-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 07 Sep 2023 09:39:52 +0200
Source: linux-signed-arm64
Architecture: source
Version: 6.1.52+1
Distribution: bookworm-security
Urgency: high
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
linux-signed-arm64 (6.1.52+1) bookworm-security; urgency=high
.
* Sign kernel from linux 6.1.52-1
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.39
- fs: pipe: reveal missing function protoypes
- block: Fix the type of the second bdev_op_is_zoned_write() argument
- erofs: clean up cached I/O strategies
- erofs: avoid tagged pointers to mark sync decompression
- erofs: remove tagged pointer helpers
- erofs: move zdata.h into zdata.c
- erofs: kill hooked chains to avoid loops on deduplicated compressed images
- [x86] resctrl: Only show tasks' pid in current pid namespace
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- [x86] sev: Fix calculation of end address based on number of pages
- virt: sevguest: Add CONFIG_CRYPTO dependency
- blk-mq: fix potential io hang by wrong 'wake_batch'
- lockd: drop inappropriate svc_get() from locked_get()
- nvme-core: fix memory leak in dhchap_secret_store
- nvme-core: fix memory leak in dhchap_ctrl_secret
- nvme-core: add missing fault-injection cleanup
- nvme-core: fix dev_pm_qos memleak
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- md/raid10: fix overflow of md/safe_mode_delay
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid1-10: factor out a helper to add bio to plug
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: submit write io directly if bitmap is not enabled
- block: fix blktrace debugfs entries leakage
- irqchip/stm32-exti: Fix warning on initialized field overwritten
- irqchip/jcore-aic: Fix missing allocation of IRQ descriptors
- svcrdma: Prevent page release when nothing was received
- erofs: simplify iloc()
- erofs: fix compact 4B support for 16k block size
- posix-timers: Prevent RT livelock in itimer_delete()
- tick/rcu: Fix bogus ratelimit condition
- tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode().
- clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe
- PM: domains: fix integer overflow issues in genpd_parse_state()
- perf/arm-cmn: Fix DTC reset
- [x86] mm: Allow guest.enc_status_change_prepare() to fail
- [x86] tdx: Fix race between set_memory_encrypted() and
load_unaligned_zeropad()
- drivers/perf: hisi: Don't migrate perf to the CPU going to teardown
- powercap: RAPL: Fix CONFIG_IOSF_MBI dependency
- PM: domains: Move the verification of in-params from genpd_add_device()
- cpufreq: intel_pstate: Fix energy_performance_preference for passive
- thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe()
- rcu: Make rcu_cpu_starting() rely on interrupts being disabled
- rcu-tasks: Stop rcu_tasks_invoke_cbs() from using never-onlined CPUs
- rcutorture: Correct name of use_softirq module parameter
- rcuscale: Move shutdown from wait_event() to wait_event_idle()
- rcu/rcuscale: Move rcu_scale_*() after kfree_scale_cleanup()
- rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale
- perf/ibs: Fix interface via core pmu events
- [x86] mm: Fix __swp_entry_to_pte() for Xen PV guests
- locking/atomic: arm: fix sync ops
- evm: Complete description of evm_inode_setattr()
- pstore/ram: Add check for kstrdup
- igc: Enable and fix RX hash usage by netstack
- wifi: ath9k: fix AR9003 mac hardware hang check register offset
calculation
- wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx
- spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG
- wifi: wilc1000: fix for absent RSN capabilities WFA testcase
- wifi: mwifiex: Fix the size of a memory allocation in
mwifiex_ret_802_11_scan()
- sctp: add bpf_bypass_getsockopt proto callback
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- spi: dw: Round of n_bytes to power of 2
- nfc: llcp: fix possible use of uninitialized variable in
nfc_llcp_send_connect()
- bpftool: JIT limited misreported as negative value on aarch64
- bpf: Remove bpf trampoline selector
- bpf: Fix memleak due to fentry attach failure
- regulator: core: Fix more error checking for debugfs_create_dir()
- regulator: core: Streamline debugfs operations
- wifi: orinoco: Fix an error handling path in spectrum_cs_probe()
- wifi: orinoco: Fix an error handling path in orinoco_cs_probe()
- wifi: atmel: Fix an error handling path in atmel_probe()
- wifi: wl3501_cs: Fix an error handling path in wl3501_probe()
- wifi: ray_cs: Fix an error handling path in ray_probe()
- wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
- wifi: ath10k: Trigger STA disconnect after reconfig complete on hardware
restart
- wifi: mac80211: recalc min chandef for new STA links
- wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled
- wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown
- ice: handle extts in the miscellaneous interrupt thread
- watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct
config
- watchdog/perf: more properly prevent false positives with turbo modes
- kexec: fix a memory leak in crash_shrink_memory()
- mmc: mediatek: Avoid ugly error message when SDIO wakeup IRQ isn't used
- memstick r592: make memstick_debug_get_tpc_name() static
- wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key()
- wifi: mac80211: Fix permissions for valid_links debugfs entry
- rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO
- wifi: ath11k: Add missing check for ioremap
- wifi: iwlwifi: pull from TXQs with softirqs disabled
- wifi: iwlwifi: pcie: fix NULL pointer dereference in
iwl_pcie_irq_rx_msix_handler()
- wifi: mac80211: Remove "Missing iftype sband data/EHT cap" spam
- wifi: cfg80211: rewrite merging of inherited elements
- wifi: cfg80211: drop incorrect nontransmitted BSS update code
- wifi: cfg80211: fix regulatory disconnect with OCB/NAN
- wifi: cfg80211/mac80211: Fix ML element common size calculation
- wifi: ieee80211: Fix the common size calculation for reconfiguration ML
- mmc: Add MMC_QUIRK_BROKEN_SD_CACHE for Kingston Canvas Go Plus from
11/2019
- wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection
- wifi: ath9k: convert msecs to jiffies where needed
- bpf: Factor out socket lookup functions for the TC hookpoint.
- bpf: Call __bpf_sk_lookup()/__bpf_skc_lookup() directly via TC hookpoint
- bpf: Fix bpf socket lookup from tc/xdp to respect socket VRF bindings
- can: length: fix bitstuffing count
- net: stmmac: fix double serdes powerdown
- netlink: fix potential deadlock in netlink_set_err()
- netlink: do not hard code device address lenth in fdb dumps
- bonding: do not assume skb mac_header is set
- gtp: Fix use-after-free in __gtp_encap_destroy().
- net: axienet: Move reset before 64-bit DMA detection
- ocfs2: Fix use of slab data with sendpage
- sfc: fix crash when reading stats while NIC is resetting
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local (CVE-2023-3863)
- lib/ts_bm: reset initial match offset for every block of text
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just
basic one
- netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return
value.
- ipvlan: Fix return value of ipvlan_queue_xmit()
- netlink: Add __sock_i_ino() for __netlink_diag_dump().
- drm/amd/display: Add logging for display MALL refresh setting
- radeon: avoid double free in ci_dpm_init()
- drm/amd/display: Explicitly specify update type per plane info change
- drm/bridge: it6505: Move a variable assignment behind a null pointer check
in receive_timing_debugfs_show()
- Input: drv260x - sleep between polling GO bit
- drm/bridge: ti-sn65dsi83: Fix enable error path
- drm/bridge: tc358768: always enable HS video mode
- drm/bridge: tc358768: fix PLL parameters computation
- drm/bridge: tc358768: fix PLL target frequency
- drm/bridge: tc358768: fix TCLK_ZEROCNT computation
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation
- drm/bridge: tc358768: fix THS_ZEROCNT computation
- drm/bridge: tc358768: fix TXTAGOCNT computation
- drm/bridge: tc358768: fix THS_TRAILCNT computation
- drm/vram-helper: fix function names in vram helper doc
- mm: call arch_swap_restore() from do_swap_page()
- clk: vc5: Use `clamp()` to restrict PLL range
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- clk: vc5: Fix .driver_data content in i2c_device_id
- clk: vc7: Fix .driver_data content in i2c_device_id
- clk: rs9: Fix .driver_data content in i2c_device_id
- Input: adxl34x - do not hardcode interrupt trigger type
- drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks`
- drm/panel: sharp-ls043t1le01: adjust mode settings
- driver: soc: xilinx: use _safe loop iterator to avoid a use after free
- ASoC: Intel: sof_sdw: remove SOF_SDW_TGL_HDMI for MeteorLake devices
- drm/vkms: isolate pixel conversion functionality
- drm: Add fixed-point helper to get rounded integer values
- drm/vkms: Fix RGB565 pixel conversion
- ARM: dts: stm32: Move ethernet MAC EEPROM from SoM to carrier boards
- bus: ti-sysc: Fix dispc quirk masking bool variables
- [arm64:]dts: microchip: sparx5: do not use PSCI on reference boards
- drm/bridge: tc358767: Switch to devm MIPI-DSI helpers
- clk: imx: scu: use _safe list iterator to avoid a use after free
- hwmon: (f71882fg) prevent possible division by zero
- RDMA/bnxt_re: Disable/kill tasklet only if it is enabled
- RDMA/bnxt_re: Fix to remove unnecessary return labels
- RDMA/bnxt_re: Use unique names while registering interrupts
- RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid
- RDMA/bnxt_re: Fix to remove an unnecessary log
- drm/msm/dsi: don't allow enabling 14nm VCO with unprogrammed rate
- drm/msm/disp/dpu: get timing engine status from intf status register
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
- iommu/virtio: Detach domain on endpoint release
- iommu/virtio: Return size mapped for a detached domain
- clk: renesas: rzg2l: Fix CPG_SIPLL5_CLK1 register write
- ARM: dts: gta04: Move model property out of pinctrl node
- drm/bridge: anx7625: Convert to i2c's .probe_new()
- drm/bridge: anx7625: Prevent endless probe loop
- ARM: dts: qcom: msm8974: do not use underscore in node name (again)
- [arm64] dts: qcom: msm8916: correct camss unit address
- [arm64] dts: qcom: msm8916: correct MMC unit address
- [arm64] dts: qcom: msm8994: correct SPMI unit address
- [arm64] dts: qcom: msm8996: correct camss unit address
- [arm64] dts: qcom: sdm630: correct camss unit address
- [arm64] dts: qcom: sdm845: correct camss unit address
- [arm64] dts: qcom: sm8350: Add GPI DMA compatible fallback
- [arm64] dts: qcom: sm8350: correct DMA controller unit address
- [arm64] dts: qcom: sdm845-polaris: add missing touchscreen child node reg
- [arm64] dts: qcom: apq8016-sbc: Fix regulator constraints
- [arm64] dts: qcom: apq8016-sbc: Fix 1.8V power rail on LS expansion
- drm/bridge: Introduce pre_enable_prev_first to alter bridge init order
- drm/bridge: ti-sn65dsi83: Fix enable/disable flow to meet spec
- drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H
- ARM: ep93xx: fix missing-prototype warnings
- ARM: omap2: fix missing tick_broadcast() prototype
- [arm64] dts: qcom: pm7250b: add missing spmi-vadc include
- [arm64] dts: qcom: apq8096: fix fixed regulator name property
- [arm64] dts: mediatek: mt8183: Add mediatek,broken-save-restore-fw to
kukui
- ARM: dts: stm32: Shorten the AV96 HDMI sound card name
- memory: brcmstb_dpfe: fix testing array offset after use
- ARM: dts: qcom: apq8074-dragonboard: Set DMA as remotely controlled
- ASoC: es8316: Increment max value for ALC Capture Target Volume control
- ASoC: es8316: Do not set rate constraints for unsupported MCLKs
- ARM: dts: meson8: correct uart_B and uart_C clock references
- soc/fsl/qe: fix usb.c build errors
- RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes
- IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate
- RDMA/hns: Fix hns_roce_table_get return value
- ARM: dts: iwg20d-q7-common: Fix backlight pwm specifier
- drm/msm/dpu: set DSC flush bit correctly at MDP CTL flush register
- fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe()
- [arm64] dts: ti: k3-j7200: Fix physical address of pin
- Input: pm8941-powerkey - fix debounce on gen2+ PMICs
- ARM: dts: stm32: Fix audio routing on STM32MP15xx DHCOM PDK2
- ARM: dts: stm32: fix i2s endpoint format property for stm32mp15xx-dkx
- hwmon: (gsc-hwmon) fix fan pwm temperature scaling
- hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272
- ARM: dts: BCM5301X: fix duplex-full => full-duplex
- clk: Export clk_hw_forward_rate_request()
- drm/amd/display: Fix a test CalculatePrefetchSchedule()
- drm/amd/display: Fix a test dml32_rq_dlg_get_rq_reg()
- drm/amdkfd: Fix potential deallocation of previously deallocated memory.
