linux-mtk (5.15.0-1040.48) jammy; urgency=medium

  * jammy/linux-mtk: 5.15.0-1040.48 -proposed tracker (LP: #2114884)

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants

  * Miscellaneous Ubuntu changes
    - [Config] disable ext2/ext3 native driver

  * Miscellaneous upstream changes
    - FIXUP: FROMLIST: media: subdev: Fix locking in v4l2 subdev
    - Revert "BL_INTERNAL: usb: mtu3: support ip-sleep wakeup for MT8365"

 -- Jian Hui Lee <jianhui.lee@canonical.com>  Tue, 24 Jun 2025 13:21:03 +0800

linux-mtk (5.15.0-1039.47) jammy; urgency=medium

  * jammy/linux-mtk: 5.15.0-1039.47 -proposed tracker (LP: #2110535)

  * Add list of source files to linux-buildinfo (LP: #2086606)
    - [Packaging] Sort build dependencies alphabetically
    - [Packaging] Add list of used source files to buildinfo package

  * sources list generation using dwarfdump takes up to 0.5hr in build process
    (LP: #2104911)
    - [Packaging] distribute sources list generation in parallel

  * Support standalone dkms source tree embedded in kernel source (LP: #2047909)
    - [Packaging] dkms-build -- support in-tree dkms source directory

  * CVE-2025-20648
    - mvpu: fix mpu size alignment

  * DTBOs for MIPI camera (LP: #2091603)
    - SAUCE: (no-up) dtbo: add more camera dtbos

  * Miscellaneous Ubuntu changes
    - [Config] Set CONFIG_VIDEO_AR0430 to m
    - SAUCE: (no-up) Correct the include path for isp71.dtsi
    - [Packaging] add mediatek camisp dkms
    - SAUCE: (no-up) nvmem: mt635x-efuse: add MODULE_DEVICE_TABLE for module alias
    - SAUCE: (no-up) dtbo: genio-350-evk: add camera-ar0430-dual dtbo
    - [Packaging] update camisp dkms version to rity 24.1
    - SAUCE: (no-up) ubuntu/mtk-camisp-driver-dkms: import mtk-camisp-driver
    - [Packaging] allow passing env vars to dkms-build
    - [Packaging] dkms-build: replace PACKAGE_NAME from dkms-versions
    - [Packaging] ubuntu/mtk-camisp-driver-dkms: add dkms.conf
    - [Packaging] ubuntu/mtk-camisp-driver-dkms: add required kernel header files
      for building
    - [Packaging] support dkms in kernel tree building
    - [Packaging] dkms-build: add CROSS_COMPILE to strip

  * Miscellaneous upstream changes
    - Revert "cpufreq: mediatek: add opp notification for SVS support"
    - Revert "cpufreq: mediatek: Add record of previous desired vproc value"
    - Revert "cpufreq: mediatek: Enable clock and regulator"
    - cpufreq: mediatek: Cleanup variables and error handling in
      mtk_cpu_dvfs_info_init()
    - cpufreq: mediatek: Remove unused headers
    - cpufreq: mediatek: Enable clocks and regulators
    - cpufreq: mediatek: Use device print to show logs
    - cpufreq: mediatek: Replace old_* with pre_*
    - cpufreq: mediatek: Record previous target vproc value
    - cpufreq: mediatek: Make sram regulator optional
    - cpufreq: mediatek: Fix NULL pointer dereference in mediatek-cpufreq
    - cpufreq: mediatek: Move voltage limits to platform data
    - cpufreq: mediatek: Refine mtk_cpufreq_voltage_tracking()
    - cpufreq: mediatek: Add opp notification support
    - cpufreq: mediatek: Fix potential deadlock problem in mtk_cpufreq_set_target
    - GENIO: cpufreq: mediatek: correct proc/sram voltage for MT8365
    - GENIO: media: i2c: ap1302: Add read-only V4L2 controls for ISP params
    - GENIO: media: platform: mtk-mdp3: fix the cropping padding method after
      aligning in specific format.
    - GENIO: memory: mtk-smi: add clamp function to protect ISP SW reset
    - GENIO: arm64: dts: mt8188: add smi-sub-comm of larb for clamp
    - GENIO: arm64: dts: mt8370: add smi-sub-comm of larb for clamp
    - GENIO: arm64: dts: mt8195: add smi-sub-comm of larb for clamp
    - UPSTREAM: soc: mediatek: pm-domains: Add buck isolation offset and mask to
      power domain data
    - BACKPORT: UPSTREAM: soc: mediatek: pm-domains: Add buck isolation setting in
      power domain
    - GENIO: soc: mediatek: pm-domains: add smi clamp and larb reset step
    - GENIO: cpufreq: mediatek: correct max sram voltage for MT8365
    - Revert "GENIO: net: stmmac: disable stop rxc when enable EEE"
    - net: stmmac: mediatek: Disable the RX EEE function of the RTL PHY
    - arm: dts: mt8188: enable cec module
    - arm: dts: mt8195: enable cec module
    - arm: dts: mt8370: enable cec module
    - GENIO: media: platform: mtk-mdp3: Register media device
    - Revert "BACKPORT: FROMLIST: media: v4l2-core: extend the v4l2 format to
      support request"
    - GENIO: soc: mediatek: hdmirx: mt8195: Add query avi info API
    - GENIO: media: platform: mtk-mdp3: Add HDR R2Y for HDRMIRX RGB in
    - GENIO: dt-bindings: iio: adc: Add mt635x-auxadc to compatible list
    - GENIO: dt-bindings: iio: Add mt635x-auxadc
    - GENIO: dt-bindings: iio: Add 8188 auxadc compatible list
    - GENIO: dt-bindings: thermal: Add pmic_temp to compatible list
    - GENIO: dt-bindings: nvmem: Add mt635x-efuse to compatible list
    - GENIO: drivers: auxadc: add auxadc driver
    - GENIO: drivers: thermal: add pmic_temp driver
    - GENIO: drivers: pmic: add pmic 6359p auxadc driver
    - GENIO: drivers: pmic: add pmic 6359p efuse driver
    - GENIO: drivers: pmic: add pmic 6359p auxadc config
    - GENIO: drivers: pmic: add pmic 6359p efuse config
    - GENIO: arm64: dts: mt6359: pmic: add pmic 6359p auxadc and efuse dtsi
    - GENIO: arm64: dts: mediatek: genio-700-evk: add pmic and ap_ntc thermal zone
    - GENIO: arm64: dts: mediatek: genio-510-evk: add pmic and ap_ntc thermal zone
    - GENIO: arm64: dts: mediatek: genio-1200-evk: add pmic and ap_ntc thermal
      zone
    - GENIO: arm64: dts: mt8195: Fixup smi-sub-comm for larb9/10/11/12
    - BACKPORT: firmware_loader: move firmware sysctl to its own files
    - UPSTREAM: firmware_loader: Check fw_state_is_done in loading_store
    - UPSTREAM: firmware_loader: Split sysfs support from fallback
    - BACKPORT: firmware_loader: Add firmware-upload support
    - BACKPORT: media: Add MIPI CCI register access helper functions
    - BACKPORT: device property: Add fwnode_name_eq()
    - BACKPORT: media: v4l: subdev: Rename sub-device state information access
      functions
    - BACKPORT: media: v4l: subdev: Store the sub-device in the sub-device state
    - BACKPORT: media: subdev: add subdev state locking
    - GENIO: arm64: dts: mediatek: Add vsys_v4p2 and camera61_clk
    - BACKPORT: media: uapi: Add controls for the THP7312 ISP
    - BACKPORT: media: i2c: Add driver for THine THP7312
    - GENIO: arm64: dts: mt8195: add i2c aliases
    - GENIO: arm64: dts: mt8188: add i2c aliases
    - GENIO: arm64: dts: mt8370: add i2c aliases
    - GENIO: arm64: dts: mt8385: add i2c aliases
    - FIXUP: BACKPORT: media: subdev: add subdev state locking
    - FIXUP: BACKPORT: media: i2c: Fix locking mechanism in THP7312 driver
    - GENIO: arm64: dts: mt8365: fix the occasional boot hang issue
    - FROMGIT: Bluetooth: btmtksdio: enable bluetooth wakeup in system suspend
    - GENIO: media: i2c: Kconfig: Add config VIDEO_DECODER
    - GENIO: media: platform: mtk-mdp3: expanded critical section to prevent race
      conditions when getting VPU
    - UPSTREAM: ieee80211: add power type definition for 6 GHz
    - GENIO: media: i2c: max9271: Add MAX96705 chip ID to max9271
    - GENIO: dt-bindings: media: i2c: Add compatible abeo ag190c to imi rdacm2x
    - GENIO: media: i2c: rdacm21: Add compatible for ABEO AG190C
    - GENIO: media: i2c: max9286: Fix the chan amplitude source from DTS
    - UPSTREAM: ipc: debug: Add shared memory heap to memory scan
    - UPSTREAM: mailbox: mediatek: add support for adsp mailbox controller
    - UPSTREAM: dt-bindings: mailbox: mtk,adsp-mbox: add mtk adsp-mbox document
    - UPSTREAM: firmware: mediatek: Add adsp ipc protocol interface
    - UPSTREAM: mailbox: mediatek: support mt8186 adsp mailbox
    - UPSTREAM: dt-bindings: mailbox: mtk,adsp-mbox: add mt8186 compatible name
    - UPSTREAM: dt-bindings: dsp: mediatek: Add mt8186 dsp document
    - UPSTREAM: firmware: mediatek: Use meaningful names for mbox
    - UPSTREAM: dt-bindings: dsp: mediatek: Add mt8188 dsp compatible
    - BACKPORT: arm64: dts: mt8195: Add adsp node and adsp mailbox nodes
    - GENIO: arm64: dts: mediatek: genio-1200-evk: add reserved memory for adsp
    - BACKPORT: CHROMIUM: arm64: dts: mediatek: mt8188-geralt: add adsp node
    - GENIO: arm64: dts: mediatek: genio-700-evk: add reserved memory for adsp
    - GENIO: arm64: dts: mediatek: mt8370: add adsp node
    - GENIO: arm64: dts: mediatek: genio-510-evk: add reserved memory for adsp
    - GENIO: media: i2c: rdacm21: Fix the i2c transfer issue after system reboot
    - GENIO: media: platform: mtk-mdp3: Add RGBA format support
    - GENIO: arm64: dts: mediatek: genio-700-evk: add reserved memory for afe
    - GENIO: arm64: dts: mediatek: genio-510-evk: add reserved memory for afe
    - GENIO: arm64: dts: mediatek: genio-700-evk: Correct the reserved memory size
      for the DSP
    - GENIO: arm64: dts: mediatek: genio-510-evk: Correct the reserved memory size
      for the DSP
    - GENIO: media: platform: mtk-mdp3: fix using null pointer during probe
    - GENIO: scsi: ufs: adjust log level for optional settings
    - UPSTREAM: wifi: mt76: mt7921: add mt7921_mutex_acquire at mt7921_[start,
      stop]_ap
    - UPSTREAM: wifi: mt76: connac: add mt76_connac_mcu_uni_set_chctx
    - UPSTREAM: wifi: mt76: mt7921: add chanctx parameter to
      mt76_connac_mcu_uni_add_bss signature
    - UPSTREAM: wifi: mt76: mt7921: add unified ROC cmd/event support
    - UPSTREAM: wifi: mt76: mt7921: drop ieee80211_[start, stop]_queues in driver
    - UPSTREAM: wifi: mt76: connac: accept hw scan request at a time
    - UPSTREAM: wifi: mt76: mt7921: introduce remain_on_channel support
    - BACKPORT: wifi: mt76: mt7921: introduce chanctx support
    - Revert "BACKPORT: wifi: mt76: mt7921: introduce chanctx support"
    - Revert "UPSTREAM: wifi: mt76: mt7921: introduce remain_on_channel support"
    - Revert "UPSTREAM: wifi: mt76: connac: accept hw scan request at a time"
    - Revert "UPSTREAM: wifi: mt76: mt7921: drop ieee80211_ [start, stop]_queues
      in driver"
    - Revert "UPSTREAM: wifi: mt76: mt7921: add unified ROC cmd/event support"
    - Revert "UPSTREAM: wifi: mt76: mt7921: add chanctx parameter to
      mt76_connac_mcu_uni_add_bss signature"
    - Revert "UPSTREAM: wifi: mt76: connac: add mt76_connac_mcu_uni_set_chctx"
    - Revert "UPSTREAM: wifi: mt76: mt7921: add mt7921_mutex_acquire at
      mt7921_[start, stop]_ap"
    - UPSTREAM: wifi: mt76: mt7921: add mt7921_mutex_acquire at mt7921_[start,
      stop]_ap
    - UPSTREAM: wifi: mt76: connac: add mt76_connac_mcu_uni_set_chctx
    - UPSTREAM: wifi: mt76: mt7921: add chanctx parameter to
      mt76_connac_mcu_uni_add_bss signature
    - UPSTREAM: wifi: mt76: mt7921: add unified ROC cmd/event support
    - UPSTREAM: wifi: mt76: mt7921: drop ieee80211_[start, stop]_queues in driver
    - UPSTREAM: wifi: mt76: connac: accept hw scan request at a time
    - UPSTREAM: wifi: mt76: mt7921: introduce remain_on_channel support
    - BACKPORT: wifi: mt76: mt7921: introduce chanctx support
    - UPSTREAM: wifi: mt76: mt7921: fix deadlock in mt7921_abort_roc
    - BACKPORT: wifi: mt76: mt7921: fix channel switch fail in monitor mode
    - BACKPORT: FROMLIST: wifi: mt76: move struct ieee80211_chanctx_conf up to
      struct mt76_vif
    - BACKPORT: FROMLIST: wifi: mt76: mt7921: fix the wrong rate pickup for the
      chanctx driver
    - UPSTREAM: wifi: mt76: mt7921: fix wrong command to set STA channel
    - UPSTREAM: wifi: mt76: mt7921: fix fw used for offload check for mt7922
    - UPSTREAM: wifi: mt76: mt7921: resource leaks at
      mt7921_check_offload_capability()
    - UPSTREAM: wifi: mt76: mt7921: fix invalid remain_on_channel duration
    - UPSTREAM: wifi: mt76: mt7921e: fix init command fail with enabled device
    - UPSTREAM: wifi: mt76: mt7921: Fix use-after-free in fw features query.
    - wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC)
    - wifi: mt76: mt7921: do not support one stream on secondary antenna only
    - FROMLIST: wifi: mt76: mt7921: fix the wrong rate selected in fw for the
      chanctx driver
    - wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH
    - wifi: mt76: mt7915: fix power-limits while chan_switch
    - wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling
    - FROMLIST: wifi: mt76: reduce spin_lock_bh held up in mt76_dma_rx_cleanup
    - UPSTREAM: wifi: mt76: mt7915: fix beamforming availability check
    - wifi: mt76: mt7603: rework/fix rx pse hang check
    - wifi: mt76: mt7603: improve stuck beacon handling
    - BACKPORT: UPSTREAM: wifi: mt76: mt7921: move connac nic capability handling
      to mt7921
    - UPSTREAM: wifi: mt76: mt7921: enable set txpower for UNII-4
    - BACKPORT: UPSTREAM: wifi: mt76: mt7921: add 6GHz power type support for clc
    - BACKPORT: UPSTREAM: wifi: mt76: mt7921: get regulatory information from the
      clc event
    - BACKPORT: UPSTREAM: wifi: mt76: mt7921: update the channel usage when the
      regd domain changed
    - BACKPORT: FROMGIT: wifi: mt76: mt7921: support 5.9/6GHz channel config in
      acpi
    - UPSTREAM: wifi: mt76: mt7921: fix kernel panic by accessing invalid 6GHz
      channel info
    - UPSTREAM: wifi: mt76: mt7921: fix 6GHz disabled by the missing default CLC
      config
    - FROMGIT: wifi: mt76: mt7921: fix country count limitation for CLC
    - BACKPORT: FROMGIT: wifi: mt76: mt7921: fix CLC command timeout when
      suspend/resume
    - FROMGIT: wifi: mt76: mt7921: fix wrong 6Ghz power type
    - FROMLIST: wifi: mt76: mt7921: fix incorrect type conversion for CLC command
    - BACKPORT: FROMLIST: wifi: mt76: mt7921: fix the unfinished command of
      regd_notifier before suspend
    - BACKPORT: FROMLIST: wifi: mt76: mt792x: fix a potential loading failure of
      the 6Ghz channel config from ACPI
    - FROMLIST: wifi: mt76: mt792x: update the country list of EU for ACPI SAR
    - UPSTREAM: wifi: mt76: mt7921s: fix workqueue problem causes STA association
      fail
    - FROMLIST: wifi: mt76: mt792x: add the illegal value check for mtcl table of
      acpi
    - Revert "BACKPORT: FROMLIST: wifi: mt76: mt7921: fix the unfinished command
      of regd_notifier before suspend"
    - BACKPORT: FROMLIST: wifi: mt76: mt7921: fix the unfinished command of
      regd_notifier before suspend
    - wifi: mt76: fix broken precal loading from MTD for mt7915
    - BACKPORT: FROMLIST: wifi: mt76: mt7921: fix a potential association failure
      upon resuming
    - BACKPORT: wifi: mt76: mt7921: reduce the size of MCU firmware download Rx
      queue
    - FROMLIST: wifi: mt76: fix the issue of missing txpwr settings from ch153 to
      ch177
    - FROMLIST: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery
    - Revert "FIXUP: media: v4l2-core: extend the v4l2 format to support request"
    - UPSTREAM: ASoC: SOF: core: allow module parameter to override dma trace
      Kconfig
    - UPSTREAM: ASoC: SOF: control: fix a typo in put operations for kcontrol
    - UPSTREAM: ASoC: SOF: Handle control change notification from firmware
    - UPSTREAM: ASoC: SOF: Drop resindex_dma_base, dma_engine, dma_size from
      sof_dev_desc
    - UPSTREAM: ASoC: SOF: loader: load_firmware callback is mandatory, treat it
      like that
    - UPSTREAM: ASoC: SOF: ipc: Remove snd_sof_dsp_mailbox_init()
    - UPSTREAM: ASoC: SOF: loader: No need to export snd_sof_fw_parse_ext_data()
    - UPSTREAM: ASoC: SOF: core: Do not use 'bar' as parameter for
      block_read/write
    - UPSTREAM: ASoC: SOF: debug: Add generic API and ops for DSP regions
    - UPSTREAM: ASoC: SOF: loader: Use the generic ops for region debugfs handling
    - UPSTREAM: ASoC: SOF: debug: No need to export the snd_sof_debugfs_io_item()
    - UPSTREAM: ASoC: SOF: ipc: Add probe message logging to ipc_log_header()
    - UPSTREAM: ASoC: SOF: pcm: Remove non existent CONFIG_SND_SOC_SOF_COMPRESS
      reference
    - BACKPORT: ASoC: SOF: compress: move and export sof_probe_compr_ops
    - BACKPORT: ASoC: SOF: probe: Merge and clean up the probe and compress files
    - UPSTREAM: ASoC: SOF: core: Move probe work related code under a single if ()
      branch
    - UPSTREAM: ASoC: SOF: ipc: Clarify the parameter name for ipc_trace_message()
    - UPSTREAM: ASoC: SOF: ipc: Print 0x prefix for errors in
      ipc_trace/stream_message()
    - UPSTREAM: ASoC: SOF: ipc: Remove redundant error check from
      sof_ipc_tx_message_unlocked
    - UPSTREAM: ASoC: SOF: Rename sof_arch_ops to dsp_arch_ops
    - UPSTREAM: ASoC: soc-component: Convert the mark_module to void*
    - UPSTREAM: ASoC: compress/component: Use module_get_when_open/put_when_close
      for cstream
    - UPSTREAM: ASoC: soc-pcm: Don't reconnect an already active BE
    - UPSTREAM: ASoC: SOF: Remove struct sof_ops_table and sof_get_ops() macro
    - UPSTREAM: ASoC: SOF: pm: fix a stale comment
    - BACKPORT: ASoC: SOF: add error handling to snd_sof_ipc_msg_data()
    - UPSTREAM: ASoC: SOF: prefix some terse and cryptic dev_dbg() with __func__
    - UPSTREAM: ASoC: SOF: ipc: Make the error prints consistent in tx_wait_done()
    - UPSTREAM: ASoC: SOF: Change SND_SOC_SOF_TOPLEVEL from config to menuconfig
    - UPSTREAM: ASoC: soc-component: Remove conditional definition of debugfs data
      members
    - UPSTREAM: ASoC: topology: change the complete op in snd_soc_tplg_ops to
      return int
    - UPSTREAM: ASoC: SOF: control: Add access field in struct snd_sof_control
    - UPSTREAM: ASoC: SOF: topology: Add new token for dynamic pipeline
    - UPSTREAM: ASoC: SOF: sof-audio: add helpers for widgets, kcontrols and dai
      config set up
    - UPSTREAM: AsoC: dapm: export a couple of functions
    - UPSTREAM: ASoC: SOF: Add new fields to snd_sof_route
    - UPSTREAM: ASoC: SOF: restore kcontrols for widget during set up
    - UPSTREAM: ASoC: SOF: Don't set up widgets during topology parsing
    - UPSTREAM: ASoC: SOF: Introduce widget use_count
    - BACKPORT: ASoC: SOF: Intel: hda: make sure DAI widget is set up before IPC
    - BACKPORT: ASoC: SOF: Add support for dynamic pipelines
    - UPSTREAM: ASoC: SOF: topology: Add kernel parameter for topology
      verification
    - UPSTREAM: ASoC: SOF: dai: mirror group_id definition added in firmware
    - UPSTREAM: ASoC: SOF: dai: include new flags for DAI_CONFIG
    - BACKPORT: ASoC: SOF: Intel: hda: add new flags for DAI_CONFIG
    - UPSTREAM: ASoC: SOF: topology: allow for dynamic pipelines override for
      debug
    - UPSTREAM: ASoC: SOF: OF: Add fw_path and tplg_path parameters
    - UPSTREAM: ASoC: SOF: core: debug: force all processing on primary core
    - UPSTREAM: ASoC: SOF: debug: Swap the dsp_dump and ipc_dump sequence for
      fw_exception
    - UPSTREAM: ASoC: SOF: ipc and dsp dump: Add markers for better visibility
    - UPSTREAM: ASoC: SOF: Print the dbg_dump and ipc_dump once to reduce kernel
      log noise
    - UPSTREAM: ASoC: SOF: loader: Print the DSP dump if boot fails
    - UPSTREAM: ASoC: SOF: debug/ops: Move the IPC and DSP dump functions out from
      the header
    - UPSTREAM: ASoC: SOF: debug: Add SOF_DBG_DUMP_OPTIONAL flag for DSP dumping
    - BACKPORT: ASoC: SOF: Drop SOF_DBG_DUMP_FORCE_ERR_LEVEL and
      sof_dev_dbg_or_err
    - UPSTREAM: ASoC: SOF: debug: Print out the fw_state along with the DSP dump
    - UPSTREAM: ASoC: SOF: ipc: Re-enable dumps after successful IPC tx
    - UPSTREAM: ASoC: SOF: ops: Force DSP panic dumps to be printed
    - UPSTREAM: ASoC: SOF: Introduce macro to set the firmware state
    - UPSTREAM: ASoC: SOF: core: Clean up snd_sof_get_status() prints
    - UPSTREAM: ASoC: SOF: loader: Drop SOF_DBG_DUMP_REGS flag when firmware start
      fails
    - UPSTREAM: ASoC: SOF: pipelines: Harmonize all functions to use struct
      snd_sof_dev
    - BACKPORT: ASoC: SOF: Introduce snd_sof_mailbox_read / snd_sof_mailbox_write
      callbacks
    - BACKPORT: ASoC: SOF: Make Intel IPC stream ops generic
    - UPSTREAM: ASoC: SOF: Introduce fragment elapsed notification API
    - UPSTREAM: ASoC: soc-pcm: restore mixer functionality
    - UPSTREAM: ASoC: SOF: prepare code to allocate IPC messages in fw_ready
    - UPSTREAM: ALSA: pcm: Unify snd_pcm_delay() and snd_pcm_hwsync()
    - UPSTREAM: ALSA: memalloc: Support for non-contiguous page allocation
    - UPSTREAM: ALSA: memalloc: Support for non-coherent page allocation
    - UPSTREAM: ASoC: soc-pcm: tidyup soc_pcm_hw_clean() - step1
    - UPSTREAM: ASoC: soc-pcm: tidyup soc_pcm_hw_clean() - step2
    - UPSTREAM: ASoC: soc-component: add snd_soc_component_is_codec()
    - UPSTREAM: ASoC: SOF:control: Fix variable type in snd_sof_refresh_control()
    - UPSTREAM: ASoC: SOF: build compression interface into snd_sof.ko
    - UPSTREAM: ASoC: SOF: IPC: Add new IPC command to free trace DMA
    - UPSTREAM: ASoC: SOF: IPC: update ipc_log_header()
    - UPSTREAM: ASoC: SOF: trace: send DMA_TRACE_FREE IPC during release
    - UPSTREAM: ASoC: SOF: core: Unregister machine driver before IPC and debugfs
    - UPSTREAM: ASoC: SOF: i.MX: simplify Kconfig
    - UPSTREAM: ASoC: SOF: utils: Add generic function to get the reply for a tx
      message
    - UPSTREAM: ASoC: SOF: debug: Add support for IPC message injection
    - UPSTREAM: ASoC: SOF: topology: Add support for AMD ACP DAIs
    - UPSTREAM: ASoC: SOF: mediatek: Add mt8195 hardware support
    - UPSTREAM: ASoC: SOF: tokens: add token for Mediatek AFE
    - UPSTREAM: ASoC: SOF: topology: Add support for Mediatek AFE DAI
    - UPSTREAM: ASoC: SOF: mediatek: Add fw loader and mt8195 dsp ops to load
      firmware
    - UPSTREAM: ASoC: SOF: Add mt8195 device descriptor
    - UPSTREAM: ASoC: SOF: mediatek: Add dai driver dsp ops callback for mt8195
    - UPSTREAM: ASoC: SOF: mediatek: Add mt8195 dsp clock support
    - UPSTREAM: ASoC: SOF: mediatek: Add DSP system PM callback for mt8195
    - UPSTREAM: ASoC: SOF: Introduce num_cores and ref count per core
    - UPSTREAM: ASoC: SOF: Add ops for core_get and core_put
    - UPSTREAM: ASoC: SOF: topology: remove sof_load_pipeline_ipc()
    - UPSTREAM: ASoC: SOF: free widgets in sof_tear_down_pipelines() for static
      pipelines
    - BACKPORT: ASoC: SOF: add support for dynamic pipelines with multi-core
    - UPSTREAM: ASoC: SOF: pcm: add .ack callback support
    - UPSTREAM: ASoC: SOF: sof-audio: setup sched widgets during pipeline complete
      step
    - UPSTREAM: ASoC: SOF: topology: don't use list_for_each_entry_reverse()
    - UPSTREAM: ASoC: SOF: handle paused streams during system suspend
    - UPSTREAM: ASoC: SOF: mediatek: Add missing of_node_put() in
      platform_parse_resource()
    - UPSTREAM: ASoC: SOF: pcm: invoke platform hw_free for STOP/SUSPEND triggers
    - UPSTREAM: ASoC: SOF: call platform hw_free for paused streams during suspend
    - UPSTREAM: ASoC: SOF: Add a helper for freeing PCM stream
    - UPSTREAM: ASoC: SOF: pcm: move the check for prepared flag
    - UPSTREAM: ASoC: SOF: align the hw_free sequence with stop
    - BACKPORT: ASoC: SOF: IPC: dai: Expand DAI_CONFIG IPC flags
    - UPSTREAM: ASoC: SOF: mediatek: Use %pR/%pa to print resources/physical
      addresses
    - UPSTREAM: ASoC: soc-dai: update snd_soc_dai_delay() to
      snd_soc_pcm_dai_delay()
    - UPSTREAM: ASoC: soc-component: add snd_soc_pcm_component_delay()
    - UPSTREAM: ASoC: SOF: Remove pm_runtime_put_autosuspend() for SOF OF device
    - BACKPORT: ASoC: SOF: OF: Avoid reverse module dependency
    - UPSTREAM: ASoC: SOF: ipc: Rename send parameter in
      snd_sof_ipc_set_get_comp_data()
    - UPSTREAM: ASoC: SOF: Drop ipc_cmd parameter for
      snd_sof_ipc_set_get_comp_data()
    - UPSTREAM: ASoC: SOF: topology: Set control_data->cmd alongside scontrol->cmd
    - UPSTREAM: ASoC: SOF: Drop ctrl_cmd parameter for
      snd_sof_ipc_set_get_comp_data()
    - UPSTREAM: ASoC: SOF: sof-audio: Drop the `cmd` member from struct
      snd_sof_control
    - UPSTREAM: ASoC: SOF: control: Do not handle control notification with
      component type
    - UPSTREAM: ASoC: SOF: Drop ctrl_type parameter for
      snd_sof_ipc_set_get_comp_data()
    - UPSTREAM: ASoC: SOF: topology: read back control data from DSP
    - UPSTREAM: ASoC: SOF: pcm: remove support for RESUME trigger
    - BACKPORT: ASoC: SOF: avoid casting "const" attribute away
    - UPSTREAM: ASoC: SOF: ipc: Add null pointer check for substream->runtime
    - UPSTREAM: ASoC: SOF: Kconfig: Make the SOF_DEVELOPER_SUPPORT depend on
      SND_SOC_SOF
    - UPSTREAM: ASoC: SOF: ops: Use dev_warn() if the panic offsets differ
    - UPSTREAM: ASoC: SOF: core: Add simple wrapper to check flags in
      sof_core_debug
    - UPSTREAM: ASoC: SOF: Use sof_debug_check_flag() instead of sof_core_debug
      directly
    - BACKPORT: ASoC: SOF: Add 'non_recoverable' parameter to snd_sof_dsp_panic()
    - BACKPORT: ASoC: SOF: Add a 'message' parameter to snd_sof_dsp_dbg_dump()
    - UPSTREAM: ASoC: SOF: Introduce new firmware state: SOF_FW_CRASHED
    - UPSTREAM: ASoC: SOF: Introduce new firmware state: SOF_FW_BOOT_READY_OK
    - UPSTREAM: ASoC: SOF: Move the definition of enum snd_sof_fw_state to global
      header
    - UPSTREAM: ASoC: SOF: Rename 'enum snd_sof_fw_state' to 'enum sof_fw_state'
    - UPSTREAM: ASoC: SOF: ipc: Only allow sending of an IPC in
      SOF_FW_BOOT_COMPLETE state
    - UPSTREAM: ASoC: SOF: Set SOF_FW_BOOT_FAILED in case we have failure during
      boot
    - UPSTREAM: ASoC: SOF: pm: Force DSP off on suspend in BOOT_FAILED state also
    - UPSTREAM: ASoc: SOF: core: Update the FW boot state transition diagram
    - UPSTREAM: ASoC: SOF: ops: Always print DSP Panic message but use different
      message
    - UPSTREAM: ASoC: SOF: dsp_arch_ops: add kernel log level parameter for oops
      and stack
    - BACKPORT: ASoC: SOF: Rename snd_sof_get_status() and add kernel log level
      parameter
    - UPSTREAM: ASoC: SOF: Add clarifying comments for sof_core_debug and DSP dump
      flags
    - UPSTREAM: ASoC: SOF: add _D3_PERSISTENT flag to fw_ready message
    - BACKPORT: ASoC: SOF: add flag to disable IMR restore to sof_debug
    - UPSTREAM: ASoC: SOF: trace: Simplify count adjustment in trace_read
    - UPSTREAM: ASoC: SOF: ipc: Drop header parameter from
      sof_ipc_tx_message_unlocked()
    - UPSTREAM: ASoC: SOF: ipc: Do not allocate buffer for msg_data
    - BACKPORT: ASoC: SOF: dma-trace: Pass pointer to params_ext struct in
      trace_init()
    - UPSTREAM: ASoC: SOF: compr: Add compress ops implementation
    - UPSTREAM: ASoC: SOF: Drop unused DSP power states: D3_HOT and D3_COLD
    - UPSTREAM: ASoC: SOF: Move the definition of enum sof_dsp_power_states to
      global header
    - UPSTREAM: ASoC: SOF: ipc: Read and pass the whole message to handlers for
      IPC events
    - UPSTREAM: ASoC: SOF: Split up utils.c into sof-utils and iomem-utils
    - UPSTREAM: ASoC: SOF: Introduce IPC SOF client support
    - UPSTREAM: ASoC: SOF: sof-client: Add support for clients not managed by pm
      framework
    - UPSTREAM: ASoC: SOF: Convert the generic IPC flood test into SOF client
    - UPSTREAM: ASoC: SOF: Convert the generic IPC message injector into SOF
      client
    - BACKPORT: ASoC: SOF: Convert the generic probe support to SOF client
    - UPSTREAM: ASoC: SOF: compr: Mark snd_compress_ops static
    - UPSTREAM: ASoC: SOF: Makefile: Fix randconfig sof-client build when
      SND_SOC_SOF=y
    - UPSTREAM: ASoC: SOF: Replace zero-length array with flexible-array member
    - UPSTREAM: ASoC: SOF: pcm: Add compress_ops for SOF platform component driver
    - UPSTREAM: ASoC: SOF: Declare sof_compress_ops in sof-priv.h
    - UPSTREAM: ASoC: SOF: sof-priv: Drop duplicate sof_compressed_ops declaration
    - UPSTREAM: ASoC: SOF: fix 32 signed bit overflow
    - UPSTREAM: ASoC: SOF: remove snd_sof_pipeline_find()
    - UPSTREAM: ASoC: SOF: simplify snd_sof_device_remove()
    - UPSTREAM: ASoC: SOF: set swidget's core for scheduler widget
    - UPSTREAM: ASoC: SOF: sof-audio: removed unused function
    - UPSTREAM: ASoC: SOF: topology: remove redundant code in sof_link_afe_load()
    - UPSTREAM: ASoC: SOF: topology: remove redundant code
    - UPSTREAM: ASoC: SOF: topology: Drop the size parameter from struct
      sof_topology_token
    - UPSTREAM: ASoC: SOF: topology: Modify the get_token op for string tokens
    - UPSTREAM: ASoC: SOF: topology: expose some get_token ops
    - UPSTREAM: ASoC: SOF: change comp_dai to a pointer in struct snd_sof_dai
    - UPSTREAM: ASoC: SOF: make struct snd_sof_widget IPC agnostic
    - UPSTREAM: ASoC: SOF: topology: make sof_route_load() IPC agnostic
    - UPSTREAM: ASoC: SOF: Add a tuples array to struct snd_sof_widget
    - UPSTREAM: ASoC: SOF: topology: Modify signature for token parsing functions
    - UPSTREAM: ASoC: SOF: topology: Rename arguments in sof_parse_token_sets()
    - UPSTREAM: ASoC: SOF: topology: Rename arguments in sof_parse_tokens()
    - BACKPORT: ASoC: SOF: make struct snd_sof_dai IPC agnostic
    - UPSTREAM: ASoC: SOF: move definition of snd_sof_ipc to header file
    - UPSTREAM: ASoC: SOF: ipc-msg-injector: Use devm_kzalloc() for the rx_buffer
    - UPSTREAM: ASoC: SOF: compress: fix null check after dereference
    - UPSTREAM: ASoC: SOF: trace: Use proper DMA direction for the trace data
      buffer
    - UPSTREAM: ASoC: SOF: sof-priv: Remove stale snd_sof_ipc_stream_pcm_params()
      declaration
    - BACKPORT: ASoC: SOF: Make pcm_hw_params snd_sof_dsp_ops callback IPC neutral
    - UPSTREAM: ASoC: SOF: pcm: Remove sof_pcm_dsp_params() wrapper
    - UPSTREAM: ASoC: SOF: Introduce optional callback to configure stream data
      offset
    - UPSTREAM: ASoC: SOF: Mark snd_sof_dsp_ops.ipc_pcm_params() callback optional
    - UPSTREAM: ASoC: SOF: stream-ipc: Add sof_set_stream_data_offset()
    - UPSTREAM: ASoC: SOF: Remove ipc_pcm_params() ops
    - UPSTREAM: ASoC: Export DAI register and widget ctor and dctor functions
    - UPSTREAM: ASoC: SOF: Introduce struct snd_sof_dai_link
    - UPSTREAM: ASoC: SOF: IPC: Introduce IPC ops
    - UPSTREAM: ASoC: SOF: topology: Add helper function for processing tuple
      arrays
    - UPSTREAM: ASoC: SOF: Introduce IPC3 ops
    - UPSTREAM: ASoC: SOF: topology: Make scheduler widget parsing IPC agnostic
    - UPSTREAM: ASoC: SOF: topology: Make buffer widget parsing IPC agnostic
    - UPSTREAM: ASoC: SOF: topology: Make pga widget parsing IPC agnostic
    - UPSTREAM: ASoC: SOF: topology: Make mixer widget parsing IPC agnostic
    - UPSTREAM: ASoC: SOF: topology: Make mux/demux widget parsing IPC agnostic
    - UPSTREAM: ASoC: SOF: topology: Make src widget parsing IPC agnostic
    - UPSTREAM: ASoC: SOF: topology: Make asrc widget parsing IPC agnostic
    - UPSTREAM: ASoC: SOF: topology: Make siggen widget parsing IPC agnostic
    - UPSTREAM: ASoC: SOF: topology: Make effect widget parsing IPC agnostic
    - UPSTREAM: ASoC: SOF: topology: Make route setup IPC agnostic
    - UPSTREAM: ASoC: SOF: topology: return error if sof_connect_dai_widget()
      fails
    - UPSTREAM: ASoC: SOF: topology: Make route setup IPC agnostic
    - UPSTREAM: ASoC: SOF: topology: Make control parsing IPC agnostic
    - UPSTREAM: ASoC: SOF: topology: Make widget binding IPC agnostic
    - UPSTREAM: ASoC: SOF: topology: remove snd_sof_complete_pipeline()
    - UPSTREAM: ASoC: SOF: topology: Use kmemdup() to replace kzalloc + memcpy
    - UPSTREAM: ASoC: SOF: set up scheduler widget before all other widgets in the
      pipeline
    - BACKPORT: ASoC: SOF: Make sof_widget_setup/free IPC agnostic
    - UPSTREAM: ASoC: SOF: Make sof_suspend/resume IPC agnostic
    - UPSTREAM: ASoC: SOF: Introduce IPC ops for kcontrol IO
    - UPSTREAM: ASoC: SOF: Add IPC3 topology control ops
    - UPSTREAM: ASoC: SOF: Add volume_get/put IPC3 ops
    - UPSTREAM: ASoC: SOF: Add switch get/put IPC3 ops
    - UPSTREAM: ASoC: SOF: Add enum_get/put control ops for IPC3
    - UPSTREAM: ASoC: SOF: Add bytes_get/put control IPC ops for IPC3
    - UPSTREAM: ASoC: SOF: Add bytes_ext control IPC ops for IPC3
    - UPSTREAM: ASoC: SOF: Introduce IPC-specific PCM ops
    - UPSTREAM: ASoC: SOF: pcm: expose the sof_pcm_setup_connected_widgets()
      function
    - UPSTREAM: ASoC: SOF: Introduce IPC3 PCM hw_free op
    - UPSTREAM: ASoC: SOF: Define hw_params PCM op for IPC3
    - UPSTREAM: ASoC: SOF: Add trigger PCM op for IPC3
    - UPSTREAM: ASoC: SOF: Add dai_link_fixup PCM op for IPC3
    - UPSTREAM: ASoC: SOF: expose sof_route_setup()
    - UPSTREAM: ASoC: SOF: topology: Add ops for setting up and tearing down
      pipelines
    - UPSTREAM: ASoC: SOF: Add a new dai_get_clk topology IPC op
    - UPSTREAM: ASoC: SOF: Remove dmab and dmab_bdl from snd_sof_dev struct
    - UPSTREAM: ASoC: SOF: ipc: Add max_payload_size field in struct snd_sof_ipc
    - UPSTREAM: ASoC: SOF: ipc: Use ipc->max_payload_size for message/reply size
      checking
    - UPSTREAM: ASoC: SOF: Drop support for mapped control data
    - UPSTREAM: ASoC: SOF: extend the interface to stop DMA trace
    - UPSTREAM: ASoC: SOF: disable dma trace in s0ix
    - UPSTREAM: ASoC: SOF: ipc: Use msg->reply_data directly in
      snd_sof_ipc_get_reply()
    - BACKPORT: ASoC: SOF: Drop 'header' parameter from tx_message() API
    - UPSTREAM: ASoC: SOF: Remove header from struct snd_sof_ipc_msg
    - UPSTREAM: ASoC: SOF: Remove redundant return statements
    - UPSTREAM: ASoC: SOF: topology: Fix memory leak of scontrol->name
    - UPSTREAM: ASoC: SOF: topology: use new sound control LED layer
    - UPSTREAM: ASoC: SOF: ipc3-topology: Set scontrol->priv to NULL after freeing
      it
    - UPSTREAM: ASoC: SOF: topology: Avoid open coded arithmetic in memory
      allocation
    - UPSTREAM: ASoC: SOF: topology: cleanup dailinks on widget unload
    - UPSTREAM: ASoC: SOF: topology: Fix memory leak in sof_control_load()
    - UPSTREAM: ASoC: SOF: OF: Add shutdown callback for SOF OF device
    - UPSTREAM: ASoC: SOF: mediatek: mt8195 add shutdown callback
    - UPSTREAM: ASoC: SOF: Add helper function to prepare and send an IPC message
    - UPSTREAM: ASoC: SOF: Add high level IPC IO callback definitions to ipc_ops
    - UPSTREAM: ASoC: SOF: ipc3: Implement the tx_msg IPC ops
    - UPSTREAM: ASoC: SOF: ipc3: Use sof_ipc3_tx_msg() internally for message
      sending
    - UPSTREAM: ASoC: SOF: ipc3: Implement the set_get_data IPC ops
    - UPSTREAM: ASoC: SOF: ipc3: Implement the get_reply IPC ops
    - UPSTREAM: ASoC: SOF: ipc3: Implement rx_msg IPC ops
    - UPSTREAM: ASoC: SOF: ipc: Separate the ops checks by functions/topics
    - UPSTREAM: ASoC: SOF: ipc: Add check for mandatory IPC message handling ops
    - UPSTREAM: ASoC: SOF: ipc: Use the get_reply ops in snd_sof_ipc_get_reply()
    - UPSTREAM: ASoC: SOF: ipc: Switch over to use the tx_msg and set_get_data ops
    - UPSTREAM: ASoC: SOF: ipc: Switch over to use the rx_msg ops
    - UPSTREAM: ASoC: SOF: Add widget_kcontrol_setup control ops for IPC3
    - UPSTREAM: ASoC: SOF: sof-audio: Use the widget_kcontrol_setup ops for
      kcontrol set up
    - UPSTREAM: ASoC: SOF: ipc: Move the ipc_set_get_comp_data() local to
      ipc3-control
    - UPSTREAM: ASoC: SOF: add definitions for different IPC types
    - BACKPORT: ASoC: SOF: add path indirection to each IPC type
    - BACKPORT: ASoC: SOF: add default IPC capability and file paths
    - BACKPORT: ASoC: SOF: add IPC-dependent file names
    - UPSTREAM: ASoC: SOF: sof-pci-dev: add parameter to override firmware
      filename
    - UPSTREAM: ASoC: SOF: sof-audio: preserve topology filename override in
      nocodec mode
    - BACKPORT: ASoC: SOF: remove const qualifier for 'struct snd_sof_dsp_ops'
    - BACKPORT: ASoC: SOF: Intel: hda: use common ops across platforms
    - UPSTREAM: ASoC: SOF: using pm_runtime_resume_and_get to simplify the code
    - UPSTREAM: ASOC: SOF: pci: add ipc_type override for Intel IPC4 tests
    - UPSTREAM: ASoC: SOF: sof-audio: remove useless assignment
    - UPSTREAM: ASoC: SOF: topology: Check w->sname validity once in
      sof_connect_dai_widget()
    - UPSTREAM: ASoC: SOF: remove incorrect clearing of prepared flag
    - UPSTREAM: ASoC: SOF: sof-audio: flag errors on pipeline teardown
    - UPSTREAM: ASoC: SOF: ipc3: Add local implementation for handling fw_ready
      message
    - UPSTREAM: ASoC: SOF: Do not check for the fw_ready callback
    - UPSTREAM: ASoC: SOF: loader: Remove the old fw_ready related code
    - UPSTREAM: ASoC: SOF: mediatek: Add mt8186 hardware support
    - UPSTREAM: ASoC: SOF: mediatek: Add mt8186 sof fw loader and dsp ops
    - UPSTREAM: ASoC: SOF: mediatek: Add mt8186 dsp clock support
    - UPSTREAM: ASoC: SOF: mediatek: Add DSP system PM callback for mt8186
    - UPSTREAM: ASoC: SOF: control: use pm_runtime_resume_and_get()
    - UPSTREAM: ASoC: SOF: debug: use pm_runtime_resume_and_get()
    - UPSTREAM: ASoC: SOF: sof-client-ipc-msg-injector: use
      pm_runtime_resume_and_get()
    - UPSTREAM: ASoC: SOF: mediatek: mt8195 change ipc timeout as 1 second
    - UPSTREAM: ASoC: SOF: mediatek: Fix allyesconfig build error
    - UPSTREAM: ASoC: SOF: Add a new op to set up volume table
    - UPSTREAM: ASoC: SOF: sof-audio: reset route status before freeing widget
    - UPSTREAM: ASoC: SOF: sof-audio: Set up widgets from source to sink
    - UPSTREAM: ASoC: SOF: pcm: Move the call to snd_sof_pcm_platform_hw_params()
    - UPSTREAM: ASoC: SOF: expose a couple of functions
    - UPSTREAM: ASoC: SOF: Add a route_free op in struct sof_ipc_tplg_ops
    - UPSTREAM: ASoC: SOF: Add two new fields to struct snd_sof_widget
    - UPSTREAM: ASoC: SOF: pcm: remove unnecessary function declaration
    - UPSTREAM: ASoC: SOF: topology: Skip parsing DAI link tokens if not needed
    - UPSTREAM: ASoC: SOF: clarify use of widget complete flag
    - UPSTREAM: ASoC: SOF: Add a prepare op to IPC topology widget ops
    - UPSTREAM: ASoC: SOF: Introduce IPC dependent ops for firmware handling,
      loading
    - UPSTREAM: ASoC: SOF: ipc3-loader: Implement firmware parsing and loading
    - UPSTREAM: ASoC: SOF: ipc: Add check for fw_loader ops
    - UPSTREAM: ASoC: SOF: loader: Switch to use the fw_loader ops
    - UPSTREAM: ASoC: SOF: mediatek: mt8195: Do not set the load_module ops
    - UPSTREAM: ASoC: SOF: loader: Remove snd_sof_parse_module_memcpy() as it is
      not used
    - UPSTREAM: ASoC: SOF: loader: Call optional query_fw_configuration on first
      boot
    - UPSTREAM: ASoC: SOF: sof-pci-dev: fix missing pci_release_regions() on error
      in sof_pci_probe()
    - UPSTREAM: ASoC: dsp: mediatek: add mt8195 dsp document
    - UPSTREAM: ASoC: SOF: ipc3-topology: Correct get_control_data for non bytes
      payload
    - UPSTREAM: ASoC: SOF: ipc3: Remove the ipc3-ops.h header file
    - UPSTREAM: ASoC: SOF: Add rx_data pointer to snd_sof_ipc_msg struct
    - UPSTREAM: ASoC: SOF: sof-client: Add API to get the maximum IPC payload size
    - UPSTREAM: ASoC: SOF: ipc-msg-injector: Query the maximum IPC payload size
    - UPSTREAM: ASoC: SOF: sof-client-probes: Query the maximum IPC payload size
    - UPSTREAM: ASoC: SOF: sof-client: Add API to get the ipc_type
    - BACKPORT: ASoC: SOF: sof-client: Add support IPC4 message sending
    - UPSTREAM: ASoC: SOF: ipc-msg-injector: Separate the message sending
    - UPSTREAM: ASoC: SOF: sof-client: IPC flood test can only work with SOF_IPC
    - UPSTREAM: ASoC: SOF: trace: The dtrace is only available with SOF_IPC
    - BACKPORT: ASoC: SOF: ipc: introduce cont_update_posn in
      sof_ipc_stream_params struct
    - UPSTREAM: ASoC: SOF: mediatek: Add ipc support for mt8195
    - UPSTREAM: ASoC: SOF: mediatek: Add mt8186 ipc support
    - UPSTREAM: ASoC: SOF: Introduce IPC independent ops for firmware tracing
      support
    - UPSTREAM: ASoC: SOF: Rename dtrace_is_supported flag to
      fw_trace_is_supported
    - BACKPORT: ASoC: SOF: Clone the trace code to ipc3-dtrace as fw_tracing
      implementation
    - UPSTREAM: ASoC: SOF: Switch to IPC generic firmware tracing
    - UPSTREAM: ASoC: SOF: ipc3-dtrace: Move host ops wrappers from generic header
      to private
    - BACKPORT: ASoC: SOF: Modify the host trace_init parameter list to include
      dmab
    - UPSTREAM: ASoC: SOF: Introduce opaque storage of private data for firmware
      tracing
    - UPSTREAM: ASoC: SOF: ipc3-dtrace: Move dtrace related variables local from
      sof_dev
    - UPSTREAM: ASoC: SOF: mediatek: Add mediatek common debug dump
    - UPSTREAM: ASoC: SOF: mediatek: Add mt8195 debug dump
    - UPSTREAM: ASoC: SOF: mediatek: remove duplicate include in mt8195.c
    - UPSTREAM: ASoC: SOF: Fix potential NULL pointer dereference
    - BACKPORT: ASoC: SOF: ipc-msg-injector: Propagate write errors correctly
    - UPSTREAM: ASoC: SOF: mediatek: revise mt8195 clock sequence
    - UPSTREAM: ASoC: SOF: mediatek: Add shared_size for mediatek common chip
      information
    - UPSTREAM: ASoC: SOF: mediatek: mt8195 modify dram type as non-cache
    - UPSTREAM: ASoC: SOF: mediatek: mt8195 suspend check dsp idle
    - UPSTREAM: ASoC: SOF: make ctx_store and ctx_restore as optional
    - UPSTREAM: ASoC: SOF: sof_ipc_pm_ops: Add support for DSP core power
      management
    - UPSTREAM: ASoC: SOF: ipc3: Add set_core_state pm_ops implementation
    - UPSTREAM: ASoC: SOF: ipc3-dtrace: Introduce SOF_DTRACE_INITIALIZING state
    - UPSTREAM: ASoC: SOF: ipc3-dtrace: Add helper function to update the
      sdev->host_offset
    - UPSTREAM: ASoC: SOF: ipc3-dtrace: Return from dtrace_read if there is no new
      data available
    - UPSTREAM: ASoC: SOF: Add topology tokens for IPC4
    - BACKPORT: ASoC: SOF: ipc4-topology: Add support for parsing AIF_IN/AIF_OUT
      widgets
    - UPSTREAM: ASoC: SOF: Add ops_free
    - BACKPORT: ASoC: SOF: Add a new IPC op for parsing topology manifest
    - UPSTREAM: ASoC: SOF: debug: Clarify the IPC timeout handling path
    - UPSTREAM: ASoC: SOF: ipc3-dtrace: use pm_runtime_resume_and_get()
    - UPSTREAM: ASoC: SOF: reduce default verbosity of IPC logs
    - UPSTREAM: ASoC: SOF: topology: add code to parse config params for ACPDMIC
      dai
    - BACKPORT: ASoC: SOF: Compile and runtime IPC version selection
    - UPSTREAM: ASoC: SOF: ipc3-dtrace: remove use of __func__ in dev_dbg
    - UPSTREAM: ASoC: SOF: ipc3-loader: remove use of __func__ in dev_dbg
    - UPSTREAM: ASoC: SOF: ipc3-topology: remove use of __func__ in dev_dbg
    - UPSTREAM: ASoC: SOF: sof-client: remove use of __func__ in dev_dbg
    - UPSTREAM: ASoC: SOF: pcm: use pm_resume_and_get() on component probe
    - UPSTREAM: dt-bindings: dsp: mediatek: Use meaningful names for mbox
    - UPSTREAM: ASoC: SOF: mediatek: Align mt8186 clock names with dt-bindings
    - UPSTREAM: ASoC: SOF: ipc3-topology: Move and correct size checks in
      sof_ipc3_control_load_bytes()
    - UPSTREAM: ASoC: SOF: mediatek: Fix error code in probe
    - UPSTREAM: ASoC: SOF: pm: add explicit behavior for ACPI S1 and S2
    - UPSTREAM: ASoC: SOF: pm: add definitions for S4 and S5 states
    - UPSTREAM: ASoC: SOF: mediatek: Revise mt8195 boot flow
    - UPSTREAM: ASoC: SOF: mediatek: fix mt8195 StatvectorSel wrong setting
    - UPSTREAM: ASoC: SOF: remove warning on ABI checks
    - UPSTREAM: ASoC: SOF: topology: remove unused variable
    - UPSTREAM: ASoC: SOF: compress: Dynamically allocate pcm params struct
    - UPSTREAM: ASoC: SOF: Copy compress parameters into extended data
    - UPSTREAM: ASoC: SOF: compress: Prevent current kernel running with older FW
    - UPSTREAM: ASoC: SOF: sof-client-probes: Only load the driver if IPC3 is used
    - UPSTREAM: ASoC: SOF: ipc3-topology: Prevent double freeing of
      ipc_control_data via load_bytes
    - UPSTREAM: ASoC: SOF: ipc3-loader: Print out the non matching ext_man magic
      number
    - BACKPORT: ASoC: SOF: probes: rename assign/free callbacks as
      startup/shutdown
    - BACKPORT: ASoC: mediatek: mt8195: extract SOF common code
    - UPSTREAM: ASoC: SOF: Add cont_update_posn to platform parameters
    - UPSTREAM: ASoC: SOF: ipc3-topology: Fix clang -Wformat warning
    - UPSTREAM: ASoC: SOF: compress: Remove byte offset computation
    - UPSTREAM: ASoC: SOF: compress: Introduce sof_compr_stream
    - UPSTREAM: ASoC: SOF: compress: Save channel count and sample bytes
    - UPSTREAM: ASoC: SOF: compress: Add support for computing timestamps
    - UPSTREAM: ASoC: SOF: compress: Remove dai_posn variable
    - UPSTREAM: ASoC: SOF: Kconfig: Make IPC_FLOOD_TEST depend on SND_SOC_SOF
    - UPSTREAM: ASoC: SOF: Kconfig: Make IPC_MESSAGE_INJECTOR depend on
      SND_SOC_SOF
    - UPSTREAM: ASoC: SOF: mediatek: Add sof_mt8186_machs for mt8186
    - UPSTREAM: ASoC: SOF: mediatek: Add dai driver for mt8186
    - UPSTREAM: ASoC: SOF: mediatek: add snd_sof_dsp_ops callbacks for pcm and
      mail box
    - UPSTREAM: ASoC: SOF: mediatek: Use generic implementation for .ipc_msg_data
      field
    - UPSTREAM: ASoC: SOF: compress: Move sof_compr_copy functionality
    - UPSTREAM: ASoC: SOF: compress: Add copy function for capture case
    - UPSTREAM: ASoC: SOF: Introduce function sof_of_machine_select
    - UPSTREAM: ASoC: SOF: Introduce function sof_of_machine_select
    - UPSTREAM: ASoC: SOF: Remove strsplit_u32() and tokenize_input()
    - UPSTREAM: ASoC: SOF: mediatek: mt8195: Import namespace
      SND_SOC_SOF_MTK_COMMON
    - UPSTREAM: ASoC: SOF: mediatek: mt8195: Add mailbox generic callbacks for IPC
    - UPSTREAM: ASoC: SOF: mediatek: mt8195: Add generic pcm_{open,close}
      callbacks
    - UPSTREAM: ASoC: SOF: mediatek: mt8195: Add devicetree support to select
      topologies
    - UPSTREAM: ASoC: SOF: add widget setup/free tracing
    - UPSTREAM: ASoC: SOF: remove unneeded dev_vdbg
    - UPSTREAM: ASoC: SOF: replace dev_vdbg with tracepoints
    - BACKPORT: ASoC: SOF: add quirk to override topology mclk_id
    - UPSTREAM: ASoC: SOF: mediatek: add pcm_hw_params callback for mt8186
    - BACKPORT: ASoC: soc.h: remove num_cpus/codecs
    - UPSTREAM: ASoC: SOF: clear prepare state when widget is unprepared
    - UPSTREAM: ASoC: SOF: don't unprepare widget used other pipelines
    - UPSTREAM: ASoC: SOF: mediatek: add pcm_pointer callback for mt8186
    - UPSTREAM: ASoC: SOF: mediatek: mt8195: Add pcm_hw_params callback
    - UPSTREAM: ASoC: SOF: mediatek: mt8195: Add pcm_pointer callback
    - UPSTREAM: ASoC: SOF: ipc3: Log the tx message before sending it
    - UPSTREAM: ASoC: soc-dapm.c: replace snd_soc_dapm_wcache to
      snd_soc_dapm_widget
    - UPSTREAM: ASoC: SOF: loader: Set complete state before post_fw_run op
    - BACKPORT: ASoC: SOF: Introduce container struct for SOF firmware
    - UPSTREAM: ASoC: SOF: Drop the firmware and fw_offset from snd_sof_pdata
    - UPSTREAM: ASoC: SOF: ipc: ops: Add support for optional init and exit
      callbacks
    - BACKPORT: ASoC: SOF: Add path definition for external firmware libraries
    - UPSTREAM: ASoC: SOF: loader: Add support for IPC dependent post firmware
      boot ops
    - UPSTREAM: ASoC: SOF: loader: Remove the query_fw_configuration ops
    - UPSTREAM: ASoC: SOF: ops: fallback to mmio in helpers
    - UPSTREAM: ASoC: SOF: ops: add readb/writeb helpers
    - UPSTREAM: ASoC: SOF: ops: add snd_sof_dsp_updateb() helper
    - BACKPORT: ASoC: SOF: introduce new DEBUG_NOCODEC mode
    - UPSTREAM: ASoC: SOF: probes: Replace [0] union members with
      DECLARE_FLEX_ARRAY()
    - UPSTREAM: ASoC: SOF: probes: Separate IPC3 operations to a separate file
    - UPSTREAM: ASoC: SOF: client: Add sof_client_ipc_set_get_data()
    - BACKPORT: ASoC: SOF: IPC4: probes: Implement IPC4 ops for probes client
      device
    - BACKPORT: ASoC: SOF: fix compilation issue with readb/writeb helpers
    - UPSTREAM: ASoC: SOF: ipc3-topology: use old pipeline teardown flow with
      SOF2.1 and older
    - UPSTREAM: ASoC: SOF: topology: No need to assign core ID if token parsing
      failed
    - UPSTREAM: ASoC: SOF: Add support for parsing the number of sink/source pins
    - UPSTREAM: ASoC: SOF: Add support to parse pin binding array from topology
    - BACKPORT: ASoC: SOF: topology: Add helper to get/put widget queue id
    - UPSTREAM: ASoC: SOF: probes: Check ops before memory allocation
    - UPSTREAM: ASoC: SOF: Drop obsolete dependency on COMPILE_TEST
    - UPSTREAM: ASoC: SOF: mediatek: add shutdown callback
    - UPSTREAM: ASoC: SOF: mediatek: initialize panic_info to zero
    - UPSTREAM: ASoC: SOF: pm: Set target state earlier
    - UPSTREAM: ASoC: SOF: pm: Always tear down pipelines before DSP suspend
    - UPSTREAM: ASoC: SOF: Add FW state to debugfs
    - UPSTREAM: ASoC: SOF: sof-audio: Treat tplg_ops->route_setup() as optional
    - UPSTREAM: ASoC: SOF: sof-audio: Update documentation for sof_ipc_tplg_ops
    - UPSTREAM: ASoC: SOF: Add helper macro to be used to get an IPC ops
    - UPSTREAM: ASoC: SOF: pcm: Extend the optionality of IPC ops to IPC as well
    - UPSTREAM: ASoC: SOF: topology: Extend the optionality of IPC ops to IPC as
      well
    - UPSTREAM: ASoC: SOF: pm: Extend the optionality of IPC ops to IPC as well
    - UPSTREAM: ASoC: SOF: sof-priv: Mark fw_tracing ops optional in documentation
    - UPSTREAM: ASoC: SOF: core: Print out the value of sof_debug if it is set
    - UPSTREAM: ASoC: SOF: IPC3 topology: Print the conflicting bytes sizes
    - UPSTREAM: ASoC: SOF: mediatek: mt8195: remove a redundant comparison of sram
    - UPSTREAM: ASoC: SOF: mediatek: Support mt8188 platform
    - UPSTREAM: ASoC: SOF: mediatek: Provide debugfs_add_region_item ops for core
    - BACKPORT: ASoC: SOF: Prepare ipc_msg_data to be used with compress API
    - BACKPORT: ASoC: SOF: Prepare set_stream_data_offset for compress API
    - UPSTREAM: ASoC: SOF: Add support for compress API for stream data/offset
    - UPSTREAM: ASoC: SOF: compress: Set compress data offset
    - UPSTREAM: ASoC: SOF: sof-audio: start with the right widget type
    - UPSTREAM: ASoC: SOF: sof-audio: unprepare when swidget->use_count > 0
    - UPSTREAM: ASoC: SOF: sof-audio: skip prepare/unprepare if swidget is NULL
    - UPSTREAM: ASoC: SOF: keep prepare/unprepare widgets in sink path
    - UPSTREAM: ASoC: SOF: sof-audio: Extend the optionality of IPC ops to IPC as
      well
    - UPSTREAM: ASoC: SOF: sof-audio: prepare_widgets: Check swidget for NULL on
      sink failure
    - UPSTREAM: ASoC: soc-pcm: Export widget_in_list()
    - UPSTREAM: ASoC: SOF: sof-audio: Set up/free DAI/AIF widgets only once
    - UPSTREAM: ASoC: SOF: sof-audio: Only process widgets in the connected widget
      list
    - BACKPORT: ASoC: SOF: pcm: do not free widgets during suspend trigger
    - BACKPORT: ASoC: SOF: topology: Set IPC-specific trigger order for DAI links
    - UPSTREAM: ASoC: SOF: Introduce PCM setup/free PCM IPC ops
    - BACKPORT: ASoC: SOF: ipc4-pcm: Define pcm_setup/free ops
    - UPSTREAM: ASoC: SOF: sof-audio: Populate the PCM stream pipeline_info
    - BACKPORT: ASoC: SOF: Introduce struct snd_sof_pipeline
    - UPSTREAM: ASoC: SOF: Avoid double decrementing use_count in sof_widget_setup
      on error
    - BACKPORT: ASoC: SOF: Protect swidget->use_count with mutex for kcontrol
      access race
    - UPSTREAM: ASoC: soc-dai.h: add missing snd_soc_dai_set_widget()
    - UPSTREAM: ASoC: sof: use helper function
    - UPSTREAM: ASoC: SOF: topology: Add missed "else" in sof_connect_dai_widget
    - BACKPORT: ASoC: SOF: add fw_info_box support
    - UPSTREAM: ASoC: SOF: add delay function support in sof framework
    - UPSTREAM: ASoC: SOF: add get_stream_position ops for pcm delay
    - UPSTREAM: ASoC: SOF: ops: refine parameters order in function
      snd_sof_dsp_update8
    - BACKPORT: ASoC: SOF: Introduce a new set_pm_gate() IPC PM op
    - UPSTREAM: ASoC: SOF: ipc3: Check for upper size limit for the received
      message
    - UPSTREAM: ASoC: SOF: topology: Fix error handling in sof_widget_ready()
    - BACKPORT: ASoC: SOF: sof-audio: Fix broken early bclk feature for SSP
    - UPSTREAM: ASoC: SOF: sof-audio: don't squelch errors in WIDGET_SETUP phase
    - UPSTREAM: ASoC: SOF: loader: Remove log prefixes for snd_sof_run_firmware
    - UPSTREAM: ASoC: SOF: ipc3-control: Rename snd_sof_refresh_control()
    - UPSTREAM: ASoC: SOF: ipc3-control: Merge functions to handle bytes_ext get
      variants
    - BACKPORT: ASoC: SOF: Use input/output pin consistently
    - UPSTREAM: ASoC: SOF: sof-audio: add support for setting up loopback routes
    - UPSTREAM: ASoC: SOF: topology: Set pipeline widget before updating IPC
      structures
    - UPSTREAM: ASoC: SOF: pcm: Make hw_params reset conditional for IPC3
    - BACKPORT: ASoC: SOF: pcm: Improve the pcm trigger sequence
    - UPSTREAM: ASoC: SOF: Add flag and state which will be used for DSP-less mode
    - BACKPORT: ASoC: SOF: Add support for DSPless mode
    - UPSTREAM: ASoC: SOF: pm: Tear down pipelines only if DSP was active
    - UPSTREAM: ASoC: SOF: ipc: Add no reply inline calls
    - BACKPORT: ASoC: SOF: Use no_reply calls for TX
    - BACKPORT: ASoC: SOF: pcm: Add an option to skip platform trigger during stop
    - UPSTREAM: ASoC: SOF: mediatek: mt8195: Use snd_sof_ipc_process_reply()
      helper
    - UPSTREAM: ASoC: SOF: mediatek: mt8186: Use snd_sof_ipc_process_reply()
      helper
    - UPSTREAM: ASoC: SOF: debug: conditionally bump runtime_pm counter on
      exceptions
    - UPSTREAM: ASoC: SOF: pcm: fix pm_runtime imbalance in error handling
    - UPSTREAM: ASoC: SOF: sof-client-probes: fix pm_runtime imbalance in error
      handling
    - UPSTREAM: ASoC: SOF: ipc3-topology: Make sure that only one cmd is sent in
      dai_config
    - UPSTREAM: ASoC: SOF: pm: save io region state in case of errors in resume
    - UPSTREAM: ASoC: SOF: topology: Fix logic for copying tuples
    - UPSTREAM: ASoC: SOF: Simplify the calculation of variables
    - UPSTREAM: ASoC: sof: Improve sof_ipc3_bytes_ext_put function
    - UPSTREAM: ASoC: SOF: mediatek: add mt8188 audio support
    - UPSTREAM: ASoC: SOF: topology: Use partial match for connecting DAI link and
      DAI widget
    - UPSTREAM: ASoC: SOF: mediatek: add adsp debug dump
    - UPSTREAM: ASoC: SOF: Refactor rx function for fuzzing
    - BACKPORT: ASoC: SOF: Add IPC3 Kernel Injector
    - UPSTREAM: ASoC: SOF: sof-audio: add is_virtual_widget helper
    - UPSTREAM: ASoC: SOF: sof-audio: test virtual widget in
      sof_walk_widgets_in_order
    - UPSTREAM: ASoC: SOF: core: Free the firmware trace before calling
      snd_sof_shutdown()
    - UPSTREAM: ASoC: SOF: Add new sof_debug flag to request message payload dump
    - UPSTREAM: ASoC: SOF: ipc3: Dump IPC message payload
    - UPSTREAM: ASoC: SOF: pm: Remove duplicated code in sof_suspend
    - UPSTREAM: ASoC: SOF: ipc3-dtrace: uninitialized data in
      dfsentry_trace_filter_write()
    - UPSTREAM: ASoC: SOF: Add acp-probe id to sof probe client driver for
      registration.
    - UPSTREAM: ASoC: SOF: ipc3: add checks to prevent static analysis warnings
    - UPSTREAM: ASoC: SOF: topology: simplify code to prevent static analysis
      warnings
    - UPSTREAM: ASoC: SOF: ipc3: update dai_link_fixup for SOF_DAI_MEDIATEK_AFE
    - UPSTREAM: ASoC: SOF: Deprecate invalid enums in IPC3
    - UPSTREAM: ASoC: SOF: mediatek: mt8186 modify dram type as non-cache
    - UPSTREAM: ASoC: SOF: Fix incorrect use of sizeof in sof_ipc3_do_rx_work()
    - UPSTREAM: ASoC: SOF: ipc3-dtrace: Switch to memdup_user_nul() helper
    - UPSTREAM: ASoC: sof: merge DAI call back functions into ops
    - UPSTREAM: ASoC: SOF: ipc3: Use devm_kmemdup to replace devm_kmalloc + memcpy
    - UPSTREAM: ASoC: SOF: sof-audio: Fix DSP core put imbalance on widget setup
      failure
    - UPSTREAM: ASoC: SOF: core: Only call sof_ops_free() on remove if the probe
      was successful
    - UPSTREAM: ASoC: mediatek: common: revise SOF common code
    - UPSTREAM: ASoC: mediatek: sof-common: Add NULL check for normal_link string
    - GENIO: ASoC: mediatek: mt8195: add sof support on mt8395-evk
    - GENIO: ASoC: mediatek: mt8390-evk: add SOF support
    - GENIO: ASoC: mediatek: mt8395-evk: Log with dev_err_probe when waiting for
      codec
    - mdla: Fix stdbool.h references
    - mdla: Use get_random_u32 instead of get_random_int
    - reviser: Fix LOG_DEBUG
    - apusys_core: Fix unused variable build error
    - power: Fix print format warning
    - apu-dbg: Fix sched_clock build error
    - logger: Fix bad_copy_to error
    - util: Add apusys_ver_compat.h
    - GENIO: mtk-mdp-driver: mt8365: Fix the null pointer access
    - GENIO: vcodec: mt8395: venc: trasfer color aspect info to venc driver
    - GENIO: vcodec: mt8395: venc: Correct RGB32/BGR32 format mapping
    - GENIO: vcodec: mt8395: venc: set up profile and level for h264 and h265
      separately
    - GENIO: vcodec: mt8395: venc: Set CBR as default bitrate mode
    - GENIO: vcodec: mt8395: venc: venc add support rgba8888
    - GENIO: vcodec: mt8395: fix check snprintf return value issue
    - GENIO: vcodec: mt8395: fix check dst_vb2_v4l2 null pointer
    - GENIO: vcodec: mt8395: fix check null ptr check on ctx
    - GENIO: vcodec: mt8395: fix check erturn value of sprintf
    - GENIO: vcodec: mt8395: fix check dst_vb2_v4l2 null pointer
    - GENIO: vpud: mt8395: add check NULL pointer before use
    - GENIO: vcodec: mt8395: vdec: revise the device probe flow
    - GENIO: vcodec: mt8395: venc: revise the device probe flow
    - GENIO: vcodec: mt8395: modify max supportted bitrate
    - GENIO: vcodec: mt8395: fix dereferencing null pointer
    - GENIO: mtk-vcu-driver: mt8395: Create mbox only when GCE property is set
    - GENIO: mtk-vcu-driver: mt8395: Add error handling on writing null cmdq pkt
    - GENIO: mtk-vcu-driver: mt8395: Add error handle on cmd flush
    - gpu: move mtk-mali-gpu-driver to mtk-mali-gpu-driver-r43
    - gpu: Add r48 DDK kernel driver codebase
    - GPUCORE-41385 Fix small memory aliases of large memory allocations
    - GPUCORE-41458 Unpin pages when last reference to phy alloc is released
    - WORKAROUND: gpu/arm: don't execute probe asynchronously
    - CHROMIUM: MALI: Mali core changes for platform
    - GENIO: gpu/arm: Add support for Mediatek SoC
    - GENIO: gpu/arm: Use mediatek platform code
    - GENIO: gpu/arm: Default Enable the Mali base extra modules
    - GENIO: gpu/arm: Add GPL2 license file
    - GENIO: gpu/arm: Add makefile to build gpu kernel drvier
    - GENIO: gpu/arm: midgard: Add sysfs attribute to show gpu utilization
    - GENIO: gpu/arm: Support supply-names for mali_sram-supply
    - GENIO: gpu/arm: midgard: add GPU ID for MT819x based GPUs
    - GENIO: gpu/arm: detect G-57 variant on mt8195 and mt8188
    - GENIO: gpu/arm: mediatek: Add mechanism to setup active GPU cores numbers by
      platform
    - GENIO: gpu/arm: midgard: Fix memory fault in set_voltages
    - GENIO: gpu/arm: mediatek: Fix unsigned_compare: less-than-zero comparison of
      an unsigned value is never true
    - GENIO: gpu/arm: Fix invalid_type: expect unsigned long but has type int
    - GENIO: gpu/arm: Fix the error status of function call is not checked.
    - GENIO: gpu/arm: mediatek: Fix Event leaked_storage: Variable "mfg" going out
      of scope leaks the storage it points to.
    - GPUCORE-41945 Failed page migration can lead to use after free
    - GPUCORE-41547 Improve handling of page metadata after migration
    - gpu: compile r48 DDK kernel driver by default
    - GENIO: drm: mediatek: cec: add mtk_cec_v2 driver
    - GENIO: drm/mediatek: dsi: add has_cmdq_size_select
    - GENIO: drm: mediatek: hdcp: add hdcp and ca porting
    - Update annotations
    - dtbo: genio-700-evk: disable cec module for non-hdmi display dtbos
    - dtbo: genio-510-evk: disable cec module for non-hdmi display dtbos
    - dtbo: genio-1200-evk: disable cec module for non-hdmi display dtbos
    - dtbo: mt8390/mt8370: Add isp71 imgsys node
    - dtbo: genio-700-evk: Add imgsensor imx214 overlay
    - dtbo: genio-510-evk: Add imgsensor imx214 overlay
    - dtbo: genio-700-evk: Disable partial ISP module in standard v4l2 dtbo
    - dtbo: genio-510-evk: Disable partial ISP module in standard v4l2 dtbo
    - dtbo: genio-700-evk: Locate ISP larb node through target-path
    - dtbo: genio-510-evk: Locate ISP larb node through target-path
    - dtbo: mt8365-pumpkin: Add THP7312 single/dual overlays
    - dtbo: genio-1200-evk: support multi-camera
    - dtbo: genio-700-evk: support multi-camera
    - dtbo: genio-510-evk: support multi-camera
    - dtbo: genio-510-evk: Add lontium lt6911uxe dtbo
    - dtbo: genio-700-evk: Add lontium lt6911uxe dtbo
    - dtbo: genio-1200-evk: Add lontium lt6911uxe dtbo
    - dtbo: genio-700-evk: Remove plugin tag from camera common dtsi
    - dtbo: genio-510-evk: Remove plugin tag from camera common dtsi
    - dtbo: genio-1200-evk-p1v1: Sync camera DTBO from genio-1200-evk
    - dtbo: genio-1200-evk: Add sof dtbo
    - dtbo: genio-700-evk: Add sof dtbo
    - dtbo: genio-510-evk: Add sof dtbo
    - dtbo: genio-510-evk: Add standard AG190C + MAX9286 dtbo
    - dtbo: genio-700-evk: Add standard AG190C + MAX9286 dtbo
    - dtbo: genio-1200-evk: Add standard AG190C + MAX9286 dtbo
    - dtbo: genio-1200-evk-p1v1: Add standard AG190C + MAX9286 dtbo
    - dtbo: genio-510-evk: Move out the mtkcam node from common dtsi
    - dtbo: genio-700-evk: Move out the mtkcam node from common dtsi
    - dtbo: genio-1200-evk: Move out the mtkcam node from common dtsi
    - dtbo: genio-1200-evk-p1v1: Move out the mtkcam node from common dtsi
    - dtbo: genio-510-evk: Fix the indent in ag190c-max9286 dts
    - GENIO: usb: xhci-mtk: fix random remote wakeup
    - GENIO: ASoC: mediatek: mt8188: add SOF DMIC support
    - GENIO: ASoC: mediatek: mt8195: add SOF DMIC support
    - GENIO: media: platform: mtk-mdp3: Add frame size enumeration support
    - GENIO: ASoC: mediatek: mt6359-accdet: Add compatible property
    - GENIO: drivers: mfd: mt6359: Add mt6359-accdet registration
    - GENIO: ASoC: mediatek: mt6359-accdet: Modify the way components are obtained
    - GENIO: ASoC: mediatek: mt6359-accdet: Add IRQ level setting
    - GENIO: arm64: dts: mt6359: Add accessory detect node
    - GENIO: arm64: dts: mediatek: genio-510-evk: Add accdet support
    - GENIO: arm64: dts: mediatek: genio-700-evk: Add accdet support
    - GENIO: arm64: dts: mediatek: genio-1200-evk: Add accdet support
    - GENIO: ASoC: mediatek: mt8188: Add headset jack detect support for
      mt8390-evk
    - GENIO: ASoC: mediatek: mt8195: Add headset jack detect support for
      mt8395-evk
    - FIXUP: GENIO: ASoC: mediatek: Fix accdet support for mt8390-evk and
      mt8395-evk
    - GENIO: media: i2c: ap1302: Set regmap name
    - GENIO: arm64: dts: mt8195: ethernet: drop hardcode MAC address
    - GENIO: arm64: dts: mt8188: ethernet: drop hardcode MAC address
    - GENIO: arm64: dts: mt8370: ethernet: drop hardcode MAC address
    - GENIO: dt-bindings: media: Add bindings for Onsemi AR0430 camera sensor
    - GENIO: media: i2c: Add Onsemi AR0430 driver
    - GENIO: soc: mediatek: pm-domains: mt8188: Add external buck iso
    - GENIO: dt-bindings: fuse: mediatek: add document for mtk-fsource
    - GENIO: memory: mtk-smi: fix getting smi parent syscon error.
    - GENIO: iommu/mediatek: Fix exit logic in mtk_iommu_attach_device
    - GENIO: drm/mediatek: panel: add drm_mode_set_name to AUO G156XTN010 LVDS
      panel
    - GENIO: media: platform: mtk-mdp3: fix not check error return value
    - Revert "GENIO: media: platform: mtk-mdp3: fix not check error return value"
    - GENIO: media: platform: mtk-mdp3: fix not check error return value
    - BACKPORT: dt-bindings: display: mediatek: add vdosys1 RDMA definition for
      mt8195 and mt8188
    - GENIO: drm: mediatek: ovl adaptor: add BR swap mechanism
    - apusys: Set ENABLE_SW_BUCK_CTL to 0
    - Revert "apusys: Set ENABLE_SW_BUCK_CTL to 0"
    - apusys: power: Disable noisy LOCAL_DBG
    - apusys: Reduce IPI debug logs
    - GENIO: vcodec: mt8395: add mutex to protect power switch and bypass the
      return value of pm_runtime_put_sync
    - GENIO: vcodec: mt8395: venc: limit max gop size to 1023
    - GENIO: vcodec: mt8395: venc: Deprecate unsupported controls
    - GENIO: media: platform: mtk-mdp3: Set V4L2_FRMSIZE_TYPE to stepwise
    - GENIO: arm64: dts: mediatek: mt8188: use mediatek,mt8188-vdo1-rdma for VDO1
      RDMA
    - GENIO: media: platform: mtk-mdp3: adjust driver unwind flow
    - BACKPORT: dt-bindings: media: mediatek: mdp3: add compatible for MT8195 WROT
    - GENIO: arm64: dts: mediatek: mt8195: add mdp3-wrot compatible name
    - GENIO: arm64: dts: mediatek: mt8188: add mdp3-wrot compatible name
    - GENIO: arm64: dts: mediatek: mt8370: add mdp3-wrot compatible name
    - GENIO: media: platform: mtk-mdp3: add mdp3-wrot compatible name
    - dtbo: mt8365-evk: Add standard ar0430 csi0/1 overlays
    - GENIO: soc: mediatek: hdmirx: mt8195: Add set user EDID interface
    - UPSTREAM: usb: typec: tcpm: try to get role switch from tcpc fwnode
    - GENIO: drm: mediatek: dpi: add dpix clock control for lvds
    - GENIO: drm: mediatek: lvds: remove dpix clock control
    - GENIO: phy: mediatek: remove mtk_lvds_tx_power_off_signal
    - GENIO: arm64: dts: mediatek: genio-350-evk: remove dpix clock from lvds
    - Revert "UPSTREAM: usb: typec: tcpm: try to get role switch from tcpc fwnode"
    - GENIO: scsi: ufs: fix UNINIT violation
    - GENIO: arm64: dts: mediatek: mt8370: use mediatek,mt8188-vdo1-rdma for VDO1
      RDMA
    - GENIO: media: platform: mtk-mdp3: Fix media controller registration
    - GENIO: gpu/arm: midgard: Fix power leakage during suspend
    - GENIO: mtk-mdp-driver: mt8365: Adjust buffer alignment for venc
    - GENIO: vcodec: mt8395: vdec: Set default bitstream buffer size to 4MB
    - GENIO: vcodec: mt8395: venc: Add platform data
    - GENIO: mtk-vcu-driver: mt8395: Fix vcu_cmdq_pkt_write issues
    - GENIO: mtk-vcu-driver: mt8395: Fix vcu_cmdq_pkt_write return value
    - BL_INTERNAL: usb: typec: altmodes/displayport: favor pin C/D over E
    - BL_INTERNAL: usb: mtu3: support ip-sleep wakeup for MT8365
    - dtbo: genio-700-evk: Add standard imx214 csi0/1 overlays
    - dtbo: genio-510-evk: Add standard imx214 csi0/1 overlays
    - dtbo: genio-1200-evk: Add standard imx214 csi0/1/2 overlays
    - GENIO: ASoC: mediatek: mt8188: Refine sound card init flow
    - GENIO: ASoC: mediatek: mt8195: Refine sound card init flow
    - GENIO: mtk-vcodec-driver: mt8167: venc: Set frame size stepwise to 2
    - camsys: Add NULL entity check in mtk_cam_start_ctx()
    - BACKPORT: arm64: dts: mediatek: mt8188: Move vdec1 power domain under vdec0
    - GENIO: arm64: dts: mediatek: mt8370: Move vdec1 power domain under vdec0
    - GENIO: panel: startek-kd070fhfid015: fix setting brightness failure during
      early stage booting
    - GENIO: drm/mediatek: dp: Make dp_tx_clk optional
    - GENIO: soc: mediatek: hdmirx: mt8195: Revise remove flow
    - GENIO: media: i2c: Fix dereferencing NULL pointer in ap1302
    - GENIO: media: i2c: Fix dereferencing NULL pointer in ar0430
    - GENIO: media: platform: mtk-mdp3: fix incorrect cleanup in HDMI-RX capture
      device
    - GENIO: serial: 8250_mtk: Fix UART TX fail during startup
    - dtbo: apusys.dts: Set always-on for apusys power supplies
    - dtbo: mt8370: Add property mediatek,camsv-top in camsv node
    - dtbo: mt8390: Add property mediatek,camsv-top in camsv node
    - dtbo: mt8395: Add property mediatek,camsv-top in camsv node
    - camsys: Fix the error in running_s_data_cnt under camsv flow
    - camsys: Add stream on seninf error handling
    - camsys: camsv: add reset_msgfifo
    - camsys: Fix condition in set_fmt
    - camsys: Add support for RAW8 formats
    - camsys: Add YUV cases to sensor format convert function
    - camsys: Add YUV 2X8 cases to sensor format convert function
    - camsys: Fix to prevent HW from writing an empty buffer.
    - GENIO: mtk-mdp-driver: mt8365: Add buffer sequence number
    - GENIO: mtk-mdp-driver: mt8365: Fix row_depth of multi-plane format
    - GENIO: mtk-mdp-driver: mt8365: fix the missing unregistration.

