[ELSA-2023-12017] Unbreakable Enterprise kernel security update

[5.15.0-6.80.3.1]
- Revert 'rds: ib: Enable FC by default' (Hakon Bugge) [Orabug: 34964359]

[5.15.0-6.80.3]
- net/mlx5: Suppress error logging on UCTX creation (Marina) [Orabug: 34888471]
- rds: ib: Fix leaked MRs during kexec (Hakon Bugge) [Orabug: 34892082]
- uek-rpm: Add ptp_kvm.ko to core rpm (Somasundaram Krishnasamy) [Orabug: 34901414]
- Revert 'tracing/ring-buffer: Have polling block on watermark' (Harshit Mogalapalli) [Orabug: 34890999]

[5.15.0-6.80.2]
- scsi: mpi3mr: Remove unnecessary cast (Jules Irenge) [Orabug: 34640445]
- scsi: mpi3mr: Update driver version to 8.2.0.3.0 (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Fix scheduling while atomic type bug (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Scan the devices during resume time (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Free enclosure objects during driver unload (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Handle 0xF003 Fault Code (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Graceful handling of surprise removal of PCIe HBA (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Support new power management framework (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Update mpi3 header files (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Fix error code in mpi3mr_transport_smp_handler() (Dan Carpenter) [Orabug: 34640445]
- scsi: mpi3mr: Fix error codes in mpi3mr_report_manufacture() (Dan Carpenter) [Orabug: 34640445]
- scsi: mpi3mr: Block I/Os while refreshing target dev objects (Chandrakanth patil) [Orabug: 34640445]
- scsi: mpi3mr: Refresh SAS ports during soft reset (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Support SAS transport class callbacks (Chandrakanth patil) [Orabug: 34640445]
- scsi: mpi3mr: Add framework to issue MPT transport cmds (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Add SAS SATA end devices to STL (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Get target object based on rphy (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Add expander devices to STL (Chandrakanth patil) [Orabug: 34640445]
- scsi: mpi3mr: Enable STL on HBAs where multipath is disabled (Chandrakanth patil) [Orabug: 34640445]
- scsi: mpi3mr: Add helper functions to manage device's port (Chandrakanth patil) [Orabug: 34640445]
- scsi: mpi3mr: Add helper functions to retrieve device objects (Chandrakanth patil) [Orabug: 34640445]
- scsi: mpi3mr: Add framework to add phys to STL (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Enable Enclosure device add event (Chandrakanth patil) [Orabug: 34640445]
- scsi: mpi3mr: Add helper functions to retrieve config pages (Chandrakanth patil) [Orabug: 34640445]
- scsi: mpi3mr: Add framework to issue config requests (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Add config and transport related debug flags (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Delete a stray tab (Dan Carpenter) [Orabug: 34640445]
- scsi: mpi3mr: Unlock on error path (Dan Carpenter) [Orabug: 34640445]
- scsi: mpi3mr: Reduce VD queue depth on detecting throttling (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Resource Based Metering (Chandrakanth patil) [Orabug: 34640445]
- scsi: mpi3mr: Increase cmd_per_lun to 128 (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Enable shared host tagset (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Fix kernel-doc (Chandrakanth patil) [Orabug: 34640445]
- scsi: mpi3mr: Rework mrioc->bsg_device model to fix warnings (Sumit Saxena) [Orabug: 34640445]
- scsi: mpi3mr: Add target device related sysfs (Chandrakanth patil) [Orabug: 34640445]
- scsi: mpi3mr: Add shost related sysfs attributes (Chandrakanth patil) [Orabug: 34640445]
- scsi: mpi3mr: Return error if dma_alloc_coherent() fails (Dan Carpenter) [Orabug: 34640445]
- scsi: mpi3mr: Fix a NULL vs IS_ERR() bug in mpi3mr_bsg_init() (Dan Carpenter) [Orabug: 34640445]
- scsi: mpi3mr: Return I/Os to an unrecoverable HBA with DID_ERROR (Chandrakanth patil) [Orabug: 34640445]
- scsi: mpi3mr: Hidden drives not removed during soft reset (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Increase I/O timeout value to 60s (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Update driver version to 8.0.0.69.0 (Sumit Saxena) [Orabug: 34640445]
- scsi: mpi3mr: Add support for NVMe passthrough (Sumit Saxena) [Orabug: 34640445]
- scsi: mpi3mr: Expose adapter state to sysfs (Chandrakanth patil) [Orabug: 34640445]
- scsi: mpi3mr: Add support for PEL commands (Sumit Saxena) [Orabug: 34640445]
- scsi: mpi3mr: Add support for MPT commands (Sumit Saxena) [Orabug: 34640445]
- scsi: mpi3mr: Move data structures/definitions from MPI headers to uapi header (Sumit Saxena) [Orabug: 34640445]
- scsi: mpi3mr: Add support for driver commands (Sumit Saxena) [Orabug: 34640445]
- scsi: mpi3mr: Add bsg device support (Sumit Saxena) [Orabug: 34640445]
- scsi: mpi3mr: Fix flushing !WQ_MEM_RECLAIM events warning (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Bump driver version to 8.0.0.68.0 (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Update the copyright year (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Fix cmnd getting marked as in use forever (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Fix hibernation issue (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Update MPI3 headers (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Fix printing of pending I/O count (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Fix deadlock while canceling the fw event (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Fix formatting problems in some kernel-doc comments (Yang Li) [Orabug: 34640445]
- scsi: mpi3mr: Fix some spelling mistakes (Colin Ian King) [Orabug: 34640445]
- scsi: mpi3mr: Bump driver version to 8.0.0.61.0 (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Enhanced Task Management Support Reply handling (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Use TM response codes from MPI3 headers (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Add io_uring interface support in I/O-polled mode (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Print cable mngnt and temp threshold events (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Support Prepare for Reset event (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Add Event acknowledgment logic (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Gracefully handle online FW update operation (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Detect async reset that occurred in firmware (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Add IOC reinit function (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Handle offline FW activation in graceful manner (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Code refactor of IOC init - part2 (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Code refactor of IOC init - part1 (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Fault IOC when internal command gets timeout (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Display IOC firmware package version (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Handle unaligned PLL in unmap cmnds (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Increase internal cmnds timeout to 60s (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Do access status validation before adding devices (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Add support for PCIe Managed Switch SES device (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Update MPI3 headers - part2 (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Update MPI3 headers - part1 (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Don't reset IOC if cmnds flush with reset status (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Replace spin_lock() with spin_lock_irqsave() (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Add debug APIs based on logging_level bits (Sreekanth Reddy) [Orabug: 34640445]
- scsi: mpi3mr: Use scnprintf() instead of snprintf() (Dan Carpenter) [Orabug: 34640445]
- scsi: mpi3mr: Clean up mpi3mr_print_ioc_info() (Dan Carpenter) [Orabug: 34640445]
- rds: ib: Remove unnecessary call to rds_ib_ring_unalloc (Hakon Bugge) [Orabug: 34768825]
- rds: ib: Remove unnecessary i_flowctl term from conditions (Hakon Bugge) [Orabug: 34768825]
- rds: ib: Remove unnesesarry variable initialization (Hakon Bugge) [Orabug: 34768825]
- rds: ib: Make sure receives are posted before connection is up (Hakon Bugge) [Orabug: 34768825]
- rds: ib: Fix the Retry counter dependency on RNR NAK Retry counter (Hakon Bugge) [Orabug: 34768825]
- rds: Deduct one credit on the passive side (Hakon Bugge) [Orabug: 34768825]
- rds: Use all eight bits for credit updates (Hakon Bugge) [Orabug: 34768825]
- RDS/IB: Fix the misplaced counter update rdma dto path (Devesh Sharma) [Orabug: 34865847]
- uek-rpm: Enable CONFIG_HP_ILO for aarch64 (Saeed Mirzamohammadi) [Orabug: 34869880]
- uek-rpm: ol8: Choose right annobin plugin for UEK build (Somasundaram Krishnasamy) [Orabug: 34873882]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) [Orabug: 34882775] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34882775] {CVE-2022-4378}

