pinctrl: tegra: Set SFIO mode to Mux Register
Qasim Ijaz (2):
isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
jfs: fix slab-out-of-bounds read in ea_get()
Qiuxu Zhuo (3):
EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
EDAC/ie31200: Fix the DIMM size mask for several SoCs
EDAC/ie31200: Fix the error path order of ie31200_init()
Rafael J. Wysocki (2):
PM: sleep: Adjust check before setting power.must_resume
PM: sleep: Fix handling devices with direct_complete set on errors
Ran Xiaokai (1):
tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
Rik van Riel (1):
scsi: core: Use GFP_NOIO to avoid circular locking dependency
Roman Gushchin (1):
RDMA/core: Don't expose hw_counters outside of init net namespace
Roman Smirnov (1):
jfs: add index corruption check to DT_GETPAGE()
Ruozhu Li (1):
nvmet-rdma: recheck queue state is LIVE in state lock in recv done
Sagi Grimberg (1):
nvme-tcp: fix possible UAF in nvme_tcp_poll
Saranya R (1):
soc: qcom: pdr: Fix the potential deadlock
Saravanan Vajravel (1):
RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path
Sebastian Andrzej Siewior (2):
netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.
lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()
Sherry Sun (2):
tty: serial: fsl_lpuart: use UARTMODIR register bits for lpuart32 platform
tty: serial: fsl_lpuart: disable transmitter before changing RS485 related registers
Shrikanth Hegde (1):
sched/deadline: Use online cpus for validating runtime
Simon Tatham (2):
affs: generate OFS sequence numbers starting at 1
affs: don't write overlarge OFS data block size fields
Sourabh Jain (1):
kexec: initialize ELF lowest address to ULONG_MAX
Srinivas Pandruvada (1):
platform/x86: ISST: Correct command storage data length
Stanley Chu (1):
i3c: master: svc: Fix missing the IBI rules
Stefano Garzarella (1):
vsock: avoid timeout during connect() if the socket is closing
Stephan Gerhold (1):
net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors
Steven Rostedt (1):
tracing: Do not use PERF enums when perf is not defined
Sven Eckelmann (1):
batman-adv: Ignore own maximum aggregation size during RX
Takashi Iwai (1):
ALSA: hda/realtek: Always honor no_shutup_pins
Tanya Agarwal (1):
lib: 842: Improve error handling in sw842_compress()
Tao Chen (1):
perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
Tasos Sahanidis (1):
hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}
Tengda Wu (1):
tracing: Fix use-after-free in print_graph_function_flags during tracer switching
Terry Cheong (1):
ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
Terry Junge (2):
ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names
HID: hid-plantronics: Add mic mute mapping and generalize quirks
Theodore Ts'o (1):
ext4: don't over-report free space or inodes in statvfs
Thippeswamy Havalige (1):
PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe
Thomas Zimmermann (1):
drm/nouveau: Do not override forced connector status
Tim Schumacher (1):
selinux: Chain up tool resolving errors in install_policy.sh
Tobias Waldekranz (1):