  [ Ubuntu: 5.15.0-139.149 ]

  * jammy/linux: 5.15.0-139.149 -proposed tracker (LP: #2107038)
  * Packaging resync (LP: #1786013)
    - [Packaging] update annotations scripts
  * CVE-2023-52664
    - net: atlantic: eliminate double free in error handling logic
  * CVE-2023-52927
    - netfilter: allow exp not to be removed in nf_ct_find_expectation

  [ Ubuntu: 5.15.0-138.148 ]

  * jammy/linux: 5.15.0-138.148 -proposed tracker (LP: #2102587)
  * ipsec_offload in rtnetlink.sh from ubunsu_kselftests_net fails on O/J
    (LP: #2096976)
    - SAUCE: selftest: netfilter: fix null IP field in kci_test_ipsec_offload
  * CVE-2025-21756
    - vsock: Keep the binding until socket destruction
    - vsock: Orphan socket after transport release
  * CVE-2024-50256
    - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
  * CVE-2025-21702
    - pfifo_tail_enqueue: Drop new packet when sch->limit == 0
  * CVE-2025-21703
    - netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()
  * CVE-2025-21700
    - net: sched: Disallow replacing of child qdisc from one parent to another
  * CVE-2024-46826
    - ELF: fix kernel.randomize_va_space double read
  * CVE-2024-56651
    - can: hi311x: hi3110_can_ist(): fix potential use-after-free
  * iBFT iSCSI out-of-bounds shift UBSAN warning (LP: #2097824)
    - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  * CVE-2024-50248
    - ntfs3: Add bounds checking to mi_enum_attr()
    - fs/ntfs3: Sequential field availability check in mi_enum_attr()
  * CVE-2022-0995
    - watch_queue: Use the bitmap API when applicable
  * CVE-2024-26837
    - net: bridge: switchdev: Skip MDB replays of deferred events on offload
  * CVE-2025-21701
    - net: avoid race between device unregistration and ethnl ops
  * CVE-2024-57798
    - drm/dp_mst: Skip CSN if topology probing is not done yet
    - drm/dp_mst: Ensure mst_primary pointer is valid in
      drm_dp_mst_handle_up_req()
  * CVE-2024-56658
    - net: defer final 'struct net' free in netns dismantle
  * CVE-2024-35864
    - smb: client: fix potential UAF in smb2_is_valid_lease_break()
  * CVE-2024-35864/CVE-2024-26928
    - smb: client: fix potential UAF in cifs_debug_files_proc_show()

  [ Ubuntu: 5.15.0-135.146 ]

  * jammy/linux: 5.15.0-135.146 -proposed tracker (LP: #2098300)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/2025.02.10)
  * Jammy update: v5.15.178 upstream stable release (LP: #2098441)
    - ASoC: wm8994: Add depends on MFD core
    - ASoC: samsung: Add missing selects for MFD_WM8994
    - seccomp: Stub for !CONFIG_SECCOMP
    - scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request
    - irqchip/sunxi-nmi: Add missing SKIP_WAKE flag
    - ASoC: samsung: Add missing depends on I2C
    - regmap: detach regmap from dev on regmap_exit
    - mptcp: don't always assume copied data in mptcp_cleanup_rbuf()
    - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag
    - net: sched: fix ets qdisc OOB Indexing
    - vfio/platform: check the bounds of read/write syscalls
    - fs/ntfs3: Additional check in ntfs_file_release
    - platform/chrome: cros_ec_typec: Check for EC driver
    - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
    - scsi: storvsc: Ratelimit warning logs to prevent VM denial of service
    - wifi: iwlwifi: add a few rate index validity checks
    - USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
    - ALSA: usb-audio: Add delay quirk for USB Audio Device
    - Input: atkbd - map F23 key to support default copilot shortcut
    - Input: xpad - add unofficial Xbox 360 wireless receiver clone
    - Input: xpad - add support for wooting two he (arm)
    - drm/v3d: Assign job pointer to NULL before signaling the fence
    - Linux 5.15.178
  * CVE-2024-49925
    - fbdev: efifb: Register sysfs groups through driver core
  * Jammy update: v5.15.177 upstream stable release (LP: #2097298)
    - ceph: give up on paths longer than PATH_MAX
    - jbd2: flush filesystem device before updating tail sequence
    - dm array: fix releasing a faulty array block twice in dm_array_cursor_end
    - dm array: fix unreleased btree blocks on closing a faulty array cursor
    - dm array: fix cursor index when skipping across block boundaries
    - exfat: fix the infinite loop in exfat_readdir()
    - exfat: fix the infinite loop in __exfat_free_cluster()
    - ASoC: mediatek: disable buffer pre-allocation
    - ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe()
    - net: 802: LLC+SNAP OID:PID lookup on start of skb data
    - tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog
    - tcp/dccp: allow a connection when sk_max_ack_backlog is zero
    - net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
    - bnxt_en: Fix possible memory leak when hwrm_req_replace fails
    - cxgb4: Avoid removal of uninserted tid
    - tls: Fix tls_sw_sendmsg error handling
    - netfilter: nf_tables: imbalance in flowtable binding
    - netfilter: conntrack: clamp maximum hashtable size to INT_MAX
    - drm/mediatek: Add support for 180-degree rotation in the display driver
    - ksmbd: fix a missing return value check bug
    - afs: Fix the maximum cell name length
    - dm thin: make get_first_thin use rcu-safe list first function
    - dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY
    - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
    - sctp: sysctl: rto_min/max: avoid using current->nsproxy
    - sctp: sysctl: auth_enable: avoid using current->nsproxy
    - sctp: sysctl: udp_port: avoid using current->nsproxy
    - sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
    - drm/amd/display: Add check for granularity in dml ceil/floor helpers
    - riscv: Fix sleeping in invalid context in die()
    - ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[]
    - ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[]
    - drm/amd/display: increase MAX_SURFACES to the value supported by hw
    - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity
    - USB: serial: option: add MeiG Smart SRM815
    - USB: serial: option: add Neoway N723-EA support
    - staging: iio: ad9834: Correct phase range check
    - staging: iio: ad9832: Correct phase range check
    - usb-storage: Add max sectors quirk for Nokia 208
    - USB: serial: cp210x: add Phoenix Contact UPS Device
    - usb: dwc3: gadget: fix writing NYET threshold
    - topology: Keep the cpumask unchanged when printing cpumap
    - USB: usblp: return error when setting unsupported protocol
    - USB: core: Disable LPM only for non-suspended ports
    - usb: fix reference leak in usb_new_device()
    - usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints
    - usb: gadget: f_fs: Remove WARN_ON in functionfs_bind
    - iio: pressure: zpa2326: fix information leak in triggered buffer
    - iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered
      buffer
    - iio: light: vcnl4035: fix information leak in triggered buffer
    - iio: imu: kmx61: fix information leak in triggered buffer
    - iio: adc: ti-ads8688: fix information leak in triggered buffer
    - iio: gyro: fxas21002c: Fix missing data update in trigger handler
    - iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep()
    - iio: adc: at91: call input_free_device() on allocated iio_dev
    - iio: inkern: call iio_device_put() only on mapped devices
    - iio: adc: ad7124: Disable all channels at probe time
    - block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
    - arm64: dts: rockchip: add hevc power domain clock to rk3328
    - of: unittest: Add bus address range parsing tests
    - of/address: Add support for 3 address cell bus
    - of: address: Fix address translation when address-size is greater than 2
    - of: address: Remove duplicated functions
    - of: address: Store number of bus flag cells rather than bool
    - of: address: Preserve the flags portion on 1:1 dma-ranges mapping
    - phy: usb: Add "wake on" functionality for newer Synopsis XHCI controllers
    - phy: usb: Toggle the PHY power during init
    - ocfs2: correct return value of ocfs2_local_free_info()
    - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
    - mptcp: drop port parameter of mptcp_pm_add_addr_signal
    - mptcp: fix TCP options overflow.
    - phy: usb: Use slow clock for wake enabled suspend
    - phy: usb: Fix clock imbalance for suspend/resume
    - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()
    - bpf: Fix bpf_sk_select_reuseport() memory leak
    - pktgen: Avoid out-of-bounds access in get_imix_entries
    - net: add exit_batch_rtnl() method
    - gtp: use exit_batch_rtnl() method
    - gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp().
    - gtp: Destroy device along with udp socket's netns dismantle.
    - nfp: bpf: prevent integer overflow in nfp_bpf_event_output()
    - net: xilinx: axienet: Fix IRQ coalescing packet count overflow
    - net/mlx5: Add priorities for counters in RDMA namespaces
    - net/mlx5: Refactor mlx5_get_flow_namespace
    - net/mlx5: Fix RDMA TX steering prio
    - drm/v3d: Ensure job pointer is set to NULL after job completion
    - Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data"
    - i2c: mux: demux-pinctrl: check initial mux selection, too
    - i2c: rcar: fix NACK handling when being a target
    - mac802154: check local interfaces before deleting sdata list
    - hfs: Sanity check the root record
    - fs: fix missing declaration of init_files
    - kheaders: Ignore silly-rename files
    - ACPI: resource: acpi_dev_irq_override(): Check DMI match last
    - poll_wait: add mb() to fix theoretical race between waitqueue_active() and
      .poll()
    - nvmet: propagate npwg topology
    - net: ethernet: xgbe: re-add aneg to supported features in PHY quirks
    - vsock/virtio: cancel close work in the destructor
    - vsock: reset socket state when de-assigning the transport
    - vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]
    - filemap: avoid truncating 64-bit offset to 32 bits
    - fs/proc: fix softlockup in __read_vmcore (part 2)
    - gpiolib: cdev: Fix use after free in lineinfo_changed_notify
    - irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
    - hrtimers: Handle CPU state correctly on hotplug
    - drm/i915/fb: Relax clear color alignment to 64 bytes
    - iio: imu: inv_icm42600: fix spi burst write not supported
    - iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on
    - iio: adc: rockchip_saradc: fix information leak in triggered buffer
    - Revert "drm/amdgpu: rework resume handling for display (v2)"
    - Revert "regmap: detach regmap from dev on regmap_exit"
    - vsock/virtio: discard packets if the transport changes
    - ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
    - nfsd: add list_head nf_gc to struct nfsd_file
    - x86/xen: fix SLS mitigation in xen_hypercall_iret()
    - scsi: sg: Fix slab-use-after-free read in sg_release()
    - net: fix data-races around sk->sk_forward_alloc
    - xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals
    - Partial revert of xhci: use pm_ptr() instead #ifdef for CONFIG_PM
      conditionals
    - Linux 5.15.177
  * CVE-2024-46784
    - net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
  * CVE-2024-44938
    - jfs: Fix shift-out-of-bounds in dbDiscardAG
  * CVE-2024-43900
    - media: xc2028: avoid use-after-free in load_firmware_cb()
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327)
    - ALSA: usb: Fix UBSAN warning in parse_audio_unit()
    - usb: cdns3: Add quirk flag to enable suspend residency
    - ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP
    - PCI: vmd: Create domain symlink before pci_bus_add_devices()
    - PCI: Add ACS quirk for Broadcom BCM5760X NIC
    - MIPS: Loongson64: DTS: Fix msi node for ls7a
    - usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with
      iommu enabled
    - i2c: pnx: Fix timeout in wait functions
    - erofs: fix incorrect symlink detection in fast symlink
    - net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
    - ionic: use ee->offset when returning sprom data
    - net: hinic: Fix cleanup in create_rxqs/txqs()
    - net: ethernet: bgmac-platform: fix an OF node reference leak
    - netfilter: ipset: Fix for recursive locking warning
    - net: mdiobus: fix an OF node reference leak
    - mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
    - chelsio/chtls: prevent potential integer overflow on 32bit
    - i2c: riic: Always round-up when calculating bus period
    - efivarfs: Fix error on non-existent file
    - USB: serial: option: add TCL IK512 MBIM & ECM
    - USB: serial: option: add MeiG Smart SLM770A
    - USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
    - USB: serial: option: add MediaTek T7XX compositions
    - USB: serial: option: add Telit FE910C04 rmnet compositions
    - hwmon: (tmp513) Don't use "proxy" headers
    - hwmon: (tmp513) Simplify with dev_err_probe()
    - hwmon: (tmp513) Use SI constants from units.h
    - hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit
      Registers
    - hwmon: (tmp513) Fix Current Register value interpretation
    - hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit
      Registers
    - hwmon: (tmp513) Fix division of negative numbers
    - sh: clk: Fix clk_enable() to return 0 on NULL clk
    - zram: refuse to use zero sized block device as backing device
    - btrfs: tree-checker: reject inline extent items with 0 ref count
    - tracing: Fix test_event_printk() to process entire print argument
    - tracing: Add missing helper functions in event pointer dereference check
    - tracing: Add "%s" check in test_event_printk()
    - NFS/pnfs: Fix a live lock between recalled layouts and layoutget
    - of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one()
    - udmabuf: also check for F_SEAL_FUTURE_WRITE
    - of: Fix error path in of_parse_phandle_with_args_map()
    - of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
    - ceph: validate snapdirname option length when mounting
    - epoll: Add synchronous wakeup support for ep_poll_callback
    - drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update
    - mm/vmstat: fix a W=1 clang compiler warning
    - tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress()
    - tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection
    - bpf: Check negative offsets in __bpf_skb_min_len()
    - nfsd: restore callback functionality for NFSv4.0
    - mtd: diskonchip: Cast an operand to prevent potential overflow
    - mtd: rawnand: arasan: Fix double assertion of chip-select
    - mtd: rawnand: arasan: Fix missing de-registration of NAND
    - phy: core: Fix an OF node refcount leakage in _of_phy_get()
    - phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup()
    - phy: core: Fix that API devm_phy_put() fails to release the phy
    - phy: core: Fix that API devm_of_phy_provider_unregister() fails to
      unregister the phy provider
    - phy: core: Fix that API devm_phy_destroy() fails to destroy the phy
    - dmaengine: mv_xor: fix child node refcount handling in early exit
    - dmaengine: dw: Select only supported masters for ACPI devices
    - mtd: rawnand: fix double free in atmel_pmecc_create_user()
    - tracing/kprobe: Make trace_kprobe's module callback called after jump_label
      update
    - watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04
    - scsi: qla1280: Fix hw revision numbering for ISP1020/1040
    - ALSA: hda/conexant: fix Z60MR100 startup pop issue
    - regmap: Use correct format specifier for logging range errors
    - platform/x86: asus-nb-wmi: Ignore unknown event 0xCF
    - scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load
      time
    - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN
      as an error
    - virtio-blk: don't keep queue frozen during system suspend
    - vmalloc: fix accounting with i915
    - MIPS: Probe toolchain support of -msym32
    - arm64: mm: Rename asid2idx() to ctxid2asid()
    - arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit
      ASIDs
    - drm/dp_mst: Verify request type in the corresponding down message reply
    - lib: stackinit: hide never-taken branch from compiler
    - ksmbd: fix racy issue from session lookup and expire
    - tracing: Constify string literal data member in struct trace_event_call
    - btrfs: avoid monopolizing a core when activating a swap file
    - x86/hyperv: Fix hv tsc page based sched_clock for hibernation
    - selinux: ignore unknown extended permissions
    - tracing: Have process_string() also allow arrays
    - thunderbolt: Add support for Intel Raptor Lake
    - thunderbolt: Add support for Intel Meteor Lake
    - thunderbolt: Add Intel Barlow Ridge PCI ID
    - thunderbolt: Add support for Intel Lunar Lake
    - thunderbolt: Add support for Intel Panther Lake-M/P
    - xhci: retry Stop Endpoint on buggy NEC controllers
    - usb: xhci: Limit Stop Endpoint retries
    - xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic
    - RDMA/mlx5: Enforce same type port association for multiport RoCE
    - RDMA/bnxt_re: Add check for path mtu in modify_qp
    - RDMA/bnxt_re: Fix reporting hw_ver in query_device
    - RDMA/bnxt_re: Fix max_qp_wrs reported
    - RDMA/bnxt_re: Fix the locking while accessing the QP table
    - drm/bridge: adv7511_audio: Update Audio InfoFrame properly
    - RDMA/hns: Remove redundant 'attr_mask' in modify_qp_init_to_init()
    - RDMA/hns: Remove redundant 'bt_level' for hem_list_alloc_item()
    - RDMA/hns: Fix mapping error of zero-hop WQE buffer
    - RDMA/hns: Fix warning storm caused by invalid input in IO path
    - RDMA/hns: Fix missing flush CQE for DWQE
    - net: stmmac: platform: provide devm_stmmac_probe_config_dt()
    - net: stmmac: don't create a MDIO bus if unnecessary
    - net: stmmac: restructure the error path of stmmac_probe_config_dt()
    - drm/i915/dg1: Fix power gate sequence.
    - net: llc: reset skb->transport_header
    - ALSA: usb-audio: US16x08: Initialize array before use
    - eth: bcmsysport: fix call balance of priv->clk handling routines
    - net: mv643xx_eth: fix an OF node reference leak
    - net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init()
    - btrfs: rename and export __btrfs_cow_block()
    - btrfs: sysfs: convert scnprintf and snprintf to sysfs_emit
    - btrfs: sysfs: fix direct super block member reads
    - wifi: mac80211: wake the queues in case of failure in resume
    - sound: usb: enable DSD output for ddHiFi TC44C
    - sound: usb: format: don't warn that raw DSD is unsupported
    - bpf: fix potential error return
    - net: usb: qmi_wwan: add Telit FE910C04 compositions
    - irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
    - ARC: build: Try to guess GCC variant of cross compiler
    - usb: xhci: Avoid queuing redundant Stop Endpoint commands
    - modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
    - modpost: fix the missed iteration for the max bit in do_input()
    - kcov: mark in_softirq_really() as __always_inline
    - sky2: Add device ID 11ab:4373 for Marvell 88E8075
    - net/sctp: Prevent autoclose integer overflow in sctp_association_init()
    - drm: adv7511: Drop dsi single lane support
    - dt-bindings: display: adi,adv7533: Drop single lane support
    - Linux 5.15.176
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-57884
    - mm: vmscan: account for free pages to prevent infinite Loop in
      throttle_direct_reclaim()
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-57889
    - pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-57890
    - RDMA/uverbs: Prevent integer overflow issue
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-57896
    - btrfs: flush delalloc workers queue before stopping cleaner kthread during
      unmount
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-57897
    - drm/amdkfd: Correct the migration DMA map direction
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-56759
    - btrfs: fix use-after-free when COWing tree bock and tracing is enabled
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-57900
    - ila: serialize calls to nf_register_net_hooks()
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-57901
    - af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-57902
    - af_packet: fix vlan_get_tci() vs MSG_PEEK
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-57903
    - net: restrict SO_REUSEPORT to inet sockets
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-36476
    - RDMA/rtrs: Ensure 'ib_sge list' is accessible
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-57802
    - netrom: check buffer length before accessing it
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-57841
    - net: fix memory leak in tcp_conn_request()
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-49998
    - net: dsa: improve shutdown sequence
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-50121
    - nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-57792
    - power: supply: gpio-charger: Fix set charge current limits
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-56763
    - tracing: Prevent bad count for tracing_cpumask_write
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-56626
    - ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-56627
    - ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-56616
    - drm/dp_mst: Fix MST sideband message body length check
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-53099
    - bpf: Check validity of link->type in bpf_link_show_fdinfo()
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-57807
    - scsi: megaraid_sas: Fix for a potential deadlock
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-56767
    - dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-56769
    - media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-53690
    - nilfs2: prevent use of deleted inode
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-55881
    - KVM: x86: Play nice with protected guests in complete_hypercall_exit()
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-55916
    - Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-56369
    - drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-56715
    - ionic: Fix netdev notifier unregister on failure
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-56716
    - netdevsim: prevent bad user input in nsim_dev_health_break_write()
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-57791
    - net/smc: check return value of sock_recvmsg when draining clc data
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-47408
    - net/smc: check smcd_v2_ext_offset when receiving proposal msg
  * Jammy update: v5.15.176 upstream stable release (LP: #2095327) //
    CVE-2024-49571
    - net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal
      msg
  * Jammy update: v5.15.175 upstream stable release (LP: #2095302)
    - tcp: check space before adding MPTCP SYN options
    - ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5
    - usb: host: max3421-hcd: Correctly abort a USB request.
    - ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys()
    - usb: dwc2: Fix HCD resume
    - usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature
    - usb: dwc2: Fix HCD port connection race
    - usb: ehci-hcd: fix call balance of clocks handling routines
    - drm/i915: Fix memory leak by correcting cache object name in error handler
    - xfs: update btree keys correctly when _insrec splits an inode root block
    - xfs: don't drop errno values when we fail to ficlone the entire range
    - xfs: return from xfs_symlink_verify early on V4 filesystems
    - xfs: fix scrub tracepoints when inode-rooted btrees are involved
    - bpf, sockmap: Fix update element with same
    - batman-adv: Do not send uninitialized TT changes
    - batman-adv: Remove uninitialized data in full table TT response
    - batman-adv: Do not let TT changes list grows indefinitely
    - tipc: fix NULL deref in cleanup_bearer()
    - selftests: mlxsw: sharedbuffer: Remove h1 ingress test case
    - selftests: mlxsw: sharedbuffer: Remove duplicate test cases
    - ptp: kvm: Use decrypted memory in confidential guest on x86
    - ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init()
    - net: sparx5: fix FDMA performance issue
    - net: sparx5: fix the maximum frame length register
    - ACPI: resource: Fix memory resource type union access
    - cxgb4: use port number to set mac addr
    - qca_spi: Fix clock speed for multiple QCA7000
    - qca_spi: Make driver probing reliable
    - Documentation: PM: Clarify pm_runtime_resume_and_get() return value
    - bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
    - team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
    - ACPICA: events/evxfregn: don't release the ContextMutex that was never
      acquired
    - blk-iocost: Avoid using clamp() on inuse in __propagate_weights()
    - tracing/kprobes: Skip symbol counting logic for module symbols in
      create_local_trace_kprobe()
    - xen/netfront: fix crash when removing device
    - x86: make get_cpu_vendor() accessible from Xen code
    - objtool/x86: allow syscall instruction
    - x86/static-call: provide a way to do very early static-call updates
    - x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0
    - x86/asm: Make serialize() always_inline
    - x86/xen: don't do PV iret hypercall through hypercall page
    - x86/xen: add central hypercall functions
    - x86/xen: use new hypercall functions instead of hypercall page
    - x86/xen: remove hypercall page
    - ALSA: usb-audio: Fix a DMA to stack memory bug
    - x86/static-call: fix 32-bit build
    - Linux 5.15.175
  * Jammy update: v5.15.175 upstream stable release (LP: #2095302) //
    CVE-2024-53125
    - bpf: sync_linked_regs() must preserve subreg_def
  * Jammy update: v5.15.175 upstream stable release (LP: #2095302) //
    CVE-2024-56770
    - net/sched: netem: account for backlog updates from child qdisc
  * Jammy update: v5.15.175 upstream stable release (LP: #2095302) //
    CVE-2024-56659
    - net: lapb: increase LAPB_HEADER_LEN
  * Jammy update: v5.15.175 upstream stable release (LP: #2095302) //
    CVE-2024-56662
    - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
  * Jammy update: v5.15.175 upstream stable release (LP: #2095302) //
    CVE-2024-42315
    - exfat: fix potential deadlock on __exfat_get_dentry_set
  * Jammy update: v5.15.175 upstream stable release (LP: #2095302) //
    CVE-2024-53119
    - virtio/vsock: Fix accept_queue memory leak
  * Jammy update: v5.15.175 upstream stable release (LP: #2095302) //
    CVE-2024-56670
    - usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to
      accessing null pointer
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283)
    - arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer
    - media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled
    - media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate()
    - media: uvcvideo: Stop stream during unregister
    - vmstat: call fold_vm_zone_numa_events() before show per zone NUMA event
    - iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables
    - leds: lp55xx: Remove redundant test for invalid channel number
    - clk: qcom: gcc-qcs404: fix initial rate of GPLL3
    - samples: pktgen: correct dev to DEV
    - ARM: 9419/1: mm: Fix kernel memory mapping for xip kernels
    - x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y
    - vdpa/mlx5: Fix PA offset with unaligned starting iotlb map
    - KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled
    - ocfs2: fix UBSAN warning in ocfs2_verify_volume()
    - drm/bridge: tc358768: Fix DSI command tx
    - mmc: sunxi-mmc: Add D1 MMC variant
    - mmc: sunxi-mmc: Fix A100 compatible description
    - lib/buildid: Fix build ID parsing logic
    - media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
    - NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point
    - NFSD: Async COPY result needs to return a write verifier
    - NFSD: Initialize struct nfsd4_copy earlier
    - NFSD: Never decrement pending_async_copies on error
    - mm: revert "mm: shmem: fix data-race in shmem_getattr()"
    - mm: avoid unsafe VMA hook invocation when error arises on mmap hook
    - mm: unconditionally close VMAs on error
    - mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling
    - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code
    - ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec
    - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet
    - ASoC: Intel: sst: Support LPE0F28 ACPI HID
    - wifi: iwlwifi: mvm: Use the sync timepoint API in suspend
    - mac80211: fix user-power when emulating chanctx
    - usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver
    - selftests/watchdog-test: Fix system accidentally reset after watchdog-test
    - ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13
    - x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB
    - net: usb: qmi_wwan: add Quectel RG650V
    - soc: qcom: Add check devm_kasprintf() returned value
    - regulator: rk808: Add apply_bit for BUCK3 on RK809
    - platform/x86: dell-smbios-base: Extends support to Alienware products
    - platform/x86: dell-wmi-base: Handle META key Lock/Unlock events
    - can: j1939: fix error in J1939 documentation.
    - ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate()
    - ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div()
    - proc/softirqs: replace seq_printf with seq_put_decimal_ull_width
    - ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry
    - ARM: 9420/1: smp: Fix SMP for xip kernels
    - ipmr: Fix access to mfc_cache_list without lock held
    - nvme: fix metadata handling in nvme-passthrough
    - x86/barrier: Do not serialize MSR accesses on AMD
    - kselftest/arm64: mte: fix printf type warnings about longs
    - s390/cio: Do not unregister the subchannel based on DNV
    - brd: remove brd_devices_mutex mutex
    - mips: asm: fix warning when disabling MIPS_FP_SUPPORT
    - m68k: mvme147: Fix SCSI controller IRQ numbers
    - m68k: mvme16x: Add and use "mvme16x.h"
    - m68k: mvme147: Reinstate early console
    - arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG
    - acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block()
    - s390/syscalls: Avoid creation of arch/arch/ directory
    - firmware: google: Unregister driver_info on failure
    - crypto: qat - remove faulty arbiter config reset
    - thermal: core: Initialize thermal zones before registering them
    - EDAC/fsl_ddr: Fix bad bit shift operations
    - crypto: cavium - Fix the if condition to exit loop after timeout
    - ACPI: CPPC: Fix _CPC register setting issue
    - crypto: caam - add error check to caam_rsa_set_priv_key_form
    - crypto: cavium - Fix an error handling path in cpt_ucode_load_fw()
    - time: Fix references to _msecs_to_jiffies() handling of values
    - timekeeping: Consolidate fast timekeeper
    - seqlock/latch: Provide raw_read_seqcount_latch_retry()
    - kcsan, seqlock: Support seqcount_latch_t
    - kcsan, seqlock: Fix incorrect assumption in read_seqbegin()
    - clocksource/drivers:sp804: Make user selectable
    - spi: spi-fsl-lpspi: downgrade log level for pio mode
    - spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq()
    - soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq()
    - mmc: mmc_spi: drop buggy snprintf()
    - tpm: fix signed/unsigned bug when checking event logs
    - arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4
    - arm64: dts: mt8183: kukui: Fix the address of eeprom at i2c4
    - arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source
      trackpad
    - Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline"
    - cgroup/bpf: only cgroup v2 can be attached by bpf programs
    - arm64: dts: mt8183: fennel: add i2c2's i2c-scl-internal-delay-ns
    - arm64: dts: mt8183: burnet: add i2c2's i2c-scl-internal-delay-ns
    - arm64: dts: mt8183: Damu: add i2c2's i2c-scl-internal-delay-ns
    - pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle
    - ARM: dts: cubieboard4: Fix DCDC5 regulator constraints
    - pmdomain: ti-sci: Add missing of_node_put() for args.np
    - spi: tegra210-quad: Avoid shift-out-of-bounds
    - spi: zynqmp-gqspi: Undo runtime PM changes at driver exit time​
    - regmap: irq: Set lockdep class for hierarchical IRQ domains
    - arm64: dts: mt8183: jacuzzi: remove unused ddc-i2c-bus
    - arm64: dts: mt8183: jacuzzi: Move panel under aux-bus
    - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Fix DP bridge supply names
    - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add supplies for fixed
      regulators
    - selftests/resctrl: Protect against array overrun during iMC config parsing
    - media: venus: venc: Use pmruntime autosuspend
    - media: venus: vdec: decoded picture buffer handling during reconfig sequence
    - media: venus : Addition of EOS Event support for Encoder
    - media: venus : Addition of support for VIDIOC_TRY_ENCODER_CMD
    - venus: venc: add handling for VIDIOC_ENCODER_CMD
    - media: venus: provide ctx queue lock for ioctl synchronization
    - media: atomisp: remove #ifdef HAS_NO_HMEM
    - platform/x86: panasonic-laptop: Replace snprintf in show functions with
      sysfs_emit
    - platform/x86: panasonic-laptop: Return errno correctly in show callback
    - drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused
    - drm/omap: Fix possible NULL dereference
    - drm/omap: Fix locking in omap_gem_new_dmabuf()
    - wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq()
    - wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq()
    - drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq()
    - drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq()
    - drm/v3d: Address race-condition in MMU flush
    - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1
    - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2
    - dt-bindings: vendor-prefixes: Add NeoFidelity, Inc
    - ASoC: fsl_micfil: Drop unnecessary register read
    - ASoC: fsl_micfil: do not define SHIFT/MASK for single bits
    - ASoC: fsl_micfil: use GENMASK to define register bit fields
    - ASoC: fsl_micfil: fix regmap_write_bits usage
    - ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode
    - drm/bridge: anx7625: Drop EDID cache on bridge power off
    - libbpf: Fix output .symtab byte-order during linking
    - bpf: Fix the xdp_adjust_tail sample prog issue
    - libbpf: fix sym_is_subprog() logic for weak global subprogs
    - xfrm: rename xfrm_state_offload struct to allow reuse
    - xfrm: store and rely on direction to construct offload flags
    - netdevsim: rely on XFRM state direction instead of flags
    - netdevsim: copy addresses for both in and out paths
    - drm/bridge: tc358767: Fix link properties discovery
    - selftests/bpf: Fix msg_verify_data in test_sockmap
    - selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap
    - drm: fsl-dcu: enable PIXCLK on LS1021A
    - drm/panfrost: Remove unused id_mask from struct panfrost_model
    - drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq()
    - drm/etnaviv: Request pages from DMA32 zone on addressing_limited
    - drm/etnaviv: fix power register offset on GC300
    - drm/etnaviv: hold GPU lock across perfmon sampling
    - wifi: wfx: Fix error handling in wfx_core_init()
    - drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk()
    - netfilter: nf_tables: skip transaction if update object is not implemented
    - netfilter: nf_tables: must hold rcu read lock while iterating object type
      list
    - netlink: typographical error in nlmsg_type constants definition
    - selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap
    - selftests/bpf: Fix SENDPAGE data logic in test_sockmap
    - selftests, bpf: Add one test for sockmap with strparser
    - selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap
    - selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap
    - bpf, sockmap: Several fixes to bpf_msg_push_data
    - bpf, sockmap: Fix sk_msg_reset_curr
    - selftests: net: really check for bg process completion
    - drm/amdkfd: Fix wrong usage of INIT_WORK()
    - net: rfkill: gpio: Add check for clk_enable()
    - driver core: Introduce device_find_any_child() helper
    - netpoll: Use rcu_access_pointer() in netpoll_poll_lock
    - wireguard: selftests: load nf_conntrack if not present
    - trace/trace_event_perf: remove duplicate samples on the first tracepoint
      event
    - pinctrl: zynqmp: drop excess struct member description
    - powerpc/vdso: Flag VDSO64 entry points as functions
    - mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race
    - mfd: da9052-spi: Change read-mask to write-mask
    - mfd: intel_soc_pmic_bxtwc: Use dev_err_probe()
    - cpufreq: loongson2: Unregister platform_driver on failure
    - mtd: rawnand: atmel: Fix possible memory leak
    - RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey
    - clk: imx: lpcg-scu: SW workaround for errata (e10858)
    - clk: imx: clk-scu: fix clk enable state save and restore
    - mfd: rt5033: Fix missing regmap_del_irq_chip()
    - scsi: fusion: Remove unused variable 'rc'
    - RDMA/hns: Fix out-of-order issue of requester when setting FENCE
    - powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static
    - powerpc/kexec: Fix return of uninitialized variable
    - fbdev/sh7760fb: Alloc DMA memory from hardware device
    - dt-bindings: clock: axi-clkgen: include AXI clk
    - clk: clk-axi-clkgen: make sure to enable the AXI bus clock
    - pinctrl: k210: Undef K210_PC_DEFAULT
    - mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb()
    - perf cs-etm: Don't flush when packet_queue fills up
    - perf probe: Fix libdw memory leak
    - perf probe: Correct demangled symbols in C++ program
    - PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads
    - PCI: cpqphp: Fix PCIBIOS_* return value confusion
    - f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block
    - f2fs: remove struct segment_allocation default_salloc_ops
    - f2fs: open code allocate_segment_by_default
    - f2fs: remove the unused flush argument to change_curseg
    - f2fs: check curseg->inited before write_sum_page in change_curseg
    - perf trace: avoid garbage when not printing a trace event's arguments
    - m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x
    - m68k: coldfire/device.c: only build FEC when HW macros are defined
    - perf trace: Do not lose last events in a race
    - perf trace: Avoid garbage when not printing a syscall's arguments
    - rpmsg: glink: Add TX_DATA_CONT command while sending
    - rpmsg: glink: Send READ_NOTIFY command in FIFO full case
    - rpmsg: glink: Fix GLINK command prefix
    - rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length
    - remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region
    - NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir()
    - sunrpc: simplify two-level sysctl registration for svcrdma_parm_table
    - NFSD: Fix nfsd4_shutdown_copy()
    - hwmon: (tps23861) Fix reporting of negative temperatures
    - vdpa/mlx5: Fix suboptimal range on iotlb iteration
    - selftests/mount_setattr: Fix failures on 64K PAGE_SIZE kernels
    - fs_parser: update mount_api doc to match function signature
    - power: supply: core: Remove might_sleep() from power_supply_put()
    - power: supply: bq27xxx: Fix registers of bq27426
    - net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device
    - tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets
    - net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL
      configuration
    - net: mdio-ipq4019: add missing error check
    - marvell: pxa168_eth: fix call balance of pep->clk handling routines
    - net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken
    - octeontx2-af: RPM: Fix mismatch in lmac type
    - spi: atmel-quadspi: Fix register name in verbose logging function
    - net: hsr: fix hsr_init_sk() vs network/transport headers.
    - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
    - iio: light: al3010: Fix an error handling path in al3010_probe()
    - usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read()
    - usb: yurex: make waiting on yurex_write interruptible
    - USB: chaoskey: fail open after removal
    - USB: chaoskey: Fix possible deadlock chaoskey_list_lock
    - misc: apds990x: Fix missing pm_runtime_disable()
    - counter: stm32-timer-cnt: Add check for clk_enable()
    - ALSA: hda/realtek: Update ALC256 depop procedure
    - apparmor: fix 'Do simple duplicate message elimination'
    - usb: ehci-spear: fix call balance of sehci clk handling routines
    - Revert "drivers: clk: zynqmp: update divider round rate logic"
    - ASoC: Intel: sst: Fix used of uninitialized ctx to log an error
    - soc: qcom: socinfo: fix revision check in qcom_socinfo_probe()
    - ext4: supress data-race warnings in ext4_free_inodes_{count,set}()
    - ext4: fix FS_IOC_GETFSMAP handling
    - jfs: xattr: check invalid xattr size more strictly
    - ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata()
    - perf/x86/intel/pt: Fix buffer full but size is 0 case
    - crypto: x86/aegis128 - access 32-bit arguments as 32-bit
    - powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector
    - KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status
    - fsnotify: fix sending inotify event with unexpected filename
    - tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler
    - locking/lockdep: Avoid creating new name string literals in
      lockdep_set_subclass()
    - exfat: fix uninit-value in __exfat_get_dentry_set
    - Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}()
    - usb: xhci: Fix TD invalidation under pending Set TR Dequeue
    - Revert "usb: gadget: composite: fix OS descriptors w_value logic"
    - serial: sh-sci: Clean sci_ports[0] after at earlycon exit
    - Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit"
    - gpio: exar: set value when external pull-up or pull-down is present
    - spi: Fix acpi deferred irq probe
    - mtd: spi-nor: core: replace dummy buswidth from addr to data
    - cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power()
    - platform/chrome: cros_ec_typec: fix missing fwnode reference decrement
    - ubi: wl: Put source PEB into correct list if trying locking LEB failed
    - serial: 8250: omap: Move pm_runtime_get_sync
    - arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled
    - block: fix ordering between checking BLK_MQ_S_STOPPED request adding
    - HID: wacom: Interpret tilt data from Intuos Pro BT as signed values
    - soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting()
    - media: v4l2-core: v4l2-dv-timings: check cvt/gtf result
    - ALSA: hda/realtek: Update ALC225 depop procedure
    - ALSA: hda/realtek: Set PCBeep to default value for ALC274
    - ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max
    - ALSA: hda/realtek: Apply quirk for Medion E15433
    - usb: dwc3: gadget: Fix checking for number of TRBs left
    - lib: string_helpers: silence snprintf() output truncation warning
    - rpmsg: glink: Propagate TX failures in intentless mode as well
    - um: Fix the return value of elf_core_copy_task_fpregs
    - um: Always dump trace for specified task in show_stack
    - rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq()
    - rtc: abx80x: Fix WDT bit position of the status register
    - ubifs: Correct the total block count by deducting journal reservation
    - jffs2: fix use of uninitialized variable
    - block: return unsigned int from bdev_io_min
    - 9p/xen: fix init sequence
    - rtc: ab-eoz9: don't fail temperature reads on undervoltage notification
    - modpost: remove incorrect code in do_eisa_entry()
    - nfs: ignore SB_RDONLY when mounting nfs
    - sunrpc: remove unnecessary test in rpc_task_set_client()
    - SUNRPC: Replace internal use of SOCKWQ_ASYNC_NOSPACE
    - ASoC: fsl_micfil: fix the naming style for mask definition
    - xfs: fix log recovery when unknown rocompat bits are set
    - xfs: remove unknown compat feature check in superblock write validation
    - btrfs: add might_sleep() annotations
    - util_macros.h: fix/rework find_closest() macros
    - scsi: ufs: exynos: Fix hibern8 notify callbacks
    - PCI: keystone: Add link up check to ks_pcie_other_map_bus()
    - ovl: properly handle large files in ovl_security_fileattr
    - dm thin: Add missing destroy_work_on_stack()
    - PCI: rockchip-ep: Fix address translation unit programming
    - drm/etnaviv: flush shader L1 cache after user commandstream
    - iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call
    - watchdog: mediatek: Make sure system reset gets asserted in
      mtk_wdt_restart()
    - can: peak_usb: CANFD: store 64-bits hw timestamps
    - can: do not increase rx statistics when generating a CAN rx error message
      frame
    - can: c_can: c_can_handle_bus_err(): update statistics if skb allocation
      fails
    - can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL
    - can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics
    - can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics
    - can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics
    - can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics
    - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()
    - ptp: Add error handling for adjfine callback in ptp_clock_adjtime
    - net/sched: tbf: correct backlog statistic for GSO packets
    - net/smc: Limit backlog connections
    - net/qed: allow old cards not supporting "num_images" to work
    - net: sched: fix erspan_opt settings in cls_flower
    - netfilter: nft_set_hash: skip duplicated elements pending gc run
    - netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
    - ethtool: Fix wrong mod state in case of verbose and no_mask bitset
    - gpio: grgpio: use a helper variable to store the address of ofdev->dev
    - dt_bindings: rs485: Correct delay values
    - dt-bindings: serial: rs485: Fix rs485-rts-delay property
    - serial: amba-pl011: Use port lock wrappers
    - serial: amba-pl011: Fix RX stall when DMA is used
    - bpftool: Remove asserts from JIT disassembler
    - bpftool: fix potential NULL pointer dereferencing in prog_dump()
    - drm/sti: Add __iomem for mixer_dbg_mxn's parameter
    - ALSA: pcm: Add more disconnection checks at file ops
    - ALSA: pcm: Avoid reference to status->state
    - ALSA: usb-audio: Notify xrun for low-latency mode
    - tools: Override makefile ARCH variable if defined, but empty
    - drm/v3d: Enable Performance Counters before clearing them
    - bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
    - bpf: Fix exact match conditions in trie_get_next_key()
    - watchdog: rti: of: honor timeout-sec property
    - tracing: Fix cmp_entries_dup() to respect sort() comparison rules
    - ALSA: usb-audio: add mixer mapping for Corsair HS80
    - ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8
    - ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG)
    - scsi: qla2xxx: Fix abort in bsg timeout
    - scsi: qla2xxx: Fix NVMe and NPIV connect issue
    - scsi: qla2xxx: Supported speed displayed incorrectly for VPorts
    - scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt
    - dma-buf: fix dma_fence_array_signaled v4
    - regmap: detach regmap from dev on regmap_exit
    - mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10
      tablet
    - mmc: core: Further prevent card detect during shutdown
    - ocfs2: update seq_file index in ocfs2_dlm_seq_next
    - epoll: annotate racy check
    - btrfs: avoid unnecessary device path update for the same device
    - kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all()
    - media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera
    - media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108
    - drm/vc4: hvs: Set AXI panic modes for the HVS
    - drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model
    - drm/mcde: Enable module autoloading
    - drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check()
    - r8169: don't apply UDP padding quirk on RTL8126A
    - samples/bpf: Fix a resource leak
    - net: fec_mpc52xx_phy: Use %pa to format resource_size_t
    - net: ethernet: fs_enet: Use %pa to format resource_size_t
    - net/sched: cbs: Fix integer overflow in cbs_set_port_rate()
    - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
    - wifi: ath5k: add PCI ID for SX76X
    - wifi: ath5k: add PCI ID for Arcadyan devices
    - drm/panel: simple: Add Microchip AC69T88A LVDS Display panel
    - drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih
    - drm/amdgpu: Dereference the ATCS ACPI buffer
    - drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr
    - drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov
    - wifi: ipw2x00: libipw_rx_any(): fix bad alignment
    - ASoC: hdmi-codec: reorder channel allocation list
    - rocker: fix link status detection in rocker_carrier_init()
    - net/neighbor: clear error in case strict check is not set
    - netpoll: Use rcu_access_pointer() in __netpoll_setup
    - pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU
    - tracing: Use atomic64_inc_return() in trace_clock_counter()
    - scsi: st: Don't modify unknown block number in MTIOCGET
    - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset
    - pinctrl: qcom-pmic-gpio: add support for PM8937
    - nvdimm: rectify the illogical code within nd_dax_probe()
    - PCI: Detect and trust built-in Thunderbolt chips
    - PCI: Add 'reset_subordinate' to reset hierarchy below bridge
    - PCI: Add ACS quirk for Wangxun FF5xxx NICs
    - usb: chipidea: udc: handle USB Error Interrupt if IOC not set
    - misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle
    - modpost: Include '.text.*' in TEXT_SECTIONS
    - modpost: Add .irqentry.text to OTHER_SECTIONS
    - sched/core: Remove the unnecessary need_resched() check in nohz_csd_func()
    - sched/fair: Add NOHZ balancer flag for nohz.next_balance updates
    - sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning
      busy
    - sched/core: Prevent wakeup of ksoftirqd during idle load balance
    - btrfs: fix missing snapshot drew unlock when root is dead during swap
      activation
    - tracing/eprobe: Fix to release eprobe when failed to add dyn_event
    - Revert "unicode: Don't special case ignorable code points"
    - KVM: arm64: vgic-its: Add a data length check in vgic_its_save_*
    - KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device
    - KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE
    - jffs2: Fix rtime decompressor
    - mm/damon/vaddr-test: split a test function having >1024 bytes frame size
    - mm/damon/vaddr: fix issue in damon_va_evenly_split_region()
    - xhci: dbc: Fix STALL transfer event handling
    - mmc: mtk-sd: Fix error handle of probe function
    - ocfs2: Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume"
    - Revert "drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()"
    - scsi: core: Fix scsi_mode_select() buffer length handling
    - gve: Fixes for napi_poll when budget is 0
    - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
    - net: dsa: microchip: correct KSZ8795 static MAC table access
    - drm/amdgpu: rework resume handling for display (v2)
    - serial: amba-pl011: fix build regression
    - media: venus: vdec: fixed possible memory leak issue
    - net/smc: Fix af_ops of child socket pointing to released memory
    - Bluetooth: hci_core: Fix calling mgmt_device_connected
    - Linux 5.15.174
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-46871
    - drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-49950
    - Bluetooth: L2CAP: Fix uaf in l2cap_connect
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-50275
    - arm64/sve: Discard stale CPU state when handling SVE traps
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-47730
    - crypto: hisilicon/qm - inject error before stopping queue
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-46809
    - drm/amd/display: Check BIOS images before it is used
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-57850
    - jffs2: Prevent rtime decompress memory corruption
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56781
    - powerpc/prom_init: Fixup missing powermac #size-cells
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56785
    - MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-43098
    - i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to
      avoid deadlock
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-45828
    - i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56586
    - f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56587
    - leds: class: Protect brightness_show() with led_cdev->led_access mutex
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56589
    - scsi: hisi_sas: Add cond_resched() for no forced preemption model
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56590
    - Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56593
    - wifi: brcmfmac: Fix oops due to NULL pointer dereference in
      brcmf_sdiod_sglist_rw()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56594
    - drm/amdgpu: set the right AMDGPU sg segment limitation
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56595
    - jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56596
    - jfs: fix array-index-out-of-bounds in jfs_readdir
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56597
    - jfs: fix shift-out-of-bounds in dbSplit
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56598
    - jfs: array-index-out-of-bounds fix in dtReadFirst
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-47143
    - dma-debug: fix a possible deadlock on radix_lock
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56600
    - net: inet6: do not leave a dangling sk pointer in inet6_create()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56601
    - net: inet: do not leave a dangling sk pointer in inet_create()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56602
    - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56603
    - net: af_can: do not leave a dangling sk pointer in can_create()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56605
    - Bluetooth: L2CAP: do not leave dangling sk pointer on error in
      l2cap_sock_create()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56606
    - af_packet: avoid erroring out after sock_init_data() in packet_create()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56787
    - soc: imx8m: Probe the SoC driver as platform driver
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56610
    - kcsan: Turn report_filterlist_lock into a raw_spinlock
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-57849
    - s390/cpum_sf: Handle CPU hotplug remove during sampling
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56568
    - iommu/arm-smmu: Defer probe of clients after smmu device bound
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56614
    - xsk: fix OOB map writes when deleting elements
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56615
    - bpf: fix OOB devmap writes when deleting elements
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-48881
    - bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56619
    - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56622
    - scsi: ufs: core: sysfs: Prevent div by zero
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56623
    - scsi: qla2xxx: Fix use after free on unload
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-57874
    - arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56625
    - can: dev: can_set_termination(): allow sleeping GPIOs
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56629
    - HID: wacom: fix when get product name maybe null pointer
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56630
    - ocfs2: free inode when ocfs2_get_init_inode() fails
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-50051
    - spi: mpc52xx: Add cancel_work_sync before module remove
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56633
    - tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56634
    - gpio: grgpio: Add NULL check in grgpio_probe
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56636
    - geneve: do not assume mac header is set in geneve_xmit_skb()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56637
    - netfilter: ipset: Hold module reference while requesting a module
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-52332
    - igb: Fix potential invalid memory access in igb_init_module()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56640
    - net/smc: fix LGR and link use-after-free issue
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56642
    - tipc: Fix use-after-free of kernel socket in cleanup_bearer().
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56643
    - dccp: Fix memory leak in dccp_feat_change_recv
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56644
    - net/ipv6: release expired exception dst cached in socket
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56645
    - can: j1939: j1939_session_new(): fix skb reference counting
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56648
    - net: hsr: avoid potential out-of-bound access in fill_frame_info()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56650
    - netfilter: x_tables: fix LED ID check in led_tg_check()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56776
    - drm/sti: avoid potential dereference of error pointers
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56777
    - drm/sti: avoid potential dereference of error pointers in
      sti_gdp_atomic_check
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56778
    - drm/sti: avoid potential dereference of error pointers in
      sti_hqvdp_atomic_check
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-46841
    - btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in
      walk_down_proc()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56779
    - nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56558
    - nfsd: make sure exp active before svc_export_show
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56562
    - i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-57838
    - s390/entry: Mark IRQ entries to fix stack depot warnings
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56567
    - ad7780: fix division by zero in ad7780_write_raw()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56581
    - btrfs: ref-verify: fix use-after-free after invalid ref action
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56774
    - btrfs: add a sanity check for btrfs root in btrfs_search_slot()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56780
    - quota: flush quota_release_work upon quota writeback
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53165
    - sh: intc: Fix use-after-free bug in register_intc_controller()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56688
    - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56704
    - 9p/xen: fix release of IRQ
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53171
    - ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53172
    - ubi: fastmap: Fix duplicate slab cache names while attaching
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56739
    - rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53173
    - NFSv4.0: Fix a use-after-free problem in the asynchronous open()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53145
    - um: Fix potential integer overflow during physmem setup
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53174
    - SUNRPC: make sure cache entry active before cache_show
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53146
    - NFSD: Prevent a potential integer overflow
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56698
    - usb: dwc3: gadget: Fix looping of queued SG entries
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53180
    - ALSA: pcm: Add sanity NULL check for the default mmap fault handler
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56700
    - media: wl128x: Fix atomicity violation in fmc_send_cmd()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2022-49034
    - sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53181
    - um: vector: Do not use drvdata in release
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53183
    - um: net: Do not use drvdata in release
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53184
    - um: ubd: Do not use drvdata in release
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-50055
    - driver core: bus: Fix double free in driver API bus_register()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56741
    - apparmor: test: Fix memory leak for aa_unpack_strdup()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53148
    - comedi: Flush partial mappings in error case
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53194
    - PCI: Fix use-after-free of slot->bus on hot remove
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53197
    - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox
      devices
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53150
    - ALSA: usb-audio: Fix out of bounds reads when finding clock sources
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53198
    - xen: Fix the issue of resource not being properly released in
      xenbus_dev_probe()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-50283
    - ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53206
    - tcp: Fix use-after-free of nreq in reqsk_timer_handler().
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53214
    - vfio/pci: Properly hide first-in-list PCIe extended capability
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53215
    - svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53217
    - NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53151
    - svcrdma: Address an integer overflow
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56745
    - PCI: Fix reset_method_store() memory leak
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56746
    - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53155
    - ocfs2: fix uninitialized value in ocfs2_file_read_iter()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53226
    - RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56747
    - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56748
    - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53227
    - scsi: bfa: Fix use-after-free in bfad_im_module_exit()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56701
    - powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56678
    - powerpc/mm/fault: Fix kfence page fault reporting
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56723
    - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56724
    - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56691
    - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56694
    - bpf: fix recursive lock when verdict program return SK_PASS
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53237
    - Bluetooth: fix use-after-free in device_for_each_child()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53239
    - ALSA: 6fire: Release resources at card release
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56531
    - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56532
    - ALSA: us122l: Use snd_card_free_when_closed() at disconnection
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56533
    - ALSA: usx2y: Use snd_card_free_when_closed() at disconnection
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56720
    - bpf, sockmap: Several fixes to bpf_msg_pop_data
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56726
    - octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56728
    - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56679
    - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56539
    - wifi: mwifiex: Fix memcpy() field-spanning write warning in
      mwifiex_config_scan()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53156
    - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56705
    - media: atomisp: Add check for rgby_data memory allocation failure
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53157
    - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53158
    - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56681
    - crypto: bcm - add error check in the ahash_hmac_init function
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56708
    - EDAC/igen6: Avoid segmentation fault on module unload
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56690
    - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return
      -EBUSY
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53161
    - EDAC/bluefield: Fix potential integer overflow
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56754
    - crypto: caam - Fix the pointer passed to caam_qi_shutdown()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56548
    - hfsplus: don't query the device logical block size multiple times
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56756
    - nvme-pci: fix freeing of the HMB descriptor table
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53142
    - initramfs: avoid filename buffer overrun
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56693
    - brd: defer automatic disk creation until module initialization succeeds
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-49996
    - cifs: Fix buffer overflow when parsing NFS reparse points
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53096
    - mm: resolve faulty mmap_region() error path behaviour
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53122
    - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-49974
    - NFSD: Limit the number of concurrent async COPY operations
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53127
    - Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53130
    - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53131
    - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53135
    - KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind
      CONFIG_BROKEN
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53112
    - ocfs2: uncache inode which has failed entering the group
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53113
    - mm: fix NULL pointer dereference in alloc_pages_bulk_noprof
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53120
    - net/mlx5e: CT: Fix null-ptr-deref in add rule err flow
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53138
    - net/mlx5e: kTLS, Fix incorrect page refcounting
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53121
    - net/mlx5: fs, lock FTE when checking if active
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53129
    - drm/rockchip: vop: Fix a dereferenced before check warning
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-53140
    - netlink: terminate outstanding dump on socket close
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56569
    - ftrace: Fix regression with module command in stack_trace_filter
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56570
    - ovl: Filter invalid inodes with missing lookup function
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56572
    - media: platform: allegro-dvt: Fix possible memory leak in
      allocate_buffers_internal()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56574
    - media: ts2020: fix null-ptr-deref in ts2020_probe()
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56575
    - media: imx-jpeg: Ensure power suppliers be suspended before detach them
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56576
    - media: i2c: tc358743: Fix crash in the probe error path when using polling
  * Jammy update: v5.15.174 upstream stable release (LP: #2095283) //
    CVE-2024-56578
    - media: imx-jpeg: Set video drvdata before register video device
  * CVE-2024-56672
    - blk-cgroup: Fix UAF in blkcg_unpin_online()

  [ Ubuntu: 5.15.0-133.144 ]

  * CVE-2025-0927
    - SAUCE: fs: hfs/hfsplus: add key_len boundary check to hfs_bnode_read_key

  [ Ubuntu: 5.15.0-132.143 ]