[5.15.0-6.80.1]
- LTS version: v5.15.80 (Jack Vogel)

- ntfs: check overflow when iterating ATTR_RECORDs (Hawkins Jiawei)

- ntfs: fix out-of-bounds read in ntfs_attr_find() (Hawkins Jiawei)

- ntfs: fix use-after-free in ntfs_attr_find() (Hawkins Jiawei)

- net/9p: use a dedicated spinlock for trans_fd (Dominique Martinet)

- mm: fs: initialize fsdata passed to write_begin/write_end interface (Alexander Potapenko)

- wifi: wext: use flex array destination for memcpy() (Hawkins Jiawei)

- 9p/trans_fd: always use O_NONBLOCK read/write (Tetsuo Handa)

- gfs2: Switch from strlcpy to strscpy (Andreas Gruenbacher)

- gfs2: Check sb_bsize_shift after reading superblock (Andrew Price)

- 9p: trans_fd/p9_conn_cancel: drop client lock earlier (Dominique Martinet)

- kcm: close race conditions on sk_receive_queue (Cong Wang)

- kcm: avoid potential race in kcm_tx_work (Eric Dumazet)

- tcp: cdg: allow tcp_cdg_release() to be called multiple times (Eric Dumazet)

- macvlan: enforce a consistent minimal mtu (Eric Dumazet)

- Input: i8042 - fix leaking of platform device on module removal (Chen Jun)

- kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case (Li Huafei)

- scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper() (Yuan Can)

- scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() (Yang Yingliang)

- net: use struct_group to copy ip/ipv6 header addresses (Hangbin Liu)

- tracing: Fix warning on variable 'struct trace_array' (Aashish Sharma)

- ring-buffer: Include dropped pages in counting dirty patches (Steven Rostedt (Google))

- perf: Improve missing SIGTRAP checking (Marco Elver)

- serial: 8250_lpss: Use 16B DMA burst with Elkhart Lake (Ilpo Jarvinen)

- nvme: ensure subsystem reset is single threaded (Keith Busch)

- nvme: restrict management ioctls to admin (Keith Busch)

- perf/x86/intel/pt: Fix sampling using single range output (Adrian Hunter)

- misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (Alexander Potapenko)

- docs: update mediator contact information in CoC doc (Shuah Khan)

- mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() (Xiongfeng Wang)

- mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout (Chevron Li)

- mmc: core: properly select voltage range without power cycle (Yann Gautier)

- firmware: coreboot: Register bus in module init (Brian Norris)

- iommu/vt-d: Set SRE bit only when hardware has SRS cap (Tina Zhang)

- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (Tina Zhang)

- scsi: zfcp: Fix double free of FSF request when qdio send fails (Benjamin Block)

- net: phy: marvell: add sleep time after enabling the loopback bit (Aminuddin Jamaluddin)

- maccess: Fix writing offset in case of fault in strncpy_from_kernel_nofault() (Alban Crequy)

- Input: iforce - invert valid length check when fetching device IDs (Tetsuo Handa)

- serial: 8250_lpss: Configure DMA also w/o DMA filter (Ilpo Jarvinen)

- serial: 8250: Flush DMA Rx on RLSI (Ilpo Jarvinen)

- serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs (Ilpo Jarvinen)

- dm ioctl: fix misbehavior if list_versions races with module loading (Mikulas Patocka)

- iio: pressure: ms5611: changed hardcoded SPI speed to value limited (Mitja Spes)

- iio: adc: mp2629: fix potential array out of bound access (Saravanan Sekar)

- iio: adc: mp2629: fix wrong comparison of channel (Saravanan Sekar)

- iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() (Yang Yingliang)

- iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() (Yang Yingliang)

- usb: typec: mux: Enter safe mode only when pins need to be reconfigured (Rajat Khandelwal)

- usb: cdns3: host: fix endless superspeed hub port reset (Li Jun)

- usb: chipidea: fix deadlock in ci_otg_del_timer (Duoming Zhou)

- usb: add NO_LPM quirk for Realforce 87U Keyboard (Nicolas Dumazet)

- USB: serial: option: add Fibocom FM160 0x0111 composition (Reinhard Speyerer)

- USB: serial: option: add u-blox LARA-L6 modem (Davide Tronchin)

- USB: serial: option: add u-blox LARA-R6 00B modem (Davide Tronchin)

- USB: serial: option: remove old LARA-R6 PID (Davide Tronchin)

- USB: serial: option: add Sierra Wireless EM9191 (Benoit Monin)

- USB: bcma: Make GPIO explicitly optional (Linus Walleij)

- speakup: fix a segfault caused by switching consoles (Mushahid Hussain)

- slimbus: stream: correct presence rate frequencies (Krzysztof Kozlowski)

- slimbus: qcom-ngd: Fix build error when CONFIG_SLIM_QCOM_NGD_CTRL=y && CONFIG_QCOM_RPROC_COMMON=m (Zheng Bin)

- Revert 'usb: dwc3: disable USB core PHY management' (Johan Hovold)

- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 (Takashi Iwai)

- ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro (Emil Flink)

- ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() (Takashi Iwai)

- drm/amd/display: Add HUBP surface flip interrupt handler (Rodrigo Siqueira)

- tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit() (Shang XiaoJing)

- tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit() (Shang XiaoJing)

- tracing: Fix race where eprobes can be called before the event (Steven Rostedt (Google))

- tracing: Fix wild-memory-access in register_synth_event() (Shang XiaoJing)

- tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() (Shang XiaoJing)

- tracing/ring-buffer: Have polling block on watermark (Steven Rostedt (Google))

- tracing: Fix memory leak in tracing_read_pipe() (Wang Yufen)

- ring_buffer: Do not deactivate non-existant pages (Daniil Tatianin)

- ftrace: Fix null pointer dereference in ftrace_add_mod() (Xiu Jianfeng)

- ftrace: Optimize the allocation for mcount entries (Wang Wensheng)

- ftrace: Fix the possible incorrect kernel message (Wang Wensheng)

- cifs: add check for returning value of SMB2_set_info_init (Anastasia Belova)

- net: thunderbolt: Fix error handling in tbnet_init() (Yuan Can)

- net: microchip: sparx5: Fix potential null-ptr-deref in sparx_stats_init() and sparx5_start() (Shang XiaoJing)

