-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 17 Aug 2023 21:46:04 +0200 Source: linux-signed-arm64 Architecture: source Version: 6.4.11+1 Distribution: sid Urgency: medium Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Changes: linux-signed-arm64 (6.4.11+1) unstable; urgency=medium . * Sign kernel from linux 6.4.11-1 . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.5 - security/integrity: fix pointer to ESL data and its size on pseries - HID: input: fix mapping for camera access keys - [amd64] HID: amd_sfh: Rename the float32 variable - [amd64] HID: amd_sfh: Fix for shift-out-of-bounds - net: lan743x: Don't sleep in atomic context - net: lan743x: select FIXED_PHY - ksmbd: add missing compound request handing in some commands - ksmbd: fix out of bounds read in smb2_sess_setup - drm/panel: simple: Add connector_type for innolux_at043tn24 - drm: bridge: dw_hdmi: fix connector access for scdc - drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime - swiotlb: always set the number of areas before allocating the pool - swiotlb: reduce the number of areas to match actual memory pool size - drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags - xen/virtio: Fix NULL deref when a bridge of PCI root bus has no parent - netfilter: nf_tables: report use refcount overflow - netfilter: conntrack: don't fold port numbers into addresses before hashing - ice: Fix max_rate check while configuring TX rate limits - ice: Fix tx queue rate limit when TCs are configured - igc: Add condition for qbv_config_change_errors counter - igc: Remove delay during TX ring configuration - igc: Add igc_xdp_buff wrapper for xdp_buff in driver - igc: Add XDP hints kfuncs for RX hash - igc: Fix TX Hang issue when QBV Gate is closed - net/mlx5e: fix double free in mlx5e_destroy_flow_table - net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create - net/mlx5e: fix memory leak in mlx5e_ptp_open - net/mlx5e: RX, Fix flush and close release flow of regular rq for legacy rq - net/mlx5: Register a unique thermal zone per device - net/mlx5e: Check for NOT_READY flag state after locking - net/mlx5e: TC, CT: Offload ct clear only once - net/mlx5: Query hca_cap_2 only when supported - net/mlx5e: RX, Fix page_pool page fragment tracking for XDP - igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings - igc: Include the length/type field and VLAN tag in queueMaxSDU - igc: Handle PPS start time programming for past time values - blk-crypto: use dynamic lock class for blk_crypto_profile::lock - scsi: qla2xxx: Fix error code in qla2x00_start_sp() - scsi: ufs: ufs-mediatek: Add dependency for RESET_CONTROLLER - bpf: Fix max stack depth check for async callbacks - net: mvneta: fix txq_map in case of txq_number==1 - [arm64] net: dsa: felix: make vsc9959_tas_guard_bands_update() visible to ocelot->ops - [arm64] net: mscc: ocelot: fix oversize frame dropping for preemptible TCs - gve: Set default duplex configuration to full - drm/fbdev-dma: Fix documented default preferred_bpp value - octeontx2-af: Promisc enable/disable through mbox - octeontx2-af: Move validation of ptp pointer before its usage - ionic: remove WARN_ON to prevent panic_on_warn - udp6: add a missing call into udp_fail_queue_rcv_skb tracepoint - net: bgmac: postpone turning IRQs off to avoid SoC hangs - net: prevent skb corruption on frag list segmentation - [s390x] ism: Fix locking for forwarding of IRQs and events to clients - [s390x] ism: Fix and simplify add()/remove() callback handling - [s390x] ism: Do not unregister clients with registered DMBs - icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). - udp6: fix udp6_ehashfn() typo - ntb: idt: Fix error handling in idt_pci_driver_init() - NTB: amd: Fix error handling in amd_ntb_pci_driver_init() - ntb: intel: Fix error handling in intel_ntb_pci_driver_init() - ipv6/addrconf: fix a potential refcount underflow for idev - HID: hyperv: avoid struct memcpy overrun warning - [x86] platform/x86: wmi: Break possible infinite loop when parsing GUID - net/sched: taprio: replace tc_taprio_qopt_offload :: enable with a "cmd" enum - igc: Rename qbv_enable to taprio_offload_enable - igc: Do not enable taprio offload for invalid arguments - igc: Handle already enabled taprio offload for basetime 0 - kernel/trace: Fix cleanup logic of enable_trace_eprobe - fprobe: add unlock to match a succeeded ftrace_test_recursion_trylock - igc: No strict mode in pure launchtime/CBS offload - igc: Fix launchtime before start of cycle - igc: Fix inserting of empty frame for launchtime - nvme: fix the NVME_ID_NS_NVM_STS_MASK definition - [riscv64] bpf: Fix inconsistent JIT image generation - net: fec: remove useless fec_enet_reset_skb() - net: fec: remove last_bdp from fec_enet_txq_xmit_frame() - net: fec: recycle pages for transmitted XDP frames - net: fec: increase the size of tx ring and update tx_wake_threshold - [x86] drm/i915: Don't preserve dpll_hw_state for slave crtc in Bigjoiner - [x86] drm/i915: Fix one wrong caching mode enum usage - net: dsa: Removed unneeded of_node_put in felix_parse_ports_node - octeontx2-pf: Add additional check for MCAM rules - erofs: avoid useless loops in z_erofs_pcluster_readmore() when reading beyond EOF - erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF - erofs: fix fsdax unavailability for chunk-based regular files - wifi: airo: avoid uninitialized warning in airo_get_rate() - bpf: cpumap: Fix memory leak in cpu_map_update_elem - xdp: use trusted arguments in XDP hints kfuncs - net/sched: flower: Ensure both minimum and maximum ports are specified - drm/nouveau/disp: fix HDMI on gt215+ - drm/nouveau/disp/g94: enable HDMI - netdevsim: fix uninitialized data in nsim_dev_trap_fa_cookie_write() - drm/nouveau/acr: Abort loading ACR if no firmware was found - drm/nouveau: bring back blit subchannel for pre nv50 GPUs - net/sched: make psched_mtu() RTNL-less safe - net: txgbe: fix eeprom calculation error - wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set() - net/sched: sch_qfq: reintroduce lmax bound check for MTU - nvme-pci: fix DMA direction of unmapping integrity data - smb: client: improve DFS mount check - cifs: fix session state check in smb2_find_smb_ses - smb: client: fix parsing of source mount option - drm/client: Send hotplug event after registering a client - f2fs: don't reset unchangable mount option in f2fs_remount() - f2fs: fix deadlock in i_xattr_sem and inode page lock - kbuild: make modules_install copy modules.builtin(.modinfo) - pinctrl: amd: Detect internal GPIO0 debounce handling - pinctrl: amd: Fix mistake in handling clearing pins at startup - pinctrl: amd: Detect and mask spurious interrupts - pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts on probe" - pinctrl: amd: Only use special debounce behavior for GPIO 0 - pinctrl: amd: Use amd_pinconf_set() for all config options - pinctrl: amd: Drop pull up select configuration - pinctrl: amd: Unify debounce handling into amd_pinconf_set() - tpm: Do not remap from ACPI resources again for Pluton TPM - tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation - tpm: tpm_tis: Disable interrupts *only* for AEON UPX-i11 - tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes - tpm/tpm_tis: Disable interrupts for Framework Laptop Intel 12th gen (Closes: #1042540) - tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes - tpm: return false from tpm_amd_is_rng_defective on non-x86 platforms - tpm/tpm_tis: Disable interrupts for Framework Laptop Intel 13th gen (Closes: #1042540) - tpm,tpm_tis: Disable interrupts after 1000 unhandled IRQs - tpm/tpm_tis: Disable interrupts for Lenovo L590 devices - net: bcmgenet: Ensure MDIO unregistration has clocks enabled - net: phy: dp83td510: fix kernel stall during netboot in DP83TD510E PHY driver - tracing/user_events: Fix incorrect return value for writing operation when events are disabled - misc: fastrpc: Create fastrpc scalar with correct buffer count - [powerpc*] security: Fix Speculation_Store_Bypass reporting on Power10 - [powerpc*] 64s: Fix native_hpte_remove() to be irq-safe - drm/amd/display: perform a bounds check before filling dirty rectangles - [mips*] cpu-features: Use boot_cpu_type for CPU type based features - [mips*] Loongson: Fix cpu_probe_loongson() again - [mips*] Loongson: Fix build error when make modules_install - [mips*] KVM: Fix NULL pointer dereference - ext4: Fix reusing stale buffer heads from last failed mounting - ext4: fix wrong unit use in ext4_mb_clear_bb - ext4: get block from bh in ext4_free_blocks for fast commit replay - ext4: fix wrong unit use in ext4_mb_new_blocks - ext4: avoid updating the superblock on a r/o mount if not needed - ext4: fix to check return value of freeze_bdev() in ext4_shutdown() - ext4: turn quotas off if mount failed after enabling quotas - ext4: only update i_reserved_data_blocks on successful block allocation - fs: dlm: revert check required context while close - mm/mmap: Fix error return in do_vmi_align_munmap() - soc: qcom: mdt_loader: Fix unconditional call to scm_pas_mem_setup - jfs: jfs_dmap: Validate db_l2nbperpage while mounting - [arm64] dts: mt7986: use size of reserved partition for bl2 - [arm64] dts: ti: k3-j721s2: Fix wkup pinmux range - hwrng: imx-rngc - fix the timeout for init and self check - dm integrity: reduce vmalloc space footprint on 32-bit architectures - scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O - [s390x] zcrypt: do not retry administrative requests - PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold - PCI: Release resource invalidated by coalescing - PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 - PCI: qcom: Disable write access to read only registers for IP v2.3.3 - PCI: rockchip: Assert PCI Configuration Enable bit after probe - PCI: rockchip: Write PCI Device ID to correct register - PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked - PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core - PCI: rockchip: Use u32 variable to access 32-bit registers - PCI: rockchip: Set address alignment for endpoint mode - misc: pci_endpoint_test: Free IRQs before removing the device - misc: pci_endpoint_test: Re-init completion for every test - mfd: pm8008: Fix module autoloading - md/raid0: add discard support for the 'original' layout - fs: dlm: return positive pid value for F_GETLK - fs: dlm: fix cleanup pending ops when interrupted - fs: dlm: interrupt posix locks only when process is killed - fs: dlm: make F_SETLK use unkillable wait_event - fs: dlm: fix mismatch of plock results from userspace - fs: dlm: clear pending bit when queue was empty - fs: dlm: fix missing pending to false - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() - drm/atomic: Allow vblank-enabled + self-refresh "disable" - drm/rockchip: vop: Leave vblank enabled in self-refresh - drm/dp_mst: Clear MSG_RDY flag before sending new message - drm/amd/display: Limit DCN32 8 channel or less parts to DPM1 for FPO - drm/amd/display: Fix in secure display context creation - drm/amd/display: fix seamless odm transitions - drm/amd/display: edp do not add non-edid timings - drm/amd/display: Remove Phantom Pipe Check When Calculating K1 and K2 - drm/amd/display: disable seamless boot if force_odm_combine is enabled - drm/amdgpu: fix clearing mappings for BOs that are always valid in VM - drm/amd: Disable PSR-SU on Parade 0803 TCON - drm/amd/display: add a NULL pointer check - drm/amd/display: Fix 128b132b link loss handling - drm/amd/display: Correct `DMUB_FW_VERSION` macro - drm/amd/display: Add monitor specific edid quirk - drm/amdgpu: avoid restore process run into dead loop. - drm/amd/pm: fix smu i2c data read risk - drm/ttm: Don't leak a resource on eviction error - drm/ttm: Don't leak a resource on swapout move error - serial: atmel: don't enable IRQs prematurely - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk - tty: serial: imx: fix rs485 rx after tx - tty: fix hang on tty device with no_room set - firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() - libceph: harden msgr2.1 frame segment length checks - ceph: add a dedicated private data for netfs rreq - ceph: fix blindly expanding the readahead windows - ceph: don't let check_caps skip sending responses for revoke msgs - nfp: clean mc addresses in application firmware when closing port - [arm64] errata: Mitigate Ampere1 erratum AC03_CPU_38 at stage-2 - xhci: Fix resume issue of some ZHAOXIN hosts - xhci: Fix TRB prefetch issue of ZHAOXIN hosts - xhci: Show ZHAOXIN xHCI root hub speed correctly - meson saradc: fix clock divider mask length - opp: Fix use-after-free in lazy_opp_tables after probe deferral - soundwire: qcom: fix storing port config out-of-bounds - media: uapi: Fix [GS]_ROUTING ACTIVE flag value - Revert "8250: add support for ASIX devices with a FIFO bug" - bus: ixp4xx: fix IXP4XX_EXP_T1_MASK - [s390x] decompressor: fix misaligned symbol build error - dm: verity-loadpin: Add NULL pointer check for 'bdev' parameter - tracing/histograms: Add histograms to hist_vars if they have referenced variables - tracing: Fix memory leak of iter->temp when reading trace_pipe - nvme: don't reject probe due to duplicate IDs for single-ported PCIe devices - [riscv64] perf: RISC-V: Remove PERF_HES_STOPPED flag checking in riscv_pmu_start() - regmap-irq: Fix out-of-bounds access when allocating config buffers - net: ena: fix shift-out-of-bounds in exponential backoff - ring-buffer: Fix deadloop issue on reading trace_pipe - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() - drm/amd/pm: share the code around SMU13 pcie parameters update - drm/amd/pm: conditionally disable pcie lane/speed switching for SMU13 - cifs: if deferred close is disabled then close files immediately - [x86] perf/x86: Fix lockdep warning in for_each_sibling_event() on SPR - PM: QoS: Restore support for default value on frequency QoS - [arm64] pwm: meson: modify and simplify calculation in meson_pwm_get_state - [arm64] pwm: meson: fix handling of period/duty if greater than UINT_MAX - fprobe: Release rethook after the ftrace_ops is unregistered - fprobe: Ensure running fprobe_exit_handler() finished before calling rethook_free() - tracing: Fix null pointer dereference in tracing_err_log_open() - mptcp: do not rely on implicit state check in mptcp_listen() - mptcp: ensure subflow is unhashed before cleaning the backlog - smb: client: Fix -Wstringop-overflow issues - tracing/probes: Fix to avoid double count of the string length on the array - tracing/probes: Fix not to count error code to total length - tracing/probes: Fix to update dynamic data counter if fetcharg uses it - Revert "tracing: Add "(fault)" name injection to kernel probes" - tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails - tracing/user_events: Fix struct arg size match check - scsi: qla2xxx: Multi-que support for TMF - scsi: qla2xxx: Fix task management cmd failure - scsi: qla2xxx: Fix task management cmd fail due to unavailable resource - scsi: qla2xxx: Fix hang in task management - scsi: qla2xxx: Wait for io return on terminate rport - scsi: qla2xxx: Fix mem access after free - scsi: qla2xxx: Array index may go out of bound - scsi: qla2xxx: Avoid fcport pointer dereference - scsi: qla2xxx: Fix buffer overrun - scsi: qla2xxx: Fix potential NULL pointer dereference - scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() - scsi: qla2xxx: Correct the index of array - scsi: qla2xxx: Pointer may be dereferenced - scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue - scsi: qla2xxx: Fix end of loop test - net: dsa: ocelot: unlock on error in vsc9959_qos_port_tas_set() - [mips*] kvm: Fix build error with KVM_MIPS_DEBUG_COP0_COUNTERS enabled - Revert "drm/amd: Disable PSR-SU on Parade 0803 TCON" - drm/atomic: Fix potential use-after-free in nonblocking commits - net/ncsi: make one oem_gma function for all mfr id - net/ncsi: change from