  * jammy/linux: 5.15.0-132.143 -proposed tracker (LP: #2093735)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/2025.01.13)
  * KVM: Cache CPUID at KVM.ko module init to reduce latency of VM-Enter and VM-
    Exit (LP: #2093146)
    - kvm: x86: Fix xstate_required_size() to follow XSTATE alignment rule
    - KVM: x86: Cache CPUID.0xD XSTATE offsets+sizes during module init
  * Jammy update: v5.15.173 upstream stable release (LP: #2089541)
    - 9p: Avoid creating multiple slab caches with the same name
    - irqchip/ocelot: Fix trigger register address
    - block: Fix elevator_get_default() checking for NULL q->tag_set
    - HID: multitouch: Add support for B2402FVA track point
    - HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad
    - bpf: use kvzmalloc to allocate BPF verifier environment
    - crypto: marvell/cesa - Disable hash algorithms
    - sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML
    - drm/vmwgfx: Limit display layout ioctl array size to
      VMWGFX_NUM_DISPLAY_UNITS
    - powerpc/powernv: Free name on error in opal_event_init()
    - vDPA/ifcvf: Fix pci_read_config_byte() return code handling
    - fs: Fix uninitialized value issue in from_kuid and from_kgid
    - HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad
    - HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard
    - net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition
    - md/raid10: improve code of mrdev in raid10_sync_request
    - mm/memory: add non-anonymous page check in the copy_present_page()
    - udf: Allocate name buffer in directory iterator on heap
    - udf: Avoid directory type conversion failure due to ENOMEM
    - 9p: fix slab cache name creation for real
    - Linux 5.15.173
  * Jammy update: v5.15.173 upstream stable release (LP: #2089541) //
    CVE-2024-41080
    - io_uring: fix possible deadlock in io_register_iowq_max_workers()
  * Jammy update: v5.15.172 upstream stable release (LP: #2089533)
    - arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-
      excavator
    - arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
    - arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
    - arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
    - arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
    - arm64: dts: imx8mp: correct sdhc ipg clk
    - ARM: dts: rockchip: fix rk3036 acodec node
    - ARM: dts: rockchip: drop grf reference from rk3036 hdmi
    - ARM: dts: rockchip: Fix the spi controller on rk3036
    - ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
    - NFSv3: only use NFS timeout for MOUNT when protocols are compatible
    - NFS: Add a tracepoint to show the results of nfs_set_cache_invalid()
    - NFSv3: handle out-of-order write replies.
    - nfs: avoid i_lock contention in nfs_clear_invalid_mapping
    - net: enetc: set MAC address to the VF net_device
    - can: c_can: fix {rx,tx}_errors statistics
    - net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
    - net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
    - Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
    - media: stb0899_algo: initialize cfr before using it
    - media: dvb_frontend: don't play tricks with underflow values
    - media: adv7604: prevent underflow condition when reporting colorspace
    - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
    - ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
    - media: pulse8-cec: fix data timestamp at pulse8_setup()
    - media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
    - pwm: imx-tpm: Use correct MODULO value for EPWM mode
    - drm/amdgpu: Adjust debugfs eviction and IB access permissions
    - drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
    - thermal/drivers/qcom/lmh: Remove false lockdep backtrace
    - dm cache: correct the number of origin blocks to match the target length
    - dm cache: optimize dirty bit checking with find_next_bit when resizing
    - dm-unstriped: cast an operand to sector_t to prevent potential uint32_t
      overflow
    - ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
    - posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone
    - io_uring: rename kiocb_end_write() local helper
    - fs: create kiocb_{start,end}_write() helpers
    - io_uring: use kiocb_{start,end}_write() helpers
    - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in
      uvc_parse_format
    - fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
    - usb: dwc3: fix fault at system suspend if device was already runtime
      suspended
    - USB: serial: qcserial: add support for Sierra Wireless EM86xx
    - USB: serial: option: add Fibocom FG132 0x0112 composition
    - USB: serial: option: add Quectel RG650V
    - irqchip/gic-v3: Force propagation of the active state with a read-back
    - ucounts: fix counter leak in inc_rlimit_get_ucounts()
    - ALSA: usb-audio: Support jack detection on Dell dock
    - ALSA: usb-audio: Add quirks for Dell WD19 dock
    - ACPI: PRM: Clean up guid type in struct prm_handler_info
    - ALSA: usb-audio: Add endianness annotations
    - Linux 5.15.172
  * Jammy update: v5.15.172 upstream stable release (LP: #2089533) //
    CVE-2024-50265
    - ocfs2: remove entry once instead of null-ptr-dereference in
      ocfs2_xa_remove()
  * Jammy update: v5.15.172 upstream stable release (LP: #2089533) //
    CVE-2024-50267
    - USB: serial: io_edgeport: fix use after free in debug printk
  * Jammy update: v5.15.172 upstream stable release (LP: #2089533) //
    CVE-2024-50268
    - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
  * Jammy update: v5.15.172 upstream stable release (LP: #2089533) //
    CVE-2024-50269
    - usb: musb: sunxi: Fix accessing an released usb phy
  * Jammy update: v5.15.172 upstream stable release (LP: #2089533) //
    CVE-2024-50036
    - net: do not delay dst_entries_add() in dst_release()
  * Jammy update: v5.15.172 upstream stable release (LP: #2089533) //
    CVE-2024-42291
    - ice: Add a per-VF limit on number of FDIR filters
  * Jammy update: v5.15.172 upstream stable release (LP: #2089533) //
    CVE-2024-50273
    - btrfs: reinitialize delayed ref list after deleting it from the list
  * Jammy update: v5.15.172 upstream stable release (LP: #2089533) //
    CVE-2024-53066
    - nfs: Fix KMSAN warning in decode_getfattr_attrs()
  * Jammy update: v5.15.172 upstream stable release (LP: #2089533) //
    CVE-2024-53052
    - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
  * Jammy update: v5.15.172 upstream stable release (LP: #2089533) //
    CVE-2024-50278
    - dm cache: fix potential out-of-bounds access on the first resume
  * Jammy update: v5.15.172 upstream stable release (LP: #2089533) //
    CVE-2024-50279
    - dm cache: fix out-of-bounds access to the dirty bitset when resizing
  * Jammy update: v5.15.172 upstream stable release (LP: #2089533) //
    CVE-2024-50282
    - drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
  * Jammy update: v5.15.172 upstream stable release (LP: #2089533) //
    CVE-2024-50287
    - media: v4l2-tpg: prevent the risk of a division by zero
  * Jammy update: v5.15.172 upstream stable release (LP: #2089533) //
    CVE-2024-50290
    - media: cx24116: prevent overflows on SNR calculus
  * Jammy update: v5.15.172 upstream stable release (LP: #2089533) //
    CVE-2024-53061
    - media: s5p-jpeg: prevent buffer overflows
  * Jammy update: v5.15.172 upstream stable release (LP: #2089533) //
    CVE-2024-50292
    - ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
  * Jammy update: v5.15.172 upstream stable release (LP: #2089533) //
    CVE-2024-53063
    - media: dvbdev: prevent the risk of out of memory access
  * Jammy update: v5.15.172 upstream stable release (LP: #2089533) //
    CVE-2024-50295
    - net: arc: fix the device for dma_map_single/dma_unmap_single
  * Jammy update: v5.15.172 upstream stable release (LP: #2089533) //
    CVE-2024-50296
    - net: hns3: fix kernel crash when uninstalling driver
  * Jammy update: v5.15.172 upstream stable release (LP: #2089533) //
    CVE-2024-53088
    - i40e: fix race condition by adding filter's intermediate sync state
  * Jammy update: v5.15.172 upstream stable release (LP: #2089533) //
    CVE-2024-50299
    - sctp: properly validate chunk size in sctp_sf_ootb()
  * Jammy update: v5.15.172 upstream stable release (LP: #2089533) //
    CVE-2024-50301
    - security/keys: fix slab-out-of-bounds in key_task_permission
  * Jammy update: v5.15.172 upstream stable release (LP: #2089533) //
    CVE-2024-50302
    - HID: core: zero-initialize the report buffer
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405)
    - selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test
    - ACPI: PRM: Remove unnecessary blank lines
    - ACPI: PRM: Change handler_addr type to void pointer
    - cgroup: Fix potential overflow issue when checking max_depth
    - mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
    - wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
    - wifi: brcm80211: BRCM_TRACING should depend on TRACING
    - RDMA/cxgb4: Dump vendor specific QP details
    - RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
    - RDMA/bnxt_re: synchronize the qp-handle table array
    - mac80211: do drv_reconfig_complete() before restarting all
    - mac80211: Add support to trigger sta disconnect on hardware restart
    - wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
    - ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
    - gtp: allow -1 to be specified as file description from userspace
    - net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
    - firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state()
    - fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
    - scsi: scsi_transport_fc: Allow setting rport state to current state
    - net: amd: mvme147: Fix probe banner message
    - NFS: remove revoked delegation from server's delegation list
    - misc: sgi-gru: Don't disable preemption in GRU driver
    - usbip: tools: Fix detach_port() invalid port error path
    - usb: phy: Fix API devm_usb_put_phy() can not release the phy
    - usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
    - xhci: Fix Link TRB DMA in command ring stopped completion event
    - xhci: Use pm_runtime_get to prevent RPM on unsupported systems
    - Revert "driver core: Fix uevent_show() vs driver detach race"
    - iio: light: veml6030: fix microlux value calculation
    - riscv: vdso: Prevent the compiler from inserting calls to memset()
    - riscv: efi: Set NX compat flag in PE/COFF header
    - riscv: Use '%u' to format the output of 'cpu'
    - riscv: Remove unused GENERATING_ASM_OFFSETS
    - riscv: Remove duplicated GET_RM
    - mm/page_alloc: call check_new_pages() while zone spinlock is not held
    - mm/page_alloc: fix tracepoint mm_page_alloc_zone_locked()
    - mm/page_alloc: split out buddy removal code from rmqueue into separate
      helper
    - mm/page_alloc: rename ALLOC_HIGH to ALLOC_MIN_RESERVE
    - mm/page_alloc: treat RT tasks similar to __GFP_HIGH
    - mm/page_alloc: explicitly record high-order atomic allocations in
      alloc_flags
    - mm/page_alloc: explicitly define what alloc flags deplete min reserves
    - mm/page_alloc: explicitly define how __GFP_HIGH non-blocking allocations
      accesses reserves
    - Revert "drm/mipi-dsi: Set the fwnode for mipi_dsi_device"
    - vt: prevent kernel-infoleak in con_font_get()
    - mac80211: always have ieee80211_sta_restart()
    - Linux 5.15.171
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405) //
    CVE-2023-52913
    - drm/i915: Fix potential context UAFs
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405) //
    CVE-2024-50228
    - mm: shmem: fix data-race in shmem_getattr()
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405) //
    CVE-2024-53055
    - wifi: iwlwifi: mvm: fix 6 GHz scan construction
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405) //
    CVE-2024-50230
    - nilfs2: fix kernel bug due to missing clearing of checked flag
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405) //
    CVE-2024-50072
    - x86/bugs: Use code segment selector for VERW operand
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405) //
    CVE-2024-50218
    - ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405) //
    CVE-2024-50219
    - mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405) //
    CVE-2024-50229
    - nilfs2: fix potential deadlock with newly created symlinks
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405) //
    CVE-2024-50232
    - iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405) //
    CVE-2024-50233
    - staging: iio: frequency: ad9832: fix division by zero in
      ad9832_calc_freqreg()
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405) //
    CVE-2024-50234
    - wifi: iwlegacy: Clear stale interrupts before resuming device
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405) //
    CVE-2024-50236
    - wifi: ath10k: Fix memory leak in management tx
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405) //
    CVE-2024-50237
    - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405) //
    CVE-2024-50244
    - fs/ntfs3: Additional check in ni_clear()
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405) //
    CVE-2024-50245
    - fs/ntfs3: Fix possible deadlock in mi_read
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405) //
    CVE-2024-50247
    - fs/ntfs3: Check if more than chunk-size bytes are written
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405) //
    CVE-2024-50249
    - ACPI: CPPC: Make rmw_lock a raw_spin_lock
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405) //
    CVE-2024-50251
    - netfilter: nft_payload: sanitize offset and length before calling
      skb_checksum()
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405) //
    CVE-2024-50257
    - netfilter: Fix use-after-free in get_info()
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405) //
    CVE-2024-50262
    - bpf: Fix out-of-bounds write in trie_get_next_key()
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405) //
    CVE-2024-50259
    - netdevsim: Add trailing zero to terminate the string in
      nsim_nexthop_bucket_activity_write()
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405) //
    CVE-2024-53042
    - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405) //
    CVE-2024-53058
    - net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405) //
    CVE-2024-53059
    - wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405) //
    CVE-2024-50141
    - ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
  * Jammy update: v5.15.171 upstream stable release (LP: #2089405) //
    CVE-2024-50086
    - ksmbd: fix user-after-free from session log off
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272)
    - RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
    - x86/resctrl: Avoid overflow in MB settings in bw_validate()
    - ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
    - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
    - RDMA/irdma: Fix misspelling of "accept*"
    - ipv4: give an IPv4 dev to blackhole_netdev
    - RDMA/bnxt_re: Return more meaningful error
    - drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
    - drm/msm: Allocate memory for disp snapshot with kvzalloc()
    - net: usb: usbnet: fix race in probe failure
    - octeontx2-af: Fix potential integer overflows on integer shifts
    - macsec: don't increment counters for an unrelated SA
    - net: ethernet: aeroflex: fix potential memory leak in
      greth_start_xmit_gbit()
    - net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
    - net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
    - genetlink: hold RCU in genlmsg_mcast()
    - s390: Initialize psw mask in perf_arch_fetch_caller_regs()
    - arm64:uprobe fix the uprobe SWBP_INSN in big-endian
    - KVM: s390: gaccess: Check if guest address is in memslot
    - usb: gadget: Add function wakeup support
    - XHCI: Separate PORT and CAPs macros into dedicated file
    - usb: dwc3: core: Fix system suspend on TI AM62 platforms
    - block, bfq: fix procress reference leakage for bfqq in merge chain
    - ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to
      default regs values
    - ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
    - arm64: Force position-independent veneers
    - platform/x86: dell-wmi: Ignore suspend notifications
    - arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
    - ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
    - platform/x86: dell-sysman: add support for alienware products
    - jfs: Fix sanity check in dbMount
    - xfrm: extract dst lookup parameters into a struct
    - xfrm: respect ip protocols rules criteria when performing dst lookups
    - net: plip: fix break; causing plip to never transmit
    - net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
    - net: usb: usbnet: fix name regression
    - r8169: avoid unsolicited interrupts
    - posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
    - bpf,perf: Fix perf_event_detach_bpf_prog error handling
    - ALSA: hda/realtek: Update default depop procedure
    - btrfs: zoned: fix zone unusable accounting for freed reserved extent
    - ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
    - ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid
      detection issue
    - openat2: explicitly return -E2BIG for (usize > PAGE_SIZE)
    - ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
    - hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
    - selinux: improve error checking in sel_write_load()
    - net: phy: dp83822: Fix reset pin definitions
    - Linux 5.15.170
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50142
    - xfrm: validate new SA's prefixlen using SA family when sel.family is unset
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50103
    - ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50058
    - serial: protect uart_port_dtr_rts() in uart_shutdown() too
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50110
    - xfrm: fix one more kernel-infoleak in algo dumping
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50115
    - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50116
    - nilfs2: fix kernel bug due to missing clearing of buffer delay flag
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50117
    - drm/amd: Guard against bad data for ATIF ACPI method
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50205
    - ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50127
    - net: sched: fix use-after-free in taprio_change()
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50128
    - net: wwan: fix global oob in wwan_rtnl_policy
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50167
    - be2net: fix potential memory leak in be_xmit()
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50168
    - net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50131
    - tracing: Consider the NULL character when validating the event length
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50143
    - udf: fix uninit-value use in udf_get_fileshortad
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50134
    - drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real
      VLA
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50010
    - exec: don't WARN for racy path_noexec check
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50194
    - arm64: probes: Fix uprobes for big-endian kernels
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50148
    - Bluetooth: bnep: fix wild-memory-access in proto_unregister
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50150
    - usb: typec: altmode should keep reference to parent
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50151
    - smb: client: fix OOBs when building SMB2_IOCTL request
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50153
    - scsi: target: core: Fix null-ptr-deref in target_alloc_device()
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50154
    - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50171
    - net: systemport: fix potential memory leak in bcm_sysport_xmit()
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50156
    - drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50208
    - RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50160
    - ALSA: hda/cs8409: Fix possible NULL dereference
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50209
    - RDMA/bnxt_re: Add a check for memory allocation
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50162
    - bpf: devmap: provide rxq after redirect
  * Jammy update: v5.15.170 upstream stable release (LP: #2089272) //
    CVE-2024-50163
    - bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
  * kernel:nft "Could not process rule: Device or resource busy" on unreferenced
    chain (LP: #2089699)
    - SAUCE: netfilter: nf_tables: Fix EBUSY on deleting unreferenced chain
  * WARN in trc_wait_for_one_reader about failed IPIs (LP: #2089373)
    - SAUCE: rcu-tasks: fix mismerge in trc_inspect_reader
    - rcu-tasks: Idle tasks on offline CPUs are in quiescent states
  * CVE-2024-35887
    - ax25: fix use-after-free bugs caused by ax25_ds_del_timer
  * CVE-2024-40965
    - clk: Add a devm variant of clk_rate_exclusive_get()
    - clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
    - i2c: lpi2c: Avoid calling clk_get_rate during transfer
  * CVE-2024-40982
    - ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
  * CVE-2024-41066
    - ibmvnic: Add tx check to prevent skb leak
  * CVE-2024-42252
    - closures: Change BUG_ON() to WARN_ON()
  * CVE-2024-53097
    - mm: krealloc: Fix MTE false alarm in __do_krealloc
  * Add list of source files to linux-buildinfo (LP: #2086606)
    - [Packaging] Sort build dependencies alphabetically
    - [Packaging] Add list of used source files to buildinfo package
  * UFS: uspi->s_3apb UBSAN: shift-out-of-bounds (LP: #2087853)
    - ufs: ufs_sb_private_info: remove unused s_{2, 3}apb fields
  * Jammy update: v5.15.169 upstream stable release (LP: #2088231)
    - ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
    - udf: New directory iteration code
    - udf: Convert udf_expand_dir_adinicb() to new directory iteration
    - udf: Move udf_expand_dir_adinicb() to its callsite
    - udf: Implement searching for directory entry using new iteration code
    - udf: Provide function to mark entry as deleted using new directory iteration
      code
    - udf: Convert udf_rename() to new directory iteration code
    - udf: Convert udf_readdir() to new directory iteration
    - udf: Convert udf_lookup() to use new directory iteration code
    - udf: Convert udf_get_parent() to new directory iteration code
    - udf: Convert empty_dir() to new directory iteration code
    - udf: Convert udf_rmdir() to new directory iteration code
    - udf: Convert udf_unlink() to new directory iteration code
    - udf: Implement adding of dir entries using new iteration code
    - udf: Convert udf_add_nondir() to new directory iteration
    - udf: Convert udf_mkdir() to new directory iteration code
    - udf: Convert udf_link() to new directory iteration code
    - udf: Remove old directory iteration code
    - udf: Handle error when expanding directory
    - udf: Don't return bh from udf_expand_dir_adinicb()
    - udf: Fix bogus checksum computation in udf_rename()
    - net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
    - net: enetc: add missing static descriptor and inline keyword
    - posix-clock: Fix missing timespec64 check in pc_clock_settime()
    - arm64: probes: Remove broken LDR (literal) uprobe support
    - arm64: probes: Fix simulate_ldr*_literal()
    - net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-
      link PHY
    - irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1
    - fat: fix uninitialized variable
    - mm/swapfile: skip HugeTLB pages for unuse_vma
    - secretmem: disable memfd_secret() if arch cannot set direct map
    - dm-crypt, dm-verity: disable tasklets
    - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
    - drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
    - io_uring/sqpoll: do not allow pinning outside of cpuset
    - io_uring/sqpoll: retain test for whether the CPU is valid
    - io_uring/sqpoll: do not put cpumask on stack
    - iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
    - s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
    - KVM: s390: Change virtual to physical address access in diag 0x258 handler
    - x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
    - x86/cpufeatures: Add a IBPB_NO_RET BUG flag
    - x86/entry: Have entry_ibpb() invalidate return predictions
    - x86/bugs: Skip RSB fill at VMEXIT
    - x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
    - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
    - io_uring/sqpoll: close race on waiting for sqring entries
    - drm/radeon: Fix encoder->possible_clones
    - drm/vmwgfx: Handle surface check failure correctly
    - iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
    - iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
    - iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
    - iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: hid-sensors: Fix an error handling path in
      _hid_sensor_set_report_latency()
    - iio: light: veml6030: fix ALS sensor resolution
    - iio: light: veml6030: fix IIO device retrieval from embedded device
    - iio: light: opt3001: add missing full-scale range value
    - iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - Bluetooth: Remove debugfs directory on module init failure
    - Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
    - xhci: Fix incorrect stream context type macro
    - xhci: Mitigate failed set dequeue pointer commands
    - USB: serial: option: add support for Quectel EG916Q-GL
    - USB: serial: option: add Telit FN920C04 MBIM compositions
    - parport: Proper fix for array out-of-bounds access
    - x86/resctrl: Annotate get_mem_config() functions as __init
    - x86/apic: Always explicitly disarm TSC-deadline timer
    - x86/entry_32: Do not clobber user EFLAGS.ZF
    - x86/entry_32: Clear CPU buffers after register restore in NMI return
    - pinctrl: ocelot: fix system hang on level based interrupts
    - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
    - mptcp: track and update contiguous data status
    - mptcp: handle consistently DSS corruption
    - tcp: fix mptcp DSS corruption due to large pmtu xmit
    - mptcp: fallback when MPTCP opts are dropped after 1st data
    - mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
    - mptcp: prevent MPC handshake on port-based signal endpoints
    - nilfs2: propagate directory read errors from nilfs_find_entry()
    - powerpc/mm: Always update max/min_low_pfn in mem_topology_setup()
    - ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne
      1000 G2
    - Linux 5.15.169

  [ Ubuntu: 5.15.0-131.141 ]

  * jammy/linux: 5.15.0-131.141 -proposed tracker (LP: #2093573)
  * CVE-2024-53164
    - net: sched: fix ordering of qlen adjustment
  * CVE-2024-53141
    - netfilter: ipset: add missing range check in bitmap_ip_uadt
  * CVE-2024-53103
    - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer

 -- Jian Hui Lee <jianhui.lee@canonical.com>  Wed, 14 May 2025 17:07:08 +0800

linux-mtk (5.15.0-1038.45) jammy; urgency=medium

  * jammy/linux-mtk: 5.15.0-1038.45 -proposed tracker (LP: #2107431)

  * [g700] Suspend hang during suspend cycles test when no HDMI monitor is
    connected  (LP: #2107430)
    - Revert "UBUNTU: [Config] CONFIG_DRM_MEDIATEK_HDMI=y and
      CONFIG_PHY_MTK_HDMI=y"

 -- Jian Hui Lee <jianhui.lee@canonical.com>  Wed, 16 Apr 2025 11:27:32 +0800

linux-mtk (5.15.0-1037.44) jammy; urgency=medium

  * jammy/linux-mtk: 5.15.0-1037.44 -proposed tracker (LP: #2099348)

  * DSI and eDP panel can't rotate screen to flipped. (LP: #2099371)
    - drm/mediatek: Add support for 180-degree rotation in the display driver

 -- Jian Hui Lee <jianhui.lee@canonical.com>  Fri, 21 Feb 2025 10:48:36 +0800

linux-mtk (5.15.0-1036.43) jammy; urgency=medium

  * jammy/linux-mtk: 5.15.0-1036.43 -proposed tracker (LP: #2088406)

  * [g700] support p1v4 hardware (LP: #2081699)
    - SAUCE: (no-up) dtbo: genio-700-evk: fix touch for display-dsi-p1v4.dts

  * mtk-fsource: ubuntu kernel integration (LP: #2092506)
    - SAUCE: (no-up) ubuntu: mtk-fsource-driver: add mediatek fsource driver

  * [g1200-evk] Call trace appeared when reload mtk_mdp3 module (LP: #2090981)
    - SAUCE: (no-up) GENIO: media: mediatek: mdp3: fix unload module flow

  * [g510] mt8188-mdla-devfreq probe failed message found in dmesg
    (LP: #2090978)
    - SAUCE: (no-up) power: Ignore duplicate OPP entry to fix probe fail

  * Fail to detect card after unplugging DPoC cable and reboot (LP: #2090979)
    - SAUCE: (no-up) GENIO: drm/mediatek: dp: Remove DP enabled check

  * Miscellaneous Ubuntu changes
    - SAUCE: (no-up) drm/mediatek: fix build error for DRM_MODE_ROTATE_0
      declaration

  [ Ubuntu: 5.15.0-130.140 ]

  * jammy/linux: 5.15.0-130.140 -proposed tracker (LP: #2092132)
  * ovs/linuxbridge jobs running on ubuntu jammy broken with latest kernel
    5.15.0-127.137 (LP: #2091990)
    - netfilter: xtables: fix typo causing some targets not to load on IPv6

  [ Ubuntu: 5.15.0-128.138 ]

  * jammy/linux: 5.15.0-128.138 -proposed tracker (LP: #2090163)
  * CVE-2024-50264
    - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
  * CVE-2024-53057
    - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
  * CVE-2024-43904
    - drm/amd/display: Add null checks for 'stream' and 'plane' before
      dereferencing
  * CVE-2024-40973
    - media: mtk-vcodec: potential null pointer deference in SCP
  * CVE-2024-38553
    - net: fec: remove .ndo_poll_controller to avoid deadlocks
  * CVE-2024-26822
    - smb: client: set correct id, uid and cruid for multiuser automounts
  * CVE-2020-12351 // CVE-2020-12352 // CVE-2020-24490
    - [Config] Disable BlueZ highspeed support
  * CVE-2024-40910
    - ax25: Fix refcount imbalance on inbound connections
  * CVE-2024-35963
    - Bluetooth: hci_sock: Fix not validating setsockopt user input
  * CVE-2024-35965
    - Bluetooth: L2CAP: Fix not validating setsockopt user input
  * CVE-2024-35966
    - Bluetooth: RFCOMM: Fix not validating setsockopt user input
  * CVE-2024-35967
    - Bluetooth: SCO: Fix not validating setsockopt user input

  [ Ubuntu: 5.15.0-127.137 ]

  * jammy/linux: 5.15.0-127.137 -proposed tracker (LP: #2086357)
  * Jammy update: v5.15.168 upstream stable release (LP: #2086242)
    - parisc: Fix 64-bit userspace syscall path
    - parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
    - of/irq: Support #msi-cells=<0> in of_msi_get_domain
    - drm: omapdrm: Add missing check for alloc_ordered_workqueue
    - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
    - jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
    - mm: krealloc: consider spare memory for __GFP_ZERO
    - ocfs2: fix the la space leak when unmounting an ocfs2 volume
    - ocfs2: fix uninit-value in ocfs2_get_block()
    - ocfs2: reserve space for inline xattr before attaching reflink tree
    - ocfs2: cancel dqi_sync_work before freeing oinfo
    - ocfs2: remove unreasonable unlock in ocfs2_read_blocks
    - ocfs2: fix null-ptr-deref when journal load failed.
    - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
    - usbnet: ipheth: fix carrier detection in modes 1 and 4
    - net: ethernet: use ip_hdrlen() instead of bit shift
    - net: phy: vitesse: repair vsc73xx autonegotiation
    - powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
    - btrfs: update target inode's ctime on unlink
    - Input: ads7846 - ratelimit the spi_sync error message
    - Input: synaptics - enable SMBus for HP Elitebook 840 G2
    - HID: multitouch: Add support for GT7868Q
    - scripts: kconfig: merge_config: config files: add a trailing newline
    - platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
    - drm/msm/adreno: Fix error return if missing firmware-name
    - Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
    - NFSv4: Fix clearing of layout segments in layoutreturn
    - NFS: Avoid unnecessary rescanning of the per-server delegation list
    - platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
    - platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
    - mptcp: pm: Fix uaf in __timer_delete_sync
    - arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399
      Puma
    - minmax: reduce min/max macro expansion in atomisp driver
    - net: tighten bad gso csum offset check in virtio_net_hdr
    - mm: avoid leaving partial pfn mappings around in error case
    - fs/ntfs3: Use kvfree to free memory allocated by kvmalloc
    - arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
    - eeprom: digsy_mtc: Fix 93xx46 driver probe failure
    - selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
    - hwmon: (pmbus) Introduce and use write_byte_data callback
    - hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev >=
      1.2
    - ice: fix accounting for filters shared by multiple VSIs
    - igb: Always call igb_xdp_ring_update_tail() under Tx lock
    - net/mlx5e: Add missing link modes to ptys2ethtool_map
    - net/mlx5: Explicitly set scheduling element and TSAR type
    - net/mlx5: Add support to create match definer
    - net/mlx5: Add IFC bits and enums for flow meter
    - net/mlx5: Add missing masks and QoS bit masks for scheduling elements
    - fou: fix initialization of grc
    - octeontx2-af: Set XOFF on other child transmit schedulers during SMQ flush
    - octeontx2-af: Modify SMQ flush sequence to drop packets
    - net: ftgmac100: Enable TX interrupt to avoid TX timeout
    - netfilter: nft_socket: fix sk refcount leaks
    - net: dpaa: Pad packets to ETH_ZLEN
    - spi: nxp-fspi: fix the KASAN report out-of-bounds bug
    - dma-buf: heaps: Fix off-by-one in CMA heap fault handler
    - ASoC: meson: axg-card: fix 'use-after-free'
    - ASoC: allow module autoloading for table db1200_pids
    - ALSA: hda/realtek - Fixed ALC256 headphone no sound
    - ALSA: hda/realtek - FIxed ALC285 headphone no sound
    - scsi: lpfc: Fix overflow build issue
    - pinctrl: at91: make it work with current gpiolib
    - microblaze: don't treat zero reserved memory regions as error
    - net: ftgmac100: Ensure tx descriptor updates are visible
    - wifi: iwlwifi: lower message level for FW buffer destination
    - wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
    - wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
    - wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
    - wifi: iwlwifi: clear trans->state earlier upon error
    - ASoC: intel: fix module autoloading
    - ASoC: tda7419: fix module autoloading
    - spi: spidev: Add an entry for elgin,jg10309-01
    - drm: komeda: Fix an issue related to normalized zpos
    - spi: bcm63xx: Enable module autoloading
    - x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
    - spi: spidev: Add missing spi_device_id for jg10309-01
    - ocfs2: add bounds checking to ocfs2_xattr_find_entry()
    - ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
    - cgroup: Make operations on the cgroup root_list RCU safe
    - Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
    - gpio: prevent potential speculation leaks in gpio_device_get_desc()
    - gpiolib: cdev: Ignore reconfiguration without direction
    - cgroup: Move rcu_head up near the top of cgroup_root
    - USB: serial: pl2303: add device id for Macrosilicon MS3020
    - USB: usbtmc: prevent kernel-usb-infoleak
    - EDAC/synopsys: Add support for version 3 of the Synopsys EDAC DDR
    - EDAC/synopsys: Use the correct register to disable the error interrupt on v3
      hw
    - EDAC/synopsys: Re-enable the error interrupts on v3 hw
    - EDAC/synopsys: Fix ECC status and IRQ control race condition
    - EDAC/synopsys: Fix error injection on Zynq UltraScale+
    - wifi: rtw88: always wait for both firmware loading attempts
    - crypto: xor - fix template benchmarking
    - ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
    - wifi: ath9k: fix parameter check in ath9k_init_debug()
    - wifi: ath9k: Remove error checks when creating debugfs entries
    - net: stmmac: dwmac-loongson: Init ref and PTP clocks rate
    - wifi: rtw88: remove CPT execution branch never used
    - fs: explicitly unregister per-superblock BDIs
    - mount: warn only once about timestamp range expiration
    - fs/namespace: fnic: Switch to use %ptTd
    - mount: handle OOM on mnt_warn_timestamp_expiry
    - wifi: iwlwifi: mvm: increase the time between ranging measurements
    - padata: Honor the caller's alignment in case of chunk_size 0
    - can: j1939: use correct function name in comment
    - ACPI: CPPC: Fix MASK_VAL() usage
    - netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
    - netfilter: nf_tables: reject element expiration with no timeout
    - netfilter: nf_tables: reject expiration higher than timeout
    - netfilter: nf_tables: remove annotation to access set timeout while holding
      lock
    - cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
    - x86/sgx: Fix deadlock in SGX NUMA node search
    - wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
    - wifi: mt76: mt7915: fix rx filter setting for bfee functionality
    - wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
    - wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
    - wifi: wilc1000: fix potential RCU dereference issue in
      wilc_parse_join_bss_param
    - sock_map: Add a cond_resched() in sock_hash_free()
    - can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
    - can: m_can: m_can_close(): stop clocks after device has been shut down
    - Bluetooth: btusb: Fix not handling ZPL/short-transfer
    - bareudp: Pull inner IP header in bareudp_udp_encap_recv().
    - net: geneve: support IPv4/IPv6 as inner protocol
    - geneve: Fix incorrect inner network header offset when innerprotoinherit is
      set
    - bareudp: Pull inner IP header on xmit.
    - net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
    - r8169: disable ALDPS per default for RTL8125
    - net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
    - net: tipc: avoid possible garbage value
    - block, bfq: fix possible UAF for bfqq->bic with merge chain
    - block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
    - block, bfq: don't break merge chain in bfq_split_bfqq()
    - block: print symbolic error name instead of error code
    - block: fix potential invalid pointer dereference in blk_add_partition
    - spi: ppc4xx: handle irq_of_parse_and_map() errors
    - spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
    - arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
    - ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
    - ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
    - ARM: versatile: fix OF node leak in CPUs prepare
    - reset: berlin: fix OF node leak in probe() error path
    - reset: k210: fix OF node leak in probe() error path
    - clocksource/drivers/qcom: Add missing iounmap() on errors in
      msm_dt_timer_init()
    - m68k: Fix kernel_clone_args.flags in m68k_clone()
    - hwmon: (max16065) Fix overflows seen when writing limits
    - i2c: Add i2c_get_match_data()
    - hwmon: (max16065) Remove use of i2c_match_id()
    - hwmon: (max16065) Fix alarm attributes
    - mtd: slram: insert break after errors in parsing the map
    - hwmon: (ntc_thermistor) fix module autoloading
    - power: supply: axp20x_battery: Remove design from min and max voltage
    - power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
    - fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
    - mtd: powernv: Add check devm_kasprintf() returned value
    - pmdomain: core: Harden inter-column space in debug summary
    - drm/stm: Fix an error handling path in stm_drm_platform_probe()
    - drm/amd/display: Add null check for set_output_gamma in
      dcn30_set_output_transfer_func
    - drm/amdgpu: Replace one-element array with flexible-array member
    - drm/amdgpu: properly handle vbios fake edid sizing
    - drm/radeon: Replace one-element array with flexible-array member
    - drm/radeon: properly handle vbios fake edid sizing
    - scsi: NCR5380: Add SCp members to struct NCR5380_cmd
    - scsi: NCR5380: Check for phase match during PDMA fixup
    - drm/rockchip: vop: Allow 4096px width scaling
    - drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
    - drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
    - drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
    - scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
    - jfs: fix out-of-bounds in dbNextAG() and diAlloc()
    - drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
    - powerpc/32: Remove the 'nobats' kernel parameter
    - powerpc/32: Remove 'noltlbs' kernel parameter
    - powerpc/8xx: Fix initial memory mapping
    - powerpc/8xx: Fix kernel vs user address comparison
    - drm/msm: Fix incorrect file name output in adreno_request_fw()
    - drm/msm/a5xx: disable preemption in submits by default
    - drm/msm/a5xx: properly clear preemption records on resume
    - drm/msm/a5xx: fix races in preemption evaluation stage
    - drm/msm: Drop priv->lastctx
    - drm/msm/a5xx: workaround early ring-buffer emptiness check
    - ipmi: docs: don't advertise deprecated sysfs entries
    - drm/msm: fix %s null argument error
    - drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
    - xen: use correct end address of kernel for conflict checking
    - xen/swiotlb: add alignment check for dma buffers
    - tpm: Clean up TPM space after command failure
    - selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
    - selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
    - selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
    - selftests/bpf: Fix compiling kfree_skb.c with musl-libc
    - selftests/bpf: Fix compiling flow_dissector.c with musl-libc
    - selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
    - selftests/bpf: Fix compiling core_reloc.c with musl-libc
    - selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
    - selftests/bpf: Fix error compiling test_lru_map.c
    - selftests/bpf: Fix C++ compile error from missing _Bool type
    - xz: cleanup CRC32 edits from 2018
    - kthread: fix task state in kthread worker if being frozen
    - ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
    - smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
    - ext4: avoid buffer_head leak in ext4_mark_inode_used()
    - ext4: avoid potential buffer_head leak in __ext4_new_inode()
    - ext4: avoid negative min_clusters in find_group_orlov()
    - ext4: return error on ext4_find_inline_entry
    - ext4: avoid OOB when system.data xattr changes underneath the filesystem
    - nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
    - nilfs2: determine empty node blocks as corrupted
    - nilfs2: fix potential oob read in nilfs_btree_check_delete()
    - bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
    - perf mem: Free the allocated sort string, fixing a leak
    - perf sched timehist: Fix missing free of session in perf_sched__timehist()
    - perf sched timehist: Fixed timestamp error when unable to confirm event
      sched_in time
    - perf time-utils: Fix 32-bit nsec parsing
    - clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
    - clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
    - clk: imx: imx8qxp: Parent should be initialized earlier than the clock
    - remoteproc: imx_rproc: Correct ddr alias for i.MX8M
    - remoteproc: imx_rproc: Initialize workqueue earlier
    - clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
    - Input: ilitek_ts_i2c - avoid wrong input subsystem sync
    - Input: ilitek_ts_i2c - add report id message validation
    - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
    - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
    - PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
    - PCI: xilinx-nwl: Fix register misspelling
    - PCI: xilinx-nwl: Clean up clock on probe failure/removal
    - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
    - pinctrl: single: fix missing error code in pcs_probe()
    - RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
    - RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
    - clk: ti: dra7-atl: Fix leak of of_nodes
    - nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
    - nfsd: fix refcount leak when file is unhashed after being found
    - pinctrl: mvebu: Use devm_platform_get_and_ioremap_resource()
    - pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
    - IB/core: Fix ib_cache_setup_one error flow cleanup
    - watchdog: imx_sc_wdt: Don't disable WDT in suspend
    - RDMA/hns: Don't modify rq next block addr in HIP09 QPC
    - RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
    - RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
    - RDMA/hns: Remove unused abnormal interrupt of type RAS
    - RDMA/hns: Fix the wrong type of return value of the interrupt handler
    - RDMA/hns: Refactor the abnormal interrupt handler function
    - RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
    - RDMA/hns: Optimize hem allocation performance
    - riscv: Fix fp alignment bug in perf_callchain_user()
    - RDMA/cxgb4: Added NULL check for lookup_atid
    - RDMA/irdma: fix error message in irdma_modify_qp_roce()
    - ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
    - ntb_perf: Fix printk format
    - nfsd: call cache_put if xdr_reserve_space returns NULL
    - nfsd: return -EINVAL when namelen is 0
    - f2fs: fix typo
    - f2fs: fix to update i_ctime in __f2fs_setxattr()
    - f2fs: remove unneeded check condition in __f2fs_setxattr()
    - f2fs: reduce expensive checkpoint trigger frequency
    - f2fs: optimize error handling in redirty_blocks
    - f2fs: fix to wait page writeback before setting gcing flag
    - f2fs: introduce F2FS_IPU_HONOR_OPU_WRITE ipu policy
    - f2fs: clean up w/ dotdot_name
    - f2fs: get rid of online repaire on corrupted directory
    - spi: lpspi: Silence error message upon deferred probe
    - spi: lpspi: release requested DMA channels
    - spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
    - iio: adc: ad7606: fix oversampling gpio array
    - iio: adc: ad7606: fix standby gpio state to match the documentation
    - coresight: tmc: sg: Do not leak sg_table
    - interconnect: qcom: sm8250: Enable sync_state
    - vdpa: Add eventfd for the vdpa callback
    - vhost_vdpa: assign irq bypass producer token correctly
    - Revert "dm: requeue IO if mapping table not yet available"
    - net: axienet: Clean up device used for DMA calls
    - net: axienet: Clean up DMA start/stop and error handling
    - net: axienet: don't set IRQ timer when IRQ delay not used
    - net: axienet: implement NAPI and GRO receive
    - net: axienet: reduce default RX interrupt threshold to 1
    - net: axienet: add coalesce timer ethtool configuration
    - net: axienet: Be more careful about updating tx_bd_tail
    - net: axienet: Use NAPI for TX completion path
    - net: axienet: Switch to 64-bit RX/TX statistics
    - net: xilinx: axienet: Fix packet counting
    - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
    - net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race
      Condition
    - net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
    - tcp: check skb is non-NULL in tcp_rto_delta_us()
    - net: qrtr: Update packets cloning when broadcasting
    - bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
    - netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
    - netfilter: ctnetlink: compile ctnetlink_label_size with
      CONFIG_NF_CONNTRACK_EVENTS
    - drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
    - Input: goodix - use the new soc_intel_is_byt() helper
    - powercap: RAPL: fix invalid initialization for pl4_supported field
    - x86/mm: Switch to new Intel CPU model defines
    - vfio/pci: fix potential memory leak in vfio_intx_enable()
    - selinux,smack: don't bypass permissions check in inode_setsecctx hook
    - Remove *.orig pattern from .gitignore
    - PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
    - ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
    - soc: versatile: integrator: fix OF node leak in probe() error path
    - Revert "media: tuners: fix error return code of
      hybrid_tuner_request_state()"
    - Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
    - Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
    - Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
    - drm/amd/display: Round calculated vtotal
    - drm/amd/display: Validate backlight caps are sane
    - scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
    - scsi: mac_scsi: Refactor polling loop
    - scsi: mac_scsi: Disallow bus errors during PDMA send
    - usbnet: fix cyclical race on disconnect with work queue
    - USB: appledisplay: close race between probe and completion handler
    - USB: misc: cypress_cy7c63: check for short transfer
    - USB: class: CDC-ACM: fix race between get_serial and set_serial
    - usb: cdnsp: Fix incorrect usb_request status
    - usb: dwc2: drd: fix clock gating on USB role switch
    - bus: integrator-lm: fix OF node leak in probe()
    - firmware_loader: Block path traversal
    - tty: rp2: Fix reset with non forgiving PCIe host bridges
    - xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
    - crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
    - drbd: Fix atomicity violation in drbd_uuid_set_bm()
    - drbd: Add NULL check for net_conf to prevent dereference in state validation
    - ACPI: sysfs: validate return type of _STR method
    - ACPI: resource: Add another DMI match for the TongFang GMxXGxx
    - efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
    - perf/x86/intel/pt: Fix sampling synchronization
    - wifi: rtw88: 8822c: Fix reported RX band width
    - wifi: mt76: mt7615: check devm_kasprintf() returned value
    - debugobjects: Fix conditions in fill_pool()
    - f2fs: prevent possible int overflow in dir_block_index()
    - f2fs: avoid potential int overflow in sanity_check_area_boundary()
    - hwrng: mtk - Use devm_pm_runtime_enable
    - hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
    - hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
    - arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
    - arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
    - vfs: fix race between evice_inodes() and find_inode()&iput()
    - fs: Fix file_set_fowner LSM hook inconsistencies
    - nfs: fix memory leak in error path of nfs4_do_reclaim
    - EDAC/igen6: Fix conversion of system address to physical memory address
    - padata: use integer wrap around to prevent deadlock on seq_nr overflow
    - soc: versatile: realview: fix memory leak during device remove
    - soc: versatile: realview: fix soc_dev leak during device remove
    - usb: yurex: Replace snprintf() with the safer scnprintf() variant
    - USB: misc: yurex: fix race between read and write
    - xhci: fix event ring segment table related masks and variables in header
    - xhci: remove xhci_test_trb_in_td_math early development check
    - xhci: Refactor interrupter code for initial multi interrupter support.
    - xhci: Preserve RsvdP bits in ERSTBA register correctly
    - xhci: Add a quirk for writing ERST in high-low order
    - usb: xhci: fix loss of data on Cadence xHC
    - pps: remove usage of the deprecated ida_simple_xx() API
    - pps: add an error check in parport_attach
    - x86/idtentry: Incorporate definitions/declarations of the FRED entries
    - x86/entry: Remove unwanted instrumentation in common_interrupt()
    - bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
    - lockdep: fix deadlock issue between lockdep and rcu
    - mm: only enforce minimum stack gap size if it's sensible
    - i2c: aspeed: Update the stop sw state when the bus recovery occurs
    - i2c: isch: Add missed 'else'
    - usb: yurex: Fix inconsistent locking bug in yurex_read()
    - spi: lpspi: Simplify some error message
    - static_call: Handle module init failure correctly in
      static_call_del_module()
    - static_call: Replace pointless WARN_ON() in static_call_module_notify()
    - mailbox: rockchip: fix a typo in module autoloading
    - mailbox: bcm2835: Fix timeout during suspend mode
    - ceph: remove the incorrect Fw reference check when dirtying pages
    - ieee802154: Fix build error
    - net/mlx5: Fix error path in multi-packet WQE transmit
    - net/mlx5: Added cond_resched() to crdump collection
    - net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
    - netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
    - net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
    - netfilter: nf_tables: prevent nf_skb_duplicated corruption
    - Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
    - net: ethernet: lantiq_etop: fix memory disclosure
    - net: avoid potential underflow in qdisc_pkt_len_init() with UFO
    - net: add more sanity checks to qdisc_pkt_len_init()
    - stmmac_pci: Fix underflow size in stmmac_rx
    - net: stmmac: Disable automatic FCS/Pad stripping
    - net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
    - ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
    - ppp: do not assume bh is held in ppp_channel_bridge_input()
    - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
    - i2c: xiic: Fix broken locking on tx_msg
    - i2c: xiic: Switch from waitqueue to completion
    - i2c: xiic: Fix RX IRQ busy check
    - i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path
    - i2c: xiic: improve error message when transfer fails to start
    - i2c: xiic: Try re-initialization on bus busy timeout
    - media: usbtv: Remove useless locks in usbtv_video_free()
    - ALSA: mixer_oss: Remove some incorrect kfree_const() usages
    - ALSA: hda/realtek: Fix the push button function for the ALC257
    - ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
    - ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
    - ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
    - f2fs: Require FMODE_WRITE for atomic write ioctls
    - wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
    - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
    - ice: Adjust over allocation of memory in ice_sched_add_root_node() and
      ice_sched_add_node()
    - net/xen-netback: prevent UAF in xenvif_flush_hash()
    - net: hisilicon: hip04: fix OF node leak in probe()
    - net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
    - net: hisilicon: hns_mdio: fix OF node leak in probe()
    - ACPI: PAD: fix crash in exit_round_robin()
    - ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
    - ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
    - net: sched: consistently use rcu_replace_pointer() in taprio_change()
    - blk_iocost: fix more out of bound shifts
    - nvme-pci: qdepth 1 quirk
    - wifi: ath11k: fix array out-of-bound access in SoC stats
    - wifi: rtw88: select WANT_DEV_COREDUMP
    - ACPI: EC: Do not release locks during operation region accesses
    - ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in
      acpi_db_convert_to_package()
    - tipc: guard against string buffer overrun
    - net: mvpp2: Increase size of queue_name buffer
    - ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
    - ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
    - net: atlantic: Avoid warning about potential string truncation
    - tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
    - ACPICA: iasl: handle empty connection_node
    - proc: add config & param to block forcing mem writes
    - [Config] updateconfigs to select PROC_MEM_ALWAYS_FORCE
    - wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker
    - wifi: mwifiex: Fix memcpy() field-spanning write warning in
      mwifiex_cmd_802_11_scan_ext()
    - nfp: Use IRQF_NO_AUTOEN flag in request_irq()
    - signal: Replace BUG_ON()s
    - ALSA: usb-audio: Add input value sanity checks for standard types
    - x86/ioapic: Handle allocation failures gracefully
    - ALSA: usb-audio: Define macros for quirk table entries
    - ALSA: usb-audio: Add logitech Audio profile quirk
    - tools/x86/kcpuid: Protect against faulty "max subleaf" values
    - ALSA: asihpi: Fix potential OOB array access
    - ALSA: hdsp: Break infinite MIDI input flush loop
    - x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
    - fbdev: pxafb: Fix possible use after free in pxafb_task()
    - rcuscale: Provide clear error when async specified without primitives
    - iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
    - power: reset: brcmstb: Do not go into infinite loop if reset fails
    - iommu/vt-d: Always reserve a domain ID for identity setup
    - iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
    - drm/amd/display: Add null check for top_pipe_to_program in
      commit_planes_for_stream
    - ata: sata_sil: Rename sil_blacklist to sil_quirks
    - drm/amd/display: Check null pointers before using dc->clk_mgr
    - jfs: UBSAN: shift-out-of-bounds in dbFindBits
    - jfs: Fix uaf in dbFreeBits
    - jfs: check if leafidx greater than num leaves per dmap tree
    - scsi: smartpqi: correct stream detection
    - jfs: Fix uninit-value access of new_ea in ea_buffer
    - drm/amdgpu: add raven1 gfxoff quirk
    - drm/amdgpu: enable gfxoff quirk on HP 705G4
    - HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
    - platform/x86: touchscreen_dmi: add nanote-next quirk
    - drm/amd/display: Check stream before comparing them
    - drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format
      translation
    - drm/amd/display: Fix index out of bounds in degamma hardware format
      translation
    - drm/amd/display: Fix index out of bounds in DCN30 color transformation
    - drm/amd/display: Initialize get_bytes_per_element's default to 1
    - drm/printer: Allow NULL data in devcoredump printer
    - scsi: aacraid: Rearrange order of struct aac_srb_unit
    - drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
    - drm/amd/pm: ensure the fw_info is not null before using it
    - of/irq: Refer to actual buffer size in of_irq_parse_one()
    - ext4: ext4_search_dir should return a proper error
    - ext4: avoid use-after-free in ext4_ext_show_leaf()
    - ext4: fix i_data_sem unlock order in ext4_ind_migrate()
    - blk-integrity: use sysfs_emit
    - blk-integrity: convert to struct device_attribute
    - blk-integrity: register sysfs attributes on struct device
    - usb: typec: tcpm: Check for port partner validity before consuming it
    - spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
    - spi: s3c64xx: fix timeout counters in flush_fifo
    - selftests: breakpoints: use remaining time to check if suspend succeed
    - selftests: vDSO: fix vDSO name for powerpc
    - selftests: vDSO: fix vdso_config for powerpc
    - selftests: vDSO: fix vDSO symbols lookup for powerpc64
    - selftests/mm: fix charge_reserved_hugetlb.sh test
    - selftests: vDSO: fix ELF hash table entry size for s390x
    - selftests: vDSO: fix vdso_config for s390
    - platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
    - i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
    - i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
    - i2c: xiic: Wait for TX empty to avoid missed TX NAKs
    - firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
    - spi: bcm63xx: Fix module autoloading
    - power: supply: hwmon: Fix missing temp1_max_alarm attribute
    - perf/core: Fix small negative period being ignored
    - parisc: Fix itlb miss handler for 64-bit programs
    - drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
    - ALSA: core: add isascii() check to card ID generator
    - ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
    - ALSA: usb-audio: Add native DSD support for Luxman D-08u
    - ALSA: line6: add hw monitor volume control to POD HD500X
    - ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
    - ext4: no need to continue when the number of entries is 1
    - ext4: correct encrypted dentry name hash when not casefolded
    - ext4: fix slab-use-after-free in ext4_split_extent_at()
    - ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
    - ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
    - ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
    - ext4: aovid use-after-free in ext4_ext_insert_extent()
    - ext4: fix double brelse() the buffer of the extents path
    - ext4: update orig_path in ext4_find_extent()
    - ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
    - ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
    - ext4: fix fast commit inode enqueueing during a full journal commit
    - ext4: use handle to mark fc as ineligible in __track_dentry_update()
    - ext4: mark fc as ineligible using an handle in ext4_xattr_set()
    - riscv: define ILLEGAL_POINTER_VALUE for 64bit
    - exfat: fix memory leak in exfat_load_bitmap()
    - perf hist: Update hist symbol when updating maps
    - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
    - nfsd: map the EBADMSG to nfserr_io to avoid warning
    - NFSD: Fix NFSv4's PUTPUBFH operation
    - aoe: fix the potential use-after-free problem in more places
    - clk: rockchip: fix error for unknown clocks
    - clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
    - media: sun4i_csi: Implement link validate for sun4i_csi subdev
    - media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
    - clk: qcom: clk-rpmh: Fix overflow in BCM vote
    - clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
    - media: venus: fix use after free bug in venus_remove due to race condition
    - clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
    - clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
    - iio: magnetometer: ak8975: Fix reading for ak099xx sensors
    - tomoyo: fallback to realpath if symlink's pathname does not exist
    - net: stmmac: Fix zero-division error when disabling tc cbs
    - rtc: at91sam9: fix OF node leak in probe() error path
    - Input: adp5589-keys - fix NULL pointer dereference
    - Input: adp5589-keys - fix adp5589_gpio_get_value()
    - ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
    - ACPI: resource: Add Asus ExpertBook B2502CVA to
      irq1_level_low_skip_override[]
    - btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
    - btrfs: wait for fixup workers before stopping cleaner kthread during umount
    - gpio: davinci: fix lazy disable
    - tracing/hwlat: Fix a race during cpuhp processing
    - tracing/timerlat: Fix a race during cpuhp processing
    - close_range(): fix the logics in descriptor table trimming
    - drm/sched: Add locking to drm_sched_entity_modify_sched
    - drm/amd/display: Fix system hang while resume with TBT monitor
    - kconfig: qconf: fix buffer overflow in debug links
    - device property: Add fwnode_iomap()
    - device property: Add fwnode_irq_get_byname
    - i2c: smbus: Use device_*() functions instead of of_*()
    - i2c: create debugfs entry per adapter
    - i2c: core: Lock address during client device instantiation
    - i2c: xiic: Use devm_clk_get_enabled()
    - i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
    - spi: bcm63xx: Fix missing pm_runtime_disable()
    - ext4: properly sync file size update after O_SYNC direct IO
    - ext4: dax: fix overflowing extents beyond inode size when partially writing
    - arm64: Add Cortex-715 CPU part definition
    - arm64: cputype: Add Neoverse-N3 definitions
    - arm64: errata: Expand speculative SSBS workaround once more
    - uprobes: fix kernel info leak via "[uprobes]" vma
    - drm/amd/display: Allow backlight to go below
      `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
    - build-id: require program headers to be right after ELF header
    - lib/buildid: harden build ID parsing logic
    - drm/rockchip: define gamma registers for RK3399
    - drm/rockchip: support gamma control on RK3399
    - drm/rockchip: vop: clear DMA stop bit on RK3066
    - media: i2c: imx335: Enable regulator supplies
    - media: imx335: Fix reset-gpio handling
    - dt-bindings: clock: qcom: Add missing UFS QREF clocks
    - dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
    - r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"
    - r8169: add tally counter fields added with RTL8125
    - clk: qcom: gcc-sc8180x: Add GPLL9 support
    - ACPI: battery: Simplify battery hook locking
    - ACPI: battery: Fix possible crash when unregistering a battery hook
    - Revert "arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of
      bindings"
    - ext4: fix inode tree inconsistency caused by ENOMEM
    - 9p: add missing locking around taking dentry fid list
    - vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
    - perf report: Fix segfault when 'sym' sort key is not used
    - ALSA: usb-audio: Fix possible NULL pointer dereference in
      snd_usb_pcm_has_fixed_rate()
    - unicode: Don't special case ignorable code points
    - net: ethernet: cortina: Drop TSO support
    - tracing: Remove precision vsnprintf() check from print event
    - drm/crtc: fix uninitialized variable use even harder
    - tracing: Have saved_cmdlines arrays all in one allocation
    - selftests/net: give more time to udpgro bg processes to complete startup
    - selftests/net: synchronize udpgro tests' tx and rx connection
    - selftests: net: Remove executable bits from library scripts
    - fs/ntfs3: Refactor enum_rstbl to suppress static checker
    - virtio_console: fix misc probe bugs
    - Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
    - bpf: Check percpu map value size first
    - s390/facility: Disable compile time optimization for decompressor code
    - s390/mm: Add cond_resched() to cmm_alloc/free_pages()
    - bpf, x64: Fix a jit convergence issue
    - ext4: don't set SB_RDONLY after filesystem errors
    - ext4: nested locking for xattr inode
    - s390/cpum_sf: Remove WARN_ON_ONCE statements
    - ktest.pl: Avoid false positives with grub2 skip regex
    - RDMA/mad: Improve handling of timed out WRs of mad agent
    - PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
    - RDMA/rtrs-srv: Avoid null pointer deref during path establishment
    - clk: bcm: bcm53573: fix OF node leak in init
    - PCI: Add ACS quirk for Qualcomm SA8775P
    - i2c: i801: Use a different adapter-name for IDF adapters
    - PCI: Mark Creative Labs EMU20k2 INTx masking as broken
    - ntb: ntb_hw_switchtec: Fix use after free vulnerability in
      switchtec_ntb_remove due to race condition
    - media: videobuf2-core: clear memory related fields in
      __vb2_plane_dmabuf_put()
    - remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
    - clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
    - usb: chipidea: udc: enable suspend interrupt after usb reset
    - usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the
      Crashkernel Scenario
    - comedi: ni_routing: tools: Check when the file could not be opened
    - virtio_pmem: Check device status before requesting flush
    - tools/iio: Add memory allocation failure check for trigger_name
    - driver core: bus: Return -EIO instead of 0 when show/store invalid bus
      attribute
    - drm/amd/display: Check null pointer before dereferencing se
    - fbdev: sisfb: Fix strbuf array overflow
    - RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
    - NFSD: Mark filecache "down" if init fails
    - ice: fix VLAN replay after reset
    - SUNRPC: Fix integer overflow in decode_rc_list()
    - NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
    - net: phy: dp83869: fix memory corruption when enabling fiber
    - tcp: fix to allow timestamp undo if no retransmits were sent
    - tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
    - netfilter: br_netfilter: fix panic with metadata_dst skb
    - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
    - net: phy: bcm84881: Fix some error handling paths
    - thermal: int340x: processor_thermal: Set feature mask before
      proc_thermal_add
    - thermal: intel: int340x: processor: Fix warning during module unload
    - net: dsa: b53: fix jumbo frame mtu check
    - net: dsa: b53: fix max MTU for 1g switches
    - net: dsa: b53: fix max MTU for BCM5325/BCM5365
    - net: dsa: b53: allow lower MTUs on BCM5325/5365
    - net: dsa: b53: fix jumbo frames on 10/100 ports
    - gpio: aspeed: Add the flush write to ensure the write complete.
    - gpio: aspeed: Use devm_clk api to manage clock source
    - ice: Fix netif_is_ice() in Safe Mode
    - i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
    - igb: Do not bring the device up after non-fatal error
    - net/sched: accept TCA_STAB only for root qdisc
    - net: ibm: emac: mal: fix wrong goto
    - sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
    - netfilter: xtables: avoid NFPROTO_UNSPEC where needed
    - net: Add l3mdev index to flow struct and avoid oif reset for port devices
    - netfilter: rpfilter/fib: Populate flowic_l3mdev field
    - netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces.
    - netfilter: fib: check correct rtable in vrf setups
    - net: rtnetlink: add msg kind names
    - rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
    - mctp: Handle error of rtnl_register_module().
    - ppp: fix ppp_async_encode() illegal access
    - slip: make slhc_remember() more robust against malicious packets
    - RDMA/hns: Fix UAF for cq async event
    - x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
    - hwmon: (tmp513) Add missing dependency on REGMAP_I2C
    - hwmon: (adm9240) Add missing dependency on REGMAP_I2C
    - hwmon: (adt7470) Add missing dependency on REGMAP_I2C
    - HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
    - resource: fix region_intersects() vs add_memory_driver_managed()
    - HID: plantronics: Workaround for an unexcepted opposite volume key
    - Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
    - usb: dwc3: core: Stop processing of pending events if controller is halted
    - usb: xhci: Fix problem with xhci resume from suspend
    - usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
    - hid: intel-ish-hid: Fix uninitialized variable 'rv' in
      ish_fw_xfer_direct_dma
    - drm/v3d: Stop the active perfmon before being destroyed
    - net: explicitly clear the sk pointer, when pf->create fails
    - net: Fix an unsafe loop on the list
    - net: dsa: lan9303: ensure chip reset and wait for READY status
    - mptcp: pm: do not remove closing subflows
    - nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
    - kthread: unpark only parked kthread
    - block, bfq: fix uaf for accessing waker_bfqq after splitting
    - i2c: smbus: Check for parent device before dereference
    - net: geneve: add missing netlink policy and size for
      IFLA_GENEVE_INNER_PROTO_INHERIT
    - xfrm: Pass flowi_oif or l3mdev as oif to xfrm_dst_lookup
    - net: Handle l3mdev in ip_tunnel_init_flow
    - net: seg6: fix seg6_lookup_any_nexthop() to handle VRFs using flowi_l3mdev
    - net: vrf: determine the dst using the original ifindex for multicast
    - netfilter: ip6t_rpfilter: Fix regression with VRF interfaces
    - ext4: fix warning in ext4_dio_write_end_io()
    - net: axienet: start napi before enabling Rx/Tx
    - selftests: net: more strict check in net_helper
    - net: xilinx: axienet: Schedule NAPI in two steps
    - Linux 5.15.168
  * CVE-2024-36968
    - Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
  * CVE-2024-35904
    - selinux: avoid dereference of garbage after mount failure
  * IOMMU warnings on AMD systems after booting into kdump kernel
    (LP: #2080378)
    - iommu/amd: Simplify and Consolidate Virtual APIC (AVIC) Enablement
    - iommu/amd: Fix compile warning in init code
  * CVE-2024-42156
    - s390/pkey: Wipe copies of clear-key structures on failure
  * CVE-2024-44942
    - f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
  * CVE-2024-38538
    - net: bridge: xmit: make sure we have at least eth header len bytes
  * CVE-2024-42158
    - s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
  * CVE-2024-38667
    - riscv: prevent pt_regs corruption for secondary idle threads
  * CVE-2024-44940
    - fou: remove warn in gue_gro_receive on unsupported protocol
  * CVE-2024-42079
    - gfs2: Fix NULL pointer dereference in gfs2_log_flush
  * CVE-2024-35951
    - drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
  * LXD fan bridge causes blocked tasks (LP: #2064176)
    - SAUCE: fan: release rcu_read_lock on skb discard path
  * CVE-2023-52532
    - net: mana: Fix TX CQE error handling
  * CVE-2023-52621
    - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
  * CVE-2024-26947
    - ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
  * CVE-2023-52639
    - KVM: s390: vsie: fix race during shadow creation

  [ Ubuntu: 5.15.0-126.136 ]

  * jammy/linux: 5.15.0-126.136 -proposed tracker (LP: #2086027)
    - [Packaging] resync git-ubuntu-log
  * Cannot detect audio sinks and sources in proposed kernel (LP: #2085082)
    - soundwire: stream: Revert "soundwire: stream: fix programming slave ports
      for non-continous port maps"

  [ Ubuntu: 5.15.0-125.135 ]