- cifs: Fix wrong return value checking when GETFLAGS (Zhang Xiaoxu)

- net/x25: Fix skb leak in x25_lapb_receive_frame() (Wei Yongjun)

- net: ag71xx: call phylink_disconnect_phy if ag71xx_hw_enable() fail in ag71xx_open() (Liu Jian)

- cifs: add check for returning value of SMB2_close_init (Anastasia Belova)

- platform/surface: aggregator: Do not check for repeated unsequenced packets (Maximilian Luz)

- platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized (Roger Pau Monne)

- drbd: use after free in drbd_create_device() (Dan Carpenter)

- bridge: switchdev: Fix memory leaks when changing VLAN protocol (Ido Schimmel)

- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process (Guangbin Huang)

- net: ena: Fix error handling in ena_init() (Yuan Can)

- net: ionic: Fix error handling in ionic_init_module() (Yuan Can)

- xen/pcpu: fix possible memory leak in register_pcpu() (Yang Yingliang)

- net: dsa: make dsa_master_ioctl() see through port_hwtstamp_get() shims (Vladimir Oltean)

- net: mhi: Fix memory leak in mhi_net_dellink() (Wei Yongjun)

- bnxt_en: Remove debugfs when pci_register_driver failed (Gaosheng Cui)

- net: caif: fix double disconnect client in chnl_net_open() (Zhengchao Shao)

- net: macvlan: Use built-in RCU list checking (Chuang Wang)

- mISDN: fix misuse of put_device() in mISDN_register_device() (Wang ShaoBo)

- net: liquidio: release resources when liquidio driver open failed (Zhengchao Shao)

- soc: imx8m: Enable OCOTP clock before reading the register (Xiaolei Wang)

- net: stmmac: ensure tx function is not running in stmmac_xdp_release() (Mohd Faizal Abdul Rahim)

- net: hinic: Fix error handling in hinic_module_init() (Yuan Can)

- mISDN: fix possible memory leak in mISDN_dsp_element_register() (Yang Yingliang)

- net: bgmac: Drop free_netdev() from bgmac_enet_remove() (Wei Yongjun)

- bpf: Initialize same number of free nodes for each pcpu_freelist (Xu Kuohai)

- MIPS: Loongson64: Add WARN_ON on kexec related kmalloc failed (Liao Chang)

- MIPS: fix duplicate definitions for exported symbols (Rongwei Zhang)

- nfp: change eeprom length to max length enumerators (Jaco Coetzee)

- ata: libata-transport: fix error handling in ata_tdev_add() (Yang Yingliang)

- ata: libata-transport: fix error handling in ata_tlink_add() (Yang Yingliang)

- ata: libata-transport: fix error handling in ata_tport_add() (Yang Yingliang)

- ata: libata-transport: fix double ata_host_put() in ata_tport_add() (Yang Yingliang)

- arm64: dts: imx8mn: Fix NAND controller size-cells (Marek Vasut)

- arm64: dts: imx8mm: Fix NAND controller size-cells (Marek Vasut)

- ARM: dts: imx7: Fix NAND controller size-cells (Marek Vasut)

- drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker() (Shang XiaoJing)

- drm/drv: Fix potential memory leak in drm_dev_init() (Shang XiaoJing)

- drm/panel: simple: set bpc field for logic technologies displays (Aishwarya Kothari)

- drm/vc4: kms: Fix IS_ERR() vs NULL check for vc4_kms (Gaosheng Cui)

- pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map (Zeng Heng)

- parport_pc: Avoid FIFO port location truncation (Maciej W. Rozycki)

- siox: fix possible memory leak in siox_device_add() (Yang Yingliang)

- arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro (D Scott Phillips)

- bpf: Fix memory leaks in __check_func_call (Wang Yufen)

- block: sed-opal: kmalloc the cmd/resp buffers (Serge Semin)

- scsi: scsi_transport_sas: Fix error handling in sas_phy_add() (Yang Yingliang)

- pinctrl: rockchip: list all pins in a possible mux route for PX30 (Quentin Schulz)

- ASoC: soc-utils: Remove __exit for snd_soc_util_exit() (Chen Zhongjin)

- bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() (Baisong Zhong)

- tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send (Duoming Zhou)

- serial: imx: Add missing .thaw_noirq hook (Shawn Guo)

- serial: 8250: omap: Flush PM QOS work on remove (Tony Lindgren)

- serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove() (Tony Lindgren)

- serial: 8250_omap: remove wait loop from Errata i202 workaround (Matthias Schiffer)

- serial: 8250: omap: Fix missing PM runtime calls for omap8250_set_mctrl() (Tony Lindgren)

- ARM: at91: pm: avoid soft resetting AC DLL (Claudiu Beznea)

- ASoC: tas2764: Fix set_tdm_slot in case of single slot (Martin Poviser)

- ASoC: tas2770: Fix set_tdm_slot in case of single slot (Martin Poviser)

- ASoC: core: Fix use-after-free in snd_soc_exit() (Chen Zhongjin)

- ARM: dts: at91: sama7g5: fix signal name of pin PB2 (Mihai Sain)

- spi: stm32: Print summary 'callbacks suppressed' message (Marek Vasut)

- arm64: dts: qcom: sm8350-hdk: Specify which LDO modes are allowed (Douglas Anderson)

- arm64: dts: qcom: sm8250-xperia-edo: Specify which LDO modes are allowed (Douglas Anderson)

- arm64: dts: qcom: sm8150-xperia-kumano: Specify which LDO modes are allowed (Douglas Anderson)

- arm64: dts: qcom: sa8155p-adp: Specify which LDO modes are allowed (Douglas Anderson)

- KVM: x86/pmu: Do not speculatively query Intel GP PMCs that don't exist yet (Like Xu)

- spi: intel: Use correct mask for flash and protected regions (Mika Westerberg)

- mtd: spi-nor: intel-spi: Disable write protection only if asked (Mika Westerberg)

- ASoC: codecs: jz4725b: Fix spelling mistake 'Sourc' -> 'Source', 'Routee' -> 'Route' (Colin Ian King)

- x86/cpu: Add several Intel server CPU model numbers (Tony Luck)

- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (Luiz Augusto von Dentz)

- btrfs: remove pointless and double ulist frees in error paths of qgroup tests (Filipe Manana)

- drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid (Nathan Huckleberry)

- i2c: i801: add lis3lv02d's I2C address for Vostro 5568 (Nam Cao)

- i2c: tegra: Allocate DMA memory for DMA engine (Thierry Reding)

- firmware: arm_scmi: Cleanup the core driver removal callback (Cristian Marussi)

- ACPI: x86: Add another system to quirk list for forcing StorageD3Enable (Mario Limonciello)

- NFSv4: Retry LOCK on OLD_STATEID during delegation return (Benjamin Coddington)

- btrfs: raid56: properly handle the error when unable to find the missing stripe (Qu Wenruo)

- RDMA/efa: Add EFA 0xefa2 PCI ID (Michael Margolin)

- ACPI: scan: Add LATT2021 to acpi_ignore_dep_ids

- drm/amd/display: Remove wrong pipe control lock (Rodrigo Siqueira)