- soc: mediatek: SVS: Fix MT8192 GPU node name
- drm/amd/display: Fix artifacting on eDP panels when engaging freesync
video mode
- drm/radeon: fix possible division-by-zero errors
- HID: uclogic: Modular KUnit tests should not depend on KUNIT=y
- RDMA/rxe: Add ibdev_dbg macros for rxe
- RDMA/rxe: Replace pr_xxx by rxe_dbg_xxx in rxe_mw.c
- RDMA/rxe: Fix access checks in rxe_check_bind_mw
- amdgpu: validate offset_in_bo of drm_amdgpu_gem_va
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
- RDMA/bnxt_re: wraparound mbox producer index
- RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context
- clk: imx: clk-imxrt1050: fix memory leak in imxrt1050_clocks_probe
- clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe
- clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe
- clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe()
- [arm64] dts: qcom: sdm845: Flush RSC sleep & wake votes
- [arm64] dts: qcom: sm8250-edo: Panel framebuffer is 2.5k instead of 4k
- clk: bcm: rpi: Fix off by one in raspberrypi_discover_clocks()
- clk: clocking-wizard: Fix Oops in clk_wzrd_register_divider()
- clk: tegra: tegra124-emc: Fix potential memory leak
- ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer
- drm/msm/dpu: do not enable color-management if DSPPs are not available
- drm/msm/dpu: Fix slice_last_group_size calculation
- drm/msm/dsi: Use DSC slice(s) packet size to compute word count
- drm/msm/dsi: Flip greater-than check for slice_count and slice_per_intf
- drm/msm/dsi: Remove incorrect references to slice_count
- drm/msm/dp: Free resources after unregistering them
- [arm64] dts: mediatek: Add cpufreq nodes for MT8192
- [arm64] dts: mediatek: mt8192: Fix CPUs capacity-dmips-mhz
- drm/amdgpu: Fix memcpy() in sienna_cichlid_append_powerplay_table
function.
- drm/amdgpu: Fix usage of UMC fill record in RAS
- drm/msm/dpu: correct MERGE_3D length
- clk: vc5: check memory returned by kasprintf()
- clk: cdce925: check return value of kasprintf()
- clk: si5341: return error if one synth clock registration fails
- clk: si5341: check return value of {devm_}kasprintf()
- clk: si5341: free unused memory on probe failure
- clk: keystone: sci-clk: check return value of kasprintf()
- clk: ti: clkctrl: check return value of kasprintf()
- drivers: meson: secure-pwrc: always enable DMA domain
- ovl: update of dentry revalidate flags after copy up
- ASoC: imx-audmix: check return value of devm_kasprintf()
- clk: Fix memory leak in devm_clk_notifier_register()
- ARM: dts: lan966x: kontron-d10: fix board reset
- ARM: dts: lan966x: kontron-d10: fix SPI CS
- ASoC: amd: acp: clear pdm dma interrupt mask
- PCI: cadence: Fix Gen2 Link Retraining process
- PCI: vmd: Reset VMD config register between soft reboots
- scsi: qedf: Fix NULL dereference in error handling
- pinctrl: bcm2835: Handle gpiochip_add_pin_range() errors
- [x86] platform/x86: lenovo-yogabook: Fix work race on remove()
- [x86] platform/x86: lenovo-yogabook: Reprobe devices on remove()
- [x86] platform/x86: lenovo-yogabook: Set default keyboard backligh
brightness on probe()
- PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free
- scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe()
- PCI: pciehp: Cancel bringup sequence if card is not present
- PCI: ftpci100: Release the clock resources
- pinctrl: sunplus: Add check for kmalloc
- PCI: Add pci_clear_master() stub for non-CONFIG_PCI
- scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on
nlp_state
- perf bench: Add missing setlocale() call to allow usage of %'d style
formatting
- pinctrl: cherryview: Return correct value if pin in push-pull mode
- [x86] platform/x86: think-lmi: mutex protection around multiple WMI calls
- [x86] platform/x86: think-lmi: Correct System password interface
- [x86] platform/x86: think-lmi: Correct NVME password handling
- pinctrl:sunplus: Add check for kmalloc
- pinctrl: npcm7xx: Add missing check for ioremap
- kcsan: Don't expect 64 bits atomic builtins from 32 bits architectures
- powerpc/interrupt: Don't read MSR from interrupt_exit_kernel_prepare()
- [powerpc*] signal32: Force inlining of __unsafe_save_user_regs() and
save_tm_user_regs_unsafe()
- perf script: Fix allocation of evsel->priv related to per-event dump files
- [x86] platform/x86: thinkpad_acpi: Fix lkp-tests warnings for platform
profiles
- perf dwarf-aux: Fix off-by-one in die_get_varname()
- [x86] platform/x86/dell/dell-rbtn: Fix resources leaking on error path
- [x86] perf tool x86: Consolidate is_amd check into single function
- [x86] perf tool x86: Fix perf_env memory leak
- [powerpc*] 64s: Fix VAS mm use after free
- pinctrl: microchip-sgpio: check return value of devm_kasprintf()
- pinctrl: at91-pio4: check return value of devm_kasprintf()
- [powerpc*] powernv/sriov: perform null check on iov before dereferencing
iov
- [powerpc*] simplify ppc_save_regs
- [powerpc*] update ppc_save_regs to save current r1 in pt_regs
- PCI: qcom: Remove PCIE20_ prefix from register definitions
- PCI: qcom: Sort and group registers and bitfield definitions
- PCI: qcom: Use lower case for hex
- PCI: qcom: Use DWC helpers for modifying the read-only DBI registers
- PCI: qcom: Disable write access to read only registers for IP v2.9.0
- [powerpc*] book3s64/mm: Fix DirectMap stats in /proc/meminfo
- [powerpc*] mm/dax: Fix the condition when checking if altmap vmemap can
cross-boundary
- PCI: endpoint: Fix Kconfig indent style
- PCI: endpoint: Fix a Kconfig prompt of vNTB driver
- PCI: endpoint: functions/pci-epf-test: Fix dma_chan direction
- PCI: vmd: Fix uninitialized variable usage in vmd_enable_domain()
- vfio/mdev: Move the compat_class initialization to module init
- hwrng: virtio - Fix race on data_avail and actual data
- modpost: remove broken calculation of exception_table_entry size
- crypto: nx - fix build warnings when DEBUG_FS is not enabled
- modpost: fix section mismatch message for R_ARM_ABS32
- modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24}
- crypto: marvell/cesa - Fix type mismatch warning
- crypto: jitter - correct health test during initialization
- modpost: fix off by one in is_executable_section()
- crypto: kpp - Add helper to set reqsize
- crypto: qat - Use helper to set reqsize
- crypto: qat - unmap buffer before free for DH
- crypto: qat - unmap buffers before free for RSA
- NFSv4.2: fix wrong shrinker_id
- NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION
- SMB3: Do not send lease break acknowledgment if all file handles have been
closed
- dax: Fix dax_mapping_release() use after free
- dax: Introduce alloc_dev_dax_id()
- dax/kmem: Pass valid argument to memory_group_register_static
- hwrng: st - keep clock enabled while hwrng is registered
- kbuild: Disable GCOV for *.mod.o
- efi/libstub: Disable PCI DMA before grabbing the EFI memory map
- cifs: prevent use-after-free by freeing the cfile later
- cifs: do all necessary checks for credits within or before locking
- smb: client: fix broken file attrs with nodfs mounts
- ksmbd: avoid field overflow warning
- [arm64] sme: Use STR P to clear FFR context field in streaming SVE mode
- [x86] efi: Make efi_set_virtual_address_map IBT safe
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- USB: serial: option: add LARA-R6 01B PIDs
- usb: dwc3: gadget: Propagate core init errors to UDC during pullup
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
- iio: adc: ad7192: Fix null ad7192_state pointer access
- iio: adc: ad7192: Fix internal/external clock selection
- iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF
- iio: accel: fxls8962af: fixup buffer scan element type
- ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on
EliteBook
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx
- ALSA: jack: Fix mutex call in snd_jack_report()
- ALSA: pcm: Fix potential data race at PCM memory allocation helpers
- block: fix signed int overflow in Amiga partition support
- block: add overflow checks for Amiga partition support
- block: change all __u32 annotations to __be32 in affs_hardblocks.h
- block: increment diskseq on all media change events
- btrfs: fix race when deleting free space root from the dirty cow roots
list
- SUNRPC: Fix UAF in svc_tcp_listen_data_ready()
- w1: w1_therm: fix locking behavior in convert_t
- w1: fix loop in w1_fini()
- dt-bindings: power: reset: qcom-pon: Only allow reboot-mode pre-pmk8350
- f2fs: do not allow to defragment files have FI_COMPRESS_RELEASED
- usb: dwc2: platform: Improve error reporting for problems during .remove()
- usb: dwc2: Fix some error handling paths
- serial: 8250: omap: Fix freeing of resources on failed register
- clk: qcom: mmcc-msm8974: remove oxili_ocmemgx_clk
- clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs
- clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks
- clk: qcom: gcc-qcm2290: Mark RCGs shared where applicable
- media: usb: Check az6007_read() return value
- media: amphion: drop repeated codec data for vc1l format
- media: amphion: drop repeated codec data for vc1g format
- media: amphion: initiate a drain of the capture queue in dynamic
resolution change
- media: videodev2.h: Fix struct v4l2_input tuner index comment
- media: usb: siano: Fix warning due to null work_func_t function pointer
(CVE-2023-4132)
- media: i2c: Correct format propagation for st-mipid02
- media: hi846: fix usage of pm_runtime_get_if_in_use()
- media: mediatek: vcodec: using decoder status instead of core work count
- clk: qcom: reset: support resetting multiple bits
- clk: qcom: ipq6018: fix networking resets
- clk: qcom: dispcc-qcm2290: Fix BI_TCXO_AO handling
- clk: qcom: dispcc-qcm2290: Fix GPLL0_OUT_DIV handling
- clk: qcom: mmcc-msm8974: use clk_rcg2_shared_ops for mdp_clk_src clock
- staging: vchiq_arm: mark vchiq_platform_init() static
- usb: dwc3: qcom: Fix potential memory leak
- usb: gadget: u_serial: Add null pointer check in gserial_suspend
- extcon: Fix kernel doc of property fields to avoid warnings
- extcon: Fix kernel doc of property capability fields to avoid warnings
- usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()
- usb: hide unused usbfs_notify_suspend/resume functions
- usb: misc: eud: Fix eud sysfs path (use 'qcom_eud')
- serial: core: lock port for stop_rx() in uart_suspend_port()
- serial: 8250: lock port for stop_rx() in omap8250_irq()
- serial: core: lock port for start_rx() in uart_resume_port()
- serial: 8250: lock port for UART_IER access in omap8250_irq()
- kernfs: fix missing kernfs_idr_lock to remove an ID from the IDR
- lkdtm: replace ll_rw_block with submit_bh
- i3c: master: svc: fix cpu schedule in spin lock
- coresight: Fix loss of connection info when a module is unloaded
- mfd: rt5033: Drop rt5033-battery sub-device
- media: venus: helpers: Fix ALIGN() of non power of two
- media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var()
- gfs2: Fix duplicate should_fault_in_pages() call
- f2fs: fix potential deadlock due to unpaired node_write lock use
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
(CVE-2023-2898)
- [s390x] KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
- usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove()
- usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe()
- usb: common: usb-conn-gpio: Set last role to unknown before initial
detection
- usb: dwc3-meson-g12a: Fix an error handling path in
dwc3_meson_g12a_probe()
- mfd: wcd934x: Fix an error handling path in wcd934x_slim_probe()
- mfd: intel-lpss: Add missing check for platform_get_resource
- Revert "usb: common: usb-conn-gpio: Set last role to unknown before
initial detection"
- serial: 8250_omap: Use force_suspend and resume for system suspend
- device property: Fix documentation for fwnode_get_next_parent()
- device property: Clarify description of returned value in some functions
- drivers: fwnode: fix fwnode_irq_get[_byname]()
- nvmem: sunplus-ocotp: release otp->clk before return
- nvmem: rmem: Use NVMEM_DEVID_AUTO
- bus: fsl-mc: don't assume child devices are all fsl-mc devices
- mfd: stmfx: Fix error path in stmfx_chip_init
- mfd: stmfx: Nullify stmfx->vdd in case of error
- [s390x] KVM: s390: vsie: fix the length of APCB bitmap
- [s390x] KVM: s390/diag: fix racy access of physical cpu number in diag 9c
handler
- cpufreq: mediatek: correct voltages for MT7622 and MT7623
- misc: fastrpc: check return value of devm_kasprintf()
- clk: qcom: mmcc-msm8974: fix MDSS_GDSC power flags
- hwtracing: hisi_ptt: Fix potential sleep in atomic context
- mfd: stmpe: Only disable the regulators if they are enabled
- phy: tegra: xusb: check return value of devm_kzalloc()
- lib/bitmap: drop optimization of bitmap_{from,to}_arr64
- pwm: imx-tpm: force 'real_period' to be zero in suspend
- pwm: sysfs: Do not apply state to already disabled PWMs
- pwm: ab8500: Fix error code in probe()
- pwm: mtk_disp: Fix the disable flow of disp_pwm
- md/raid10: fix the condition to call bio_end_io_acct()
- rtc: st-lpc: Release some resources in st_rtc_probe() in case of error
- [x86] drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake
times
- [x86] drm/i915/guc/slpc: Apply min softlimit correctly
- f2fs: check return value of freeze_super()
- media: cec: i2c: ch7322: also select REGMAP
- sctp: fix potential deadlock on &net->sctp.addr_wq_lock
- net/sched: act_ipt: add sanity checks on table name and hook locations
- net: add a couple of helpers for iph tot_len
- net/sched: act_ipt: add sanity checks on skb before calling target
- spi: spi-geni-qcom: enable SPI_CONTROLLER_MUST_TX for GPI DMA mode
- net: mscc: ocelot: don't report that RX timestamping is enabled by default
- net: mscc: ocelot: don't keep PTP configuration of all ports in single
structure
- net: dsa: felix: don't drop PTP frames with tag_8021q when RX timestamping
is disabled
- net: dsa: sja1105: always enable the INCL_SRCPT option
- net: dsa: tag_sja1105: always prefer source port information from
INCL_SRCPT
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- Bluetooth: fix invalid-bdaddr quirk for non-persistent setup
- Bluetooth: ISO: use hci_sync for setting CIG parameters
- Bluetooth: MGMT: add CIS feature bits to controller information
- Bluetooth: MGMT: Use BIT macro when defining bitfields
- Bluetooth: MGMT: Fix marking SCAN_RSP as not connectable
- ibmvnic: Do not reset dql stats on NON_FATAL err
- net: dsa: vsc73xx: fix MTU configuration
- mlxsw: minimal: fix potential memory leak in mlxsw_m_linecards_init
- spi: bcm-qspi: return error if neither hif_mspi nor mspi is available
- drm/amdgpu: fix number of fence calculations
- drm/amd: Don't try to enable secure display TA multiple times
- mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
- f2fs: fix error path handling in truncate_dnode()
- octeontx2-af: Fix mapping for NIX block from CGX connection
- octeontx2-af: Add validation before accessing cgx and lmac
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- [powerpc*] allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y
- [powerpc*] dts: turris1x.dts: Fix PCIe MEM size for pci2 node
- net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode
- net: dsa: tag_sja1105: fix source port decoding in vlan_filtering=0 bridge
mode
- net: fix net_dev_start_xmit trace event vs skb_transport_offset()
- tcp: annotate data races in __tcp_oow_rate_limited()
- bpf, btf: Warn but return no error for NULL btf from
__register_btf_kfunc_id_set()
- xsk: Honor SO_BINDTODEVICE on bind
- net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX
- fanotify: disallow mount/sb marks on kernel internal pseudo fs
- pptp: Fix fib lookup calls.