net: mvpp2: Prevent parser TCAM memory corruption
Tomi Valkeinen (1):
drm: xlnx: zynqmp: Fix max dma segment size
Trond Myklebust (1):
NFSv4: Don't trigger uneccessary scans for return-on-close delegations
Uwe Kleine-König (1):
iio: adc: ad7124: Fix comparison of channel configs
Vasiliy Kovalev (1):
ocfs2: validate l_tree_depth to avoid out-of-bounds access
Ville Syrjälä (1):
drm/atomic: Filter out redundant DPMS calls
Vitaliy Shevtsov (1):
drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters()
Vitaly Rodionov (1):
ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
Vladimir Lypak (1):
clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock
Vladis Dronov (1):
x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled
Vlastimil Babka (1):
mm, slab: remove duplicate kernel-doc comment for ksize()
Waiman Long (1):
locking/semaphore: Use wake_q to wake up processes outside lock critical section
Wang Yufen (1):
ipv6: Fix signed integer overflow in __ip6_append_data
Wayne Lin (1):
drm/dp_mst: Fix drm RAD print
Wenkai Lin (2):
crypto: hisilicon/sec2 - fix for aead authsize alignment
crypto: hisilicon/sec2 - fix for aead auth key length
Wentao Liang (1):
net/mlx5: handle errors in mlx5_chains_create_table()
Will McVicker (1):
clk: samsung: Fix UBSAN panic in samsung_clk_init()
William Breathitt Gray (1):
counter: microchip-tcb-capture: Fix undefined counter channel state on probe
Yajun Deng (1):
ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
Yanjun Yang (1):
ARM: Remove address checking for MMUless devices
Ye Bin (1):
proc: fix UAF in proc_get_inode()
Ying Lu (1):
usbnet:fix NPE during rx_complete
Yu-Chun Lin (1):
sctp: Fix undefined behavior in left shift operation
Yuezhang Mo (1):
exfat: fix the infinite loop in exfat_find_last_cluster()
Zhang Lixu (1):
HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
Zijun Hu (1):
of: property: Increase NR_FWNODE_REFERENCE_ARGS
zuoqian (1):
cpufreq: scpi: compare kHz instead of Hz
Documentation/timers/no_hz.rst | 7 +-
Makefile | 2 +-
arch/alpha/include/asm/elf.h | 6 +-
arch/alpha/include/asm/pgtable.h | 2 +-
arch/alpha/include/asm/processor.h | 8 +-
arch/alpha/kernel/osf_sys.c | 11 +-
arch/arm/boot/dts/bcm2711.dtsi | 11 +-
arch/arm/mach-shmobile/headsmp.S | 1 +
arch/arm/mm/fault.c | 8 +
arch/arm64/boot/dts/rockchip/rk3399-nanopi-r4s.dts | 2 +-
arch/powerpc/platforms/cell/spufs/inode.c | 9 +-
arch/riscv/include/asm/ftrace.h | 4 +-
arch/x86/Kconfig | 2 +-
arch/x86/entry/calling.h | 2 +
arch/x86/include/asm/tlbflush.h | 2 +-
arch/x86/kernel/cpu/microcode/amd.c | 2 +-
arch/x86/kernel/cpu/mshyperv.c | 11 --
arch/x86/kernel/cpu/sgx/driver.c | 10 +-
arch/x86/kernel/dumpstack.c | 5 +-
arch/x86/kernel/irq.c | 2 +
arch/x86/kernel/process.c | 7 +-
arch/x86/kernel/tsc.c | 4 +-
arch/x86/mm/pat/cpa-test.c | 2 +-
block/bio.c | 2 +-
debian.master/config/annotations | 12 +-
debian.master/upstream-stable | 2 +-
drivers/acpi/nfit/core.c | 2 +-
drivers/acpi/processor_idle.c | 4 +
drivers/acpi/resource.c | 13 ++
drivers/base/power/main.c | 21 +--
drivers/base/power/runtime.c | 2 +-