- ASoC: rt1308-sdw: add the default value of some registers (Shuming Fan)

- selftests/intel_pstate: fix build for ARCH=x86_64 (Ricardo Canuelo)

- selftests/futex: fix build for clang (Ricardo Canuelo)

- ASoC: Intel: sof_sdw: add quirk variant for LAPBC710 NUC15 (Pierre-Louis Bossart)

- ASoC: codecs: jz4725b: fix capture selector naming (Siarhei Volkau)

- ASoC: codecs: jz4725b: use right control for Capture Volume (Siarhei Volkau)

- ASoC: codecs: jz4725b: fix reported volume for Master ctl (Siarhei Volkau)

- ASoC: codecs: jz4725b: add missed Line In power control bit (Siarhei Volkau)

- spi: intel: Fix the offset to get the 64K erase opcode (Mauro Lima)

- ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK (Xiaolei Wang)

- ASoC: rt1019: Fix the TDM settings (Derek Fang)

- ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe (Zhang Qilong)

- ASoC: wm8997: Revert 'ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe' (Zhang Qilong)

- ASoC: wm5110: Revert 'ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe' (Zhang Qilong)

- ASoC: wm5102: Revert 'ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe' (Zhang Qilong)

- LTS version: v5.15.79 (Jack Vogel)

- x86/cpu: Restore AMD's DE_CFG MSR after resume (Borislav Petkov)

- net: tun: call napi_schedule_prep() to ensure we own a napi (Eric Dumazet)

- drm/amdkfd: Migrate in CPU page fault use current mm (Philip Yang)

- marvell: octeontx2: build error: unknown type name 'u64' (Anders Roxell)

- dmaengine: at_hdmac: Check return code of dma_async_device_register (Tudor Ambarus)

- dmaengine: at_hdmac: Fix impossible condition (Tudor Ambarus)

- dmaengine: at_hdmac: Don't allow CPU to reorder channel enable (Tudor Ambarus)

- dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors (Tudor Ambarus)

- dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware (Tudor Ambarus)

- dmaengine: at_hdmac: Fix concurrency over the active list (Tudor Ambarus)

- dmaengine: at_hdmac: Free the memset buf without holding the chan lock (Tudor Ambarus)

- dmaengine: at_hdmac: Fix concurrency over descriptor (Tudor Ambarus)

- dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all() (Tudor Ambarus)

- dmaengine: at_hdmac: Protect atchan->status with the channel lock (Tudor Ambarus)

- dmaengine: at_hdmac: Do not call the complete callback on device_terminate_all (Tudor Ambarus)

- dmaengine: at_hdmac: Fix premature completion of desc in issue_pending (Tudor Ambarus)

- dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending (Tudor Ambarus)

- dmaengine: at_hdmac: Don't start transactions at tx_submit level (Tudor Ambarus)

- dmaengine: at_hdmac: Fix at_lli struct definition (Tudor Ambarus)

- cert host tools: Stop complaining about deprecated OpenSSL functions (Linus Torvalds)

- can: j1939: j1939_send_one(): fix missing CAN header initialization (Oliver Hartkopp)

- mm/shmem: use page_mapping() to detect page cache for uffd continue (Peter Xu)

- mm/memremap.c: map FS_DAX device memory as decrypted (Pankaj Gupta)

- mm/damon/dbgfs: check if rm_contexts input is for a real context (SeongJae Park)

- udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (ZhangPeng)

- mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)

- btrfs: zoned: initialize device's zone info for seeding (Johannes Thumshirn)

- btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() (Zhang Xiaoxu)

- btrfs: fix match incorrectly in dev_args_match_device (Liu Shixin)

- wifi: ath11k: avoid deadlock during regulatory update in ath11k_regd_update() (Wen Gong)

- platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi (Jorge Lopez)

- drm/amdgpu: disable BACO on special BEIGE_GOBY card (Guchun Chen)

- drm/i915/dmabuf: fix sg_table handling in map_dma_buf (Matthew Auld)

- nilfs2: fix use-after-free bug of ns_writer on remount (Ryusuke Konishi)

- nilfs2: fix deadlock in nilfs_count_free_blocks() (Ryusuke Konishi)

- ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure (Shin'ichiro Kawasaki)

- vmlinux.lds.h: Fix placement of '.data..decrypted' section (Nathan Chancellor)

- ALSA: usb-audio: Add DSD support for Accuphase DAC-60 (Jussi Laako)

- ALSA: usb-audio: Add quirk entry for M-Audio Micro (Takashi Iwai)

- ALSA: usb-audio: Yet more regression for for the delayed card registration (Takashi Iwai)

- ALSA: hda/realtek: Add Positivo C6300 model quirk (Edson Juliano Drosdeck)

- ALSA: hda: fix potential memleak in 'add_widget_node' (Ye Bin)

- ALSA: hda/ca0132: add quirk for EVGA Z390 DARK (Xian Wang)

- ALSA: hda/hdmi - enable runtime pm for more AMD display audio (Evan Quan)

- mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA (Haibo Chen)

- mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)

- mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)

- mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris)

- mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI (Brian Norris)

- MIPS: jump_label: Fix compat branch range check (Jiaxun Yang)

- arm64: efi: Fix handling of misaligned runtime regions and drop warning (Ard Biesheuvel)

- riscv: fix reserved memory setup (Conor Dooley)

- riscv: vdso: fix build with llvm (Jisheng Zhang)

- riscv: process: fix kernel info leakage (Jisheng Zhang)

- net: macvlan: fix memory leaks of macvlan_common_newlink (Chuang Wang)

- ethernet: tundra: free irq when alloc ring failed in tsi108_open() (Zhengchao Shao)

- net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open() (Zhengchao Shao)

- ethernet: s2io: disable napi when start nic failed in s2io_card_up() (Zhengchao Shao)

- net: atlantic: macsec: clear encryption keys from the stack (Antoine Tenart)

- net: phy: mscc: macsec: clear encryption keys when freeing a flow (Antoine Tenart)

- stmmac: dwmac-loongson: fix missing of_node_put() while module exiting (Yang Yingliang)

- stmmac: dwmac-loongson: fix missing pci_disable_device() in loongson_dwmac_probe() (Yang Yingliang)

- stmmac: dwmac-loongson: fix missing pci_disable_msi() while module exiting (Yang Yingliang)

- cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open() (Zhengchao Shao)

- mctp: Fix an error handling path in mctp_init() (Wei Yongjun)

- stmmac: intel: Update PCH PTP clock rate from 200MHz to 204.8MHz (Tan, Tee Min)

- stmmac: intel: Enable 2.5Gbps for Intel AlderLake-S (Wong Vee Khee)

- net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() (Zhengchao Shao)

- net: cpsw: disable napi in cpsw_ndo_open() (Zhengchao Shao)

- net/mlx5e: E-Switch, Fix comparing termination table instance (Roi Dayan)

- net/mlx5: Allow async trigger completion execution on single CPU systems (Roy Novich)

- net/mlx5: Bridge, verify LAG state when adding bond to bridge (Vlad Buslov)

- net: wwan: iosm: fix memory leak in ipc_pcie_read_bios_cfg (M Chetan Kumar)