  * jammy/linux: 5.15.0-125.135 -proposed tracker (LP: #2083001)
  * CVE-2024-26800
    - tls: rx: coalesce exit paths in tls_decrypt_sg()
    - tls: separate no-async decryption request handling from async
    - tls: fix use-after-free on failed backlog decryption
  * Please backport the more restrictive XSAVES deactivation for  Zen1/2 arch
    (LP: #2077321)
    - x86/CPU/AMD: Improve the erratum 1386 workaround
  * Jammy update: v5.15.167 upstream stable release (LP: #2081279)
    - drm: panel-orientation-quirks: Add quirk for OrangePi Neo
    - ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown
    - ALSA: hda/conexant: Mute speakers at suspend / shutdown
    - i2c: Fix conditional for substituting empty ACPI functions
    - dma-debug: avoid deadlock between dma debug vs printk and netconsole
    - net: usb: qmi_wwan: add MeiG Smart SRM825L
    - drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
    - drm/amd/display: Assign linear_pitch_alignment even for VM
    - drm/amdgpu: fix overflowed array index read warning
    - drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc
    - drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr
    - drm/amd/pm: fix warning using uninitialized value of max_vid_step
    - drm/amd/pm: fix the Out-of-bounds read warning
    - drm/amdgpu: fix uninitialized scalar variable warning
    - drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr
    - drm/amdgpu: avoid reading vf2pf info size from FB
    - drm/amd/display: Check gpio_id before used as array index
    - drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
    - drm/amd/display: Add array index check for hdcp ddc access
    - drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
    - drm/amd/display: Check msg_id before processing transcation
    - drm/amd/display: Fix Coverity INTEGER_OVERFLOW within
      dal_gpio_service_create
    - drm/amd/amdgpu: Check tbo resource pointer
    - drm/amdgpu/pm: Fix uninitialized variable warning for smu10
    - drm/amdgpu/pm: Fix uninitialized variable agc_btc_response
    - drm/amdgpu: Fix out-of-bounds write warning
    - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
    - drm/amdgpu: fix ucode out-of-bounds read warning
    - drm/amdgpu: fix mc_data out-of-bounds read warning
    - drm/amdkfd: Reconcile the definition and use of oem_id in struct
      kfd_topology_device
    - apparmor: fix possible NULL pointer dereference
    - drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy
      SOCs
    - drm/amdgpu: fix the waring dereferencing hive
    - drm/amd/pm: check specific index for aldebaran
    - drm/amdgpu: the warning dereferencing obj for nbio_v7_4
    - drm/amd/pm: check negtive return for table entries
    - drm/amdgpu: update type of buf size to u32 for eeprom functions
    - wifi: iwlwifi: remove fw_running op
    - cpufreq: scmi: Avoid overflow of target_freq in fast switch
    - PCI: al: Check IORESOURCE_BUS existence during probe
    - hwspinlock: Introduce hwspin_lock_bust()
    - RDMA/efa: Properly handle unexpected AQ completions
    - ionic: fix potential irq name truncation
    - rcu/nocb: Remove buggy bypass lock contention mitigation
    - usbip: Don't submit special requests twice
    - usb: typec: ucsi: Fix null pointer dereference in trace
    - fsnotify: clear PARENT_WATCHED flags lazily
    - smack: tcp: ipv4, fix incorrect labeling
    - drm/meson: plane: Add error handling
    - drm/bridge: tc358767: Check if fully initialized before signalling HPD event
      via IRQ
    - wifi: cfg80211: make hash table duplicates more survivable
    - block: remove the blk_flush_integrity call in blk_integrity_unregister
    - drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
    - media: uvcvideo: Enforce alignment of frame and interval
    - drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
    - virtio_net: Fix napi_skb_cache_put warning
    - rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
    - ext4: reject casefold inode flag without casefold feature
    - udf: Limit file size to 4TB
    - ext4: handle redirtying in ext4_bio_write_page()
    - i2c: Use IS_REACHABLE() for substituting empty ACPI functions
    - sch/netem: fix use after free in netem_dequeue
    - ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
    - KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE
    - KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing
    - ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius
      devices
    - ALSA: hda/realtek: add patch for internal mic in Lenovo V145
    - ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx
    - ata: libata: Fix memory leak for error path in ata_host_alloc()
    - irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
    - rtmutex: Drop rt_mutex::wait_lock before scheduling
    - nvme-pci: Add sleep quirk for Samsung 990 Evo
    - Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"
    - Bluetooth: MGMT: Ignore keys being loaded with invalid type
    - mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
    - mmc: sdhci-of-aspeed: fix module autoloading
    - mmc: cqhci: Fix checking of CQHCI_HALT state
    - fuse: update stats for pages in dropped aux writeback list
    - fuse: use unsigned type for getxattr/listxattr size truncation
    - clk: qcom: clk-alpha-pll: Fix the pll post div mask
    - clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
    - can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
    - tracing: Avoid possible softlockup in tracing_iter_reset()
    - ila: call nf_unregister_net_hooks() sooner
    - sched: sch_cake: fix bulk flow accounting logic for host fairness
    - nilfs2: fix missing cleanup on rollforward recovery error
    - nilfs2: fix state management in error path of log writing function
    - mptcp: pm: re-using ID of unused flushed subflows
    - mptcp: pm: only decrement add_addr_accepted for MPJ req
    - mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR
    - mptcp: pm: fullmesh: select the right ID later
    - mptcp: constify a bunch of of helpers
    - mptcp: pm: avoid possible UaF when selecting endp
    - mptcp: avoid duplicated SUB_CLOSED events
    - mptcp: close subflow when receiving TCP+FIN
    - mptcp: pm: ADD_ADDR 0 is not a new address
    - mptcp: pm: do not remove already closed subflows
    - mptcp: pm: skip connecting to already established sf
    - mptcp: pr_debug: add missing n at the end
    - mptcp: pm: send ACK on an active subflow
    - ALSA: hda: Add input value sanity checks to HDMI channel map controls
    - smack: unix sockets: fix accept()ed socket label
    - irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
    - af_unix: Remove put_pid()/put_cred() in copy_peercred().
    - iommu: sun50i: clear bypass register
    - netfilter: nf_conncount: fix wrong variable type
    - udf: Avoid excessive partition lengths
    - media: vivid: fix wrong sizeimage value for mplane
    - leds: spi-byte: Call of_node_put() on error path
    - wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
    - usb: uas: set host status byte on data completion error
    - drm/amd/display: Check HDCP returned status
    - media: vivid: don't set HDMI TX controls if there are no HDMI outputs
    - PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
    - media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
    - pcmcia: Use resource_size function on resource object
    - drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6
    - can: bcm: Remove proc entry when dev is unregistered.
    - can: m_can: Release irq on error in m_can_open
    - igb: Fix not clearing TimeSync interrupts for 82580
    - platform/x86: dell-smbios: Fix error path in dell_smbios_init()
    - tcp_bpf: fix return value of tcp_bpf_sendmsg()
    - igc: Unlock on error in igc_io_resume()
    - ice: check ICE_VSI_DOWN under rtnl_lock when preparing for reset
    - net: usb: don't write directly to netdev->dev_addr
    - usbnet: modern method to get random MAC
    - bareudp: Fix device stats updates.
    - gro: remove rcu_read_lock/rcu_read_unlock from gro_receive handlers
    - gro: remove rcu_read_lock/rcu_read_unlock from gro_complete handlers
    - fou: Fix null-ptr-deref in GRO.
    - net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
    - net: dsa: vsc73xx: fix possible subblocks range of CAPT block
    - ASoC: topology: Properly initialize soc_enum values
    - dm init: Handle minors larger than 255
    - iommu/vt-d: Handle volatile descriptor status read
    - cgroup: Protect css->cgroup write under css_set_lock
    - um: line: always fill *error_out in setup_one_line()
    - devres: Initialize an uninitialized struct member
    - pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
    - hwmon: (adc128d818) Fix underflows seen when writing limit attributes
    - hwmon: (lm95234) Fix underflows seen when writing limit attributes
    - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
    - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
    - libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
    - drm/amdgpu: Set no_hw_access when VF request full GPU fails
    - ext4: fix possible tid_t sequence overflows
    - dma-mapping: benchmark: Don't starve others when doing the test
    - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
    - smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
    - fs/ntfs3: Check more cases when directory is corrupted
    - btrfs: replace BUG_ON with ASSERT in walk_down_proc()
    - btrfs: clean up our handling of refs == 0 in snapshot delete
    - btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
    - riscv: set trap vector earlier
    - PCI: Add missing bridge lock to pci_bus_lock()
    - net: dpaa: avoid on-stack arrays of NR_CPUS elements
    - i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
    - kselftests: dmabuf-heaps: Ensure the driver name is null-terminated
    - btrfs: initialize location to fix -Wmaybe-uninitialized in
      btrfs_lookup_dentry()
    - s390/vmlinux.lds.S: Move ro_after_init section behind rodata section
    - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
    - HID: amd_sfh: free driver_data after destroying hid device
    - Input: uinput - reject requests with unreasonable number of slots
    - usbnet: ipheth: race between ipheth_close and error handling
    - Squashfs: sanity check symbolic link size
    - of/irq: Prevent device address out-of-bounds read in interrupt map walk
    - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
    - MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed
    - ata: pata_macio: Use WARN instead of BUG
    - NFSv4: Add missing rescheduling points in
      nfs_client_return_marked_delegations
    - cifs: Check the lease context if we actually got a lease
    - staging: iio: frequency: ad9834: Validate frequency parameter value
    - iio: buffer-dmaengine: fix releasing dma channel on error
    - iio: fix scale application in iio_convert_raw_to_processed_unlocked
    - iio: adc: ad7124: fix config comparison
    - iio: adc: ad7124: fix chip ID mismatch
    - usb: dwc3: core: update LC timer as per USB Spec V3.2
    - binder: fix UAF caused by offsets overwrite
    - nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
    - uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
    - Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
    - VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
    - clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
    - clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
    - clocksource/drivers/timer-of: Remove percpu irq related code
    - uprobes: Use kzalloc to allocate xol area
    - perf/aux: Fix AUX buffer serialization
    - ksmbd: unset the binding mark of a reused connection
    - ksmbd: Unlock on in ksmbd_tcp_set_interfaces()
    - nilfs2: replace snprintf in show functions with sysfs_emit
    - nilfs2: protect references to superblock parameters exposed in sysfs
    - workqueue: wq_watchdog_touch is always called with valid CPU
    - workqueue: Improve scalability of workqueue watchdog touch
    - ACPI: processor: Return an error if acpi_processor_get_info() fails in
      processor_add()
    - ACPI: processor: Fix memory leaks in error paths of processor_add()
    - arm64: acpi: Move get_cpu_for_acpi_id() to a header
    - arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
    - nvmet-tcp: fix kernel crash if commands allocation fails
    - ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode
    - drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
    - drm/i915/fence: Mark debug_fence_free() with __maybe_unused
    - gpio: rockchip: fix OF node leak in probe()
    - net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation
    - net: change maximum number of UDP segments to 128
    - gso: fix dodgy bit handling for GSO_UDP_L4
    - net: drop bad gso csum_start and offset in virtio_net_hdr
    - x86/mm: Fix PTI for i386 some more
    - net, sunrpc: Remap EPERM in case of connection failure in
      xs_tcp_setup_socket
    - btrfs: fix race between direct IO write and fsync when using same fd
    - memcg: protect concurrent access to mem_cgroup_idr
    - udp: fix receiving fraglist GSO packets
    - Linux 5.15.167
  * CVE-2024-41071
    - wifi: mac80211: Avoid address calculations via out of bounds array indexing
  * CVE-2024-40915
    - riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
  * CVE-2024-38611
    - media: i2c: et8ek8: Don't strip remove function when driver is builtin
  * CVE-2024-38602
    - ax25: Fix reference count leak issues of ax25_dev
  * CVE-2024-26669
    - net/sched: flower: Fix chain template offload
  * CVE-2024-26607
    - drm/bridge: sii902x: Fix probing race issue
  * Jammy update: v5.15.166 upstream stable release (LP: #2080594)
    - fuse: Initialize beyond-EOF page contents before setting uptodate
    - char: xillybus: Don't destroy workqueue from work item running on it
    - char: xillybus: Refine workqueue handling
    - char: xillybus: Check USB endpoints when probing device
    - ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET
    - ALSA: usb-audio: Support Yamaha P-125 quirk entry
    - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
    - thunderbolt: Mark XDomain as unplugged when router is removed
    - s390/dasd: fix error recovery leading to data corruption on ESE devices
    - arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to
      NUMA_NO_NODE
    - dm resume: don't return EINVAL when signalled
    - dm persistent data: fix memory allocation failure
    - vfs: Don't evict inode under the inode lru traversing context
    - fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
    - s390/cio: rename bitmap_size() -> idset_bitmap_size()
    - btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits()
    - bitmap: introduce generic optimized bitmap_size()
    - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
    - selinux: fix potential counting error in avc_add_xperms_decision()
    - btrfs: tree-checker: add dev extent item checks
    - drm/amdgpu: Actually check flags for all context ops.
    - memcg_write_event_control(): fix a user-triggerable oops
    - drm/amdgpu/jpeg2: properly set atomics vmid field
    - s390/uv: Panic for set and remove shared access UVC errors
    - igc: Correct the launchtime offset
    - igc: remove I226 Qbv BaseTime restriction
    - igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer
    - net/mlx5e: Correctly report errors for ethtool rx flows
    - atm: idt77252: prevent use after free in dequeue_rx()
    - net: axienet: Fix register defines comment description
    - net: dsa: vsc73xx: pass value in phy_write operation
    - net: dsa: vsc73xx: use read_poll_timeout instead delay loop
    - net: dsa: vsc73xx: check busy flag in MDIO operations
    - mlxbf_gige: Remove two unused function declarations
    - mlxbf_gige: disable RX filters until RX path initialized
    - mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size
    - netfilter: allow ipv6 fragments to arrive on different devices
    - netfilter: flowtable: initialise extack before use
    - netfilter: nf_queue: drop packets with cloned unconfirmed conntracks
    - net: hns3: fix wrong use of semaphore up
    - net: hns3: fix a deadlock problem when config TC during resetting
    - ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
    - ssb: Fix division by zero issue in ssb_calc_clock_rate
    - wifi: cfg80211: check wiphy mutex is held for wdev mutex
    - wifi: mac80211: fix BA session teardown race
    - wifi: cw1200: Avoid processing an invalid TIM IE
    - i2c: riic: avoid potential division by zero
    - RDMA/rtrs: Fix the problem of variable not initialized fully
    - s390/smp,mcck: fix early IPI handling
    - i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out
    - i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer
    - media: radio-isa: use dev_name to fill in bus_info
    - staging: iio: resolver: ad2s1210: fix use before initialization
    - drm/amd/display: Validate hw_points_num before using it
    - staging: ks7010: disable bh on tx_dev_lock
    - binfmt_misc: cleanup on filesystem umount
    - media: qcom: venus: fix incorrect return value
    - scsi: spi: Fix sshdr use
    - gfs2: setattr_chown: Add missing initialization
    - wifi: iwlwifi: abort scan when rfkill on but device enabled
    - wifi: iwlwifi: fw: Fix debugfs command sending
    - IB/hfi1: Fix potential deadlock on &irq_src_lock and &dd->uctxt_lock
    - hwmon: (ltc2992) Avoid division by zero
    - arm64: Fix KASAN random tag seed initialization
    - memory: tegra: Skip SID programming if SID registers aren't set
    - powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu
    - nvmet-trace: avoid dereferencing pointer too early
    - ext4: do not trim the group with corrupted block bitmap
    - afs: fix __afs_break_callback() / afs_drop_open_mmap() race
    - fuse: fix UAF in rcu pathwalks
    - quota: Remove BUG_ON from dqget()
    - media: pci: cx23885: check cx23885_vdev_init() return
    - fs: binfmt_elf_efpic: don't use missing interpreter's properties
    - scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
    - media: drivers/media/dvb-core: copy user arrays safely
    - net/sun3_82586: Avoid reading past buffer in debug output
    - drm/lima: set gp bus_stop bit before hard reset
    - virtiofs: forbid newlines in tags
    - clocksource/drivers/arm_global_timer: Guard against division by zero
    - netlink: hold nlk->cb_mutex longer in __netlink_dump_start()
    - md: clean up invalid BUG_ON in md_ioctl
    - x86: Increase brk randomness entropy for 64-bit systems
    - memory: stm32-fmc2-ebi: check regmap_read return value
    - parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367
    - powerpc/boot: Handle allocation failure in simple_realloc()
    - powerpc/boot: Only free if realloc() succeeds
    - btrfs: change BUG_ON to assertion when checking for delayed_node root
    - btrfs: handle invalid root reference found in may_destroy_subvol()
    - btrfs: send: handle unexpected data in header buffer in begin_cmd()
    - btrfs: change BUG_ON to assertion in tree_move_down()
    - btrfs: delete pointless BUG_ON check on quota root in
      btrfs_qgroup_account_extent()
    - f2fs: fix to do sanity check in update_sit_entry
    - usb: gadget: fsl: Increase size of name buffer for endpoints
    - Bluetooth: bnep: Fix out-of-bound access
    - net: hns3: add checking for vf id of mailbox
    - nvmet-tcp: do not continue for invalid icreq
    - NFS: avoid infinite loop in pnfs_update_layout.
    - openrisc: Call setup_memory() earlier in the init sequence
    - s390/iucv: fix receive buffer virtual vs physical address confusion
    - clocksource: Make watchdog and suspend-timing multiplication overflow safe
    - platform/x86: lg-laptop: fix %s null argument warning
    - usb: dwc3: core: Skip setting event buffers for host only controllers
    - irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
    - ext4: set the type of max_zeroout to unsigned int to avoid overflow
    - nvmet-rdma: fix possible bad dereference when freeing rsps
    - hrtimer: Prevent queuing of hrtimer without a function callback
    - gtp: pull network headers in gtp_dev_xmit()
    - block: use "unsigned long" for blk_validate_block_size().
    - nfsd: move reply cache initialization into nfsd startup
    - nfsd: move init of percpu reply_cache_stats counters back to nfsd_init_net
    - NFSD: Refactor nfsd_reply_cache_free_locked()
    - NFSD: Rename nfsd_reply_cache_alloc()
    - NFSD: Replace nfsd_prune_bucket()
    - NFSD: Refactor the duplicate reply cache shrinker
    - NFSD: Rewrite synopsis of nfsd_percpu_counters_init()
    - NFSD: Fix frame size warning in svc_export_parse()
    - sunrpc: don't change ->sv_stats if it doesn't exist
    - nfsd: stop setting ->pg_stats for unused stats
    - sunrpc: pass in the sv_stats struct through svc_create_pooled
    - sunrpc: remove ->pg_stats from svc_program
    - sunrpc: use the struct net as the svc proc private
    - nfsd: rename NFSD_NET_* to NFSD_STATS_*
    - nfsd: expose /proc/net/sunrpc/nfsd in net namespaces
    - nfsd: make all of the nfsd stats per-network namespace
    - nfsd: remove nfsd_stats, make th_cnt a global counter
    - nfsd: make svc_stat per-network namespace instead of global
    - media: solo6x10: replace max(a, min(b, c)) by clamp(b, a, c)
    - dm suspend: return -ERESTARTSYS instead of -EINTR
    - net: mana: Fix doorbell out of order violation and avoid unnecessary
      doorbell rings
    - platform/surface: aggregator: Fix warning when controller is destroyed in
      probe
    - Bluetooth: hci_core: Fix LE quote calculation
    - Bluetooth: SMP: Fix assumption of Central always being Initiator
    - tc-testing: don't access non-existent variable on exception
    - kcm: Serialise kcm_sendmsg() for the same socket.
    - netfilter: nft_counter: Disable BH in nft_counter_offload_stats().
    - netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
    - ip6_tunnel: Fix broken GRO
    - bonding: fix bond_ipsec_offload_ok return type
    - bonding: fix null pointer deref in bond_ipsec_offload_ok
    - bonding: fix xfrm real_dev null pointer dereference
    - bonding: fix xfrm state handling when clearing active slave
    - ice: fix ICE_LAST_OFFSET formula
    - dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp()
    - net: dsa: mv88e6xxx: read FID when handling ATU violations
    - net: dsa: mv88e6xxx: replace ATU violation prints with trace points
    - net: dsa: mv88e6xxx: Fix out-of-bound access
    - ipv6: prevent UAF in ip6_send_skb()
    - ipv6: fix possible UAF in ip6_finish_output2()
    - ipv6: prevent possible UAF in ip6_xmit()
    - netfilter: flowtable: validate vlan header
    - net: xilinx: axienet: Always disable promiscuous mode
    - net: xilinx: axienet: Fix dangling multicast addresses
    - drm/msm/dpu: don't play tricks with debug macros
    - drm/msm/dp: reset the link phy params before link training
    - drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
    - mmc: mmc_test: Fix NULL dereference on allocation failure
    - Bluetooth: MGMT: Add error handling to pair_device()
    - scsi: core: Fix the return value of scsi_logical_block_count()
    - MIPS: Loongson64: Set timer mode in cpu-probe
    - HID: wacom: Defer calculation of resolution until resolution_code is known
    - HID: microsoft: Add rumble support to latest xbox controllers
    - cxgb4: add forgotten u64 ivlan cast before shift
    - KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
    - mmc: dw_mmc: allow biu and ciu clocks to defer
    - Revert "drm/amd/display: Validate hw_points_num before using it"
    - hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt()
    - ALSA: timer: Relax start tick time check for slave timer elements
    - mm/numa: no task_numa_fault() call if PMD is changed
    - mm/numa: no task_numa_fault() call if PTE is changed
    - Input: MT - limit max slots
    - tools: move alignment-related macros to new <linux/align.h>
    - btrfs: run delayed iputs when flushing delalloc
    - pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins
    - pinctrl: single: fix potential NULL dereference in pcs_get_function()
    - wifi: mwifiex: duplicate static structs used in driver instances
    - net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response
    - mptcp: sched: check both backup in retrans
    - Revert "MIPS: Loongson64: reset: Prioritise firmware service"
    - drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
    - ata: libata-core: Fix null pointer dereference on error
    - cgroup/cpuset: Prevent UAF in proc_cpuset_show()
    - net:rds: Fix possible deadlock in rds_message_put
    - soundwire: stream: fix programming slave ports for non-continous port maps
    - PM: core: Remove DEFINE_UNIVERSAL_DEV_PM_OPS() macro
    - PM: core: Add EXPORT[_GPL]_SIMPLE_DEV_PM_OPS macros
    - PM: runtime: Add DEFINE_RUNTIME_DEV_PM_OPS() macro
    - phy: xilinx: add runtime PM support
    - phy: xilinx: phy-zynqmp: dynamic clock support for power-save
    - phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume
    - dmaengine: dw: Add peripheral bus width verification
    - dmaengine: dw: Add memory bus width verification
    - ethtool: check device is present when getting link settings
    - gtp: fix a potential NULL pointer dereference
    - net: busy-poll: use ktime_get_ns() instead of local_clock()
    - nfc: pn533: Add poll mod list filling check
    - soc: qcom: cmd-db: Map shared memory as WC, not WB
    - cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
    - USB: serial: option: add MeiG Smart SRM825L
    - usb: dwc3: omap: add missing depopulate in probe error path
    - usb: dwc3: core: Prevent USB core invalid event buffer address access
    - usb: dwc3: st: fix probed platform device ref count on probe error path
    - usb: dwc3: st: add missing depopulate in probe error path
    - usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in
      remove_power_attributes()
    - usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function
    - usb: cdnsp: fix for Link TRB with TC
    - phy: zynqmp: Enable reference clock correctly
    - igc: Fix reset adapter logics when tx mode change
    - igc: Fix qbv tx latency by setting gtxoffset
    - scsi: aacraid: Fix double-free on probe failure
    - apparmor: fix policy_unpack_test on big endian systems
    - Linux 5.15.166
  * CVE-2024-26893
    - firmware: arm_scmi: Fix double free in SMC transport cleanup path
  * [22.10 FEAT] KVM: Secure Execution guest dump encryption with customer keys
    - kernel part (LP: #1959940)
    - s390: uv: Add offset comments to UV query struct and fix naming
    - s390/uv: Add SE hdr query information
    - s390/uv: Add dump fields to query
    - KVM: s390: pv: Add query interface
    - KVM: s390: pv: Add dump support definitions
    - KVM: s390: pv: Add query dump information
    - KVM: s390: Add configuration dump functionality
    - KVM: s390: Add CPU dump functionality
    - KVM: s390: Add KVM_CAP_S390_PROTECTED_DUMP
    - Documentation: KVM: add separate directories for architecture-specific
      documentation
    - Documentation: virt: Protected virtual machine dumps
    - Documentation/virt/kvm/api.rst: Add protvirt dump/info api descriptions
    - Documentation/virt/kvm/api.rst: Explain rc/rrc delivery
  * turbostat fails with too many open files on large systems (LP: #2069961)
    - tools/power turbostat: Increase the limit for fd opened
  * Jammy update: v5.15.165 upstream stable release (LP: #2078428)
    - f2fs: fix return value of f2fs_convert_inline_inode()
    - f2fs: fix to don't dirty inode for readonly filesystem
    - EDAC, i10nm: make skx_common.o a separate module
    - platform/chrome: cros_ec_debugfs: fix wrong EC message version
    - block: refactor to use helper
    - block: cleanup bio_integrity_prep
    - block: initialize integrity buffer to zero before writing it to media
    - hfsplus: fix to avoid false alarm of circular locking
    - x86/of: Return consistent error type from x86_of_pci_irq_enable()
    - x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling
    - x86/pci/xen: Fix PCIBIOS_* return code handling
    - x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos
    - hwmon: (adt7475) Fix default duty on fan is disabled
    - pwm: stm32: Always do lazy disabling
    - drm/meson: fix canvas release in bind function
    - hwmon: (max6697) Fix underflow when writing limit attributes
    - hwmon: (max6697) Fix swapped temp{1,8} critical alarms
    - arm64: dts: qcom: sdm845: add power-domain to UFS PHY
    - arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings
    - arm64: dts: qcom: sm8250: add power-domain to UFS PHY
    - soc: qcom: rpmh-rsc: Ensure irqs aren't disabled by rpmh_rsc_send_data()
      callers
    - arm64: dts: qcom: msm8996: specify UFS core_clk frequencies
    - memory: fsl_ifc: Make FSL_IFC config visible and selectable
    - soc: qcom: pdr: protect locator_addr with the main mutex
    - soc: qcom: pdr: fix parsing of domains lists
    - arm64: dts: rockchip: Increase VOP clk rate on RK3328
    - ARM: dts: imx6qdl-kontron-samx6i: move phy reset into phy-node
    - ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset
    - ARM: dts: imx6qdl-kontron-samx6i: fix board reset
    - ARM: dts: imx6qdl-kontron-samx6i: fix SPI0 chip selects
    - ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity
    - arm64: dts: mediatek: mt8183-kukui: Drop bogus output-enable property
    - arm64: dts: mediatek: mt7622: fix "emmc" pinctrl mux
    - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add ports node for anx7625
    - arm64: dts: amlogic: gx: correct hdmi clocks
    - m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages
    - x86/xen: Convert comma to semicolon
    - m68k: cmpxchg: Fix return value for default case in __arch_xchg()
    - ARM: pxa: spitz: use gpio descriptors for audio
    - ARM: spitz: fix GPIO assignment for backlight
    - vmlinux.lds.h: catch .bss..L* sections into BSS")
    - firmware: turris-mox-rwtm: Do not complete if there are no waiters
    - firmware: turris-mox-rwtm: Fix checking return value of
      wait_for_completion_timeout()
    - firmware: turris-mox-rwtm: Initialize completion before mailbox
    - wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device
    - selftests/bpf: Fix prog numbers in test_sockmap
    - net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP
    - tcp: annotate lockless accesses to sk->sk_err_soft
    - tcp: annotate lockless access to sk->sk_err
    - tcp: add tcp_done_with_error() helper
    - tcp: fix race in tcp_write_err()
    - tcp: fix races in tcp_v[46]_err()
    - net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when
      CONFIG_ARCH_NO_SG_CHAIN is defined
    - selftests/bpf: Check length of recv in test_sockmap
    - lib: objagg: Fix general protection fault
    - mlxsw: spectrum_acl_erp: Fix object nesting warning
    - mlxsw: spectrum_acl_bloom_filter: Make mlxsw_sp_acl_bf_key_encode() more
      flexible
    - mlxsw: spectrum_acl: Fix ACL scale regression and firmware errors
    - wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers
    - wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he()
    - wifi: cfg80211: handle 2x996 RU allocation in
      cfg80211_calculate_bitrate_he()
    - net: fec: Refactor: #define magic constants
    - net: fec: Fix FEC_ECR_EN1588 being cleared on link-down
    - libbpf: Checking the btf_type kind when fixing variable offsets
    - ipvs: Avoid unnecessary calls to skb_is_gso_sctp
    - netfilter: nf_tables: rise cap on SELinux secmark context
    - perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation
    - perf: Fix perf_aux_size() for greater-than 32-bit size
    - perf: Prevent passing zero nr_pages to rb_alloc_aux()
    - perf: Fix default aux_watermark calculation
    - wifi: virt_wifi: avoid reporting connection success with wrong SSID
    - gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey
    - wifi: virt_wifi: don't use strlen() in const context
    - locking/rwsem: Add __always_inline annotation to __down_write_common() and
      inlined callers
    - selftests/bpf: Close fd in error path in drop_on_reuseport
    - bpf: annotate BTF show functions with __printf
    - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
    - bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o
    - selftests: forwarding: devlink_lib: Wait for udev events after reloading
    - xdp: fix invalid wait context of page_pool_destroy()
    - drm/amd/pm: Fix aldebaran pcie speed reporting
    - drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit
    - drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before
      regulators
    - drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare()
    - media: dvb-usb: Fix unexpected infinite loop in
      dvb_usb_read_remote_control()
    - media: imon: Fix race getting ictx->lock
    - media: i2c: Fix imx412 exposure control
    - saa7134: Unchecked i2c_transfer function result fixed
    - media: uvcvideo: Override default flags
    - media: renesas: vsp1: Fix _irqsave and _irq mix
    - media: renesas: vsp1: Store RPF partition configuration per RPF instance
    - drm/mediatek: Add missing plane settings when async update
    - drm/mediatek: Add DRM_MODE_ROTATE_0 to rotation property
    - leds: trigger: Unregister sysfs attributes before calling deactivate()
    - perf report: Fix condition in sort__sym_cmp()
    - drm/etnaviv: fix DMA direction handling for cached RW buffers
    - drm/qxl: Add check for drm_cvt_mode
    - Revert "leds: led-core: Fix refcount leak in of_led_get()"
    - ext4: fix infinite loop when replaying fast_commit
    - media: venus: flush all buffers in output plane streamoff
    - perf intel-pt: Fix aux_watermark calculation for 64-bit size
    - perf intel-pt: Fix exclude_guest setting
    - mfd: rsmu: Split core code into separate module
    - mfd: omap-usb-tll: Use struct_size to allocate tll
    - xprtrdma: Fix rpcrdma_reqs_reset()
    - SUNRPC: avoid soft lockup when transmitting UDP to reachable server.
    - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server
    - ext4: return early for non-eligible fast_commit track events
    - ext4: don't track ranges in fast_commit if inode has inlined data
    - ext4: avoid writing unitialized memory to disk in EA inodes
    - sparc64: Fix incorrect function signature and add prototype for
      prom_cif_init
    - SUNRPC: Fixup gss_status tracepoint error output
    - PCI: Fix resource double counting on remove & rescan
    - clk: qcom: branch: Add helper functions for setting retain bits
    - clk: qcom: gcc-sc7280: Update force mem core bit for UFS ICE clock
    - coresight: Fix ref leak when of_coresight_parse_endpoint() fails
    - RDMA/mlx5: Set mkeys for dmabuf at PAGE_SIZE
    - RDMA/cache: Release GID table even if leak is detected
    - Input: qt1050 - handle CHIP_ID reading error
    - RDMA/mlx4: Fix truncated output warning in mad.c
    - RDMA/mlx4: Fix truncated output warning in alias_GUID.c
    - RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs
    - ASoC: max98088: Check for clk_prepare_enable() error
    - mtd: make mtd_test.c a separate module
    - RDMA/device: Return error earlier if port in not valid
    - Input: elan_i2c - do not leave interrupt disabled on suspend failure
    - PCI: endpoint: Clean up error handling in vpci_scan_bus()
    - vhost/vsock: always initialize seqpacket_allow
    - net: missing check virtio
    - MIPS: Octeron: remove source file executable bit
    - powerpc/xmon: Fix disassembly CPU feature checks
    - macintosh/therm_windtunnel: fix module unload.
    - RDMA/hns: Fix missing pagesize and alignment check in FRMR
    - RDMA/hns: Fix undifined behavior caused by invalid max_sge
    - RDMA/hns: Fix insufficient extend DB for VFs.
    - bnxt_re: Fix imm_data endianness
    - netfilter: ctnetlink: use helper function to calculate expect ID
    - netfilter: nf_set_pipapo: fix initial map fill
    - net: dsa: mv88e6xxx: Limit chip-wide frame size config to CPU ports
    - net: dsa: b53: Limit chip-wide jumbo frame config to CPU ports
    - fs/ntfs3: Use ALIGN kernel macro
    - fs/ntfs3: Merge synonym COMPRESSION_UNIT and NTFS_LZNT_CUNIT
    - fs/ntfs3: Fix transform resident to nonresident for compressed files
    - fs/ntfs3: Missed NI_FLAG_UPDATE_PARENT setting
    - fs/ntfs3: Fix getting file type
    - pinctrl: rockchip: update rk3308 iomux routes
    - pinctrl: core: fix possible memory leak when pinctrl_enable() fails
    - pinctrl: single: fix possible memory leak when pinctrl_enable() fails
    - pinctrl: ti: ti-iodelay: Drop if block with always false condition
    - pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable()
      fails
    - pinctrl: freescale: mxs: Fix refcount of child
    - fs/ntfs3: Replace inode_trylock with inode_lock
    - fs/ntfs3: Fix field-spanning write in INDEX_HDR
    - fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
    - nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro
    - rtc: interface: Add RTC offset to alarm after fix-up
    - fs/ntfs3: Missed error return
    - landlock: Don't lose track of restrictions on cred_transfer
    - mm/hugetlb: fix possible recursive locking detected warning
    - mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
    - dt-bindings: thermal: correct thermal zone node name limit
    - tick/broadcast: Make takeover of broadcast hrtimer reliable
    - net: netconsole: Disable target before netpoll cleanup
    - af_packet: Handle outgoing VLAN packets without hardware offloading
    - ipv6: take care of scope when choosing the src addr
    - sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE
      tasks
    - fuse: verify {g,u}id mount options correctly
    - char: tpm: Fix possible memory leak in tpm_bios_measurements_open()
    - media: venus: fix use after free in vdec_close
    - ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error
    - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
    - ext2: Verify bitmap and itable block numbers before using them
    - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
    - drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
    - scsi: qla2xxx: Fix optrom version displayed in FDMI
    - drm/amd/display: Check for NULL pointer
    - sched/fair: Use all little CPUs for CPU-bound workloads
    - apparmor: use kvfree_sensitive to free data->data
    - task_work: s/task_work_cancel()/task_work_cancel_func()/
    - task_work: Introduce task_work_cancel() again
    - udf: Avoid using corrupted block bitmap buffer
    - m68k: amiga: Turn off Warp1260 interrupts during boot
    - ext4: check dot and dotdot of dx_root before making dir indexed
    - ext4: make sure the first directory block is not a hole
    - io_uring: tighten task exit cancellations
    - selftests/landlock: Add cred_transfer test
    - wifi: mwifiex: Fix interface type change
    - leds: ss4200: Convert PCIBIOS_* return codes to errnos
    - jbd2: make jbd2_journal_get_max_txn_bufs() internal
    - media: uvcvideo: Fix integer overflow calculating timestamp
    - KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked()
    - ALSA: usb-audio: Fix microphone sound on HD webcam.
    - ALSA: usb-audio: Move HD Webcam quirk to the right place
    - ALSA: usb-audio: Add a quirk for Sonix HD USB Camera
    - tools/memory-model: Fix bug in lock.cat
    - hwrng: amd - Convert PCIBIOS_* return codes to errnos
    - PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN
    - PCI: dw-rockchip: Fix initial PERST# GPIO value
    - PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio
    - binder: fix hang of unregistered readers
    - dev/parport: fix the array out-of-bounds risk
    - fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed
    - scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds
    - clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use
    - ubi: eba: properly rollback inside self_check_eba
    - decompress_bunzip2: fix rare decompression failure
    - kbuild: Fix '-S -c' in x86 stack protector scripts
    - kobject_uevent: Fix OOB access within zap_modalias_env()
    - gve: Fix an edge case for TSO skb validity check
    - devres: Fix devm_krealloc() wasting memory
    - devres: Fix memory leakage caused by driver API devm_free_percpu()
    - mm/numa_balancing: teach mpol_to_str about the balancing mode
    - rtc: cmos: Fix return value of nvmem callbacks
    - scsi: qla2xxx: During vport delete send async logout explicitly
    - scsi: qla2xxx: Unable to act on RSCN for port online
    - scsi: qla2xxx: Fix for possible memory corruption
    - scsi: qla2xxx: Use QP lock to search for bsg
    - scsi: qla2xxx: Fix flash read failure
    - scsi: qla2xxx: Complete command early within lock
    - scsi: qla2xxx: validate nvme_local_port correctly
    - perf: Fix event leak upon exit
    - perf: Fix event leak upon exec and file release
    - perf/x86/intel/uncore: Fix the bits of the CHA extended umask for SPR
    - perf/x86/intel/pt: Fix topa_entry base length
    - perf/x86/intel/pt: Fix a topa_entry base address calculation
    - drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8
    - drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell
    - drm/i915/dp: Reset intel_dp->link_trained before retraining the link
    - rtc: isl1208: Fix return value of nvmem callbacks
    - watchdog/perf: properly initialize the turbo mode timestamp and rearm
      counter
    - platform: mips: cpu_hwmon: Disable driver on unsupported hardware
    - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
    - selftests/sigaltstack: Fix ppc64 GCC build
    - rbd: don't assume rbd_is_lock_owner() for exclusive mappings
    - remoteproc: stm32_rproc: Fix mailbox interrupts queuing
    - remoteproc: imx_rproc: Skip over memory region when node value is NULL
    - MIPS: ip30: ip30-console: Add missing include
    - MIPS: dts: loongson: Fix GMAC phy node
    - MIPS: Loongson64: env: Hook up Loongsson-2K
    - MIPS: Loongson64: Remove memory node for builtin-dtb
    - MIPS: Loongson64: reset: Prioritise firmware service
    - MIPS: Loongson64: Test register availability before use
    - drm/panfrost: Mark simple_ondemand governor as softdep
    - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait
    - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings
    - Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables
    - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591
    - nilfs2: handle inconsistent state in nilfs_btnode_create_block()
    - io_uring/io-wq: limit retrying worker initialisation
    - kernel: rerun task_work while freezing in get_signal()
    - kdb: address -Wformat-security warnings
    - kdb: Use the passed prompt in kdb_position_cursor()
    - jfs: Fix array-index-out-of-bounds in diFree
    - dmaengine: ti: k3-udma: Fix BCHAN count with UHC and HC channels
    - phy: cadence-torrent: Check return value on register read
    - um: time-travel: fix time-travel-start option
    - um: time-travel: fix signal blocking race/hang
    - libbpf: Fix no-args func prototype BTF dumping syntax
    - dma: fix call order in dmam_free_coherent
    - bpf, events: Use prog to emit ksymbol event for main program
    - MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later
    - ipv4: Fix incorrect source address in Record Route option
    - net: bonding: correctly annotate RCU in bond_should_notify_peers()
    - netfilter: nft_set_pipapo_avx2: disable softinterrupts
    - tipc: Return non-zero value from tipc_udp_addr2str() on error
    - net: stmmac: Correct byte order of perfect_match
    - net: nexthop: Initialize all fields in dumped nexthops
    - bpf: Fix a segment issue when downgrading gso_size
    - mISDN: Fix a use after free in hfcmulti_tx()
    - apparmor: Fix null pointer deref when receiving skb during sock creation
    - powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap()
    - lirc: rc_dev_get_from_fd(): fix file leak
    - spi: spidev: Make probe to fail early if a spidev compatible is used
    - spi: spidev: Replace ACPI specific code by device_get_match_data()
    - spi: spidev: Replace OF specific code by device property API
    - spidev: Add Silicon Labs EM3581 device compatible
    - spi: spidev: order compatibles alphabetically
    - spi: spidev: add correct compatible for Rohm BH2228FV
    - ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable
    - ceph: fix incorrect kmalloc size of pagevec mempool
    - iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en
    - nvme: split command copy into a helper
    - nvme: separate command prep and issue
    - nvme-pci: add missing condition check for existence of mapped data
    - fs: don't allow non-init s_user_ns for filesystems without FS_USERNS_MOUNT
    - powerpc/configs: Update defconfig with now user-visible CONFIG_FSL_IFC
    - arm64: dts: qcom: msm8996: Move '#clock-cells' to QMP PHY child node
    - arm64: dts: qcom: msm8998: drop USB PHY clock index
    - arm64: dts: qcom: msm8998: switch USB QMP PHY to new style of bindings
    - arm64: dts: qcom: msm8998: Disable SS instance in Parkmode for USB
    - arm64: dts: qcom: ipq8074: Disable SS instance in Parkmode for USB
    - sysctl: always initialize i_uid/i_gid
    - ext4: make ext4_es_insert_extent() return void
    - ext4: refactor ext4_da_map_blocks()
    - ext4: convert to exclusive lock while inserting delalloc extents
    - ext4: factor out a common helper to query extent map
    - ext4: check the extent status again before inserting delalloc block
    - soc: xilinx: move PM_INIT_FINALIZE to zynqmp_pm_domains driver
    - drivers: soc: xilinx: check return status of get_api_version()
    - leds: trigger: use RCU to protect the led_cdevs list
    - leds: trigger: Remove unused function led_trigger_rename_static()
    - leds: trigger: Store brightness set by led_trigger_event()
    - leds: trigger: Call synchronize_rcu() before calling trig->activate()
    - leds: triggers: Flush pending brightness before activating trigger
    - irqdomain: Fixed unbalanced fwnode get and put
    - genirq: Allow the PM device to originate from irq domain
    - irqchip/imx-irqsteer: Constify irq_chip struct
    - irqchip/imx-irqsteer: Add runtime PM support
    - irqchip/imx-irqsteer: Handle runtime power management correctly
    - drm/dp_mst: Fix all mstb marked as not probed after suspend/resume
    - remoteproc: imx_rproc: Fix refcount mistake in imx_rproc_addr_init
    - MIPS: Loongson64: DTS: Add RTC support to Loongson-2K1000
    - MIPS: Loongson64: DTS: Fix PCIe port nodes for ls7a
    - MIPS: dts: loongson: Fix liointc IRQ polarity
    - MIPS: dts: loongson: Fix ls2k1000-rtc interrupt
    - drm/nouveau: prime: fix refcount underflow
    - drm/vmwgfx: Fix overlay when using Screen Targets
    - sched: act_ct: take care of padding in struct zones_ht_key
    - ALSA: hda: conexant: Fix headset auto detect fail in the polling mode
    - rtnetlink: enable alt_ifname for setlink/newlink
    - rtnetlink: Don't ignore IFLA_TARGET_NETNSID when ifname is specified in
      rtnl_dellink().
    - net/iucv: fix use after free in iucv_sock_close()
    - net: mvpp2: Don't re-use loop iterator
    - netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init().
    - netfilter: iptables: Fix potential null-ptr-deref in
      ip6table_nat_table_init().
    - net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys
    - ipv6: fix ndisc_is_useropt() handling for PIO
    - riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
    - power: supply: bq24190_charger: replace deprecated strncpy with strscpy
    - platform/chrome: cros_ec_proto: Lock device when updating MKBP version
    - HID: wacom: Modify pen IDs
    - protect the fetch of ->fd[fd] in do_dup2() from mispredictions
    - ALSA: usb-audio: Correct surround channels in UAC1 channel map
    - ALSA: hda/realtek: Add quirk for Acer Aspire E5-574G
    - Revert "ALSA: firewire-lib: obsolete workqueue for period update"
    - Revert "ALSA: firewire-lib: operate for period elapse event in process
      context"
    - drm/vmwgfx: Fix a deadlock in dma buf fence polling
    - net: usb: sr9700: fix uninitialized variable use in sr_mdio_read
    - r8169: don't increment tx_dropped in case of NETDEV_TX_BUSY
    - mptcp: fix duplicate data handling
    - netfilter: ipset: Add list flush to cancel_gc
    - genirq: Allow irq_chip registration functions to take a const irq_chip
    - irqchip/mbigen: Fix mbigen node address layout
    - x86/mm: Fix pti_clone_pgtable() alignment assumption
    - x86/mm: Fix pti_clone_entry_text() for i386
    - sctp: move hlist_node and hashent out of sctp_ep_common
    - sctp: Fix null-ptr-deref in reuseport_add_sock().
    - net: usb: qmi_wwan: fix memory leak for not ip packets
    - net: bridge: mcast: wait for previous gc cycles when removing port
    - net: linkwatch: use system_unbound_wq
    - Bluetooth: l2cap: always unlock channel in l2cap_conless_channel()
    - net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
    - l2tp: fix lockdep splat
    - net: fec: Stop PPS on driver remove
    - rcutorture: Fix rcu_torture_fwd_cb_cr() data race
    - md: do not delete safemode_timer in mddev_suspend
    - md/raid5: avoid BUG_ON() while continue reshape after reassembling
    - clocksource/drivers/sh_cmt: Address race condition for clock events
    - ACPI: battery: create alarm sysfs attribute atomically
    - ACPI: SBS: manage alarm sysfs attribute through psy core
    - selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT
    - PCI: Add Edimax Vendor ID to pci_ids.h
    - udf: prevent integer overflow in udf_bitmap_free_blocks()
    - wifi: nl80211: don't give key data to userspace
    - btrfs: fix bitmap leak when loading free space cache on duplicate entry
    - drm/amdgpu/pm: Fix the null pointer dereference for smu7
    - drm/amdgpu: Fix the null pointer dereference to ras_manager
    - drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
    - drm/amd/display: Add null checker before passing variables
    - media: uvcvideo: Ignore empty TS packets
    - media: uvcvideo: Fix the bandwdith quirk on USB 3.x
    - ext4: fix uninitialized variable in ext4_inlinedir_to_tree
    - jbd2: avoid memleak in jbd2_journal_write_metadata_buffer
    - s390/sclp: Prevent release of buffer in I/O
    - SUNRPC: Fix a race to wake a sync task
    - profiling: remove profile=sleep support
    - scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
    - sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
    - ext4: fix wrong unit use in ext4_mb_find_by_goal
    - arm64: cpufeature: Force HWCAP to be based on the sysreg visible to user-
      space
    - arm64: Add Neoverse-V2 part
    - arm64: barrier: Restore spec_bar() macro
    - arm64: cputype: Add Cortex-X4 definitions
    - arm64: cputype: Add Neoverse-V3 definitions
    - arm64: errata: Add workaround for Arm errata 3194386 and 3312417
    - [Config] Set ARM64_ERRATUM_3194386=y
    - arm64: cputype: Add Cortex-X3 definitions
    - arm64: cputype: Add Cortex-A720 definitions
    - arm64: cputype: Add Cortex-X925 definitions
    - arm64: errata: Unify speculative SSBS errata logic
    - arm64: errata: Expand speculative SSBS workaround
    - arm64: cputype: Add Cortex-X1C definitions
    - arm64: cputype: Add Cortex-A725 definitions
    - arm64: errata: Expand speculative SSBS workaround (again)
    - i2c: smbus: Improve handling of stuck alerts
    - ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask
    - ASoC: codecs: wsa881x: Correct Soundwire ports mask
    - spi: spidev: Add missing spi_device_id for bh2228fv
    - i2c: smbus: Send alert notifications to all devices if source not found
    - bpf: kprobe: remove unused declaring of bpf_kprobe_override
    - kprobes: Fix to check symbol prefixes correctly
    - spi: spi-fsl-lpspi: Fix scldiv calculation
    - ALSA: usb-audio: Re-add ScratchAmp quirk entries
    - ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT
    - drm/client: fix null pointer dereference in drm_client_modeset_probe
    - ALSA: line6: Fix racy access to midibuf
    - ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list
    - ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4
    - usb: vhci-hcd: Do not drop references before new references are gained
    - USB: serial: debug: do not echo input by default
    - usb: gadget: core: Check for unset descriptor
    - usb: gadget: u_serial: Set start_delayed during suspend
    - scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES
    - scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic
    - tick/broadcast: Move per CPU pointer access into the atomic section
    - vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler
    - ntp: Clamp maxerror and esterror to operating range
    - clocksource: Reduce the default clocksource_watchdog() retries to 2
    - torture: Enable clocksource watchdog with "tsc=watchdog"
    - clocksource: Scale the watchdog read retries automatically
    - clocksource: Fix brown-bag boolean thinko in cs_watchdog_read()
    - irqchip/meson-gpio: support more than 8 channels gpio irq
    - irqchip/meson-gpio: Convert meson_gpio_irq_controller::lock to
      'raw_spinlock_t'
    - driver core: Fix uevent_show() vs driver detach race
    - ntp: Safeguard against time_constant overflow
    - timekeeping: Fix bogus clock_was_set() invocation in do_adjtimex()
    - serial: core: check uartclk for zero to avoid divide by zero
    - kcov: properly check for softirq context
    - irqchip/xilinx: Fix shift out of bounds
    - genirq/irqdesc: Honor caller provided affinity in alloc_desc()
    - power: supply: axp288_charger: Fix constant_charge_voltage writes
    - power: supply: axp288_charger: Round constant_charge_voltage writes down
    - tracing: Fix overflow in get_free_elt()
    - padata: Fix possible divide-by-0 panic in padata_mt_helper()
    - x86/mtrr: Check if fixed MTRRs exist before saving them
    - sched/smt: Introduce sched_smt_present_inc/dec() helper
    - sched/smt: Fix unbalance sched_smt_present dec/inc
    - drm/bridge: analogix_dp: properly handle zero sized AUX transactions
    - drm/mgag200: Set DDC timeout in milliseconds
    - mptcp: sched: check both directions for backup
    - mptcp: distinguish rcv vs sent backup flag in requests
    - mptcp: fix NL PM announced address accounting
    - mptcp: mib: count MPJ with backup flag
    - mptcp: fix bad RCVPRUNED mib accounting
    - mptcp: pm: only set request_bkup flag when sending MP_PRIO
    - mptcp: export local_address
    - mptcp: pm: fix backup support in signal endpoints
    - selftests: mptcp: join: validate backup in MPJ
    - selftests: mptcp: join: check backup support in signal endp
    - btrfs: fix corruption after buffer fault in during direct IO append write
    - xfs: fix log recovery buffer allocation for the legacy h_size fixup
    - btrfs: fix double inode unlock for direct IO sync writes
    - PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
    - netfilter: nf_tables: set element extended ACK reporting support
    - netfilter: nf_tables: bail out if stateful expression provides no .clone
    - netfilter: nf_tables: allow clone callbacks to sleep
    - netfilter: nf_tables: prefer nft_chain_validate
    - net: stmmac: Enable mac_managed_pm phylink config
    - PCI: dwc: Restore MSI Receiver mask during resume
    - wifi: mac80211: check basic rates validity
    - mptcp: fully established after ADD_ADDR echo on MPJ
    - drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
    - powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
    - arm64: dts: qcom: msm8996: correct #clock-cells for QMP PHY nodes
    - arm64: cpufeature: Fix the visibility of compat hwcaps
    - exec: Fix ToCToU between perm check and set-uid/gid usage
    - nvme/pci: Add APST quirk for Lenovo N60z laptop
    - usb: gadget: u_audio: Check return codes from usb_ep_enable and
      config_ep_by_speed.
    - binfmt_flat: Fix corruption when not offsetting data start
    - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
    - ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode
    - media: Revert "media: dvb-usb: Fix unexpected infinite loop in
      dvb_usb_read_remote_control()"
    - Revert "ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error"
    - Linux 5.15.165
  * CVE-2024-26661
    - drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
  * CVE-2024-25744
    - x86: Fix misspelled Kconfig symbols
    - x86: Introduce ia32_enabled()
    - x86/sev: Rename mem_encrypt.c to mem_encrypt_amd.c
    - x86/coco: Disable 32-bit emulation by default on TDX and SEV
    - x86/entry: Convert INT 0x80 emulation to IDTENTRY
    - x86/entry: Do not allow external 0x80 interrupts
    - x86/entry: Add do_SYSENTER_32() prototype
    - x86/bhi: Add support for clearing branch history at syscall entry
  * [UBUNTU 22.04] s390/cpum_cf: make crypto counters upward compatible
    (LP: #2074380)
    - s390/cpum_cf: make crypto counters upward compatible across machine types
  * Jammy update: v5.15.164 upstream stable release (LP: #2076100)
    - gcc-plugins: Rename last_stmt() for GCC 14+
    - filelock: Remove locks reliably when fcntl/close race is detected
    - ARM: 9324/1: fix get_user() broken with veneer
    - ACPI: processor_idle: Fix invalid comparison with insertion sort for latency
    - scsi: core: Fix a use-after-free
    - scsi: core: alua: I/O errors for ALUA state transitions
    - scsi: qedf: Don't process stag work during unload and recovery
    - scsi: qedf: Wait for stag work during unload
    - scsi: qedf: Set qed_slowpath_params to zero before use
    - ACPI: EC: Abort address space access upon error
    - ACPI: EC: Avoid returning AE_OK on errors in address space handler
    - tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
    - wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata
    - wifi: mac80211: handle tasklet frames before stopping
    - wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup
    - wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd
    - wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option
    - wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan()
    - selftests/openat2: Fix build warnings on ppc64
    - Input: silead - Always support 10 fingers
    - net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input()
    - ila: block BH in ila_output()
    - arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
    - null_blk: fix validation of block size
    - kconfig: gconf: give a proper initial state to the Save button
    - kconfig: remove wrong expr_trans_bool()
    - fs/file: fix the check in find_next_fd()
    - mei: demote client disconnect warning on suspend to debug
    - nvme: avoid double free special payload
    - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
    - KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
    - drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency
    - ALSA: hda/realtek: Add more codec ID to no shutup pins list
    - mips: fix compat_sys_lseek syscall
    - Input: elantech - fix touchpad state on resume for Lenovo N24
    - Input: i8042 - add Ayaneo Kun to i8042 quirk table
    - bytcr_rt5640 : inverse jack detect for Archos 101 cesium
    - ALSA: dmaengine: Synchronize dma channel after drop()
    - ASoC: ti: davinci-mcasp: Set min period size using FIFO config
    - ASoC: ti: omap-hdmi: Fix too long driver name
    - can: kvaser_usb: fix return value for hif_usb_send_regout
    - s390/sclp: Fix sclp_init() cleanup on failure
    - platform/x86: wireless-hotkey: Add support for LG Airplane Button
    - platform/x86: lg-laptop: Remove LGEX0815 hotkey handling
    - platform/x86: lg-laptop: Change ACPI device id
    - platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB
    - btrfs: qgroup: fix quota root leak after quota disable failure
    - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx
    - ALSA: dmaengine_pcm: terminate dmaengine before synchronize
    - net: usb: qmi_wwan: add Telit FN912 compositions
    - net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and
      DEV_STATS_ADD()
    - powerpc/pseries: Whitelist dtl slub object for copying to userspace
    - powerpc/eeh: avoid possible crash when edev->pdev changes
    - scsi: libsas: Fix exp-attached device scan after probe failure scanned in
      again after probe failed
    - Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
    - drm/radeon: check bo_va->bo is non-NULL before using it
    - fs: better handle deep ancestor chains in is_subdir()
    - riscv: stacktrace: fix usage of ftrace_graph_ret_addr()
    - spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices
    - selftests/vDSO: fix clang build errors and warnings
    - hfsplus: fix uninit-value in copy_name
    - spi: mux: set ctlr->bits_per_word_mask
    - tracing: Define the is_signed_type() macro once
    - minmax: sanity check constant bounds when clamping
    - minmax: clamp more efficiently by avoiding extra comparison
    - minmax: fix header inclusions
    - minmax: allow min()/max()/clamp() if the arguments have the same signedness.
    - minmax: allow comparisons of 'int' against 'unsigned char/short'
    - minmax: relax check to allow comparison between unsigned arguments and
      signed constants
    - mm/damon/core: merge regions aggressively when max_nr_regions is unmet
    - wifi: mac80211: disable softirqs for queued frame handling
    - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
    - samples: Add fs error monitoring example
    - samples: Make fs-monitor depend on libc and headers
    - docs: Fix formatting of literal sections in fanotify docs
    - Add gitignore file for samples/fanotify/ subdirectory
    - net: relax socket state check at accept time.
    - ocfs2: add bounds checking to ocfs2_check_dir_entry()
    - jfs: don't walk off the end of ealist
    - fs/ntfs3: Validate ff offset
    - ALSA: hda/realtek: Enable headset mic on Positivo SU C1400
    - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360
    - arm64: dts: qcom: msm8996: Disable SS instance in Parkmode for USB
    - arm64: dts: qcom: sdm630: Disable SS instance in Parkmode for USB
    - ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused
    - filelock: Fix fcntl/close race recovery compat path
    - wifi: rt2x00: use explicitly signed or unsigned types
    - tun: add missing verification for short frame
    - tap: add missing verification for short frame
    - Linux 5.15.164
  * Jammy update: v5.15.166 upstream stable release (LP: #2080594) //
    CVE-2024-45016
    - netem: fix return value if duplicate enqueue fails
  * CVE-2024-38630
    - watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
  * CVE-2024-27397
    - netfilter: nf_tables: use timestamp to check for set element timeout

 -- Jian Hui Lee <jianhui.lee@canonical.com>  Thu, 02 Jan 2025 12:08:52 +0800

linux-mtk (5.15.0-1035.41) jammy; urgency=medium

  * jammy/linux-mtk: 5.15.0-1035.41 -proposed tracker (LP: #2081792)

  * [g510] ddc failed message when the monitor does not support SCDC
    (LP: #2084626)
    - SAUCE: (no-up) GENIO: drm: mediatek: hdmi: fix ddc failed message when the
      monitor does not support SCDC

  * [g700] support p1v4 hardware (LP: #2081699)
    - SAUCE: (no-up) GENIO: arm64: dts: mediatek: genio-700-evk: modify gpio 111
      to be regulator-gpio
    - SAUCE: (no-up) GENIO: panel: startek-kd070fhfid015: change enable gpio to be
      optional
    - SAUCE: (no-up) arm: dts: mt8188: add disp_pwm1 node
    - SAUCE: (no-up) dtbo: genio-700-evk: add display-dsi-p1v4.dts for G700 EVK
      p1v4
    - SAUCE: (no-up) arm64: dts: mediatek: genio-700-evk: add p1v4 device tree
      overlay

  *  [g1200] Call trace appeared when reload mtk_rng module (LP: #2081696)
    - hwrng: mtk - Use devm_pm_runtime_enable

  *  [g1200] possible kernel memory leak through CONFIG_DEBUG_KMEMLEAK
    (LP: #2081686)
    - drm/mediatek: Correctly free sg_table in gem prime vmap

  [ Ubuntu: 5.15.0-124.134 ]

  * jammy/linux: 5.15.0-124.134 -proposed tracker (LP: #2082176)
  * CVE-2024-45016
    - netem: fix return value if duplicate enqueue fails
  * CVE-2024-38630
    - watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
  * CVE-2024-27397
    - netfilter: nf_tables: use timestamp to check for set element timeout

  [ Ubuntu: 5.15.0-122.132 ]

  * jammy/linux: 5.15.0-122.132 -proposed tracker (LP: #2078154)
  * isolcpus are ignored when using cgroups V2, causing processes to have wrong
    affinity (LP: #2076957)
    - cgroup/cpuset: Optimize cpuset_attach() on v2
  * Jammy update: v5.15.164 upstream stable release (LP: #2076100) //
    CVE-2024-41009
    - bpf: Fix overrunning reservations in ringbuf
  * CVE-2024-39494
    - ima: Fix use-after-free on a dentry's dname.name
  * CVE-2024-39496
    - btrfs: zoned: fix use-after-free due to race with dev replace
  * CVE-2024-42160
    - f2fs: check validation of fault attrs in f2fs_build_fault_attr()
    - f2fs: Add inline to f2fs_build_fault_attr() stub
  * CVE-2024-38570
    - gfs2: Rename sd_{ glock => kill }_wait
    - gfs2: Fix potential glock use-after-free on unmount
  * CVE-2024-42228
    - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
  * CVE-2024-27012
    - netfilter: nf_tables: restore set elements when delete set fails
  * CVE-2024-26677
    - rxrpc: Fix delayed ACKs to not set the reference serial number

  [ Ubuntu: 5.15.0-121.131 ]

  * jammy/linux: 5.15.0-121.131 -proposed tracker (LP: #2076347)
  * jammy:linux bpf selftest do not build (LP: #2076334)
    - SAUCE: Revert "bpf: Allow reads from uninit stack"

  [ Ubuntu: 5.15.0-120.130 ]