drivers/clk/meson/g12a.c | 38 ++--
drivers/clk/meson/gxbb.c | 14 +-
drivers/clk/qcom/gcc-msm8953.c | 2 +-
drivers/clk/qcom/mmcc-sdm660.c | 2 +-
drivers/clk/rockchip/clk-rk3328.c | 2 +-
drivers/clk/samsung/clk.c | 2 +-
drivers/clocksource/i8253.c | 36 ++--
drivers/counter/microchip-tcb-capture.c | 19 ++
drivers/counter/stm32-lptimer-cnt.c | 24 ++-
drivers/cpufreq/cpufreq_governor.c | 45 ++---
drivers/cpufreq/scpi-cpufreq.c | 5 +-
drivers/crypto/hisilicon/sec2/sec_crypto.c | 30 ++-
drivers/crypto/nx/nx-common-pseries.c | 37 ++--
drivers/edac/ie31200_edac.c | 19 +-
drivers/firmware/imx/imx-scu.c | 1 +
drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 11 +-
drivers/gpu/drm/amd/amdgpu/nv.c | 2 +-
drivers/gpu/drm/amd/amdgpu/soc15.c | 2 +-
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 15 ++
.../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c | 1 +
drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 17 +-
.../amd/display/dc/dml/dcn30/display_mode_vba_30.c | 12 +-
.../gpu/drm/amd/display/dc/dml/display_mode_vba.c | 24 +++
drivers/gpu/drm/amd/pm/swsmu/smu11/navi10_ppt.c | 21 ++-
drivers/gpu/drm/bridge/ti-sn65dsi86.c | 2 +
drivers/gpu/drm/drm_atomic_uapi.c | 4 +
drivers/gpu/drm/drm_connector.c | 4 +
drivers/gpu/drm/drm_dp_mst_topology.c | 8 +-
drivers/gpu/drm/gma500/mid_bios.c | 5 +
drivers/gpu/drm/mediatek/mtk_dsi.c | 6 +-
drivers/gpu/drm/mediatek/mtk_hdmi.c | 33 +++-
drivers/gpu/drm/nouveau/nouveau_connector.c | 1 -
drivers/gpu/drm/radeon/radeon_vce.c | 2 +-
drivers/gpu/drm/v3d/v3d_sched.c | 9 +-
drivers/gpu/drm/vkms/vkms_drv.c | 15 +-
drivers/gpu/drm/xlnx/zynqmp_dpsub.c | 2 +
drivers/hid/Makefile | 1 -
drivers/hid/hid-ids.h | 1 +
drivers/hid/hid-plantronics.c | 144 +++++++--------
drivers/hid/hid-quirks.c | 1 +
drivers/hid/intel-ish-hid/ipc/ipc.c | 6 +-
drivers/hv/vmbus_drv.c | 13 ++
drivers/hwmon/nct6775.c | 4 +-
drivers/hwtracing/coresight/coresight-catu.c | 2 +-
drivers/i2c/busses/i2c-ali1535.c | 12 +-
drivers/i2c/busses/i2c-ali15x3.c | 12 +-
drivers/i2c/busses/i2c-omap.c | 26 +--
drivers/i2c/busses/i2c-sis630.c | 12 +-
drivers/i3c/master/svc-i3c-master.c | 2 +-
drivers/iio/accel/mma8452.c | 10 +-
drivers/iio/adc/ad7124.c | 35 +++-
drivers/infiniband/core/device.c | 9 +
drivers/infiniband/core/mad.c | 38 ++--
drivers/infiniband/core/sysfs.c | 1 +
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 2 -
drivers/infiniband/hw/bnxt_re/qplib_rcfw.h | 3 +-
drivers/infiniband/hw/hns/hns_roce_hem.c | 23 ++-
drivers/infiniband/hw/hns/hns_roce_hem.h | 2 +-
drivers/infiniband/hw/hns/hns_roce_main.c | 2 +-
drivers/infiniband/hw/hns/hns_roce_mr.c | 4 +-
drivers/infiniband/hw/hns/hns_roce_qp.c | 10 +-
drivers/infiniband/hw/mlx5/cq.c | 2 +-
drivers/media/dvb-frontends/dib8000.c | 5 +-
drivers/media/platform/allegro-dvt/allegro-core.c | 1 +
drivers/memstick/host/rtsx_usb_ms.c | 1 +
drivers/mfd/sm501.c | 6 +-
drivers/mmc/host/atmel-mci.c | 4 +-
drivers/mmc/host/sdhci-brcmstb.c | 86 ++++++++-
drivers/mmc/host/sdhci-pxav3.c | 1 +
drivers/net/arcnet/com20020-pci.c | 17 +-
drivers/net/can/flexcan.c | 18 +-