ndo_set_mac_address to dev_set_mac_address https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.6 https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.7 - io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq - io_uring: Fix io_uring mmap() by using architecture-provided get_unmapped_area() - ALSA: hda/realtek - remove 3k pull low procedure - ALSA: hda/realtek: Add quirk for Clevo NS70AU - ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx - maple_tree: set the node limit when creating a new root node - mm/mlock: fix vma iterator conversion of apply_vma_lock_flags() - maple_tree: fix node allocation testing on 32 bit - keys: Fix linking a duplicate key to a keyring's assoc_array - prctl: move PR_GET_AUXV out of PR_MCE_KILL - perf probe: Add test for regression introduced by switch to die_get_decl_file() - perf probe: Read DWARF files from the correct CU - btrfs: fix iput() on error pointer after error during orphan cleanup - btrfs: fix warning when putting transaction with qgroups enabled after abort - fuse: revalidate: don't invalidate if interrupted - fuse: add feature flag for expire-only - fuse: Apply flags2 only when userspace set the FUSE_INIT_EXT - btrfs: raid56: always verify the P/Q contents for scrub - btrfs: set_page_extent_mapped after read_folio in btrfs_cont_expand - btrfs: fix double iput() on inode after an error during orphan cleanup - btrfs: zoned: fix memory leak after finding block group with super blocks - fuse: ioctl: translate ENOSYS in outarg - btrfs: fix race between balance and cancel/pause - regmap: Drop initial version of maximum transfer length fixes - [s390x] zcrypt: fix reply buffer calculations for CCA replies - of: Preserve "of-display" device name for compatibility - regmap: Account for register length in SMBus I/O limits - [ia64] mmap: Consider pgoff when searching for free mapping - [arm64] fpsimd: Ensure SME storage is allocated after SVE VL changes - can: mcp251xfd: __mcp251xfd_chip_set_mode(): increase poll timeout - can: bcm: Fix UAF in bcm_proc_show() - can: gs_usb: gs_can_open(): improve error handling - can: gs_usb: fix time stamp counter initialization - Revert "r8169: disable ASPM during NAPI poll" - dma-buf/dma-resv: Stop leaking on krealloc() failure - drm/amdgpu/vkms: relax timer deactivation by hrtimer_try_to_cancel - drm/amdgpu/pm: make gfxclock consistent for sienna cichlid - drm/amdgpu/pm: make mclk consistent for smu 13.0.7 - drm/nouveau/disp: PIOR DP uses GPIO for HPD, not PMGR AUX interrupts - drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - drm/nouveau/i2c: fix number of aux event slots - drm/client: Fix memory leak in drm_client_target_cloned - drm/client: Fix memory leak in drm_client_modeset_probe - drm/amd/display: only accept async flips for fast updates - drm/amd/display: Disable MPC split by default on special asic - drm/amd/display: check TG is non-null before checking if enabled - drm/amd/display: Keep PHY active for DP displays on DCN31 - [arm64] ASoC: fsl_sai: Disable bit clock with transmitter - [arm64] ASoC: fsl_sai: Revert "ASoC: fsl_sai: Enable MCTL_MCLK_EN bit for master mode" - ASoC: rt5640: Fix sleep in atomic context - ASoC: cs42l51: fix driver to properly autoload with automatic module loading - ASoC: codecs: wcd938x: fix missing clsh ctrl error handling - ASoC: cs35l45: Select REGMAP_IRQ - ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove - ASoC: qdsp6: audioreach: fix topology probe deferral - ASoC: tegra: Fix AMX byte map - ASoC: codecs: wcd938x: fix resource leaks on component remove - ASoC: codecs: wcd938x: fix missing mbhc init error handling - ASoC: codecs: wcd934x: fix resource leaks on component remove - ASoC: codecs: wcd938x: fix codec initialisation race - ASoC: codecs: wcd938x: fix soundwire initialisation race - [arm64] KVM: arm64: timers: Use CNTHCTL_EL2 when setting non-CNTKCTL_EL1 bits - [arm64] KVM: arm64: Correctly handle page aging notifiers for unaligned memslot - [arm64] KVM: arm64: Disable preemption in kvm_arch_hardware_enable() - [arm64] KVM: arm64: vgic-v4: Make the doorbell request robust w.r.t preemption - ext4: correct inline offset when handling xattrs in inode body - drm/radeon: Fix integer overflow in radeon_cs_parser_init - ALSA: emu10k1: roll up loops in DSP setup code for Audigy - quota: Properly disable quotas when add_dquot_ref() fails - quota: fix warning in dqgrab() - HID: add quirk for 03f0:464a HP Elite Presenter Mouse - ovl: check type and offset of struct vfsmount in ovl_entry - udf: Fix uninitialized array access for some pathnames - ALSA: hda/realtek: Add quirks for ROG ALLY CS35l41 audio - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev - [mips*] dec: prom: Address -Warray-bounds warning - FS: JFS: Fix null-ptr-deref Read in txBegin - FS: JFS: Check for read-only mounted filesystem in txBegin - md: fix data corruption for raid456 when reshape restart while grow up - md/raid10: prevent soft lockup while flush writes - scsi: sg: fix blktrace debugfs entries leakage - blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none - posix-timers: Ensure timer ID search-loop limit is valid - btrfs: add xxhash to fast checksum implementations - btrfs: don't check PageError in __extent_writepage - btrfs: abort transaction at update_ref_for_cow() when ref count is zero - erofs: Fix detection of atomic context - [x86] ACPI: x86: Add skip i2c clients quirk for Nextbook Ares 8A - ACPI: button: Add lid disable DMI quirk for Nextbook Ares 8A - [x86] ACPI: x86: Add ACPI_QUIRK_UART1_SKIP for Lenovo Yoga Book yb1-x90f/l - ACPI: video: Add backlight=native DMI quirk for Apple iMac11,3 - ACPI: video: Add backlight=native DMI quirk for Lenovo ThinkPad X131e (3371 AMD version) - ACPI: resource: Remove "Zen" specific match and quirks - [arm64] set __exception_irq_entry with __irq_entry as a default - [arm64] mm: fix VA-range sanity check - ACPI: video: Add backlight=native DMI quirk for Dell Studio 1569 - rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic() - rcu: Mark additional concurrent load from ->cpu_no_qs.b.exp - tools/nolibc: ensure stack protector guard is never zero - sched/fair: Don't balance task to its current running CPU - wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range - bpf: Print a warning only if writing to unprivileged_bpf_disabled. - bpf: Address KCSAN report on bpf_lru_list - spi: cadence-quadspi: Add compatible for AMD Pensando Elba SoC - bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - bpf: tcp: Avoid taking fast sock lock in iterator - wifi: rtw88: sdio: Check the HISR RX_REQUEST bit in rtw_sdio_rx_isr() - bpf: Silence a warning in btf_type_id_size() - devlink: make health report on unregistered instance warn just once - wifi: ath11k: add support default regdb while searching board-2.bin for WCN6855 - wifi: mac80211_hwsim: Fix possible NULL dereference - spi: dw: Add compatible for Intel Mount Evans SoC - wifi: ath12k: Avoid NULL pointer access during management transmit cleanup - wifi: ath11k: fix memory leak in WMI firmware stats - wifi: iwlwifi: mvm: fix potential array out of bounds access - net: ethernet: litex: add support for 64 bit stats - devlink: report devlink_port_type_warn source device - wifi: iwlwifi: mvm: Add NULL check before dereferencing the pointer - wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point() - wifi: iwlwifi: Add support for new PCI Id - wifi: iwlwifi: mvm: avoid baid size integer overflow - wifi: iwlwifi: pcie: add device id 51F1 for killer 1675 - igb: Fix igb_down hung on surprise removal - [arm64] net: hns3: fix strncpy() not using dest-buf length as length issue - ASoC: codecs: wcd938x: fix mbhc impedance loglevel - ASoC: codecs: wcd938x: fix dB range for HPHL and HPHR - ASoC: qcom: q6apm: do not close GPR port before closing graph - iov_iter: Mark copy_iovec_from_user() noclone - sched/fair: Use recent_used_cpu to test p->cpus_ptr - sched/psi: use kernfs polling functions for PSI