  * jammy/linux: 5.15.0-120.130 -proposed tracker (LP: #2075903)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/2024.08.05)
  * Jammy update: v5.15.163 upstream stable release (LP: #2075170)
    - Compiler Attributes: Add __uninitialized macro
    - locking/mutex: Introduce devm_mutex_init()
    - drm/lima: fix shared irq handling on driver remove
    - media: dvb: as102-fe: Fix as10x_register_addr packing
    - media: dvb-usb: dib0700_devices: Add missing release_firmware()
    - IB/core: Implement a limit on UMAD receive List
    - scsi: qedf: Make qedf_execute_tmf() non-preemptible
    - crypto: aead,cipher - zeroize key buffer after use
    - drm/amdgpu: Initialize timestamp for some legacy SOCs
    - drm/amd/display: Check index msg_id before read or write
    - drm/amd/display: Check pipe offset before setting vblank
    - drm/amd/display: Skip finding free audio for unknown engine_id
    - media: dw2102: Don't translate i2c read into write
    - sctp: prefer struct_size over open coded arithmetic
    - firmware: dmi: Stop decoding on broken entry
    - Input: ff-core - prefer struct_size over open coded arithmetic
    - wifi: mt76: replace skb_put with skb_put_zero
    - net: dsa: mv88e6xxx: Correct check for empty list
    - media: dvb-frontends: tda18271c2dd: Remove casting during div
    - media: s2255: Use refcount_t instead of atomic_t for num_channels
    - media: dvb-frontends: tda10048: Fix integer overflow
    - i2c: i801: Annotate apanel_addr as __ro_after_init
    - powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n
    - orangefs: fix out-of-bounds fsid access
    - kunit: Fix timeout message
    - powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#"
    - igc: fix a log entry using uninitialized netdev
    - bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
    - jffs2: Fix potential illegal address access in jffs2_free_inode
    - s390/pkey: Wipe sensitive data on failure
    - tools/power turbostat: Remember global max_die_id
    - UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open()
    - tcp_metrics: validate source addr length
    - KVM: s390: fix LPSWEY handling
    - e1000e: Fix S0ix residency on corporate systems
    - net: allow skb_datagram_iter to be called from any context
    - wifi: wilc1000: fix ies_len type in connect path
    - riscv: kexec: Avoid deadlock in kexec crash path
    - netfilter: nf_tables: unconditionally flush pending work before notifier
    - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
    - selftests: fix OOM in msg_zerocopy selftest
    - selftests: make order checking verbose in msg_zerocopy selftest
    - inet_diag: Initialize pad field in struct inet_diag_req_v2
    - gpiolib: of: factor out code overriding gpio line polarity
    - gpiolib: of: add a quirk for reset line polarity for Himax LCDs
    - gpiolib: of: add polarity quirk for TSC2005
    - Revert "igc: fix a log entry using uninitialized netdev"
    - nilfs2: fix inode number range checks
    - nilfs2: add missing check for inode numbers on directory entries
    - mm: optimize the redundant loop of mm_update_owner_next()
    - mm: avoid overflows in dirty throttling logic
    - btrfs: fix adding block group to a reclaim list and the unused list during
      reclaim
    - Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
    - can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct
    - fsnotify: Do not generate events for O_PATH file descriptors
    - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(),
      again"
    - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
    - drm/amdgpu/atomfirmware: silence UBSAN warning
    - mtd: rawnand: Ensure ECC configuration is propagated to upper layers
    - mtd: rawnand: Bypass a couple of sanity checks during NAND identification
    - mtd: rawnand: rockchip: ensure NVDDR timings are rejected
    - ima: Avoid blocking in RCU read-side critical section
    - media: dw2102: fix a potential buffer overflow
    - clk: qcom: gcc-sm6350: Fix gpll6* & gpll7 parents
    - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
    - fs/ntfs3: Mark volume as dirty if xattr is broken
    - ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897
    - nvme-multipath: find NUMA path only for online numa-node
    - dma-mapping: benchmark: avoid needless copy_to_user if benchmark fails
    - nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset
    - regmap-i2c: Subtract reg size from max_write
    - platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6"
      tablet
    - platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro
    - nvmet: fix a possible leak when destroy a ctrl during qp establishment
    - kbuild: fix short log for AS in link-vmlinux.sh
    - nfc/nci: Add the inconsistency check between the input data length and count
    - null_blk: Do not allow runt zone with zone capacity smaller then zone size
    - nilfs2: fix incorrect inode allocation from reserved inodes
    - mm: prevent derefencing NULL ptr in pfn_section_valid()
    - filelock: fix potential use-after-free in posix_lock_inode
    - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading
    - vfs: don't mod negative dentry count when on shrinker list
    - tcp: fix incorrect undo caused by DSACK of TLP retransmit
    - skmsg: Skip zero length skb in sk_msg_recvmsg
    - octeontx2-af: Fix incorrect value output on error path in
      rvu_check_rsrc_availability()
    - net: fix rc7's __skb_datagram_iter()
    - i40e: Fix XDP program unloading while removing the driver
    - net: lantiq_etop: add blank line after declaration
    - net: ethernet: lantiq_etop: fix double free in detach
    - net: ethernet: mtk-star-emac: set mac_managed_pm when probing
    - ppp: reject claimed-as-LCP but actually malformed packets
    - ethtool: netlink: do not return SQI value if link is down
    - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
    - s390: Mark psw in __load_psw_mask() as __unitialized
    - ARM: davinci: Convert comma to semicolon
    - octeontx2-af: replace cpt slot with lf id on reg write
    - octeontx2-af: update cpt lf alloc mailbox
    - octeontx2-af: fix a issue with cpt_lf_alloc mailbox
    - octeontx2-af: fix detection of IP layer
    - octeontx2-af: extend RSS supported offload types
    - octeontx2-af: fix issue with IPv6 ext match for RSS
    - octeontx2-af: fix issue with IPv4 match for RSS
    - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
    - tcp: avoid too many retransmit packets
    - net: ks8851: Fix potential TX stall after interface reopen
    - USB: serial: option: add Telit generic core-dump composition
    - USB: serial: option: add Telit FN912 rmnet compositions
    - USB: serial: option: add Fibocom FM350-GL
    - USB: serial: option: add support for Foxconn T99W651
    - USB: serial: option: add Netprisma LCUK54 series modules
    - USB: serial: option: add Rolling RW350-GL variants
    - USB: serial: mos7840: fix crash on resume
    - USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k
    - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
    - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the
      descriptor
    - hpet: Support 32-bit userspace
    - nvmem: rmem: Fix return value of rmem_read()
    - nvmem: meson-efuse: Fix return value of nvmem callbacks
    - nvmem: core: only change name to fram for current attribute
    - ALSA: hda/realtek: add quirk for Clevo V5[46]0TU
    - ALSA: hda/realtek: Enable Mute LED on HP 250 G7
    - ALSA: hda/realtek: Limit mic boost on VAIO PRO PX
    - Fix userfaultfd_api to return EINVAL as expected
    - libceph: fix race between delayed_work() and ceph_monc_stop()
    - wireguard: allowedips: avoid unaligned 64-bit memory accesses
    - wireguard: queueing: annotate intentional data race in cpu round robin
    - wireguard: send: annotate intentional data race in checking empty queue
    - ipv6: annotate data-races around cnf.disable_ipv6
    - bpf: Allow reads from uninit stack
    - nilfs2: fix kernel bug on rename operation of broken directory
    - i2c: rcar: bring hardware to known state when probing
    - i2c: mark HostNotify target address as used
    - i2c: rcar: Add R-Car Gen4 support
    - i2c: rcar: reset controller is mandatory for Gen3+
    - i2c: rcar: introduce Gen4 devices
    - i2c: rcar: ensure Gen3+ reset does not disturb local targets
    - i2c: testunit: avoid re-issued work after read message
    - i2c: rcar: clear NO_RXDMA flag after resetting
    - x86/entry/64: Remove obsolete comment on tracing vs. SYSRET
    - x86/bhi: Avoid warning in #DB handler due to BHI mitigation
    - kbuild: Make ld-version.sh more robust against version string changes
    - i2c: rcar: fix error code in probe()
    - Linux 5.15.163
  * [SRU] UBSAN warnings in bnx2x kernel driver (LP: #2074215) // Jammy update:
    v5.15.163 upstream stable release (LP: #2075170)
    - bnx2x: Fix multiple UBSAN array-index-out-of-bounds
  * Jammy update: v5.15.162 upstream stable release (LP: #2073765)
    - mmc: davinci_mmc: Convert to platform remove callback returning void
    - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
    - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
    - wifi: cfg80211: Lock wiphy in cfg80211_get_station
    - wifi: cfg80211: pmsr: use correct nla_get_uX functions
    - wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64
    - wifi: iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef
    - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
    - wifi: iwlwifi: mvm: don't read past the mfuart notifcation
    - wifi: mac80211: correctly parse Spatial Reuse Parameter Set element
    - net/ncsi: Simplify Kconfig/dts control flow
    - net/ncsi: Fix the multi thread manner of NCSI driver
    - ipv6: sr: block BH in seg6_output_core() and seg6_input_core()
    - bpf: Set run context for rawtp test_run callback
    - octeontx2-af: Always allocate PF entries from low prioriy zone
    - net: sched: sch_multiq: fix possible OOB write in multiq_tune()
    - vxlan: Fix regression when dropping packets due to invalid src addresses
    - tcp: count CLOSE-WAIT sockets for TCP_MIB_CURRESTAB
    - net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
    - ptp: Fix error message on failed pin verification
    - af_unix: Set sk->sk_state under unix_state_lock() for truly disconencted
      peer.
    - af_unix: Annodate data-races around sk->sk_state for writers.
    - af_unix: Annotate data-race of sk->sk_state in unix_inq_len().
    - af_unix: Annotate data-races around sk->sk_state in unix_write_space() and
      poll().
    - net: inline sock_prot_inuse_add()
    - net: drop nopreempt requirement on sock_prot_inuse_add()
    - af_unix: Annotate data-race of sk->sk_state in unix_stream_connect().
    - af_unix: Annotate data-races around sk->sk_state in sendmsg() and recvmsg().
    - af_unix: Annotate data-race of sk->sk_state in unix_stream_read_skb().
    - af_unix: Annotate data-races around sk->sk_state in UNIX_DIAG.
    - af_unix: Annotate data-race of net->unx.sysctl_max_dgram_qlen.
    - af_unix: Use unix_recvq_full_lockless() in unix_stream_connect().
    - af_unix: annotate lockless accesses to sk->sk_err
    - af_unix: Use skb_queue_empty_lockless() in unix_release_sock().
    - af_unix: Use skb_queue_len_lockless() in sk_diag_show_rqlen().
    - af_unix: Annotate data-race of sk->sk_shutdown in sk_diag_fill().
    - ipv6: fix possible race in __fib6_drop_pcpu_from()
    - usb: gadget: f_fs: use io_data->status consistently
    - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
    - iio: accel: mxc4005: Reset chip on probe() and resume()
    - drm/amd/display: Handle Y carry-over in VCP X.Y calculation
    - drm/amd/display: Clean up some inconsistent indenting
    - drm/amd/display: drop unnecessary NULL checks in debugfs
    - drm/amd/display: Fix incorrect DSC instance for MST
    - pvpanic: Keep single style across modules
    - pvpanic: Indentation fixes here and there
    - misc/pvpanic: deduplicate common code
    - misc/pvpanic-pci: register attributes via pci_driver
    - skbuff: introduce skb_pull_data
    - Bluetooth: hci_qca: mark OF related data as maybe unused
    - Bluetooth: btqca: use le32_to_cpu for ver.soc_id
    - Bluetooth: btqca: Add WCN3988 support
    - Bluetooth: qca: use switch case for soc type behavior
    - Bluetooth: qca: add support for QCA2066
    - Bluetooth: qca: fix info leak when fetching fw build id
    - serial: sc16is7xx: replace hardcoded divisor value with BIT() macro
    - serial: sc16is7xx: fix bug in sc16is7xx_set_baud() when using prescaler
    - x86/ibt,ftrace: Search for __fentry__ location
    - ftrace: Fix possible use-after-free issue in ftrace_location()
    - i2c: add fwnode APIs
    - i2c: acpi: Unbind mux adapters before delete
    - cma: factor out minimum alignment requirement
    - mm/cma: drop incorrect alignment check in cma_init_reserved_mem
    - selftests/mm: compaction_test: fix incorrect write of zero to nr_hugepages
    - selftests/mm: conform test to TAP format output
    - selftests/mm: compaction_test: fix bogus test success on Aarch64
    - wifi: ath10k: fix QCOM_RPROC_COMMON dependency
    - btrfs: fix leak of qgroup extent records after transaction abort
    - nilfs2: Remove check for PageError
    - nilfs2: return the mapped address from nilfs_get_page()
    - nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
    - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
    - usb: typec: tcpm: Ignore received Hard Reset in TOGGLING state
    - mei: me: release irq in mei_me_pci_resume error path
    - jfs: xattr: fix buffer overflow for invalid xattr
    - xhci: Set correct transferred length for cancelled bulk transfers
    - xhci: Apply reset resume quirk to Etron EJ188 xHCI host
    - xhci: Handle TD clearing for multiple streams case
    - xhci: Apply broken streams quirk to Etron EJ188 xHCI host
    - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
    - powerpc/uaccess: Fix build errors seen with GCC 13/14
    - Input: try trimming too long modalias strings
    - clk: sifive: Do not register clkdevs for PRCI clocks
    - SUNRPC: return proper error from gss_wrap_req_priv
    - platform/x86: dell-smbios-base: Use sysfs_emit()
    - platform/x86: dell-smbios: Fix wrong token data in sysfs
    - gpio: tqmx86: fix typo in Kconfig label
    - gpio: tqmx86: store IRQ trigger type and unmask status separately
    - HID: core: remove unnecessary WARN_ON() in implement()
    - iommu/amd: Introduce pci segment structure
    - iommu/amd: Fix sysfs leak in iommu init
    - iommu: Return right value in iommu_sva_bind_device()
    - HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
    - drm/vmwgfx: 3D disabled should not effect STDU memory limits
    - net: sfp: Always call `sfp_sm_mod_remove()` on remove
    - net: hns3: fix kernel crash problem in concurrent scenario
    - net: hns3: add cond_resched() to hns3 ring buffer init process
    - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
    - drm/komeda: check for error-valued pointer
    - drm/bridge/panel: Fix runtime warning on panel bridge release
    - tcp: fix race in tcp_v6_syn_recv_sock()
    - net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN)
      packets
    - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set
      type
    - net: stmmac: replace priv->speed with the portTransmitRate from the tc-cbs
      parameters
    - net/ipv6: Fix the RT cache flush via sysctl using a previous delay
    - ionic: fix use after netif_napi_del()
    - af_unix: Read with MSG_PEEK loops if the first unread byte is OOB
    - iio: adc: ad9467: fix scan type sign
    - iio: dac: ad5592r: fix temperature channel scaling value
    - iio: imu: inv_icm42600: delete unneeded update watermark call
    - drivers: core: synchronize really_probe() and dev_uevent()
    - drm/exynos/vidi: fix memory leak in .get_modes()
    - drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found
    - mptcp: ensure snd_una is properly initialized on connect
    - tracing/selftests: Fix kprobe event name test for .isra. functions
    - null_blk: Print correct max open zones limit in null_init_zoned_dev()
    - sock_map: avoid race between sock_map_close and sk_psock_put
    - vmci: prevent speculation leaks by sanitizing event in event_deliver()
    - spmi: hisi-spmi-controller: Do not override device identifier
    - knfsd: LOOKUP can return an illegal error value
    - fs/proc: fix softlockup in __read_vmcore
    - ocfs2: use coarse time for new created files
    - ocfs2: fix races between hole punching and AIO+DIO
    - PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id
    - dmaengine: axi-dmac: fix possible race in remove()
    - intel_th: pci: Add Granite Rapids support
    - intel_th: pci: Add Granite Rapids SOC support
    - intel_th: pci: Add Sapphire Rapids SOC support
    - intel_th: pci: Add Meteor Lake-S support
    - intel_th: pci: Add Lunar Lake support
    - nilfs2: fix potential kernel bug due to lack of writeback flag waiting
    - tick/nohz_full: Don't abuse smp_call_function_single() in
      tick_setup_device()
    - scsi: mpi3mr: Fix ATA NCQ priority support
    - mm/huge_memory: don't unpoison huge_zero_folio
    - serial: 8250_pxa: Configure tx_loadsz to match FIFO IRQ level
    - hugetlb_encode.h: fix undefined behaviour (34 << 26)
    - mptcp: pm: inc RmAddr MIB counter once per RM_ADDR ID
    - mptcp: pm: update add_addr counters after connect
    - kbuild: Remove support for Clang's ThinLTO caching
    - greybus: Fix use-after-free bug in gb_interface_release due to race
      condition.
    - usb-storage: alauda: Check whether the media is initialized
    - i2c: at91: Fix the functionality flags of the slave-only interface
    - i2c: designware: Fix the functionality flags of the slave-only interface
    - zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
    - Bluetooth: qca: Fix error code in qca_read_fw_build_info()
    - Bluetooth: qca: fix info leak when fetching board id
    - padata: Disable BH when taking works lock on MT path
    - crypto: hisilicon/sec - Fix memory leak for sec resource release
    - rcutorture: Fix rcu_torture_one_read() pipe_count overflow comment
    - rcutorture: Make stall-tasks directly exit when rcutorture tests end
    - rcutorture: Fix invalid context warning when enable srcu barrier testing
    - block/ioctl: prefer different overflow check
    - selftests/bpf: Prevent client connect before server bind in
      test_tc_tunnel.sh
    - selftests/bpf: Fix flaky test btf_map_in_map/lookup_update
    - batman-adv: bypass empty buckets in batadv_purge_orig_ref()
    - wifi: ath9k: work around memset overflow warning
    - af_packet: avoid a false positive warning in packet_setsockopt()
    - drop_monitor: replace spin_lock by raw_spin_lock
    - scsi: qedi: Fix crash while reading debugfs attribute
    - kselftest: arm64: Add a null pointer check
    - netpoll: Fix race condition in netpoll_owner_active
    - HID: Add quirk for Logitech Casa touchpad
    - ACPI: video: Add backlight=native quirk for Lenovo Slim 7 16ARH7
    - Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl
    - drm/amd/display: Exit idle optimizations before HDCP execution
    - drm/lima: add mask irq callback to gp and pp
    - drm/lima: mask irqs in timeout path before hard reset
    - powerpc/pseries: Enforce hcall result buffer validity and size
    - powerpc/io: Avoid clang null pointer arithmetic warnings
    - power: supply: cros_usbpd: provide ID table for avoiding fallback match
    - iommu/arm-smmu-v3: Free MSIs in case of ENOMEM
    - f2fs: remove clear SB_INLINECRYPT flag in default_options
    - usb: misc: uss720: check for incompatible versions of the Belkin F5U002
    - Avoid hw_desc array overrun in dw-axi-dmac
    - udf: udftime: prevent overflow in udf_disk_stamp_to_time()
    - PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports
    - MIPS: Octeon: Add PCIe link status check
    - serial: imx: Introduce timeout when waiting on transmitter empty
    - serial: exar: adding missing CTI and Exar PCI ids
    - MIPS: Routerboard 532: Fix vendor retry check code
    - mips: bmips: BCM6358: make sure CBR is correctly set
    - tracing: Build event generation tests only as modules
    - cipso: fix total option length computation
    - netrom: Fix a memory leak in nr_heartbeat_expiry()
    - ipv6: prevent possible NULL deref in fib6_nh_init()
    - ipv6: prevent possible NULL dereference in rt6_probe()
    - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
    - netns: Make get_net_ns() handle zero refcount net
    - qca_spi: Make interrupt remembering atomic
    - net/sched: act_api: rely on rcu in tcf_idr_check_alloc
    - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
    - tipc: force a dst refcount before doing decryption
    - net/sched: act_ct: set 'net' pointer when creating new nf_flow_table
    - sched: act_ct: add netns into the key of tcf_ct_flow_table
    - ptp: fix integer overflow in max_vclocks_store
    - net: stmmac: No need to calculate speed divider when offload is disabled
    - virtio_net: checksum offloading handling fix
    - octeontx2-pf: Add error handling to VLAN unoffload handling
    - netfilter: ipset: Fix suspicious rcu_dereference_protected()
    - seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6
      behaviors
    - bnxt_en: Restore PTP tx_avail count in case of skb_pad() error
    - net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings
    - regulator: core: Fix modpost error "regulator_get_regmap" undefined
    - dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
    - dmaengine: ioat: switch from 'pci_' to 'dma_' API
    - dmaengine: ioat: Drop redundant pci_enable_pcie_error_reporting()
    - dmaengine: ioatdma: Fix leaking on version mismatch
    - dmaengine: ioat: use PCI core macros for PCIe Capability
    - dmaengine: ioatdma: Fix error path in ioat3_dma_probe()
    - dmaengine: ioatdma: Fix kmemleak in ioat_pci_probe()
    - dmaengine: ioatdma: Fix missing kmem_cache_destroy()
    - regulator: bd71815: fix ramp values
    - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is
      fine."
    - RDMA/mlx5: Add check for srq max_sge attribute
    - serial: stm32: rework RX over DMA
    - net: do not leave a dangling sk pointer, when socket creation fails
    - btrfs: retry block group reclaim without infinite loop
    - KVM: x86: Always sync PIR to IRR prior to scanning I/O APIC routes
    - ALSA: hda/realtek: Limit mic boost on N14AP7
    - drm/i915/mso: using joiner is not possible with eDP MSO
    - drm/radeon: fix UBSAN warning in kv_dpm.c
    - gcov: add support for GCC 14
    - kcov: don't lose track of remote references during softirqs
    - tcp: clear tp->retrans_stamp in tcp_rcv_fastopen_synack()
    - i2c: ocores: set IACK bit after core is enabled
    - dt-bindings: i2c: google,cros-ec-i2c-tunnel: correct path to i2c-controller
      schema
    - arm64: dts: imx8qm-mek: fix gpio number for reg_usdhc2_vmmc
    - drm/amd/display: revert Exit idle optimizations before HDCP execution
    - perf: script: add raw|disasm arguments to --insn-trace option
    - perf script: Show also errors for --insn-trace option
    - ARM: dts: samsung: smdkv310: fix keypad no-autorepeat
    - ARM: dts: samsung: exynos4412-origen: fix keypad no-autorepeat
    - ARM: dts: samsung: smdk4412: fix keypad no-autorepeat
    - rtlwifi: rtl8192de: Style clean-ups
    - wifi: rtlwifi: rtl8192de: Fix 5 GHz TX power
    - pmdomain: ti-sci: Fix duplicate PD referrals
    - bcache: fix variable length array abuse in btree_iter
    - tracing: Add MODULE_DESCRIPTION() to preemptirq_delay_test
    - x86/cpu/vfm: Add new macros to work with (vendor/family/model) values
    - x86/cpu: Fix x86_match_cpu() to match just X86_VENDOR_INTEL
    - ksmbd: ignore trailing slashes in share paths
    - drm/i915/gt: Only kick the signal worker if there's been an update
    - drm/i915/gt: Disarm breadcrumbs if engines are already idle
    - Revert "kheaders: substituting --sort in archive creation"
    - kheaders: explicitly define file modes for archived headers
    - riscv: mm: init: try best to use IS_ENABLED(CONFIG_64BIT) instead of #ifdef
    - riscv: fix overlap of allocated page and PTR_ERR
    - perf/core: Fix missing wakeup when waiting for context reference
    - PCI: Add PCI_ERROR_RESPONSE and related definitions
    - x86/amd_nb: Check for invalid SMN reads
    - smb: client: fix deadlock in smb2_find_smb_tcon()
    - ACPI: x86: utils: Add Picasso to the list for forcing StorageD3Enable
    - ACPI: x86: Force StorageD3Enable on more products
    - gve: Add RX context.
    - gve: Clear napi->skb before dev_kfree_skb_any()
    - Input: ili210x - fix ili251x_read_touch_data() return value
    - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
    - pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins
    - pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins
    - pinctrl: rockchip: use dedicated pinctrl type for RK3328
    - pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set
    - cifs: fix typo in module parameter enable_gcm_256
    - drm/amdgpu: fix UBSAN warning in kv_dpm.c
    - net: mdio: add helpers to extract clause 45 regad and devad fields
    - net: stmmac: Assign configured channel value to EXTTS event
    - ASoC: fsl-asoc-card: set priv->pdev before using it
    - net: dsa: microchip: fix initial port flush problem
    - ibmvnic: Free any outstanding tx skbs during scrq reset
    - net: phy: micrel: add Microchip KSZ 9477 to the device table
    - xdp: Remove WARN() from __xdp_reg_mem_model()
    - tcp: Use BPF timeout setting for SYN ACK RTO
    - Fix race for duplicate reqsk on identical SYN
    - sparc: fix old compat_sys_select()
    - sparc: fix compat recv/recvfrom syscalls
    - parisc: use correct compat recv/recvfrom syscalls
    - tcp: fix tcp_rcv_fastopen_synack() to enter TCP_CA_Loss for failed TFO
    - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data
      registers
    - bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
    - drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
    - vduse: validate block features only with block devices
    - vduse: Temporarily fail if control queue feature requested
    - x86/fpu: Fix AMD X86_BUG_FXSAVE_LEAK fixup
    - mtd: partitions: redboot: Added conversion of operands to a larger type
    - bpf: Add a check for struct bpf_fib_lookup size
    - RDMA/restrack: Fix potential invalid address access
    - net/iucv: Avoid explicit cpumask var allocation on stack
    - net/dpaa2: Avoid explicit cpumask var allocation on stack
    - crypto: ecdh - explicitly zeroize private_key
    - ALSA: emux: improve patch ioctl data validation
    - media: dvbdev: Initialize sbuf
    - soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message
    - drm/radeon/radeon_display: Decrease the size of allocated memory
    - nvme: fixup comment for nvme RDMA Provider Type
    - drm/panel: simple: Add missing display timing flags for KOE TX26D202VM0BWA
    - gpio: davinci: Validate the obtained number of IRQs
    - gpiolib: cdev: Disallow reconfiguration without direction (uAPI v1)
    - x86: stop playing stack games in profile_pc()
    - parisc: use generic sys_fanotify_mark implementation
    - ocfs2: fix DIO failure due to insufficient transaction credits
    - mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos
    - mmc: sdhci: Do not invert write-protect twice
    - mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro()
    - i2c: testunit: don't erase registers after STOP
    - i2c: testunit: discard write requests while old command is running
    - iio: adc: ad7266: Fix variable checking bug
    - iio: accel: fxls8962af: select IIO_BUFFER & IIO_KFIFO_BUF
    - iio: chemical: bme680: Fix pressure value output
    - iio: chemical: bme680: Fix calibration data variable
    - iio: chemical: bme680: Fix overflows in compensate() functions
    - iio: chemical: bme680: Fix sensor data read operation
    - net: usb: ax88179_178a: improve link status logs
    - usb: gadget: printer: SS+ support
    - usb: gadget: printer: fix races against disable
    - usb: musb: da8xx: fix a resource leak in probe()
    - usb: atm: cxacru: fix endpoint checking in cxacru_bind()
    - usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to
      avoid deadlock
    - serial: 8250_omap: Implementation of Errata i2310
    - tty: mcf: MCF54418 has 10 UARTS
    - net: can: j1939: Initialize unused data in j1939_send_one()
    - net: can: j1939: recover socket queue on CAN bus error during BAM
      transmission
    - net: can: j1939: enhanced error handling for tightly received RTS messages
      in xtp_rx_rts_session_new
    - cpu/hotplug: Fix dynstate assignment in __cpuhp_setup_state_cpuslocked()
    - kbuild: Install dtb files as 0644 in Makefile.dtbinst
    - sh: rework sync_file_range ABI
    - csky, hexagon: fix broken sys_sync_file_range
    - hexagon: fix fadvise64_64 calling conventions
    - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
    - drm/amdgpu: avoid using null object of framebuffer
    - drm/i915/gt: Fix potential UAF by revoke of fence registers
    - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
    - batman-adv: Don't accept TT entries for out-of-spec VIDs
    - ata: ahci: Clean up sysfs file on error
    - ata: libata-core: Fix double free on error
    - ftruncate: pass a signed offset
    - syscalls: fix compat_sys_io_pgetevents_time64 usage
    - syscalls: fix sys_fanotify_mark prototype
    - pwm: stm32: Refuse too small period requests
    - nfs: Leave pages in the pagecache if readpage failed
    - drivers: fix typo in firmware/efi/memmap.c
    - efi: Correct comment on efi_memmap_alloc
    - efi: memmap: Move manipulation routines into x86 arch tree
    - efi: xen: Set EFI_PARAVIRT for Xen dom0 boot on all architectures
    - efi/x86: Free EFI memory map only when installing a new one.
    - KVM: arm64: vgic-v4: Make the doorbell request robust w.r.t preemption
    - ARM: dts: rockchip: rk3066a: add #sound-dai-cells to hdmi node
    - arm64: dts: rockchip: fix PMIC interrupt pin on ROCK Pi E
    - arm64: dts: rockchip: Add sound-dai-cells for RK3368
    - serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
    - tracing/net_sched: NULL pointer dereference in perf_trace_qdisc_reset()
    - Linux 5.15.162
  * Fix L2CAP/LE/CPU/BI-02-C bluetooth certification failure  (LP: #2072858) //
    Jammy update: v5.15.162 upstream stable release (LP: #2073765)
    - Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ
  * net/sched: Fix conntrack use-after-free (LP: #2073092)
    - net/sched: Fix UAF when resolving a clash
  * Jammy update: v5.15.161 upstream stable release (LP: #2072617)
    - x86/tsc: Trust initial offset in architectural TSC-adjust MSRs
    - tty: n_gsm: fix missing receive state reset after mode switch
    - speakup: Fix sizeof() vs ARRAY_SIZE() bug
    - serial: 8250_bcm7271: use default_mux_rate if possible
    - Revert "r8169: don't try to disable interrupts if NAPI is, scheduled
      already"
    - r8169: Fix possible ring buffer corruption on fragmented Tx packets.
    - ring-buffer: Fix a race between readers and resize checks
    - tools/latency-collector: Fix -Wformat-security compile warns
    - net: smc91x: Fix m68k kernel compilation for ColdFire CPU
    - nilfs2: fix unexpected freezing of nilfs_segctor_sync()
    - nilfs2: fix potential hang in nilfs_detach_log_writer()
    - fs/ntfs3: Remove max link count info display during driver init
    - fs/ntfs3: Taking DOS names into account during link counting
    - fs/ntfs3: Fix case when index is reused during tree transformation
    - fs/ntfs3: Break dir enumeration if directory contents error
    - ALSA: core: Fix NULL module pointer assignment at card init
    - wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt
      class
    - dt-bindings: rockchip: grf: Add missing type to 'pcie-phy' node
    - net: usb: qmi_wwan: add Telit FN920C04 compositions
    - drm/amd/display: Set color_mgmt_changed to true on unsuspend
    - selftests: sud_test: return correct emulated syscall value on RISC-V
    - regulator: irq_helpers: duplicate IRQ name
    - ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating
    - ASoC: dt-bindings: rt5645: add cbj sleeve gpio property
    - regulator: vqmmc-ipq4019: fix module autoloading
    - ASoC: rt715: add vendor clear control register
    - ASoC: rt715-sdca: volume step modification
    - softirq: Fix suspicious RCU usage in __do_softirq()
    - ASoC: da7219-aad: fix usage of device_get_named_child_node()
    - drm/amdkfd: Flush the process wq before creating a kfd_process
    - x86/mm: Remove broken vsyscall emulation code from the page fault code
    - nvme: find numa distance only if controller has valid numa id
    - epoll: be better about file lifetimes
    - openpromfs: finish conversion to the new mount API
    - crypto: bcm - Fix pointer arithmetic
    - mm/slub, kunit: Use inverted data to corrupt kmem cache
    - firmware: raspberrypi: Use correct device for DMA mappings
    - ecryptfs: Fix buffer size for tag 66 packet
    - nilfs2: fix out-of-range warning
    - parisc: add missing export of __cmpxchg_u8()
    - crypto: ccp - drop platform ifdef checks
    - crypto: x86/nh-avx2 - add missing vzeroupper
    - crypto: x86/sha256-avx2 - add missing vzeroupper
    - crypto: x86/sha512-avx2 - add missing vzeroupper
    - s390/cio: fix tracepoint subchannel type field
    - jffs2: prevent xattr node from overflowing the eraseblock
    - soc: mediatek: cmdq: Fix typo of CMDQ_JUMP_RELATIVE
    - null_blk: Fix missing mutex_destroy() at module removal
    - md: fix resync softlockup when bitmap size is less than array size
    - wifi: ath10k: poll service ready message before failing
    - x86/boot: Ignore relocations in .notes sections in walk_relocs() too
    - sched/fair: Add EAS checks before updating root_domain::overutilized
    - qed: avoid truncating work queue length
    - bpf: Pack struct bpf_fib_lookup
    - scsi: ufs: qcom: Perform read back after writing reset bit
    - scsi: ufs: qcom: Perform read back after writing REG_UFS_SYS1CLK_1US
    - scsi: ufs: ufs-qcom: Fix the Qcom register name for offset 0xD0
    - scsi: ufs: ufs-qcom: Clear qunipro_g4_sel for HW version major 5
    - scsi: ufs: qcom: Perform read back after writing unipro mode
    - scsi: ufs: qcom: Perform read back after writing CGC enable
    - scsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV
    - scsi: ufs: core: Perform read back after disabling interrupts
    - scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL
    - irqchip/alpine-msi: Fix off-by-one in allocation error path
    - irqchip/loongson-pch-msi: Fix off-by-one on allocation error path
    - ACPI: disable -Wstringop-truncation
    - gfs2: Don't forget to complete delayed withdraw
    - gfs2: Fix "ignore unlock failures after withdraw"
    - selftests/bpf: Fix umount cgroup2 error in test_sockmap
    - cpufreq: Reorganize checks in cpufreq_offline()
    - cpufreq: Split cpufreq_offline()
    - cpufreq: Rearrange locking in cpufreq_remove_dev()
    - cpufreq: exit() callback is optional
    - net: export inet_lookup_reuseport and inet6_lookup_reuseport
    - net: remove duplicate reuseport_lookup functions
    - udp: Avoid call to compute_score on multiple sites
    - cppc_cpufreq: Fix possible null pointer dereference
    - scsi: libsas: Fix the failure of adding phy with zero-address to port
    - scsi: hpsa: Fix allocation size for Scsi_Host private data
    - x86/purgatory: Switch to the position-independent small code model
    - thermal/drivers/tsens: Fix null pointer dereference
    - wifi: ath10k: Fix an error code problem in
      ath10k_dbg_sta_write_peer_debug_trigger()
    - wifi: ath10k: populate board data for WCN3990
    - net: dsa: mv88e6xxx: Add support for model-specific pre- and post-reset
      handlers
    - net: dsa: mv88e6xxx: Avoid EEPROM timeout without EEPROM on 88E6250-family
      switches
    - tcp: avoid premature drops in tcp_add_backlog()
    - pwm: sti: Convert to platform remove callback returning void
    - pwm: sti: Prepare removing pwm_chip from driver data
    - pwm: sti: Simplify probe function using devm functions
    - net: give more chances to rcu in netdev_wait_allrefs_any()
    - macintosh/via-macii: Fix "BUG: sleeping function called from invalid
      context"
    - wifi: carl9170: add a proper sanity check for endpoints
    - wifi: ar5523: enable proper endpoint verification
    - sh: kprobes: Merge arch_copy_kprobe() into arch_prepare_kprobe()
    - Revert "sh: Handle calling csum_partial with misaligned data"
    - selftests/binderfs: use the Makefile's rules, not Make's implicit rules
    - selftests/resctrl: fix clang build failure: use LOCAL_HDRS
    - HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors
    - scsi: bfa: Ensure the copied buf is NUL terminated
    - scsi: qedf: Ensure the copied buf is NUL terminated
    - scsi: qla2xxx: Fix debugfs output for fw_resource_count
    - wifi: mwl8k: initialize cmd->addr[] properly
    - usb: aqc111: stop lying about skb->truesize
    - net: usb: sr9700: stop lying about skb->truesize
    - m68k: Fix spinlock race in kernel thread creation
    - m68k: mac: Fix reboot hang on Mac IIci
    - net: ipv6: fix wrong start position when receive hop-by-hop fragment
    - eth: sungem: remove .ndo_poll_controller to avoid deadlocks
    - net: ethernet: cortina: Locking fixes
    - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
    - net: usb: smsc95xx: stop lying about skb->truesize
    - net: openvswitch: fix overwriting ct original tuple for ICMPv6
    - ipv6: sr: add missing seg6_local_exit
    - ipv6: sr: fix incorrect unregister order
    - ipv6: sr: fix invalid unregister error path
    - net/mlx5: Discard command completions in internal error
    - s390/bpf: Emit a barrier for BPF_FETCH instructions
    - mptcp: SO_KEEPALIVE: fix getsockopt support
    - printk: Let no_printk() use _printk()
    - dev_printk: Add and use dev_no_printk()
    - drm/amd/display: Fix potential index out of bounds in color transformation
      function
    - ASoC: Intel: Disable route checks for Skylake boards
    - mtd: core: Report error if first mtd_otp_size() call fails in
      mtd_otp_nvmem_add()
    - mtd: rawnand: hynix: fixed typo
    - fbdev: shmobile: fix snprintf truncation
    - ASoC: kirkwood: Fix potential NULL dereference
    - drm/meson: vclk: fix calculation of 59.94 fractional rates
    - drm/mediatek: Add 0 size check to mtk_drm_gem_obj
    - powerpc/fsl-soc: hide unused const variable
    - fbdev: sisfb: hide unused variables
    - media: ngene: Add dvb_ca_en50221_init return value check
    - media: radio-shark2: Avoid led_names truncations
    - drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
    - media: ipu3-cio2: Use temporary storage for struct device pointer
    - media: ipu3-cio2: Request IRQ earlier
    - media: dt-bindings: ovti,ov2680: Fix the power supply names
    - fbdev: sh7760fb: allow modular build
    - media: atomisp: ssh_css: Fix a null-pointer dereference in
      load_video_binaries
    - drm/arm/malidp: fix a possible null pointer dereference
    - drm: vc4: Fix possible null pointer dereference
    - ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value
    - drm/bridge: lt8912b: Don't log an error when DSI host can't be found
    - drm/bridge: lt9611: Don't log an error when DSI host can't be found
    - drm/bridge: tc358775: Don't log an error when DSI host can't be found
    - drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector
    - drm/mipi-dsi: use correct return type for the DSC functions
    - RDMA/mlx5: Adding remote atomic access flag to updatable flags
    - RDMA/hns: Fix return value in hns_roce_map_mr_sg
    - RDMA/hns: Fix deadlock on SRQ async events.
    - RDMA/hns: Fix GMV table pagesize
    - RDMA/hns: Use complete parentheses in macros
    - RDMA/hns: Modify the print level of CQE error
    - clk: qcom: mmcc-msm8998: fix venus clock issue
    - x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map
    - ext4: avoid excessive credit estimate in ext4_tmpfile()
    - virt: acrn: Prefer array_size and struct_size over open coded arithmetic
    - virt: acrn: stop using follow_pfn
    - drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map()
    - sunrpc: removed redundant procp check
    - ext4: simplify calculation of blkoff in ext4_mb_new_blocks_simple
    - ext4: fix unit mismatch in ext4_mb_new_blocks_simple
    - ext4: try all groups in ext4_mb_new_blocks_simple
    - ext4: remove unused parameter from ext4_mb_new_blocks_simple()
    - ext4: fix potential unnitialized variable
    - SUNRPC: Fix gss_free_in_token_pages()
    - selftests/kcmp: Make the test output consistent and clear
    - selftests/kcmp: remove unused open mode
    - RDMA/IPoIB: Fix format truncation compilation errors
    - selftests: net: bridge: increase IGMP/MLD exclude timeout membership
      interval
    - net: qrtr: ns: Fix module refcnt
    - netrom: fix possible dead-lock in nr_rt_ioctl()
    - af_packet: do not call packet_read_pending() from tpacket_destruct_skb()
    - sched/fair: Allow disabling sched_balance_newidle with
      sched_relax_domain_level
    - sched/core: Fix incorrect initialization of the 'burst' parameter in
      cpu_max_write()
    - greybus: lights: check return of get_channel_from_mode
    - f2fs: Delete f2fs_copy_page() and replace with memcpy_page()
    - f2fs: fix to wait on page writeback in __clone_blkaddrs()
    - soundwire: cadence: fix invalid PDI offset
    - dmaengine: idma64: Add check for dma_set_max_seg_size
    - firmware: dmi-id: add a release callback function
    - serial: max3100: Lock port->lock when calling uart_handle_cts_change()
    - serial: max3100: Update uart_driver_registered on driver removal
    - serial: max3100: Fix bitwise types
    - greybus: arche-ctrl: move device table to its right location
    - PCI: tegra194: Fix probe path for Endpoint mode
    - serial: sc16is7xx: add proper sched.h include for sched_set_fifo()
    - dt-bindings: PCI: rcar-pci-host: Add optional regulators
    - dt-bindings: PCI: rcar-pci-host: Add missing IOMMU properties
    - f2fs: compress: fix to relocate check condition in
      f2fs_{release,reserve}_compress_blocks()
    - f2fs: convert to use sbi directly
    - f2fs: compress: fix to relocate check condition in
      f2fs_ioc_{,de}compress_file()
    - f2fs: do not allow partial truncation on pinned file
    - f2fs: fix typos in comments
    - f2fs: fix to relocate check condition in f2fs_fallocate()
    - f2fs: fix to check pinfile flag in f2fs_move_file_range()
    - coresight: etm4x: Fix unbalanced pm_runtime_enable()
    - iio: pressure: dps310: support negative temperature values
    - coresight: etm4x: Do not hardcode IOMEM access for register restore
    - coresight: etm4x: Do not save/restore Data trace control registers
    - coresight: no-op refactor to make INSTP0 check more idiomatic
    - coresight: etm4x: Cleanup TRCIDR0 register accesses
    - coresight: etm4x: Safe access for TRCQCLTR
    - coresight: etm4x: Fix access to resource selector registers
    - fpga: region: Use standard dev_release for class driver
    - fpga: region: add owner module and take its refcount
    - microblaze: Remove gcc flag for non existing early_printk.c file
    - microblaze: Remove early printk call from cpuinfo-static.c
    - dt-bindings: pinctrl: mediatek: mt7622: fix array properties
    - watchdog: bd9576_wdt: switch to using devm_fwnode_gpiod_get()
    - watchdog: bd9576: Drop "always-running" property
    - usb: gadget: u_audio: Clear uac pointer when freed.
    - stm class: Fix a double free in stm_register_device()
    - ppdev: Remove usage of the deprecated ida_simple_xx() API
    - ppdev: Add an error check in register_device
    - extcon: max8997: select IRQ_DOMAIN instead of depending on it
    - PCI/EDR: Align EDR_PORT_DPC_ENABLE_DSM with PCI Firmware r3.3
    - PCI/EDR: Align EDR_PORT_LOCATE_DSM with PCI Firmware r3.3
    - f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem
      lock
    - f2fs: fix to release node block count in error path of f2fs_new_node_page()
    - f2fs: compress: don't allow unaligned truncation on released compress inode
    - serial: sh-sci: protect invalidating RXDMA on shutdown
    - libsubcmd: Fix parse-options memory leak
    - s390/vdso: filter out mno-pic-data-is-text-relative cflag
    - s390/vdso64: filter out munaligned-symbols flag for vdso
    - s390/vdso: Generate unwind information for C modules
    - s390/vdso: Use standard stack frame layout
    - s390/ipl: Fix incorrect initialization of len fields in nvme reipl block
    - s390/ipl: Fix incorrect initialization of nvme dump block
    - s390/boot: Remove alt_stfle_fac_list from decompressor
    - Input: ims-pcu - fix printf string overflow
    - Input: ioc3kbd - convert to platform remove callback returning void
    - Input: ioc3kbd - add device table
    - mmc: sdhci_am654: Add tuning algorithm for delay chain
    - mmc: sdhci_am654: Write ITAPDLY for DDR52 timing
    - mmc: sdhci_am654: Drop lookup for deprecated ti,otap-del-sel
    - mmc: sdhci_am654: Add OTAP/ITAP delay enable
    - mmc: sdhci_am654: Add ITAPDLYSEL in sdhci_j721e_4bit_set_clock
    - mmc: sdhci_am654: Fix ITAPDLY for HS400 timing
    - Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation
    - drm/msm/dsi: Print dual-DSI-adjusted pclk instead of original mode pclk
    - drm/msm/dpu: Always flush the slave INTF on the CTL
    - um: Fix return value in ubd_init()
    - um: vector: fix bpfflash parameter evaluation
    - fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
    - fs/ntfs3: Use variable length array instead of fixed size
    - drm/bridge: tc358775: fix support for jeida-18 and jeida-24
    - media: stk1160: fix bounds checking in stk1160_copy_video()
    - scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy()
    - Input: cyapa - add missing input core locking to suspend/resume functions
    - media: flexcop-usb: clean up endpoint sanity checks
    - media: flexcop-usb: fix sanity check of bNumEndpoints
    - powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp
    - um: Fix the -Wmissing-prototypes warning for __switch_mm
    - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh
    - media: cec: cec-api: add locking in cec_release()
    - media: cec: call enable_adap on s_log_addrs
    - media: cec: abort if the current transmit was canceled
    - media: cec: correctly pass on reply results
    - media: cec: use call_op and check for !unregistered
    - media: cec-adap.c: drop activate_cnt, use state info instead
    - media: cec: core: avoid recursive cec_claim_log_addrs
    - media: cec: core: avoid confusing "transmit timed out" message
    - null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION()
    - ASoC: mediatek: mt8192: fix register configuration for tdm
    - regulator: bd71828: Don't overwrite runtime voltages
    - x86/kconfig: Select ARCH_WANT_FRAME_POINTERS again when
      UNWINDER_FRAME_POINTER=y
    - [Config] Update CONFIG_ARCH_WANT_FRAME_POINTERS
    - net: Always descend into dsa/ folder with CONFIG_NET_DSA enabled
    - ipv6: sr: fix missing sk_buff release in seg6_input_core
    - nfc: nci: Fix uninit-value in nci_rx_work
    - ASoC: tas2552: Add TX path for capturing AUDIO-OUT data
    - NFSv4: Fixup smatch warning for ambiguous return
    - sunrpc: fix NFSACL RPC retry on soft mount
    - rpcrdma: fix handling for RDMA_CM_EVENT_DEVICE_REMOVAL
    - af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock.
    - ipv6: sr: fix memleak in seg6_hmac_init_algo
    - tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
    - openvswitch: Set the skbuff pkt_type for proper pmtud support.
    - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
    - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
    - riscv: stacktrace: Make walk_stackframe cross pt_regs frame
    - riscv: stacktrace: fixed walk_stackframe()
    - net: fec: avoid lock evasion when reading pps_enable
    - tls: fix missing memory barrier in tls_init
    - nfc: nci: Fix kcov check in nci_rx_work()
    - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
    - ice: Interpret .set_channels() input differently
    - netfilter: nfnetlink_queue: acquire rcu_read_lock() in
      instance_destroy_rcu()
    - netfilter: nft_payload: restore vlan q-in-q match support
    - spi: Don't mark message DMA mapped when no transfer in it is
    - dma-mapping: benchmark: fix node id validation
    - dma-mapping: benchmark: handle NUMA_NO_NODE correctly
    - nvmet: fix ns enable/disable possible hang
    - net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8061
    - net/mlx5e: Fix IPsec tunnel mode offload feature check
    - net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer
      exhaustion
    - dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
    - bpf: Fix potential integer overflow in resolve_btfids
    - enic: Validate length of nl attributes in enic_set_vf_port
    - net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM
    - bpf: Allow delete from sockmap/sockhash only if update is allowed
    - net:fec: Add fec_enet_deinit()
    - netfilter: nft_payload: move struct nft_payload_set definition where it
      belongs
    - netfilter: nft_payload: rebuild vlan header when needed
    - netfilter: nft_payload: rebuild vlan header on h_proto access
    - netfilter: nft_payload: skbuff vlan metadata mangle support
    - netfilter: tproxy: bail out if IP has been disabled on the device
    - kconfig: fix comparison to constant symbols, 'm', 'n'
    - spi: stm32: Don't warn about spurious interrupts
    - net: ena: Add capabilities field with support for ENI stats capability
    - net: ena: Extract recurring driver reset code into a function
    - net: ena: Do not waste napi skb cache
    - net: ena: Add dynamic recycling mechanism for rx buffers
    - net: ena: Reduce lines with longer column width boundary
    - net: ena: Fix redundant device NUMA node override
    - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
    - hwmon: (shtc1) Fix property misspelling
    - ALSA: timer: Set lower bound of start tick time
    - KVM: x86: Don't advertise guest.MAXPHYADDR as host.MAXPHYADDR in CPUID
    - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
    - net: ena: Fix DMA syncing in XDP path when SWIOTLB is on
    - media: cec: core: add adap_nb_transmit_canceled() callback
    - SUNRPC: Fix loop termination condition in gss_free_in_token_pages()
    - drm: Check output polling initialized before disabling
    - drm: Check polling initialized before enabling in
      drm_helper_probe_single_connector_modes
    - mmc: core: Do not force a retune before RPMB switch
    - io_uring: fail NOP if non-zero op flags is passed in
    - afs: Don't cross .backup mountpoint from backup volume
    - nilfs2: fix use-after-free of timer for log writer thread
    - mptcp: fix full TCP keep-alive support
    - vxlan: Fix regression when dropping packets due to invalid src addresses
    - net: dsa: sja1105: always enable the INCL_SRCPT option
    - net: dsa: tag_sja1105: always prefer source port information from INCL_SRCPT
    - scripts/gdb: fix SB_* constants parsing
    - sunrpc: exclude from freezer when waiting for requests:
    - f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
    - media: lgdt3306a: Add a check against null-pointer-def
    - drm/amdgpu: add error handle to avoid out-of-bounds
    - ata: pata_legacy: make legacy_exit() work again
    - thermal/drivers/qcom/lmh: Check for SCM availability at probe
    - soc: qcom: rpmh-rsc: Enhance check for VRM in-flight request
    - ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx
    - arm64: tegra: Correct Tegra132 I2C alias
    - arm64: dts: qcom: qcs404: fix bluetooth device address
    - md/raid5: fix deadlock that raid5d() wait for itself to clear
      MD_SB_CHANGE_PENDING
    - wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU
    - wifi: rtlwifi: rtl8192de: Fix low speed with WPA3-SAE
    - wifi: rtlwifi: rtl8192de: Fix endianness issue in RX path
    - arm64: dts: hi3798cv200: fix the size of GICR
    - media: mc: mark the media devnode as registered from the, start
    - media: mxl5xx: Move xpt structures off stack
    - media: v4l2-core: hold videodev_lock until dev reg, finishes
    - mmc: core: Add mmc_gpiod_set_cd_config() function
    - mmc: sdhci-acpi: Sort DMI quirks alphabetically
    - mmc: sdhci-acpi: Fix Lenovo Yoga Tablet 2 Pro 1380 sdcard slot not working
    - mmc: sdhci-acpi: Disable write protect detection on Toshiba WT10-A
    - fbdev: savage: Handle err return when savagefb_check_var failed
    - drm/amdgpu/atomfirmware: add intergrated info v2.3 table
    - KVM: arm64: Fix AArch32 register narrowing on userspace write
    - KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode
    - crypto: ecdsa - Fix module auto-load on add-key
    - crypto: ecrdsa - Fix module auto-load on add_key
    - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
    - net/ipv6: Fix route deleting failure when metric equals 0
    - net/9p: fix uninit-value in p9_client_rpc()
    - intel_th: pci: Add Meteor Lake-S CPU support
    - sparc64: Fix number of online CPUs
    - watchdog: rti_wdt: Set min_hw_heartbeat_ms to accommodate a safety margin
    - kdb: Fix buffer overflow during tab-complete
    - kdb: Use format-strings rather than '0' injection in kdb_read()
    - kdb: Fix console handling when editing and tab-completing commands
    - kdb: Merge identical case statements in kdb_read()
    - kdb: Use format-specifiers rather than memset() for padding in kdb_read()
    - net: fix __dst_negative_advice() race
    - sparc: move struct termio to asm/termios.h
    - ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow
    - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
    - s390/ap: Fix crash in AP internal function modify_bitmap()
    - s390/cpacf: Split and rework cpacf query functions
    - s390/cpacf: Make use of invalid opcode produce a link error
    - i3c: master: svc: fix invalidate IBI type and miss call client IBI handler
    - EDAC/igen6: Convert PCIBIOS_* return codes to errnos
    - nfs: fix undefined behavior in nfs_block_bits()
    - NFS: Fix READ_PLUS when server doesn't support OP_READ_PLUS
    - scsi: ufs: ufs-qcom: Clear qunipro_g4_sel for HW major version > 5
    - Linux 5.15.161
  * Virtualbox Guru meditation on VM start caused by kernel commit in v6.9-rc4
    (LP: #2073267)
    - SAUCE: Revert "randomize_kstack: Improve entropy diffusion"
  * CVE-2024-26921
    - inet: inet_defrag: prevent sk release while still in use
  * Jammy update: v5.15.162 upstream stable release (LP: #2073765) //
    CVE-2024-39484
    - mmc: davinci: Don't strip remove function when driver is builtin
  * CVE-2024-39292
    - um: Add winch to winch_handlers before registering winch IRQ
  * CVE-2024-36901
    - ipv6: prevent NULL dereference in ip6_output()
  * CVE-2024-26830
    - i40e: Do not allow untrusted VF to remove administratively set MAC
  * CVE-2024-26680
    - net: atlantic: Fix DMA mapping for PTP hwts ring
  * CVE-2023-52760
    - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc
  * CVE-2023-52629
    - sh: push-switch: Reorder cleanup operations to avoid use-after-free bug

 -- Jian Hui Lee <jianhui.lee@canonical.com>  Wed, 16 Oct 2024 12:07:03 +0800

linux-mtk (5.15.0-1034.40) jammy; urgency=medium

  * jammy/linux-mtk: 5.15.0-1034.40 -proposed tracker (LP: #2082876)

  *  [g1200] regulators not enabled after sru d2024.08.12    (LP: #2082868)
    - SAUCE: (no-up) regulator: mt6360: fix compatibility issue for downstream
      device tree
    - SAUCE: (no-up) power: supply: mt6360_charger: fix compatibility issue for
      downstream device tree

  *  [uc22][g700] systemd-backlight@backlight:1c008000.dsi0.0.service loaded
    failed during cold boot stress test  (LP: #2078763)
    - [Config] CONFIG_DRM_MEDIATEK_HDMI=y and CONFIG_PHY_MTK_HDMI=y

  * [g510][g700] add fsource device tree node (LP: #2078762)
    - SAUCE: (no-up) GENIO: arm64: dts: mediatek: genio-700-evk/genio-510-evk: add
      fsource device tree node

  [ Ubuntu: 5.15.0-119.129 ]

  * jammy/linux: 5.15.0-119.129 -proposed tracker (LP: #2075665)
  * Virtualbox Guru meditation on VM start caused by kernel commit in v6.9-rc4
    (LP: #2073267)
    - SAUCE: Revert "randomize_kstack: Improve entropy diffusion"
  * CVE-2024-26921
    - inet: inet_defrag: prevent sk release while still in use
  * Jammy update: v5.15.162 upstream stable release (LP: #2073765) //
    CVE-2024-39484
    - mmc: davinci: Don't strip remove function when driver is builtin
  * Jammy update: v5.15.162 upstream stable release (LP: #2073765)
    - mmc: davinci_mmc: Convert to platform remove callback returning void
  * CVE-2024-39292
    - um: Add winch to winch_handlers before registering winch IRQ
  * CVE-2024-36901
    - ipv6: prevent NULL dereference in ip6_output()
  * CVE-2024-26830
    - i40e: Do not allow untrusted VF to remove administratively set MAC
  * CVE-2024-26680
    - net: atlantic: Fix DMA mapping for PTP hwts ring
  * CVE-2023-52760
    - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc
  * CVE-2023-52629
    - sh: push-switch: Reorder cleanup operations to avoid use-after-free bug

  [ Ubuntu: 5.15.0-118.128 ]

  * jammy/linux: 5.15.0-118.128 -proposed tracker (LP: #2072255)
  * Jammy update: v5.15.160 upstream stable release (LP: #2070292)
    - drm/amd/display: Fix division by zero in setup_dsc_config
    - pinctrl: core: handle radix_tree_insert() errors in
      pinctrl_register_one_pin()
    - nfsd: don't allow nfsd threads to be signalled.
    - KEYS: trusted: Fix memory leak in tpm2_key_encode()
    - Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
    - net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
    - net: bcmgenet: synchronize UMAC_CMD access
    - netlink: annotate lockless accesses to nlk->max_recvmsg_len
    - netlink: annotate data-races around sk->sk_err
    - KVM: x86: Clear "has_error_code", not "error_code", for RM exception
      injection
    - drm/amdgpu: Fix possible NULL dereference in
      amdgpu_ras_query_error_status_helper()
    - binder: fix max_thread type inconsistency
    - usb: typec: ucsi: displayport: Fix potential deadlock
    - serial: kgdboc: Fix NMI-safety problems from keyboard reset code
    - remoteproc: mediatek: Make sure IPI buffer fits in L2TCM
    - KEYS: trusted: Do not use WARN when encode fails
    - admin-guide/hw-vuln/core-scheduling: fix return type of PR_SCHED_CORE_GET
    - docs: kernel_include.py: Cope with docutils 0.21
    - Linux 5.15.160
  * Jammy update: v5.15.159 upstream stable release (LP: #2070028)
    - dmaengine: pl330: issue_pending waits until WFP state
    - dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state"
    - wifi: nl80211: don't free NULL coalescing rule
    - ksmbd: fix slab-out-of-bounds in smb2_allocate_rsp_buf
    - ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
    - ksmbd: clear RENAME_NOREPLACE before calling vfs_rename
    - eeprom: at24: Use dev_err_probe for nvmem register failure
    - eeprom: at24: Probe for DDR3 thermal sensor in the SPD case
    - eeprom: at24: fix memory corruption race condition
    - pinctrl: pinctrl-aspeed-g6: Fix register offset for pinconf of GPIOR-T
    - pinctrl/meson: fix typo in PDM's pin name
    - pinctrl: core: delete incorrect free in pinctrl_enable()
    - pinctrl: mediatek: paris: Rework mtk_pinconf_{get,set} switch/case logic
    - pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback
    - pinctrl: mediatek: paris: Rework support for
      PIN_CONFIG_{INPUT,OUTPUT}_ENABLE
    - sunrpc: add a struct rpc_stats arg to rpc_create_args
    - nfs: expose /proc/net/sunrpc/nfs in net namespaces
    - nfs: make the rpc_stat per net namespace
    - nfs: Handle error of rpc_proc_register() in nfs_net_init().
    - power: rt9455: hide unused rt9455_boost_voltage_values
    - power: supply: mt6360_charger: Fix of_match for usb-otg-vbus regulator
    - pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
    - regulator: mt6360: De-capitalize devicetree regulator subnodes
    - bpf, kconfig: Fix DEBUG_INFO_BTF_MODULES Kconfig definition
    - bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
    - bpf: Fix a verifier verbose message
    - spi: hisi-kunpeng: Delete the dump interface of data registers in debugfs
    - s390/mm: Fix storage key clearing for guest huge pages
    - s390/mm: Fix clearing storage keys for huge pages
    - xdp: Move conversion to xdp_frame out of map functions
    - xdp: Add xdp_do_redirect_frame() for pre-computed xdp_frames
    - xdp: use flags field to disambiguate broadcast redirect
    - bna: ensure the copied buf is NUL terminated
    - octeontx2-af: avoid off-by-one read from userspace
    - nsh: Restore skb->{protocol,data,mac_header} for outer header in
      nsh_gso_segment().
    - net l2tp: drop flow hash on forward
    - s390/vdso: Add CFI for RA register to asm macro vdso_func
    - net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
    - net: qede: use return from qede_parse_flow_attr() for flower
    - net: qede: use return from qede_parse_flow_attr() for flow_spec
    - net: qede: use return from qede_parse_actions()
    - ASoC: meson: axg-fifo: use FIELD helpers
    - ASoC: meson: axg-fifo: use threaded irq to check periods
    - ASoC: meson: axg-card: make links nonatomic
    - ASoC: meson: axg-tdm-interface: manage formatters in trigger
    - ASoC: meson: cards: select SND_DYNAMIC_MINORS
    - ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node()
    - s390/cio: Ensure the copied buf is NUL terminated
    - cxgb4: Properly lock TX queue for the selftest.
    - net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
    - net: bridge: fix multicast-to-unicast with fraglist GSO
    - net: core: reject skb_copy(_expand) for fraglist GSO skbs
    - tipc: fix a possible memleak in tipc_buf_append
    - s390/qeth: don't keep track of Input Queue count
    - s390/qeth: Fix kernel panic after setting hsuid
    - drm/panel: ili9341: Respect deferred probe
    - drm/panel: ili9341: Use predefined error codes
    - net: gro: add flush check in udp_gro_receive_segment
    - clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
    - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
    - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
    - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
    - scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
    - scsi: lpfc: Replace hbalock with ndlp lock in lpfc_nvme_unregister_port()
    - gfs2: Fix invalid metadata access in punch_hole
    - wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
    - wifi: cfg80211: fix rdev_dump_mpp() arguments order
    - net: mark racy access on sk->sk_rcvbuf
    - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
    - btrfs: return accurate error code on open failure in open_fs_devices()
    - kbuild: Disable KCSAN for autogenerated *.mod.c intermediaries
    - ALSA: line6: Zero-initialize message buffers
    - net: bcmgenet: Reset RBUF on first open
    - ata: sata_gemini: Check clk_enable() result
    - firewire: ohci: mask bus reset interrupts between ISR and bottom half
    - tools/power turbostat: Fix added raw MSR output
    - tools/power turbostat: Fix Bzy_MHz documentation typo
    - btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
    - btrfs: always clear PERTRANS metadata during commit
    - scsi: target: Fix SELinux error when systemd-modules loads the target module
    - blk-iocost: avoid out of bounds shift
    - gpu: host1x: Do not setup DMA for virtual devices
    - MIPS: scall: Save thread_info.syscall unconditionally on entry
    - selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
    - iommu: mtk: fix module autoloading
    - fs/9p: only translate RWX permissions for plain 9P2000
    - fs/9p: translate O_TRUNC into OTRUNC
    - 9p: explicitly deny setlease attempts
    - gpio: wcove: Use -ENOTSUPP consistently
    - gpio: crystalcove: Use -ENOTSUPP consistently
    - clk: Don't hold prepare_lock when calling kref_put()
    - fs/9p: drop inodes immediately on non-.L too
    - drm/nouveau/dp: Don't probe eDP ports twice harder
    - net:usb:qmi_wwan: support Rolling modules
    - bpf, sockmap: TCP data stall on recv before accept
    - bpf, sockmap: Handle fin correctly
    - bpf, sockmap: Convert schedule_work into delayed_work
    - bpf, sockmap: Reschedule is now done through backlog
    - bpf, sockmap: Improved check for empty queue
    - qibfs: fix dentry leak
    - xfrm: Preserve vlan tags for transport mode software GRO
    - ARM: 9381/1: kasan: clear stale stack poison
    - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
    - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
    - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
    - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
    - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
    - hwmon: (corsair-cpro) Use a separate buffer for sending commands
    - hwmon: (corsair-cpro) Use complete_all() instead of complete() in
      ccp_raw_event()
    - hwmon: (corsair-cpro) Protect ccp->wait_input_report with a spinlock
    - phonet: fix rtm_phonet_notify() skb allocation
    - net: bridge: fix corrupted ethernet header on multicast-to-unicast
    - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
    - net: hns3: PF support get unicast MAC address space assigned by firmware
    - net: hns3: using user configure after hardware reset
    - net: hns3: add log for workqueue scheduled late
    - net: hns3: add query vf ring and vector map relation
    - net: hns3: refactor function hclge_mbx_handler()
    - net: hns3: direct return when receive a unknown mailbox message
    - net: hns3: refactor hns3 makefile to support hns3_common module
    - net: hns3: create new cmdq hardware description structure hclge_comm_hw
    - net: hns3: create new set of unified hclge_comm_cmd_send APIs
    - net: hns3: refactor hclge_cmd_send with new hclge_comm_cmd_send API
    - net: hns3: change type of numa_node_mask as nodemask_t
    - net: hns3: use appropriate barrier function after setting a bit value
    - net: hns3: split function hclge_init_vlan_config()
    - net: hns3: fix port vlan filter not disabled issue
    - drm/meson: dw-hdmi: power up phy on device init
    - drm/meson: dw-hdmi: add bandgap setting for g12
    - drm/connector: Add n to message about demoting connector force-probes
    - drm/amd/display: Atom Integrated System Info v2_2 for DCN35
    - Revert "Revert "ACPI: CPPC: Use access_width over bit_width for system
      memory accesses""
    - ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
    - ACPI: CPPC: Fix access width used for PCC registers
    - btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
    - firewire: nosy: ensure user_length is taken into account when fetching
      packet contents
    - Reapply "drm/qxl: simplify qxl_fence_wait"
    - arm64: dts: qcom: Fix 'interrupt-map' parent address cells
    - usb: typec: ucsi: Check for notifications after init
    - usb: typec: ucsi: Fix connector check on init
    - usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed
      device
    - usb: ohci: Prevent missed ohci interrupts
    - usb: gadget: composite: fix OS descriptors w_value logic
    - usb: gadget: f_fs: Fix a race condition when processing setup packets.
    - usb: xhci-plat: Don't include xhci.h
    - usb: dwc3: core: Prevent phy suspend during init
    - ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
    - btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
    - mptcp: ensure snd_nxt is properly initialized on connect
    - dt-bindings: iio: health: maxim,max30102: fix compatible check
    - iio:imu: adis16475: Fix sync mode setting
    - iio: accel: mxc4005: Interrupt handling fixes
    - tipc: fix UAF in error path
    - net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
    - ASoC: tegra: Fix DSPK 16-bit playback
    - ASoC: ti: davinci-mcasp: Fix race condition during probe
    - dyndbg: fix old BUG_ON in >control parser
    - slimbus: qcom-ngd-ctrl: Add timeout for wait operation
    - mei: me: add lunar lake point M DID
    - drm/vmwgfx: Fix invalid reads in fence signaled events
    - net: fix out-of-bounds access in ops_init
    - hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
    - regulator: core: fix debugfs creation regression
    - Bluetooth: qca: add missing firmware sanity checks
    - Bluetooth: qca: fix NVM configuration parsing
    - Bluetooth: qca: fix firmware check error path
    - keys: Fix overwrite of key expiration on instantiation
    - md: fix kmemleak of rdev->serial
    - Linux 5.15.159
  * Freezing user space processes failed after 20.008 seconds (1 tasks refusing
    to freeze, wq_busy=0) (LP: #2061091)
    - ALSA: Fix deadlocks with kctl removals at disconnection
  * CVE-2024-27017
    - netfilter: nft_set_pipapo: constify lookup fn args where possible
    - netfilter: nft_set_pipapo: walk over current view on netlink dump
    - netfilter: nf_tables: missing iterator type in lookup walk
  * CVE-2024-26952
    - ksmbd: fix potencial out-of-bounds when buffer offset is invalid
  * CVE-2024-26886
    - Bluetooth: af_bluetooth: Fix deadlock
  * CVE-2023-52752
    - smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
  * CVE-2024-25742
    - x86/sev: Harden #VC instruction emulation somewhat
    - x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler
  * CVE-2024-36016
    - tty: n_gsm: fix possible out-of-bounds in gsm0_receive()

  [ Ubuntu: 5.15.0-116.126 ]

  * jammy/linux: 5.15.0-116.126 -proposed tracker (LP: #2071603)
  * idxd: NULL pointer dereference reading wq op_config attribute (LP: #2069081)
    - SAUCE: dmaengine: idxd: set is_visible member of idxd_wq_attribute_group
  * AMD GPUs fail with null pointer dereference when IOMMU enabled, leading to
    black screen (LP: #2068738)
    - SAUCE: Revert "drm/amdgpu: init iommu after amdkfd device init"

  [ Ubuntu: 5.15.0-115.125 ]

  * jammy/linux: 5.15.0-115.125 -proposed tracker (LP: #2068396)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/2024.06.10)
  * Jammy update: v5.15.158 upstream stable release (LP: #2067974)
    - smb: client: fix rename(2) regression against samba
    - cifs: reinstate original behavior again for forceuid/forcegid
    - HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev->devc
    - HID: logitech-dj: allow mice to use all types of reports
    - arm64: dts: rockchip: enable internal pull-up on Q7_USB_ID for RK3399 Puma
    - arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
    - arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
    - arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
    - arm64: dts: mediatek: mt8183: Add power-domains properity to mfgcfg
    - arm64: dts: mediatek: mt7622: add support for coherent DMA
    - arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
    - arm64: dts: mediatek: mt7622: fix clock controllers
    - arm64: dts: mediatek: mt7622: fix IR nodename
    - arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
    - arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
    - arm64: dts: mediatek: mt2712: fix validation errors
    - ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
    - wifi: iwlwifi: mvm: remove old PASN station when adding a new one
    - wifi: iwlwifi: mvm: return uid from iwl_mvm_build_scan_cmd
    - vxlan: drop packets from invalid src-address
    - mlxsw: core: Unregister EMAD trap using FORWARD action
    - icmp: prevent possible NULL dereferences from icmp_build_probe()
    - bridge/br_netlink.c: no need to return void function
    - NFC: trf7970a: disable all regulators on removal
    - ipv4: check for NULL idev in ip_route_use_hint()
    - net: usb: ax88179_178a: stop lying about skb->truesize
    - net: gtp: Fix Use-After-Free in gtp_dellink
    - ipvs: Fix checksumming on GSO of SCTP packets
    - net: openvswitch: Fix Use-After-Free in ovs_ct_exit
    - mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
    - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
    - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
    - mlxsw: spectrum_acl_tcam: Rate limit error message
    - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
    - mlxsw: spectrum_acl_tcam: Fix warning during rehash
    - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
    - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
    - netfilter: nf_tables: honor table dormant flag from netdev release event
      path
    - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
    - i40e: Report MFS in decimal base instead of hex
    - iavf: Fix TC config comparison with existing adapter TC config
    - net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
    - af_unix: Suppress false-positive lockdep splat for spin_lock() in
      __unix_gc().
    - serial: core: Provide port lock wrappers
    - serial: mxs-auart: add spinlock around changing cts state
    - drm-print: add drm_dbg_driver to improve namespace symmetry
    - drm/vmwgfx: Fix crtc's atomic check conditional
    - Revert "crypto: api - Disallow identical driver names"
    - net/mlx5e: Fix a race in command alloc flow
    - tracing: Show size of requested perf buffer
    - tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker
      together
    - x86/cpu: Fix check for RDPKRU in __show_regs()
    - Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
    - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
    - Bluetooth: qca: fix NULL-deref on non-serdev suspend
    - mmc: sdhci-msm: pervent access to suspended controller
    - btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
    - cpu: Re-enable CPU mitigations by default for !X86 architectures
    - [Configs] Update CPU mitigation configs
    - arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
    - drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
    - drm/amdgpu: Fix leak when GPU memory allocation fails
    - irqchip/gic-v3-its: Prevent double free on error
    - ethernet: Add helper for assigning packet type when dest address does not
      match device address
    - net: b44: set pause params only when interface is up
    - stackdepot: respect __GFP_NOLOCKDEP allocation flag
    - mtd: diskonchip: work around ubsan link failure
    - tcp: Clean up kernel listener's reqsk in inet_twsk_purge()
    - tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge()
    - dmaengine: owl: fix register access functions
    - idma64: Don't try to serve interrupts when device is powered off
    - dma: xilinx_dpdma: Fix locking
    - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
    - riscv: fix VMALLOC_START definition
    - riscv: Fix TASK_SIZE on 64-bit NOMMU
    - i2c: smbus: fix NULL function pointer dereference
    - fbdev: fix incorrect address computation in deferred IO
    - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
    - bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS
    - udp: preserve the connected status if only UDP cmsg
    - serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
    - Linux 5.15.158
  * Jammy update: v5.15.157 upstream stable release (LP: #2067959)
    - ksmbd: don't send oplock break if rename fails
    - ksmbd: validate payload size in ipc response
    - ksmbd: do not set SMB2_GLOBAL_CAP_ENCRYPTION for SMB 3.1.1
    - btrfs: record delayed inode root in transaction
    - SUNRPC: Fix rpcgss_context trace event acceptor field
    - selftests/ftrace: Limit length in subsystem-enable tests
    - bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support
    - bpf: Generalize check_ctx_reg for reuse with other types
    - bpf: Generally fix helper register offset check
    - bpf: Fix out of bounds access for ringbuf helpers
    - bpf: Fix ringbuf memory type confusion when passing to helpers
    - kprobes: Fix possible use-after-free issue on kprobe registration
    - Revert "tracing/trigger: Fix to return error if failed to alloc snapshot"
    - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
    - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
    - netfilter: br_netfilter: skip conntrack input hook for promisc packets
    - netfilter: nf_flow_table: count pending offload workqueue tasks
    - [Config] update configs to enable new NF_FLOW_TABLE_PROCFS
    - netfilter: flowtable: validate pppoe header
    - netfilter: flowtable: incorrect pppoe tuple
    - af_unix: Call manage_oob() for every skb in unix_stream_read_generic().
    - af_unix: Don't peek OOB data without MSG_OOB.
    - tun: limit printing rate when illegal packet received by tun dev
    - net: dsa: mt7530: fix mirroring frames received on local port
    - net: ethernet: ti: am65-cpsw-nuss: cleanup DMA Channels before using them
    - RDMA/rxe: Fix the problem "mutex_destroy missing"
    - RDMA/cm: Print the old state when cm_destroy_id gets timeout
    - RDMA/mlx5: Fix port number for counter query in multi-port configuration
    - s390/qdio: handle deferred cc1
    - s390/cio: fix race condition during online processing
    - drm: nv04: Fix out of bounds access
    - drm/panel: visionox-rm69299: don't unregister DSI device
    - clk: Remove prepare_lock hold assertion in __clk_release()
    - clk: Mark 'all_lists' as const
    - clk: remove extra empty line
    - clk: Print an info line before disabling unused clocks
    - clk: Initialize struct clk_core kref earlier
    - clk: Get runtime PM before walking tree during disable_unused
    - x86/bugs: Fix BHI retpoline check
    - x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ
    - thunderbolt: Avoid notify PM core about runtime PM resume
    - thunderbolt: Fix wake configurations after device unplug
    - comedi: vmk80xx: fix incomplete endpoint checking
    - serial/pmac_zilog: Remove flawed mitigation for rx irq flood
    - USB: serial: option: add Fibocom FM135-GL variants
    - USB: serial: option: add support for Fibocom FM650/FG650
    - USB: serial: option: add Lonsung U8300/U9300 product
    - USB: serial: option: support Quectel EM060K sub-models
    - USB: serial: option: add Rolling RW101-GL and RW135-GL support
    - USB: serial: option: add Telit FN920C04 rmnet compositions
    - usb: dwc2: host: Fix dereference issue in DDMA completion flow.
    - usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport
      error
    - mei: me: disable RPL-S on SPS and IGN firmwares
    - speakup: Avoid crash on very long word
    - fs: sysfs: Fix reference leak in sysfs_break_active_protection()
    - KVM: x86: Snapshot if a vCPU's vendor model is AMD vs. Intel compatible
    - KVM: x86/pmu: Do not mask LVTPC when handling a PMI on AMD platforms
    - arm64: hibernate: Fix level3 translation fault in swsusp_save()
    - init/main.c: Fix potential static_command_line memory overflow
    - drm/vmwgfx: Sort primary plane formats by order of preference
    - nouveau: fix instmem race condition around ptr stores
    - nilfs2: fix OOB in nilfs_set_de_type
    - net: dsa: mt7530: set all CPU ports in MT7531_CPU_PMAP
    - net: dsa: introduce preferred_default_local_cpu_port and use on MT7530
    - net: dsa: mt7530: fix improper frames on all 25MHz and 40MHz XTAL MT7530
    - net: dsa: mt7530: fix enabling EEE on MT7531 switch on all boards
    - Linux 5.15.157
  * [SRU][22.04.4]: megaraid_sas: Critical Bug Fixes (LP: #2046722)
    - scsi: megaraid_sas: Log message when controller reset is requested but not
      issued
    - scsi: megaraid_sas: Driver version update to 07.727.03.00-rc1
  * Jammy update: v5.15.156 upstream stable release (LP: #2065857)
    - batman-adv: Avoid infinite loop trying to resize local TT
    - ring-buffer: Only update pages_touched when a new page is touched
    - Bluetooth: Fix memory leak in hci_req_sync_complete()
    - media: cec: core: remove length check of Timer Status
    - arm64: dts: imx8-ss-conn: fix usdhc wrong lpcg clock order
    - Revert "drm/qxl: simplify qxl_fence_wait"
    - nouveau: fix function cast warning
    - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats()
    - net: openvswitch: fix unwanted error log on timeout policy probing
    - u64_stats: Disable preemption on 32bit UP+SMP PREEMPT_RT during updates.
    - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
    - geneve: fix header validation in geneve[6]_xmit_skb
    - af_unix: Clear stale u->oob_skb.
    - octeontx2-af: Fix NIX SQ mode and BP config
    - ipv6: fib: hide unused 'pn' variable
    - ipv4/route: avoid unused-but-set-variable warning
    - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
    - netfilter: complete validation of user input
    - net/mlx5: Properly link new fs rules into the tree
    - net: sparx5: fix wrong config being used when reconfiguring PCS
    - net: dsa: mt7530: trap link-local frames regardless of ST Port State
    - af_unix: Do not use atomic ops for unix_sk(sk)->inflight.
    - af_unix: Fix garbage collector racing against connect()
    - net: ena: Fix potential sign extension issue
    - net: ena: Wrong missing IO completions check order
    - net: ena: Fix incorrect descriptor free behavior
    - tracing: hide unused ftrace_event_id_fops
    - iommu/vt-d: Allocate local memory for page request queue
    - btrfs: qgroup: correctly model root qgroup rsv in convert
    - drm/client: Fully protect modes[] with dev->mode_config.mutex
    - vhost: Add smp_rmb() in vhost_vq_avail_empty()
    - perf/x86: Fix out of range data
    - x86/cpu: Actually turn off mitigations by default for
      SPECULATION_MITIGATIONS=n
    - selftests: timers: Fix abs() warning in posix_timers test
    - x86/apic: Force native_apic_mem_read() to use the MOV instruction
    - irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
    - x86/bugs: Fix return type of spectre_bhi_state()
    - x86/bugs: Fix BHI documentation
    - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES
    - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr'
    - x86/bugs: Fix BHI handling of RRSBA
    - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation
    - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto
    - [Config] updateconfigs to remove obsolete SPECTRE_BHI_AUTO
    - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with
      CONFIG_MITIGATION_SPECTRE_BHI
    - [Config] updateconfigs to enable new MITIGATION_SPECTRE_BHI
    - drm/i915/cdclk: Fix CDCLK programming order when pipes are active
    - Linux 5.15.156
  * Jammy update: v5.15.155 upstream stable release (LP: #2065805)
    - amdkfd: use calloc instead of kzalloc to avoid integer overflow
    - net: dsa: fix panic when DSA master device unbinds on shutdown
    - wifi: ath9k: fix LNA selection in ath_ant_try_scan()
    - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
    - panic: Flush kernel log buffer at the end
    - cpuidle: Avoid potential overflow in integer multiplication
    - arm64: dts: rockchip: fix rk3328 hdmi ports node
    - arm64: dts: rockchip: fix rk3399 hdmi ports node
    - ionic: set adminq irq affinity
    - pstore/zone: Add a null pointer check to the psz_kmsg_read
    - tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
    - net: pcs: xpcs: Return EINVAL in the internal methods
    - wifi: ath11k: decrease MHI channel buffer length to 8KB
    - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
    - btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
    - btrfs: send: handle path ref underflow in header iterate_inode_ref()
    - net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
    - Bluetooth: btintel: Fix null ptr deref in btintel_read_version
    - Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
    - pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
    - sysv: don't call sb_bread() with pointers_lock held
    - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
    - isofs: handle CDs with bad root inode but good Joliet root directory
    - media: sta2x11: fix irq handler cast
    - ALSA: firewire-lib: handle quirk to calculate payload quadlets as data block
      counter
    - ext4: add a hint for block bitmap corrupt state in mb_groups
    - ext4: forbid commit inconsistent quota data when errors=remount-ro
    - drm/amd/display: Fix nanosec stat overflow
    - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned
      int
    - Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
    - libperf evlist: Avoid out-of-bounds access
    - block: prevent division by zero in blk_rq_stat_sum()
    - RDMA/cm: add timeout to cm_destroy_id wait
    - Input: allocate keycode for Display refresh rate toggle
    - platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi
      Vi8 tablet
    - ktest: force $buildonly = 1 for 'make_warnings_file' test type
    - ring-buffer: use READ_ONCE() to read cpu_buffer->commit_page in concurrent
      environment
    - tools: iio: replace seekdir() in iio_generic_buffer
    - usb: typec: tcpci: add generic tcpci fallback compatible
    - usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
    - ASoC: soc-core.c: Skip dummy codec when adding platforms
    - fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
    - drivers/nvme: Add quirks for device 126f:2262
    - fbmon: prevent division by zero in fb_videomode_from_videomode()
    - netfilter: nf_tables: release batch on table validation from abort path
    - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
    - netfilter: nf_tables: discard table flag update with pending basechain
      deletion
    - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
    - gcc-plugins/stackleak: Ignore .noinstr.text and .entry.text
    - gcc-plugins/stackleak: Avoid .head.text section
    - virtio: reenable config if freezing device failed
    - x86/mm/pat: fix VM_PAT handling in COW mappings
    - randomize_kstack: Improve entropy diffusion
    - platform/x86: intel-vbtn: Update tablet mode switch at end of probe
    - Bluetooth: btintel: Fixe build regression
    - VMCI: Fix possible memcpy() run-time warning in
      vmci_datagram_invoke_guest_handler()
    - Linux 5.15.155
  * Jammy update: v5.15.154 upstream stable release (LP: #2065435)
    - Documentation/hw-vuln: Update spectre doc
    - x86/cpu: Support AMD Automatic IBRS
    - media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
    - clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
    - smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
    - smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
    - arm: dts: marvell: Fix maxium->maxim typo in brownstone dts
    - drm/vmwgfx: Fix possible null pointer derefence with invalid contexts
    - pci_iounmap(): Fix MMIO mapping leak
    - KVM: Always flush async #PF workqueue when vCPU is being destroyed
    - sparc64: NMI watchdog: fix return value of __setup handler
    - sparc: vDSO: fix return value of __setup handler
    - crypto: qat - fix double free during reset
    - crypto: qat - resolve race condition during AER recovery
    - selftests/mqueue: Set timeout to 180 seconds
    - ext4: correct best extent lstart adjustment logic
    - block: Clear zone limits for a non-zoned stacked queue
    - kasan: test: add memcpy test that avoids out-of-bounds write
    - kasan/test: avoid gcc warning for intentional overflow
    - bounds: support non-power-of-two CONFIG_NR_CPUS
    - fat: fix uninitialized field in nostale filehandles
    - ubifs: Set page uptodate in the correct place
    - ubi: Check for too small LEB size in VTBL code
    - ubi: correct the calculation of fastmap size
    - mtd: rawnand: meson: fix scrambling mode value in command macro
    - parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt
      macros
    - parisc: Fix ip_fast_csum
    - parisc: Fix csum_ipv6_magic on 32-bit systems
    - parisc: Fix csum_ipv6_magic on 64-bit systems
    - parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
    - PM: suspend: Set mem_sleep_current during kernel command line setup
    - clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
    - clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
    - clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
    - clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
    - usb: xhci: Add error handling in xhci_map_urb_for_dma
    - powerpc/fsl: Fix mfpmr build errors with newer binutils
    - USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
    - USB: serial: add device ID for VeriFone adapter
    - USB: serial: cp210x: add ID for MGP Instruments PDS100
    - USB: serial: option: add MeiG Smart SLM320 product
    - USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
    - PM: sleep: wakeirq: fix wake irq warning in system suspend
    - mmc: tmio: avoid concurrent runs of mmc_request_done()
    - fuse: fix root lookup with nonzero generation
    - fuse: don't unhash root
    - usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
    - printk/console: Split out code that enables default console
    - serial: Lock console when calling into driver before registration
    - btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
    - PCI: Drop pci_device_remove() test of pci_dev->driver
    - PCI/PM: Drain runtime-idle callbacks before driver removal
    - PCI: Work around Intel I210 ROM BAR overlap defect
    - PCI/ASPM: Make Intel DG2 L1 acceptable latency unlimited
    - PCI/DPC: Quirk PIO log size for certain Intel Root Ports
    - PCI/DPC: Quirk PIO log size for Intel Raptor Lake Root Ports
    - dm-raid: fix lockdep waring in "pers->hot_add_disk"
    - mac802154: fix llsec key resources release in mac802154_llsec_key_del
    - swap: comments get_swap_device() with usage rule
    - mm: swap: fix race between free_swap_and_cache() and swapoff()
    - mmc: core: Fix switch on gp3 partition
    - drm/etnaviv: Restore some id values
    - landlock: Warn once if a Landlock action is requested while disabled
    - hwmon: (amc6821) add of_match table
    - ext4: fix corruption during on-line resize
    - nvmem: meson-efuse: fix function pointer type mismatch
    - slimbus: core: Remove usage of the deprecated ida_simple_xx() API
    - phy: tegra: xusb: Add API to retrieve the port number of phy
    - usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
    - speakup: Fix 8bit characters from direct synth
    - PCI/AER: Block runtime suspend when handling errors
    - nfs: fix UAF in direct writes
    - kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
    - PCI: dwc: endpoint: Fix advertised resizable BAR size
    - vfio/platform: Disable virqfds on cleanup
    - ksmbd: retrieve number of blocks using vfs_getattr in
      set_file_allocation_info
    - ring-buffer: Fix waking up ring buffer readers
    - ring-buffer: Do not set shortest_full when full target is hit
    - ring-buffer: Fix resetting of shortest_full
    - ring-buffer: Fix full_waiters_pending in poll
    - ring-buffer: Use wait_event_interruptible() in ring_buffer_wait()
    - soc: fsl: qbman: Always disable interrupts when taking cgr_lock
    - soc: fsl: qbman: Add helper for sanity checking cgr ops
    - soc: fsl: qbman: Add CGR update function
    - soc: fsl: qbman: Use raw spinlock for cgr_lock
    - s390/zcrypt: fix reference counting on zcrypt card objects
    - drm/panel: do not return negative error codes from drm_panel_get_modes()
    - drm/exynos: do not return negative values from .get_modes()
    - drm/imx/ipuv3: do not return negative values from .get_modes()
    - drm/vc4: hdmi: do not return negative values from .get_modes()
    - memtest: use {READ,WRITE}_ONCE in memory scanning
    - nilfs2: fix failure to detect DAT corruption in btree and direct mappings
    - nilfs2: prevent kernel bug at submit_bh_wbc()
    - cpufreq: dt: always allocate zeroed cpumask
    - x86/CPU/AMD: Update the Zenbleed microcode revisions
    - NFSD: Fix nfsd_clid_class use of __string_len() macro
    - net: hns3: tracing: fix hclgevf trace event strings
    - wireguard: netlink: check for dangling peer via is_dead instead of empty
      list
    - wireguard: netlink: access device through ctx instead of peer
    - ahci: asm1064: correct count of reported ports
    - ahci: asm1064: asm1166: don't limit reported ports
    - drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
    - drm/amd/display: Return the correct HDCP error code
    - drm/amd/display: Fix noise issue on HDMI AV mute
    - dm snapshot: fix lockup in dm_exception_table_exit
    - x86/pm: Work around false positive kmemleak report in msr_build_context()
    - net: ravb: Add R-Car Gen4 support
    - cpufreq: brcmstb-avs-cpufreq: fix up "add check for cpufreq_cpu_get's return
      value"
    - netfilter: nf_tables: reject constant set with timeout
    - Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of
      memory
    - xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
    - KVM: SVM: Flush pages under kvm->lock to fix UAF in
      svm_register_enc_region()
    - tracing: Use .flush() call to wake up readers
    - drm/i915: Check before removing mm notifier
    - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
    - usb: gadget: ncm: Fix handling of zero block length packets
    - usb: port: Don't try to peer unused USB ports based on location
    - tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
    - mei: me: add arrow lake point S DID
    - mei: me: add arrow lake point H DID
    - vt: fix unicode buffer corruption when deleting characters
    - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
    - tee: optee: Fix kernel panic caused by incorrect error handling
    - i2c: i801: Avoid potential double call to gpiod_remove_lookup_table
    - xen/events: close evtchn after mapping cleanup
    - clocksource/drivers/arm_global_timer: Fix maximum prescaler value
    - entry: Respect changes to system call number by trace_sys_enter()
    - minmax: add umin(a, b) and umax(a, b)
    - swiotlb: Fix alignment checks when both allocation and DMA masks are present
    - dma-mapping: add dma_opt_mapping_size()
    - dma-iommu: add iommu_dma_opt_mapping_size()
    - iommu/dma: Force swiotlb_max_mapping_size on an untrusted device
    - printk: Update @console_may_schedule in console_trylock_spinning()
    - tty: serial: imx: Fix broken RS485
    - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
    - x86/bugs: Add asm helpers for executing VERW
    - x86/entry_64: Add VERW just before userspace transition
    - x86/entry_32: Add VERW just before userspace transition
    - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key
    - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH
    - KVM/VMX: Move VERW closer to VMentry for MDS mitigation
    - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set
    - Documentation/hw-vuln: Add documentation for RFDS
    - x86/rfds: Mitigate Register File Data Sampling (RFDS)
    - [Config] updateconfigs for MITIGATION_RFDS
    - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests
    - arch: Introduce CONFIG_FUNCTION_ALIGNMENT
    - [Config] updateconfigs for FUNCTION_ALIGNMENT
    - x86/asm: Differentiate between code and function alignment
    - x86/alternatives: Introduce int3_emulate_jcc()
    - x86/alternatives: Teach text_poke_bp() to patch Jcc.d32 instructions
    - x86/static_call: Add support for Jcc tail-calls
    - fsnotify: pass data_type to fsnotify_name()
    - fsnotify: pass dentry instead of inode data
    - fsnotify: clarify contract for create event hooks
    - fsnotify: Don't insert unmergeable events in hashtable
    - fanotify: Fold event size calculation to its own function
    - fanotify: Split fsid check from other fid mode checks
    - inotify: Don't force FS_IN_IGNORED
    - fsnotify: Add helper to detect overflow_event
    - fsnotify: Add wrapper around fsnotify_add_event
    - fsnotify: Retrieve super block from the data field
    - fsnotify: Protect fsnotify_handle_inode_event from no-inode events
    - fsnotify: Pass group argument to free_event
    - fanotify: Support null inode event in fanotify_dfid_inode
    - fanotify: Allow file handle encoding for unhashed events
    - fanotify: Encode empty file handle when no inode is provided
    - fanotify: Require fid_mode for any non-fd event
    - fsnotify: Support FS_ERROR event type
    - fanotify: Reserve UAPI bits for FAN_FS_ERROR
    - fanotify: Pre-allocate pool of error events
    - fanotify: Support enqueueing of error events
    - fanotify: Support merging of error events
    - fanotify: Wrap object_fh inline space in a creator macro
    - fanotify: Add helpers to decide whether to report FID/DFID
    - fanotify: WARN_ON against too large file handles
    - fanotify: Report fid info for file related file system errors
    - fanotify: Emit generic error info for error event
    - fanotify: Allow users to request FAN_FS_ERROR events
    - ext4: Send notifications on error
    - docs: Document the FAN_FS_ERROR event
    - NFS: Remove unnecessary TRACE_DEFINE_ENUM()s
    - SUNRPC: Tracepoints should display tk_pid and cl_clid as a fixed-size field
    - NFS: Move generic FS show macros to global header
    - NFS: Move NFS protocol display macros to global header
    - NFSD: Optimize DRC bucket pruning
    - NFSD: move filehandle format declarations out of "uapi".
    - NFSD: drop support for ancient filehandles
    - NFSD: simplify struct nfsfh
    - NFSD: Initialize pointer ni with NULL and not plain integer 0
    - SUNRPC: Replace the "__be32 *p" parameter to .pc_decode
    - SUNRPC: Change return value type of .pc_decode
    - NFSD: Save location of NFSv4 COMPOUND status
    - SUNRPC: Replace the "__be32 *p" parameter to .pc_encode
    - SUNRPC: Change return value type of .pc_encode
    - nfsd: update create verifier comment
    - NFSD:fix boolreturn.cocci warning
    - nfsd4: remove obselete comment
    - ext4: fix error code saved on super block during file system abort
    - fsnotify: clarify object type argument
    - fsnotify: separate mark iterator type from object type enum
    - fanotify: introduce group flag FAN_REPORT_TARGET_FID
    - fsnotify: generate FS_RENAME event with rich information
    - fanotify: use macros to get the offset to fanotify_info buffer
    - fanotify: use helpers to parcel fanotify_info buffer
    - fanotify: support secondary dir fh and name in fanotify_info
    - fanotify: record old and new parent and name in FAN_RENAME event
    - fanotify: record either old name new name or both for FAN_RENAME
    - fanotify: report old and/or new parent+name in FAN_RENAME event
    - fanotify: wire up FAN_RENAME event
    - exit: Implement kthread_exit
    - exit: Rename module_put_and_exit to module_put_and_kthread_exit
    - NFSD: handle errors better in write_ports_addfd()
    - SUNRPC: change svc_get() to return the svc.
    - SUNRPC/NFSD: clean up get/put functions.
    - SUNRPC: stop using ->sv_nrthreads as a refcount
    - nfsd: make nfsd_stats.th_cnt atomic_t
    - SUNRPC: use sv_lock to protect updates to sv_nrthreads.
    - NFSD: narrow nfsd_mutex protection in nfsd thread
    - NFSD: Make it possible to use svc_set_num_threads_sync
    - SUNRPC: discard svo_setup and rename svc_set_num_threads_sync()
    - NFSD: simplify locking for network notifier.
    - lockd: introduce nlmsvc_serv
    - lockd: simplify management of network status notifiers
    - lockd: move lockd_start_svc() call into lockd_create_svc()
    - lockd: move svc_exit_thread() into the thread
    - lockd: introduce lockd_put()
    - lockd: rename lockd_create_svc() to lockd_get()
    - SUNRPC: move the pool_map definitions (back) into svc.c
    - SUNRPC: always treat sv_nrpools==1 as "not pooled"
    - lockd: use svc_set_num_threads() for thread start and stop
    - NFS: switch the callback service back to non-pooled.
    - NFSD: Remove be32_to_cpu() from DRC hash function
    - NFSD: Fix inconsistent indenting
    - NFSD: simplify per-net file cache management
    - NFSD: Combine XDR error tracepoints
    - nfsd: improve stateid access bitmask documentation
    - NFSD: De-duplicate nfsd4_decode_bitmap4()
    - nfs: block notification on fs with its own ->lock
    - nfsd4: add refcount for nfsd4_blocked_lock
    - nfsd: map EBADF
    - nfsd: Add errno mapping for EREMOTEIO
    - nfsd: Retry once in nfsd_open on an -EOPENSTALE return
    - NFSD: Clean up nfsd_vfs_write()
    - NFSD: De-duplicate net_generic(SVC_NET(rqstp), nfsd_net_id)
    - nfsd: Add a tracepoint for errors in nfsd4_clone_file_range()
    - NFSD: Write verifier might go backwards
    - NFSD: Clean up the nfsd_net::nfssvc_boot field
    - NFSD: Rename boot verifier functions
    - NFSD: Trace boot verifier resets
    - NFSD: Move fill_pre_wcc() and fill_post_wcc()
    - fsnotify: invalidate dcache before IN_DELETE event
    - NFSD: Deprecate NFS_OFFSET_MAX
    - nfsd: Add support for the birth time attribute
    - orDate: Thu Sep 30 19:19:57 2021 -0400
    - NFSD: Skip extra computation for RC_NOCACHE case
    - NFSD: Streamline the rare "found" case
    - NFSD: Remove NFSD_PROC_ARGS_* macros
    - SUNRPC: Remove the .svo_enqueue_xprt method
    - SUNRPC: Merge svc_do_enqueue_xprt() into svc_enqueue_xprt()
    - SUNRPC: Remove svo_shutdown method
    - SUNRPC: Rename svc_create_xprt()
    - SUNRPC: Rename svc_close_xprt()
    - SUNRPC: Remove svc_shutdown_net()
    - NFSD: Remove svc_serv_ops::svo_module
    - NFSD: Move svc_serv_ops::svo_function into struct svc_serv
    - NFSD: Remove CONFIG_NFSD_V3
    - [Config] updateconfigs for NFSD_V3
    - NFSD: Clean up _lm_ operation names
    - nfsd: fix using the correct variable for sizeof()
    - fsnotify: fix merge with parent's ignored mask
    - fsnotify: optimize FS_MODIFY events with no ignored masks
    - fsnotify: remove redundant parameter judgment
    - nfsd: Fix a write performance regression
    - nfsd: Clean up nfsd_file_put()
    - fanotify: do not allow setting dirent events in mask of non-dir
    - fs/lock: documentation cleanup. Replace inode->i_lock with flc_lock.
    - inotify: move control flags from mask to mark flags
    - fsnotify: pass flags argument to fsnotify_alloc_group()
    - fsnotify: make allow_dups a property of the group
    - fsnotify: create helpers for group mark_mutex lock
    - inotify: use fsnotify group lock helpers
    - nfsd: use fsnotify group lock helpers
    - dnotify: use fsnotify group lock helpers
    - fsnotify: allow adding an inode mark without pinning inode
    - fanotify: create helper fanotify_mark_user_flags()
    - fanotify: factor out helper fanotify_mark_update_flags()
    - fanotify: implement "evictable" inode marks
    - fanotify: use fsnotify group lock helpers
    - fanotify: enable "evictable" inode marks
    - fsnotify: introduce mark type iterator
    - fsnotify: consistent behavior for parent not watching children
    - fanotify: fix incorrect fmode_t casts
    - NFSD: Clean up nfsd_splice_actor()
    - NFSD: add courteous server support for thread with only delegation
    - NFSD: add support for share reservation conflict to courteous server
    - NFSD: move create/destroy of laundry_wq to init_nfsd and exit_nfsd
    - fs/lock: add helper locks_owner_has_blockers to check for blockers
    - fs/lock: add 2 callbacks to lock_manager_operations to resolve conflict
    - NFSD: add support for lock conflict to courteous server
    - NFSD: Show state of courtesy client in client info
    - NFSD: Clean up nfsd3_proc_create()
    - NFSD: Avoid calling fh_drop_write() twice in do_nfsd_create()
    - NFSD: Refactor nfsd_create_setattr()
    - NFSD: Refactor NFSv3 CREATE
    - NFSD: Refactor NFSv4 OPEN(CREATE)
    - NFSD: Remove do_nfsd_create()
    - NFSD: Clean up nfsd_open_verified()
    - NFSD: Instantiate a struct file when creating a regular NFSv4 file
    - NFSD: Remove dprintk call sites from tail of nfsd4_open()
    - NFSD: Fix whitespace
    - NFSD: Move documenting comment for nfsd4_process_open2()
    - NFSD: Trace filecache opens
    - SUNRPC: Use RMW bitops in single-threaded hot paths
    - nfsd: Unregister the cld notifier when laundry_wq create failed
    - nfsd: Fix null-ptr-deref in nfsd_fill_super()
    - NFSD: Modernize nfsd4_release_lockowner()
    - NFSD: Add documenting comment for nfsd4_release_lockowner()
    - NFSD: nfsd_file_put() can sleep
    - NFSD: Fix potential use-after-free in nfsd_file_put()
    - NFS: restore module put when manager exits.
    - fanotify: refine the validation checks on non-dir inode mask
    - NFSD: Decode NFSv4 birth time attribute
    - fs: inotify: Fix typo in inotify comment
    - fanotify: prepare for setting event flags in ignore mask
    - fanotify: cleanups for fanotify_mark() input validations
    - fanotify: introduce FAN_MARK_IGNORE
    - fsnotify: Fix comment typo
    - NLM: Defend against file_lock changes after vfs_test_lock()
    - NFSD: Instrument fh_verify()
    - NFSD: Fix space and spelling mistake
    - nfsd: remove redundant assignment to variable len
    - NFSD: Demote a WARN to a pr_warn()
    - NFSD: Report filecache LRU size
    - NFSD: Report count of calls to nfsd_file_acquire()
    - NFSD: Report count of freed filecache items
    - NFSD: Report average age of filecache items
    - NFSD: Add nfsd_file_lru_dispose_list() helper
    - NFSD: Refactor nfsd_file_gc()
    - NFSD: Refactor nfsd_file_lru_scan()
    - NFSD: Report the number of items evicted by the LRU walk
    - NFSD: Record number of flush calls
    - NFSD: Zero counters when the filecache is re-initialized
    - NFSD: Hook up the filecache stat file
    - NFSD: WARN when freeing an item still linked via nf_lru
    - NFSD: Trace filecache LRU activity
    - NFSD: Leave open files out of the filecache LRU
    - NFSD: Fix the filecache LRU shrinker
    - NFSD: Never call nfsd_file_gc() in foreground paths
    - NFSD: No longer record nf_hashval in the trace log
    - NFSD: Remove lockdep assertion from unhash_and_release_locked()
    - NFSD: nfsd_file_unhash can compute hashval from nf->nf_inode
    - NFSD: Refactor __nfsd_file_close_inode()
    - NFSD: nfsd_file_hash_remove can compute hashval
    - NFSD: Remove nfsd_file::nf_hashval
    - NFSD: Replace the "init once" mechanism
    - NFSD: Set up an rhashtable for the filecache
    - NFSD: Convert the filecache to use rhashtable
    - NFSD: Clean up unused code after rhashtable conversion
    - NFSD: Separate tracepoints for acquire and create
    - NFSD: Move nfsd_file_trace_alloc() tracepoint
    - NFSD: NFSv4 CLOSE should release an nfsd_file immediately
    - NFSD: Ensure nf_inode is never dereferenced
    - NFSD: refactoring v4 specific code to a helper in nfs4state.c
    - NFSD: keep track of the number of v4 clients in the system
    - NFSD: limit the number of v4 clients to 1024 per 1GB of system memory
    - nfsd: silence extraneous printk on nfsd.ko insertion
    - NFSD: Optimize nfsd4_encode_operation()
    - NFSD: Optimize nfsd4_encode_fattr()
    - NFSD: Clean up SPLICE_OK in nfsd4_encode_read()
    - NFSD: Add an nfsd4_read::rd_eof field
    - NFSD: Optimize nfsd4_encode_readv()
    - NFSD: Simplify starting_len
    - NFSD: Use xdr_pad_size()
    - NFSD: Clean up nfsd4_encode_readlink()
    - NFSD: Fix strncpy() fortify warning
    - NFSD: nfserrno(-ENOMEM) is nfserr_jukebox
    - NFSD: Shrink size of struct nfsd4_copy_notify
    - NFSD: Shrink size of struct nfsd4_copy
    - NFSD: Reorder the fields in struct nfsd4_op
    - NFSD: Make nfs4_put_copy() static
    - NFSD: Replace boolean fields in struct nfsd4_copy
    - NFSD: Refactor nfsd4_cleanup_inter_ssc() (1/2)
    - NFSD: Refactor nfsd4_cleanup_inter_ssc() (2/2)
    - NFSD: Refactor nfsd4_do_copy()
    - NFSD: Remove kmalloc from nfsd4_do_async_copy()
    - NFSD: Add nfsd4_send_cb_offload()
    - NFSD: Move copy offload callback arguments into a separate structure
    - NFSD: drop fh argument from alloc_init_deleg
    - NFSD: verify the opened dentry after setting a delegation
    - NFSD: introduce struct nfsd_attrs
    - NFSD: set attributes when creating symlinks
    - NFSD: add security label to struct nfsd_attrs
    - NFSD: add posix ACLs to struct nfsd_attrs
    - NFSD: change nfsd_create()/nfsd_symlink() to unlock directory before
      returning.
    - NFSD: always drop directory lock in nfsd_unlink()
    - NFSD: only call fh_unlock() once in nfsd_link()
    - NFSD: reduce locking in nfsd_lookup()
    - NFSD: use explicit lock/unlock for directory ops
    - NFSD: use (un)lock_inode instead of fh_(un)lock for file operations
    - NFSD: discard fh_locked flag and fh_lock/fh_unlock
    - NFSD: fix regression with setting ACLs.
    - nfsd_splice_actor(): handle compound pages
    - NFSD: move from strlcpy with unused retval to strscpy
    - lockd: move from strlcpy with unused retval to strscpy
    - NFSD enforce filehandle check for source file in COPY
    - NFSD: remove redundant variable status
    - nfsd: Avoid some useless tests
    - nfsd: Propagate some error code returned by memdup_user()
    - NFSD: Increase NFSD_MAX_OPS_PER_COMPOUND
    - NFSD: drop fname and flen args from nfsd_create_locked()
    - nfsd: clean up mounted_on_fileid handling
    - nfsd: remove nfsd4_prepare_cb_recall() declaration
    - NFSD: Replace dprintk() call site in fh_verify()
    - NFSD: Trace NFSv4 COMPOUND tags
    - NFSD: Add tracepoints to report NFSv4 callback completions
    - NFSD: Add a mechanism to wait for a DELEGRETURN
    - NFSD: Refactor nfsd_setattr()
    - NFSD: Make nfsd4_setattr() wait before returning NFS4ERR_DELAY
    - NFSD: Make nfsd4_rename() wait before returning NFS4ERR_DELAY
    - NFSD: Make nfsd4_remove() wait before returning NFS4ERR_DELAY
    - NFSD: keep track of the number of courtesy clients in the system
    - NFSD: add shrinker to reap courtesy clients on low memory condition
    - SUNRPC: Parametrize how much of argsize should be zeroed
    - NFSD: Reduce amount of struct nfsd4_compoundargs that needs clearing
    - NFSD: Refactor common code out of dirlist helpers
    - NFSD: Use xdr_inline_decode() to decode NFSv3 symlinks
    - NFSD: Clean up WRITE arg decoders
    - NFSD: Clean up nfs4svc_encode_compoundres()
    - NFSD: Remove unused nfsd4_compoundargs::cachetype field
    - NFSD: Pack struct nfsd4_compoundres
    - nfsd: use DEFINE_PROC_SHOW_ATTRIBUTE to define nfsd_proc_ops
    - nfsd: use DEFINE_SHOW_ATTRIBUTE to define export_features_fops and
      supported_enctypes_fops
    - nfsd: use DEFINE_SHOW_ATTRIBUTE to define client_info_fops
    - nfsd: use DEFINE_SHOW_ATTRIBUTE to define nfsd_reply_cache_stats_fops
    - nfsd: use DEFINE_SHOW_ATTRIBUTE to define nfsd_file_cache_stats_fops
    - NFSD: Rename the fields in copy_stateid_t
    - nfsd: only fill out return pointer on success in nfsd4_lookup_stateid
    - nfsd: fix comments about spinlock handling with delegations
    - nfsd: make nfsd4_run_cb a bool return function
    - nfsd: extra checks when freeing delegation stateids
    - fs/notify: constify path
    - fsnotify: remove unused declaration
    - fanotify: Remove obsoleted fanotify_event_has_path()
    - nfsd: fix nfsd_file_unhash_and_dispose
    - nfsd: rework hashtable handling in nfsd_do_file_acquire
    - NFSD: unregister shrinker when nfsd_init_net() fails
    - nfsd: ensure we always call fh_verify_error tracepoint
    - nfsd: fix net-namespace logic in __nfsd_file_cache_purge
    - nfsd: fix use-after-free in nfsd_file_do_acquire tracepoint
    - nfsd: put the export reference in nfsd4_verify_deleg_dentry
    - NFSD: Fix trace_nfsd_fh_verify_err() crasher
    - NFSD: Fix reads with a non-zero offset that don't end on a page boundary
    - lockd: use locks_inode_context helper
    - nfsd: use locks_inode_context helper
    - NFSD: Simplify READ_PLUS
    - NFSD: Remove redundant assignment to variable host_err
    - NFSD: Finish converting the NFSv3 GETACL result encoder
    - nfsd: ignore requests to disable unsupported versions
    - nfsd: move nfserrno() to vfs.c
    - nfsd: allow disabling NFSv2 at compile time
    - [Config] updateconfigs for NFSD_V2
    - exportfs: use pr_debug for unreachable debug statements
    - NFSD: Pass the target nfsd_file to nfsd_commit()
    - NFSD: Revert "NFSD: NFSv4 CLOSE should release an nfsd_file immediately"
    - NFSD: Add an NFSD_FILE_GC flag to enable nfsd_file garbage collection
    - NFSD: Flesh out a documenting comment for filecache.c
    - NFSD: Clean up nfs4_preprocess_stateid_op() call sites
    - NFSD: Trace stateids returned via DELEGRETURN
    - NFSD: Trace delegation revocations
    - NFSD: Use const pointers as parameters to fh_ helpers
    - NFSD: Update file_hashtbl() helpers
    - NFSD: Clean up nfsd4_init_file()
    - NFSD: Add a nfsd4_file_hash_remove() helper
    - NFSD: Clean up find_or_add_file()
    - NFSD: Refactor find_file()
    - NFSD: Use rhashtable for managing nfs4_file objects
    - NFSD: Fix licensing header in filecache.c
    - nfsd: remove the pages_flushed statistic from filecache
    - nfsd: reorganize filecache.c
    - filelock: add a new locks_inode_context accessor function
    - nfsd: fix up the filecache laundrette scheduling
    - NFSD: Add an nfsd_file_fsync tracepoint
    - nfsd: return error if nfs4_setacl fails
    - NFSD: Use struct_size() helper in alloc_session()
    - lockd: set missing fl_flags field when retrieving args
    - lockd: ensure we use the correct file descriptor when unlocking
    - lockd: fix file selection in nlmsvc_cancel_blocked
    - trace: Relocate event helper files
    - NFSD: refactoring courtesy_client_reaper to a generic low memory shrinker
    - NFSD: add support for sending CB_RECALL_ANY
    - NFSD: add delegation reaper to react to low memory condition
    - NFSD: add CB_RECALL_ANY tracepoints
    - NFSD: Use only RQ_DROPME to signal the need to drop a reply
    - NFSD: Avoid clashing function prototypes
    - nfsd: rework refcounting in filecache
    - nfsd: fix handling of cached open files in nfsd4_open codepath
    - Revert "SUNRPC: Use RMW bitops in single-threaded hot paths"
    - NFSD: Use set_bit(RQ_DROPME)
    - NFSD: register/unregister of nfsd-client shrinker at nfsd startup/shutdown
      time
    - NFSD: replace delayed_work with work_struct for nfsd_client_shrinker
    - nfsd: don't free files unconditionally in __nfsd_file_cache_purge
    - nfsd: don't destroy global nfs4_file table in per-net shutdown
    - NFSD: enhance inter-server copy cleanup
    - nfsd: allow nfsd_file_get to sanely handle a NULL pointer
    - nfsd: clean up potential nfsd_file refcount leaks in COPY codepath
    - NFSD: fix leaked reference count of nfsd4_ssc_umount_item
    - nfsd: don't hand out delegation on setuid files being opened for write
    - NFSD: fix problems with cleanup on errors in nfsd4_copy
    - nfsd: fix courtesy client with deny mode handling in nfs4_upgrade_open
    - nfsd: don't fsync nfsd_files on last close
    - NFSD: copy the whole verifier in nfsd_copy_write_verifier
    - NFSD: Protect against filesystem freezing
    - nfsd: don't replace page in rq_pages if it's a continuation of last page
    - nfsd: call op_release, even when op_func returns an error
    - nfsd: don't open-code clear_and_wake_up_bit
    - nfsd: NFSD_FILE_KEY_INODE only needs to find GC'ed entries
    - nfsd: simplify test_bit return in NFSD_FILE_KEY_FULL comparator
    - nfsd: don't kill nfsd_files because of lease break error
    - nfsd: add some comments to nfsd_file_do_acquire
    - nfsd: don't take/put an extra reference when putting a file
    - nfsd: update comment over __nfsd_file_cache_purge
    - nfsd: allow reaping files still under writeback
    - NFSD: Convert filecache to rhltable
    - nfsd: simplify the delayed disposal list code
    - NFSD: Fix problem of COMMIT and NFS4ERR_DELAY in infinite loop
    - nfsd: make a copy of struct iattr before calling notify_change
    - nfsd: fix double fget() bug in __write_ports_addfd()
    - lockd: drop inappropriate svc_get() from locked_get()
    - NFSD: Add an nfsd4_encode_nfstime4() helper
    - nfsd: Fix creation time serialization order
    - nfsd: Simplify code around svc_exit_thread() call in nfsd()
    - nfsd: separate nfsd_last_thread() from nfsd_put()
    - Documentation: Add missing documentation for EXPORT_OP flags
    - NFSD: fix possible oops when nfsd/pool_stats is closed.
    - nfsd: call nfsd_last_thread() before final nfsd_put()
    - nfsd: drop the nfsd_put helper
    - nfsd: fix RELEASE_LOCKOWNER
    - nfsd: don't take fi_lock in nfsd_break_deleg_cb()
    - nfsd: don't call locks_release_private() twice concurrently
    - nfsd: Fix a regression in nfsd_setattr()
    - perf/core: Fix reentry problem in perf_output_read_group()
    - efivarfs: Request at most 512 bytes for variable names
    - powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
    - selftests: mptcp: diag: return KSFT_FAIL not test_cnt
    - vfio/pci: Disable auto-enable of exclusive INTx IRQ
    - vfio/pci: Lock external INTx masking ops
    - vfio: Introduce interface to flush virqfd inject workqueue
    - vfio/pci: Create persistent INTx handler
    - vfio/platform: Create persistent IRQ handlers
    - vfio/fsl-mc: Block calling interrupt handler without trigger
    - serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
    - mm/migrate: set swap entry values of THP tail pages properly.
    - init: open /initrd.image with O_LARGEFILE
    - btrfs: zoned: use zone aware sb location for scrub
    - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
    - exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
    - hexagon: vmlinux.lds.S: handle attributes section
    - mmc: core: Initialize mmc_blk_ioc_data
    - mmc: core: Avoid negative index with array access
    - net: ll_temac: platform_get_resource replaced by wrong function
    - drm/i915/gt: Reset queue_priority_hint on parking
    - drm/amdgpu: Use drm_mode_copy()
    - drm/amd/display: Preserve original aspect ratio in create stream
    - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
    - scsi: core: Fix unremoved procfs host directory regression
    - staging: vc04_services: changen strncpy() to strscpy_pad()
    - staging: vc04_services: fix information leak in create_component()
    - USB: core: Add hub_get() and hub_put() routines
    - usb: dwc2: host: Fix remote wakeup from hibernation
    - usb: dwc2: host: Fix hibernation flow
    - usb: dwc2: host: Fix ISOC flow in DDMA mode
    - usb: dwc2: gadget: Fix exiting from clock gating
    - usb: dwc2: gadget: LPM flow fix
    - usb: udc: remove warning when queue disabled ep
    - usb: typec: ucsi: Ack unsupported commands
    - usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
    - scsi: qla2xxx: Prevent command send on chip reset
    - scsi: qla2xxx: Fix N2N stuck connection
    - scsi: qla2xxx: Split FCE|EFT trace control
    - scsi: qla2xxx: NVME|FCP prefer flag not being honored
    - scsi: qla2xxx: Fix command flush on cable pull
    - scsi: qla2xxx: Fix double free of fcport
    - scsi: qla2xxx: Change debug message during driver unload
    - scsi: qla2xxx: Delay I/O Abort on PCI error
    - x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled
    - PCI/DPC: Quirk PIO log size for Intel Ice Lake Root Ports
    - scsi: lpfc: Correct size for wqe for memset()
    - USB: core: Fix deadlock in usb_deauthorize_interface()
    - scsi: usb: Call scsi_done() directly
    - scsi: usb: Stop using the SCSI pointer
    - USB: UAS: return ENODEV when submit urbs fail with device not attached
    - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
    - mlxbf_gige: stop PHY during open() error paths
    - iwlwifi: mvm: rfi: use kmemdup() to replace kzalloc + memcpy
    - wifi: iwlwifi: mvm: rfi: fix potential response leaks
    - ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa()
    - s390/qeth: handle deferred cc1
    - tcp: properly terminate timers for kernel sockets
    - ACPICA: debugger: check status of acpi_evaluate_object() in
      acpi_db_walk_for_fields()
    - mlxbf_gige: call request_irq() after NAPI initialized
    - bpf: Protect against int overflow for stack access size
    - Octeontx2-af: fix pause frame configuration in GMP mode
    - dm integrity: fix out-of-range warning
    - r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
    - x86/cpufeatures: Add new word for scattered features
    - x86/cpufeatures: Add CPUID_LNX_5 to track recently added Linux-defined word
    - arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
    - Bluetooth: hci_event: set the conn encrypted before conn establishes
    - Bluetooth: Fix TOCTOU in HCI debugfs implementation
    - xen-netfront: Add missing skb_mark_for_recycle
    - net/rds: fix possible cp null dereference
    - locking/rwsem: Disable preemption while trying for rwsem lock
    - io_uring: ensure '0' is returned on file registration success
    - Revert "x86/mm/ident_map: Use gbpages only where full GB page should be
      mapped."
    - mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL
      allocations
    - thermal: devfreq_cooling: Fix perf state when calculate dfc res_util
    - KVM: x86: Bail to userspace if emulation of atomic user access faults
    - KVM: x86: Mark target gfn of emulated atomic instruction as dirty
    - netfilter: nf_tables: reject new basechain after table flag update
    - netfilter: nf_tables: flush pending destroy work before exit_net release
    - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
    - netfilter: validate user input for expected length
    - vboxsf: Avoid an spurious warning if load_nls_xxx() fails
    - bpf, sockmap: Prevent lock inversion deadlock in map delete elem
    - net/sched: act_skbmod: prevent kernel-infoleak
    - net: stmmac: fix rx queue priority assignment
    - selftests: net: gro fwd: update vxlan GRO test expectations
    - erspan: make sure erspan_base_hdr is present in skb->head
    - selftests: reuseaddr_conflict: add missing new line at the end of the output
    - ipv6: Fix infinite recursion in fib6_dump_done().
    - mlxbf_gige: stop interface during shutdown
    - udp: do not accept non-tunnel GSO skbs landing in a tunnel
    - udp: do not transition UDP GRO fraglist partial checksums to unnecessary
    - udp: prevent local UDP tunnel packets from being GROed
    - octeontx2-af: Fix issue with loading coalesced KPU profiles
    - octeontx2-pf: check negative error code in otx2_open()
    - i40e: fix i40e_count_filters() to count only active/new filters
    - i40e: fix vf may be used uninitialized in this function warning
    - scsi: qla2xxx: Update manufacturer details
    - scsi: qla2xxx: Update manufacturer detail
    - Revert "usb: phy: generic: Get the vbus supply"
    - i40e: Store the irq number in i40e_q_vector
    - i40e: Remove _t suffix from enum type names
    - i40e: Enforce software interrupt during busy-poll exit
    - net: usb: asix: suspend embedded PHY if external is used
    - drivers: net: convert to boolean for the mac_managed_pm flag
    - net: fec: Set mac_managed_pm during probe
    - net: ravb: Always process TX descriptor ring
    - ASoC: rt5682-sdw: fix locking sequence
    - ASoC: rt711-sdca: fix locking sequence
    - ASoC: rt711-sdw: fix locking sequence
    - ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
    - ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
    - scsi: mylex: Fix sysfs buffer lengths
    - ata: sata_mv: Fix PCI device ID table declaration compilation warning
    - nfsd: hold a lighter-weight client reference over CB_RECALL_ANY
    - HID: uhid: Use READ_ONCE()/WRITE_ONCE() for ->running
    - openrisc: Fix pagewalk usage in arch_dma_{clear, set}_uncached
    - fs/pipe: Fix lockdep false-positive in watchqueue pipe_write()
    - ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with
      microphone
    - driver core: Introduce device_link_wait_removal()
    - of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
    - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
    - s390/entry: align system call table on 8 bytes
    - riscv: Fix spurious errors from __get/put_kernel_nofault
    - riscv: process: Fix kernel gp leakage
    - x86/bugs: Fix the SRSO mitigation on Zen3/4
    - x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for
      !SRSO
    - mptcp: don't account accept() of non-MPC client as fallback to TCP
    - mm/secretmem: fix GUP-fast succeeding on secretmem folios
    - gro: fix ownership transfer
    - nvme: fix miss command type check
    - x86: set SPECTRE_BHI_ON as default
    - Linux 5.15.154
  * CVE-2024-23307
    - md/raid5: fix atomicity violation in raid5_cache_count
  * CVE-2024-26828
    - cifs: fix underflow in parse_server_interfaces()
  * CVE-2024-24861
    - media: xc4000: Fix atomicity violation in xc4000_get_frequency
  * CVE-2024-26642
    - netfilter: nf_tables: disallow anonymous set with timeout flag
  * CVE-2024-26926
    - binder: check offset alignment in binder_get_object()
  * CVE-2024-26922
    - drm/amdgpu: validate the parameters of bo mapping operations more clearly
  * CVE-2023-6039
    - timers: Silently ignore timers with a NULL function
  * CVE-2024-26924
    - netfilter: nft_set_pipapo: do not free live element
  * CVE-2024-26643
    - netfilter: nf_tables: mark set as dead when unbinding anonymous set with
      timeout