drivers/net/dsa/mv88e6xxx/chip.c | 59 ++++--
drivers/net/ethernet/intel/ice/ice_arfs.c | 2 +-
drivers/net/ethernet/marvell/mvpp2/mvpp2.h | 3 +
drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 3 +-
drivers/net/ethernet/marvell/mvpp2/mvpp2_prs.c | 201 ++++++++++++++-------
drivers/net/ethernet/marvell/octeontx2/af/rvu.c | 2 +-
.../ethernet/marvell/octeontx2/af/rvu_devlink.c | 2 +-
.../ethernet/mellanox/mlx5/core/en/rep/bridge.c | 12 +-
drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 6 +-
.../ethernet/mellanox/mlx5/core/lib/fs_chains.c | 5 +
.../ethernet/qlogic/qlcnic/qlcnic_sriov_common.c | 8 +-
drivers/net/usb/qmi_wwan.c | 2 +
drivers/net/usb/usbnet.c | 27 ++-
drivers/net/wireless/intel/iwlwifi/fw/dbg.c | 86 ++++++---
drivers/net/wwan/mhi_wwan_mbim.c | 2 +-
drivers/ntb/hw/intel/ntb_hw_gen3.c | 3 +
drivers/ntb/hw/mscc/ntb_hw_switchtec.c | 2 +-
drivers/ntb/test/ntb_perf.c | 4 +-
drivers/nvme/host/core.c | 2 -
drivers/nvme/host/fc.c | 3 +-
drivers/nvme/host/pci.c | 21 ++-
drivers/nvme/host/tcp.c | 5 +-
drivers/nvme/target/rdma.c | 33 +++-
drivers/pci/controller/cadence/pcie-cadence-ep.c | 3 +-
drivers/pci/controller/cadence/pcie-cadence.h | 2 +-
drivers/pci/controller/pcie-brcmstb.c | 4 +-
drivers/pci/controller/pcie-xilinx-cpm.c | 10 +-
drivers/pci/hotplug/pciehp_hpc.c | 4 +-
drivers/pci/pci.c | 4 +
drivers/pci/pcie/aspm.c | 17 +-
drivers/pci/pcie/portdrv_core.c | 8 +-
drivers/pci/probe.c | 5 +-
drivers/pinctrl/bcm/pinctrl-bcm281xx.c | 2 +-
drivers/pinctrl/renesas/pinctrl-rza2.c | 2 +
drivers/pinctrl/renesas/pinctrl-rzg2l.c | 2 +
drivers/pinctrl/tegra/pinctrl-tegra.c | 3 +
.../x86/intel/speed_select_if/isst_if_common.c | 2 +-
drivers/power/supply/max77693_charger.c | 2 +-
drivers/powercap/powercap_sys.c | 3 +-
drivers/regulator/core.c | 12 +-
drivers/remoteproc/qcom_q6v5_mss.c | 21 ++-
drivers/remoteproc/qcom_q6v5_pas.c | 10 +-
drivers/remoteproc/remoteproc_core.c | 1 +
drivers/s390/cio/chp.c | 3 +-
drivers/scsi/qla1280.c | 2 +-
drivers/scsi/scsi_scan.c | 2 +-
drivers/soc/qcom/pdr_interface.c | 8 +-
drivers/soundwire/slave.c | 1 +
drivers/thermal/cpufreq_cooling.c | 2 -
.../intel/int340x_thermal/int3402_thermal.c | 3 +
drivers/tty/serial/8250/8250_dma.c | 2 +-
drivers/tty/serial/8250/8250_pci.c | 46 +++++
drivers/tty/serial/fsl_lpuart.c | 25 ++-
drivers/usb/serial/ftdi_sio.c | 14 ++
drivers/usb/serial/ftdi_sio_ids.h | 13 ++
drivers/usb/serial/option.c | 48 +++--
drivers/video/console/Kconfig | 2 +-
drivers/video/fbdev/au1100fb.c | 4 +-
drivers/video/fbdev/hyperv_fb.c | 2 +-
drivers/video/fbdev/sm501fb.c | 7 +
fs/affs/file.c | 9 +-
fs/btrfs/extent-tree.c | 5 +-
fs/cifs/cifsglob.h | 2 -
fs/cifs/connect.c | 15 +-
fs/cifs/fs_context.c | 14 +-
fs/exfat/fatent.c | 2 +-
fs/ext4/dir.c | 3 +
fs/ext4/super.c | 27 ++-
fs/fuse/dax.c | 1 -
fs/fuse/dir.c | 4 +-
fs/fuse/file.c | 4 +-
fs/isofs/dir.c | 3 +-
fs/jfs/jfs_dtree.c | 3 +-
fs/jfs/xattr.c | 15 +-
fs/ksmbd/auth.c | 2 +-
fs/ksmbd/mgmt/user_session.c | 16 ++
fs/ksmbd/mgmt/user_session.h | 2 +
fs/ksmbd/smb2pdu.c | 12 +-
fs/ksmbd/smbacl.c | 5 +-
fs/namei.c | 24 ++-