- net: dsa: tag_sja1105: fix MAC DA patching from meta frames
- net: dsa: sja1105: always enable the send_meta options
- octeontx-af: fix hardware timestamp configuration
- afs: Fix accidental truncation when storing data
- [s390x] qeth: Fix vipa deletion
- apparmor: fix missing error check for rhashtable_insert_fast
- i2c: xiic: Don't try to handle more interrupt events after error
- dm: fix undue/missing spaces
- dm: avoid split of quoted strings where possible
- dm ioctl: have constant on the right side of the test
- dm ioctl: Avoid double-fetch of version
- extcon: usbc-tusb320: Convert to i2c's .probe_new()
- extcon: usbc-tusb320: Unregister typec port on driver removal
- btrfs: do not BUG_ON() on tree mod log failure at balance_level()
- i2c: qup: Add missing unwind goto in qup_i2c_probe()
- irqchip/loongson-pch-pic: Fix potential incorrect hwirq assignment
- NFSD: add encoding of op_recall flag for write delegation
- irqchip/loongson-pch-pic: Fix initialization of HT vector register
- io_uring: wait interruptibly for request completions on exit
- mmc: core: disable TRIM on Kingston EMMC04G-M627
- mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M
- mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS
- mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is
used.
- wifi: cfg80211: fix regulatory disconnect for non-MLO
- wifi: ath10k: Serialize wake_tx_queue ops
- wifi: mt76: mt7921e: fix init command fail with enabled device
- bcache: fixup btree_cache_wait list damage
- bcache: Remove unnecessary NULL point check in node allocations
- bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent
- watch_queue: prevent dangling pipe pointer
- integrity: Fix possible multiple allocation in integrity_inode_get()
- autofs: use flexible array in ioctl structure
- mm/damon/ops-common: atomically test and clear young on ptes and pmds
- shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs
- jffs2: reduce stack usage in jffs2_build_xattr_subsystem()
- fs: avoid empty option when generating legacy mount string
- ext4: Remove ext4 locking of moved directory
- Revert "f2fs: fix potential corruption when moving a directory"
- fs: Establish locking order for unrelated directories
- fs: Lock moved directories
- i2c: nvidia-gpu: Add ACPI property to align with device-tree
- i2c: nvidia-gpu: Remove ccgx,firmware-build property
- usb: typec: ucsi: Mark dGPUs as DEVICE scope
- ipvs: increase ip_vs_conn_tab_bits range for 64BIT
- btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profile
- btrfs: delete unused BGs while reclaiming BGs
- btrfs: bail out reclaim process if filesystem is read-only
- btrfs: add block-group tree to lockdep classes
- btrfs: reinsert BGs failed to reclaim
- btrfs: fix race when deleting quota root from the dirty cow roots list
- btrfs: fix extent buffer leak after tree mod log failure at split_node()
- btrfs: do not BUG_ON() on tree mod log failure at __btrfs_cow_block()
- ASoC: mediatek: mt8173: Fix irq error path
- ASoC: mediatek: mt8173: Fix snd_soc_component_initialize error path
- regulator: tps65219: Fix matching interrupts for their regulators
- ARM: dts: qcom: ipq4019: fix broken NAND controller properties override
- ARM: orion5x: fix d2net gpio initialization
- leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename
- blktrace: use inline function for blk_trace_remove() while blktrace is
disabled
- fs: no need to check source
- xfs: explicitly specify cpu when forcing inodegc delayed work to run
immediately
- xfs: check that per-cpu inodegc workers actually run on that cpu
- xfs: disable reaping in fscounters scrub
- xfs: fix xfs_inodegc_stop racing with mod_delayed_work
- mm/mmap: Fix extra maple tree write
- [x86] drm/i915: Fix TypeC mode initialization during system resume
- [x86] drm/i915/tc: Fix TC port link ref init for DP MST during HW readout
- [x86] drm/i915/tc: Fix system resume MST mode restore for DP-alt sinks
- mtd: parsers: refer to ARCH_BCMBCA instead of ARCH_BCM4908
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
- wireguard: queueing: use saner cpu selection wrapping
- wireguard: netlink: send staged packets when setting initial private key
- tty: serial: fsl_lpuart: add earlycon for imx8ulp platform
- block/partition: fix signedness issue for Amiga partitions
- io_uring: Use io_schedule* in cqring wait
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.40
- HID: amd_sfh: Rename the float32 variable
- HID: amd_sfh: Fix for shift-out-of-bounds
- net: lan743x: Don't sleep in atomic context
- workqueue: clean up WORK_* constant types, clarify masking
- ksmbd: add missing compound request handing in some commands
- ksmbd: fix out of bounds read in smb2_sess_setup
- drm/panel: simple: Add connector_type for innolux_at043tn24
- drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime
- swiotlb: always set the number of areas before allocating the pool
- swiotlb: reduce the swiotlb buffer size on allocation failure
- swiotlb: reduce the number of areas to match actual memory pool size
- drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags
- ice: Fix max_rate check while configuring TX rate limits
- igc: Remove delay during TX ring configuration
- net/mlx5e: fix double free in mlx5e_destroy_flow_table
- net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create
- net/mlx5e: fix memory leak in mlx5e_ptp_open
- net/mlx5e: Check for NOT_READY flag state after locking
- igc: set TP bit in 'supported' and 'advertising' fields of
ethtool_link_ksettings
- igc: Handle PPS start time programming for past time values
- blk-crypto: use dynamic lock class for blk_crypto_profile::lock
- scsi: qla2xxx: Fix error code in qla2x00_start_sp()
- scsi: ufs: ufs-mediatek: Add dependency for RESET_CONTROLLER
- bpf: Fix max stack depth check for async callbacks
- net: mvneta: fix txq_map in case of txq_number==1
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
(CVE-2023-3776)
- gve: Set default duplex configuration to full
- octeontx2-af: Promisc enable/disable through mbox
- octeontx2-af: Move validation of ptp pointer before its usage
- ionic: remove WARN_ON to prevent panic_on_warn
- net: bgmac: postpone turning IRQs off to avoid SoC hangs
- net: prevent skb corruption on frag list segmentation
- icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev().
- udp6: fix udp6_ehashfn() typo
- ntb: idt: Fix error handling in idt_pci_driver_init()
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
- NTB: ntb_transport: fix possible memory leak while device_register() fails
- NTB: ntb_tool: Add check for devm_kcalloc
- ipv6/addrconf: fix a potential refcount underflow for idev
- net: dsa: qca8k: Add check for skb_copy
- [x86] platform/x86: wmi: Break possible infinite loop when parsing GUID
- kernel/trace: Fix cleanup logic of enable_trace_eprobe
- igc: Fix launchtime before start of cycle
- igc: Fix inserting of empty frame for launchtime
- nvme: fix the NVME_ID_NS_NVM_STS_MASK definition
- [x86] drm/i915: Don't preserve dpll_hw_state for slave crtc in Bigjoiner
- [x86] drm/i915: Fix one wrong caching mode enum usage
- octeontx2-pf: Add additional check for MCAM rules
- erofs: avoid useless loops in z_erofs_pcluster_readmore() when reading
beyond EOF
- erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond
EOF
- erofs: fix fsdax unavailability for chunk-based regular files
- wifi: airo: avoid uninitialized warning in airo_get_rate()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- net/sched: flower: Ensure both minimum and maximum ports are specified
- riscv: mm: fix truncation warning on RV32
- netdevsim: fix uninitialized data in nsim_dev_trap_fa_cookie_write()
- net/sched: make psched_mtu() RTNL-less safe
- wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set()
- net/sched: sch_qfq: refactor parsing of netlink parameters
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
(CVE-2023-3611)
- nvme-pci: fix DMA direction of unmapping integrity data
- fs/ntfs3: Check fields while reading (CVE-2022-48502)
- ovl: let helper ovl_i_path_real() return the realinode
- ovl: fix null pointer dereference in ovl_get_acl_rcu()
- cifs: fix session state check in smb2_find_smb_ses
- drm/client: Send hotplug event after registering a client
- drm/amdgpu/sdma4: set align mask to 255
- drm/amd/pm: revise the ASPM settings for thunderbolt attached scenario
- drm/amdgpu: add the fan abnormal detection feature
- drm/amdgpu: Fix minmax warning
- drm/amd/pm: add abnormal fan detection for smu 13.0.0
- f2fs: fix the wrong condition to determine atomic context
- f2fs: fix deadlock in i_xattr_sem and inode page lock
- pinctrl: amd: Add Z-state wake control bits
- pinctrl: amd: Adjust debugfs output
- pinctrl: amd: Add fields for interrupt status and wake status
- pinctrl: amd: Detect internal GPIO0 debounce handling
- pinctrl: amd: Fix mistake in handling clearing pins at startup
- pinctrl: amd: Detect and mask spurious interrupts
- pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts on probe"
- pinctrl: amd: Only use special debounce behavior for GPIO 0
- pinctrl: amd: Use amd_pinconf_set() for all config options
- pinctrl: amd: Drop pull up select configuration
- pinctrl: amd: Unify debounce handling into amd_pinconf_set()
- tpm: Do not remap from ACPI resources again for Pluton TPM
- tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
- tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
- tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
- tpm: return false from tpm_amd_is_rng_defective on non-x86 platforms
- mtd: rawnand: meson: fix unaligned DMA buffers handling
- net: bcmgenet: Ensure MDIO unregistration has clocks enabled
- net: phy: dp83td510: fix kernel stall during netboot in DP83TD510E PHY
driver
- tracing/user_events: Fix incorrect return value for writing operation when
events are disabled
- [powerpc*] Fail build if using recordmcount with binutils v2.37
- misc: fastrpc: Create fastrpc scalar with correct buffer count
- [powerpc*] security: Fix Speculation_Store_Bypass reporting on Power10
- [powerpc*] 64s: Fix native_hpte_remove() to be irq-safe
- [mips*] Loongson: Fix cpu_probe_loongson() again
- [mips*] KVM: Fix NULL pointer dereference
- ext4: Fix reusing stale buffer heads from last failed mounting
- ext4: fix wrong unit use in ext4_mb_clear_bb
- ext4: get block from bh in ext4_free_blocks for fast commit replay
- ext4: fix wrong unit use in ext4_mb_new_blocks
- ext4: fix to check return value of freeze_bdev() in ext4_shutdown()
- ext4: turn quotas off if mount failed after enabling quotas
- ext4: only update i_reserved_data_blocks on successful block allocation
- fs: dlm: revert check required context while close
- soc: qcom: mdt_loader: Fix unconditional call to scm_pas_mem_setup
- ext2/dax: Fix ext2_setsize when len is page aligned
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- hwrng: imx-rngc - fix the timeout for init and self check
- dm integrity: reduce vmalloc space footprint on 32-bit architectures
- scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O
- [s390x] zcrypt: do not retry administrative requests
- PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold
- PCI: Release resource invalidated by coalescing
- PCI: Add function 1 DMA alias quirk for Marvell 88SE9235
- PCI: qcom: Disable write access to read only registers for IP v2.3.3
- PCI: epf-test: Fix DMA transfer completion initialization
- PCI: epf-test: Fix DMA transfer completion detection
- PCI: rockchip: Assert PCI Configuration Enable bit after probe
- PCI: rockchip: Write PCI Device ID to correct register
- PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked
- PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core
- PCI: rockchip: Use u32 variable to access 32-bit registers
- PCI: rockchip: Set address alignment for endpoint mode
- misc: pci_endpoint_test: Free IRQs before removing the device
- misc: pci_endpoint_test: Re-init completion for every test
- mfd: pm8008: Fix module autoloading
- md/raid0: add discard support for the 'original' layout
- dm init: add dm-mod.waitfor to wait for asynchronously probed block
devices
- fs: dlm: return positive pid value for F_GETLK
- fs: dlm: fix cleanup pending ops when interrupted
- fs: dlm: interrupt posix locks only when process is killed
- fs: dlm: make F_SETLK use unkillable wait_event
- fs: dlm: fix mismatch of plock results from userspace
- scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by
lpfc_nlp_not_used()
- drm/atomic: Allow vblank-enabled + self-refresh "disable"
- drm/rockchip: vop: Leave vblank enabled in self-refresh
- drm/amd/display: fix seamless odm transitions
- drm/amd/display: edp do not add non-edid timings
- drm/amd/display: Remove Phantom Pipe Check When Calculating K1 and K2
- drm/amd/display: disable seamless boot if force_odm_combine is enabled
- drm/amdgpu: fix clearing mappings for BOs that are always valid in VM
- drm/amd: Disable PSR-SU on Parade 0803 TCON
- drm/amd/display: add a NULL pointer check
- drm/amd/display: Correct `DMUB_FW_VERSION` macro
- drm/amd/display: Add monitor specific edid quirk
- drm/amdgpu: avoid restore process run into dead loop.