 -- Jian Hui Lee <jianhui.lee@canonical.com>  Fri, 27 Sep 2024 21:16:26 +0800

linux-mtk (5.15.0-1033.38) jammy; urgency=medium

  * jammy/linux-mtk: 5.15.0-1033.38 -proposed tracker (LP: #2072455)

  * [g350] No video output on HDMI (LP: #2072531)
    - SAUCE: (no-up) drm/mediatek: dpi: fix hdmi output for g350(mt8365)

  * [UC22][g350] systemd-backlight@backlight:14014000.dsi0.0.service: Failed to
    write system 'brightness' attribute: Invalid argument during warm-boot /
    cold-boot stress test (LP: #2069787)
    - [Config] CONFIG_DRM_PANEL_STARTEK_KD070FHFID015=m

  * [SRU] UBSAN: shift-out-of-bounds in mt6359-regulator.c:281 (LP: #2059227)
    - SAUCE: (no-up) regulator: mt6359: fix regulator mode setting

  [ Ubuntu: 5.15.0-113.123 ]

  * jammy/linux: 5.15.0-113.123 -proposed tracker (LP: #2068242)
  * CVE-2024-26924
    - netfilter: nft_set_pipapo: do not free live element
  * CVE-2024-26643
    - netfilter: nf_tables: mark set as dead when unbinding anonymous set with
      timeout

 -- Jian Hui Lee <jianhui.lee@canonical.com>  Mon, 15 Jul 2024 10:28:19 +0800

linux-mtk (5.15.0-1032.37) jammy; urgency=medium

  * jammy/linux-mtk: 5.15.0-1032.37 -proposed tracker (LP: #2069247)

  * [uc22][g350] Call trace "WARNING: CPU: 1 PID: 2055 at
    drivers/net/phy/phy_device.c:324 mdio_bus_phy_resume+0x148/0x150" be
    observed during suspend (LP: #2062505)
    - SAUCE: (no-up) net: ethernet: mtk-star-emac: set mac_managed_pm during
      enable

  * [g1200-evk] kernel null pointer deference happened when unload apusys module
    (LP: #2067439)
    - SAUCE: (no-up) apusys: vpu: Set return value correctly if core0 can't be
      probed
    - SAUCE: (no-up) apusys: sw_logger: Check dma addr in sw_logger_remove

  * [g1200-evk] Kernel Sanity Check - The log shown with level > error are
    regarded as fail. (LP: #2033716)
    - SAUCE: (no-up) apusys: vpu: Replace trace_printk with vpu_met_debug
    - SAUCE: (no-up) apusys: Don't call trace_puts if CONFIG_UBUNTU_HOST is
      enabled

  * Miscellaneous Ubuntu changes
    - SAUCE: (no-up) drm/tegra: dpaux: fix build error for include statements
    - SAUCE: (no-up) apusys: Include header file from correct place
    - SAUCE: (no-up) GENIO: media: platform: mtk-mdp3: Include header file from
      correct place
    - SAUCE: (no-up) GENIO: soc: mediatek: hdmirx: Include header file from
      correct place
    - [Packaging] arm64: enable signed kernel

  [ Ubuntu: 5.15.0-112.122 ]

  * jammy/linux: 5.15.0-112.122 -proposed tracker (LP: #2065898)
  * CVE-2024-21823
    - dmanegine: idxd: reformat opcap output to match bitmap_parse() input
    - dmaengine: idxd: add WQ operation cap restriction support
    - dmaengine: idxd: add knob for enqcmds retries
    - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist
    - dmaengine: idxd: add a new security check to deal with a hardware erratum
    - dmaengine: idxd: add a write() method for applications to submit work

  [ Ubuntu: 5.15.0-111.121 ]

  * jammy/linux: 5.15.0-111.121 -proposed tracker (LP: #2063763)
  * RTL8852BE fw security fail then lost WIFI function during suspend/resume
    cycle (LP: #2063096)
    - wifi: rtw89: download firmware with five times retry
  * Mount CIFS fails with Permission denied (LP: #2061986)
    - cifs: fix ntlmssp auth when there is no key exchange
  * USB stick can't be detected (LP: #2040948)
    - usb: Disable USB3 LPM at shutdown
  * Jammy update: v5.15.153 upstream stable release (LP: #2063290)
    - io_uring/unix: drop usage of io_uring socket
    - io_uring: drop any code related to SCM_RIGHTS
    - selftests: tls: use exact comparison in recv_partial
    - ASoC: rt5645: Make LattePanda board DMI match more precise
    - x86/xen: Add some null pointer checking to smp.c
    - MIPS: Clear Cause.BD in instruction_pointer_set
    - HID: multitouch: Add required quirk for Synaptics 0xcddc device
    - gen_compile_commands: fix invalid escape sequence warning
    - RDMA/mlx5: Fix fortify source warning while accessing Eth segment
    - RDMA/mlx5: Relax DEVX access upon modify commands
    - riscv: dts: sifive: add missing #interrupt-cells to pmic
    - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h
    - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
    - net/iucv: fix the allocation size of iucv_path_table array
    - parisc/ftrace: add missing CONFIG_DYNAMIC_FTRACE check
    - block: sed-opal: handle empty atoms when parsing response
    - dm-verity, dm-crypt: align "struct bvec_iter" correctly
    - scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
    - ALSA: hda/realtek - ALC285 reduce pop noise from Headphone port
    - drm/amdgpu: Enable gpu reset for S3 abort cases on Raven series
    - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
    - firewire: core: use long bus reset on gap count error
    - ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet
    - Input: gpio_keys_polled - suppress deferred probe error for gpio
    - ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC
    - ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode
    - ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll
    - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
    - s390/dasd: put block allocation in separate function
    - s390/dasd: add query PPRC function
    - s390/dasd: add copy pair setup
    - s390/dasd: add autoquiesce feature
    - s390/dasd: Use dev_*() for device log messages
    - s390/dasd: fix double module refcount decrement
    - fs/select: rework stack allocation hack for clang
    - md: Don't clear MD_CLOSING when the raid is about to stop
    - lib/cmdline: Fix an invalid format specifier in an assertion msg
    - time: test: Fix incorrect format specifier
    - rtc: test: Fix invalid format specifier.
    - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
    - timekeeping: Fix cross-timestamp interpolation on counter wrap
    - timekeeping: Fix cross-timestamp interpolation corner case decision
    - timekeeping: Fix cross-timestamp interpolation for non-x86
    - sched/fair: Take the scheduling domain into account in select_idle_core()
    - wifi: ath10k: fix NULL pointer dereference in
      ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
    - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
    - wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled
    - wifi: b43: Stop correct queue in DMA worker when QoS is disabled
    - wifi: b43: Disable QoS for bcm4331
    - wifi: wilc1000: fix declarations ordering
    - wifi: wilc1000: fix RCU usage in connect path
    - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
    - wifi: wilc1000: fix multi-vif management when deleting a vif
    - wifi: mwifiex: debugfs: Drop unnecessary error check for
      debugfs_create_dir()
    - cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value
    - cpufreq: Explicitly include correct DT includes
    - cpufreq: mediatek-hw: Wait for CPU supplies before probing
    - sock_diag: annotate data-races around sock_diag_handlers[family]
    - inet_diag: annotate data-races around inet_diag_table[]
    - bpftool: Silence build warning about calloc()
    - af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc().
    - cpufreq: mediatek-hw: Don't error out if supply is not found
    - arm64: dts: imx8mm-kontron: Disable pullups for I2C signals on SL/BL i.MX8MM
    - arm64: dts: imx8mm-kontron: Disable pullups for onboard UART signals on BL
      board
    - arm64: dts: imx8mm-kontron: Add support for ultra high speed modes on SD
      card
    - arm64: dts: imx8mm-kontron: Use the VSELECT signal to switch SD card IO
      voltage
    - arm64: dts: imx8mm-kontron: Disable pull resistors for SD card signals on BL
      board
    - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete
    - wifi: iwlwifi: mvm: report beacon protection failures
    - wifi: iwlwifi: dbg-tlv: ensure NUL termination
    - wifi: iwlwifi: fix EWRD table validity check
    - arm64: dts: imx8mm-venice-gw71xx: fix USB OTG VBUS
    - pwm: atmel-hlcdc: Convert to platform remove callback returning void
    - pwm: atmel-hlcdc: Use consistent variable naming
    - pwm: atmel-hlcdc: Fix clock imbalance related to suspend support
    - net: blackhole_dev: fix build warning for ethh set but not used
    - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
    - pwm: sti: Implement .apply() callback
    - pwm: sti: Fix capture for st,pwm-num-chan < st,capture-num-chan
    - wifi: iwlwifi: mvm: don't set replay counters to 0xff
    - s390/vdso: drop '-fPIC' from LDFLAGS
    - ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down()
    - arm64: dts: mt8183: kukui: Add Type C node
    - arm64: dts: mt8183: kukui: Split out keyboard node and describe detachables
    - arm64: dts: mt8183: Move CrosEC base detection node to kukui-based DTs
    - arm64: dts: mediatek: mt7622: add missing "device_type" to memory nodes
    - bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly
    - wireless: Remove redundant 'flush_workqueue()' calls
    - wifi: wilc1000: prevent use-after-free on vif when cleaning up all
      interfaces
    - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
    - bus: tegra-aconnect: Update dependency to ARCH_TEGRA
    - [Config]: update CONFIG_TEGRA_ACONNECT
    - iommu/amd: Mark interrupt as managed
    - wifi: brcmsmac: avoid function pointer casts
    - net: ena: Remove ena_select_queue
    - ARM: dts: arm: realview: Fix development chip ROM compatible value
    - arm64: dts: renesas: r8a779a0: Update to R-Car Gen4 compatible values
    - arm64: dts: renesas: r8a779a0: Correct avb[01] reg sizes
    - ARM: dts: imx6dl-yapp4: Move phy reset into switch node
    - ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address
    - ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node
    - arm64: dts: marvell: reorder crypto interrupts on Armada SoCs
    - ACPI: resource: Add Infinity laptops to irq1_edge_low_force_override
    - ACPI: resource: Do IRQ override on Lunnen Ground laptops
    - ACPI: resource: Add MAIBENBEN X577 to irq1_edge_low_force_override
    - ACPI: scan: Fix device check notification handling
    - x86, relocs: Ignore relocations in .notes section
    - SUNRPC: fix some memleaks in gssx_dec_option_array
    - mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove
      function
    - wifi: rtw88: 8821c: Fix false alarm count
    - PCI: Make pci_dev_is_disconnected() helper public for other drivers
    - iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected
    - igb: move PEROUT and EXTTS isr logic to separate functions
    - igb: Fix missing time sync events
    - Bluetooth: Remove superfluous call to hci_conn_check_pending()
    - Bluetooth: hci_qca: Add support for QTI Bluetooth chip wcn6855
    - Bluetooth: hci_qca: don't use IS_ERR_OR_NULL() with gpiod_get_optional()
    - Bluetooth: hci_core: Fix possible buffer overflow
    - sr9800: Add check for usbnet_get_endpoints
    - bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
    - bpf: Fix hashtab overflow check on 32-bit arches
    - bpf: Fix stackmap overflow check on 32-bit arches
    - ipv6: fib6_rules: flush route cache when rule is changed
    - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
    - net: phy: fix phy_get_internal_delay accessing an empty array
    - net: hns3: fix kernel crash when 1588 is received on HIP08 devices
    - net: hns3: fix port duplex configure error in IMP reset
    - net: phy: DP83822: enable rgmii mode if phy_interface_is_rgmii
    - net: phy: dp83822: Fix RGMII TX delay configuration
    - OPP: debugfs: Fix warning around icc_get_name()
    - tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function
    - net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
    - bpf: net: Change sk_getsockopt() to take the sockptr_t argument
    - bpf: net: Change do_ip_getsockopt() to take the sockptr_t argument
    - ipmr: fix incorrect parameter validation in the ip_mroute_getsockopt()
      function
    - l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt()
      function
    - udp: fix incorrect parameter validation in the udp_lib_getsockopt() function
    - net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function
    - net/x25: fix incorrect parameter validation in the x25_getsockopt() function
    - nfp: flower: handle acti_netdevs allocation failure
    - dm raid: fix false positive for requeue needed during reshape
    - dm: call the resume method on internal suspend
    - drm/tegra: dsi: Add missing check for of_find_device_by_node
    - drm/tegra: dpaux: Populate AUX bus
    - drm/tegra: dpaux: Fix PM disable depth imbalance in tegra_dpaux_probe
    - drm/tegra: dsi: Make use of the helper function dev_err_probe()
    - drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe()
    - drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path
      of tegra_dsi_probe()
    - drm/tegra: dc: rgb: Allow changing PLLD rate on Tegra30+
    - drm/tegra: rgb: Fix some error handling paths in tegra_dc_rgb_probe()
    - drm/tegra: rgb: Fix missing clk_put() in the error handling paths of
      tegra_dc_rgb_probe()
    - drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths
      of tegra_output_probe()
    - drm/rockchip: inno_hdmi: Fix video timing
    - drm: Don't treat 0 as -1 in drm_fixp2int_ceil
    - drm/ttm: add ttm_resource_fini v2
    - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node
    - drm/rockchip: lvds: do not overwrite error code
    - drm/rockchip: lvds: do not print scary message when probing defer
    - drm/lima: fix a memleak in lima_heap_alloc
    - dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA
    - [Config]: update CONFIG_TEGRA210_ADMA
    - media: tc358743: register v4l2 async device only after successful setup
    - PCI/DPC: Print all TLP Prefixes, not just the first
    - perf record: Fix possible incorrect free in record__switch_output()
    - HID: lenovo: Add middleclick_workaround sysfs knob for cptkbd
    - drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
    - drm/amd/display: Fix potential NULL pointer dereferences in
      'dcn10_set_output_transfer_func()'
    - perf evsel: Fix duplicate initialization of data->id in
      evsel__parse_sample()
    - clk: meson: Add missing clocks to axg_clk_regmaps
    - media: em28xx: annotate unchecked call to media_device_register()
    - media: v4l2-tpg: fix some memleaks in tpg_alloc
    - media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity
    - media: edia: dvbdev: fix a use-after-free
    - pinctrl: mediatek: Drop bogus slew rate register range for MT8192
    - clk: qcom: reset: Commonize the de/assert functions
    - clk: qcom: reset: Ensure write completion on reset de/assertion
    - quota: simplify drop_dquot_ref()
    - quota: Fix potential NULL pointer dereference
    - quota: Fix rcu annotations of inode dquot pointers
    - PCI/P2PDMA: Fix a sleeping issue in a RCU read section
    - PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
    - crypto: xilinx - call finalize with bh disabled
    - perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str()
    - drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode()
    - ALSA: seq: fix function cast warnings
    - perf stat: Avoid metric-only segv
    - ASoC: meson: Use dev_err_probe() helper
    - ASoC: meson: aiu: fix function pointer type mismatch
    - ASoC: meson: t9015: fix function pointer type mismatch
    - powerpc: Force inlining of arch_vmap_p{u/m}d_supported()
    - PCI: endpoint: Support NTB transfer between RC and EP
    - [Config]: update CONFIG_PCI_EPF_VNTB
    - NTB: EPF: fix possible memory leak in pci_vntb_probe()
    - NTB: fix possible name leak in ntb_register_device()
    - media: sun8i-di: Fix coefficient writes
    - media: sun8i-di: Fix power on/off sequences
    - media: sun8i-di: Fix chroma difference threshold
    - media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak
    - media: go7007: add check of return value of go7007_read_addr()
    - media: pvrusb2: remove redundant NULL check
    - media: pvrusb2: fix pvr2_stream_callback casts
    - clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times
    - drm/mediatek: dsi: Fix DSI RGB666 formats and definitions
    - PCI: Mark 3ware-9650SE Root Port Extended Tags as broken
    - clk: hisilicon: hi3519: Release the correct number of gates in
      hi3519_clk_unregister()
    - clk: hisilicon: hi3559a: Fix an erroneous devm_kfree()
    - drm/tegra: put drm_gem_object ref on error in tegra_fb_create
    - mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref
    - mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a
      ref
    - crypto: arm/sha - fix function cast warnings
    - drm/tidss: Fix initial plane zpos values
    - mtd: maps: physmap-core: fix flash size larger than 32-bit
    - mtd: rawnand: lpc32xx_mlc: fix irq handler prototype
    - ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs
    - ASoC: meson: axg-tdm-interface: add frame rate constraint
    - HID: amd_sfh: Update HPD sensor structure elements
    - drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int()
    - media: pvrusb2: fix uaf in pvr2_context_set_notify
    - media: dvb-frontends: avoid stack overflow warnings with clang
    - media: go7007: fix a memleak in go7007_load_encoder
    - media: ttpci: fix two memleaks in budget_av_attach
    - media: mediatek: vcodec: avoid -Wcast-function-type-strict warning
    - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
    - powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks
    - drm/msm/dpu: add division of drm_display_mode's hskew parameter
    - module: Add support for default value for module async_probe
    - modules: wait do_free_init correctly
    - powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc.
    - leds: aw2013: Unlock mutex before destroying it
    - leds: sgm3140: Add missing timer cleanup and flash gpio control
    - backlight: lm3630a: Initialize backlight_properties on init
    - backlight: lm3630a: Don't set bl->props.brightness in get_brightness
    - backlight: da9052: Fully initialize backlight_properties during probe
    - backlight: lm3639: Fully initialize backlight_properties during probe
    - backlight: lp8788: Fully initialize backlight_properties during probe
    - sparc32: Fix section mismatch in leon_pci_grpci
    - clk: Fix clk_core_get NULL dereference
    - clk: zynq: Prevent null pointer dereference caused by kmalloc failure
    - ALSA: hda/realtek: fix ALC285 issues on HP Envy x360 laptops
    - ALSA: usb-audio: Stop parsing channels bits when all channels are found.
    - RDMA/srpt: Do not register event handler until srpt device is fully setup
    - f2fs: multidevice: support direct IO
    - f2fs: invalidate META_MAPPING before IPU/DIO write
    - f2fs: replace congestion_wait() calls with io_schedule_timeout()
    - f2fs: fix to invalidate META_MAPPING before DIO write
    - f2fs: invalidate meta pages only for post_read required inode
    - f2fs: reduce stack memory cost by using bitfield in struct f2fs_io_info
    - f2fs: compress: fix to cover normal cluster write with cp_rwsem
    - f2fs: compress: fix to check unreleased compressed cluster
    - scsi: csiostor: Avoid function pointer casts
    - RDMA/device: Fix a race between mad_client and cm_client init
    - RDMA/rtrs-clt: Check strnlen return len in sysfs mpath_policy_store()
    - scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn
    - net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr()
    - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
    - NFSv4.2: fix listxattr maximum XDR buffer size
    - watchdog: stm32_iwdg: initialize default timeout
    - NFS: Fix an off by one in root_nfs_cat()
    - f2fs: compress: fix reserve_cblocks counting error when out of space
    - afs: Revert "afs: Hide silly-rename files from userspace"
    - comedi: comedi_test: Prevent timers rescheduling during deletion
    - remoteproc: stm32: use correct format strings on 64-bit
    - remoteproc: stm32: Fix incorrect type in assignment for va
    - remoteproc: stm32: Fix incorrect type assignment returned by
      stm32_rproc_get_loaded_rsc_tablef
    - tty: vt: fix 20 vs 0x20 typo in EScsiignore
    - serial: max310x: fix syntax error in IRQ error message
    - tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT
    - arm64: dts: broadcom: bcmbca: bcm4908: drop invalid switch cells
    - kconfig: fix infinite loop when expanding a macro at the end of file
    - rtc: mt6397: select IRQ_DOMAIN instead of depending on it
    - serial: 8250_exar: Don't remove GPIO device on suspend
    - staging: greybus: fix get_channel_from_mode() failure path
    - usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin
    - io_uring: don't save/restore iowait state
    - nouveau: reset the bo resource bus info after an eviction
    - octeontx2-af: Use matching wake_up API variant in CGX command interface
    - s390/vtime: fix average steal time calculation
    - soc: fsl: dpio: fix kcalloc() argument order
    - hsr: Fix uninit-value access in hsr_get_node()
    - net: mtk_eth_soc: move MAC_MCR setting to mac_finish()
    - net: mediatek: mtk_eth_soc: clear MAC_MCR_FORCE_LINK only when MAC is up
    - net: ethernet: mtk_eth_soc: fix PPE hanging issue
    - packet: annotate data-races around ignore_outgoing
    - net: veth: do not manipulate GRO when using XDP
    - net: dsa: mt7530: prevent possible incorrect XTAL frequency selection
    - vdpa/mlx5: Allow CVQ size changes
    - wireguard: receive: annotate data-race around receiving_counter.counter
    - rds: introduce acquire/release ordering in acquire/release_in_xmit()
    - hsr: Handle failures in module init
    - net: phy: fix phy_read_poll_timeout argument type in genphy_loopback
    - net/bnx2x: Prevent access to a freed page in page_pool
    - octeontx2-af: Use separate handlers for interrupts
    - netfilter: nf_tables: do not compare internal table flags on updates
    - rcu: add a helper to report consolidated flavor QS
    - net: report RCU QS on threaded NAPI repolling
    - bpf: report RCU QS in cpumap kthread
    - net: dsa: mt7530: fix handling of LLDP frames
    - net: dsa: mt7530: fix handling of 802.1X PAE frames
    - net: dsa: mt7530: fix link-local frames that ingress vlan filtering ports
    - net: dsa: mt7530: fix handling of all link-local frames
    - spi: spi-mt65xx: Fix NULL pointer access in interrupt handler
    - regmap: Add missing map->bus check
    - remoteproc: stm32: fix incorrect optional pointers
  * Jammy update: v5.15.152 upstream stable release (LP: #2063276)
    - mmc: mmci: stm32: use a buffer for unaligned DMA requests
    - mmc: mmci: stm32: fix DMA API overlapping mappings warning
    - net: lan78xx: fix runtime PM count underflow on link stop
    - ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
    - i40e: disable NAPI right after disabling irqs when handling xsk_pool
    - tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
    - geneve: make sure to pull inner header in geneve_rx()
    - net: sparx5: Fix use after free inside sparx5_del_mact_entry
    - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
    - net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
    - cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
    - net/rds: fix WARNING in rds_conn_connect_if_down
    - netfilter: nft_ct: fix l3num expectations with inet pseudo family
    - netfilter: nf_conntrack_h323: Add protection for bmp length out of range
    - erofs: apply proper VMA alignment for memory mapped files on THP
    - netrom: Fix a data-race around sysctl_netrom_default_path_quality
    - netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
    - netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser
    - netrom: Fix a data-race around sysctl_netrom_transport_timeout
    - netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
    - netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
    - netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
    - netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
    - netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
    - netrom: Fix a data-race around sysctl_netrom_routing_control
    - netrom: Fix a data-race around sysctl_netrom_link_fails_count
    - netrom: Fix data-races around sysctl_net_busy_read
    - ALSA: usb-audio: Refcount multiple accesses on the single clock
    - ALSA: usb-audio: Clear fixed clock rate at closing EP
    - ALSA: usb-audio: Split endpoint setups for hw_params and prepare (take#2)
    - ALSA: usb-audio: Properly refcounting clock rate
    - ALSA: usb-audio: Apply mutex around snd_usb_endpoint_set_params()
    - ALSA: usb-audio: Correct the return code from snd_usb_endpoint_set_params()
    - ALSA: usb-audio: Avoid superfluous endpoint setup
    - ALSA: usb-audio: Add quirk for Tascam Model 12
    - ALSA: usb-audio: Add new quirk FIXED_RATE for JBL Quantum810 Wireless
    - ALSA: usb-audio: Fix microphone sound on Nexigo webcam.
    - ALSA: usb-audio: add quirk for RODE NT-USB+
    - drm/amd/display: Fix uninitialized variable usage in core_link_ 'read_dpcd()
      & write_dpcd()' functions
    - nfp: flower: add goto_chain_index for ct entry
    - nfp: flower: add hardware offload check for post ct entry
    - selftests/mm: switch to bash from sh
    - selftests: mm: fix map_hugetlb failure on 64K page size systems
    - xhci: process isoc TD properly when there was a transaction error mid TD.
    - xhci: handle isoc Babble and Buffer Overrun events properly
    - serial: max310x: use regmap methods for SPI batch operations
    - serial: max310x: use a separate regmap for each port
    - serial: max310x: prevent infinite while() loop in port startup
    - drm/amd/pm: do not expose the API used internally only in kv_dpm.c
    - drm/amdgpu: Reset IH OVERFLOW_CLEAR bit
    - selftests: mptcp: decrease BW in simult flows
    - hv_netvsc: use netif_is_bond_master() instead of open code
    - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
    - drm/amd/display: Re-arrange FPU code structure for dcn2x
    - drm/amd/display: move calcs folder into DML
    - drm/amd/display: remove DML Makefile duplicate lines
    - drm/amd/display: Increase frame-larger-than for all display_mode_vba files
    - getrusage: add the "signal_struct *sig" local variable
    - getrusage: move thread_group_cputime_adjusted() outside of
      lock_task_sighand()
    - getrusage: use __for_each_thread()
    - getrusage: use sig->stats_lock rather than lock_task_sighand()
    - proc: Use task_is_running() for wchan in /proc/$pid/stat
    - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of
      lock_task_sighand()
    - ALSA: usb-audio: Fix wrong kfree issue in snd_usb_endpoint_free_all
    - ALSA: usb-audio: Always initialize fixed_rate in
      snd_usb_find_implicit_fb_sync_format()
    - ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum610 Wireless
    - ALSA: usb-audio: Sort quirk table entries
    - regmap: allow to define reg_update_bits for no bus configuration
    - regmap: Add bulk read/write callbacks into regmap_config
    - serial: max310x: make accessing revision id interface-agnostic
    - serial: max310x: fix IO data corruption in batched operations
    - Linux 5.15.152
  * CVE-2024-26809
    - netfilter: nft_set_pipapo: release elements in clone only from destroy path
  * CVE-2024-26792
    - btrfs: fix double free of anonymous device after snapshot creation failure
  * CVE-2023-52530
    - wifi: mac80211: fix potential key use-after-free
  * CVE-2023-52447
    - bpf: Defer the free of inner map when necessary
    - rcu-tasks: Provide rcu_trace_implies_rcu_gp()
  * Avoid creating non-working backlight sysfs knob from ASUS board
    (LP: #2060422)
    - platform/x86: asus-wmi: Consider device is absent when the read is ~0
  * [Ubuntu 22.04.4/linux-image-6.5.0-26-generic] Kernel output "UBSAN: array-
    index-out-of-bounds in /build/linux-hwe-6.5-34pCLi/linux-
    hwe-6.5-6.5.0/drivers/net/hyperv/netvsc.c:1445:41" multiple times,
    especially during boot. (LP: #2058477)
    - hv: hyperv.h: Replace one-element array with flexible-array member
  * Jammy update: v5.15.151 upstream stable release (LP: #2060209)
    - netfilter: nf_tables: disallow timeout for anonymous sets
    - mtd: spinand: gigadevice: Fix the get ecc status issue
    - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
    - net: ip_tunnel: prevent perpetual headroom growth
    - tun: Fix xdp_rxq_info's queue_index when detaching
    - cpufreq: intel_pstate: fix pstate limits enforcement for adjust_perf call
      back
    - net: veth: clear GRO when clearing XDP even when down
    - ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
    - lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is
      detected
    - net: enable memcg accounting for veth queues
    - veth: try harder when allocating queue memory
    - net: usb: dm9601: fix wrong return value in dm9601_mdio_read
    - uapi: in6: replace temporary label with rfc9486
    - stmmac: Clear variable when destroying workqueue
    - Bluetooth: Avoid potential use-after-free in hci_error_reset
    - Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
    - netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
    - netfilter: nfnetlink_queue: silence bogus compiler warning
    - netfilter: core: move ip_ct_attach indirection to struct nf_ct_hook
    - netfilter: make function op structures const
    - netfilter: let reset rules clean out conntrack entries
    - netfilter: bridge: confirm multicast packets before passing them up the
      stack
    - rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back
    - igb: extend PTP timestamp adjustments to i211
    - efi/capsule-loader: fix incorrect allocation size
    - power: supply: bq27xxx-i2c: Do not free non existing IRQ
    - ALSA: Drop leftover snd-rtctimer stuff from Makefile
    - fbcon: always restore the old font data in fbcon_do_set_font()
    - afs: Fix endless loop in directory parsing
    - riscv: Sparse-Memory/vmemmap out-of-bounds fix
    - ALSA: firewire-lib: fix to check cycle continuity
    - gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
    - wifi: nl80211: reject iftype change with mesh ID change
    - btrfs: dev-replace: properly validate device names
    - dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
    - dmaengine: ptdma: use consistent DMA masks
    - dmaengine: fsl-qdma: init irq after reg initialization
    - mmc: core: Fix eMMC initialization with 1-bit bus connection
    - mmc: sdhci-xenon: add timeout for PHY init complete
    - mmc: sdhci-xenon: fix PHY init clock stability
    - pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
    - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers
    - mptcp: move __mptcp_error_report in protocol.c
    - mptcp: process pending subflow error on close
    - mptcp: rename timer related helper to less confusing names
    - selftests: mptcp: add missing kconfig for NF Filter
    - selftests: mptcp: add missing kconfig for NF Filter in v6
    - mptcp: clean up harmless false expressions
    - mptcp: add needs_id for netlink appending addr
    - mptcp: push at DSS boundaries
    - mptcp: fix possible deadlock in subflow diag
    - cachefiles: fix memory leak in cachefiles_add_cache()
    - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
    - Revert "drm/bridge: lt8912b: Register and attach our DSI device at probe"
    - af_unix: Drop oob_skb ref before purging queue in GC.
    - gpio: 74x164: Enable output pins after registers are reset
    - gpiolib: Fix the error path order in gpiochip_add_data_with_key()
    - gpio: fix resource unwinding order in error path
    - Revert "interconnect: Fix locking for runpm vs reclaim"
    - Revert "interconnect: Teach lockdep about icc_bw_lock order"
    - bpf: Add BPF_FIB_LOOKUP_SKIP_NEIGH for bpf_fib_lookup
    - bpf: Add table ID to bpf_fib_lookup BPF helper
    - bpf: Derive source IP addr via bpf_*_fib_lookup()
    - Linux 5.15.151
  * Jammy update: v5.15.151 upstream stable release (LP: #2060209) //
    CVE-2024-26782
    - mptcp: fix double-free on socket dismantle
  * Jammy update: v5.15.151 upstream stable release (LP: #2060209) // Fix
    bluetooth connections with 3.0 device (LP: #2063067)
    - Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST
  * Jammy update: v5.15.150 upstream stable release (LP: #2060142)
    - net/sched: Retire CBQ qdisc
    - [Config] updateconfigs for NET_SCH_CBQ
    - net/sched: Retire ATM qdisc
    - [Config] updateconfigs for NET_SCH_ATM
    - net/sched: Retire dsmark qdisc
    - [Config] updateconfigs for NET_SCH_DSMARK
    - smb: client: fix potential OOBs in smb2_parse_contexts()
    - smb: client: fix parsing of SMB3.1.1 POSIX create context
    - sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
    - PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
    - bpf: Merge printk and seq_printf VARARG max macros
    - bpf: Add struct for bin_args arg in bpf_bprintf_prepare
    - bpf: Do cleanup in bpf_bprintf_cleanup only when needed
    - bpf: Remove trace_printk_lock
    - userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
    - zonefs: Improve error handling
    - x86/fpu: Stop relying on userspace for info to fault in xsave buffer
    - sched/rt: Fix sysctl_sched_rr_timeslice intial value
    - sched/rt: Disallow writing invalid values to sched_rt_period_us
    - scsi: target: core: Add TMF to tmr_list handling
    - dmaengine: shdma: increase size of 'dev_id'
    - dmaengine: fsl-qdma: increase size of 'irq_name'
    - wifi: cfg80211: fix missing interfaces when dumping
    - wifi: mac80211: fix race condition on enabling fast-xmit
    - fbdev: savage: Error out if pixclock equals zero
    - fbdev: sis: Error out if pixclock equals zero
    - spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
    - ahci: asm1166: correct count of reported ports
    - ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
    - MIPS: reserve exception vector space ONLY ONCE
    - platform/x86: touchscreen_dmi: Add info for the TECLAST X16 Plus tablet
    - ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap
      corrupt
    - ext4: avoid allocating blocks from corrupted group in
      ext4_mb_try_best_found()
    - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
    - dmaengine: ti: edma: Add some null pointer checks to the edma_probe
    - regulator: pwm-regulator: Add validity checks in continuous .get_voltage
    - nvmet-tcp: fix nvme tcp ida memory leak
    - ALSA: usb-audio: Check presence of valid altsetting control
    - ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
    - spi: sh-msiof: avoid integer overflow in constants
    - Input: xpad - add Lenovo Legion Go controllers
    - netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in
      sctp_new
    - ALSA: usb-audio: Ignore clock selector errors for single connection
    - nvme-fc: do not wait in vain when unloading module
    - nvmet-fcloop: swap the list_add_tail arguments
    - nvmet-fc: release reference on target port
    - nvmet-fc: defer cleanup using RCU properly
    - nvmet-fc: hold reference on hostport match
    - nvmet-fc: abort command when there is no binding
    - nvmet-fc: avoid deadlock on delete association path
    - nvmet-fc: take ref count on tgtport before delete assoc
    - ext4: correct the hole length returned by ext4_map_blocks()
    - Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
    - fs/ntfs3: Modified fix directory element type detection
    - fs/ntfs3: Improve ntfs_dir_count
    - fs/ntfs3: Correct hard links updating when dealing with DOS names
    - fs/ntfs3: Print warning while fixing hard links count
    - fs/ntfs3: Fix detected field-spanning write (size 8) of single field
      "le->name"
    - fs/ntfs3: Add NULL ptr dereference checking at the end of
      attr_allocate_frame()
    - fs/ntfs3: Disable ATTR_LIST_ENTRY size check
    - fs/ntfs3: use non-movable memory for ntfs3 MFT buffer cache
    - fs/ntfs3: Prevent generic message "attempt to access beyond end of device"
    - fs/ntfs3: Correct function is_rst_area_valid
    - fs/ntfs3: Update inode->i_size after success write into compressed file
    - fs/ntfs3: Fix oob in ntfs_listxattr
    - wifi: mac80211: adding missing drv_mgd_complete_tx() call
    - efi: runtime: Fix potential overflow of soft-reserved region size
    - efi: Don't add memblocks for soft-reserved memory
    - hwmon: (coretemp) Enlarge per package core count limit
    - scsi: lpfc: Use unsigned type for num_sge
    - firewire: core: send bus reset promptly on gap count error
    - drm/amdgpu: skip to program GFXDEC registers for suspend abort
    - drm/amdgpu: reset gpu for s3 suspend abort case
    - virtio-blk: Ensure no requests in virtqueues before deleting vqs.
    - pmdomain: mediatek: fix race conditions with genpd
    - ksmbd: free aux buffer if ksmbd_iov_pin_rsp_read fails
    - pmdomain: renesas: r8a77980-sysc: CR7 must be always on
    - erofs: fix lz4 inplace decompression
    - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error
    - drm/ttm: Fix an invalid freeing on already freed page in error path
    - dm-crypt: don't modify the data when using authenticated encryption
    - platform/x86: intel-vbtn: Stop calling "VBDL" from notify_handler
    - platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
    - KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
    - KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
    - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
    - PCI/MSI: Prevent MSI hardware interrupt number truncation
    - l2tp: pass correct message length to ip6_append_data
    - ARM: ep93xx: Add terminator to gpiod_lookup_table
    - Revert "x86/ftrace: Use alternative RET encoding"
    - x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
    - x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
    - x86/ftrace: Use alternative RET encoding
    - x86/returnthunk: Allow different return thunks
    - Revert "x86/alternative: Make custom return thunk unconditional"
    - x86/alternative: Make custom return thunk unconditional
    - serial: amba-pl011: Fix DMA transmission in RS485 mode
    - usb: dwc3: gadget: Don't disconnect if not started
    - usb: cdnsp: blocked some cdns3 specific code
    - usb: cdnsp: fixed issue with incorrect detecting CDNSP family controllers
    - usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
    - usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
    - usb: roles: fix NULL pointer issue when put module's reference
    - usb: roles: don't get/set_role() when usb_role_switch is unregistered
    - mptcp: fix lockless access in subflow ULP diag
    - clk: imx: imx8mp: add shared clk gate for usb suspend clk
    - clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents
    - clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents
    - mtd: rawnand: sunxi: Fix the size of the last OOB region
    - RISC-V: fix funct4 definition for c.jalr in parse_asm.h
    - Input: iqs269a - drop unused device node references
    - Input: iqs269a - configure device with a single block write
    - Input: iqs269a - increase interrupt handler return delay
    - clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed
    - Input: ads7846 - don't report pressure for ads7845
    - clk: renesas: cpg-mssr: Remove superfluous check in resume code
    - clk: imx: avoid memory leak
    - Input: ads7846 - always set last command to PWRDOWN
    - Input: ads7846 - don't check penirq immediately for 7845
    - powerpc/powernv/ioda: Skip unallocated resources when mapping to PE
    - clk: qcom: gpucc-sc7180: fix clk_dis_wait being programmed for CX GDSC
    - clk: qcom: gpucc-sdm845: fix clk_dis_wait being programmed for CX GDSC
    - clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled()
    - powerpc/pseries/lparcfg: add missing RTAS retry status handling
    - powerpc/perf/hv-24x7: add missing RTAS retry status handling
    - powerpc/pseries/lpar: add missing RTAS retry status handling
    - MIPS: SMP-CPS: fix build error when HOTPLUG_CPU not set
    - MIPS: vpe-mt: drop physical_memsize
    - vdpa/mlx5: Don't clear mr struct on destroy MR
    - ARM: dts: BCM53573: Drop nonexistent #usb-cells
    - RDMA/siw: Balance the reference of cep->kref in the error path
    - RDMA/siw: Correct wrong debug message
    - clk: linux/clk-provider.h: fix kernel-doc warnings and typos
    - platform/x86: asus-wmi: Document the dgpu_disable sysfs attribute
    - acpi: property: Let args be NULL in __acpi_node_get_property_reference
    - ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
    - tools headers UAPI: Sync linux/fscrypt.h with the kernel sources
    - perf beauty: Update copy of linux/socket.h with the kernel sources
    - tools/virtio: fix build
    - drm/amdgpu: init iommu after amdkfd device init
    - f2fs: don't set GC_FAILURE_PIN for background GC
    - f2fs: write checkpoint during FG_GC
    - drm/i915/dg1: Update DMC_DEBUG3 register
    - kernel/sched: Remove dl_boosted flag comment
    - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
    - serial: 8250: Remove serial_rs485 sanitization from em485
    - clk: imx8mp: Add DISP2 pixel clock
    - clk: imx8mp: add clkout1/2 support
    - dt-bindings: clocks: imx8mp: Add ID for usb suspend clock
    - net: ethernet: ti: add missing of_node_put before return
    - powerpc/rtas: make all exports GPL
    - powerpc/rtas: ensure 4KB alignment for rtas_data_buf
    - powerpc/eeh: Small refactor of eeh_handle_normal_event()
    - powerpc/eeh: Set channel state after notifying the drivers
    - PM: core: Redefine pm_ptr() macro
    - PM: core: Add new *_PM_OPS macros, deprecate old ones
    - mmc: jz4740: Use the new PM macros
    - mmc: mxc: Use the new PM macros
    - PM: core: Remove static qualifier in DEFINE_SIMPLE_DEV_PM_OPS macro
    - Input: iqs269a - switch to DEFINE_SIMPLE_DEV_PM_OPS() and pm_sleep_ptr()
    - Input: iqs269a - do not poll during suspend or resume
    - Input: iqs269a - do not poll during ATI
    - net/sched: Refactor qdisc_graft() for ingress and clsact Qdiscs
    - netfilter: nf_tables: add rescheduling points during loop detection walks
    - debugobjects: Recheck debug_objects_enabled before reporting
    - nbd: Add the maximum limit of allocated index in nbd_dev_add
    - md: fix data corruption for raid456 when reshape restart while grow up
    - md/raid10: prevent soft lockup while flush writes
    - posix-timers: Ensure timer ID search-loop limit is valid
    - btrfs: add xxhash to fast checksum implementations
    - ACPI: button: Add lid disable DMI quirk for Nextbook Ares 8A
    - ACPI: video: Add backlight=native DMI quirk for Apple iMac11,3
    - ACPI: video: Add backlight=native DMI quirk for Lenovo ThinkPad X131e (3371
      AMD version)
    - arm64: set __exception_irq_entry with __irq_entry as a default
    - arm64: mm: fix VA-range sanity check
    - sched/fair: Don't balance task to its current running CPU
    - wifi: ath11k: fix registration of 6Ghz-only phy without the full channel
      range
    - bpf: Address KCSAN report on bpf_lru_list
    - devlink: report devlink_port_type_warn source device
    - wifi: wext-core: Fix -Wstringop-overflow warning in
      ioctl_standard_iw_point()
    - wifi: iwlwifi: mvm: avoid baid size integer overflow
    - exfat: support dynamic allocate bh for exfat_entry_set_cache
    - arm64: dts: rockchip: fix regulator name on rk3399-rock-4
    - arm64: dts: rockchip: add ES8316 codec for ROCK Pi 4
    - arm64: dts: rockchip: add SPDIF node for ROCK Pi 4
    - ARM: dts: BCM53573: Describe on-SoC BCM53125 rev 4 switch
    - ACPI: video: Add backlight=native DMI quirk for Apple iMac12,1 and iMac12,2
    - ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA
    - ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks
    - ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA
    - ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA
    - xhci: cleanup xhci_hub_control port references
    - xhci: move port specific items such as state completions to port structure
    - xhci: rename resume_done to resume_timestamp
    - xhci: clear usb2 resume related variables in one place.
    - xhci: decouple usb2 port resume and get_port_status request handling
    - xhci: track port suspend state correctly in unsuccessful resume cases
    - cifs: add a warning when the in-flight count goes negative
    - IB/hfi1: Fix a memleak in init_credit_return
    - RDMA/bnxt_re: Return error for SRQ resize
    - RDMA/irdma: Fix KASAN issue with tasklet
    - RDMA/irdma: Validate max_send_wr and max_recv_wr
    - RDMA/irdma: Set the CQ read threshold for GEN 1
    - RDMA/irdma: Add AE for too many RNRS
    - RDMA/srpt: Support specifying the srpt_service_guid parameter
    - RDMA/qedr: Fix qedr_create_user_qp error flow
    - arm64: dts: rockchip: set num-cs property for spi on px30
    - RDMA/srpt: fix function pointer cast warnings
    - bpf, scripts: Correct GPL license name
    - scsi: jazz_esp: Only build if SCSI core is builtin
    - nouveau: fix function cast warnings
    - net: stmmac: Fix incorrect dereference in interrupt handlers
    - ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
    - ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
    - ata: libahci_platform: Convert to using devm bulk clocks API
    - ata: libahci_platform: Introduce reset assertion/deassertion methods
    - ata: ahci_ceva: fix error handling for Xilinx GT PHY support
    - bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel
    - drm/nouveau/instmem: fix uninitialized_var.cocci warning
    - octeontx2-af: Consider the action set by PF
    - s390: use the correct count for __iowrite64_copy()
    - netfilter: nf_tables: set dormant flag on hook register failure
    - netfilter: flowtable: simplify route logic
    - netfilter: nft_flow_offload: reset dst in route object after setting up flow
    - netfilter: nft_flow_offload: release dst in case direct xmit path is used
    - drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
    - drm/amd/display: Fix memory leak in dm_sw_fini()
    - i2c: imx: Add timer for handling the stop condition
    - i2c: imx: when being a target, mark the last read as processed
    - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
    - netfilter: nf_tables: fix scheduling-while-atomic splat
    - ext4: regenerate buddy after block freeing failed if under fc replay
    - ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
    - netfilter: nf_tables: can't schedule in nft_chain_validate
    - r8169: use new PM macros
    - Linux 5.15.150
  * Jammy update: v5.15.150 upstream stable release (LP: #2060142) //
    CVE-2024-26733
    - packet: move from strlcpy with unused retval to strscpy
    - net: dev: Convert sa_data to flexible array in struct sockaddr
    - arp: Prevent overflow in arp_req_get().
  * Jammy update: v5.15.150 upstream stable release (LP: #2060142) //
    CVE-2024-26735
    - ipv6: sr: fix possible use-after-free and null-ptr-deref
  * Jammy update: v5.15.150 upstream stable release (LP: #2060142) //
    CVE-2024-26736
    - afs: Increase buffer size in afs_update_volume_status()
  * Jammy update: v5.15.150 upstream stable release (LP: #2060142) //
    CVE-2024-26748
    - usb: cdns3: fix memory double free when handle zero packet
  * CVE-2023-47233
    - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
  * CVE-2024-26584
    - net: tls: handle backlogging of crypto requests
  * CVE-2024-26585
    - tls: fix race between tx work scheduling and socket close
  * CVE-2024-26583
    - tls: rx: jump to a more appropriate label
    - tls: rx: drop pointless else after goto
    - tls: stop recv() if initial process_rx_list gave us non-DATA
    - tls: rx: don't store the record type in socket context
    - tls: rx: don't store the decryption status in socket context
    - tls: rx: don't issue wake ups when data is decrypted
    - tls: rx: refactor decrypt_skb_update()
    - tls: hw: rx: use return value of tls_device_decrypted() to carry status
    - tls: rx: drop unnecessary arguments from tls_setup_from_iter()
    - tls: rx: don't report text length from the bowels of decrypt
    - tls: rx: wrap decryption arguments in a structure
    - tls: rx: factor out writing ContentType to cmsg
    - tls: rx: don't track the async count
    - tls: rx: move counting TlsDecryptErrors for sync
    - tls: rx: assume crypto always calls our callback
    - tls: rx: use async as an in-out argument
    - tls: decrement decrypt_pending if no async completion will be called
    - net: tls: fix async vs NIC crypto offload
    - Revert "tls: rx: move counting TlsDecryptErrors for sync"
    - tls: rx: simplify async wait
    - tls: rx: return the already-copied data on crypto error
    - tls: rx: allow only one reader at a time
    - tls: rx: release the sock lock on locking timeout
    - tls: extract context alloc/initialization out of tls_set_sw_offload
    - net: tls: factor out tls_*crypt_async_wait()
    - tls: fix race between async notify and socket close
  * CVE-2024-26622
    - tomoyo: fix UAF write bug in tomoyo_write_control()

  [ Ubuntu: 5.15.0-106.116 ]