- net: nixge: disable napi when enable interrupts failed in nixge_open() (Zhengchao Shao)

- net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init() (Zhengchao Shao)

- netfilter: Cleanup nft_net->module_list from nf_tables_exit_net() (Shigeru Yoshida)

- netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg() (Ziyang Xuan)

- perf tools: Add the include/perf/ directory to .gitignore (Donglin Peng)

- perf stat: Fix printing os->prefix in CSV metrics output (Athira Rajeev)

- drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() (Zhengchao Shao)

- net: lapbether: fix issue of invalid opcode in lapbeth_open() (Zhengchao Shao)

- dmaengine: ti: k3-udma-glue: fix memory leak when register device fail (Yang Yingliang)

- dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() (Christophe JAILLET)

- dmaengine: pxa_dma: use platform_get_irq_optional (Doug Brown)

- tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header (Xin Long)

- net: broadcom: Fix BCMGENET Kconfig (YueHaibing)

- net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable() (Rasmus Villemoes)

- can: af_can: fix NULL pointer dereference in can_rx_register() (Zhengchao Shao)

- ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network (Alexander Potapenko)

- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent (Lu Wei)

- drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() (Yuan Can)

- net: wwan: mhi: fix memory leak in mhi_mbim_dellink (HW He)

- net: wwan: iosm: fix memory leak in ipc_wwan_dellink (HW He)

- hamradio: fix issue of dev reference count leakage in bpq_device_event() (Zhengchao Shao)

- net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event() (Zhengchao Shao)

- KVM: s390: pv: don't allow userspace to set the clock under PV (Nico Boehr)

- phy: ralink: mt7621-pci: add sentinel to quirks table (John Thomson)

- capabilities: fix undefined behavior in bit shift for CAP_TO_MASK (Gaosheng Cui)

- net: fman: Unregister ethernet device on removal (Sean Anderson)

- bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer (Alex Barba)

- bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() (Michael Chan)

- net: tun: Fix memory leaks of napi_get_frags (Wang Yufen)

- octeontx2-pf: NIX TX overwrites SQ_CTX_HW_SSQ_INT

- octeontx2-pf: Use hardware register for CQE count (Geetha sowjanya)

- macsec: clear encryption keys from the stack after setting up offload (Sabrina Dubroca)

- macsec: fix detection of RXSCs when toggling offloading (Sabrina Dubroca)

- macsec: fix secy->n_rx_sc accounting (Sabrina Dubroca)

- macsec: delete new rxsc when offload fails (Sabrina Dubroca)

- net: gso: fix panic on frag_list with mixed head alloc types (Jiri Benc)

- bpf: Fix wrong reg type conversion in release_reference() (Youlin Li)

- bpf: Add helper macro bpf_for_each_reg_in_vstate (Kumar Kartikeya Dwivedi)

- bpf, sock_map: Move cancel_work_sync() out of sock lock (Cong Wang)

- bpf: Fix sockmap calling sleepable function in teardown path (John Fastabend)

- bpf, sockmap: Fix sk->sk_forward_alloc warn_on in sk_stream_kill_queues (Wang Yufen)

- HID: hyperv: fix possible memory leak in mousevsc_probe() (Yang Yingliang)

- bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE (Pu Lehui)

- wifi: mac80211: Set TWT Information Frame Disabled bit as 1 (Howard Hsu)

- bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues (Wang Yufen)

- bpf, verifier: Fix memory leak in array reallocation for stack state (Kees Cook)

- soundwire: qcom: check for outanding writes before doing a read (Srinivas Kandagatla)

- soundwire: qcom: reinit broadcast completion (Srinivas Kandagatla)

- wifi: cfg80211: fix memory leak in query_regdb_file() (Arend van Spriel)

- wifi: cfg80211: silence a sparse RCU warning (Johannes Berg)

- phy: stm32: fix an error code in probe (Dan Carpenter)

- hwspinlock: qcom: correct MMIO max register for newer SoCs (Krzysztof Kozlowski)

- drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram() (Yang Li)

- drm/amdkfd: handle CPU fault on COW mapping (Philip Yang)

- drm/amdkfd: avoid recursive lock in migrations back to RAM (Alex Sierra)

- fuse: fix readdir cache race (Miklos Szeredi)

- thunderbolt: Add DP OUT resource when DP tunnel is discovered (Sanjay R Mehta)

- thunderbolt: Tear down existing tunnels when resuming from hibernate (Mika Westerberg)

- LTS version: v5.15.78 (Jack Vogel)

- wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() (Dokyung Song)

- drm/i915/sdvo: Setup DDC fully before output init (Ville Syrjala)

- drm/i915/sdvo: Filter out invalid outputs more sensibly (Ville Syrjala)

- drm/rockchip: dsi: Force synchronous probe (Brian Norris)

- drm/rockchip: dsi: Clean up 'usage_mode' when failing to attach (Brian Norris)

- cifs: fix regression in very old smb1 mounts (Ronnie Sahlberg)

- ext4,f2fs: fix readahead of verity data (Matthew Wilcox (Oracle))

- tee: Fix tee_shm_register() for kernel TEE drivers (Sumit Garg)

- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky)

- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky)

- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky)

- KVM: x86: emulator: em_sysexit should update ctxt->mode (Maxim Levitsky)

- KVM: arm64: Fix bad dereference on MTE-enabled systems (Ryan Roberts)

- KVM: VMX: fully disable SGX if SECONDARY_EXEC_ENCLS_EXITING unavailable (Emanuele Giuseppe Esposito)

- KVM: x86: Mask off reserved bits in CPUID.8000001FH (Jim Mattson)

- KVM: x86: Mask off reserved bits in CPUID.80000001H (Jim Mattson)

- KVM: x86: Mask off reserved bits in CPUID.80000008H (Jim Mattson)

- KVM: x86: Mask off reserved bits in CPUID.8000001AH (Jim Mattson)

- KVM: x86: Mask off reserved bits in CPUID.80000006H (Jim Mattson)

- x86/syscall: Include asm/ptrace.h in syscall_wrapper header (Jiri Olsa)

- ext4: fix BUG_ON() when directory entry has invalid rec_len (Luis Henriques)

- ext4: fix warning in 'ext4_da_release_space' (Ye Bin)

- parisc: Avoid printing the hardware path twice (Helge Deller)

- parisc: Export iosapic_serial_irq() symbol for serial port driver (Helge Deller)

- parisc: Make 8250_gsc driver dependend on CONFIG_PARISC (Helge Deller)

- perf/x86/intel: Fix pebs event constraints for SPR (Kan Liang)

- perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes

- perf/x86/intel: Fix pebs event constraints for ICL (Kan Liang)

- arm64: entry: avoid kprobe recursion (Mark Rutland)

- efi: random: Use 'ACPI reclaim' memory for random seed (Ard Biesheuvel)

- efi: random: reduce seed size to 32 bytes (Ard Biesheuvel)

- fuse: add file_modified() to fallocate (Miklos Szeredi)

- capabilities: fix potential memleak on error path from vfs_getxattr_alloc() (Gaosheng Cui)

- tracing/histogram: Update document for KEYS_MAX size (Zheng Yejian)

- tools/nolibc/string: Fix memcmp() implementation (Rasmus Villemoes)