- drm/ttm: Don't leak a resource on swapout move error
- serial: atmel: don't enable IRQs prematurely
- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in
case of error
- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk()
when iterating clk
- tty: serial: imx: fix rs485 rx after tx
- firmware: stratix10-svc: Fix a potential resource leak in
svc_create_memory_pool()
- libceph: harden msgr2.1 frame segment length checks
- ceph: add a dedicated private data for netfs rreq
- ceph: fix blindly expanding the readahead windows
- ceph: don't let check_caps skip sending responses for revoke msgs
- xhci: Fix resume issue of some ZHAOXIN hosts
- xhci: Fix TRB prefetch issue of ZHAOXIN hosts
- xhci: Show ZHAOXIN xHCI root hub speed correctly
- meson saradc: fix clock divider mask length
- opp: Fix use-after-free in lazy_opp_tables after probe deferral
- soundwire: qcom: fix storing port config out-of-bounds
- Revert "8250: add support for ASIX devices with a FIFO bug"
- bus: ixp4xx: fix IXP4XX_EXP_T1_MASK
- [s390x] decompressor: fix misaligned symbol build error
- dm: verity-loadpin: Add NULL pointer check for 'bdev' parameter
- tracing/histograms: Add histograms to hist_vars if they have referenced
variables
- tracing: Fix memory leak of iter->temp when reading trace_pipe
- nvme: don't reject probe due to duplicate IDs for single-ported PCIe
devices
- perf: RISC-V: Remove PERF_HES_STOPPED flag checking in riscv_pmu_start()
- regmap-irq: Fix out-of-bounds access when allocating config buffers
- net: ena: fix shift-out-of-bounds in exponential backoff
- ring-buffer: Fix deadloop issue on reading trace_pipe
- ftrace: Fix possible warning on checking all pages used in
ftrace_process_locs()
- drm/amd/pm: share the code around SMU13 pcie parameters update
- drm/amd/pm: conditionally disable pcie lane/speed switching for SMU13
- cifs: if deferred close is disabled then close files immediately
- [x86] perf/x86: Fix lockdep warning in for_each_sibling_event() on SPR
- PM: QoS: Restore support for default value on frequency QoS
- pwm: meson: modify and simplify calculation in meson_pwm_get_state
- pwm: meson: fix handling of period/duty if greater than UINT_MAX
- fprobe: Release rethook after the ftrace_ops is unregistered
- fprobe: Ensure running fprobe_exit_handler() finished before calling
rethook_free()
- tracing: Fix null pointer dereference in tracing_err_log_open()
- tracing/probes: Fix not to count error code to total length
- tracing/probes: Fix to update dynamic data counter if fetcharg uses it
- tracing/user_events: Fix struct arg size match check
- scsi: qla2xxx: Multi-que support for TMF
- scsi: qla2xxx: Fix task management cmd failure
- scsi: qla2xxx: Fix task management cmd fail due to unavailable resource
- scsi: qla2xxx: Fix hang in task management
- scsi: qla2xxx: Wait for io return on terminate rport
- scsi: qla2xxx: Fix mem access after free
- scsi: qla2xxx: Array index may go out of bound
- scsi: qla2xxx: Avoid fcport pointer dereference
- scsi: qla2xxx: Fix buffer overrun
- scsi: qla2xxx: Fix potential NULL pointer dereference
- scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()
- scsi: qla2xxx: Correct the index of array
- scsi: qla2xxx: Pointer may be dereferenced
- scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue
- scsi: qla2xxx: Fix end of loop test
- [mips*] kvm: Fix build error with KVM_MIPS_DEBUG_COP0_COUNTERS enabled
- Revert "drm/amd: Disable PSR-SU on Parade 0803 TCON"
- swiotlb: mark swiotlb_memblock_alloc() as __init
- net/sched: sch_qfq: reintroduce lmax bound check for MTU
- drm/atomic: Fix potential use-after-free in nonblocking commits
- net/ncsi: make one oem_gma function for all mfr id
- net/ncsi: change from ndo_set_mac_address to dev_set_mac_address
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.41
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.42
- io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq
- ALSA: hda/realtek - remove 3k pull low procedure
- ALSA: hda/realtek: Add quirk for Clevo NS70AU
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx
- maple_tree: set the node limit when creating a new root node
- maple_tree: fix node allocation testing on 32 bit
- keys: Fix linking a duplicate key to a keyring's assoc_array
- perf probe: Add test for regression introduced by switch to
die_get_decl_file()
- btrfs: fix warning when putting transaction with qgroups enabled after
abort
- fuse: revalidate: don't invalidate if interrupted
- fuse: Apply flags2 only when userspace set the FUSE_INIT_EXT
- btrfs: set_page_extent_mapped after read_folio in btrfs_cont_expand
- btrfs: zoned: fix memory leak after finding block group with super blocks
- fuse: ioctl: translate ENOSYS in outarg
- btrfs: fix race between balance and cancel/pause
- regmap: Drop initial version of maximum transfer length fixes
- of: Preserve "of-display" device name for compatibility
- regmap: Account for register length in SMBus I/O limits
- [arm64] fpsimd: Ensure SME storage is allocated after SVE VL changes
- can: mcp251xfd: __mcp251xfd_chip_set_mode(): increase poll timeout
- can: bcm: Fix UAF in bcm_proc_show()
- can: gs_usb: gs_can_open(): improve error handling
- dma-buf/dma-resv: Stop leaking on krealloc() failure
- drm/amdgpu/vkms: relax timer deactivation by hrtimer_try_to_cancel
- drm/amdgpu/pm: make gfxclock consistent for sienna cichlid
- drm/amdgpu/pm: make mclk consistent for smu 13.0.7
- drm/client: Fix memory leak in drm_client_target_cloned
- drm/client: Fix memory leak in drm_client_modeset_probe
- drm/amd/display: only accept async flips for fast updates
- drm/amd/display: Disable MPC split by default on special asic
- drm/amd/display: check TG is non-null before checking if enabled
- drm/amd/display: Keep PHY active for DP displays on DCN31
- ASoC: fsl_sai: Disable bit clock with transmitter
- ASoC: fsl_sai: Revert "ASoC: fsl_sai: Enable MCTL_MCLK_EN bit for master
mode"
- ASoC: tegra: Fix ADX byte map
- ASoC: rt5640: Fix sleep in atomic context
- ASoC: cs42l51: fix driver to properly autoload with automatic module
loading
- ASoC: codecs: wcd938x: fix missing clsh ctrl error handling
- ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove
- ASoC: qdsp6: audioreach: fix topology probe deferral
- ASoC: tegra: Fix AMX byte map
- ASoC: codecs: wcd938x: fix resource leaks on component remove
- ASoC: codecs: wcd938x: fix missing mbhc init error handling
- ASoC: codecs: wcd934x: fix resource leaks on component remove
- ASoC: codecs: wcd938x: fix codec initialisation race
- ASoC: codecs: wcd938x: fix soundwire initialisation race
- ext4: correct inline offset when handling xattrs in inode body
- drm/radeon: Fix integer overflow in radeon_cs_parser_init
- ALSA: emu10k1: roll up loops in DSP setup code for Audigy
- quota: Properly disable quotas when add_dquot_ref() fails
- quota: fix warning in dqgrab()
- HID: add quirk for 03f0:464a HP Elite Presenter Mouse
- ovl: check type and offset of struct vfsmount in ovl_entry
- udf: Fix uninitialized array access for some pathnames
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- [mips*] dec: prom: Address -Warray-bounds warning
- FS: JFS: Fix null-ptr-deref Read in txBegin
- FS: JFS: Check for read-only mounted filesystem in txBegin
- ACPI: video: Add backlight=native DMI quirk for Dell Studio 1569
- rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic()
- rcu: Mark additional concurrent load from ->cpu_no_qs.b.exp
- sched/fair: Don't balance task to its current running CPU
- wifi: ath11k: fix registration of 6Ghz-only phy without the full channel
range
- bpf: Print a warning only if writing to unprivileged_bpf_disabled.
- bpf: Address KCSAN report on bpf_lru_list
- bpf: tcp: Avoid taking fast sock lock in iterator
- wifi: ath11k: add support default regdb while searching board-2.bin for
WCN6855
- wifi: mac80211_hwsim: Fix possible NULL dereference
- spi: dw: Add compatible for Intel Mount Evans SoC
- wifi: ath11k: fix memory leak in WMI firmware stats
- net: ethernet: litex: add support for 64 bit stats
- devlink: report devlink_port_type_warn source device
- wifi: wext-core: Fix -Wstringop-overflow warning in
ioctl_standard_iw_point()
- wifi: iwlwifi: Add support for new PCI Id
- wifi: iwlwifi: mvm: avoid baid size integer overflow
- wifi: iwlwifi: pcie: add device id 51F1 for killer 1675
- igb: Fix igb_down hung on surprise removal
- net: hns3: fix strncpy() not using dest-buf length as length issue
- ASoC: amd: acp: fix for invalid dai id handling in acp_get_byte_count()
- ASoC: codecs: wcd938x: fix mbhc impedance loglevel
- ASoC: codecs: wcd938x: fix dB range for HPHL and HPHR
- ASoC: qcom: q6apm: do not close GPR port before closing graph
- sched/fair: Use recent_used_cpu to test p->cpus_ptr
- sched/psi: Fix avgs_work re-arm in psi_avgs_work()
- sched/psi: Rearrange polling code in preparation
- sched/psi: Rename existing poll members in preparation
- sched/psi: Extract update_triggers side effect
- sched/psi: Allow unprivileged polling of N*2s period
- sched/psi: use kernfs polling functions for PSI trigger polling
- pinctrl: renesas: rzv2m: Handle non-unique subnode names
- pinctrl: renesas: rzg2l: Handle non-unique subnode names
- spi: bcm63xx: fix max prepend length
- fbdev: imxfb: warn about invalid left/right margin
- fbdev: imxfb: Removed unneeded release_mem_region
- perf build: Fix library not found error when using CSLIBS
- btrfs: be a bit more careful when setting mirror_num_ret in
btrfs_map_block
- spi: s3c64xx: clear loopback bit after loopback test
- kallsyms: Improve the performance of kallsyms_lookup_name()
- kallsyms: Correctly sequence symbols when CONFIG_LTO_CLANG=y
- kallsyms: strip LTO-only suffixes from promoted global functions
- dsa: mv88e6xxx: Do a final check before timing out
- net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field()
- bridge: Add extack warning when enabling STP in netns.