trigger polling - spi: bcm63xx: fix max prepend length - fbdev: imxfb: warn about invalid left/right margin - fbdev: imxfb: Removed unneeded release_mem_region - perf build: Fix library not found error when using CSLIBS - btrfs: be a bit more careful when setting mirror_num_ret in btrfs_map_block - spi: s3c64xx: clear loopback bit after loopback test - kallsyms: strip LTO-only suffixes from promoted global functions - smb: client: fix missed ses refcounting - [arm64] Fix HFGxTR_EL2 field naming - [arm64] dsa: mv88e6xxx: Do a final check before timing out - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field() - bridge: Add extack warning when enabling STP in netns. - net: ethernet: mtk_eth_soc: handle probe deferral - gso: fix dodgy bit handling for GSO_UDP_L4 - [amd64] iommu/sva: Fix signedness bug in iommu_sva_alloc_pasid() - cifs: fix mid leak during reconnection after timeout threshold - ice: Unregister netdev and devlink_port only once - ice: prevent NULL pointer deref during reload - ASoC: SOF: ipc3-dtrace: uninitialized data in dfsentry_trace_filter_write() - regulator: da9063: fix null pointer deref with partial DT config - net: sched: cls_matchall: Undo tcf_bind_filter in case of failure after mall_set_parms - net: sched: cls_u32: Undo tcf_bind_filter if u32_replace_hw_knode - net: sched: cls_u32: Undo refcount decrement in case update failed - net: sched: cls_bpf: Undo tcf_bind_filter in case of an error - net: dsa: microchip: correct KSZ8795 static MAC table access - r8169: fix ASPM-related problem for chip version 42 and 43 - [x86] drm/i915/perf: add sentinel to xehp_oa_b_counters - iavf: Fix use-after-free in free_netdev - iavf: Fix out-of-bounds when setting channels on remove - iavf: use internal state to free traffic IRQs - iavf: make functions static where possible - iavf: Wait for reset in callbacks which trigger it - iavf: fix a deadlock caused by rtnl and driver's lock circular dependencies - iavf: fix reset task race with iavf_remove() - security: keys: Modify mismatched function name - vrf: Fix lockdep splat in output path - octeontx2-pf: Dont allocate BPIDs for LBK interfaces - bpf: Fix subprog idx logic in check_max_stack_depth - bpf: Repeat check_max_stack_depth for async callbacks - bpf, arm64: Fix BTI type used for freplace attached functions - igc: Avoid transmit queue timeout for XDP - igc: Prevent garbled TX queue with XDP ZEROCOPY - net: ipv4: use consistent txhash in TIME_WAIT and SYN_RECV - tcp: annotate data-races around tcp_rsk(req)->txhash - tcp: annotate data-races around tcp_rsk(req)->ts_recent - net: ipv4: Use kfree_sensitive instead of kfree - net:ipv6: check return value of pskb_trim() - Revert "tcp: avoid the lookup process failing to get sk in ehash table" - net: ethernet: mtk_eth_soc: always mtk_get_ib1_pkt_type - fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe - llc: Don't drop packet from non-root netns. - ALSA: hda/realtek: Fix generic fixup definition for cs35l41 amp - netfilter: nf_tables: fix spurious set element insertion failure - netfilter: nf_tables: can't schedule in nft_chain_validate - netfilter: nft_set_pipapo: fix improper element removal (CVE-2023-4004) - netfilter: nf_tables: skip bound chain in netns release path - netfilter: nf_tables: skip bound chain on rule flush - Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync - Bluetooth: hci_event: call disconnect callback before deleting conn - Bluetooth: ISO: fix iso_conn related locking and validity issues - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() - Bluetooth: hci_conn: return ERR_PTR instead of NULL when there is no link - Bluetooth: SCO: fix sco_conn related locking and validity issues - Bluetooth: btusb: Fix bluetooth on Intel Macbook 2014 - tcp: annotate data-races around tp->tcp_tx_delay - tcp: annotate data-races around tp->tsoffset - tcp: annotate data-races around tp->keepalive_time - tcp: annotate data-races around tp->keepalive_intvl - tcp: annotate data-races around tp->keepalive_probes - tcp: annotate data-races around icsk->icsk_syn_retries - tcp: annotate data-races around tp->linger2 - tcp: annotate data-races around rskq_defer_accept - tcp: annotate data-races around tp->notsent_lowat - tcp: annotate data-races around icsk->icsk_user_timeout - tcp: annotate data-races around fastopenq.max_qlen - net: phy: prevent stale pointer dereference in phy_init() - jbd2: recheck chechpointing non-dirty buffer - tracing/histograms: Return an error if we fail to add histogram to hist_vars list - drm/ttm: fix bulk_move corruption when adding a entry - spi: dw: Remove misleading comment for Mount Evans SoC - scsi/sg: don't grab scsi host module reference - scsi: sg: Fix checking return value of blk_get_queue() - drm/amd/display: Clean up errors & warnings in amdgpu_dm.c - drm/amd/display: Add polling method to handle MST reply packet - Revert "drm/amd/display: edp do not add non-edid timings" https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.8 - [x86] platform/x86/amd/pmf: Notify OS power slider update - [x86] platform/x86/amd/pmf: reduce verbosity of apmf_get_system_params - drm/amd: Move helper for dynamic speed switch check out of smu13 - drm/amd: Align SMU11 SMU_MSG_OverridePcieParameters implementation with SMU13 - r8169: revert 2ab19de62d67 ("r8169: remove ASPM restrictions now that ASPM is disabled during NAPI poll") - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint - [arm64] KVM: arm64: Handle kvm_arm_init failure correctly in finalize_pkvm - blk-mq: Fix stall due to recursive flush plug - [powerpc*] pseries/vas: Hold mmap_mutex after mmap lock during window close - [s390x] KVM: s390: pv: simplify shutdown and fix race - [s390x] KVM: s390: pv: fix index value of replaced ASCE - [s390x] mm: fix per vma lock fault handling - io_uring: don't audit the capability check in io_uring_create() - gpio: tps68470: Make tps68470_gpio_output() always set the initial value - gpio: mvebu: Make use of devm_pwmchip_add - gpio: mvebu: fix irq domain leak - regmap: Disable locking for RBTREE and MAPLE unit tests - btrfs: factor out a btrfs_verify_page helper - btrfs: fix fsverify read error handling in end_page_read - btrfs: fix race between quota disable and relocation - i2c: Delete error messages for failed memory allocations - i2c: Improve size determinations - i2c: nomadik: Remove unnecessary goto label - i2c: nomadik: Use devm_clk_get_enabled() - i2c: nomadik: Remove a useless call in the remove function - PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() - PCI/ASPM: Factor out pcie_wait_for_retrain() - PCI/ASPM: Avoid link retraining race - PCI: rockchip: Remove writes to unused registers - PCI: rockchip: Fix window mapping and address translation for endpoint - PCI: rockchip: Don't advertise MSI-X in PCIe capabilities - drm/amd/display: Convert Delaying Aux-I Disable To Monitor Patch - drm/amd/display: Keep disable aux-i delay as 0 - drm/amd/display: add pixel rate based CRB allocation support - drm/amd/display: fix dcn315 single stream crb allocation - drm/amd/display: Update correct DCN314 register header - drm/amd/display: Set minimum requirement for using PSR-SU on Rembrandt - drm/amd/display: Set minimum requirement for using PSR-SU on Phoenix - drm/ttm: never consider pinned BOs for eviction&swap - maple_tree: add __init and __exit to test module - maple_tree: fix 32 bit mas_next testing - drm/amd/display: Add FAMS validation before trying to use it - drm/amd/display: update extended blank for dcn314 onwards - drm/amd/display: Fix possible underflow for displays with large vblank - drm/amd/display: Prevent vtotal from being set to 0 - ext4: add EXT4_MB_HINT_GOAL_ONLY test in ext4_mb_use_preallocated - ext4: mballoc: Remove useless setting of ac_criteria - ext4: fix rbtree traversal bug in ext4_mb_use_preallocated - phy: phy-mtk-dp: Fix an error code in probe() - phy: mediatek: hdmi: mt8195: fix prediv bad upper limit test - phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend - phy: qcom-snps-femto-v2: properly enable ref clock - soundwire: qcom: update status correctly with mask - soundwire: amd: Fix a check for errors in probe() - media: tc358746: Address compiler warnings - media: staging: atomisp: select V4L2_FWNODE - media: amphion: Fix firmware path to match linux-firmware - media: mtk-jpeg: move data/code inside CONFIG_OF blocks - media: mtk_jpeg_core: avoid unused-variable warning - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() - iavf: fix potential deadlock on allocation failure - iavf: check for removal state before IAVF_FLAG_PF_COMMS_FAILED - net: phy: marvell10g: fix 88x3310 power up - [arm64] net: hns3: fix the imp capability bit cannot exceed 32 bits issue - [arm64] net: hns3: fix wrong tc bandwidth weight data issue - [arm64] net: hns3: fix wrong bw weight of disabled tc issue - vxlan: calculate correct header length for GPE - vxlan: generalize vxlan_parse_gpe_hdr and remove unused args - vxlan: fix GRO with VXLAN-GPE - phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() - atheros: fix return value check in atl1_tso() - ethernet: atheros: fix return value check in atl1e_tso_csum() - ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address - net: fec: avoid tx queue timeout when XDP is enabled - tcp: Reduce chance of collisions in inet6_hashfn(). (CVE-2023-1206) - ice: Fix memory management in ice_ethtool_fdir.c - bonding: reset bond's flags when down link is P2P device - team: reset team's flags when down link is P2P device - octeontx2-af: Fix hash extraction enable configuration - net: stmmac: Apply redundant write work around on 4.xx too - [x86] platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 - [x86] traps: Fix load_unaligned_zeropad() handling for shared TDX memory - macvlan: add forgotten nla_policy for IFLA_MACVLAN_BC_CUTOFF - igc: Fix Kernel Panic during ndo_tx_timeout callback - netfilter: nft_set_rbtree: fix overlap expiration walk - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID (CVE-2023-4147) - mm: suppress mm fault logging if fatal signal already pending - tools: ynl-gen: fix enum index in _decode_enum(..) - net: fec: tx processing does not call XDP APIs if budget is 0 - net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64 - benet: fix return value check in be_lancer_xmit_workarounds() - tipc: check return value of pskb_trim() - tipc: stop tipc crypto on failure in tipc_node_create - fs/9p: Fix a datatype used with V9FS_DIRECT_IO - RDMA/mlx4: Make check for invalid flags stricter - [arm64] drm/msm/mdss: correct UBWC programming for SM8550 - [arm64] drm/msm/dpu: add missing flush and fetch bits for DMA4/DMA5 planes - [arm64] drm/msm/dpu: drop enum dpu_core_perf_data_bus_id - [arm64] drm/msm/dsi: Drop unused regulators from QCM2290 14nm DSI PHY config - [arm64] drm/msm/adreno: Fix snapshot BINDLESS_DATA size - RDMA/irdma: Add missing read barriers - RDMA/irdma: Fix data race on CQP completion stats - RDMA/irdma: Fix data race on CQP request done - RDMA/core: Update CMA destination address on rdma_resolve_addr - RDMA/mthca: Fix crash when polling CQ for shared QPs - RDMA/bnxt_re: Prevent handling any completions after qp destroy - RDMA/bnxt_re: Enhance the existing functions that wait for FW responses - RDMA/bnxt_re: Avoid the command wait if firmware is inactive - RDMA/bnxt_re: use shadow qd while posting non blocking rcfw command - RDMA/bnxt_re: Simplify the function that sends the FW commands - RDMA/bnxt_re: add helper function __poll_for_resp - RDMA/bnxt_re: Fix hang during driver unload - [arm64] drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() - [arm64] drm/msm: Fix hw_fence error path cleanup - cxl/acpi: Fix a use-after-free in cxl_parse_cfmws() - cxl/acpi: Return 'rc' instead of '0' in cxl_parse_cfmws() - [arm64] ASoC: fsl_spdif: Silence output on stop - block: Fix a source code comment in include/uapi/linux/blkzoned.h - smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request - [x86] drm/i915: Fix an error handling path in igt_write_huge() - xenbus: check xen_domain in xenbus_probe_initcall - dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths - dm raid: clean up four equivalent goto tags in raid_ctr() - dm raid: protect md_stop() with 'reconfig_mutex' - drm/amd: Fix an error handling mistake in psp_sw_init() - drm/amd/display: Unlock on error path in dm_handle_mst_sideband_msg_ready_event() - RDMA/irdma: Fix op_type reporting in CQEs - RDMA/irdma: Report correct WC error - [arm64] drm/msm: Disallow submit with fence id 0 - ublk: fail to start device if queue setup is interrupted - ublk: fail to recover device if queue setup is interrupted - ublk: return -EINTR if breaking from waiting for existed users in DEL_DEV - iommufd: IOMMUFD_DESTROY should not increase the refcount - tmpfs: fix Documentation of noswap and huge mount options - ata: pata_ns87415: mark ns87560_tf_read static - ring-buffer: Fix wrong stat of cpu_buffer->read - tracing: Fix warning in trace_buffered_event_disable() - Revert "usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init()" - usb: gadget: call usb_gadget_check_config() to verify UDC capability - USB: gadget: Fix the memory leak in raw_gadget driver - usb: gadget: core: remove unbalanced mutex_unlock in usb_gadget_activate - KVM: Grab a reference to KVM for VM and vCPU stats file descriptors - [x86] KVM: VMX: Don't fudge CR0 and CR4 for restricted L2 guest - [x86] KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid - serial: qcom-geni: drop bogus runtime pm state update - tty: serial: sh-sci: Fix sleeping in atomic context - serial: 8250_dw: Preserve original value of DLF register - USB: serial: option: support Quectel EM060K_128 - USB: serial: option: add Quectel EC200A module support - USB: serial: simple: add Kaufmann RKS+CAN VCP - USB: serial: simple: sort driver entries - can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED - TIOCSTI: always enable for CAP_SYS_ADMIN (Closes: #1039092) - usb: typec: Set port->pd before adding device for typec_port - usb: typec: Iterate pds array when showing the pd list - usb: typec: Use sysfs_emit_at when concatenating the string - Revert "usb: dwc3: core: Enable AutoRetry feature in the controller" - usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy - usb: dwc3: don't reset device side if dwc3 was configured as host-only - usb: misc: ehset: fix wrong if condition - usb: ohci-at91: Fix the unhandle interrupt when resume - USB: quirks: add quirk for Focusrite Scarlett - usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config - usb: xhci-mtk: set the dma max_seg_size - Revert "usb: xhci: tegra: Fix error check" - Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group - Documentation: security-bugs.rst: clarify CVE handling - staging: r8712: Fix memory leak in _r8712_init_xmit_priv() - staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() - tty: n_gsm: fix UAF in gsm_cleanup_mux - Revert "xhci: add quirk for host controllers that don't update endpoint DCS" - ALSA: hda/realtek: Support ASUS G713PV laptop - ALSA: hda/relatek: Enable Mute LED on HP 250 G8 - hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature - hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled - hwmon: (aquacomputer_d5next) Fix incorrect PWM value readout - hwmon: (pmbus_core) Fix pmbus_is_enabled() - hwmon: (pmbus_core) Fix NULL pointer dereference - hwmon: (pmbus_core) Fix Deadlock in pmbus_regulator_get_status - btrfs: zoned: do not enable async discard - btrfs: account block group tree when calculating global reserve size - btrfs: check if the transaction was aborted at btrfs_wait_for_commit() - btrfs: check for commit error at btrfs_attach_transaction_barrier() - [x86] MCE/AMD: Decrement threshold_bank refcount when removing threshold blocks - [x86] cpu: Enable STIBP on AMD if Automatic IBRS is enabled - file: always lock position for FMODE_ATOMIC_POS - nfsd: Remove incorrect check in nfsd4_validate_stateid - ksmbd: check if a mount point is crossed during path lookup - ACPI/IORT: Remove erroneous id_count check in iort_node_get_rmr_info() - tpm_tis: Explicitly check for error code - irq-bcm6345-l1: Do not assume a fixed block to cpu mapping - irqchip/gic-v4.1: Properly lock VPEs when doing a directLPI invalidation - locking/rtmutex: Fix task->pi_waiters integrity - proc/vmcore: fix signedness bug in read_from_oldmem() - xen: speed up grant-table reclaim - virtio-net: fix race between set queues and probe - net: ipa: only reset hashed tables when supported - net: dsa: qca8k: enable use_single_write for qca8xxx - net: dsa: qca8k: fix search_and_insert wrong handling of new rule - net: dsa: qca8k: fix broken search_and_del - net: dsa: qca8k: fix mdb add/del case with 0 VID - iommufd: Set end correctly when doing batch carry - soundwire: fix enumeration completion - Revert "um: Use swap() to make code cleaner" - 9p: fix ignored return value in v9fs_dir_release - fs/9p: remove unnecessary and overrestrictive check - fs/9p: fix typo in comparison logic for cache mode - fs/9p: fix type mismatch in file cache mode helper - fs/9p: remove unnecessary invalidate_inode_pages2 - [s390x] dasd: fix hanging device after quiesce/resume - [s390x] dasd: print copy pair message only for the correct error - mptcp: more accurate NL event generation - ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register - [arm64] sme: Set new vector length before reallocating - PM: sleep: wakeirq: fix wake irq arming - thermal: of: fix double-free on unregistration - ceph: never send metrics if disable_send_metrics is set - [x86] drm/i915/dpt: Use shmem for dpt objects - dm cache policy smq: ensure IO doesn't prevent cleaner policy progress - rbd: make get_lock_owner_info() return a single locker or NULL - rbd: harden get_lock_owner_info() a bit - rbd: retrieve and check lock owner twice before blocklisting - mm: lock VMA in dup_anon_vma() before setting ->anon_vma - mm: fix memory ordering for mm_lock_seq and vm_lock_seq - mm/memory-failure: fix hardware poison check in unpoison_memory() - mm/mempolicy: Take VMA lock before replacing policy - dma-buf: keep the signaling time of merged fences v3 - dma-buf: fix an error pointer vs NULL bug https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.9 - xen/netback: Fix buffer overrun triggered by unusual packet (CVE-2023-34319) - [x86] fix backwards merge of GDS/SRSO bit https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.10 - mm: lock_vma_under_rcu() must check vma->anon_vma under vma lock - [arm64] iommu/arm-smmu-v3: Work around MMU-600 erratum 1076982 - [arm64] iommu/arm-smmu-v3: Document MMU-700 erratum 2812531 - [arm64] iommu/arm-smmu-v3: Add explicit feature for nesting - [arm64] iommu/arm-smmu-v3: Document nesting-related errata - [arm64] dts: imx8mm-venice-gw7903: disable disp_blk_ctrl - [arm64] dts: imx8mm-venice-gw7904: disable disp_blk_ctrl - [arm64] dts: phycore-imx8mm: Label typo-fix of VPU - [arm64] dts: phycore-imx8mm: Correction in gpio-line-names - [arm64] dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux - [arm64] dts: freescale: Fix VPU G2 clock - [arm64] firmware: smccc: Fix use of uninitialised results structure - lib/bitmap: workaround const_eval test build failure - [arm64] soc: imx: imx8mp-blk-ctrl: register HSIO PLL clock as bus_power_dev child - [arm64] firmware: arm_scmi: Fix chan_free cleanup on SMC - word-at-a-time: use the same return type for has_zero regardless of endianness - [s390x] vmem: split pages when debug pagealloc is enabled - [s390x] KVM: s390: fix sthyi error handling - erofs: fix wrong primary bvec selection on deduplicated extents - [arm64] perf pmu arm64: Fix reading the PMU cpu slots in sysfs - wifi: cfg80211: Fix return value in scan logic - net/mlx5e: fix double free in macsec_fs_tx_create_crypto_table_groups - net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx - net/mlx5: fix potential memory leak in mlx5e_init_rep_rx - net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() - net/mlx5: Honor user input for migratable port fn attr - net/mlx5e: Don't hold encap tbl lock if there is no encap action - net/mlx5e: Fix crash moving to switchdev mode when ntuple offload is set - net/mlx5e: Move representor neigh cleanup to profile cleanup_tx - net/mlx5e: xsk: Fix invalid buffer access for legacy rq - net/mlx5e: xsk: Fix crash on regular rq reactivation - net/mlx5e: kTLS, Fix protection domain in use syndrome when devlink reload - net/mlx5: fs_chains: Fix ft prio if ignore_flow_level is not supported - net/mlx5: Unregister devlink params in case interface is down - bpf: Add length check for SK_DIAG_BPF_STORAGE_REQ_MAP_FD parsing - rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length - net: sched: cls_u32: Fix match key mis-addressing - mISDN: hfcpci: Fix potential deadlock on &hc->lock - net: stmmac: tegra: Properly allocate clock bulk data - qed: Fix scheduling in a tasklet while getting stats - net: move gso declarations and functions to their own files - net: gro: fix misuse of CB in udp socket lookup - net: annotate data-races around sk->sk_reserved_mem - net: annotate data-race around sk->sk_txrehash - net: annotate data-races around sk->sk_max_pacing_rate - net: add missing READ_ONCE(sk->sk_rcvlowat) annotation - net: add missing READ_ONCE(sk->sk_sndbuf) annotation - net: add missing READ_ONCE(sk->sk_rcvbuf) annotation - net: annotate data-races around sk->sk_mark - net: add missing data-race annotations around sk->sk_peek_off - net: add missing data-race annotation for sk_ll_usec - net: annotate data-races around sk->sk_priority - net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX. - net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs - ice: Fix RDMA VSI removal during queue rebuild - bnxt: don't handle XDP in netpoll - octeon_ep: initialize mbox mutexes - bpf: Move unprivileged checks into map_create() and bpf_prog_load() - bpf: Inline map creation logic in map_create() function - bpf: Centralize permissions checks for all BPF map types - bpf, cpumap: Make sure kthread is running before map update returns - bpf, cpumap: Handle skb as well when clean up ptr_ring - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (CVE-2023-4128) - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (CVE-2023-4128) - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (CVE-2023-4128) - bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire - net: ll_temac: fix error checking of irq_of_parse_and_map() - net: korina: handle clk prepare error in korina_probe() - net: netsec: Ignore 'phy-mode' on SynQuacer in DT mode - bnxt_en: Fix page pool logic for page size >= 64K - bnxt_en: Fix max_mtu setting for multi-buf XDP - net: dcb: choose correct policy to parse DCB_ATTR_BCN - [s390x] qeth: Don't call dev_close/dev_open (DOWN/UP) - ip6mr: Fix skb_under_panic in ip6mr_cache_report() - vxlan: Fix nexthop hash size - net/mlx5: fs_core: Make find_closest_ft more generic - net/mlx5: fs_core: Skip the FTs in the same FS_TYPE_PRIO_CHAINS fs_prio - net/mlx5e: Set proper IPsec source port in L4 selector - prestera: fix fallback to previous version on same major version - tcp_metrics: fix addr_same() helper - tcp_metrics: annotate data-races around tm->tcpm_stamp - tcp_metrics: annotate data-races around tm->tcpm_lock - tcp_metrics: annotate data-races around tm->tcpm_vals[] - tcp_metrics: annotate data-races around tm->tcpm_net - tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen - scsi: zfcp: Defer fc_rport blocking until after ADISC response - scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices - Documentation: kdump: Add va_kernel_pa_offset for RISCV64 - libceph: fix potential hang in ceph_osdc_notify() - USB: zaurus: Add ID for A-300/B-500/C-700 - ceph: defer stopping mdsc delayed_work - [arm64] firmware: arm_scmi: Drop OF node reference