fs/nfs/delegation.c | 33 ++--
fs/nfsd/nfs4state.c | 31 +++-
fs/ntfs3/index.c | 4 +-
fs/ocfs2/alloc.c | 8 +
fs/proc/base.c | 2 +-
fs/proc/generic.c | 10 +-
fs/proc/inode.c | 6 +-
fs/proc/internal.h | 14 ++
fs/vboxsf/super.c | 3 +-
include/drm/drm_dp_mst_helper.h | 7 +
include/linux/fs.h | 2 +
include/linux/fwnode.h | 2 +-
include/linux/i8253.h | 1 -
include/linux/interrupt.h | 8 +-
include/linux/pm_runtime.h | 2 +
include/linux/proc_fs.h | 7 +-
include/linux/sched/smt.h | 2 +-
include/linux/slab.h | 99 ++++++----
include/net/ipv6.h | 4 +-
include/rdma/ib_verbs.h | 1 +
include/sound/soc.h | 5 +-
kernel/events/ring_buffer.c | 2 +-
kernel/kexec_elf.c | 2 +-
kernel/locking/semaphore.c | 13 +-
kernel/sched/core.c | 5 +-
kernel/sched/deadline.c | 2 +-
kernel/time/hrtimer.c | 22 ++-
kernel/trace/bpf_trace.c | 2 +-
kernel/trace/ring_buffer.c | 4 +-
kernel/trace/trace_events_synth.c | 37 +++-
kernel/trace/trace_functions_graph.c | 1 +
kernel/trace/trace_irqsoff.c | 2 -
kernel/trace/trace_osnoise.c | 1 -
kernel/trace/trace_sched_wakeup.c | 2 -
kernel/watch_queue.c | 9 +
lib/842/842_compress.c | 2 +
lib/buildid.c | 5 +
mm/slab.c | 9 +-
mm/slab_common.c | 34 ++--
mm/slob.c | 14 ++
net/8021q/vlan_netlink.c | 10 +-
net/atm/lec.c | 3 +-
net/atm/mpc.c | 2 +
net/batman-adv/bat_iv_ogm.c | 3 +-
net/batman-adv/bat_v_ogm.c | 3 +-
net/bluetooth/6lowpan.c | 7 +-
net/bluetooth/hci_event.c | 13 +-
net/can/af_can.c | 12 +-
net/can/af_can.h | 12 +-
net/can/proc.c | 46 +++--
net/core/neighbour.c | 1 +
net/core/netpoll.c | 9 +-
net/core/rtnetlink.c | 3 +
net/core/sock_map.c | 5 +-
net/ipv4/ip_tunnel_core.c | 4 +-
net/ipv4/tcp.c | 6 +-
net/ipv6/addrconf.c | 37 ++--
net/ipv6/calipso.c | 21 ++-
net/ipv6/ip6_output.c | 6 +-
net/ipv6/netfilter/nf_socket_ipv6.c | 23 +++
net/ipv6/route.c | 5 +-
net/mptcp/options.c | 6 +-
net/mptcp/protocol.h | 2 +
net/netfilter/ipvs/ip_vs_ctl.c | 8 +-
net/netfilter/nf_conncount.c | 2 +
net/netfilter/nft_ct.c | 6 +-
net/netfilter/nft_exthdr.c | 10 +-
net/netfilter/nft_set_hash.c | 3 +-
net/netfilter/nft_tunnel.c | 6 +-
net/openvswitch/actions.c | 6 -
net/openvswitch/flow_netlink.c | 17 +-
net/sched/act_tunnel_key.c | 2 +-
net/sched/cls_flower.c | 2 +-
net/sched/sch_skbprio.c | 3 -
net/sctp/stream.c | 2 +-
net/vmw_vsock/af_vsock.c | 6 +-
net/xfrm/xfrm_output.c | 2 +-
scripts/selinux/install_policy.sh | 15 +-
sound/pci/hda/patch_realtek.c | 28 ++-
sound/soc/codecs/arizona.c | 14 +-
sound/soc/codecs/madera.c | 10 +-
sound/soc/codecs/tas2764.c | 10 +-
sound/soc/codecs/tas2764.h | 8 +-
sound/soc/codecs/tas2770.c | 2 +-
sound/soc/codecs/wm0010.c | 13 +-
sound/soc/codecs/wm5110.c | 8 +-
sound/soc/fsl/imx-card.c | 4 +
sound/soc/sh/rcar/core.c | 14 --
sound/soc/sh/rcar/rsnd.h | 1 -
sound/soc/sh/rcar/src.c | 18 +-
sound/soc/soc-ops.c | 15 +-
sound/soc/sof/intel/hda-codec.c | 1 +
sound/soc/ti/j721e-evm.c | 2 +
sound/usb/mixer_quirks.c | 51 ++++++
tools/lib/bpf/linker.c | 2 +-
tools/perf/util/python.c | 17 +-
tools/perf/util/units.c | 2 +-
279 files changed, 2085 insertions(+), 1011 deletions(-)
More information about the kernel-team
mailing list