- net: ethernet: mtk_eth_soc: handle probe deferral
- cifs: fix mid leak during reconnection after timeout threshold
- ASoC: SOF: ipc3-dtrace: uninitialized data in
dfsentry_trace_filter_write()
- net: sched: cls_matchall: Undo tcf_bind_filter in case of failure after
mall_set_parms
- net: sched: cls_u32: Undo tcf_bind_filter if u32_replace_hw_knode
- net: sched: cls_u32: Undo refcount decrement in case update failed
- net: sched: cls_bpf: Undo tcf_bind_filter in case of an error
- net: dsa: microchip: ksz8: Separate static MAC table operations for code
reuse
- net: dsa: microchip: ksz8: Make ksz8_r_sta_mac_table() static
- net: dsa: microchip: ksz8_r_sta_mac_table(): Avoid using error code for
empty entries
- net: dsa: microchip: correct KSZ8795 static MAC table access
- iavf: Fix use-after-free in free_netdev
- iavf: Fix out-of-bounds when setting channels on remove
- iavf: use internal state to free traffic IRQs
- iavf: Move netdev_update_features() into watchdog task
- iavf: send VLAN offloading caps once after VFR
- iavf: make functions static where possible
- iavf: Wait for reset in callbacks which trigger it
- iavf: fix a deadlock caused by rtnl and driver's lock circular
dependencies
- iavf: fix reset task race with iavf_remove()
- security: keys: Modify mismatched function name
- octeontx2-pf: Dont allocate BPIDs for LBK interfaces
- bpf: Fix subprog idx logic in check_max_stack_depth
- bpf: Repeat check_max_stack_depth for async callbacks
- bpf, arm64: Fix BTI type used for freplace attached functions
- igc: Avoid transmit queue timeout for XDP
- igc: Prevent garbled TX queue with XDP ZEROCOPY
- net: ipv4: use consistent txhash in TIME_WAIT and SYN_RECV
- tcp: annotate data-races around tcp_rsk(req)->txhash
- tcp: annotate data-races around tcp_rsk(req)->ts_recent
- net: ipv4: Use kfree_sensitive instead of kfree
- net:ipv6: check return value of pskb_trim()
- Revert "tcp: avoid the lookup process failing to get sk in ehash table"
- fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe
- llc: Don't drop packet from non-root netns.
- ALSA: hda/realtek: Fix generic fixup definition for cs35l41 amp
- netfilter: nf_tables: fix spurious set element insertion failure
- netfilter: nf_tables: can't schedule in nft_chain_validate
- netfilter: nft_set_pipapo: fix improper element removal (CVE-2023-4004)
- netfilter: nf_tables: skip bound chain in netns release path
- netfilter: nf_tables: skip bound chain on rule flush (CVE-2023-3777)
- Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync
- Bluetooth: hci_event: call disconnect callback before deleting conn
- Bluetooth: ISO: fix iso_conn related locking and validity issues
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
hci_remove_adv_monitor()
- tcp: annotate data-races around tp->tcp_tx_delay
- tcp: annotate data-races around tp->tsoffset
- tcp: annotate data-races around tp->keepalive_time
- tcp: annotate data-races around tp->keepalive_intvl
- tcp: annotate data-races around tp->keepalive_probes
- tcp: annotate data-races around icsk->icsk_syn_retries
- tcp: annotate data-races around tp->linger2
- tcp: annotate data-races around rskq_defer_accept
- tcp: annotate data-races around tp->notsent_lowat
- tcp: annotate data-races around icsk->icsk_user_timeout
- tcp: annotate data-races around fastopenq.max_qlen
- net: phy: prevent stale pointer dereference in phy_init()
- jbd2: recheck chechpointing non-dirty buffer
- tracing/histograms: Return an error if we fail to add histogram to
hist_vars list
- drm/ttm: fix bulk_move corruption when adding a entry
- spi: dw: Remove misleading comment for Mount Evans SoC
- kallsyms: add kallsyms_seqs_of_names to list of special symbols
- scripts/kallsyms.c Make the comment up-to-date with current implementation
- scripts/kallsyms: update the usage in the comment block
- bpf: allow precision tracking for programs with subprogs
- bpf: stop setting precise in current state
- bpf: aggressively forget precise markings during state checkpointing
- drm/amd/display: use max_dsc_bpp in amdgpu_dm
- drm/amd/display: fix some coding style issues
- drm/dp_mst: Clear MSG_RDY flag before sending new message
- drm/amd/display: force connector state when bpc changes during compliance
- drm/amd/display: Clean up errors & warnings in amdgpu_dm.c
- drm/amd/display: fix linux dp link lost handled only one time
- drm/amd/display: Add polling method to handle MST reply packet
- Revert "drm/amd/display: edp do not add non-edid timings"
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.43
- netfilter: nf_tables: fix underflow in object reference counter
- netfilter: nf_tables: fix underflow in chain reference counter
- [x86] platform/x86/amd/pmf: Notify OS power slider update
- [x86] platform/x86/amd/pmf: reduce verbosity of apmf_get_system_params
- drm/amd/display: Keep PHY active for dp config
- ovl: fix null pointer dereference in ovl_permission()
- drm/amd: Move helper for dynamic speed switch check out of smu13
- drm/amd: Align SMU11 SMU_MSG_OverridePcieParameters implementation with
SMU13
- jbd2: Fix wrongly judgement for buffer head removing while doing
checkpoint
- blk-mq: Fix stall due to recursive flush plug
- [powerpc*] pseries/vas: Hold mmap_mutex after mmap lock during window
close
- [s390x] KVM: s390: pv: fix index value of replaced ASCE
- io_uring: don't audit the capability check in io_uring_create()
- gpio: tps68470: Make tps68470_gpio_output() always set the initial value
- pwm: Add a stub for devm_pwmchip_add()
- gpio: mvebu: Make use of devm_pwmchip_add
- gpio: mvebu: fix irq domain leak
- btrfs: fix race between quota disable and relocation
- i2c: Delete error messages for failed memory allocations
- i2c: Improve size determinations
- i2c: nomadik: Remove unnecessary goto label
- i2c: nomadik: Use devm_clk_get_enabled()
- i2c: nomadik: Remove a useless call in the remove function
- [mips*] Loongson: Move arch cflags to MIPS top level Makefile
- [mips*] Loongson: Fix build error when make modules_install
- PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link()
- PCI/ASPM: Factor out pcie_wait_for_retrain()
- PCI/ASPM: Avoid link retraining race
- PCI: rockchip: Remove writes to unused registers
- PCI: rockchip: Fix window mapping and address translation for endpoint
- PCI: rockchip: Don't advertise MSI-X in PCIe capabilities
- drm/amd/display: add FB_DAMAGE_CLIPS support
- drm/amd/display: Check if link state is valid
- drm/amd/display: Rework context change check
- drm/amd/display: Enable new commit sequence only for DCN32x
- drm/amd/display: Copy DC context in the commit streams
- drm/amd/display: Include surface of unaffected streams
- drm/amd/display: Use min transition for all SubVP plane add/remove
- drm/amd/display: add ODM case when looking for first split pipe
- drm/amd/display: use low clocks for no plane configs
- drm/amd/display: fix unbounded requesting for high pixel rate modes on
dcn315
- drm/amd/display: add pixel rate based CRB allocation support
- drm/amd/display: fix dcn315 single stream crb allocation
- drm/amd/display: Update correct DCN314 register header
- drm/amd/display: Set minimum requirement for using PSR-SU on Rembrandt
- drm/amd/display: Set minimum requirement for using PSR-SU on Phoenix
- drm/ttm: Don't print error message if eviction was interrupted
- drm/ttm: Don't leak a resource on eviction error
- n_tty: Rename tail to old_tail in n_tty_read()
- tty: fix hang on tty device with no_room set
- drm/ttm: never consider pinned BOs for eviction&swap
- [arm64] KVM: arm64: Condition HW AF updates on config option
- [arm64] errata: Mitigate Ampere1 erratum AC03_CPU_38 at stage-2
- mptcp: introduce 'sk' to replace 'sock->sk' in mptcp_listen()
- mptcp: do not rely on implicit state check in mptcp_listen()
- tracing/probes: Add symstr type for dynamic events
- tracing/probes: Fix to avoid double count of the string length on the
array
- tracing: Allow synthetic events to pass around stacktraces
- Revert "tracing: Add "(fault)" name injection to kernel probes"
- tracing/probes: Fix to record 0-length data_loc in fetch_store_string*()
if fails
- maple_tree: add __init and __exit to test module
- maple_tree: fix 32 bit mas_next testing
- drm/amd/display: Rework comments on dc file
- drm/amd/display: fix dc/core/dc.c kernel-doc
- drm/amd/display: Add FAMS validation before trying to use it
- drm/amd/display: update extended blank for dcn314 onwards
- drm/amd/display: Fix possible underflow for displays with large vblank
- drm/amd/display: Prevent vtotal from being set to 0
- phy: phy-mtk-dp: Fix an error code in probe()
- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc
- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend
- phy: qcom-snps-femto-v2: properly enable ref clock
- soundwire: qcom: update status correctly with mask
- media: staging: atomisp: select V4L2_FWNODE
- media: amphion: Fix firmware path to match linux-firmware
- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
- iavf: fix potential deadlock on allocation failure
- iavf: check for removal state before IAVF_FLAG_PF_COMMS_FAILED
- net: phy: marvell10g: fix 88x3310 power up
- net: hns3: fix the imp capability bit cannot exceed 32 bits issue
- net: hns3: fix wrong tc bandwidth weight data issue
- net: hns3: fix wrong bw weight of disabled tc issue
- vxlan: calculate correct header length for GPE
- vxlan: generalize vxlan_parse_gpe_hdr and remove unused args
- vxlan: fix GRO with VXLAN-GPE
- phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()
- atheros: fix return value check in atl1_tso()
- ethernet: atheros: fix return value check in atl1e_tso_csum()
- ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new
temporary address
- tcp: Reduce chance of collisions in inet6_hashfn(). (CVE-2023-1206)
- ice: Fix memory management in ice_ethtool_fdir.c
- bonding: reset bond's flags when down link is P2P device
- team: reset team's flags when down link is P2P device
- octeontx2-af: Removed unnecessary debug messages.