  * jammy/linux: 5.15.0-106.116 -proposed tracker (LP: #2061812)
  * CVE-2024-2201
    - x86/bugs: Use sysfs_emit()
    - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs
    - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace
    - KVM: x86: Use a switch statement and macros in __feature_translate()
    - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file
    - x86/syscall: Don't force use of indirect calls for system calls
    - x86/bhi: Add support for clearing branch history at syscall entry
    - x86/bhi: Define SPEC_CTRL_BHI_DIS_S
    - x86/bhi: Enumerate Branch History Injection (BHI) bug
    - x86/bhi: Add BHI mitigation knob
    - x86/bhi: Mitigate KVM by default
    - KVM: x86: Add BHI_NO
    - [Config] Set CONFIG_BHI to enabled (auto)
  * Drop fips-checks script from trees (LP: #2055083)
    - [Packaging] Remove fips-checks script
  * alsa/realtek: adjust max output valume for headphone on 2 LG machines
    (LP: #2058573)
    - ALSA: hda/realtek: fix the hp playback volume issue for LG machines
  * A general-proteciton exception during guest migration to unsupported PKRU
    machine (LP: #2032164)
    - x86/fpu: Allow caller to constrain xfeatures when copying to uabi buffer
    - KVM: x86: Constrain guest-supported xfeatures only at KVM_GET_XSAVE{2}
  *  [ICX] [SPR] [ipc/msg] performance: Mitigate the lock contention with percpu
    counter (LP: #2058485)
    - ipc: check checkpoint_restore_ns_capable() to modify C/R proc files
    - ipc/ipc_sysctl.c: remove fallback for !CONFIG_PROC_SYSCTL
    - ipc: Store mqueue sysctls in the ipc namespace
    - ipc: Store ipc sysctls in the ipc namespace
    - ipc: Use the same namespace to modify and validate
    - ipc: Remove extra1 field abuse to pass ipc namespace
    - ipc: Check permissions for checkpoint_restart sysctls at open time
    - percpu: add percpu_counter_add_local and percpu_counter_sub_local
    - ipc/msg: mitigate the lock contention with percpu counter
  * Jammy update: v5.15.149 upstream stable release (LP: #2059014)
    - ksmbd: free ppace array on error in parse_dacl
    - ksmbd: don't allow O_TRUNC open on read-only share
    - ksmbd: validate mech token in session setup
    - ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
    - ksmbd: only v2 leases handle the directory
    - iio: adc: ad7091r: Set alert bit in config register
    - iio: adc: ad7091r: Allow users to configure device events
    - iio: adc: ad7091r: Enable internal vref if external vref is not supplied
    - dmaengine: fix NULL pointer in channel unregistration function
    - scsi: ufs: core: Simplify power management during async scan
    - scsi: ufs: core: Remove the ufshcd_hba_exit() call from ufshcd_async_scan()
    - iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
    - ext4: allow for the last group to be marked as trimmed
    - btrfs: sysfs: validate scrub_speed_max value
    - crypto: api - Disallow identical driver names
    - PM: hibernate: Enforce ordering during image compression/decompression
    - hwrng: core - Fix page fault dead lock on mmap-ed hwrng
    - crypto: s390/aes - Fix buffer overread in CTR mode
    - media: imx355: Enable runtime PM before registering async sub-device
    - rpmsg: virtio: Free driver_override when rpmsg_remove()
    - media: ov9734: Enable runtime PM before registering async sub-device
    - mips: Fix max_mapnr being uninitialized on early stages
    - bus: mhi: host: Drop chan lock before queuing buffers
    - bus: mhi: host: Add spinlock to protect WP access when queueing TREs
    - parisc/firmware: Fix F-extend for PDC addresses
    - async: Split async_schedule_node_domain()
    - async: Introduce async_schedule_dev_nocall()
    - arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
    - arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
    - arm64: dts: qcom: sm8150: fix USB wakeup interrupt types
    - arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
    - lsm: new security_file_ioctl_compat() hook
    - scripts/get_abi: fix source path leak
    - mmc: core: Use mrq.sbc in close-ended ffu
    - mmc: mmc_spi: remove custom DMA mapped buffers
    - rtc: Adjust failure return code for cmos_set_alarm()
    - nouveau/vmm: don't set addr on the fail path to avoid warning
    - ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path
    - rename(): fix the locking of subdirectories
    - ksmbd: set v2 lease version on lease upgrade
    - ksmbd: fix potential circular locking issue in smb2_set_ea()
    - ksmbd: don't increment epoch if current state and request state are same
    - ksmbd: send lease break notification on FILE_RENAME_INFORMATION
    - ksmbd: Add missing set_freezable() for freezable kthread
    - net/smc: fix illegal rmb_desc access in SMC-D connection dump
    - tcp: make sure init the accept_queue's spinlocks once
    - bnxt_en: Wait for FLR to complete during probe
    - vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
    - llc: make llc_ui_sendmsg() more robust against bonding changes
    - llc: Drop support for ETH_P_TR_802_2.
    - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
    - tracing: Ensure visibility when inserting an element into tracing_map
    - afs: Hide silly-rename files from userspace
    - tcp: Add memory barrier to tcp_push()
    - netlink: fix potential sleeping issue in mqueue_flush_file
    - ipv6: init the accept_queue's spinlocks in inet6_create
    - net/mlx5: DR, Use the right GVMI number for drop action
    - net/mlx5: DR, Align mlx5dv_dr API vport action with FW behavior
    - net/mlx5: DR, Can't go to uplink vport on RX rule
    - net/mlx5e: fix a double-free in arfs_create_groups
    - net/mlx5e: fix a potential double-free in fs_any_create_groups
    - overflow: Allow mixed type arguments
    - netfilter: nft_limit: reject configurations that cause integer overflow
    - netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
    - netfilter: nf_tables: validate NFPROTO_* family
    - net: stmmac: Wait a bit for the reset to take effect
    - net: mvpp2: clear BM pool before initialization
    - selftests: netdevsim: fix the udp_tunnel_nic test
    - fjes: fix memleaks in fjes_hw_setup
    - net: fec: fix the unhandled context fault from smmu
    - btrfs: fix infinite directory reads
    - btrfs: set last dir index to the current last index when opening dir
    - btrfs: refresh dir last index during a rewinddir(3) call
    - btrfs: fix race between reading a directory and adding entries to it
    - btrfs: avoid copying BTRFS_ROOT_SUBVOL_DEAD flag to snapshot of subvolume
      being deleted
    - btrfs: ref-verify: free ref cache before clearing mount opt
    - btrfs: tree-checker: fix inline ref size in error messages
    - btrfs: don't warn if discard range is not aligned to sector
    - btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
    - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
    - rbd: don't move requests to the running list on errors
    - exec: Fix error handling in begin_new_exec()
    - wifi: iwlwifi: fix a memory corruption
    - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes
    - netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress
      basechain
    - firmware: arm_scmi: Check mailbox/SMT channel for consistency
    - xfs: read only mounts with fsopen mount API are busted
    - gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
    - drm: Don't unref the same fb many times by mistake due to deadlock handling
    - drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
    - drm/tidss: Fix atomic_flush check
    - drm/bridge: nxp-ptn3460: simplify some error checking
    - PM: core: Remove unnecessary (void *) conversions
    - PM: sleep: Fix possible deadlocks in core system-wide PM code
    - bus: mhi: host: Rename "struct mhi_tre" to "struct mhi_ring_element"
    - bus: mhi: host: Add alignment check for event ring read pointer
    - fs/pipe: move check to pipe_has_watch_queue()
    - pipe: wakeup wr_wait after setting max_usage
    - ARM: dts: qcom: sdx55: fix USB wakeup interrupt types
    - ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
    - ARM: dts: qcom: sdx55: fix pdc '#interrupt-cells'
    - ARM: dts: qcom: sdx55: fix USB DP/DM HS PHY interrupts
    - ARM: dts: qcom: sdx55: fix USB SS wakeup
    - media: mtk-jpeg: Fix use after free bug due to error path handling in
      mtk_jpeg_dec_device_run
    - mm: use __pfn_to_section() instead of open coding it
    - mm/sparsemem: fix race in accessing memory_section->usage
    - PM / devfreq: Fix buffer overflow in trans_stat_show
    - btrfs: add definition for EXTENT_TREE_V2
    - ksmbd: fix global oob in ksmbd_nl_policy
    - cpufreq: intel_pstate: Drop redundant intel_pstate_get_hwp_cap() call
    - cpufreq: intel_pstate: Refine computation of P-state for given frequency
    - drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
    - drm/exynos: fix accidental on-stack copy of exynos_drm_plane
    - drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
    - gpio: eic-sprd: Clear interrupt after set the interrupt type
    - spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
    - mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
    - tick/sched: Preserve number of idle sleeps across CPU hotplug events
    - x86/entry/ia32: Ensure s32 is sign extended to s64
    - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
    - arm64: irq: set the correct node for VMAP stack
    - drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
    - powerpc: Fix build error due to is_valid_bugaddr()
    - powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
    - powerpc/64s: Fix CONFIG_NUMA=n build due to create_section_mapping()
    - x86/boot: Ignore NMIs during very early boot
    - powerpc: pmd_move_must_withdraw() is only needed for
      CONFIG_TRANSPARENT_HUGEPAGE
    - powerpc/lib: Validate size for vector operations
    - x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
    - perf/core: Fix narrow startup race when creating the perf nr_addr_filters
      sysfs file
    - debugobjects: Stop accessing objects after releasing hash bucket lock
    - regulator: core: Only increment use_count when enable_count changes
    - audit: Send netlink ACK before setting connection in auditd_set
    - ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
    - PNP: ACPI: fix fortify warning
    - ACPI: extlog: fix NULL pointer dereference check
    - PM / devfreq: Synchronize devfreq_monitor_[start/stop]
    - ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous
      events
    - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
    - jfs: fix slab-out-of-bounds Read in dtSearch
    - jfs: fix array-index-out-of-bounds in dbAdjTree
    - pstore/ram: Fix crash when setting number of cpus to an odd number
    - crypto: octeontx2 - Fix cptvf driver cleanup
    - crypto: stm32/crc32 - fix parsing list of devices
    - afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
    - afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
    - rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
    - jfs: fix array-index-out-of-bounds in diNewExt
    - arch: consolidate arch_irq_work_raise prototypes
    - s390/ptrace: handle setting of fpc register correctly
    - KVM: s390: fix setting of fpc register
    - SUNRPC: Fix a suspicious RCU usage warning
    - ecryptfs: Reject casefold directory inodes
    - ext4: fix inconsistent between segment fstrim and full fstrim
    - ext4: unify the type of flexbg_size to unsigned int
    - ext4: remove unnecessary check from alloc_flex_gd()
    - ext4: avoid online resizing failures due to oversized flex bg
    - wifi: rt2x00: restart beacon queue when hardware reset
    - selftests/bpf: satisfy compiler by having explicit return in btf test
    - selftests/bpf: Fix pyperf180 compilation failure with clang18
    - selftests/bpf: Fix issues in setup_classid_environment()
    - scsi: lpfc: Fix possible file string name overflow when updating firmware
    - PCI: Add no PM reset quirk for NVIDIA Spectrum devices
    - bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
    - scsi: arcmsr: Support new PCI device IDs 1883 and 1886
    - ARM: dts: imx7d: Fix coresight funnel ports
    - ARM: dts: imx7s: Fix lcdif compatible
    - ARM: dts: imx7s: Fix nand-controller #size-cells
    - wifi: ath9k: Fix potential array-index-out-of-bounds read in
      ath9k_htc_txstatus()
    - bpf: Add map and need_defer parameters to .map_fd_put_ptr()
    - scsi: libfc: Don't schedule abort twice
    - scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
    - bpf: Set uattr->batch.count as zero before batched update or deletion
    - ARM: dts: rockchip: fix rk3036 hdmi ports node
    - ARM: dts: imx25/27-eukrea: Fix RTC node name
    - ARM: dts: imx: Use flash@0,0 pattern
    - ARM: dts: imx27: Fix sram node
    - ARM: dts: imx1: Fix sram node
    - ionic: pass opcode to devcmd_wait
    - block/rnbd-srv: Check for unlikely string overflow
    - ARM: dts: imx25: Fix the iim compatible string
    - ARM: dts: imx25/27: Pass timing0
    - ARM: dts: imx27-apf27dev: Fix LED name
    - ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
    - ARM: dts: imx23/28: Fix the DMA controller node name
    - net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
    - block: prevent an integer overflow in bvec_try_merge_hw_page
    - md: Whenassemble the array, consult the superblock of the freshest device
    - arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
    - arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
    - wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
    - libbpf: Fix NULL pointer dereference in bpf_object__collect_prog_relos
    - ALSA: usb-audio: Add delay quirk for MOTU M Series 2nd revision
    - wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
    - wifi: cfg80211: free beacon_ies when overridden from hidden BSS
    - Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
    - Bluetooth: L2CAP: Fix possible multiple reject send
    - bridge: cfm: fix enum typo in br_cc_ccm_tx_parse
    - i40e: Fix VF disable behavior to block all traffic
    - octeontx2-af: Fix max NPC MCAM entry check while validating ref_entry
    - f2fs: fix to check return value of f2fs_reserve_new_block()
    - ALSA: hda: Refer to correct stream index at loops
    - ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
    - fast_dput(): handle underflows gracefully
    - RDMA/IPoIB: Fix error code return in ipoib_mcast_join
    - drm/amd/display: Fix tiled display misalignment
    - f2fs: fix write pointers on zoned device after roll forward
    - drm/drm_file: fix use of uninitialized variable
    - drm/framebuffer: Fix use of uninitialized variable
    - drm/mipi-dsi: Fix detach call without attach
    - media: stk1160: Fixed high volume of stk1160_dbg messages
    - media: rockchip: rga: fix swizzling for RGB formats
    - PCI: add INTEL_HDA_ARL to pci_ids.h
    - ALSA: hda: Intel: add HDA_ARL PCI ID support
    - ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
    - media: rkisp1: Drop IRQF_SHARED
    - f2fs: fix to tag gcing flag on page during block migration
    - drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
    - IB/ipoib: Fix mcast list locking
    - media: ddbridge: fix an error code problem in ddb_probe
    - media: i2c: imx335: Fix hblank min/max values
    - drm/msm/dpu: Ratelimit framedone timeout msgs
    - drm/amdgpu: fix ftrace event amdgpu_bo_move always move on same heap
    - clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
    - clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
    - watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
    - clk: imx: scu: Fix memory leak in __imx_clk_gpr_scu()
    - clk: imx: clk-imx8qxp: fix LVDS bypass, pixel and phy clocks
    - drm/amdgpu: Let KFD sync with VM fences
    - drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
    - ALSA: hda/conexant: Fix headset auto detect fail in cx8070 and SN6140
    - leds: trigger: panic: Don't register panic notifier if creating the trigger
      failed
    - um: Fix naming clash between UML and scheduler
    - um: Don't use vfprintf() for os_info()
    - um: net: Fix return type of uml_net_start_xmit()
    - um: time-travel: fix time corruption
    - i3c: master: cdns: Update maximum prescaler value for i2c clock
    - xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
    - mfd: ti_am335x_tscadc: Fix TI SoC dependencies
    - [Config] updateconfigs for MFD_TI_AM335X_TSCADC
    - mailbox: arm_mhuv2: Fix a bug for mhuv2_sender_interrupt
    - PCI: Only override AMD USB controller if required
    - PCI: switchtec: Fix stdev_release() crash after surprise hot remove
    - perf cs-etm: Bump minimum OpenCSD version to ensure a bugfix is present
    - usb: hub: Replace hardcoded quirk value with BIT() macro
    - selftests/sgx: Fix linker script asserts
    - tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
    - fs/kernfs/dir: obey S_ISGID
    - PCI: Fix 64GT/s effective data rate calculation
    - PCI/AER: Decode Requester ID when no error info found
    - libsubcmd: Fix memory leak in uniq()
    - drm/amdkfd: Fix lock dependency warning
    - virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region
      of size 10" warnings
    - blk-mq: fix IO hang from sbitmap wakeup race
    - ceph: fix deadlock or deadcode of misusing dget()
    - drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in
      'get_platform_power_management_table()'
    - drm/amdgpu: Release 'adev->pm.fw' before return in
      'amdgpu_device_need_post()'
    - drm/amdkfd: Fix 'node' NULL check in 'svm_range_get_range_boundaries()'
    - perf: Fix the nr_addr_filters fix
    - wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
    - drm: using mul_u32_u32() requires linux/math64.h
    - scsi: isci: Fix an error code problem in isci_io_request_build()
    - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
    - selftests: net: give more time for GRO aggregation
    - ip6_tunnel: use dev_sw_netstats_rx_add()
    - ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
    - tcp: add sanity checks to rx zerocopy
    - ixgbe: Remove non-inclusive language
    - ixgbe: Refactor returning internal error codes
    - ixgbe: Refactor overtemp event handling
    - ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
    - ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
    - llc: call sock_orphan() at release time
    - bridge: mcast: fix disabled snooping after long uptime
    - netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV
    - netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
    - netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom
      expectations
    - net: ipv4: fix a memleak in ip_setup_cork
    - af_unix: fix lockdep positive in sk_diag_dump_icons()
    - SAUCE: Sync apparmor copy of af_unix.c
    - selftests: net: fix available tunnels detection
    - net: sysfs: Fix /sys/class/net/<iface> path
    - arm64: irq: set the correct node for shadow call stack
    - gve: Fix use-after-free vulnerability
    - HID: apple: Add support for the 2021 Magic Keyboard
    - HID: apple: Add 2021 magic keyboard FN key mapping
    - bonding: remove print in bond_verify_device_path
    - ASoC: codecs: lpass-wsa-macro: fix compander volume hack
    - dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
    - dmaengine: ti: k3-udma: Report short packet errors
    - dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
    - dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
    - phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
    - dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
    - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
    - drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
    - net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
    - selftests: net: cut more slack for gro fwd tests.
    - selftests: net: avoid just another constant wait
    - tunnels: fix out of bounds access when building IPv6 PMTU error
    - atm: idt77252: fix a memleak in open_card_ubr0
    - octeontx2-pf: Fix a memleak otx2_sq_init
    - hwmon: (aspeed-pwm-tacho) mutex for tach reading
    - hwmon: (coretemp) Fix out-of-bounds memory access
    - hwmon: (coretemp) Fix bogus core_id to attr name mapping
    - inet: read sk->sk_family once in inet_recv_error()
    - rxrpc: Fix response to PING RESPONSE ACKs to a dead call
    - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
    - af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC.
    - ppp_async: limit MRU to 64K
    - netfilter: nft_compat: reject unused compat flag
    - netfilter: nft_compat: restrict match/target protocol to u16
    - drm/amd/display: Fix multiple memory leaks reported by coverity
    - drm/amd/display: Implement bounds check for stream encoder creation in
      DCN301
    - netfilter: nft_ct: reject direction for ct id
    - netfilter: nft_set_pipapo: store index in scratch maps
    - netfilter: nft_set_pipapo: add helper to release pcpu scratch area
    - netfilter: nft_set_pipapo: remove scratch_aligned pointer
    - fs/ntfs3: Fix an NULL dereference bug
    - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
    - blk-iocost: Fix an UBSAN shift-out-of-bounds warning
    - drivers: lkdtm: fix clang -Wformat warning
    - ALSA: usb-audio: Add a quirk for Yamaha YIT-W12TX transmitter
    - USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
    - USB: serial: option: add Fibocom FM101-GL variant
    - USB: serial: cp210x: add ID for IMST iM871A-USB
    - usb: dwc3: host: Set XHCI_SG_TRB_CACHE_SIZE_QUIRK
    - usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
    - hrtimer: Report offline hrtimer enqueue
    - Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
    - Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
    - clocksource: Skip watchdog check for large watchdog intervals
    - net: stmmac: xgmac: use #define for string constants
    - net: stmmac: xgmac: fix a typo of register name in DPP safety handling
    - btrfs: forbid creating subvol qgroups
    - btrfs: forbid deleting live subvol qgroup
    - btrfs: send: return EOPNOTSUPP on unknown flags
    - of: unittest: Fix compile in the non-dynamic case
    - wifi: iwlwifi: Fix some error codes
    - net: openvswitch: limit the number of recursions from action sets
    - spi: ppc4xx: Drop write-only variable
    - ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
    - net: sysfs: Fix /sys/class/net/<iface> path for statistics
    - MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
    - i40e: Fix waiting for queues of all VSIs to be disabled
    - scs: add CONFIG_MMU dependency for vfree_atomic()
    - tracing/trigger: Fix to return error if failed to alloc snapshot
    - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
    - scsi: storvsc: Fix ring buffer size calculation
    - ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift
      1 SF114-32
    - ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
    - HID: i2c-hid-of: fix NULL-deref on failed power up
    - HID: wacom: generic: Avoid reporting a serial of '0' to userspace
    - HID: wacom: Do not register input devices until after hid_hw_start
    - iio: hid-sensor-als: Return 0 for HID_USAGE_SENSOR_TIME_TIMESTAMP
    - usb: ucsi_acpi: Fix command completion handling
    - USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
    - usb: f_mass_storage: forbid async queue when shutdown happen
    - usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend
    - media: ir_toy: fix a memleak in irtoy_tx
    - powerpc/kasan: Fix addr error caused by page alignment
    - i2c: i801: Remove i801_set_block_buffer_mode
    - i2c: i801: Fix block process call transactions
    - modpost: trim leading spaces when processing source files list
    - mptcp: fix data re-injection from stale subflow
    - scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock"
    - Revert "drm/amd: flush any delayed gfxoff on suspend entry"
    - firewire: core: correct documentation of fw_csr_string() kernel API
    - kbuild: Fix changing ELF file type for output of gen_btf for big endian
    - nfc: nci: free rx_data_reassembly skb on NCI device cleanup
    - net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
    - xen-netback: properly sync TX responses
    - ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
    - ASoC: codecs: wcd938x: handle deferred probe
    - binder: signal epoll threads of self-work
    - misc: fastrpc: Mark all sessions as invalid in cb_remove
    - ext4: fix double-free of blocks due to wrong extents moved_len
    - tracing: Fix wasted memory in saved_cmdlines logic
    - staging: iio: ad5933: fix type mismatch regression
    - iio: magnetometer: rm3100: add boundary check for the value read from
      RM3100_REG_TMRC
    - iio: core: fix memleak in iio_device_register_sysfs
    - iio: accel: bma400: Fix a compilation problem
    - media: rc: bpf attach/detach requires write permission
    - drm/prime: Support page array >= 4GB
    - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
    - ring-buffer: Clean ring_buffer_poll_wait() error return
    - serial: max310x: set default value when reading clock ready bit
    - serial: max310x: improve crystal stable clock detection
    - serial: max310x: fail probe if clock crystal is unstable
    - powerpc/64: Set task pt_regs->link to the LR value on scv entry
    - x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
    - x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
    - mmc: slot-gpio: Allow non-sleeping GPIO ro
    - ALSA: hda/conexant: Add quirk for SWS JS201D
    - nilfs2: fix data corruption in dsync block recovery for small block sizes
    - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
    - crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
    - nfp: use correct macro for LengthSelect in BAR config
    - nfp: flower: prevent re-adding mac index for bonded port
    - wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
    - irqchip/irq-brcmstb-l2: Add write memory barrier before exit
    - irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
    - net: ethernet: ti: cpsw: enable mac_managed_pm to fix mdio
    - s390/qeth: Fix potential loss of L3-IP@ in case of network issues
    - net: ethernet: ti: cpsw_new: enable mac_managed_pm to fix mdio
    - ceph: prevent use-after-free in encode_cap_msg()
    - mm: hugetlb pages should not be reserved by shmat() if SHM_NORESERVE
    - of: property: fix typo in io-channels
    - can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock
    - can: j1939: Fix UAF in j1939_sk_match_filter during
      setsockopt(SO_J1939_FILTER)
    - pmdomain: core: Move the unused cleanup to a _sync initcall
    - tracing: Inform kmemleak of saved_cmdlines allocation
    - af_unix: Fix task hung while purging oob_skb in GC.
    - dma-buf: add dma_fence_timestamp helper
    - bus: moxtet: Add spi device table
    - crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
    - usb: dwc3: gadget: Wait for ep0 xfers to complete during dequeue
    - usb: dwc3: ep0: Don't prepare beyond Setup stage
    - usb: dwc3: gadget: Only End Transfer for ep0 data phase
    - usb: dwc3: gadget: Delay issuing End Transfer
    - usb: dwc3: Fix ep0 handling when getting reset while doing control transfer
    - usb: dwc3: gadget: Force sending delayed status during soft disconnect
    - usb: dwc3: gadget: Submit endxfer command if delayed during disconnect
    - usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive
    - usb: dwc3: gadget: Refactor EP0 forced stall/restart into a separate API
    - usb: dwc3: gadget: Handle EP0 request dequeuing properly
    - usb: dwc3: gadget: Queue PM runtime idle on disconnect event
    - serial: 8250_exar: Fill in rs485_supported
    - serial: 8250_exar: Set missing rs485_supported flag
    - fbdev/defio: Early-out if page is already enlisted
    - fbdev: Don't sort deferred-I/O pages by default
    - fbdev: defio: fix the pagelist corruption
    - fbdev: Track deferred-I/O pages in pageref struct
    - fbdev: Rename pagelist to pagereflist for deferred I/O
    - fbdev: Fix invalid page access after closing deferred I/O devices
    - fbdev: Fix incorrect page mapping clearance at fb_deferred_io_release()
    - fbdev: flush deferred IO before closing
    - scripts/decode_stacktrace.sh: support old bash version
    - scripts: decode_stacktrace: demangle Rust symbols
    - scripts/decode_stacktrace.sh: optionally use LLVM utilities
    - netfilter: ipset: fix performance regression in swap operation
    - hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
    - net: prevent mss overflow in skb_segment()
    - netfilter: ipset: Missing gc cancellations fixed
    - sched/membarrier: reduce the ability to hammer on sys_membarrier
    - nilfs2: fix potential bug in end_buffer_async_write
    - nilfs2: replace WARN_ONs for invalid DAT metadata block requests
    - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata
    - PM: runtime: Have devm_pm_runtime_enable() handle
      pm_runtime_dont_use_autosuspend()
    - drm/msm/dsi: Enable runtime PM
    - net: bcmgenet: Fix EEE implementation
    - fs/ntfs3: Add null pointer checks
    - staging: fbtft: core: set smem_len before fb_deferred_io_init call
    - usb: dwc3: gadget: Don't delay End Transfer on delayed_status
    - usb: dwc3: gadget: Execute gadget stop after halting the controller
    - media: Revert "media: rkisp1: Drop IRQF_SHARED"
    - usb: dwc3: gadget: Ignore End Transfer delay on teardown
    - Linux 5.15.149
  * Fix headphone mic detection issue on ALC897 (LP: #2056418)
    - ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897
      platform
  * CVE-2023-6039
    - timers: Replace BUG_ON()s
  * Problems with HVCS and hotplugging (LP: #2056373)
    - hvcs: Fix hvcs port reference counting
    - hvcs: Use dev_groups to manage hvcs device attributes
    - hvcs: Use driver groups to manage driver attributes
    - hvcs: Get reference to tty in remove
    - hvcs: Use vhangup in hotplug remove
    - hvcs: Synchronize hotplug remove with port free
  * KVM: arm64: softlockups in stage2_apply_range (LP: #2056227)
    - KVM: arm64: Work out supported block level at compile time
    - KVM: arm64: Limit stage2_apply_range() batch size to largest block

 -- Jian Hui Lee <jianhui.lee@canonical.com>  Fri, 14 Jun 2024 00:10:00 +0800

linux-mtk (5.15.0-1031.36) jammy; urgency=medium

  * jammy/linux-mtk: 5.15.0-1031.36 -proposed tracker (LP: #2064983)

  * [SRU] ubuntu_ltp: fs testsuite causing tainted kernel (LP: #2059057)
    - SAUCE: (no-up) ubuntu: mtk-apusys-driver: fix fs testsuite in ubuntu_ltp
      causing tainted kernel

  * [SRU] UBSAN: shift-out-of-bounds in mt6359-regulator.c:281 (LP: #2059227)
    - SAUCE: (no-up) regulator: mt6359: fix UBSAN: shift-out-of-bounds

  * [uc22][g350][g700] long install time and vblank timeout (LP: #2060936)
    - SAUCE: (no-up) drm/panel: stk-kd070: fix relaxation time between regulator
      enablement
    - SAUCE: (no-up) drm/panel: stk-kd070: fix panel not responding if set/get
      brightness earlier before pre_enable

  * [uc22][g700] Unable boot into OS and got call trace during kernel boot while
    configuring DSI + DPoC (display-dsidp.dtbo) (LP: #2063185)
    - SAUCE: (no-up) drm/panel: stk-kd070: fix deference error after panel being
      defer probed

  * [SRU] dt node backward compatibility for rxfifo (LP: #2065760)
    - SAUCE: (no-up) usb: xhci-mtk: dt node backward compatibility for rxfifo

  * [g1200] Unable boot into OS while using display-lvdshdmidp.dtbo with 1030.35
    kernel (LP: #2059233)
    - SAUCE: (no-up) drm/mediatek: dpi: fix triple display if lvds/edp is enabled

  * Packaging resync (LP: #1786013)
    - [Packaging] drop ABI data
    - [Packaging] drop getabis data

  [ Ubuntu: 5.15.0-105.115 ]

  * jammy/linux: 5.15.0-105.115 -proposed tracker (LP: #2061372)
  * Jammy update: v5.15.149 upstream stable release (LP: #2059014) // CIFS
    stopped working/is unstable with kernel update to 5.15.0-102.112
    (LP: #2060780)
    - smb3: Replace smb2pdu 1-element arrays with flex-arrays

  [ Ubuntu: 5.15.0-103.113 ]

  * jammy/linux: 5.15.0-103.113 -proposed tracker (LP: #2059683)
  * Packaging resync (LP: #1786013)
    - [Packaging] drop getabis data
  * Remove getabis scripts (LP: #2059143)
    - [Packaging] Remove getabis
  * CVE-2023-24023
    - Bluetooth: Add more enc key size check
  * CVE-2023-52600
    - jfs: fix uaf in jfs_evict_inode
  * Jammy update: v5.15.149 upstream stable release (LP: #2059014) //
    CVE-2023-52603
    - UBSAN: array-index-out-of-bounds in dtSplitRoot
  * CVE-2024-26581
    - netfilter: nft_set_rbtree: skip end interval element from gc

  [ Ubuntu: 5.15.0-102.112 ]

  * jammy/linux: 5.15.0-102.112 -proposed tracker (LP: #2055632)
  * Drop ABI checks from kernel build (LP: #2055686)
    - [Packaging] Remove in-tree abi checks
    - [Packaging] Drop abi checks from final-checks
  * Packaging resync (LP: #1786013)
    - [Packaging] drop ABI data
    - [Packaging] update annotations scripts
    - debian.master/dkms-versions -- update from kernel-versions (main/2024.03.04)
  * block/loop: No longer allows to create partitions (LP: #2056143)
    - block, loop: support partitions without scanning
  * Cranky update-dkms-versions rollout (LP: #2055685)
    - [Packaging] remove update-dkms-versions
    - Move debian/dkms-versions to debian.master/dkms-versions
    - [Packaging] Replace debian/dkms-versions with $(DEBIAN)/dkms-versions
    - [Packaging] remove update-version-dkms
  * linux: please move erofs.ko (CONFIG_EROFS for EROFS support) from linux-
    modules-extra to linux-modules (LP: #2054809)
    - UBUNTU [Packaging]: Include erofs in linux-modules instead of linux-modules-
      extra
  * linux-tools-common: man page of usbip[d] is misplaced (LP: #2054094)
    - [Packaging] rules: Put usbip manpages in the correct directory
  * CVE-2024-23851
    - dm ioctl: log an error if the ioctl structure is corrupted
    - dm: limit the number of targets and parameter size area
  * CVE-2024-23850
    - btrfs: do not ASSERT() if the newly created subvolume already got read
  * x86: performance: tsc: Extend watchdog check exemption to 4-Sockets platform
    (LP: #2054699)
    - x86/tsc: Extend watchdog check exemption to 4-Sockets platform
  * linux: please move dmi-sysfs.ko (CONFIG_DMI_SYSFS for SMBIOS support) from
    linux-modules-extra to linux-modules (LP: #2045561)
    - [Packaging] Move dmi-sysfs.ko into linux-modules
  * Fix bpf selftests build failure after v5.15.139 update (LP: #2054567)
    - Revert "selftests/bpf: Test tail call counting with bpf2bpf and data on
      stack"
  * Jammy update: v5.15.148 upstream stable release (LP: #2055145)
    - f2fs: explicitly null-terminate the xattr list
    - pinctrl: lochnagar: Don't build on MIPS
    - ALSA: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro
    - mptcp: fix uninit-value in mptcp_incoming_options
    - wifi: cfg80211: lock wiphy mutex for rfkill poll
    - debugfs: fix automount d_fsdata usage
    - drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
    - nvme-core: check for too small lba shift
    - ASoC: wm8974: Correct boost mixer inputs
    - ASoC: Intel: Skylake: Fix mem leak in few functions
    - ASoC: nau8822: Fix incorrect type in assignment and cast to restricted
      __be16
    - ASoC: Intel: Skylake: mem leak in skl register function
    - ASoC: cs43130: Fix the position of const qualifier
    - ASoC: cs43130: Fix incorrect frame delay configuration
    - ASoC: rt5650: add mutex to avoid the jack detection failure
    - nouveau/tu102: flush all pdbs on vmm flush
    - net/tg3: fix race condition in tg3_reset_task()
    - ASoC: da7219: Support low DC impedance headset
    - ASoC: ops: add correct range check for limiting volume
    - nvme: introduce helper function to get ctrl state
    - drm/amdgpu: Add NULL checks for function pointers
    - drm/exynos: fix a potential error pointer dereference
    - drm/exynos: fix a wrong error checking
    - hwmon: (corsair-psu) Fix probe when built-in
    - clk: rockchip: rk3128: Fix HCLK_OTG gate register
    - jbd2: correct the printing of write_flags in jbd2_write_superblock()
    - drm/crtc: Fix uninit-value bug in drm_mode_setcrtc
    - neighbour: Don't let neigh_forced_gc() disable preemption for long
    - platform/x86: intel-vbtn: Fix missing tablet-mode-switch events
    - jbd2: fix soft lockup in journal_finish_inode_data_buffers()
    - tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing
    - tracing: Add size check when printing trace_marker output
    - stmmac: dwmac-loongson: drop useless check for compatible fallback
    - MIPS: dts: loongson: drop incorrect dwmac fallback compatible
    - tracing: Fix uaf issue when open the hist or hist_debug file
    - ring-buffer: Do not record in NMI if the arch does not support cmpxchg in
      NMI
    - reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning
    - Input: atkbd - skip ATKBD_CMD_GETID in translated mode
    - Input: i8042 - add nomux quirk for Acer P459-G2-M
    - s390/scm: fix virtual vs physical address confusion
    - ARC: fix spare error
    - wifi: iwlwifi: pcie: avoid a NULL pointer dereference
    - Input: xpad - add Razer Wolverine V2 support
    - ASoC: Intel: bytcr_rt5640: Add quirk for the Medion Lifetab S10346
    - i2c: rk3x: fix potential spinlock recursion on poll
    - net: qrtr: ns: Return 0 if server port is not present
    - ARM: sun9i: smp: fix return code check of of_property_match_string
    - drm/crtc: fix uninitialized variable use
    - ACPI: resource: Add another DMI match for the TongFang GMxXGxx
    - Revert "ASoC: atmel: Remove system clock tree configuration for
      at91sam9g20ek"
    - bpf: Add --skip_encoding_btf_inconsistent_proto, --btf_gen_optimized to
      pahole flags for v1.25
    - kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list
    - Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
    - binder: use EPOLLERR from eventpoll.h
    - binder: fix use-after-free in shinker's callback
    - binder: fix trivial typo of binder_free_buf_locked()
    - binder: fix comment on binder_alloc_new_buf() return value
    - uio: Fix use-after-free in uio_open
    - parport: parport_serial: Add Brainboxes BAR details
    - parport: parport_serial: Add Brainboxes device IDs and geometry
    - leds: ledtrig-tty: Free allocated ttyname buffer on deactivate
    - PCI: Add ACS quirk for more Zhaoxin Root Ports
    - coresight: etm4x: Fix width of CCITMIN field
    - x86/lib: Fix overflow when counting digits
    - EDAC/thunderx: Fix possible out-of-bounds string access
    - powerpc: Mark .opd section read-only
    - powerpc/toc: Future proof kernel toc
    - powerpc: remove checks for binutils older than 2.25
    - powerpc: add crtsavres.o to always-y instead of extra-y
    - powerpc/44x: select I2C for CURRITUCK
    - powerpc/pseries/memhp: Fix access beyond end of drmem array
    - selftests/powerpc: Fix error handling in FPU/VMX preemption tests
    - powerpc/powernv: Add a null pointer check to scom_debug_init_one()
    - powerpc/powernv: Add a null pointer check in opal_event_init()
    - powerpc/powernv: Add a null pointer check in opal_powercap_init()
    - powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
    - spi: spi-zynqmp-gqspi: fix driver kconfig dependencies
    - mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response
    - ACPI: video: check for error while searching for backlight device parent
    - ACPI: LPIT: Avoid u32 multiplication overflow
    - of: property: define of_property_read_u{8,16,32,64}_array() unconditionally
    - of: Add of_property_present() helper
    - cpufreq: Use of_property_present() for testing DT property presence
    - cpufreq: scmi: process the result of devm_of_clk_add_hw_provider()
    - calipso: fix memory leak in netlbl_calipso_add_pass()
    - efivarfs: force RO when remounting if SetVariable is not supported
    - spi: sh-msiof: Enforce fixed DTDL for R-Car H3
    - ACPI: LPSS: Fix the fractional clock divider flags
    - ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the error
    - kunit: debugfs: Fix unchecked dereference in debugfs_print_results()
    - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
    - selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket
    - crypto: virtio - Handle dataq logic with tasklet
    - crypto: sa2ul - Return crypto_aead_setkey to transfer the error
    - crypto: ccp - fix memleak in ccp_init_dm_workarea
    - crypto: af_alg - Disallow multiple in-flight AIO requests
    - crypto: sahara - remove FLAGS_NEW_KEY logic
    - crypto: sahara - fix cbc selftest failure
    - crypto: sahara - fix ahash selftest failure
    - crypto: sahara - fix processing requests with cryptlen < sg->length
    - crypto: sahara - fix error handling in sahara_hw_descriptor_create()
    - pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
    - fs: indicate request originates from old mount API
    - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
    - crypto: virtio - Wait for tasklet to complete on device remove
    - crypto: sahara - avoid skcipher fallback code duplication
    - crypto: sahara - handle zero-length aes requests
    - crypto: sahara - fix ahash reqsize
    - crypto: sahara - fix wait_for_completion_timeout() error handling
    - crypto: sahara - improve error handling in sahara_sha_process()
    - crypto: sahara - fix processing hash requests with req->nbytes < sg->length
    - crypto: sahara - do not resize req->src when doing hash operations
    - crypto: scomp - fix req->dst buffer overflow
    - blocklayoutdriver: Fix reference leak of pnfs_device_node
    - NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT
    - wifi: rtw88: fix RX filter in FIF_ALLMULTI flag
    - bpf, lpm: Fix check prefixlen before walking trie
    - bpf: Add crosstask check to __bpf_get_stack
    - wifi: ath11k: Defer on rproc_get failure
    - wifi: libertas: stop selecting wext
    - ARM: dts: qcom: apq8064: correct XOADC register address
    - net/ncsi: Fix netlink major/minor version numbers
    - firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create()
    - firmware: meson_sm: populate platform devices from sm device tree data
    - wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior
    - arm64: dts: ti: k3-am65-main: Fix DSS irq trigger type
    - bpf: enforce precision of R0 on callback return
    - ARM: dts: qcom: sdx65: correct SPMI node name
    - arm64: dts: qcom: sc7180: Make watchdog bark interrupt edge triggered
    - arm64: dts: qcom: sc7280: Make watchdog bark interrupt edge triggered
    - arm64: dts: qcom: sdm845: Make watchdog bark interrupt edge triggered
    - arm64: dts: qcom: sm8150: Make watchdog bark interrupt edge triggered
    - arm64: dts: qcom: sm8250: Make watchdog bark interrupt edge triggered
    - bpf: fix check for attempt to corrupt spilled pointer
    - scsi: fnic: Return error if vmalloc() failed
    - arm64: dts: qcom: qrb5165-rb5: correct LED panic indicator
    - arm64: dts: qcom: sdm845-db845c: correct LED panic indicator
    - arm64: dts: qcom: sc7280: fix usb_2 wakeup interrupt types
    - bpf: Fix verification of indirect var-off stack access
    - block: Set memalloc_noio to false on device_add_disk() error path
    - scsi: hisi_sas: Rename HISI_SAS_{RESET -> RESETTING}_BIT
    - scsi: hisi_sas: Prevent parallel FLR and controller reset
    - scsi: hisi_sas: Replace with standard error code return value
    - scsi: hisi_sas: Rollback some operations if FLR failed
    - scsi: hisi_sas: Correct the number of global debugfs registers
    - selftests/net: fix grep checking for fib_nexthop_multiprefix
    - virtio/vsock: fix logic which reduces credit update messages
    - dma-mapping: Add dma_release_coherent_memory to DMA API
    - dma-mapping: clear dev->dma_mem to NULL after freeing it
    - soc: qcom: llcc: Fix dis_cap_alloc and retain_on_pc configuration
    - arm64: dts: qcom: sm8150-hdk: fix SS USB regulators
    - block: add check of 'minors' and 'first_minor' in device_add_disk()
    - arm64: dts: qcom: sc7280: Mark SDHCI hosts as cache-coherent
    - wifi: rtlwifi: add calculate_bit_shift()
    - wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift()
    - wifi: rtlwifi: rtl8192c: using calculate_bit_shift()
    - wifi: rtlwifi: rtl8192cu: using calculate_bit_shift()
    - wifi: rtlwifi: rtl8192ce: using calculate_bit_shift()
    - wifi: rtlwifi: rtl8192de: using calculate_bit_shift()
    - wifi: rtlwifi: rtl8192ee: using calculate_bit_shift()
    - wifi: rtlwifi: rtl8192se: using calculate_bit_shift()
    - wifi: iwlwifi: mvm: set siso/mimo chains to 1 in FW SMPS request
    - wifi: iwlwifi: mvm: send TX path flush in rfkill
    - netfilter: nf_tables: mark newset as dead on transaction abort
    - Bluetooth: Fix bogus check for re-auth no supported with non-ssp
    - Bluetooth: btmtkuart: fix recv_buf() return value
    - block: make BLK_DEF_MAX_SECTORS unsigned
    - null_blk: don't cap max_hw_sectors to BLK_DEF_MAX_SECTORS
    - net/sched: act_ct: fix skb leak and crash on ooo frags
    - mlxbf_gige: Fix intermittent no ip issue
    - net: mellanox: mlxbf_gige: Replace non-standard interrupt handling
    - mlxbf_gige: Enable the GigE port in mlxbf_gige_open
    - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
    - ARM: davinci: always select CONFIG_CPU_ARM926T
    - Revert "drm/tidss: Annotate dma-fence critical section in commit path"
    - Revert "drm/omapdrm: Annotate dma-fence critical section in commit path"
    - RDMA/usnic: Silence uninitialized symbol smatch warnings
    - RDMA/hns: Fix inappropriate err code for unsupported operations
    - drm/panel-elida-kd35t133: hold panel in reset for unprepare
    - drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer
    - drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
    - drm/tilcdc: Fix irq free on unload
    - media: pvrusb2: fix use after free on context disconnection
    - drm/bridge: Fix typo in post_disable() description
    - f2fs: fix to avoid dirent corruption
    - drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg()
    - drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check()
    - drm/radeon: check return value of radeon_ring_lock()
    - ASoC: cs35l33: Fix GPIO name and drop legacy include
    - ASoC: cs35l34: Fix GPIO name and drop legacy include
    - drm/msm/mdp4: flush vblank event on disable
    - drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks
    - drm/drv: propagate errors from drm_modeset_register_all()
    - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init()
    - drm/radeon/dpm: fix a memleak in sumo_parse_power_table
    - drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table
    - drm/bridge: cdns-mhdp8546: Fix use of uninitialized variable
    - drm/bridge: tc358767: Fix return value on error case
    - media: cx231xx: fix a memleak in cx231xx_init_isoc
    - clk: qcom: gpucc-sm8150: Update the gpu_cc_pll1 config
    - media: rkisp1: Disable runtime PM in probe error path
    - f2fs: fix to check compress file in f2fs_move_file_range()
    - f2fs: fix to update iostat correctly in f2fs_filemap_fault()
    - f2fs: fix the f2fs_file_write_iter tracepoint
    - media: dvbdev: drop refcount on error path in dvb_device_open()
    - media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path
      of m88ds3103_probe()
    - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL
    - drm/amd/pm: fix a double-free in si_dpm_init
    - drivers/amd/pm: fix a use-after-free in kv_parse_power_table
    - gpu/drm/radeon: fix two memleaks in radeon_vm_init
    - dt-bindings: clock: Update the videocc resets for sm8150
    - clk: qcom: videocc-sm8150: Update the videocc resets
    - clk: qcom: videocc-sm8150: Add missing PLL config property
    - drivers: clk: zynqmp: calculate closest mux rate
    - clk: zynqmp: make bestdiv unsigned
    - clk: zynqmp: Add a check for NULL pointer
    - drivers: clk: zynqmp: update divider round rate logic
    - watchdog: set cdev owner before adding
    - watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO
    - watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling
    - watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused
    - clk: si5341: fix an error code problem in si5341_output_clk_set_rate
    - clk: asm9260: use parent index to link the reference clock
    - clk: fixed-rate: add devm_clk_hw_register_fixed_rate
    - clk: fixed-rate: fix clk_hw_register_fixed_rate_with_accuracy_parent_hw
    - pwm: stm32: Use regmap_clear_bits and regmap_set_bits where applicable
    - pwm: stm32: Use hweight32 in stm32_pwm_detect_channels
    - pwm: stm32: Fix enable count for clk in .probe()
    - ASoC: rt5645: Drop double EF20 entry from dmi_platform_data[]
    - ALSA: scarlett2: Add missing error check to scarlett2_config_save()
    - ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config()
    - ALSA: scarlett2: Allow passing any output to line_out_remap()
    - ALSA: scarlett2: Add missing error checks to *_ctl_get()
    - ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
    - mmc: sdhci_am654: Fix TI SoC dependencies
    - [Config] update annotations for CONFIG_MMC_SDHCI_AM654
    - [Config] remove sdhci_am654 module for armhf/ppc64el
    - mmc: sdhci_omap: Fix TI SoC dependencies
    - [Config] update annotations for CONFIG_MMC_SDHCI_OMAP
    - [Config] remove sdhci-omap module for arm64/ppc64el
    - IB/iser: Prevent invalidating wrong MR
    - drm/amd/pm/smu7: fix a memleak in smu7_hwmgr_backend_init
    - ksmbd: validate the zero field of packet header
    - of: Fix double free in of_parse_phandle_with_args_map
    - of: unittest: Fix of_count_phandle_with_args() expected value message
    - selftests/bpf: Add assert for user stacks in test_task_stack
    - binder: fix async space check for 0-sized buffers
    - binder: fix unused alloc->free_async_space
    - Input: atkbd - use ab83 as id when skipping the getid command
    - dma-mapping: Fix build error unused-value
    - virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session()
    - binder: fix race between mmput() and do_exit()
    - tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug
    - usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host()
    - usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart
    - Revert "usb: dwc3: Soft reset phy on probe for host"
    - Revert "usb: dwc3: don't reset device side if dwc3 was configured as host-
      only"
    - usb: chipidea: wait controller resume finished for wakeup irq
    - usb: cdns3: fix uvc failure work since sg support enabled
    - usb: cdns3: fix iso transfer error when mult is not zero
    - usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
    - Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs"
    - usb: typec: class: fix typec_altmode_put_partner to put plugs
    - usb: mon: Fix atomicity violation in mon_bin_vma_fault
    - serial: imx: Ensure that imx_uart_rs485_config() is called with enabled
      clock
    - ALSA: oxygen: Fix right channel of capture volume mixer
    - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx
    - fbdev: flush deferred work in fb_deferred_io_fsync()
    - scsi: mpi3mr: Refresh sdev queue depth after controller reset
    - block: add check that partition length needs to be aligned with block size
    - pwm: jz4740: Don't use dev_err_probe() in .request()
    - io_uring/rw: ensure io->bytes_done is always initialized
    - rootfs: Fix support for rootfstype= when root= is given
    - Bluetooth: Fix atomicity violation in {min,max}_key_size_set
    - bpf: Fix re-attachment branch in bpf_tracing_prog_attach
    - iommu/arm-smmu-qcom: Add missing GMU entry to match table
    - wifi: mt76: fix broken precal loading from MTD for mt7915
    - wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code
    - wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors
    - wifi: mwifiex: configure BSSID consistently when starting AP
    - PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
    - PCI: mediatek: Clear interrupt status before dispatching handler
    - x86/kvm: Do not try to disable kvmclock if it was not enabled
    - KVM: arm64: vgic-v4: Restore pending state on host userspace write
    - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
    - iio: adc: ad7091r: Pass iio_dev to event handler
    - HID: wacom: Correct behavior when processing some confidence == false
      touches
    - serial: sc16is7xx: add check for unsupported SPI modes during probe
    - serial: sc16is7xx: set safe default SPI clock frequency
    - iommu/dma: Trace bounce buffer usage when mapping buffers
    - ARM: 9330/1: davinci: also select PINCTRL
    - mfd: syscon: Fix null pointer dereference in of_syscon_register()
    - leds: aw2013: Select missing dependency REGMAP_I2C
    - mfd: intel-lpss: Fix the fractional clock divider flags
    - mips: dmi: Fix early remap on MIPS32
    - mips: Fix incorrect max_low_pfn adjustment
    - riscv: Check if the code to patch lies in the exit section
    - riscv: Fix module_alloc() that did not reset the linear mapping permissions
    - MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup()
    - MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup()
    - power: supply: cw2015: correct time_to_empty units in sysfs
    - power: supply: bq256xx: fix some problem in bq256xx_hw_init
    - serial: 8250: omap: Don't skip resource freeing if
      pm_runtime_resume_and_get() failed
    - libapi: Add missing linux/types.h header to get the __u64 type on io.h
    - software node: Let args be NULL in software_node_get_reference_args
    - serial: imx: fix tx statemachine deadlock
    - selftests/sgx: Fix uninitialized pointer dereference in error path
    - selftests/sgx: Skip non X86_64 platform
    - iio: adc: ad9467: Benefit from devm_clk_get_enabled() to simplify
    - iio: adc: ad9467: fix reset gpio handling
    - iio: adc: ad9467: don't ignore error codes
    - iio: adc: ad9467: fix scale setting
    - perf genelf: Set ELF program header addresses properly
    - tty: change tty_write_lock()'s ndelay parameter to bool
    - tty: early return from send_break() on TTY_DRIVER_HARDWARE_BREAK
    - tty: don't check for signal_pending() in send_break()
    - tty: use 'if' in send_break() instead of 'goto'
    - usb: cdc-acm: return correct error code on unsupported break
    - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
    - nvmet-tcp: fix a crash in nvmet_req_complete()
    - perf env: Avoid recursively taking env->bpf_progs.lock
    - apparmor: avoid crash when parsed profile name is empty
    - usb: xhci-mtk: fix a short packet issue of gen1 isoc-in transfer
    - serial: imx: Correct clock error message in function probe()
    - nvmet: re-fix tracing strncpy() warning
    - nvmet-tcp: Fix the H2C expected PDU len calculation
    - PCI: keystone: Fix race condition when initializing PHYs
    - s390/pci: fix max size calculation in zpci_memcpy_toio()
    - net: qualcomm: rmnet: fix global oob in rmnet_policy
    - net: ethernet: ti: am65-cpsw: Fix max mtu to fit ethernet frames
    - net: phy: micrel: populate .soft_reset for KSZ9131
    - mptcp: mptcp_parse_option() fix for MPTCPOPT_MP_JOIN
    - mptcp: drop unused sk in mptcp_get_options
    - mptcp: strict validation before using mp_opt->hmac
    - mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
    - mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req()
    - net: ravb: Fix dma_addr_t truncation in error case
    - net: stmmac: ethtool: Fixed calltrace caused by unbalanced disable_irq_wake
      calls
    - bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
    - net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe
    - netfilter: nf_tables: reject invalid set policy
    - netfilter: nft_connlimit: move stateful fields out of expression data
    - netfilter: nft_last: move stateful fields out of expression data
    - netfilter: nft_quota: move stateful fields out of expression data
    - netfilter: nft_limit: rename stateful structure
    - netfilter: nft_limit: move stateful fields out of expression data
    - netfilter: nf_tables: memcg accounting for dynamically allocated objects
    - netfilter: nft_limit: do not ignore unsupported flags
    - netfilter: nf_tables: do not allow mismatch field size and set key length
    - netfilter: nf_tables: skip dead set elements in netlink dump
    - netfilter: nf_tables: reject NFT_SET_CONCAT with not field length
      description
    - ipvs: avoid stat macros calls from preemptible context
    - kdb: Fix a potential buffer overflow in kdb_local()
    - ethtool: netlink: Add missing ethnl_ops_begin/complete
    - mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
    - mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
    - mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
    - mlxsw: spectrum_acl_tcam: Make fini symmetric to init
    - mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
    - mlxsw: spectrum_acl_tcam: Fix stack corruption
    - selftests: mlxsw: qos_pfc: Adjust the test to support 8 lanes
    - ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work
    - i2c: s3c24xx: fix read transfers in polling mode
    - i2c: s3c24xx: fix transferring more than one message in polling mode
    - block: Remove special-casing of compound pages
    - netfilter: nf_tables: typo NULL check in _clone() function
    - netfilter: nft_connlimit: memleak if nf_ct_netns_get() fails
    - netfilter: nft_limit: fix stateful object memory leak
    - netfilter: nft_limit: Clone packet limits' cost value
    - netfilter: nft_last: copy content when cloning expression
    - netfilter: nft_quota: copy content when cloning expression
    - arm64: dts: armada-3720-turris-mox: set irq type for RTC
    - Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
    - Linux 5.15.148
  * CVE-2024-24855
    - scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan()
  * performance: Scheduler: ratelimit updating of load_avg (LP: #2053251)
    - sched/fair: Ratelimit update to tg->load_avg
  * Jammy update: v5.15.147 upstream stable release (LP: #2054411)
    - block: Don't invalidate pagecache for invalid falloc modes
    - ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP ProBook 440 G6
    - Revert "PCI/ASPM: Remove pcie_aspm_pm_state_change()"
    - wifi: iwlwifi: pcie: don't synchronize IRQs from IRQ
    - drm/bridge: ti-sn65dsi86: Never store more than msg->size bytes in AUX xfer
    - nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to
      llcp_local
    - octeontx2-af: Fix marking couple of structure as __packed
    - drm/i915/dp: Fix passing the correct DPCD_REV for
      drm_dp_set_phy_test_pattern
    - i40e: Fix filter input checks to prevent config with invalid values
    - igc: Report VLAN EtherType matching back to user
    - igc: Check VLAN TCI mask
    - igc: Check VLAN EtherType mask
    - ASoC: fsl_rpmsg: Fix error handler with pm_runtime_enable
    - mlxbf_gige: fix receive packet race condition
    - net: sched: em_text: fix possible memory leak in em_text_destroy()
    - r8169: Fix PCI error on system resume
    - net: Implement missing getsockopt(SO_TIMESTAMPING_NEW)
    - can: raw: add support for SO_TXTIME/SCM_TXTIME
    - can: raw: add support for SO_MARK
    - net-timestamp: extend SOF_TIMESTAMPING_OPT_ID to HW timestamps
    - ARM: sun9i: smp: Fix array-index-out-of-bounds read in sunxi_mc_smp_init
    - sfc: fix a double-free bug in efx_probe_filters
    - net: bcmgenet: Fix FCS generation for fragmented skbuffs
    - netfilter: nft_immediate: drop chain reference counter on error
    - net: Save and restore msg_namelen in sock_sendmsg
    - i40e: fix use-after-free in i40e_aqc_add_filters()
    - ASoC: meson: g12a-toacodec: Validate written enum values
    - ASoC: meson: g12a-tohdmitx: Validate written enum values
    - ASoC: meson: g12a-toacodec: Fix event generation
    - ASoC: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux
    - i40e: Restore VF MSI-X state during PCI reset
    - igc: Fix hicredit calculation
    - net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues
    - octeontx2-af: Don't enable Pause frames by default
    - octeontx2-af: Set NIX link credits based on max LMAC
    - octeontx2-af: Always configure NIX TX link credits based on max frame size
    - octeontx2-af: Re-enable MAC TX in otx2_stop processing
    - asix: Add check for usbnet_get_endpoints
    - bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters()
    - net: Implement missing SO_TIMESTAMPING_NEW cmsg support
    - selftests: secretmem: floor the memory size to the multiple of page_size
    - mm/memory-failure: check the mapcount of the precise page
    - firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and
      ASM108x/VT630x PCIe cards
    - x86/kprobes: fix incorrect return address calculation in
      kprobe_emulate_call_indirect
    - i2c: core: Fix atomic xfer check for non-preempt config
    - mm: fix unmap_mapping_range high bits shift bug
    - mmc: meson-mx-sdhc: Fix initialization frozen issue
    - mmc: rpmb: fixes pause retune on all RPMB partitions.
    - mmc: core: Cancel delayed work before releasing host
    - mmc: sdhci-sprd: Fix eMMC init failure after hw reset
    - ipv6: remove max_size check inline with ipv4
    - perf inject: Fix GEN_ELF_TEXT_OFFSET for jit
    - kallsyms: Make module_kallsyms_on_each_symbol generally available
    - tracing/kprobes: Fix symbol counting logic by looking at modules as well
    - net: usb: ax88179_178a: remove redundant init code
    - net: usb: ax88179_178a: move priv to driver_priv
    - Linux 5.15.147
  * CVE-2024-1085
    - netfilter: nf_tables: check if catch-all set element is active in next
      generation
  * CVE-2023-23000
    - phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
  * performance: mm/percpu-internal.h: Re-layout pcpu_chunk to mitigate false
    sharing (LP: #2053152)
    - percpu-internal/pcpu_chunk: re-layout pcpu_chunk structure to reduce false
      sharing
  * performance: address_space: add padding for i_map and i_mmap_rwsem to
    mitigate a false sharing (LP: #2053069)
    - fs/address_space: add alignment padding for i_map and i_mmap_rwsem to
      mitigate a false sharing.
  * cpufreq: intel_pstate: Enable HWP IO boost for all servers (LP: #2052817)
    - cpufreq: intel_pstate: Enable HWP IO boost for all servers
  * performance: mm/memcontrol.c: remove the redundant updating of
    stats_flush_threshold (LP: #2052827)
    - mm/memcontrol.c: remove the redundant updating of stats_flush_threshold
  * Jammy update: v5.15.146 upstream stable release (LP: #2053212)
    - ARM: dts: dra7: Fix DRA7 L3 NoC node register size
    - ARM: OMAP2+: Fix null pointer dereference and memory leak in
      omap_soc_device_init
    - reset: Fix crash when freeing non-existent optional resets
    - s390/vx: fix save/restore of fpu kernel context
    - wifi: iwlwifi: pcie: add another missing bh-disable for rxq->lock
    - wifi: mac80211: mesh_plink: fix matches_local logic
    - net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list()
    - net/mlx5e: fix a potential double-free in fs_udp_create_groups
    - net/mlx5: Fix fw tracer first block check
    - net/mlx5e: Correct snprintf truncation handling for fw_version buffer used
      by representors
    - net: sched: ife: fix potential use-after-free
    - ethernet: atheros: fix a memleak in atl1e_setup_ring_resources
    - net/rose: fix races in rose_kill_by_device()
    - net: mana: select PAGE_POOL
    - net: check vlan filter feature in vlan_vids_add_by_dev() and
      vlan_vids_del_by_dev()
    - afs: Fix the dynamic root's d_delete to always delete unused dentries
    - afs: Fix dynamic root lookup DNS check
    - net: check dev->gso_max_size in gso_features_check()
    - keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
    - keys, dns: Fix missing size check of V1 server-list header
    - keys, dns: Fix size check of V1 server-list header
    - afs: Fix overwriting of result of DNS query
    - afs: Use refcount_t rather than atomic_t
    - afs: Fix use-after-free due to get/remove race in volume tree
    - ASoC: hdmi-codec: fix missing report for jack initial status
    - i2c: aspeed: Handle the coalesced stop conditions with the start conditions.
    - pinctrl: at91-pio4: use dedicated lock class for IRQ
    - gpiolib: cdev: add gpio_device locking wrapper around gpio_ioctl()
    - ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE
    - drm/i915/mtl: limit second scaler vertical scaling in ver >= 14
    - drm/i915: Relocate intel_atomic_setup_scalers()
    - drm/i915: Fix intel_atomic_setup_scalers() plane_state handling
    - smb: client: fix NULL deref in asn1_ber_decoder()
    - smb: client: fix OOB in smb2_query_reparse_point()
    - interconnect: Treat xlate() returning NULL node as an error
    - iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw
    - Input: ipaq-micro-keys - add error handling for devm_kmemdup
    - scsi: bnx2fc: Fix skb double free in bnx2fc_rcv()
    - iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table
    - iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma()
    - iio: triggered-buffer: prevent possible freeing of wrong buffer
    - ALSA: usb-audio: Increase delay in MOTU M quirk
    - wifi: cfg80211: Add my certificate
    - wifi: cfg80211: fix certs build to not depend on file order
    - USB: serial: ftdi_sio: update Actisense PIDs constant names
    - USB: serial: option: add Quectel EG912Y module support
    - USB: serial: option: add Foxconn T99W265 with new baseline
    - USB: serial: option: add Quectel RM500Q R13 firmware support
    - Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent
    - Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE
    - Input: soc_button_array - add mapping for airplane mode button
    - net: 9p: avoid freeing uninit memory in p9pdu_vreadf
    - net: rfkill: gpio: set GPIO direction
    - net: ks8851: Fix TX stall caused by TX buffer overrun
    - dt-bindings: nvmem: mxs-ocotp: Document fsl,ocotp
    - scsi: core: Always send batch on reset or error handling command
    - tracing / synthetic: Disable events after testing in
      synth_event_gen_test_init()
    - bus: ti-sysc: Flush posted write only after srst_udelay
    - gpio: dwapb: mask/unmask IRQ when disable/enale it
    - lib/vsprintf: Fix %pfwf when current node refcount == 0
    - KVM: arm64: vgic: Force vcpu vgic teardown on vcpu destroy
    - x86/alternatives: Sync core before enabling interrupts
    - fuse: share lookup state between submount and its parent
    - ksmbd: have a dependency on cifs ARC4
    - ksmbd: set epoch in create context v2 lease
    - ksmbd: set v2 lease capability
    - ksmbd: downgrade RWH lease caching state to RH for directory
    - ksmbd: send v2 lease break notification for directory
    - ksmbd: lazy v2 lease break on smb2_write()
    - ksmbd: avoid duplicate opinfo_put() call on error of smb21_lease_break_ack()
    - ksmbd: fix wrong allocation size update in smb2_open()
    - ARM: dts: Fix occasional boot hang for am3 usb
    - usb: fotg210-hcd: delete an incorrect bounds test
    - ethernet: constify references to netdev->dev_addr in drivers
    - net: usb: ax88179_178a: clean up pm calls
    - net: usb: ax88179_178a: wol optimizations
    - net: usb: ax88179_178a: avoid failed operations when device is disconnected
    - device property: Add const qualifier to device_get_match_data() parameter
    - spi: Introduce spi_get_device_match_data() helper
    - iio: imu: adis16475: add spi_device_id table
    - smb: client: fix OOB in SMB2_query_info_init()
    - mm/filemap: avoid buffered read/write race to read inconsistent data
    - ring-buffer: Fix wake ups when buffer_percent is set to 100
    - tracing: Fix blocked reader of snapshot buffer
    - ring-buffer: Remove useless update to write_stamp in rb_try_to_discard()
    - ring-buffer: Fix slowpath of interrupted event
    - dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata()
    - device property: Allow const parameter to dev_fwnode()
    - bpf: Fix prog_array_map_poke_run map poke update
    - Linux 5.15.146
  * CVE-2023-46838
    - xen-netback: don't produce zero-size SKB frags
  * CVE-2024-1086
    - netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  * disable Intel DMA remapping by default (LP: #1971699)
    - [Config] update tracking bug for CONFIG_INTEL_IOMMU_DEFAULT_ON
  * Validate connection interval to pass Bluetooth Test Suite (LP: #2052005)
    - Bluetooth: Enforce validation on max value of connection interval
  * Jammy update: v5.15.145 upstream stable release (LP: #2052406)
    - ksmbd: use ksmbd_req_buf_next() in ksmbd_verify_smb_message()
    - ksmdb: use cmd helper variable in smb2_get_ksmbd_tcon()
    - ksmbd: Remove redundant 'flush_workqueue()' calls
    - ksmbd: remove md4 leftovers
    - ksmbd: remove smb2_buf_length in smb2_hdr
    - ksmbd: remove smb2_buf_length in smb2_transform_hdr
    - ksmbd: change LeaseKey data type to u8 array
    - ksmbd: use oid registry functions to decode OIDs
    - ksmbd: Remove unused parameter from smb2_get_name()
    - ksmbd: Remove unused fields from ksmbd_file struct definition
    - ksmbd: set both ipv4 and ipv6 in FSCTL_QUERY_NETWORK_INTERFACE_INFO
    - ksmbd: Fix buffer_check_err() kernel-doc comment
    - ksmbd: Fix smb2_set_info_file() kernel-doc comment
    - ksmbd: Delete an invalid argument description in
      smb2_populate_readdir_entry()
    - ksmbd: Fix smb2_get_name() kernel-doc comment
    - ksmbd: register ksmbd ib client with ib_register_client()
    - ksmbd: set 445 port to smbdirect port by default
    - ksmbd: smbd: call rdma_accept() under CM handler
    - ksmbd: smbd: create MR pool
    - ksmbd: smbd: change the default maximum read/write, receive size
    - ksmbd: smbd: fix missing client's memory region invalidation
    - ksmbd: smbd: validate buffer descriptor structures
    - ksmbd: add support for key exchange
    - ksmbd: use netif_is_bridge_port
    - ksmbd: store fids as opaque u64 integers
    - ksmbd: shorten experimental warning on loading the module
    - ksmbd: Remove a redundant zeroing of memory
    - ksmbd: replace usage of found with dedicated list iterator variable
    - smb3: fix ksmbd bigendian bug in oplock break, and move its struct to
      smbfs_common
    - ksmbd: remove filename in ksmbd_file
    - ksmbd: smbd: change prototypes of RDMA read/write related functions
    - ksmbd: smbd: introduce read/write credits for RDMA read/write
    - ksmbd: smbd: simplify tracking pending packets
    - ksmbd: smbd: change the return value of get_sg_list
    - ksmbd: smbd: handle multiple Buffer descriptors
    - ksmbd: fix wrong smbd max read/write size check
    - ksmbd: Fix some kernel-doc comments
    - ksmbd: smbd: fix connection dropped issue
    - ksmbd: smbd: relax the count of sges required
    - ksmbd: smbd: Remove useless license text when SPDX-License-Identifier is
      already used
    - ksmbd: remove duplicate flag set in smb2_write
    - ksmbd: remove unused ksmbd_share_configs_cleanup function
    - ksmbd: use wait_event instead of schedule_timeout()
    - ksmbd: request update to stale share config
    - ksmbd: remove unnecessary generic_fillattr in smb2_open
    - ksmbd: don't open-code file_path()
    - ksmbd: don't open-code %pD
    - ksmbd: constify struct path
    - ksmbd: remove generic_fillattr use in smb2_open()
    - ksmbd: casefold utf-8 share names and fix ascii lowercase conversion
    - ksmbd: change security id to the one samba used for posix extension
    - ksmbd: set file permission mode to match Samba server posix extension
      behavior
    - ksmbd: fill sids in SMB_FIND_FILE_POSIX_INFO response
    - ksmbd: fix encryption failure issue for session logoff response
    - ksmbd: set NTLMSSP_NEGOTIATE_SEAL flag to challenge blob
    - ksmbd: decrease the number of SMB3 smbdirect server SGEs
    - ksmbd: reduce server smbdirect max send/receive segment sizes
    - ksmbd: hide socket error message when ipv6 config is disable
    - ksmbd: make utf-8 file name comparison work in __caseless_lookup()
    - ksmbd: call ib_drain_qp when disconnected
    - ksmbd: validate share name from share config response
    - ksmbd: replace one-element arrays with flexible-array members
    - ksmbd: set SMB2_SESSION_FLAG_ENCRYPT_DATA when enforcing data encryption for
      this share
    - ksmbd: use F_SETLK when unlocking a file
    - ksmbd: Fix resource leak in smb2_lock()
    - ksmbd: Convert to use sysfs_emit()/sysfs_emit_at() APIs
    - ksmbd: send proper error response in smb2_tree_connect()
    - ksmbd: Implements sess->rpc_handle_list as xarray
    - ksmbd: fix typo, syncronous->synchronous
    - ksmbd: Remove duplicated codes
    - ksmbd: update Kconfig to note Kerberos support and fix indentation
    - ksmbd: Fix spelling mistake "excceed" -> "exceeded"
    - ksmbd: Fix parameter name and comment mismatch
    - ksmbd: fix possible memory leak in smb2_lock()
    - ksmbd: fix wrong signingkey creation when encryption is AES256
    - ksmbd: remove unused is_char_allowed function
    - ksmbd: delete asynchronous work from list
    - ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
    - ksmbd: avoid out of bounds access in decode_preauth_ctxt()
    - ksmbd: set NegotiateContextCount once instead of every inc
    - ksmbd: avoid duplicate negotiate ctx offset increments
    - ksmbd: remove unused compression negotiate ctx packing
    - fs: introduce lock_rename_child() helper
    - ksmbd: fix racy issue from using ->d_parent and ->d_name
    - ksmbd: destroy expired sessions
    - ksmbd: block asynchronous requests when making a delay on session setup
    - ksmbd: fix racy issue from smb2 close and logoff with multichannel
    - ksmbd: fix racy issue under cocurrent smb2 tree disconnect
    - ksmbd: fix uninitialized pointer read in ksmbd_vfs_rename()
    - ksmbd: fix uninitialized pointer read in smb2_create_link()
    - ksmbd: fix multiple out-of-bounds read during context decoding
    - ksmbd: fix UAF issue from opinfo->conn
    - ksmbd: call putname after using the last component
    - ksmbd: fix out-of-bound read in deassemble_neg_contexts()
    - ksmbd: fix out-of-bound read in parse_lease_state()
    - ksmbd: fix posix_acls and acls dereferencing possible ERR_PTR()
    - ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop
    - ksmbd: validate smb request protocol id
    - ksmbd: add mnt_want_write to ksmbd vfs functions
    - ksmbd: remove unused ksmbd_tree_conn_share function
    - ksmbd: use kzalloc() instead of __GFP_ZERO
    - ksmbd: return a literal instead of 'err' in ksmbd_vfs_kern_path_locked()
    - ksmbd: Change the return value of ksmbd_vfs_query_maximal_access to void
    - ksmbd: use kvzalloc instead of kvmalloc
    - ksmbd: Replace the ternary conditional operator with min()
    - ksmbd: fix out of bounds read in smb2_sess_setup
    - ksmbd: add missing compound request handing in some commands
    - ksmbd: Use struct_size() helper in ksmbd_negotiate_smb_dialect()
    - ksmbd: Replace one-element array with flexible-array member
    - ksmbd: Fix unsigned expression compared with zero
    - ksmbd: check if a mount point is crossed during path lookup
    - ksmbd: validate session id and tree id in compound request
    - ksmbd: fix out of bounds in init_smb2_rsp_hdr()
    - ksmbd: switch to use kmemdup_nul() helper
    - ksmbd: add support for read compound
    - ksmbd: fix wrong interim response on compound
    - ksmbd: fix `force create mode' and `force directory mode'
    - ksmbd: reduce descriptor size if remaining bytes is less than request size
    - ksmbd: Fix one kernel-doc comment
    - ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()
    - ksmbd: add missing calling smb2_set_err_rsp() on error
    - ksmbd: remove experimental warning
    - ksmbd: remove unneeded mark_inode_dirty in set_info_sec()
    - ksmbd: fix passing freed memory 'aux_payload_buf'
    - ksmbd: return invalid parameter error response if smb2 request is invalid
    - ksmbd: check iov vector index in ksmbd_conn_write()
    - ksmbd: fix race condition between session lookup and expire
    - ksmbd: fix race condition with fp
    - ksmbd: fix race condition from parallel smb2 logoff requests
    - ksmbd: fix race condition from parallel smb2 lock requests
    - ksmbd: fix race condition between tree conn lookup and disconnect
    - ksmbd: fix wrong error response status by using set_smb2_rsp_status()
    - ksmbd: fix Null pointer dereferences in ksmbd_update_fstate()
    - ksmbd: fix potential double free on smb2_read_pipe() error path
    - ksmbd: Remove unused field in ksmbd_user struct
    - ksmbd: reorganize ksmbd_iov_pin_rsp()
    - ksmbd: fix kernel-doc comment of ksmbd_vfs_setxattr()
    - ksmbd: fix recursive locking in vfs helpers
    - ksmbd: fix missing RDMA-capable flag for IPoIB device in
      ksmbd_rdma_capable_netdev()
    - ksmbd: add support for surrogate pair conversion
    - ksmbd: no need to wait for binded connection termination at logoff
    - ksmbd: fix kernel-doc comment of ksmbd_vfs_kern_path_locked()
    - ksmbd: handle malformed smb1 message
    - ksmbd: prevent memory leak on error return
    - ksmbd: fix possible deadlock in smb2_open
    - ksmbd: separately allocate ci per dentry
    - ksmbd: move oplock handling after unlock parent dir
    - ksmbd: release interim response after sending status pending response
    - ksmbd: move setting SMB2_FLAGS_ASYNC_COMMAND and AsyncId
    - ksmbd: don't update ->op_state as OPLOCK_STATE_NONE on error
    - tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols
    - kasan: disable kasan_non_canonical_hook() for HW tags
    - Linux 5.15.145
  * Jammy update: v5.15.144 upstream stable release (LP: #2052404)
    - r8152: add vendor/device ID pair for D-Link DUB-E250
    - r8152: add vendor/device ID pair for ASUS USB-C2500
    - netfilter: nf_tables: fix 'exist' matching on bigendian arches
    - mm/memory_hotplug: handle memblock_add_node() failures in
      add_memory_resource()
    - memblock: allow to specify flags with memblock_add_node()
    - MIPS: Loongson64: Handle more memory types passed from firmware
    - ksmbd: fix memory leak in smb2_lock()
    - afs: Fix refcount underflow from error handling race
    - HID: lenovo: Restrict detection of patched firmware only to USB cptkbd
    - net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX
    - qca_debug: Prevent crash on TX ring changes
    - qca_debug: Fix ethtool -G iface tx behavior
    - qca_spi: Fix reset behavior
    - atm: solos-pci: Fix potential deadlock on &cli_queue_lock
    - atm: solos-pci: Fix potential deadlock on &tx_queue_lock
    - net: vlan: introduce skb_vlan_eth_hdr()
    - net: fec: correct queue selection
    - octeontx2-af: fix a use-after-free in rvu_nix_register_reporters
    - octeontx2-pf: Fix promisc mcam entry action
    - octeontx2-af: Update RSS algorithm index
    - qed: Fix a potential use-after-free in qed_cxt_tables_alloc
    - net: Remove acked SYN flag from packet in the transmit queue correctly
    - net: ena: Destroy correct number of xdp queues upon failure
    - net: ena: Fix xdp drops handling due to multibuf packets
    - net: ena: Fix XDP redirection error
    - stmmac: dwmac-loongson: Make sure MDIO is initialized before use
    - sign-file: Fix incorrect return values check
    - vsock/virtio: Fix unsigned integer wrap around in
      virtio_transport_has_space()
    - dpaa2-switch: fix size of the dma_unmap
    - net: stmmac: use dev_err_probe() for reporting mdio bus registration failure
    - net: stmmac: Handle disabled MDIO busses from devicetree
    - net: atlantic: fix double free in ring reinit logic
    - cred: switch to using atomic_long_t
    - fuse: dax: set fc->dax to NULL in fuse_dax_conn_free()
    - ALSA: hda/hdmi: add force-connect quirk for NUC5CPYB
    - ALSA: hda/hdmi: add force-connect quirks for ASUSTeK Z170 variants
    - ALSA: hda/realtek: Apply mute LED quirk for HP15-db
    - PCI: loongson: Limit MRRS to 256
    - drm/mediatek: Add spinlock for setting vblank event in atomic_begin
    - usb: aqc111: check packet for fixup for true limit
    - stmmac: dwmac-loongson: Add architecture dependency
    - [Config] updateconfigs for CONFIG_DWMAC_LOONGSON
    - blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock
      required!"
    - blk-cgroup: bypass blkcg_deactivate_policy after destroying
    - bcache: avoid oversize memory allocation by small stripe_size
    - bcache: remove redundant assignment to variable cur_idx
    - bcache: add code comments for bch_btree_node_get() and
      __bch_btree_node_alloc()
    - bcache: avoid NULL checking to c->root in run_cache_set()
    - platform/x86: intel_telemetry: Fix kernel doc descriptions
    - HID: glorious: fix Glorious Model I HID report
    - HID: add ALWAYS_POLL quirk for Apple kb
    - HID: hid-asus: reset the backlight brightness level on resume
    - HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad
    - asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation
    - net: usb: qmi_wwan: claim interface 4 for ZTE MF290
    - HID: hid-asus: add const to read-only outgoing usb buffer
    - btrfs: do not allow non subvolume root targets for snapshot
    - soundwire: stream: fix NULL pointer dereference for multi_link
    - ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
    - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify
    - team: Fix use-after-free when an option instance allocation fails
    - drm/amdgpu/sdma5.2: add begin/end_use ring callbacks
    - ring-buffer: Fix memory leak of free page
    - tracing: Update snapshot buffer on resize if it is allocated
    - ring-buffer: Do not update before stamp when switching sub-buffers
    - ring-buffer: Have saved event hold the entire event
    - ring-buffer: Fix writing to the buffer with max_data_size
    - ring-buffer: Fix a race in rb_time_cmpxchg() for 32 bit archs
    - ring-buffer: Do not try to put back write_stamp
    - USB: gadget: core: adjust uevent timing on gadget unbind
    - powerpc/ftrace: Create a dummy stackframe to fix stack unwind
    - powerpc/ftrace: Fix stack teardown in ftrace_no_trace
    - r8152: avoid to change cfg for all devices
    - r8152: remove rtl_vendor_mode function
    - r8152: fix the autosuspend doesn't work
    - Linux 5.15.144
  * CVE-2023-32247
    - ksmbd: destroy expired sessions
  * CVE-2024-22705
    - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()