- ring-buffer: Check for NULL cpu_buffer in ring_buffer_wake_waiters() (Steven Rostedt (Google))

- kprobe: reverse kp->flags when arm_kprobe failed (Li Qiang)

- tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() (Shang XiaoJing)

- tcp/udp: Make early_demux back namespacified. (Kuniyuki Iwashima)

- ftrace: Fix use-after-free for dynamic ftrace_ops (Li Huafei)

- btrfs: fix type of parameter generation in btrfs_get_dentry (David Sterba)

- btrfs: fix tree mod log mishandling of reallocated nodes (Josef Bacik)

- btrfs: fix lost file sync on direct IO write with nowait and dsync iocb (Filipe Manana)

- fscrypt: fix keyring memory leak on mount failure (Eric Biggers)

- fscrypt: stop using keyrings subsystem for fscrypt_master_key (Eric Biggers)

- af_unix: Fix memory leaks of the whole sk due to OOB skb. (Kuniyuki Iwashima)

- block, bfq: protect 'bfqd->queued' by 'bfqd->lock' (Yu Kuai)

- Bluetooth: L2CAP: Fix attempting to access uninitialized memory (Luiz Augusto von Dentz) {CVE-2022-42895}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (Luiz Augusto von Dentz) {CVE-2022-42896}
- i2c: piix4: Fix adapter not be removed in piix4_remove() (Chen Zhongjin)

- arm64: dts: juno: Add thermal critical trip points (Cristian Marussi)

- firmware: arm_scmi: Fix devres allocation device in virtio transport (Cristian Marussi)

- firmware: arm_scmi: Make Rx chan_setup fail on memory errors (Cristian Marussi)

- firmware: arm_scmi: Suppress the driver's bind attributes (Cristian Marussi)

- block: Fix possible memory leak for rq_wb on add_disk failure (Chen Zhongjin)

- arm64: dts: ls208xa: specify clock frequencies for the MDIO controllers (Ioana Ciornei)

- arm64: dts: ls1088a: specify clock frequencies for the MDIO controllers (Ioana Ciornei)

- arm64: dts: lx2160a: specify clock frequencies for the MDIO controllers (Ioana Ciornei)

- arm64: dts: imx8: correct clock order (Peng Fan)

- ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset (Tim Harvey)

- clk: qcom: Update the force mem core bit for GPU clocks (Taniya Das)

- efi/tpm: Pass correct address to memblock_reserve (Jerry Snitselaar)

- i2c: xiic: Add platform module alias (Martin Tuma)

- drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case (Danijel Slivka)

- HID: saitek: add madcatz variant of MMO7 mouse device ID (Samuel Bailey)

- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar)

- ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() (Ashish Kalra)

- media: v4l: subdev: Fail graciously when getting try data for NULL state (Sakari Ailus)

- media: meson: vdec: fix possible refcount leak in vdec_probe() (Hangyu Hua)

- media: dvb-frontends/drxk: initialize err to 0 (Hans Verkuil)

- media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE (Hans Verkuil)

- media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE (Hans Verkuil)

- media: rkisp1: Zero v4l2_subdev_format fields in when validating links (Laurent Pinchart)

- media: rkisp1: Use correct macro for gradient registers (Laurent Pinchart)

- media: rkisp1: Initialize color space on resizer sink and source pads (Laurent Pinchart)

- media: rkisp1: Don't pass the quantization to rkisp1_csm_config() (Laurent Pinchart)

- s390/cio: fix out-of-bounds access on cio_ignore free (Peter Oberparleiter)

- s390/cio: derive cdev information only for IO-subchannels (Vineeth Vijayan)

- s390/boot: add secure boot trailer (Peter Oberparleiter)

- s390/uaccess: add missing EX_TABLE entries to __clear_user() (Heiko Carstens)

- mtd: parsers: bcm47xxpart: Fix halfblock reads (Linus Walleij)

- mtd: parsers: bcm47xxpart: print correct offset on read error (Rafal Milecki)

- fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards (Helge Deller)

- video/fbdev/stifb: Implement the stifb_fillrect() function (Helge Deller)

- drm/msm/hdmi: fix IRQ lifetime (Johan Hovold)

- drm/msm/hdmi: Remove spurious IRQF_ONESHOT flag (Daniel Thompson)

- vsock: fix possible infinite sleep in vsock_connectible_wait_data() (Dexuan Cui)

- ipv6: fix WARNING in ip6_route_net_exit_late() (Zhengchao Shao)

- net, neigh: Fix null-ptr-deref in neigh_table_clear() (Chen Zhongjin)

- net/smc: Fix possible leaked pernet namespace in smc_init() (Chen Zhongjin)

- stmmac: dwmac-loongson: fix invalid mdio_node (Liu Peibao)

- ibmvnic: Free rwi on reset success (Nick Child)

- net: mdio: fix undefined behavior in bit shift for __mdiobus_register (Gaosheng Cui)

- Bluetooth: L2CAP: Fix memory leak in vhci_write (Hawkins Jiawei)

- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() (Zhengchao Shao)

- Bluetooth: virtio_bt: Use skb_put to set length (Soenke Huster)

- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Maxim Mikityanskiy)

- netfilter: ipset: enforce documented limit to prevent allocating huge memory (Jozsef Kadlecsik)

- btrfs: fix ulist leaks in error paths of qgroup self tests (Filipe Manana)

- btrfs: fix inode list leak during backref walking at find_parent_nodes() (Filipe Manana)

- btrfs: fix inode list leak during backref walking at resolve_indirect_refs() (Filipe Manana)

- isdn: mISDN: netjet: fix wrong check of device registration (Yang Yingliang)

- mISDN: fix possible memory leak in mISDN_register_device() (Yang Yingliang)

- rose: Fix NULL pointer dereference in rose_send_frame() (Zhang Qilong)

- ipvs: fix WARNING in ip_vs_app_net_cleanup() (Zhengchao Shao)

- ipvs: fix WARNING in __ip_vs_cleanup_batch() (Zhengchao Shao)

- ipvs: use explicitly signed chars (Jason A. Donenfeld)

- netfilter: nf_tables: release flow rule object from commit path (Pablo Neira Ayuso)

- netfilter: nf_tables: netlink notifier might race to release objects (Pablo Neira Ayuso)

- net: tun: fix bugs for oversize packet when napi frags enabled (Ziyang Xuan)

- net: sched: Fix use after free in red_enqueue() (Dan Carpenter)

- ata: pata_legacy: fix pdc20230_set_piomode() (Sergey Shtylyov)

- net: fec: fix improper use of NETDEV_TX_BUSY (Zhang Changzhong)

- nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() (Shang XiaoJing)

- nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() (Shang XiaoJing)

- nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() (Shang XiaoJing)

- nfc: fdp: Fix potential memory leak in fdp_nci_send() (Shang XiaoJing)

- net: dsa: fall back to default tagger if we can't load the one from DT (Vladimir Oltean)

- RDMA/qedr: clean up work queue on failure in qedr_alloc_resources() (Dan Carpenter)

- RDMA/core: Fix null-ptr-deref in ib_core_cleanup() (Chen Zhongjin)