- octeontx2-af: Fix hash extraction enable configuration
- net: stmmac: Apply redundant write work around on 4.xx too
- [x86] platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100
- [x86] traps: Fix load_unaligned_zeropad() handling for shared TDX memory
- igc: Fix Kernel Panic during ndo_tx_timeout callback
- netfilter: nft_set_rbtree: fix overlap expiration walk
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
(CVE-2023-4015)
- netfilter: nf_tables: disallow rule addition to bound chain via
NFTA_RULE_CHAIN_ID (CVE-2023-4147)
- mm: suppress mm fault logging if fatal signal already pending
- net/sched: mqprio: refactor nlattr parsing to a separate function
- net/sched: mqprio: add extack to mqprio_parse_nlattr()
- net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64
- benet: fix return value check in be_lancer_xmit_workarounds()
- tipc: check return value of pskb_trim()
- tipc: stop tipc crypto on failure in tipc_node_create
- RDMA/mlx4: Make check for invalid flags stricter
- drm/msm/dpu: drop enum dpu_core_perf_data_bus_id
- drm/msm/adreno: Fix snapshot BINDLESS_DATA size
- RDMA/irdma: Add missing read barriers
- RDMA/irdma: Fix data race on CQP completion stats
- RDMA/irdma: Fix data race on CQP request done
- RDMA/mthca: Fix crash when polling CQ for shared QPs
- RDMA/bnxt_re: Prevent handling any completions after qp destroy
- drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb()
- cxl/acpi: Fix a use-after-free in cxl_parse_cfmws()
- cxl/acpi: Return 'rc' instead of '0' in cxl_parse_cfmws()
- ASoC: fsl_spdif: Silence output on stop
- block: Fix a source code comment in include/uapi/linux/blkzoned.h
- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request
- [x86] drm/i915: Fix an error handling path in igt_write_huge()
- xenbus: check xen_domain in xenbus_probe_initcall
- dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths
- dm raid: clean up four equivalent goto tags in raid_ctr()
- dm raid: protect md_stop() with 'reconfig_mutex'
- drm/amd: Fix an error handling mistake in psp_sw_init()
- drm/amd/display: Unlock on error path in
dm_handle_mst_sideband_msg_ready_event()
- RDMA/irdma: Fix op_type reporting in CQEs
- RDMA/irdma: Report correct WC error
- drm/msm: Switch idr_lock to spinlock
- drm/msm: Disallow submit with fence id 0
- ublk_drv: move ublk_get_device_from_id into ublk_ctrl_uring_cmd
- ublk: fail to start device if queue setup is interrupted
- ublk: fail to recover device if queue setup is interrupted
- ata: pata_ns87415: mark ns87560_tf_read static
- ring-buffer: Fix wrong stat of cpu_buffer->read
- tracing: Fix warning in trace_buffered_event_disable()
- Revert "usb: gadget: tegra-xudc: Fix error check in
tegra_xudc_powerdomain_init()"
- usb: gadget: call usb_gadget_check_config() to verify UDC capability
- USB: gadget: Fix the memory leak in raw_gadget driver
- usb: gadget: core: remove unbalanced mutex_unlock in usb_gadget_activate
- KVM: Grab a reference to KVM for VM and vCPU stats file descriptors
- KVM: VMX: Don't fudge CR0 and CR4 for restricted L2 guest
- KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid
- serial: qcom-geni: drop bogus runtime pm state update
- serial: 8250_dw: Preserve original value of DLF register
- serial: sifive: Fix sifive_serial_console_setup() section
- USB: serial: option: support Quectel EM060K_128
- USB: serial: option: add Quectel EC200A module support
- USB: serial: simple: add Kaufmann RKS+CAN VCP
- USB: serial: simple: sort driver entries
- can: gs_usb: gs_can_close(): add missing set of CAN state to
CAN_STATE_STOPPED
- usb: typec: Set port->pd before adding device for typec_port
- usb: typec: Iterate pds array when showing the pd list
- usb: typec: Use sysfs_emit_at when concatenating the string
- Revert "usb: dwc3: core: Enable AutoRetry feature in the controller"
- usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy
- usb: dwc3: don't reset device side if dwc3 was configured as host-only
- usb: misc: ehset: fix wrong if condition
- usb: ohci-at91: Fix the unhandle interrupt when resume
- USB: quirks: add quirk for Focusrite Scarlett
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one
config
- usb: xhci-mtk: set the dma max_seg_size
- Revert "usb: xhci: tegra: Fix error check"
- Documentation: security-bugs.rst: update preferences when dealing with the
linux-distros group
- Documentation: security-bugs.rst: clarify CVE handling
- staging: r8712: Fix memory leak in _r8712_init_xmit_priv()
- staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()
- tty: n_gsm: fix UAF in gsm_cleanup_mux
- Revert "xhci: add quirk for host controllers that don't update endpoint
DCS"
- ALSA: hda/realtek: Support ASUS G713PV laptop
- ALSA: hda/relatek: Enable Mute LED on HP 250 G8
- hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature
- hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled
- btrfs: account block group tree when calculating global reserve size
- btrfs: check if the transaction was aborted at btrfs_wait_for_commit()
- btrfs: check for commit error at btrfs_attach_transaction_barrier()
- [x86] MCE/AMD: Decrement threshold_bank refcount when removing threshold
blocks
- file: always lock position for FMODE_ATOMIC_POS
- nfsd: Remove incorrect check in nfsd4_validate_stateid
- ACPI/IORT: Remove erroneous id_count check in iort_node_get_rmr_info()
- tpm_tis: Explicitly check for error code
- irq-bcm6345-l1: Do not assume a fixed block to cpu mapping
- irqchip/gic-v4.1: Properly lock VPEs when doing a directLPI invalidation
- locking/rtmutex: Fix task->pi_waiters integrity
- proc/vmcore: fix signedness bug in read_from_oldmem()
- xen: speed up grant-table reclaim
- virtio-net: fix race between set queues and probe
- net: dsa: qca8k: fix search_and_insert wrong handling of new rule
- net: dsa: qca8k: fix broken search_and_del
- net: dsa: qca8k: fix mdb add/del case with 0 VID
- soundwire: fix enumeration completion
- [s390x] dasd: fix hanging device after quiesce/resume
- [s390x] dasd: print copy pair message only for the correct error
- ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register
- [arm64] sme: Set new vector length before reallocating
- PM: sleep: wakeirq: fix wake irq arming
- ceph: never send metrics if disable_send_metrics is set
- [x86] drm/i915/dpt: Use shmem for dpt objects
- dm cache policy smq: ensure IO doesn't prevent cleaner policy progress
- rbd: make get_lock_owner_info() return a single locker or NULL
- rbd: harden get_lock_owner_info() a bit
- rbd: retrieve and check lock owner twice before blocklisting
- drm/amd/display: set per pipe dppclk to 0 when dpp is off
- tracing: Fix trace_event_raw_event_synth() if else statement
- drm/amd/display: perform a bounds check before filling dirty rectangles
- drm/amd/display: Write to correct dirty_rect
- ACPI: processor: perflib: Use the "no limit" frequency QoS
- ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily
- cpufreq: intel_pstate: Drop ACPI _PSS states table patching
- mptcp: ensure subflow is unhashed before cleaning the backlog
- dma-buf: keep the signaling time of merged fences v3
- dma-buf: fix an error pointer vs NULL bug
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.44
- xen/netback: Fix buffer overrun triggered by unusual packet
(CVE-2023-34319)
- [x86] fix backwards merge of GDS/SRSO bit
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.45
- io_uring: gate iowait schedule on having pending requests
- perf: Fix function pointer case
- net/mlx5: Free irqs only on shutdown callback
- [arm64] iommu/arm-smmu-v3: Work around MMU-600 erratum 1076982
- [arm64] iommu/arm-smmu-v3: Document MMU-700 erratum 2812531
- [arm64] iommu/arm-smmu-v3: Add explicit feature for nesting
- [arm64] iommu/arm-smmu-v3: Document nesting-related errata
- [arm64] dts: imx8mm-venice-gw7903: disable disp_blk_ctrl
- [arm64] dts: imx8mm-venice-gw7904: disable disp_blk_ctrl
- [arm64] dts: phycore-imx8mm: Label typo-fix of VPU
- [arm64] dts: phycore-imx8mm: Correction in gpio-line-names
- [arm64] dts: imx8mn-var-som: add missing pull-up for onboard PHY reset
pinmux
- [arm64] dts: freescale: Fix VPU G2 clock
- [arm64,armhf] firmware: smccc: Fix use of uninitialised results structure
- lib/bitmap: workaround const_eval test build failure
- [arm64] firmware: arm_scmi: Fix chan_free cleanup on SMC
- word-at-a-time: use the same return type for has_zero regardless of
endianness
- [s390x] KVM: s390: fix sthyi error handling
- erofs: fix wrong primary bvec selection on deduplicated extents
- wifi: cfg80211: Fix return value in scan logic
- net/mlx5e: fix double free in macsec_fs_tx_create_crypto_table_groups
- net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx
- net/mlx5: fix potential memory leak in mlx5e_init_rep_rx
- net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer()
- net/mlx5e: Fix crash moving to switchdev mode when ntuple offload is set
- net/mlx5e: Move representor neigh cleanup to profile cleanup_tx
- bpf: Add length check for SK_DIAG_BPF_STORAGE_REQ_MAP_FD parsing
- rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length
- [armhf] net: dsa: fix value check in bcm_sf2_sw_probe()
- perf test uprobe_from_different_cu: Skip if there is no gcc
- net: sched: cls_u32: Fix match key mis-addressing
- mISDN: hfcpci: Fix potential deadlock on &hc->lock
- qed: Fix scheduling in a tasklet while getting stats
- net: annotate data-races around sk->sk_reserved_mem
- net: annotate data-race around sk->sk_txrehash
- net: annotate data-races around sk->sk_max_pacing_rate
- net: add missing READ_ONCE(sk->sk_rcvlowat) annotation
- net: add missing READ_ONCE(sk->sk_sndbuf) annotation
- net: add missing READ_ONCE(sk->sk_rcvbuf) annotation
- net: annotate data-races around sk->sk_mark
- net: add missing data-race annotations around sk->sk_peek_off
- net: add missing data-race annotation for sk_ll_usec
- net: annotate data-races around sk->sk_priority
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ice: Fix RDMA VSI removal during queue rebuild
- bpf, cpumap: Handle skb as well when clean up ptr_ring
- net/sched: cls_u32: No longer copy tcf_result on update to avoid
use-after-free (CVE-2023-4128, CVE-2023-4208)
- net/sched: cls_fw: No longer copy tcf_result on update to avoid
use-after-free (CVE-2023-4128, CVE-2023-4207)
- net/sched: cls_route: No longer copy tcf_result on update to avoid
use-after-free (CVE-2023-4128, CVE-2023-4206)
- bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire
- net: netsec: Ignore 'phy-mode' on SynQuacer in DT mode
- bnxt_en: Fix page pool logic for page size >= 64K
- bnxt_en: Fix max_mtu setting for multi-buf XDP
- net: dcb: choose correct policy to parse DCB_ATTR_BCN
- [s390x] qeth: Don't call dev_close/dev_open (DOWN/UP)
- ip6mr: Fix skb_under_panic in ip6mr_cache_report()
- vxlan: Fix nexthop hash size
- net/mlx5: fs_core: Make find_closest_ft more generic
- net/mlx5: fs_core: Skip the FTs in the same FS_TYPE_PRIO_CHAINS fs_prio
- tcp_metrics: fix addr_same() helper
- tcp_metrics: annotate data-races around tm->tcpm_stamp
- tcp_metrics: annotate data-races around tm->tcpm_lock
- tcp_metrics: annotate data-races around tm->tcpm_vals[]
- tcp_metrics: annotate data-races around tm->tcpm_net
- tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen
- scsi: zfcp: Defer fc_rport blocking until after ADISC response
- scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices
- libceph: fix potential hang in ceph_osdc_notify()
- USB: zaurus: Add ID for A-300/B-500/C-700
- ceph: defer stopping mdsc delayed_work
- [arm64] firmware: arm_scmi: Drop OF node reference in the transport
channel setup
- exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree
- exfat: release s_lock before calling dir_emit()
- bpf: Disable preemption in bpf_perf_event_output
- [arm64] dts: stratix10: fix incorrect I2C property for SCL signal
- net: tun_chr_open(): set sk_uid from current_fsuid() (CVE-2023-4194)
- net: tap_open(): set sk_uid from current_fsuid() (CVE-2023-4194)
- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC)
- [x86] hyperv: Disable IBT when hypercall page lacks ENDBR instruction
- rbd: prevent busy loop when requesting exclusive lock
- bpf: Disable preemption in bpf_event_output
- [powerpc*] ftrace: Create a dummy stackframe to fix stack unwind
- [arm64] fpsimd: Sync and zero pad FPSIMD state for streaming SVE
- [arm64] fpsimd: Clear SME state in the target task when setting the VL
- [arm64] fpsimd: Sync FPSIMD state with SVE for SME only systems
- open: make RESOLVE_CACHED correctly test for O_TMPFILE
- drm/ttm: check null pointer before accessing when swapping
- [x86] drm/i915: Fix premature release of request's reusable memory
- [x86] drm/i915/gt: Cleanup aux invalidation registers
- bpf, cpumap: Make sure kthread is running before map update returns
- file: reinstate f_pos locking optimization for regular files
- mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
- fs/sysv: Null check to prevent null-ptr-deref bug
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
(CVE-2023-40283)
- debugobjects: Recheck debug_objects_enabled before reporting
- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
- fs: Protect reconfiguration of sb read-write from racing writes
- btrfs: remove BUG_ON()'s in add_new_free_space()
- f2fs: fix to do sanity check on direct node in truncate_dnode()
- io_uring: annotate offset timeout races
- [powerpc*] mm/altmap: Fix altmap boundary check
- [armhf] drm/imx/ipuv3: Fix front porch adjustment upon hactive aligning
- drm/amd/display: Ensure that planes are in the same order
- drm/amd/display: skip CLEAR_PAYLOAD_ID_TABLE if device mst_en is 0
- f2fs: fix to set flush_merge opt and show noflush_merge
- f2fs: don't reset unchangable mount option in f2fs_remount()
- exfat: check if filename entries exceeds max filename length
(CVE-2023-4273)
- [arm64] ptrace: Don't enable SVE when setting streaming SVE
- drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2
- drm/amdgpu: Remove unnecessary domain argument
- drm/amdgpu: Use apt name for FW reserved region
- [x86] Revert "drm/i915: Disable DC states for all commits"
(Closes: #1043564)
- [x86] CPU/AMD: Do not leak quotient data after a division by 0
(CVE-2023-20588)
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.46
- Revert "loongarch/cpu: Switch to arch_cpu_finalize_init()"
- tpm: Disable RNG for all AMD fTPMs
- tpm: Add a helper for checking hwrng enabled
- ksmbd: validate command request size
- ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea()
- [x86] KVM: SEV: snapshot the GHCB before accessing it
- [x86] KVM: SEV: only access GHCB fields once (CVE-2023-4155)
- wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems()
- wifi: rtw89: fix 8852AE disconnection caused by RX full flags
- wireguard: allowedips: expand maximum node depth