  [ Ubuntu: 5.15.0-100.110 ]

  * jammy/linux: 5.15.0-100.110 -proposed tracker (LP: #2052616)
  * i915 regression introduced with 5.5 kernel (LP: #2044131)
    - drm/i915: Skip some timing checks on BXT/GLK DSI transcoders
  * Audio balancing setting doesn't work with the cirrus codec (LP: #2051050)
    - ALSA: hda/cs8409: Suppress vmaster control for Dolphin models
  * partproke is broken on empty loopback device (LP: #2049689)
    - block: Move checking GENHD_FL_NO_PART to bdev_add_partition()
  * CVE-2023-0340
    - vhost: use kzalloc() instead of kmalloc() followed by memset()
  * CVE-2023-51780
    - atm: Fix Use-After-Free in do_vcc_ioctl
  * CVE-2023-6915
    - ida: Fix crash in ida_free when the bitmap is empty
  * CVE-2024-0646
    - net: tls, update curr on splice as well
  * CVE-2024-0565
    - smb: client: fix OOB in receive_encrypted_standard()
  * CVE-2023-51781
    - appletalk: Fix Use-After-Free in atalk_ioctl
  * Jammy update: v5.15.143 upstream stable release (LP: #2050858)
    - vdpa/mlx5: preserve CVQ vringh index
    - hrtimers: Push pending hrtimers away from outgoing CPU earlier
    - i2c: designware: Fix corrupted memory seen in the ISR
    - netfilter: ipset: fix race condition between swap/destroy and kernel side
      add/del/test
    - tg3: Move the [rt]x_dropped counters to tg3_napi
    - tg3: Increment tx_dropped in tg3_tso_bug()
    - kconfig: fix memory leak from range properties
    - drm/amdgpu: correct chunk_ptr to a pointer to chunk.
    - platform/x86: asus-wmi: Adjust tablet/lidflip handling to use enum
    - platform/x86: asus-wmi: Add support for ROG X13 tablet mode
    - platform/x86: asus-wmi: Simplify tablet-mode-switch probing
    - platform/x86: asus-wmi: Simplify tablet-mode-switch handling
    - platform/x86: asus-wmi: Move i8042 filter install to shared asus-wmi code
    - of: dynamic: Fix of_reconfig_get_state_change() return value documentation
    - platform/x86: wmi: Allow duplicate GUIDs for drivers that use struct
      wmi_driver
    - platform/x86: wmi: Skip blocks with zero instances
    - ipv6: fix potential NULL deref in fib6_add()
    - octeontx2-pf: Add missing mutex lock in otx2_get_pauseparam
    - octeontx2-af: Check return value of nix_get_nixlf before using nixlf
    - hv_netvsc: rndis_filter needs to select NLS
    - r8152: Rename RTL8152_UNPLUG to RTL8152_INACCESSIBLE
    - r8152: Add RTL8152_INACCESSIBLE checks to more loops
    - r8152: Add RTL8152_INACCESSIBLE to r8156b_wait_loading_flash()
    - r8152: Add RTL8152_INACCESSIBLE to r8153_pre_firmware_1()
    - r8152: Add RTL8152_INACCESSIBLE to r8153_aldps_en()
    - mlxbf-bootctl: correctly identify secure boot with development keys
    - platform/mellanox: Add null pointer checks for devm_kasprintf()
    - platform/mellanox: Check devm_hwmon_device_register_with_groups() return
      value
    - arcnet: restoring support for multiple Sohard Arcnet cards
    - net: stmmac: fix FPE events losing
    - octeontx2-af: fix a use-after-free in rvu_npa_register_reporters
    - i40e: Fix unexpected MFS warning message
    - net: bnxt: fix a potential use-after-free in bnxt_init_tc
    - ionic: fix snprintf format length warning
    - ionic: Fix dim work handling in split interrupt mode
    - ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit()
    - net: hns: fix fake link up on xge port
    - octeontx2-af: Update Tx link register range
    - netfilter: nf_tables: validate family when identifying table via handle
    - netfilter: xt_owner: Fix for unsafe access of sk->sk_socket
    - tcp: do not accept ACK of bytes we never sent
    - bpf: sockmap, updating the sg structure should also update curr
    - psample: Require 'CAP_NET_ADMIN' when joining "packets" group
    - net: add missing kdoc for struct genl_multicast_group::flags
    - drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group
    - tee: optee: Fix supplicant based device enumeration
    - RDMA/hns: Fix unnecessary err return when using invalid congest control
      algorithm
    - RDMA/irdma: Do not modify to SQD on error
    - RDMA/irdma: Add wait for suspend on SQD
    - arm64: dts: rockchip: Expand reg size of vdec node for RK3399
    - RDMA/rtrs-srv: Do not unconditionally enable irq
    - RDMA/rtrs-clt: Start hb after path_up
    - RDMA/rtrs-srv: Check return values while processing info request
    - RDMA/rtrs-srv: Free srv_mr iu only when always_invalidate is true
    - RDMA/rtrs-srv: Destroy path files after making sure no IOs in-flight
    - RDMA/rtrs-clt: Fix the max_send_wr setting
    - RDMA/rtrs-clt: Remove the warnings for req in_use check
    - RDMA/bnxt_re: Correct module description string
    - hwmon: (acpi_power_meter) Fix 4.29 MW bug
    - hwmon: (nzxt-kraken2) Fix error handling path in kraken2_probe()
    - ASoC: wm_adsp: fix memleak in wm_adsp_buffer_populate
    - RDMA/core: Fix umem iterator when PAGE_SIZE is greater then HCA pgsz
    - RDMA/irdma: Avoid free the non-cqp_request scratch
    - arm64: dts: imx8mq: drop usb3-resume-missing-cas from usb
    - arm64: dts: imx8mp: imx8mq: Add parkmode-disable-ss-quirk on DWC3
    - ARM: dts: imx6ul-pico: Describe the Ethernet PHY clock
    - tracing: Fix a warning when allocating buffered events fails
    - scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle()
    - ARM: imx: Check return value of devm_kasprintf in imx_mmdc_perf_init
    - ARM: dts: imx7: Declare timers compatible with fsl,imx6dl-gpt
    - ARM: dts: imx28-xea: Pass the 'model' property
    - riscv: fix misaligned access handling of C.SWSP and C.SDSP
    - md: introduce md_ro_state
    - md: don't leave 'MD_RECOVERY_FROZEN' in error path of md_set_readonly()
    - kprobes: consistent rcu api usage for kretprobe holder
    - nvme-pci: Add sleep quirk for Kingston drives
    - io_uring: fix mutex_unlock with unreferenced ctx
    - ALSA: usb-audio: Add Pioneer DJM-450 mixer controls
    - ALSA: pcm: fix out-of-bounds in snd_pcm_state_names
    - nilfs2: fix missing error check for sb_set_blocksize call
    - nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage()
    - checkstack: fix printed address
    - tracing: Always update snapshot buffer size
    - tracing: Disable snapshot buffer when stopping instance tracers
    - tracing: Fix incomplete locking when disabling buffered events
    - tracing: Fix a possible race when disabling buffered events
    - packet: Move reference count in packet_sock to atomic_long_t
    - regmap: fix bogus error on regcache_sync success
    - platform/surface: aggregator: fix recv_buf() return value
    - arm64: dts: mediatek: mt7622: fix memory node warning check
    - arm64: dts: mediatek: mt8183-kukui-jacuzzi: fix dsi unnecessary cells
      properties
    - arm64: dts: mediatek: mt8173-evb: Fix regulator-fixed node names
    - arm64: dts: mediatek: mt8183: Fix unit address for scp reserved memory
    - binder: fix memory leaks of spam and pending work
    - kallsyms: Make kallsyms_on_each_symbol generally available
    - coresight: etm4x: Make etm4_remove_dev() return void
    - coresight: etm4x: Remove bogous __exit annotation for some functions
    - misc: mei: client.c: return negative error code in mei_cl_write
    - misc: mei: client.c: fix problem of return '-EOVERFLOW' in mei_cl_write
    - ring-buffer: Force absolute timestamp on discard of event
    - tracing: Set actual size after ring buffer resize
    - tracing: Stop current tracer when resizing buffer
    - r8169: fix rtl8125b PAUSE frames blasting when suspended
    - mm: fix oops when filemap_map_pmd() without prealloc_pte
    - io_uring/af_unix: disable sending io_uring over sockets
    - platform/x86: asus-wmi: Fix kbd_dock_devid tablet-switch reporting
    - docs/process/howto: Replace C89 with C11
    - tools headers UAPI: Sync linux/perf_event.h with the kernel sources
    - arm64: dts: mediatek: align thermal zone node names with dtschema
    - arm64: dts: mediatek: mt8183: Move thermal-zones to the root node
    - arm64: dts: mediatek: add missing space before {
    - arm64: dts: mt8183: kukui: Fix underscores in node names
    - gpiolib: sysfs: Fix error handling on failed export
    - drm/amd/amdgpu: Fix warnings in amdgpu/amdgpu_display.c
    - drm/amdgpu: correct the amdgpu runtime dereference usage count
    - usb: gadget: f_hid: fix report descriptor allocation
    - parport: Add support for Brainboxes IX/UC/PX parallel cards
    - usb: typec: class: fix typec_altmode_put_partner to put plugs
    - ARM: PL011: Fix DMA support
    - serial: sc16is7xx: address RX timeout interrupt errata
    - serial: 8250: 8250_omap: Clear UART_HAS_RHR_IT_DIS bit
    - serial: 8250: 8250_omap: Do not start RX DMA on THRI interrupt
    - serial: 8250_omap: Add earlycon support for the AM654 UART controller
    - x86/CPU/AMD: Check vendor in the AMD microcode callback
    - KVM: s390/mm: Properly reset no-dat
    - KVM: SVM: Update EFER software model on CR0 trap for SEV-ES
    - MIPS: Loongson64: Reserve vgabios memory on boot
    - MIPS: Loongson64: Enable DMA noncoherent support
    - cifs: Fix non-availability of dedup breaking generic/304
    - smb: client: fix potential NULL deref in parse_dfs_referrals()
    - devcoredump : Serialize devcd_del work
    - devcoredump: Send uevent once devcd is ready
    - Linux 5.15.143
  * Intel E810-XXV - NETDEV WATCHDOG: (ice): transmit queue timed out
    (LP: #2036239)
    - ice: Add feature bitmap, helpers and a check for DSCP
    - ice: Add driver support for firmware changes for LAG
    - ice: alter feature support check for SRIOV and LAG
  * Don't WARN_ON_ONCE() for a broken discovery table (LP: #2048404)
    - perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table
  * Reject connection when malformed L2CAP signal packet is received
    (LP: #2047634)
    - Bluetooth: L2CAP: Send reject on command corrupted request
  * Jammy update: v5.15.142 upstream stable release (LP: #2050849)
    - pinctrl: avoid reload of p state in list iteration
    - firewire: core: fix possible memory leak in create_units()
    - mmc: cqhci: Increase recovery halt timeout
    - mmc: cqhci: Warn of halt or task clear failure
    - mmc: cqhci: Fix task clearing in CQE error recovery
    - mmc: block: Retry commands in CQE error recovery
    - mmc: block: Do not lose cache flush during CQE error recovery
    - mmc: block: Be sure to wait while busy in CQE error recovery
    - ALSA: hda: Disable power-save on KONTRON SinglePC
    - ALSA: hda/realtek: Headset Mic VREF to 100%
    - ALSA: hda/realtek: Add supported ALC257 for ChromeOS
    - dm-verity: align struct dm_verity_fec_io properly
    - dm verity: don't perform FEC for failed readahead IO
    - bcache: revert replacing IS_ERR_OR_NULL with IS_ERR
    - iommu/vt-d: Add MTL to quirk list to skip TE disabling
    - powerpc: Don't clobber f0/vs0 during fp|altivec register save
    - parisc: Drop the HP-UX ENOSYM and EREMOTERELEASE error codes
    - btrfs: ref-verify: fix memory leaks in btrfs_ref_tree_mod()
    - btrfs: fix off-by-one when checking chunk map includes logical address
    - btrfs: send: ensure send_fd is writable
    - btrfs: make error messages more clear when getting a chunk map
    - Input: xpad - add HyperX Clutch Gladiate Support
    - vlan: introduce vlan_dev_free_egress_priority
    - vlan: move dev_put into vlan_dev_uninit
    - rcu: Avoid tracing a few functions executed in stop machine
    - hv_netvsc: fix race of netvsc and VF register_netdevice
    - USB: core: Change configuration warnings to notices
    - usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
    - dpaa2-eth: increase the needed headroom to account for alignment
    - uapi: propagate __struct_group() attributes to the container union
    - selftests/net: ipsec: fix constant out of range
    - octeontx2-af: Fix possible buffer overflow
    - net: stmmac: xgmac: Disable FPE MMC interrupts
    - octeontx2-pf: Fix adding mbox work queue entry when num_vfs > 64
    - Revert "workqueue: remove unused cancel_work()"
    - r8169: prevent potential deadlock in rtl8169_close
    - ravb: Fix races between ravb_tx_timeout_work() and net related ops
    - net: ravb: Check return value of reset_control_deassert()
    - net: ravb: Use pm_runtime_resume_and_get()
    - net: ravb: Start TX queues after HW initialization succeeded
    - net: ravb: Stop DMA in case of failures on ravb_open()
    - perf intel-pt: Fix async branch flags
    - selftests/resctrl: Add missing SPDX license to Makefile
    - selftests/resctrl: Move _GNU_SOURCE define into Makefile
    - smb3: fix touch -h of symlink
    - ASoC: Intel: Move soc_intel_is_foo() helpers to a generic header
    - ASoC: SOF: sof-pci-dev: use community key on all Up boards
    - ASoC: SOF: sof-pci-dev: add parameter to override topology filename
    - ASoC: SOF: sof-pci-dev: don't use the community key on APL Chromebooks
    - ASoC: SOF: sof-pci-dev: Fix community key quirk detection
    - fbdev: stifb: Make the STI next font pointer a 32-bit signed offset
    - fs: add ctime accessors infrastructure
    - smb3: fix caching of ctime on setxattr
    - cpufreq: imx6q: don't warn for disabling a non-existing frequency
    - cpufreq: imx6q: Don't disable 792 Mhz OPP unnecessarily
    - iommu/vt-d: Omit devTLB invalidation requests when TES=0
    - iommu/vt-d: Make context clearing consistent with context mapping
    - mmc: core: add helpers mmc_regulator_enable/disable_vqmmc
    - mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled
    - r8169: disable ASPM in case of tx timeout
    - r8169: fix deadlock on RTL8125 in jumbo mtu mode
    - iomap: update ki_pos a little later in iomap_dio_complete
    - Linux 5.15.142
  * Jammy update: v5.15.141 upstream stable release (LP: #2050044)
    - afs: Fix afs_server_list to be cleaned up with RCU
    - afs: Make error on cell lookup failure consistent with OpenAFS
    - drm/panel: boe-tv101wum-nl6: Fine tune the panel power sequence
    - drm/panel: auo,b101uan08.3: Fine tune the panel power sequence
    - drm/panel: simple: Fix Innolux G101ICE-L01 bus flags
    - drm/panel: simple: Fix Innolux G101ICE-L01 timings
    - wireguard: use DEV_STATS_INC()
    - octeontx2-pf: Fix memory leak during interface down
    - ata: pata_isapnp: Add missing error check for devm_ioport_map()
    - drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full
    - HID: core: store the unique system identifier in hid_device
    - HID: fix HID device resource race between HID core and debugging support
    - ipv4: Correct/silence an endian warning in __ip_do_redirect
    - net: usb: ax88179_178a: fix failed operations during ax88179_reset
    - net/smc: avoid data corruption caused by decline
    - arm/xen: fix xen_vcpu_info allocation alignment
    - octeontx2-pf: Fix ntuple rule creation to direct packet to VF with higher Rx
      queue than its PF
    - amd-xgbe: handle corner-case during sfp hotplug
    - amd-xgbe: handle the corner-case during tx completion
    - amd-xgbe: propagate the correct speed and duplex status
    - net: axienet: Fix check for partial TX checksum
    - afs: Return ENOENT if no cell DNS record can be found
    - afs: Fix file locking on R/O volumes to operate in local mode
    - nvmet: nul-terminate the NQNs passed in the connect command
    - USB: dwc3: qcom: fix resource leaks on probe deferral
    - USB: dwc3: qcom: fix ACPI platform device leak
    - lockdep: Fix block chain corruption
    - MIPS: KVM: Fix a build warning about variable set but not used
    - media: camss: Replace hard coded value with parameter
    - media: camss: sm8250: Virtual channels for CSID
    - media: qcom: camss: Fix set CSI2_RX_CFG1_VC_MODE when VC is greater than 3
    - media: qcom: camss: Fix csid-gen2 for test pattern generator
    - ext4: add a new helper to check if es must be kept
    - ext4: factor out __es_alloc_extent() and __es_free_extent()
    - ext4: use pre-allocated es in __es_insert_extent()
    - ext4: use pre-allocated es in __es_remove_extent()
    - ext4: using nofail preallocation in ext4_es_remove_extent()
    - ext4: using nofail preallocation in ext4_es_insert_delayed_block()
    - ext4: using nofail preallocation in ext4_es_insert_extent()
    - ext4: fix slab-use-after-free in ext4_es_insert_extent()
    - ext4: make sure allocate pending entry not fail
    - proc: sysctl: prevent aliased sysctls from getting passed to init
    - ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA
    - swiotlb-xen: provide the "max_mapping_size" method
    - bcache: replace a mistaken IS_ERR() by IS_ERR_OR_NULL() in
      btree_gc_coalesce()
    - md: fix bi_status reporting in md_end_clone_io
    - bcache: fixup multi-threaded bch_sectors_dirty_init() wake-up race
    - io_uring/fs: consider link->flags when getting path for LINKAT
    - s390/dasd: protect device queue against concurrent access
    - USB: serial: option: add Luat Air72*U series products
    - hv_netvsc: Fix race of register_netdevice_notifier and VF register
    - hv_netvsc: Mark VF as slave before exposing it to user-mode
    - dm-delay: fix a race between delay_presuspend and delay_bio
    - bcache: check return value from btree_node_alloc_replacement()
    - bcache: prevent potential division by zero error
    - bcache: fixup init dirty data errors
    - bcache: fixup lock c->root error
    - usb: cdnsp: Fix deadlock issue during using NCM gadget
    - USB: serial: option: add Fibocom L7xx modules
    - USB: serial: option: fix FM101R-GL defines
    - USB: serial: option: don't claim interface 4 for ZTE MF290
    - usb: typec: tcpm: Skip hard reset when in error recovery
    - USB: dwc2: write HCINT with INTMASK applied
    - usb: dwc3: Fix default mode initialization
    - usb: dwc3: set the dma max_seg_size
    - USB: dwc3: qcom: fix software node leak on probe errors
    - USB: dwc3: qcom: fix wakeup after probe deferral
    - io_uring: fix off-by one bvec index
    - Linux 5.15.141
  * Jammy update: v5.15.140 upstream stable release (LP: #2050038)
    - locking/ww_mutex/test: Fix potential workqueue corruption
    - perf/core: Bail out early if the request AUX area is out of bound
    - clocksource/drivers/timer-imx-gpt: Fix potential memory leak
    - clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware
    - workqueue: Provide one lock class key per work_on_cpu() callsite
    - x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size
    - wifi: mac80211_hwsim: fix clang-specific fortify warning
    - wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
    - atl1c: Work around the DMA RX overflow issue
    - bpf: Detect IP == ksym.end as part of BPF program
    - wifi: ath9k: fix clang-specific fortify warnings
    - wifi: ath10k: fix clang-specific fortify warning
    - net: annotate data-races around sk->sk_tx_queue_mapping
    - net: annotate data-races around sk->sk_dst_pending_confirm
    - wifi: ath10k: Don't touch the CE interrupt registers after power up
    - Bluetooth: btusb: Add date->evt_skb is NULL check
    - Bluetooth: Fix double free in hci_conn_cleanup
    - platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e
    - drm/komeda: drop all currently held locks if deadlock happens
    - drm/amdkfd: Fix a race condition of vram buffer unref in svm code
    - drm/amd/display: use full update for clip size increase of large plane
      source
    - string.h: add array-wrappers for (v)memdup_user()
    - kernel: kexec: copy user-array safely
    - kernel: watch_queue: copy user-array safely
    - drm: vmwgfx_surface.c: copy user-array safely
    - drm/msm/dp: skip validity check for DP CTS EDID checksum
    - drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
    - drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
    - drm/amdgpu: Fix potential null pointer derefernce
    - drm/panel: fix a possible null pointer dereference
    - drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
    - drm/amdgpu/vkms: fix a possible null pointer dereference
    - drm/panel: st7703: Pick different reset sequence
    - drm/amdkfd: Fix shift out-of-bounds issue
    - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
    - arm64: dts: ls208xa: use a pseudo-bus to constrain usb dma size
    - selftests/efivarfs: create-read: fix a resource leak
    - ASoC: soc-card: Add storage for PCI SSID
    - crypto: pcrypt - Fix hungtask for PADATA_RESET
    - RDMA/hfi1: Use FIELD_GET() to extract Link Width
    - scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
    - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool
    - fs/jfs: Add check for negative db_l2nbperpage
    - fs/jfs: Add validity check for db_maxag and db_agpref
    - jfs: fix array-index-out-of-bounds in dbFindLeaf
    - jfs: fix array-index-out-of-bounds in diAlloc
    - HID: lenovo: Detect quirk-free fw on cptkbd and stop applying workaround
    - ARM: 9320/1: fix stack depot IRQ stack filter
    - ALSA: hda: Fix possible null-ptr-deref when assigning a stream
    - PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields
    - atm: iphase: Do PCI error checks on own line
    - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
    - PCI: Use FIELD_GET() to extract Link Width
    - PCI: Extract ATS disabling to a helper function
    - PCI: Disable ATS for specific Intel IPU E2000 devices
    - misc: pci_endpoint_test: Add Device ID for R-Car S4-8 PCIe controller
    - PCI: Use FIELD_GET() in Sapphire RX 5600 XT Pulse quirk
    - HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W
    - exfat: support handle zero-size directory
    - tty: vcc: Add check for kstrdup() in vcc_probe()
    - usb: gadget: f_ncm: Always set current gadget in ncm_bind()
    - 9p/trans_fd: Annotate data-racy writes to file::f_flags
    - 9p: v9fs_listxattr: fix %s null argument warning
    - i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler
    - i2c: sun6i-p2wi: Prevent potential division by zero
    - virtio-blk: fix implicit overflow on virtio_max_dma_size
    - i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data.
    - media: gspca: cpia1: shift-out-of-bounds in set_flicker
    - media: vivid: avoid integer overflow
    - gfs2: ignore negated quota changes
    - gfs2: fix an oops in gfs2_permission
    - media: cobalt: Use FIELD_GET() to extract Link Width
    - media: ccs: Fix driver quirk struct documentation
    - media: imon: fix access to invalid resource for the second interface
    - drm/amd/display: Avoid NULL dereference of timing generator
    - kgdb: Flush console before entering kgdb on panic
    - i2c: dev: copy userspace array safely
    - ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings
    - drm/qxl: prevent memory leak
    - drm/amdgpu: fix software pci_unplug on some chips
    - pwm: Fix double shift bug
    - wifi: iwlwifi: Use FW rate for non-data frames
    - tracing: Reuse logic from perf's get_recursion_context()
    - tracing/perf: Add interrupt_context_level() helper
    - sched/core: Optimize in_task() and in_interrupt() a bit
    - media: cadence: csi2rx: Unregister v4l2 async notifier
    - media: cec: meson: always include meson sub-directory in Makefile
    - SUNRPC: ECONNRESET might require a rebind
    - SUNRPC: Add an IS_ERR() check back to where it was
    - NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO
    - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
    - gfs2: Silence "suspicious RCU usage in gfs2_permission" warning
    - mptcp: diag: switch to context structure
    - mptcp: listen diag dump support
    - net: inet: Remove count from inet_listen_hashbucket
    - net: inet: Open code inet_hash2 and inet_unhash2
    - net: inet: Retire port only listening_hash
    - net: set SOCK_RCU_FREE before inserting socket into hashtable
    - ipvlan: add ipvlan_route_v6_outbound() helper
    - tty: Fix uninit-value access in ppp_sync_receive()
    - net: hns3: fix add VLAN fail issue
    - net: hns3: refine the definition for struct hclge_pf_to_vf_msg
    - net: hns3: add byte order conversion for PF to VF mailbox message
    - net: hns3: add barrier in vf mailbox reply process
    - net: hns3: fix incorrect capability bit display for copper port
    - net: hns3: fix variable may not initialized problem in hns3_init_mac_addr()
    - net: hns3: fix VF reset fail issue
    - net: hns3: fix VF wrong speed and duplex issue
    - tipc: Fix kernel-infoleak due to uninitialized TLV value
    - ppp: limit MRU to 64K
    - xen/events: fix delayed eoi list handling
    - ptp: annotate data-race around q->head and q->tail
    - bonding: stop the device in bond_setup_by_slave()
    - net: ethernet: cortina: Fix max RX frame define
    - net: ethernet: cortina: Handle large frames
    - net: ethernet: cortina: Fix MTU max setting
    - af_unix: fix use-after-free in unix_stream_read_actor()
    - netfilter: nf_conntrack_bridge: initialize err to 0
    - netfilter: nf_tables: use the correct get/put helpers
    - netfilter: nf_tables: add and use BE register load-store helpers
    - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
    - net: stmmac: fix rx budget limit check
    - net/mlx5e: Remove incorrect addition of action fwd flag
    - net/mlx5e: Move mod hdr allocation to a single place
    - net/mlx5e: Refactor mod header management API
    - net/mlx5e: Fix pedit endianness
    - net/mlx5e: Reduce the size of icosq_str
    - net/mlx5e: Check return value of snprintf writing to fw_version buffer for
      representors
    - macvlan: Don't propagate promisc change to lower dev in passthru
    - tools/power/turbostat: Fix a knl bug
    - tools/power/turbostat: Enable the C-state Pre-wake printing
    - cifs: spnego: add ';' in HOST_KEY_LEN
    - cifs: fix check of rc in function generate_smb3signingkey
    - xfs: refactor buffer cancellation table allocation
    - xfs: don't leak xfs_buf_cancel structures when recovery fails
    - xfs: convert buf_cancel_table allocation to kmalloc_array
    - xfs: use invalidate_lock to check the state of mmap_lock
    - xfs: prevent a UAF when log IO errors race with unmount
    - xfs: flush inode gc workqueue before clearing agi bucket
    - xfs: fix use-after-free in xattr node block inactivation
    - xfs: don't leak memory when attr fork loading fails
    - xfs: fix intermittent hang during quotacheck
    - xfs: add missing cmap->br_state = XFS_EXT_NORM update
    - xfs: Fix false ENOSPC when performing direct write on a delalloc extent in
      cow fork
    - xfs: fix inode reservation space for removing transaction
    - xfs: avoid a UAF when log intent item recovery fails
    - xfs: fix exception caused by unexpected illegal bestcount in leaf dir
    - xfs: fix memory leak in xfs_errortag_init
    - xfs: Fix unreferenced object reported by kmemleak in xfs_sysfs_init()
    - i915/perf: Fix NULL deref bugs with drm_dbg() calls
    - media: venus: hfi: add checks to perform sanity on queue pointers
    - powerpc/perf: Fix disabling BHRB and instruction sampling
    - randstruct: Fix gcc-plugin performance mode to stay in group
    - bpf: Fix check_stack_write_fixed_off() to correctly spill imm
    - bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END
    - scsi: mpt3sas: Fix loop logic
    - scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for
      selected registers
    - scsi: qla2xxx: Fix system crash due to bad pointer access
    - crypto: x86/sha - load modules based on CPU features
    - x86/cpu/hygon: Fix the CPU topology evaluation for real
    - KVM: x86: hyper-v: Don't auto-enable stimer on write from user-space
    - KVM: x86: Ignore MSR_AMD64_TW_CFG access
    - audit: don't take task_lock() in audit_exe_compare() code path
    - audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare()
    - tty/sysrq: replace smp_processor_id() with get_cpu()
    - hvc/xen: fix console unplug
    - hvc/xen: fix error path in xen_hvc_init() to always register frontend driver
    - hvc/xen: fix event channel handling for secondary consoles
    - PCI/sysfs: Protect driver's D3cold preference from user space
    - watchdog: move softlockup_panic back to early_param
    - ACPI: resource: Do IRQ override on TongFang GMxXGxx
    - arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
    - parisc/pdc: Add width field to struct pdc_model
    - clk: socfpga: Fix undefined behavior bug in struct stratix10_clock_data
    - clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks
    - clk: qcom: ipq6018: drop the CLK_SET_RATE_PARENT flag from PLL clocks
    - mmc: vub300: fix an error code
    - mmc: sdhci_am654: fix start loop index for TAP value parsing
    - PCI/ASPM: Fix L1 substate handling in aspm_attr_store_common()
    - PCI: exynos: Don't discard .remove() callback
    - wifi: wilc1000: use vmm_table as array in wilc struct
    - svcrdma: Drop connection after an RDMA Read error
    - rcu/tree: Defer setting of jiffies during stall reset
    - arm64: dts: qcom: ipq6018: Fix hwlock index for SMEM
    - PM: hibernate: Use __get_safe_page() rather than touching the list
    - PM: hibernate: Clean up sync_read handling in snapshot_write_next()
    - rcu: kmemleak: Ignore kmemleak false positives when RCU-freeing objects
    - btrfs: don't arbitrarily slow down delalloc if we're committing
    - firmware: qcom_scm: use 64-bit calling convention only when client is 64-bit
    - ACPI: FPDT: properly handle invalid FPDT subtables
    - ima: annotate iint mutex to avoid lockdep false positive warnings
    - ima: detect changes to the backing overlay file
    - wifi: ath11k: fix temperature event locking
    - wifi: ath11k: fix dfs radar event locking
    - wifi: ath11k: fix htt pktlog locking
    - mmc: meson-gx: Remove setting of CMD_CFG_ERROR
    - genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware
    - KEYS: trusted: Rollback init_trusted() consistently
    - PCI: keystone: Don't discard .remove() callback
    - PCI: keystone: Don't discard .probe() callback
    - netfilter: nf_tables: split async and sync catchall in two functions
    - selftests/resctrl: Remove duplicate feature check from CMT test
    - selftests/resctrl: Reduce failures due to outliers in MBA/MBM tests
    - ASoC: codecs: wsa-macro: fix uninitialized stack variables with name prefix
    - jbd2: fix potential data lost in recovering journal raced with synchronizing
      fs bdev
    - quota: explicitly forbid quota files from being encrypted
    - kernel/reboot: emergency_restart: Set correct system_state
    - i2c: core: Run atomic i2c xfer when !preemptible
    - tracing: Have the user copy of synthetic event address use correct context
    - mcb: fix error handling for different scenarios when parsing
    - dmaengine: stm32-mdma: correct desc prep when channel running
    - s390/cmma: fix detection of DAT pages
    - mm/cma: use nth_page() in place of direct struct page manipulation
    - mm/memory_hotplug: use pfn math in place of direct struct page manipulation
    - mtd: cfi_cmdset_0001: Byte swap OTP info
    - i3c: master: cdns: Fix reading status register
    - i3c: master: svc: fix race condition in ibi work thread
    - i3c: master: svc: fix wrong data return when IBI happen during start frame
    - i3c: master: svc: fix ibi may not return mandatory data byte
    - i3c: master: svc: fix check wrong status register in irq handler
    - i3c: master: svc: fix SDA keep low when polling IBIWON timeout happen
    - parisc: Prevent booting 64-bit kernels on PA1.x machines
    - parisc/pgtable: Do not drop upper 5 address bits of physical address
    - xhci: Enable RPM on controllers that support low-power states
    - ALSA: info: Fix potential deadlock at disconnection
    - ALSA: hda/realtek - Add Dell ALC295 to pin fall back table
    - ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC
    - serial: meson: Use platform_get_irq() to get the interrupt
    - tty: serial: meson: fix hard LOCKUP on crtscts mode
    - regmap: Ensure range selector registers are updated after cache sync
    - cpufreq: stats: Fix buffer overflow detection in trans_stats()
    - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559
    - bluetooth: Add device 0bda:887b to device tables
    - bluetooth: Add device 13d3:3571 to device tables
    - Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables
    - Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE
    - ksmbd: fix slab out of bounds write in smb_inherit_dacl()
    - arm64: dts: qcom: ipq6018: switch TCSR mutex to MMIO
    - arm64: dts: qcom: ipq6018: Fix tcsr_mutex register size
    - powerpc/pseries/ddw: simplify enable_ddw()
    - Revert ncsi: Propagate carrier gain/loss events to the NCSI controller
    - Revert "i2c: pxa: move to generic GPIO recovery"
    - lsm: fix default return value for vm_enough_memory
    - lsm: fix default return value for inode_getsecctx
    - sbsa_gwdt: Calculate timeout with 64-bit math
    - i2c: designware: Disable TX_EMPTY irq while waiting for block length byte
    - s390/ap: fix AP bus crash on early config change callback invocation
    - net: ethtool: Fix documentation of ethtool_sprintf()
    - net: dsa: lan9303: consequently nested-lock physical MDIO
    - net: phylink: initialize carrier state at creation
    - i2c: i801: fix potential race in i801_block_transaction_byte_by_byte
    - f2fs: avoid format-overflow warning
    - media: lirc: drop trailing space from scancode transmit
    - media: sharp: fix sharp encoding
    - media: venus: hfi_parser: Add check to keep the number of codecs within
      range
    - media: venus: hfi: fix the check to handle session buffer requirement
    - media: venus: hfi: add checks to handle capabilities from firmware
    - media: ccs: Correctly initialise try compose rectangle
    - nfsd: fix file memleak on client_opens_release
    - riscv: kprobes: allow writing to x0
    - mmc: sdhci-pci-gli: A workaround to allow GL9750 to enter ASPM L1.2
    - mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors
    - r8169: fix network lost after resume on DASH systems
    - mmc: sdhci-pci-gli: GL9750: Mask the replay timer timeout of AER
    - media: qcom: camss: Fix pm_domain_on sequence in probe
    - media: qcom: camss: Fix vfe_get() error jump
    - media: qcom: camss: Fix VFE-17x vfe_disable_output()
    - media: qcom: camss: Fix missing vfe_lite clocks check
    - ext4: apply umask if ACL support is disabled
    - ext4: correct offset of gdb backup in non meta_bg group to update_backups
    - ext4: correct return value of ext4_convert_meta_bg
    - ext4: correct the start block of counting reserved clusters
    - ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks
    - ext4: add missed brelse in update_backups
    - drm/amd/pm: Handle non-terminated overdrive commands.
    - drm/i915: Fix potential spectre vulnerability
    - drm/amdgpu: don't use ATRM for external devices
    - drm/amdgpu: fix error handling in amdgpu_bo_list_get()
    - drm/amd/display: Change the DMCUB mailbox memory location from FB to inbox
    - powerpc/powernv: Fix fortify source warnings in opal-prd.c
    - tracing: Have trace_event_file have ref counters
    - Input: xpad - add VID for Turtle Beach controllers
    - driver core: Release all resources during unbind before updating device
      links
    - Linux 5.15.140
  * CVE-2023-46862
    - io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
  * Jammy update: v5.15.139 upstream stable release (LP: #2049432)
    - iov_iter, x86: Be consistent about the __user tag on copy_mc_to_user()
    - sched/uclamp: Ignore (util == 0) optimization in feec() when p_util_max = 0
    - sched: Fix stop_one_cpu_nowait() vs hotplug
    - vfs: fix readahead(2) on block devices
    - writeback, cgroup: switch inodes with dirty timestamps to release dying
      cgwbs
    - x86/srso: Fix SBPB enablement for (possible) future fixed HW
    - futex: Don't include process MM in futex key on no-MMU
    - x86: Share definition of __is_canonical_address()
    - x86/sev-es: Allow copy_from_kernel_nofault() in earlier boot
    - x86/boot: Fix incorrect startup_gdt_descr.size
    - pstore/platform: Add check for kstrdup
    - genirq/matrix: Exclude managed interrupts in irq_matrix_allocated()
    - i40e: fix potential memory leaks in i40e_remove()
    - selftests/bpf: Test tail call counting with bpf2bpf and data on stack
    - selftests/bpf: Correct map_fd to data_fd in tailcalls
    - udp: add missing WRITE_ONCE() around up->encap_rcv
    - tcp: call tcp_try_undo_recovery when an RTOd TFO SYNACK is ACKed
    - gve: Use size_add() in call to struct_size()
    - mlxsw: Use size_mul() in call to struct_size()
    - tipc: Use size_add() in calls to struct_size()
    - net: spider_net: Use size_add() in call to struct_size()
    - wifi: rtw88: debug: Fix the NULL vs IS_ERR() bug for debugfs_create_file()
    - wifi: mt76: mt7603: rework/fix rx pse hang check
    - mt76: dma: use kzalloc instead of devm_kzalloc for txwi
    - mt76: add support for overriding the device used for DMA mapping
    - mt76: pass original queue id from __mt76_tx_queue_skb to the driver
    - wifi: mt76: mt7603: improve stuck beacon handling
    - tcp_metrics: add missing barriers on delete
    - tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics()
    - tcp_metrics: do not create an entry from tcp_init_metrics()
    - wifi: rtlwifi: fix EDCA limit set by BT coexistence
    - can: dev: can_restart(): don't crash kernel if carrier is OK
    - can: dev: can_restart(): fix race condition between controller restart and
      netif_carrier_on()
    - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is
      accessed out of bounds
    - PM / devfreq: rockchip-dfi: Make pmu regmap mandatory
    - netfilter: nf_tables: Drop pointless memset when dumping rules
    - thermal: core: prevent potential string overflow
    - r8169: use tp_to_dev instead of open code
    - r8169: fix rare issue with broken rx after link-down on RTL8125
    - chtls: fix tp->rcv_tstamp initialization
    - tcp: fix cookie_init_timestamp() overflows
    - iwlwifi: pcie: adjust to Bz completion descriptor
    - wifi: iwlwifi: call napi_synchronize() before freeing rx/tx queues
    - wifi: iwlwifi: pcie: synchronize IRQs before NAPI
    - wifi: iwlwifi: empty overflow queue during flush
    - ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias()
    - ipv6: avoid atomic fragment on GSO packets
    - net: add DEV_STATS_READ() helper
    - ipvlan: properly track tx_errors
    - regmap: debugfs: Fix a erroneous check after snprintf()
    - spi: tegra: Fix missing IRQ check in tegra_slink_probe()
    - clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies
    - clk: qcom: mmcc-msm8998: Don't check halt bit on some branch clks
    - clk: qcom: mmcc-msm8998: Fix the SMMU GDSC
    - clk: qcom: gcc-sm8150: Fix gcc_sdcc2_apps_clk_src
    - clk: imx: Select MXC_CLK for CLK_IMX8QXP
    - clk: imx: imx8mq: correct error handling path
    - clk: imx: imx8qxp: Fix elcdif_pll clock
    - clk: renesas: rzg2l: Simplify multiplication/shift logic
    - clk: renesas: rzg2l: Use FIELD_GET() for PLL register fields
    - clk: renesas: rzg2l: Fix computation formula
    - spi: nxp-fspi: use the correct ioremap function
    - clk: keystone: pll: fix a couple NULL vs IS_ERR() checks
    - clk: ti: Add ti_dt_clk_name() helper to use clock-output-names
    - clk: ti: Update pll and clockdomain clocks to use ti_dt_clk_name()
    - clk: ti: Update component clocks to use ti_dt_clk_name()
    - clk: ti: change ti_clk_register[_omap_hw]() API
    - clk: ti: fix double free in of_ti_divider_clk_setup()
    - clk: npcm7xx: Fix incorrect kfree
    - clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
    - clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
    - clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
    - clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
    - clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
    - clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
    - clk: qcom: config IPQ_APSS_6018 should depend on QCOM_SMEM
    - platform/x86: wmi: Fix probe failure when failing to register WMI devices
    - platform/x86: wmi: remove unnecessary initializations
    - platform/x86: wmi: Fix opening of char device
    - hwmon: (axi-fan-control) Fix possible NULL pointer dereference
    - hwmon: (coretemp) Fix potentially truncated sysfs attribute name
    - drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs
    - drm/rockchip: vop: Fix call to crtc reset helper
    - drm/radeon: possible buffer overflow
    - drm/mipi-dsi: Create devm device registration
    - drm/mipi-dsi: Create devm device attachment
    - drm/bridge: lt8912b: Switch to devm MIPI-DSI helpers
    - drm/bridge: lt8912b: Register and attach our DSI device at probe
    - drm/bridge: lt8912b: Add hot plug detection
    - drm/bridge: lt8912b: Fix bridge_detach
    - drm/bridge: lt8912b: Fix crash on bridge detach
    - drm/bridge: lt8912b: Manually disable HPD only if it was enabled
    - drm/bridge: lt8912b: Add missing drm_bridge_attach call
    - drm/bridge: tc358768: Fix use of uninitialized variable
    - drm/bridge: tc358768: Disable non-continuous clock mode
    - drm/bridge: tc358768: Fix bit updates
    - drm/amdkfd: fix some race conditions in vram buffer alloc/free of svm code
    - drm/mediatek: Fix iommu fault by swapping FBs after updating plane state
    - drm/mediatek: Fix iommu fault during crtc enabling
    - drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe()
    - arm64/arm: xen: enlighten: Fix KPTI checks
    - drm/rockchip: Fix type promotion bug in rockchip_gem_iommu_map()
    - xen-pciback: Consider INTx disabled when MSI/MSI-X is enabled
    - drm/msm/dsi: use msm_gem_kernel_put to free TX buffer
    - drm: mediatek: mtk_dsi: Fix NO_EOT_PACKET settings/handling
    - perf: hisi: Fix use-after-free when register pmu fails
    - ARM: dts: renesas: blanche: Fix typo in GP_11_2 pin name
    - arm64: dts: qcom: msm8916: Fix iommu local address range
    - arm64: dts: qcom: msm8992-libra: drop duplicated reserved memory
    - arm64: dts: qcom: sc7280: Add missing LMH interrupts
    - arm64: dts: qcom: sdm845-mtp: fix WiFi configuration
    - ARM64: dts: marvell: cn9310: Use appropriate label for spi1 pins
    - arm64: dts: qcom: apq8016-sbc: Add missing ADV7533 regulators
    - ARM: dts: qcom: mdm9615: populate vsdcc fixed regulator
    - soc: qcom: llcc: Handle a second device without data corruption
    - firmware: ti_sci: Mark driver as non removable
    - firmware: arm_ffa: Assign the missing IDR allocation ID to the FFA device
    - clk: scmi: Free scmi_clk allocated when the clocks with invalid info are
      skipped
    - arm64: dts: imx8qm-ss-img: Fix jpegenc compatible entry
    - arm64: dts: imx8mm: Add sound-dai-cells to micfil node
    - arm64: dts: imx8mn: Add sound-dai-cells to micfil node
    - selftests/pidfd: Fix ksft print formats
    - selftests/resctrl: Ensure the benchmark commands fits to its array
    - crypto: hisilicon/hpre - Fix a erroneous check after snprintf()
    - hwrng: geode - fix accessing registers
    - RDMA/core: Use size_{add,sub,mul}() in calls to struct_size()
    - scsi: ibmvfc: Fix erroneous use of rtas_busy_delay with hcall return code
    - libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return
      value
    - nd_btt: Make BTT lanes preemptible
    - crypto: caam/qi2 - fix Chacha20 + Poly1305 self test failure
    - crypto: caam/jr - fix Chacha20 + Poly1305 self test failure
    - crypto: qat - increase size of buffers
    - hid: cp2112: Fix duplicate workqueue initialization
    - ARM: 9321/1: memset: cast the constant byte to unsigned char
    - ext4: move 'ix' sanity check to corrent position
    - ASoC: fsl: mpc5200_dma.c: Fix warning of Function parameter or member not
      described
    - IB/mlx5: Fix rdma counter binding for RAW QP
    - RDMA/hns: Fix uninitialized ucmd in hns_roce_create_qp_common()
    - RDMA/hns: Fix signed-unsigned mixed comparisons
    - RDMA/hns: The UD mode can only be configured with DCQCN
    - ASoC: fsl: Fix PM disable depth imbalance in fsl_easrc_probe
    - scsi: ufs: core: Leave space for '0' in utf8 desc string
    - RDMA/hfi1: Workaround truncation compilation error
    - hid: cp2112: Fix IRQ shutdown stopping polling for all IRQs on chip
    - sh: bios: Revive earlyprintk support
    - Revert "HID: logitech-hidpp: add a module parameter to keep firmware
      gestures"
    - HID: logitech-hidpp: Remove HIDPP_QUIRK_NO_HIDINPUT quirk
    - HID: logitech-hidpp: Don't restart IO, instead defer hid_connect() only
    - HID: logitech-hidpp: Revert "Don't restart communication if not necessary"
    - HID: logitech-hidpp: Move get_wireless_feature_index() check to
      hidpp_connect_event()
    - ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails
    - padata: Fix refcnt handling in padata_free_shell()
    - crypto: qat - fix deadlock in backlog processing
    - ASoC: ams-delta.c: use component after check
    - mfd: core: Un-constify mfd_cell.of_reg
    - mfd: core: Ensure disabled devices are skipped without aborting
    - mfd: dln2: Fix double put in dln2_probe
    - mfd: arizona-spi: Set pdata.hpdet_channel for ACPI enumerated devs
    - leds: turris-omnia: Drop unnecessary mutex locking
    - leds: turris-omnia: Do not use SMBUS calls
    - leds: pwm: Don't disable the PWM when the LED should be off
    - leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu'
    - f2fs: compress: fix to avoid use-after-free on dic
    - f2fs: compress: fix to avoid redundant compress extension
    - tty: tty_jobctrl: fix pid memleak in disassociate_ctty()
    - livepatch: Fix missing newline character in klp_resolve_symbols()
    - dmaengine: idxd: Register dsa_bus_type before registering idxd sub-drivers
    - usb: dwc2: fix possible NULL pointer dereference caused by driver
      concurrency
    - usb: chipidea: Fix DMA overwrite for Tegra
    - usb: chipidea: Simplify Tegra DMA alignment code
    - dmaengine: ti: edma: handle irq_of_parse_and_map() errors
    - misc: st_core: Do not call kfree_skb() under spin_lock_irqsave()
    - tools: iio: iio_generic_buffer ensure alignment
    - USB: usbip: fix stub_dev hub disconnect
    - dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc()
    - f2fs: fix to initialize map.m_pblk in f2fs_precache_extents()
    - powerpc: Only define __parse_fpscr() when required
    - modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host
    - powerpc/40x: Remove stale PTE_ATOMIC_UPDATES macro
    - powerpc/xive: Fix endian conversion size
    - powerpc/imc-pmu: Use the correct spinlock initializer.
    - powerpc/pseries: fix potential memory leak in init_cpu_associativity()
    - usb: host: xhci-plat: fix possible kernel oops while resuming
    - perf machine: Avoid out of bounds LBR memory read
    - perf hist: Add missing puts to hist__account_cycles
    - 9p/net: fix possible memory leak in p9_check_errors()
    - i3c: Fix potential refcount leak in i3c_master_register_new_i3c_devs
    - cxl/mem: Fix shutdown order
    - rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call
    - pcmcia: cs: fix possible hung task and memory leak pccardd()
    - pcmcia: ds: fix refcount leak in pcmcia_device_add()
    - pcmcia: ds: fix possible name leak in error path in pcmcia_device_add()
    - media: i2c: max9286: Fix some redundant of_node_put() calls
    - media: bttv: fix use after free error due to btv->timeout timer
    - media: s3c-camif: Avoid inappropriate kfree()
    - media: vidtv: psi: Add check for kstrdup
    - media: vidtv: mux: Add check and kfree for kstrdup
    - media: cedrus: Fix clock/reset sequence
    - media: dvb-usb-v2: af9035: fix missing unlock
    - regmap: prevent noinc writes from clobbering cache
    - pwm: sti: Reduce number of allocations and drop usage of chip_data
    - pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume
    - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
    - llc: verify mac len before reading mac header
    - hsr: Prevent use after free in prp_create_tagged_frame()
    - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
    - bpf: Check map->usercnt after timer->timer is assigned
    - inet: shrink struct flowi_common
    - octeontx2-pf: Fix error codes
    - octeontx2-pf: Fix holes in error code
    - dccp: Call security_inet_conn_request() after setting IPv4 addresses.
    - dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses.
    - Fix termination state for idr_for_each_entry_ul()
    - net: stmmac: xgmac: Enable support for multiple Flexible PPS outputs
    - selftests: pmtu.sh: fix result checking
    - net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
    - net/smc: allow cdc msg send rather than drop it with NULL sndbuf_desc
    - net/smc: put sk reference if close work was canceled
    - tg3: power down device only on SYSTEM_POWER_OFF
    - block: remove unneeded return value of bio_check_ro()
    - blk-core: use pr_warn_ratelimited() in bio_check_ro()
    - r8169: respect userspace disabling IFF_MULTICAST
    - i2c: iproc: handle invalid slave state
    - netfilter: xt_recent: fix (increase) ipv6 literal buffer length
    - netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate
      eval call-backs
    - netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses
    - drm/syncobj: fix DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE
    - ASoC: hdmi-codec: register hpd callback on component probe
    - spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies
    - fbdev: imsttfb: Fix error path of imsttfb_probe()
    - fbdev: imsttfb: fix a resource leak in probe
    - fbdev: fsl-diu-fb: mark wr_reg_wa() static
    - tracing/kprobes: Fix the order of argument descriptions
    - btrfs: use u64 for buffer sizes in the tree search ioctls
    - Linux 5.15.139
  * Jammy update: v5.15.138 upstream stable release (LP: #2049417)
    - ASoC: codecs: wcd938x: fix resource leaks on bind errors
    - ASoC: codecs: wcd938x: fix runtime PM imbalance on remove
    - pinctrl: qcom: lpass-lpi: fix concurrent register updates
    - tcp: remove dead code from tcp_sendmsg_locked()
    - tcp: cleanup tcp_remove_empty_skb() use
    - mptcp: more conservative check for zero probes
    - mcb: Return actual parsed size when reading chameleon table
    - mcb-lpc: Reallocate memory region to avoid memory overlapping
    - virtio_balloon: Fix endless deflation and inflation on arm64
    - virtio-mmio: fix memory leak of vm_dev
    - vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE
    - mm/page_alloc: correct start page when guard page debug is enabled
    - mm/migrate: fix do_pages_move for compat pointers
    - nfsd: lock_rename() needs both directories to live on the same fs
    - drm/i915/pmu: Check if pmu is closed before stopping event
    - vsock/virtio: factor our the code to initialize and delete VQs
    - vsock/virtio: add support for device suspend/resume
    - vsock/virtio: initialize the_virtio_vsock before using VQs
    - drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
    - firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels()
    - r8169: fix the KCSAN reported data-race in rtl_tx() while reading tp->cur_tx
    - r8169: fix the KCSAN reported data-race in rtl_tx while reading
      TxDescArray[entry].opts1
    - r8169: fix the KCSAN reported data race in rtl_rx while reading desc->opts1
    - i40e: Fix I40E_FLAG_VF_VLAN_PRUNING value
    - treewide: Spelling fix in comment
    - igb: Fix potential memory leak in igb_add_ethtool_nfc_entry
    - neighbour: fix various data-races
    - igc: Fix ambiguity in the ethtool advertising
    - net: ieee802154: adf7242: Fix some potential buffer overflow in
      adf7242_stats_show()
    - net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
    - r8152: Increase USB control msg timeout to 5000ms as per spec
    - r8152: Run the unload routine if we have errors during probe
    - r8152: Cancel hw_phy_work if we have an error in probe
    - r8152: Release firmware if we have an error in probe
    - tcp: fix wrong RTO timeout when received SACK reneging
    - gtp: uapi: fix GTPA_MAX
    - gtp: fix fragmentation needed check with gso
    - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR
    - kasan: print the original fault addr when access invalid shadow
    - iio: exynos-adc: request second interupt only when touchscreen mode is used
    - iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature thresholds
    - iio: adc: xilinx-xadc: Correct temperature offset/scale for UltraScale
    - i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node()
    - i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node()
    - i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node()
    - i2c: stm32f7: Fix PEC handling in case of SMBUS transfers
    - i2c: aspeed: Fix i2c bus hang in slave read
    - tracing/kprobes: Fix the description of variable length arguments
    - misc: fastrpc: Clean buffers on remote invocation failures
    - nvmem: imx: correct nregs for i.MX6ULL
    - nvmem: imx: correct nregs for i.MX6SLL
    - nvmem: imx: correct nregs for i.MX6UL
    - perf/core: Fix potential NULL deref
    - sparc32: fix a braino in fault handling in csum_and_copy_..._user()
    - clk: Sanitize possible_parent_show to Handle Return Value of
      of_clk_get_parent_name
    - iio: afe: rescale: reorder includes
    - iio: afe: rescale: expose scale processing function
    - iio: afe: rescale: add offset support
    - iio: afe: rescale: Accept only offset channels
    - gve: Fix GFP flags when allocing pages
    - x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility
    - x86/mm: Simplify RESERVE_BRK()
    - x86/mm: Fix RESERVE_BRK() for older binutils
    - ext4: add two helper functions extent_logical_end() and pa_logical_end()
    - ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
    - ext4: avoid overlapping preallocations due to overflow
    - objtool/x86: add missing embedded_insn check
    - driver: platform: Add helper for safer setting of driver_override
    - rpmsg: Constify local variable in field store macro
    - rpmsg: Fix kfree() of static memory on setting driver_override
    - rpmsg: Fix calling device_lock() on non-initialized device
    - rpmsg: glink: Release driver_override
    - rpmsg: Fix possible refcount leak in rpmsg_register_device_override()
    - x86: Fix .brk attribute in linker script
    - ASoC: simple-card: fixup asoc_simple_probe() error handling
    - net: sched: cls_u32: Fix allocation size in u32_init()
    - irqchip/riscv-intc: Mark all INTC nodes as initialized
    - irqchip/stm32-exti: add missing DT IRQ flag translation
    - dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe
    - powerpc/85xx: Fix math emulation exception
    - Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport
    - fbdev: atyfb: only use ioremap_uc() on i386 and ia64
    - fs/ntfs3: Add ckeck in ni_update_parent()
    - fs/ntfs3: Write immediately updated ntfs state
    - fs/ntfs3: Use kvmalloc instead of kmalloc(... __GFP_NOWARN)
    - fs/ntfs3: Fix possible NULL-ptr-deref in ni_readpage_cmpr()
    - fs/ntfs3: Fix NULL pointer dereference on error in attr_allocate_frame()
    - fs/ntfs3: Fix directory element type detection
    - fs/ntfs3: Avoid possible memory leak
    - spi: npcm-fiu: Fix UMA reads when dummy.nbytes == 0
    - netfilter: nfnetlink_log: silence bogus compiler warning
    - ASoC: rt5650: fix the wrong result of key button
    - drm/ttm: Reorder sys manager cleanup step
    - fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit()
    - scsi: mpt3sas: Fix in error path
    - platform/mellanox: mlxbf-tmfifo: Fix a warning message
    - net: chelsio: cxgb4: add an error code check in t4_load_phy_fw
    - r8152: Check for unplug in rtl_phy_patch_request()
    - r8152: Check for unplug in r8153b_ups_en() / r8153c_ups_en()
    - powerpc/mm: Fix boot crash with FLATMEM
    - can: isotp: set max PDU size to 64 kByte
    - can: isotp: isotp_bind(): return -EINVAL on incorrect CAN ID formatting
    - can: isotp: check CAN address family in isotp_bind()
    - can: isotp: handle wait_event_interruptible() return values
    - can: isotp: add local echo tx processing and tx without FC
    - can: isotp: isotp_bind(): do not validate unused address information
    - can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior
    - drm/amd: Move helper for dynamic speed switch check out of smu13
    - drm/amd: Disable ASPM for VI w/ all Intel systems
    - PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device
    - usb: storage: set 1.50 as the lower bcdDevice for older "Super Top"
      compatibility
    - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm()
    - usb: raw-gadget: properly handle interrupted requests
    - tty: n_gsm: fix race condition in status line change on dead connections
    - tty: 8250: Remove UC-257 and UC-431
    - tty: 8250: Add support for additional Brainboxes UC cards
    - tty: 8250: Add support for Brainboxes UP cards
    - tty: 8250: Add support for Intashield IS-100
    - tty: 8250: Fix port count of PX-257
    - tty: 8250: Fix up PX-803/PX-857
    - tty: 8250: Add support for additional Brainboxes PX cards
    - tty: 8250: Add support for Intashield IX cards
    - tty: 8250: Add Brainboxes Oxford Semiconductor-based quirks
    - misc: pci_endpoint_test: Add deviceID for J721S2 PCIe EP device support
    - ALSA: hda: intel-dsp-config: Fix JSL Chromebook quirk detection
    - Linux 5.15.138
  * Jammy update: v5.15.137 upstream stable release (LP: #2049350)
    - lib/Kconfig.debug: do not enable DEBUG_PREEMPT by default
    - Documentation: sysctl: align cells in second content column
    - xfs: don't expose internal symlink metadata buffers to the vfs
    - Bluetooth: hci_event: Ignore NULL link key
    - Bluetooth: Reject connection with the device which has same BD_ADDR
    - Bluetooth: Fix a refcnt underflow problem for hci_conn
    - Bluetooth: vhci: Fix race when opening vhci device
    - Bluetooth: hci_event: Fix coding style
    - Bluetooth: avoid memcmp() out of bounds warning
    - ice: fix over-shifted variable
    - ice: reset first in crash dump kernels
    - nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
    - regmap: fix NULL deref on lookup
    - KVM: x86: Mask LVTPC when handling a PMI
    - tcp: check mptcp-level constraints for backlog coalescing
    - fs/ntfs3: Fix possible null-pointer dereference in hdr_find_e()
    - fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
    - fs/ntfs3: fix deadlock in mark_as_free_ex
    - netfilter: nft_payload: fix wrong mac header matching
    - drm/i915: Retry gtt fault when out of fence registers
    - ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind
    - ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe errors
    - ASoC: codecs: wcd938x: drop bogus bind error handling
    - ASoC: codecs: wcd938x: fix unbind tear down order
    - qed: fix LL2 RX buffer allocation
    - xfrm: fix a data-race in xfrm_gen_index()
    - xfrm: interface: use DEV_STATS_INC()
    - net: ipv4: fix return value check in esp_remove_trailer
    - net: ipv6: fix return value check in esp_remove_trailer
    - net: rfkill: gpio: prevent value glitch during probe
    - tcp: fix excessive TLP and RACK timeouts from HZ rounding
    - tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb
    - tun: prevent negative ifindex
    - ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr
    - net: usb: smsc95xx: Fix an error code in smsc95xx_reset()
    - i40e: prevent crash on probe if hw registers have invalid values
    - net: dsa: bcm_sf2: Fix possible memory leak in bcm_sf2_mdio_register()
    - bonding: Return pointer to data after pull on skb
    - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve
    - neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section
    - netfilter: nft_set_rbtree: .deactivate fails if element has expired
    - netfilter: nf_tables: do not remove elements if set backend implements
      .abort
    - netfilter: nf_tables: revert do not remove elements if set backend
      implements .abort
    - net: pktgen: Fix interface flags printing
    - selftests/mm: fix awk usage in charge_reserved_hugetlb.sh and
      hugetlb_reparenting_test.sh that may cause error
    - serial: 8250: omap: Fix imprecise external abort for omap_8250_pm()
    - serial: 8250_omap: Fix errors with no_console_suspend
    - iio: Un-inline iio_buffer_enabled()
    - iio: core: Hide read accesses to iio_dev->currentmode
    - iio: core: introduce iio_device_{claim|release}_buffer_mode() APIs
    - iio: cros_ec: fix an use-after-free in cros_ec_sensors_push_data()
    - iio: adc: ad7192: Correct reference voltage
    - perf: Add irq and exception return branch types
    - perf/x86: Move branch classifier
    - perf/x86/lbr: Filter vsyscall addresses
    - drm/atomic-helper: relax unregistered connector check
    - powerpc/32s: Remove capability to disable KUEP at boottime
    - powerpc/32s: Do kuep_lock() and kuep_unlock() in assembly
    - powerpc/47x: Fix 47x syscall return crash
    - mctp: Allow local delivery to the null EID
    - mctp: perform route lookups under a RCU read-side lock
    - nfp: flower: avoid rmmod nfp crash issues
    - ksmbd: not allow to open file if delelete on close bit is set
    - ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone
    - fs-writeback: do not requeue a clean inode having skipped pages
    - btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1
    - btrfs: initialize start_slot in btrfs_log_prealloc_extents
    - i2c: mux: Avoid potential false error message in i2c_mux_add_adapter
    - overlayfs: set ctime when setting mtime and atime
    - gpio: timberdale: Fix potential deadlock on &tgpio->lock
    - ata: libata-core: Fix compilation warning in ata_dev_config_ncq()
    - ata: libata-eh: Fix compilation warning in ata_eh_link_report()
    - tracing: relax trace_event_eval_update() execution with cond_resched()
    - wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len
    - wifi: iwlwifi: Ensure ack flag is properly cleared.
    - HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event
    - Bluetooth: btusb: add shutdown function for QCA6174
    - Bluetooth: Avoid redundant authentication
    - Bluetooth: hci_core: Fix build warnings
    - wifi: cfg80211: Fix 6GHz scan configuration
    - wifi: mac80211: allow transmitting EAPOL frames with tainted key
    - wifi: cfg80211: avoid leaking stack data into trace
    - regulator/core: Revert "fix kobject release warning and memory leak in
      regulator_register()"
    - sky2: Make sure there is at least one frag_addr available
    - ipv4/fib: send notify when delete source address routes
    - drm: panel-orientation-quirks: Add quirk for One Mix 2S
    - btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c
    - btrfs: error out when COWing block using a stale transaction
    - btrfs: error when COWing block from a root that is being deleted
    - btrfs: error out when reallocating block for defrag using a stale
      transaction
    - HID: multitouch: Add required quirk for Synaptics 0xcd7e device
    - platform/x86: touchscreen_dmi: Add info for the Positivo C4128B
    - net/mlx5: Handle fw tracer change ownership event based on MTRC
    - Bluetooth: hci_event: Fix using memcmp when comparing keys
    - net: introduce a function to check if a netdev name is in use
    - net: move from strlcpy with unused retval to strscpy
    - net: fix ifname in netlink ntf during netns move
    - mtd: rawnand: qcom: Unmap the right resource upon probe failure
    - mtd: rawnand: pl353: Ensure program page operations are successful
    - mtd: rawnand: marvell: Ensure program page operations are successful
    - mtd: rawnand: arasan: Ensure program page operations are successful
    - mtd: spinand: micron: correct bitmask for ecc status
    - mtd: physmap-core: Restore map_rom fallback
    - mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw
    - mmc: core: sdio: hold retuning if sdio in 1-bit mode
    - pNFS: Fix a hang in nfs4_evict_inode()
    - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server
    - ACPI: irq: Fix incorrect return value in acpi_register_gsi()
    - nvme-pci: add BOGUS_NID for Intel 0a54 device
    - nvme-rdma: do not try to stop unallocated queues
    - USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
    - USB: serial: option: add entry for Sierra EM9191 with new firmware
    - USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
    - s390/pci: fix iommu bitmap allocation
    - selftests/ftrace: Add new test case which checks non unique symbol
    - s390/cio: fix a memleak in css_alloc_subchannel
    - platform/surface: platform_profile: Propagate error if profile registration
      fails
    - platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e
    - platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c events
    - gpio: vf610: set value before the direction to avoid a glitch
    - ASoC: pxa: fix a memory leak in probe()
    - serial: 8250: omap: Move uart_write() inside PM section
    - phy: mapphone-mdm6600: Fix runtime disable on probe
    - phy: mapphone-mdm6600: Fix runtime PM for remove
    - phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
    - Bluetooth: hci_sock: fix slab oob read in create_monitor_event
    - Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name
    - xfrm6: fix inet6_dev refcount underflow problem
    - Linux 5.15.137
  * CVE-2023-51782
    - net/rose: Fix Use-After-Free in rose_ioctl
  * CVE-2023-51779
    - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
  * CVE-2023-22995
    - usb: dwc3: dwc3-qcom: Add missing platform_device_put() in
      dwc3_qcom_acpi_register_core
  * CVE-2023-4134
    - Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
  * Packaging resync (LP: #1786013)
    - [Packaging] update annotations scripts

 -- Jian Hui Lee <jianhui.lee@canonical.com>  Wed, 15 May 2024 18:15:38 +0800

# For older changelog entries, run 'apt-get changelog linux-mtk-headers-5.15.0-1040'