- net: dsa: Fix possible memory leaks in dsa_loop_init() (Chen Zhongjin)

- nfs4: Fix kmemleak when allocate slot failed (Zhang Xiaoxu)

- NFSv4.2: Fixup CLONE dest file size for zero-length count (Benjamin Coddington)

- SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed (Zhang Xiaoxu)

- NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot (Trond Myklebust)

- NFSv4.1: Handle RECLAIM_COMPLETE trunking errors (Trond Myklebust)

- NFSv4: Fix a potential state reclaim deadlock (Trond Myklebust)

- RDMA/hns: Disable local invalidate operation (Yangyang Li)

- RDMA/hns: Use hr_reg_xxx() instead of remaining roce_set_xxx() (Wenpeng Liang)

- RDMA/hns: Remove magic number (Xinhao Liu)

- IB/hfi1: Correctly move list in sc_disable() (Dean Luick)

- KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER (Alexander Graf)

- KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() (Alexander Graf)

- KVM: x86: Protect the unused bits in MSR exiting flags (Aaron Lewis)

- HID: playstation: add initial DualSense Edge controller support (Roderick Colenbrander)

- mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page (Baolin Wang)

- drm/amd/display: explicitly disable psr_feature_enable appropriately (Shirish S)

- KVM: x86: Treat #DBs from the emulator as fault-like (code and DR7.GD=1) (Sean Christopherson)

- serial: ar933x: Deassert Transmit Enable on ->rs485_config() (Lukas Wunner)

- scsi: lpfc: Rework MIB Rx Monitor debug info logic (James Smart)

- scsi: lpfc: Adjust CMF total bytes and rxmonitor (James Smart)

- scsi: lpfc: Adjust bytes received vales during cmf timer interval (James Smart)

- LTS version: v5.15.77 (Jack Vogel)

- tcp/udp: Fix memory leak in ipv6_renew_options(). (Kuniyuki Iwashima)

- serial: Deassert Transmit Enable on probe in driver-specific way (Lukas Wunner)

- serial: core: move RS485 configuration tasks from drivers into core (Lino Sanfilippo)

- can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive (Biju Das)

- can: rcar_canfd: fix channel specific IRQ handling for RZ/G2L (Biju Das)

- scsi: sd: Revert 'scsi: sd: Remove a local variable' (Yu Kuai)

- arm64: Add AMPERE1 to the Spectre-BHB affected list (D Scott Phillips)

- net: enetc: survive memory pressure without crashing (Vladimir Oltean)

- kcm: do not sense pfmemalloc status in kcm_sendpage() (Eric Dumazet)

- net: do not sense pfmemalloc status in skb_append_pagefrags() (Eric Dumazet)

- net/mlx5: Fix crash during sync firmware reset (Suresh Devarakonda)

- net/mlx5: Update fw fatal reporter state on PCI handlers successful recover (Roy Novich)

- net/mlx5: Print more info on pci error handlers (Saeed Mahameed)

- net/mlx5: Fix possible use-after-free in async command interface (Tariq Toukan)

- net/mlx5e: Extend SKB room check to include PTP-SQ (Aya Levin)

- net/mlx5e: Do not increment ESN when updating IPsec ESN state (Hyong Youb Kim)

- netdevsim: remove dir in nsim_dev_debugfs_init() when creating ports dir failed (Zhengchao Shao)

- net: broadcom: bcm4908_enet: update TX stats after actual transmission (Rafal Milecki)

- net: broadcom: bcm4908enet: remove redundant variable bytes (Colin Ian King)

- nh: fix scope used to find saddr when adding non gw nh (Nicolas Dichtel)

- net: bcmsysport: Indicate MAC is in charge of PHY PM (Florian Fainelli)

- net: ehea: fix possible memory leak in ehea_register_port() (Yang Yingliang)

- openvswitch: switch from WARN to pr_warn (Aaron Conole)

- ALSA: aoa: Fix I2S device accounting (Takashi Iwai)

- ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() (Yang Yingliang)

- net: ethernet: ave: Fix MAC to be in charge of PHY PM (Kunihiko Hayashi)

- net: fec: limit register access on i.MX6UL (Juergen Borleis)

- perf vendor events arm64: Fix incorrect Hisi hip08 L3 metrics (Shang XiaoJing)

- PM: domains: Fix handling of unavailable/disabled idle states (Sudeep Holla)

- net: ksz884x: fix missing pci_disable_device() on error in pcidev_init() (Yang Yingliang)

- i40e: Fix flow-type by setting GL_HASH_INSET registers (Slawomir Laba)

- i40e: Fix VF hang when reset is triggered on another VF (Sylwester Dziedziuch)

- i40e: Fix ethtool rx-flow-hash setting for X722 (Slawomir Laba)

- ipv6: ensure sane device mtu in tunnels (Eric Dumazet)

- perf vendor events power10: Fix hv-24x7 metric events (Kajol Jain)

- media: vivid: set num_in/outputs to 0 if not supported (Hans Verkuil)

- media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced' (Hans Verkuil)

- media: v4l2-dv-timings: add sanity checks for blanking values (Hans Verkuil)

- media: vivid: dev->bitmap_cap wasn't freed in all cases (Hans Verkuil)

- media: vivid: s_fbuf: add more sanity checks (Hans Verkuil)

- PM: hibernate: Allow hybrid sleep to work with s2idle (Mario Limonciello)

- can: mcp251x: mcp251x_can_probe(): add missing unregister_candev() in error path (Dongliang Mu)

- can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path (Dongliang Mu)

- drm/amdkfd: Fix memory leak in kfd_mem_dmamap_userptr() (Rafael Mendonca)

- net-memcg: avoid stalls when under memory pressure (Jakub Kicinski)

- tcp: fix indefinite deferral of RTO with SACK reneging (Neal Cardwell)

- tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Lu Wei)

- tcp: minor optimization in tcp_add_backlog() (Eric Dumazet)

- net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY (Zhang Changzhong)

- net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed (Zhengchao Shao)

- kcm: annotate data-races around kcm->rx_wait (Eric Dumazet)

- kcm: annotate data-races around kcm->rx_psock (Eric Dumazet)

- atlantic: fix deadlock at aq_nic_stop (Inigo Huguet)

- drm/i915/dp: Reset frl trained flag before restarting FRL training (Ankit Nautiyal)

- amd-xgbe: add the bit rate quirk for Molex cables (Raju Rangoju)

- amd-xgbe: fix the SFP compliance codes check for DAC cables (Raju Rangoju)

- x86/unwind/orc: Fix unreliable stack dump with gcov (Chen Zhongjin)

- nfc: virtual_ncidev: Fix memory leak in virtual_nci_send() (Shang XiaoJing)

- net: macb: Specify PHY PM management done by MAC (Sergiu Moga)

- net: hinic: fix the issue of double release MBOX callback of VF (Zhengchao Shao)

- net: hinic: fix the issue of CMDQ memory leaks (Zhengchao Shao)

- net: hinic: fix memory leak when reading function table (Zhengchao Shao)

- net: hinic: fix incorrect assignment issue in hinic_set_interrupt_cfg() (Zhengchao Shao)

- net: netsec: fix error handling in netsec_register_mdio() (Yang Yingliang)