in the transport channel setup - exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree - exfat: check if filename entries exceeds max filename length (CVE-2023-4273) - exfat: release s_lock before calling dir_emit() - mtd: spinand: toshiba: Fix ecc_get_status - mtd: spinand: winbond: Fix ecc_get_status - mtd: rawnand: meson: fix OOB available bytes for ECC - bpf: Disable preemption in bpf_perf_event_output - [arm64] dts: stratix10: fix incorrect I2C property for SCL signal - net: tun_chr_open(): set sk_uid from current_fsuid() (CVE-2023-4194) - net: tap_open(): set sk_uid from current_fsuid() (CVE-2023-4194) - wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) - [x86] hyperv: Disable IBT when hypercall page lacks ENDBR instruction - rbd: prevent busy loop when requesting exclusive lock - bpf: Disable preemption in bpf_event_output - smb: client: fix dfs link mount against w2k8 - [powerpc*] ftrace: Create a dummy stackframe to fix stack unwind - [arm64] fpsimd: Sync and zero pad FPSIMD state for streaming SVE - [arm64] fpsimd: Clear SME state in the target task when setting the VL - [arm64] fpsimd: Sync FPSIMD state with SVE for SME only systems - [arm64] ptrace: Flush FP state when setting ZT0 - [arm64] ptrace: Don't enable SVE when setting streaming SVE - open: make RESOLVE_CACHED correctly test for O_TMPFILE - drm/ttm: check null pointer before accessing when swapping - [x86] drm/i915: Fix premature release of request's reusable memory - [x86] drm/i915/gt: Cleanup aux invalidation registers - Revert "page cache: fix page_cache_next/prev_miss off by one" - sunvnet: fix sparc64 build error after gso code split - clk: imx93: Propagate correct error in imx93_clocks_probe() - file: reinstate f_pos locking optimization for regular files - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() - fs/sysv: Null check to prevent null-ptr-deref bug - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (CVE-2023-40283) - debugobjects: Recheck debug_objects_enabled before reporting - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb - fs: Protect reconfiguration of sb read-write from racing writes - mm/gup: do not return 0 from pin_user_pages_fast() for bad args - btrfs: remove BUG_ON()'s in add_new_free_space() - f2fs: fix to do sanity check on direct node in truncate_dnode() - io_uring: annotate offset timeout races - mtd: rawnand: omap_elm: Fix incorrect type in assignment - mtd: rawnand: rockchip: fix oobfree offset and description - mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts - clk: mediatek: mt8183: Add back SSPM related clocks - mtd: spi-nor: avoid holes in struct spi_mem_op - mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() - [powerpc*] mm/altmap: Fix altmap boundary check - drm/imx/ipuv3: Fix front porch adjustment upon hactive aligning - drm/amdgpu: Use apt name for FW reserved region - [x86] drm/i915: Add the gen12_needs_ccs_aux_inv helper - [x86] drm/i915/gt: Ensure memory quiesced before invalidation - [x86] drm/i915/gt: Add workaround 14016712196 - [x86] drm/i915/gt: Rename flags with bit_group_X according to the datasheet - [x86] drm/i915/gt: Poll aux invalidation register bit on invalidation - [x86] drm/i915/gt: Support aux invalidation on all engines - [x86] drm/i915/gt: Enable the CCS_FLUSH bit in the pipe control and in the CS - [x86] CPU/AMD: Do not leak quotient data after a division by 0 (CVE-2023-20588) https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.11 - tpm/tpm_tis: Disable interrupts for TUXEDO InfinityBook S 15/17 Gen7 - tpm: Disable RNG for all AMD fTPMs - tpm/tpm_tis: Disable interrupts for Lenovo P620 devices - tpm: Add a helper for checking hwrng enabled - ksmbd: validate command request size - ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea() - [x86] KVM: SEV: snapshot the GHCB before accessing it - [x86] KVM: SEV: only access GHCB fields once (CVE-2023-4155) - wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems() - wifi: rtw89: fix 8852AE disconnection caused by RX full flags - wireguard: allowedips: expand maximum node depth - mmc: sdhci-f-sdh30: Replace with sdhci_pltfm - ipv6: adjust ndisc_is_useropt() to also return true for PIO - mptcp: avoid bogus reset on fallback close - mptcp: fix disconnect vs accept race - dmaengine: pl330: Return DMA_PAUSED when transaction is paused - dmaengine: xilinx: xdma: Fix interrupt vector setting - net: mana: Fix MANA VF unload when hardware is unresponsive - ACPI: resource: revert "Remove "Zen" specific match and quirks" - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen - ACPI: resource: Add IRQ override quirk for PCSpecialist Elimina Pro 16 M - zram: take device and not only bvec offset into account - [riscv64] Start of DRAM should at least be aligned on PMD size for the direct mapping - [riscv64] kexec: load initrd high in available memory - [riscv64] mmio: Fix readX()-to-delay() ordering - [riscv64] kexec: handle R_RISCV_CALL_PLT relocation type - riscv: mm: fix 2 instances of -Wmissing-variable-declarations - nvme: fix possible hang when removing a controller during error recovery - nvme-tcp: fix potential unbalanced freeze & unfreeze - nvme-rdma: fix potential unbalanced freeze & unfreeze - nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM9B1 256G and 512G - drm/nouveau/gr: enable memory loads on helper invocation on all channels - drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues - drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap() - drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() - drm/amd/pm: correct the pcie width for smu 13.0.0 - drm/amd/display: Fix a regression on Polaris cards - drm/amd/display: check attr flag before set cursor degamma on DCN3+ - drm/amd: Disable S/G for APUs when 64GB or more host memory - tpm: tpm_tis: Fix UPX-i11 DMI_MATCH condition - tpm_tis: Opt-in interrupts - cpuidle: dt_idle_genpd: Add helper function to remove genpd topology - cpuidle: psci: Move enabling OSI mode after power domains creation - io_uring: correct check for O_TMPFILE - zsmalloc: fix races between modifications of fullness and isolated - hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 - cpufreq: amd-pstate: fix global sysfs attribute type - fs/proc/kcore: reinstate bounce buffer for KCORE_TEXT regions - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput - accel/ivpu: Add set_pages_array_wc/uc for internal buffers - hugetlb: do not clear hugetlb dtor until allocating vmemmap - mm: memory-failure: fix potential unexpected return value from unpoison_memory() - mm: memory-failure: avoid false hwpoison page mapped error info - drm/amd/pm: expose swctf threshold setting for legacy powerplay - drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation - iio: cros_ec: Fix the allocation size for cros_ec_command - iio: frequency: admv1013: propagate errors from regulator_get_voltage() - iio: adc: ad7192: Fix ac excitation feature - iio: adc: meson: fix core clock enable/disable moment - iio: adc: ina2xx: avoid NULL pointer dereference on OF device match - [arm*] binder: fix memory leak in binder_init() - misc: rtsx: judge ASPM Mode to set PETXCFG Reg - [x86] thunderbolt: Fix memory leak in tb_handle_dp_bandwidth_request() - usb-storage: alauda: Fix uninit-value in alauda_check_media() - usb: dwc3: Properly handle processing of pending events - USB: Gadget: core: Help prevent panic during UVC unconfigure - usb: common: usb-conn-gpio: Prevent bailing out if initial role is none - usb: typec: tcpm: Fix response to vsafe0V event - usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment - [x86] srso: Fix build breakage with the LLVM linker - [x86] vdso: Choose the right GDT_ENTRY_CPUNODE for 32-bit getcpu() on 64-bit kernel - [x86] cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 - [x86] mm: Fix VDSO and VVAR placement on 5-level paging machines - [x86] sev: Do not try to parse for the CC blob on non-AMD hardware - [x86] linkage: Fix typo of BUILD_VDSO in asm/linkage.h - [x86] speculation: Add cpu_show_gds() prototype - [x86] Move gds_ucode_mitigated() declaration to header - drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes - netfilter: nf_tables: don't skip expired elements during walk - netfilter: nf_tables: GC transaction API to avoid race with control plane - netfilter: nf_tables: adapt set backend to use GC transaction API - netfilter: nft_set_hash: mark set element as dead when deleting from packet path - iio: imu: lsm6dsx: Fix mount matrix retrieval - iio: core: Prevent invalid memory access when there is no parent - iio: light: bu27034: Fix scale format - interconnect: qcom: Add support for mask-based BCMs - interconnect: qcom: sa8775p: add enable_mask for bcm nodes - interconnect: qcom: sm8450: add enable_mask for bcm nodes - interconnect: qcom: sm8550: add enable_mask for bcm nodes - [arm64] KVM: arm64: Fix hardware enable/disable flows for pKVM - net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail() - bpf, sockmap: Fix map type error in sock_map_del_link - bpf, sockmap: Fix bug that strp_done cannot be called - hwmon: (aquacomputer_d5next) Add selective 200ms delay after sending ctrl report - mISDN: Update parameter type of dsp_cmx_send() - macsec: use DEV_STATS_INC() - mptcp: fix the incorrect judgment for msk->cb_flags - igc: Add lock to safeguard global Qbv variables - ionic: Add missing err handling for queue reconfig - net/packet: annotate data-races around tp->status - net/smc: Fix setsockopt and sysctl to specify same buffer size again - net/smc: Use correct buffer sizes when switching between TCP and SMC - PCI: move OF status = "disabled" detection to dev->match_driver - tcp: add missing family to tcp_set_ca_state() tracepoint - tunnels: fix kasan splat when generating ipv4 pmtu error - xsk: fix refcount underflow in error path - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves - dccp: fix data-race around dp->dccps_mss_cache - drivers: net: prevent tun_build_skb() to exceed the packet size limit - drivers: vxlan: vnifilter: free percpu vni stats on error path - iavf: fix potential races for FDIR filters - [amd64] IB/hfi1: Fix possible panic during hotplug remove - drm/amd/display: Don't show stack trace for missing eDP - drm/bridge: it6505: Check power state with it6505->powered in IRQ handler - drm/nouveau: remove unused tu102_gr_load() function - drm/rockchip: Don't spam logs in atomic check - wifi: brcm80211: handle params_v1 allocation failure - wifi: cfg80211: fix sband iftype data lookup for AP_VLAN - RDMA/umem: Set iova in ODP flow - RDMA/bnxt_re: Properly order ib_device_unalloc() to avoid UAF - RDMA/bnxt_re: Fix error handling in probe failure path - net: tls: avoid discarding data on record close - net: marvell: prestera: fix handling IPv4 routes with nhid - net: phy: at803x: remove set/get wol callbacks for AR8032 - net: dsa: ocelot: call dsa_tag_8021q_unregister() under rtnl_lock() on driver remove - [arm64] net: hns3: refactor hclge_mac_link_status_wait for interface reuse - [arm64] net: hns3: add wait until mac link down - [arm64] net: hns3: fix deadlock issue when externel_lb and reset are executed together - net: enetc: reimplement RFS/RSS memory clearing as PCI quirk - nexthop: Fix infinite nexthop dump when using maximum nexthop ID - nexthop: Make nexthop bucket dump more efficient - nexthop: Fix infinite nexthop bucket dump when using maximum nexthop ID - [arm64] net: hns3: fix strscpy causing content truncation issue - dmaengine: mcf-edma: Fix a potential un-allocated memory access - dmaengine: idxd: Clear PRS disable flag when disabling IDXD device - dmaengine: owl-dma: Modify mismatched function name - net/mlx5e: Take RTNL lock when needed before calling xdp_set_features() - net/mlx5e: TC, Fix internal port memory leak - net/mlx5: DR, Fix wrong allocation of modify hdr pattern - net/mlx5: Allow 0 for total host VFs - net/mlx5e: Unoffload post act rule when handling FIB events - net/mlx5: LAG, Check correct bucket when modifying LAG - net/mlx5: Skip clock update work when device is in error state - net/mlx5: Reload auxiliary devices in pci error handlers - ibmvnic: Enforce stronger sanity checks on login response - ibmvnic: Unmap DMA login rsp buffer on send login fail - ibmvnic: Handle DMA unmapping of login buffs in release functions - ibmvnic: Do partial reset on login failure - ibmvnic: Ensure login failure recovery is safe from other resets - gpio: ws16c48: Fix off-by-one error in WS16C48 resource region extent - gpio: sim: mark the GPIO chip as a one that can sleep - btrfs: wait for actual caching progress during allocation - btrfs: don't stop integrity writeback too early - btrfs: don't wait for writeback on clean pages in extent_write_cache_pages - btrfs: properly clear end of the unreserved range in cow_file_range - btrfs: exit gracefully if reloc roots don't match - btrfs: reject invalid reloc tree root keys with stack dump - btrfs: set cache_block_group_error if we find an error - scsi: core: Fix legacy /proc parsing buffer overflow - [x86] scsi: storvsc: Fix handling of virtual Fibre Channel timeouts - scsi: ufs: renesas: Fix private allocation - scsi: 53c700: Check that command slot is not NULL - scsi: snic: Fix possible memory leak if device_add() fails - scsi: core: Fix possible memory leak if device_add() fails - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() - scsi: qedi: Fix firmware halt over suspend and resume - scsi: qedf: Fix firmware halt over suspend and resume - [x86] platform/x86: lenovo-ymc: Only bind on machines with a convertible DMI chassis-type - platform: mellanox: Change register offset addresses - platform: mellanox: mlx-platform: Fix signals polarity and latch mask - platform: mellanox: mlx-platform: Modify graceful shutdown callback and power down mask - platform: mellanox: Fix order in exit flow - [x86] platform/x86: serial-multi-instantiate: Auto detect IRQ resource for CSC3551 - ACPI: scan: Create platform device for CS35L56 - [alpha] remove __init annotation from exported page_is_ram() . [ Vincent Blut ] * [x86] drivers/platform/x86/intel/int3472: Enable INTEL_SKL_INT3472 as module (Closes: #1038385) . [ Salvatore Bonaccorso ] * Bump ABI to 3 * [rt] Drop "posix-timers: Ensure timer ID search-loop limit is valid" (applied upstream) * [rt] Update to 6.4.6-rt8 * [rt] Drop "locking/rtmutex: Fix task->pi_waiters integrity" (applied upstream) * [x86] retpoline: Don't clobber RFLAGS during srso_safe_ret() (Closes: #1043585) Checksums-Sha1: ba55e3fa7b8d45da4c50f9ee29ba38af3a536751 7359 linux-signed-arm64_6.4.11+1.dsc eb4cd189120c7cb5ec45e460eefda713cb1a1dfc 2853620 linux-signed-arm64_6.4.11+1.tar.xz Checksums-Sha256: a9485a4c36af271467d9635cd479f404a9f1cc24404c8d84b7439025dd6e3847 7359 linux-signed-arm64_6.4.11+1.dsc 088350f21f54c8870b7e2b0034725463cd476ffc8cb22b77f769e78bbfa27285 2853620 linux-signed-arm64_6.4.11+1.tar.xz Files: 0eea7bbb01b0f5a44b0e7b673d29ce3c 7359 kernel optional linux-signed-arm64_6.4.11+1.dsc 1a6688688a3b95413e78c537e9d81b27 2853620 kernel optional linux-signed-arm64_6.4.11+1.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfKFfvHEI+gkU+E+di0FRiLdONzYFAmTgk7oACgkQi0FRiLdO Nza2/Q/+N5WI2EyeTz++hhpNqcbgQerrN4bbjFtH1O5EW/HbohP4QDqhKZslq69a i6rTVS4sjxdAAjNrPXvT0dW9sBgDBVd7NleZeejgFB2T1GykI/QfqjVxt2cFv4xy x/KtSeQtoia3CyaGosGwEEGvObSTY1H40o4BOUaq6lmxYBB2dxv+cNNiJBS54qXg SQYansZGM5kp8rDHljdKJenL3TVH5YHWpeiesqaLi1xcsZUi0xEl6HpLq9GNacuW 0aA987YFU1QG5rR43SpHLJssieqxmQ8TRrOkLGo/Z5JOPqNdKLlunB1kMOuouagy GB2WEwQ3taBtR8bmoUSjkG3m9/Yctz2mDD6r280wt7kaoTS6+MLho3OXcjBgiZQ0 UkKfm/V1whT3pyHq3KM+WtHWAZ0VFZ9H2QLFJ7mT6sg76ENnx3VZiJEsBtCyxMr/ Kf1U8kqr5BQXJKjcbk6ffy6pbFJxvlSJydlWREAs+oKmVaM0BUEz7z34qtc94Xcm FVNy94N9KKN5fXPgQVJmGoOGjHE6RSMbrkXKm0r6L8kzhQ3kVVDZfUfEufXy3o8e wOWmYbS/Lz+uMVPLiuhD2OZaFD9cKHu0DyW53Pr/NqgdM36547ZOI0poa/nyKBYF MHtzI5R2vRrnmx7ucV6HCfIcDWQjr12TcKKowEKFGhEw95JWE14= =07z6 -----END PGP SIGNATURE-----