- ipv6: adjust ndisc_is_useropt() to also return true for PIO
- mptcp: avoid bogus reset on fallback close
- mptcp: fix disconnect vs accept race
- [arm64,armhf] dmaengine: pl330: Return DMA_PAUSED when transaction is
paused
- [amd64] net: mana: Fix MANA VF unload when hardware is unresponsive
- nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM9B1 256G and 512G
- drm/nouveau/gr: enable memory loads on helper invocation on all channels
- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues
- drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap()
- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1()
- drm/amd/display: check attr flag before set cursor degamma on DCN3+
- drm/amdgpu: add S/G display parameter
- drm/amd: Disable S/G for APUs when 64GB or more host memory
- drm/amd/display: limit DPIA link rate to HBR3
- cpuidle: dt_idle_genpd: Add helper function to remove genpd topology
- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings
- drm/amd/pm: expose swctf threshold setting for legacy powerplay
- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock
settings
- drm/amd/pm: avoid unintentional shutdown due to temperature momentary
fluctuation
- drm/amd/display: Handle virtual hardware detect
- drm/amd/display: Add function for validate and update new stream
- drm/amd/display: Handle seamless boot stream
- drm/amd/display: Update OTG instance in the commit stream
- drm/amd/display: Avoid ABM when ODM combine is enabled for eDP
- drm/amd/display: Use update plane and stream routine for DCN32x
- drm/amd/display: Disable phantom OTG after enable for plane disable
- drm/amd/display: Retain phantom plane/stream if validation fails
- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set
- drm/amd/display: trigger timing sync only if TG is running
- io_uring: correct check for O_TMPFILE
- [arm64] iio: cros_ec: Fix the allocation size for cros_ec_command
- iio: adc: ad7192: Fix ac excitation feature
- iio: adc: ina2xx: avoid NULL pointer dereference on OF device match
- [arm*] binder: fix memory leak in binder_init()
- misc: rtsx: judge ASPM Mode to set PETXCFG Reg
- usb-storage: alauda: Fix uninit-value in alauda_check_media()
- [arm64,armhf] usb: dwc3: Properly handle processing of pending events
- USB: Gadget: core: Help prevent panic during UVC unconfigure
- usb: common: usb-conn-gpio: Prevent bailing out if initial role is none
- usb: typec: tcpm: Fix response to vsafe0V event
- usb: typec: altmodes/displayport: Signal hpd when configuring pin
assignment
- [x86] cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- [x86] mm: Fix VDSO and VVAR placement on 5-level paging machines
- [x86] sev: Do not try to parse for the CC blob on non-AMD hardware
- [x86] speculation: Add cpu_show_gds() prototype
- [x86] Move gds_ucode_mitigated() declaration to header
- drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes
(Closes: #1042753)
- iio: core: Prevent invalid memory access when there is no parent
- interconnect: qcom: Add support for mask-based BCMs
- interconnect: qcom: sm8450: add enable_mask for bcm nodes
- net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail()
- bpf, sockmap: Fix map type error in sock_map_del_link
- bpf, sockmap: Fix bug that strp_done cannot be called
- mISDN: Update parameter type of dsp_cmx_send()
- macsec: use DEV_STATS_INC()
- mptcp: fix the incorrect judgment for msk->cb_flags
- net/packet: annotate data-races around tp->status
- net/smc: Use correct buffer sizes when switching between TCP and SMC
- tcp: add missing family to tcp_set_ca_state() tracepoint
- tunnels: fix kasan splat when generating ipv4 pmtu error
- xsk: fix refcount underflow in error path
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- dccp: fix data-race around dp->dccps_mss_cache
- drivers: net: prevent tun_build_skb() to exceed the packet size limit
- drivers: vxlan: vnifilter: free percpu vni stats on error path
- iavf: fix potential races for FDIR filters
- [amd64] IB/hfi1: Fix possible panic during hotplug remove
- drm/rockchip: Don't spam logs in atomic check
- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
- RDMA/umem: Set iova in ODP flow
- net: tls: avoid discarding data on record close
- net: phy: at803x: remove set/get wol callbacks for AR8032
- [arm64] net: dsa: ocelot: call dsa_tag_8021q_unregister() under
rtnl_lock() on driver remove
- [arm64] net: hns3: refactor hclge_mac_link_status_wait for interface reuse
- [arm64] net: hns3: add wait until mac link down
- [arm64] net: hns3: fix deadlock issue when externel_lb and reset are
executed together
- nexthop: Fix infinite nexthop dump when using maximum nexthop ID
- nexthop: Make nexthop bucket dump more efficient
- nexthop: Fix infinite nexthop bucket dump when using maximum nexthop ID
- [arm64] net: hns3: fix strscpy causing content truncation issue
- dmaengine: owl-dma: Modify mismatched function name
- net/mlx5: Allow 0 for total host VFs
- net/mlx5: LAG, Check correct bucket when modifying LAG
- net/mlx5: Skip clock update work when device is in error state
- net/mlx5: Reload auxiliary devices in pci error handlers
- ibmvnic: Enforce stronger sanity checks on login response
- ibmvnic: Unmap DMA login rsp buffer on send login fail
- ibmvnic: Handle DMA unmapping of login buffs in release functions
- ibmvnic: Do partial reset on login failure
- ibmvnic: Ensure login failure recovery is safe from other resets
- gpio: ws16c48: Fix off-by-one error in WS16C48 resource region extent
- gpio: sim: mark the GPIO chip as a one that can sleep
- btrfs: wait for actual caching progress during allocation
- btrfs: don't stop integrity writeback too early
- btrfs: properly clear end of the unreserved range in cow_file_range
- btrfs: exit gracefully if reloc roots don't match
- btrfs: reject invalid reloc tree root keys with stack dump
- btrfs: set cache_block_group_error if we find an error
- nvme-tcp: fix potential unbalanced freeze & unfreeze
- nvme-rdma: fix potential unbalanced freeze & unfreeze
- netfilter: nf_tables: report use refcount overflow
- scsi: core: Fix legacy /proc parsing buffer overflow
- [x86] scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
- scsi: ufs: renesas: Fix private allocation
- scsi: 53c700: Check that command slot is not NULL
- scsi: snic: Fix possible memory leak if device_add() fails
- scsi: core: Fix possible memory leak if device_add() fails
- scsi: fnic: Replace return codes in fnic_clean_pending_aborts()
- scsi: qedi: Fix firmware halt over suspend and resume
- scsi: qedf: Fix firmware halt over suspend and resume
- [x86] platform/x86: serial-multi-instantiate: Auto detect IRQ resource for
CSC3551
- ACPI: scan: Create platform device for CS35L56
- sch_netem: fix issues in netem_change() vs get_dist_table()
- drm/amd/pm/smu7: move variables to where they are used
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.47
- [arm64] mmc: sdhci-f-sdh30: Replace with sdhci_pltfm
- [arm64] cpuidle: psci: Extend information in log about OSI/PC mode
- [arm64] cpuidle: psci: Move enabling OSI mode after power domains creation
- zsmalloc: consolidate zs_pool's migrate_lock and size_class's locks
- zsmalloc: fix races between modifications of fullness and isolated
- net/smc: replace mutex rmbs_lock and sndbufs_lock with rw_semaphore
- net/smc: Fix setsockopt and sysctl to specify same buffer size again
- net: phy: at803x: Use devm_regulator_get_enable_optional()
- net: phy: at803x: fix the wol setting functions
- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini
- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1
- drm/amdgpu: fix memory leak in mes self test
- [x86] ASoC: Intel: sof_sdw: add quirk for MTL RVP
- [x86] ASoC: Intel: sof_sdw: add quirk for LNL RVP
- ASoC: SOF: amd: Add pci revision id check
- drm/stm: ltdc: fix late dereference check
- drm: rcar-du: remove R-Car H3 ES1.* workarounds
- [x86] ASoC: amd: vangogh: Add check for acp config flags in vangogh
platform
- [x86] ASoC: Intel: sof_sdw_rt_sdca_jack_common: test SOF_JACK_JDSRC in
_exit
- [x86] ASoC: Intel: sof_sdw: Add support for Rex soundwire
- iopoll: Call cpu_relax() in busy loops
- [x86] ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion
- dma-remap: use kvmalloc_array/kvfree for larger dma memory remap
- accel/habanalabs: add pci health check during heartbeat
- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL
Keyboard
- [amd64] iommu/amd: Introduce Disable IRTE Caching Support
- drm/amdgpu: install stub fence into potential unused fence pointers
- drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz
- RDMA/mlx5: Return the firmware result upon destroying QP/RQ
- drm/amd/display: Skip DPP DTO update if root clock is gated
- drm/amd/display: Enable dcn314 DPP RCO
- ASoC: SOF: core: Free the firmware trace before calling snd_sof_shutdown()
- HID: intel-ish-hid: ipc: Add Arrow Lake PCI device ID
- ALSA: hda/realtek: Add quirks for ROG ALLY CS35l41 audio
- smb: client: fix warning in cifs_smb3_do_mount()
- cifs: fix session state check in reconnect to avoid use-after-free issue
- serial: stm32: Ignore return value of uart_remove_one_port() in .remove()
- led: qcom-lpg: Fix resource leaks in for_each_available_child_of_node()
loops
- media: v4l2-mem2mem: add lock to protect parameter num_rdy
- media: camss: set VFE bpl_alignment to 16 for sdm845 and sm8250
- usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push
- usb: gadget: uvc: queue empty isoc requests if no video buffer is
available
- media: platform: mediatek: vpu: fix NULL ptr dereference
- [x86] thunderbolt: Read retimer NVM authentication status prior
tb_retimer_set_inbound_sbtx()
- usb: chipidea: imx: don't request QoS for imx8ulp
- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
- gfs2: Fix possible data races in gfs2_show_options()
- pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()
- [x86] thunderbolt: Add Intel Barlow Ridge PCI ID
- [x86] thunderbolt: Limit Intel Barlow Ridge USB3 bandwidth
- firewire: net: fix use after free in fwnet_finish_incoming_packet()
- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub)
- Bluetooth: L2CAP: Fix use-after-free
- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
- ceph: try to dump the msgs when decoding fails
- drm/amdgpu: Fix potential fence use-after-free v2
- fs/ntfs3: Enhance sanity check while generating attr_list
- fs: ntfs3: Fix possible null-pointer dereferences in mi_read()
- fs/ntfs3: Mark ntfs dirty when on-disk struct is corrupted
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760
- ALSA: hda: fix a possible null-pointer dereference due to data race in
snd_hdac_regmap_sync()
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X
- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V
- Bluetooth: MGMT: Use correct address for memcpy()
- ring-buffer: Do not swap cpu_buffer during resize process
- igc: read before write to SRRCTL register
- drm/amd/display: save restore hdcp state when display is unplugged from
mst hub
- drm/amd/display: phase3 mst hdcp for multiple displays
- drm/amd/display: fix access hdcp_workqueue assert
- [arm64] KVM: arm64: vgic-v4: Make the doorbell request robust w.r.t
preemption
- fbdev/hyperv-fb: Do not set struct fb_info.apertures
- video/aperture: Only remove sysfb on the default vga pci device
(Closes: #1051163)
- btrfs: move out now unused BG from the reclaim list
- btrfs: convert btrfs_block_group::needs_free_space to runtime flag
- btrfs: convert btrfs_block_group::seq_zone to runtime flag
- btrfs: fix use-after-free of new block group that became unused
- virtio-mmio: don't break lifecycle of vm_dev
- cifs: fix potential oops in cifs_oplock_break
- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
- i2c: hisi: Only handle the interrupt of the driver's transfer
- i2c: tegra: Fix i2c-tegra DMA config option processing
- fbdev: mmp: fix value check in mmphw_probe()
- [powerpc*] rtas_flash: allow user copy to flash block cache objects
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32
platforms
- btrfs: fix incorrect splitting in btrfs_drop_extent_map_range
- btrfs: fix BUG_ON condition in btrfs_cancel_balance
- i2c: designware: Correct length byte validation logic
- i2c: designware: Handle invalid SMBus block data response length value
- net: xfrm: Fix xfrm_address_filter OOB read
- net: af_key: fix sadb_x_filter validation
- net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure
- xfrm: fix slab-use-after-free in decode_session6
- ip6_vti: fix slab-use-after-free in decode_session6
- ip_vti: fix potential slab-use-after-free in decode_session6
- xfrm: add NULL check in xfrm_update_ae_params (CVE-2023-3772)
- xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH (CVE-2023-3773)
- virtio_net: notify MAC address change on device initialization
- virtio-net: set queues after driver_ok
- net: pcs: Add missing put_device call in miic_create
- net: phy: fix IRQ-based wake-on-lan over hibernate / power off
- drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs
- net: macb: In ZynqMP resume always configure PS GTR for non-wakeup source
- octeon_ep: cancel tx_timeout_task later in remove sequence
- netfilter: nf_tables: fix false-positive lockdep splat
- netfilter: nf_tables: deactivate catchall elements in next generation
(CVE-2023-4569)
- ipvs: fix racy memcpy in proc_do_sync_threshold
- netfilter: nft_dynset: disallow object maps
- net: phy: broadcom: stub c45 read/write for 54810
- team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- net: openvswitch: reject negative ifindex
- iavf: fix FDIR rule fields masks validation
- i40e: fix misleading debug logs
- net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset
- sfc: don't unregister flow_indr if it was never registered
- sock: Fix misuse of sk_under_memory_pressure()
- net: do not allow gso_size to be set to GSO_BY_FRAGS
- qede: fix firmware halt over suspend and resume
- ice: Block switchdev mode when ADQ is active and vice versa
- bus: ti-sysc: Flush posted write on enable before reset
- [arm64] dts: qcom: qrb5165-rb5: fix thermal zone conflict
- [arm64] dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
- [arm64] dts: rockchip: Disable HS400 for eMMC on ROCK 4C+
- [armhf] dts: imx: align LED node names with dtschema
- [arm64] dts: imx8mm: Drop CSI1 PHY reference clock configuration
- [armhf] dts: imx: Set default tuning step for imx6sx usdhc
- [arm64] dts: imx93: Fix anatop node size
- ASoC: rt5665: add missed regulator_bulk_disable
- ASoC: meson: axg-tdm-formatter: fix channel slot allocation
- ALSA: hda/realtek: Add quirks for HP G11 Laptops
- soc: aspeed: uart-routing: Use __sysfs_match_string
- soc: aspeed: socinfo: Add kfree for kstrdup
- ALSA: hda/realtek - Remodified 3k pull low procedure
- serial: 8250: Fix oops for port->pm on uart_change_pm()
- ALSA: usb-audio: Add support for Mythware XA001AU capture and playback
interfaces.