- tipc: fix a null-ptr-deref in tipc_topsrv_accept (Xin Long)

- perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap() (Maxim Levitsky)

- ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() (Yang Yingliang)

- ASoC: qcom: lpass-cpu: Mark HDMI TX parity register as volatile (Srinivasa Rao Mandadapu)

- mtd: rawnand: intel: Add missing of_node_put() in ebu_nand_probe() (Yang Yingliang)

- arc: iounmap() arg is volatile (Randy Dunlap)

- sched/core: Fix comparison in sched_group_cookie_match() (Lin Shengwang)

- perf: Fix missing SIGTRAPs (Peter Zijlstra)

- ASoC: qcom: lpass-cpu: mark HDMI TX registers as volatile (Srinivasa Rao Mandadapu)

- KVM: selftests: Fix number of pages for memory slot in memslot_modification_stress_test (Gavin Shan)

- drm/msm: Fix return type of mdp4_lvds_connector_mode_valid (Nathan Huckleberry)

- media: atomisp: prevent integer overflow in sh_css_set_black_frame() (Dan Carpenter)

- media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation (Alexander Stein)

- net: ieee802154: fix error return code in dgram_bind() (Wei Yongjun)

- ethtool: eeprom: fix null-deref on genl_info in dump (Xin Long)

- mmc: block: Remove error check of hw_reset on reset (Christian Lohle)

- s390/pci: add missing EX_TABLE entries to pcistg_mio_inuser()/pcilg_mio_inuser() (Heiko Carstens)

- s390/futex: add missing EX_TABLE entry to __futex_atomic_op() (Heiko Carstens)

- perf auxtrace: Fix address filter symbol name match for modules (Adrian Hunter)

- ARC: mm: fix leakage of memory allocated for PTE (Pavel Kozlov)

- pinctrl: Ingenic: JZ4755 bug fixes (Siarhei Volkau)

- kernfs: fix use-after-free in __kernfs_remove (Christian A. Ehrhardt)

- counter: microchip-tcb-capture: Handle Signal1 read and Synapse (William Breathitt Gray)

- mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on 8bit bus (Sascha Hauer)

- mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake (Patrick Thompson)

- mmc: core: Fix kernel panic when remove non-standard SDIO card (Matthew Ma)

- mmc: sdhci_am654: 'select', not 'depends' REGMAP_MMIO (Brian Norris)

- coresight: cti: Fix hang in cti_disable_hw() (James Clark)

- drm/msm/dp: fix IRQ lifetime (Johan Hovold)

- drm/msm/hdmi: fix memory corruption with too many bridges (Johan Hovold)

- drm/msm/dsi: fix memory corruption with too many bridges (Johan Hovold)

- drm/amdgpu: disallow gfxoff until GC IP blocks complete s2idle resume (Prike Liang)

- scsi: qla2xxx: Use transport-defined speed mask for supported_speeds (Manish Rangankar)

- mac802154: Fix LQI recording (Miquel Raynal)

- exec: Copy oldsighand->action under spin-lock (Bernd Edlinger)

- fs/binfmt_elf: Fix memory leak in load_elf_binary() (Li Zetao)

- cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (Rafael J. Wysocki)

- cpufreq: intel_pstate: Read all MSRs on the target CPU (Rafael J. Wysocki)

- fbdev: smscufx: Fix several use-after-free bugs (Hyunwoo Kim)

- iio: adxl372: Fix unsafe buffer attributes (Matti Vaittinen)

- iio: temperature: ltc2983: allocate iio channels once (Cosmin Tanislav)

- iio: light: tsl2583: Fix module unloading (Shreeya Patel)

- tools: iio: iio_utils: fix digit calculation (Matti Vaittinen)

- xhci: Remove device endpoints from bandwidth list when freeing the device (Mathias Nyman)

- xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices (Mario Limonciello)

- xhci: Add quirk to reset host back to default state at shutdown (Mathias Nyman)

- mtd: rawnand: marvell: Use correct logic for nand-keep-config (Tony O'Brien)

- usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller (Jens Glathe)

- usb: bdc: change state when port disconnected (Justin Chen)

- usb: dwc3: gadget: Don't set IMI for no_interrupt (Thinh Nguyen)

- usb: dwc3: gadget: Stop processing more requests on IMI (Thinh Nguyen)

- usb: gadget: uvc: fix sg handling during video encode (Jeff Vanhoof)

- usb: gadget: uvc: fix sg handling in error case (Dan Vacura)

- USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM (Hannu Hartikainen)

- ALSA: rme9652: use explicitly signed char (Jason A. Donenfeld)

- ALSA: au88x0: use explicitly signed char (Jason A. Donenfeld)

- ALSA: usb-audio: Add quirks for M-Audio Fast Track C400/600 (Takashi Iwai)

- ALSA: Use del_timer_sync() before freeing timer (Steven Rostedt (Google))

- can: kvaser_usb: Fix possible completions during init_completion (Anssi Hannula)

- can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb() (Yang Yingliang)

- NFSv4: Add an fattr allocation to _nfs4_discover_trunking() (Scott Mayhew)

- NFSv4: Fix free of uninitialized nfs4_label on referral lookup. (Benjamin Coddington)

- rds: ib: Enable FC by default (Hakon Bugge) [Orabug: 33930793]
- Adding a new sysfs entry point -- forcepower -- to /sys/bus/pci/slots/X. (James Puthukattukaran) [Orabug: 34719459]
- nvme: paring quiesce/unquiesce (Ming Lei) [Orabug: 34719459]
- nvme: prepare for pairing quiescing and unquiescing (Ming Lei) [Orabug: 34719459]
- nvme: apply nvme API to quiesce/unquiesce admin queue (Ming Lei) [Orabug: 34719459]
- nvme: add APIs for stopping/starting admin queue (Ming Lei) [Orabug: 34719459]
- hugetlbfs: don't delete error page from pagecache (James Houghton) [Orabug: 34772616]
- mm: shmem: don't truncate page if memory failure happens (Yang Shi) [Orabug: 34772616]
- mm: hwpoison: handle non-anonymous THP correctly (Yang Shi) [Orabug: 34772616]
- mm: hwpoison: refactor refcount check handling (Yang Shi) [Orabug: 34772616]
- net/rds: Quiesce heartbeat worker in rds_conn_path_destroy() (Sharath Srinivasan) [Orabug: 34815818]
- net/rds: Add support for tracing RDS heartbeats (Sharath Srinivasan) [Orabug: 34815818]
- net/rds: Enable RDS heartbeat by default (Sharath Srinivasan) [Orabug: 34815818]
- uek-rpm: core.list: add VirtualBox guest drivers to core package (Todd Vierling) [Orabug: 34820755]
- tools/power turbostat: fix SPR PC6 limits (Artem Bityutskiy) [Orabug: 34838996]
- tools/power turbostat: separate SPR from ICX (Artem Bityutskiy) [Orabug: 34838996]
- rds: ib: Fix incorrect error handling during QP creation (Hakon Bugge) [Orabug: 34857202]
- Revert 'random: clear fast pool, crng, and batches in cpuhp bring up' (Somasundaram Krishnasamy) [Orabug: 34850847]