- cifs: Release folio lock on fscache read hit.
- virtio-net: Zero max_tx_vq field for VIRTIO_NET_CTRL_MQ_HASH_CONFIG case
- [arm64] dts: rockchip: Fix Wifi/Bluetooth on ROCK Pi 4 boards
- blk-crypto: dynamically allocate fallback profile
- mmc: wbsd: fix double mmc_free_host() in wbsd_init()
- mmc: block: Fix in_flight[issue_type] value error
- drm/qxl: fix UAF on handle creation
- [x86] drm/i915/sdvo: fix panel_type initialization
- drm/amd: flush any delayed gfxoff on suspend entry
- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix
- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7
- drm/amd/display: disable RCO for DCN314
- zsmalloc: allow only one active pool compaction context
- sched/fair: unlink misfit task from cpu overutilized
- sched/fair: Remove capacity inversion detection
- drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV
register
- hugetlb: do not clear hugetlb dtor until allocating vmemmap
- netfilter: set default timeout to 3 secs for sctp shutdown send and recv
state
- [arm64] ptrace: Ensure that SME is set up for target when writing SSVE
state
- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11
- drm/amdgpu: keep irq count in amdgpu_irq_disable_all
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (CVE-2023-4622)
- drm/nouveau/disp: fix use-after-free in error handling of
nouveau_connector_create
- net: fix the RTO timer retransmitting skb every 1ms if linear option is
enabled
- [arm64] mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.48
- [x86] cpu: Fix __x86_return_thunk symbol type
- [x86] cpu: Fix up srso_safe_ret() and __x86_return_thunk()
- [x86] alternative: Make custom return thunk unconditional
- [x86] cpu: Clean up SRSO return thunk mess
- [x86] cpu: Rename original retbleed methods
- [x86] cpu: Rename srso_(.*)_alias to srso_alias_\1
- [x86] cpu: Cleanup the untrain mess
- [x86] srso: Explain the untraining sequences a bit more
- [x86] static_call: Fix __static_call_fixup()
- [x86] retpoline: Don't clobber RFLAGS during srso_safe_ret()
(Closes: #1043585)
- [x86] CPU/AMD: Fix the DIV(0) initial fix attempt (CVE-2023-20588)
- [x86] srso: Disable the mitigation on unaffected configurations
- [x86] retpoline,kprobes: Fix position of thunk sections with
CONFIG_LTO_CLANG
- [x86] objtool/x86: Fixup frame-pointer vs rethunk
- [x86] srso: Correct the mitigation status when SMT is disabled
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.49
- [x86] objtool/x86: Fix SRSO mess
- Revert "f2fs: don't reset unchangable mount option in f2fs_remount()"
- Revert "f2fs: fix to set flush_merge opt and show noflush_merge"
- Revert "f2fs: fix to do sanity check on direct node in truncate_dnode()"
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.50
- NFSv4.2: fix error handling in nfs42_proc_getxattr
- NFSv4: fix out path in __nfs4_get_acl_uncached
- xprtrdma: Remap Receive buffers after a reconnect
- drm/ast: Use drm_aperture_remove_conflicting_pci_framebuffers
- fbdev/radeon: use pci aperture helpers
- [x86] drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers
- drm/aperture: Remove primary argument
- video/aperture: Only kick vgacon when the pdev is decoding vga
- video/aperture: Move vga handling to pci function
- PCI: acpiphp: Reassign resources on bridge if necessary
- [mips*]: cpu-features: Enable octeon_cache by cpu_type
- [mips*] cpu-features: Use boot_cpu_type for CPU type based features
- jbd2: remove t_checkpoint_io_list
- jbd2: remove journal_clean_one_cp_list()
- jbd2: fix a race when checking checkpoint buffer busy
- can: raw: fix receiver memory leak
- can: raw: fix lockdep issue in raw_release()
- [s390x] zcrypt: remove unnecessary (void *) conversions
- [s390x] zcrypt: fix reply buffer calculations for CCA replies
- [x86] drm/i915: Add the gen12_needs_ccs_aux_inv helper
- [x86] drm/i915/gt: Ensure memory quiesced before invalidation
- [x86] drm/i915/gt: Poll aux invalidation register bit on invalidation
- [x86] drm/i915/gt: Support aux invalidation on all engines
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- tracing: Fix memleak due to race between current_tracer and trace
- devlink: move code to a dedicated directory
- devlink: add missing unregister linecard notification
- [arm64] net: dsa: felix: fix oversize frame dropping for always closed
tc-taprio gates
- sock: annotate data-races around prot->memory_pressure
- dccp: annotate data-races in dccp_poll()
- ipvlan: Fix a reference count leak warning in ipvlan_ns_exit()
- mlxsw: pci: Set time stamp fields also when its type is MIRROR_UTC
- mlxsw: reg: Fix SSPR register layout
- mlxsw: Fix the size of 'VIRT_ROUTER_MSB'
- net: bgmac: Fix return value check for fixed_phy_register()
- net: bcmgenet: Fix return value check for fixed_phy_register()
- net: validate veth and vxcan peer ifindexes
- ipv4: fix data-races around inet->inet_id
- ice: fix receive buffer size miscalculation
- Revert "ice: Fix ice VF reset during iavf initialization"
- ice: Fix NULL pointer deref during VF reset
- can: isotp: fix support for transmission of SF without flow control
- igb: Avoid starting unnecessary workqueues
- igc: Fix the typo in the PTM Control macro
- net/sched: fix a qdisc modification with ambiguous command request
- i40e: fix potential NULL pointer dereferencing of pf->vf
i40e_sync_vsi_filters()
- netfilter: nf_tables: flush pending destroy work before netlink notifier
- netfilter: nf_tables: fix out of memory error handling
- rtnetlink: Reject negative ifindexes in RTM_NEWLINK
- bonding: fix macvlan over alb bond support
- [x86] KVM: x86: Preserve TDP MMU roots until they are explicitly
invalidated
- [x86] KVM: x86/mmu: Fix an sign-extension bug with mmu_seq that hangs
vCPUs
- io_uring: get rid of double locking
- io_uring: extract a io_msg_install_complete helper
- io_uring/msg_ring: move double lock/unlock helpers higher up
- io_uring/msg_ring: fix missing lock on overflow for IOPOLL (CVE-2023-2430)
- [x86] ASoC: amd: yc: Add VivoBook Pro 15 to quirks list for acp6x
- [x86] ASoC: cs35l41: Correct amp_gain_tlv values
- ibmveth: Use dcbf rather than dcbfl
- wifi: mac80211: limit reorder_buf_filtered to avoid UBSAN warning
- [x86] platform/x86: ideapad-laptop: Add support for new hotkeys found on
ThinkBook 14s Yoga ITL
- NFSv4: Fix dropped lock for racing OPEN and delegation return
- clk: Fix slab-out-of-bounds error in devm_clk_release()
- mm,ima,kexec,of: use memblock_free_late from ima_free_kexec_buffer
- shmem: fix smaps BUG sleeping while atomic
- ALSA: ymfpci: Fix the missing snd_card_free() call at probe error
- mm/gup: handle cont-PTE hugetlb pages correctly in gup_must_unshare() via
GUP-fast
- mm: add a call to flush_cache_vmap() in vmap_pfn()
- mm: memory-failure: fix unexpected return value in soft_offline_page()
- NFS: Fix a use after free in nfs_direct_join_group()
- nfsd: Fix race to FREE_STATEID and cl_revoked
- selinux: set next pointer before attaching to list
- batman-adv: Trigger events for auto adjusted MTU
- batman-adv: Don't increase MTU when set by user
- batman-adv: Do not get eth header before batadv_check_management_packet
- batman-adv: Fix TT global entry leak when client roamed back
- batman-adv: Fix batadv_v_ogm_aggr_send memory leak
- batman-adv: Hold rtnl lock during MTU update via netlink
- lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels
- of: dynamic: Refactor action prints to not use "%pOF" inside devtree_lock
- pinctrl: amd: Mask wake bits on probe again
- media: vcodec: Fix potential array out-of-bounds in encoder queue_setup
- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for
non-root bus
- drm/vmwgfx: Fix shader stage validation
- [x86] drm/i915/dgfx: Enable d3cold at s2idle
- drm/display/dp: Fix the DP DSC Receiver cap size
- [x86] fpu: Invalidate FPU state correctly on exec()
- [x86] fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4
(Closes: #1050622)
- hwmon: (aquacomputer_d5next) Add selective 200ms delay after sending ctrl
report
- nfs: use vfs setgid helper
- nfsd: use vfs setgid helper
- cgroup/cpuset: Rename functions dealing with DEADLINE accounting
- sched/cpuset: Bring back cpuset_mutex
- sched/cpuset: Keep track of SCHED_DEADLINE task in cpusets
- cgroup/cpuset: Iterate only if DEADLINE tasks are present
- sched/deadline: Create DL BW alloc, free & check overflow interface
- cgroup/cpuset: Free DL BW in case can_attach() fails
- [x86] thunderbolt: Fix Thunderbolt 3 display flickering issue on 2nd hot
plug onwards
- can: raw: add missing refcount for memory leak fix
- madvise:madvise_free_pte_range(): don't use mapcount() against large folio
for sharing check
- scsi: snic: Fix double free in snic_tgt_create()
- scsi: core: raid_class: Remove raid_component_add()
- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
- dma-buf/sw_sync: Avoid recursive lock during fence signal
- gpio: sim: dispose of irq mappings before destroying the irq_sim domain
- gpio: sim: pass the GPIO device's software node to irq domain
- [x86] ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ
- maple_tree: disable mas_wr_append() when other readers are possible
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.51
- ACPI: thermal: Drop nocrt parameter
- module: Expose module_init_layout_section()
- [arm64] module-plts: inline linux/moduleloader.h
- [arm64] module: Use module_init_layout_section() to spot init sections
- [armel,armhf] module: Use module_init_layout_section() to spot init
sections
- [x86] thunderbolt: Fix a backport error for display flickering issue
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.52
- erofs: ensure that the post-EOF tails are all zeroed
- ksmbd: fix wrong DataOffset validation of create context
- ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()
- ksmbd: replace one-element array with flex-array member in struct
smb2_ea_info
- ksmbd: reduce descriptor size if remaining bytes is less than request size
- [arm64] net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index
- modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules
- USB: serial: option: add Quectel EM05G variant (0x030e)
- USB: serial: option: add FOXCONN T99W368/T99W373 product
- ALSA: usb-audio: Fix init call orders for UAC1
- [arm64,armhf] usb: dwc3: meson-g12a: do post init to fix broken usb after
resumption
- [arm64,armhf] usb: chipidea: imx: improve logic if samsung,picophy-*
parameter is 0
- HID: wacom: remove the battery when the EKR is off
- staging: rtl8712: fix race condition
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race
condition (CVE-2023-1989)
- wifi: mt76: mt7921: do not support one stream on secondary antenna only
- wifi: mt76: mt7921: fix skb leak by txs missing in AMSDU
- [arm64] serial: qcom-geni: fix opp vote on shutdown
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
- tcpm: Avoid soft reset when partner does not support get_status
- dt-bindings: sc16is7xx: Add property to change GPIO function
- nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers()
- nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse
- [arm64] usb: typec: tcpci: clear the fault status bit
- pinctrl: amd: Don't show `Invalid config param` errors
.
[ Salvatore Bonaccorso ]
* drivers/ptp: Make PTP_1588_CLOCK builtin (except armel/marvell)
(Closes: #1036744)
* [rt] Refresh "serial: 8250: implement write_atomic"
* Bump ABI to 12
* [rt] Update to 6.1.46-rt13
* [rt] Refresh "net: Remove the obsolte u64_stats_fetch_*_irq() users (net)."
* [x86] tpm: Enable hwrng only for Pluton on AMD CPUs
Checksums-Sha1:
6edf569605e663f9a7998dfd05c69952a7499abf 7455 linux-signed-arm64_6.1.52+1.dsc
20e5c2780e79715f185a00f31d53423a79e45e42 2840540 linux-signed-arm64_6.1.52+1.tar.xz
Checksums-Sha256:
d148025a5b62050b57bee10af035bdcd16d5395d2b4ad97889dee356795ce4a6 7455 linux-signed-arm64_6.1.52+1.dsc
ef896f5b54e77320419ff8590b697568c70679b0f569681bd34d635f62bd552e 2840540 linux-signed-arm64_6.1.52+1.tar.xz
Files:
a355cdb65190aadd900dec8783100519 7455 kernel optional linux-signed-arm64_6.1.52+1.dsc
31b728914e808bfd083751c7f3c9bdee 2840540 kernel optional linux-signed-arm64_6.1.52+1.tar.xz
-----BEGIN PGP SIGNATURE-----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=B8ON
-----END PGP SIGNATURE-----
